DavidXanatos

Sandboxie-Plus 1.4.0 Preview

Added 2022-07-16 07:14:33 +0000 UTC

On the private github there is now the installer for the build 1.4.0 available https://github.com/DavidXanatos/Sandboxie-Next/releases/tag/v1.4.0

added integrated run from start menu #1836
addes start menu enumeration #1570
added UI for breakout processes #1904
todo: - add integration to 1st start wizard
added option to customize box double click action
added ability to import/export boxes into 7z files

Added hook configuration for ntoskrnl/ntdll
-- individual ntdll hooks can be disabled using "DisableWinNtHook=..."
Added new Super Extra Security Enhanced Box Mode to enable set "UseSecurityMode=y"
-- then this setting is enabled it combines "SysCallLockDown=y" that limits the use of Nt system calls with "DropAdminRights=y" and "RestrictDevices=y"
-- Only calls configured in the global section as "ApproveWinNtSysCall=..."/"ApproveWin32SysCall=..." wil be executed with the original token
-- all not aproved Nt sys calls will be executed with the sandboxed token, this may break compatybility in certain scenarios
-- hence additional syscalls may need to be allowed, this is to be done in the [GlobalSettings] and the driver must be restarted
-- Note: Boxes created as Security Enhanced with prior builds will be displayed in the UI to normal from now on
-- The Security Enhanced icons are now repurposed for the new Super Extra Security Enhanced Box Mode
-- Note: The new enhanced security features require a supporter certificate
added browse option to the force processes tab

replaced the "DeviceSecurity" template with a dedicated setting "RestrictDevices=y"
-- Note: when needed more "NormalPipePath=..." entries can be added to open specific devices
rule specificity is now even more specific a exact rule now overrules once that end with a wildcard