Sandoboxie, FirefoxPortable and passwords

Please post your problem description here

Moderator: Barb@Invincea

Post Reply
BarbaPeru
Posts: 5
Joined: Wed Oct 10, 2018 3:42 am

Sandoboxie, FirefoxPortable and passwords

Post by BarbaPeru » Wed Oct 10, 2018 4:20 am

Hi all, I returned to SandBoxie after sever years. I have an issue with SandBoxie (registered version) and FirefoxPortable. I have three sandboxes (work, personal and generic) that point to three different firefox portable folders (named of course work, personal and generic). Every installment have its settings and password files. FF folders are on a encrypted volume and sandoxes folders are created in a ramdisk and deleted everytime I close FF. For me is ok to open FF out of sandbox every time I need to update passwords and upgrade FF. I suppose that when I launch sandboxed FF all profile files are copied on the sandbox and then FF works only on the copied files inside the sandbox, every change written in the sandbox is lost. The issue is about password files, logins.json it is not copied in the sandbox, so when I need to insert credentials username field is filled, but I have to insert password by hand. I tried enabling direct access to password file for FF, but nothing changes. If I launch FF outside Sandboxie all is working fine.

Windows 10 64bit
SandBoxie 5.26
The issue occur even in a new sandbox created with default config (none)
Firefox 62.0.3
AV is Cisco AMP for Endpoints

Any idea?

Thanks.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2732
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandoboxie, FirefoxPortable and passwords

Post by Barb@Invincea » Wed Oct 10, 2018 9:38 am

Hello BarbaPeru,

Your report sounds similar to this one: viewtopic.php?p=134725#p134725

Let me know if that helps. Otherwise, provide all of the required information, including repro steps:
viewtopic.php?f=11&t=19746

Regards,
Barb.-

BarbaPeru
Posts: 5
Joined: Wed Oct 10, 2018 3:42 am

Re: Sandoboxie, FirefoxPortable and passwords

Post by BarbaPeru » Thu Oct 11, 2018 9:35 am

Hi, I tried several steps, but none is working:

I installed FFPortable from scratch (note that on the computer I do not have FF installed apart from the portable version)
I deleted and recreated the sandbox with default config
I deleted sandboxie config in order to recreate a standard installation
I tried giving to sandboxed FF ro access to logins.json iside the FFPortable folder

Nothing worked.

My system is:

Windows 10 64bit
SandBoxie 5.26
The issue occur even in a new sandbox created with default config (none)
Firefox 62.0.3
AV is Cisco AMP for Endpoints

Reproducing the issue is very simple:

download FirefoxPortable and install it
launch it out of any sendbox
open a webpage that requires login (I used sandBoxie forum)
save the password and verify that it is saved inside firefox
close not sandboxed FF
launch FF inside SandBoxie
verify that no password exists in password manager

If you close sandboxed FF and open it again out of sandbox the password is in the FF password manager

I check the sandbox and I noted that key4.db exists inside sandbox, but not the file logins.json.

Thanks, Pietro.



----------MERGED POST -----------------
I forgot a couple of info in my previous message, all configuration of FF are saved correctly, into "Privacy & Security" the configuration "Ask to save logins..." works (if I change it outside sandbox I see the change when I launch FF in the sandbox), "Master password" and "Saved Logins" do not works, the changes made outside the sandbox are not present in sandboxed FF.

The second thing I forgot, I delete the sandbox contents every time FF is closed.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2732
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandoboxie, FirefoxPortable and passwords

Post by Barb@Invincea » Thu Oct 11, 2018 10:09 am

Hello BarbaPeru,

Please provide the path to your Firefox Portable profile.

These 3 locations are involved in the passwords template:
OpenFilePath=firefox.exe,%Tmpl.Firefox%\logins.json
OpenFilePath=firefox.exe,%Tmpl.Firefox%\signons.sqlite
OpenFilePath=firefox.exe,%Tmpl.Firefox%\key*.db

Regards,
Barb.-

BarbaPeru
Posts: 5
Joined: Wed Oct 10, 2018 3:42 am

Re: Sandoboxie, FirefoxPortable and passwords

Post by BarbaPeru » Thu Oct 11, 2018 10:22 am

Hi Barb, the path is a thing similar to:

Q:\Software\FirefoxPortableWork

or

Q:\Software\FirefoxPortablePrivate

Where I have to put these configuration? In a template? So if I have three separate FFPortable installation I need three templates? (never used templates before, I need to RTFM ;-) )

Thanks, Pietro.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2732
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandoboxie, FirefoxPortable and passwords

Post by Barb@Invincea » Thu Oct 11, 2018 10:54 am

Hello BarbaPeru,

By default, Sandboxie has read only access to your folders, that's why I wanted the full path to your portable version of Firefox. (I tested FF portable, it works as expected on my end) .

