I have enabled the AppContainer but how do I check if it is active, what are you using to see the integrity?
- Status
- Sep 22, 2014
- 1,767
Process Explorer and then in options check integrity
- Nov 19, 2014
- 2,346
Appcontainer breaks everything for me and nothing loads after enabling. That is weird.
Using chrome 49 beta though.
@Tornado Right click on the bar saying name/pid/etc, click choose column and then add integrity.
Using chrome 49 beta though.
@Tornado Right click on the bar saying name/pid/etc, click choose column and then add integrity.
- Oct 16, 2015
- 970
Launch Process Explorer, and then do the following: Click View menu -> Click Select Columns... menu entry -> Click Process Image tab -> Tick Integrity Level option
Works fine for me - v48 stable.
I think we should create a dedicated thread for this, we've almost hijacked Umbra's thread...
- Jan 22, 2014
- 577
no, this one
Only Chrome has it i guess.
Opera beta have this feature. (but browser die's xD)
- Jun 12, 2014
- 314
It's probably because of some third party security software trying to inject into the appcontainer processes.
That is normal and intended. If every process had the lowest integrity, nothing would work anymore. There has to be a supervising process with a higher integrity level to facilitate certain things for the lower integrity processes.
- Jan 22, 2014
- 577
- Nov 19, 2014
- 2,346
- Jun 12, 2014
- 314
You can configure Emsisoft not to inject into Chrome and AppContainer works then, though I cannot say whether this is advisable or not. Maybe someone from Emsisoft can comment.
@Fabian Wosar , @Emsisoft
@Fabian Wosar , @Emsisoft
- Aug 2, 2014
- 368
Well some news at least for me, directly answered by Alex Ionescu
Untrusted instead of AppContainer · Issue #183 · processhacker2/processhacker · GitHub
Untrusted instead of AppContainer · Issue #183 · processhacker2/processhacker · GitHub
- Mar 1, 2014
- 1,708
So, all along, even if AppContainer flag is enabled, Chrome still uses its own sandbox?
Regardless, though, I still believe that Chrome's sandbox is great (more or less than Windows' AppContainer). So, no worries from me.
- Aug 2, 2014
- 368
Yes, however I brought that info here cause some have been spreading across forums that enabling AppContainer flag in Chrome will set it to the lowest integrity level (AppContainer) into the OS. Which it's wrong.So, all along, even if AppContainer flag is enabled, Chrome still uses its own sandbox?
- Nov 19, 2014
- 2,346
No clue what that guy is really trying to say, like if the name matters but check the official chromium design documents. It's clearly mentioned that appcontainer is just a name for the Low Box token which is run in Low integrity level. So basically it's still unstrusted but in order for people to communicate easier they call it appcontainer. No clue why that dude is so butthurt about it but anyone calling it appcontainer integrity level is ok and if you don't get what they mean you need to check your iq level.
Dude thinks because he can code and knows the technical details that he can enforce rules on what people call stuff. It doesn't work like that. If Chrome wants to call their protection level potato you can bet that the integrity level with be called potato by everyone. Ok not everyone, maybe that dude will keep calling it potato.
Sandbox
Last edited:
- Aug 2, 2014
- 368
- Nov 19, 2014
- 2,346
It was not directed to you obviously but if you feel you are offended by it then... Read the sentence again
- Aug 2, 2014
- 368
Not offense taken, really. Just wondering why you said "you" twice in that sentence, guess you did bad wording. But let this off-topic alone, I got. No problem.
Untrusted = low box token
Appcontainer = low-box token modified based on "capabilities" set by the developer of the Metro App.
Appcontainer = low-box token modified based on "capabilities" set by the developer of the Metro App.
- Status
Similar threads
