When I manually sandbox an application I’m stuck with very specific rules.
Consider that Chrome will execute many many processes. Because of this I Can’t sandbox it higher than Partially Limited or the sandbox will prevent it from opening more than 10 processes.
I’d like to be able to create a custom sandbox on a per-program basis as well as a custom automatic sandbox.
I’d also like to let specific sandboxes interact with eachother. This way I can sandbox chrome AND java instead of just one or the other (if you do both and try running java in Chrome it crashes.)
This would solve a lot of the problems with the sandbox for me. Under advanced if you could say “Allow access to protected COM interfaces” and have specific things like that it would be really great.