Sandboxie Support

Apologies if this has been suggested before. I'm not sure if new features are being developed at the moment or whether all focus is on compatibility but I'd like to see more options in the start/run access section of sandboxie. Currently I can allow all programs to run in the sandbox or specify part...

That's good to hear, thanks for the clarification Curt.

Wow, thanks for all the effort Syrinx, greatly appreciated. Not So Good News Rooj: Using the rules you posted earlier *may* not help, at this point (my uneducated opinion is that) all you are doing is blocking access to the mounted containers/drives but I didn't do testing there so don't take my dru...

Thanks for the interest. Just to be clear I'm not saying that this could be used for any type of bypass (I'm not sure at the moment), but it is enough for me to want to block access to the driver from sandboxed apps if they don't need it. Further to my previous post I changed: ClosedFilePath=\Device...

Hi, Apologies for the newbie question. I was looking to protect myself from the privilege escalation vulnerability in the truecrypt driver mentioned here: https://code.google.com/p/google-security-research/issues/detail?id=538 Attempting to run truecrypt in a sandbox shows that its able to connect t...

Hi Nash, If you have the paid version of sandboxie you can add your browsers as forced sandboxed programs: Sandboxie -> yoursandbox -> sandbox settings -> program start -> forced programs I also use KeePass, is there any reason why you don't want to sandbox it? You can sandbox KeePass and still allo...

Yeah I expect further leaks too unfortunately, especially in windows 10 with potentially new unknown API's (not that I intend to go anywhere near windows 10 spyware any time soon). The good news is that with each bypass found and fixed sandboxie gets stronger.. Just takes an army of us to comb throu...

Thanks for confirming Buckaroo (and thanks for alerting us Gator). Always a little disconcerting to see dangerous API's not blocked by sandboxie. Any idea why 3.76 isn't vulnerable to this?

I failed to take note of the PeekMessage call in sandboxie code. Pidgin processes a WM_RenderFormat message after the PeekMessage call and seems it crashes a little into dealing with it. Without sandboxie I don't see the WM_RenderFormat in this handler on copy (only on paste).

I've taken a look at this and it seems to be crashing in sandboxies CloseClipboard code (or a call to another library inside it). I'm not saying this is the cause, just that this is where it seems to crash for me. Recorded this horrible quality video to show what I mean: https://www.youtube.com/watc...

Outlook 2010 ran terribly for me when I first began sandboxing it also, I believe it may have been to do with the size of my archive file as sandboxie seemed to copy the entire file into the sandbox when outlook first ran. I ended up allowing sandboxie to save directly into the Outlook folder: OpenF...

I assume you mean the auto recovery prompt? You can allow direct access to a folder in the options: • Create a download folder wherever you want • Click sandbox menu at the top of sandbox control app • Choose the sandbox and hit "sandbox settings" • Resource Access -> File Access -> Choose either Di...

I imagine you got a warning because Craigs been in the job all of about 2 weeks now supporting a new piece of software with a new team and you're already starting to criticize, seemingly to push the support agenda again. Please give the guy a break and let him settle in. It's just disrespectful and ...

I can replicate the issue if I install the software directly to a sandbox and run from there. GOG Galaxy saves logs in the following location: C:\Sandbox\username\DefaultBox\user\all\GOG.com\Galaxy\logs GalaxyClient.log 2015-06-30 18:28:45:869 [galaxy_client][Information]: Log started. Application v...

Are you installing GOG Galaxy sandboxed or installing it outside and then running it sandboxed afterwards?