Sandboxie Plus 0.9.7 Test Build

Something weird happened when I installed Sandboxie Classic v5.52.1 : my second sandbox had vanished. I tried to create a new one, but I got a warning message saying there was already a sandbox with that name ... but it didn't appear in the GUI. I had to revert to v5.51.6 to get it back.

 

This is a test build which includes a lot of internal changes, required for future features and improvements.
This build changes how the sandboxie.ini is handled, hence it is recommended to create a backup just in case.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.9.7e
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.9.7d
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.9.7c
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.9.7

Changelog
Added

• added forced process indicator to process status column #1174
• added "SbieTrace=y" option to trace the interaction between Sandboxie processes and the Sandboxie core components
• when initializing an empty sandbox, MSI debug keys are set to generate the debug output of MSI installer service
• added "DisableComProxy=y" allowing to disable COM proxying through the service
• added "ProcessLimit=..." that allows to limit the max count of processes in a sandbox #1230
• added missing IPC logging

Changed

• reworked SbieSvc ini server to allow settings caching and greatly improve performance
  -- Now comments in the Sandboxie.ini are being preserved as well as the order of all entries
• enabled configuration section list replacement with a hash map to improve configuration performance
• improved progress and status messages for the Plus installer (by mpheath) #1168
• reworked RpcSs start mechanics, sandboxed RpcSs and DcomLaunch can now be run as system, use "RunRpcssAsSystem=y"
  -- note: this is generally not recommended for security reasons but may be needed for compatibility in some scenarios
• reworked WTSQueryUserToken handling to work properly in all scenarios
• reworked configuration value list to use a hash table for better performance

Fixed

• fixed Plus upgrade install in Windows 7 (by mpheath) #1194
• fixed custom autoexec commands being executed on each box start instead of only on the initialization
• fixed a design issue limiting the maximal amount of processes in one box to 511
• fixed handle leaks in the lingering process monitor mechanism
• fixed issue with opening device paths like "\??\FltMgr"
• fixed build issue with an explicit FileDigestAlgorithm option for driver sign (by isaak654) #1210
• fixed issue with resource access log sometimes getting corrupted
• fixed issue with Microsoft Office Click-to-Run #428 #882

removed

• removed support for Microsoft EMET (Enhanced Mitigation Experience Toolkit), as it was EOL in 2018
• removed support for Messenger Plus! Live, as MSN Messenger is EOL since 2013
• disabled Turkish language on Plus UI for inactivity (by isaak654) #1215

 

Good thing "immediate recovery" works fine in Classic now. Latest v. 5.52.1/Microsoft Edge.

 

First observations: No severe problems encountered at first glance. Upon installation the tray-icon will still close down thereafter until a sandboxed process is started. Only after a re-boot the tray-icon becomes permanent. Just saying, that has been the (correct?) behavior ever since.

Without the special sandboxie-plus.ini-setting

[Options]
InstantRecovery=0

instant recovery still won't kick in immediately after any completed file-download, even if the corresponding check-box in the sandbox-options (section "File recovery") has been properly set. So this known issue as it appears hasn't been fixed as of yet.

 

Thanks for your confirmation. First time this happens here. I'll wait for the next build.

 

For many years I have had various programs forced in the Global Settings section of sandboxie.ini, and prior to this update they have always opened in a sandbox I set up with drop-rights. After this update they are opening in a different sandbox (without drop-rights). I resolved the issue by my moving the forced programs to the specific drop-rights sandbox, so no big deal. Strange though.

The order of my sandboxes in the ini file are: default (which is disabled); drop-rights; no drop-rights

David, I can provide a copy of my ini file if wanted.

Otherwise this version seems to work fine.

 

hmm that was to be expected, as the new way settings are handles, does not internally preserve the order of ini sections,
haven't thought anyone would exploit this to set forced sandboxing priority.

 

Could you pleae pos t your sandboxie ini so i can reproduce the issue

 

@henryg1
how do we solve your issue, reverting the change is not the best course of action as its quite a performance improvement.

Why do you have the same programs set to force start in more than one sandbox?

 

JFYI: I have installed the new version 5.52.1 on several systems because of the Office fix. None of the additional sandboxes disappeared on any of my systems afterwards.

Maybe there is a missing setting entry in the disappearing sandboxes, which the new version needs to create a sandbox? I think @DavidXanatos will find out with the help of your .ini files.

Edit: The only way I can reproduce it on my systems is to remove the entry "Enabled=y" in a sandbox.

 

My second sandbox is also missing after installing version 5.52.1 x64 Classic (not forced).

Edit: name of second sandbox is Edge.

 

David, I made the necessary changes and I'm happy with this version. I wondered why, and now I know.

It was a change I made years ago, and TBH can't recall now. Maybe I was playing with different sandboxes, and I used the Global Settings as a catch all.

 

FWIW ~ as test: over-install Plus 0.9.7
Plus UI seems okay.
Classic UI = lost my Edge box.
-
call Plus UI & call forced Edge = Edge box okay
close Edge & Exit Plus UI
call Classic UI & call forced Edge = no Edge box
-
Create a New Sandbox = Error

as always, your mileage may vary

 

Okay, I guess that's the important clue:

If you name a sandbox [Edge], it actually disappears. One additional letter before or after it and it reappears.

 

First, I always do a clean install.

Classic Sandboxie 5.52.1 (64 bit)

1) After installing Sandboxie, there was no default sandbox as previous versions so I had to create a new sandbox (Menu: Sandbox, Create New Sandbox)
2) In sandbox settings under Appearance, I unchecked the two bottom settings to turn off the thick yellow border that shows around my sandboxed apps. The border was still there (not in previous versions) and I had to go back and change the border number from 6 to 0. Never had to do that before.
3) In sandbox settings under Applications, any app you click Add and Apply didn't work on the first try. It worked on the second try.
4) In Sandbox settings under Applications/Mozilla Firefox, all the settings are no longer grouped together by app as in previous versions. So the settings for all the apps are now mixed with other apps instead of being grouped together by app.
***I think all of these issues have to do with the default sandbox no longer appearing when you install the app on a clean install. So when you now have to create a new sandbox, there's some kind of conflict from with the default sandbox that doesn't show up (possibly hidden).

#
# Sandboxie-Plus configuration file
#

[GlobalSettings]
Template=RpcPortBindings
Template=WindowsRasMan
Template=WindowsLive
Template=OfficeLicensing

[DefaultBox]
ConfigLevel=9
BlockNetworkFiles=y
Template=Firefox_Force
Template=LibreWolf_Force
Template=Thunderbird
Template=OpenSmartCard
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
BorderColor=#00FFFF,off,0
Enabled=y
BoxNameTitle=n
RecoverFolder=D:\Sweepstakes
RecoverFolder=D:\Jerry
RecoverFolder=D:\DVD
DropAdminRights=y
ForceProcess=thunderbird.exe

[UserSettings_458A04FA]
SbieCtrl_UserName=rockin'_jerry
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_NextUpdateCheck=1633807753
SbieCtrl_WindowCoords=879,508,831,441
SbieCtrl_ActiveView=40022
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_HideWindowNotify=n

[Sandbox]
Enabled=y

 

I have found the issue and there will be a build 0.9.7b out soon with the fix

the issue is that ini files created in UTF8/ascii are not loaded properly by the new code, old ini files in unicode are loaded fine.

 

fix: https://github.com/sandboxie-plus/Sandboxie/releases/tag/0.9.7b

 

FWIW ~ as test:
From Plus 0.9.6 with 10 boxes -> over-install Plus 0.9.7b
Plus UI = okay with 10 boxes.
Classic UI = 9 boxes - no Edge box.
~ just me?
Edit: back to Plus 0.9.6 with 10 boxes.

 

Downloaded 5.52.2 Classic for Win10 64 bit and Win7 32 bit and now have sandbox and Firefox sandboxes not opening though both appear in the ini file.

Should I roll back to a previous version?

 

0.9.7 installed and tested, all games working fine, no hiccups. Will not change to b for now.
No issues with any of the INIs. It is the old old old one, never changed just went through all the updates.
Tray icon never disappeared, updated from .6 to .7 no restart.

Still on Win10 pro 2004, refused the SAAS with 1 year delay. Just to mention.

 

FWIW ~ as test:
I dusted off my dust collector machine.
From Classic 5.51.6 with 10 boxes -> over-install Classic 5.52.1 installer = 9 boxes - no Edge box.
From Classic 5.51.6 with 10 boxes -> over-install Classic 5.52.2 installer = 9 boxes - no Edge box.
~ just me?
Edit: back to Classic 5.51.6 with 10 boxes.