海运的博客

备份下自己的Sandboxie配置文件：

[GlobalSettings]

FileRootPath=R:\Sandbox\%USER%\%SANDBOX%\
ProcessGroup=<StartRunAccess_Firefox>,firefox.exe,plugin-container.exe,imeutil.exe,rundll32.exe,wubiup.exe,explorer.exe,thunderliveud.exe,winrar.exe
ProcessGroup=<StartRunAccess_IE>,iexplore.exe
ProcessGroup=<InternetAccess_IE>,iexplore.exe
ProcessGroup=<StartRunAccess_Cradio>,cradio.exe
ProcessGroup=<InternetAccess_Cradio>,cradio.exe
ProcessGroup=<InternetAccess_Firefox>,firefox.exe,plugin-container.exe,wubiup.exe
InjectDll=C:\Program Files\Sandboxie\sbiextra\sbiextra.dll
InjectDll64=C:\Program Files\Sandboxie\sbiextra\sbiextra_x64.dll
Template=OfficeLicensing

[UserSettings_4BC00582]

SbieCtrl_UserName=administrator
SbieCtrl_NextUpdateCheck=1357643165
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_BoxExpandedView_Firefox=n
SbieCtrl_BoxExpandedView_Program=y
SbieCtrl_BoxExpandedView_QQ=n
SbieCtrl_BoxExpandedView_USB=y
SbieCtrl_BoxExpandedView_Cradio=n
SbieCtrl_BoxExpandedView_IE=y
SbieCtrl_ReloadConfNotify=n
SbieCtrl_EditConfNotify=n
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=n
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_WindowLeft=295
SbieCtrl_WindowTop=150
SbieCtrl_WindowWidth=660
SbieCtrl_WindowHeight=450
SbieCtrl_ActiveView=40021
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310

[QQ]

Enabled=y
ConfigLevel=6
ForceProcess=qq.exe
LeaderProcess=qq.exe
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
ClosedFilePath=D:\
ClosedFilePath=E:\
ClosedFilePath=F:\
ClosedFilePath=\Device\Mup\
OpenFilePath=%Personal%\Tencent Files\
OpenFilePath=%AppData%\LocalLow\SogouWB*

[Firefox]

Enabled=y
ConfigLevel=6
Template=Firefox_Profile_DirectAccess
DropAdminRights=y
ForceProcess=firefox.exe
LeaderProcess=firefox.exe
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
OpenFilePath=firefox.exe,D:\下载专用\
OpenFilePath=firefox.exe,D\Downloads\Image
OpenFilePath=firefox.exe,%Local AppData%\*\safebrowsing\*
OpenFilePath=%AppData%\LocalLow\SogouWB*
ClosedFilePath=E:\
ClosedFilePath=F:\
ClosedFilePath=\Device\Mup\
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Http\*
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Nsi
ClosedFilePath=!<InternetAccess_Firefox>,\Device\RawIp6
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Udp6
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Tcp6
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Ip6
ClosedFilePath=!<InternetAccess_Firefox>,\Device\RawIp
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Udp
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Tcp
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Ip
ClosedFilePath=!<InternetAccess_Firefox>,\Device\Afd*
ClosedIpcPath=!<StartRunAccess_Firefox>,*

[IE]

FileRootPath=R:\IE\
Enabled=y
ConfigLevel=6
Template=IExplore_ProtectedStorage
Template=IExplore_Feeds_DirectAccess
Template=IExplore_Cookies_DirectAccess
Template=IExplore_Favorites_RecoverFolder
Template=IExplore_Favorites_DirectAccess
Template=IExplore_Force
DropAdminRights=y
LeaderProcess=iexplore.exe
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
ClosedFilePath=D:\
ClosedFilePath=E:\
ClosedFilePath=F:\
ClosedFilePath=\Device\Mup\
ClosedFilePath=!<InternetAccess_IE>,\Device\Http\*
ClosedFilePath=!<InternetAccess_IE>,\Device\Nsi
ClosedFilePath=!<InternetAccess_IE>,\Device\RawIp6
ClosedFilePath=!<InternetAccess_IE>,\Device\Udp6
ClosedFilePath=!<InternetAccess_IE>,\Device\Tcp6
ClosedFilePath=!<InternetAccess_IE>,\Device\Ip6
ClosedFilePath=!<InternetAccess_IE>,\Device\RawIp
ClosedFilePath=!<InternetAccess_IE>,\Device\Udp
ClosedFilePath=!<InternetAccess_IE>,\Device\Tcp
ClosedFilePath=!<InternetAccess_IE>,\Device\Ip
ClosedFilePath=!<InternetAccess_IE>,\Device\Afd*
ClosedIpcPath=!<StartRunAccess_IE>,*

