Skip to content

Commit

Permalink
Last fixes and improvements
Browse files Browse the repository at this point in the history
  • Loading branch information
isaak654 committed Oct 17, 2023
1 parent 334f490 commit 0c2c154
Show file tree
Hide file tree
Showing 9 changed files with 44 additions and 39 deletions.
8 changes: 4 additions & 4 deletions Content/FeatureComparison.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,10 +26,10 @@ Starting with version 1.11.0, an [Advanced Encryption Pack](https://xanasoft.com
| ARM64 support | ![Red Color](https://placeholder.antonshell.me/img?width=15&color_bg=ff0000&text=+) No | ![Red Color](https://placeholder.antonshell.me/img?width=15&color_bg=ff0000&text=+) No | | ![Orange Color](https://placeholder.antonshell.me/img?width=15&color_bg=ff9900&text=+) Trial | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes |
| [RAM Disk integration](../PlusContent/RamDiskSupport.md) | ![Red Color](https://placeholder.antonshell.me/img?width=15&color_bg=ff0000&text=+) No | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes (no UI) | | ![Red Color](https://placeholder.antonshell.me/img?width=15&color_bg=ff0000&text=+) No | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes | ![Green Color](https://placeholder.antonshell.me/img?width=15&color_bg=00ff00&text=+) Yes |

\*) A personal type certificate, once expired, does not unlock features in builds compiled after its expiration date. Builds compiled before that time retain their exclusive unlocked features state.
\* A personal type certificate, once expired, does not unlock features in builds compiled after its expiration date. Builds compiled before that time retain their exclusive unlocked features state.

\*\*) Personal covers all devices you use yourself, so if you have a laptop and a desktop, one certificate covers both.
\*\* Personal covers all devices you use yourself, so if you have a laptop and a desktop, one certificate covers both.

\*\*\*) A family pack can be used for the entire family, it is not required for the family to live in the same household, so the certificate can be used for children who have moved out or your grandparents.
\*\*\* A family pack can be used for the entire family, it is not required for the family to live in the same household, so the certificate can be used for children who have moved out or your grandparents.

\*\*\*\*) For as long as the service exists.
\*\*\*\* For as long as the service exists.
2 changes: 1 addition & 1 deletion Content/FeatureComparisonOld.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Sandboxie Plus and Classic share the same core components, the main difference is that the Classic UI is no longer under development. Hence, a UI for new core functionality is only available in the SandMan UI of the Sandboxie Plus. Likewise, various other new features are only implemented in the SandMan UI. Another difference is that Sandboxie Plus is provided under a [custom license](https://github.com/sandboxie-plus/Sandboxie/blob/master/Installer/license.txt), while Sandboxie Classic is provided under a [GPL-3.0+ license](https://github.com/sandboxie-plus/Sandboxie/blob/master/LICENSE).

Some exclusive functionality is only available to project supporters with a valid [Supporter Certificate](https://sandboxie-plus.com/supporter-certificate/).
<br> Please note that a Business Certificate is required to use Sandboxie Plus in a commercial or educational setting!
<br>Please note that a Business Certificate is required to use Sandboxie Plus in a commercial or educational setting!

| ⚠️ Warning |
|:------------------|
Expand Down
10 changes: 5 additions & 5 deletions Content/Sandboxie.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# SANDBOXIE
# Sandboxie

Tired of dealing with rogue software, spyware and malware? Spent too many hours removing unsolicited software? Worried about clicking unfamiliar Web links?

Expand All @@ -7,16 +7,16 @@ Tired of dealing with rogue software, spyware and malware? Spent too many hours
Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer.

