Super User
Super User

Questions tagged [sandbox]

Sandboxing is the act of restricting permissions of programs to the bare minimum they require to operate.

Programs that use sandboxing include Google Chrome and (in November) the Mac App Store.

136 questions
42
votes
4 answers

How can I run an untrusted executable on linux safely?

I have downloaded an executable compiled by a third party and I need it to run on my box (Ubuntu 16.04 - x64) with full access to HW resources such as CPU and GPU (through nVidia drivers). Suppose this executable contains a virus or backdoor, how…
Emanuele
  • 781
33
votes
6 answers

Is there a way to see all files and registry entries that an application installs?

I am trying to figure out if there is a way to basically install an application into a sandbox, so that I can easily see all files it created and all registry entries it added without searching the computer looking for files. It doesn't need to be a…
user1632018
  • 461
  • 1
  • 7
  • 14
12
votes
3 answers

Installing an application in a sandbox to detect Windows registry manipulation

I would like to know if there is a way to detect which registry settings an installer affects. Are there other options than running a full-size VM and then somehow comparing snapshots of the registry hives? If these is the best approach, please…
Ярослав Рахматуллин
  • 11,633
12
votes
6 answers

How can I install iTunes in such a way that it can't put any "hooks" or helper programs on my computer?

I'm buying a new iPad, which means I must once again install iTunes. I've not used iTunes in more than 6 months, since I bought a new computer. I don't like iTunes, but I can live with using it to buy/manage media and sync my Apple devices when the…
Joshua Carmody
  • 1,377
7
votes
2 answers

How to distinguish 'syscall' from 'int 80h' when using ptrace

As far as I know, ptrace can only get syscall number by PTRACE_SYSCALL, but syscall number is different in x86 and x64. So is there any way to figure out where this syscall real origin? I am now coding a program to limit some others' syscall by…
Criyle
  • 71
7
votes
4 answers

How to sandbox and run programs that require administrator privileges on limited-user PC?

This question is bugging me for a while. How do I sandbox any application and run it on PC where I have only limited privileges (not administrative) ? Surely, the application will require the UAC and administrative privileges but the sandbox program…
Greenleader
  • 566
6
votes
2 answers

Is it expected that firejail allows R/W outside of the sandbox without "--overlay" flag?

Just installed firejail on Ubuntu 16.04 (version 0.9.38) and according to this linux-magazine article, by default it should make R/O the entire filesystem: The programs in the sandbox have only read access to all directories and are thus unable to…
Emanuele
  • 781
5
votes
3 answers

Sandboxie not Working on Windows 10

I am having an issue with Sandboxie not working on the latest build of Windows 10. Every time I try to start a program in a sandbox, I get the following error. I understand that Sandboxie requires extensive work in order to function when a new…
DaveTheMinion
  • 5,638
5
votes
3 answers

I need to run a win32 executable which I do not trust. Is there any free online service / sandbox which could do it for me?

I need to run a win32 executable which I do not trust. Is there any free online service which could do it for me?
99CPU
5
votes
1 answer

Mac OS X: file associations keep changing (though reverting it manually)

For some time now I'm experiencing an annoying behavior under Mountain Lion: While doing my daily work, the programs to open a file keep changing. For example, opening a PDF is switched to Adobe Acrobat Pro instead of Apple's Preview. PNG images…
user26372
  • 161
5
votes
3 answers

How to give VSCode Flatpak package access to system SDK for Java?

I have installed VSCode flatpak package. flatpak install flathub com.visualstudio.code Now there is a file flatpak-warning.txt It reads https://www.flathub.org ------------------------------------------------------------------------------------ |…
Payel Senapati
  • 161
  • 1
  • 2
  • 8
5
votes
1 answer

bwrap execvp no such file or directory when ro-bind'ing non-root path

When I bind filesystem root it works ~> bwrap --ro-bind / / -- which which /usr/bin/which however when I bind non-root it fails ~> bwrap --ro-bind /usr /usr -- which which bwrap: execvp which: No such file or directory even though /usr/bin/which…
Nycta
  • 153
5
votes
0 answers

Error: 0x80072746 The connection to sandbox was lost

Please visit to my original post here. I updated laptop to Windows 10 Home Edition 1903. Using this tutorial: Enable Windows Sandbox Feature in Windows 10 Home Edition I enabled Windows Sandbox on my Windows 10 Home, but it's failing to start. I got…
karl8
  • 51
4
votes
2 answers

How to block access to resources on external domain?

For example I'm browsing www.example.com At some point, some Javascript is fetched from another domain. I would like to sandbox example.com. Anything that is not hosted on example.com should be silently dropped. I can't find the correct keyword for…
alecail
  • 762
4
votes
2 answers

Program that "fences" installed programs so they do not contaminate Windows?

A while ago, I saw a program that basically created a sort of "sandbox" for a program before it was installed. The main benefit of using this programs to install other programs was that it allowed for the complete removal of that program after it…
Stephen Cagle
  • 165
1
2 3
…
9 10