Sandboxing is the act of restricting permissions of programs to the bare minimum they require to operate.

learn more… | top users | synonyms

0
votes
0answers
21 views

LXC: Automating running an application inside a container

I'm working on a project that automatically compiles, executes and tests the output of submitted programs in C, C++, Java and Python. Obviously this needs to happen inside some sort of secured ...
1
vote
1answer
21 views

Launch executable with custom root directory

How can I launch an executable so it thinks that the root directory is at a custom path, and not at the actual root. I thought it would be possible with sandbox-exec, but I haven't found any ways so ...
0
votes
2answers
28 views

How would a 'dll missing' error be thrown when a specific web page is loaded?

I'm building a website and am working with a conversion plugin. The conversion works perfectly for me as I've tested the dependencies on my localhost, but when I moved it to my server and installed it ...
0
votes
0answers
30 views

How to manage file descriptors of a process on Linux?

I have an executable file, which is a black box for me. now I want to execute it in a protected mode that: Does not change any file on my system. Does not send any information to any other place. ...
0
votes
1answer
52 views

Will sandboxing a program protect my computer from being damaged?

I've heard from a friend that Spotify got attacked by an hacker, which results in it "damaging the hard disks" and stealing private data of the computers where the program is installed. It allegedly ...
0
votes
0answers
71 views

Make a specific program see the file-system differently on Windows

I'm using Winamp since god knows when. I have all my songs in the media library with all my mp3 files with all kind of cool statistics like how many times I've listened to each song, ratings etc. The ...
0
votes
0answers
60 views

Creating a similar application structure to the PortableApps format with ThinApp

I want to create a similar application structure to the PortableApps format vith VMWare Thinapp, but without the Source and Other folders. I don't need a lot of .ini files in order to save ...
4
votes
1answer
72 views

How to distinguish 'syscalls' form 'int 80h' when using ptrace

As far as I know, ptrace can only get syscall number by PTRACE_SYSCALL, but syscall number is different in x86 and x64. So is there any way to figure out where this syscall real origin? I am now ...
1
vote
0answers
14 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
0
votes
0answers
124 views

Running untrusted software requiring installation (Windows)?

Is there some good way to install and run untrusted software, except in a full VM? Assume running the software does not require admin privileges. Can I use a separate partition, for example (How ...
1
vote
1answer
36 views

How to run linux binary video drivers in a sandbox/isolated environment?

I don't trust any binary, but i have to use nvidia video card driver. Since xorg/video drivers runs as root and needs to access my hardware, is it possible to block internet connection to these ...
-1
votes
1answer
734 views

Alternative to Sandboxie [closed]

I've been using Sandboxie for some time now in order to run multiple instances of one program. The program has been updated and no longer runs in Sandboxie. I am looking for an alternative sandboxing ...
0
votes
1answer
60 views

Multiple Instances of 1 Program

The project at hand that I am having issues with is that I need to run a set of program models on one computer. Each model has different file configurations, but in the C:\ drive the folders are named ...
0
votes
0answers
87 views

Can user-mode Linux be compiled and run on UNIX systems?

e.g. on NetBSD or Solaris? Or does it require exclusively Linux-specific system calls, virtual filesystems, etc.? Also, if it's currently limited to Linux, what changes would be required to port it ...
0
votes
1answer
23 views

Can I provide a virtual Windows environment for my users?

I want to provide an environment where users are free to install and break whatever on their accounts without disrupting the experience of other users on the computer. Since it's in a home ...
1
vote
0answers
36 views

Is it possible to restrict access to certain URLs for individual programs?

I have a certain use case where I want to whitelist a list of URLs that a certain application can access. In other words, I want to sandbox it, but don't have access to blocking or white listing those ...
3
votes
2answers
188 views

How to block access to resources on external domain?

For example I'm browsing www.example.com At some point, some Javascript is fetched from another domain. I would like to sandbox example.com. Anything that is not hosted on example.com should be ...
0
votes
0answers
74 views

Does Safari put Java in a sandbox (properly)?