![](../Media/FrontPageAnimation.gif)

<br>
![](../Media/FrontPageLegend.png)

The red arrows indicate changes flowing from a running program into your computer. The box labeled Hard disk (no sandbox) shows changes by a program running normally. The box labeled Hard disk (with sandbox) shows changes by a program running under Sandboxie. The animation illustrates that Sandboxie is able to intercept the changes and isolate them within a sandbox, depicted as a yellow rectangle. It also illustrates that grouping the changes together makes it easy to delete all of them at once.
The red arrows indicate changes flowing from a running program into your computer. The box labeled _Hard disk (no sandbox)_ shows changes by a program running normally. The box labeled _Hard disk (with sandbox)_ shows changes by a program running under Sandboxie. The animation illustrates that Sandboxie is able to intercept the changes and isolate them within a **sandbox**, depicted as a yellow rectangle. It also illustrates that grouping the changes together makes it easy to delete all of them at once.

## Benefits of the Isolated Sandbox

* Secure Web Browsing: Running your Web browser under the protection of Sandboxie means that all malicious software downloaded by the browser is trapped in the sandbox and can be discarded trivially.
* Enhanced Privacy: Browsing history, cookies, and cached temporary files collected while Web browsing stay in the sandbox and don\\'t leak into Windows.
* Secure E-mail: Viruses and other malicious software that might be hiding in your email can\\'t break out of the sandbox and can\\'t infect your real system.
* Enhanced Privacy: Browsing history, cookies, and cached temporary files collected while Web browsing stay in the sandbox and don't leak into Windows.
* Secure E-mail: Viruses and other malicious software that might be hiding in your email can't break out of the sandbox and can't infect your real system.
* Windows Stays Lean: Prevent wear-and-tear in Windows by installing software into an isolated sandbox.

**[Download Sandboxie now](https://github.com/sandboxie-plus/Sandboxie/releases/latest) and give it a try!**
Expand Down
4 changes: 1 addition & 3 deletions Content/UsePrivacyMode.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,6 @@
# Privacy Mode

_UsePrivacyMode_ is a box type preset available since v1.0.0 / 5.55.0.

It is also a sandbox setting in [Sandboxie Ini](SandboxieIni.md).
_UsePrivacyMode_ is a sandbox setting in [Sandboxie Ini](SandboxieIni.md) available since v1.0.0 / 5.55.0.

Usage:

Expand Down
7 changes: 1 addition & 6 deletions PlusContent/Plus-Features.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,6 @@ Some of these features (*) are however only available to users with a [Support C

Some more features (**) are available to participants of the [Sandboxie-Insider](../PlusContent/Sandboxie-Insider.md) program.


#### [Rule Specificity](../PlusContent/RuleSpecificity.md) *
- With this option rules are prioritized based on their specificity (see changelog/docs for details) this way sub paths can be readable/writeable while parent parts are still protected.

Expand All @@ -13,6 +12,7 @@ Some more features (**) are available to participants of the [Sandboxie-Insider]
- Restrict syscall elevation to approved known safe / filtered syscalls
- Limit access to device endpoints to known safe / filtered endpoints


#### [Privacy enhanced sandboxes](../PlusContent/privacy-mode.md) *
- With this feature, by applying a preset rule collection, all locations potentially containing personal data can be protected. Applications running in boxes with personal data protection will see an empty PC with no user data on it.

Expand All @@ -26,13 +26,11 @@ Some more features (**) are available to participants of the [Sandboxie-Insider]
- [Encrypted Box Image support](../PlusContent/BoxEncryption.md) is currently in development and allows you to create encrypted sandboxed environments for an even greater protection of your confidential data. With this feature the box file root is being mounted from an AES-XTS encrypted box image, other ciphers are available as well. Upcoming additions to this root functionality will contain secure box passphrase handling and a driver extension to prevent applications not running in the encrypted sandbox from accessing the sandboxed files.



#### Enhanced network filtering and redirection **
- [Proxy injection](../PlusContent/ProxySupport.md) is yet another feature which has been added in the insider builds, it allows to force any application to use a Socks 5 proxy instead of a direct connection.
- [DNS query logging, filtering and redirection](../PlusContent/DNSFilter.md) feature allows you to block, or redirect DNS queries made by sandboxed programs for selected domains.



