wiresock/proxifyre v2.6.4

ProxiFyre 2.6.4

on GitHub

ProxiFyre 2.6.4 fixes the rejection of standard Program Files permissions, improves permission-error diagnostics, and strengthens the security checks used by the service engine and GUI launcher.

Highlights

• Program Files compatibility: protected directories with the standard inherited CREATOR OWNER entry are now accepted, fixing the misleading S-1-3-0 rejection reported in #184. Trusted ownership and protection against modification by standard users remain required.
• Clearer diagnostics: permission errors name common Windows identities and explain whether an entry is inherited or applies only to new files and subdirectories. The engine links to the ZIP staging instructions for the installed release.
• Stronger ACL validation: the engine examines the raw DACL, including object and conditional entries. The native launcher checks ACE and SID bounds before reading them. Both policies reject entries they cannot evaluate and preserve the restriction for inheritable OWNER RIGHTS entries.
• Regression coverage: dedicated native tests now exercise the launcher's ownership and ACL policy, including truncated entries. Local validation passed all 321 managed tests and 21 native launcher-policy tests.

Upgrading

Install the setup package matching your Windows architecture. The configuration format is unchanged, and installer upgrades preserve your configuration and logs.

For manual ZIP deployment, follow the protected staging procedure. Payload files owned by an individual account still fail the trusted-owner check; accepting the standard inherited directory entry does not remove that requirement.

Downloads

For a normal installation or upgrade, choose the online setup:

Standalone MSIs, application ZIPs, and SHA-256 checksums are also included. Use an MSI or ZIP only after the required .NET Framework, Visual C++ runtime, and Windows Packet Filter are installed; the ZIP is not an installer.

Implemented in PR #185.

Full changelog