New Update Sandboxie-Plus v1.12.3

DavidXanatos

From Sandboxie Plus
Thread author
Verified
Developer
May 4, 2020
22
Release Notes

This build brings a lot of usability improvements most notably the ability to auto force all removable media (Requires a supporter certificate).

1701592940260.png


In the settings exceptions can be specified, based on the volume serial number to exclude selected devices form forced sandboxing.

This build also enhances on the global hot keys, two new hot keys have been added "Alt + Break" to bring the sandman window in front with the top most flag set, and "Ctrl + Alt + F" to toggle disabling of forced processes, furthermore the terminate all (panic hotkey) hot key "Shift + Break" has been improved, individual sandboxes can be configured to be excluded from a blanket global terminate all command, however when the panic hotkey is invoked 3 times with < 1 sec between presses it will terminate all boxed processes, no exceptions.

Further work is ongoing to make the GOG work in a standard sandbox.

Download: Release Release v1.12.3 / 5.67.3 · sandboxie-plus/Sandboxie

[1.12.3 / 5.67.3] - 2023-12-02
Added


  • added template to add useful exclusions to confidential boxes
Fixed

  • FIXED SECURITY ISSUE ID-23 SeManageVolumePrivilege is now blocked, as it allowed to read MFT data (thanks Diversenok)
  • fixed program launch when forcing processes into a confidential box #3173
[1.12.2 / 5.67.2] - 2023-11-28
Added


  • added options dialog when exporting a box #3409
Changed

  • moved process info retrieval to SbieSvc, resolves some information not being available in compartment type boxes when SandMan does not run as admin
  • moved Process Suspend/Resume to SbieSvc #3156
Fixed

  • fixed issue with Microsoft Edge when using AutoDelete option #post-3173507
  • fixed warning issue Acrobat.exe: SBIE2205 Service not implemented: CredEnumerateA #issuecomment-1826280016
  • fixed UNEXPECTED_KERNEL_MODE_TRAP BSOD when opening any web link from sandboxed Microsoft 365 app (e.g. Outlook, Word) #3427
  • fixed issue with force process warning message
  • fixed online updater does not respect portable mode #3406
  • fixed Snapshot feature does not work on encrypted boxes #3439
[1.12.1 / 5.67.1] - 2023-11-23
Changed


  • improved open URL dialog #3401
  • improved suspended process detection
Fixed

  • fixed issue with key to bring SandMan in front as top most
  • fixed issue with ThreadSuspendCount failing for already terminated threads 25054d0 #3375
  • fixed message text #3408
  • fixed warning issue with Firefox 120.0: SBIE2205 Service not implemented: CredWriteA #3441
  • fixed outdated Chromium paths #3436
[1.12.0 / 5.67.0] - 2023-10-25
Added


  • added mechanism to automatically set USB drives as forced folders (Requires a supporter certificate)
  • added troubleshooting script for issue #3318 with parental controls
  • started German translation of the troubleshooting scripts ...\SandboxiePlus\SandMan\Troubleshooting\lang_de.json #3293
  • added "get_cert SBIEX-XXXXX-XXXXX-XXXXX-XXXXX" command to UpdUtil.exe allowing to get a certificate by serial number using command line
  • added mechanism to revoke leaked or refunded certificates
  • added new global hotkey to bring SandMan in front as top most ALT+Break #3320
  • added option to exclude specific boxes from 'Terminate all processes' #3108
    • Note: press the panic button hotkey 3 times with less than 1 second between clicks to Terminate All with NO exceptions
  • added customizable global hotkey that toggles the state of "pause forced programs" #2441
  • added warning to prevent broad "forced folder" settings #650
  • added CheckExpectFile function to Sandboxie Plus #768
Changed

  • improved suspend process handling #3375
  • improved handling of issue reports
  • updated reminder schedule
Fixed

