Suna ba da shawara don rage daraja da cire yarjejeniyar Fedora SCP

Jakub jelen (Injiniyan tsaro na Red Hat) ya ba da shawarar cewa yarjejeniyar SCP ta kasance mai tsufa zuwa gaba ci gaba da kawar dashi. Kamar yadda SCP yana da kusanci da RCP kuma ya gaji matsalolin gine-gine ginshiƙan tushe waɗanda sune tushen yiwuwar rauni.

Musamman, a cikin SCP da RCP, uwar garken ya yarda da shawarar akan waɗanne fayiloli da kundin adireshi don aikawa ga abokin ciniki, kuma abokin ciniki yana bin umarnin uwar garken kuma yana bincika daidaitattun sunayen abubuwan da aka dawo dasu.

Ta hanyar haɗawa zuwa sabar da maharan ke sarrafawa, sabar na iya isar da wasu fayiloli, wanda hakan ya yawaita kaiwa ga gano raunin.

Misali, har zuwa kwanan nan, abokin harka kawai ya duba kundin adireshi na yanzu, amma bai yi la'akari da cewa uwar garken na iya ba da fayil tare da suna daban da sake rubuta fayilolin da ba a nema ba (misali, maimakon "test.txt" aka nema, sabar na iya aika fayil din da ake kira ». bashrc« kuma abokin harka zai rubuta shi).

A cikin sakon, wanda aka buga ta Jakub Jelen, zaka iya karanta mai zuwa:

Sannu masu amfani Fedora! A cikin 'yan shekarun nan, akwai maganganu da yawa a cikin yarjejeniyar SCP, wanda ke jagorantar mu zuwa tattaunawa ko za mu iya kawar da shi a matakan farko.

Yawancin muryoyin sun ce suna amfani da SCP musamman don kwafin ad-hoc mai sauƙi kuma saboda mai amfani sftp ba ya samar da wata hanya mai sauƙi don kwafin fayiloli ɗaya ko biyu gaba da gaba kuma saboda ana amfani da mutane ne kawai don rubuta scp maimakon sftp.

Wata matsala tare da yarjejeniyar SCP ita ce fasalin sarrafa maganganu.

Tunda an ambaci hakan yayin yin kwafin fayiloli zuwa sabar waje ana sanya hanyar fayil zuwa ƙarshen umarnin scp na gida, misali, lokacin da kake gudanar da umarnin «scp / sourcefile remoteserver: 'touch / tmp / exploit.sh` / targetfile'» a kan sabar, umarnin »taɓa / tmp / amfani.sh» kuma fayil / tmp ya halitta /exploit.sh, don haka yana da mahimmanci a yi amfani da haruffan tserewa daidai a cikin scp.

Lokacin da aka yi amfani da scp don sake dawo da abubuwan cikin kundin adireshi (zaɓin "-r") a cikin tsarin fayil waɗanda suka yarda da '' 'halayyar a cikin sunayen fayil, wani maƙiyi na iya ƙirƙirar fayil tare da manzanni kuma ya sanya shi lambar don gudana.

A cikin OpenSSH wannan matsalar ba ta gyaru ba, kamar yadda yake da matsala don gyara ba tare da karya daidaito na baya ba, misali yin umarni masu gudana don bincika idan akwai kundin adireshi kafin a kwafe shi.

Tattaunawar da ta gabata ta nuna cewa ana amfani da scp gaba ɗaya don kwafar fayiloli daga wannan tsarin zuwa wani.

Duk da haka, mutane da yawa suna amfani da scp maimakon sftp saboda sauƙin kerawa kuma bayyananne don kwafa fayiloli, ko kawai daga al'ada. Jakub ya ba da shawarar yin amfani da tsoffin aiwatar da scp utility, an canza shi don amfani da yarjejeniyar SFTP (ga wasu lokuta na musamman masu amfani suna ba da zaɓi "-M scp" don komawa zuwa yarjejeniyar SCP), ko ƙara yanayin daidaitawa zuwa sftp mai amfani wanda ba ka damar amfani da sftp a matsayin madaidaicin maye gurbin scp.

A 'yan watannin da suka gabata na rubuta facin scp don amfani da SFTP a ciki (tare da yiwuwar canza shi ta hanyar amfani da -M scp) kuma na gudana cikin nasara a wasu gwaje-gwaje.

Sanarwar da aka fitar gaba ɗaya ma tabbatacciya ce, don haka ina so in ji daga masu amfani da mu. Har yanzu yana da iyakancewa (tallafi ya ɓace, ba zai yi aiki ba idan sabar ba ta gudanar da tsarin sftp,…), amma ya kamata ya isa isa ga al'amuran amfani da yawa.

Tsakanin iyakancewa na samarwa m, rashin yiwuwar musayar bayanai tare da sabobin da basa fara sftp subsystem an ambaci su, da kuma rashin yanayin canja wuri tsakanin rundunonin waje biyu tare da wucewa ta cikin gida mai masaukin ("-3" yanayin). Hakanan wasu masu amfani suna lura cewa SFTP yana ɗan bayan SCP ta fuskar bandwidth, wanda ya zama sananne akan hanyoyin haɗi tare da babban latency.

Don gwaji, an riga an saka madadin fakitin budessh a cikin maɓallan 'yan sanda, suna liƙe shi tare da aiwatar da scp mai amfani akan yarjejeniyar SFTP.

Source: https://lists.fedoraproject.org/


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.