{"id":157098,"date":"2026-02-05T17:11:56","date_gmt":"2026-02-05T15:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox"},"modified":"2026-02-05T17:11:56","modified_gmt":"2026-02-05T15:11:56","slug":"microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","title":{"rendered":"Microsoft vyv\u00edj\u00ed otev\u0159en\u00fd syst\u00e9m sandboxov\u00e9 izolace Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

James Morris, spr\u00e1vce subsyst\u00e9mu zaji\u0161t\u011bn\u00ed bezpe\u010dnosti j\u00e1dra Linux a vedouc\u00ed t\u00fdmu \u201eLinux Emerging Technologies\u201c ve spole\u010dnosti Microsoft, p\u0159edstavil projekt Litebox, kter\u00fd je ozna\u010dov\u00e1n jako bezpe\u010dnostn\u011b zam\u011b\u0159en\u00fd opera\u010dn\u00ed syst\u00e9m ve form\u011b knihovny (Library OS). Litebox m\u016f\u017ee b\u00fdt pou\u017e\u00edv\u00e1n v aplikac\u00edch nebo j\u00e1drech jako dodate\u010dn\u00e1 izola\u010dn\u00ed vrstva, kter\u00e1 blokuje p\u0159\u00edstup k nadbyte\u010dn\u00e9 funkcionalit\u011b jader nebo API pro sn\u00ed\u017een\u00ed plochy \u00fatoku. K\u00f3d projektu je naps\u00e1n v jazyce Rust a je otev\u0159en\u00fd pod licenc\u00ed MIT. <\/p>\n

My\u0161lenka \u201eLibrary OS\u201c spo\u010d\u00edv\u00e1 v tom, \u017ee slu\u017eby opera\u010dn\u00edho syst\u00e9mu jsou p\u0159\u00edmo integrov\u00e1ny do aplikace nam\u00edsto toho, aby se oz\u00fdvaly k extern\u00edmu j\u00e1dru OS prost\u0159ednictv\u00edm syst\u00e9mov\u00fdch vol\u00e1n\u00ed. V kontextu Liteboxu je k aplikac\u00edm p\u0159ipojena izola\u010dn\u00ed vrstva, kter\u00e1 poskytuje minim\u00e1ln\u00ed platformu, je\u017e p\u0159ekl\u00e1d\u00e1 po\u017eadavky na extern\u00ed pln\u011b funk\u010dn\u00ed programov\u00e9 rozhran\u00ed. Mezi takov\u00e1 extern\u00ed rozhran\u00ed mohou pat\u0159it j\u00e1dro Linux, chr\u00e1n\u011bn\u00e1 izolovan\u00e1 prost\u0159ed\u00ed OP-TEE (Open Portable Trusted Execution Environment), Webassembly prost\u0159ed\u00ed nebo standardn\u00ed knihovna RustStd.

\"Microsoft<\/center> <\/p>\n

The minimal platform formed through Litebox is applicable for running applications on Linux, Windows, and FreeBSD, nested Linux kernels, and LVBS (Linux Virtualization Based Security). Possible use cases for Litebox include enabling unmodified Linux programs to run on Windows, isolating the execution of Linux applications on systems with a Linux kernel, running programs above AMD SEV SNP for memory encryption, executing OP-TEE programs in Linux, and isolation using the LVBS concept. <\/p>\n

Projekt LVBS, jeho\u017e z\u00e1stupci se pod\u00edlej\u00ed na v\u00fdvoji Liteboxu, rozv\u00edj\u00ed metody pro ochranu komponent j\u00e1dra Linux, kter\u00e9 vyu\u017e\u00edvaj\u00ed mo\u017enosti hypervizor\u016f a hardwarov\u00e9 virtualizace. Nap\u0159\u00edklad pomoc\u00ed hypervizoru mohou b\u00fdt izolov\u00e1ny operace ov\u011b\u0159ov\u00e1n\u00ed autenti\u010dnosti modul\u016f, verifikace a spr\u00e1vy p\u0159\u00edstupu k hesl\u016fm, kl\u00ed\u010d\u016fm, struktur\u00e1m j\u00e1dra a dal\u0161\u00edm kriticky d\u016fle\u017eit\u00fdm zdroj\u016fm. V p\u0159\u00edpad\u011b zneu\u017eit\u00ed zranitelnosti a kompromitace j\u00e1dra \u00fato\u010dn\u00edk nedok\u00e1\u017ee z\u00edskat p\u0159\u00edstup k t\u011bmto zdroj\u016fm, proto\u017ee jejich obslu\u017en\u00e9 programy jsou prov\u00e1d\u011bny mimo aktu\u00e1ln\u00ed \u00farove\u0148 opr\u00e1vn\u011bn\u00ed. Litebox je v kontextu projektu LVBS pova\u017eov\u00e1n za \u201ebezpe\u010dn\u00e9 j\u00e1dro\u201c, kter\u00e9 chr\u00e1n\u00ed b\u011b\u017en\u00e9 j\u00e1dro hostitelsk\u00e9ho syst\u00e9mu pomoc\u00ed hardwarov\u00e9 virtualizace.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 «Linux Emerging Technologies», \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0435\u0440 \u0438\u043b\u0438 API \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":157099,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157098","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft vyv\u00edj\u00ed otev\u0159en\u00fd syst\u00e9m sandboxov\u00e9 izolace Litebox | ProHoster","description":"James Morris, spr\u00e1vce subsyst\u00e9mu zabezpe\u010den\u00ed j\u00e1dra Linux a vedouc\u00ed t\u00fdmu \"Linux Emerging Technologies\" ve spole\u010dnosti Microsoft, p\u0159edstavil projekt Litebox, kter\u00fd je prezentov\u00e1n jako.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 "Linux Emerging Technologies", \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-05T15:11:56+00:00","article:modified_time":"2026-02-05T15:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157098","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-05 15:12:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-05 15:11:57","updated":"2026-02-05 15:12:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/157098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=157098"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/157098\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/157099"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=157098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=157098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=157098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}