For security, I would like to be able to allow application to write files anywhere but only with a specified file type/extension. I mean "Isolated Mode" except for some kind of files. For example allow OpenOffice/scalc to write only .ods files, anywhere. I've done some search (documentation and forum) but the only thing that seems close is in the version history page: "Support for wildcard recursive isolation rules", but I found no way to use it. Is it possible? Would this be a safe method to protect from potential malware?
As a side question what is the "Strictly isolated" option for the file/registry, didn't find it either on the manual/forum.
Thank you very much for the answer. It works fine.
I'm evaluating many solutions (Cameyo, ThinApp, Enigma, TurboNet...) to portabilize applications and for now Cameyo is on top of the list. Lightweight, portable, fast application starting, convenient package edition, thank you very much and congratulations!!!
Some more questions if you don't mind:
Is there a "full and up to date" manual? I would like to know all these kind of command line options available.
I got a problem with an application that does not found additionnals fonts, it works in ThinApp (a font folder is created in the sandbox folder when running the application)... Is there recommended practice for that trouble?
I didn't manage to edit a big package using so that it uses .dat. I got an error "could not copy loader to.."(<app>.cameyo.exe is in the Desktop). Is there solution for that?
My main objective is to have a fully portabilized system. But as a side effect I think it will enforce security by controlling access to system files/registry am I wrong?
-- Edited by glolo3 on Tuesday 20th of September 2016 01:22:27 PM
-- Edited by glolo3 on Tuesday 20th of September 2016 03:28:01 PM
Regarding a Cameyo manual, we don't have anything more up to date than what's online.
Does your problematic application install fonts to %Windir%\Fonts or does it install them elsewhere?
Please try editing your big package again to see if "could not copy loader" error occurs again. If you get the same error, try Cameyo.exe -Remove, launch Package Editor, and edit package again.
I have to caution against considering virtualization to be a means of security. That is not its focus nor even tertiary intent, and it absolutely should not be used as its application. A sandboxing program like Bufferzone is intended to protect against threats; whereas, expecting virtualization to provide even minimal protection is setting yourself up for disappointment.
About the manual, I agree there's a lot of interesting informations in the online documents. But I just can't find "Cameyo.exe "-SetSandbox:FILES\..." command anywhere. May be I missed something? I don't like to rely on products that seems to have "hidden/undocumented" functionnalities. Is there some full command lines, including the -SetSandbox... and may be other options somewhere?
About the .dat I tried the -Remove and I get the same message. I tried with 5 packages and I always get the same results. I'm probably missing something but I could not understand what. Any more advices?
About the Fonts they are installed in C:\Windows\Fonts and in the %Fonts% of the Cameyo package, that seems right isn't it? But does not work.
Is Cameyo integrate some "AppLink like" functionnalities so that I can use some dll from another package? I'm using a lot of musical application and they use plugins (vst).
Finally for now I'm a bit lost for now. I would like to go to Cameyo for many reasons but some applications (or applications functionnalities) don't work with it and work with ThinApp. And I got some applications that work Cameyo and not with ThinApp (packages includings exactly the same files/registry datas). Confusing... I would like to use one tool only.
-- Edited by glolo3 on Tuesday 27th of September 2016 03:00:37 AM
-- Edited by glolo3 on Tuesday 27th of September 2016 05:42:15 AM
1. I won't equivocate: there are some functions that are yet to be documented. In time, the documentation will be updated. Until then, this forum is a good place to find out whether a function exists.
2. Regarding the problem with the .dat packages, please try on another system, preferably a clean VM.
3. If your package has the fonts in %Fonts%, the only workaround we have for now is to install them unvirtualized. Not a solution, we recognize, but that's where we are at present.
4. No, Cameyo does not have package linking capabilities. Of course, you can capture multiple applications as a single package; that may or may not be a workable solution for your needs.
5. Virtualization is imperfect. Some software cannot be virtualized at all. You already know that sometimes one tool works and another fails. We don't know which tool will be best for you, but this forum is available for any questions you have.
1. I won't equivocate: there are some functions that are yet to be documented. In time, the documentation will be updated. Until then, this forum is a good place to find out whether a function exists.
2. Regarding the problem with the .dat packages, please try on another system, preferably a clean VM.
3. If your package has the fonts in %Fonts%, the only workaround we have for now is to install them unvirtualized. Not a solution, we recognize, but that's where we are at present.
4. No, Cameyo does not have package linking capabilities. Of course, you can capture multiple applications as a single package; that may or may not be a workable solution for your needs.
5. Virtualization is imperfect. Some software cannot be virtualized at all. You already know that sometimes one tool works and another fails. We don't know which tool will be best for you, but this forum is available for any questions you have.
#1 is why I left Cameyo. It has its benefits but without proper documentation, one cannot utilize them. If the only option I have is to message the 1 support staff and wait a week, don't you think you are doing it wrong? There wouldn't be so many "I need help" threads if we had proper documentation.
For now, I'll stick with PortableApps.com. There's a steep learning curve, as with this program with its lack of documentation, but it has many benefits, some you are looking for such as plugins and fonts. If you need help getting started, let me know.