can I let cd/dvd rippers access only to my blue ray drive ?

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by mantra, Nov 30, 2022.

  1. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,195
    Hi
    is there a way to run let some programs inside a sandboxie and access only to my blue ray dvd drive?

    because I have create a new sandobiex and under file access
    I have added the dvd drive in the direct access and full access

    but the programs don't see the drive

    i'm using sandboxie classic 5.60.3
    why?

    thanks
     
  2. simbun

    simbun Registered Member

    Joined:
    Jan 29, 2022
    Posts:
    71
    Location:
    United Kingdom
    I don't use Classic but in Plus under 'General Options > File Options: Raw Disk access' there's the option 'Allow elevated sandboxed applications to read the harddrive' which needs to be checked in order for software to be able to access optical drives.
     
  3. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,195
    Hi
    in the classic there is no such option
    have you tried to rip and burn with a program insde sandboxie plus adding the dvd in the raw disk access ?
    thanks
     
  4. simbun

    simbun Registered Member

    Joined:
    Jan 29, 2022
    Posts:
    71
    Location:
    United Kingdom
    I have a sandbox for ripping & tagging that includes EAC, CUETools, AlbumArtDownloader and foobar2000, all installed into a sandbox.

    If I install EAC in a new 'Security Hardened Sandbox' (with 'Make applications think they are running elevated' enabled), on opening EAC the drive is listed as 'Adapter: 1 ID:0' and no CD is listed. If I then enable 'Allow elevated sandboxed applications to read the harddrive' and open EAC again the drive is listed correctly as 'ATAPI iHAS124 ...' and the CD TOC is displayed.

    I haven't tried to burn.
     
  5. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,335
    Location:
    Viena
    perhaps raw disk access is not enough, I think internally windows amy use a different endpoint for a disk writer, try using the resource access monitor to find out whats needed explicitly.
     
  6. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,195
    Hi @DavidXanatos
    in classic version there is no raw disk access
    the point is that these programs can't even see the drivers , they can 't read or write
    thanks
     
  7. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,195
    Hi @DavidXanatos
    can't find out what does need sandboxie to access to a drive
    might you please give a look ?
    thanks
     
  8. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,335
    Location:
    Viena
    @mantra I'm sorry but I can not reproduce this issue with my test setup,
    I used windows own ISOBURN.EXE see https://winaero.com/how-to-burn-an-iso-file-from-the-command-prompt-in-windows-10/ (run sandboxed)
    and used a virtual DVD-RW (https://www.kernsafe.com/download/totalmounter.aspx) as I don't have a real one in my workstation. (installed unsandboxed, obviously as it comes with a driver)

    With this setup it was possible to write to the Virtual DVD-RW without any issues.
    this means that either
    a.) your image burning tool uses a different API, in that case please specify what tool you were trying to run sandboxed and where to download it.
    b.) the emulated DVD-RW is easier to access than a real one, what I find rather unlikely, but if the issue is not a.) then please try this emulator.
    As a workaround worst case you can use whatever tool you want isolated to write to a virtual image, which you can them write to a real disk using a trusted tool which does not need sandboxing like windows own ISOBURN.EXE
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.