Skip to content

Commit

Permalink
Disable sandbox AppLocker on Vista
Browse files Browse the repository at this point in the history
  • Loading branch information
K4sum1 committed Oct 28, 2024
1 parent 339b121 commit 914f723
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -277,6 +277,9 @@ static void AddDeveloperRepoDirToPolicy(sandbox::TargetPolicy* aPolicy) {
#undef WSTRING

static void EnsureAppLockerAccess(sandbox::TargetPolicy* aPolicy) {
if (!IsWin7OrLater()) {
return;
}
if (aPolicy->GetLockdownTokenLevel() < sandbox::USER_LIMITED) {
// The following rules are to allow DLLs to be loaded when the token level
// blocks access to AppLocker. If the sandbox does not allow access to the
Expand Down

0 comments on commit 914f723

Please sign in to comment.