Microsoft is developing an open sandbox isolation system called Litebox
James Morris, the maintainer of the Linux kernel security subsystem and head of the 'Linux Emerging Technologies' team at Microsoft, introduced the Litebox project, positioned as a security-focused operating system in the form of a Library OS. Litebox can be used in programs or kernels as an additional layer of isolation, blocking access to unnecessary kernel functionality or APIs to reduce the attack surface […]
