fedora-users October 2011 archive
Main Archive Page > Month Archives  > fedora-users archives
fedora-users: Re: F14, google-chrome won't launch after yum upda

Re: F14, google-chrome won't launch after yum update [SOLVED]

From: jackson byers <byersjab_at_nospam>
Date: Sat Oct 01 2011 - 16:56:12 GMT
To: users@lists.fedoraproject.org, byersjab <byersjab@gmail.com>

Daniel J Walsh replied

>My goal is not to get into the blame game, but google-chrome requires
>some strange access that I have never seen an app need before.
>Basically an application chrome-sandbox needing to load the the
>executable (not shared library) chrome which was not compiled with
>PIC. The latest chrome browser from beta release requires mmap_zero,
>which is a very dangerous access that we will not give.

>If you do not want SELinux controlling chrome-sandbox you can turn off
>the boolean unconfined_chrome_sandbox_transition

>setsebool -P unconfined_chrome_sandbox_transition 0

-
[root@f14 ~]# setsebool -P unconfined_chrome_sandbox_transition 0
libsemanage.dbase_llist_set: record not found in the database (No such
file or directory).
libsemanage.dbase_llist_set: could not set record value (No such file
or directory).
Could not change boolean unconfined_chrome_sandbox_transition
Could not change policy booleans

so that failed; all greek to me.

>> http://fedoraproject.org/wiki/Chromium
>The link above has a version of chrome, specially built for Fedora
>which should work fine with SELinux.

    Daniel, I will keep this as a fallback solution

-------
Lancebaynes87 replied

>give this out with root:
>semanage fcontext -a -s system_u -t usr_t /opt/google/chrome/chrome-sandbox
>restorecon -v /opt/google/chrome/chrome-sandbox

[root@f14 ~]# restorecon -v /opt/google/chrome/chrome-sandbox
restorecon reset /opt/google/chrome/chrome-sandbox context
system_u:object_r:chrome_sandbox_exec_t:s0->system_u:object_r:usr_t:s0

Now, chrome comes up!

Thanks to Daniel for the explanation, even tho my understanding is weak-to-nil.

Thanks to Lance for the fix!

Jack
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines