Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

This fixes is a maintenance release it fixes a coupe issues and adds a few minor ui improvements.

Download: Release Release v1.9.7 / 5.64.7 · sandboxie-plus/Sandboxie

[1.9.7 / 5.64.7] - 2023-06-09

Added

• added configurable toolbar items (thanks typpos) #2961
  
• added new icons for Plus UI (thanks typpos) #3010 #3011
  

Changed

• minor update to the BlockSoftwareUpdaters template (thanks APMichael) #2991
  

Fixed

• fixed empty lines when using "Copy Panel" in Plus UI #2995
  
• fixed Plus installer does not honor IniPath value when updating the current installed version (thanks offhub) #2994
  
• fixed timestamp on crash dumps
  
• fixed Firefox 114 crashes in security enhanced box, when start restrictions are enabled (thanks offhub) #3019
  
• fixed a bug when there is no GUI proxy (thanks lmou523) #3020
  

[harlan4096]

Sandboxie Plus 1.9.8 / 5.64.8:

Update with minor fixes

Download: https://github.com/sandboxie-plus/Sandbo...tag/v1.9.8

Changed

• improved uninstall process in the Sandboxie Classic installer (thanks sredna) #3044
  

Fixed

• fixed a link error when the path was created with a symbolic link (thanks lmou523) #3038
  
• fixed recovery window focus after file overwrite dialog #3048
  
• fixed Sandboxie Plus crash with exception code c0000005 #3024
  

[harlan4096]

Sandboxie Plus v1.10.0 / 5.65.0:

Added

• added box scripting engine to make SandMan more flexible
  
• added scriptable troubleshooting wizard #1875
  
• added addon manager which helps to install additional and third-party components, available addons:
  • ImDisk Toolkit - used to create RAM Disks and other virtual drives
    
  • V4 Script Debugger - used to debug troubleshooting scripts
    
  • Microsoft Debug Help Library - used for the stack trace feature introduced in 1.9.6
    
  • signcheck.exe - used to scan files on VirusTotal before recovering them
    
  • SbieHide.dll - a third-party DLL to hide SbieDll.dll
    
  • LogAPI.dll - an API logging library used for Buster Sandbox Analyzer
    
• added option to set the update interval to 1, 7, 14 and 30 days
  
• added What's new in Sandboxie-Plus dialog in SbieCtrl.exe to praise the new features of the Plus UI
  • Note: this is shown after the installation of Sandboxie Classic
    
• added "fixdacls" command to KmdUtil.exe, it repairs broken DACL entries on the Sandboxie folder to fix issues where SbieDll.dll fails to load
  
• added option to hide Sandboxie's own processes #3054
  
• added functionality to cache Sandboxie messages within the Plus UI #2920
  
• added button to invoke troubleshooting wizard directly from the SBIE message popup
  

Changed

• setup wizard has now a dedicated update configuration page
  • this page will be shown once for all users who do not have updates enabled
    
• split the support page into Sandboxie Support and Sandboxie Updater tabs
  
• when the troubleshooting.7z file is available, the script engine will be used to match compatibility templates
  • this allows a better granularity in template selection by using the AppCompatibility.js script
    
• reworked low level code injection mechanism to improve flexibility and debugging
  • the main injection detour code is now written in C instead of Assembler and can properly report SbieDll.dll loading errors as SBIE2181
    
• improved session agent startup to be more flexible
  
• improved SBIEMSG help handling, the link now contains message details allowing to point to a more exact document (if available)
  
• updated certificate validation code
  

Fixed

• fixed uninstall issue in the Sandboxie Classic installer d1863ff
  
• added workaround for Chrome not starting on Windows 11 with KB5027231 #3040
  
• improved compatibility with procmon/stack traces for debug builds
  
• fixed issue with non-standard command lines
  
• fixed online updater not checking every 7 days, but daily
  

Removed

• cleaned up duplicate code (thanks lmou523) #3067
  

Download

[harlan4096]

Release Notes - New Features and Enhancements

Sandboxie-Plus 1.11.x comes with a new component ImBox.exe which in combination with new service and driver mechanisms enables exciting new functionality.

The ImBox.exe is a block device proxy for the ImDisk driver (which can be installed using the add-on manager introduced in 1.10.x) and is capable of creating dynamic RAMDisks as well as mounting Encrypted Box Images using DiskCryptor's robust and reliable AES-XTS implementation.

• The RAMDisks integration is available to all project supporters with a valid supporter certificate, it allows for seamless RAMDisk usage once configured on the add-on options settings page and enabled for selected sandboxes. The RAMDisk can be mounted without a drive letter providing a seamless experience, the appropriate Folders on the shared RAMDisk are linked to the default box root folder locations. The RAMDisk is NOT persistent this means that all data stored on the RAMDisk vanish once the system is rebooted, making such a sand box ideal to store transient confidential data.
  
  
• The Encrypted Box Image feature uses encrypted container files to store a boxes root directory (containing all files and the boxes registry hive) the mounted encrypted volume is by default guarded by the driver such that only processes runnign within the sandbox (and essential sbie+ components) can access the files stored on that volume. In combination with the "ConfidentialBox=y" option, host process read access to sandboxed processes memory is effectively blocked, ensuring no rogue process on the host can access confidential data in RAM belonging to sandboxed processes. The combination of this mechanisms creates secure enclaves, which ensure data processed within an enclave can not leak to the host (except for user configured OpenFilePath locations) and is protected even when the host would to be compromised (only adversaries which obtained kernel level privileges can bypass these mechanisms).
  

