Odd Sandboxie Plus 1.3.2 'Security Hardened Sandbox' issue

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by DjKilla, Aug 31, 2022.

  1. DjKilla

    DjKilla Registered Member

    Joined:
    Oct 4, 2021
    Posts:
    224
    Location:
    Tampa, FL
    Windows 10 21H2 (64-bit)
    Firefox 104.0.1 (64-bit)
    Sandboxie Plus 1.3.2 (64-bit)

    I've visited several (50-100) different web sites using Firefox and Sandboxie Plus with 'Security Hardened Sandbox,' and never had an issue except for one website. If you go to https://www.usps.com (United States Postal Service) and enter a tracking number to search/track a package, Firefox crashes. The search/tracking takes you to https://tools.usps.com (Direct link to United States Postal Service Tracking) which crashes Firefox.

    The setting that's causing the issue is 'Use the original token only for approved NT system calls' under the Security tab. When this setting is checked, the web site crashes. If the setting is unchecked or I use 'Standard Isolation Sandbox (Default)' everything works. If I use Firefox outside of Sandboxie (not sandboxed), everything works. This is the only web site that I found that's causing Firefox to crash when using 'Security Hardened Sandbox' with the setting 'Use the original token only for approved NT system calls.' Is this normal or suppose to happen?

    SecureMe.jpg SecureMe2.jpg
     
  2. Melionix

    Melionix Registered Member

    Joined:
    Jun 22, 2020
    Posts:
    111
    Location:
    Earth
  3. DjKilla

    DjKilla Registered Member

    Joined:
    Oct 4, 2021
    Posts:
    224
    Location:
    Tampa, FL
    That was it! I added ApproveWinNtSysCall=SubscribeWnfStateChange to [GlobalSettings] in my Sandboxie config file then saved it. The trick was to go to Options menu and select 'Reload ini file' to get it to work. Thanks for the link and fix!
     
  4. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,338
    Location:
    Viena
    Thanks, will be included in the next build
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.