SELinux

[Genes MailLists]

On 01/21/2011 09:35 AM, Daniel J Walsh wrote:
:
> 
>> % sandbox -X -H /home/gene/sandbox/home /opt/google/chrome/chrome
> 
>> /opt/google/chrome/chrome: error while loading shared libraries:
>> libnss3.so.1d: cannot open shared object file: No such file or directory
>> Hangup
> 
> 
> Any avc messages?
> 

nope - all quiet on the AVC front ..

note the case above is different than this case (with -t)

sandbox -X -t sandbox_web_t -H ~/sandbox/home /opt/google/chrome/chrome

which yields no error messages - a window starts up and closes.
Also has no AVC's

Probably not useful but in the above home:

 % cat .sandboxrc
#! /bin/sh
#TITLE: /opt/google/chrome/chrome
/usr/bin/test -r ~/.xmodmap && /usr/bin/xmodmap ~/.xmodmap
/usr/bin/matchbox-window-manager -use_titlebar no &
WM_PID=$!
dbus-launch --exit-with-session /opt/google/chrome/chrome
kill -TERM $WM_PID  2> /dev/null