是否有针对Windows平台的轻量级，可编程的沙盒API？ [英] Is there a lightweight, programmable Sandbox API for the Windows platform?

问题描述

要在家里运行不可信code我用VMware虚拟机。我想找到运行不可靠的应用替代轻量级沙盒API，无需安装VMware的开销，或任何其他类型一样，最终用户虚拟化工具。 （修改我不希望它举办一个操作系统 - 我希望它运行不受信任的应用程序）。

To run untrusted code at home I use a VMWare virtual machine. I want to find an alternate lightweight sandbox API for running untrusted applications, without the overhead of installing VMWare, or any other kind of end-user virtualization tool like that. ( I don't want it to host an OS - I want it to run untrusted apps).

理想情况下，沙箱会（或可以作出）透明的，所以在沙箱中运行应用程序不显示任何额外的镀铬或功能。 （难道他们不这样做在Mac上的Parallels）

Ideally the sandbox would be (or could be made) transparent so the app running in the sandbox doesn't display any extra chrome or features. (Don't they do this in Parallels on the Mac)

我在Windows .NET开发人员边一个API希望如此，而不是启动了专门的图形用户界面，我可以为它的脚本场景。

The Windows .NET developer side of me wishes for an API so instead of booting up a special GUI, I can script scenarios for it.

这将是像谷歌Chrome网络浏览器如何包含它自己的技术，从互联网上运行，以保护系统沙箱脚本。谷歌并不需要与他们的浏览器分发VMWare的，但他们实现应用程序沙箱安全。

It would be like how the Google Chrome web browser contains its own technology to sandbox scripts running from the Internet to protect the system. Google doesn't need to distribute VMWare with their browser and yet they achieve sandbox security for apps.

编辑：

寻找轻量级的东西像谷歌Chrome浏览器包含了像极大地制约了文件/网络/ UI访问，低权限等功能，不找运行/托管自己的操作系统。

Looking for something lightweight like Google Chrome contains with features like greatly restricted file/network/UI access, low privileges, etc. Not looking for running/hosting its own OS.

推荐答案

没有，没有。

我的意思是，你可以使用不同的Windows帐户（与任何权限，你认为合适的），但随后你需要舒适的应用不可信不能突破这一点。但你必须与VMWare是同样的问题（它已在，让您摆脱过去的错误）。做最好的办法是在虚拟机上运行。

I mean, you can use a different Windows account (with whatever permissions you consider appropriate), but then you need to be comfortable that the untrusted app can't break out of that. But you do have that same problem with VMWare (it has had bugs in the past that let you break out). Best thing to do is run in a Virtual Machine.

这篇关于是否有针对Windows平台的轻量级，可编程的沙盒API？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！