On Thu, Sep 26, 2019 at 11:47:39PM -0400, Bryan Steele wrote:
> On Thu, Sep 26, 2019 at 11:22:23PM +0000, Mikolaj Kucharski wrote:
> > Hi,
> > 
> > Does anyone else sees chrome not usable with latest snapshot? After
> > starting the browser it crashes any tab with "Aw, Snap!". At the same
> > time when I start the browser dmesg is full of pledge entries from
> > chrome (see below output) and chrome.core is left in $HOME.
> 
> I'm seeing this too with chromium-77.0.3865.90. It works fine with
> chromium-76.0.3809.132.
> 
> From what I can tell it seems the chromium renderer process is missing
> a pledge.
> 
>     39948 chrome   STRU  promise="stdio rpath flock prot_exec recvfd sendfd
> ps"
>     39948 chrome   CALL  getpriority(PRIO_PROCESS,0)
>     39948 chrome   PLDG  getpriority, "id", errno 1 Operation not permitted
> ..
> 
> https://github.com/openbsd/ports/blob/961e5936cdffea36f0041c7153c960ae65ad2ff3/www/chromium/patches/patch-services_service_manager_sandbox_openbsd_sandbox_openbsd_cc#L301
> 
> You'll need to use chrome --no-sandbox at least until this can be
> looked at by the maintainer, or if possible reinstall the older
> chromium package.

Note that robert@ has committed a proper fix for this (and a safer
workaround before that), so don't forget to remove --no-sandbox if
you added it somewhere.

chromium-77.0.3865.90p0 and later work again.

https://marc.info/?l=openbsd-ports-cvs&m=156968818914586&w=2

> > I upgraded to:
> > 
> > $ sysctl -n kern.version
> > OpenBSD 6.6-beta (GENERIC.MP) #327: Thu Sep 26 11:36:51 MDT 2019
> >     dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> > 
> > and packages snapshot to:
> > 
> > $ awk '/digital-signature/ {print $NF}' /var/db/pkg/quirks-3.181/+CONTENTS
> > signify2:2019-09-26T17:01:40Z:external
> > 
> > $ awk '/digital-signature/ {print $NF}' 
> > /var/db/pkg/chromium-77.0.3865.90/+CONTENTS
> > signify2:2019-09-26T16:55:04Z:external
> > 
> > $ dmesg
> > ...
> > chrome[49746]: pledge "id", syscall 100
> > chrome[92387]: pledge "id", syscall 100
> > chrome[85549]: pledge "id", syscall 100
> > chrome[68279]: pledge "id", syscall 100
> > chrome[94240]: pledge "id", syscall 100
> > chrome[90180]: pledge "id", syscall 100
> > chrome[66584]: pledge "id", syscall 100
> > chrome[63381]: pledge "id", syscall 100
> > chrome[73033]: pledge "id", syscall 100
> > chrome[90867]: pledge "id", syscall 100
> > chrome[85108]: pledge "id", syscall 100
> > chrome[48198]: pledge "id", syscall 100
> > chrome[7576]: pledge "id", syscall 100
> > chrome[7576]: pledge "stdio", syscall 197
> > chrome[92089]: pledge "id", syscall 100
> > chrome[56583]: pledge "id", syscall 100
> > chrome[2955]: pledge "id", syscall 100
> > chrome[2955]: pledge "stdio", syscall 197
> > chrome[35028]: pledge "id", syscall 100
> > chrome[12759]: pledge "id", syscall 100
> > chrome[22687]: pledge "id", syscall 100
> > chrome[21924]: pledge "id", syscall 100
> > chrome[99193]: pledge "id", syscall 100
> > chrome[32604]: pledge "id", syscall 100
> > chrome[84867]: pledge "id", syscall 100
> > chrome[6284]: pledge "id", syscall 100
> > chrome[6284]: pledge "stdio", syscall 197
> > chrome[4125]: pledge "id", syscall 100
> > chrome[33735]: pledge "id", syscall 100
> > chrome[77972]: pledge "id", syscall 100
> > chrome[25419]: pledge "id", syscall 100
> > chrome[72435]: pledge "id", syscall 100
> > chrome[904]: pledge "id", syscall 100
> > 
> > -- 
> > Regards,
> >  Mikolaj
> > 
> > 

Reply via email to