Inkqubo kunye ne-SELinux: Ikhuselekile?

Ukhuseleko lwezixhobo zeesekethe

Kwiminyaka yakutshanje kuye kwakho utshintsho olubalulekileyo kuninzi lwe-GNU / Linux distros ezinje ngokudityaniswa kwe Inkqubo entsha yokuqalisa inkqubo, esele sithethile kuzo amatyeli aliqela kwaye izise umsila kunye neengxabano eziqinisekisiweyo. Ke ngoko, yahlule abaphuhlisi abaninzi kunye nabasebenzisi abaninzi abathandayo nabanye ngokuchasene nale nkqubo intsha, njengoko kuhlala kunjalo kuyo yonke into. Ayisoze ine imvula ngokuthanda komntu wonke ...

Omnye umbandela onqabileyo onabachasi bawo kunye nokuthembeka kwawo ngumcimbi wemodyuli yokhuseleko SELinux, Ukwenza imigaqo yokukhusela ukuhanjiswa kunye nokukhuphisana neAppArmor ngqo. Nangona kunjalo, i-SELinux iye yabamba i-NSA kuphuhliso lwayo kwaye oku kuphakamisa ukuthandabuza phakathi kwabasebenzisi abaninzi kunye neengcali. Kutheni le nto umphangi ozinikele ekuqhekezeni amakhaya angakuthengisela isitshixo esihle? Yile nto i-SELinux icinga ngayo, kutheni i-NSA efuna ukungena kwiikhompyuter ngomsebenzi wayo wobukrelekrele ikunceda ukhusele ikhompyuter yakho kuhlaselo?

Abaninzi bacinga njalo I-SELinux inokubuyela ngasemva ezinceda i-NSA ukuba ikwazi ukufikelela kwangoko nangaphandle kwayo nasiphi na isixhobo okanye umncedisi oyisebenzisayo, ngelixa kwelinye icala bevimba indlela eya kolunye uhlaselo ngokuzalisekisa umsebenzi wokwenyani owawenzelwe yona. Abanye abavumi kakhulu kukhuseleko lwe-systemd ukuyiphumeza kwiiseva kwaye kulapho kuvela khona ukuthandabuza okukhulu.

Phakathi kweenguqu eziphazamisayo kwiLinux kule minyaka ilishumi idlulileyo kukwazisa kunye nokudityaniswa okubanzi kwenkqubo ye-boot system kwiLinux. Ngokuchanekileyo oku kuye kwaxoxwa ngako kwi ICoreOS Fest ebibanjelwe kule veki iphelileyo eBerlin. Apho uLennart Poettering, omnye wabaphuhlisi abaphezulu benkqubo enza intetho ephambili ekhusela inkqubo njengenkqubo ekhuselekileyo yeeseva, kodwa yayichasene neSELinux. Ngaphandle kokuba ngumqeshwa weRed Hat, inkampani esemva kwe-SELinux kunye ne-NSA, uthe "khange ayiqonde. […] Kukho abantu abangama-50 emhlabeni abayiqondayo imigaqo-nkqubo ye-SELinux ”.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Inoxanduva lwedatha: I-AB Internet Networks 2008 SL
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.

  1.   rolo sitsho

    Andikwazi ukuqonda ukuba yintoni umngcipheko wokhuseleko we-systemd, kwaye kwi-selinux kufanele ukuba ibe yinkqubo ephantsi kwelayisensi yasimahla, kwaye ngenxa yokuba iphuhliswe ngu-nsa, inamehlo omakhi wophuhliso kuyo.
    Inye into yokuba kunzima ukuyiqonda okanye ukumisela imigaqo yayo kwaye enye ingazithembi