Bor

What it does

Bor is a fleet policy management product for Linux desktops and nodes, with an agent that enforces configuration and a web UI for managing policies and administration.

This release (v0.8.0) adds new policy types and expands the policy editing experience in the web UI. New policy types include Mozilla Thunderbird, Microsoft Edge for Business on Linux, and Firewalld zones. Thunderbird can be managed on enrolled desktops using the same mechanism used for Firefox ESR: the agent writes the managed policies.json file Thunderbird expects, merging settings from all bound policies, and removing the last policy restores the original file. The agent also detects and enforces Flatpak installations alongside RPM/DEB installations, and protects the managed file with a tamper watcher that detects external edits and immediately restores the managed version. The web UI includes a policy editor with the Thunderbird policy catalogue.

For Edge on Linux, the agent writes bor_managed.json into each Edge managed-policy directory and cleans it up from every directory when the last bound policy is removed. The web UI provides a tree-based editor with the Edge policy catalogue, JSON validation, and a setting preview before enabling.

For Firewalld, the new policy type manages zones on enrolled nodes (services, ports, forward ports, rich rules, masquerade, interfaces, sources, and the zone target). The agent writes zone XML into /etc/firewalld/zones/, validates the configuration with firewall-cmd --check-config, and reloads firewalld. Like other managed files, zone files are tamper-protected.

Administration and usability updates in v0.8.0 include finer-grained RBAC (user and role administration guarded by per-action permissions) and Polkit rule improvements (variable conditions via action.lookup(), and correct joining of multiple action IDs with ||). The web UI receives a full overhaul with URL routing and deep links, a full-page routed policy editor (/policies/:id/edit), safety rails (unsaved-changes guard, confirmations for destructive type changes, JSON validation for Chrome/Edge values, a read-only Configuration view for released policies, and setting previews), scalable server-side pagination/filtering/sorting for Nodes and Compliance lists, and destructive-action protections (including safeguards around the last Super Admin). Accessibility updates target WCAG 2.2 AA.

Security hardening in this release includes stricter agent identity binding to the mTLS client certificate, hardened MFA/RBAC enforcement paths, improved TOTP secret encryption migration, SSRF protections in Ubuntu PPA/Fedora COPR import helpers, audit log CSV export protections against spreadsheet formula injection, safer handling of the initial admin password, and automatic server TLS certificate regeneration when SANs no longer match configured hostnames.

Packages are available for Debian/Ubuntu, RHEL/Fedora/SUSE, Alpine Linux, and Arch Linux across x86_64, aarch64, and ppc64le. Agents must be upgraded to v0.8.0 to enforce the new policy types; older agents ignore policy types they do not understand.

S

Ship Stacks

Stop wiring boilerplate. Start shipping product.

▲ 5P

Peptides API

The intelligence layer for peptide research.

▲ 2C

cheapstack

Ship faster with affordable developer starter kits

▲ 1