Drop Rights - auto revert

Ideas for enhancements to the software
Post Reply
henryg
Posts: 552
Joined: Wed Nov 22, 2006 9:38 am

Drop Rights - auto revert

Post by henryg » Tue Jul 19, 2011 7:25 am

I like the new feature that allows changing rights dynamically if a program requires it eg for testing new programs, but would it be possible to have the rights auto-revert once that instance of the sandbox has been closed/deleted?
Henry

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Wed Jul 20, 2011 8:54 am

The point of this change was to make it easier for people who just start with Sandboxie and fairly quickly see the error messages and not sure what to do about it. What you're asking is to complicate this change with more pop-up boxes and I'm not sure I like it.

(I say more pop-ups, because it would be irressponsible to change a setting and not tell you about it. On the other hand enhancing the initial message box to have the option to "turn it off now but turn it back on later" is also a complication in a message box that already has too much text.)

But perhaps I can give the option to customize the tray icon menu so you can have stuff like a Drop Rights and Sandbox Settings quick access options, if you want them. (I know some people would definitely like to see a Sandbox Settings command there!)
tzuk

henryg
Posts: 552
Joined: Wed Nov 22, 2006 9:38 am

Post by henryg » Wed Jul 20, 2011 12:30 pm

My viewpoint is slightly different. I run with drop-rights enabled by default, and can occasionally get caught out by (mainly) new programs that need full rights; and the new pop-up is a great time saver. I am also using Win 7 64 bit so it is more important, and I don't want to run with higher rights ongoing. As currently implemented, if I forget to go back and manually change the sandbox setting, the rights remain elevated with all that implies for security - the same applied before the new option of course.

I take your point about it being "irresponsible to change a setting and not tell you about it", but this would not be the case if the start option message said it was a temporary rights elevation. It may also not suit everyone, unless it was optional behaviour, but I see that brings its own issues in relation to ease of use. I also don't know how hard it would be to implement.

Having more tray icon options would make things easier, so yes please, but it is not as secure as I would like in this instance.

[It occurs to me that I could fudge things using a batch file on pc startup to copy across a default ini file, but it is not ideal and would need to happen before the Sandboxie control loads]
Henry

henryg
Posts: 552
Joined: Wed Nov 22, 2006 9:38 am

Post by henryg » Thu Jul 21, 2011 9:58 am

By coincidence, I tried a program today which required greater rights, but forgot to change them back until I was checking my settings generally after installing the new beta. Totally unintended, promise :)
Henry

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Fri Jul 22, 2011 5:58 am

Have you considered a separate sandbox, intended to test programs, and one in which Drop Rights is always off?
tzuk

henryg
Posts: 552
Joined: Wed Nov 22, 2006 9:38 am

Post by henryg » Sat Jul 23, 2011 12:32 pm

Silly me, no! Why do things simply when it can be complicated :roll: Thanks.
Henry

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests