Sandboxie+ Roadmap

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by DavidXanatos, Jun 6, 2022.

  1. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    402
    Location:
    uk
    I really like a treeview option as I struggle to find what I want sometimes (although I only look on the rare occasion), even though there is a search facility. And having all program control settings under one group makes sense to me.

    :thumb::thumb::thumb:
     
  2. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena

    You know a tree view is available already you can enable it here:
    upload_2022-9-11_17-20-57.png

    just make it fully checked and done
     
  3. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    I sort of understand you guys, but why not just simply ignore advanced features? Or do you guys think the GUI is becoming too cluttered? I have to admit that too many features isn't always a good idea. But I would never go back to Classic, the Plus GUI is way too good looking. :p
     
  4. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,336
    Location:
    Location Unknown
    Yeah. I think maybe I just like to have things a bit more settled. I most likely won't go back to classic but it's difficult to keep up with all the constant changes.
     
  5. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    596
    Location:
    Austria
    I think it is fine that way. ;) Thanks.
     
  6. henryg1

    henryg1 Registered Member

    Joined:
    Jun 14, 2020
    Posts:
    402
    Location:
    uk
    I thought it was selected as it was blue but I still did not see a treeview (see below). Selecting again and it gets "ticked".
    Untitled.jpg

    I find the blue box colouring with a "dash" difficult to see compared with a "tick" - any chance of the box only being blue when fully selected? I now see the * note, but your screenshot is much clearer.

    I bet it's ##### Windows 11 grrrr
     
  7. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    it is windows 11 windows, you can fully check the "Use Fusion Theme" to get a better though non native bright theme
     
  8. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    Here is a future change log.

    Features up to and including 1.6.0 are available for patrons on tiers 10$ and above in an insider build, functionality up to 1.10.x will be released to insiders soon


    [1.10.0 / 5.10.0] - 2022-??-??
    Added
    • added 'AllowForceSystem=y' to allow forcing system processes, warning misusing this can break windows!
    • added OnFileRecovery trigger allowing to check files before recovering them #2202

    [1.9.0 / 5.64.0] - 2022-??-??
    Added
    • added ability to fore sandboxed processes to use a pre defined socks 5 proxy
    • added ability to intercept DNS queries such that thay can be log and/or redirected
    [1.8.0 / 5.63.0] - 2022-??-??
    Added
    • added new user proxy mechanism to enable user cspecific operations
    • added Support for EFS using the user proxy #1980 -- to enable add 'EnableEFS=y' to the sandbox config todo: add ui for efs

    [1.7.0 / 5.62.0] - 2022-??-??
    Added
    • added option to prevent processes located outside teh sandbox from loading boxed dll's -- to enable it use "ProtectHostImages=y"
    • add option to block box inter programs but not box extern once todo: add ui
    [1.6.0 / 5.61.0] - 2022-??-??
    Added
    • added ability to import/export boxes into 7z files
    • added nt object view to trace log

    todo: add remember my choice to the sandbox picker todo: add supprot for silent mode / no notification when gaming


    Changed
    • restructured the box context menu a bit
    [1.5.0 / 5.60.0] - 2022-??-??
    Added
    • Added support for Windows on ARM64 #1321 #645 -- Ported SbieDrv for ARM64 -- Ported low level injection mechanism for ARM64/ARM64EC -- Ported syscall hooks for ARM64/ARM64EC -- Ported sbiedll.dll to ARM64/ARM64EC -- Note: ARM32 on ARM64 is not implemented and will terminate with Message SBIE2338 -- Note: When sandboxie is running it disables the use of CHPE Binaries for x86 processes globally, this is required for the forced processes functionality, this behavioure can be disabled by adding the global option "DisableCHPE=n" to the sandboxie.ini, then x86 processes started outside the sandbox instead of being forced will be terminated with Message SBIE2338
    fixed
    • fixed issue with win32 hooks in x86 applications
    Changed
    • reworked API compatibility check

    [1.4.1 / 5.59.1] - 2022-09-??
    Changed
    • In sbie 5.28 and later WinInetCache is open, this breks IE's source view, hence it can now be disabled with 'CloseWinInetCache=y'

    [1.4.0 / 5.59.0] - 2022-09-??
    Added
    • added integrated run from start menu #1836
    • addes start menu enumeration #1570
    • added UI for breakout processes #1904
    • added option to customize box double click action
    • added new advnaced tab in the advanced tab alowing to configure proces specific and otehr advanced options
    • added "SeparateUserFolders=y" and "SandboxieLogon=y" to the box option dialog
    • added icons to option section labels
    Changed
    • preapred for Qt 6.2
    • resructured the general settings page
    • resructured the sandbox options page, added a new tab and moved some of the advanced options there


    1.4.0 will be released today as a unsigned pre release, followed up by a signed 1.4.1 if no issues arise.
     
