New
#11
Check Portable Apps and the Apps button:
PortableApps.com - Portable software for USB, portable, and cloud drives
QUESTION: MS Word 2013 - Possible to run PORTABLE + SANDBOXED?
-
-
New #12
Thank you.
FYI: Already checked... not available at PortableApps.com.
Portable Sandbox
The revised layout of the sandbox that is introduced in version 2.80 allows for greater portability of the sandbox across computers. By redirecting programs to create sandboxed objects which have a nonspecific path, it is possible to populate a sandbox on one computer, then carry this sandbox to another computer and keep using it.
For example, consider installing a game program to a portable device such as a USB memory stick which is mounted as drive P. The game may install its files to a folder on drive P, but any menu shortcuts it creates will be installed in the Windows Start menu of the local computer, outside drive P. And any registry keys it creates will also be created in the Windows registry, also outside the USB device.
By contrast, if you set the container folder to drive P (for instance P:\Sandbox), then install the game into the (sandboxed) drive C, then all objects created by the installation will be redirected to drive P.
You can then carry the USB drive to another computer where Sandboxie is installed, and set the container folder on that other computer to drive P. Through the Sandboxie Start menu, you will see the menu shortcuts installed by the game, and when you start it, the game will find its settings as they were recorded in the sandboxed registry.
Note that Sandboxie itself is not portable software, but it facilitates the portability of a large number of applications.
I recently became a Sandboxie registered Licensee... but have not yet installed it... have contacted SandBoxie.com early today (Swiss time)... but not received a response yet.
This Google Search yields portable results from many 3rd party websites... but nothing from Sandboxie.com
I was hoping that Bo Elam or Pyramid10 might also take a crack at this since I know from previous posts that they both have extensive experience with SandBoxie using it as their standard security protocol.
Thank you much!
~ Alan
-
-
-
New #15
Bree:
I am very happy with you!!!
but much less pleased with myself!!! LOL!
however I must admit that LibrOffice's rendering of the comments is both attractive and excellent.
THX.
I think I will move the Sandboxie issue to its own thread so it's not lost in the MS Word / LiberOffice issue.
Thanks again,
~ Alan
-
-
New #17
@ab1kenobee Hi Alan. I am not familiar with MS Word 2013 only but very likely it cant be installed sandboxed. Not all programs can be installed in a sandbox. In the case of Microsoft Office, specially now with C2R, is too complicated to install in a sandbox.
I see you also talked in this thread about Libre Office. Libre you can install it sandboxed and run it from the sandbox. I just tested it before writing this post, installs perfectly well in a sandbox, and works fine. Personally, for Office, I use the Portable version of Libre Office. I install it in the real system, and run files sandboxed. Sandboxie and Libre get along very well. Libre is very easy to setup to run sandboxed.
In the other thread, you mentioned you bought a license for SBIE, that allows you to force Libre office programs to run sandboxed automatically, you should do that if you are not doing it yet. Also, for better isolation, you should create a dedicated sandbox for Libre. This allows you to set and restrict the sandbox based on Libre.
QUESTION: Can Sandboxie be installed as a portable? - Windows 10 Forums
Bo
-
New #18
Bo:
Happy to see you back.
I have not yet implemented Sandboxie after susbscribing... next step.
Would it be possible to provide explicit instructions as a reference...
How to create a dedicated sandbox for Libre
...since I have ZERO experience with Sandboxie to date:
Much appreciate,
~ Alan
-
-
New #19
I would simply use the Portable version of LibreOffice, free and works with many Office files except Outlook and Publisher and can open many other formats such as Works, WordPro/Write, Lotus WordPro, WordPerfect just to list a few.
Home | LibreOffice - Free Office Suite - Fun Project - Fantastic People
-
New #20
To create a new sandbox you go to Sandboxie control>Sandbox>Create new sandbox, in the screen that opens up you ll have the option to name the new sandbox as you wish. Since this sandbox is going to be your dedicated Libre Office sandbox, name it Libre. You also have the option to either copy settings from existing sandboxes or not to. Choose None.
