Sandboxie - wersje stabilne

[Camel1965]

Sandboxie 5.49.5 / 0.7.3 /

Changes in Sandboxie 5.49.5:

Added

• added “UseSbieWndStation=y” to emulate CreateDesktop for selected processes, not only for Firefox and Chrome
• added option to drop the console host process integrity, now you can use “DropConHostIntegrity=y”
• added option to easily add local templates

Changed

• reworked window hooking mechanism to improve performance
  — resolves issues with file save dialogs taking 30+ sec to open
  — this fix greatly improves the win32 GUI performance of sandboxed processes
• reworked RPC resolver to be ini configurable
  — the following options are now deprecated:
  — “UseRpcMgmtSetComTimeout=some.dll,n”, so use “RpcPortBinding=some.dll,*,TimeOut=y”
  — “OpenUPnP=y”, “OpenBluetooth=y”, “OpenSmartCard=n” use the new templates instead
  — See the Templates.ini for usage examples

Fixed

• fixed process-specific hooks being applied to all processes in a given sandbox
• fixed issue with messages and templates sometimes not being properly displayed in the SandMan UI
• fixed issue with compatibility settings not being applied properly
• fixed auto delete issue that got introduced with 0.7.1
• fixed issue with NtSetInformationFile, FileDispositionInformation resulting in Opera installer failing
• fixed issue with MacType introduced in the 0.7.2 build
• fixed global sandboxed windows hooks not working when window rename option is disabled
• fixed issue with saving local templates
• fixed issue when using runas to start a process that was created outside of the Sandboxie supervision
  — since the runas facility is not accessible by default, this did not constitute a security issue
  — to enable runas functionality, add “OpenIpcPath=\RPC Control\SECLOGON” to your Sandboxie.ini
  — please take note that doing so may open other yet unknown issues
• fixed a driver compatibility issue with Windows 10 32 bit Insider Preview Build 21337
• fixed issues with driver signature for windows 7

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie v0.7.4 / 5.49.7

ChangeLog
Added

• added "UseSbieWndStation=y" to emulate CreateDesktop for selected processes, not only for Firefox and Chrome
• added option to drop the console host process integrity, now you can use "DropConHostIntegrity=y"
• added option to easily add local templates
• added option to disable file migration prompt
• added UI options for variouse security isolation features
• added missing functionality to set template values in the plus UI

Changed

• reworked window hooking mechanism to improve performance
  -- resolves issues with file save dialogs taking 30+ sec to open
  -- this fix greatly improves the win32 GUI performance of sandboxed processes
• reworked RPC resolver to be ini configurable
  -- the following options are now deprecated:
  --- "UseRpcMgmtSetComTimeout=some.dll,n", so use "RpcPortBinding=some.dll,*,TimeOut=y"
  --- "OpenUPnP=y", "OpenBluetooth=y", "OpenSmartCard=n" use the new templates instead
  -- See the Templates.ini for usage examples
• Align default settings of AutoRecover and Favorites to the Plus version (thanks isaak654)
• list of email clients and browsers is now centralized on Dll_GetImageType

Fixed

• fixed process-specific hooks being applied to all processes in a given sandbox
• fixed issue with messages and templates sometimes not being properly displayed in the SandMan UI
• fixed issue with compatibility settings not being applied properly
• fixed auto delete issue that got introduced with 0.7.1
• fixed issue with NtSetInformationFile, FileDispositionInformation resulting in Opera installer failing
• fixed issue with MacType introduced in the 0.7.2 build
• fixed global sandboxed windows hooks not working when window rename option is disabled
• fixed issue with saving local templates
• fixed issue when using runas to start a process that was created outside of the Sandboxie supervision
  -- since the runas facility is not accessible by default, this did not constitute a security issue
  -- to enable runas functionality, add "OpenIpcPath=\RPC Control\SECLOGON" to your Sandboxie.ini
  -- please take note that doing so may open other yet unknown issues
• fixed a driver compatibility issue with Windows 10 32 bit Insider Preview Build 21337
• fixed issues with driver signature for windows 7
• fixed minor issue with logging internet blocks
• fixed issue with file recovery when located on a network share
• fixed ui issue with CallTrace
• fixed crated sandbox links gettign double extension
• fixed misplaced labels in the classic ui (thanks isaak654)
• fixed separator line in Sbiectrl (thanks isaak654)

