P
Kwinqaku elilandelayo siza kujonga kwiFirejail. Kungenzeka ukuba ngamanye amaxesha unomdla, ngenxa yesizathu esithile okanye esinye, vavanya izicelo ezingaphezulu okanye ezinzileyo. Kwiimeko ezinjalo, kuyinto eqhelekileyo ukukhathazeka ngokhuseleko lwenkqubo yakho. Into enokwenziwa kwi-Gnu / Linux kukusebenzisa ezi zicelo kwibhokisi yesanti.
Ukucaca, kufuneka kuthiwe 'I-sandboxingKukukwazi ukwenza izicelo kwibhokisi yesanti. Oku kunika usetyenziso ngesixa esifanelekileyo semithombo eyimfuneko yokuqhuba. Enkosi kwisicelo esibizwa ngokuba yiFirejail, siya kuba nakho ukuqhuba ngokukhuselekileyo usetyenziso olungathembekanga kwiGnu / Linux. Firejail ngu Isixhobo esilungiselelwe abasebenzisi abazi-ukhuseleko, abafuna ukukhusela inkqubo yabo.
IFirejail yinkqubo yeSUID kunciphisa umngcipheko wolwaphulo-mthetho ngokunqanda imeko yexesha lokusebenza Izicelo ezingathembekanga ezisebenzisa izithuba zamagama kunye i-seccomp-bpf. Ivumela inkqubo kunye nayo yonke inzala yayo ukuba ibe nembono yabucala yezixhobo ze-kernel ekwabelwana ngazo kwilizwe jikelele ezinje ngesitaki senkqubo yenethiwekhi, itafile yenkqubo, itafile yentaba, njalo njalo.
Le nkqubo ibikhona ibhalwe ngo-C y phantse akukho kuxhomekeka kuyimfuneko. Isoftware isebenza kuwo nawuphi na umatshini we-Gnu / Linux onenguqulo ye-kernel 3.x okanye entsha. Ibhokisi yesanti ilula, ngaphezulu isezantsi. Akukho fayile zoqwalaselo zinzima zokuhlela, akukho zidibaniso zivulekileyo, kwaye akukho daemoni isebenza ngasemva. Yonke imisebenzi yokhuseleko iphunyezwa ngokuthe ngqo kwi-kernel. Inkqubo ikhutshwa phantsi kwelayisensi ye-GPL v2.
IFirejail inokwenza naluphi na uhlobo lwenkqubo: iiseva, usetyenziso lwegraphic kunye neeseshoni zokungena zomsebenzisi. Isoftware kubandakanya iiprofayili zokhuseleko kwinani elikhulu leenkqubo Gnu / Linux: Mozilla Firefox, Chromium, VLC, Streaming, njl.
Iimpawu ngokubanzi zeFirejail
- Izithuba zamagama zeLinux.
- Ikhonteyina yenkqubo yefayile.
- Iifilitha zokhuseleko.
- Ukuhambelana kwenethiwekhi.
- Iiprofayili zokhuseleko.
- Ulwabiwo lwezixhobo.
- Umsebenzisi womzobo.
Iyafumaneka Ulwazi oluneenkcukacha malunga neempawu zeFirejail kwi iphepha leprojekthi elisemthethweni.
Faka iFirejail kwi-Ubuntu
Ukufakwa kunokwenziwa Ukukhuphela iphakheji yamva nje kwiphepha le-Github leprojekthi usebenzisa i-git command kwisiphelo sendlela (Ctrl + Alt + T):
git clone https://github.com/netblue30/firejail.git cd firejail ./configure && make && sudo make install-strip
Kwimeko apho ungafakwanga i-git kwinkqubo yakho, ungayifaka ngomyalelo:
sudo apt install git
Siya kuba nakho uku faka iFirejail ngokukhuphela iphakheji .deb kunye nokusebenzisa umphathi wephakheji. Le fayile inokukhutshelwa kwifayile ye- SourceForge yeprojekthi.
Nje ukuba ukhuphele ifayile, ungayifaka le nkqubo ngokuchwetheza kwi-terminal (Ctrl + Alt + T):
sudo dpkg -i firejail_*.deb
Uziqhuba njani izicelo ngeFirejail kwiGnu / Linux
Nje ukuba ukufakwa kugqityiwe, ngoku nonke nisetelwe ukuqhuba usetyenziso ngeFirejail. Oku kufezekiswa ngokuvula i-terminal (Ctrl + Alt + T) kunye ukubhala umlilo ngaphambi komyalelo esifuna ukuwenza.
firejail firefox #Inicia el navegador web Firefox
Yenza iprofayili yokhuseleko
Firejail ibandakanya ezininzi iinkangeleko zokhuseleko kwezicelo ezahlukeneyo. Ukuba uyile iprojekthi kumthombo, unokufumana iiprofayili:
ruta-a-firejail/etc/
Ukuba usebenzise Iphakheji yedeb, Unokufumana iiprofayili zokhuseleko kwi:
/etc/firejail/
Abasebenzisi kufuneka beka iinkangeleko eziza kusetyenziswa kulawulo olulandelayo:
~/.config/firejail
Ukuba ufuna ntoni thintela ukufikelela kwesicelo kulawulo oluthileUngasebenzisa umthetho omnyama wokufezekisa kanye loo nto. Umzekelo, oku kulandelayo kungongezwa kwiprofayili yakho yokhuseleko ukuthintela ukufikelela kwifolda yamaxwebhu:
blacklist ${HOME}/Documentos
Enye indlela yokufezekisa iziphumo ezifanayo kukubhala umendo opheleleyo kwifolda esifuna ukuyithintela:
blacklist /home/user/Documentos
Iiprofayili zokhuseleko zinokuqwalaselwa ngeendlela ezininzi ezahlukeneyo. Ukufikelela kunokukhubazeka, ukufikelela kuphela kokufunda kuvunyelwe, njl. Ukuba unomdla kwi yenza iinkangeleko zesiko, unako bhekisa kule miyalelo ilandelayo yeFireJail.