Sandboxie Technologies (SBIE Open source) (VERSION 5.33.6 ONLY!)

For me, sandboxie 5.45 classic is a better choice. No errors in all browsers (firefox, edge, chrome). Also in word and pdf!

 

@bo elam I've got all three options already turned off.

 

I'm a little perplexed... What Sandboxie fork does the 5.45 build belong to? I know of

• Sandboxie Open Source, developed by Tom Brown, https://github.com/sandboxie/sandboxie. But this project seems to be dead, there were no releases.
• Sandboxie Plus, developed by David Xanatos, https://github.com/sandboxie-plus/Sandboxie. But its version numbering is different, last version is 0.5.1

Does Sophos still publish new releases? (The last release hosted at Sophos behind nine rusted locks and referenced from https://www.sandboxie.com/ is 5.33.3.) How do they compare to Sandboxie Plus? E.g. from the perspective of bugs fixing and on-going maintenance.

 

0.5.1 is a Plus release -

Release v0.5.0 / 5.45.0
DavidXanatos released this Dec 7, 2020
-
Release v0.5.1
DavidXanatos released this Dec 12, 2020
This build resolves many issues with the last plus release, as well as updates many components.
It is now being compiled with Visual Studio 2019 using Qt 5.15.1.
Also the installer has been changed to use Inno Setup 6.
-
Sophos does not publish new releases.

https://github.com/sandboxie-plus/Sandboxie

https://www.sandboxie.com/

https://community.sophos.com/sandbo...ie-open-source-code-is-available-for-download

https://xanasoft.com/sandboxie-plus/

 

+1.
5.45 looks and behaves just the same as sandboxie always has. It just works. Also, more importantly, it contains security fixes including a sandbox escape exploit which 5.33.6 is vulnerable to.

 

Then, perhaps check your antivirus (if you are using anything other than Windows defender).

If you are using Windows defender. And this crashes are happening all the time, then perhaps you ought to test a new Firefox profile. Create one and test and see what happens. If crashes go away, then you know that the problem is caused by a setting or an addon you are using.

FWIW, Firefox 83 is working just fine under SBIE 5.33.6 in W10 20H2, and W7.

Bo

 

Hi, I need help please.
When I want to install programs like "Steam" "Google Drive" or "microsoft office" in the Sanbox, I always get an error message that there is no internet connection. Outside the sandbox everything installs without any problem.

 

From what I understood, if you're using Win 10, you haven't got another choice but to use Sandboxie Plus or Sandboxie Classic 5.45, because otherwise Chromium based browsers won't work correctly. On Win 8.1, the old Sandboxie 5.33 released by Sophos works just fine.

 

Hello! Was just wondering if someone could tell me how in old (or new open source) sandboxie to allow programs to have driver access? I'm trying to run a macintosh empluator and getting the error "Denied attempt to load system driver"

What options do I need to enable to allow a program only on this special sandbox I created to load a system driver? Thank you!

 

Complicated programs like Microsoft Office, can not be installed in a sandbox. There is nothing that can be done about it. Complicated programs in general can not be installed in a sandbox. So, I doubt Google drive can be installed. Regarding Steam. I don't play games but I know people can run some games sandboxed but again, installing Steam is probably impossible or almost impossible to install sandboxed.

If you are new to Sandboxie, you probably dont realize but Sandboxie works best with programs you install in the system and then you run them sandboxed.. And for sandboxed installs, start with something simple like Firefox or a Firefox based browser, or a video player or picture viewer.

Bo

 

This is not so. For Chromium based browsers, with SBIE 5.33.6 you just have to do a workaround (read a few pages back) and the browser works just fine. I use Edge and Edge is running good.

Bo

 

Yes, but we shouldn't need workarounds like disabling the browser's own sandbox. I have installed Sandboxie 5.45 on Win 10 and it does indeed seems to work just fine. BTW, I haven't tried Sandboxie Plus yet.

Yes I agree, it's best not to install complex apps like MS Office and Steam inside the sandbox, it either won't work or you might get problems sooner or later. In fact, I was even getting problems with Firefox and Vivaldi when they were installed inside the sandbox. However I did notice that portable versions of Firefox and Vivaldi run just fine even when you install them inside the sandbox.

 

You can run the old Sophos version on Win 10 as others have pointed out in this thread - but you have to faff around by altering targets etc which personally I am not comfortable doing if there is another option available. That's what I meant when I said "it just works" - 5.45.0 just works out of the box.

Yes, but at your own risk. 5.33.x contains unfixed security vulnerabilities regardless of your version of OS.

 

Well we will see about that installing office 2010 fully sandboxed is on my todo list.

 

No point doing 2010. Better do 2019 onwards

 

Hopefully, you won't have to "weaken" the sandbox.

 

Its no ware said that all sandboxes must be created equally.
Depending on your use case configuring certain boxes to be extra strongly isolated is an option as well as in other use cases making selected boxes less strict. Its all about options and understanding the choices you made.

 

Yes good point, if you reserve that specific sandbox only for MS Office it shouldn't cause any problems. As long as malware can't mess with the real system, it should of course be contained if MS Office is somehow exploited. But I understand you, perhaps you can even sandbox browsers in the future with the browsers doing the sandboxing themselves, Sandboxie should only take care of the virtualization part, this way you could perhaps avoid compatibility problems.

 

The balance between security and convenience in Sandboxie has always being spot on (ONLY the bare minimum that's required for most popular programs to run sandboxed is allowed by default or in Sandbox settings, nothing else). If you start changing that, to allow programs to work in the sandbox that historically have not worked well with Sandboxie or to allow installing programs that require to install services and drivers and are overly complicated, you are gonna have to open holes and where do you stop? If you start poking holes, you ll go on and on. I suggest, if you are going to do this, do it with plus, and leave Classic as is. Regards, and best wishes.

Bo

 

I agree that it would be better if we didn't have to disable the browser's sandbox. But to me personally, doing this is not a big deal. I being doing it forever with Firefox. In the case of Edge, I would not have disabled the sandbox if there was no issue, but disabling a browser's sandbox or another program's sandbox is not foreign to me. In the case of Firefox, it was desirable. What I wanted so I did it.

Sandboxie itself has done it before also, by default. For example: When you run IE, Protected mode (IE's sandbox) is automatically disabled by SBIE. You can see it in IE Internet Options.



Bo

 

You can poke major holes in the classical version already since always like "OpenIpcPath=\RPC Control\seclogon" or other settings
I think in future when creating a new box aside of choosing name, template, you will also be able to choose isolation level or alike, so as long as the User chooses default there it will behave as always.

 

No correct, for more experienced users it's no problem, but for others it should work out of the box. And are you still disabling FF's sandbox? I run a portable version of FF and it runs just fine, but I don't actually use it a lot, so I don't know if I would run into problems sooner or later.

This does sound interesting, but I also understand Bo, poking holes can be a security risk. But choosing isolation levels does sound kinda cool.

 

I'd love to see this soon. Thank you @DavidXanatos

 

What about Libreoffice? I tried to install it inside a sandbox a few minutes ago, and i couldn´t (i could in the past). It´s a .msi installer.

About Steam i had to say that used to work fine installed inside a sandbox, that was my method during the last years, 80% of my library games worked, but since W10 2004 steam is broken. I can´t install or update games anymore: https://github.com/sandboxie-plus/Sandboxie/issues/231

The latest versions from Sophos broke Uplay and Origin too. It´s hard to play sandboxed on Windows nowadays... not on Linux