Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

Sandboxie Plus / Classic v1.0.1 / 5.55.1:

Changelog

Added

• added checkboxes to most major box options lists
  
• added SumatraPDF templates (by Dyras) #1391
  

Changed

• rolled back change to "OpenClsid=..." handling
  
• made all major lists in the box options editable
  

Fixed

• fixed issue with read only paths introduced in 1.0.0
  
• fixed BSOD issue introduced in the 1.0.0 build #1389
  
• fixed multiple BITS notifications while running sandboxed Chromium browsers (by isaak654) ca320ec #1081
  
• fixed executables selection for "Run Menu" entries (by isaak654) #1379
  
• fixed SetCursorPos and ClipCursor ignoring DPI awareness (by alvinhochun) #1394
  

Removed

• removed Virtual Desktop Manager template (by isaak654) d775807 #1326
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.2 / 5.55.2

Changelog [1.0.2 / 5.55.2] - 2021-12-08

Fixed

• fixed recovery window not refreshing count on reload #1402
  
• fixed printing issue introdudec in 1.0.1 #1397
  
• fixed issues with create process #1408
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.3 / 5.55.3:

Changelog

Added

• added mechanism to hook Win32 system calls on windows 10 and later, this should resolve the issue with Chromium HW acceleration
  -- Note: this mechanism does not, yet, work for 32 bit applications running under WoW64
  -- to enable it, add "EnableWin32kHooks=y" to the global ini section, this feature is highly experimental (!)
  -- the hooks will be automatically applied to Chromium GPU processes
  -- to force Win32k hooks for all processes in a selected box add "AlwaysUseWin32kHooks=program.exe,y" #1261 #1395
  

Fixed

• fixed bug in GetVersionExW making "OverrideOsBuild=..." not working #605 #1426
  
• fixed issue with some UTF-8 characters when used in the ini file
  
• fixed isolation issue with Virtual Network Editor #1102
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.4 / 5.55.4

Changelog

Added

• Mechanism to hook Win32 system calls now also works for 32 bit applications running under WoW64
  
• Added customization to Win32k hooking mechanism, as by default only GdiDdDDI* hooks are installed
  -- You can force the installation of other hooks by specifying them with "EnableWin32Hook=..."
  -- or disable the installation of the default hooks with "DisableWin32Hook=..."
  -- Please note that some Win32k hooks may cause BSODs or undefined behaviour. (!)
  -- The most obviously problematic Win32k hooks are blacklisted, this can be bypassed with "IgnoreWin32HookBlacklist=y"
  
• added debug option "AdjustBoxedSystem=n" to disable the adjustment of service ACLs running with a system token
  
• added "NoUACProxy=y" option together with the accompanying template, in order to disable UAC proxy
  -- Note: Boxes configured in compartment mode activate this template by default
  
• added UI option to change default RpcMgmtSetComTimeout preset
  
• added Plus installer option to start the default browser under Sandboxie through a desktop shortcut
  
• added more entries to the Plus installer (current translations on Languages.iss file need to be updated)
  

Changed

• "EnableWin32kHooks=y" is now enabled by default, as no issues were reported in 1.0.3
  -- Note: currently only the GdiDdDDI* hooks are applied, required for Chromium HW acceleration
  
• Cleaned up low level hooking code a bit
  
• "RunRpcssAsSystem=y" is now auto applied for boxes in "App Compartment" mode when "RunServicesAsSystem=y" or "MsiInstallerExemptions=y" are present
  

Fixed

• fixed RPC handling in case a requested open service is not running #1443
  
• fixed a hooking issue with NdrClientCall2 in 32 bit applications
  
• fixed issue with start directory to run sandboxed when using SandMan #1436
  
• fixed issue with recovering from network share locations #1435
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.5 / 5.55.5

ChangeLog

[1.0.5 / 5.55.5] - 2021-12-25

Added

• sandbox top level exception handler to create crash dumps
  -- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
  -- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
  -- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
  -- Note: created dump files are located at:

