Any Suggestions to harden my browser sandbox?

Discussion in 'sandboxing & virtualization' started by Malwar, Oct 18, 2013.

Thread Status:
Not open for further replies.
  1. Malwar

    Malwar Registered Member

    Joined:
    May 5, 2013
    Posts:
    271
    Location:
    USA
    I am wondering if anyone can give me some suggestion to harden my firefox sandbox thanks Malwar. I am using Windows XP SP3 32-bit, I also use sandboxie(free) 4.06 32-bit.

    Sandboxie(free) 4.06 browser Config: [DefaultBox]

    ConfigLevel=7
    AutoRecover=y
    Template=BlockPorts
    Template=LingerPrograms
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FF00
    Enabled=y
    BoxNameTitle=n
    NotifyInternetAccessDenied=y
    NotifyStartRunAccessDenied=y
    NeverDelete=n
    AutoDelete=y
    DropAdminRights=y
    ProcessGroup=<StartRunAccess>,firefox.exe
    ProcessGroup=<InternetAccess>,firefox.exe
    ClosedFilePath=%Personal%\My Downloads\
    ClosedFilePath=%Personal%\My Music\
    ClosedFilePath=%Personal%\My Pictures\
    ClosedFilePath=%My Video%\
    ClosedFilePath=\Device\Mup\
    ClosedFilePath=C:\WINDOWS\system\
    ClosedFilePath=C:\WINDOWS\system32\kernel32.dll
    ClosedFilePath=C:\WINDOWS\system32\t2embed.dll
    ClosedFilePath=C:\WINDOWS\system32\win32k.sys
    ClosedFilePath=!<InternetAccess>,InternetAccessDevices
    ClosedIpcPath=!<StartRunAccess>,*
     
  2. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    3,768
    Location:
    Nicaragua
    Hey Malwar, I think its pretty tight already. No need to tighten it anymore. Actually, I think you can loosen it up some to make it more comfortable and convenient. For example, if I was you, I would allow Bookmarks to be saved out of the sandbox and would allow Plugin container Start/Run access so you can play Flash videos. If you don't play Flash videos or have disabled Plugin container then there's no need for you to do that.:)

    Bo
     
  3. Malwar

    Malwar Registered Member

    Joined:
    May 5, 2013
    Posts:
    271
    Location:
    USA
    Yeah thanks for the information. I just watch them on my laptop.
     
  4. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    Last edited: Oct 25, 2013
  5. Malwar

    Malwar Registered Member

    Joined:
    May 5, 2013
    Posts:
    271
    Location:
    USA
    I have further increased the security of this sandbox by disabling recovery and blocking access to the system 32 drivers folder and set a password and only administrators can make changes.
     
Loading...
Thread Status:
Not open for further replies.