Sandboxie Plus 1.0.7

This build fixed various issues with the previous build and adds some new functionality

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.7

ChangeLog
[1.0.7 / 5.55.7] - 2022-01-06
Added

• added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
• added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
• added new template "DeviceSecurity" to lock down access to device drivers on the system
  -- Note: This template requires RuleSpecificity being available to work properly
• added option to set a custom ini editor in the Plus UI #1475
• added option "LingerLeniency=n" to solve issue #997

Changed

• reworked syscall invocation code in the driver
  -- Win32k hooking is now compatible with HVCI #1483

Fixed

• fixed memory leak in driver (conf_user.c)
• fixed issue with file renaming in open paths introduced in 1.0.6
• fixed issue causing Chromium browsers not closing properly #1496
• fixed issue with start.exe #1517 #1516
• fixed SandMan issue with reused process IDs
• fixed KmdUtil sometimes not properly terminating the driver #1493

Removed

• removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together

 

Wow! Just synced up to v1.0.6 this morning and joined here to keep plugged into the conversation. And already an update!

Keep up the great work!

- Greg

 

The build has an issue processing support certificates, so i took it down for now I'll upload a fixed build tomorow

 

Everything is working good! I have 'Automatically delete contents of sandbox' selected and Sandboxie deletes everything in the sandbox when I close the last opened sandboxed app. Thanks again for all your work!

Windows 10 21H2 (64-bit)
Sandboxie Classic 5.55.7 (64-bit)

Sandboxed apps:
Firefox 95.0.2 (64-bit)
Thunderbird 91.4.1 (64-bit)
Microsoft Edge 96.0.1054.62 (Official build) (64-bit)

 

Wow! You're fast! Glad you found another bug to fix. Looking forward to the next fixed build.

 

ReHIPS should be the same as David.
I know it's off topic but a lil rant does no harm.

 

instalers re uplaoded with fix

 

I manually added

C:\Program Files\Utils\Notepad++\notepad++.exe​

to the [Options] section but editing the ini file still opens in Notepad. Path etc definitely correct.

What have I done wrong?

 

[Options]
Editor=C:\\Program Files (x86)\\Notepad++\\notepad++.exe

first you need to escapte the \ charakters like in my example
second SandMan.exe caches the entries so if you don't set a value using the UI
you need to restart the process for manual changes to take effect.

 

Um, do I need a clean install to find Editor=notepad.exe
My Sandboxie-Plus.ini [Options] does not have Editor=notepad.exe

 

no just exit sandman and restart it

 

Spoiler: [Options]

Code:

[Options]
UiLanguage=en
NextCheckForUpdates=1641862082
UseDarkTheme=2
RunInDefaultBox=false
ShowNotifications=true
OpenUrlsSandboxed=2
ShowRecovery=false
InstantRecovery=true
EnablePanicKey=true
PanicKeySequence=Ctrl+Cancel
WatchIni=true
SysTrayIcon=1
OnClose=ToTray
AutoRunSoftCompat=true
CheckForUpdates=2

 

Ah....
that's what you mean....
it will not have Editor=anythign untill you add it using an editor of some sorts, it does nto create entries with default values.

 

Okay. I misunderstood:

I looked in the Plus UI and I looked in Sandboxie-Plus.ini

 

you need to add it to the plus.ini

 

Okay, now I understand. Thanks!

 

So far I'm quite happy with this latest build. So thanks again and congratulations for the effort.

There is one minor issue though I'm observing with increased frequency - at least since v1.06, probably since v1.05 or even before that. Not exactly sure when it actually started but somewhere in the v1.0x-range.

The issue being that now in approx. 1/3 of cases of boot-up or re-boot the UAC will be triggered. When entering OK the boot-sequence will continue as normal. If I decline an error-message will pop up that the connection to the driver has somehow failed and there is no Sandboxie-service available.

Not a big thing as compared to the general progress that seemingly makes things run even more smoothly, especially after "blitz"-fixing the Chromium-browsers closing-issue with v1.07. Just wanted to mention it though and nominate the UAC-phenomenon for further analysis and a possible fix in a future release.

Again I have no clue so far what (timing issue?) difference in the boot-up-sequence might trigger the UAC - but in about 2/3 of cases Sandboxie-plus will start up completely normal wit no UAC-triggering at all.

 

Is there any way to get Windows' Mail app to be isolated in SBIE. I don't think there is, but I've been u sing classic up until recently, so I just thought I'd ask.

Its location is:
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe

 

That did it. I had added it to sandboxie.ini.

I am too used to editing sandboxie.ini; and also if I click on the icon in the Plus interface it opens sandboxie.ini and not sandboxie-plus.ini. Perhaps the icon could open both, if only as a reminder?

 

Please show me your
[Options]
Editor=
Thanks

 

I can confirm this. This happened to me when doing a clean install in the last few versions. After completing the install, when you reboot the computer, UAC is triggered and a message about the Sandboxie service pops up. Once you click ok, you don't see the message again. I forgot to mention it until all saw this post. It happens in both Sandboxie Plus and Classic.

 

Editor=C:\\Program Files\\Utils\\Notepad++\\notepad++.exe
in Sandboxie-Plus.ini

 

Salutations/Greetings,

Check-out Xanasoft | Exciting open source software

Some Benefits of Sandboxie,below:

* Protection of MBR.....
* Isolated operating environment.....
* Does not take many resources on its own......
* Secure E-mail: Viruses,
* Offers multiple sandboxies
* Protection of your browsers

I am sure that you can think of more benefits.......

 

@henryg1 Thanks!