Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [sandbox]

Sandboxing is the act of restricting permissions of programs to the bare minimum they require to operate.

0
votes
0answers
37 views

Docker for sandboxing desktop (GUI) applications & games

My idea is to install Docker on my Windows 10 computer, and run some programs in their own container. This would have various pros: Having some applications separated from others. Being able to run ...
1
vote
1answer
120 views

Can I enable Windows Sandbox feature in a VMWare Workstation virtual machine?

I'm trying to test the Windows Sandbox feature released for Windows insiders. I have Win10 Pro 1809 build 18309 installed in a virtual machine in VMWare Workstation. So when I go to enable it, I'm ...
0
votes
0answers
61 views

Need workaround for: 'attempted to open sandboxed jar “+ url +” as Trusted-Only' error

I used to be able to access my work computer remotely from my personal computer at home through VPN (with Cisco AnyConnect). However, now when I try to the following error pops up: "Application Error ...
0
votes
0answers
47 views

sudo/pkexec vs sandbox: Differences & Pros/Cons

I am looking at running Jitsi on Debian. For security reasons, I want to isolate Jitsi from the rest of the system. I could use a VM, but I want a lighter solution. So I looked at sudo/pkexec vs. ...
0
votes
1answer
163 views

PAC manager unable to read .ssh files

I just upgraded to Ubuntu 18.04 LTS and had to reinstall PAC manager. It has been installed as a snap, and now it is running sandboxed and with no access to my $HOME/.ssh folder to access my public ...
0
votes
1answer
87 views

What precautions are enough to create a sandbox for a scripting language?

We have an ongoing discussion to add some functionality to a project by adding scripting support and it's stucked at security concerns. Think that a language will be used for configuration purposes, ...
0
votes
0answers
97 views

VirtualBox Agent.py in Cuckoo startup error

I am new to the Malware Analysis field. I installed Cuckoo and VirtualBox and did all the necessary configuration that is required. However the problem I am facing is that when I run cuckoo after ...
-1
votes
1answer
64 views

Extensive use of CPU by antivirus

I have Guardian NetSecure anti-virus installed in my PC. Task manager shows that a process named Browser SandboxSafe Browsing Security Service(Core Browsing Protection), which seems to be part of the ...
1
vote
0answers
319 views

Using firejail on firefox

I'm using firejail to sandbox Firefox, but doing /home/me/bin/firejail /home/me/local/bin/Firefox emits the below: execvp: no such file or directory. Under strace there are multiple entries of ...
0
votes
0answers
40 views

How to Restrict Windows software to specific directory?

Imagine I have an untrusted software which Do Not Want to access any directory except the one I specify (Restrict software access to an specific directory) Is there a way other than (Virtual machine &...
1
vote
1answer
68 views

Sandboxing linux within windows [closed]

I'm trying to work out the best way to set up my computer so that I can run Linux as my main OS and Windows for gaming and working with Media Files. I've looked into Virtualization and set up a ...
2
votes
2answers
1k views

Is Firefox really that insecure for not having sandbox like Chrome? [closed]

I am now using Firefox instead of Google Chrome for daily use, however I read in some sites that Firefox lacks in security while being better at privacy and Chrome the other way around. Is Firefox ...
2
votes
1answer
92 views

Keep a software running [closed]

I have a software that I don't want to close! I would like to sleep/resume it instead of close open. I could use a VirtualBox to sleep/resume the system but I don't want to use this solution. Any ...
1
vote
0answers
53 views

Limit privileges of a systemd service to a minimum

I am writing a systemd service file for fai-monitor (8). This daemon listens on a single port, receives TCP connections, and writes a single log file with interesting information. To reduce the ...
0
votes
0answers
52 views

How to sandbox untrusted monitor driver

I am considering getting an e-ink monitor (Dasung Paperlike Pro) due to eyestrain. It looks like installation on macOS requires disabling of System Integrity Protection. I'd like to avoid that. Is ...
0
votes
0answers
62 views

Running program in an isolated desktop / sandbox with access to original hardware

