Permissions on the C:\Sandbox\<username> folders

If it's not about a problem in the program
Post Reply
slbox
Posts: 17
Joined: Thu Dec 27, 2012 2:42 pm

Permissions on the C:\Sandbox\<username> folders

Post by slbox » Sun Dec 30, 2012 1:50 am

I have 2 accounts on my Windows 7 machine: an Administrator and a limited user. I am logged into my limited user right now, and I can actually look at the files/directories contained under C:\Sandbox\Administrator.

Looking at the C:\Sandbox\Administrator directory, I can see that the permissions are:
Allow, Everyone, Full Control
Allow, Authenticated Users, Full Control

Going down deeper into C:\Sandbox\Administrator, I can see that subdirectories and files have these permissions:
Allow, Authenticated Users, Full Control
Allow, Administrator, Full Control

Why does the C:\Sandbox\Administrator directory allow Full Control to Everyone or Authenticated Users? It is a security problem to allow limited users to see/modify the contents of an Administrator's directory. The C:\Sandbox\limited directory has similar permissions, so that means limited users would be able to see/modify the contents of other limited users' sandboxes - also a security problem.

I can change the permissions manually, but it seems like Sandboxie should tighten up the permissions automatically.

Guest10
Posts: 5124
Joined: Sun Apr 27, 2008 5:24 pm
Location: Ohio, USA

Post by Guest10 » Sun Dec 30, 2012 11:18 am

This was just recently discussed.
Maybe this will help.

http://sandboxie.com/phpbb/viewtopic.php?t=3492
Paul
Win 10 Home 64-bit (w/admin rights) - Zone Alarm Pro Firewall, MalwareBytes Premium A/V, Cyberfox, Thunderbird
Sandboxie user since March 2007

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest