Microsoft Aims For Greater Script Execution Control On Linux

[phoronix]

Phoronix: Microsoft Aims For Greater Script Execution Control On Linux

This week alongside several other Linux Foundation events in Vancouver was the Linux Security Summit. Commanding a significant presence at the Linux Security Summit was Microsoft...

https://www.phoronix.com/news/MS-Linux-Script-Exec-Control

[HEL88]

At one large company I worked with hypervisor-enforced kernel integrity was mandatory on desktops throughout the company - so Linux was banned for security reasons .

Only IT department did not require this policy and direct customer service departments where Apple (so that customers could see the prestige - lol ).

[Volta]

At one large company I worked with hypervisor-enforced kernel integrity was mandatory on desktops throughout the company - so Linux was banned for security reasons .

If they've chosen Windows then security wasn't one of their priorities. Good to see M$ helping with security on Linux, though. They can't do anything about it on Windows, because it's broken by design.

Oh, you can say goodbye to your 'security' layers on Windows:

https://www.theregister.com/2023/03/01/blacklotus_malware_eset/

Making it even more difficult to detect: BlackLotus can disable several OS security tools including BitLocker, Hypervisor-protected Code Integrity (HVCI) and Windows Defender, and bypass User Account Control (UAC), according to the security shop.

Remind me for what reasons Linux was banned?

[ClosedSource]

A substantial portion of Windows security bugs can be fixed by rewriting it in Rust.

[Volta]

A substantial portion of Windows security bugs can be fixed by rewriting it in Rust.

It won't help with broken design. They're taking care about compatibility with viruses and malware very seriously.

[theuserbl]

Having more control with the PowerShell over the Linux kernal and Linux internals is nice.
I think the upcomming v7.4.0 will be great.

Sadly currently existing a Get-PSDrive, but no Get-Volume or Get-Partition in the Unix PowerShell version.

[ClosedSource]

It won't help with broken design. They're taking care about compatibility with viruses and malware very seriously.

It is commonly expected in the commercial world to prioritize your customer's current applications even at the expense of innovation.

Having said that, Microsoft is indeed planning rewrites in rust for addressing classes of security bugs.

[Vorpal]

Having more control with the PowerShell over the Linux kernal and Linux internals is nice.
I think the upcomming v7.4.0 will be great.

Sadly currently existing a Get-PSDrive, but no Get-Volume or Get-Partition in the Unix PowerShell version.

Wait what? Someone actually uses PowerShell on anything but Windows? Why???

[szymon_g]

Wait what? Someone actually uses PowerShell on anything but Windows? Why???

why not? as a shell it's way better than bash. it's less elastic than python, but not everyone has to know it.

[Vistaus]

why not? as a shell it's way better than bash. it's less elastic than python, but not everyone has to know it.

The commands are stupid and sometimes way too long, no themes, no other helpful things that shells like Fish and ZSH can.