Sandboxie Plus 0.8.8

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by DavidXanatos, Jul 13, 2021.

  1. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    0.5.5.png

    This build reworks some internal mechanisms and fixes a lot of bugs as well as some new features.

    If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

    Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.8.8



    Changelog
    [0.8.8 / 5.50.8] - 2021-07-12
    Changed
    • MSIServer no longer requirers being run as system completing the move to not using system tockens in a sandbox by default
      -- the security enhanced option "MsiInstallerExemptions=n" is now the default behavioure
    Fixed
    • fixed issue with the "Explore Sandboxed" command #972
    • rolled back the switch from using NtQueryKey to NtQueryObject as it seams to bream soem older w10 versions liek 1803 #984
      -- this change was introduced to fix #951
      -- to use NtQueryObject the option "UseObjectNameForKeys=y" can be added to sandboxie.ini
    [0.8.7b / 5.50.7] - 2021-07-11 (Hot-Fix 2)
    • fixed issue with boxes that head auto delete activated introduced in the previous build
    Fixed
    [0.8.7 / 5.50.7] - 2021-07-10
    Added
    • added option to always auto pick the DefautlBox sandbox #959
      -- when this option is enabled the normal behavioure with a box selection dialog can be achived holding down CTRL
    • added option to hide boxed form the run in box dialog
      -- usefull to avoidl listing for example insecure compatybility test boxes
    • added box options to sys tray #439 #272
    Changed
    • changed default terminate all boxed processes key from Ctrl+Break to Ctrl+Alt+Break #974
    • start.exe does no longer link in all that unused MFC code reduced file size form over 2.5MB to below 250KB
    • updated the main sandman and tray icon #963
    • improved the bov view tree style
    Fixed
    • added additional delay and retryes to kmdutill.exe to mitigate issues when unloading the driver #968
    • fixed issue with sbiectrl not being properly started after setup #969
    • fixed issue with explore sandboxed shell option #972
    • fixed issue when running sandman elevated #932
    • fixed new box selection dialog showing disabled boxes
    • fixed issue updating box active status
    Removed
    • removed Online Armor support as this product is deprecated since 2016
    [0.8.6 / 5.50.6] - 2021-07-07 (Hot-Fix 1)
    Added
    • added LibreWolf template (by Dyras) #929
    Fixed
    • fixed performance bug introduced in 0.8.5
    [0.8.5 / 5.50.5] - 2021-07-06 (Pre-Release)
    Added
    • added global hotkey to terminate all boxed processes (by default Ctrl+Break)
    • the Run Sandboxed dialog can now be handled by the Sandman UI.
    • added "AllowBoxedJobs=y" allowing boxed processes to use nested jobs on Windows 8 and later
      -- note: this allows Chrome and other programs to use the job system for additional isolation
    • added librewolf.exe to the list of Firefox derivatives #927
    • added run regedit sandboxed menu command
    • added new support settings tab to Sandman UI for updates and stuff
    • added code integrity verification to Sbie service and UI
    • added template for Vivaldi Notes (by isaak654) #948
    • added LibreWolf template (by Dyras) #929
    Changed
    • Replaced the Process List used by the driver with a much faster Hash Map implementation
      -- Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
      -- The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
      -- Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
    • Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
    • Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
      -- not yet enabled in production build
    • the presence of default box is only checked on connect
    • the portable dir dialog now shows the directory #924
    • when terminated boxed processes now we first try doing that by terminating the job object
    • the driver now by default can terminate problematic processes without the help of the service
    • box delete routine now retries up to 10 times to fix #954
    • Replaced the Process List used by the service with a much faster Hash Map implementation
    • Replaced the per-process Thread List used by the service with a much faster Hash Map implementation
    Fixed
    • fixed faulty initialization in SetServiceStatus (by flamencist) #921
    • fixed buttons position in Classic UI settings (by isaak654) #914
    • fixed missing password length check in the Sandman UI #925
    • fixed issues opening job objects by name
    • fixed missing permission check when reopening job object handles (thanks Diversenok)
    • fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers #930 #817
    • fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
    • fixed minor setting issue #957
    • fixed minor UI issue with resource access COM settings #958
    • fixed an issue with NtQueryKey using NtQueryObject instead #951
    • fixed crash in key.c when failing to resolve key paths
    • added workaround for topmost modality issue #873
      -- the notification window is not only topmost for 5 seconds
    • fixed an issue deleting directories introduced in 5.49.5
    • fixed an issue when creating box copies
    Removed
    • removed switch for "BlockPassword=n" as it does not seem to be working #938
      -- it's recommended to use "OpenSamEndpoint=y" to allow for password change in windows 10
     
  2. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    23,936
    Location:
    UK
    5.50.8 Classic updated over the top without issue.
     
