Double-clicking on spooler list adds printer to settings

[LongTymeFan]

I had a difficult time trying to get my Epson printer to work over the network. I wound up with:

OpenFilePath=E_TARNRUE.EXE,\\Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUB
OpenFilePath=E_TARNRUE.EXE,\\Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
OpenFilePath=E_TARNRUE.EXE,\\Device\HarddiskVolume3\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\E_TCXRUE.CFX
OpenFilePath=E_TARNRUE.EXE,\\Device\HarddiskVolume3\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\E_TCXRUE.USX
OpenFilePath=firefox.exe,\\Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUB
OpenFilePath=firefox.exe,\\Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
OpenFilePath=firefox.exe,\\Device\HarddiskVolume3\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\E_TCXRUE.CFX
OpenFilePath=firefox.exe,\\Device\HarddiskVolume3\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\E_TCXRUE.USX

although it's possible some entries aren't needed. The most frustrating part was even when I had it right according to one thread on the subject, it turned out another thread divulged that a double-slash was needed in order to print across a network. Before fixing this, when this sucker printed, double-clicking worked about half the time. When I actually tried to print, I would have to double-click maybe 20x.

It shouldn't be this hard, especially for anyone who is not a techie, to run their proggie in a sandbox. Instead of green-lighting only the current process, and getting TONS of error messages, each double-click should conveniently add, e.g., in my case, one of the above entries, to the configuration file. Must each person who uses Sandboxie sift through the forums and dredge up this obscure bit of arcania? Enabling the current process is a half measure, and the SAME errors keep popping up again and again, even when I haven't restarted the browser, and I go to print something else anew. Like any decent firewall software, it should be up to the user to inspect the privilege being requested, and green-light it or not long-term when prompted. This, I'm sure, will make what is undoubtedly a frustrating experience for many users, into one that gives the impression of a well thought out and designed piece of software. Sorry to say it so flatly, but I found this pretty frustrating, as currently designed.

[Barb@Invincea]

Hello LongTymeFan,

Let's see if we can work on narrowing it down, and then maybe create a template for EPSON printers. I do not have one to test the behavior, so I will need your help to get this sorted out.

I found some related topics, please see below:
viewtopic.php?p=112086#p112086
viewtopic.php?p=119945#p119945

Try this in a new Sandbox (so the one that is currently working does not get modified) and see if you can print from Firefox afterwards:
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\*.CFX
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\*.USX
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\PRINTER\*.AUD
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\PRINTER\*.AUB

Just to be on the same page, Sandboxie is not a Firewall and it will not behave as such. It works by isolating applications in order to prevent them from modifying your host (so, it is actually working as expected when blocking those files. However, we can always punch some holes in it via a templates in order to allow compatibility and make things more convenient).

Regards,
Barb.-

[LongTymeFan]

I just tried to kick off a print using the above rules, and got tons of:

SBIE1319 Blocked spooler print to file, [7136] firefox.exe, \Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
SBIE1320 To allow print spooler to write outside the sandbox for this process, please double-click on this message line

:/

Trying your settings. I am fully aware SBIE is not a firewall. Note that my msg was NOT a plea for help. It was about improving atrocious GUI.

[Barb@Invincea]

Hello LongTymeFan,

After you click on the message, are you able to print?
That is the expected behavior, you will get a message when you try to print, you;ll have to manually allow it and re-do the print - at which point it should start printing normally.

Regards,
Barb.-

[LongTymeFan]

Currently, I've got:

OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\*.CFX
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\EPSON ET-2650 Series\ConvBinData\*.USX
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\PRINTER\*.AUD
OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\PRINTER\*.AUB
OpenFilePath=E_TARNRUE.EXE,%SystemDrive%\ProgramData\EPSON\PRINTER\*.AUB
OpenFilePath=E_TARNRUE.EXE,\\Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUD

Now, I get

SBIE1319 Blocked spooler print to file, [5916] E_TARNRUE.EXE, \Device\HarddiskVolume3\ProgramData\EPSON\PRINTER\EPAUDF01.AUD
SBIE1320 To allow print spooler to write outside the sandbox for this process, please double-click on this message line

I have to double-click on the message 10 or 12 times; and then it prints.

Fun stuff. I maintain that I shouldn't have to double-click on it more than once ... EVER.

[APMichael]

I would make it simple and would try following two lines:

Code: Select all

OpenFilePath=firefox.exe,%SystemDrive%\ProgramData\EPSON\*
OpenFilePath=E_TARNRUE.EXE,%SystemDrive%\ProgramData\EPSON\*

[Barb@Invincea]

Hello LongTymeFan ,

I have to double-click on the message 10 or 12 times; and then it prints.

Are you trying to print multiple files? What are your exact repro steps?
What happens if you try to print from other programs (other browsers and applications)?

If the message appears several times, just click on once of its instances, then close it and re-try printing.

Also, please let us know if the workaround suggested by APMichael worked for you.

Regards,
Barb.-

[LongTymeFan]

No, I'm not trying to print multiple files. One single print of one single page was requiring ~8-10 double-clicks.

> If the message appears several times, just click on once of its instances, then close it and re-try printing.

Shouldn't that be as good as trying to print, doing it e.g. 10 times, and trying it again, and having to double-click about as many times?

The workaround suggested by APMichael appears to be working for me; although as above, previous fixes seemed to work, and then started all this double-clicking requirement again.

To reproduce, I used FF Portable 55.0.1 updated to 55.0.3; and ran under SBIE 5.20. Printing a single page seemed to do all that. Double-clicking had no long-term effect, and to print a single page, double-clicking 8-10 times was needed. There seems little need to test printing of other apps, as it seems to be working now.

So far, this seems to solve my problem. Since the offending file is named in the error, but a rule for it has been created, and FF and SBIE control started and stopped, I'd take it it was not working as designed. The printer is an Epson ET-2650 Series printing over a network which had the actual driver installed on another XP machine. When I installed the printer for this computer, it seemed to find the Win7 driver. Printer Properties identifies it as Epson printing system v. 2.5. I've been putting my definitions in the Global section. I don't foresee a time when I have an app that I want its printing abilities to be inactivated by a sandbox. After all, will an attacker write an attack for each printer driver, or even dozens of the popular ones? Seems like they'd try more universal routes.

Thanks for all you help, for a great protection program, and esp. to APMichael for the rule that finally worked. I'll let you know if it starts all that double-click stuff again.

[APMichael]

I'm glad I was able to help.

It could happen again if you try to print from another sandboxed application.

Then you can simply add an additional rule with the ".exe" shown in the SBIE1319 error message, e.g. for Internet Explorer:

Code: Select all

OpenFilePath=iexplore.exe,%SystemDrive%\ProgramData\EPSON\*

Or you can replace the previous rules with this one, to allow printing for all sandboxed applications:

Code: Select all

OpenFilePath=%SystemDrive%\ProgramData\EPSON\*

[LongTymeFan]

Latest error:
SBIE1319 Blocked spooler print to file, [5444] firefox.exe, \Device\HarddiskVolume3\Windows\Temp\SPL726F.tmp

Still, it printed. Trying newest rule.

[APMichael]

For that case you have to add an additional rule:

Code: Select all

OpenFilePath=firefox.exe,%SystemDrive%\Windows\Temp\*.tmp