Sandboxie Plus 1.0.0

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by DavidXanatos, Nov 17, 2021.

  1. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    411
    Location:
    uk
    Not doing anything that I can think of that causes it. And it doesn't always appear; I just loaded 5 websites I know I have set for a container, and no warning at all - I only have the one container in use.

    It's no big deal, just an irritation.
     
  2. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    Because I do not use Firefox Sync. I wonder if Firefox Sync runs at some frequency and that's when notice appears. If I stumble on anything. I'll post back.
    Edit: I setup and called Sync. I did not see notice.
     
    Last edited: Nov 28, 2021
  3. algol1

    algol1 Registered Member

    Joined:
    Aug 10, 2020
    Posts:
    339
    Location:
    Vienna, Austria
    Not quite. The initial incompatibility of SB with "CET/Stack Protection" has been fixed. The new issue with Chromium >v.94 might have an entirely different cause. Perhaps indeed Intel-Iris-Xe (as the master himself has suggested after some report on Github), perhaps still something else. But since MS-Edge is not affected (and hasn't been affected then after some MS-update) I have a personal suspicion that this might also be a remnant problem of hitherto undiscovered incompatibility of legacy-SB-code with "CET/Stack Protection" again. Just some feeling when comparing who has the new problem and a majority who obviously doesn't have it.

    As for Vivaldi I'm afraid I currently don't have the time to enter testing, in particular since I've zero experience as to how Vivaldi should look like when installed and working correctly.
     
  4. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    411
    Location:
    uk
    Thanks for trying to help:thumb::thumb::thumb:
     
  5. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
  6. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    I would compare it to Comodo sandbox, with the new object filtering enabled sbie+ in this less secure mode should still be as secure as Comodo sandbox, meaning processes without admin rights should not be able to harm the system and processes with admin rights well they can exploit the RPC mechanism to escape the sandbox supervision like in comodo.

    And yea it were many large and big changes required, this feature was under developement since around 0.4.5 in form of various debug options, now these were conbined together and some other features added to make it all work nicely.
     
  7. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,805
    Location:
    .
    In general terms, is it difficult to achieve or is it easy?
     
  8. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    Well the bottom line is it can be so if some one really wants he could.
    But as said for the most exploits of that sort the proces would need to be admin, so enable drop admin rights for teh box and it should be reasonybly secure.
     
  9. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    596
    Location:
    Austria
    Inspired by this advice I took a look at my second sandbox (used only sometimes for Google Chrome [portable version]) and saw that I had not enabled it. So I looked at my written notes concerning my computer activities, and so I found out that intentionally I did not enable it in the past (at times when Sandboxie still belonged to Sophos) because then Chrome did not start at all.

    Well, now I tried again to enable drop admin rights and the situation is clearly better than in the past - Chrome starts - but not fully o.k.:
    Permanently appear the following two notifications in a long list:

    SBFM.jpg

    Can/Should I hide these messages (without risks), or is there anything else I should do?
    (using Sandboxie-Plus v.0.9.8d)

    Thanks.
     
  10. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    596
    Location:
    Austria
    And something else (without connection to the above issue):

    I would like to confirm what bjm_ reports above in post #180:

    I also get often (not always, I think) a similar notificaton ("Migrating a large file ...") when starting my browser (both for Firefox in the Default Box and for Google Chrome in my second box).

    Here an example concerning my GoogleChromeBox:

    SBIE-bigfile.jpg

    This notification disappears automatically after some seconds and then all seems to work fine with the browser (no delays etc.).
     
  11. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    FWIW ~ I've had em' (amongst more) with my HideMessage=, long time.
    SbieCtrl_HideMessage=2214,bits
    SbieCtrl_HideMessage=2219,SandboxieDcomLaunch.exe [Edge]
    SbieCtrl_HideMessage=2220,SandboxieDcomLaunch.exe [Edge]
    SbieCtrl_HideMessage=2219,SandboxieDcomLaunch.exe [Chrome]
    SbieCtrl_HideMessage=2220,SandboxieDcomLaunch.exe [Chrome]
     
    Last edited: Nov 30, 2021
  12. catspyjamas

    catspyjamas Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    288
    Location:
    New Zealand
    Hi Peter 123. I get the same wee box pop up about migrating a large cab file on Chromium Edge on a couple of my computers too. Seems to be an occasional thing on one, and an every time thing on another - the latter is an old, gutless wonder with not the highest of specs. Like you, it doesn't seem to cause any functional issue. I haven't noticed it on other browsers though, for me it's just Edge. Started noticing this several months ago.
     
  13. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    596
    Location:
    Austria
  14. settttttt

    settttttt Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    8
    Location:
    virginia
    I asked about this weeks ago with no response. Found it annoying enough that I ended up going back to classic version.
     
