A cikin Ubuntu 23.10 "Mantic Minotaur" an hana samun damar shiga sunan mai amfani

Ubuntu 23.10 baya tare da haske da duhu

Bayan kaddamar da sabon sigar Ubuntu 23.10 "Mantic Minotaur" an riga an fitar da duk cikakkun bayanai na wannan sabon sigar sanannen rarraba Linux (zaku iya tuntuɓar littafin game da shi a ciki wannan haɗin.). Daga cikin manyan canje-canjen da ke tare da ƙaddamarwa, akwai wasu takamaiman da yawa waɗanda ke canza wasu sassan tsarin.

Dalilin ambaton haka shi ne ɗayan waɗannan canje-canjen shine sabon ƙuntatawa wanda aka ɗora akan wuraren sunayen masu amfani.

Sabuwar canjin kamar irin wannan wanda Canonical ya aiwatar a cikin Ubuntu 23.10 an yi niyya don taƙaita damar mai amfani mara gata zuwa wuraren suna, Samar da tsarin da suka dogara da keɓewar kwantena mafi aminci ga lahani waɗanda ke buƙatar yin amfani da sunayen masu amfani da su.

da Wuraren sunaye marasa gata siffa ce ta kwaya da za a iya amfani da don maye gurbin yawancin amfani da shirye-shiryen setuid da setguid da ba da damar aikace-aikace don ƙirƙirar mafi amintattun akwatunan yashi. Wuraren suna a cikin Linux kernel ba da damar sanya wakilci daban-daban na albarkatu zuwa matakai daban-daban; Misali, ana iya sanya tsari a cikin mahalli tare da wuraren hawansa, UTS, IPC, PID, da tari na cibiyar sadarwa, waɗanda ba su zo tare da yanayin sauran hanyoyin ba.

Wuraren suna don masu amfani marasa gata ba da damar ƙirƙirar wuraren suna ba kawai don tushen mai amfani ba, har ma ga masu amfani marasa gata na yau da kullun (misali ana amfani da su don mashigin sandboxed). Daga cikin wasu abubuwa, zaku iya ƙirƙirar wuraren sunan mai amfani da wuraren sunaye na cibiyar sadarwa, wanda ba da damar tsari a keɓe muhalli kadaici samun tushen gata ko samun damar abubuwan ci-gaba na tarin hanyar sadarwar, amma ku kasance marasa gata a wajen akwati.

A ka'idar, ayyukan mai gata a cikin filin suna An ware su daga babban tsarin, amma a aikace, rashin lahani a kai a kai yana tasowa a cikin tsarin kernel waɗanda ba su da isa ga mai amfani mara amfani a cikin babban mahalli, amma ana iya amfani da su ta hanyar magudi daga wuraren suna.

Matsalar wannan model, shine cewa suna fallasa hanyoyin haɗin kernel waɗanda galibi ana iyakance su zuwa matakai tare da gata (tushen) damar amfani da masu amfani marasa gata. Abin da ya sa kenan Wannan kuma ya zama tsari wanda ke gabatar da ƙarin haɗarin tsaro., ta hanyar fallasa ƙarin mu'amalar kwaya fiye da yadda ake buƙata, da ƙari yanzu ana amfani da su ko'ina a matsayin mataki a cikin gata da yawa haɓaka sarƙoƙi. 

A cikin yanayin Ubuntu wannan yanzu ya canza yayin da ake ba da damar shiga wuraren sunayen masu amfani kawai ga shirye-shiryen da aka ƙara bayanin AppArmor na musamman wanda za'a iya amfani da shi azaman misali don buɗe damar yin amfani da sunan mai amfani ga sauran shirye-shiryen. An ambaci canjin don inganta tsaro na tsarin da ke amfani da keɓewar akwati daga lahani waɗanda ke buƙatar samun damar shiga sunan mai amfani don amfani da su.

Yayin da rashin gata wuraren sunan mai amfani na iya dakatar da amfani, kuma yana iya karya aikace-aikacen da ke amfani da su. Yawanci, cin zarafi yana kaiwa wani takamaiman aikace-aikacen hari, kuma muddin ana iya kashe wuraren sunan mai amfani mara gata don waɗannan aikace-aikacen, babu buƙatar kashe su gabaɗaya.

An ambata cewa babu sigar kafin Ubuntu 23.10 "Mantic Minotaur" da za a shafa saboda wannan canjin, koda lokacin amfani da kernel 6.5, tunda ba a kunna aikin kai tsaye a cikin kwaya ba amma a cikin Ubuntu 23.10 "Mantic Minotaur" takamaiman kunshin apparmor.

A ƙarshe, an ambaci cewa ga waɗanda ke son kashe wannan canjin, za su iya yin hakan ta hanyar buga waɗannan abubuwa a cikin tasha:

sudo sysctl -w kernel.apparmor_restrict_unprivileged_unconfined=0
sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

Idan kun kasance sha'awar ƙarin sani game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.