Allowing Sandboxed Program Access to SQL Server

If it's not about a problem in the program
Post Reply
NMEVA

Allowing Sandboxed Program Access to SQL Server

Post by NMEVA » Sun Sep 02, 2012 2:37 pm

I have a program that I need to run sandboxed so it cannot write its entries to the registry, program data etc, however this program creates and utilizes SQL Databases. I have an SQL Instance installed and setup that I need my program to be able to communicate with so it can use the database files it has, but still keep the rest of the program sandboxed.

I tried setting the Resource Access Direct Access as well as Full Access options to include C:\ProgramFiles(x86)\Microsoft SQL Server\, but it still seems to be failing to communicate with the SQL Instance. I tried searching the forums but didn't find anything that seemed applicable. Can anyone shed some light on this?

Guest10
Posts: 5124
Joined: Sun Apr 27, 2008 5:24 pm
Location: Ohio, USA

Post by Guest10 » Sun Sep 02, 2012 3:58 pm

Communicating with an unsandboxed program typically involves things like IPC Access and Window Access settings along with Direct or Full Access for folders or files, so allowing just Direct or Full Access to folders and files won't do it.

These resources are usually identified by using the Resource Access Monitor, but there's still guesswork involved in trying to identify which resources to allow in the settings.
Paul
Win 10 Home 64-bit (w/admin rights) - Zone Alarm Pro Firewall, MalwareBytes Premium A/V, Cyberfox, Thunderbird
Sandboxie user since March 2007

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Sun Sep 02, 2012 4:34 pm

Maybe you could set up an ODBC connection to the SQL server and have the connection go through TCP/IP. Just an idea.
tzuk

NMEVA

Post by NMEVA » Mon Sep 03, 2012 3:31 am

Is it possible to setup a sandbox to allow all connections, then explicitly block Program Data, Program Files, and registry entries?

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Mon Sep 03, 2012 11:00 am

Not really. One more thing you can try is to enable Sandbox Settings > Applications > Accessibility > Screen Readers. This weakens the boundary of the sandbox and might get the SQL connections working. That is if the SQL connections run through COM.
tzuk

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests