D
Deleted Member 333v73x
Thread author
I have enabled the AppContainer but how do I check if it is active, what are you using to see the integrity?
- Status
Process Explorer and then in options check integrity
D
Deleted Member 333v73x
Thread author
Appcontainer breaks everything for me and nothing loads after enabling. That is weird.
Using chrome 49 beta though.
@Tornado Right click on the bar saying name/pid/etc, click choose column and then add integrity.
Using chrome 49 beta though.
@Tornado Right click on the bar saying name/pid/etc, click choose column and then add integrity.
Launch Process Explorer, and then do the following: Click View menu -> Click Select Columns... menu entry -> Click Process Image tab -> Tick Integrity Level option
Works fine for me - v48 stable.
I think we should create a dedicated thread for this, we've almost hijacked Umbra's thread...
no, this one
Only Chrome has it i guess.
Opera beta have this feature. (but browser die's xD)
- Jun 12, 2014
- 314
- 1,177
- 580
- 43
It's probably because of some third party security software trying to inject into the appcontainer processes.
That is normal and intended. If every process had the lowest integrity, nothing would work anymore. There has to be a supervising process with a higher integrity level to facilitate certain things for the lower integrity processes.
- Jun 12, 2014
- 314
- 1,177
- 580
- 43
You can configure Emsisoft not to inject into Chrome and AppContainer works then, though I cannot say whether this is advisable or not. Maybe someone from Emsisoft can comment.
@Fabian Wosar , @Emsisoft
@Fabian Wosar , @Emsisoft
Well some news at least for me, directly answered by Alex Ionescu
Untrusted instead of AppContainer · Issue #183 · processhacker2/processhacker · GitHub
Untrusted instead of AppContainer · Issue #183 · processhacker2/processhacker · GitHub
So, all along, even if AppContainer flag is enabled, Chrome still uses its own sandbox?
Regardless, though, I still believe that Chrome's sandbox is great (more or less than Windows' AppContainer). So, no worries from me.
Yes, however I brought that info here cause some have been spreading across forums that enabling AppContainer flag in Chrome will set it to the lowest integrity level (AppContainer) into the OS. Which it's wrong.So, all along, even if AppContainer flag is enabled, Chrome still uses its own sandbox?
No clue what that guy is really trying to say, like if the name matters but check the official chromium design documents. It's clearly mentioned that appcontainer is just a name for the Low Box token which is run in Low integrity level. So basically it's still unstrusted but in order for people to communicate easier they call it appcontainer. No clue why that dude is so butthurt about it but anyone calling it appcontainer integrity level is ok and if you don't get what they mean you need to check your iq level.
Dude thinks because he can code and knows the technical details that he can enforce rules on what people call stuff. It doesn't work like that. If Chrome wants to call their protection level potato you can bet that the integrity level with be called potato by everyone. Ok not everyone, maybe that dude will keep calling it potato.
Sandbox
Last edited:
It was not directed to you obviously but if you feel you are offended by it then... Read the sentence again
Not offense taken, really. Just wondering why you said "you" twice in that sentence, guess you did bad wording. But let this off-topic alone, I got. No problem.
D
Deleted member 178
Thread author
Untrusted = low box token
Appcontainer = low-box token modified based on "capabilities" set by the developer of the Metro App.
Appcontainer = low-box token modified based on "capabilities" set by the developer of the Metro App.
- Status
You may also like...
-
-
Google Chrome to block admin-level browser launches for better security- Started by Gandalf_The_Grey
- Replies: 1
-
-
Chrome vs. Firefox vs. Edge in 2026 — Which Browser Should Home Users Trust?- Started by Bot
- Replies: 275
-