{"action":"created","issue":{"url":"https://api.github.com/repos/electron/electron/issues/17972","repository_url":"https://api.github.com/repos/electron/electron","labels_url":"https://api.github.com/repos/electron/electron/issues/17972/labels{/name}","comments_url":"https://api.github.com/repos/electron/electron/issues/17972/comments","events_url":"https://api.github.com/repos/electron/electron/issues/17972/events","html_url":"https://github.com/electron/electron/issues/17972","id":437404461,"node_id":"MDU6SXNzdWU0Mzc0MDQ0NjE=","number":17972,"title":"The SUID sandbox helper binary was found, but is not configured correctly","user":{"login":"christianbundy","id":537700,"node_id":"MDQ6VXNlcjUzNzcwMA==","avatar_url":"https://avatars1.githubusercontent.com/u/537700?v=4","gravatar_id":"","url":"https://api.github.com/users/christianbundy","html_url":"https://github.com/christianbundy","followers_url":"https://api.github.com/users/christianbundy/followers","following_url":"https://api.github.com/users/christianbundy/following{/other_user}","gists_url":"https://api.github.com/users/christianbundy/gists{/gist_id}","starred_url":"https://api.github.com/users/christianbundy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/christianbundy/subscriptions","organizations_url":"https://api.github.com/users/christianbundy/orgs","repos_url":"https://api.github.com/users/christianbundy/repos","events_url":"https://api.github.com/users/christianbundy/events{/privacy}","received_events_url":"https://api.github.com/users/christianbundy/received_events","type":"User","site_admin":false},"labels":[{"id":1133156478,"node_id":"MDU6TGFiZWwxMTMzMTU2NDc4","url":"https://api.github.com/repos/electron/electron/labels/5-0-x","name":"5-0-x","color":"8d9ee8","default":false},{"id":77569958,"node_id":"MDU6TGFiZWw3NzU2OTk1OA==","url":"https://api.github.com/repos/electron/electron/labels/discussion%20:speech_balloon:","name":"discussion :speech_balloon:","color":"e99695","default":false},{"id":97403642,"node_id":"MDU6TGFiZWw5NzQwMzY0Mg==","url":"https://api.github.com/repos/electron/electron/labels/platform/linux","name":"platform/linux","color":"c7def8","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":91,"created_at":"2019-04-25T21:25:27Z","updated_at":"2019-08-30T09:11:34Z","closed_at":"2019-07-31T18:04:50Z","author_association":"NONE","body":"<!--  As an open source project with a dedicated but small maintainer team, it can sometimes take a long time for issues to be addressed so please be patient and we will get back to you as soon as we can.\r\n-->\r\n\r\n### Preflight Checklist\r\n<!-- Please ensure you've completed the following steps by replacing [ ] with [x]-->\r\n\r\n* [x] I have read the [Contributing Guidelines](https://github.com/electron/electron/blob/master/CONTRIBUTING.md) for this project.\r\n* [x] I agree to follow the [Code of Conduct](https://github.com/electron/electron/blob/master/CODE_OF_CONDUCT.md) that this project adheres to.\r\n* [x] I have searched the issue tracker for an issue that matches the one I want to file, without success.\r\n\r\n### Issue Details\r\n\r\n* **Electron Version:**\r\n  * 5.0.0\r\n* **Operating System:**\r\n  * Arch Linux x64\r\n* **Last Known Working Electron version:**:\r\n  * 4.1.5\r\n\r\n### Expected Behavior\r\n\r\nRunning `node_modules/.bin/electron --version` should output `v5.0.0`.\r\n\r\nTo be clear, *all* commands create this error, but I'm using the `--version` flag for simplicity.\r\n\r\n### Actual Behavior\r\n\r\n```console\r\n$ node_modules/.bin/electron --version\r\n[2720:0425/142001.775056:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /home/christianbundy/src/ssbc/patchwork/node_modules/electron/dist/chrome-sandbox is owned by root and has mode 4755.\r\n```\r\n\r\n### Additional Information\r\n\r\n```console\r\n$ stat /home/christianbundy/src/ssbc/patchwork/node_modules/electron/dist/chrome-sandbox\r\n  Size: 5185424   \tBlocks: 10128      IO Block: 4096   regular file\r\nDevice: 802h/2050d\tInode: 1465270     Links: 1\r\nAccess: (0755/-rwxr-xr-x)  Uid: ( 1000/christianbundy)   Gid: ( 1000/christianbundy)\r\nAccess: 2019-04-25 14:15:10.609279524 -0700\r\nModify: 2019-04-25 14:15:10.659278929 -0700\r\nChange: 2019-04-25 14:15:10.659278929 -0700\r\n Birth: 2019-04-25 14:15:10.609279524 -0700\r\n```\r\n\r\nIf I `chown` and `chmod` the file then it works fine, but my intuition is that `npm install electron@latest` should work without those commands. Is this expected behavior?"},"comment":{"url":"https://api.github.com/repos/electron/electron/issues/comments/526526712","html_url":"https://github.com/electron/electron/issues/17972#issuecomment-526526712","issue_url":"https://api.github.com/repos/electron/electron/issues/17972","id":526526712,"node_id":"MDEyOklzc3VlQ29tbWVudDUyNjUyNjcxMg==","user":{"login":"pronebird","id":704044,"node_id":"MDQ6VXNlcjcwNDA0NA==","avatar_url":"https://avatars2.githubusercontent.com/u/704044?v=4","gravatar_id":"","url":"https://api.github.com/users/pronebird","html_url":"https://github.com/pronebird","followers_url":"https://api.github.com/users/pronebird/followers","following_url":"https://api.github.com/users/pronebird/following{/other_user}","gists_url":"https://api.github.com/users/pronebird/gists{/gist_id}","starred_url":"https://api.github.com/users/pronebird/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pronebird/subscriptions","organizations_url":"https://api.github.com/users/pronebird/orgs","repos_url":"https://api.github.com/users/pronebird/repos","events_url":"https://api.github.com/users/pronebird/events{/privacy}","received_events_url":"https://api.github.com/users/pronebird/received_events","type":"User","site_admin":false},"created_at":"2019-08-30T09:11:34Z","updated_at":"2019-08-30T09:11:34Z","author_association":"NONE","body":"@nornagon so we can't even run Electron 6 on Debian and there is no way we're giving a chrome process root perms to the user process. The workarounds given are not sufficient from the user perspective.\r\n\r\n>There are two workarounds:\r\n>Enable unprivileged access to CLONE_NEWUSER in your kernel. Some kernels support changing this with sysctl kernel.unprivileged_userns_clone=1.\r\n\r\nThere is absolutely no way messing with the customers computer is the way to go about this.\r\n\r\n>Disable sandboxing entirely by launching with --no-sandbox. Adding this argument from JS is unfortunately insufficient, as the GPU process is launched before the main process JS is run.\r\n\r\nHow about adding a `--sandbox` flag and turn off the sandbox feature by default? This has a benefit of not screwing 99% of folks using Electron."}}
{"actor":{"display_login":"pronebird"}}