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Grandalf]

Sandboxie v0.7.5 / 5.49.8

Version 0.7.5 / 5.49.8 released 8 hours ago:

Added:

• with "OpenClipboard=n" clipboard access for a sandbox can be now disabled

Changed:

• now by default the OpenBluetooth template is enabled to enable compatybility with unity games
• "PreferExternalManifest=program.exe,y" can now be set on a per process basis

Fixed:

• fixed compiled issues with the most recent vs2019 update
• fixed issue with vivaldi browser
• fixed some issues with box options in the plus ui
• fixed some issues with hw acceleration in chromium based browsers
• the stop all command now issues "kmdutill scandll" first to solve issues when the SbieDll.Dll is in use
• workaround for electorn apps, by forcing a additional commandline argument on the gpu renderer process

Pobieranie:

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie v0.8.0 / 5.50.0

Added

• Sandboxie now applies by default "Close...=!,..." directives to non-excluded images if they are located in a sandbox
  -- added 'AlwaysCloseForBoxed=n' to disable this behaviour as it may not be always desired, and it doesn't provide extra security
• added process image information to Sandman UI
• localized template categories in the Plus UI
• added "DisableResourceMonitor=y" to disable resource access monitor for selected boxes
• added option to show trace entries only for the selected sandbox
• added "UseVolumeSerialNumbers=y" that allows drive letters to be suffixed with the volume SN in the \drive\ sandbox location
  -- it helps to avoid files mixed together on multiple pendrives using the same letter
  -- note: this option is not compatible with the recovery function of the Classic UI, only SandMan UI is fully compatible

Changed

• portable cleanup message now has y/n/c options
• consolidated Proc_CreateProcessInternalW and Proc_CreateProcessInternalW_RS5 to remove duplicate code
• the ElevateCreateProcess fix, as sometimes applied by the Program Compatibility Assistant, will no longer be emulated by default
  -- use 'ApplyElevateCreateProcessFix=y' or 'ApplyElevateCreateProcessFix=program.exe,y' to enable it
• trace log gets disabled only when it has no entries and the logging is stopped

Fixed

• fixed APC issue with the new global hook emulation mechanism and WoW64 processes
• fixed IPv6 issues with BlockPort options
• fixed an issue with CheatEngine when "OpenWinClass=*" was specified
• fixed memory corruption in SbieDrv
• fixed crash issue with process elevation on CreateProcess calls
• fixed process elevation when running in the built-in administrator account
• fixed template preview resetting unsaved entries in box options window

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.1/ Sandboxie Plus 0.8.1

Changes in Sandboxie 5.50.1/ Sandboxie Plus 0.8.1:

Added

• Sandboxie now applies by default “Close…=!,…” directives to non-excluded images if they are located in a sandbox
  — added ‘AlwaysCloseForBoxed=n’ to disable this behaviour as it may not be always desired, and it doesn’t provide extra security
• added process image information to Sandman UI
• localized template categories in the Plus UI
• added “DisableResourceMonitor=y” to disable resource access monitor for selected boxes
• added option to show trace entries only for the selected sandbox
• added “UseVolumeSerialNumbers=y” that allows drive letters to be suffixed with the volume SN in the \drive\ sandbox location
  — it helps to avoid files mixed together on multiple pendrives using the same letter
  — note: this option is not compatible with the recovery function of the Classic UI, only SandMan UI is fully compatible

