Bor

A policy management system for Linux desktops that defines, distributes, and enforces configuration policies across a fleet in real time. It is designed for IT and operations teams in enterprises that need centralized control and compliance. The system uses a central server with lightweight agents, streaming policies over gRPC with delta sync, and is secure by default with mTLS and audit logging.

Key features

• Centralized policy authoring with RBAC
• Real-time policy delivery via gRPC
• Delta sync and snapshot fallback
• mTLS with auto-generated internal CA
• Zero-touch enrollment with Kerberos
• One-time token enrollment
• Compliance reporting with audit log
• LDAP/AD integration and group mapping
• WebAuthn/Passkey login support
• PKCS#11/HSM support for CA keys
• Prometheus metrics endpoint
• Tamper protection with audit alerts