steamwebhelper.exe running in a Sandbox

[Craig@Invincea]

Courtesy of @Rooj
In case its of use to anyone else, I recently began sandboxing steamwebhelper.exe (the only unsandboxed browser left on my system at the time) while avoiding the headache of a full steam sandbox. The benefit I guess is that you can download and run games without extra rules being needed, but the webbrowser side of steam should be sandboxed at all times.

In order to do the same you need to add steamwebhelper.exe as a forced program... You then need to add IPC access otherwise steam locks up and runs terribly. To do this add the following in IPC Access -> Direct Access:

\Sessions\1\BaseNamedObjects\SteamChrome_*

Once the above is in place Steam will happily run and all steamwebhelper processes will automatically run within the chosen sandbox. For those that hate steamwebhelper.exe (I personally don't have an issue with it) it means you can also deny the process internet access independently of steam which avoids unnecessary memory usage etc.

Not suggesting you do the same but I also added steamerrorreporter.exe as a forced program, then only allowed webhelper to run in the sandbox. In this way steamerrorreporter is unable to start and so is unable to send random memory dumps to valve whenever it feels like it.