New Update Sandboxie-Plus 1.14.0, 1.14.1 (Preview Build)

[bjm_]

In this release, several significant updates and fixes have been introduced to enhance the functionality and performance of sandboxed processes.

A new option has been added to limit the memory of sandboxed processes and the number of processes in a single sandbox through job objects, thanks to the contribution of Yeyixiao. This can be configured using "TotalMemoryLimit" to limit the whole sandbox and "ProcessMemoryLimit" to limit individual processes.

A command line option, /fcp /force_children, has been added to start.exe, enabling the initiation of a program unsandboxed while having all its children processes sandboxed. Additionally, the ability to force sandboxed processes to use a predefined SOCKS5 proxy has been introduced. There is now also the capability to intercept DNS queries for logging and/or redirection. Support for SOCKS5 proxy authentication based on RFC1928 has been added, thanks to Deezzir, who also contributed a Test Dialog UI for the SOCKS5 proxy.

Please note that the Proxy and DNS features require an advances type certificate.

Compatibility with Windows build 26217 has been validated, and dynamic data has been updated accordingly. Lastly, an issue with an early batch of Large Supporter certificates has been resolved, ensuring smoother operation and fewer disruptions.

Release note by ChatGPT - Please let me know if you like the AI generated release notes

Download: Release v1.14.0 / 5.69.0 · sandboxie-plus/Sandboxie

Added

• Add option to limit the memory of sandboxed process and the number of process in single sandbox through job object. (thanks Yeyixiao)
  • Use "TotalMemoryLimit"(Number,limit whole sandbox) and "ProcessMemoryLimit"(Number,limit single process) to set.
• Add ability to modified sandboxed process logic speed (reduced fixed latency, modified single-player speed, etc.) (thanks Yeyixiao)
  • Use "UseChangeSpeed=y" to open this feature,use "AddTickSpeed"/"AddSleepSpeed"/"AddTimerSpeed"/"LowTickSpeed"/"LowSleepSpeed"/"LowTimerSpeed"(Number) to set.
  • When set "AddSleepSpeed=0",all Sleep funcation call will be skip.
• Added /fcp /force_children commandline option to start.exe it allows to start a program unsandboxed but have all its children sandboxed
• added ability to fore sandboxed processes to use a pre defined socks 5 proxy
• added ability to intercept DNS queries such that thay can be log and/or redirected
• added support for SOCKS5 proxy authentication based on RFC1928 (thanks Deezzir)
• added Test Dialog UI for SOCKS5 proxy (thanks Deezzir)
• added ability to automatically removes template references that begin with “Template_Temp_” in the sandbox.

Changed

• validated compatybility with windows build 26217 and updated dyn data

Fixed

• fixed an issue with an early batch of Large Supporter certificates

https://www.wilderssecurity.com/threads/sandboxie-plus-1-14-0-preview-build.454161/

 

[Bot]

Thanks for sharing the updates in Sandboxie-Plus 1.14.0 Preview Build. The new features and fixes seem to significantly enhance the functionality and performance of sandboxed processes. The ability to limit memory and number of processes in a single sandbox, and the introduction of /fcp /force_children command line option are particularly interesting. Also, the compatibility with Windows build 26217 and the fix for the Large Supporter certificates issue are much appreciated. Looking forward to testing these new features.

 

[bjm_]

Sandboxie-Plus 1.14.1 (Preview Build)

In this release, we have introduced several key features and improvements. A new "Sandboxie\All Sandboxes" SID has been added to the token creation process, fundamentally altering the mechanism for token creation, which can be activated with "UseCreateToken=y". Additionally, users can now configure the "EditAdminOnly=y" setting on a per-box basis, and a new UI for CoverWindows is available in the NewBoxWizard. We have also added a UI option to start unsandboxed processes while forcing child processes into a sandbox. An important new feature is the "AlertBeforeStart" option, which prompts a warning before launching a new program into the sandbox if the initiating program is not a Sandboxie component. Various fixes have been made, including resolving issues with proxy authentication, memory leaks, and driver verifier problems.

Download: Release v1.14.1 / 5.69.1 · sandboxie-plus/Sandboxie
Added

• Add "Sandboxie\All Sandboxes" SID into token with SandboxieLogon #3191
  • To use this feature SandboxieAllGroup=y must be enabled
  • Note: that this fundamentaly changes the mechanism Sbie uses for token creation, the new mechanism can be enabled separately with "UseCreateToken=y"
• Added "EditAdminOnly=y" can now be configured per box
• Add UI for CoverWindows in NewBoxWizard.
• Add UI option to start unsandboxed process but force child processes in SelectBoxWindow.
• Add option "AlertBeforeStart".When it is set,a prompt pops up before launching a new program into the sandbox using "Start.exe" and checks if the program that started "Start.exe" is a Sandboxie component itself,if it is not, a warning pops up.
• Add option for EditAdminOnly in SetupWizard.

Changed

• split the advanced new box wizard page in two
• reorganized box options a bit

Fixed

• fixed issue with proxy authentication setting
• fixed memory leak in sbiesvc
• fixed issue with inconsistent WFP option application #3900
• fixed resource leak in buffer hashing function
• fixed DLL name corruption when BlockInterferenceControl is enabled #3945
• fixed issue with driver verifier

https://www.wilderssecurity.com/threads/sandboxie-plus-1-14-1-preview-build.454312/