  C:\Sandbox\%SANDBOX%

• added template support for Osiris and Slimjet browsers (by Dyras) #1454
  

Changed

• improved SbieDll initialization a bit
  
• doubled size of Name_Buffer_Depth #1342
  
• improved text filter in the templates view #1456
  

Fixed

• fixed issue with forced process display #1447
  
• fixed crash issue with GetClassName #1448
  
• fixed minor UI issue #1382
  
• fixed UI language preset issue #1348
  
• fixed grouping issues in SandMan UI #1358
  
• fixed issue with EnableWin32kHooks #1458
  

Installers re-released with the following fix:

• fixed regression when launching Office apps #1468
  

Download

[harlan4096]

Sandboxie+ Release v1.0.6 / 5.55.6

ChangeLog

Added

• replaced "Open with" with a Sandboxie dialog to work on Windows 10 #1138
  
• added ability to run Win32 store apps in App Compartment mode (on Windows 11 requires COM to be open)
  -- Note: this does not mean UWP store apps, just regular win32 apps packaged to be deployed via the store
  
• added new debug options "UnstrippedToken=y" and "KeepUserGroup=y"
  
• added double click to recover files and folders in recovery window #1466
  
• added Ukrainian language on Plus UI (by SuperMaxusa) #1488
  

Changed

• "UseSbieWndStation=y" is now the default behaviour #1442
  
• disabled Win32k hooking when HVCI is enabled due to an incompatibility (BSOD) #1483
  

Fixed

• fixed box initialization issue in Privacy mode #1469
  
• fixed issue with shortcuts creation introduced in a recent build #1471
  
• fixed various issues in Privacy Enhanced boxes and rule specificity
  
• fixed issue with SeAccessCheckByType and alike
  
• fixed issues with Win32k hooking on 32 bit Windows #1479
  

Removed

• removed obsolete SkyNet rootkit detection from 32 bit build
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.7 / 5.55.7

ChangeLog

[1.0.7 / 5.55.7] - 2022-01-06

Added

• added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
  
• added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
  
• added new template "DeviceSecurity" to lock down access to device drivers on the system
  -- Note: This template requires RuleSpecificity being available to work properly
  
• added option to set a custom ini editor in the Plus UI #1475
  
• added option "LingerLeniency=n" to solve issue #997
  

Changed

• reworked syscall invocation code in the driver
  -- Win32k hooking is now compatible with HVCI #1483
  

Fixed

• fixed memory leak in driver (conf_user.c)
  
• fixed issue with file renaming in open paths introduced in 1.0.6
  
• fixed issue causing Chromium browsers not closing properly #1496
  
• fixed issue with start.exe #1517 #1516
  
• fixed SandMan issue with reused process IDs
  
• fixed KmdUtil sometimes not properly terminating the driver #1493
  

Removed

• removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.8 / 5.55.8:

ChangeLog

Added

• added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath) #1497
  
• added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box #1500
  -- the program image must be located outside the sandbox for this to work
  -- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
  -- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
  -- Note: "BreakoutFolder=some\path" is also available
  
• added silent uninstall switch
  Code:

  /remove /S
  for Classic installer (by sredna) #1532
  

Changed

• The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese) #1497
  
• The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian) #1527
  -- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request
  
• updated Firefox update blocker (discovered by isaak654) #1545
  

Fixed

• fixed issue with opening all file access OpenFilePath=* #971
  
• fixed issue with opening network shares #1529
  
• fixed possible upgrade issue with Classic installer (by isaak654) 130c43a
  
• fixed minor issues with Classic installer (by sredna) #1533
  
• fixed issue with Ldr_FixImagePath_2 #1507
  
• when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off.
  
