Bandicut 歷史舊版本 Page8

更新時間：2021-12-07
更新細節：

What's new in this version:

Added:
- added checkboxes to most major box options lists
- added SumatraPDF templates

Changed:
- rolled back change to "OpenClsid=..." handling
- made all major lists in the box options editable

Fixed:
- fixed issue with read only paths introduced in 1.0.0
- fixed BSOD issue introduced in the 1.0.0 build
- fixed multiple BITS notifications while running sandboxed Chromium browsersc
- fixed executables selection for "Run Menu" entries
- fixed SetCursorPos and ClipCursor ignoring DPI awareness

Removed:
- removed Virtual Desktop Manager template

更新時間：2021-11-19
更新細節：

What's new in this version:

- Desktop API 2.0
- Dark mode support on Windows
- Building Mac apps from Windows and Linux
- New encryption features: SHA3, BlowFish, TwoFish and CRC32
- iOS now uses iOS 15 SD
- SQLite 3.36.0 with support for RETURNING on DELETE, INSERT, UPDATE statements
- Desktop project icon resources are saved as compressed PNGs, helping to significantly reduce project file sizes
- Lots of improvements and bug fixes

更新時間：2021-11-17
更新細節：

What's new in this version:

Added:
- added Privacy enhanced mode, sandboxes with "UsePrivacyMode=y" will not allow read access to locations containing user data
- all locations except generic Windows system paths will need to be opened explicitly for read and/or write access
- using "NormalFilePath=...", "NormalKeyPath=...", "NormalIpcPath=..." allows to open locations to be readable and sandboxed
- added new "App Compartment" mode of operation, it's enabled by adding "NoSecurityIsolation=y" to the box configuration
- in this mode, security is traded in for compatibility, it should not be used for untrusted applications
- note: in this mode, file and registry filtering are still in place, hence processes run without administrative privileges
- it is reasonably safe, all filtering can be disabled with "NoSecurityFiltering=y"
- added experimental use of ObRegisterCallbacks to filter object creation and duplication
- this filtering is independent from the regular SbieDrv's syscall-based filtering, hence it also applies to App Compartments
- with it enabled, an application running in a compartment will not be able to manipulate processes running outside the sandbox
- Note: this feature improves the security of unisolated App Compartment boxes
- to enable this feature, set "EnableObjectFiltering=y" in the global section and reload the driver
- when globally activated, the filtering can be disabled for individual boxes with "DisableObjectFilter=y"
- added "DontOpenForBoxed=n", this option disables the discrimination of boxed processes for open file and open key directives
- this behaviour does not really improve security anyways, but may be annoying, also app compartments always disable this
- added setting to entirely open access to the COM infrastructure

Changed:
- reworked the resource access path matching mechanism to optionally apply more specific rules over less specific ones
- for example "OpenFilePath=C:UserMeAppDataFirefox takes precedence over "WriteFilePath=C:UserMe"
- to enable this new behaviour, add "UseRuleSpecificity=y" to your Sandboxie.ini, this behaviour is always enabled in Privacy enhanced mode
- added "NormalFilePath=..." to restore default Sandboxie behaviour on a given path
- added "OpenConfPath=...", which similarly to "OpenPipePath=..." is a "OpenKeyPath=..." variant which applies to executables located in the sandbox
- removed option to copy a box during creation, instead the box context menu offers a duplication option
- reworked the box creation dialog to offer new box types

Fixed:
- SBIE1401 notification during Sandboxie Plus uninstall
- memory leak in driver handling FLT_FILE_NAME_INFORMATION

更新時間：2021-11-02
更新細節：

What's new in this version:

Added:
- checkbox if the user wants SandMan.exe to be started after installation
- template for Windows 10 virtual desktop manager

Changed:
- "OpenClsid=..." is no longer restricted to CLSCTX_LOCAL_SERVER execution contexts only
- -- this allows to run objects with the CLSCTX_INPROC_SERVER flag in the COM helper service
- in the trace view, now multiple types can be selected at once
- a few Plus UI entries were made translatable
- changed default "terminate all boxed processes" key to Shift+Pause

Fixed:
- ini writing issue with SbieCtrl and the new ini handling mechanism
- issue with trace log filtering
- space issue about German language on Plus installer
- restored Waterfox phishing template entries with a proper fix

更新時間：2021-10-25
更新細節：

What's new in this version:

