Bor - Open-source policy management for Linux desktops
Show HN: Bor – Open-source policy management for Linux desktops
Bor is an open-source policy management platform for Linux desktops, now in v0.8.0. This release adds policy types for Thunderbird, Microsoft Edge for Business, and Firewalld zones, alongside a redesigned web UI with finer-grained RBAC and enhanced security hardening. Bor lets administrators centrally define and enforce desktop policies—from browser settings to firewall rules—with tamper protection and audit logging. The new UI features drill-down dashboards, server-side pagination, and a full-page policy editor. Agents support multiple package formats and architectures. Download packages for major Linux distributions from getbor.dev.
Bor v0.8.0 brings three new policy types and a full web UI overhaul, making it easier than ever to manage Linux desktops at scale with fine-grained control and hardened security.
- V__
This looks really close to what I need. I manage a few laptops for a non-profit. For now, it is all done by hand, since I haven't found a good solution for Linux and I will kill myself before using Windows and Intune again.
I would love to see configurations for Linux Mint's Cinnamon. Is there a way to execute custom scripts? How does the user mapping work exactly? Could I create a user in Authentik with a laptop-permission and this would map to a Linux user account?
Nonetheless, this is really great work so far, and if you keep it as nice and tidy as it currently looks, then you might make a nice niche for yourself. I can't wait to try it out.
- sandreas
Is this a similar but more generic approach to cosmic sync[1] or more like a company deploys to many employees?
1: https://ostechnix.com/system76-cosmic-sync-linux-desktop-set...
- manbash
Very nice. Can you elaborate why you chose mTLS authentication vs. SSH as a mean to deploy the policies.
Regarding the docs, the diagrams should really be replaced with something more familiar and readable such as Mermaid (currently it looks like a mixture of ad-hoc ASCII charts).