Exclusive priavet GitHub Access
Added 2022-07-14 17:46:51 +0000 UTCI have set up a private repository on Github which will contain upcoming builds of sandboxie often one or two version ahead.
Tears starting at 10€ are eligible.
Currently its 1.4.xx, see changelog:
[1.4.0 / 5.59.0] - 2022-??-??
Added
- added integrated run from start menu #1836
- addes start menu enumeration #1570
- added UI for breakout processes #1904
- todo: - add integration to 1st start wizard
- added option to customize box double click action
- added ability to import/export boxes into 7z files
[1.3.0 / 5.58.0] - 2022-??-??
Added
- Added hook configuration for ntoskrnl/ntdll -- individual ntdll hooks can be disabled using "DisableWinNtHook=..."
- Added new Super Extra Security Enhanced Box Mode to enable set "UseSecurityMode=y" -- then this setting is enabled it combines "SysCallLockDown=y" that limits the use of Nt system calls with "DropAdminRights=y" and "RestrictDevices=y" -- Only calls configured in the global section as "ApproveWinNtSysCall=..."/"ApproveWin32SysCall=..." wil be executed with the original token -- all not aproved Nt sys calls will be executed with the sandboxed token, this may break compatybility in certain scenarios -- hence additional syscalls may need to be allowed, this is to be done in the [GlobalSettings] and the driver must be restarted -- Note: Boxes created as Security Enhanced with prior builds will be displayed in the UI to normal from now on -- The Security Enhanced icons are now repurposed for the new Super Extra Security Enhanced Box Mode -- Note: The new enhanced security features require a supporter certificate
- added browse option to the force processes tab
Changed
- replaced the "DeviceSecurity" template with a dedicated setting "RestrictDevices=y" -- Note: when needed more "NormalPipePath=..." entries can be added to open specific devices
- rule specificity is now even more specific a exact rule now overrules once that end with a wildcard
