3 ms·

I had written a jail for Windows a long long time ago - it was inspired by Unix's jail. For an app you could configure what filesystem and registry access was

I had written a jail for Windows a long long time ago - it was inspired by Unix's jail. For an app you could configure what filesystem and registry access was allowed and you could redirect FS access. Implemented it as a kernel driver that hooked into the relevant system calls. It was easier to do kernel dev back then (we are talking mid 2000's) - i havent touched windows kernel coding in years. I wonder if Microsoft has implemented a jail for processes in recent versions of windows. Running browsers in a VM can be cumbersome.

jakejarvis 7y ago
Agreed about VMs in everyday use, and I'm wondering if the new Windows 10 Pro/Enterprise sandboxes would be a sufficiently safe alternative in these scenarios. After skimming this white paper it seems like they would, but I'm no expert in this area: https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/Windows-Sandbox/ba-p/301849 https://techcommunity.microsoft.com/t5/Windows-Kernel-Intern...