Firejail alternative for Windows?

Discussion in 'sandboxing & virtualization' started by amarildojr, Mar 16, 2016.

  1. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,963
    Location:
    Brasil
    I always liked COMODO's Sandbox, but I noticed I can save files to my real HD and I don't want that to happen.

    Basically, I need a sandboxing program that is free (no Adware) and can create a virtual directory where no identifiable information is available, kinda like if I was a completely different user. This means that no files/folders from my real user directory will be available when I open, say, Firefox with this sandbox, and that I CANNOT save files on my real user directory.

    Windows 7 Home Basic x64
     
  2. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    3,768
    Location:
    Nicaragua
    Sandboxie?

    Sandboxing programs and saving files. Most people would not use sandboxing programs if files and downloads could not be saved, I wouldnt. But if that's what you want, with Sandboxie, you can make it difficult to recover files. Someone with basic knowledge of SBIE would not be able to do it. But with a little know how, there are a few ways that can be done via UI or by navigating to the Sandbox fiolder and copying or cutting the file out of there and pasting it somewhere else. So, you can eliminate the easier ways for saving files that Sandboxie provides but it can be done.

    Sin título.jpg

    Sandboxed programs are allowed by default to read your entire system. But there are settings available you can use to block sandboxed programs from having access to your persoinal files and folders.

    Bo
     
  3. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,963
    Location:
    Brasil
    Thank @bo elam . Could you confirm that programs inside Sandboxie CANNOT see the files in My Documents and such?
     
  4. pling_man

    pling_man Registered Member

    Joined:
    Feb 11, 2010
    Posts:
    463
    Location:
    UK
    There are settings you can make to deny programs all access to a folder. With this option the folder does not exist as far as the programs running in the sandbox are concerned. The default is that the files in the folder can be read, but writes are made "silently" to a copy of the file in the sandbox folder.
     
  5. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    1,732
    data goes into the box (by default) but not going outside (if you dont want to).
    open settings from box and set folder restrictions.
     
  6. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    3,768
    Location:
    Nicaragua
    You can do whatever you want with Sandboxie. You can make the sandbox as restricted or light as you wish. You know, for Firefox, my everyday browser, at this point in time, I have 4 dedicated sandboxes that I use oinly for Firefox. And I have the feeling that as time goes on, eventually I ll add more.

    Read the settings that have to do with Resource access. With this settings you can open or close the access sandboxed programs are allowed outside the sandbox.
    http://www.sandboxie.com/index.php?ResourceAccessSettings#file

    Example using My Documents. If I block sandboxed programs from having access to My Documents folder, when I try to access it like for uploading a file at Virus total, I get a message like the one below. Access is blocked.


    Sin título.jpg

    Bo
     
    Last edited: Mar 17, 2016
  7. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,963
    Location:
    Brasil
    Even with the Free version?

    Thanks.
     
  8. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    3,768
    Location:
    Nicaragua
    Sure. The free version doesn't take anything away regarding security. With the paid version, there are features that get unlocked that make Sandboxie automatic but you can do the same regarding security with both, paid and free versions.

    Bo
     
  9. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,983
    Location:
    Canada
    No Sandboxie expert here, but I'd agree with Bo and others that Sandboxie is by far your best bet. Heck, I'd highly recommend you update to the paid lifetime license version, if you can. You won't regret it; the additional features are well worth the few $$ you pay.
     
  10. dogbite

    dogbite Registered Member

    Joined:
    Dec 13, 2012
    Posts:
    1,166
    Location:
    EU
    I know this have been discussed plenty of times, but would not be a VM more isolated/secure?
     
Loading...