M2Team / Privexec

Run the program with the specified permission level (C++20 required)
MIT License
319 stars 52 forks source link

Firefox and Chrome do not run in app containers #42

Closed TahaRostamii closed 7 months ago

TahaRostamii commented 1 year ago

Firefox and Chrome can't be started in AppContainer.

Screenshot (11)

They are not executed despite the permissions I have given.

fcharlie commented 1 year ago

This problem is actually a bit complicated. Not all programs can be started under AppContainer permissions. This may be related to permissions, or it may be related to the dependencies of the program itself.

WildByDesign commented 1 year ago

Indeed, multi-process programs are much more complex. Particularly browsers because each process they spawn has a variety of unique sandboxing policies applied to them.

On a positive note, I have been running latest Firefox versions for 1-2 years now in pure LPAC (less privileged appcontainer) successfully.

It’s more secure than default Firefox and significantly faster.

I’ve been working on documenting and streamlining my process and will share the details in the next few days or so.

fcharlie commented 1 year ago

Indeed, multi-process programs are much more complex. Particularly browsers because each process they spawn has a variety of unique sandboxing policies applied to them.

On a positive note, I have been running latest Firefox versions for 1-2 years now in pure LPAC (less privileged appcontainer) successfully.

It’s more secure than default Firefox and significantly faster.

I’ve been working on documenting and streamlining my process and will share the details in the next few days or so.

👍 Great

WildByDesign commented 1 year ago

I finally put some time into documenting this and put an initial release out if you guys want to try it.

If you are using my script, it will not mess with your existing Firefox profiles. The script is very specific and also assumes that you have Firefox installed in the default location: C:\Program Files\Mozilla Firefox

EDIT: Forgot to add the link.

Link: https://github.com/WildByDesign/SandboxYourFox