Note: As the new Box Encryption feature opens up a completely new branch of use-cases, which would merit being a separate product on its own, it requires a separate advanced encryption option which must be obtained in addition to a valid supporter certificate, except for the following certificate types: Contributor, Patreon, Huge and Large, all others need to be upgraded using a upgrade key which can be obtained on the web store and has to be entered on the support page.

Also for more clarity the available certificate scheme was restructured Small was renamed to Subscription, Medium to just Personal, Large was removed and a Family Pack subscription was added.

For a full list of changes and fixes please review the full Changelog.

Download: Release v1.11.2 / 5.66.2 · sandboxie-plus/Sandboxie

Source

[harlan4096]

Release v1.11.3 / 5.66.3 Latest​

This is a maintenance release fixing a few issues, and updating the 7z library to 23.01 which fixes a security issue present in previous versions of this library.

It also adds a mechanism to backup and restore the header of an encrypted box image container, if you intent to store important data in a encrypted box, in addition to an external backup of the date themselves, it is recommended to create a header backup as well. Although be warned, the password being entered relays to the header hence restoring a header from before a password change will require the old password to be used to mount the container.

Download: Release v1.11.3 / 5.66.3 · sandboxie-plus/Sandboxie

[1.11.3 / 5.66.3] - 2023-09-27

Added

• Added container header backup/restore option to the option windows
  

Changed

• updated 7z library to version 23.01 4ee1464
  

Fixed

• fixed incorrect text display when changing the password of encrypted boxes or when exporting encrypted boxes #3296
  
• fixed image files not being create as sparse files
  

For a full list of changes and fixes please review the full Changelog.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

[harlan4096]

[1.11.4 / 5.66.4] - 2023-10-06

Changed

• improved behaviour with Lock All Encrypted Boxes option #3350
  
• fixed typo in option name: 'NoRestartOnPAC' becomes 'NoRestartOnPCA' 0e175ee
  

Fixed

• fixed issue with unmounting protected images #3347
  
• fixed issue with highlighting not being able to be turned off in the Sbie Messages tab #3338
  
• fixed issue with programs installed in the sandbox not being displayed via Run from Start Menu #3334
  
• fixed issue with NtQueryDirectoryObject #3310
  
• fixed Some GUI functions use the wrong box path if the FileRootPath value starts with Volume{GUID} #3345
  
• fixed If a program is run on RAM and Encrypted boxes when the sandbox root folder is not present, the programs will not run #3349
  
• fixed Process Restrictions enable/disable not working correctly #3355
  

Download

[harlan4096]

Sandboxie Plus 1.12.4 / Classic 5.67.4:

Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[harlan4096]

Sandboxie Plus 1.12.5 / Classic 5.67.5:

Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[harlan4096]

Sandboxie-Plus v1.12.7 / 5.67.7

This is a maintenance release, it fixes many issues, for a full list of changes and fixes please review the full

Changelog.

Download: Release v1.12.7 / 5.67.7 · sandboxie-plus/Sandboxie

Fixed

• Make Duplicate Box Config keep the order of the original box configuration #3523
  
• Save options as new defaults disappears from the Summary page #3522
  
• fixed Windows Explorer has difficulty navigating when running in a sandbox with data protection enabled on Windows 11 #3517 #3516
  
• the default template for privacy boxes now sets NormalFilePath=%ProgramData%\Microsoft\
  
• fixed MessageBox with MB_DEFAULT_DESKTOP_ONLY or MB_SERVICE_NOTIFICATION can not display title and text correctly in security hardened box. #3529
  
• fixed Can't run npm inside security hardened sandbox on Windows 11 #3505
  
• fixed [1.12.6] Symlink and open path issue #3537
  
• when a volume without a asociated drive letter is encountered sbie uses \drive{guid} instead of \drive[letter]
  
• Note: when the volume later gets a drive letter the data under \drive{guid} will be ignored!
  
• fixed right click a sandbox shortcut - click run unsandboxed in order to open the file without sandbox #3528
  
• Note: for the fix to take full effect the shell integration need to be re applied
  
• fixed Error Status: 0x0000065b (Function Failed During Execution) #3504
  
• fixed Privacy Enhanced Sandboxes are fully out of function with SBIE2204 error code #3542
  
• fixed OpenFilePath directories are not enumerated within their parent folders #3519
  

Source: https://www.wilderssecurity.com/threads/...-7.453295/

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

At this time, Stable Builds [here] remains at 1.12.6

[harlan4096]

New build is ready, it fixes a few more important issues.

Download: https://github.com/sandboxie-plus/Sandbo...ag/v1.12.8

Added

• added Japanese language on Plus UI #3573
  

Fixed

• fixed SBIE2321 Cannot manage device map: C0000034 / 11 #2996
  
• fixed Cannot run explorer.exe on emulate admin sandbox #3516
  
• fixed potential BSOD issue with WFP when trace loging is enabled #2471
  
• fixed Run from Sandbox > Run > Program and Run from folder doesn't use the same working dir #3555
  
• fixed UseNewSymlinkResolver causes applications to create both the link and the target folder #3481
  
• fixed [Plus UI] Notification window is stuck when a modal dialog shows up #3586