Provision: messenger: need to suid Signal's chrome-sandbox manually

diff --git a/share/provision/messenger b/share/provision/messenger
index 8b1c105502e27c289788fbf26e161701472a56a3..505e1f37b2d305259f5222a9098da2f0e400aabe 100755 (executable)
--- a/share/provision/messenger
+++ b/share/provision/messenger
@@ -40,6 +40,11 @@ echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | sud
 # Install Signal
 sudo apt update && $APT_INSTALL signal-desktop
 
+# The SUID sandbox helper binary was found, but is not configured correctly.
+# Rather than run without sandboxing I'm aborting now.
+# You need to make sure that /opt/Signal/chrome-sandbox is owned by root and has mode 4755.
+sudo chmod 4755 /opt/Signal/chrome-sandbox
+
 # Install Ricochet
 $APT_INSTALL ricochet