Forum: SuRun English speaking RSS
What does SuRun do with unelevated apps?
xarx #1
Member since Mar 2018 · 10 posts
Group memberships: Mitglieder
Show profile · Link to this post
Subject: What does SuRun do with unelevated apps?
I run my Firefox sandboxed (in Sandboxie) with execution of most applications prohibited. When I download a .docx document, Firefox starts the Microsoft Word Viewer for it. But at the same time, Sandboxie prohibits SuRun from running.

Why is SuRun trying to run at this time? Firefox nor the Word Viewer runs under an elevated account.

Edit: This behaviour disappears when unchecking

Settings > Execution Hooks > "Set a Hook into all processes that directly execute applications"

But this does not answer the question.
This post was edited on 2018-03-25, 19:33 by xarx.
Kay (Administrator) #2
User title: Weltverbesserer
Member since Nov 2007 · 1509 posts · Location: Magdeburg
Group memberships: Administratoren, Mitglieder
Show profile · Link to this post
Sorry for the delay.
If you enable SuRun's execution hooks, SuRun tries to detect every process creation and if it detects one, it passes the Parameters of the process to be started via Pipe to the SuRun service.
This is, why SandBoxie runs SuRun before it runs WordView.
SuRun intercepts the call, asks its own service if WordView ist one of the programs to run elevated and then terminates.
Close Smaller – Larger + Reply to this post:
Verification code: VeriCode Please enter the word from the image into the text field below. (Type the letters only, lower case is okay.)
Smileys: :-) ;-) :-D :-p :blush: :cool: :rolleyes: :huh: :-/ <_< :-( :'( :#: :scared: 8-( :nuts: :-O
Special characters:
Go to forum
Not logged in. · Lost password · Register
This board is powered by the Unclassified NewsBoard software, 20150713-dev, © 2003-2015 by Yves Goergen
Page created in 42.3 ms (15.6 ms) · 44 database queries in 7.6 ms
Current time: 2020-04-03, 06:47:35 (UTC +02:00)