Running a program that runs other programs

[Guest]

For example, launching a program through Windows Explorer. Or even more so, a program like "InCtrl", that lets you install programs through it so it could see what additions and/or changes their installations did in the registry and to folders and files.

Should I only put InCtrl in the sandbox or also any installation I want to run through it? What about launching a program through Windows Explorer? I know you gave the example of launching Notepad through a sandboxed IE and you said this Notepad launch would be sandboxed too. But installations tend to launch even more programs (because usually they decompress themselves and just then launch the real installer). So the question is if in principle a sandboxed parent or original program is guranteed to make sure its childs would be sandboxed too no matter how many levels of childs are involved?

With that out of the way, I'll finish up with a specific wild example - what if I run Sandboxie itself through another Sandboxie (unless it's impossible due to a requirement to run just one instance of it)?

Thanks!

[Guest]

Who knew this would be such a tough question...?

[tzuk]

So the question is if in principle a sandboxed parent or original program is guranteed to make sure its childs would be sandboxed too no matter how many levels of childs are involved?

Yes. (At least in priniciple.)