Prevent application from running browser to access internet

Ideas for enhancements to the software
Post Reply
Domochevsky
Posts: 125
Joined: Wed Jun 05, 2013 7:04 pm

Prevent application from running browser to access internet

Post by Domochevsky » Thu Oct 23, 2014 7:28 pm

Hey,

I do occasionally find myself in the annoying situation where a program is (without my consent) opening a web address via my browser.
Now, it does open the browser inside its own sandbox, which is ok, but I'd rather not have it have access to the browser (and by extension the internet via it) at all.
Especially since the browser will be in its default config, since all plugins and settings and such are in the browser's own sandbox.

Under Start/Run Access you can define which applications are allowed to run inside the sandbox, but I'd like to request the opposite of that, a blacklist, so I can specifically set my browser and email program to never ever be run inside any given sandbox except its own.

Buster
Posts: 2576
Joined: Mon Aug 06, 2007 2:38 pm
Contact:

Re: Prevent application from running browser to access inter

Post by Buster » Thu Oct 23, 2014 11:16 pm

Did you try using "ClosedFilePath" with the path where browser is installed?

JimC@invincea
Sandboxie Support
Sandboxie Support
Posts: 67
Joined: Mon Oct 20, 2014 12:58 pm

Re: Prevent application from running browser to access inter

Post by JimC@invincea » Fri Oct 24, 2014 9:44 am

You can force a specific browser to run in a specific sandbox. Go to the Sandbox settings for that Sandbox, then Applications, then the application/browser. The first option is "Force [browser] to run in this sandbox".

Also, you can set a program to not access the internet. In Restrictions, Internet Access, add the program you don't want accessing the internet.

It sounds like one of these should resolve what you're seeing.

-Jim

Domochevsky
Posts: 125
Joined: Wed Jun 05, 2013 7:04 pm

Re: Prevent application from running browser to access inter

Post by Domochevsky » Fri Oct 24, 2014 12:54 pm

Buster, I don't know where to set that.

Jim, neither of these things work. The browser is fully installed in its own sandbox and gets called via regular system browser association. So a sandboxed instance is started, inside of the sandbox the program uses, that called it, which I don't want. (Since the browser won't have any of its settings, addons and other security measures.)
I also don't want to deny this program entirely internet access, since it uses that to send crash reports. (And I can control that via firewall.)

Buster
Posts: 2576
Joined: Mon Aug 06, 2007 2:38 pm
Contact:

Re: Prevent application from running browser to access inter

Post by Buster » Fri Oct 24, 2014 2:16 pm

Domochevsky wrote:Buster, I don't know where to set that.
Go to "Sandbox Settings" of the sandbox you want to configure. Then open "Resource Access -> File Access -> Blocked Access".

Click in "Add Program" and select the browser(s) you want to block.

Let us know if that fits your needs.

Domochevsky
Posts: 125
Joined: Wed Jun 05, 2013 7:04 pm

Re: Prevent application from running browser to access inter

Post by Domochevsky » Fri Oct 24, 2014 3:04 pm

Buster wrote:
Domochevsky wrote:Buster, I don't know where to set that.
Go to "Sandbox Settings" of the sandbox you want to configure. Then open "Resource Access -> File Access -> Blocked Access".

Click in "Add Program" and select the browser(s) you want to block.

Let us know if that fits your needs.
Alright, that seems to work. It fails now with "Application not found". :)
Now how do I instigate that policy in all sandboxes (except the browser's) by default...

Buster
Posts: 2576
Joined: Mon Aug 06, 2007 2:38 pm
Contact:

Re: Prevent application from running browser to access inter

Post by Buster » Fri Oct 24, 2014 5:53 pm

Domochevsky wrote:Now how do I instigate that policy in all sandboxes (except the browser's) by default...
Repeat the operation for all sandboxes you want.

You could apply the policy to all sandboxes but I doubt you can do it for "all except".

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests