Sandboxie-Recommended Settings

Hi Guys,

I'm also reconfiguring my sandboxie. I've attached my config file. I want IE and orbit downloader to run and be able to access the internet and that's it. Is there anything else I can do to make it more secure.

Also where can I find a full howto/manual for sandboxie.

 

I wish I too could find a step by step How to that is configured a little better than the one on the Sandboxie web site.

 

I could be wrong but I think you have two sandboxes with are identical therefore redundant (default sandbox and testing sandbox) since both will only allow the same set of programs to run.

 

They are identical however I'm using them for session saving purposes

 

@huangker post

What are these options used for cause never seen them before? Where are they added in the settings if beneficial?

[GlobalSettings]

ConfigLevel=1
BoxRootFolder=%APPDATA%
ForceDisableSeconds=10
FileTrace=.
PipeTrace=.
KeyTrace=.
IpcTrace=.
GuiTrace=.

Being from the Low Level Access Settings, I thought they were default to yes instead of no, so why are they listed?

[DefaultBox]

BlockDrivers=y
BlockFakeInput=y
BlockWinHooks=y
BoxNameTitle=n

dja2k

 

http://www.sandboxie.com/index.php?SandboxieIni

 

I should have looked over at the sandboxie site first, okay now I feel dumb! but still I wonder why my default ini file doesn't show the BlockDrivers, BlockFakeInput, BlockWinHooks as yes.

dja2k

 

What version are you using? I remember it coming in around 2.23-2.24 as that is when the scroll feature on my Thinkpad nipple stopped working.

 

I have 3.26.07 and I've never seen those by default.

dja2k

 

I haven't seen those never either. No problem. Just adjust your basic rules. Sandboxie takes care of rest.

 

Actually if you go for the low level access, permit all three, that will add those lines and give you "n" for all of them, but if you go back in there again and uncheck them, it will change all three to "y" in the list plus it leaves the lines in the .ini.

dja2k

 

I know that but I don't have reason to do so...