[snap] The SUID sandbox helper binary was found, but is not configured correctly.

Bug #1890939 reported by Alex Muntada
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
chromium-browser (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

The chromium snap version 1260 has the wrong mode for chrome-sandbox, as it happened also in bug #1854091:

```
$ /snap/bin/chromium
[4009:4009:0809/115259.781182:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /snap/chromium/1260/usr/lib/chromium-browser/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap
$ [4134:4134:0100/000000.834554:ERROR:zygote_linux.cc(653)] write: Broken pipe (32)
```

I have reverted it to the previous version (1244) and this one works (and has the right mode for chromium-sandbox).

Tags: snap
tags: added: snap
summary: - The SUID sandbox helper binary was found, but is not configured
+ [snap] The SUID sandbox helper binary was found, but is not configured
correctly.
description: updated
Revision history for this message
Olivier Tilloy (osomon) wrote :

That's suspicious, can you please share the output of `ls -l /snap/chromium/current/usr/lib/chromium-browser/chrome-sandbox` ?

Is the latest update (revision 1269) similarly affected?

Changed in chromium-browser (Ubuntu):
status: New → Incomplete
Revision history for this message
Alex Muntada (alex.muntada) wrote :

The current version (1284) works OK and the SUID bits are back:

```
$ ls -l /snap/chromium/current/usr/lib/chromium-browser/chrome-sandbox
-r-sr-xr-x 1 root root 333952 Aug 29 14:43 /snap/chromium/current/usr/lib/chromium-browser/chrome-sandbox
$ snap info chromium
name: chromium
summary: Chromium web browser, open-source version of Chrome
publisher: Canonical✓
store-url: https://snapcraft.io/chromium
contact: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bugs?field.tag=snap
license: unset
description: |
  An open-source browser project that aims to build a safer, faster, and more stable way for all
  Internet users to experience the web.
commands:
  - chromium.chromedriver
  - chromium
snap-id: XKEcBqPM06H1Z7zGOdG5fbICuf8NWK5R
tracking: latest/stable
refresh-date: today at 09:06 CEST
channels:
  latest/stable: 85.0.4183.83 2020-08-29 (1284) 169MB -
  latest/candidate: 85.0.4183.83 2020-08-29 (1284) 169MB -
  latest/beta: 85.0.4183.76 2020-08-24 (1271) 167MB -
  latest/edge: 86.0.4240.8 2020-08-27 (1278) 168MB -
installed: 85.0.4183.83 (1284) 169MB -
```

Revision history for this message
Olivier Tilloy (osomon) wrote :

Thanks for following up!

Changed in chromium-browser (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.