-
Notifications
You must be signed in to change notification settings - Fork 51
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Co-authored-by: isaak654 <isaak654@users.noreply.github.com>
- Loading branch information
Showing
14 changed files
with
207 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Allow Raw Disk Read | ||
|
||
_AllowRawDiskRead_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.7.0 / 5.48.0. This setting can be used to disable protection which prevents elevated sandboxed processes from accessing volumes/disks for reading. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
AllowRawDiskRead=y | ||
``` | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > File Options > Allow elevated sandboxed applications to read the harddrive |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Block Screen Capture | ||
|
||
_BlockScreenCapture_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.13.6 / 5.68.6. If enabled, it will prevent sandboxed processes from accessing the images of the window outside the sandbox. For example: | ||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
BlockScreenCapture=y | ||
``` | ||
A setting similar to _BlockScreenCapture_ is [CoverBoxedWindows](CoverBoxedWindows.md). | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > General Options > Restrictions > Prevent sandboxed processes from capturing window images |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
# Cover Boxed Windows | ||
|
||
_CoverBoxedWindows_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.13.6 / 5.68.6. If enabled, it will block host processes from taking screenshots of sandboxed processes. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
CoverBoxedWindows=y | ||
``` | ||
|
||
A setting similar to _CoverBoxedWindows_ is [BlockScreenCapture](BlockScreenCapture.md). | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > Security Options > Box Protection > Prevent processes from capturing window images from sandboxed windows |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,17 @@ | ||
# Forget Password | ||
|
||
_ForgetPassword_ is a global setting in [Sandboxie Ini](SandboxieIni.md). If set in [Sandboxie Control](SandboxieControl.md) or [Sandman](PlusMigrationGuide.md), the configuration password is cleared when the main window is hidden - and will need to be re-entered in order to modify configuration settings. | ||
|
||
Usage: | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[GlobalSettings] | ||
ForgetPassword=y | ||
``` | ||
|
||
See also: [Configuration Protection](ConfigurationProtection.md). | ||
|
||
Related Sandboxie Plus setting: Options menu > Global Settings > Advanced Config > Sandboxie.ini Presets > Clear password when main window becomes hidden |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Hide Host Process | ||
|
||
_HideHostProcess_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.3 / 5.42. It is used to hide unsandboxed host processes. It can also be used to hide Sandboxie services. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
HideHostProcess=program.exe | ||
``` | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Hide Processes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Hide Other Boxes | ||
|
||
_HideOtherBoxes_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.3 / 5.42. By default, Sandboxie enables this feature, which allows processes to be hidden from other boxes. Example of disabling this setting: | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
HideOtherBoxes=n | ||
``` | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Hide Processes > Don't allow sandboxed processes to see processes running in other boxes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
# Linger Exempt Wnds | ||
|
||
_LingerExemptWnds_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.13.4 / 5.68.4. To make the lingering process monitor mechanism no longer exempt lingering processes with windows from termination. For example: | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
LingerExemptWnds=n | ||
``` | ||
|
||
Related [Sandboxie Control](SandboxieControl.md) setting: [Sandbox Settings -> Program Stop -> Lingering Programs](ProgramStopSettings.md#lingering-programs) | ||
|
||
See also: [Program Settings](ProgramSettings.md#linger). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
# Msi Installer Exemptions | ||
|
||
_MsiInstallerExemptions_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.7.2 / 5.49.0. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
MsiInstallerExemptions=y | ||
``` | ||
|
||
Use the 'MsiInstallerExemptions=y' option to allow MSIServer to run with a sandboxed system token and apply other exceptions. This option may help with installing an MSI package. | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > Security Options > Security Hardening > Allow MSIServer to run with a sandboxed system token and apply other exceptions if required |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,11 @@ | ||
# Nt Namespace Isolation | ||
|
||
_NtNamespaceIsolation_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.8.0 / 5.63.0. It can be used to disable virtualization for CreateDirectoryObject and OpenDirectoryObject - which will reduce security and remove measures to prevent name squatting. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
NtNamespaceIsolation=n | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Open Clipboard | ||
|
||
_OpenClipboard_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.7.5 / 5.49.8. It allows to disable clipboard access for a sandbox. For example: | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
OpenClipboard=n | ||
``` | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > General Options > Restrictions > Block read access to the clipboard |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
# Protect Host Images | ||
|
||
_ProtectHostImages_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.9.0 / 5.64.0. This setting can be enabled to prevent processes located outside the sandbox from loading boxed DLLs. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
ProtectHostImages=y | ||
``` | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > Various Options > Dlls & Extensions > Prevent sandboxed programs installed on host from loading DLLs from the sandbox |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
# Separate User Folders | ||
|
||
_SeparateUserFolders_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v0.2.2 / 5.41.2. It specifies whether user profile files will be stored separately in the sandbox. | ||
|
||
``` | ||
. | ||
. | ||
. | ||
[DefaultBox] | ||
SeparateUserFolders=n | ||
``` | ||
|
||
The setting in the example will result in user profile files no longer being stored separately in the sandbox. | ||
|
||
Related Sandboxie Plus setting: Sandbox Options > File Options > Separate user folders |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters