Release v1.3.1 / 5.58.1

[DavidXanatos]

This build adds 2 new isolation mechanisms to increase security of hardened boxes, hence boxes previously designated hardened will now be downgraded in the UI to normal, and the hardened icons will be used to the new box type.
The first isolation mechanism "SysCallLockDown=y" limits the amount of ntdll syscalls which are executed with the original process token to a list of known approved syscalls
The second isolation mechanism "RestrictDevices=y" leverages rule specificity to limit the accessible driver/device endpoints to a list of known required endpoints plus whatever the user opens using the resource access rules.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added ability to switch fusion theme independently of the dark theme
• added ability to download updates from the support page
• added missing system calls to the hardened box type 88bc06a b775264 04b2377 (thanks Mr.X)
• added search box to the Plus UI Settings and box option dialogs #2134
• added Korean translation to the Plus UI #2133 (thanks VenusGirl)
• added grouping to sandman tray menu #2148

Changed

• improved info label
• the look of vintage mode is even more vintage
• reloading the configuration with the Sandman command "Options -> Reload ini file" now updates the list of approved syscalls
• made rule specificity more specific, now a rule with less wildcards overrules a rule with more wildcards
  -- Note: tailing wildcards are evaluated separately

Fixed

• fixed issue with displaying sandbox configuration #2111
• fixed flashing issue when switching views #2050
• fixed inconsistencies with various checkboxes in the Plus UI ef4ac1b 06c89e3
• fixed a certificate validation issue 238cb44
• fixed issue with "UseRuleSpecificity" setting #2124 file.c#L965-L966

---

This discussion was created from the release Release v1.3.1 / 5.58.1.

[codewhizz]

Thank You!

[BilleBarrett]

Sorry to bother but what did I set that Sandboxie-Plus pops up a window every time I reboot the computer
Thanks
Bill

[DavidXanatos]

well idk. it woudl help if you would tell us what window that is, you could attach a screenshot of that window.

[BilleBarrett]

This pops up on reboot, can I stop it ? <https://go.sentinelone.com/rs/327-MNM-087/images/nurture.bannerv2.1200x200(1).jpg> End Point Detection & Response System Remote Desktop Services 517 Miltwood Dr, Greensboro, NC 27455-2709 (336) 988-0891 ***@***.***> ***@***.*** To subscribe to my FYI emails send an email to ***@***.***> ***@***.*** Life is not a journey to the grave with the intention of arriving safely in a pretty and well-preserved body, but rather to skid in broadside, thoroughly used up, totally worn out, and loudly proclaiming... 'Wow! What a ride!’ From: DavidXanatos ***@***.***> Sent: Friday, August 26, 2022 11:45 AM To: sandboxie-plus/Sandboxie ***@***.***> Cc: BilleBarrett ***@***.***>; Comment ***@***.***> Subject: Re: [sandboxie-plus/Sandboxie] Release v1.3.1 / 5.58.1 (Discussion #2162) well idk. it woudl help if you would tell us what window that is, you could attach a screenshot of that window. — Reply to this email directly, view it on GitHub <#2162 (reply in thread)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJ3MQJNTBWGKALL6ELPJDVLV3DRBHANCNFSM57DGKQXQ> . You are receiving this because you commented. <https://github.com/notifications/beacon/AJ3MQJKC5MGRUCJVXLWTAPLV3DRBHA5CNFSM57DGKQX2YY3PNVWWK3TUL52HS4DFWFCGS43DOVZXG2LPNZBW63LNMVXHJKTDN5WW2ZLOORPWSZGOAA2S2YQ.gif> Message ID: ***@***.*** ***@***.***> >