Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot Open Brave due to SUID sanbox helper binary #13

Open
blueOkiris opened this issue Jan 19, 2025 · 1 comment
Open

Cannot Open Brave due to SUID sanbox helper binary #13

blueOkiris opened this issue Jan 19, 2025 · 1 comment

Comments

@blueOkiris
Copy link

When I try to run the latest stable, 1.74, I get this error:

[96040:96040:0118/231118.719833:FATAL:setuid_sandbox_host.cc(163)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_Brave-IKClMi/chrome-sandbox is owned by root and has mode 4755. 

Obviously, I can start via --no-sandbox, but that's really annoying.

I'm on Ubuntu Studio 24.04 using KDE as my DE

@blueOkiris
Copy link
Author

blueOkiris commented Jan 26, 2025

I can extract the AppImage via --appimage-extract do

  • sudo chown root:$(whoami) squashfs-root/chrome-sandbox
  • sudo chmod 4755 squashfs-root/chrome-sandbox

And then run ./squashfs-root/brave without issue.

However, if I use AppImage tool: ./appimagetool-x86_64.AppImage squashfs-root/ to repackage it, it fails after that:

/tmp/.mount_Brave-MDmCek
The setuid sandbox is not running as root. Common causes:
  * An unprivileged process using ptrace on it, like a debugger.
  * A parent process set prctl(PR_SET_NO_NEW_PRIVS, ...)
Failed to move to new namespace: PID namespaces supported, Network namespace supported, but failed: errno = Operation not permitted
[4729:4729:0126/170324.392406:FATAL:zygote_host_impl_linux.cc(207)] Check failed: . : No such file or directory (2)
Trace/breakpoint trap (core dumped)

Perhaps that info can get some progress on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant