Cameyo

Members Login
Username 
 
Password 
    Remember Me  
Post Info TOPIC: File type isolation


Newbie

Status: Offline
Posts: 4
Date:
File type isolation
Permalink   
 


Hi,

I'm currenlty trying Cameyo for personnal usage.

For security, I would like to be able to allow application to write files anywhere but only with a specified file type/extension. I mean "Isolated Mode" except for some kind of files. For example allow OpenOffice/scalc to write only .ods files, anywhere. I've done some search (documentation and forum) but the only thing that seems close is in the version history page: "Support for wildcard recursive isolation rules", but I found no way to use it. Is it possible? Would this be a safe method to protect from potential malware?

As a side question what is the "Strictly isolated" option for the file/registry, didn't find it either on the manual/forum.

Regards,

Laurent.



__________________


Guru

Status: Offline
Posts: 912
Date:
Permalink   
 

Hello,

Please be aware that Cameyo is not security software.  It is not intended to protect your system from malware.

Having said that, it is possible to allow file name extensions to pass through to the real filesystem by running the following command:

Cameyo.exe "-SetSandbox:FILES\*.ods=through" [location]\appname.cameyo.exe

For multiple extensions: Cameyo.exe "-SetSandbox:FILES\*.ods=through,,FILES\*.odt=through,,FILES\*.odp=through" OpenOffice.cameyo.exe

Again, Cameyo is for virtualization, not security.

Strictly Isolated prevents the package from reading from the real system.



__________________


Newbie

Status: Offline
Posts: 4
Date:
Permalink   
 

Thank you very much for the answer. It works fine.

I'm evaluating many solutions (Cameyo, ThinApp, Enigma, TurboNet...) to portabilize applications and for now Cameyo is on top of the list. Lightweight, portable, fast application starting, convenient package edition,  thank you very much and congratulations!!!

Some more questions if you don't mind:

Is there a "full and up to date" manual? I would like to know all these kind of command line options available.

I got a problem with an application that does not found additionnals fonts, it works in ThinApp (a font folder is created in the sandbox folder when running the application)... Is there recommended practice for that trouble?

I didn't manage to edit a big package using so that it uses .dat. I got an error "could not copy loader to.."(<app>.cameyo.exe is in the Desktop). Is there solution for that?

My main objective is to have a fully portabilized system. But as a side effect I think it will enforce security by controlling access to system files/registry am I wrong?



-- Edited by glolo3 on Tuesday 20th of September 2016 01:22:27 PM



-- Edited by glolo3 on Tuesday 20th of September 2016 03:28:01 PM

__________________


Guru

Status: Offline
Posts: 912
Date:
Permalink   
 

Regarding a Cameyo manual, we don't have anything more up to date than what's online.

Does your problematic application install fonts to %Windir%\Fonts or does it install them elsewhere?

Please try editing your big package again to see if "could not copy loader" error occurs again.  If you get the same error, try Cameyo.exe -Remove, launch Package Editor, and edit package again.

I have to caution against considering virtualization to be a means of security.  That is not its focus nor even tertiary intent, and it absolutely should not be used as its application.  A sandboxing program like Bufferzone is intended to protect against threats; whereas, expecting virtualization to provide even minimal protection is setting yourself up for disappointment.



__________________


Newbie

Status: Offline
Posts: 4
Date:
Permalink   
 

Thanks again for your answer.

About the manual, I agree there's a lot of interesting informations in the online documents. But I just can't find "Cameyo.exe "-SetSandbox:FILES\..." command anywhere. May be I missed something? I don't like to rely on products that seems to have "hidden/undocumented" functionnalities. Is there some full command lines, including the -SetSandbox... and may be other options somewhere?

About the .dat I tried the -Remove and I get the same message. I tried with 5 packages and I always get the same results. I'm probably missing something but I could not understand what. Any more advices?

About the Fonts they are installed in C:\Windows\Fonts and in the %Fonts% of the Cameyo package, that seems right isn't it? But does not work.

Is Cameyo integrate some "AppLink like" functionnalities so that I can use some dll from another package? I'm using a lot of musical application and they use plugins (vst).

Finally for now I'm a bit lost for now. I would like to go to Cameyo for many reasons but some applications (or applications functionnalities) don't work with it and work with ThinApp. And I got some applications that work Cameyo and not with ThinApp (packages includings exactly the same files/registry datas). Confusing... I would like to use one tool only.

 

 



-- Edited by glolo3 on Tuesday 27th of September 2016 03:00:37 AM



-- Edited by glolo3 on Tuesday 27th of September 2016 05:42:15 AM

__________________


Guru

Status: Offline
Posts: 912
Date:
Permalink   
 

1. I won't equivocate: there are some functions that are yet to be documented.  In time, the documentation will be updated.  Until then, this forum is a good place to find out whether a function exists.

2. Regarding the problem with the .dat packages, please try on another system, preferably a clean VM.

3. If your package has the fonts in %Fonts%, the only workaround we have for now is to install them unvirtualized.  Not a solution, we recognize, but that's where we are at present.

4. No, Cameyo does not have package linking capabilities.  Of course, you can capture multiple applications as a single package; that may or may not be a workable solution for your needs.

5. Virtualization is imperfect.  Some software cannot be virtualized at all.  You already know that sometimes one tool works and another fails.  We don't know which tool will be best for you, but this forum is available for any questions you have.



__________________


Newbie

Status: Offline
Posts: 4
Date:
Permalink   
 

Ok thanks for your clear answers.



__________________


Senior Member

Status: Offline
Posts: 147
Date:
Permalink   
 

mule wrote:

1. I won't equivocate: there are some functions that are yet to be documented.  In time, the documentation will be updated.  Until then, this forum is a good place to find out whether a function exists.

2. Regarding the problem with the .dat packages, please try on another system, preferably a clean VM.

3. If your package has the fonts in %Fonts%, the only workaround we have for now is to install them unvirtualized.  Not a solution, we recognize, but that's where we are at present.

4. No, Cameyo does not have package linking capabilities.  Of course, you can capture multiple applications as a single package; that may or may not be a workable solution for your needs.

5. Virtualization is imperfect.  Some software cannot be virtualized at all.  You already know that sometimes one tool works and another fails.  We don't know which tool will be best for you, but this forum is available for any questions you have.


 #1 is why I left Cameyo. It has its benefits but without proper documentation, one cannot utilize them. If the only option I have is to message the 1 support staff and wait a week, don't you think you are doing it wrong? There wouldn't be so many "I need help" threads if we had proper documentation. no

For now, I'll stick with PortableApps.com. There's a steep learning curve, as with this program with its lack of documentation, but it has many benefits, some you are looking for such as plugins and fonts. If you need help getting started, let me know.



__________________

Jeff Savage ~ BetaLeaf https://betaleaf.net/

Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.



Create your own FREE Forum
Report Abuse
Powered by ActiveBoard