Advanced IP Scanner 歷史版本列表 Page2

更新時間：2022-02-14
更新細節：

What's new in this version:

Added:
- optional tray notification when a box content gets auto deleted
- FreeDownloadManager template
- warnign when opening unsandboxed regedit
- languages files that were missing in official Qt 5.15.2

Changed:
- the asynchroniouse box operations introduced in the last build are due to a pupular request now disabled by default
- moved sys tray options from general to shell integration tab
- removed "AlwaysUseWin32kHooks", now these win32 hooks are always enabled
- -- note: you can use "UseWin32kHooks=program.exe,n" to disable them for sellected programs
- updated Listary template to v6

Fixed:
- compatybility issue with SECUROM
- modality issue #1615

更新時間：2022-02-07
更新細節：

What's new in this version:

Added:
- added option to show only boxes in tray with runnign processes
- additional option show only pinned bixes, in box options a bix can be set to be always shown in theay list (Pinned)
- added options menu command to reset the GUI
- added 'Run Un-Sandboxed' context menu option
- added new trigger "OnBoxDelete" that allows to specify a command that is run UNBOXED just before the box content gets deleted
- note: this can be used as a replacemetn to the DeleteCommand
- sellected box operations (deletion) no longer show the progress dialog 1061
- instead a box with a running operation show a blinking hour glass icon, the context menu can be used to cancel the operation

Changed:
- HideHostProcess=program.exe can now be used to hide sandboxie services
- updater blocking is now done using a template called BlockSoftwareUpdaters
- enchanced "StartProgram=..." making "StartCommand=..." obsolete
- for same functionality as "StartCommand=..." use "StartProgram=%SbieHome%Start.exe ..."
- merged "Auto Start" General tab with the "Auto Exec" Advanced tab into a universal"Triggers" Advanced tab

Fixed:
- a couple issues with the new breakout process feature and improved security (thanks Diversenok)
- issues with re opening already open windows
- issue with desktop access
- issue handling commandline invokation
- ui issue with main window state when switching always on top attribute
- issue with box context menu in tray list 1106
- issue with "AutoExec=..."
- issues canceling box deletion operations didn't working 1061
- issue with DPI scalling and color picker dialog #803

Removed:
- removed UseRpcMgmtSetComTimeout=AppXDeploymentClient.dll,y used for free download manager as it broke other things
- when using free download manager ad the line manually to your sandboxie.ini

更新時間：2022-01-31
更新細節：

What's new in this version:

Added
- SandMan now causes all boxed processes to update their path settings in real time when access options were modified
- added new maintenance menu option "Uninstall All" to quickly remove all components when running in portable mode
- added version number to the title bar of Sandboxie Classic
- added option to return not to a snapshot but to an empty box state while keeping all snapshots
- Sandboxie-Plus.ini can now be placed in C:ProgramDataSandboxie-Plus folder and takes precedence (for business use)
- added support for AF_UNIX on Windows to resolve issues with OpenJDK17 and later

Changed
- reworked breakout mechanism to be service based and not allowing the parent process to access the broken out child process
- enabled creation of directory junctions for sandboxed processes
- restored back AutoRecover=y on box creation
- improved snapshot support
- renamed "Disable Forced Programs" command to "Pause Forced Programs Rules" (Plus only)

Fixed
fixed BreakoutProcess not working with EnableObjectFiltering=y
FIXED SECURITY ISSUE: when starting COMSRV unboxed, the returned process handle had full access
fixed issue with progress dialog
fixed issue with handling directory junctions in Sandboxie
fixed a handle leak in File_NtCloseImpl
fixed border issues on maximized windows introduced in the last build
fixed a couple of index overruns
fixed issues with sysnative directory
fixed issue with starting SandMan when running sandboxed from context menu
fixed dark mode flash issue with main window creation
fixed issues with snapshot error handling
fixed issues with the always on top option (Plus only)

更新時間：2022-01-19
更新細節：

What's new in this version:

Added:
- added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath)
- added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box
- the program image must be located outside the sandbox for this to work
- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
- Note: "BreakoutFolder=somepath" is also available
- added silent uninstall switch /remove /S for Classic installer

Changed:
- The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese)
- The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian)
- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request
- updated Firefox update blocker

Fixed:
- issue with opening all file access OpenFilePath=*- issue with opening network shares
- possible upgrade issue with Classic installer 130c43a
- minor issues with Classic installer
- issue with Ldr_FixImagePath_2
- when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off
- issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot
- SandMan will now run in background like SbieCtrl when starting a boxed process post506
- taskbar not showing with persistent box border in full screen post474
- box border not spanning across multiple monitors
- issues with border when using DPI scaling
- DPI issues with Qt
- issue with bright flashing on window creation when in dark mode
- issues with the PortableRootDir setting
- issue with the settings window crashing when the driver was not connected
- DPI issues with Finder Tool
- another issue with reused process IDs
- issue introduced in 1.0.6 related to SeAccessCheckByType

更新時間：2022-01-08
更新細節：

What's new in this version:

Added:
- added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
- added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
- added new template "DeviceSecurity" to lock down access to device drivers on the system
- Note: This template requires RuleSpecificity being available to work properly
- added option to set a custom ini editor in the Plus UI
- added option "LingerLeniency=n" to solve issue

