Problems with PDF viewing in Browser and Java addons

[doveman]

Sandboxie 3.64 running on XP SP3 32-bit. I'm using the termsrv.dll patch to allow multiple users to logon simultaneously.

User2 found they were unable to open PDFs in IE (they use Foxit reader) when using Sandboxie whilst User1 could. I recall User1 having a problem with this before but I can't recall what I had to do to fix it. Running the Browser outside of Sandboxie both users can view PDFs fine. Each user has a separate Sandbox, so I checked and double-checked the settings but couldn't identify any differences between them. Further testing shows that User2 can't open PDFs whether running the browser in either Sandbox, whilst User1 can open PDFs running the browser in either Sandbox, so it doesn't seem to be a Sandbox setting that's the problem. I checked the temp folder for IE and for User1 it was C:\Temp\Web whilst for User2 it was the default C:\Documents and Settings\User2\ path, so I changed that to C:\temp\User2\Web in case Sandboxie was having a problem accessing the other path, but that hasn't helped.

I also noticed when running in the Sandbox IE wasn't showing the Java or JQSIE addons, which are loaded when running outside the Sandbox. If I switch from showing "Currently Loaded" to "All" they are shown as Enabled, they're just not loading when using Sandboxie. I've had to disable Sandboxie and let them run IE without it for now until I can fix these problems, so I'd appreciate some help.

[tzuk]

I suggest you post the contents of your Sandboxie.ini configuration file.

[doveman]

Sorry for the delay in getting back to you, I don't get access to the machine in question very often and only just got a chance to grab the ini. I've rearranged it a bit to make it easier to read and removed the section for an unused Eudora sandbox, so if I left any references to that in by mistake, please just ignore them.

Code: Select all

[GlobalSettings]

Template=ComodoInternetSecurity
Template=Avira_Antivirus
Template=LastPass
Template=AdobeAcrobatReader
Template=RemoteDesktop
Template=ZoneAlarmSecuritySuite
FileRootPath=D:\Sandbox\\%SANDBOX%
TemplateReject=UltraMon

[TemplateSettings]

Tmpl.Thunderbird.l=D:\Data\L\Thunderbird\Profiles\c5.default
Tmpl.Eudora.V=D:\Data\Eudora

[UserSettings_18700308]

SbieCtrl_UserName=V
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_BoxExpandedView_DefaultBox=y
SbieCtrl_ReloadConfNotify=n
SbieCtrl_EditConfNotify=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_WindowLeft=140
SbieCtrl_WindowTop=113
SbieCtrl_WindowWidth=660
SbieCtrl_WindowHeight=450
SbieCtrl_ActiveView=40021
SbieCtrl_ShouldDeleteNotify=n
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310
SbieCtrl_BoxExpandedView_L=n
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=n
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y

[UserSettings_4BC00582]

SbieCtrl_UserName=administrator
SbieCtrl_BoxExpandedView_DefaultBox=y
SbieCtrl_BoxExpandedView_L=y[/

[UserSettings_0D200227]

SbieCtrl_UserName=l
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_ShouldDeleteNotify=n
SbieCtrl_WindowLeft=143
SbieCtrl_WindowTop=124
SbieCtrl_WindowWidth=660
SbieCtrl_WindowHeight=450
SbieCtrl_ActiveView=40021
SbieCtrl_BoxExpandedView_DefaultBox=y
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_BoxExpandedView_L=y
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310
SbieCtrl_HideMessage=2204,RpcSs (-1)
SbieCtrl_ReloadConfNotify=n
SbieCtrl_EditConfNotify=n

[DefaultBox]

ConfigLevel=7
AutoRecover=y
Template=IExplore_Cookies_DirectAccess
Template=Thunderbird_PGP
Template=AdobeDistiller
Template=AdobeAcrobat
Template=Eudora
Template=Thunderbird
Template=Opera_Bookmarks_DirectAccess
Template=IExplore_History_DirectAccess
Template=BlockPorts
Template=IExplore_ProtectedStorage
Template=IExplore_Favorites_DirectAccess
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
Enabled=y
NeverDelete=n
DeleteCommand=%SystemRoot%\System32\cmd.exe /c RMDIR /s /q "%SANDBOX%"
DropAdminRights=y
BoxNameTitle=n
BorderColor=#00FFFF,off
OpenFilePath=D:\Downloads\
OpenFilePath=%Favorites%\
OpenFilePath=D:\Data\Downloads\
OpenFilePath=D:\Data\Eudora\
OpenFilePath=C:\Program Files\Qualcomm\Eudora\

