Release v0.8.8 / 5.50.8

[DavidXanatos]

This build reworks some internal mechanisms and fixes a lot of bugs as well as some new features.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

Changelog

[0.8.8 / 5.50.8] - 2021-07-12

Changed

• MSIServer no longer requirers being run as system completing the move to not using system tockens in a sandbox by default
  -- the security enhanced option "MsiInstallerExemptions=n" is now the default behavioure

Fixed

• fixed issue with the "Explore Sandboxed" command #972
• rolled back the switch from using NtQueryKey to NtQueryObject as it seams to bream soem older w10 versions liek 1803 #984
  -- this change was introduced to fix #951
  -- to use NtQueryObject the option "UseObjectNameForKeys=y" can be added to sandboxie.ini

[0.8.7b / 5.50.7] - 2021-07-11 (Hot-Fix 2)

• fixed issue with boxes that head auto delete activated introduced in the previous build

Fixed

[0.8.7 / 5.50.7] - 2021-07-10

Added

• added option to always auto pick the DefautlBox sandbox #959
  -- when this option is enabled the normal behavioure with a box selection dialog can be achived holding down CTRL
• added option to hide boxed form the run in box dialog
  -- usefull to avoidl listing for example insecure compatybility test boxes
• added box options to sys tray #439 #272

Changed

• changed default terminate all boxed processes key from Ctrl+Break to Ctrl+Alt+Break #974
• start.exe does no longer link in all that unused MFC code reduced file size form over 2.5MB to below 250KB
• updated the main sandman and tray icon #963
• improved the bov view tree style

Fixed

• added additional delay and retryes to kmdutill.exe to mitigate issues when unloading the driver #968
• fixed issue with sbiectrl not being properly started after setup #969
• fixed issue with explore sandboxed shell option #972
• fixed issue when running sandman elevated #932
• fixed new box selection dialog showing disabled boxes
• fixed issue updating box active status

Removed

• removed Online Armor support as this product is deprecated since 2016

[0.8.6 / 5.50.6] - 2021-07-07 (Hot-Fix 1)

Added

• added LibreWolf template (by Dyras) #929

Fixed

• fixed performance bug introduced in 0.8.5

[0.8.5 / 5.50.5] - 2021-07-06 (Pre-Release)

Added

• added global hotkey to terminate all boxed processes (by default Ctrl+Break)
• the Run Sandboxed dialog can now be handled by the Sandman UI.
• added "AllowBoxedJobs=y" allowing boxed processes to use nested jobs on Windows 8 and later
  -- note: this allows Chrome and other programs to use the job system for additional isolation
• added librewolf.exe to the list of Firefox derivatives #927
• added run regedit sandboxed menu command
• added new support settings tab to Sandman UI for updates and stuff
• added code integrity verification to Sbie service and UI
• added template for Vivaldi Notes (by isaak654) #948
• added LibreWolf template (by Dyras) #929

Changed

• Replaced the Process List used by the driver with a much faster Hash Map implementation
  -- Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
  -- The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
  -- Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
• Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
• Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
  -- not yet enabled in production build
• the presence of default box is only checked on connect
• the portable dir dialog now shows the directory #924
• when terminated boxed processes now we first try doing that by terminating the job object
• the driver now by default can terminate problematic processes without the help of the service
• box delete routine now retries up to 10 times to fix #954
• Replaced the Process List used by the service with a much faster Hash Map implementation
• Replaced the per-process Thread List used by the service with a much faster Hash Map implementation

Fixed

• fixed faulty initialization in SetServiceStatus (by flamencist) #921
• fixed buttons position in Classic UI settings (by isaak654) #914
• fixed missing password length check in the Sandman UI #925
• fixed issues opening job objects by name
• fixed missing permission check when reopening job object handles (thanks Diversenok)
• fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers #930 #817
• fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
• fixed minor setting issue #957
• fixed minor UI issue with resource access COM settings #958
• fixed an issue with NtQueryKey using NtQueryObject instead #951
• fixed crash in key.c when failing to resolve key paths
• added workaround for topmost modality issue #873
  -- the notification window is not only topmost for 5 seconds
• fixed an issue deleting directories introduced in 5.49.5
• fixed an issue when creating box copies

Removed

• removed switch for "BlockPassword=n" as it does not seem to be working #938
  -- it's recommended to use "OpenSamEndpoint=y" to allow for password change in windows 10

---

This discussion was created from the release Release v0.8.8 / 5.50.8.

[walmar]

Version 0.8.2 of Sandboxie-Plus was running minimized to tray via Run Sandboxed context menu option with Sandboxie.ini UserSettings section option SbieCtrl_AutoStartAgent=SandMan.exe -autorun.
Sandboxie-Plus v0.8.8 Run Sandboxed context menu option seems to ignore the UserSettings section option SbieCtrl_AutoStartAgent.

I can not find a release note about this specific change.
Can someone please give instructions in order to achieve the desired behavior with newer versions that do not require a third-party software like a AutoHotkey script?

[isaak654]

Personally I have this line in UserSettings section, without the -autorun switch (0.8.9):

SbieCtrl_AutoStartAgent=SandMan.exe

[walmar]

That is the state of this option by default and behaves not as I need it.
If you run SandMan.exe -autorun from cmd.exe, then Sandboxie-Plus starts minimized to tray.

With v0.8.8+ even if I set the Sandboxie.ini UserSettings section option SbieCtrl_AutoStartAgent value to something random like cmd.exe, the Run Sandboxed context menu option still runs SandMan.exe. So it does not matter for the desired behavior how this line looks like.