Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #65634 > unrolled thread

Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel

Back to article view | Back to linux.debian.kernel

Contents

  Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel westlake <westlake2012@videotron.ca> - 2019-11-16 05:30 +0100
    Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel Jose R R <Jose.r.r@metztli-it.com> - 2019-11-16 06:40 +0100
    Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel Bastian Blank <waldi@debian.org> - 2019-11-16 09:30 +0100
    Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel westlake <westlake2012@videotron.ca> - 2019-11-24 09:20 +0100

#65634 — Bug#944839: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned: issues for application crash with this kernel

Package: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned
Version: 5.2.17-1~bpo10+1
Severity: important

When this kernel is used, the latest version of chrome crashes saying it 
can't launch because it is not able to create its own sandbox.
  (chrome "Version 78.0.3904.97 (Official Build) (64-bit)")

I like to have an rt kernel because I sometimes use jackdbus and ardour.

I do not know if earlier versions of this application are an issue with 
this bpo kernel, but another application I have called "pulse-sms"(an 
.appimage application that is self contained) also shares the same error 
of not being able to create a "sandbox" and abruptly quits.

I think there's something missing in this kernel, because I can boot 
into my custom "make deb-pkg" kernel with RT patches and both chrome and 
pulse-sms work again without issue.

So it's more than chrome -- probably even affects debian-packaged 
applications.

But the ubiquity of chrome tells me that filing this bug is important, 
so I marked it as such.

If this helps: my kernel was compiled with gcc-8, and is kernel release 
5.2.14 with official 5.2.14-rt7 RT-patches from kernel.org --  nothing 
else than kernel optons with "make menuconfig" and then performing "make 
deb-pkg"..

[toc] | [next] | [standalone]

#65636

[Multipart message — attachments visible in raw view] — view raw

Niltze [Hello]-

On Fri, Nov 15, 2019 at 8:27 PM westlake <westlake2012@videotron.ca> wrote:
>
> Package: linux-image-5.2.0-0.bpo.3-rt-amd64-unsigned
> Version: 5.2.17-1~bpo10+1
> Severity: important
>
> When this kernel is used, the latest version of chrome crashes saying it
> can't launch because it is not able to create its own sandbox.
>   (chrome "Version 78.0.3904.97 (Official Build) (64-bit)")
>
> I like to have an rt kernel because I sometimes use jackdbus and ardour.

Care to try this RT 5.2.17-1, hosted at Source Forge, built the 'Debian
way' from Debian Packaging for Linux
<
https://sourceforge.net/projects/metztli-reiser4/files/Reiser4-SFRN-4.0.2_Linux-5.2.17-1_for-Debian_Buster/linux-image-5.2.0-3+reiser4.0.2-rt-amd64_5.2.17-1+reiser4.0.2_amd64.deb
>

The above is only one component in the set of other generated DEB packages
at:
<
https://sourceforge.net/projects/metztli-reiser4/files/Reiser4-SFRN-4.0.2_Linux-5.2.17-1_for-Debian_Buster/
>

> I do not know if earlier versions of this application are an issue with
> this bpo kernel, but another application I have called "pulse-sms"(an
> .appimage application that is self contained) also shares the same error
> of not being able to create a "sandbox" and abruptly quits.
>
> I think there's something missing in this kernel, because I can boot
> into my custom "make deb-pkg" kernel with RT patches and both chrome and
> pulse-sms work again without issue.
>
> So it's more than chrome -- probably even affects debian-packaged
> applications.
>
> But the ubiquity of chrome tells me that filing this bug is important,
> so I marked it as such.
>
> If this helps: my kernel was compiled with gcc-8, and is kernel release
> 5.2.14 with official 5.2.14-rt7 RT-patches from kernel.org --  nothing
> else than kernel optons with "make menuconfig" and then performing "make
> deb-pkg"..
>

Best Professional Regards.

-- 
Jose R R
http://metztli.it
---------------------------------------------------------------------------------------------
Download Metztli Reiser4: Debian Buster w/ Linux 5.2.17 AMD64
---------------------------------------------------------------------------------------------
feats ZSTD compression https://sf.net/projects/metztli-reiser4/
-------------------------------------------------------------------------------------------
Official current Reiser4 resources: https://reiser4.wiki.kernel.org/

[toc] | [prev] | [next] | [standalone]

#65637

On Fri, Nov 15, 2019 at 11:23:09PM -0500, westlake wrote:
> When this kernel is used, the latest version of chrome crashes saying it
> can't launch because it is not able to create its own sandbox.
>  (chrome "Version 78.0.3904.97 (Official Build) (64-bit)")

Please try:

| sysctl -w kernel.unprivileged_userns_clone=1

Bastian

-- 
Bones: "The man's DEAD, Jim!"

[toc] | [prev] | [next] | [standalone]

#65712

that solves it, thanks

fwiw, I'm reading about this kernel option from lwn,
https://lwn.net/Articles/673597/

and the opinions vary whether there's security improvement having it 
enabled/disabled...

this may not be desirable for multi-user systems, here it's just a 
workstation so I suppose it is ok to use this mode as enabled.


On 2019-11-16 3:13 a.m., Bastian Blank wrote:
> On Fri, Nov 15, 2019 at 11:23:09PM -0500, westlake wrote:
>> When this kernel is used, the latest version of chrome crashes saying it
>> can't launch because it is not able to create its own sandbox.
>>   (chrome "Version 78.0.3904.97 (Official Build) (64-bit)")
> 
> Please try:
> 
> | sysctl -w kernel.unprivileged_userns_clone=1
> 
> Bastian
> 

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web