Caido
Get StartedHow-to GuidesTutorialsReferenceConceptsTroubleshooting

Installation Issues ​

"The SUID sandbox helper binary was found, but is not configured correctly." ​

This error may occur due to AppArmor, the Linux application security system. Each time Caido is launched, it loads in the tmp directory as a virtual file system before execution. Due to this, there is no hook to add an AppArmor profile, which defines the permissions granted in the context of the operating system.

text
[142547:0410/141348.635410:FATAL:setuid_sandbox_host.cc(163)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_caido-PMiQot/chrome-sandbox is owned by root and has mode 4755.

If you encounter this error message after installing the AppImage Caido package, either:

NOTE

Ensure to replace /path/to/caido-desktop-vX.XX.X-linux-<architecture>.AppImage with the correct path, versioning, and architecture of the AppImage package.

Create an AppArmor Profile for Caido (Preferred Method): ​

To create an AppArmor profile for Caido, create a appimage.caido file with the following content in the /etc/apparmor.d/ directory.

bash
sudo nano /etc/apparmor.d/appimage.caido
text
abi <abi/4.0>,
include <tunables/global>

profile appimage.caido /path/to/caido-desktop-vX.XX.X-linux-<architecture>.AppImage  flags=(unconfined) {
userns,

include if exists <local/appimage.caido>
}

Once the file is written, save it, and then read/load the profile.

bash
apparmor_parser -r /etc/apparmor.d/appimage.caido

Run Caido without a Sandbox ​

To disable the AppArmor sandbox security restrictions, launch Caido with the --no-sandbox command-line option.

bash
/path/to/caido-desktop-vX.XX.X-linux-<architecture>.AppImage --no-sandbox

To apply this to every launch, create a .desktop extension file with the following content in either the ~/.local/share/applications/ directory (for the current user account) or the /usr/share/applications/ directory (for all user accounts).

NOTE

Ensure to replace /path/to/caido-icon.png with the correct path and file name of the image you want to use for Caido's desktop application icon.

ini
[Desktop Entry]
Version=1.0
Name=Caido
Comment=Caido - A platform for secure vulnerability management
Exec=/path/to/caido-desktop-vX.XX.X-linux-<architecture>.AppImage --no-sandbox
Icon=/path/to/caido-icon.png
Terminal=false
Type=Application
Categories=Security;Utility;Networking;
StartupNotify=true

Once the file is written, save it, and then refresh the desktop application icon cache.

bash
sudo update-icon-caches /usr/share/icons/*

TIPS

Caido's default desktop application icon is available at https://github.com/caido/caido/blob/main/brand/png/logo.png.

To disable AppArmor globally, use the sysctl utility to allow unprivileged users to create user namespaces.

bash
sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0