There is this program "Desktops.exe" by Sysinternals. Using this program, one can create more desktops. You can still use the usual file system, it's just another desktop, but it still uses the real ...
0
votes
0answers
74 views

Chrome JS/CSS cache with regards to --no-sandbox switch

Basically, what I would like to learn is to how the Chrome's JS/CSS cache works with regards to --no-sandbox command line switch. To be more precise, it's not clear to me whether the browser is ...
2
votes
0answers
52 views

Let an app have an independent mouse (like vm)

At work they use a really old app to fetch some data that hasn't autodownload. So every 10minutes i must manually go, switch to that app, and click a button to start the process. ¿Is there any way to ...
0
votes
1answer
142 views

What is the network adapter configuration necessary for a client-style VMWare Player on a laptop?

While I've been able to get a Vmware player (12.5.7) Hortonworks 2.4 sandbox to work on my desktop under the NAT adapter without issue, I cannot get a separate Vmware player (same version) to work in ...
-2
votes
1answer
109 views

How to Run two OS simultaneously on one Laptop [closed]

There is a program I must run which takes up the entire OS and will shut off if the application is closed or minimized to another program, so I was wondering if there is a way to make the program ...
0
votes
1answer
117 views

Why don't Unix/Linux don't get malware while Windows does? [closed]

Windows is a commercial OS, so it should probably be the more secure one, as it's the moral/professional duty of people who are making money out of it. But Linux, which is open-source to both good ...
0
votes
2answers
476 views

Is there a way to isolate an application from environment variables for testing code?

I am developing an application on Windows that makes use of DLL files available in the system PATH variable. Those DLLs are in my my PATH for my development environment. However the application ...
0
votes
1answer
921 views

redirect traffic from bridge to http proxy

If I create a new instance of an ethernet bridge: # brctl addbr br1 # ip link set dev br1 up # ip addr add 10.100.100.1/24 dev br1 Start tinyproxy listening on localhost on its default port 8888: # ...
6
votes
2answers
1k views

Is it expected that firejail allows R/W outside of the sandbox without “--overlay” flag?

Just installed firejail on Ubuntu 16.04 (version 0.9.38) and according to this linux-magazine article, by default it should make R/O the entire filesystem: The programs in the sandbox have only ...
34
votes
3answers
6k views

How can I run an untrusted executable on linux safely?

I have downloaded an executable compiled by a third party and I need it to run on my box (Ubuntu 16.04 - x64) with full access to HW resources such as CPU and GPU (through nVidia drivers). Suppose ...
1
vote
0answers
120 views

How to sandbox code in chroot for multiple users?

What am I trying to do? I'm writing a code evaluator using chroot and python and went to hackerrank for some inspiration. What I think is happening at Hackerrank? Hackerrank creates run-...
2
votes
1answer
434 views

Extracting Files from a Virus-Filled Hard Drive

I need to restore some documents, images, music, etc. from an old hard drive, which is filled with viruses. I have a SATA-USB docking station in order to connect the old hard drive to my computer, ...
2
votes
0answers
65 views

Apple Yosemite root problems

I always work as a root user, and I've been facing some problems: Finder never saves passwords. Icon positioning changes aren't saved. Other problems in strong sandbox hardening and I can't load a ...
0
votes
0answers
27 views

Minimum possible permissions for a Win7 user to login?

On my Win7 Pro x64 system, I would like to run a program I have 99% confidence in (specifically, Blitzgewitter by Titan). However, on the off chance of a trojan, I would like to run it in a sandboxed ...
0
votes
1answer
689 views

Using Windows 10 in a virtual machine. Can it be done?

I am currently running 8.1. I'd like to try out Windows 10 and if I like it upgrade. If not, I'll keep running as I am. I've never used a virtual machine before: can Window 10 be used from a virtual ...
5
votes
3answers
12k views

Sandboxie not Working on Windows 10

I am having an issue with Sandboxie not working on the latest build of Windows 10. Every time I try to start a program in a sandbox, I get the following error. I understand that Sandboxie requires ...
3
votes
3answers
4k views

How to remove “Ads by AdFreeApp” Malware in Google Chrome?