#### [WFP (Windows Filtering Platform) support](../PlusContent/WFPSupport.md)
- With this feature, Sandboxie can be like an application firewall which applies the rules on a per-sandbox basis, allowing the same application access to Internet in one box while blocking it in another.

Expand Down Expand Up @@ -83,7 +81,6 @@ Some more features (**) are available to participants of the [Sandboxie-Insider]

#### [Breakout Process](../Content/BreakoutProcess.md)
- Allows to specify which applications shall run unsandboxed when launched within the sandbox. A combination of this and ForceProcess allows for a simple priority system.

- [Document Breakout](../Content/BreakoutDocument.md) is an extension to the already well-known Breakout mechanism to allow to open selected file types saved to an open file path from within the sandbox in an unsandboxed instance of the associated application. **


Expand All @@ -100,5 +97,3 @@ Some more features (**) are available to participants of the [Sandboxie-Insider]
- Support emulated x86
- Support emulated x64 (ARM64EC)



4 changes: 2 additions & 2 deletions PlusContent/RamDiskSupport.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,13 +18,13 @@ To fully embrace the potential of RAM Disk Support, follow these straightforward

### Updating Sandbox Configuration:

Open the Sandboxie.ini configuration file for the sandbox you wish to enhance. To enable the RAM Disk for this sandbox, include the following line within the respective sandbox's section:
Open the **[Sandboxie Ini](../Content/SandboxieIni.md)** configuration file for the sandbox you wish to enhance. To enable the RAM Disk for this sandbox, include the following line within the respective sandbox's section:

UseRamDisk=y

### Configuring Global Settings:

To enable RAM Disk Support across all your sandboxes, navigate to the [GlobalSettings] section within the Sandboxie.ini file. Allocate the appropriate memory for the RAM Disk by adding this line:
To enable RAM Disk Support across all your sandboxes, navigate to the [GlobalSettings] section within the **[Sandboxie Ini](../Content/SandboxieIni.md)** file. Allocate the appropriate memory for the RAM Disk by adding this line:

RamDiskSizeKb=2097152

Expand Down
18 changes: 10 additions & 8 deletions PlusContent/Sandboxie-Insider.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
The Sandboxie-Plus Insider Program provides early access to new features and functionality that are not yet available to the public.
The Sandboxie Plus Insider Program provides early access to new features and functionality that are not yet available to the public.

To become a participant in the Insider Program and gain access to the private Github repository with new releases, you must contribute to the project in a meaningful way, such as by helping with documentation, development, providing translations, or by submitting exceptional bug reports. Alternatively, you can support the project on Patreon at the GREAT tier or above. All users with CONTRIBUTOR or HUGE certificates are automatically eligible.
To become a participant in the Insider Program and gain access to the private GitHub repository with new releases, you must contribute to the project in a meaningful way, such as by helping with documentation, development, providing translations, or by submitting exceptional bug reports. Alternatively, you can support the project on Patreon at the GREAT tier or above. All users with CONTRIBUTOR or HUGE certificates are automatically eligible.

The insider builds introduce several new features that are designed to improve the Sandboxie experience and enhance the security of your system:

Expand All @@ -9,17 +9,19 @@ The insider builds introduce several new features that are designed to improve t
- [Encrypted Box Image support](../PlusContent/BoxEncryption.md) is currently in development and allows you to create encrypted sandboxed environments for an even greater protection of your confidential data. With this feature the box file root is being mounted from an AES-XTS encrypted box image, other ciphers are available as well. Upcoming additions to this core functionality will contain secure box passphrase handling and a driver extension to prevent applications not running in the encrypted sandbox from accessing the sandboxed files.

- [Proxy injection](../PlusContent/ProxySupport.md) is yet another feature which has been added in the insider builds, it allows to force any application to use a Socks 5 proxy instead of a direct connection.

- [DNS query logging, filtering and redirection](../PlusContent/DNSFilter.md) feature allows you to block, or redirect DNS queries made by sandboxed programs for selected domains.

