and in log there is no clickable option
see attached log
Setting it up in vm in a bit to check and see if i can reproduce it or something. Do you use version 5.1.3?
v 2.2
Can you link me where to download it from. I checked their site and they only had 5.1.3 and 5.0.6.
Also you might want to mention your OS if it's a specific to the issue.
my bad, I thought you were asking which version of rehips.
I am on libreoffice 5.1.2 (that is what the installation file says anyways, I can't actually open the program and check)
I will upload the installation file to OneDrive, so I can send you a link
I got 5.1.3 and it works just fine btw. Rehips even made the rules for it. Did you by any chance change the setting in the rehips rules for libreoffice?
Try this to start with. Go in rehips and find the rules called libreoffice and delete that. Then go on main gui and click install rules. Wait for rules to finish(takes a few min) and see if that fixes it.
What OS do you have?
windows 10 x64
sorry for stupid question from a beginner, but how do I find the rules?
I don't think I changed the rule, because I couldn't figure out how to do that.
Hmm i also use windows 10 64 bit so even better. To start do you use any other application because some need to allow rehips(i think you use NVT or VS which then you will need to allow a few stuff of rehips)? If yes disable them and try to launch libreoffice again.
Now the steps to reinstall rules.
Open rehips gui, click settings, click on the 3rd tab called Programs. There you see one called SYSTEM and another one with your pc account name. Expand the account username by clicking the little arrow to the left of it. There you will see one called Libreoffice. Click on that and then hit delete on your keyboard.
After that click ok and go in main rehips gui windows. Click install rules and wait until you get a msg that rules are installed(takes a few minutes).
When it's done try to launch libreoffice again.
I uninstalled NVT ERP before installing rehips.
but I have webroot secureanywhere (now disabled)
and hitmanpro.alert (exploit mitigation now disabled)
and libreoffice still does not start.
I will now check out the rules.
okay, after deleting rule and reinstalling rules, I at least got a pop-up message that Libre is blocked. That's semi-normal behavior.
I unblocked it, and it opened in a separate desktop.
I allowed it, and it opens non-sandboxed.
Still can't hit that sweet spot of opening sandboxed on regular desktop.
by the way, how can you add attachments to a post, when the browser is sandboxed?
Quote from: shmu26 on June 09, 2016, 09:11:57 PM
okay, after deleting rule and reinstalling rules, I at least got a pop-up message that Libre is blocked. That's semi-normal behavior.
I unblocked it, and it opened in a separate desktop.
I allowed it, and it opens non-sandboxed.
Still can't hit that sweet spot of opening sandboxed on regular desktop.
by the way, how can you add attachments to a post, when the browser is sandboxed?
You said it opened in a separate desktop and that's what it should do. Then you said it opened non sandbox. You closed the seperate desktop and started libre again? What blocked it btw you said all are disabled?
Oh now that i understood. You wanted libreoffice to open on the same desktop not a different one?
Browsers have access to C:\ReHIPS\Browser so you need to put the thing you want to attach there. Then when you are attaching browse to the location and it should work.
"You said it opened in a separate desktop and that's what it should do. Then you said it opened non sandbox. You closed the seperate desktop and started libre again? What blocked it btw you said all are disabled?
Oh now that i understood. You wanted libreoffice to open on the same desktop not a different one?"
after reinstalling rules, it was blocked.
when I went to the blocked tab and unblocked it, it then opened in separate desktop.
when I went to the isolated tab and allowed it, it then opened unsandboxed.
yes, I would like it to open sandboxed, but on my regular desktop, the way firefox does.
Programs that need hook control are launched at separate dekstop for security reasons.
You can check if it works without doing this steps i will write below. I must note that some stuff in libreoffice may or may not work doing this. Please tell me if you find something not working after doing this.
Do the same things i told you before to find the libreoffice rules and delete it. But this time don't delete but double click on the name. You will see a new box and at the bottom it has some arrows. Expand that, go on the second tab called privileges and deselect Use Seperate Desktop and DESKTOP_HOOKCONTROL and click ok. Launch libreoffice now and it should launch like Firefox.
that worked.
pretty good!
now I will try get my abode pdf reader to work. same basic problem.
Quote from: shmu26 on June 09, 2016, 09:40:31 PM
that worked.
pretty good!
now I will try get my abode pdf reader to work. same basic problem.
Adobe will not work without hook control so the only way to launch on the same desktop is to accept the "small"
security risk and only deselect Use Different Desktop.