The sandbox you created comes with default settings. In a default settings sandbox, all programs that attempt to start and run in the sandbox can run, and all programs that run can have access to the internet, and have access to all files and folders in your system.
Next step is to restrict what programs are allowed to do in the sandbox. Basically what I do when I set a new sandbox is restrict it as tight as possible without losing any usability. I try to achieve a balance between usability and security and always get it done. So, in the end, I am always able to run programs in the sandbox same as if I was not using Sandboxie. If you set a sandbox correctly, the interaction between sandboxed programs and the non sandboxed environment should be flawless.
Libre is very easy to setup to run properly in the sandboxed environment. With a few changes to default settings you can set a very secure sandbox for Libre without losing usability.
1. Make soffice.bin a Forced program. By doing this, any Office file that runs in the system, witll run sandboxed automatically in the Libre Office. It makes sandboxing automatic, no thinking required to sandbox files.
To make "soffice.bin" a Forced program go to Sandbox settings in your Libre Office sandbox:
Sandbox settings>Program Start>Forced programs, Click Add program. From there navigate to soffice.bin to select it and add it or you can write it in the block there for that purpose.
2. In this step, you restrict the programs that can run. Once you add programs in this restriction tab, this will be the only programs that are allowed to run in the Libre sandbox. Any other program that attempts to run, it will be blocked.
For Calc, Writer, Impress, etc, to run in the sandbox, allow:
soffice.bin
soffice.exe
dllhost.exe
You really dont have to allow dllhost but for a more seamless interaction between SBIE and the non sandboxed system I recommend you allow it to run.
So, go here and add the exes I wrote above:
Sandbox settings>Restrictions>Start/Run access, Click Add program to select them
3. Internet access. Since you dont need Office files to have access to the internet and Libre doesnt require it to work properly, for security, disallow all programs from having access to the internet.
Sandbox settings>Restrictions>Internet access, Click Block all programs.Once you do this, there is no phoning home.
4. Drop rights. This setting is helpful if you run your system as an Administrator. I do, so I use it. This setting strips Administrator rights from programs running in this sandbox. So, if something malicious gets to run, it cant install anything in the sandboxed environment.
Sandbox settings>Restrictions>Drop rights, Click the option.
5. Another important setting you want to implement are the ones that help you protect your sensitive files and folders from being stolen. Remember, by default, sandboxed programs can read all files and programs that are in the system. So, you want to block sandboxed programs from accessing your sensitive files and folders. We already disallowed all programs that run in the Libre sandbox from having internet access and restricted to a few the programs allowed to run, so even if your personal files and folders are accessed, the chances an infected Office file steals your files and phone home are close to none. But even so, this is a great setting that keeps your files from getting stolen. This setting is more important in sandboxes where you allow access to the internet, like your browsers sandboxes.
To restrict access to files and folders, go here:
Sandbox settings>Resource access>File access>Blocked access, Click Add for navigating to select the files and folders you like to block sandboxed programs from having access/read.
There are other setting related to access but you can start with the one above.
6. Set the sandbox to delete on closing sandboxed programs.
Sandbox settings>Delete>Delete Invocation, Tick Automatically delete contents of the sandbox
7. Saving files you create or Edit in the sandbox. For convenience, you wan to be able to save files. So, when you delete contents of the sandbox, the only changes made by sandboxed programs that will survive deletion of the sandbox are the ones you allow. Like for example, an edit you do to an Excel file, if you like to save that change, you save it. If you dont want to save the change, you dont save it when you get the SBIE prompt to do it after you close sandboxed programs.
In my case, I only save Office files to the desktop. So I add Desktop in the tab below. Sandboxie will save files only to the folders you add in Quick recovery:
Sandbox settings>Recovery>Quick recovery
Thats about it, Alan. Enjoy it.
Bo
Quote
Related Discussions
