|Main Archive Page > Month Archives > fedora-users archives|
-----BEGIN PGP SIGNED MESSAGE-----
On 10/01/2011 12:56 PM, jackson byers wrote:
> Daniel J Walsh replied
>> My goal is not to get into the blame game, but google-chrome
>> requires some strange access that I have never seen an app need
>> before. Basically an application chrome-sandbox needing to load
>> the the executable (not shared library) chrome which was not
>> compiled with PIC. The latest chrome browser from beta release
>> requires mmap_zero, which is a very dangerous access that we will
>> not give.
>> If you do not want SELinux controlling chrome-sandbox you can
>> turn off the boolean unconfined_chrome_sandbox_transition
>> setsebool -P unconfined_chrome_sandbox_transition 0
> - [root@f14 ~]# setsebool -P unconfined_chrome_sandbox_transition
> 0 libsemanage.dbase_llist_set: record not found in the database (No
> such file or directory). libsemanage.dbase_llist_set: could not set
> record value (No such file or directory). Could not change boolean
> unconfined_chrome_sandbox_transition Could not change policy
> so that failed; all greek to me.
>> The link above has a version of chrome, specially built for
>> Fedora which should work fine with SELinux.
> Daniel, I will keep this as a fallback solution
> ------- Lancebaynes87 replied
>> give this out with root: semanage fcontext -a -s system_u -t
>> usr_t /opt/google/chrome/chrome-sandbox restorecon -v
> [root@f14 ~]# restorecon -v /opt/google/chrome/chrome-sandbox
> restorecon reset /opt/google/chrome/chrome-sandbox context
> Now, chrome comes up!
> Thanks to Daniel for the explanation, even tho my understanding is
> Thanks to Lance for the fix!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
-- users mailing list firstname.lastname@example.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines