How to use Sandboxie with Surun?

discs

Thank you for Surun. At last I am using a LUA - which I have never done before! - because I found it so inconvenient.

I have tried to use Sandboxie with Surun and LUA.

I do the following:
- I enable Sandboxie to automatically start with elevated rights
- I enable the program (for example Program X ) I wish to instal and run in Sandboxie to also automatically start with elevated rights

- I then choose program X, and in the Explorer context Menu the option to 'Run (Program X) Sandboxed' OR
- I then go to the context menu of Sandboxie and select 'run any program' - and browse to select the program X I want to run sandboxed, which I earlier enabled to automatically start with elevated rights.

This doesn't seem to work. I get message 'you must be logged in as an administrator to instal this program'.

Could someone please suggest a way try out new programs in Sandboxie while using Surun?

Program X runs (instals) normally outside Sandboxie under Surun/LUA when set to start with elevated rights.

Thank you for your help.

quantic

Hi,

I also use Sandboxie with SuRun (XPSP3) and I created a context menu entry with the following:

(I edit/create my custom context menu using PowerPro)

%windir%\surun.exe \progra~1\sandbo~1\start.exe /box:__ask__

(you can edit the registry to avoid any tool, for that just copy and paste the following and save it as *.reg file or just apply the attached file):

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\*\shell\surunboxie]

[HKEY_CLASSES_ROOT\*\shell\surunboxie\command]
@="\"c:\\windows\\surun.exe\" \"\\progra~1\\sandbo~1\\start.exe\" /box:__ask__ \"%1\" %*"

if you wish to create the keys manually, here's the string:

"c:\windows\surun.exe" "\progra~1\sandbo~1\start.exe" /box:__ask__ "%1" %*

Kay

Back in 2008 I tested Sandboxies influence on SuRun.
I hope it's still the same:

Sandboxie blocks the communication between SuRun and the SuRun service.
So you cannot run programs with elevated rights.
You need to set "full access" to the named pipe of SuRuns service (\Device\NamedPipe\SuperUserRun).
This ca be done in Sandboxie.ini:
OpenPipePath=\Device\NamedPipe\SuperUserRun

Then SuRuns communications is no longer blocked an SuRun should work.

What I don't know is if the elevated program can then break out of the sandbox.

Cheers,

Kay

discs

Thank you quantic and kay for your suggestions for how to use Sandboxie with Surun.

I tried your solution, Kay, by adding the following line to the sandboxie.ini file:
OpenPipePath=\Device\NamedPipe\SuperUserRun
I added it first into the global settings, and then the defaultbox, usersettings and S1 settings. In each case it is the last entry for the setting. I am not sure I have done fully what you intended ... but I still got the message 'you must be logged in as an administrator to instal this program' when I tried to instal a program which needs administrative rights.

quantic, I followed your suggestion for introducing (by a registry entry) a context menu entry for calling a program which asks for administrative rights, and opens in Sandboxie. Neat - and it works. I like it.

Thank you again to both of you. The problem is solved for me, which is great.

[gelöscht]

To install an application in a sandbox, first run an admin instance of explorer or your file manager and browse to the installer file. Then right click and invoke Run Sandboxed or sendto sandbox.

discs

Sorry, I didn't have default notification of responses to topics, so didn't see the response earlier.

Thank you for your reply, bman. Yes, quite the simplest solution! Thank you.