Sandboxie-Plus 1.0.4

There is a bug in the plus UI it threads the option still as off by default, and saving global settings causes the n value to be saved

 

Hey there David! I am having an issue where MS Edge loading in Sandboxie Plus 1.0.4 and just now 1.0.5 (brand new) causes an instant BSOD.
It is a BugCheck 0x139 Kernel_Security_Check_Failure and it only happens with Edge and not Firefox. I have another PC that is nearly identical
on the software side and It does not have this issue. Blue Screen View shows shading on SbieDrv.sys+1b549 line along with ntoskrnl.exe and win32ksys. The problem just started a few days ago. I have uninstalled/reinstalled SB Plus and repair fix on Edge but neither stopped the BSODs. I'm on win 10 21H2 with core isolation enabled and just vanilla Edge settings. Sfc-scan clean and sys files look fine. Just wondered if you had any ideas.

 

does the issue does away when you add EnableWin32kHooks=n i.e. disable the new win32k hook in the advanced global settigns?
Also could you please provide a crash dump
last but not least could you please test if the issue goes away when you disable core isolation?

 

Running some tests in a VM I could confirm that the combination of EnableWin32kHooks=y (i.e. the default) and Core Isoaltion is the culprit.
Not sure of how that can be fixed, worst case I'll have to add a check for Core Isoaltion and disable the problematic functionality.

 

The EnableWin32kHooks setting did not seem to make a difference and rechecking core isolation now. Tks David

 

Did you set it to EnableWin32kHooks=n ? that may not have been clear form my previous post

 

I got TB to work sandboxed with SB+ using default settings in Windows Sandbox. I just can't get it to work on my "real" setup and I can't work out why.

I'll live with it and use Windows Sandbox or Shadow Defender.on the rare occasion I want to run TB sandboxed.

David, at least I won't be bugging you from time to time any more. Thank you for your continued work on SBie and best wishes for a Happy New Year.