Poll

Do you Agree?

Yes, High Priority.
6 (54.5%)
Yes, Low Priority.
4 (36.4%)
Maybe/Neutral
0 (0%)
No
1 (9.1%)

Total Members Voted: 11

Author Topic: Allow user to Save files when running inside the sandbox, Read nr 2  (Read 3753 times)

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
1. What actually happened or you saw:

User is not allowed to save downloaded files from web browser when running in sandbox.


2. What you wanted to happen or see:

When you run a web browser inside the sandbox and you download file to any location,
it will be redirected to the Comodo Shared space (and a ccav notification will popup that the downloaded file that you downloaded to your chosen folder was redirectd to Comod Shared space, go to CCAV menu to extract your file)

and if you want to save that downloaded file to the desktop you would have to go to the CCAV interface and click on(open) shared Space and drag that file from the CCAV interface "shared space window" to your desktop. (ofc any unknown would still be sandboxed if you would try to execute that file)

Edit: the downloads could be saved to the hidden BOXRoot folder(if comodo dont want to create a new hidden DownloadRoot folder) and when you try to download the file to: Destop, Program folder, Download folder or any else, the will will be redirected to BOXRoot, and user can only extract the file from CCAV ui Shared Space Menu.


3. Why you think it is desirable:


4. Any other information, screenshots etc:

See pic
"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

Offline cheater87

  • Comodo's Hero
  • *****
  • Posts: 704
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #1 on: August 12, 2017, 05:20:48 PM »
I highly approve of this!

Offline Umesh

  • Comodo Alumni
  • Comodo's Hero
  • *****
  • Posts: 3421
  • Comodo Alumni
    • COMODO
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #2 on: August 12, 2017, 06:17:28 PM »
Sounds good.
Thanks BlueTesta for nice illustration as well  :-TU
We can't stop malware entering user's PC but we render them use-less when they enter PC: Welcome to Comodo's Default Deny innovation

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #3 on: August 12, 2017, 06:30:51 PM »
Yes .... but with "lower Priority" ..... !!!  :-TU ;)
« Last Edit: August 12, 2017, 06:44:22 PM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #4 on: August 12, 2017, 06:48:10 PM »
Sounds good.
Thanks BlueTesta for nice illustration as well  :-TU

Thanks, Paint FTW  ;D
"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #5 on: August 12, 2017, 06:49:18 PM »
Paint FTW  ;D

perfectly adequate !!!!  :)
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline Zbc

  • Product Translator
  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 758
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #6 on: August 13, 2017, 08:32:44 AM »
Voted: Yes, Low Priority :-TU

Good option for advanced sandbox.

Offline Umesh

  • Comodo Alumni
  • Comodo's Hero
  • *****
  • Posts: 3421
  • Comodo Alumni
    • COMODO
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #7 on: November 10, 2017, 12:02:32 PM »
Hi Guys,
We want to improve this part and looking for some more feedback.

What do you think about following proposition:
1.
When running browser in Sandbox and if it drops a file of specific extension type (.exe / .doc / .pdf). Assume configurable extension list some where, user is shown alert as shown in: Alert.png. This dialog will be shown once per sandboxed application. i.e. if say you run Chrome in sandbox and it drops X files, alert is shown just once.

2.
When user presses "Review dropped files", it close the alert and opens up dialog as shown in enclosed pic: InSandboxFiles.png

3.
InSandboxFiles.png allows you to select one or more files and Re-store to actual location they were dropped. Also if user wants, he can select "Move to specific folder" option and select folder of his choice. This interface will only list Unknown or Safe files.

4.
InSandboxRunningApps.png shows new button "Review Dropped Files", that will show interface as shown in InSandboxFiles.png

Please let us know your thoughts.

Thanks
-umesh
We can't stop malware entering user's PC but we render them use-less when they enter PC: Welcome to Comodo's Default Deny innovation

Offline cheater87

  • Comodo's Hero
  • *****
  • Posts: 704
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #8 on: November 10, 2017, 05:29:50 PM »
Hi Guys,
We want to improve this part and looking for some more feedback.

