sandboxie-plus/Sandboxie

Chrome Portable Won't Run in Default Sandbox - Sandboxie Plus v5.55.22

Open

#1946 opened on Jun 13, 2022

View on GitHub
 (5 comments) (0 reactions) (0 assignees)C (18,328 stars) (1,985 forks)batch import
Browser: ChromeConfirmation PendingCrash DumpHelp WantedSoftware: Cylance

Description

What happened?

When I run Chrome.exe in the default sandbox, I get the following errors.

SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1 SBIE2112 Object is not accessible: \Device\NamedPipe\MemDef, call CreateFile (C0000034) access=0012019F initialized=1

Download link (Chrome Portable)

https://downloads.sourceforge.net/portableapps/GoogleChromePortable_102.0.5005.115_online.paf.exe

Form to obtain Cylance Protect demo (security software)

https://www.blackberry.com/us/en/products/cylance-endpoint-security/cylance-protect#demo

Crash dump

https://github.com/bbbzeliard/Sandboxie-Plus-Crash-Dumps/blob/75a3bbc1e135361c7d9e93578be0ab0ccc3cae28/chrome.exe.15232.dmp

To Reproduce

  1. Right-click "C:\Users\xxxxx\Documents\PortableApps\GoogleChromePortable\App\Chrome-bin\chrome.exe"
  2. Select "Run Sandboxed" from Windows context menu.

Expected behavior

I expected a new Chrome window to run in the default sandbox.

What is your Windows edition and version?

Windows 10 Enterprise, x64, OS Build 19044.1566

In which Windows account you have this problem?

User account with UAC protection completely turned off.

Please mention any installed security software

Cylance Protect

What version of Sandboxie are you running?

Sandboxie Plug v5.55.22

Is it a regression?

No response

List of affected browsers

Chrome - Version 102.0.5005.115 (Official Build) (32-bit)

In which sandbox type you have this problem?

In a Standard isolation sandbox (yellow sandbox icon).

Where is the program located?

The program is installed only outside the sandbox.

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Trace log

No response

Sandboxie.ini configuration

[GlobalSettings]

Template=LastPass
Template=RpcPortBindings
Template=7zipShellEx
Template=WindowsRasMan
Template=WindowsLive
Template=OfficeLicensing
Template=OfficeClickToRun
FileRootPath=\??\%SystemDrive%\Sandbox\%USER%\%SANDBOX%
SeparateUserFolders=y
KeyRootPath=\REGISTRY\USER\Sandbox_%USER%_%SANDBOX%
IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION%
EditAdminOnly=n
ForceDisableAdminOnly=n
ForgetPassword=n

[DefaultBox]

ConfigLevel=9
AutoRecover=y
BlockNetworkFiles=y
Template=OpenSmartCard
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Enabled=y
CopyLimitKb=2666342

[UserSettings_2DA60431]

SbieCtrl_UserName=bbbuttorff
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_NextUpdateCheck=1655743599
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_AutoRunSoftCompat=n
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_WindowCoords=461,0,1024,548
SbieCtrl_ActiveView=40021
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_AutoStartAgent=SandMan.exe
SbieCtrl_EnableAutoStart=y

Contributor guide

Tech stack
ccpp
Domain
securitydesktop
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
Windows system programmingSandboxie internalsC++ fundamentalsNamed pipes concept
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
15
Research direction
The issue involves Chrome Portable failing to run due to a named pipe access error (SBIE2112). Investigate the conflict with Cylance Protect security software. Check the source code for MemDef named pipe handling in Sandboxie's kernel driver or service. Look for similar issues in the repository. Consider adding a template or workaround for Cylance users. See comments for additional context.