On Wed, Feb 26, 2014 at 3:18 PM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 02/26/2014 02:00 PM, Dale Dellutri wrote: >> I've got a Fedora 20 XFCE desktop. I installed google-chrome. It fails to >> display some text on many web sites if selinux is set to enforcing, but >> shows the text with selinux set to permissive. >> >> For example, with selinux set to enforcing, my web site: >> http://www.DaleDellutri.com only shows the icon image in the upper left >> corner, an empty box, and the bluish outer color, but does not show any of >> the text on the page. If I do # setenforce 0 and re-start google-chrome, >> then the page is displayed properly. >> >> Firefox shows the page properly no matter how selinux is set. >> >> With selinux enforcing, when I start google-chrome from the command line, >> it does not provide any error messages, and I don't see any error messages >> from selinux. >> >> Where are the selinux logs? I've used # journalctl | grep -i selinux but >> there are no errors or warnings. >> >> What could cause this problem? >> >> Do you have any suggestions for debugging? >> >> -- Dale Dellutri >> >> > Are you seeing any AVCs? > > ausearch -m avc -ts recent Yes, though I did: ausearch -m avc -ts today since these failures had happened more than ten minutes ago. > You can turn off SELinux confinement of chrome sandbox, with > > setsebool -P unconfined_chrome_sandbox_transition=0 I did this and set selinux back to enforcing. google-chrome is now working as it should. Thanks for this info. Where could I read more about the "chrome sandbox"? > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iEYEARECAAYFAlMOWjcACgkQrlYvE4MpobNTaQCdElyQpDTq4A2Ylz4NixKXV8OS > gZAAn2PA9exYIGt/v4cvNsLq9za5cQUE > =QI7q > -----END PGP SIGNATURE----- > -- > users mailing list > users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe or change subscription options: > https://admin.fedoraproject.org/mailman/listinfo/users > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines > Have a question? Ask away: http://ask.fedoraproject.org -- Dale Dellutri -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
