search

SafeExamBrowser / seb-win-refactoring

Safe Exam Browser for Windows.
https://www.safeexambrowser.org/news_en.html
Mozilla Public License 2.0
170 stars 109 forks source link

gotomeeting couldn't deactivate from prohibited app list #805

Open ckorge opened 6 months ago

ckorge commented 6 months ago

even if i remove the check in column 'active' for g2mcomm.exe SEB will still block the gotomeeting App.

maybe this problem is a result of this double code lines below?

https://github.com/SafeExamBrowser/seb-win-refactoring/blob/731a7485527d84cca4bb701dcc84df6e8fb76335/SafeExamBrowser.Configuration/ConfigurationData/DataValues.cs#L125-L124

dbuechel commented 6 months ago

The live application log can help you resolve this issue (see https://safeexambrowser.org/windows/win_usermanual_en.html#SecurityPane > Allow access to application log etc.) as it reveals exactly which application is being blocked and why.

ckorge commented 2 months ago

As the error still exists, I would like to make another attempt here to ask for a correction. Screenshot 2024-06-10 131759

If the application is not removed from the blacklist, it appears twice in the log. 

2024-06-10 13:15:21.029 [01] - INFO: Starting keyboard interception...
2024-06-10 13:15:21.032 [01] - INFO: Starting mouse interception...
2024-06-10 13:15:21.034 [01] - INFO: Initializing applications...
2024-06-10 13:15:21.451 [01] - DEBUG: [ApplicationMonitor] Initialized 289 currently running processes.
2024-06-10 13:15:21.453 [01] - DEBUG: [ApplicationMonitor] Initialized blacklist with 46 applications: g2mcomm.exe, vlc.exe, Microsoft.Media.Player.exe, spotify.exe, obs32.exe, obs64.exe, pcmontask.exe, PCMonitorSrv.exe, strwinclt.exe, SRServer.exe, remoting_host.exe, MS-Teams.exe, CiscoWebExStart.exe, CiscoCollabHost.exe, AA_v3.exe, ptoneclk.exe, webexmta.exe, Teams.exe, join.me.sentinel.exe, join.me.exe, Telegram.exe, Zoom.exe, Element.exe, slack.exe, CamtasiaUtl.exe, CamRecorder.exe, CamPlay.exe, Camtasia_Studio.exe, CamtasiaStudio.exe, Camtasia.exe, Discord.exe, RPCSuite.exe, RPCService.exe, RemotePCDesktop.exe, beamyourscreen-host.exe, AeroAdmin.exe, Mikogo-host.exe, chromoting.exe, vncserverui.exe, vncviewer.exe, vncserver.exe, TeamViewer.exe, g2mcomm.exe, SkypeHost.exe, SkypeApp.exe, Skype.exe
2024-06-10 13:15:21.454 [01] - DEBUG: [ApplicationMonitor] Process 'g2mcomm.exe' (50660) belongs to application 'g2mcomm.exe' and needs to be terminated.
2024-06-10 13:15:21.455 [01] - DEBUG: [ApplicationMonitor] Initialized whitelist with 0 applications.
2024-06-10 13:15:21.456 [01] - INFO: The following applications need to be terminated: g2mcomm.exe.
2024-06-10 13:15:26.565 [01] - INFO: The user chose to automatically terminate all running applications.
2024-06-10 13:15:26.567 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to close process...
2024-06-10 13:15:26.572 [01] - WARNING: [Process 'g2mcomm.exe' (50660)] Failed to send close message to main window!
2024-06-10 13:15:26.572 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to close process...
2024-06-10 13:15:26.578 [01] - WARNING: [Process 'g2mcomm.exe' (50660)] Failed to send close message to main window!
2024-06-10 13:15:26.578 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to close process...
2024-06-10 13:15:26.582 [01] - WARNING: [Process 'g2mcomm.exe' (50660)] Failed to send close message to main window!
2024-06-10 13:15:26.582 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to close process...
2024-06-10 13:15:26.588 [01] - WARNING: [Process 'g2mcomm.exe' (50660)] Failed to send close message to main window!
2024-06-10 13:15:26.588 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to close process...
2024-06-10 13:15:26.593 [01] - WARNING: [Process 'g2mcomm.exe' (50660)] Failed to send close message to main window!
2024-06-10 13:15:26.594 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Attempting to kill process...
2024-06-10 13:15:26.606 [01] - DEBUG: [Process 'g2mcomm.exe' (50660)] Process has terminated within 500ms.
2024-06-10 13:15:26.622 [01] - INFO: [ApplicationMonitor] Successfully terminated process 'g2mcomm.exe' (50660).
2024-06-10 13:15:26.636 [01] - INFO: Successfully terminated application 'g2mcomm.exe'.

