Help me get the most out of Sandboxie

Discussion in 'sandboxing & virtualization' started by n8chavez, Dec 22, 2016.

  1. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    I don't know why he wrote that in here but what he means is that if the SBIE driver is running, files running sandboxed are contained/isolated and the system, etc is protected from modifications.
    I am going to try to be as specific as possible and answer this 2 questions. Files inside a Forced folder, when they are executed, they run sandboxed and are allowed to interact with the rest of the system, this interaction is needed for convenience and usability, this seamless interaction between the sandboxed environment and the rest of the system is what makes Sandboxie a beautiful program, but sandboxed programs and files can not change the system, files, other programs or the registry. Sandboxed programs/files can not modify anything that's outside the sandbox in which they are running. Regarding access to the internet, if you Block access to the internet in Sandbox settings, no program will be allowed to access the internet. I think I explained that to you in an earlier post. Dii, the explanation I gave you in my earlier posts regarding Forced folders is as good as it gets, and is written in a way that is easy to understand.

    Your second question seems to me it is about opening and closing Sandboxie, and what happens with sandboxed files when doing this functions.

    Try to understand this. Sandboxie has 2 features, Forced folders and Forced programs. The main purpose of this 2 features is to make sandboxing automatic. So, when you run files out of a Forced folder, or you execute files that are opened by programs that you have set as Forced programs, this files run sandboxed automatically. This is done without you opening or closing Sandboxie.

    You click on a file, and it runs sandboxed automatically, that's what happens, and when you close the program, the program stops running/terminates, and if you set the sandbox to delete on closing, that's what it does. Or if the sandbox is set to close, and save contents, thats what happens also. All of this is done without you opening or closing Sandboxie control. The features allows you to run files sandboxed with no need on your part to open SBIE control.

    Bo
     
    Last edited: Jun 28, 2021
  2. Dii

    Dii Registered Member

    Joined:
    Jun 22, 2021
    Posts:
    15
    Location:
    USA
    I get that but i don't want to have Sandboxie open just so that forced folders content remain sandboxed. I want to be able to close/exit Sandboxie and those forced folders contents to still remain intact and not be deleted. I want to access their content ONLY when I open Sandboxie. ALSO I want their contents to not be able to interact with the OS while I have Sandboxie closed/exited.
     
  3. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    any sandbox act like this: anything goes - but nothing* out. Whether sandboxie is loaded or not, sandboxie will start on forced folders/programs otherwise this option makes no sense.

    *depends on your settings -> recovery and applications in box settings

    a program outside do not know whats in the box until has been started as forced program or in a forced folder in the same box.

    David has archived the sandboxie manual (in english), its recommended to read it!
    https://github.com/DavidXanatos/sandboxie-docs
    Or this one (is same, but more convenient): https://sandboxie-plus.github.io/sandboxie-docs/
     
  4. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    No, Dii, you are not getting it :). Let me tell you again, using different words. Folders that are set as Forced, are not sandboxed. The folder itself is never sandboxed, but the files that are inside this folders, when executed, they run sandboxed and when you close the file, Sandboxie is not working anymore.

    The sandboxing effect only takes place when a file that starts sandboxed is open, When you close the file, the effect ceases.

    When you exit or close a sandboxed file, nothing regarding sandboxing the file that you just closed remains open.

    Brummelchen is right, you need to read. Sandboxie was originally designed for new users to install it and learn as you go. If you keep things simple, it is a very easy program to learn. But you need to do some reading. Earlier I mentioned deleting the sandbox (in essence, the most important function in SBIE) and by what you replied about it, I can tell you have no notion at all about what that is or what sandboxig/isolation is about. Same with regards to the interaction between SBIE and the system. Sandboxie has to interact with the system, if it didn't, you couldn't use SBIE.

    Sandboxed programs have to read system files or files in AppData, otherwise they wouldn't work, that is interaction. People who design sandboxing programs, achieve sandboxing using totally different methods but the end result is always the same and they try to balance security and convenience. Sandboxie allows as little as possible, only enough so most popular programs are able to run sandboxed. I like using the words fluent and seamless when describing the way SBIE interacts with the system, because that is the feeling that I have when using my computer.

    Perhaps you don't know me, so I am going to tell you this. Whenever I am using my computer, I am using SBIE. The only time I am not using SBIE is when the computer is idle or I am doing Windows updates. And even so, when I am using the computer, I use it the same way as if I was not using SBIE. The reason I can do this and feel this way is because the interaction between SBIE and the environment outside the sandbox is seamless.

    Read, start here:

    https://sandboxie-plus.github.io/sandboxie-docs/Content/GettingStarted.html

    Bo
     
  5. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    I almost forget. This words are important. Take what Sandboxie gives and apply it to your case use.

    Bo
     
    Last edited: Jun 29, 2021
  6. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    In most cases we meet each other, there is no worry here :)

    I read your explanations here and for me its clear. But we have some years more experience and it's really hard to explain for newcomers when they want to jump into it without the basics (in general for all sandbox tools)

    yeah reading, what i consider as important is the "getting started" part 1-6
    https://github.com/DavidXanatos/sandboxie-docs/blob/main/Content/GettingStarted.md
    it really really explains very simple the basics of sandboxie.

    If bo would/should have a voice i would hope it will be like Bob Ross when he painted on tv. :cool:
    A calm voice with a lot of patience.

    And now i need some beer, germany lost (again).:'(
     
  7. Dii

    Dii Registered Member

    Joined:
    Jun 22, 2021
    Posts:
    15
    Location:
    USA
    Ok let me put it another way.
    What other program can I use besides Sandboxie that while I have Sandboxie completely closed off can assure that media files or executable files inside some folders I make can:
    1.not interact with the rest of the system/OS.
    2.can not access the internet or network.
    3.can not execute themselves in the background without my knowledge.
     
  8. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    currently there exist nothing like sandboxie. finally please go reading and introduce it yourself. bo explained the general function to often now for you. you need to explorer sandboxie like we did how it is functioning and its switches. there exist no copy command from his (or my) experience to you.
     
  9. Dii

    Dii Registered Member

    Joined:
    Jun 22, 2021
    Posts:
    15
    Location:
    USA
    Regarding performance, what have you generally found in terms of performance degradation when it comes to running your programs in Sandboxie compared to running them natively? How big is the CPU and memory impact?
     
  10. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    CPU is always 0%

    Memory...about 10MB.

    Bo
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.