Ngemuva konyaka nengxenye yentuthuko ukwethulwa kwe- inguqulo entsha ye rsync 3.2.4, inguqulo lapho uchungechunge lwentuthuko nokulungiswa kweziphazamisi kwenziwe.
Kulabo abasha ku-Rsync, kufanele wazi ukuthi lokhu iyisisetshenziswa sokuvumelanisa ifayela nesipele enikeza ukudluliswa okuphumelelayo kwedatha ekhulayo, ephinda isebenze ngedatha ecindezelwe nebethelwe.
Usebenzisa inqubo yombhalo we-delta, ikuvumela ukuthi uvumelanise amafayela nezinkomba phakathi kwemishini emibili phezu kwenethiwekhi noma phakathi kwezindawo ezimbili emshinini ofanayo, ukunciphisa umthamo wedatha edlulisiwe.
Isici esibalulekile se-Rsync esingatholakali ezinhlelweni eziningi noma kumaphrothokholi ukuthi ikhophi yenzeka ngokudlulisela okukodwa ohlangothini ngalunye. I-Rsync ingakopisha noma ibonise izinkomba eziqukethwe futhi ikopishe amafayela, ngokuzithandela isebenzisa ukucindezela nokuphindaphinda.
Isebenza njenge-daemon yeseva, i-Rsync ilalela ngokuzenzakalelayo kumbobo ye-TCP 873, ihlinzeka amafayela kuphrothokholi yomdabu ye-Rsync noma ngetheminali ekude njenge-RSH noma i-SSH. Esimeni sakamuva, iklayenti le-Rsync elisebenzisekayo kufanele lifakwe kukho kokubili umsingathi wasendaweni nesilawuli kude.
Izindaba eziyinhloko ze-Rsync 3.2.4
Kule nguqulo entsha eyethulwe ye-Rsync 3.2.4 kuphakanyiswe indlela entsha yokuvikela impikiswano kusukela kulayini womyalo ofana nenketho ethi “-protect-args” (“-s”) eyayitholakala ngaphambilini, kodwa ayiphuli isikripthi se-rrsync (i-rsync ikhawulelwe).
Ukuvikelwa kubilisa izinhlamvu ezikhethekile zokuphunyuka, okuhlanganisa izikhala, lapho udlulisela izicelo kugobolondo langaphandle. Indlela entsha ayizibaleki izinhlamvu ezikhethekile ngaphakathi kwebhulokhi ecashuniwe, evumela igama lefayela ukuthi licashunwe ngaphandle kokuqhubeka nokubaleka, isb "rsync -aiv host: 'ifayela elilula.pdf' manje selivunyelwe". Ukuze ubuyisele ukuziphatha okudala, inketho ethi “-old-args” kanye nokuhluka kwendawo okuzungezile “RSYNC_OLD_ARGS=1” kuyaphakanyiswa.
Olunye ushintsho olugqamile kule nguqulo entsha ukuthi ikhono elifakiwe lokubuyekeza izibaluli ze-xattrs kumafayela akumodi yokufunda kuphela uma umsebenzisi enemvume yokuguqula amalungelo okufinyelela (ngokwesibonelo, uma esebenza njengempande).
Kwengezwe futhi kunikwe amandla ipharamitha ezenzakalelayo “–info=NONREG” ukuze kuboniswe izexwayiso mayelana nokudlulisa amafayela akhethekile.
Isikripthi i-atomic-rsync ibhalwe kabusha ku-Python futhi yanwetshwa nekhono lokuziba amakhodi buyisela okungelona uziro. Okuzenzakalelayo kuwukuziba ikhodi engu-24, ebuyiselwayo lapho amafayela elahlekile ngenkathi i-rsync isebenza (isibonelo, ikhodi 24 ibuyiselwa kumafayela esikhashana ayekhona ngesikhathi sokukhonjwa kokuqala kodwa akhishwa ngesikhathi sokukhonjwa kokuqala). yokufuduka).
Kuxazululwe inkinga ethathe isikhathi eside ngokuphathwa kwezinhlamvu zedesimali ngokusekelwe endaweni yamanje. Okwemibhalo eklanyelwe ukucubungula kuphela uhlamvu "." ezinombolweni, esimweni sokwephulwa kokuhambisana, ungasetha indawo ethi "C".
Ngaphezu kwalokho, ukuba sengozini (CVE-2018-25032) kukhodi efakiwe yelabhulali ye-zlib ebangela ukuchichima kwebhafa lapho uzama ukucindezela ukulandelana kwezinhlamvu ezilungiselelwe ngokukhethekile nakho kulungisiwe.
Kwezinye izinguquko okuvelele kule nguqulo entsha:
- Kusetshenziswe inketho ethi “-fsync” yokubiza umsebenzi we-fsync() kukho konke ukusebenza kwefayela ukuze usule inqolobane yediski.
- Iskripthi se-rsync-ssl sisebenzisa inketho ethi "-verify_hostname" lapho ufinyelela i-openssl.
- Kwengezwe inketho ethi “-copy-devices” ukuze kukopishwe amafayela edivayisi njengamafayela avamile.
- Ukusetshenziswa kwememori okuncishisiwe lapho kudluliswa ngokwandayo inombolo enkulu yezinkomba ezincane.
- Epulatifomu ye-macOS, inketho ethi "-atimes" ivuliwe.
- Iskripthi se-rrsync (i-rsync ekhawulelwe) sibhalwe kabusha nge-Python.
- Kungezwe izinketho ezintsha "-munge", "-no-lock" kanye "-no-del".
- Izinketho zokuvimba okuthi “–copy-links” (-L), “–copy-dirlinks” (-k) kanye “–keep-dirlinks” (-K) zinikwe amandla ngokuzenzakalela ukuze ukuhlasela okushintsha izixhumanisi ezingokomfanekiso ezinhlwini zibe ngaphezulu. nzima.
- Iskripthi se-munge-symlinks sibhalwe kabusha ngePython.
Okokugcina, uma ungathanda ukwazi okwengeziwe ngakho, ungathintana nemininingwane ku isixhumanisi esilandelayo.