Sandboxie Support

@Curt Is it possible to adjust the print spooler write access ourselves? like we could find out where the driver needs to write its temp files via Resource Access Monitor and then allow that specific path in a menu setting dedicated to this. that way the user can fix the problem themselves instead ...

@Curt Is it possible to adjust the print spooler write access ourselves? like we could find out where the driver needs to write its temp files via Resource Access Monitor and then allow that specific path in a menu setting dedicated to this. that way the user can fix the problem themselves instead o...

@Curt - BUCKAROO
I do also remember having issues with sandboxie names in a game. one name wouldn't work and another one would. it didn't occur to me at the time that it was based on whether the string name is odd or even and was too busy to report it.

It probably would be safer not to persist the print spooler flag in sandbox.ini at all. So it would always require setting when starting the sandbox. It is too easy to forget that it is set. What do you think of that idea? Anyway for sandboxie to figure out which application is trying to talk to sp...

@Curt the fixes have caused some issues regarding the printing. however i'm not sure how serious they are. For example, testing Microsoft XPS printer in win 7 x64 (without using the print to file option), the document seems to be printed fine, however, SBIE1319 will be issued every couple of seconds...

@Curt
Thank you for fixing the print spooler vulnerability. I suppose it was not easy to just redirect the write requests to sandboxie because it was being done after theyd been processed by spooler service?

Will this solution work on win xp as well? you talked about win 7 and 8 but not xp.

@Curt
Thank you. that's a useful workaround. at least i can now keep the spooler service running and block it in sandboxie instead.

This is still om my radar, but has been pushed aside for more important matters. I hope to return to it soon. Than you for the update. but frankly, I'm unable to see why this isn't a priority as this leak clearly defies what sandboxie stands for (which is sandboxing things) as well as the fact that...

Is there any update on this? this is really an important part of IE that I'm unable to use while running inside sandboxie. Curt, please take a look at it.

Curt, can we have an update on this please?

I am looking into this issue. But, it may require disabling printing entirely from the sandbox. Is everyone OK with this? sandboxie surely has control over the data before it passes it to the print spooler service. if you couldn't find a solution to completely secure print spooler against potential...

@ BUCKAROO Thank you very much for providing proof for my suspicion. I can confirm that your script works for my printer as well. I hope that now Curt realizes that this is a serious issue. and unfortunately, without exactly knowing whats going on between sandboxie and print spooler service in the b...

Hi Curt, thanks for the answer. although it's somehow reassuring that the api injection in print spooler service is not possible, the fact that the sandboxie passes raw unsandboxed printer data to the spooler service, makes it subjected to potentially exploiting vulnerabilities in the printer driver...

Unfortunately, for making printing from a program running under sandboxie possible, there appears to have been some considerable security ease in printer spooler service(I'm assuming?) without the possibility to disable them. It's no secret that printer spooler has been used in variety of attacks an...

I can also confirm this bug. please fix this issue as one of the few useful things in IE is its developer tools and i use it way too often to force compatibility settings for sites which would otherwise won't work in IE11 . if it's any help, recently after installing the latest microsoft updates, i ...