Open/Closed settings exclusions

[wraithdu]

It would be nice to have an option in the GUI for making exclusions of the Open/Closed settings, ie

ClosedFilePath=!firefox.exe,some\path

BTW, can you do

OpenFilePath=!%Personal%

not that you'd want to do that, it would actually be pretty silly. But I still wanna know if you can

EDIT -

tried it, and ^^^^^ that doesn't work. The ! exclusion only works for program names.

[SnDPhoenix]

Yeah, I was wondering the same thing. From the GUI you can block access to files/folders for all sandboxed programs, but you (currently) can't block access to file/folders for all but one sandboxed programs. Also, (not to sidetrack this thread or anything but) theres one other thing you can't edit from the GUI, and that is the tracing options, anyone else noticed that?

[tzuk]

I'll give you a hint. "The list above applies to" is not a simple drop-down list, but an editable combobox.

SnDPhoenix, trace was never intended to be in the GUI. Trace is hardly ever used, by hardly ever anyone, and it's definately not the trace most people would expect. Putting it into the GUI would serve no purpose other than to confuse most people.

[SnDPhoenix]

SnDPhoenix, trace was never intended to be in the GUI. Trace is hardly ever used, by hardly ever anyone, and it's definately not the trace most people would expect. Putting it into the GUI would serve no purpose other than to confuse most people.

Yeah, I figured thats probably why it isn't in the GUI.

I'll give you a hint. "The list above applies to" is not a simple drop-down list, but an editable combobox.

Ok, whoa! Call me stupid, but that just confused me... So let me get this straight, lets say I don't want "C:\Texts" to be accessible to any sandboxed programs but Notepad. So I would goto one of the sandboxes, click on "Resource Access -> File Access -> Blocked Access", then I add "C:\Texts" to the list right? Now, by default, in the dropdown list it would say "All Programs" meaning that the path I just added "C:\Texts" isn't accessible by any sandboxed programs. Yet that dropdown box is where im supposed to add "Notepad"? But if I did that, then "C:\Texts" would be accessible by all sandboxed programs except Notepad, which is the opposite of what I wanted to achieve. Or am I supposed to close off "C:\Texts" for "All Programs", and then goto "Full Access" and allow Notepad access to "C:\Texts", but if I did that, it wouldn't matter since Blocked Access takes precedence over any other "File Access" setting, so it wouldn't work. Oh man, now you see how confused the poor phoenix is...

[wraithdu]

I think what he means (and I kinda figured this out by looking at the 'Internet Access' setting) is in the combo box you type -

!notepad.exe

and that takes care of it. I'm still anxiously awaiting the ability to block access by an exclusion list. In other words, blocked to all programs but a.exe,b.exe,c.exe.... etc.

[tzuk]

Perhaps the layout in that settings page is less than optimal, but the idea is that you first select which program to adjust (through the bottom combobox), only then you start adding particular resources you want to open or close.

So when you first select the program, you can use the Add Pgm button, the drop down list, or you can type the name. And when you type the name, you can also use excalamation point for negation.

[SnDPhoenix]

Oh, Ok, I think I understand now. So I would first type in "!Notepad.exe" and then add "C:\Texts\" as a blocked path. That way, that path would be blocked off to every sandboxed program, except for Notepad since I typed in "!Notepad.exe", right?

[tzuk]

Right.