Changed

• portable cleanup message now has y/n/c options
• consolidated Proc_CreateProcessInternalW and Proc_CreateProcessInternalW_RS5 to remove duplicate code
• the ElevateCreateProcess fix, as sometimes applied by the Program Compatibility Assistant, will no longer be emulated by default
  — use ‘ApplyElevateCreateProcessFix=y’ or ‘ApplyElevateCreateProcessFix=program.exe,y’ to enable it
• trace log gets disabled only when it has no entries and the logging is stopped

Fixed

• fixed APC issue with the new global hook emulation mechanism and WoW64 processes
• fixed IPv6 issues with BlockPort options
• fixed an issue with CheatEngine when “OpenWinClass=*” was specified
• fixed memory corruption in SbieDrv
• fixed crash issue with process elevation on CreateProcess calls
• fixed process elevation when running in the built-in administrator account
• fixed template preview resetting unsaved entries in box options window
• fixed an issue with driver verifier and user handles
• fixed driver memory leak of FLT_FILE_NAME_INFORMATION objects
• fixed broken clipboard introduced in 5.50.0
• fixed dcom launch issue on windows 7 32 bit introduced in 5.50.0

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.2/ Sandboxie Plus 0.8.2

Added

• Sandboxie now applies by default "Close...=!,..." directives to non-excluded images if they are located in a sandbox
  -- added 'AlwaysCloseForBoxed=n' to disable this behaviour as it may not be always desired, and it doesn't provide extra security
• added process image information to Sandman UI
• localized template categories in the Plus UI
• added "DisableResourceMonitor=y" to disable resource access monitor for selected boxes
• added option to show trace entries only for the selected sandbox
• added "UseVolumeSerialNumbers=y" that allows drive letters to be suffixed with the volume SN in the \drive\ sandbox location
  -- it helps to avoid files mixed together on multiple pendrives using the same letter
  -- note: this option is not compatible with the recovery function of the Classic UI, only SandMan UI is fully compatible

Changed

• portable cleanup message now has y/n/c options
• consolidated Proc_CreateProcessInternalW and Proc_CreateProcessInternalW_RS5 to remove duplicate code
• the ElevateCreateProcess fix, as sometimes applied by the Program Compatibility Assistant, will no longer be emulated by default
  -- use 'ApplyElevateCreateProcessFix=y' or 'ApplyElevateCreateProcessFix=program.exe,y' to enable it
• trace log gets disabled only when it has no entries and the logging is stopped

Fixed

• fixed APC issue with the new global hook emulation mechanism and WoW64 processes
• fixed IPv6 issues with BlockPort options
• fixed an issue with CheatEngine when "OpenWinClass=*" was specified
• fixed memory corruption in SbieDrv
• fixed crash issue with process elevation on CreateProcess calls
• fixed process elevation when running in the built-in administrator account
• fixed template preview resetting unsaved entries in box options window
• fixed an issue with driver verifier and user handles
• fixed driver memory leak of FLT_FILE_NAME_INFORMATION objects
• fixed broken clipboard introduced in 5.50.0
• fixed dcom launch issue on windows 7 32 bit introduced in 5.50.0
• properly fixed an issue with Driver Verifier and user handles
• fixed an issue with CreateWindow function introduced with 0.8.0
• fixed issue with outdated BoxDisplayOrder entries being retained

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.5/ Sandboxie Plus

Changes in Sandboxie 5.50.5/ Sandboxie Plus 0.8.5:
Added

• added global hotkey to terminate all boxed processes (by default Ctrl+Break)
• the Run Sandboxed dialog can now be handled by the Sandman UI.
• added “AllowBoxedJobs=y” allowing boxed processes to use nested jobs on Windows 8 and later
  — note: this allows Chrome and other programs to use the job system for additional isolation
• added librewolf.exe to the list of Firefox derivatives
• added run regedit sandboxed menu command
• added new support settings tab to Sandman UI for updates and stuff
• added code integrity verification to Sbie service and UI
• added template for Vivaldi Notes (by isaak654)

