Sandbox error on admin accoun ("Failed to add sandbox rule")

[kilo9delta]

My application is built with the CEF sandbox feature.

When I launch it under my administrator account on Windows, the following message is printed 7 times in the debug.log:

Code: Select all

    [0103/214925.762:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.423:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.424:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.425:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.426:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.638:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'
    [0103/214926.638:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:/Users/user/AppData/Local/TestCEFProject/Saved/Logs/cef3.log'

It seems to be Issue #2712 here.
I found out that when launching the application under a normal user account it works fine. But weirdly only for a single time. Once launching it a second time the same error came up again. (Even after a computer restart)

Windows 10 1903
Application built with VS2019
CEF 78 from Spotify builds

Thanks for any info on this.

[Czarek]

I've had this issue previously and it's me who reported the issue in the tracker. I've just retested "cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client" on that same machine under administrator account. I can reproduce the issue now only when running cefclient from command prompt. When running from Explorer window it works fine.

When running from Explorer window it works fine and the debug.log file shows:

Code: Select all

[0107/110644.890:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110645.030:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.062:ERROR:gl_surface_egl.cc(668)] EGL Driver message (Error) eglQueryDeviceAttribEXT: Bad attribute.
[0107/110645.182:WARNING:angle_platform_impl.cc(52)] compileToBinary(256):
C:\fakepath(37,7-55): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them
C:\fakepath(49,8-40): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them

[0107/110645.776:WARNING:angle_platform_impl.cc(52)] compileToBinary(256):
C:\fakepath(46,7-55): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them
C:\fakepath(58,8-40): warning X3571: pow(f, e) will not work for negative f, use abs(f) or conditionally handle negative values if you expect them

[0107/110646.664:INFO:CONSOLE(0)] "A cookie associated with a cross-site resource at http://google.pl/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.", source: https://www.google.com/?gws_rd=ssl (0)


When running from Command Prompt I get the "Failed to add sandbox rule" error and the debug.log file shows:

Code: Select all

[0107/110726.974:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 2 time(s)
[0107/110726.989:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110726.989:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 3 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 4 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 5 time(s)
[0107/110727.005:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.005:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 6 time(s)
[0107/110727.005:ERROR:browser_gpu_channel_host_factory.cc(138)] Failed to launch GPU process.
[0107/110727.036:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.036:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.052:ERROR:browser_gpu_channel_host_factory.cc(138)] Failed to launch GPU process.
[0107/110727.067:ERROR:network_change_notifier_win.cc(141)] WSALookupServiceBegin failed with: 0
[0107/110727.282:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.688:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'
[0107/110727.688:ERROR:sandbox_policy_base.cc(359)] Failed to add sandbox rule. error = 2, subsystem = 0, semantics = 0, pattern = 'C:\downloads\cef_binary_79.0.10+ge866a07+chromium-79.0.3945.88_windows32_client\Release\debug.log'