• fixed issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot #1451
  
• SandMan will now run in background like SbieCtrl when starting a boxed process post506
  
• fixed taskbar not showing with persistent box border in full screen post474
  
• fixed box border not spanning across multiple monitors #1512
  
• fixed issues with border when using DPI scaling #1506
  
• fixed DPI issues with Qt #1368
  
• fixed issue with bright flashing on window creation when in dark mode #1231
  
• fixed issues with the PortableRootDir setting #1509
  
• fixed issue with the settings window crashing when the driver was not connected
  
• fixed DPI issues with Finder Tool #912
  
• fixed another issue with reused process IDs #1547
  
• fixed issue introduced in 1.0.6 related to SeAccessCheckByType #1548
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.9 / 5.55.9:

ChangeLog

Added

• SandMan now causes all boxed processes to update their path settings in real time when access options were modified
  
• added new maintenance menu option "Uninstall All" to quickly remove all components when running in portable mode
  
• added version number to the title bar of Sandboxie Classic
  
• added option to return not to a snapshot but to an empty box state while keeping all snapshots
  
• Sandboxie-Plus.ini can now be placed in C:\ProgramData\Sandboxie-Plus\ folder and takes precedence (for business use)
  
• added support for AF_UNIX on Windows to resolve issues with OpenJDK17 and later #1009 #1520 #1521
  

Changed

• reworked breakout mechanism to be service based and not allowing the parent process to access the broken out child process
  
• enabled creation of directory junctions for sandboxed processes #1375
  
• restored back AutoRecover=y on box creation #1554
  
• improved snapshot support #1220
  
• renamed "Disable Forced Programs" command to "Pause Forced Programs Rules" (Plus only)
  

Fixed

• fixed BreakoutProcess not working with EnableObjectFiltering=y
  
• FIXED SECURITY ISSUE: when starting COMSRV unboxed, the returned process handle had full access
  
• fixed issue with progress dialog #1562
  
• fixed issue with handling directory junctions in Sandboxie #1396
  
• fixed a handle leak in File_NtCloseImpl
  
• fixed border issues on maximized windows introduced in the last build #1561
  
• fixed a couple of index overruns (thanks 7eRoM) #1571
  
• fixed issues with sysnative directory #1403
  
• fixed issue with starting SandMan when running sandboxed from context menu #1579
  
• fixed dark mode flash issue with main window creation #1231
  
• fixed issues with snapshot error handling #350
  
• fixed issues with the always on top option (Plus only)
  

Download

[harlan4096]

Sandboxie Plus / Classic v1.0.10 / 5.55.10

ChangeLog

Added

• added option to show only boxes in tray with runnign processes #1186
  -- additional option show only pinned bixes, in box options a bix can be set to be always shown in theay list (Pinned)
  
• added options menu command to reset the GUI #1589
  
• added 'Run Un-Sandboxed' context menu option
  
• added new trigger "OnBoxDelete" that allows to specify a command that is run UNBOXED just before the box content gets deleted
  -- note: this can be used as a replacemetn to the DeleteCommand #591
  
• sellected box operations (deletion) no longer show the progress dialog 1061
  -- instead a box with a running operation show a blinking hour glass icon, the context menu can be used to cancel the operation
  

Changed

• HideHostProcess=program.exe can now be used to hide sandboxie services #1336
  
• updater blocking is now done using a template called BlockSoftwareUpdaters
  
• enchanced "StartProgram=..." making "StartCommand=..." obsolete
  -- for same functionality as "StartCommand=..." use "StartProgram=%SbieHome%\Start.exe ..."
  
• merged "Auto Start" General tab with the "Auto Exec" Advanced tab into a universal"Triggers" Advanced tab
  

Fixed

• fixed a couple issues with the new breakout process feature and improved security (thanks Diversenok)
  
• fixed issues with re opening already open windows #1584
  
• fixed issue with desktop access #1588
  
• fixed issue handling commandline invokation #1133
  
• fixed ui issue with main window state when switching always on top attribute #1169
  
• fixed issue with box context menu in tray list 1106
  
• fixed issue with "AutoExec=..."
  
• fixed issues canceling box deletion operations didn't working 1061
  
• fixed issue with DPI scalling and color picker dialog #803
  

Removed

• removed UseRpcMgmtSetComTimeout=AppXDeploymentClient.dll,y used for free download manager as it broke other things
  -- when using free download manager ad the line manually to your sandboxie.ini
  

Download