debugging SUID sandbox problem: Check failed: IsFileSystemAccessDenied()

Paweł Hajdan, Jr.

unread,

Mar 25, 2015, 6:13:30 AM3/25/15

to chromium-dev

I'm looking at https://bugs.gentoo.org/show_bug.cgi?id=543860

A user reports the browser fails to start with the following error message:

[1:1:0320/100303:FATAL:setuid_sandbox_client.cc(126)] Check failed: IsFileSystemAccessDenied().

How should I further debug this? I cannot reproduce the error.

Paweł

Paweł Hajdan, Jr.

unread,

Mar 30, 2015, 7:00:17 AM3/30/15

to chromium-dev, Julien Tinnes

+jln

We have several users confirming the problem.

There seems to definitely be a regression on 42.x.

Paweł

Mike Frysinger

unread,

Mar 30, 2015, 12:58:41 PM3/30/15

to Paweł Hajdan, Jr., chromium-dev, Julien Tinnes

looks to me like PEBKAC -- they're trying to run chromium as root. imo, if a user chooses to do something dumb like this, that's not our problem.

-mike

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev

Julien Tinnes

unread,

Mar 30, 2015, 1:21:29 PM3/30/15

to Mike Frysinger, Paweł Hajdan, Jr., chromium-dev, ric...@chromium.org

Yeah indeed, there are all kind of subtle things that will break if running Chromium as root. Should we simply crash with a more clear error message?

Mike Frysinger

unread,

Mar 30, 2015, 1:27:06 PM3/30/15

to Julien Tinnes, Paweł Hajdan, Jr., chromium-dev, Ricky Zhou

imo we should abort as early as possible with a clear error message

-mike

Scott Hess

unread,

Mar 30, 2015, 1:27:08 PM3/30/15

to Julien Tinnes, Mike Frysinger, Paweł Hajdan, Jr., chromium-dev, ric...@chromium.org

ChromeBrowserMainExtraPartsAura::DetectRunningAsRoot() already has a
check for root. Presumably they're either working around the check,
or providing a --user-data-dir.

-scott

On Mon, Mar 30, 2015 at 10:20 AM, Julien Tinnes <j...@chromium.org> wrote:

Dan Askme

unread,

Mar 10, 2016, 2:57:07 PM3/10/16

to Chromium-dev, phajd...@chromium.org, j...@chromium.org

Looks to me like Mike Frysinger lacks the knowledge and experience of using root. Because of this, he is clearly unable to grasp that other users may use it.

Nico Weber

unread,

Mar 10, 2016, 3:02:32 PM3/10/16

to dankn...@gmail.com, Chromium-dev, Paweł Hajdan Jr., Julien Tinnes

On Thu, Mar 10, 2016 at 2:57 PM, Dan Askme <dankn...@gmail.com> wrote:

Looks to me like Mike Frysinger lacks the knowledge and experience of using root. Because of this, he is clearly unable to grasp that other users may use it.

No ad hominems on this list please. https://dev.chromium.org/conduct

Reply all

Reply to author

Forward