http://bugzilla.suse.com/show_bug.cgi?id=1163588 http://bugzilla.suse.com/show_bug.cgi?id=1163588#c1 --- Comment #1 from Tomáš Chvátal --- Did you actually try if it works without it? I see it used in the logs, but maybe it just uses it if available... -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1163588 http://bugzilla.suse.com/show_bug.cgi?id=1163588#c3 --- Comment #3 from Matthias Gerstner --- We made two simple tests on Leap 15.1 and Tumbleweed and there chromium starts successfully without the sandbox and also no warning is emitted that no sandboxing is used. Maybe we're the first major distribution to notice or act on this? I actually noted this in the first place, because on I saw on Gentoo Linux the suid binary isn't existing, and their USE flag docs says: ``` - - suid : Build the SUID sandbox, which is only needed on CONFIG_USER_NS=n kernels ``` Of course, please do your own checks and tests, if you find any blocker then please let us know. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1163588 http://bugzilla.suse.com/show_bug.cgi?id=1163588#c5 Tomáš Chvátal changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Tomáš Chvátal --- I've sent the fix to tumbleweed, with next update of chromium it will propagate to all supported codestreams. -> Done. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1163588 http://bugzilla.suse.com/show_bug.cgi?id=1163588#c7 --- Comment #7 from Swamp Workflow Management --- This is an autogenerated message for OBS integration: This bug (1163588) was mentioned in https://build.opensuse.org/request/show/779108 15.1 / chromium https://build.opensuse.org/request/show/779109 Backports:SLE-12-SP3 / chromium -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1163588 http://bugzilla.suse.com/show_bug.cgi?id=1163588#c9 --- Comment #9 from Swamp Workflow Management --- openSUSE-SU-2020:0259-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1163484,1163588,1164828 CVE References: CVE-2020-6407,CVE-2020-6418 Sources used: openSUSE Leap 15.1 (src): chromium-80.0.3987.122-lp151.2.66.1 -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1163588 https://bugzilla.suse.com/show_bug.cgi?id=1163588#c11 --- Comment #11 from OBSbugzilla Bot --- This is an autogenerated message for OBS integration: This bug (1163588) was mentioned in https://build.opensuse.org/request/show/819386 Factory / permissions -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1163588 https://bugzilla.suse.com/show_bug.cgi?id=1163588#c14 --- Comment #14 from Swamp Workflow Management --- openSUSE-SU-2021:1520-1: An update that solves three vulnerabilities and has 27 fixes is now available. Category: security (moderate) Bug References: 1028975,1029961,1093414,1133678,1148788,1150345,1150366,1151190,1157498,1160285,1160764,1161335,1161779,1163588,1167163,1169614,1171164,1171173,1171569,1171580,1171686,1171879,1171882,1173221,1174504,1175720,1175867,1178475,1178476,1183669 CVE References: CVE-2019-3687,CVE-2019-3688,CVE-2020-8013 JIRA References: Sources used: openSUSE Leap 15.3 (src): permissions-20200127-lp153.24.3.1 -- You are receiving this mail because: You are on the CC list for the bug.