Sandboxie Plus (Sbie fork)

Thank you. I've sent a download link for the program via pm.

 

I don't have such a hardware hence i can not debug or fix the issue.

If you want me to take a look on it you will have to buy me one of those Yubikey thingies

 

Sure I can send you 2 Yubikeys. Private message your shipping address.

 

Side note: The German WIKIPEDIA article on Yubikey says:

"Since the YubiKey hardware - in contrast to competing products like the Nitrokey family of Nitrokey or the Solo family of SoloKeys - is not open source, independent checks for backdoors or security holes are hardly possible."

I do not use any of these products, but I would like to point out that Nitrokey and SoloKeys may be possible alternatives with a higher level of protection.

 

What about incompatible integrity levels between Windows 10 and SBIE?

 

Could you please elaborate?
Sbie works fine with win 10 currently.

 

Hello guyz, I'm new here, but a long time user of sandboxie.
Is it me or in windows 10 2004 sanboxed apps run way more slowly than in previous windows versions, like their are hanging at every step. Windows Explorer seems more sluggish too. Tested with both sandboxie 5.33.6 and with sandboxie plus latest version, on two distinct PCs both updated to windows 2004.
For example an app like Navicat Mysql is almost unusable if sandboxed in this new version, but tested in 1909 and is running fine.

 

I'll set up a new dev vm with 2004 to debug this, may take some time though

 

This is a huge update fixing many bugs and security issues, it also expands on the functionality of the new SandMan.exe UI component, Check out the full ChangeLog for more details.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v0.3

Changelog:
Added

• API_QUERY_PROCESS_INFO can be now used to get the original process token of sandboxed processes
  -- Note: this capability is used by TaskExplorer to allow inspecting sandbox internal tokens
• Added option "KeepTokenIntegrity=y" to make the sbie token keep its initial integrity level (debug option)
  -- Note: Do NOT USE Debug Options if you dont know their security implications (!)
• Added process id to log messages very usefull for debugging
• Added finder to resource log
• Added option to hide host processes "HideHostProcess=[name]"
  -- Note: Sbie hides by default processes from other boxes, this behavioure can now be controlled with "HideOtherBoxes=n"
• Sandboxed RpcSs and DcomLaunch can now be run as system with the option "ProtectRpcSs=y" howeever that breaks sandboxed explorer and other
• BuiltIn Clsid whitelist can now be disabled with "OpenDefaultClsid=n"
• Processes can be now terminated with the del key, and require a confirmation
• Added sandboxed window border display to SandMan.exe
• Added notification for sbie log messages
• Added Sandbox Presets sub menu allowing to quickly change some settings
  -- Enable/Disable API logging, logapi_dll's are now distributed with SbiePlus
  -- And other: Drop admin rights; Block/Allow internet access; Block/Allow access to files on te network
• Added more info to the sandbox status column
• Added path column to SbieModel
• Added info tooltips in SbieView

Changed

• Reworked ApiLog, added pid and pid filter
• Auto config reload on in change is now delayed by 500ms to not reload multiple times on incremental changes
• Sandbox names now replace "_" witn " " for display allowing to use names that are build of separated words

Fixed

• added mising PreferExternalManifest itialization to portable mode
• fixed permission issues with sandboxed system processes
  -- Note: you can use "ExposeBoxedSystem=y" for the old behaviour (debug option)
• fixed missing SCM access check for sandboxed services
  -- Note: to disable the access check use "UnrestrictedSCM=y" (debug option)
• fixed missing initialization in serviceserver that caused sandboxed programs to crash when querying service status
• fixed many bugs that caused the SbieDrv.sys to BSOD when run with MSFT Driver Verifier active
  -- 0xF6 in GetThreadTokenOwnerPid and File_Api_Rename
  -- missing non optional parameter for FltGetFileNameInformation in File_PreOperation
  -- 0xE3 in Key_StoreValue and Key_PreDataInject

 

@DavidXanatos
Hi
do you need the portable launcher ?
i can send the portable release years ago in the sandboxie forum SandboxiePortable.exe CrashCleanup.exe Updater.exe
thank for your amzing job!

 

Thank you for the update, David!

 

Sorry if this has been covered elsewhere, but how do I install just Plus/Sandman, I already have SB 5.42.0 installed, so it replaces the old interface. Want to give it a try.

I have already downloaded SbiePlus64-v0.3.zip

 

You can eider install the SandboxieInstall64-v5.42.exe to use the classical sbiectrl.exe ui
or extract SbiePlus64-v0.3.zip and run it in portable mode.
You can also install the SandboxieInstall64-v5.42.exe and use the UI from SbiePlus64-v0.3.zip in non portable mode.
In the next or over next release I'll provide an installer for SbiePlus such that you will be able to use it in non portable mode without installing the legacy release.

 

In case you are one of those people whom like this abysmal dark mode fetish

I have good news for you, you will be able to enable dark mode in the next build:

 

Amazing, I like dark modes in everything.

 

Hello
i tried to use SbiePlus64-v0.3.zip like described but the only result is, that my antivirus program AVAST pops up and deletes the driver.

What can i do?

 

Whitelist "SbieDrv.sys".

 

Didn't you get this notification first start:


It explains the issue and tells you what to do to remedy it.

 

How do I do this please so SB starts with Windows using the new interface

 

Remove cbie ctrl from autostart you can do that using sbiectrl settings ans instead add sandman.exe to autostart manually.
the next build wil hve an option from the sandman settings to add itself to autostart, and possibly will come with an installer, lets see..

 

Have been running SB 533-3 for several months. I have no issues with it doing what I want, but if there are security issues, then I want to patch them up. About a week ago, I found version 533-6 and installed that. It loaded my default browser fine, but I had video stuttering with embedded video in Facebook. My ISP connects me at around 90 MB/S so I do not think that is the issue. Reverting back to 533-3 solved the issue.

I then found SbiePlus64-v0.3.zip. I could not find an installer included so I overwrote all of the files in my SB folder and tried to use it and it would not load my default browser Firefox 78.0.1. So I went back to 533-3.

I then found SandboxieInstall64-v5.42.exe. I installed this and it would not run my default web browser from either shortcut. I would occasionally get an error message about not finding object. When I clicked on Help, it tried to take me to the help web page which obviously did not work.

The program appeared to install fine with no complaints from anything. However there was no start up or configuration screen and the program did not start with Windows 7 HP SP1 64 bit.

What do I need to do in order to get this to run my web browser.

Thanks

 

SandboxieInstall64-v5.42.exe installed in a clean win 7 VM when clicking run web browser opens internet explorer just fine.

try deleting your old sandboxes.

 

I have the same problem. Some apps are loading too slow.

 

Win 10 2004 here also and sluggish. SandboxieInstall64-v5.42.