Does anybody know whether the Safari sandbox properly confines trusted Java Applets? My problem is that my bank uses Java that I have to trust this plugin since Java apparently only has the ...
0
votes
1answer
196 views

Kali Linux java

I have a Kali linux sandbox set up with a direct connection to a windows VM. I have JAR files / java exploits I want to serve using the Kali box. After I get the jar file into the Kali Box, I know I ...
1
vote
2answers
300 views

How to safely run untrusted code

I would like to download/compile/run various c/c++ libraries from the net. These are mostly half-baked, obscure and/or abandoned projects, some of them from questionable sources. How can I ensure that ...
0
votes
2answers
61 views

“Combine” multiple processes

I have an application that pops up a ton of processes in task manager (Chrome) and I want to know if there is a program that will wrap itself around them so that only one process is showing. Similar ...
0
votes
1answer
342 views

How can I run Skype under an SELinux sandbox?

I would like to run Skype under an SELinux sandbox, to protect my computer. However I get the following error: usr/bin/skype: error while loading shared libraries: /lib/libQtWebKit.so.4: cannot ...
0
votes
1answer
1k views

Can you use a Sandboxie to install multiple versions of IE?

It would seem theoretically possible to install multiple versions of IE on the same machine using Sandboxie (or any other sandbox program). To do this, you would do the following: Uninstall the ...
1
vote
0answers
24 views

Custom keyboard layout in sandboxed app?

I have a TN2056 Installable Keyboard Layout that I’ve placed in ~/Library/Keyboard Layouts. It is the default keyboard layout, and is used by all apps. But now with the new version of OmniGraffle ...
21
votes
5answers
2k views

Is there a way to see all files and registry entries that an application installs?

I am trying to figure out if there is a way to basically install an application into a sandbox, so that I can easily see all files it created and all registry entries it added without searching the ...
1
vote
2answers
150 views

Working from home: ensuring file security?

Would it be possible to ensure that documents used on a personal PC connected to the internet, could be used securely without the danger of an eavesdropper obtaining access to the file or the danger ...
1
vote
1answer
456 views

Mac OS X: file associations keep changing (though reverting it manually)

For some time now I'm experiencing an annoying behavior under Mountain Lion: While doing my daily work, the programs to open a file keep changing. For example, opening a PDF is switched to Adobe ...
1
vote
1answer
2k views

How does Google Chrome's Sandbox work?

I was reading some articles regarding Google Chrome's sandbox and watched a video but I don't have quite a full understanding of it. I read somewhere that it depends on Windows for its security so ...
3
votes
3answers
5k views

Installing an application in a sandbox to detect windows registry manipulation

I would like to know if there is a way to detect which registry settings an installer affects. Are there other options than running a full-size VM and then somehow comparing snapshots of the registry ...
1
vote
2answers
156 views

How can I prevent webpages from using JavaScript to sniff my system information?

I'd prefer not to allow webpages to access my system information. If I use NoScript, Panopticlick is only able to see my User Agent string and HTTP_ACCEPT headers. Otherwise, it can sniff way to much ...
1
vote
1answer
111 views

Is it advisable to install and keep programmes in sandboxes? [closed]

I have recently known about Sandboxie. This gave me an idea that I could install each programmes into an individual sandbox. I will then run the programmes from their sandboxes. I thought, this way, ...
0
votes
1answer
51 views

sandboxing libreoffice on Linux

I want to build multiple versions of libreoffice on a machine (Debian 6) and want to test these versions against a set of test cases automatically. I also want to test the given libreoffice version by ...
1
vote
1answer
207 views

Sandboxing Windows7 apps

Are there any software packages, that allow to selectively limit filesystem access for each application? Do they have significant impact on system performance?
0
votes
2answers
1k views

Separate Cookies Per Tab

I purchased a program that runs a .json script to purchase products from a specific website for me. The program automatically opens my browser. And I can also run multiple instances of the program at ...
0
votes
1answer
70 views

Sandboxing of files without a new user

Is it possible to isolate certain folders from all programs except one, without creating a new user? A bit like a reverse sandbox. Specifically I want to protect the .bitcoin folder from being ...
1
vote
0answers
161 views

How do I open a checked out file in a Perforce depot with an external editor on Mac OS X Mountain Lion?

