{"id":183688,"date":"2026-10-08T10:54:10","date_gmt":"2026-10-08T08:54:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/microsoft-opublikoval-pervyj-vypusk-otkrytoj-sistemy-sandbox-izolyaczii-litebox"},"modified":"2026-10-08T10:54:14","modified_gmt":"2026-10-08T08:54:14","slug":"microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","title":{"rendered":"Microsoft vydal prvn\u00ed verzi otev\u0159en\u00e9ho syst\u00e9mu sandboxov\u00e9 izolace Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Microsoft vytvo\u0159ila prvn\u00ed verzi projektu Litebox, kter\u00fd vyv\u00edj\u00ed bezpe\u010dnostn\u011b zam\u011b\u0159en\u00fd opera\u010dn\u00ed syst\u00e9m ve form\u011b knihovny (Library OS). Tento p\u0159\u00edstup umo\u017e\u0148uje, aby slu\u017eby opera\u010dn\u00edho syst\u00e9mu byly p\u0159\u00edmo integrov\u00e1ny do aplikace, m\u00edsto aby volaly extern\u00ed j\u00e1dro opera\u010dn\u00edho syst\u00e9mu prost\u0159ednictv\u00edm syst\u00e9mov\u00fdch vol\u00e1n\u00ed. Litebox m\u016f\u017ee b\u00fdt pou\u017e\u00edv\u00e1n v aplikac\u00edch nebo j\u00e1drech jako dal\u0161\u00ed izola\u010dn\u00ed vrstva, kter\u00e1 blokuje p\u0159\u00edstup k nadbyte\u010dn\u00e9 funkcionalit\u011b jader nebo API. K\u00f3d projektu je naps\u00e1n v jazyce Rust a je otev\u0159en pod licenc\u00ed MIT. <\/p>\n

Litebox poskytuje p\u0159ipojitelnou knihovnu pro aplikace s izola\u010dn\u00ed vrstvou, kter\u00e1 prov\u00e1d\u00ed p\u0159eklad po\u017eadavk\u016f na extern\u00ed programov\u00e9 rozhran\u00ed. T\u011bmito extern\u00edmi rozhran\u00edmi mohou b\u00fdt j\u00e1dro Linux, chr\u00e1n\u011bn\u00e1 izolovan\u00e1 prost\u0159ed\u00ed OP-TEE (Open Portable Trusted Execution Environment), Webassembly prost\u0159ed\u00ed nebo standardn\u00ed knihovna RustStd. <\/p>\n

Minimalistick\u00e1 platforma vytv\u00e1\u0159en\u00e1 prost\u0159ednictv\u00edm Liteboxu je pou\u017eiteln\u00e1 pro spu\u0161t\u011bn\u00ed aplikac\u00ed Linux a Windows, vno\u0159en\u00fdch jader Linux a LVBS (Linux Virtualization Based Security). Jako mo\u017en\u00e9 oblasti aplikace Liteboxu se zmi\u0148uje zaji\u0161t\u011bn\u00ed spu\u0161t\u011bn\u00ed nemodifikovan\u00fdch Linux program\u016f ve Windows, izolace prov\u00e1d\u011bn\u00ed Linux aplikac\u00ed na syst\u00e9mech s j\u00e1drem Linux, spu\u0161t\u011bn\u00ed program\u016f nad AMD SEV SNP pro \u0161ifrov\u00e1n\u00ed pam\u011bti, prov\u00e1d\u011bn\u00ed OP-TEE program\u016f v Linuxu a izolace pomoc\u00ed konceptu LVBS (vyu\u017eit\u00ed hardwarov\u00e9 virtualizace k ochran\u011b jednotliv\u00fdch komponent jader Linux, nap\u0159\u00edklad t\u011bch pou\u017e\u00edvan\u00fdch pro ov\u011b\u0159ov\u00e1n\u00ed modul\u016f a spr\u00e1vu p\u0159\u00edstupu).

<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). \u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u044f\u0434\u0440\u0443 \u041e\u0421 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":183690,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183688","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft vydal prvn\u00ed verzi otev\u0159en\u00e9ho syst\u00e9mu sandboxov\u00e9 izolace Litebox | ProHoster","description":"Spole\u010dnost Microsoft vytvo\u0159ila prvn\u00ed verzi projektu Litebox, kter\u00fd vyv\u00edj\u00ed bezpe\u010dnostn\u011b zam\u011b\u0159en\u00fd opera\u010dn\u00ed syst\u00e9m ve form\u011b knihovny (Library OS).","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS).","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-08T08:54:11+00:00","article:modified_time":"2026-10-08T08:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=183688"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183688\/revisions"}],"predecessor-version":[{"id":183689,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183688\/revisions\/183689"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/183690"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=183688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=183688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=183688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}