更新日志

* 2020年3月份官方论坛宣布 Sandboxie 开源, 现由 DavidXanatos 个人开发维护 – https://github.com/sandboxie-plus/Sandboxie/releases

v5.42:

Added
API_QUERY_PROCESS_INFO can be now used to get the original process token of sandboxed processes
— Note: this capability is used by TaskExplorer to allow inspecting sandbox internal tokens
Added option “KeepTokenIntegrity=y” to make the sbie token keep its initial integrity level (debug option)
— Note: Do NOT USE Debug Options if you dont know their security implications (!)
Added process id to log messages very usefull for debugging
Added finder to resource log
Added option to hide host processes “HideHostProcess=[name]”
— Note: Sbie hides by default processes from other boxes, this behavioure can now be controlled with “HideOtherBoxes=n”
Sandboxed RpcSs and DcomLaunch can now be run as system with the option “ProtectRpcSs=y” howeever that breaks sandboxed explorer and other
BuiltIn Clsid whitelist can now be disabled with “OpenDefaultClsid=n”
Processes can be now terminated with the del key, and require a confirmation
Added sandboxed window border display to SandMan.exe
Added notification for sbie log messages
Added Sandbox Presets sub menu allowing to quickly change some settings
— Enable/Disable API logging, logapi_dll’s are now distributed with SbiePlus
— And other: Drop admin rights; Block/Allow internet access; Block/Allow access to files on te network
Added more info to the sandbox status column
Added path column to SbieModel
Added info tooltips in SbieView

Changed
Reworked ApiLog, added pid and pid filter
Auto config reload on in change is now delayed by 500ms to not reload multiple times on incremental changes
Sandbox names now replace “_” witn ” ” for display allowing to use names that are build of separated words

Fixed
added mising PreferExternalManifest itialization to portable mode
fixed permission issues with sandboxed system processes
— Note: you can use “ExposeBoxedSystem=y” for the old behaviour (debug option)
fixed missing SCM access check for sandboxed services
— Note: to disable the access check use “UnrestrictedSCM=y” (debug option)
fixed missing initialization in serviceserver that caused sandboxed programs to crash when querying service status
fixed many bugs that caused the SbieDrv.sys to BSOD when run with MSFT Driver Verifier active
— 0xF6 in GetThreadTokenOwnerPid and File_Api_Rename
— missing non optional parameter for FltGetFileNameInformation in File_PreOperation
— 0xE3 in Key_StoreValue and Key_PreDataInject

v5.41.2 – 2020-06-19
Added
added option SeparateUserFolders=n to no longer have the user profile files stored separately in the sandbox
added SandboxieLogon=y it makes processes run under the SID of the “Sandboxie” user instead of the Anonymous user
— Note: the global option AllowSandboxieLogon=y must be enabled, the “Sandboxie” user account must be manually created first and the driver reloaded, else process start will fail
improved debugging around process creation errors in the driver
Fixed
fixed some log messages going lost after driver reload
found a workable fix for the MSI installer issue, see Proc_CreateProcessInternalW_RS5

官網http://www.sandboxie.com/

官方下載（5.42 //開源後續版）
https://download.fastgit.org/sandboxie-plus/Sandboxie/releases/download/v0.3.5/SandboxieInstall64-v5.42.1.exe
https://github.wuyanzheshui.workers .dev/sandboxie-plus/Sandboxie/releases/download/v0.3.5/SandboxieInstall64-v5.42.1.exe
https://download.fastgit.org/sandboxie-plus/Sandboxie/releases/download/v0.3.5/SandboxieInstall32- v5.42.1.exe
https://github.wuyanzheshui.workers.dev/sandboxie-plus/Sandboxie/releases/download/v0.3.5/SandboxieInstall32-v5.42.1.exe

官方下載（5.33.3 //軟件已免費）
https://www.sophos.com/Pages/DownloadRedirect.aspx?downloadKey={E2A08EF8-5D36-43B9-BCF6-CD0F1E9763E8}
（32-bit）https:// www.sophos.com/Pages/DownloadRedirect.aspx?downloadKey={51889F7F-8E25-4A05-B3D2-A8B05B989400}
（64-bit）https://www.sophos.com/Pages/DownloadRedirect.aspx?downloadKey={B15DECBE -8D8C-4374-A73C-7095D2473FB8}