11 July 21, 07:59
Quote:Changelog
[0.8.7 / 5.50.7] - 2021-07-10
AddedChanged
- added option to always auto pick the DefautlBox sandbox #959
-- when this option is enabled the normal behavioure with a box selection dialog can be achived holding down CTRL
- added option to hide boxed form the run in box dialog
-- usefull to avoidl listing for example insecure compatybility test boxes
- added box options to sys tray #439 #272
Fixed
- changed default terminate all boxed processes key from Ctrl+Break to Ctrl+Alt+Break #974
- start.exe does no longer link in all that unused MFC code reduced file size form over 2.5MB to below 250KB
- updated the main sandman and tray icon #963
- improved the bov view tree style
Removed
- added additional delay and retryes to kmdutill.exe to mitigate issues when unloading the driver #968
- fixed issue with sbiectrl not being properly started after setup #969
- fixed issue with explore sandboxed shell option #972
- fixed issue when running sandman elevated #932
- fixed new box selection dialog showing disabled boxes
- fixed issue updating box active status
[0.8.6 / 5.50.6] - 2021-07-07 (Hot-Fix)
- removed Online Armor support as this product is deprecated since 2016
AddedFixed
- added LibreWolf template (by Dyras) #929
[0.8.5 / 5.50.5] - 2021-07-06 (Pre-Release)
- fixed performance bug introduced in 0.8.5
AddedChanged
- added global hotkey to terminate all boxed processes (by default Ctrl+Break)
- the Run Sandboxed dialog can now be handled by the Sandman UI.
- added "AllowBoxedJobs=y" allowing boxed processes to use nested jobs on Windows 8 and later
-- note: this allows Chrome and other programs to use the job system for additional isolation
- added librewolf.exe to the list of Firefox derivatives #927
- added run regedit sandboxed menu command
- added new support settings tab to Sandman UI for updates and stuff
- added code integrity verification to Sbie service and UI
- added template for Vivaldi Notes (by isaak654) #948
- added LibreWolf template (by Dyras) #929
Fixed
- Replaced the Process List used by the driver with a much faster Hash Map implementation
-- Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
-- The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
-- Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
- Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
- Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
-- not yet enabled in production build
- the presence of default box is only checked on connect
- the portable dir dialog now shows the directory #924
- when terminated boxed processes now we first try doing that by terminating the job object
- the driver now by default can terminate problematic processes without the help of the service
- box delete routine now retries up to 10 times to fix #954
- Replaced the Process List used by the service with a much faster Hash Map implementation
- Replaced the per-process Thread List used by the service with a much faster Hash Map implementation
Removed
- fixed faulty initialization in SetServiceStatus (by flamencist) #921
- fixed buttons position in Classic UI settings (by isaak654) #914
- fixed missing password length check in the Sandman UI #925
- fixed issues opening job objects by name
- fixed missing permission check when reopening job object handles (thanks Diversenok)
- fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers #930 #817
- fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
- fixed minor setting issue #957
- fixed minor UI issue with resource access COM settings #958
- fixed an issue with NtQueryKey using NtQueryObject instead #951
- fixed crash in key.c when failing to resolve key paths
- added workaround for topmost modality issue #873
-- the notification window is not only topmost for 5 seconds
- fixed an issue deleting directories introduced in 5.49.5
- fixed an issue when creating box copies
Download
- removed switch for "BlockPassword=n" as it does not seem to be working #938
-- it's recommended to use "OpenSamEndpoint=y" to allow for password change in windows 10