New Update Sandboxie-Plus v1.12.3

[DavidXanatos]

Release Notes

This build brings a lot of usability improvements most notably the ability to auto force all removable media (Requires a supporter certificate).

In the settings exceptions can be specified, based on the volume serial number to exclude selected devices form forced sandboxing.

This build also enhances on the global hot keys, two new hot keys have been added "Alt + Break" to bring the sandman window in front with the top most flag set, and "Ctrl + Alt + F" to toggle disabling of forced processes, furthermore the terminate all (panic hotkey) hot key "Shift + Break" has been improved, individual sandboxes can be configured to be excluded from a blanket global terminate all command, however when the panic hotkey is invoked 3 times with < 1 sec between presses it will terminate all boxed processes, no exceptions.

Further work is ongoing to make the GOG work in a standard sandbox.

Download: Release Release v1.12.3 / 5.67.3 · sandboxie-plus/Sandboxie

[1.12.3 / 5.67.3] - 2023-12-02
Added

• added template to add useful exclusions to confidential boxes

Fixed

• FIXED SECURITY ISSUE ID-23 SeManageVolumePrivilege is now blocked, as it allowed to read MFT data (thanks Diversenok)
• fixed program launch when forcing processes into a confidential box #3173

[1.12.2 / 5.67.2] - 2023-11-28
Added

• added options dialog when exporting a box #3409

Changed

• moved process info retrieval to SbieSvc, resolves some information not being available in compartment type boxes when SandMan does not run as admin
• moved Process Suspend/Resume to SbieSvc #3156

Fixed

• fixed issue with Microsoft Edge when using AutoDelete option #post-3173507
• fixed warning issue Acrobat.exe: SBIE2205 Service not implemented: CredEnumerateA #issuecomment-1826280016
• fixed UNEXPECTED_KERNEL_MODE_TRAP BSOD when opening any web link from sandboxed Microsoft 365 app (e.g. Outlook, Word) #3427
• fixed issue with force process warning message
• fixed online updater does not respect portable mode #3406
• fixed Snapshot feature does not work on encrypted boxes #3439

[1.12.1 / 5.67.1] - 2023-11-23
Changed

• improved open URL dialog #3401
• improved suspended process detection

Fixed

• fixed issue with key to bring SandMan in front as top most
• fixed issue with ThreadSuspendCount failing for already terminated threads 25054d0 #3375
• fixed message text #3408
• fixed warning issue with Firefox 120.0: SBIE2205 Service not implemented: CredWriteA #3441
• fixed outdated Chromium paths #3436

[1.12.0 / 5.67.0] - 2023-10-25
Added

• added mechanism to automatically set USB drives as forced folders (Requires a supporter certificate)
• added troubleshooting script for issue #3318 with parental controls
• started German translation of the troubleshooting scripts ...\SandboxiePlus\SandMan\Troubleshooting\lang_de.json #3293
• added "get_cert SBIEX-XXXXX-XXXXX-XXXXX-XXXXX" command to UpdUtil.exe allowing to get a certificate by serial number using command line
• added mechanism to revoke leaked or refunded certificates
• added new global hotkey to bring SandMan in front as top most ALT+Break #3320
• added option to exclude specific boxes from 'Terminate all processes' #3108
  • Note: press the panic button hotkey 3 times with less than 1 second between clicks to Terminate All with NO exceptions
• added customizable global hotkey that toggles the state of "pause forced programs" #2441
• added warning to prevent broad "forced folder" settings #650
• added CheckExpectFile function to Sandboxie Plus #768

Changed

• improved suspend process handling #3375
• improved handling of issue reports
• updated reminder schedule

Fixed

• fixed issue with auto updater not offering version updates
• fixed issue with new symlink handling code #3340
• fixed issue with Scm_StartServiceCtrlDispatcherX not behaving correctly when not run as service #1246 #3297
• fixed issue with configuring the original folder of a symbolic link created using mklink to OpenPipePath #3207

Removed

• removed obsolete /nosbiectrl switch #3391

 

[Bot]

