DavidXanatos
patreon
Sandboxie 1.0.8
🕑 Added 2022-01-18 09:41:52 +0000 UTCThis build fixed many issues, and adds a new functionality: "BreakoutProcess=program.exe" which allow to preset programs to be able to escape a sandbox, hence this is a feature rather for compartmentalization then security, but the way its implemented, a breakout process, will be captured by an other sandbox if it is configured as a forced process for it. So a possibly security related use case would be to have the a box dedicated to run your web browser only, where it is forced, and have it configured as a break out process for all other boxes or globally. In this scenario no mater what boxed or unboxed application starts a browser it will always run in the browser box.
This new feature is enabled only for certified project supporters, if I reach 250 patrons it will be made available to all users, please consider supporting the development of sandbox-plus: https://www.patreon.com/DavidXanatos
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.8
ChangeLog
Added
- added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath) #1497
- added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box #1500
-- the program image must be located outside the sandbox for this to work
-- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
-- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
-- Note: "BreakoutFolder=some\path" is also available - added silent uninstall switch /remove /S for Classic installer (by sredna) #1532
Changed
- The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese) #1497
- The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian) #1527
-- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request - updated Firefox update blocker (discovered by isaak654) #1545
Fixed
- fixed issue with opening all file access OpenFilePath=* #971
- fixed issue with opening network shares #1529
- fixed possible upgrade issue with Classic installer (by isaak654) 130c43a
- fixed minor issues with Classic installer (by sredna) #1533
- fixed issue with Ldr_FixImagePath_2 #1507
- when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off.
- fixed issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot #1451
- SandMan will now run in background like SbieCtrl when starting a boxed process post506
- fixed taskbar not showing with persistent box border in full screen post474
- fixed box border not spanning across multiple monitors #1512
- fixed issues with border when using DPI scaling #1506
- fixed DPI issues with Qt #1368
- fixed issue with bright flashing on window creation when in dark mode #1231
- fixed issues with the PortableRootDir setting #1509
- fixed issue with the settings window crashing when the driver was not connected
- fixed DPI issues with Finder Tool #912
- fixed another issue with reused process IDs #1547
- fixed issue introduced in 1.0.6 related to SeAccessCheckByType #1548
Comments
David Xanatos
yes since its an advanced feature there is no UI yet, i can add one in a later build
Sapphire
I assume breakoutprocess has to be added to the ini manually per sandbox? any chance to add it to Forced programs UI for ease of use?
