Bor v0.8.0 Brings Group-Policy-Style Fleet Management to Linux Desktops
Released August 2 by Blagovest Petrov via vute.tech (55 points on HN), Bor centrally manages configuration policy across enrolled Linux desktops, with a local agent that writes managed config files and automatically detects and restores tampered ones. v0.8.0 adds Thunderbird policies mirroring the existing Firefox ESR support, Microsoft Edge for Business configuration on Linux, and firewalld zone management. The security pass is the substantive part: stricter mTLS certificate binding, migration from legacy SHA-256 to HKDF-derived encryption, SSRF protection in repository helpers, spreadsheet formula injection prevention in audit exports, and automatic TLS certificate regeneration. Frontend moved to React 19.2 with react-router 8.3, backend to gRPC 1.82.1.
↳ Follow the thread