search

microsoft / win32-app-isolation

Tools and documentation for Win32 app isolation
MIT License
1.27k stars 33 forks source link

[Docs]: `runFullTrust` is not necessary for AppSilo #20

Closed AndromedaMelody closed 1 year ago

AndromedaMelody commented 1 year ago

Links

https://github.com/microsoft/win32-app-isolation/blob/1f55dcd6c9708754c983f9318f7878ddb2d4b401/docs/packaging/msix-packaging-tool.md?plain=1#L58 https://github.com/microsoft/win32-app-isolation/blob/1f55dcd6c9708754c983f9318f7878ddb2d4b401/docs/packaging/msix-packaging-tool.md?plain=1#L75

Description

I try to use AppSilo without runFullTrust, and the package install successfully.

I think if we needn't any feature of Medium Integration Level, we shouldn't add restricted capability runFullTrust. As a result, the document of MSIX -> Isolated Win32 can add a step:

Delete <rescap:Capability Name="runFullTrust" /> in <Capabilities>

Screenshot 2023-05-26 000123

ddsilva-msft commented 1 year ago

@AndromedaMelody thank you for reporting this. runFullTrust is definitely not required and should be avoided for isolated Win32 applications. We'll get the image fixed.