Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Several Parameters #187

Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Add Several Parameters #187

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
6d6cf24
Commit Changes
zihu12 Sep 16, 2024
e38d84a
[pre-commit.ci] auto-fixes from pre-commit hooks
pre-commit-ci[bot] Sep 16, 2024
3f12805
Update AllPages.md
zihu12 Sep 16, 2024
a66dbdb
Update docs/Content/HideNonSystemProcesses.md
zihu12 Sep 16, 2024
58d3344
Apply suggestions from code review
zihu12 Sep 16, 2024
febd984
Apply suggestions from code review
zihu12 Sep 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions docs/Content/AllPages.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,8 @@

[Cover Boxed Windows](CoverBoxedWindows.md)

[Custom Locale/LangID](CustomLCID.md)

### D

[Delete Command](DeleteCommand.md)
Expand Down Expand Up @@ -186,12 +188,22 @@

[Help Topics](HelpTopics.md)

[Hide Disk Serial Number](HideDiskSerialNumber.md)

[Hide Firmware Info](HideFirmwareInfo.md)

[Hide Host Process](HideHostProcess.md)

[Hide Message](SbieCtrl_HideMessage.md)

[Hide Network Adapter MAC Address](HideNetworkAdapterMAC.md)

[Hide Non System Processes](HideNonSystemProcesses.md)

[Hide Other Boxes](HideOtherBoxes.md)

[Hide Sandboxie Processes](HideSbieProcesses.md)

[How It Works](HowitWorks.md)

[How To Use Win Dbg](HowToUseWinDbg.md)
Expand Down Expand Up @@ -328,6 +340,8 @@

[RAM Disk Support](../PlusContent/RamDiskSupport.md)

[Random Registry UID](RandomRegUID.md)

[Ransomware](Ransomware.md)

[Read File Path](ReadFilePath.md)
Expand Down
17 changes: 17 additions & 0 deletions docs/Content/CustomLCID.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
# Custom Locale/LangID

CustomLCID is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
CustomLCID=1033
```

It accepts one Decimal parameter as the [LCID](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-lcid/70feba9f-294e-491e-b6eb-56532684c37f) of the language/locale desired. If set to 0, system default will be used.

Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > Custom Locale/LangID

Note: You may determine the desired value by converting the Hexadecimal values to Decimal, or you may find them [there](https://learn.microsoft.com/en-us/openspecs/office_standards/ms-oe376/6c085406-a698-4e12-9d4d-c3b0ee3dbc4a).
15 changes: 15 additions & 0 deletions docs/Content/HideDiskSerialNumber.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Hide Disk Serial Number

HideDiskSerialNumber is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
HideDiskSerialNumber=y
```

Use the 'HideDiskSerialNumber=y' option to return random value when applications try to get disk serial number.
zihu12 marked this conversation as resolved.
Show resolved Hide resolved

Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > Hide Disk Serial Number
15 changes: 15 additions & 0 deletions docs/Content/HideFirmwareInfo.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Hide Firmware Info

HideFirmwareInfo is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
HideFirmwareInfo=y
```

Use the 'HideFirmwareInfo=y' option to return the SMBiosTable value in HKCU\System\SbieCustom as firmware information. When enabled, the sandbox entry (if exist) will be prioritized, then the one in the host system.

Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > Hide Firmware Info
15 changes: 15 additions & 0 deletions docs/Content/HideNetworkAdapterMAC.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Hide Network Adapter MAC Address

HideNetworkAdapterMAC is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
HideNetworkAdapterMAC=y
```

Use the 'HideNetworkAdapterMAC=y' option to return random value when applications try to get network adapter MAC address.
zihu12 marked this conversation as resolved.
Show resolved Hide resolved

Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > Hide Network Adapter MAC Address
17 changes: 17 additions & 0 deletions docs/Content/HideNonSystemProcesses.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
# Hide Non System Processes

HideNonSystemProcesses is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
HideNonSystemProcesses=y
```

Use the 'HideNonSystemProcesses=y' option to not allow sandboxed processed see processes running outside any boxes.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Use the 'HideNonSystemProcesses=y' option to not allow sandboxed processed see processes running outside any boxes.
Use the 'HideNonSystemProcesses=y' option to prevent sandboxed processed from seeing processes running outside the sandbox.

Copy link
Contributor Author

@zihu12 zihu12 Sep 18, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image

with HideSbieProcesses=y and HideOtherBoxes=n the process in one box can see process in another box, so maybe not "outside the sandbox"?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also the text in GUI says "outside any boxes"

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#187 (comment)

@DavidXanatos


Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > Hide Non System Processes

Related [Sandboxie Ini](SandboxieIni.md) setting: [HideHostProcess](HideHostProcess.md), [HideSbieProcesses](HideSbieProcesses.md)
15 changes: 15 additions & 0 deletions docs/Content/HideSbieProcesses.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Hide Sandboxie Processes

HideSbieProcesses is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
HideSbieProcesses=y
```

Use the 'HideSbieProcesses=y' option to hide Sandboxie Work Process (SbieSvc, SandboxieRpcSs etc.)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Use the 'HideSbieProcesses=y' option to hide Sandboxie Work Process (SbieSvc, SandboxieRpcSs etc.)
Use the 'HideSbieProcesses=y' option to hide Sandboxie worker processes (SbieSvc, SandboxieRpcSs etc.)

For this line, I would like to ask for extra confirmation from @offhub, because if confirmed, it may require a fix in the changelog.

Copy link
Contributor Author

@zihu12 zihu12 Sep 18, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably so, as changelog says as my text suggests.
FYI I have made some screenshots as follows(standard non-admin with HideNonSystemProcesses=y):
with HideSbieProcesses=n:
image
and with HideSbieProcesses=y:
image

Copy link
Collaborator

@offhub offhub Sep 18, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Setting HideSbieProcesses=y hides processes with names that start with "Sandboxie" or "Sbie" from sandboxed applications, regardless of their sandboxed status. code

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#187 (comment)

@DavidXanatos


Related [Sandboxie Ini](SandboxieIni.md) setting: [HideHostProcess](HideHostProcess.md),[HideNonSystemProcesses](HideNonSystemProcesses.md)
15 changes: 15 additions & 0 deletions docs/Content/RandomRegUID.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Random Registry UID

RandomRegUID is a sandbox setting in [Sandboxie Ini](SandboxieIni.md).

```
.
.
.
[DefaultBox]
RandomRegUID=y
```

Use the 'RandomRegUID=y' option to obfuscate known unique identifier in registry.
zihu12 marked this conversation as resolved.
Show resolved Hide resolved

Related Sandboxie Plus setting: Sandbox Options > Advanced Options > Privacy > obfuscate known unique identifier in registry