When running the SocialStream.ninja AppImage, users may encounter this error:
FATAL:setuid_sandbox_host.cc(163): The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_socialRwnnm/chrome-sandbox is owned by root and has mode 4755.
Create an AppArmor profile to allow the application to run with unprivileged namespaces:
/etc/apparmor.d/obsidianappimage
(or appropriate name for your app) with:
```
abi <abi/4.0>, include <tunables/global>
profile obsidianappimage /path/to/YourAppImage flags=(default_allow) { userns,
# Site-specific additions and overrides. See local/README for details. include if exists <local/obsidianappimage> }
2. Replace `/path/to/YourAppImage` with the actual path to your AppImage file
3. Save the file and run:
sudo systemctl reload apparmor.service ```
This solution allows AppImages that use Chrome/Electron to run without SUID sandbox configuration issues on systems with restricted user namespaces.