{"id":183688,"date":"2026-10-08T10:54:10","date_gmt":"2026-10-08T08:54:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/microsoft-opublikoval-pervyj-vypusk-otkrytoj-sistemy-sandbox-izolyaczii-litebox"},"modified":"2026-10-08T10:54:14","modified_gmt":"2026-10-08T08:54:14","slug":"microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","title":{"rendered":"Microsoft avaldas esimese versiooni avatud s\u00fcsteemi sandbox-isolatsioonist Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsofti ettev\u00f5te l\u00f5i Liteboxi projekti esimese v\u00e4ljaande, mis arendab turvalisusele keskenduvat operatsioonis\u00fcsteemi, mis on rakendatud raamatukoguna (Library OS). Sellise l\u00e4henemise korral integreeritakse operatsioonis\u00fcsteemi teenused otse rakendusse, selle asemel, et teha v\u00e4lise operatsioonis\u00fcsteemi tuuma juurde s\u00fcsteemik\u00f5nede kaudu. Liteboxi saab kasutada programmides v\u00f5i tuumades t\u00e4iendava isoleerimise kihina, mis blokeerib juurdep\u00e4\u00e4su tuumade v\u00f5i API liigsele funktsionaalsusele. Projekti kood on kirjutatud Rusti keeles ja avatud MIT litsentsiga. <\/p>\n

Litebox pakub rakendustele \u00fchendatavat raamatukogu koos isoleeriva kihiga, mis t\u00e4idab v\u00e4listele programmiliidestele tehtud p\u00e4ringute t\u00f5lkimise. Sellisteks v\u00e4listeks liideste l\u00e4biviijateks v\u00f5ivad olla Linuxi tuum, kaitstud isoleeritud keskkonnad OP-TEE (Open Portable Trusted Execution Environment), Webassembly-keskkonnad v\u00f5i standardne RustStd raamatukogu. <\/p>\n

Liteboxi kaudu moodustatud minimaalne platvorm sobib Linuxi ja Windowsi rakenduste k\u00e4ivitamiseks, Linuxi sissepandud tuumade ja LVBS-i (Linux Virtualization Based Security) jaoks. Liteboxi v\u00f5imalike rakendusaladena mainitakse mitte muudetud Linuxi programmide k\u00e4ivitamist Windowsis, Linuxi rakenduste t\u00e4itmise isoleerimist Linuxi tuumaga s\u00fcsteemides, programmide k\u00e4ivitamist AMD SEV SNP pealmise m\u00e4lu kr\u00fcpteerimise jaoks, OP-TEE programmide t\u00e4itmist Linuxis ja isoleerimist LVBS m\u00f5isted kasutades (riistvara virtualiseerimise rakendamine Linuxi tuuma konkreetsete komponentide, n\u00e4iteks moodulite autentimise ja juurdep\u00e4\u00e4su haldamise kaitsmiseks).

<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). \u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u044f\u0434\u0440\u0443 \u041e\u0421 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":183690,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183688","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft avaldas Liteboxi avatud liivakasti isoleerimiss\u00fcsteemi esimese v\u00e4ljaande | ProHoster","description":"Microsofti ettev\u00f5te l\u00f5i Liteboxi projekti esimese v\u00e4ljaande, mis arendab turvalisusele keskenduvat operatsioonis\u00fcsteemi, mis on rakendatud raamatukoguna (Library OS).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-08T08:54:11+00:00","article:modified_time":"2026-10-08T08:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=183688"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183688\/revisions"}],"predecessor-version":[{"id":183689,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183688\/revisions\/183689"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/183690"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=183688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=183688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=183688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}