[USB]

Enabled=y
ConfigLevel=6
DropAdminRights=y
ForceFolder=I:\
ForceFolder=H:\
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
ClosedFilePath=C:\
ClosedFilePath=D:\
ClosedFilePath=E:\
ClosedFilePath=F:\
ClosedFilePath=\Device\Mup\
ClosedFilePath=\Device\Http\*
ClosedFilePath=\Device\Nsi
ClosedFilePath=\Device\RawIp6
ClosedFilePath=\Device\Udp6
ClosedFilePath=\Device\Tcp6
ClosedFilePath=\Device\Ip6
ClosedFilePath=\Device\RawIp
ClosedFilePath=\Device\Udp
ClosedFilePath=\Device\Tcp
ClosedFilePath=\Device\Ip
ClosedFilePath=\Device\Afd*
ClosedIpcPath=*

[Program]

Enabled=y
ConfigLevel=6
FileRootPath=R:\Program Files\

[Cradio]

Enabled=y
ConfigLevel=6
DropAdminRights=y
NeverDelete=n
ForceProcess=cradio.exe
LeaderProcess=cradio.exe
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
ClosedFilePath=E:\
ClosedFilePath=F:\
ClosedFilePath=\Device\Mup\
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Http\*
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Nsi
ClosedFilePath=!<InternetAccess_Cradio>,\Device\RawIp6
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Udp6
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Tcp6
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Ip6
ClosedFilePath=!<InternetAccess_Cradio>,\Device\RawIp
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Udp
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Tcp
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Ip
ClosedFilePath=!<InternetAccess_Cradio>,\Device\Afd*
ClosedIpcPath=!<StartRunAccess_Cradio>,*

Sandboxie编写配置文件时可使用变量，常用变量如下：

sandbox 当前的沙盘名称
user/username 当前系统用户名称
ProgramFiles 程序安装目录，如C:\Program Files
SystemRoot 系统目录，如C:\Windows 
SystemDrive 系统分区，如C:
UserProfile 当前用户目录，如C:\Users\Administrator
tmp 系统临时目录，如C:\Windows\Temp 
AppData 用户数据目录，如C:\Users\Administrator\AppData
Local AppData C:\Users\Administrator\AppData\Local

更改Sandboxie默认变量：

Ovr.Tmpl.Firefox=C:\Firefox\Profiles\

设置Sandboxie变量：

Reg.Desktop=%USERPROFILE%\Desktop

Centos下进入单用户模式修改root密码，添加GRUB引导参数：

single

Debian直接引导进入Bash环境，添加GRUB引导参数：

init=/bin/bash

进入Bash后挂载系统为读写并修改root密码：

mount -no remount,rw /
passwd

XenServer虚拟机系统模板对内存等资源有做限制，在新建虚拟机时分配的资源不能小于模板最小限额。
XenServer下查看CentOS6 32位模板内存最小限制：

xe template-list name-label=CentOS\ 6\ \(32-bit\) params=memory-static-min --minimal
536870912

可见内存最小限制为512M，如果安装Centos6虚拟机内存不能小于512M，修改Centos模板内存最小限制为128M：

xe template-list name-label=CentOS\ 6\ \(32-bit\) params=uuid --minimal
#查看Centos模板uuid
xe template-param-set uuid=<uuid> memory-static-min=128MiB
#修改内存最小限制为128M