Sandboxing GMail With Sandboxie Plus

Hi @ Wilders

Can somebody explain to me how to set up a GMail account sandboxed with Sandboxie Plus using a desktop icon?

Thank you

Terry

 

There are two parts to this. First right click on the desktop, or wherever you want the shortcut. Select "New" from the context menu. Select shortcut. Then type in the address you want. Second, create a new sbie box. Right click in the sbie gui and select "Create New Box." Customize as you want, but take sure you select the option to force firefox, or whatever you're using, to run in the sandbox under "app Templates." Aldo, make sure that .exe file is listed under settings found in the new box's settings under "Program Control", then "Force Programs" tab

 

Hi n8chavez

Thanks for your help it did work but it has caused another problem.

What I am trying to achieve is two icons on the desktop using Chrome. One for a sandboxed Chrome browser and one for a sandboxed GMail. and two other icons for GMail and browser not sandboxed
Doing it the way you have suggested for GMail takes me directly to my inbox BUT because GMail (Chrome) is FORCED it cause the non sandboxed icons to become sandboxed.

If I don't FORCE GMail then it opens up with my home page and not directly into my inbox. So then I have to click on a bookmark to open mail. I am sandboxing GMail to protect against links and attachments.

Am I looking at this the wrong way? Any help you or others can give would be appreciated.

Thanks

Terry

 

I might be wrong, but I don't think you can have sandbox-ability of a site-by-site basis. If you set up an exe to be sandboxed, that's it, it's sandboxed. Everything that exe does will be inside the sandboxed. That's the point of the program. I'm not really sure you want gmail sandboxed and nothing else. That undermines the very function of sandboxie and doesn't sound very safe. However, if th at's really what you want I think you'll have to use two browsers, where only the one exe is sandboxed.

 

1. Create two new boxes named YourBoxNameHere1 and YourBoxNameHere2.
2. Create four Chrome profiles and configure them as you like. (I used: SandboxedChrome, SandboxedGmail, UnSandboxedChrome, UnSandboxedGmail) [See the note.]
   
3. Create four Chrome shortcuts and change their TARGET path with the following entries. (First two is sandboxed and last two is unsandboxed.)

Spoiler: TARGET paths

Code:

"C:\Program Files\Sandboxie-Plus\Start.exe" /box:YourBoxNameHere1 "C:\Program Files\Google\Chrome\chrome.exe" --profile-directory="SandboxedChrome"

"C:\Program Files\Sandboxie-Plus\Start.exe" /box:YourBoxNameHere2 "C:\Program Files\Google\Chrome\chrome.exe" --profile-directory="SandboxedGmail"

"C:\Program Files\Sandboxie-Plus\Start.exe" /dfp "C:\Program Files\Google\Chrome\chrome.exe" --profile-directory="UnSandboxedChrome"

"C:\Program Files\Sandboxie-Plus\Start.exe" /dfp "C:\Program Files\Google\Chrome\chrome.exe" --profile-directory="UnSandboxedGmail"

Note: If you want to use DEFAULT profile for shortcuts that will work outside the sandbox, you can remove the "--profile-directory="XXX"" part in the TARGET path.

 

I have come across the flag "/disable_force". Is that similar or equivalent to "/dfp" ?

 

/dfp and /disable_force are identical.

 

I'm a little confused. Things are still being sandboxed, by the mere fact that your having to invoke sandboxie. This method may or may not give the appearance of being unsandboxed, but nonetheless that is not the case. If it were no switches or command lines would be needed.

 

No using /dfp tells teh driver to explicitly not sandbox a program.
So you can invoke sandboxie to run somethign unsandboxed.

 

Hi @busy

Many thank for your reply to sandboxing gmail. It is most helpful.

terry