Show HN: Bor – Open-source policy management for Linux desktops
4 hours ago
- Bor v0.8.0 adds three new policy types: Thunderbird, Microsoft Edge for Business, and Firewalld zones.
- The Thunderbird policy type allows managing Mozilla Thunderbird on enrolled desktops similar to Firefox ESR, with tamper protection.
- The Microsoft Edge for Business policy type manages Edge on Linux by writing/removing a managed JSON file, with a tree-based editor in the web UI.
- The Firewalld zone policy type manages firewalld zones on enrolled nodes, including services, ports, rules, and tamper protection.
- Polkit rules now support variable conditions via action.lookup() and multiple action IDs are correctly joined with ||.
- User and role administration uses per-action RBAC for finer-grained delegation.
- The web UI has been overhauled: URL routing, full-page policy editor, safety rails, scalable lists, destructive-action protection, and WCAG 2.2 AA accessibility.
- Policy catalogues (Firefox, Thunderbird, Chrome, Edge) are now proto-driven from protobuf annotations.
- Security hardening includes strict mTLS binding, TOTP secret migration, SSRF protection, audit log CSV guard, no admin password in logs, auto TLS certificate regeneration, and resolved Dependabot alerts.
- Platform updates: React 19.2, react-router 8.3, TypeScript typecheck in CI, dependency bumps including gRPC 1.82.1.
- Upgrade notes: agents must be v0.8.0 for new policy types; protobuf schema changes; Node.js 22.22+ required for frontend dev.
- Packages available for multiple Linux distributions and architectures.