DavidXanatos

Sandboxie+ 0.8.7b

Added 2021-07-11 08:46:06 +0000 UTC

This build reworks some internal mechanisms and fixes a lot of bugs as well as some new features.

fixed issue with boxes that head auto delete activated introduced in the previous build

added option to always auto pick the DefautlBox sandbox #959
-- when this option is enabled the normal behavioure with a box selection dialog can be achived holding down CTRL
added option to hide boxed form the run in box dialog
-- usefull to avoidl listing for example insecure compatybility test boxes
added box options to sys tray #439 #272

changed default terminate all boxed processes key from Ctrl+Break to Ctrl+Alt+Break #974
start.exe does no longer link in all that unused MFC code reduced file size form over 2.5MB to below 250KB
updated the main sandman and tray icon #963
improved the bov view tree style

added additional delay and retryes to kmdutill.exe to mitigate issues when unloading the driver #968
fixed issue with sbiectrl not being properly started after setup #969
fixed issue with explore sandboxed shell option #972
fixed issue when running sandman elevated #932
fixed new box selection dialog showing disabled boxes
fixed issue updating box active status

added global hotkey to terminate all boxed processes (by default Ctrl+Break)
the Run Sandboxed dialog can now be handled by the Sandman UI.
added "AllowBoxedJobs=y" allowing boxed processes to use nested jobs on Windows 8 and later
-- note: this allows Chrome and other programs to use the job system for additional isolation
added librewolf.exe to the list of Firefox derivatives #927
added run regedit sandboxed menu command
added new support settings tab to Sandman UI for updates and stuff
added code integrity verification to Sbie service and UI
added template for Vivaldi Notes (by isaak654) #948
added LibreWolf template (by Dyras) #929

Replaced the Process List used by the driver with a much faster Hash Map implementation
-- Note: this change provides an almost static system call speed of 1.2us irregardless of the running process count
-- The old list, with 100 programs running required: 4.5µs; with 200: 12µs; and with 300: 18µs per syscall
-- Note: some of the slowdown was affecting also non sandboxed applications due to how the driver handles certain callbacks
Replaced the per-process Thread List used by the driver with a much faster Hash Map implementation
Replaced configuration section list with a hash map to improve configuration performance, and increased line limit to 100000
-- not yet enabled in production build
the presence of default box is only checked on connect
the portable dir dialog now shows the directory #924
when terminated boxed processes now we first try doing that by terminating the job object
the driver now by default can terminate problematic processes without the help of the service
box delete routine now retries up to 10 times to fix #954
Replaced the Process List used by the service with a much faster Hash Map implementation
Replaced the per-process Thread List used by the service with a much faster Hash Map implementation

fixed faulty initialization in SetServiceStatus (by flamencist) #921
fixed buttons position in Classic UI settings (by isaak654) #914
fixed missing password length check in the Sandman UI #925
fixed issues opening job objects by name
fixed missing permission check when reopening job object handles (thanks Diversenok)
fixed issue with some Chromium 90+ hooks affecting PDF plugin in derived browsers #930 #817
fixed issues with reconnecting broken LPC ports used for communication with SbieSvc
fixed minor setting issue #957
fixed minor UI issue with resource access COM settings #958
fixed an issue with NtQueryKey using NtQueryObject instead #951
fixed crash in key.c when failing to resolve key paths
added workaround for topmost modality issue #873
-- the notification window is not only topmost for 5 seconds
fixed an issue deleting directories introduced in 5.49.5
fixed an issue when creating box copies

removed switch for "BlockPassword=n" as it does not seem to be working #938
-- it's recommended to use "OpenSamEndpoint=y" to allow for password change in windows 10