Changed

• Replaced the Process List used by the driver with a much faster Hash Map implementation
  — Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
  — The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
  — Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
• Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
• Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
  — not yet enabled in production build
• the presence of default box is only checked on connect
• the portable dir dialog now shows the directory
• when terminated boxed processes now we first try doing that by terminating the job object
• the driver now by default can terminate problematic processes without the help of the service
• box delete routine now retries up to 10 times to fix
• Replaced the Process List used by the service with a much faster Hash Map implementation
• Replaced the per-process Thread List used by the service with a much faster Hash Map implementation

Fixed

• fixed faulty initialization in SetServiceStatus (by flamencist)
• fixed buttons position in Classic UI settings (by isaak654)
• fixed missing password length check in the Sandman UI
• fixed issues opening job objects by name
• fixed missing permission check when reopening job object handles (thanks Diversenok)
• fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers
• fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
• fixed minor setting issue
• fixed minor UI issue with resource access COM settings
• fixed an issue with NtQueryKey using NtQueryObject instead
• fixed crash in key.c when failing to resolve key paths
• added workaround for topmost modality issue
  — the notification window is not only topmost for 5 seconds
• fixed an issue deleting directories introduced in 5.49.5
• fixed an issue with box copies

Removed

• removed switch for “BlockPassword=n” as it does not seem to be working
  — it’s recommended to use “OpenSamEndpoint=y” to allow for password change in windows 10

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie Plus 0.8.6 / Classic 5.50.6

Changelog
Added

• added global hotkey to terminate all boxed processes (by default Ctrl+Break)
• the Run Sandboxed dialog can now be handled by the Sandman UI.
• added "AllowBoxedJobs=y" allowing boxed processes to use nested jobs on Windows 8 and later
  -- note: this allows Chrome and other programs to use the job system for additional isolation
• added librewolf.exe to the list of Firefox derivatives
  Zaloguj lub Zarejestruj się aby zobaczyć!
• added run regedit sandboxed menu command
• added new support settings tab to Sandman UI for updates and stuff
• added code integrity verification to Sbie service and UI
• added template for Vivaldi Notes (by isaak654)
  Zaloguj lub Zarejestruj się aby zobaczyć!
• added LibreWolf template (by Dyras)
  Zaloguj lub Zarejestruj się aby zobaczyć!

Changed

• Replaced the Process List used by the driver with a much faster Hash Map implementation
  -- Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
  -- The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
  -- Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
• Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
• Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
  -- not yet enabled in production build
• the presence of default box is only checked on connect
• the portable dir dialog now shows the directory
  Zaloguj lub Zarejestruj się aby zobaczyć!
• when terminated boxed processes now we first try doing that by terminating the job object
• the driver now by default can terminate problematic processes without the help of the service
• box delete routine now retries up to 10 times to fix
  Zaloguj lub Zarejestruj się aby zobaczyć!
• Replaced the Process List used by the service with a much faster Hash Map implementation
• Replaced the per-process Thread List used by the service with a much faster Hash Map implementation

Fixed

• fixed faulty initialization in SetServiceStatus (by flamencist)
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed buttons position in Classic UI settings (by isaak654)
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed missing password length check in the Sandman UI
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed issues opening job objects by name
• fixed missing permission check when reopening job object handles (thanks Diversenok)
• fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers
  Zaloguj lub Zarejestruj się aby zobaczyć!
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
• fixed minor setting issue
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed minor UI issue with resource access COM settings
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed an issue with NtQueryKey using NtQueryObject instead
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed crash in key.c when failing to resolve key paths
• added workaround for topmost modality issue
  Zaloguj lub Zarejestruj się aby zobaczyć!
  
  -- the notification window is not only topmost for 5 seconds
• fixed an issue deleting directories introduced in 5.49.5
• fixed an issue when creating box copies
• fixed performance bug introduced in 0.8.5

Removed

• removed switch for "BlockPassword=n" as it does not seem to be working
  Zaloguj lub Zarejestruj się aby zobaczyć!
  