  15. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,073
    Location:
    UK
    May go back to previous build. So far I've had a BSOD last week, and then today a SbieSvc crash with this build (Classic 5.55)

    Description
    Faulting Application Path: C:\Program Files\Sandboxie\SbieSvc.exe

    Problem signature
    Problem Event Name: BEX64
    Application Name: SbieSvc.exe
    Application Version: 5.55.0.0
    Application Timestamp: 6192a18d
    Fault Module Name: ntdll.dll
    Fault Module Version: 10.0.19041.1288
    Fault Module Timestamp: a280d1d6
    Exception Offset: 000000000011c1e8
    Exception Code: c0000005
    Exception Data: 0000000000000008
    OS Version: 10.0.19044.2.0.0.256.48
    Locale ID: 2057
    Additional Information 1: e9b4
    Additional Information 2: e9b418bba388d1b7b1162570c0d880ff
    Additional Information 3: 255a
    Additional Information 4: 255a5caf9d6a09ed9610f84d31f720a5

    EDIT.. Might be an idea for other users of the build to open Windows Reliability History to see if they have had any
     
    Last edited: Dec 2, 2021
  16. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    Yes, @stapp several reports Nov 4th thru Dec 3rd...for example:
    Code:
    Description
    Faulting application name: SbieSvc.exe, version: 5.53.3.0, time stamp: 0x617d91af
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x0000024b8dd74df0
    Faulting process id: 0x9f4
    Faulting application start time: 0x01d7d87342dc19ff
    Faulting application path: C:\Program Files\Sandboxie-Plus\SbieSvc.exe
    Faulting module path: unknown
    Report Id: d501e8a2-6179-4af8-9952-4e92be7bd85d
    Faulting package full name:
    Faulting package-relative application ID:
    
    Code:
    Description
    Faulting application name: SbieSvc.exe, version: 5.55.0.0, time stamp: 0x6192a18d
    Faulting module name: msvcrt.dll, version: 7.0.19041.546, time stamp: 0x564f9f39
    Exception code: 0x40000015
    Fault offset: 0x000000000000ae22
    Faulting process id: 0x273c
    Faulting application start time: 0x01d7e46a6d8a4f1c
    Faulting application path: C:\Program Files\Sandboxie-Plus\SbieSvc.exe
    Faulting module path: C:\WINDOWS\System32\msvcrt.dll
    Report Id: 848b466f-1ac1-4fc1-8cf8-c989d70c1b75
    Faulting package full name:
    Faulting package-relative application ID:
    
    png_12953.png
     
    Last edited: Dec 3, 2021
  17. Monica2000

    Monica2000 Registered Member

    Joined:
    May 18, 2020
    Posts:
    65
    Location:
    Spain
    I had a BSOD too last week using 1.0.0 version in Windows 10 21H2. Never had a BSOD using Sandboxie. SbieDrv.sys was the culprit.
     
  18. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    I followed the advice of stapp and found there was an isolated SbieSvc crash similar to that of bjm_ but did not actually notice this in real time. Not sure if it came about from something I did versus something inherent in the program. Regardless, here is the EV note:
    evs sbie crash.png

    Windows 11 build 22000.348 Thanks for the advice, stapp. :thumb:
     
  19. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,073
    Location:
    UK
    Just for info and in case you are not familiar with Windows Reliability History, just press windows 'Start' and immediately type Reliability History (no need to put it in a search box as it will be done automagically for you)
    Click on it and see what Windows has found.
    Any red errors just click on one and then double click on the event to see the error.
     
  20. catspyjamas

    catspyjamas Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    288
    Location:
    New Zealand
    BSOD on Win 11 out of the blue this evening with SB+ 1.0. SbieDrv.sys was the culprit. Noted some other reports above so have reverted back to 0.9.8.4 for now. I think this is the second occurrence since installing this version 10 days or so ago. Was running well otherwise (save for the problem in Edge when using "Find on this page", which I reported about already).
     
  21. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    411
    Location:
    uk
    Came across this today

    "Firefox Multi-Account Containers requires permissions to exchange messages with other programs"

    https://www.ghacks.net/2021/12/03/f...ons-to-exchange-messages-with-other-programs/

    and wonder if it has anything to do with my problem - which continues as an annoyance, but hasn't caused any practical problems.

    I have given the necessary permissions outside of Sbie so it should be ok, but at a guess Sbie is blocking access to that permission setting somehow.
     
  22. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    would you have a crash dump to verify if its the same issue?
     
  23. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,073
    Location:
    UK
    @DavidXanatos
    I notice that Sbie Plus version has crash dumps in C\Users\name\Appdata\local\ crashdumps

    (Of course they are not Windows mini dumps or Memory dumps)

    Classic doesn't have them, is that correct?
     
  24. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    fxi: in the next build all major lists in the box options wil have check boxes and will be editable
     
  25. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.