I'm using p4v on OS X 10.8. Before I upgraded to Mountain Lion, I could double click a checked out file in a changelist under the "Pending" tab and the file would open in the external editor specified ...
2
votes
0answers
35 views

Install duplicate copies of an application concurrently

I've got a database application which seems to write some configuration to the registry. I'm wondering if there is a way to "sandbox" or "virtualize" (short of running a full VM) such that I can ...
0
votes
0answers
112 views

Which capabilities do Java applets executed in a browser have?

I found a document on the Oracle website, , that lists the capabilities of unsigned applets, unsigned applets with JNLP and signed applets.When i encounter an unsigned applet on a webpage (I am using ...
-3
votes
1answer
553 views

Running a sandbox inside a virtual machine inside my OS [closed]

is that even possible? As you may know, x64 microsoft system cannot ensure sandboxes/VM isolation. The problem is that a stock Windows kernel does not provide all the facilities necessary to ...
2
votes
1answer
171 views

VM sandboxing- what happens?

How exactly does VM sandbox? Surely it is still using the same hardware resources and same underlying OS? I dont get why multiple VMs on an OS is safe but multiple applications/processes can be ...
-3
votes
1answer
93 views

Virtual Windows desktop [closed]

Is there any virtual desktop software that can virtualize desktop just like a virtual desktop to sandbox (sort of like virtualization and sandbox combined). I want to create many desktop and each of ...
0
votes
1answer
250 views

Sandbox on a linux server for group members

I am a member of a large group (academic department) using a central GNU/Linux server. I would like to be able to install web apps like instiki, run version control repositories, and serve content ...
3
votes
3answers
1k views

Isolate user from the rest of the system..?

There is a non-techsavvy user, who doesn't want to learn, and can only use Windows XP or 7. The problem is, that the computer is shared which she would like to use, and the computer stores sensitive, ...
3
votes
2answers
3k views

VirtualBox - Guest Addons as a security risk to the Host PC?

I'm setting up a Windows virtual machine in VirtualBox with the intent of using it as a sandbox for testing unknown or potentially dangerous applications. My question: would installing the Guest ...
4
votes
2answers
377 views

Program that “fences” installed programs so they do not contaminate Windows?

A while ago, I saw a program that basically created a sort of "sandbox" for a program before it was installed. The main benefit of using this programs to install other programs was that it allowed for ...
0
votes
2answers
152 views

Where can I find a sandboxed version of ie9?

I'd like to install ie9, but I want to keep my ie8 for web devellopment purposes. How can I do that ? Also, if it is possible for others version of IE (6, 7, 8), I would be happy.
1
vote
2answers
3k views

Installing programs in a sandbox or virtual environment

I have a new PC with zero viruses. I want to keep it that way. Is the best way to do that using anti-virus software (like security essentials)? Should I be using a sandbox or a virtual PC? a ...
2
votes
1answer
2k views

Symantec Endpoint Virtualization Suite or Sandboxie? [closed]

Years back I used Altiris SVS which is now Symantec Endpoint Virtualization and I liked it but I ended up switching to Sandboxie. It how since been updated by Symantec and I am considering switching ...
0
votes
1answer
1k views

Google Chrome, GDI++, and --no-sandbox

I use Google Chrome as the most preferrable web browser, and I'm also a fan of GDI++ (but not gdipp) tool that allows to replace the system font renderer to a MacOS-like one. That tool is able to ...
4
votes
1answer
1k views

How to sandbox a VMWare image as much as possible

The situation: -A corporate environment, with a corporate managed XP desktop (locked down, patched regularly, restricted user rights, no manual install of SW, AV, etc.) The requirement: -Using ...