Does sandboxie protects from process reading

[Plerian]

What i am interested to run one program but the program has built in process reading, and when i start the program the program reads my process exe files that are opened. I dont want program to read my sensitive data. If i run a program with sandboxie will that program be enclosed in sandboxie and not be able to read my process exe files ? If sandboxie cant do it is there any other program that can.

[JimC@invincea]

Plerian,

This is from the FAQ:
It should be noted, however, that Sandboxie does not typically stop sandboxed programs from reading your sensitive data. However, by careful configuration of the ClosedFilePath and ClosedKeyPath settings, you can achieve this goal as well.

-Jim

[Buster]

Plerian,

This is from the FAQ:
It should be noted, however, that Sandboxie does not typically stop sandboxed programs from reading your sensitive data. However, by careful configuration of the ClosedFilePath and ClosedKeyPath settings, you can achieve this goal as well.

-Jim

Does your reply answer his question?

Your reply is refered to avoid sandboxed processes reading certain files from specified file paths from disk, but Plerian asks about sandboxed processes reading other processes being executed, that means reading from memory, therefore I doubt ClosedFilePath and ClosedKeyPath helps.

What do you think?

[Peter2150]

Sandboxie doesn't stop a process from reading or writing to another process.

Plerian, I do know an app that may do what you want. It does run along side sandboxie. PM me for details

Pete

[Der Moloch]

@Peter2150

Sandboxed processes cannot write to the memory of processes outside the sandbox. You don't need AppGuard for that. Among sandboxed processes it should work, though.

[Mr.X]

@Peter2150

Sandboxed processes cannot write to the memory of processes outside the sandbox. You don't need AppGuard for that. Among sandboxed processes it should work, though.

Agreed. But if AppGuard can work in that area, rather in both areas, why not to add this extra layer for security?

[RooJ]

You may want to try the sandboxie extra DLL by Wraithdu:

http://forums.sandboxie.com/phpBB3/view ... =22&t=4885

The effects of using this DLL on sandboxed processes are as follows:

- block system-wide enumeration of running processes and threads (includes Toolhelp32 and PSAPI functions)
- block access to unsandboxed processes - cannot open processes, or read their memory
- prevent sandboxed processes from calling the BlockInput function (blocks mouse and keyboard input)
- prevent sandboxed processes from reading window titles or control text

R

[Peter2150]

You may want to try the sandboxie extra DLL by Wraithdu:

http://forums.sandboxie.com/phpBB3/view ... =22&t=4885

The effects of using this DLL on sandboxed processes are as follows:

- block system-wide enumeration of running processes and threads (includes Toolhelp32 and PSAPI functions)
- block access to unsandboxed processes - cannot open processes, or read their memory
- prevent sandboxed processes from calling the BlockInput function (blocks mouse and keyboard input)
- prevent sandboxed processes from reading window titles or control text

R

TWo things.

1. That font color makes the post almost impossible to read.

2. One big disadvantage over using that DLL instead of Appguard. Instead of 2 programs running as designed and therefore supportable, you have one program running in an unsupported configuration.

If you are a very experience user, give it a try, but otherwise use caution.

[RooJ]

TWo things.

1. That font color makes the post almost impossible to read.

Thanks for the heads up, colour looked fine on my screen but I've edited it anyway.

2. One big disadvantage over using that DLL instead of Appguard. Instead of 2 programs running as designed and therefore supportable, you have one program running in an unsupported configuration.

If you are a very experience user, give it a try, but otherwise use caution.

A good point and I should've mentioned, I don't know how malicious the software is but it's possible that the software could avoid API hooks through clever coding. Still, the options there and may fit your needs.

[Mr.X]

Still, the options there and may fit your needs.

Much thanks Rooj.
Didn't know about this alternative. Interesting indeed, and I agree that alternative stills there.

[Plerian]

anyone who can help me set up DLL by Wraithdu for sandboxie pm me. I am having problems setting it up. And i dont quite understand how the Test Program injtest works ?