Thank you for sharing the release notes for Sandboxie-Plus v1.12.3. Here is a breakdown of the changes and improvements in this version:

Added:
- The ability to auto force all removable media, which requires a supporter certificate. Exceptions can be specified in the settings based on the volume serial number to exclude selected devices from forced sandboxing.
- Two new global hotkeys: "Alt + Break" to bring the Sandman window in front with the topmost flag set, and "Ctrl + Alt + F" to toggle disabling of forced processes. The terminate all (panic hotkey) "Shift + Break" has also been improved, allowing individual sandboxes to be excluded from a blanket global terminate all command. However, when the panic hotkey is invoked three times with less than one second between presses, it will terminate all boxed processes without exceptions.
- Ongoing work to make GOG work in a standard sandbox.

Fixed:
- Security issue ID-23: SeManageVolumePrivilege is now blocked as it allowed reading MFT data.
- Program launch issue when forcing processes into a confidential box.
- Issue with Microsoft Edge when using the AutoDelete option.
- Warning issue with Acrobat.exe: SBIE2205 Service not implemented: CredEnumerateA.
- UNEXPECTED_KERNEL_MODE_TRAP BSOD when opening any web link from sandboxed Microsoft 365 app (e.g., Outlook, Word).
- Issue with force process warning message.
- Online updater not respecting portable mode.
- Snapshot feature not working on encrypted boxes.

In the previous version (1.12.2 / 5.67.2), an options dialog was added when exporting a box. Process info retrieval and process suspend/resume were moved to SbieSvc, resolving some information not being available in compartment type boxes when SandMan does not run as admin.

In version 1.12.1 / 5.67.1, improvements were made to the open URL dialog and suspended process detection. Various fixes were also implemented, including issues with bringing SandMan in front as topmost, thread suspend count failing for already terminated threads, message text, warning issue with Firefox 120.0, and outdated Chromium paths.

In the initial release of version 1.12.0 / 5.67.0, several additions were made, such as the ability to automatically set USB drives as forced folders (requires a supporter certificate), a troubleshooting script for a specific issue with parental controls, German translation of the troubleshooting scripts, a command to get a certificate by serial number using the command line, a new global hotkey to bring SandMan in front as topmost, the option to exclude specific boxes from 'Terminate all processes', a customizable global hotkey to toggle the state of "pause forced programs", and a warning to prevent broad "forced folder" settings. Additionally, suspend process handling was improved, and the handling of issue reports and reminder schedules was enhanced. Several fixes were also implemented, including issues with the auto updater, new symlink handling code, Scm_StartServiceCtrlDispatcherX not behaving correctly when not run as a service, and configuring the original folder of a symbolic link created using mklink to OpenPipePath. The obsolete /nosbiectrl switch was removed.

You can download Sandboxie-Plus v1.12.3 from the following link: [Release v1.12.3 / 5.67.3](https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.12.3)

 

[Rainwalker]

Not sure if Dev will see this, but sure would be nice if he would add Floorp Browser to his browser template list.

 

[pxxb1]

Not sure if Dev will see this, but sure would be nice if he would add Floorp Browser to his browser template list.

You can create it yourself, the possibility to let the program do it for you is there.

 

[Rainwalker]

You can create it yourself, the possibility to let the program do it for you is there.

Thank you for responding. How would I/program do this?

 

[pxxb1]

Thank you for responding. How would I/program do this?

I was afraid you would ask. Give me a couple of minutes to download and install so i can give you a guide.
Back in a jiffy.

 

[pxxb1]

Thank you for responding. How would I/program do this?

Oh, we are talking plus version, right?

 

[pxxb1]

Thank you for responding. How would I/program do this?

Sandman > defaultbox > sandbox alternatives > app templates > add template, press the down arrow. The rest you understand.

 

[Rainwalker]

I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.

 

[pxxb1]

I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.

It doesn`t? For me it worked a long time ago but, i may remember wrongly.

Get a certificate by translating?!

 

[pxxb1]

I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.

I just tried Floorp, i could do everything necessary with the bookmarks. So what do you mean you can not?