Jump to content

Locked Sandboxie 5.48.5 / Sandboxie Plus v0.7.1


Recommended Posts

This is the hidden content, please



    sandboxed indicator for tray icons, the tooltip now contains [#] if enabled
    the trace log buffer can now be adjusted with "TraceBufferPages=2560"
    -- the value denotes the count of 4k large pages to be used, here for a total of 10 MB
    new functionality to the list finder
    Enchanced RpcMgmtSetComTimeout handing with "UseRpcMgmtSetComTimeout=some.dll,n"
    -- this option allows to specify for each individual dll if RpcMgmtSetComTimeout should be used or not
    -- this setting takes precedence over hard coded and per process presets
    -- "UseRpcMgmtSetComTimeout=some.dll" and "UseRpcMgmtSetComTimeout=some.dll,y" are equivalent
    Added "FakeAdminRights=y" option that makes processes in a given box think thay have admin permissions
    -- this option is recomended to be used in combination with "DropAdminRights=y" to improve securits
    -- With "FakeAdminRights=y" and "DropAdminRights=y" installers should still work
    added RPC support for SSDP API (the Simple Service Discovery Protocol), Enable with "OpenUPnP=y"


    improved RPC debugging
    improved IPC handling around RpcMgmtSetComTimeout
    -- required exceptions have been hard coded for specific calling dll's
    the LogApi dll is now using Sbies tracing facility to logg events instead of an own pipe server
    SbieCrypto no longer triggers message 1313
    changed enum process API now more (no limit) than 511 proceses per box can be enumerated
    Reorganized box settings a bit
    Made COM tracing more verbose


    FIXED SECURITY ISSUE: elevated sandboxed processes could access volumes/disks for reading (thanks hg421)
    fixed crash issue around SetCurrentProcessExplicitAppUserModelID observed with GoogleUpdate.exe
    fixed issue with resource monitor sort by timestamp
    FIXED SECURITY ISSUE: a race condition in the driver allowed to obtain a elevated rights handle to a process (thanks typpos)
    FIXED SECURITY ISSUE: "\RPC Control\samss lpc" is now filtered by the driver (thanks hg421)
    -- this allowed elevated processes to change passwords, delete users and alike, to disable filtering use "OpenSamEndpoint=y"
    FIXED SECURITY ISSUE: "\Device\DeviceApi\CMApi" is now filtered by the driver (thanks hg421)
    -- this allowed elevated processes to change hardware configuration, to disable filtering use "OpenDevCMApi=y"
    fixed issues with webcam access when the DevCMApi filtering is in place
    fixed issue with free download manager for 'AppXDeploymentClient.dll' RpcMgmtSetComTimeout=y is used
    fixed not all WinRM files were blocked by the driver, with "BlockWinRM=n" this file block can be disabled

This is the hidden content, please

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.