Google Chrome is Broken

[z662]

Hello,

I currently have google-chrome-stable-14.0.8.35.186-101821.i386 installed. I have been using chrome stable for about 2 months or so without issue, however the last week it has been broken. I did an update a couple weeks ago, and not sure if thats what broke it, but nonetheless I just remember it crashed on me after updating and that was the last time I was able to open it. When I try to launch it, it doesnt do anything at all. When I run it from the command line, this is the output I receive:

brad@moon:~$ google-chrome
/usr/bin/google-chrome: /lib/libz.so.1: no version information available (required by /usr/bin/google-chrome)
/usr/bin/google-chrome: /lib/libz.so.1: no version information available (required by /usr/bin/google-chrome)
/opt/google/chrome/chrome: /lib/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
/opt/google/chrome/chrome: /lib/libz.so.1: no version information available (required by /opt/google/chrome/chrome)
/opt/google/chrome/chrome: error while loading shared libraries: cannot restore segment prot after reloc: Permission denied


I have tried to uninstall and reinstall to no avail, and not sure what else to do.

Please advise.

Thanks in advance.

[scottro]

http://www.google.com/support/forum/p/Chrome/thread?tid=76aeb4b5296d4441&hl=en

Some of those fixes might work--seems to me I ran into it, found that page, renamed my .config/google-chrome file and that fixed it.

(Not positive though).

[TrevorH]

That has the look of an SELinux error about it. Anything in /var/log/messages at the time?

[z662]

I tried to delete that sync folder mentioned in that link, but it hasnt helped. I could try to logout and login again I guess since it mentions that in one of the posts, however that is not really an option right now as I am working from home and just simply cant log out. I will do that later today though.

In regards to my log files, this is all I found in "var/log/messages"

67 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 20:58:35 moon kernel: lo: Disabled Privacy Extensions
Sep 21 20:58:35 moon kernel: type=1400 audit(1316653115.047:26858): avc: denied { execmod } for pid=2889 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:13:28 moon kernel: lo: Disabled Privacy Extensions
Sep 21 22:13:28 moon kernel: type=1400 audit(1316657608.758:26859): avc: denied { execmod } for pid=3110 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:17:33 moon kernel: lo: Disabled Privacy Extensions
Sep 21 22:17:33 moon kernel: type=1400 audit(1316657853.967:26860): avc: denied { execmod } for pid=3250 comm="chrome" path="/opt/google/chrome/chrome" dev=sda2 ino=2757426 scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 tcontext=system_u:object_r:execmem_exec_t:s0 tclass=file
Sep 21 22:17:53 moon abrt[3253]: not dumping repeating crash in '/opt/google/chrome/chrome'

[TrevorH]

Does CentOS 6 still have setroubleshootd?

[z662]

I have no idea, but I imagine you expected that lol. Perhaps your question was for someone more experienced. Is SELinux enabled by default in CentOS6? I did not enable it otherwise.

[jugoslavgacas]

Hi all,

I hope this fix will help you solve chrome selinux problem after upgrade to version 14.

As a quick fix try to download googlechrome.pp file and in terminal execute command

#semodule -i googlechrome.pp

I created this file using this configuration:

[code]
module googlechrome 1.0;

require {
type textrel_shlib_t;
type chrome_sandbox_t;
class file execute_no_trans;
class process setsched;
}

#============= chrome_sandbox_t ==============
allow chrome_sandbox_t textrel_shlib_t:file execute_no_trans;
allow chrome_sandbox_t self:process setsched;
[/code]
and instructions in centos selinux how to document, http://wiki.centos.org/HowTos/SELinux.

At the end I just want to add that I am not by any mean selinux expert, so if there is better/more optimal/simpler solution for this problem please share it with us.

[Moderator edited to insert [i]code[/i] tags to preserve the format.]

[jugoslavgacas]

Sorry but I can't upload googlechrome.pp file even as zip archive.

Here is how you can create it:

Use configuration from above post to create googlechrome.te file.
Execute these commands:

[code]
[b]checkmodule -M -m -o googlechrome.mod google-chrome.te
semodule -i googlechrome.pp[/b]
[/code]
That's it.

[Moderator edited to insert [i]code[/i] tags and emboldening to aid clarity.]

[TrevorH]

So the answer to 'does CentOS 6 still have setroubleshootd?' is yes but it's called setroubleshoot. I would suggest that you install the setroubleshoot package then go to the Applications -> System Tools -> SELinux Troubleshooter menu item. It analyzes the AVCs you're seeing and makes recommendations about the actions you should take to fix it.

I suspect that what you are seeing is something that I've often seen with Google applications where a shared library is trying to to do something it isn't really meant to. The usual solution to this is to run chcon to change the selinux context of that shared library to textrel_shlib_t which allows it to do it anyway. The more correct solution would be to bug Google to fix the application!

[z662]

Thanks for the replies. I installed selinuxtroubleshoot but when I open it it does not show any errors. Should it have?

Additionally, I am not sure how to create the .te file. I basically just copied your post, threw it into a .mod file (and also tried .te) and then ran those commands but obviously that is not what I am supposed to do. What do I need to do to create the .te file so I can execute those commands?

Thanks in advance.