Chii chinonzi AppArmor uye kuti chinovandudza sei kuchengeteka muLinux

Chii chinonzi AppArmor che

Kwenguva yakareba, vashandisi veLinux vaive vakaita sevapanduki venhau yenguruve nhatu diki. Kunzwa kwekunyepa kwakatitungamira kuti titende kuti isu takachengeteka kubva kumatambudziko ezvekuchengetedza ayo maWindows aigara achibatwa.

Chokwadi chakatiratidza kuti isu hatina kukuvadzwa sezvataifunga. Kunyangwe, kutaura chokwadi, huwandu hwekuremerwa hwakataurwa hwakawanikwa mumaragi ekuchengetedza macomputer uye, mamiriro ezvinhu anodikanwa kuti atore mukana iwoyo haapo munyika chaiye, kuchine matambudziko akakwana kuti tiregedze kurinda kwedu.

Linux kernel chengetedzo matanho

Kubvumirana kwese pakati pehunyanzvi hwekuchengetedzwa kweIT ndeyekuti matanho akagadzirirwa kudzivirira kupinda kusingatenderwe muhurongwa hwakadai semadziro emoto kana nzira dzekupinda mukati hadzichakwanise kumisa kurwiswa kwakanyanya. Izvo zvinodikanwa kumisikidza mutsara mutsva wekudzivirira uyo, mune chiitiko chekupinda kusingatenderwe kupinda muchirongwa, haibvumidze uyo anopinda kuita chero chinokuvadza.

Iwo musimboti werombo shoma

Nheyo yedzikomberedzo inosimbisa seyakakosha mutemo wekuchengetedza uyo vashandisi vecomputer system vanofanirwa kungogashira yakatemwa seti yemaropafadzo uye zviwanikwa izvo zvakakosha kuti vaite basa ravo chairo. Nenzira iyi, kushandiswa kusiri iko kana kwekuregeredza kwekushandisa kunoderedzwa kana kudzivirirwa kubva pakuve vector yekupinda yekurwisa kwemakomputa.

Kwenguva yakareba, ma linuxers akavaka kuvimba kwedu mukuchengetedzwa kwesystem yedu pane imwe kernel mashandiro anozivikanwa seDiscretionary Access Control. Discretionary Access Kudzora inosarudza sisitimu zviwanikwa vashandisi uye maapplication anogona kuwana.

Dambudziko nderekuti huwandu hwesarudzo hwaro hwakaganhurirwa uye kuti, sekuratidzwa kweshoko discretionary, vamwe vashandisi vane mvumo dzakaringana vanogona kugadzirisa izvo zvingangoshandiswa nevashandisi vemakomputa.

Zvinotenderwa Kupinda Kudzora

Inosungirwa Yekuwana Kudzora inosiyana neDiscretionary Access Kudzora mune izvo iyo inoshanda sisitimu inodzora zvinoitwa nemaapplication zvichienderana nemirairo yakatarwa nemaneja wehurongwa uye kuti vamwe vashandisi havagone kuchinjisa.

MuLinux kernel iri ibasa reLinux Security Subsystem Module iyo inopa akasiyana maitiro anogona kukumbirwa kubva kumaturusi seaya ataurwa muchinyorwa chino.

Chii chinonzi AppArmor?

AppArmor inoshandisa iyo Inosungirwa Kuwana Kudzora paradigm kusimudzira kuchengetedzeka kwekuparadzirwa kweLinux. Iyo inovimba neLinux Security Subsystem Module yekumisa hunhu hweanoshanda ega maererano nemitemo yakatarwa nemaneja.

Aya madhairekisheni anoratidzwa muchimiro chemafaira ezvinyorwa akajeka anozivikanwa semaprofiles. Kutenda kumaphrofayli, manejimendi wehurongwa anogona kudzora kupinda kumafaira, mamiriro ekubatana pakati pezvakaitwa, kumisikidza mune iyo faira system inogona kukwirwa, kudzikisira kuwana network, kuona kugona kwechikumbiro.uye zvingani zviwanikwa zvaunogona kushandisa. Mune mamwe mazwi, chimiro cheAppArmor chine chena yemaitiro anogamuchirwa pachishandiswa chimwe nechimwe.

Zvakanakira nzira iyi ndeizvi:

  • Iyo inobvumidza manejimendi kuti ishandise musimboti werombo shoma kune maapplication. Kana chiitiko chekuti chikumbiro chakakanganiswa, hachizokwanisa kuwana mafaera kana kuita zviito kunze kweyakagadzwa seyakajairika paramende yekushanda.
  • Iwo ma profiles akanyorwa mune mutungamiriri ane hushamwari mutauro uye akachengetwa munzvimbo dzaunogona kuwana zvirinyore.
  • Iko kushandiswa kwemamwe profiles kunogona kugoneswa kana kuremadzwa zvisinei nezvinoitika kune mamwe maporofita. Izvi zvinobvumidza manejimendi kudzimisa uye kugadzirisa chaiyo profil yechimwe chishandiso pasina kukanganisa mashandiro eiyo yese system.
  • Muchiitiko chekuti chishandiso chinoedza kuita chero chiito chinopesana neicho chakamisikidzwa muprofita inoenderana, chiitiko chakatemwa. Nenzira iyi maneja anogamuchira yambiro yekutanga.

AppArmor haisi kutsiva kweDiscretionary Access Control, kureva kuti, haugone kubvumidza chimwe chinhu chinorambidzwa, asi unogona kurambidza chimwe chinhu chinotenderwa.

AppArrmour inouya nezvimwe zvishandiso pre-yakaiswa pane makuru maLinux kugoverwa, uye iwe unogona kuwana zvimwe muzvinyorwa.

Unogona kuwana rumwe ruzivo pa peji yepurojekiti


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Makomendi gumi, siya zvako

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako

  1.   Mweya akadaro

    Ko AppArmor haisi nhumbi dzokurwa nadzo …….???????????????

    1.    Diego ChiGerman Gonzalez akadaro

      Chokwadi. Pandinongogona ndinogona kuzvigadzirisa
      Ndatenda