Questions tagged [sandbox]

Sandboxing is the act of restricting permissions of programs to the bare minimum they require to operate.

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

Customizing the Windows Sandbox to hide taskbar

I want to open a PDF file with the Windows Sandbox (https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview), but I want it to look like the PDF ...
0 votes
0 answers
15 views

Keyboard shortcuts do not work inside Windows Sandbox

I have noticed a strange effect inside full-screen Windows Sandbox sessions: if I use a keyboard shortcut like WINKEY + I, this ignores the Sandbox and opens Settings on the host OS. This is strange ...
  • 440
0 votes
1 answer
14 views

Prevent Windows 11 Sandbox from creating an instance icon in taskbar

I'm running Windows 11 Pro 21H2. I activated Windows Sandbox and pinned it (C:\Windows\System32\WindowsSandbox.exe) to the taskbar. Now, whenever I run Windows Sandbox, another icon of it appears in ...
  • 225
1 vote
0 answers
13 views

Is there way to cap memory usage and/or CPU affinity globally (on boot) to allow manual exceptions per instance in the Windows NT kernel?

I don’t know if this is even possible in Windows. But I know it can be done with Linux. Can it be done in Sindows? As in... tricking Windows into running boot up on 1 NUMA domain/CCX Or 32G of Ram ...
0 votes
0 answers
90 views

How can I run multiple proxies on the same computer simultaneously each IP/Proxy on a specific app client in a sandboxed environment?

I have several running clients of the same app that I need to set a proxy for each client in a sandboxed environment. Also, it'd be better if it could be automated, as it's a daily changing Proxy IP. ...
1 vote
0 answers
253 views

Is there any way to have Windows containers using Hyper-V?

I want to have some isolated Windows containers preferably using built-in Hyper-V, on my Windows 10 Pro 21H2 machine. First I looked at the Windows Sandboxes. However, it appears as if Microsoft is ...
  • 448
1 vote
1 answer
64 views

Atom Flatpak using sandboxed runtimes and executables in package settings

I'm using the flatpak version of Atom. I want to install a linting package for PHP, so that code errors are easier to spot. However it requires access to a php binary. Now since this is a Flatpak, it'...
1 vote
2 answers
2k views

How to give VSCode Flatpak package access to system SDK for Java?

I have installed VSCode flatpak package. flatpak install flathub com.visualstudio.code Now there is a file flatpak-warning.txt It reads https://www.flathub.org --------------------------------------...
0 votes
0 answers
106 views

Windows 10 Sandbox Smart Card Redirection

I'm aware that I can redirect my smart card to an RDP session. But how can I redirect it to the Windows Sandbox?
  • 325
0 votes
1 answer
858 views

Why can I casually bypass Windows 10 Hyper-V's sandbox and download to my host PC?

I'm by no means a cybersecurity expert but I'm very interested in security and privacy protection for my own good. I use Windows 10 Pro and there's this cool feature called Hyper-V, which is a Windows ...
0 votes
0 answers
79 views

Windows Sandbox does not work after 20H2 update

I just updated Windows 10 Pro to 20H2 and of course, things are broken. Photoshop settings gone and Windows Sandbox does not work (I used before), etc. The biggest problem is the Windows Sandbox. I ...
  • 1
1 vote
3 answers
2k views

Windows SandBox is missing from Start Menu

I am running Windows 10 Pro x64 Version 2004 build 19041.630 on an Intel Core i7 laptop ASUS N552VW. A month or more ago I activated Windows SandBox in the Windows Features dialog and successfully ...
  • 1,165
1 vote
1 answer
581 views

"Windows Sandbox failed to start, virtual hard disk files must be uncompressed and unencrypted"

I have Windows 10 Pro and I successfully installed Windows Sandbox. However, when I try to run it, it shows the following error: My (physical) hard drive is indeed compressed (NTFS compression) and ...
user avatar
3 votes
1 answer
1k views

bwrap execvp no such file or directory when ro-bind'ing non-root path

When I bind filesystem root it works ~> bwrap --ro-bind / / -- which which /usr/bin/which however when I bind non-root it fails ~> bwrap --ro-bind /usr /usr -- which which bwrap: execvp which: ...
  • 133
0 votes
0 answers
35 views

Sandboxing a program under windows

I was searching on internet for an easy way of sandboxing an application under windows. Apparently there isn't an easy way of doing it in a comnplete way. I did find an application on github that does ...
  • 119
0 votes
1 answer
505 views

Running Sandbox on Window 10 Home - Error: 0x80072746 The connection to sandbox was lost

I had Win 10 Home 1809. I read that Sandbox can run only on build 1903, So I upgraded to 1908, and installed sandbox with this guide It didn't work, and I kept getting 0x80072746 error. It seems like ...
1 vote
1 answer
1k views

How to tell if a Window Store app is sandboxed?

