the sandbox runs as system and redirects things where it allows by its policy, catchign all the lower privelege requests and where allowed converting them to re

the sandbox runs as system and redirects things where it allows by its policy, catchign all the lower privelege requests and where allowed converting them to requests to the lower system. So now you just have to exploit the sandbox process instead of the av process. i'm sure someone will do it sooner than later :')... it always ends in tears these things.