Version 2.93
Download link (32-bit):
http://www.sandboxie.com/2.9x/SandboxieInstall-29309.exe
Changes in Version 2.93.09
Some minor bug fixes.
Changes in Version 2.93.08
* Sandboxie can install and manage sandboxed services.
* The sandboxed Windows Installer starts and stops automatically. The menu options to manage it have been removed.
* The sandboxed Windows Installer (and other services) can now access the remote shares (network drives) mounted in the invoking session.
* New setting BoxNameTitle=y in Sandboxie.ini displays the sandbox name in the window title bar.
* And more bug fixes.
* * *
Version 2.92
Download link (32-bit):
http://www.sandboxie.com/2.9x/SandboxieInstall-29207.exe
Changes in Version 2.92
Stronger Protection
o "Strong" (kernel-mode) supervision of cross-window communications. The Sandboxie driver now monitors window messages and window hooks.
o Global hooks are not allowed, and will be converted into per-process hooks that are applied only to processes in the same sandbox. If programs should be allowed to install global hooks, a new per-sandbox setting can undo this protection: BlockWinHooks=n
o Sandboxed processes are blocked from sending (most kinds of) messages to windows outside the sandbox, and cannot destroy such windows. If this is nonetheless desired, a new per-sandbox setting make it possible for a sandbox window to send messages to a particular class of non-sandbox windows: OpenWindowClass=classname
o A new GuiTrace setting traces windows messages, window classes, and window hooks: GuiTrace=ad
o An uncommon variation of a file access request was not checked by the Sandboxie driver in earlier versions. This security hole is closed.
o One more vulnerability related to directories was fixed.
o The system-management named pipes lsarpc, srvsvc, wkssvc, samr can be accessed by a sandboxed program, and this access is guaranteed to be non-Administrator. If you have these pipes listed in an OpenFilePath/OpenPipePath, to make some program work, it is suggested you remove them.
Better Usability
o This and future versions of Sandboxie can be updated and removed without a system restart. Note, if you are updating 2.9x on top of an earlier version of Sandboxie, you will have to restart in order to refresh the older Sandboxie.
o Sandboxed programs producing 'fake input' (such as mouse gesture tools producing 'keystrokes' for mouse movements) are not blocked, as long as the active window is sandboxed. The previously-available BlockFakeInput=n setting is now only needed if the sandboxed program should be able to send the fake input to a window outside its sandbox.
o When re-creating a deleted directory in the sandbox, the directory will always be created empty, even if the un-sandboxed counterpart directory contains files and sub-directories.
o The native Windows Explorer can run sandboxed, and the SandboxieExplorer replacment has been discontinued. As with SandboxieExplorer, the sandboxed Windows Explorer can 'cut' and 'copy' files, and these can be 'pasted' into the un-sandboxed Explorer.
o Explorer-like processes (Windows Explorer, Internet Explorer, and other shells) should no longer 'linger' in the sandbox after all their visible windows have been closed.
o The Sandboxie DLL SbieDll is now injected into a sandboxed process very early during initialization, which makes more programs usable under Sandboxie.
o Immediate Recovery will not suggest to recover .part files.
