Tsarin yanzu yana da layuka sama da miliyan 1.2

Systemd tsarin farawa ne da kuma daemon wanda aka tsara musamman don kernel na Linux azaman madadin tsarin farawa na V daemon (sysvinit). Babban burinta shine samar da ingantaccen tsari don gudanar da dogaro tsakanin aiyuka, kyale ɗaukar ayyuka kwatankwacin fara aiki da rage kira zuwa rubutun Shell.

Bayan wucewa layuka miliyan na lambar a cikin 2017, Ma'ajin Git na tsarin yana nuna hakan yanzu ya kai 1.207.302 layin lambar. Wadannan layuka miliyan 1.2 suna yaduwa a cikin fayilolin 3,260 kuma sun ƙunshi ayyukan 40,057 daga kusan marubuta daban-daban 1,400.

Systemd ya rubuta rikodin lambobin aikatawa a shekarar da ta gabata, amma ya zuwa yanzu, yana da wuya a yi tunanin hakan za a iya karya wannan rikodin a cikin 2019.

A wannan shekara, akwai riga an yi 2 aikatawa. Shekarar da ta gabata, alkaluman sun nuna 145, yayin da a shekarar 2016 da 2017 tsarin yakai kasa da kadan sama da aikata dubu hudu.

Lennart Poettering ya kasance mafi shahararren mai ba da gudummawa don tsari tare da fiye da 32% na aikatawa har zuwa wannan shekara.

Bayan shi za mu iya gano cewa sauran marubutan da ke bin Waken Lennart a wannan shekara sune Yu Watanabe, Zbigniew Jędrzejewski-Szmek, Frantisek Sumsal, Susant Sahani da Evgeny Vereshchagin. Kimanin mutane 142 suka ba da gudummawa ga itaciyar tushen Systemd tun farkon shekara.

Systemd har yanzu mutane da yawa basa son shi

Kodayake a yau yawancin rarraba GNU / Linux suna ɗaukar tsarin, an sha suka sosai (kuma ba ya ga wasu) ta wasu membobin kungiyar bude tushen, que yi imani da cewa aikin ya sabawa falsafar Unix kuma masu haɓaka suna da halayyar anti-Unix, saboda tsarin bai dace da duk tsarin Linux ba.

Abin da ya sa kenan Yana da mahimmanci a tuna cewa tsari ya kasance asalin asalin Debian ne lokacin da ta yanke shawarar daukar sa. azaman tsarin farawa na asali, duk da barazanar wasu masu biyan haraji.

Tare da wacce kafin irin wadannan ayyukan don haka suka bar aikin Debian don ƙirƙirar cokali mai yatsa da ake kira Devuan (ɗan Debian ne wanda baya amfani da tsari).

Da kyau Babban burin aikin shine samarda wani banbancin Debian ba tare da rikitarwa da dogaro da tsarin tsari ba, tsarin init da manajan sabis waɗanda asalin Red Hat suka haɓaka kuma daga baya mafi yawan sauran ɓarna suka karɓa.

Kuma wannan shine a farkon shekara mun kawo rahoton cewa wasu daga cikin manyan abubuwan rarraba Linux sun kasance masu saukin kamuwa da wasu kwari da aka tsara.

Labari mai dangantaka:

An gano sabon yanayin rauni a cikin Systemd

Daga cikin ɓangarorin kurakuran da suka wanzu, ɗayansu yana cikin aikin 'journald', wanda ke tattarawa da adana bayanan log. Ana iya amfani da su don samun gatan tushen a kan na'urar da ake fata ko bayyana bayanai.

Wasu daga cikin wadannan kurakuran ne masu bincike a kamfanin tsaro na Qualys suka gano.

Masu binciken sun ci gaba da amfani da su don CVE-2018-16865 da CVE-2018-16866 wanda ke samar da tushen harsashi na gida akan injunan x86 da x64.

Amfani da shi gudu da sauri akan dandalin x86 kuma ya kai ga burinta a cikin minti goma. A x64, amfani ya ɗauki minti 70.

Qualys ya sanar da cewa ya shirya sakin lambar amfani da PoC don tabbatar da wanzuwar lahani kuma yayi bayani dalla-dalla yadda ya iya amfani da waɗannan kuskuren. Masu binciken sun kuma inganta hujja game da CVE-2018-16864 wanda zai ba ku damar karɓar ikon eip, tutar koyarwa ta i386.

An gabatar da yanayin kariya (CVE-2018-16864) a watan Afrilu 2013 (systemd v203) kuma anyi amfani dasu cikin watan Fabrairu 2016 (systemd v230).

Dangane da raunin rarar ƙwaƙwalwar mara iyaka (CVE-2018-16865), an gabatar da shi a watan Disamba na 2011 (systemd v38) kuma an yi amfani da shi a watan Afrilu 2013 (systemd v201), yayin da aka sami raunin ƙwaƙwalwar (CVE-2018-16866) a cikin Yuni 2015 (systemd v221) kuma ba tare da gangan ba an gyara shi a watan Agusta 2018.