James Morris, Linux Kernel Security Subsystem Maintainer and head of the Microsoft team 'Linux Emerging Technologies', introduced the Litebox project, marketed as a security-focused operating system in the form of a Library OS. Litebox can be used in programs or kernels as an additional layer of isolation, blocking access to unnecessary kernel functionalities or APIs to reduce the attack surface. The project code is written in Rust and is open-sourced under the MIT license. <\/p>\n
The idea behind 'Library OS' is that operating system services are directly embedded into the application instead of calling an external OS kernel via system calls. In the context of Litebox, an isolating layer connects to the applications, providing a minimal platform that translates requests to an external fully functional programming interface. Possible external interfaces include the Linux kernel, protected isolated environments like OP-TEE (Open Portable Trusted Execution Environment), WebAssembly environments, or the standard Rust standard library.
<\/center> <\/p>\n
Liteboxi l\u00e4bi kujundatud minimaalne platvorm sobib Linuxi, Windowsi ja FreeBSD rakenduste, sissep\u00f5imitud Linuxi tuumade ja LVBS (Linux Virtualization Based Security) k\u00e4ivitamiseks. Liteboxi v\u00f5imalike rakenduste seas mainitakse t\u00e4iendavate Linuxi programmide k\u00e4itamise v\u00f5imalusi Windowsis, Linuxi tuumaga s\u00fcsteemide Linuxi rakenduste t\u00e4itmise isoleerimist, programmide k\u00e4ivitamist AMD SEV SNP peal m\u00e4lu kr\u00fcpteerimiseks, OP-TEE programmide t\u00e4itmist Linuxis ja isoleerimist LVBS kontseptsiooni kasutades. <\/p>\n
The LVBS project, whose representatives are involved in the development of Litebox, is developing methods to protect Linux kernel components using the capabilities of hypervisors and hardware virtualization. For instance, hypervisors can isolate authentication, verification, and access control operations for passwords, keys, kernel structures, and other critical resources. In the event of a vulnerability exploit and kernel compromise, an attacker will not be able to access such resources, as their handlers operate outside the current privilege level. Litebox is considered in the context of the LVBS project as a 'secure kernel', protecting the normal kernel of the guest system through hardware virtualization. \n Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"\ud83e\udd47LibreOffice](\"\/wp-content\/uploads\/2026\/02\/38d3b2756c97daf52fff8b023baed412.png\")
<\/center> <\/p>\n