felixrieseberg / felixrieseberg/windows95

[Bug] chrome-sandbox permissions prevent startup on Fedora 43

Open
#384 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
24.2k
Forks
1.3k
PR merge metrics
No merged PRs in 30d

Description

### Environment

* Fedora 43
* SELinux: default enforcing configuration
* No custom SELinux policies
* No AppArmor modifications
* windows95 version:
* Installation method:

### Problem

After fixing issue #322, I can start the application, but it now immediately aborts with:

```text
[1071999:0615/045650.040696:FATAL:sandbox/linux/suid/client/setuid_sandbox_host.cc:166]
The SUID sandbox helper binary was found, but is not configured correctly.
Rather than run without sandboxing I'm aborting now.
You need to make sure that
/usr/lib/windows95/chrome-sandbox
is owned by root and has mode 4755.

trace trap (core dumped)
```
## Some Additional Infos
ls -l /usr/lib/windows95/chrome-sandbox
rpm -qf /usr/lib/windows95/chrome-sandbox
-rwxr-xr-x 1 root root 15000 Apr 13 19:20 /usr/lib/windows95/chrome-sandbox
windows95-5.0.1-1.x86_64

### Expected behavior

The application should start normally without requiring manual post-installation permission fixes.

### Observations

The bundled `chrome-sandbox` binary appears to be detected, but Chromium refuses to start because ownership and/or SUID permissions are not set correctly.

### Workaround

Required permissions according to the error:

```bash
chown root:root /usr/lib/windows95/chrome-sandbox
chmod 4755 /usr/lib/windows95/chrome-sandbox
```

This happens on a clean Fedora 43 installation with default security settings and no SELinux/AppArmor customization.

### Question

Should these permissions be applied during packaging/install time, or is the application expected to run with `--no-sandbox` on modern Linux distributions?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.