Emva konyaka onesiqingatha wophuhliso ukumiliselwa kwe Inguqulelo entsha ye rsync 3.2.4, inguqulelo apho uthotho lophuculo kunye nolungiso lwebug lwenziwe.
Kwabo batsha kwi-Rsync, kuya kufuneka uyazi ukuba oku lungqamaniso lwefayile kunye nezinto eziluncedo zogcino ebonelela ngokusasazwa okusebenzayo kwedatha eyongezelekayo, ekwasebenza ngedatha ecinezelweyo kunye ne-encrypted.
Ukusebenzisa i-delta encoding technique, ikuvumela ukuba ungqamanise iifayile kunye nabalawuli phakathi koomatshini ababini phezu kwenethiwekhi okanye phakathi kweendawo ezimbini kumatshini omnye, ukunciphisa umthamo wedatha egqithiselweyo.
Uphawu olubalulekileyo lwe-Rsync alufumaneki kwiinkqubo ezininzi okanye iiprothokholi kukuba ikopi yenzeka ngosulelo olunye kuphela kwicala ngalinye. I-Rsync inokukopa okanye ibonise abalawuli abaqulethweyo kwaye ikopishe iifayile, ngokuzikhethela usebenzisa ucinezelo kunye nokuphindaphinda.
Isebenza njenge daemon yomncedisi, i-Rsync imamela ngokungagqibekanga kwi-port ye-TCP 873, ikhonza iifayile kwi-protocol ye-Rsync yasekhaya okanye nge-terminal ekude njenge-RSH okanye i-SSH. Kwimeko yokugqibela, umxhasi we-Rsync ophunyeziweyo kufuneka afakwe kuzo zombini inginginya yasekhaya kunye nekude.
Iindaba eziphambili zeRsync 3.2.4
Kule nguqulo entsha evezwe kwi-Rsync 3.2.4 indlela entsha yokukhusela ingxoxo iye yacetywa ukusuka kumgca womyalelo ofana no "-protect-args" ("-s") ukhetho olukhoyo ngaphambili, kodwa ayisaphuli iscript serrsync (rsync ithintelwe).
Ukhuseleko ibilisa kubalinganiswa abakhethekileyo bokubaleka, kuquka izithuba, xa udlulisa izicelo kwiqokobhe langaphandle. Indlela entsha ayibaleki kwiimpawu ezikhethekileyo ngaphakathi kwebhloko ecatshulweyo, ivumela igama lefayile ukuba licatshulwe ngaphandle kokubaleka ngokubhekele phaya, umz "rsync -aiv host: 'ifayile elula.pdf' ngoku ivunyelwe". Ukubuyisela ukuziphatha kwakudala, ukhetho "-old-args" kunye nokuguquguquka kokusingqongileyo "RSYNC_OLD_ARGS=1" kuyacetywa.
Olunye lotshintsho olubonakalayo kule nguqulo intsha kukuba ukufezekiswa ukukwazi ukuhlaziya iimpawu ze-xattrs kwiifayile ezikwimo yokufunda-kuphela ukuba umsebenzisi unemvume yokutshintsha amalungelo ofikelelo (umzekelo, xa usebenza njengengcambu).
Yongezwe kwaye yenziwe yi parameter engagqibekanga "-info=NONREG" ukubonisa izilumkiso malunga nokudlulisa iifayile ezikhethekileyo.
Iskripthi I-atomic-rsync iye yabhalwa kwakhona kwiPython kwaye yandiswa ngokukwazi ukungazihoyi iikhowudi buyisela non-zero. Okungagqibekanga kukungayihoyi ikhowudi ye-24, ebuyiselwa xa iifayile zilahlekile ngelixa i-rsync isebenza (umzekelo, ikhowudi ye-24 ibuyiselwa kwiifayile zexeshana ezazikho ngexesha lokuqala lwesalathisi kodwa zasuswa ngexesha lokuqala lwesalathisi). yokufuduka).
Kusonjululwe umba ekudala ukho ngokuphathwa kweempawu zedesimali isekelwe kwindawo yangoku. Izikripthi eziyilelwe ukuqhubekekisa kuphela uphawu "." kumanani, kwimeko yokwaphulwa kokuhambelana, unokuseta "C" indawo.
Ukongeza, ubuthathaka (i-CVE-2018-25032) kwikhowudi efakiweyo yelayibrari ye-zlib ebangela ukuba i-buffer iphuphume xa izama ukucinezela ulandelelwano lomlinganiswa olulungiselelwe ngokukodwa nayo ilungisiwe.
Olunye utshintsho evelele kule nguqulo intsha:
- Sebenzisa "-fsync" ukhetho lokufowunela i-fsync () umsebenzi kuwo wonke umsebenzi wefayile ukugungxula i-cache yediski.
- Iskripthi se-rsync-ssl sisebenzisa i-"-verify_hostname" ukhetho xa ufikelela kwi-openssl.
- Kongezwe "-copy-devices" ukhetho lokukopa iifayile zesixhobo njengeefayile eziqhelekileyo.
- Ukusetyenziswa kwememori okucuthiweyo xa uhambisa ngokunyuka inani elikhulu labalawuli abancinci.
- Kwiqonga le-macOS, ukhetho "-atimes" luvuliwe.
- I-rrsync (i-rsync ethintelweyo) iskripthi sibhalwe kwakhona kwiPython.
- Kongezwe iinketho ezintsha "-munge", "-no-lock" kunye "-no-del".
- Iinketho zebhloko "-copy-links" (-L), "-copy-dirlinks" (-k) kunye "-keep-dirlinks" (-K) zenziwe ngokungagqibekanga ukuze uhlaselo olusebenzisa amakhonkco omfuziselo kubalawuli lube ngaphezulu. nzima.
- Iskripthi se-munge-symlinks sibhalwe kwakhona kwiPython.
Okokugqibela, ukuba unomdla wokwazi ngakumbi ngayo, ungajongana neenkcukacha kwi ukulandela ikhonkco.