Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SUID of sandbox helper binary is wrong on linux #1244

Closed
molikuner opened this issue Aug 26, 2019 · 0 comments
Closed

SUID of sandbox helper binary is wrong on linux #1244

molikuner opened this issue Aug 26, 2019 · 0 comments
Assignees
Labels
Build ◦ Linux Specific to Linux › Dist Installers and other forms of software distribution Type ◦ Bug Something isn't working
Milestone

Comments

@molikuner
Copy link

Describe the bug
When installing the desktop client on debian the file /opt/keeweb-desktop/chrome-sandbox has wrong permissions on the filesystem.
This issue isn't visible in the UI, as the application doesn't start and no error is shown.
When using the CLI to start KeeWeb via the KeeWeb command you get an error (view below).

I found that bug after upgrading from 1.8.2. Even a fresh install doesn't fix it.

To Reproduce

  1. Download KeeWeb-1.9.2.linux.x64.deb
  2. Go with your CLI to the download location
  3. Install with sudo dpkg -i KeeWeb-1.9.2.linux.x64.deb
  4. Start with KeeWeb
  5. Observer the instant crash

Expected behavior
The application just works and starts after start without any further setup.

Environment
Debian Stretch: 4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u5 (2019-08-11) x86_64 GNU/Linux

Logs

  • The application doesn't even start, so logs from CLI:
29363:0826/210759.739348:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/keeweb-desktop/chrome-sandbox is owned by root and has mode 4755.
/usr/bin/KeeWeb: line 2: 29363 Trace/breakpoint trap   /opt/keeweb-desktop/KeeWeb

Workaround
The file permissions are after the install:
-rwxr-xr-x 1 root root 4.9M Aug 22 22:31 /opt/keeweb-desktop/chrome-sandbox
To fix it, you should use the following command:
sudo chmod 4755 /opt/keeweb-desktop/chrome-sandbox
The result is:
-rwsr-xr-x 1 root root 4.9M Aug 22 22:31 /opt/keeweb-desktop/chrome-sandbox
The application can start now.

@antelle antelle added Type ◦ Bug Something isn't working › Dist Installers and other forms of software distribution Build ◦ Linux Specific to Linux labels Aug 27, 2019
@antelle antelle added this to the v1.9.x milestone Aug 27, 2019
@antelle antelle modified the milestones: v1.9.x, v1.10 Sep 9, 2019
@antelle antelle self-assigned this Sep 9, 2019
@antelle antelle closed this as completed in e6aef15 Sep 9, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Build ◦ Linux Specific to Linux › Dist Installers and other forms of software distribution Type ◦ Bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants