Sandboxie Plus 1.0.6

With build 1.0.5 we should have arrived at the first properly final build of the 1.0.x line of builds
This built fixes many minor issues and adds a new nice crash dump facility, also it does not contain any changes that could have the potential to break something again.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.5.1
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.6

ChangeLog 1.0.6

Added

• replaced "Open with" with a Sandboxie dialog to work on Windows 10 #1138
• added ability to run Store apps in App Compartment mode (on Windows 11 requires COM to be open)
• -- Note: this does not mean UWP store apps, just regular win32 apps packaged to be deployed via the store
  
• added new debug options "UnstrippedToken=y" and "KeepUserGroup=y"
• added double click to recover files and folders in recovery window #1466
• added Ukrainian language on Plus UI (by SuperMaxusa) #1488

Changed

• "UseSbieWndStation=y" is now the default behaviour #1442
• disabled Win32k hooking when HVCI is enabled due to an incompatibility (BSOD) #1483

Fixed

• fixed box initialization issue in Privacy mode #1469
• fixed issue with shortcuts creation introduced in a recent build #1471
• fixed various issues in Privacy Enhanced boxes and rule specificity
• fixed issue with SeAccessCheckByType and alike
• fixed issues with Win32k hooking on 32 bit Windows #1479

Removed

• removed obsolete SkyNet rootkit detection from 32 bit build

ChangeLog 1.0.5

Added

• sandbox top level exception handler to create crash dumps
  -- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
  -- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
  -- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
  -- Note: created dump files are located at: C:\Sandbox\%SANDBOX%
• added template support for Osiris and Slimjet browsers (by Dyras) #1454

Changed

• improved SbieDll initialization a bit
• doubled size of Name_Buffer_Depth #1342
• improved text filter in the templates view #1456

Fixed

• fixed issue with forced process display #1447
• fixed crash issue with GetClassName #1448
• fixed minor UI issue #1382
• fixed UI language preset issue #1348
• fixed grouping issues in SandMan UI #1358
• fixed issue with EnableWin32kHooks #1458

 

there seams to be a issue with office, a fixed build will be re uploaded soon ...

 

fixed build uploaded

 

Salutations/Greetings,

Truly appreicate you keeping Sandboxie updated & on going, ect........
Make it a great one, that is today. And tomorrow an even better one.

Many thank's and kind regards,

 

over-install 1.0.4 with 1.0.5 (1.0.5.1)
Curious, with 1.0.5 (1.0.5.1)
EnableWin32kHooks=n
EnableWin32kHooks=y
-------------------------
as test: Run Sandboxed > Edge (desktop shortcut) into DefaultBox (default settings) with Privacy Mode enabled.

Spoiler: as test: Privacy Mode

 

Smooth installation of Plus 1.0.5 and all continues to work fine with it.

Many thanks, David.

 

Clean install. Everything works good! Thanks for all your hard work!

Windows 10 21H2 (64bit)
Sandboxie Classic 5.55.5 (64bit)

Sandboxed apps:
Microsoft Edge 96.0.1054.62 (Official build) (64-bit)
Firefox 95.0.2 (64bit)
Thunderbird 91.4.1 (64bit)

 

The issue was that the core pats assumed an other default as the UI,

As said someware else on being the new default still means for old users that thay have to change the preset as pressin ok in the main settings may have writen EnableWin32kHooks=n in which case there is a preset and the default is irrelevant.

 

Okay...as test: new install & new ini = EnableWin32kHooks=y

 

I've enable it manualy now (via checkbox). Will be interesting to see if I notice anything different.

BTW what is "active kernel mode object filtering" and should it be enabled?

 

It should say Enable kernel mode object filtering,
kernel mode object filtering is an other method of filtering access to objects like process handles and etc,
for normal boxes its not really needed although it would have prevented some security issues in the past (now those issues are properly fixed),
for App Comaprtment boxes this is part of the security mechanism and should be enabled when such boxes are used.

