How to restrict a program of filesystem access?

[CodeCubeNeo]

How do I restrict a program like DiskInternal's LinuxReader, to only one drive (and maybe read only)? And how to only allow it to write in one specific folder on the host?

[offhub]

Are you using the Plus UI?

[CodeCubeNeo]

yes, sandboxie-plus version if that is what u mean?

[offhub]

Right-click on the sandbox > Sandbox Options > Resource Access > Files > Add File/Folder

• By default Sandboxie doesn't allow writing to Host system.

1. Select Open if the program is installed outside the sandbox.
2. Select Open for All if the program is installed inside the sandbox.

• You can get the disk numbers from Windows > Run > DiskMgmt
• Uncheck the boxes if you don't want to block disk then Apply.

Example config: (Sandbox Options > Edit ini Section)

OpenFilePath=%UserProfile%\Downloads
ClosedFilePath=\Device\Harddisk0\
ClosedFilePath=\Device\Harddisk1\

[ghost]

I was still able to browse folders on this disk. Closing path to partition worked though