Closed Bug 1384927 Opened 3 years ago Closed 3 years ago

Restricted reads break WebGL

Categories

(Core :: Security: Process Sandboxing, defect)

x86_64
Linux
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1384718

People

(Reporter: heftig, Unassigned)

References

Details

WebGL recently started failing here, console reports:
> Error: WebGL warning: Failed to create WebGL context: WebGL creation failed: * Error during native OpenGL init. * GL error 0x500 occurred during WebGL context initialization! * Exhausted GL driver options.

Reducing the sandbox level from 3 to 2 restores proper function.

With enabled sandbox logging, stderr contains some interesting lines:
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:0/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:0/device/subsystem
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:0/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:0/device/subsystem
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:128/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:128/device/subsystem
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:0/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:0/device/subsystem
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:0/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:0/device/subsystem
> Sandbox: SandboxBroker: denied op=readlink rflags=0 perms=0 path=/sys/dev/char/226:128/device/subsystem for pid=3236
> Sandbox: Failed errno -13 op 10 flags 00 path /sys/dev/char/226:128/device/subsystem
> libGL error: MESA-LOADER: failed to retrieve device information

Nightly 56.0a1
Mesa 17.1.5
Arch Linux x86_64
Intel Haswell GT3e
Blocks: 1308400
Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 1384718
You need to log in before you can comment on or make changes to this bug.