Chrome blocks hibernation

Tuesday, 14 June 2016

This is weird. A few days ago I found that my desktop system (F23 fully
updated) would no longer hibernate. A glance at "journal -xe" showed a
bunch of lines like:

Jun 14 00:50:51 bree audit[12591]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12591
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:50:51 bree kernel: audit: type=1326 audit(1465861851.266:7800): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12591 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:50:59 bree audit[12599]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12599
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:50:59 bree kernel: audit: type=1326 audit(1465861859.424:7801): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12599 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:51:07 bree audit[12603]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12603
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:51:07 bree kernel: audit: type=1326 audit(1465861867.128:7802): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12603 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:51:20 bree audit[12608]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12608
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:51:20 bree kernel: audit: type=1326 audit(1465861880.130:7803): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12608 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:52:09 bree audit[12646]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12646
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:52:09 bree kernel: audit: type=1326 audit(1465861929.397:7804): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12646 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:52:25 bree audit[12662]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12662
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:52:25 bree kernel: audit: type=1326 audit(1465861945.701:7805): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12662 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00
Jun 14 00:52:25 bree audit[12667]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12667
comm="chrome" exe="/opt/google/chrome/chrome" sig=0 arch=c000003e
syscall=273 compat=0 ip=0
Jun 14 00:52:25 bree kernel: audit: type=1326 audit(1465861945.768:7806): auid=1000
uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
pid=12667 comm="chrome" exe="/opt/google/chrome/chrome" sig=0
arch=c00

and when I killed Chrome then hibernation worked again.

So one question is: what is the magic incantation to stop these alarms
from Chrome?

However another question is how is this even possible? A process with
normal user privileges can prevent the system from hibernating? Is this
right?

poc