Sandboxie-Plus v1.8.0 released
Added 2023-02-27 19:42:24 +0000 UTCThis build introduced a couple of major changes to sansdboxies inner mechanics, all preset access directives have been moved to template entries. Sandboxie now fully isolates the NT namespace reducing the potential attack surface. Last but not least a couple of compatibility fixes should improve the use of chrome and chromium based applications.
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.8.0
Changelog
Added
- Run menu now supports folders, to be used by entering foldername1\foldername2\entryname in the name column of the UI
- added a tray indicator for pending updates
- added virtualization for CreateDirectoryObject(Ex) and OpenDirectoryObject (improves security, prevents name squatting) -- note: this can be disabled using 'NtNamespaceIsolation=n'
Changed
- 'OpenProtectedStorage=y' has been replaced with a template
- moved all built-in access rules to a set of default templates
- moved WinetCache control to a template OpenWinetCache, 'CloseWinetCache=y' is now obsolete
- added hook for CreateAppContainerToken, which should also improve compatibility with other apps #1926 -- note: Template_Edge_Fix is no longer required
- replaced a few icons
- moved the "Support" global settings page above the "Advanced Config" page and renamed it to "Support & Updates"
- when dragging and dropping a file on the SandMan UI to run it, the currently selected box will be pre-selected in the box picker dialog
- improved access rule handling #2633
- SbieCtrl now uses the new update format when checking for updates
- added priorization of primary matches over auylairy matches to rule specificity
Fixed
- added AppContainer support for Compartment type boxes
- FIXED SECURITY ISSUE ID-22 NtCreateSectionEx was not filtered by the driver
- fixed issue starting services without a system token
- fixed issues with new file migration settings #2700
- fixed shell integration on ARM64 #2685
- fixed new issues with driver verifier #2708