How to enable the new default EnableObjectFiltering?

[lwcorp]

In v1.0.16 / 5.55.16 "EnableObjectFiltering option is now on by default, although this only applies for new installations, hence its recommend for existing installation to go to settings->advanced and enable it explicitly."

However, there doesn't seem to be anything that is called either Settings or Advanced.

Does it actually mean Options=>Global Settings=>Advanced Config? But if so, the only Filtering option there is network access, which is not at all related to "sandboxie will not allow for PROCESS_VM_READ on unsandboxed processes or processes belonging to other boxes."

Alternatively, do "new installations" mean "new installations of actual sandboxes? I.e. does it mean Sandbox Options=>Advanced Options=>Isolation? If so, it doesn't seem to have anything that even contains the words Object or Filtering.

I've also created a new sandbox, but it had exactly the same settings in that screen.

Can you post a clear screenshot of how to enable EnableObjectFiltering in the UI?

[DavidXanatos]

Its in the global options:

[lwcorp]

Thanks! So is it about network access, not about "sandboxie will not allow for PROCESS_VM_READ on unsandboxed processes or processes belonging to other boxes"?

[DavidXanatos]

The only feature there about network is Windows Filtering PLatform
the other options are other things.
what you need os Activate Kernel Mode Object Fitlering

[lwcorp]

But as you can see in my previous screenshot Activate Kernel Mode Object Filtering was already activated in my existing installation. Is it because of using the portable version?

P.S.
Should "Windows Filtering PLatform" be on? It's only off because that must have been the default.

[bjm234]

@lwcorp
FWIW ~ as test: clean install Plus 1.0.17

1. Uninstall 1.0.15 + Remove configuration files
2. clean install Plus 1.0.17
   my Sandboxie Plus 1.0.17 clean install has two Global Settings boxes checked by default that were not checked with my prior new build over-installs.

System call hooking for Win32k system calls is now enabled by default, it is still used only for a hand full of calls currently, as required to get chromium Hardware Acceleration acceleration to work properly.

https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.4

[lwcorp]

If you see my original screenshot, it has the very same checkboxes even though it's not a clean install, which is my I started this discussion.
It was advertised as a "clean install-only" option and seemingly it's not.

[bjm234]

@lwcorp
The first time ... I noticed the two Global Settings enabled by default is after my 1.0.17 "clean install". My 1.0.15 did not have the two Global Settings enabled. Previously, for some time. All my new build installs were over-installs. I've been using same Sandboxie.ini for long time.
After reading this Topic. I got curious.

[DavidXanatos]

@lwcorp look it depands on the state of your previous install,

1. you could have enabled that earlier manually alleady
2. if you never changed any settings there, there would be no entry in the sandboxie ini and it would therefor take the new default.

Only if you have an existing install and changed settings that caused the n value to be written to the ini it would stay off, since i assumed that would be the majority case i wanted to bring the users attention to that and ensure thay would enable it.

[lwcorp]

2. if you never changed any settings there, there would be no entry in the sandboxie ini and it would therefor take the new default.

Oh, so that's what caused the confusion. The new version's statement caused to think it's expected to still be off for upgrades. You might want to edit it and mention "if you previously turned it off, it'll still be off after the upgrade. Otherwise it'll get enabled after the upgrade".