Changed:
- reworked syscall invocation code in the driver
- Win32k hooking is now compatible with HVCI #1483

Fixed:
- memory leak in driver (conf_user.c)
- issue with file renaming in open paths introduced in 1.0.6
- issue causing Chromium browsers not closing properly
- issue with start.exe
- SandMan issue with reused process IDs
- KmdUtil sometimes not properly terminating the driver

Removed:
- removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together

更新時間：2021-12-26
更新細節：

What's new in this version:

Added:
- sandbox top level exception handler to create crash dumps
- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
- Note: created dump files are located at: C:Sandbox\%SANDBOX%
- added template support for Osiris and Slimjet browsers

Changed:
- improved SbieDll initialization a bit
- doubled size of Name_Buffer_Depth
- improved text filter in the templates view

Fixed:
- issue with forced process display
- crash issue with GetClassName
- minor UI issue
- UI language preset issue
- grouping issues in SandMan UI
- issue with EnableWin32kHooks

更新時間：2021-12-07
更新細節：

What's new in this version:

Added:
- added checkboxes to most major box options lists
- added SumatraPDF templates

Changed:
- rolled back change to "OpenClsid=..." handling
- made all major lists in the box options editable

Fixed:
- fixed issue with read only paths introduced in 1.0.0
- fixed BSOD issue introduced in the 1.0.0 build
- fixed multiple BITS notifications while running sandboxed Chromium browsersc
- fixed executables selection for "Run Menu" entries
- fixed SetCursorPos and ClipCursor ignoring DPI awareness

Removed:
- removed Virtual Desktop Manager template

更新時間：2021-11-17
更新細節：

What's new in this version:

Added:
- added Privacy enhanced mode, sandboxes with "UsePrivacyMode=y" will not allow read access to locations containing user data
- all locations except generic Windows system paths will need to be opened explicitly for read and/or write access
- using "NormalFilePath=...", "NormalKeyPath=...", "NormalIpcPath=..." allows to open locations to be readable and sandboxed
- added new "App Compartment" mode of operation, it's enabled by adding "NoSecurityIsolation=y" to the box configuration
- in this mode, security is traded in for compatibility, it should not be used for untrusted applications
- note: in this mode, file and registry filtering are still in place, hence processes run without administrative privileges
- it is reasonably safe, all filtering can be disabled with "NoSecurityFiltering=y"
- added experimental use of ObRegisterCallbacks to filter object creation and duplication
- this filtering is independent from the regular SbieDrv's syscall-based filtering, hence it also applies to App Compartments
- with it enabled, an application running in a compartment will not be able to manipulate processes running outside the sandbox
- Note: this feature improves the security of unisolated App Compartment boxes
- to enable this feature, set "EnableObjectFiltering=y" in the global section and reload the driver
- when globally activated, the filtering can be disabled for individual boxes with "DisableObjectFilter=y"
- added "DontOpenForBoxed=n", this option disables the discrimination of boxed processes for open file and open key directives
- this behaviour does not really improve security anyways, but may be annoying, also app compartments always disable this
- added setting to entirely open access to the COM infrastructure

Changed:
- reworked the resource access path matching mechanism to optionally apply more specific rules over less specific ones
- for example "OpenFilePath=C:UserMeAppDataFirefox takes precedence over "WriteFilePath=C:UserMe"
- to enable this new behaviour, add "UseRuleSpecificity=y" to your Sandboxie.ini, this behaviour is always enabled in Privacy enhanced mode
- added "NormalFilePath=..." to restore default Sandboxie behaviour on a given path
- added "OpenConfPath=...", which similarly to "OpenPipePath=..." is a "OpenKeyPath=..." variant which applies to executables located in the sandbox
- removed option to copy a box during creation, instead the box context menu offers a duplication option
- reworked the box creation dialog to offer new box types

Fixed:
- SBIE1401 notification during Sandboxie Plus uninstall
- memory leak in driver handling FLT_FILE_NAME_INFORMATION

更新時間：2021-11-02
更新細節：

What's new in this version:

Added:
- checkbox if the user wants SandMan.exe to be started after installation
- template for Windows 10 virtual desktop manager

Changed:
- "OpenClsid=..." is no longer restricted to CLSCTX_LOCAL_SERVER execution contexts only
- -- this allows to run objects with the CLSCTX_INPROC_SERVER flag in the COM helper service
- in the trace view, now multiple types can be selected at once
- a few Plus UI entries were made translatable
- changed default "terminate all boxed processes" key to Shift+Pause

Fixed:
- ini writing issue with SbieCtrl and the new ini handling mechanism
- issue with trace log filtering
- space issue about German language on Plus installer
- restored Waterfox phishing template entries with a proper fix

更新時間：2021-10-25
更新細節：

What's new in this version:

Added:
- added explicit lines on Plus installer to delete empty shell registry keys at uninstall time

Fixed:
- template sections not showing in editor
- autodelete box content broken in the previous build
- crash in "Browse Content" window
- issue with icon resolution on Windows 7
- invalid "No Inet" status in the status column
- Windows Explorer search box not working
- Waterfox phishing template
- issue with Chinese translation files on Plus installer
- autorun registry key path on Plus installer
- memory corruption in SbieSvc.exe