Sandbox error; programs won't run

[david12]

oops.

david@david-ubuntu01:~/applications$ stat /opt/brave.com/brave
  File: /opt/brave.com/brave
  Size: 4096          Blocks: 8          IO Block: 4096   directory
Device: 8,2    Inode: 10485867    Links: 6
Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2024-05-08 12:22:45.242530443 -0600
Modify: 2024-05-06 07:18:02.957387042 -0600
Change: 2024-05-06 07:18:02.957387042 -0600
 Birth: 2024-04-27 15:38:25.692047149 -0600
david@david-ubuntu01:~/applications$

wrong directory, sorry

[1fallen]

oops.

david@david-ubuntu01:~/applications$ stat /opt/brave.com/brave
  File: /opt/brave.com/brave
  Size: 4096          Blocks: 8          IO Block: 4096   directory
Device: 8,2    Inode: 10485867    Links: 6
Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2024-05-08 12:22:45.242530443 -0600
Modify: 2024-05-06 07:18:02.957387042 -0600
Change: 2024-05-06 07:18:02.957387042 -0600
 Birth: 2024-04-27 15:38:25.692047149 -0600
david@david-ubuntu01:~/applications$

That Looks right, but please try my suggestion in my post above

[david12]

david@david-ubuntu01:~/applications$ ./tutanota-desktop-linux_0d66b91d4546d31f933693cf28579c01.AppImage --disable-gpu-sandbox
[6137:0508/123244.513022:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly.
Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_tutanom4ULYS/chrome-sandbox is owned by root and has mode 4755.
[appimagelauncher-binfmt-bypass/lib] ERROR: child exited with code 5

I hope I have done this correctly; it does not seem to have changed the outcome.

[1fallen]

I hope I have done this correctly; it does not seem to have changed the outcome.

You did,
That is a puzzle I need to think about, just one thing to check while I think here....is this installed?

 apt policy libfuse2t64
libfuse2t64:
  Installed: 2.9.9-8.1build1
  Candidate: 2.9.9-8.1build1
  Version table:
 *** 2.9.9-8.1build1 500
        500 http://us.archive.ubuntu.com/ubuntu noble/universe amd64 Packages
        100 /var/lib/dpkg/status

[david12]

yup.

david@david-ubuntu01:~$  apt policy libfuse2t64
libfuse2t64:
  Installed: 2.9.9-8.1build1
  Candidate: 2.9.9-8.1build1
  Version table:
 *** 2.9.9-8.1build1 500
        500 http://us.archive.ubuntu.com/ubuntu noble/universe amd64 Packages
        100 /var/lib/dpkg/status

[1fallen]

Ok now try with flag "--disable-setuid-sandbox" at the end.

[david12]

david@david-ubuntu01:~/applications$ ./tutanota-desktop-linux_0d66b91d4546d31f933693cf28579c01.AppImage --disable-setuid-sandbox
[8033:0508/131227.939672:FATAL:zygote_host_impl_linux.cc(127)] No usable sandbox! Update your kernel or see https://chromium.googlesource.com/chromium/src/+/main/docs/linux/suid_sandbox_development.md
for more information on developing with the SUID sandbox. If you want to live dangerously and need an immediate workaround, you can try using --no-sandbox.
[appimagelauncher-binfmt-bypass/lib] ERROR: child exited with code 5

[1fallen]

That appimage needs to be built for 24.04, or you need to get a hold of that maintainer on github.
If we continuance disabling features it becomes a security flaw.
Are you opposed to installing it as a ".deb" That's my install on Noble.

 apt policy brave-browser
brave-browser:
  Installed: 1.65.126
  Candidate: 1.65.130
  Version table:
     1.65.130 500
        500 https://brave-browser-apt-release.s3.brave.com stable/main amd64 Packages
 *** 1.65.126 500

I also firejail it, with different flags ie:

firejail brave-browser
### Or with more
firejail --private brave-browser

I'm more of CLI type user.

[david12]

Thank you for your help. I need to step away for a little while. I have been concerned since I started working with snaps and sandboxes on Xubuntu 23.10 that I was going to run into an issue. (I updated to Ubuntu 24.04 because I thought I might escape. I actually like the xfce user interface better, and I see that that is your wheelhouse.) And things were going fine, until this morning, when they didn't. That's the piece that is making no sense to me. Why work well on Monday and then on Wednesday not?
Thanks again for your help, I will check the thread upon my return.

[1fallen]

I under stand that totally, I rid myself of all snaps and snapd. Not ready for production here.

apt-mark showhold
snapd