Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

set filemode for chrome-sandbox executable during package #254

Merged
merged 1 commit into from
Apr 16, 2020
Merged

set filemode for chrome-sandbox executable during package #254

merged 1 commit into from
Apr 16, 2020

Conversation

shiftkey
Copy link
Owner

@shiftkey shiftkey commented Apr 14, 2020 •
edited
Loading

A partial fix for #222, but as we've uncovered in that issue the full fix requires:

  • sudo sysctl kernel.unprivileged_userns_clone=1 to enable unprivileged user namespaces (specifically disabled in Debian and other distros), or
  • passing --no-sandbox when launching the app (which effectively disables some of Chromium's security features)

This change will be applied for both deb and rpm packages, but I think it's low risk. Will verify in a test at some stage.

  • test RPM on Fedora and confirm defaults work as expected

@shiftkey shiftkey mentioned this pull request Apr 14, 2020
Closed
@jfgordon2
Copy link

If you want to compare your solution to electron's builder, check out updateSandboxHelperPermissions

@shiftkey
Copy link
Owner Author

If you want to compare your solution to electron's builder, check out updateSandboxHelperPermissions

@jfgordon2 yep, that's the one I used for inspiration for this change

@shiftkey shiftkey marked this pull request as ready for review April 16, 2020 16:42
@shiftkey
Copy link
Owner Author

Looks like electron-builder was already setting this for the current RPM release, so I think this is good to merge.

@shiftkey shiftkey merged commit afaf073 into linux Apr 16, 2020
@shiftkey shiftkey deleted the set-file-mode-for-sandbox branch April 16, 2020 16:45
shiftkey added a commit that referenced this pull request Apr 16, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
84ae87c 
…254)
shiftkey added a commit that referenced this pull request Apr 16, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
e545888 
…254)
shiftkey added a commit that referenced this pull request Apr 17, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
e301b51 
…254)
shiftkey added a commit that referenced this pull request Apr 23, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
d407abc 
…254)
shiftkey added a commit that referenced this pull request Apr 28, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
83e6049 
…254)
shiftkey added a commit that referenced this pull request Apr 29, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
b9e3cbe 
…254)
shiftkey added a commit that referenced this pull request May 1, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
002aa46 
…254)
shiftkey added a commit that referenced this pull request May 1, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
a88c438 
…254)
shiftkey added a commit that referenced this pull request May 2, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
19a4837 
…254)
shiftkey added a commit that referenced this pull request May 2, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
fbaf801 
…254)
shiftkey added a commit that referenced this pull request May 12, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
3934d04 
…254)
shiftkey added a commit that referenced this pull request May 12, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
825ed62 
…254)
shiftkey added a commit that referenced this pull request May 12, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
e2f393a 
…254)
shiftkey added a commit that referenced this pull request May 15, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
e47da53 
…254)
shiftkey added a commit that referenced this pull request May 16, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
5ccae84 
…254)
shiftkey added a commit that referenced this pull request May 18, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
fd1f4a4 
…254)
shiftkey added a commit that referenced this pull request May 22, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
9745055 
…254)
shiftkey added a commit that referenced this pull request May 26, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
14a55d4 
…254)
shiftkey added a commit that referenced this pull request May 27, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
868a872 
…254)
shiftkey added a commit that referenced this pull request May 29, 2020
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
5966818 
…254)
shiftkey added a commit that referenced this pull request Jun 2, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
250d913 
…254)
shiftkey added a commit that referenced this pull request Jun 2, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
e78efa6 
…254)
shiftkey added a commit that referenced this pull request Jun 2, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
01362bf 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
3416026 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
2d0833b 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
949a115 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
109a101 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
bfe7b8c 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
f0432f8 
…254)
shiftkey added a commit that referenced this pull request Jul 1, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
6d2f0d4 
…254)
shiftkey added a commit that referenced this pull request Jul 13, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
cbc1515 
…254)
shiftkey added a commit that referenced this pull request Aug 10, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
9bf2925 
…254)
shiftkey added a commit that referenced this pull request Aug 10, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
df0b5ff 
…254)
shiftkey added a commit that referenced this pull request Aug 10, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
a94eee4 
…254)
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
99d03e3 
…254)
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
086e952 
…254)
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
fb6b768 
…254)
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
set filemode for chrome-sandbox to reflect the permissions it needs (#…
ee999f7 
…254)
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254)
c12de8c
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254)
76b6344
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254 #496)
0f8672c
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254 #496)
3aa1b91
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254 #496)
73dccc0
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
add electron-builder config to repository (#254 #496)
cfa4e9e
shiftkey added a commit that referenced this pull request Aug 11, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
b0c37eb
shiftkey added a commit that referenced this pull request Aug 14, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
3e27420
shiftkey added a commit that referenced this pull request Aug 15, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
92c69aa
shiftkey added a commit that referenced this pull request Aug 17, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
50382f3
shiftkey added a commit that referenced this pull request Aug 17, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
8c90a99
shiftkey added a commit that referenced this pull request Sep 2, 2024
@shiftkey
feat(tooling): add electron-builder config to repository (#254 #496)
e27922b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@shiftkey @jfgordon2