  3. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    23,936
    Location:
    UK
  4. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    OK, installed this over the top (Plus), hopefully third time's the charm. Had to remove 0.8.7 also due to gmail opening to a blank white page while boxed.

    Was reading about the new icons for the Plus UI on GitHub--I mean if you're going to re-tool the main icon ( sandbox instead of pizza slice), why not replace the yellow and orange pizza slices within the UI also-- for consistency's sake? Or is this too over the top?

    Personally, I don't really care one way or another, though. :)

    sbie icons.png
     
  5. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    23,936
    Location:
    UK
    Please leave some bits of pizza !!
     
  6. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    I apologize, stapp. Had no idea it meant so much to you. :oops:

    Yo, Sbie dev., you gonna lose them slices or what? :isay:
     
  7. catspyjamas

    catspyjamas Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    288
    Location:
    New Zealand
    Version 0.8.8 running well on all our machines here, thanks David. (Except for Chrome, Vivaldi & Brave v.90 and above on the Tigerlake machine, but that's a known issue. Edge & FF still working well on same).

    The new icon gave me a surprise. Why the change? I think the previous pink box with the mountain of yellow sand vs no sand mountain was a bit easier to see the status of. I have to peer really closely now to see if their are red dots in the small pile of sand, or just sand. That said, it's still much nicer than the legacy sandboxie icons, which look like they were drawn by a toddler imo. This isn't a complaint btw, and I should probably add that I have a bit of an eye condition, so the difficulty seeing the status of the sandboxie taskbar icon may not be something others find.
     
    Last edited: Jul 13, 2021
  8. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,167
    hi
    can't run inside sandoxies portable programs release by portableapps like libre office , z-zip , all of them give me the same error like chromeportable.exe

    i tried everything drop rights , trying to run chrome 91.0.4472.124 64bit , sandboxie classic 5.50.8 , w7 64bit , it happens with w10 64bit too

    sometime 5.50.2 gave the same error and sometime it does work

    i got this error
    Code:
    could not invoke program
    "x:\chromeportable\chromeportable.exe"
    system error code :
    acess denied
    5
    Code:
    SBIE1231 Initialization failed for process GoogleChromePortable.exe [C0000038 / 66]
    SBIE1231 Initialization failed for process  [C0000001 / A8]
    SBIE2314 Cancelling process GoogleChromePortable.exe
    SBIE1231 Initialization failed for process GoogleChromePortable.exe [C0000038 / 66]
    SBIE1231 Initialization failed for process  [C0000001 / A8]
    SBIE2314 Cancelling process GoogleChromePortable.exe
    
    searched around the in the forum , but haven't found a solution
    thanks
     
    Last edited: Jul 14, 2021
  9. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    402
    Location:
    uk
    New icon gives me problems too. Please revert.

    Maybe it's an age thing - well it is for me ;)
     
  10. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    I'll improve on the tray icon, the change was because on an other forum people complained about the current tray icon that its fizzy and hard to see, it probably depands on how the PC is configured in dark mode it was not as great an on a bright background
    the new one is better in that regard but not yet perfect
     
  11. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    You guys want to go back to the pizza slice icon?

    I thought it would be more consistent with how Sandboxie (Plus) transitioned from one identity to another. Whatever the majority wants, though.

    Insofar as how clear the tray icons are, it seems the less detail but more true coloing the better. Rainmeter clearly looks like a raindrop. Sandboxie could look like a small yellow cake if you didn't know what it was already.
     
  12. catspyjamas

    catspyjamas Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    288
    Location:
    New Zealand
    Not me. I simply said the new icon, when shrunk down to fit on the taskbar, is not easy to see the status of (i.e. whether it's empty or not). I had no objections to the previous Sandboxie Plus icon. You could clearly see if it was empty of full by a yellow pile in a pink box vs no yellow pile in a pink box. I didn't think it looked fuzzy, but obviously some others did, hence the change. David has indicated that the icon is a work in progress.

    It's not a deal breaker for me at all. I'm using the magnifying glass to double check if I'm unsure if it's empty or full, but like I said above, I have wonky eyes. :)
     
  13. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    596
    Location:
    Austria
    I can tell something for the chromeportable.exe (no experience with other releases of Portableapps inside Sandboxie):

    I had to execute the paf.exe of GoogleChromePortable as administrator (choosing the appropriate command of the context menu of the paf.exe) so that afterwards I was able to start Chrome inside Sandboxie. (At least this is my experience in order to run it as forced program inside Sandboxie.)

    So you could try if it works for you too in this case (either with Chrome either with the other programs you mention.)
     
  14. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    Hi mantra. My post is about Libre and 7Zip. Tell me this, are you forcing programs or are you right clicking on files and choosing to run them sandboxed? I am thinking you are right clicking files.

    Both, Libre and 7Zip should be working in Sandboxie.

