Sandbox error on admin accoun ("Failed to add sandbox rule")

Do not post support requests, bug reports or feature requests. Discuss CEF here. Non-CEF related discussion goes in General Discussion!

Sandbox error on admin accoun ("Failed to add sandbox rule")

Postby kilo9delta » Fri Jan 03, 2020 5:13 pm

My application is built with the CEF sandbox feature.

When I launch it under my administrator account on Windows, the following message is printed 7 times in the debug.log:

Code: Select all
    [0103/214925.762:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.423:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.424:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.425:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.426:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.638:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.638:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'


It seems to be Issue #2712 here.
I found out that when launching the application under a normal user account it works fine. But weirdly only for a single time. Once launching it a second time the same error came up again. (Even after a computer restart)

Windows 10 1903
Application built with VS2019
CEF 78 from Spotify builds

Thanks for any info on this.
kilo9delta
Newbie
 
Posts: 3
Joined: Thu Mar 07, 2019 10:34 am

Re: Sandbox error on admin accoun ("Failed to add sandbox ru

Postby Czarek » Tue Jan 07, 2020 5:11 am

I've had this issue previously and it's me who reported the issue in the tracker. I've just retested "cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client" on that same machine under administrator account. I can reproduce the issue now only when running cefclient from command prompt. When running from Explorer window it works fine.

When running from Explorer window it works fine and the debug.log file shows:
Code: Select all
[0107/110644.890:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110645.030:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.182:WARNING:angle_platform_impl.cc(52)] compileToBinary(256):
C:\fakepath(37,7-55): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them
C:\fakepath(49,8-40): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them

[0107/110645.776:WARNING:angle_platform_impl.cc(52)] compileToBinary(256):
C:\fakepath(46,7-55): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them
C:\fakepath(58,8-40): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them

[0107/110646.664:INFO:CONSOLE(0)] "A cookie associated with a cross-site resource at http://google.pl/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.", source: https://www.google.com/?gws_rd=ssl (0)


When running from Command Prompt I get the "Failed to add sandbox rule" error and the debug.log file shows:
Code: Select all
[0107/110726.974:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 2 time(s)
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 3 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 4 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 5 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 6 time(s)
[0107/110727.005:ERROR:browser_gpu_channel_host_factory.cc(138)] Failed to launch GPU process.
[0107/110727.036:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.036:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.052:ERROR:browser_gpu_channel_host_factory.cc(138)] Failed to launch GPU process.
[0107/110727.067:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110727.282:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.688:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.688:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
Maintainer of the CEF Python, PHP Desktop and CEF C API projects. I'm available for contract work, see my resume.
User avatar
Czarek
Virtuoso
 
Posts: 1829
Joined: Sun Nov 06, 2011 2:12 am


Return to CEF Discussion

Who is online

Users browsing this forum: No registered users and 1 guest