Checkpoints & Merged sandbox configurations

[Recommendations]

Checkpoints:
Permit roll-back of a sandbox to a previous state without wiping out the sandbox as a whole (convenience mostly as the same effect can be reached by start/stopping the sandbox and performing a backup of the sandbox -- but this can be a bit tedious).

Merged sandboxes:
I've configured tightly-defined sandbox configurations for different applications, but may want to run a sandbox session with both applications (i.e. e-mail and internet). Currently, I believe this requires the manual creation of a new configuration (and changes in resource requirements of any one application requires update to other sandbox configurations). It would be helpful to place tightly-defined sandbox configurations into a hierarchy and only have to create a node configuration that forms dependencies to the application-specific configurations and define any incremental configuration parameters. In this way, application resource changes do not require as significant maintenance time as present.

Thanks!

[Guest10]

I can't be sure that I understand your second recommendation, but it sounds to me like what you are referring to would be the creation of Local Templates.
http://www.sandboxie.com/index.php?Appl ... ings#local
There's really not much on the above page to guide you, but if your examine the Sandboxie file "Templates.ini", you will get more information about creating templates.
Create Local Templates and assign however many of them that you want, to individual sandboxes.
Examples from my configuration file:

[Template_Local_My_Lingering_Programs]

Tmpl.Class=Local
Tmpl.Title=My Lingering Programs list
LingerProcess=leechget.exe
LingerProcess=soffice.bin
LingerProcess=soffice.exe
LingerProcess=scalc.exe
LingerProcess=swriter.exe
LingerProcess=wmplayer.exe
LingerProcess=wuauclt.exe

[Template_Local_NitroPDF6]

Tmpl.Class=Local
Tmpl.Title=NitroPDF6
Tmpl.Url=http://www.nitropdf.com/index.asp
OpenPipePath=\Device\Mailslot\AstccMailslot*

[Recommendations]

Thought I muddied the explanation a bit....I think the templates are a great way to distribute common settings across multiple sandbox configurations, though I was thinking of an approach to aggregate custom configurations. I think I may be able to use templates to achieve my goal, though. As long as I can build a per-application template with all the same options as those present for a sandbox, I can build a sandbox configuration that uses the two or more application-specific templates as well as additional configuration options to "merge" the two templates. I suppose there are only two questions to determine whether the functionality already exists:
1) Are all sandbox configuration options available in templates that are otherwise available in a sandbox configuration?
2) What is the order of precedence for conflicting configuration options (a) among templates and (b) between templates and the sandbox configuration that references that template?

I'll look around the site for additional detail and play around a bit to see if I can create the functionality. I'll post questions to the "problems" thread. Moderator please mark this thread as resolved.

Go Bucks!

[Guest10]

Certainly you can use multiple templates, both pre-defined and local, to apply settings to sandboxes.

[(sandbox name)]
...
BorderColor=#00FFFF
BoxNameTitle=y
ConfigLevel=6
Enabled=y
RecoverFolder=%Desktop%
RecoverFolder=%Personal%
Template=AutoRecoverIgnore
Template=Firefox_Phishing_DirectAccess
Template=IExplore_Cookies_DirectAccess
Template=IExplore_Favorites_DirectAccess
Template=IExplore_ProtectedStorage
Template=LingerPrograms
Template=Thunderbird
Template=Local_My_Firefox_Exclusions
Template=Local_My_Lingering_Programs

You can also apply a template to all current and future sandboxes by specifying it under the [GlobalSettings] section.
[GlobalSettings]

Template=7zipShellEx
Template=KeyScrambler
Template=Local_NitroPDF6
...

You should be able to use settings in templates in the same way as you can use them directly in the settings for a specific sandbox.
I'm not sure that I can say much about order of precedence, except that there are settings like ClosedFilePath that will override a setting like OpenFilePath.
A Block Access setting will override an Open or a Read Access setting.