Sandboxie Plus 1.0.0

Well technically once the feature is in you could quit your subscription, I would of cause appreciate it if you would keep it

Also this focus rectangle has a function, it distinguishes which cell in multi column view has been selected. So it has very much a utility being there, actually its even used in the UI as you have this copy cell option and this way you know which cell you would copy.

 

Is the default config established simply by creating a new sandbox additionally to the existing ones (which were taken from v. 0.9.8d)?

If yes, the situation is the following:

A) In a newly created Sandbox ("Neue Sandbox") at least Firefox and other programs seem to start and to work fine. (There was a problem with Chrome but perhaps this has to do with the fact that it is a forced program in another sandbox - so I think we could ignore this for the moment.)

B) In my (old) sandbox for Firefox (and [seldom used] for Skype) ("DefaultBox") there is the issue as described above (post #80, pictures nr. 1 and 2)*.

C) In my (old) sandbox for Chrome (as forced program) ("GoogleChromeBox") there is also the issue as described above (pictures nr. 1 and 3)*.

Here is the corresponding sandboxie.ini:

Code:

[GlobalSettings]

Template=VirtualDesktopManager
Template=RpcPortBindings
Template=WindowsRasMan
Template=Microsoft_MSMQ
Template=7zipShellEx
Template=OfficeLicensing
Template=AdobeAcrobatReader
Template=WindowsLive
ProcessGroup=<InternetAccess_Operabox>,opera.exe
ActivationPrompt=n
TemplateReject=NortonInternetSecurity
TemplateReject=Microsoft_Security_Essentials
FileRootPath=\??\%SystemDrive%\Sandbox\%USER%\%SANDBOX%
SeparateUserFolders=y
KeyRootPath=\REGISTRY\USER\Sandbox_%USER%_%SANDBOX%
IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION%
NetworkEnableWFP=n
EditAdminOnly=n
ForceDisableAdminOnly=n
ForgetPassword=n

[DefaultBox]

ConfigLevel=9
AutoRecover=y
Template=FileCopy
Template=SkipHook
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%Desktop%
Enabled=y
BoxNameTitle=n
BorderColor=#00FFFF,on,8
AutoDelete=y
NeverDelete=n
NotifyInternetAccessDenied=y
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedFilePath=C:\Program Files\Symantec\
ClosedFilePath=%Personal%\
ClosedFilePath=\Device\Mup\
NotifyStartRunAccessDenied=y
ReadFilePath=C:\Windows\
ReadFilePath=C:\Program Files\
ProcessGroup=<StartRunAccess>,firefox.exe,plugin-container.exe,plugin~1.exe,skype.exe,AcroRd32.exe,PDFXCview.exe,Silverlight.Configuration.exe,wisptis.exe,dllhost.exe,jp2launcher.exe,jp2lau~1.exe,java.exe,plugin-hang-ui.exe,ctfmon.exe,PDFXEdit.exe,SkypeBrowserHost.exe,rundll32.exe
ProcessGroup=<InternetAccess>,firefox.exe,skype.exe,plugin-container.exe,SkypeBrowserHost.exe
DropAdminRights=y
LeaderProcess=firefox.exe
ClosedIpcPath=!<StartRunAccess>,*

[UserSettings_04DE013C]

SbieCtrl_UserName= .....
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_WindowCoords=553,127,864,575
SbieCtrl_HideMessage=2101,ConnectPort (C0000022) access=001F0000 initialized=1
SbieCtrl_HideMessage=1308,software_reporter_tool.exe [GoogleChromeBox]
SbieCtrl_HideMessage=2303,CoGetObject (33, 1655)
SbieCtrl_HideMessage=2303,RegisterDragDrop (33, 1655)
SbieCtrl_HideMessage=2222,software_reporter_tool.exe [GoogleChromeBox]
SbieCtrl_HideMessage=2318,ole32.dll
SbieCtrl_HideMessage=2314,software_reporter_tool.exe
SbieCtrl_HideMessage=1308,RuntimeBroker.exe [DefaultBox]
SbieCtrl_HideMessage=2222,RuntimeBroker.exe [DefaultBox]
SbieCtrl_HideMessage=2314,RuntimeBroker.exe
SbieCtrl_HideMessage=2222,dllhost.exe [Testbox]
SbieCtrl_HideMessage=2314,dllhost.exe
SbieCtrl_HideMessage=2221,GOM.EXE [Testbox]
SbieCtrl_HideMessage=2205,Font Path C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf
SbieCtrl_HideMessage=2314,MsSpellCheckingFacility.exe
SbieCtrl_HideMessage=2205,Font Path C:\Program Files\Mozilla Firefox\fonts\EmojiOneMozilla.ttf
SbieCtrl_HideMessage=2205,DDE DATA
SbieCtrl_HideMessage=2221,FlashPlayerPlugin_11_3_300_257.exe [DefaultBox]
SbieCtrl_HideMessage=2222,dllhost.exe [DefaultBox]
SbieCtrl_ProcessViewColumnWidths=250,71,300
SbieCtrl_EnableLogonStart=n
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=y
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_SaveRecoverTargets=n
SbieCtrl_BoxExpandedView=DefaultBox,GoogleChromeBox
SbieCtrl_AutoStartAgent=SandMan.exe