Added:
- added explicit lines on Plus installer to delete empty shell registry keys at uninstall time

Fixed:
- template sections not showing in editor
- autodelete box content broken in the previous build
- crash in "Browse Content" window
- issue with icon resolution on Windows 7
- invalid "No Inet" status in the status column
- Windows Explorer search box not working
- Waterfox phishing template
- issue with Chinese translation files on Plus installer
- autorun registry key path on Plus installer
- memory corruption in SbieSvc.exe

更新時間：2021-10-20
更新細節：

What's new in this version:

Added:
- ability to save trace log to file on Plus UI
- French language on Plus UI

Changed:
- network traffic trace is now properly logged to the driver log instead of to the kernel debug log
- Plus installer will autostart SandMan.exe after install to fix a taskbar icon issue
- Classic installer will show the license agreement when updating

Fixed:
- template sections not showing in editor
- issue with app ID resulting in some apps showing two button groups in the taskbar
- issue with maximum ini value length on Plus UI
- issue handling an empty Sandboxie.ini that got introduced recently
- issue with "SpecialImages" template (by Coverlin)
- issue with box emptying
- issues wich some languages
- issue with mounted directories
- added missing translation for qt libraries
- issue with Windows compatibility assistant
- issue with process image specific settigns

更新時間：2021-10-16
更新細節：

What's new in this version:

Added:
- debug switch to disable Sbie console redirection "NoSandboxieConsole=y"
- -- note that this was previously part of "NoSandboxieDesktop=y"
- Sbie+ version to the log
- uninstall cleanup of extra files for the Plus installer
- set language for Sandman for the Plus installer
- EventLog messages with SbieMsg.dll for the Plus installer
- group expansion state is now saved
- additional filters to the trace tab

Changed:
- reworked and extended RPC logging
- reintroduced the "UseRpcMgmtSetComTimeout=some.dll,n" setting to be used when no "RpcPortBinding" entry is specified
- --- this allows to enable/disable out of box RPC binding independently from the timeout setting
- the "BoxNameTitle" value can now be set explicitly on a per image name basis

Fixed:
- inability to delete read-only files from sandboxed explorer
- wrong recovery target in Plus UI
- SBIE2101 issue introduced with 0.9.7a
- sorting in the box picker window
- tray refresh issue
- tray activity display
- recovery window not displaying in taskbar
- dark theme preset not updating in real time
- Microsoft Edge complaining about "FakeAdminRights=y"
- issue with using local template in the global section
- issue with git.exe from MinGW freezing
- issue with search highlighting when using in dark mode

Removed:
- removed the ability to sort the trace log as it took too much CPU

更新時間：2021-09-13
更新細節：

What's new in this version:

Added:
- added ability to rename groups
- added ability to define a custom order for the sandboxes, they can be moved by using the move context menu, or holding Alt + Arrow Key
- added recovery to list to the recovery window
- added finder to the recovery window

Changed:
- updated the BlockPort rule inside Template_BlockPorts to the new NetworkAccess format
- default for immediate recovery behaviour is now to show the recovery window instead of using the notifications window
- the new run dialog now requires a double-click
- reworked the recovery window

Fixed:
- issue with create group menu
- issue that caused a box to lose its group association when renaming
- issue with Thunderbird 91+
- an issue with file disposition handling
- issue with Windows 11 22449.1000
- SRWare Iron template
- label positioning in Classic UI

更新時間：2021-08-30
更新細節：

What's new in this version:

Added:
- added option to run a sandbox in session 0
- -- Note: the processes then have a system token, hence its recommended to enable "DropAdminRights=y"
- when the UI is run with admin privileges it now can terminate sandboxed processes in other sessions
- added "StartSystemBox=" option to auto run a box on sbie start/system boot in session 0
- -- Note: box start is done through issuing start.exe /box:[name] auto_run
- add start.exe auto_run command to start all sandboxed auto start locations
- add start.exe /keep_alive command line switch it keeps a process running in the box untill it gracefully terminates
- added "StartCommand=" it starts a complex command through start.exe on box startup
- added menu option to start regedit and load the box reg key

Changed:
- changed command prompt icon and string from "terminal" to "command prompt"
- sys tray can now also use the classic icon
- reworked box menu layout a bit

Fixed:
- fixed driver compatybility with windows server 2022 (build 20348)
- fixed issue with creating shortcuts

更新時間：2021-08-23
更新細節：