sandboxie v4 out Jan 10, 2013

Thanks! Although I think I missed Sandboxie

 

Now this is what I've been waiting on

 

Maybe your issue and mine are similar. When I click on a Excel file, the file runs in the Office sandbox, the file opens but nothing gets displayed. Using the file that's open, if I navigate to any Excel file in the computer, it displays properly when I click on it. Same situation for Word.

Bo

 

Yes, very similar. Runs fine from the 'send to' right click which I believe is invoked by start.exe (same as the search via explorer you describe) but not from direct double click on the file which is not invoked by start.exe. That may be the difference.

Also only happens on Excel for me. All other Office 2010 pro plus apps run fine on .04.

Cheers

 

Upgraded to version 4.01.04 in Windows 7 and 8 – everything appeared to work just fine! I then discovered that I could not copy\paste anything from any sandboxed browser into an Open Office document (OO is my office suite) – I would get a 'Requested Clipboard format is not available' message.

Couldn't find anything on this issue in Sandboxie forums or on the net – and since this function is important to me - it's back to version 3.76 (again!)
First time in 2 and a half years that I've ever had any kind of issue with Sandboxie! (I guess there's always gonna be a first time!)

 

.05 out now

http://www.sandboxie.com/phpbb/viewtopic.php?t=14453

Cheers

 

Thanks chris!

 

Testing it now. .......feels pretty good.

Bo

 

I am still using Sandboxie 3.76 on all of my Windows XP Pro SP3 32 bit PC's. I realize that Version 4 is still in Beta, but how stable is Version 4 on Windows XP? I am thinking about giving Version 4 a try on one of my Windows XP Pro PC's.

If I decide to give Version 4 a try, should I uninstall Version 3.76 before installing Version 4?

 

Hey Kid7, I am testing .05 in my 32bits W7. It feels outstanding so far. Tonight, I ll try it in XP. Up to .04, the only issue that I have/had in XP SP3 32bits is Excel and Word not running properly as a Forced program, other than that, no other issues.

For installation, over the top works just fine.

Bo

 

You should uninstall first because Version 4 has a very different way of doing things.

 

Updated here also. So far so good although...... 3.76 was also working very well with no problems.

 

Have been running v4 since .03 and no issues to speak of so far.

 

As a promotor of policy based containment, I noticed a stunning feature on Sandboxie, it is uses policy containment (confusingly also called sandboxes by Microsoft, Adobe and Google) to seperate virtualised processes from the rest of the system. Even Chrome broker process has practically no rights (runs normally with Medium Integrity).

Made my compliments http://www.sandboxie.com/phpbb/viewtopic.php?t=15202

Have no idea how he is able control system level messaging/com and still have all handles/hooks controlled by SBIE on the sandboxed Chrome. Found a small glitch (able to start through hostdll.exe even with start program limitations), but it is still a Beta.

See pic

 

Where have you been? lol

https://www.wilderssecurity.com/showpost.php?p=2201959&postcount=80

I took a look at PE again, and something that I missed before, is that Sandboxie processes involved in sandboxing processes are run under the context of NT Authority\Anonymous Logon. So, I'm pretty sure it has something to do with Anonymous Logon. -Edit- Your screenshot also reveals it.

 

The breaks protected mode, confused me in that post. Before april 2012 update Sandboxie broke protected mode by elevating from untrusted/low to medium level. After teh Sandboxie april update Chrome used both its internal (policy) sandbox (Untrusted/Low) within the Sandboxie (virtualised) sandbox.

I thought breaking protected mode, that is old news (M00N is looking for some BL00D again, did not read it correctly, my bad). Now I see you mentioned both broker and renderer process. To be fair I would call lowering policy from medium to untrusted not breaking but enhancing it.

 

Actually, I believe that, before, Sandboxie's author only made both Chrome and Adobe Reader's sandbox to work under Sandboxie? I don't think Internet Explorer Protected Mode ever worked? I may be wrong, though. I truly don't recall.

Well, it effectively "breaks" Protected Mode. The same way it effectively "breaks" Chrome's sandbox.

Anyway, previously (and currently) and now I'm just going to mentioned Chromium, and in my specific config., I had/have the broker chrome.exe running at low integrity level and the renderer chrome.exe at an untrusted integrity level.

In this scenario, even if something manages to break out of the renderer, it will only be able to execute under low integrity level, which pretty much gives nothing in my system (I'm thinking of reading other objects/containers). (I'm also excluding kernel exploits.)

But, I've been thinking that if I run Chromium under Sandboxie, yes both broker and renderer will run with an untrusted integrity level, but the interesting part of it is that Sandboxie processes that allow all of this great sandboxing are running with NT Authority\SYSTEM, or in other words, running as SYSTEM. So, if something escapes from Untrusted (under Sandboxie) to SYSTEM, then you're (_O_), even without a kernel exploit. Granted, bugs will need to be found. But, so would they need for everything else. Oh, life is wonderful...

But, I believe I'll still stick with low <-> untrusted, instead of system <-> untrusted

 

Nice one well constructed argumentation.

Chrome is in same job as the SBIE processes which it communicates with (that is how it is done) DCOM/RPCL/Crypt svc. Calls originating chrome are handled by SBIE components within job. Limitations of sandbox are controlled by medium level SBIE process, before it is passed to SBIE service at System. So I think there are a few more rivers to cross as you are suggesting.

Stick out tongue indeed made me doubt in terms of risk surface.

 

According to Process Explorer there's only one Sandboxie process running with a medium integrity level, and that's SbieCtrl.exe.

The rest is as follows, and as I'm typing this, I'm actually running two applications sandboxed, one of which I actually installed within a sandbox container:

Parent process SbieSvc.exe (Running as System) <-> SbieSvc.exe (Spawned from parent SbieSvc.exe) (Running as System) <-> SandboxieRpcSs.exe (Spawned from parent SbieSvc.exe) (Running as Untrusted) <-> SandboxieDcomLaunch.exe (Spawned from SandboxieRpcSs.exe) (Running as Untrusted) <-> Your application process(es) (Running as Untrusted)

I don't see any other Sandboxie process involved, and that could be running with a medium integrity level (except for SbieCtrl.exe as mentioned above, which I'm not sure how much security it would impose within the system <-> untrusted design?).

 

Possible bug ver 4.01.05

OS XP SP 3 Home - Browser Opera

Copy/paste link tabs Opera not work
Please check Chrome,Firefox,Internet Explorer.
Th.

 

I really hope that Sandboxie's author implements what has been discussed in this thread, and something that I also mentioned a long time ago: -http://www.sandboxie.com/phpbb/viewtopic.php?t=3492

I still find it a bad choice not to have implemented this already. Version 4 "required major changes to underlying architecture" (I'm quoting the author's own words), so it would had been the perfect time to implement this user privacy concerns/protection as well...

I hope it gets implemented soon(ish)...

 

I installed latest beta (.05) of Sandboxie on my netbook that runs Windows 7 x86. When I tried to start Internet Explorer 10 and Chrome 26 the computer froze and Sandboxie gave me GUI error popups. Anyone had a similiar experience?

 

Beta 4.01.06 is out. Looking good.

http://www.sandboxie.com/phpbb/viewtopic.php?t=14453

Bo