[GoogleChromeBox]

Enabled=y
ConfigLevel=9
AutoRecover=y
BlockNetworkFiles=y
Template=OpenSmartCard
Template=OpenBluetooth
Template=FileCopy
Template=SkipHook
Template=AutoRecoverIgnore
Template=Firefox_Phishing_DirectAccess
Template=Chrome_Phishing_DirectAccess
Template=LingerPrograms
Template=BlockPorts
Template=qWave
RecoverFolder=%Desktop%
BorderColor=#00FF00
AutoDelete=y
NeverDelete=n
NotifyInternetAccessDenied=y
ProcessGroup=<InternetAccess>,googlechromeportable.exe,google~1.exe,chrome.exe
ProcessGroup=<StartRunAccess>,googlechromeportable.exe,chrome.exe
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedFilePath=%Personal%\
NotifyStartRunAccessDenied=y
ClosedIpcPath=!<StartRunAccess>,*
ReadFilePath=C:\Windows\
ReadFilePath=C:\Program Files\
BoxNameTitle=n
ForceProcess=chrome.exe

[Neue_Box]
Enabled=y
AutoRecover=n
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
ConfigLevel=9
UsePrivacyMode=n

If you find in general unnecessary entries in the ini.file please tell me too so that I can remove them.

Thank you.
___________

*) PS:
I just see that this time the error messages were partly different.
If it is of importance, here are for example the messages when trying to start Firefox in the DefaultBox:

 

@Melionix
Just tried Imdisk Toolkit. Have you been able to use the "Allocate Memory Dynamicly" together with sandboxie successfully? E.g I create a 64MB Ramdisk started Firefox and tried to download an 128MB OpenOffice installer. FF starts in the sandbox but no download is possible of the Office installer "disk full error".

 

@Peter 123
ReadFilePath=C:\Windows\
is what breaks it, will test now if that really works in a previouse build and try to find out why not it does not work

 

I already explained that the right way to show what you have selected is with the dark blue colour, without any ugly dotted lines. Here are 2 examples, in NetBalancer it's done right, in SyncBack it's done wrong. These ugly dotted line have always been a plague in Windows. I had hoped not to see them in Sandboxie Plus, especially because it's a brand new GUI.

https://www.snapfiles.com/screenshots/netbalancer.htm
https://www.snapfiles.com/screenshots/SyncBack.htm

 

Wow, you already found the culprit.

Thanks.

 

Create lets say a 250 mb ramdisk. Should be enough. Switched to ImDisk from Softperfect Ramdisk, kinda like it.

 

But in NetBalancer, how do you know which Colum was selected? Without the rectangle you can only select a row and don't know which column was clicked at

 

The value you choose for a dynamic RAM disk is the maximum value. You need to choose a higher value as the base value.

 

Strange thing happened. I downloaded your Sandboxie Plus and Classic from your Github site. I am using Win 11. And the file signatures check out properly.

I copied those files to my Win 10 machine. And the signatures fail to verify. The Win 10 machine is a fresh install, never connected to the net yet. Am I missing a Windows update which updates some certificate ?

 

This is described here: https://sandboxie-plus.com/supporter-certificate/ and I believe I have put some links to this location in the plus UI.

To summarize there are 4 ways to get a certificate:
1. Become a Patreon and get a certificate for at least as long as you are a patron, as i need to send those out by hand it may take a day or two
2. Perches a certificate directly on my homepage, than you get it instantly as its then generated by the system.
3. When donating, indicate that you want to receive a certificate, to get one also send by hand so it may take some time.
4. contribute to the project in a meaningful way, if you did that already drop me an email as GitHub does not have PM's and does not show emails so I can't reach contributors directly, than you'll get one as well.


PS: should i make a dedicated post about supporter certificates?

 

Thanks for the answers. Will have to try it again

 

David, I think it's worth clarifying your statement on github
"The requirement for a supporter certificate to use new features will apply also to future builds"
which seems to cover a broad range if not all new features.

 

The plan is to make it apply to large new features like the new box modes, these are a major change in sandboxies operation enabling usage scenarios which were not possible with the old behavior.

Not to a small extra menu option some ware or alike,
unless such a small feature is reasonably only useful in a corporate environment in which case that would only be available to certified users.

 

I found the reason why ReadFilePath was broken, it will be fixed in the next build.

 

Great. Thank you so much.

 

To my mind this would be a good idea. So supporter certificates etc. would get more attention and on the other hand it would be a specified place where to post questions about it.

