search

sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.73k stars 1.53k forks source link

PunkBuster service doesn't start when it is installed in the sandbox #3136

Open ghost opened 1 year ago

ghost commented 1 year ago

Describe what you noticed and did

  1. Download the latest version of PunkBuster Service Installer
  2. Launch the installer via Sandboxie
  3. Get an error message: image

Tested in Standard and Application Compartment box with all presets of Admin Rights (UAC, Drop Emulate).

How often did you encounter it so far?

Always

Affected program

PunkBuster

Download link

http://evenbalance.com/downloads/pbsvc/pbsvc.exe

Where is the program located?

The program is installed only inside a sandbox (NOT in the real system anyway).

Expected behavior

If it is technically possible, it would be expected to launch the sandboxed PunkBuster service.

What is your Windows edition and version?

Windows 7 x64 SP1

In which Windows account you have this problem?

An account with UAC protection completely turned off.

Please mention any installed security software

Microsoft Security Essentials

What version of Sandboxie are you running?

Sandboxie Plus x64 1.10.1 / 1.10.2

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (I don't remember which one).

Is it a regression?

No response

In which sandbox type you have this problem?

All sandbox types (I tried them all).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

offhub commented 1 year ago

I don't think it is possible to install PunkBuster and similar anti-cheat software in a sandbox.

See for more: https://github.com/sandboxie-plus/Sandboxie/labels/DRM%20software

isaak654 commented 1 year ago

The lead developer hasn't looked into anti-cheats yet.

If there is a way, no one else has confirmed it so far.

ghost commented 1 year ago

The lead developer hasn't looked into anti-cheats yet.

If there is a way, no one else has confirmed it so far.

I am very aware of it. However, in this case I have a feeling that it is not anti-cheat related but service-related (as the error log suggests). How does Sandboxie handle sandboxed services? Does it even support it? If not, is there any tested and recommended way of bridging a service from OS to Sandboxie? PunkBuster, in comparison to more recent anti-cheat software, is quite simple and straightforward (and also quite old). It might be a good starting point for further development in this area.

isaak654 commented 1 year ago

Two possible attempts:

ghost commented 1 year ago

Does StartService apply to OS service or a service installed in a box?

ghost commented 1 year ago

When I try to launch the service (NET START "PnkBstrA") via "Command prompt (as Admin)" from a box which has "Ask for UAC Elevation" preset I get error 1069 - from what i've found it's related to logon failure.

Also, while uninstalling the service I noticed that the uninstaller has no access to some registry entries. Might it also be the reason why the service doesn't work? I'm not aware in which part of registry PunkBuster stores its entries and which of them Sandboxie cannot access. image

DavidXanatos commented 1 year ago

Does StartService apply to OS service or a service installed in a box?

it should be able to start a service installed in a box

isaak654 commented 1 year ago

I've just tested it and the installer remains stuck at step 2 with Sandboxie Plus x64 1.10.2 as displayed here, so I'm unable to install it properly. Both standard and application compartment sandboxes have the same behavior and both Windows 7 and 10 are affected.

it should be able to start a service installed in a box

In my experience, StartService only worked once when a specific service was installed outside the sandbox.

ghost commented 1 year ago

I've also tested it with the latest version of Sandboxie (1.10.2f) and it got stuck at the same point as previously: Starting PunkBuster service ERROR

@isaak654 If your installation process also got stuck at the same point as mine - it is in fact installed (to some degree). You can can check it out by either visiting "Programs and Features" of your box, or by going into its services catalogue via "Command Prompt" and entering services.msc. The application/service is there but it is not possible to launch it. As I noticed in my previous post with the uninstalling log, it seems that the installer may not have access to some specific registry entries/places in order to install and launch it properly, and consequently, uninstalling it is also incomplete in this regard.

MitchO37 commented 1 month ago

I have just tried it again with the latest version of Sandboxie Plus (1.14.9) but the issue still occurs. image It is possible to install the service PnkBstrA but it is not possible to launch it. Any idea for a workaround/fix?