Sandboxie: What do you sandbox, other than your browser?

Thanks Bo, that's what I do (and did in this case) to test whether the file was sandboxed or not (View>Programs)

This is new for me and I learned something, great. Tried this and it confirms the findings above.

Thanks, so I deleted the Download TEST folder and relative sandbox, created a new folder DownloadsNEW and relative sandbox (simple settings below) by creating anew the settings [not copying them]. Copied some files. Result as before, which is:

• MPC-HC & VLC open the files sandboxed both in Downloads and DownloadsNEW
• PotPlayer & KMPlayer open the files NOT sandboxed in either folder

Code:

[DownloadsNEW]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
BorderColor=#00FFFF
BoxNameTitle=y
NeverDelete=y
ForceFolder=D:\DownloadsNEW
NotifyInternetAccessDenied=y
ClosedFilePath=InternetAccessDevices
DropAdminRights=y

 

Just an idea for you to try, Newbino. Using KMPlayer, does avi files run sandboxed out of a Forced folder that's located in C Drive?

Also, for me, my ancient version of KMPlayer runs fine in W7 and XP. Are you using one of this systems?

Get me a link for the version of KMPlayer that you are using now, I don't like the newer versions but I ll try it later and see what happens.

Bo

 

Hi Bo, I created a test Forced folder (settings below) in C: and the situation is the same.

I am running Win7x64, KMPlayer version 3.6.0.97 which you can get here: http://www.videohelp.com/tools/KMPlayer/old-versions (changelog http://www.digital-digest.com/software/kmplayer_history.html#79)

Thanks for your help!

[TEST]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF
BoxNameTitle=y
NeverDelete=y
ForceFolder=C:\TEST
NotifyInternetAccessDenied=y
ClosedFilePath=InternetAccessDevices
DropAdminRights=y

 

Newbino, in the link that you provided, I didn't find the version that you are using but I installed version 3.6.0.87 which is close enough, testing this version, I can reproduce what you are saying (videos not running sandboxed out of a Forced folder).

Your Sandboxie installation is fine, I am using 4.13.2 so upgrading wont help. Some programs like WMP don't work out of a Forced folder but I cant understand why KMPlayer runs unsandboxed. My old version runs fine sandboxed out of a Forced folder. Pot player is pretty similar to KMPlayer so probably it doesn't work out of a forced folder for the same reason than this newer versions of KMPlayer.

As a workaround, you can use Forced programs, that always work and perhaps you should report your findings at the Sandboxie forum. If you do, I ll post and confirm that I reproduced what you are saying. I tested 3.6.0.87 in my XP, if you post at the forum I ll see if I can reproduce this problem in my W7 as well.

Regards

Bo

 

Thanks Bo you are right concerning the version of KMPlayer.
I am out of town, tomorrow when I return I'll post to Sandboxie's forum and let you Know by pm.
I appreciate all your help.

 

My pleasure. By the way, I tested KMPlayer 3.6.0.87 in my W7 today. I found something interesting. If I set KMPlayer as a forced program, when I try to open an avi or mp4 that's placed inside a Forced folder (my Downloads folder for ex), KMP attempts to run in my KMPlayer sandbox (not the way its supposed to be), it closes and after about a minute it opens up in my Downloads sandbox.

Another case. If I don't set KMPlayer as a Forced program, files run out of the Forced folder unsandboxed. In this particular case, if the Forced folder sandbox is Start Run restricted, videos open up unsandboxed and I dont even get a message. Bottom line, for newer KMPlayer versions and Sandboxie to work well together, work needs to be done.

In case you wonder, I am using version 2.9.3.1428. It works as it supposed to under Sandboxie and works just fine in W7 and XP. Its from before Pandora and Ask got bundled with KMPlayer.

Bo

 

So I wanted to play around with a few command line switches in chrome while using a sandboxed browser, but can't seem to make any changes. My target line of the sandboxed shortcut reads as such:

Q:\Sandboxie\Start.exe /box: DefaultBox "C:\\Program Files (x86)\Google\Chrome\Application\chrome.exe"

In the non sandboxed chrome properties page the target is

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

Anyone work with command line switches (I'm trying --purge-memory-button at the moment) combined with sandboxie?

 

bberkey1, sandboxed shortcuts always start like this.

"C:\Program Files\Sandboxie\Start.exe"

Perhaps this is the shortcut you are looking for using a sandbox named chrome.

"C:\Program Files\Sandboxie\Start.exe" /box:chrome "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

In case you don't know, you can create sandboxed shortcuts from the Sandboxie UI.

Sandboxie control>Configure>Windows shell integration, Click Add shortcut icons. And go from there.

Bo

 

any reason why you cheat security installing software on another drive than windows?

 

I created my short cut via the shell integration option, but I think that particular flag no longer functions as I tried it on a non sandboxed shortcut and also on my other laptop which has chrome 32 bit (I was trying 64 bit on my other) so I think that is the answer. Thanks for your reply bo!

I just renamed the drives and their partitions with different letters, Q just happens to be where I installed sandboxie

 

Glad to help, bberkey1.

Bo

 

Hi
I now it's pretty old
can i setup sandboxie so some program inside the sandboxie can have full access to a dvd burner ?
rip songs , create image and burn ?
i have tried with direct and full access ,without luck
thanks

 

Games. I don't want to clean up my registry manually or use a backup after deinstallation. Since I buy my games at GOG, most of them work fine in a Sandbox, because there's no DRM. I noticed that only very few games had performance issues - the problem is already known (but still not fixed?)

https://github.com/sandboxie-plus/Sandboxie/issues/2855