Hasty Briefsbeta

Bilingual

Show HN: Bor – Open-source policy management for Linux desktops

4 hours ago
  • Bor v0.8.0 adds three new policy types: Thunderbird, Microsoft Edge for Business, and Firewalld zones.
  • The Thunderbird policy type allows managing Mozilla Thunderbird on enrolled desktops similar to Firefox ESR, with tamper protection.
  • The Microsoft Edge for Business policy type manages Edge on Linux by writing/removing a managed JSON file, with a tree-based editor in the web UI.
  • The Firewalld zone policy type manages firewalld zones on enrolled nodes, including services, ports, rules, and tamper protection.
  • Polkit rules now support variable conditions via action.lookup() and multiple action IDs are correctly joined with ||.
  • User and role administration uses per-action RBAC for finer-grained delegation.
  • The web UI has been overhauled: URL routing, full-page policy editor, safety rails, scalable lists, destructive-action protection, and WCAG 2.2 AA accessibility.
  • Policy catalogues (Firefox, Thunderbird, Chrome, Edge) are now proto-driven from protobuf annotations.
  • Security hardening includes strict mTLS binding, TOTP secret migration, SSRF protection, audit log CSV guard, no admin password in logs, auto TLS certificate regeneration, and resolved Dependabot alerts.
  • Platform updates: React 19.2, react-router 8.3, TypeScript typecheck in CI, dependency bumps including gRPC 1.82.1.
  • Upgrade notes: agents must be v0.8.0 for new policy types; protobuf schema changes; Node.js 22.22+ required for frontend dev.
  • Packages available for multiple Linux distributions and architectures.

Related

Loading…