Sandboxie driver lifted

Block Drivers

BlockDrivers is a sandbox setting in Sandboxie.ini. It specifies whether Sandboxie will allow sandboxed programs to load drivers into the operating system. However, this setting does not govern the installation of new drivers – see more below.

Usage:

   .   .   .   [DefaultBox]
               BlockDrivers=n

Specifying n indicates that a sandboxed program may load drivers into the operating system. If this is not done, Sandboxie will deny the driver load attempt, and instead issue message SBIE2103.

Note: Disabling the protection afforded by BlockDrivers is not recommended.

The driver release function is limited to 4.01-02 and earlier versions;
if you don’t want to release all the bans , just release the designated drivers, and you need to modify the sandboxie source code and compile it yourself :

https://github.com/sandboxie-plus/Sandboxie

Driver Installation

Before a driver can be loaded, it must first be installed. Driver installation is not affected by the BlockDrivers setting. To allow driver installation, you should add the following OpenKeyPath setting:

OpenKeyPath=HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services

And you should additionally open the driver file, using OpenFilePath. This is needed because the driver path that will be set in the registry (in a key created below CurrentControlSet\Services) will typically not point inside the sandbox.

OpenFilePath=c:\program files\MyNewSoftware\SoftwareDriver.sys

Note: Allowing sandboxed programs to install drivers is not recommended.

Guess you like

Origin blog.csdn.net/qq_39517716/article/details/109236003