  -- it's recommended to use "OpenSamEndpoint=y" to allow for password change in windows 10

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.7 / Sandboxie Plus 0.8.7

[0.8.7 / 5.50.7] - 2021-07-10
Added

• added option to always auto pick the DefautlBox sandbox
  Zaloguj lub Zarejestruj się aby zobaczyć!
  
  -- when this option is enabled the normal behavioure with a box selection dialog can be achived holding down CTRL
• added option to hide boxed form the run in box dialog
  -- usefull to avoidl listing for example insecure compatybility test boxes
• added box options to sys tray
  Zaloguj lub Zarejestruj się aby zobaczyć!
  Zaloguj lub Zarejestruj się aby zobaczyć!

Changed

• changed default terminate all boxed processes key from Ctrl+Break to Ctrl+Alt+Break
  Zaloguj lub Zarejestruj się aby zobaczyć!
• start.exe does no longer link in all that unused MFC code reduced file size form over 2.5MB to below 250KB
• updated the main sandman and tray icon
  Zaloguj lub Zarejestruj się aby zobaczyć!
• improved the bov view tree style

Fixed

• added additional delay and retryes to kmdutill.exe to mitigate issues when unloading the driver
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed issue with sbiectrl not being properly started after setup
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed issue with explore sandboxed shell option
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed issue when running sandman elevated
  Zaloguj lub Zarejestruj się aby zobaczyć!
• fixed new box selection dialog showing disabled boxes
• fixed issue updating box active status

Removed

• removed Online Armor support as this product is deprecated since 2016

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.7b/ Sandboxie Plus 0.8.7b

Changes in Sandboxie 5.50.7b/ Sandboxie Plus 0.8.7b:

• fixed issue with boxes that head auto delete activated introduced in the previous build

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie

Zaloguj lub Zarejestruj się aby zobaczyć!

Changelog
[0.8.8 / 5.50.8] - 2021-07-12
Changed

• MSIServer no longer requirers being run as system completing the move to not using system tockens in a sandbox by default
  -- the security enhanced option "MsiInstallerExemptions=n" is now the default behavioure

Fixed

• fixed issue with the "Explore Sandboxed" command
  Zaloguj lub Zarejestruj się aby zobaczyć!
• rolled back the switch from using NtQueryKey to NtQueryObject as it seams to bream soem older w10 versions liek 1803
  Zaloguj lub Zarejestruj się aby zobaczyć!
  
  -- this change was introduced to fix
  Zaloguj lub Zarejestruj się aby zobaczyć!
  
  -- to use NtQueryObject the option "UseObjectNameForKeys=y" can be added to sandboxie.ini

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[OXYGEN THIEF]

Sandboxie 5.50.9 / Sandboxie Plus 0.8.9

Spoiler

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.50.9c / Sandboxie Plus 0.8.9c

Changes in Sandboxie 5.50.9c/ Sandboxie Plus 0.8.9c:

• Fixed issue with registering session leader
  F
• ixed issue with windows 7

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[OXYGEN THIEF]

sandboxie 5.51.3 / sandboxie plus 0.9.3

Spoiler

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Camel1965]

Sandboxie 5.51.4 / Sandboxie Plus 0.9.4

Changes in Sandboxie 5.51.4 / Sandboxie Plus 0.9.4:

added

• added clear commands to log sub menus
• added option to disable prompt to confirm process termination
• added settings to sandboxie-plus.ini “Options/InstantRecovery” to use the recovery window instad of the notification popUp
• added ability to rename a non empty sandbox
• added ability to remove a non empty sandbox
• added file browser window to sandman ui to cover the files view functionality of sbie ctrl

Changed

• generic error in sbie ui now show the status code as hex and provide a string description when available

fixed

• “del” shortcut to terminate a process did not always work
• fixed group display issue
• fixed issue when using run sandboxed on a file located already in a sandbox

Zaloguj lub Zarejestruj się aby zobaczyć!