Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can Sandboxie's plus configuration protection by admins be done with UAC? #2123

Closed
bastik-1001 opened this issue Aug 12, 2022 · 4 comments
Closed
Labels
Feature Request New feature or idea Status: Added in Next Build Added in the next Sandboxie version

Comments

@bastik-1001
Copy link
Collaborator

Is your feature request related to a problem or use case?

When using Sandboxie-Plus and setting "Config Protection" > "Only Administrator user accounts can make changes." with a normal user account, Sandboxie denies any changes. (The funny thing is, that a normal non-admin user, can set the setting, but is then prevented from doing any changes.)

Describe the solution you'd like

Now the question is, if Sandboxie-Plus, sandman, could, instead of preventing the changes, show a UAC prompt for a user to enter admin credentials to apply changes?

The same question can be asked for the setting that restricts disabling forced processes to admin accounts.

If those can be done in a way that a normal non-admin user runs sandman, has those settings set and gets prompted by UAC, when changing the config or disabling forced processes, then this is a feature request to do so.

Describe alternatives you've considered

Sticking to what we have now.

@bastik-1001 bastik-1001 added the Feature Request New feature or idea label Aug 12, 2022
@DavidXanatos
Copy link
Member

After thinking about that and looking in how veracrypt handles UAC using COM I think the most reasonable course of action would be to let sandman detect that being admin is required and then offer an option to restart itself as admin.

@DavidXanatos
Copy link
Member

Easier fix, i will just disallow non admin users from changing this setting in the UI

@DavidXanatos DavidXanatos added the Status: Added in Next Build Added in the next Sandboxie version label Sep 2, 2022
@bastik-1001
Copy link
Collaborator Author

Disallowing non admin users from setting these options sounds good, as it prevents the funny part.

Can you add a menu entry to restart Sandman.exe with admin rights? In the 'Sandbox' menu, of sandman for example "Restart Interface as admin", or in the options menu of sandman. If you want, I can open another issue for that, this is just remotely related.

@isaak654
Copy link
Collaborator

Easier fix, i will just disallow non admin users from changing this setting in the UI

This was added in v1.3.3.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Request New feature or idea Status: Added in Next Build Added in the next Sandboxie version
Projects
None yet
Development

No branches or pull requests

3 participants