  9. Freki123

    Freki123 Registered Member

    Joined:
    Jan 20, 2015
    Posts:
    336
    Any plans on the ImDisk integration or was it completely dropped?
    Thanks for the list :)
     
  10. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    its still on the todo:

    just not yet done
     
  11. soccerfan

    soccerfan Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    560
    Is there a sandboxie option called "AlertFolder=...." (not AlertProcess=...)?
    If so, please tell us about this option and how to use it.
     
  12. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    there is

    ## [0.5.0 / 5.45.0] - 2020-12-06

    ### Added
    - added ability to prevent system wide process starts, Sandboxie can now instead of just alerting also block processed on the alert list
    -- set "StartRunAlertDenied=y" to enable process blocking
    - the process start alert/block mechanism can now also handle folders use "AlertFolder=..."

    upload_2022-9-30_13-58-45.png
     
  13. busy

    busy Registered Member

    Joined:
    Apr 10, 2006
    Posts:
    413
    @DavidXanatos
    Does "Alert" feature only work when "StartRunAlertDenied" is enabled? Because it does not give any warning when it is not enabled.
     
  14. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    When StartRunAlertDenied=y is specified the feature is switched form warn on start to deny start outright, as you see in my screnshot, you can use it to prevent telemetry crap from startingon your host system at all.
     
  15. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
    @DavidXanatos

    It's kinda anoyying to me this file to show up every time a container and sandboxes folders are created: DONT-USE.txt

    Could you add a line for experienced users can write in [GlobalSettings] to stop sbie creating it?

    TIA
     
  16. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    mmh... that file actually got a use case in a recent build, since build 1.2.7 "uninstaller can now remove the sandbox folders" and it does this by starting out in the actual box directory and going up from there as far as there are folders with a DONT-USE.txt in it, then the highest folderfor each sandbox that still contains DONT-USE.txt is designeted for deletion.
    I could change this to read the also auto created desktop.ini and check if its a sandbox one.
    But is that worth the afford is it so important to get rid of that other file?
     
  17. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
    This. Do it this way please.
    It's a visual issue for me, I'd like to see at first glance just the needed files and folders without anything distracting me. You know when we get old and eyestrain.
    If it takes too much effort then leave it as is.
     
  18. APMichael

    APMichael Registered Member

    Joined:
    Jun 17, 2020
    Posts:
    121
    Location:
    Germany
    I can confirm that "AlertProcess" is no longer working properly. When using "StartRunAlertDenied=y" everything is blocked correctly, but without "StartRunAlertDenied=y" nothing happens, so no alert message!

    Is it possible that this change is responsible?
    Does this accidentally disable all 1301 messages? So also those issued by "AlertProcess"?

    [Checked with Sandboxie-Plus v1.3.5]
     
  19. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    I could confirm the issue and it will be fixed in 1.4.1
     
  20. APMichael

    APMichael Registered Member

    Joined:
    Jun 17, 2020
    Posts:
    121
    Location:
    Germany
  21. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    The (probably) over next build 1.6.x will have a new optional live updater.

    upload_2022-11-6_21-40-27.png


    The nomenclature is as follows:

    Update types:
    "Version Revision" means a minor update to a particular version its intended to contain metadata (Templates.ini and translations) but if required can provide also a binary update of core components, these will be installed using a new live update utility (updutil.exe).
    "Full Update" refers to a new version which will be installed using a installer from github, executed in silent mode when "Download & Install" is selected.

    Keeping a most recent Templates.ini not only allows to provide new/updated compatibility templates daily but also allow to use the [DefaultTemplates] section to if required disable a recent change which was found after the release to break something, so I don't expect binary updates to be required.

    Available auto update options:
    "Notify"
    "Download & Notify"
    "Download & Install"

    Release channels:
    "Stable" - stable/final version as usually linked in the download section of the homepage.
    "Preview" - preview build, github pre-release
    "Live" - latest unsigned (except driver) builds with the latest experimental changes and fixes.

    The live channel will use the new live update utility and there will be no full installers for those builds, multiple builds may fly under the same version number and be only differentiated by build date.


    Should we add a 4th channel "Nightly" which could contain also unsigned drivers? This would require users to run their windows in "Test Signing Mode", would anyone her do that?
    We could also use the "Live" channel for that using a mechanism to check if the OS is runnign in "Test Signing Mode", and skip updates when they contain a unsigned driver.



    Further more the installers will offer to check for a newer revisions of the Templates.ini and translations and apply it after the installation, during installation only metadata can be updated, no binary components.

    upload_2022-11-6_21-46-57.png
     
  22. soccerfan

    soccerfan Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    560
    I would also like to have the "translations" folder (as a zip) and
    the latest "Templates.ini" available for direct download from
    the github page that shows the latest sandboxie release(s).
     
  23. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    "translations" folder will, starting with 1.6.0, be a 7z file (no need to unpack) as for the box import export feature we will distribute the 7z.dll anyways
     
  24. soccerfan

    soccerfan Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    560
    Nice! Thank you.
     
  25. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
    upload_2023-3-13_12-30-8.png


    Pen Drive sandboxing for one of the upcomming builds probably 1.11.x or around then
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.