- [USB drive sandboxing](../PlusContent/USBSandboxing.md) is yet another new feature that has been added to the Insider builds. This feature allows you to automatically sandbox any USB drive that you plug into your computer, which adds an extra layer of protection to your system.

- Insider builds include support for EFS, which is a feature in Windows that allows you to encrypt files and folders to protect them from unauthorized access.

- [Document BreakOut](../Content/BreakoutDocument.md) is an extension to the already well-known Breakout mechanism to allow to open selected file types saved to an open file path from within the sandbox in an unsandbox instance of the associated application.
- [Document Breakout](../Content/BreakoutDocument.md) is an extension to the already well-known Breakout mechanism to allow to open selected file types saved to an open file path from within the sandbox in an unsandbox instance of the associated application.

Please note that the Sandboxie-Plus insider builds are not like the Windows insider builds which are buggy and rushed.
The new things in the insider builds are limited to new functionality and new features.
Experimental things that may impact compatibility are tested in the public Github preview channel.
The Sandboxie-Plus insider builds are based on stable final releases, with new functionality added on top.
The insider builds are compiled with Qt6 and provided as a unified x64/ARM64 installer.
Please note that:
- The Sandboxie Plus insider builds are not like the Windows insider builds which are buggy and rushed.
- The new things in the insider builds are limited to new functionality and new features.
- Experimental things that may impact compatibility are tested in the public GitHub preview channel.
- The Sandboxie Plus insider builds are based on stable final releases, with new functionality added on top.
- The insider builds are compiled with Qt6 and provided as a unified x64/ARM64 installer.

24 changes: 17 additions & 7 deletions PlusContent/Sandboxie-Live.md
Original file line number Diff line number Diff line change
@@ -1,18 +1,28 @@
Sandboxie-Live is a fast update service (stable channel) for project supporters (users with a supporter certificate) and/or adventures people (preview channel) wanting to try out the latest fixes and discover the newest bugs.
Sandboxie-Live is a fast update service (stable channel) for project supporters (users with a supporter certificate) and/or adventurous people (preview channel) wanting to try out the latest fixes and discover the newest bugs.

On the "Support Tab" in the "Global Options" the user can now choose from the following release channels:
In the "Support & Updates" tab in the "Global Options", the user can now choose from the following release channels:

![grafik](https://user-images.githubusercontent.com/3890945/208420986-d28373f1-8584-4455-ae39-83d2e9eec78d.png)

1. Stable - GitHub Releases
2. Preview - GitHub Pre-Releases

There the user can also select how to behave when a "New Version" (where an installer is available) or a "Version Update" (where only individual files of the existing installation will be updated) is found.
For a "New Version" the following options are available: Notify, Download & Notify, Download & Install
For a "Version Update" the following options are available: Ignore, Notify, Download & Notify, Download & Install
There is no "Ignore" option for "New Version" as that is covered by disabling check for updates.

In the "Stable" channel check for "Version Update" is only available to supporters with a valid certificate. In this channel all updates are signed and consists of the latest compatibility templates and urgent bug-fixes and translations.
For a "New Version", the following options are available:
- Notify
- Download & Notify
- Download & Install

In the "Preview" channel the "Version Update" consist of unsigned test builds (except the signed driver) released every few days (like for example 1.6.0,1.6.1a and 1.6.1b) as here the updates contain not only half tested fixes but also new functionality which may not yet be free of bugs.
For a "Version Update", the following options are available:
- Ignore
- Notify
- Download & Notify
- Download & Install

There is no "Ignore" option for "New Version", as that is covered by disabling the update check.

In the "Stable" channel, a check for "Version Update" is only available to supporters with a valid certificate. In this channel, all updates are signed and consist of the latest compatibility templates and urgent bug-fixes and translations.

In the "Preview" channel, the "Version Update" consists of unsigned test builds (except the signed driver) released every few days (like 1.6.0, 1.6.1a and 1.6.1b), as here the updates contain not only half-tested fixes but also new functionality which may not yet be free of bugs.

Loading

0 comments on commit 0c2c154

Please sign in to comment.