Microsoft Ships First Release of Its LiteBox Sandboxing Library OS

Microsoft has published the first tagged release of LiteBox, an open-source project the company has been developing over recent months. It is a library operating system, written in Rust and aimed at sandboxing applications.

The project first drew attention back in February, when Microsoft opened its source code. With version 0.1, development now moves from being merely a fresh repository to a first official release that people can actually try and evaluate.

What LiteBox does

LiteBox builds on the virtualization and security features of the Linux kernel, together with the benefits inherent to the Rust language — above all memory safety. On that foundation it promises to run applications in an isolated environment across several scenarios: sandboxing Linux apps on Linux, running Linux programs on Windows, and other security-oriented deployments.

The choice of a library-OS architecture is telling. Rather than spinning up a full virtual machine, an application links against a compact OS layer that intercepts and governs its calls to the system. The aim is isolation with lower overhead than traditional approaches.

Context

For Microsoft this is another step toward Rust for security-critical components — a trend visible across several of its projects. The 0.1 version number is honest about the stage: this is an early release, an invitation to take a look, not a production-ready product. Anyone working on application isolation or secure execution environments may want to keep an eye on it already.

Source: Phoronix