[L]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=IExplore_Cookies_DirectAccess
Template=Thunderbird_PGP
Template=Thunderbird
Template=Opera_Bookmarks_DirectAccess
Template=IExplore_ProtectedStorage
Template=IExplore_Favorites_DirectAccess
Template=IExplore_History_DirectAccess
Template=BlockPorts
Template=AdobeDistiller
Template=AdobeAcrobat
Template=Eudora
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
DeleteCommand=%SystemRoot%\System32\cmd.exe /c RMDIR /s /q "%SANDBOX%"
AutoDelete=y
NeverDelete=n
BlockDrivers=y
BlockWinHooks=y
BlockSysParam=y
BlockPassword=y
DropAdminRights=y
OpenFilePath=%Favorites%\
OpenFilePath=D:\Data\L\Downloads\
OpenFilePath=D:\Data\Downloads\
OpenFilePath=D:\Data\L\Thunderbird\
OpenFilePath=C:\Program Files\Mozilla Thunderbird

[doveman]

bump

[Guest10]

If one user can open PDF's but the other cannot, with the same sandboxes, then it sounds like there's a difference outside of Sandboxie.
Is there a difference in permissions between them?

Path to Foxit Reader's IE Active-X plug-in:
C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx
Try with Drop Rights unchecked, to see if that matters.
----
Other comments:
Why the extra "\" in:
FileRootPath=D:\Sandbox\\%SANDBOX%

A result of your editing?
SbieCtrl_BoxExpandedView_L=y[/

User "l" had a problem with one of Sandboxie's processes not starting, or slow to start?
SbieCtrl_HideMessage=2204,RpcSs (-1)
Is it all right now? Delete the line, or forget messages: Configure > Forget Hidden Messages

Not related to the problem, but allowing any program direct access to TB's program files in sandbox [L] - Why?
OpenFilePath=C:\Program Files\Mozilla Thunderbird

Not needed in [L]:
OpenFilePath=D:\Data\L\Thunderbird\
already direct access to profile files by using: Tmpl.Thunderbird.l=D:\Data\L\Thunderbird\Profiles\c5.default

[tzuk]

Please check if version 3.69.02 happens to fix your problem doveman.

I ran across some issues with multiple SandboxieRpcSs from different user accounts in the same sandbox and fixed them in version 3.69.02.

It might be related to your problem.

[doveman]

If one user can open PDF's but the other cannot, with the same sandboxes, then it sounds like there's a difference outside of Sandboxie.
Is there a difference in permissions between them?

They each have their own Sandbox. One uses DefaultBox, the other L.

Path to Foxit Reader's IE Active-X plug-in:
C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx
Try with Drop Rights unchecked, to see if that matters.

Thanks, I'll try that although both Sandboxes have Drop Rights set.
----

Other comments:
Why the extra "" in:
FileRootPath=D:\Sandbox\\%SANDBOX%

A result of your editing?
SbieCtrl_BoxExpandedView_L=y[/

Probably, I don't have the original to hand at the moment to check.

User "l" had a problem with one of Sandboxie's processes not starting, or slow to start?
SbieCtrl_HideMessage=2204,RpcSs (-1)
Is it all right now? Delete the line, or forget messages: Configure > Forget Hidden Messages

That was probably when Foxit Reader fails to open.

Not related to the problem, but allowing any program direct access to TB's program files in sandbox [L] - Why?
OpenFilePath=C:\Program Files\Mozilla Thunderbird

Not needed in [L]:
OpenFilePath=D:\Data\L\Thunderbird\
already direct access to profile files by using: Tmpl.Thunderbird.l=D:\Data\L\Thunderbird\Profiles\c5.default

Thanks, I'll tidy those up.

[doveman]

Please check if version 3.69.02 happens to fix your problem doveman.

I ran across some issues with multiple SandboxieRpcSs from different user accounts in the same sandbox and fixed them in version 3.69.02.

It might be related to your problem.

Thanks, it's actually using a separate Sandbox for each user but I'll try 3.69.02 and see if it helps.

[doveman]

I've just tried 3.69.05 and it's the same I'm afraid.

When user1 opens IE Sandboxed, it no longer shows the Java addons as loaded as it does when running unsandboxed.

When user2 runs IE Sandboxed, PDFs will not open with the Foxit Reader plugin. I can save them and open them outside the browser. Running IE unsandboxed they open fine inside IE. If I try with user1 using the same Default Sandbox, it works fine. I tried unchecking Drop Rights but that didn't make any difference.