However, if it is defined as an exception, it only appears once. Which is still too much.

2024-06-10 13:11:02.414 [01] - INFO: Starting keyboard interception...
2024-06-10 13:11:02.417 [01] - INFO: Starting mouse interception...
2024-06-10 13:11:02.418 [01] - INFO: Initializing applications...
2024-06-10 13:11:02.824 [01] - DEBUG: [ApplicationMonitor] Initialized 289 currently running processes.
2024-06-10 13:11:02.825 [01] - DEBUG: [ApplicationMonitor] Initialized blacklist with 45 applications: g2mcomm.exe, vlc.exe, Microsoft.Media.Player.exe, spotify.exe, obs32.exe, obs64.exe, pcmontask.exe, PCMonitorSrv.exe, strwinclt.exe, SRServer.exe, remoting_host.exe, MS-Teams.exe, CiscoWebExStart.exe, CiscoCollabHost.exe, AA_v3.exe, ptoneclk.exe, webexmta.exe, Teams.exe, join.me.sentinel.exe, join.me.exe, Telegram.exe, Zoom.exe, Element.exe, slack.exe, CamtasiaUtl.exe, CamRecorder.exe, CamPlay.exe, Camtasia_Studio.exe, CamtasiaStudio.exe, Camtasia.exe, Discord.exe, RPCSuite.exe, RPCService.exe, RemotePCDesktop.exe, beamyourscreen-host.exe, AeroAdmin.exe, Mikogo-host.exe, chromoting.exe, vncserverui.exe, vncviewer.exe, vncserver.exe, TeamViewer.exe, SkypeHost.exe, SkypeApp.exe, Skype.exe
2024-06-10 13:11:02.827 [01] - DEBUG: [ApplicationMonitor] Process 'g2mcomm.exe' (35432) belongs to application 'g2mcomm.exe' and needs to be terminated.
2024-06-10 13:11:02.828 [01] - DEBUG: [ApplicationMonitor] Initialized whitelist with 0 applications.
2024-06-10 13:11:02.830 [01] - INFO: The following applications need to be terminated: g2mcomm.exe.
2024-06-10 13:11:06.993 [01] - INFO: The user chose to automatically terminate all running applications.
2024-06-10 13:11:06.994 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to close process...
2024-06-10 13:11:06.999 [01] - WARNING: [Process 'g2mcomm.exe' (35432)] Failed to send close message to main window!
2024-06-10 13:11:07.000 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to close process...
2024-06-10 13:11:07.005 [01] - WARNING: [Process 'g2mcomm.exe' (35432)] Failed to send close message to main window!
2024-06-10 13:11:07.005 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to close process...
2024-06-10 13:11:07.011 [01] - WARNING: [Process 'g2mcomm.exe' (35432)] Failed to send close message to main window!
2024-06-10 13:11:07.011 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to close process...
2024-06-10 13:11:07.015 [01] - WARNING: [Process 'g2mcomm.exe' (35432)] Failed to send close message to main window!
2024-06-10 13:11:07.016 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to close process...
2024-06-10 13:11:07.020 [01] - WARNING: [Process 'g2mcomm.exe' (35432)] Failed to send close message to main window!
2024-06-10 13:11:07.021 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Attempting to kill process...
2024-06-10 13:11:07.031 [01] - DEBUG: [Process 'g2mcomm.exe' (35432)] Process has terminated within 500ms.
2024-06-10 13:11:07.049 [01] - INFO: [ApplicationMonitor] Successfully terminated process 'g2mcomm.exe' (35432).
2024-06-10 13:11:07.066 [01] - INFO: Successfully terminated application 'g2mcomm.exe'.
dbuechel commented 2 months ago

Terribly sorry, you're right, that application appears to be duplicated indeed. I shall revise the issue for the upcoming version.

dbuechel commented 2 months ago

The issue should be resolved, please feel free to test the changes in the latest development build for version 3.8.0: https://sebdev.ethz.ch/api/buildjobs/84418ab1rvur3b9d/artifacts/SEB_3.8.0.706_SetupBundle.exe.