This thread went offline, however to bring things back online, it appears at least the binary download (running on SL6) of Firefox 5 just released does not work in the sandbox either.  The SELinux audit messages are:<div><br>
</div><div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class dir not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission execmod in class dir not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class lnk_file not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission open in class lnk_file not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission execmod in class lnk_file not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class chr_file not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class blk_file not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission execmod in class blk_file not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class sock_file not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission execmod in class sock_file not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission audit_access in class fifo_file not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission execmod in class fifo_file not defined in policy.</div>
<div>Jun 22 21:40:22 localhost kernel: SELinux:  Permission syslog in class capability2 not defined in policy.</div><div>Jun 22 21:40:22 localhost kernel: SELinux: the above unknown classes and permissions will be allowed</div>
<div>Jun 22 21:40:24 localhost dbus: avc:  received policyload notice (seqno=5)</div><div>Jun 22 21:40:24 localhost dbus: avc:  received policyload notice (seqno=5)</div><div>Jun 22 21:40:24 localhost dbus: avc:  received policyload notice (seqno=5)</div>
<div>Jun 22 21:40:24 localhost dbus: avc:  received policyload notice (seqno=5)</div><div>Jun 22 21:40:24 localhost dbus: avc:  received policyload notice (seqno=5)</div><div>Jun 22 21:40:24 localhost dbus: [system] Reloaded configuration</div>
<div><br></div><div>The sandbox window starts up but crashes before any sign of FF materialises, works fine in permissive mode or unsandboxed otherwise.  I&#39;ve put the FF binaries in /opt.</div><br><div class="gmail_quote">
On 19 June 2011 17:53, Dominick Grift <span dir="ltr">&lt;<a href="mailto:domg472@gmail.com">domg472@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div><div></div><div class="h5"><br>
<br>
On Sun, 2011-06-19 at 13:57 +0100, GSO wrote:<br>
&gt; The default build using the google repos results in chromium grinding to a<br>
&gt; halt with a black window when run in a sandbox.  Is it technically possible<br>
&gt; to run chrome in a sandbox, would building from source fix this at all?<br>
<br>
</div></div>I do not think it will work since both sandbox an chrome use namespace<br>
and chrome cant run if sandbox already runs in a namespace (or something<br>
along those lines is my understanding if this issue)<br>
<br>
&gt; --<br>
&gt; selinux mailing list<br>
&gt; <a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a><br>
&gt; <a href="https://admin.fedoraproject.org/mailman/listinfo/selinux" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/selinux</a><br>
</blockquote></div><br></div>