Comodo Sandbox Settings

[Deleted member 2913]

If I want CIS to sandbox unknown programs & not show Unlimited Rights alerts, which option should I disable?

1. Detect programs which require elevated privileges

2. Show privilege elevation alerts for unknown programs

If I disable 1st option, 2nd is disabled too.

If I disable 2nd option, 1st remains enabled.

What means both the options disabled?

What means 1st enabled & 2nd disabled?

 

[viktik]

Disabling first one automatically disables 2nd one because if comodo is not detecting for elevated privilege then it cannot show alerts for privilege elevation.

1. Detect programs which require elevated privileges

2. Show privilege elevation alerts for unknown programs

 

[Deleted member 2913]

So what happens if only 2nd option is disabled?

 

[viktik]

So what happens if only 2nd option is disabled?

Unknown program will be sandboxed. No privilege alerts will be shown.
If a program running in sandbox requires elevated privilege then comodo will simply refuge it and will keep running the unrecognized program in sandbox.

 

[Deleted member 2913]

So the showing of popups depend on 2nd option?

 

[viktik]

So the showing of popups depend on 2nd option?

yes the popup for privilege elevation depend on it.

 

[Deleted member 2913]

So disabling the 1st option disables 2nd option too & the result is unknown programs are automatically run in sandbox & no popup is shown.
And disabling only the 2nd option, the result is unknown programs are automatically run in sandbox & no popup is shown.

The result is same for both the procedure above.
So is there any difference or there is no difference or am I missing something here?

 

[viktik]

These three settings decide which application will be sandboxed.
By default files rated as "Unrecognized" in File list gets sandboxed

These setting decide if comodo will detect for privilege elevations.
it is explained here : https://help.comodo.com/topic-72-1-623-7736-Configuring-the-Sandbox.html

 

[Moose]

Salutations,

Looking forward to seeing what cruelsister has to say about the above setting?

 

[Deleted member 2913]

Salutations,

Looking forward to seeing what cruelsister has to say about the above setting?

Virtik helped a lot.

I am still little confused.

I tried on my system with both options disabled & only 2nd option disabled with some samples/programs.
And I dont see any difference.
But I am sure I am missing something here that I am not understanding clearly, though Virtik tried to help a lot.

Lets see what Cruelsister has to say about this?
She is the reason I started using Comodo FW i.e without CAV. So now the responsibility is on her to make me understand easily & clearly

 

[rocky]

Enable 1st option and disable 2nd option. This lets programs like Firefox install and update. But sandboxes or blocks unknown without asking.

 

[Deleted member 2913]

Yeah, got it from Cruelsister recent video.