Google Chrome is Broken

Issues related to applications and software problems
z662
Posts: 75
Joined: 2011/08/03 19:46:10

Google Chrome is Broken

Post by z662 » 2011/09/22 02:21:35

Hello,

I currently have google-chrome-stable-14.0.8.35.186-101821.i386 installed. I have been using chrome stable for about 2 months or so without issue, however the last week it has been broken. I did an update a couple weeks ago, and not sure if thats what broke it, but nonetheless I just remember it crashed on me after updating and that was the last time I was able to open it. When I try to launch it, it doesnt do anything at all. When I run it from the command line, this is the output I receive:

brad@moon:~$ google-chrome
/usr/bin/google-chrome: /lib/libz.so.1: no version information available (required by /usr/bin/google-chrome)
/usr/bin/google-chrome: /lib/libz.so.1: no version information available (required by /usr/bin/google-chrome)
/opt/google/chrome/chrome: /lib/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
/opt/google/chrome/chrome: /lib/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
/opt/google/chrome/chrome: error while loading shared libraries: cannot restore segment prot after reloc: Permission denied


I have tried to uninstall and reinstall to no avail, and not sure what else to do.

Please advise.

Thanks in advance.

scottro
Forum Moderator
Posts: 2457
Joined: 2007/09/03 21:18:09
Location: NYC
Contact:

Google Chrome is Broken

Post by scottro » 2011/09/22 12:29:23

http://www.google.com/support/forum/p/Chrome/thread?tid=76aeb4b5296d4441&hl=en

Some of those fixes might work--seems to me I ran into it, found that page, renamed my .config/google-chrome file and that fixed it.

(Not positive though).

User avatar
TrevorH
Forum Moderator
Posts: 29457
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Google Chrome is Broken

Post by TrevorH » 2011/09/22 12:44:30

That has the look of an SELinux error about it. Anything in /var/log/messages at the time?

z662
Posts: 75
Joined: 2011/08/03 19:46:10

Re: Google Chrome is Broken

Post by z662 » 2011/09/22 13:30:41

I tried to delete that sync folder mentioned in that link, but it hasnt helped. I could try to logout and login again I guess since it mentions that in one of the posts, however that is not really an option right now as I am working from home and just simply cant log out. I will do that later today though.

In regards to my log files, this is all I found in "var/log/messages"

67 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 20:58:35 moon kernel: lo: Disabled Privacy Extensions
Sep 21 20:58:35 moon kernel: type=1400 audit(1316653115.047:26858): avc: denied { execmod } for pid=2889 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:13:28 moon kernel: lo: Disabled Privacy Extensions
Sep 21 22:13:28 moon kernel: type=1400 audit(1316657608.758:26859): avc: denied { execmod } for pid=3110 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:17:33 moon kernel: lo: Disabled Privacy Extensions
Sep 21 22:17:33 moon kernel: type=1400 audit(1316657853.967:26860): avc: denied { execmod } for pid=3250 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:17:53 moon abrt[3253]: not dumping repeating crash in '/opt/google/chrome/chrome'

User avatar
TrevorH
Forum Moderator
Posts: 29457
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Google Chrome is Broken

Post by TrevorH » 2011/09/22 13:43:40

Does CentOS 6 still have setroubleshootd?

z662
Posts: 75
Joined: 2011/08/03 19:46:10

Re: Google Chrome is Broken

Post by z662 » 2011/09/22 17:13:26

I have no idea, but I imagine you expected that lol. Perhaps your question was for someone more experienced. Is SELinux enabled by default in CentOS6? I did not enable it otherwise.

jugoslavgacas
Posts: 5
Joined: 2011/09/22 19:45:04
Location: Novi Sad

Re: Google Chrome is Broken

Post by jugoslavgacas » 2011/09/22 19:59:27

Hi all,

I hope this fix will help you solve chrome selinux problem after upgrade to version 14.

As a quick fix try to download googlechrome.pp file and in terminal execute command

#semodule -i googlechrome.pp

I created this file using this configuration:

[code]
module googlechrome 1.0;

require {
type textrel_shlib_t;
type chrome_sandbox_t;
class file execute_no_trans;
class process setsched;
}

#============= chrome_sandbox_t ==============
allow chrome_sandbox_t textrel_shlib_t:file execute_no_trans;
allow chrome_sandbox_t self:process setsched;
[/code]
and instructions in centos selinux how to document, http://wiki.centos.org/HowTos/SELinux.

At the end I just want to add that I am not by any mean selinux expert, so if there is better/more optimal/simpler solution for this problem please share it with us.

[Moderator edited to insert [i]code[/i] tags to preserve the format.]

jugoslavgacas
Posts: 5
Joined: 2011/09/22 19:45:04
Location: Novi Sad

Re: Google Chrome is Broken

Post by jugoslavgacas » 2011/09/22 20:13:27

Sorry but I can't upload googlechrome.pp file even as zip archive.

Here is how you can create it:

Use configuration from above post to create googlechrome.te file.
Execute these commands:

[code]
[b]checkmodule -M -m -o googlechrome.mod google-chrome.te
semodule -i googlechrome.pp[/b]
[/code]
That's it.

[Moderator edited to insert [i]code[/i] tags and emboldening to aid clarity.]

User avatar
TrevorH
Forum Moderator
Posts: 29457
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Google Chrome is Broken

Post by TrevorH » 2011/09/22 20:53:58

So the answer to 'does CentOS 6 still have setroubleshootd?' is yes but it's called setroubleshoot. I would suggest that you install the setroubleshoot package then go to the Applications -> System Tools -> SELinux Troubleshooter menu item. It analyzes the AVCs you're seeing and makes recommendations about the actions you should take to fix it.

I suspect that what you are seeing is something that I've often seen with Google applications where a shared library is trying to to do something it isn't really meant to. The usual solution to this is to run chcon to change the selinux context of that shared library to textrel_shlib_t which allows it to do it anyway. The more correct solution would be to bug Google to fix the application!

z662
Posts: 75
Joined: 2011/08/03 19:46:10

Re: Google Chrome is Broken

Post by z662 » 2011/09/22 23:00:01

Thanks for the replies. I installed selinuxtroubleshoot but when I open it it does not show any errors. Should it have?

Additionally, I am not sure how to create the .te file. I basically just copied your post, threw it into a .mod file (and also tried .te) and then ran those commands but obviously that is not what I am supposed to do. What do I need to do to create the .te file so I can execute those commands?

Thanks in advance.

Post Reply

Return to “CentOS 6 - Software Support”