sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.63k stars 1.52k forks source link

HideProcessAndCopyOnReadAndBlockAccessWMITemplateAndExtendTempTemplateAndUiForLimitAndNewBoxTypeAndBlockLocalConnectTemplate #3949

Closed love-code-yeyixiao closed 3 months ago

love-code-yeyixiao commented 4 months ago
  1. Add feature to hide unsandboxed processes.(Successful)
  2. Add feature "CopyOnOpen" in order to migrate files while it only read a file.(Wait fixing,but not affect programs now,so it could merge into master branch.I have no idea fixing it up at this time.)
  3. Add template "BlockAccessWMI" to avoid program getting system deatils or bypass hiding processes through WMI.
  4. Extend the feature which delete temportry templates automantic when a box closed,make it could delete Local template refernce and itself(The latter didn't work well yet,it delete refernces but not include section in Sandboxie.ini)
  5. Add UI for memory and number limits.
  6. Add new box type "Maximize isolation sandbox"
  7. Add new template "Block Local Connect"
  8. Add code for issue #3975
offhub commented 4 months ago

How does the HideInteractionProcess setting differ from the HideHostProcess setting?

love-code-yeyixiao commented 4 months ago

How does the HideInteractionProcess setting differ from the HideHostProcess setting?

The latter requires the process name to be specified manually, but this setting is intended to override possible user processes in all environments with only one setting.

offhub commented 3 months ago

-1) This setting also hides system processes outside the sandbox. (is it bug?)

-5) It's not functional.

love-code-yeyixiao commented 3 months ago

-1) This setting also hides system processes outside the sandbox. (is it bug?)

-5) It's not functional.

For 1,there was an accident with Sid's comparison, so I finally changed Changelog to wait for a better solution in the future.

For 5,it's just that the UI is disabled by default, and I'm looking for a time to fix this (possibly on the weekend) ,you can try the native version and clicked a checkbox then see if the editbox be enabled.