There are lots of articles claiming apps on the Windows Store are sandboxed I maybe that used to be true but that seems clearly false with apps like Python or Ubuntu or Norton Security on the store. ...
  • 4,414
-1 votes
1 answer
1k views

Turning on the Windows 10 feature "Windows Sandbox" fails and throws an error (0x800F0922)

When trying to turn on the Windows Sandbox feature, the installation fails and throws 0x800F0922 with no concrete error message, it just says: The changes couldn't be completed. Please, reboot your ...
  • 107
2 votes
2 answers
3k views

Windows sandbox memory limit

How do I increase the amount of memory available within Windows Sandbox? The default 4GB is not enough for some heavy programs. There seems to be nothing related in .wsb configuration files
0 votes
1 answer
217 views

Conversion javascript code from storeEval to executeScript_Sandbox (Selenium Ide Kantu Ui.Vision)

I need a conversion of two javascript code to obtain date and time in prefered format from storeEval To executeScript_Sandbox to use in Selenium Ide Kantu Ui.Vision From some update storeEval is ...
  • 33
0 votes
1 answer
239 views

Is drag and drop and shared clipboard a way for a malware to escape a virtual machine or sandbox?

Windows sandbox does it, you can enable them on many other virtual machine software too. And I think in stuff like Sandboxie, the clipboard is shared too.
  • 113
1 vote
1 answer
1k views

Running untrusted application on Wine

I want to play some offline Windows game on GNU/Linux, so I think I should use Wine. This game does not have available source code so I don't trust it as there were spyware cases already (like ...
user avatar
1 vote
1 answer
225 views

Why it seems two ip addresses are assigned to the same guest in Virtual Box?

I have a VirtualBox guest installed on my Windows 7 host, which is a hortonwork sandbox. The sandbox is up and running as below: From the output, it indicates using localhost:4200 to access it via ...
  • 123
1 vote
2 answers
2k views

VMware Workstation can be run after disabling Device/Credential Guard

I tried to install Windows Sandbox on my Windows 10 Home installation. Now that I have done that, VMWare Workstation, does not work and I have started to recieve the following error "VMware ...
0 votes
0 answers
130 views

I think I broke windows

I was on Win10 Home and as I admired the new sandbox abilities I tried to activate it on my Home version by following Darkmodded here. His method didn't work, it gave me an error saying "connection ...
4 votes
0 answers
7k views

Error: 0x80072746 The connection to sandbox was lost

Please visit to my original post here. I updated laptop to Windows 10 Home Edition 1903. Using this tutorial: Enable Windows Sandbox Feature in Windows 10 Home Edition I enabled Windows Sandbox on my ...
  • 41
-3 votes
1 answer
4k views

Inside Windows 10 Sandbox

Windows 10 is scheduled to push 1903 edition which has built in sand box feature. Where can we find some deep tech inside of the feature? For example, can we play video games at almost native ...
  • 672
2 votes
0 answers
653 views

Docker for sandboxing desktop (GUI) applications & games

My idea is to install Docker on my Windows 10 computer, and run some programs in their own container. This would have various pros: Having some applications separated from others. Being able to run ...
user avatar
2 votes
1 answer
3k views

Can I enable Windows Sandbox feature in a VMWare Workstation virtual machine?

I'm trying to test the Windows Sandbox feature released for Windows insiders. I have Win10 Pro 1809 build 18309 installed in a virtual machine in VMWare Workstation. So when I go to enable it, I'm ...
  • 511
1 vote
1 answer
811 views

PAC manager unable to read .ssh files

I just upgraded to Ubuntu 18.04 LTS and had to reinstall PAC manager. It has been installed as a snap, and now it is running sandboxed and with no access to my $HOME/.ssh folder to access my public ...
  • 121
0 votes
1 answer
287 views

What precautions are enough to create a sandbox for a scripting language?

We have an ongoing discussion to add some functionality to a project by adding scripting support and it's stucked at security concerns. Think that a language will be used for configuration purposes, ...
  • 495
-1 votes
2 answers
1k views

Extensive use of CPU by antivirus

I have Guardian NetSecure anti-virus installed in my PC. Task manager shows that a process named Browser SandboxSafe Browsing Security Service(Core Browsing Protection), which seems to be part of the ...
  • 3
2 votes
0 answers
583 views

Using firejail on firefox

I'm using firejail to sandbox Firefox, but doing /home/me/bin/firejail /home/me/local/bin/Firefox emits the below: execvp: no such file or directory. Under strace there are multiple entries of ...
user avatar
0 votes
0 answers
50 views

How to Restrict Windows software to specific directory?

