Sandboxie Support

Hi All

Can someone help me configure Sandboxie to allow Comodo Dragon.exe to print when sandboxed.

I have Win 10, Sandboxie 5.10, ann Epson SX 400 Printer.

When I try to print UNsandboxed no problem. When I try to print Sandboxed Dragon sometimes crashes or a message shows generating print preview, which never shows.

I show below the current Sandboxie config. for Dragon.exe

[Dragon]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=AutoRecoverIgnore
Template=Firefox_Phishing_DirectAccess
Template=Chrome_Phishing_DirectAccess
Template=LingerPrograms
Template=BlockPorts
Template=WindowsFontCache
RecoverFolder=%Desktop%
RecoverFolder=%Favorites%
RecoverFolder=%Personal%
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
BorderColor=#00FFFF,ttl
BoxNameTitle=-
CopyLimitKb=900000
NotifyInternetAccessDenied=y
ProcessGroup=<StartRunAccess>,dllhost.exe,GoogleUpdateOnDemand.exe,software_reporter_tool.exe,dragon.exe,WerFault.exe,splwow64.exe,e_iamtege.exe,e_iarnege.exe
ProcessGroup=<InternetAccess>,dllhost.exe,dragon.exe,WerFault.exe
NotifyStartRunAccessDenied=y
AutoDelete=y
NeverDelete=n
DropAdminRights=y
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedIpcPath=!<StartRunAccess>,*


Any help gratefully received

Thanks

terry

Do you get the SBIE message about allowing access to the printer?

Also, you can give access to the temp directory where it writes the file by using Openfilepath= to \Users\<username>\AppData\Local\Temp)

Thread here....and there are many more http://forums.sandboxie.com/phpBB3/view ... 17&t=21567

More about OpenFilePath here. http://www.sandboxie.com/index.php?OpenFilePath

Hi Craig@invincea

No I don't get the message about allowing access to the printer.

I have added "Openfilepath= to \Users\<username>\AppData\Local\Temp"

to my config file but it makes no difference.

Any other ideas.

Thanks

Openfilepath (unsandbox) dragon.

If you're not getting the print spooler notification to allow it to print and that other option doesn't work, then you'll either have to unsandbox it totally or use resource access monitor in Sandboxie control to see what resource it's trying to find.

Hi Craig

Thanks for your help. I am uploading an attachment (ResourceAccessMonitorOutput.txt in a .zip archive)

Which covers a short period in which I booted Dragon.exe sandboxed, then went to a page in which I know I cannot print from. I attempted to print several times got a notification on one ocasion about WerFault and several crashes.

I do not have the skills to interpret it, but perhaps you could look at it for me?

The config file for Dragon.exe is in the early part of this thread.

Thanks

Terry

The log didn't help very much. Dragon appears to based on Chromium, so I'd first grab beta 5.11.3 that addressed a rare issue in Google Chrome and printer (32 bit.)

I'd also add this line

OpenFilePath=c:\windows\system32\spool\printers\*

Dragon isn't a browser we normally test, so this is an unknown.

Hi Craig

Thank you that is very helpful

Terry

I just tested Comodo on SBIE Beta 5.11.3 of SBIE (Dragon v 45.12.393) without the need to open anything. Printed just fine to a Xerox network printer.

Hi Craig

Just installed v5.113 and included the openpath setting you gave me and it started printing albeit it kept throwing up messages relating to two files that are from my Epson Printer. I kept on double clicking the error message lines until they stopped appearing.

So thanks for all your help, hopefully I am in business again, and I've learnt something.

Thanks

Terry

Hi Craig

I spoke a bit too soon. I started getting the sandboxie dialog box asking me to double click on a line, initially about 6 lines to double click so that it would print.No crashes though

Tedious, for sure. Then the process would start all over again when the printer was shut down a re-started. So then I added them as open path to the config file as undernoted:

openfilepath=c:\Users\Terry\AppData\Local\Temp\*
OpenFilePath=c:\windows\system32\spool\printers\*
openfilepath=c:\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
openfilepath=c:\ProgramData\EPSON\EPSON Stylus SX400 Series\0409.E_FCF0EGE.WAT
openfilepath=c:\Windows\Temp\*

It appears to work now, the question is have I so weakened Sandboxies defence that it is not worth it. Appreciate your comment. And thanks again.

Terry

TerryWood wrote: It appears to work now, the question is have I so weakened Sandboxies defence that it is not worth it. Appreciate your comment. And thanks again.

Terry, a little while ago, at Wilders, I wrote in your thread there how you can make Comodo Dragon be the only exe that has access to the printer. That make things a little safer. You can make it that way for all the lines written above. Another thing you can do is create a separate sandbox where you allow access to the files and only use this sandbox for printing. You can make it your dedicated printing sandbox.

Bo

TerryWood wrote:Hi Craig

I spoke a bit too soon. I started getting the sandboxie dialog box asking me to double click on a line, initially about 6 lines to double click so that it would print.No crashes though

Tedious, for sure. Then the process would start all over again when the printer was shut down a re-started. So then I added them as open path to the config file as undernoted:

openfilepath=c:\Users\Terry\AppData\Local\Temp\*
OpenFilePath=c:\windows\system32\spool\printers\*
openfilepath=c:\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
openfilepath=c:\ProgramData\EPSON\EPSON Stylus SX400 Series\0409.E_FCF0EGE.WAT
openfilepath=c:\Windows\Temp\*

It appears to work now, the question is have I so weakened Sandboxies defence that it is not worth it. Appreciate your comment. And thanks again.

Terry

Are you sure these 2 are completely necessary?

openfilepath=c:\Users\Terry\AppData\Local\Temp\*
openfilepath=c:\Windows\Temp\*

Actually, none are necessary, as it works without any modifications of open file path..But if printing is still not working, one of the solutions should be tried if printing doesn't work.

This first: Then the Win Temp Others have had success with

Hi Craig

Thanks along with Curt for helping here. Let me just say that on my my machine it is not just Dragon that is problematic, but also Chromium, Chromodo and Chrome. The only exception that works literally out of the box is Opera. All Chrome derivatives.

At the moment, I am happy because I can print with Dragon, along with yourselves, bo elam has been very helpful. The question is, am I allowing to much slack in the Sandboxie System with my configuration. I can only work with what does NOT happen and what Sandboxie tells me. I will try your latest suggestions because I really do want to learn. I will report back.

Thank you all again

Terry