I-OpenWrt 21.02.0 ifika notshintsho olubalulekileyo, kubandakanya utshintsho lwezixhobo

Inguqulelo entsha ebalulekileyo ye-OpenWrt 21.02.0 sele ikhutshiwe, evelele ukuba nayo ukwanda kweemfuno zekhompyuter, Ukusukela kulwakhiwo olungagqibekanga, ngenxa yokufakwa kweenkqubo ezongeziweyo ze-Linux kernel, isixhobo esine-8MB yeFlash kunye ne-64MB ye-RAM ngoku kufuneka sisebenzise i-OpenWrt.

Nangona kubasebenzisi abaceba ukwenza olwabo ulwakhiwo, banokwenza njalo ukwenza lula ukuba ibaleke kwizixhobo ezine-4 MB yeFlash kunye ne-32 MB ye-RAM, kodwa ukusebenza kolwakhiwo kuyakuba nomda kwaye uzinzo aluqinisekiswanga .

Iphakheji esisiseko ibandakanya iipakeji zokuxhasa itekhnoloji yokhuseleko lwe-WPA3 engenazingcingo, esele ifumaneka ngokungagqibekanga kokubini xa usebenza kwimowudi yabathengi naxa usenza indawo yokufikelela. I-WPA3 ibonelela ngokhuseleko kuhlaselo lwenkohlakalo (ayivumeli ukuhlaselwa ngenkani kwimowudi engaxhunyiwe kwi-intanethi) kwaye isebenzisa umgaqo-nkqubo wokuqinisekisa we-SAE. Uninzi lwabalawuli ngaphandle kwamacingo banikezela amandla e-WPA3.

Kwakhona eIphakheji esisiseko ibandakanya i-TLS kunye nenkxaso ye-HTTPS ngokungagqibekanga, ekuvumela ukuba ufikelele kwi-interface yewebhu ye-LuCI ngaphezulu kwe-HTTPS kwaye usebenzise izixhobo ezinje nge-wget kunye ne-opkg yokufumana kwakhona ulwazi ngeendlela ezifihliweyo zonxibelelwano. Iiseva ezisebenzisa iipakeji ezikhutshelweyo nge-opkg zisasazwa kwakhona ngokungagqibekanga ukubonelela ngolwazi nge-HTTPS.

Ithala lencwadi le-mbedTLS elisetyenziselwa ukubethela indawo lithathelwe indawo yingcuka ye-SSL (Ukuba kukho imfuneko, unokufaka ngesandla i-mbedTLS kunye neelayibrari ze-OpenSSL, ezisabonelelwa njengokhetho.) Ukucwangcisa ukuhambisa ngokuzenzekelayo kwi-HTTPS, ukhetho «htpd.main.redirect_https = 1»Kujongano lwewebhu.

Olunye utshintsho esinokulufumana kukuba Inkxaso yokuqala iphunyezwe kwinkqubo esezantsi ye-DSA, Esibonelela ngezixhobo zokumisela nokulawula amakhasethi othungelwano lwe-Ethernet edityanisiweyo kusetyenziswa iindlela ezisetyenziselwa ukumisela ujongano lwenethiwekhi oluqhelekileyo (iproute2, ifconfig). I-DSA inokusetyenziselwa ukumisela amazibuko kunye nee-VLAN endaweni yeswindowsfconfig ecetyiswe apha ngasentla, kodwa ayingabo bonke abatshintshi abalawuli abaxhasa i-DSA okwangoku.

Utshintsho lwenziwe kwis syntax seefayile zoqwalaselo ibekwe ngaphakathi / njl / isakhelo / inethiwekhi. Kwi "config interface" block, "ifname" ukhetho luye lwaqanjwa igama elithi "device", kwaye kwi "config device" block, "ibhulorho" kunye "ifname" ukhetho luye lwaqanjwa ngokuthi "port". Yahlula iifayile ngobumbeko lwesixhobo (umaleko 2, "isixhobo soqwalaselo" ibhloko) kunye nendawo zonxibelelwano (umaleko 3, "ujongano loqwalaselo" ibhloko) ngoku zenzelwa ufakelo olutsha.

Ukugcina ukuhambelana ngasemva, inkxaso ye-syntax yakudala iyagcinwa, Oko kukuthi, ubumbeko olwenziwe ngaphambili aluyi kufuna naluphi na utshintsho. Kule meko, xa i-syntax yakudala ifunyenwe kunxibelelwano lwewebhu, isindululo siya kuboniswa ukuze sifudukele kwi-syntax entsha, eyimfuneko ukuhlela ubumbeko kusetyenziswa ujongano lwewebhu.

Olunye utshintsho ezibalaseleyo:

• Yongeze i-bcm4908 kunye namaqonga e-rockchip e-Broadcom BCM4908 kunye ne-Rockchip RK33xx SoC esekwe kwizixhobo. Iiplatifomu ezixhaswe kwangaphambili zinemisantsa emiselweyo kukuhambelana kwesixhobo.
• Inkxaso yeqonga le-ar71xx lisusiwe, endaweni yokuba iqonga le-ath79 lisetyenziselwe (izixhobo ezinxulumene ne-ar71xx, kuyacetyiswa ukuba ufake kwakhona i-OpenWrt kwasekuqaleni). Ukongeza, inkxaso ye-cns3xxx, rb532, kunye ne-samsung (SamsungTQ210) yeplathi iyekile.
• Iifayile ezinokusetyenzwa zezicelo ezibandakanyekayo ekusebenzeni konxibelelwano lwenethiwekhi zakhiwe kwi-PIE (Indawo yokuSebenza ngokuZimeleyo) kwimodi ngenkxaso epheleleyo yeDilesi Space Randomization (ASLR) ukwenza kube nzima ukuxhaphaza ubungozi kwezi zicelo.
• Xa ubhala i-kernel ye-Linux, ukhetho olungagqibekanga lokuxhasa itekhnoloji yokuzahlula kwisikhongozeli yenziwe, ivumela isixhobo se-LXC kunye nemo ye-procd-ujail ukuba isetyenziswe kwi-OpenWrt kumaqonga amaninzi.
• Inikwe amandla okwakha ngenkxaso ye-SELinux yokunyanzelwa kwenkqubo yolawulo lokufikelela (ikhubazekile ngokungagqibekanga).

Umthombo: https://openwrt.org