The next thing to try would be :
Create a new Sandbox with default settings (make sure the copy settings section is set to none)
Right click on the new Sandbox--> Sandbox settings -> Resource Access
File Access--> Read Only Access
Click Edit/Add
And enter these 3 entries, one at a time
Q:\Software\FirefoxPortablePrivate\Data\profile\logins.json
Q:\Software\FirefoxPortablePrivate\Data\profile\key*.db
Q:\Software\FirefoxPortablePrivate\Data\profile\signons.sqlite
Apply and Ok
Configure --> Reload configuration
Empty the contents and retry

If this fails, remove the above listed, and do Direct Access instead of Read Only access.
Let me know the outcome.

Regards,
Barb.-

BarbaPeru
Posts: 5
Joined: Wed Oct 10, 2018 3:42 am

Re: Sandoboxie, FirefoxPortable and passwords

Post by BarbaPeru » Fri Oct 12, 2018 4:55 am

Hi, thanks for the support, I tried both the suggestions and no one works. I tried to uninstall sandboxie and to install it again, but it was not useful. Here my configuration:

Code: Select all

[GlobalSettings]

Template=BitVise
Template=WindowsRasMan
Template=SynapticsTouchPad
Template=WindowsLive
Template=OfficeLicensing
Template=OfficeClickToRun

[DefaultBox]

ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Enabled=y

[UserSettings_0C860214]

SbieCtrl_UserName=xxx
SbieCtrl_NextUpdateCheck=1539419780
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_BoxExpandedView=DefaultBox,prova
SbieCtrl_WindowCoords=200,150,1237,703
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=n

[prova]

Enabled=y
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
OpenFilePath=Q:\Software\FirefoxPortable\Data\profile\key*.db
OpenFilePath=Q:\Software\FirefoxPortable\Data\profile\logins.json
OpenFilePath=Q:\Software\FirefoxPortable\Data\profile\signons.sqlite
Thanks, Pietro.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2732
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandoboxie, FirefoxPortable and passwords

Post by Barb@Invincea » Fri Oct 12, 2018 9:45 am

Hello BarbaPeru,

I am sorry but I cannot reproduce this issue. I do recommend that you try to install FirefoxPortable on a non encrypted location (for testing purposes) and see if that makes a difference.

Another thing I did not test was your antivirus, so you may want to try -again for testing purposes- disabling it and see if that has any impact.
Otherwise, perhaps reinstalling FirefoxPortable and creating a new Sandbox with default settings may do the trick for you.

Regards,
Barb.-

BarbaPeru
Posts: 5
Joined: Wed Oct 10, 2018 3:42 am

Re: Sandoboxie, FirefoxPortable and passwords

Post by BarbaPeru » Fri Oct 12, 2018 10:14 am

OK, probably I found something, I have this disks situation:

C
A ram disk
E usb key unencrypted
Q encrypted volume

If I put FFPortable on E or Q sandbox does not work, if I put FFPortable on A or C sandbox works, so the issue could be how the operating system mount the devices. Could you investigate this? For me is very important to have FFPortable on an encrypted drive and it is very important to use sandbox.\

Thanks, Pietro.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2732
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandoboxie, FirefoxPortable and passwords

Post by Barb@Invincea » Fri Oct 12, 2018 11:06 am

Hello BarbaPeru,

Regarding the encrypted volume, I cannot test that, you may need to reach out to the vendor to find out how do things work for it. You can run a forums search to see if the one you are using has been reported already (but this is outside scope).

I did test installing FF portable on to an external USB drive and the results did not change. Sandboxie has read only access to the files and can see passwords I saved outside the Sandbox. If you have any additional repro steps for me, I will be happy to try them.

Regards,
Barb.-

Post Reply

Who is online

Users browsing this forum: Google [Bot], Venga and 15 guests