.NET Framework (4) 歷史版本列表
更新時間：2022-01-19
更新細節：
What's new in this version:
Added:
- added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath)
- added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box
- the program image must be located outside the sandbox for this to work
- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
- Note: "BreakoutFolder=somepath" is also available
- added silent uninstall switch /remove /S for Classic installer
Changed:
- The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese)
- The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian)
- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request
- updated Firefox update blocker
Fixed:
- issue with opening all file access OpenFilePath=*- issue with opening network shares
- possible upgrade issue with Classic installer 130c43a
- minor issues with Classic installer
- issue with Ldr_FixImagePath_2
- when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off
- issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot
- SandMan will now run in background like SbieCtrl when starting a boxed process post506
- taskbar not showing with persistent box border in full screen post474
- box border not spanning across multiple monitors
- issues with border when using DPI scaling
- DPI issues with Qt
- issue with bright flashing on window creation when in dark mode
- issues with the PortableRootDir setting
- issue with the settings window crashing when the driver was not connected
- DPI issues with Finder Tool
- another issue with reused process IDs
- issue introduced in 1.0.6 related to SeAccessCheckByType
更新時間：2022-01-08
更新細節：
What's new in this version:
Added:
- added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
- added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
- added new template "DeviceSecurity" to lock down access to device drivers on the system
- Note: This template requires RuleSpecificity being available to work properly
- added option to set a custom ini editor in the Plus UI
- added option "LingerLeniency=n" to solve issue
Changed:
- reworked syscall invocation code in the driver
- Win32k hooking is now compatible with HVCI #1483
Fixed:
- memory leak in driver (conf_user.c)
- issue with file renaming in open paths introduced in 1.0.6
- issue causing Chromium browsers not closing properly
- issue with start.exe
- SandMan issue with reused process IDs
- KmdUtil sometimes not properly terminating the driver
Removed:
- removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together
更新時間：2021-12-26
更新細節：
What's new in this version:
Added:
- sandbox top level exception handler to create crash dumps
- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
- Note: created dump files are located at: C:Sandbox\%SANDBOX%
- added template support for Osiris and Slimjet browsers
Changed:
- improved SbieDll initialization a bit
- doubled size of Name_Buffer_Depth
- improved text filter in the templates view
Fixed:
- issue with forced process display
- crash issue with GetClassName
- minor UI issue
- UI language preset issue
- grouping issues in SandMan UI
- issue with EnableWin32kHooks
更新時間：2021-12-14
更新細節：
更新時間：2021-12-07
更新細節：
What's new in this version:
Added:
- added checkboxes to most major box options lists
- added SumatraPDF templates
Changed:
- rolled back change to "OpenClsid=..." handling
- made all major lists in the box options editable
Fixed:
- fixed issue with read only paths introduced in 1.0.0
- fixed BSOD issue introduced in the 1.0.0 build
- fixed multiple BITS notifications while running sandboxed Chromium browsersc
- fixed executables selection for "Run Menu" entries
- fixed SetCursorPos and ClipCursor ignoring DPI awareness
Removed:
- removed Virtual Desktop Manager template
更新時間：2021-11-17
更新細節：
What's new in this version:
Added:
- added Privacy enhanced mode, sandboxes with "UsePrivacyMode=y" will not allow read access to locations containing user data
- all locations except generic Windows system paths will need to be opened explicitly for read and/or write access
- using "NormalFilePath=...", "NormalKeyPath=...", "NormalIpcPath=..." allows to open locations to be readable and sandboxed
- added new "App Compartment" mode of operation, it's enabled by adding "NoSecurityIsolation=y" to the box configuration
- in this mode, security is traded in for compatibility, it should not be used for untrusted applications
- note: in this mode, file and registry filtering are still in place, hence processes run without administrative privileges
- it is reasonably safe, all filtering can be disabled with "NoSecurityFiltering=y"
- added experimental use of ObRegisterCallbacks to filter object creation and duplication
- this filtering is independent from the regular SbieDrv's syscall-based filtering, hence it also applies to App Compartments
- with it enabled, an application running in a compartment will not be able to manipulate processes running outside the sandbox
- Note: this feature improves the security of unisolated App Compartment boxes
- to enable this feature, set "EnableObjectFiltering=y" in the global section and reload the driver
- when globally activated, the filtering can be disabled for individual boxes with "DisableObjectFilter=y"
- added "DontOpenForBoxed=n", this option disables the discrimination of boxed processes for open file and open key directives
- this behaviour does not really improve security anyways, but may be annoying, also app compartments always disable this
- added setting to entirely open access to the COM infrastructure
Changed:
- reworked the resource access path matching mechanism to optionally apply more specific rules over less specific ones
- for example "OpenFilePath=C:UserMeAppDataFirefox takes precedence over "WriteFilePath=C:UserMe"
- to enable this new behaviour, add "UseRuleSpecificity=y" to your Sandboxie.ini, this behaviour is always enabled in Privacy enhanced mode
- added "NormalFilePath=..." to restore default Sandboxie behaviour on a given path
- added "OpenConfPath=...", which similarly to "OpenPipePath=..." is a "OpenKeyPath=..." variant which applies to executables located in the sandbox
- removed option to copy a box during creation, instead the box context menu offers a duplication option
- reworked the box creation dialog to offer new box types
Fixed:
- SBIE1401 notification during Sandboxie Plus uninstall
- memory leak in driver handling FLT_FILE_NAME_INFORMATION
更新時間：2021-11-16
更新細節：
更新時間：2021-11-02
更新細節：
What's new in this version:
Added:
- checkbox if the user wants SandMan.exe to be started after installation
- template for Windows 10 virtual desktop manager
Changed:
- "OpenClsid=..." is no longer restricted to CLSCTX_LOCAL_SERVER execution contexts only
- -- this allows to run objects with the CLSCTX_INPROC_SERVER flag in the COM helper service
- in the trace view, now multiple types can be selected at once
- a few Plus UI entries were made translatable
- changed default "terminate all boxed processes" key to Shift+Pause
Fixed:
- ini writing issue with SbieCtrl and the new ini handling mechanism
- issue with trace log filtering
- space issue about German language on Plus installer
- restored Waterfox phishing template entries with a proper fix
更新時間：2021-10-25
更新細節：
What's new in this version:
Added:
- added explicit lines on Plus installer to delete empty shell registry keys at uninstall time
Fixed:
- template sections not showing in editor
- autodelete box content broken in the previous build
- crash in "Browse Content" window
- issue with icon resolution on Windows 7
- invalid "No Inet" status in the status column
- Windows Explorer search box not working
- Waterfox phishing template
- issue with Chinese translation files on Plus installer
- autorun registry key path on Plus installer
- memory corruption in SbieSvc.exe
更新時間：2021-10-20
更新細節：
What's new in this version:
Added:
- ability to save trace log to file on Plus UI
- French language on Plus UI
Changed:
- network traffic trace is now properly logged to the driver log instead of to the kernel debug log
- Plus installer will autostart SandMan.exe after install to fix a taskbar icon issue
- Classic installer will show the license agreement when updating
Fixed:
- template sections not showing in editor
- issue with app ID resulting in some apps showing two button groups in the taskbar
- issue with maximum ini value length on Plus UI
- issue handling an empty Sandboxie.ini that got introduced recently
- issue with "SpecialImages" template (by Coverlin)
- issue with box emptying
- issues wich some languages
- issue with mounted directories
- added missing translation for qt libraries
- issue with Windows compatibility assistant
- issue with process image specific settigns