Skip to content

Release v0.7.2 / 5.49.0
Compare
Choose a tag to compare
@DavidXanatos DavidXanatos released this 05 Mar 08:44
· 5427 commits to master since this release
0.7.2
a6a5663
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

0 5 5

This build fixes again a few security issues, as well as brings some new functionality and expands on the tracing features.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

[0.7.2 / 5.49.0] - 2021-03-05

Added

  • added option to alter reported Windows version "OverrideOsBuild=7601" for Windows 7 SP1
  • the trace log can now be structured like a tree with processes as root items and threads as branches

Changed

  • SandboxieCrypto now always migrates the CatRoot2 files in order to prevent locking of real files
  • greatly improved trace log performance
  • MSI Server can now run with the "FakeAdminRights=y" and "DropAdminRights=y" options
    -- special service allowance for the MSI Server can be disabled with "MsiInstallerExemptions=n"
  • changed SCM access check behaviour; non elevated users can now start services with a user token
    -- elevation is now only required to start services with a system token
  • reworked the trace log mechanism to be more verbose
  • reworked RPC mechanism to be more flexible

Fixed

  • fixed issues with some installers introduced in 5.48.0
  • fixed "add user to sandbox" in the Plus UI
  • FIXED SECURITY ISSUE: the HostInjectDll mechanism allowed for local privilege escalation (thanks hg421)
  • Classic UI no longer allows to create a sandbox with an invalid or reserved device name
Assets 7
Loading