Skip to content

Commit

Permalink
add ConfidentialBox UseSbieDeskHack docs
Browse files Browse the repository at this point in the history
  • Loading branch information
wwxiaoqi authored Dec 30, 2023
1 parent de0ae2c commit b6f7e43
Show file tree
Hide file tree
Showing 3 changed files with 46 additions and 0 deletions.
4 changes: 4 additions & 0 deletions Content/AllPages.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,8 @@

[Compartment Mode](../PlusContent/compartment-mode.md)

[Confidential Box](ConfidentialBox.md)

[Config Level](ConfigLevel.md)

[Configuration Protection](ConfigurationProtection.md)
Expand Down Expand Up @@ -638,6 +640,8 @@

[Use Rule Specificity](UseRuleSpecificity.md)

[Use SbieDesk Hack](UseSbieDeskHack.md)

[Use Security Mode](UseSecurityMode.md)

[User Accounts Settings](UserAccountsSettings.md)
Expand Down
17 changes: 17 additions & 0 deletions Content/ConfidentialBox.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
# Confidential Box

_ConfidentialBox_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
ConfidentialBox=y
```

Use the 'ConfidentialBox=y' option to prevent the host process from reading access to the isolated process.

**Technical Details**

For more information, see [Box Encryption](../PlusContent/BoxEncryption.md) and [Box Preset Comparison](../PlusContent/box-preset-comparison.md).
25 changes: 25 additions & 0 deletions Content/UseSbieDeskHack.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
# Use SbieDesk Hack

_UseSbieDeskHack_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
UseSbieDeskHack=y
```

A desktop object solution that is now enabled by default for all processes.

**Technical Details**

This is a desktop object solution that is used for all processes.

It was initially implemented to address the issue of infinite callback problems caused by delayed loading (the infinite recursion problem has been resolved in version 0.4.0 / 5.43).

It is now enabled by default. This allows Electron applications to run without the need to set the 'SpecialImage=chrome,program.exe' option.

Related Sandboxie Plus setting:

Sandbox Options > Various Options > Compatibility > Use desktop object workaround for all processes

0 comments on commit b6f7e43

Please sign in to comment.