I have been looking all over the internet, to remove this Google Chrome based malware. I have encountered such malwares in the past, and I was able to remove it by disabling the extensions, delete ...
0
votes
0answers
53 views

Better understanding program detected as virus w/ sandbox

My AV solution detected a program as a virus. Can someone point me in the right direction to learn more about the following points? 1) What exactly about the program was determined as the triggering ...
0
votes
1answer
2k views

LXC: Automating running an application inside a container

I'm working on a project that automatically compiles, executes and tests the output of submitted programs in C, C++, Java and Python. Obviously this needs to happen inside some sort of secured ...
1
vote
1answer
185 views

Launch executable with custom root directory

How can I launch an executable so it thinks that the root directory is at a custom path, and not at the actual root. I thought it would be possible with sandbox-exec, but I haven't found any ways so ...
0
votes
2answers
73 views

How would a 'dll missing' error be thrown when a specific web page is loaded?

I'm building a website and am working with a conversion plugin. The conversion works perfectly for me as I've tested the dependencies on my localhost, but when I moved it to my server and installed it ...
0
votes
0answers
61 views

How to manage file descriptors of a process on Linux?

I have an executable file, which is a black box for me. now I want to execute it in a protected mode that: Does not change any file on my system. Does not send any information to any other place. ...
0
votes
1answer
92 views

Will sandboxing a program protect my computer from being damaged?

I've heard from a friend that Spotify got attacked by an hacker, which results in it "damaging the hard disks" and stealing private data of the computers where the program is installed. It allegedly ...
1
vote
1answer
87 views

Make a specific program see the file-system differently on Windows

I'm using Winamp since god knows when. I have all my songs in the media library with all my mp3 files with all kind of cool statistics like how many times I've listened to each song, ratings etc. The ...
6
votes
2answers
335 views

How to distinguish 'syscalls' form 'int 80h' when using ptrace

As far as I know, ptrace can only get syscall number by PTRACE_SYSCALL, but syscall number is different in x86 and x64. So is there any way to figure out where this syscall real origin? I am now ...
1
vote
0answers
19 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
1
vote
1answer
854 views

Running untrusted software requiring installation (Windows)?

Is there some good way to install and run untrusted software, except in a full VM? Assume running the software does not require admin privileges. Can I use a separate partition, for example (How ...
1
vote
1answer
141 views

How to run linux binary video drivers in a sandbox/isolated environment?

I don't trust any binary, but i have to use nvidia video card driver. Since xorg/video drivers runs as root and needs to access my hardware, is it possible to block internet connection to these ...
0
votes
1answer
2k views

Alternative to Sandboxie [closed]

I've been using Sandboxie for some time now in order to run multiple instances of one program. The program has been updated and no longer runs in Sandboxie. I am looking for an alternative sandboxing ...
0
votes
1answer
152 views

Multiple Instances of 1 Program

The project at hand that I am having issues with is that I need to run a set of program models on one computer. Each model has different file configurations, but in the C:\ drive the folders are named ...
0
votes
0answers
237 views

Can user-mode Linux be compiled and run on UNIX systems?

e.g. on NetBSD or Solaris? Or does it require exclusively Linux-specific system calls, virtual filesystems, etc.? Also, if it's currently limited to Linux, what changes would be required to port it ...
0
votes
1answer
30 views

Can I provide a virtual Windows environment for my users?

I want to provide an environment where users are free to install and break whatever on their accounts without disrupting the experience of other users on the computer. Since it's in a home environment,...
1
vote
0answers
106 views

Is it possible to restrict access to certain URLs for individual programs?

I have a certain use case where I want to whitelist a list of URLs that a certain application can access. In other words, I want to sandbox it, but don't have access to blocking or white listing those ...
4
votes
2answers
1k views

How to block access to resources on external domain?

For example I'm browsing www.example.com At some point, some Javascript is fetched from another domain. I would like to sandbox example.com. Anything that is not hosted on example.com should be ...
0
votes
1answer
615 views

Kali Linux java

I have a Kali linux sandbox set up with a direct connection to a windows VM. I have JAR files / java exploits I want to serve using the Kali box. After I get the jar file into the Kali Box, I know I ...