Isolated programs are bound to isolated environments. Each isolated environment has ReHIPS user it's associated with. When ReHIPS executes program in isolation, it logs on from corresponding ReHIPS user and executes program from it. Failed to logon on program execution error means that ReHIPS failed to log on from ReHIPS user. Possible reasons:
1. failed to properly create user when this rule was created (unlikely, it should've caused another error window about this error);
2. ReHIPS user was deleted (maybe manually by mistake, maybe some other security software did it for some reason);
3. ReHIPS user password was changed (I have no idea why would any software do that, so most likely manually by mistake).
The easiest solution should be to delete this isolated environment and Install rules again. But if you want to look into it, I'd start looking into ReHIPS users, are they present, is password OK, etc.
thanks!
"Adobe will not work without hook control "
and what if I run Adobe unsandboxed?
Does it still get some sort of protection?
Quote from: shmu26 on June 09, 2016, 10:01:45 PM
"Adobe will not work without hook control "
and what if I run Adobe unsandboxed?
Does it still get some sort of protection?
Running isolated with hook control is a lot more secure than running it normally. Running it normally you just control if it can launch applications or not. I would suggest you go with isolated with hook controls enabled and different desktop disabled but it's up to you obviously.
sometimes I edit PDFs, so I want to save changes.
Quote from: shmu26 on June 09, 2016, 10:08:16 PM
sometimes I edit PDFs, so I want to save changes.
You can save. What you need to understand is that isolated programs have access to different folders. For example.
Browser - C:\ReHIPS\Browser
Adobe pdf - C:\ReHIPS\PDF
So when you want to save you browse to that location and save there. Then if you want to put it somewhere else you get it from there and paste it wherever you wish. Another option is to give access to adobe pdf to the folder you want to save to but that maximizes usability and minimizes security.
okay, so I am trying to get abode reader back to sandboxed.
I deleted it from allowed programs,
and also from isolated programs,
and reinstalled rules.
but it still opens unsandboxed.
Quote from: shmu26 on June 09, 2016, 10:28:14 PM
okay, so I am trying to get abode reader back to sandboxed.
I deleted it from allowed programs,
and also from isolated programs,
and reinstalled rules.
but it still opens unsandboxed.
You probably didn't delete all the rules that's why. After you install the rules again do you see the rules or they were not created?
okay, got it.
I had to go looking for all the relevant rules in the "all" tab.
now I got it to open sandbox on regular desktop.
thanks a million!
Quote from: shmu26 on June 09, 2016, 10:42:03 PM
okay, got it.
I had to go looking for all the relevant rules in the "all" tab.
now I got it to open sandbox on regular desktop.
thanks a million!
No worries. I suggest you give a quick read to the help files they are interesting and very helpful. If you have any more issues just ask.
okay,
one last question.
I have another PDF reader, FOXIT, and I only use it for safe files.
I need it to run unsandboxed so it will save settings etc.
I deleted it from the isolated programs,
and then I get a pop-up, and I choose to run it non-sanboxed.
It starts up, but hangs. it becomes unresponsive.
after a couple minutes it becomes responsive again, but when I close it and restart it,
the same story all over again.
never mind, it is sorted out.
there were two instances running at the same time (apparently, one got stuck at a certain point in my monkeying around, and it never actually opened, so I didn't know it was running)
Quote from: shmu26 on June 09, 2016, 11:01:35 PM
never mind, it is sorted out.
there were two instances running at the same time (apparently, one got stuck at a certain point in my monkeying around, and it never actually opened, so I didn't know it was running)
Nice. Glad you figured it out.
I hope these experiences of an intermediate user were interesting (amusing?) to the devs.
rehips is awesome beyond expectation, but still a bit challenging for a non-expert to wrap his mind around.
Quote from: shmu26 on June 10, 2016, 09:45:34 AM
I hope these experiences of an intermediate user were interesting (amusing?) to the devs.
rehips is awesome beyond expectation, but still a bit challenging for a non-expert to wrap his mind around.
Honestly it's because you didn't browse the help file in the program. That gives a good understanding of the program and makes you able to deal with most stuff.
Anw practice makes you better, Rome was not build in a day.....etc. You will learn the program one way or the other.
I did click on help a lot of times, and looked around in search and index, and somehow I did not come up with answers.
Maybe if I would have read the articles in order, with a studying mindset, rather than a "get answer to problem" mindset, then I would have gotten the hang of it.
Perhaps at a later stage, this program could benefit from an intro for idiots, or at least semi idiots, because real idiots are not going to be the target market of this product.
Hahahahaha semi idiots. You are killing me dude. ;D
Rehips has a youtube channel you might find useful. Check it out.
https://www.youtube.com/channel/UCG0BvsYENoG8JH4KTk_-dfw (https://www.youtube.com/channel/UCG0BvsYENoG8JH4KTk_-dfw)
Security is usually the opposite of usability. The more secure, the less usable the software is. At first ReHIPS was developed mostly with security in mind. But not so long ago we found security quite satisfying so we changed our focus to improving usability without serious impact on security. So we do our best :)
BTW you don't have to delete the rule and reinstall it if you want to change it. You can always change program execution rule from the settings.