Re: AppImages and Sandboxes

2021-08-07 Thread Richmond
Sven Hartge  writes:

> Richmond  wrote:
>> I get this error.
>
>> ./Franz-5.7.0.AppImage
>> [3509:0807/163715.039384:FATAL:setuid_sandbox_host.cc(158)] The SUID
>> sandbox helper binary was found, but is not configured correctly. Rather
>> than run without sandboxing I'm aborting now. You need to make sure that
>> /tmp/.mount_Franz-jpX9Z2/chrome-sandbox is owned by root and has mode
>> 4755.  Trace/breakpoint trap
>
>> How can I fix this error as the file is temporary?
>
> This problem is specific to any Electron-based app running from an
> Appimage. You can do two things:
>
> 1) Add "--no-sandbox" as a parameter when starting it.
> 2) Do "sudo sysctl -w kernel.unprivileged_userns_clone=1" to allow the
>necessary sandboxing to work.
> 2a) Create /etc/sysctl.d/00-local-userns.conf with
>  kernel.unprivileged_userns_clone=1
> in it to make this permanent.
>
> All other Distributions apart from Debian set this option by default and
> Debian 11 will follow suit.
>
> S°

Thanks!



Re: AppImages and Sandboxes

2021-08-07 Thread Sven Hartge
Richmond  wrote:
> I get this error.

> ./Franz-5.7.0.AppImage
> [3509:0807/163715.039384:FATAL:setuid_sandbox_host.cc(158)] The SUID
> sandbox helper binary was found, but is not configured correctly. Rather
> than run without sandboxing I'm aborting now. You need to make sure that
> /tmp/.mount_Franz-jpX9Z2/chrome-sandbox is owned by root and has mode
> 4755.  Trace/breakpoint trap

> How can I fix this error as the file is temporary?

This problem is specific to any Electron-based app running from an
Appimage. You can do two things:

1) Add "--no-sandbox" as a parameter when starting it.
2) Do "sudo sysctl -w kernel.unprivileged_userns_clone=1" to allow the
   necessary sandboxing to work.
2a) Create /etc/sysctl.d/00-local-userns.conf with
 kernel.unprivileged_userns_clone=1
in it to make this permanent.

All other Distributions apart from Debian set this option by default and
Debian 11 will follow suit.

S°

-- 
Sigmentation fault. Core dumped.



AppImages and Sandboxes

2021-08-07 Thread Richmond
I get this error.

./Franz-5.7.0.AppImage
[3509:0807/163715.039384:FATAL:setuid_sandbox_host.cc(158)] The SUID
sandbox helper binary was found, but is not configured correctly. Rather
than run without sandboxing I'm aborting now. You need to make sure that
/tmp/.mount_Franz-jpX9Z2/chrome-sandbox is owned by root and has mode
4755.  Trace/breakpoint trap

How can I fix this error as the file is temporary?