The program you installed in the sandbox as is now by default settings can read all files in the computer. What you want do now are 2 things:DanM wrote: ↑Fri Jun 09, 2017 7:22 pmI installed the .exe file program right into the Sandbox. I did not install it outside and then Sandbox it, so wouldn't the (sandbox settings>Resource access>File access>Read only access) being blank mean no read access. I want the programs in the sandbox to read nothing but whatever it needed to install itself. So I have none on the list for "files you might want to allow programs in the sandbox to read".
1.This one can put your mind at ease completely. If the program you installed in the sandbox does not need internet access to function, you can block all programs in the sandbox from connecting to the internet. Remember, if programs can not access the internet, they cant steal your files and phone home. So, to block all programs from having internet access go to:
sandbox settings>Restrictions>Internet access
There you select "Block all programs"
2. Block sandboxed programs from reading sensitive files and folders by adding them in;
sandbox settings>Resource access>File access>Blocked access, Click Add for navigating to the files and folder you want to block access. Theres more but this is a good start.
I got baseball now, have to go but I ll be back later.