Merge remote-tracking branch 'upstream/master'

This commit is contained in:
typpos 2021-02-16 10:46:00 +11:00
commit c5a890dac9
3 changed files with 2942 additions and 2989 deletions

View File

@ -16,24 +16,24 @@ This project adheres to [Semantic Versioning](http://semver.org/).
### Added
- sandboxed indicator for tray icons, the tooltip now contains [#] if enabled
- the trace log buffer can now be adjusted with "TraceBufferPages=2560"
-- the value denotes the count of 4k large pages to be used, here for a total of 10 MB
- new functionality to the list finder
-- the value denotes the count of 4K large pages to be used; here for a total of 10 MB
- new functionality for the list finder
### Changed
- improved RPC debugging
- improved IPC handling around RpcMgmtSetComTimeout, "RpcMgmtSetComTimeout=n" is now the default behavioure
-- required exceptions have been hard coded for specific calling dll's
- the LogApi dll is now using Sbies tracing facility to logg events instead of an own pipe server
- improved IPC handling around RpcMgmtSetComTimeout; "RpcMgmtSetComTimeout=n" is now the default behaviour
-- required exceptions have been hard-coded for specific calling DLLs
- the LogApi dll is now using Sbie's tracing facility to log events instead of its own pipe server
### Fixed
- FIXED SECURITY ISSUE: elevated sandboxed processes could access volumes/disks for reading (thanks hg421)
- fixed crash issue around SetCurrentProcessExplicitAppUserModelID observed with GoogleUpdate.exe
- fixed issue with resource monitor sort by timestamp
- FIXED SECURITY ISSUE: a race condition in the driver allowed to obtain a elevated rights handle to a process (thanks typpos)
- FIXED SECURITY ISSUE: a race condition in the driver allowed to obtain an elevated rights handle to a process (thanks typpos)
- FIXED SECURITY ISSUE: "\RPC Control\samss lpc" is now filtered by the driver (thanks hg421)
-- this allowed elevated processes to change passwords, delete users and alike, to disable filtering use "OpenSamEndpoint=y"
-- this allowed elevated processes to change passwords, delete users and alike; to disable filtering use "OpenSamEndpoint=y"
- FIXED SECURITY ISSUE: "\Device\DeviceApi\CMApi" is now filtered by the driver (thanks hg421)
-- this allowed elevated processes to change hardware configuration, to disable filtering use "OpenDevCMApi=y"
-- this allowed elevated processes to change hardware configuration; to disable filtering use "OpenDevCMApi=y"

View File

@ -282,7 +282,7 @@ SB_STATUS CSbieAPI::Connect(bool withQueue)
#ifndef _DEBUG
// Note: this lib is not using all functions hence it can be compatible with multiple driver ABI revisions
QStringList CompatVersions = QStringList () << "5.45.0" << "5.46.0";
QStringList CompatVersions = QStringList () << "5.48.0";
QString CurVersion = GetVersion();
if (!CompatVersions.contains(CurVersion))
{

