SELinux and google-chrome "Aw, Snap!" crashes

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/15/2010 04:39 AM, John Austin wrote:
> Hi
> 
> I have a fully updated F13 (64bit) machines using
> google-chrome 6.0.472.55 beta
> 
> With SELinux in Enforcing mode
> 
> google-chrome will crash leaving no error messages in dmesg
> or /var/log/messages or in the terminal if run from the command line
> (to be exact - only the startup messages shown below)
> No Selinux problems are shown by SElinux Troubleshooter
> 
> Just the "Aw, Snap!" page is shown
> "Something went wrong while displaying this webpage"
> No keys, mouse buttons do anything useful within the display area.
> Selecting "Learn more" repaints the "Aw, Snap!" page.
> The outer window is active ie bookmarks, options can be accessed
> but the "display area" will not reload anything other than "Aw, Snap!"
> The top right "kill window X" does indeed kill the window
> 
> The site I have been using for testing is
> http://www.justtheflight.co.uk/
> 
> Type in "gat" into the "Departing from" and selecting
> London Gatwick
> causes the crash
> 
> Switching SElinux to permissive mode DOES NOT crash the above site!
> but SElinux Troubleshooter shows no problems.
> 
> As far as I remember the only things I have changed in SElinux
> were a couple of settings that were to do with my home
> directories being on NFS mounts.
> 
> I have fiddled with almost all of the google-chrome option settings etc
> Also searched the web.  Found many references to "Aw, Snap!" but
> could not see anything that might help.
>  
> Has anyone else seen this problem?
> Advice as to how to debug further very welcome
> 
> John
> 
> Running in a terminal gives
> milos ~ 1# google-chrome 
> /usr/bin/google-chrome: /lib64/libz.so.1: no version information available (required by /usr/bin/google-chrome)
> /usr/bin/google-chrome: /lib64/libz.so.1: no version information available (required by /usr/bin/google-chrome)
> /opt/google/chrome/chrome: /lib64/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
> /opt/google/chrome/chrome: /lib64/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
> 
>   
> 
> 
> 
Well first off I would never run a web browser as root.

You could try to disable the dontaudit rules and see it we are covering
up something that could be breaking it.


# semodule -DB

Run google-chrome as a normal user.
> google-chrome

Turn the dontaudit rules back on
# semodule -B
# ausearch -m avc -ts recent
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkyQwbwACgkQrlYvE4MpobNQ4gCg6b9fvfCgXXV/QfH0hWhf14Ja
3k8AoKXjZmG49K0YLzs3R7jpEKzYlb6k
=4UU3
-----END PGP SIGNATURE-----