Imagine I have an untrusted software which Do Not Want to access any directory except the one I specify (Restrict software access to an specific directory) Is there a way other than (Virtual machine &...
  • 530
1 vote
1 answer
2k views

Sandboxing linux within windows [closed]

I'm trying to work out the best way to set up my computer so that I can run Linux as my main OS and Windows for gaming and working with Media Files. I've looked into Virtualization and set up a ...
2 votes
2 answers
3k views

Is Firefox really that insecure for not having sandbox like Chrome? [closed]

I am now using Firefox instead of Google Chrome for daily use, however I read in some sites that Firefox lacks in security while being better at privacy and Chrome the other way around. Is Firefox ...
user avatar
2 votes
1 answer
147 views

Keep a software running [closed]

I have a software that I don't want to close! I would like to sleep/resume it instead of close open. I could use a VirtualBox to sleep/resume the system but I don't want to use this solution. Any ...
2 votes
0 answers
298 views

Limit privileges of a systemd service to a minimum

I am writing a systemd service file for fai-monitor (8). This daemon listens on a single port, receives TCP connections, and writes a single log file with interesting information. To reduce the ...
  • 663
0 votes
0 answers
70 views

How to sandbox untrusted monitor driver

I am considering getting an e-ink monitor (Dasung Paperlike Pro) due to eyestrain. It looks like installation on macOS requires disabling of System Integrity Protection. I'd like to avoid that. Is ...
  • 131
0 votes
0 answers
81 views

Running program in an isolated desktop / sandbox with access to original hardware

There is this program "Desktops.exe" by Sysinternals. Using this program, one can create more desktops. You can still use the usual file system, it's just another desktop, but it still uses the real ...
  • 139
0 votes
0 answers
143 views

Chrome JS/CSS cache with regards to --no-sandbox switch

Basically, what I would like to learn is to how the Chrome's JS/CSS cache works with regards to --no-sandbox command line switch. To be more precise, it's not clear to me whether the browser is ...
2 votes
0 answers
332 views

Let an app have an independent mouse (like vm)

At work they use a really old app to fetch some data that hasn't autodownload. So every 10minutes i must manually go, switch to that app, and click a button to start the process. ¿Is there any way to ...
  • 207
0 votes
1 answer
359 views

What is the network adapter configuration necessary for a client-style VMWare Player on a laptop?

While I've been able to get a Vmware player (12.5.7) Hortonworks 2.4 sandbox to work on my desktop under the NAT adapter without issue, I cannot get a separate Vmware player (same version) to work in ...
  • 101
-2 votes
1 answer
147 views

How to Run two OS simultaneously on one Laptop [closed]

There is a program I must run which takes up the entire OS and will shut off if the application is closed or minimized to another program, so I was wondering if there is a way to make the program ...
0 votes
1 answer
132 views

Why don't Unix/Linux don't get malware while Windows does? [closed]

Windows is a commercial OS, so it should probably be the more secure one, as it's the moral/professional duty of people who are making money out of it. But Linux, which is open-source to both good ...
  • 69
0 votes
2 answers
654 views

Is there a way to isolate an application from environment variables for testing code?

I am developing an application on Windows that makes use of DLL files available in the system PATH variable. Those DLLs are in my my PATH for my development environment. However the application ...
  • 195
0 votes
1 answer
2k views

redirect traffic from bridge to http proxy

If I create a new instance of an ethernet bridge: # brctl addbr br1 # ip link set dev br1 up # ip addr add 10.100.100.1/24 dev br1 Start tinyproxy listening on localhost on its default port 8888: # ...
6 votes
2 answers
2k views

Is it expected that firejail allows R/W outside of the sandbox without "--overlay" flag?

Just installed firejail on Ubuntu 16.04 (version 0.9.38) and according to this linux-magazine article, by default it should make R/O the entire filesystem: The programs in the sandbox have only ...
  • 681
33 votes
3 answers
10k views

How can I run an untrusted executable on linux safely?

I have downloaded an executable compiled by a third party and I need it to run on my box (Ubuntu 16.04 - x64) with full access to HW resources such as CPU and GPU (through nVidia drivers). Suppose ...
  • 681
1 vote
0 answers
152 views

How to sandbox code in chroot for multiple users?

What am I trying to do? I'm writing a code evaluator using chroot and python and went to hackerrank for some inspiration. What I think is happening at Hackerrank? Hackerrank creates run-...
  • 111