sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.54k stars 1.51k forks source link

ClosedKeyPath block everything inside sandbox #4230

Open Lukak9876 opened 2 weeks ago

Lukak9876 commented 2 weeks ago

Describe what you noticed and did

I want to close reading at the following KeyPah : HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge* Because I want to recreate Edge policies but in the sandbox : HKEY_USERS\Sandbox_USER_Test\machine\software\policies\microsoft\Edge And when I use ClosedKeyPath=msedge.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge* it blocks the path outside and inside the sandbox. Is there a way to block the KeyPath of the local machine and only consider the path present in the sandbox ?

How often did you encounter it so far?

Always

Expected behavior

Block the precise path, only outside the sandbox

Affected program

Edge

Download link

Not revelant

Where is the program located?

The program is installed only outside the sandbox.

Did the program or any related process close unexpectedly?

No, not at all.

Crash dump

No response

What version of Sandboxie are you running now?

Sandboxie v5.69.4

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression from previous versions?

No response

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

Not relevant to my request.

What is your Windows edition and version?

Windows 10

In which Windows account you have this problem?

Not relevant to my request.

Please mention any installed security software

-

Did you previously enable some security policy settings outside Sandboxie?

-

Trace log

No response

Sandboxie.ini configuration

I can't share the sandboxie.ini
offhub commented 2 weeks ago

Use WriteKeyPath

Lukak9876 commented 2 weeks ago

Use WriteKeyPath

I tried it and it works as I want, but I didn't understand how it works, if I use: WriteKeyPath=msedge.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge* Does this mean that the application can write only in the sandbox or it can also write outside the sandbox ?

offhub commented 2 weeks ago

See WriteKeyPath