 

Curious: what changed regarding Default RPC Port Binding?
Edge SmartScreen used to need Default RPC Port Binding enabled.
Edge SmartScreen does not need Default RPC Port Binding enabled, at this time.
as test: with a new Plus 1.0.5 install w new Sandboxie.ini > Compatibility did not list Default RPC Port Binding.
as test: with a new Plus 1.0.5 install w new Sandboxie.ini > [GlobalSettings] did not list Template=RpcPortBindings

 

With build 0.9.8 / 5.53.0 i introduced
"- added a new section [DefaultTemplates] in Templates.ini which contains mandatory templates that are always applied"
this DefaultTemplates section contains required templates one of them is the RpcPortBindings and a couple others.

As part of my rework of sandboxie's core I want to drop as much hard coded workarounds as possible, having a mandatory template was here the way to go.

 

Ahh....light bulb. Thanks!
[DefaultTemplates]
Template=RpcPortBindings
Template=SpecialImages
Template=COM
Template=WindowsExplorer
Template=ThirdPartyIsolation

 

Will "DefaultTemplates" be applied even when "SbieCtrl_AutoRunSoftCompat=n"
is present in the sandboxie.ini settings?

 

yes, that setting is only relevant for the sbiectrl.exe ui and not relevant for the core components

 

Had a strange thing happen when I turned the computer on today. I started Firefox but it didn't start in Sandboxie. I have the setting 'Force Mozilla Firefox to run in this sandbox' checked but it didn't work. It only happened once but I don't know why. I closed Firefox when I saw it wasn't sanboxed then restarted Firefox and it was sandboxed again. I turned off the computer and turned on the computer to see if it would happen again but I can't seem to reproduce it. Never happened before so I'm not sure why Firefox started outside of Sandboxie. If it happens again, I'll let you know.

Windows 10 21H2 (64bit)
Sanboxie Classic 5.55.5 (64bit)

Firefox 95.0.2 (64bit)

 

I would assume that the SbieSvc was not done starting and until it isn't started the force process feature does not work

 

Ok. That makes sense. I probably was a little fast starting Firefox after turning on the computer.

 

Hi DavidXanatos,

My firefox troubles are still on going.
I am using Sandboxie 1.0.5 and Firefox 95.0.2

I have :
forced programs : "C:\Program Files\Mozilla Firefox\firefox.exe"
stop behavior leader : "C:\Program Files\Mozilla Firefox\firefox.exe"
No start restrictions
No internet restrictions
App template: Web browser. Force Mozilla Firefox to run in this sandbox
App template: Security/Privacy. Yubikey Authentication
App template: Security/Privacy. Hitmanpro Alert

And when I start Firefox, the error is : SBIE1308 Program cannot start due to restrictions
-------------------------------------
Then I put:
Start restrictions : firefox.exe

And I get : WerFault (11876) SBIE 1308 Program cannot start due to restrictions.
And I see Firefox and WerFault appear briefly in Sandman.
-------------------------------------
Then I put:
Start restrictions : firefox.exe, WerFault.exe

And I get : Werfault.exe SBIE 2101. Object name not found: unnamed object, error openProcess (C0000022) access=001
And I see Firefox and WerFault appear in Sandman, but after a bit, they disappear

Hope this give you enough info to debug.

 

New build is ready, it fixes many issues and adds some new functionality.


Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.6

ChangeLog
Added

• replaced "Open with" with a Sandboxie dialog to work on Windows 10 #1138
• added ability to run Store apps in App Compartment mode (on Windows 11 requires COM to be open)
• -- Note: this does not mean UWP store apps, just regular win32 apps packaged to be deployed via the store
  
• added new debug options "UnstrippedToken=y" and "KeepUserGroup=y"
• added double click to recover files and folders in recovery window #1466
• added Ukrainian language on Plus UI (by SuperMaxusa) #1488

Changed

• "UseSbieWndStation=y" is now the default behaviour #1442
• disabled Win32k hooking when HVCI is enabled due to an incompatibility (BSOD) #1483

Fixed

• fixed box initialization issue in Privacy mode #1469
• fixed issue with shortcuts creation introduced in a recent build #1471
• fixed various issues in Privacy Enhanced boxes and rule specificity
• fixed issue with SeAccessCheckByType and alike
• fixed issues with Win32k hooking on 32 bit Windows #1479

Removed

• removed obsolete SkyNet rootkit detection from 32 bit build

 

Nice job!

 

@DavidXanatos

Maybe open a new topic like: Sandboxie Plus 1.0.6?

 

mehh... we did not even used 1 page, so lets just rename this thread to 1.0.6 LOL