Sandboxie Support

Hi, It would be great if Sandboxie could provide also features like Altiris's SVS namely Layers and integration in the OS, for trusted stuff. Sandboxie seam to have almost everything needed so for this task and it would greatly extend its functionality. Unfortunately Altiris SVS cant be used togethe...

SVS is _NOT_ a security tool and never was. in fact even stuff like the Adobe Acrobat pro installer managed in my case to put some files related to the licensing service into the real PC while the rest was as it should be in a layer. It allows drivers to install and other dangerus things. SVS is a t...

Hi, I would like to see a feature to allow some aprticular sandbox full access to proframs running in an other partucular sandbox. My actual purpose for this would be to have a SB with browser (eg. firefox) allowig access to an other sandbox where utorrent runs, so that i can open the torrent files ...

It means that programs whitch needs to install drivers would leav traces in your system, but note that by default installing of drivers is prochibited to sandboxed programs.

Owen

For me it looks like a Kite, anyway it does not look like a sandbox


Owen

Today looking in the net about vista reviews and more info about the "new" features I found this: http://zone.ni.com/devzone/cda/tut/p/id/5538#toc4
It seems that M$ is copying SB technology

Owen

1. alow to dissable the message that you have to reload the ini
2. make sb autimaticly reload the file when the edition app is closed
3. make the edition app changable

4. add an obtion to turn keys/files into read only.

Owen

Doesn't DBAN have an pass with "0" on the end that cant be turned of in the regular build?

Owen

@tzuk Is such a feature even possible, I mean Technically? Or is this just to much afford for to less benefits? @a_Lex I'm using TC to and I know what you want achieve but don't you think an Adversary may find the storage device on what the TC binary's are stored? You also would have to have an excu...

I tested all software of this king I could find ans SB is simply the best and most flexible of all.

Owen

HIPS: Host Intrusion Prevention System like here: http://www.proactive-hips.com/ <- the one I use.

Owen

I tested BZ some time ago and it dows not work well for me: 1. It have leaks 1a. it leaks the *.virtual files into my entier system 1b. it does not protect the drive against low sector reading/writing 1z. this was enough to be considderes useles for me. 2. it vonflicts with my HIPS in such a bad way...

When can we expect the next build?

Owen

TC needs to write to the System Key in order to be akle to load a driver, booth actions requirers administrativ privilegs. Sandboxie can not solve this problem: when it let the entries outside the SB the driver can be loaded but traces are left behing, if it keeps the keys sandboxed the windows kern...

As far as I see you are trying to upen FF in an not default sandbox,
do you have OpenProtectedStorage=yes specyfyed for this new sandbox ("Browser")
btw: its a stupid question, but have you added the secundary sandbox, befoure trying to use it?

Owen