 

Thanks David. Although your answer about certificates for new features is quite clear, I couldn't help to wonder if (some) future incompatibilities of the "old behaviour" or "standard" Sandboxie mode with new drivers or new Windows changes/updates/versions will have less priority in future and some fixes might be implemented as new features only.

It's would also be good if more clarity could be given on how long the certificates will remain valid.

Many thanks. The new compartmental modes are indeed a long sought feature for some and the need for certificates seem reasonable.

 

Works for me:


You're not trying to install IMDisk in a sandbox are you?

 

@henryg1 I just understood the wording/meaning wrong.
I thought I could enter a small value there and it would take more memory when needed.
Instead it wanted a max value (and would just start with a small ramdisk).
Thanks, now it's working for me also

 

To be honest, I can't follow you, and I also don't really care about their function.

All I know is that when I select a certain row with my mouse cursor, it needs to be highlighted with the blue or any other color, those dotted lines don't have any function to me. In some apps you will see them, like in almost all of Nirsoft utilities, but in lots of apps you luckily don't get to see them. To me it's a matter of esthetics, a GUI isn't perfect if those ugly dotted lines are visible. But enough about this.

 

@DavidXanatos Congrats for reaching a milestone. SBIE came a long way and You did a great job!!!!!

Just tested the Plus 1 version.
Result is that all the weirdo games work fine. No anomalies on the game front!!!



Just some cents about classic and plus GUI.
It becomes kind of cumbersome and really taste is not arguable, but thinking about all the changesm people have to deal with SAS in the corporate world, we should be happy David doesn't change it with every version. Yesterdays function is gone, ohh you liked it, well, we didn't,....
Honestly, functionality is way more important than a dotted line. Like adding all options of the ini into the GUI.
Consider also, there might be people who like the dotted line, don't they have a right too, doesn't the poor dotted line has a right to live?
The dotted line- rectangle is there to mark the cells in the list (table) to enable content copy.

Then the argument about classic vs plus. I am too lazy to learn, really? There is not that much to learn, go simple, locate your favorite functions and use them, ignore the rest....
Be happy David is not to lazy to support classic. Others might have dropped it already. I see already a fork to keep classic, the most genious idea, spread forces till there is no force anymore.
The old issue with Linux on the desktop. How many distros do we really need, how many desktops. Instead make it easier to do things in a gui, instead of the terminal. Keep terminal for the ones who want to use it, scripts, ..., do gui for the others. That's the point of a GUI, to use it. Not to have an icon to start the terminal and do all in there. Normal user do not remember commands. They hardly remember where to click sometimes.
Maybe something to think for anybody complaining about a dotted line or classic vs plus options!?
End of my cents and ranting.

SCNR Peace

 

Hi @DavidXanatos

I updated to Windows 11 on one of my machines last night, and there's a problem with the function "Find on Page" in Chromium Edge when running Edge under Sandboxie 0.9.8.d. I then updated the machine to Sandboxie version 1.0.0, but the problem persists in this version too. As I only just updated to Windows 11, I'm afraid I can't tell you which version of Sandboxie or Edge this became a problem. I'm running Edge 96.0.1054.29.

The problem does not occur in my Windows 10 machines running Edge under Sandboxie.

To reproduce in Windows 11, go to the 3 dots (settings and more) in Edge and click on Find on Page. Unsandboxed - the wee find bar with the arrows appears as it should, but sandboxed - it's invisible. If you mouse over the general area you'll see a sandboxed yellow border appear, but the contents are invisible rendering it unusable. It's not a problem on FF, Chrome or Brave though - just Edge. I tried changing colour schemes of the browser and using with/without an external monitor, but no change.

Here are some screenshots of with Sandboxie and without:

 

My thanks and congrats for v.1.0.0, too!

Works for me without new hassle or problems.

Albeit having said that - would it be immodest to expect a little bit more from a v1.0-"quantum leap"?

For instance the HW-acceleration-problem for Chromium-based browsers using Chromium-engine v.95 or higher, possibly attributed to Intel-Iris-Xe-graphics still persist and latest browsers like Chrome itself or Opera won't launch sandboxed with HW-acceleration=ON.

Also, since those browsers won't update correctly any longer when started within a forced folder an envisioned future improvement by @DavidXanatos becomes more urgent with each new release - namely to implement checkboxes within the "Forced Programs/Folders"- section of the Sandman-GUI-options-settings. Those would allow to temporarily disable forced browser-folders just for the upgrade-process without every time having to entirely delete them altogether first and then (after the upgrade) having to declare them from scratch again by browsing through - at times quite long - path-names on the disk.

So it would be nice if that feature suggested by the master himself could become part of the final 1.0-version still or - if not possible - make it to the 1.1 release. From my point of view these would be the most urgent priorities - but then it's only "my 2 cents" as others may see priorities quite differently.