  • fixed issue with auto updater not offering version updates
  • fixed issue with new symlink handling code #3340
  • fixed issue with Scm_StartServiceCtrlDispatcherX not behaving correctly when not run as service #1246 #3297
  • fixed issue with configuring the original folder of a symbolic link created using mklink to OpenPipePath #3207
Removed

  • removed obsolete /nosbiectrl switch #3391
 
Last edited by a moderator:

Bot

AI-powered Bot
Verified
Apr 21, 2016
3,125
Thank you for sharing the release notes for Sandboxie-Plus v1.12.3. Here is a breakdown of the changes and improvements in this version:

Added:
- The ability to auto force all removable media, which requires a supporter certificate. Exceptions can be specified in the settings based on the volume serial number to exclude selected devices from forced sandboxing.
- Two new global hotkeys: "Alt + Break" to bring the Sandman window in front with the topmost flag set, and "Ctrl + Alt + F" to toggle disabling of forced processes. The terminate all (panic hotkey) "Shift + Break" has also been improved, allowing individual sandboxes to be excluded from a blanket global terminate all command. However, when the panic hotkey is invoked three times with less than one second between presses, it will terminate all boxed processes without exceptions.
- Ongoing work to make GOG work in a standard sandbox.

Fixed:
- Security issue ID-23: SeManageVolumePrivilege is now blocked as it allowed reading MFT data.
- Program launch issue when forcing processes into a confidential box.
- Issue with Microsoft Edge when using the AutoDelete option.
- Warning issue with Acrobat.exe: SBIE2205 Service not implemented: CredEnumerateA.
- UNEXPECTED_KERNEL_MODE_TRAP BSOD when opening any web link from sandboxed Microsoft 365 app (e.g., Outlook, Word).
- Issue with force process warning message.
- Online updater not respecting portable mode.
- Snapshot feature not working on encrypted boxes.

In the previous version (1.12.2 / 5.67.2), an options dialog was added when exporting a box. Process info retrieval and process suspend/resume were moved to SbieSvc, resolving some information not being available in compartment type boxes when SandMan does not run as admin.

In version 1.12.1 / 5.67.1, improvements were made to the open URL dialog and suspended process detection. Various fixes were also implemented, including issues with bringing SandMan in front as topmost, thread suspend count failing for already terminated threads, message text, warning issue with Firefox 120.0, and outdated Chromium paths.

In the initial release of version 1.12.0 / 5.67.0, several additions were made, such as the ability to automatically set USB drives as forced folders (requires a supporter certificate), a troubleshooting script for a specific issue with parental controls, German translation of the troubleshooting scripts, a command to get a certificate by serial number using the command line, a new global hotkey to bring SandMan in front as topmost, the option to exclude specific boxes from 'Terminate all processes', a customizable global hotkey to toggle the state of "pause forced programs", and a warning to prevent broad "forced folder" settings. Additionally, suspend process handling was improved, and the handling of issue reports and reminder schedules was enhanced. Several fixes were also implemented, including issues with the auto updater, new symlink handling code, Scm_StartServiceCtrlDispatcherX not behaving correctly when not run as a service, and configuring the original folder of a symbolic link created using mklink to OpenPipePath. The obsolete /nosbiectrl switch was removed.

You can download Sandboxie-Plus v1.12.3 from the following link: [Release v1.12.3 / 5.67.3](https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.12.3)
 
  • Like
Reactions: [correlate]

Rainwalker

Level 1
Sep 7, 2017
22
I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.
 
  • Like
Reactions: [correlate]

pxxb1

Level 9
Verified
Well-known
Jan 17, 2018
431
I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.

It doesn`t? For me it worked a long time ago but, i may remember wrongly.

Get a certificate by translating?!
 
  • Like
Reactions: [correlate]

pxxb1

Level 9
Verified
Well-known
Jan 17, 2018
431
I set that up awhile back and it does result in Floorp being sandboxed. It is not enough though, as it will not allow direct access to bookmarks. I have no certificate.

I just tried Floorp, i could do everything necessary with the bookmarks. So what do you mean you can not?
 
  • Like
Reactions: [correlate]

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top