Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Firefox and Edge will not run in a sandbox #2472

Closed
NotepadPlusUser opened this issue Nov 18, 2022 · 8 comments
Closed

Firefox and Edge will not run in a sandbox #2472

NotepadPlusUser opened this issue Nov 18, 2022 · 8 comments
Labels
Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software Type: Incompatibility Broken compatibility with Sandboxie

Comments

@NotepadPlusUser
Copy link

Describe what you noticed and did

The following error has been around at least since mid-October, and has persisted through various updates of Windows 10 Pro (including 21H2 —>22H2), Sandboxie, Firefox and Edge.

THE ERROR:

  1. Sandboxie-Plus UI —> Right-click on the sandbox DefaultBox.
  2. Run —> Run Program —> Enter 'Firefox.exe' —> OK.
  3. Tbe browser does not launch, but instead an error screen launches:
    — Title: firefox.exe - Application Error
    — Message: The application was unable to start correctly (0xc0000005). Click OK to close the application.

FURTHER DETAILS:

  • Same result whether the sandbox is initially empty or not.
    — Same result in any other sandbox, including new RAM sandboxes created a fortnight ago.
    — Same result launching Firefox from the Start Menu with Sandboxie's forcing on.
    — Same result using the command 'Firefox' in a RunBox with forcing on.

  • Same results with the Edge browser.

  • But no problems launching Firefox or Edge outside a sandbox, with the Start Menu, or with the bare command 'Firefox' or 'MSEdge', when forcing is paused.
    — And no problem using the commands Sandboxie /dfp Firefox and Sandboxie /dfp MSEdge.

  • No problems with Vivaldi and Brave, my other two browsers.

  • Same behaviour in all the points above on my wife's notebook, which I maintain with almost exactly the same software, settings and updates as my own desktop (except that I have not yet added RAM sandboxes to the notebook).

How often did you encounter it so far?

Every time — it is not intermittent.

Affected program

Firefox and Edge

Download link

Not relevant

Where is the program located?

Not relevant to my request.

Expected behavior

CURRENT VERSIONS:
My PC is a 64-bit custom desktop, my wife's is a 64-bit Dynabook SATELLITE PRO C50-H notebook.
Both PCs have:

  • Windows 10 Pro 22H2, V10.1.19045.2251
  • Sandboxie-Plus-x64-v1.5.3
  • Firefox 64-bit V107.0
  • EdgeEnterpriseX64V107.0.1418.52

All software on the PC is fully updated. As far as I am aware, I have made no changes to the software apart from the updates as they came in.

About a fortnight ago, I installed the old versions Firefox 105.0.3 and Sandboxie-Plus 1.4.2 on my desktop. I did these installations over the top without uninstalling the previous versions. There was no change in behaviour, and I updated them again straight afterwards.

What is your Windows edition and version?

Windows 10 Pro 22H2, V10.1.19045.2251m 64-bit

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

ESET Internet Security V16.0.24.0

What version of Sandboxie are you running?

Sandboxie-Plus-x64-v1.5.3

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (to be specified).

Is it a regression?

Unsure. Probably 1.4.2

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

@NotepadPlusUser NotepadPlusUser added the Confirmation Pending Further confirmation is requested label Nov 18, 2022
@offhub
Copy link
Collaborator

offhub commented Nov 18, 2022

@offhub
Copy link
Collaborator

offhub commented Nov 18, 2022

@offhub
Copy link
Collaborator

offhub commented Nov 18, 2022

OR (without disabling the Banking & Payment protection in ESET)

You could add following rule to the your config:
DenyHostAccess=ekrn.exe,y

added option to block host processes from accessing sandboxed ones #2132 -- usage: DenyHostAccess=Program.exe,y -- note: by default, this protection only applies for write access, that is, unsandboxed processes will still be able to obtain read-only access -- to prevent host processes from obtaining read access, ConfidentialBox=y must also be set, which require a supporter certificate

@isaak654 isaak654 added Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software Type: Incompatibility Broken compatibility with Sandboxie and removed Confirmation Pending Further confirmation is requested labels Nov 18, 2022
@NotepadPlusUser
Copy link
Author

Thank you very much, Isaak654 and offhub. The fact that ESET is the cause was a total surprise! I don't use ESET's Banking & Payment protection, so I simply turned it off, rather than trying to implement the more complicated workarounds. All is now well on the desktop and notebook — much appreciated.

Not good, however, from ESET. They have an excellent agent Microbe here in Australia, and I have written to them to alert them to the problem and to these posts, including the fact that it has been around for some time and publicly commented on. Hopefully they will have some influence over the situation — although just possibly it could be associated with Russia's invasion of Ukraine.

@tdtc-hrb
Copy link

tdtc-hrb commented Nov 19, 2022

3Q.
OS: Windows 10 1809(LTSC)
Sandboxie-Plus: v1.5.3
ESET: v16.0.24.0
Chrome: v107.0.5304.107(64-bit)

Using portable Chrome.
Right-click "DefaultBox" to Run->Run Program->"D:\sandbox_s\Chrome-bin\chrome.exe".
Offhub's video solved my problem. Thanks

@ghost
Copy link

ghost commented Nov 19, 2022

This feature is useless anyway if you use sandboxie where you have pretty much full control over your banking sandbox.

Also, you can search HKEY_LOCAL_MACHINE\SOFTWARE\ESET if there is any way to switch registry setting to disable it.

@isaak654
Copy link
Collaborator

Thank you for the confirmations provided above.
I'm closing this duplicate issue in favour of the original #1545, which will remain open until it is resolved.

@NotepadPlusUser
Copy link
Author

Microbe has now contacted ESET, and an ESET developer has come back to Microbe, to say that ESET has classified this issue as a bug, which is expected to be resolved in future updates.

@sandboxie-plus sandboxie-plus locked and limited conversation to collaborators Nov 28, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software Type: Incompatibility Broken compatibility with Sandboxie
Projects
None yet
Development

No branches or pull requests

4 participants