Sandboxie.ini configuration question for Internet Explorer

[RonC]

I want to run Internet Explorer sandboxed while it is being used as an integrated application (the dedicated external browser) within StarOffice, as this is by far the most convenient mode when working alongside the other components of the suite.

Explanation: when StarOffice runs, MS Internet Explorer runs as a "plug-in" (probably inaccurate terminology, but it does describe the effect), invisible to the system under the file-name of iexplore.exe. By this I mean, if you were to open Task Manager when StarOffice is "under way" with MSIE running as the integrated browser, under running services, you will see only soffice.exe, but not iexplore.exe.

I opened sandboxie.ini but didn't see any OpenFilePath or OpenKeyPath statements associated with iexplore.exe. In fact, I don't see iexplore.exe at all, and I assume this is intentional. However, I had assumed if Internet Explorer is running "under" another program, that other program would need the same rules as if the browser were running by itself.

This gets a bit complicated, but if under Sandboxie Configuration -> Sandbox Settings -> Set Forced Programs -> [X] Internet Explorer -- is checked, will Sandboxie apply the correct rules, anyway? In other words, under the above circumstances, will Sandboxie be aware that Internet Explorer is running?

If Sandboxie is unaware, then would not MSIE's File-Key parameters, etc., have to be applied to the soffice.exe configuration?

Tzuk, I am not as familiar with the internal logic of Sandboxie as you are, so it's possible that this may be another non-issue. If that's the case, then all I have to do is force Internet Explorer, and Sandboxie will take care of the rest. However, if not, could you reply with a few lines showing the configuration parameters you are using internally for Internet Explorer, so they may be manually applied to the configuration file?

I may be mistaken, but I vaguely recall that MS Internet Explorer runs in a similar fashion in some commercial software, as well. So, the reply may be helpful for others who anticipate using Sandboxie in a business environment.

[tzuk]

It sounds to me like StarOffice is embedding the IE Browser, in much the same way as Maxthon or AvantBrowser do. In this case, you cannot separate IE from StarOffice. You can sandbox the whole package "soffice.exe" -- though you would have to add "Open*Path" exclusions so you could work with your actual documents outside the sandbox.

[RonC]

I see -- you're saying I should force either/both of the IE browser shells you mentioned, then look at what is created in the sandboxie.ini file, then simply adapt that for the soffice.ini exclusions?

This I will do ASAP, although some days ago I changed the .ini ConfigLevel= to 99, and now can't remember what it was before. At this time, in spite of my making several guesses, Sandboxie is refusing to modify this file. Problem will be resolved, however, when I install the latest version, and start with a fresh file.

Would it be a good idea to have the automatically generated .ini file include a reminder for the original setting, in case someone decides to let Sandboxie take control, again? Or, put some other comment in the .ini file to prompt the user as to how to get the same effect?

[SBIE User]

. . . some days ago I changed the .ini ConfigLevel= to 99, and now can't remember what it was before.

Default is ConfigLevel=1

SBIE (Happy) User

[RonC]

Default is ConfigLevel=1

SBIE (Happy) User

Thanks! I was using 01 and wondering why it wouldn't work.

I now think I was making the matter overly complicated. I looked at what happens when Maxthon and AvantBrowser are checked. They are forced, but nothing else needs to be done to reflect that the browser is running under them.

The browser is still using the same directories and keys, running embedded or not. I should only add new entries to open paths or keys as needed for StarOffice. So, I am now thinking the topic of the first post was in fact a non-issue.

I have a good excuse -- reconfiguring the firewall to get the VoIP running, at the same time as putting StarOffice into Sandboxie ...