    If you are right clicking files, and choosing Run sandboxed to run files sandboxed, try doing it in a non Start Run restricted sandboxed and don't enable Drop rights. I have Libre portable. That is all you need to do to get Libre working in SBIE.

    Know this. You can run Libre by right clicking files in a restricted sandbox but it ll take work to get it working so if you prefer to run files this way, tell me and I ll tell you what to do.

    The easiest way to run this programs sandboxed is to force them. You force soffice.bin for Libre. If you force libre, you can run Libre in a sandbox with Drop rights enabled and is very easy to set up Start Run restrictions.See picture below to see what you need to allow.

    1.jpg

    Thats all for Libre.

    7Zip. I am not using the portable version but the regular version is working fine under SBIE, the portable should be also.

    Try forcing, 7zfm.exe. For 7Zip, I enable Drop rights and allow all programs to start and run.

    Bo
     
  15. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    6,167
    Hi @bo elam
    I try to drag and drop
    have you tried it?
    by the way with an older version of sandboxie classic i had no issues
    thanks
     
  16. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    6,144
    Location:
    Nicaragua
    Hi mantra. Yes, I can drag and drop. I dont run files that way but it works. See my instructions for "right clicking files, and choosing Run sandboxed". That ought to work for you/drag and drop. Or try forcing Libre (see instructions). That really is the best way for using SBIE. Things become automatic.

    Regardless of what you try, make sure the sandbox is clean (no content). Or better yet, try using a new sandbox.

    Bo
     
  17. algol1

    algol1 Registered Member

    Joined:
    Aug 10, 2020
    Posts:
    337
    Location:
    Vienna, Austria
    @DavidXanatos
    Thanks for the upgrade again. On a side-note though I have to say that I'm not really impressed by the new tray-icon. The empty version now looks somehow "filled up" - while, even worse, the full version is hardly distinguishable with those red dots nearly invisible in that tiny tray-icon.

    I'd suggest that the empty form either be filled with light grey with the full form being filled with bright yellow/orange or - if you'd like to keep the empty form - that the full form gets filled with a much darker color overlapped by max-bright light-red or light-yellow dots for enhanced contrast.
     
  18. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    If you have the colored border enabled, does anyone ever experience the border appearing around programs that aren't configured to run sandboxed? I'm getting the border (here it's black) periodically around File Explorer and Control Panel, Edge too once or twice. Windows 11 22000.71, Sandboxie Plus 0.8.8. No idea what triggers this to happen, it just does.

    I have a short video clip demonstrating this and can post a Vimeo link (it doesn't play automatically). If someone else has already commented on this issue, sorry but there are just too many threads and posts to comb thru.
     
  19. algol1

    algol1 Registered Member

    Joined:
    Aug 10, 2020
    Posts:
    337
    Location:
    Vienna, Austria
    Actually, no. But while we're at it I have observed another minor issue in connection with that border.

    I see it only around sandboxed programs as expected but when programs run full-screen I have observed recently that the yellow border will sometimes be shown a little bit overlapping with the outer edges of that fullscreen-window. In other words it looks like if the window beneath were not fully 100% and therefore the yellow border would overlap with the 0,1% outmost regions of that window. Having that said this can be remedied easily by toggling between windowed mode and then back to full-screen again at which point the window will be displayed in true fullscreen-mode again as it should.
     
  20. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    OK, thank you for the observations, algol1. Of course I could not reproduce your issue with the full-sized window not 100%. On here using Firefox, the window expands fully without any gaps. But, you did remind me to troubleshoot by changing the border color (which in Plus has to be changed by editing the ini it seems, and using the color codes from here). :)

    So I changed the border from black to a slate grey color for testing. It may be a Windows 11 thing, I don't know--although I recall this happening in latter Windows 10. No big deal, the prog. can be closed and re-opened borderless but it's something you don't want to happen at any time if you can help it. I'll see what happens and post an update if one occurs.
     
  21. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    ...did you try clicking the color box?
    Plus install > Plus UI
    png_11273.png
    Plus install > Classic UI
    png_11275.png
     
    Last edited: Jul 16, 2021
  22. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    :rolleyes:

    Well, you know what it was? The border was black and the UI on here is in dark mode. So, yeah. :D

    When I used Classic, it was no problem.
     
  23. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    Okay....my read (my bad) was "changing the border color in Plus has to be changed by editing the ini".
    Plus install may use Plus UI or Classic UI to change border color.
     
    Last edited: Jul 16, 2021
  24. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
    After install then first machine restart:

    nodisk.png

    Next clicked Continue
    Sandman GUI appears

    I'm on a low specs old lappy using Windows 7 SP1 pro x86
     
  25. soccerfan

    soccerfan Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    560
    A similar (perhaps related) issue reported on github:
    https://github.com/sandboxie-plus/Sandboxie/issues/966
    A quote from that post (that you could try out):
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.