Page 1 of 1

Drop Rights - auto revert

Posted: Tue Jul 19, 2011 7:25 am
by henryg
I like the new feature that allows changing rights dynamically if a program requires it eg for testing new programs, but would it be possible to have the rights auto-revert once that instance of the sandbox has been closed/deleted?

Posted: Wed Jul 20, 2011 8:54 am
by tzuk
The point of this change was to make it easier for people who just start with Sandboxie and fairly quickly see the error messages and not sure what to do about it. What you're asking is to complicate this change with more pop-up boxes and I'm not sure I like it.

(I say more pop-ups, because it would be irressponsible to change a setting and not tell you about it. On the other hand enhancing the initial message box to have the option to "turn it off now but turn it back on later" is also a complication in a message box that already has too much text.)

But perhaps I can give the option to customize the tray icon menu so you can have stuff like a Drop Rights and Sandbox Settings quick access options, if you want them. (I know some people would definitely like to see a Sandbox Settings command there!)

Posted: Wed Jul 20, 2011 12:30 pm
by henryg
My viewpoint is slightly different. I run with drop-rights enabled by default, and can occasionally get caught out by (mainly) new programs that need full rights; and the new pop-up is a great time saver. I am also using Win 7 64 bit so it is more important, and I don't want to run with higher rights ongoing. As currently implemented, if I forget to go back and manually change the sandbox setting, the rights remain elevated with all that implies for security - the same applied before the new option of course.

I take your point about it being "irresponsible to change a setting and not tell you about it", but this would not be the case if the start option message said it was a temporary rights elevation. It may also not suit everyone, unless it was optional behaviour, but I see that brings its own issues in relation to ease of use. I also don't know how hard it would be to implement.

Having more tray icon options would make things easier, so yes please, but it is not as secure as I would like in this instance.

[It occurs to me that I could fudge things using a batch file on pc startup to copy across a default ini file, but it is not ideal and would need to happen before the Sandboxie control loads]

Posted: Thu Jul 21, 2011 9:58 am
by henryg
By coincidence, I tried a program today which required greater rights, but forgot to change them back until I was checking my settings generally after installing the new beta. Totally unintended, promise :)

Posted: Fri Jul 22, 2011 5:58 am
by tzuk
Have you considered a separate sandbox, intended to test programs, and one in which Drop Rights is always off?

Posted: Sat Jul 23, 2011 12:32 pm
by henryg
Silly me, no! Why do things simply when it can be complicated :roll: Thanks.