View File

@ -1,21 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE TS>
<TS version="2.1" language="de_DE">
<context>
<name>CApiMonModel</name>
<message>
<source>Process</source>
<translation type="vanished">Prozess</translation>
</message>
<message>
<source>Time Stamp</source>
<translation type="vanished">Zeitstempel</translation>
</message>
<message>
<source>Message</source>
<translation type="vanished">Nachricht</translation>
</message>
</context>
<context>
<name>CMultiErrorDialog</name>
<message>
@ -533,7 +518,7 @@
File name: %3</source>
<oldsource>Do you want to allow %4 (%5) to copy a %1 large file into sandbox: %2?
File name: %3</oldsource>
<translation type="unfinished">Möchten Sie %4 (%5) erlauben eine %1 große Datei in die Sandbox: %2 zu kopieren?
<translation>Möchten Sie %4 (%5) erlauben eine %1 große Datei in die Sandbox: %2 zu kopieren?
Dateiname: %3</translation>
</message>
<message>
@ -542,7 +527,7 @@ Dateiname: %3</translation>
Full path: %3</source>
<oldsource>Do you want to allow %1 (%2) access to the internet?
Full path: %3</oldsource>
<translation type="unfinished">Möchten Sie %1 (%2) den Zugriff auf das Internet erlauben?
<translation>Möchten Sie %1 (%2) den Zugriff auf das Internet erlauben?
Vollständiger Pfad: %3</translation>
</message>
<message>
@ -551,7 +536,7 @@ Vollständiger Pfad: %3</translation>
The file was written by: %3</source>
<oldsource>%1 is eligible for quick recovery from %2.
The file was written by: %3</oldsource>
<translation type="unfinished">%1 ist zur Schnellwiederherstellung aus %2 berechtigt.
<translation>%1 ist zur Schnellwiederherstellung aus %2 berechtigt.
Die Datei wurde geschrieben durch: %3</translation>
</message>
<message>
@ -560,7 +545,7 @@ Die Datei wurde geschrieben durch: %3</translation>
Full path: %4</source>
<oldsource>Migrating a large file %1 into the sandbox %2, %3 left.
Full path: %4</oldsource>
<translation type="unfinished">Übertrage große Datei %1 in die Sandbox %2, %3 verbleiben.
<translation>Übertrage große Datei %1 in die Sandbox %2, %3 verbleiben.
Vollständiger Pfad: %4</translation>
</message>
<message>
@ -663,7 +648,7 @@ Vollständiger Pfad: %4</translation>
<message>
<location filename="SbiePlusAPI.cpp" line="145"/>
<source>Empty</source>
<translation type="unfinished"></translation>
<translation>Leer</translation>
</message>
<message>
<location filename="SbiePlusAPI.cpp" line="148"/>
@ -884,7 +869,7 @@ Vollständiger Pfad: %4</translation>
<message>
<location filename="SandMan.cpp" line="406"/>
<source>Cleanup Trace Log</source>
<translation type="unfinished"></translation>
<translation>Rückverfolgungsprotokoll aufräumen</translation>
</message>
<message>
<location filename="SandMan.cpp" line="626"/>
@ -956,10 +941,6 @@ Vollständiger Pfad: %4</translation>
<source>Resource Logging</source>
<translation>Ressourcenprotokollierung</translation>
</message>
<message>
<source>API Call Logging</source>
<translation type="vanished">API Aufrufprotokollierung</translation>
</message>
<message>
<location filename="SandMan.cpp" line="427"/>
<source>&amp;Help</source>
@ -1088,12 +1069,6 @@ Vollständiger Pfad: %4</translation>
<source>The changes will be applied automatically as soon as the editor is closed.</source>
<translation>Die Änderungen werden automatisch angewendet, sobald der Editor geschlossen wird.</translation>
</message>
<message>
<source>To use API logging you must first set up the LogApiDll from https://github.com/sandboxie-plus/LogApiDll with one or more sandboxes.
Please download the latest release and set it up with the Sandboxie.ini as instructed in the README.md of the project.</source>
<translation type="vanished">Um die API Protokollierung zu nutzen, muss die LogApiDll von https://github.com/sandboxie-plus/LogApiDll mit einer oder mehrerer Box(en) eingerichtet werden.
Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der README.md des Projekts in der Sandboxie.ini einrichten.</translation>
</message>
<message>
<location filename="SandMan.cpp" line="1522"/>
<source>Error Status: %1</source>
@ -1239,10 +1214,6 @@ Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der R
<source>Don&apos;t show this announcement in the future.</source>
<translation>Diese Ankündigung zukünftig nicht mehr zeigen.</translation>
</message>
<message>
<source>Ignore this update, notify me about the next one.</source>
<translation type="vanished">Dieses Update ignorieren, über das nächste Update benachrichtigen.</translation>
</message>
<message>
<location filename="SandMan.cpp" line="1849"/>
<source>No new updates found, your Sandboxie-Plus is up-to-date.</source>
@ -1300,10 +1271,6 @@ Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der R
<source>Sbie Directory: %1</source>
<translation>Sbie Ordner: %1</translation>
</message>
<message>
<source>Api Call Log</source>
<translation type="vanished">API Aufrufprotokoll</translation>
</message>
<message>
<location filename="SandMan.cpp" line="403"/>
<source>Cleanup Processes</source>
@ -1314,16 +1281,6 @@ Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der R
<source>Cleanup Message Log</source>
<translation>Nachrichtenprotokoll aufräumen</translation>
</message>
<message>
<source>Cleanup Resource Log</source>
<translation type="vanished">Ressourcenprotokoll aufräumen</translation>
</message>
<message>
<location filename="SandMan.cpp" line="403"/>
<source>Cleanup Processes</source>
<oldsource>Cleanup Api Call Log</oldsource>
<translation type="unfinished">API Aufrufprotokoll aufräumen</translation>
</message>
<message>
<location filename="SandMan.cpp" line="455"/>
<source>Cleanup</source>
@ -1369,10 +1326,6 @@ Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der R
<source>Login Failed: %1</source>
<translation>Login fehlgeschlagen: %1</translation>
</message>
<message>
<source>No sandboxes found; creating: %1</source>
<translation type="vanished">Keine Sandbox(en) gefunden; erstelle: %1</translation>
</message>
<message>
<location filename="SandMan.cpp" line="1223"/>
<source>Executing maintenance operation, please wait...</source>
@ -1572,7 +1525,7 @@ Bitte die neuste Version herunterladen und entsprechend der Anweisungen in der R
<message>
<location filename="Views/SbieView.cpp" line="75"/>
<source>Run Cmd.exe as Admin</source>
<translation type="unfinished"></translation>
<translation>Cmd.exe als Administrator starten</translation>
</message>
<message>
<location filename="Views/SbieView.cpp" line="78"/>
@ -2582,7 +2535,7 @@ an Stelle von &quot;*&quot;.</translation>
<message>
<location filename="Forms/OptionsWindow.ui" line="1656"/>
<source>Log all SetError&apos;s to Trace log</source>
<translation type="unfinished"></translation>
<translation>Protokolliere alle SetError ins Rückverfolgungsprotokoll</translation>
</message>
<message>
<location filename="Forms/OptionsWindow.ui" line="1787"/>