What do you think about following proposition:
1.
When running browser in Sandbox and if it drops a file of specific extension type (.exe / .doc / .pdf). Assume configurable extension list some where, user is shown alert as shown in: Alert.png. This dialog will be shown once per sandboxed application. i.e. if say you run Chrome in sandbox and it drops X files, alert is shown just once.

2.
When user presses "Review dropped files", it close the alert and opens up dialog as shown in enclosed pic: InSandboxFiles.png

I really like this idea, one of the reasons I switched from CCAV to CIS is because of the shared space folder it had, this would be a great feature for those who want to browse sandboxed and still save stuff they download.

3.
InSandboxFiles.png allows you to select one or more files and Re-store to actual location they were dropped. Also if user wants, he can select "Move to specific folder" option and select folder of his choice. This interface will only list Unknown or Safe files.

4.
InSandboxRunningApps.png shows new button "Review Dropped Files", that will show interface as shown in InSandboxFiles.png

Please let us know your thoughts.

Thanks
-umesh

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #9 on: November 10, 2017, 05:41:14 PM »
once the assigned location is selected click apply to confirm.
"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

Offline Umesh

  • Comodo Alumni
  • Comodo's Hero
  • *****
  • Posts: 3421
  • Comodo Alumni
    • COMODO
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #10 on: November 10, 2017, 05:46:59 PM »
I intentionally kept it atomic and didn't have Apply.

e.g. once you select new location and use Restore, what will happen?

Re-store to original location or newly selected folder?

So idea was more, if you select Restore or select new location, entry is gone from listing.

Although we can show summary when you Close the dialog, like we show when you Purge.

What do you think?

once the assigned location is selected click apply to confirm.
We can't stop malware entering user's PC but we render them use-less when they enter PC: Welcome to Comodo's Default Deny innovation

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #11 on: November 10, 2017, 06:09:41 PM »
I intentionally kept it atomic and didn't have Apply.

e.g. once you select new location and use Restore, what will happen?

Re-store to original location or newly selected folder?

So idea was more, if you select Restore or select new location, entry is gone from listing.

Although we can show summary when you Close the dialog, like we show when you Purge.

What do you think?

i prefer this way.

1, chose your desired location by pressing on Move to specific folder/location
2, your desired location will show on Assigned Location
3, press apply to apply your desired action
4, the entry is now gone from listing.

im a fan off Ui that will show you what option you have decided, so you can visible read it b4 you apply it. (Same as CCAV Apps in Sandbox)

"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

Offline Umesh

  • Comodo Alumni
  • Comodo's Hero
  • *****
  • Posts: 3421
  • Comodo Alumni
    • COMODO
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #12 on: November 10, 2017, 06:17:42 PM »
So if i have selected specific location, Re-store should move file to newly selected location? i.e. it gets preference.

i prefer this way.

1, chose your desired location by pressing on Move to specific folder/location
2, your desired location will show on Assigned Location
3, press apply to apply your desired action
4, the entry is now gone from listing.

im a fan off Ui that will show you what option you have decided, so you can visible read it b4 you apply it. (Same as CCAV Apps in Sandbox)
We can't stop malware entering user's PC but we render them use-less when they enter PC: Welcome to Comodo's Default Deny innovation

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #13 on: November 10, 2017, 06:23:23 PM »
your way will ofc work.

But i think that way CCAV Apps in Sandbox is a good way how to tell the novie user whats gona happen, they can visible check what they decided and they can edit it if they made the wrong choice b4 they apply.
Instead of it being "live", they have to know what are gone happend b4 they do it, and they cant "visible see" what are gona happen.
"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

Offline BlueTesta

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 482
Re: Allow user to Save files when running inside the sandbox, Read nr 2
« Reply #14 on: November 10, 2017, 06:24:30 PM »
forget pic
"Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid."

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek