Tsaro a cikin tsarin GNU / Linux, shin ya dogara da tsarin ko mai gudanarwa?

A kwanakin baya sun ruga ta cikin raga rahoton hare-hare Suna amfani da raunin rashin ƙarfi a cikin PHP, wanda ke bawa wasu shafuka na halal damar yin amfani da shafukan yanar gizo na talla da tallace-tallace, suna fallasa baƙi zuwa girka malware akan kwamfutocin su. Wadannan hare-haren suna amfani da damar a mawuyacin yanayin PHP sosai an fallasa shi a bayyane watanni 22 da suka gabata kuma wanda aka sake sabunta abubuwan da suka dace.

Wasu sun fara dagewa suna nuna cewa wani bangare na sabobin da aka lalata a cikin wadannan hare-hare sune nau'ikan GNU / Linux, suna nuna alamar tambaya game da tsaron wannan Tsarin Gudanarwar, amma ba tare da yin cikakken bayani game da yanayin rashin lafiyar ba ko dalilan me yasa abin ya faru wannan.

Tsarin tare da cutar GNU / Linux, a kowane hali, suna gudanar da Sigar kwayar Linux ta 2.6, wanda aka fitar a 2007 ko a baya. Babu wani dalili da aka ambaci kamuwa da tsarin da ke tafiyar da kyawawan kwayoyi ko kuma an sabunta su yadda ya kamata; amma ba shakka, har yanzu akwai masu gudanarwa waɗanda suke tunani "... idan ba a karye ba, baya buƙatar gyara" sannan waɗannan abubuwan suna faruwa.

A gefe guda, wani binciken kwanan nan da kamfanin tsaro na ESET ya yi, ya fallasa kiran daki daki "Operation Windigo", wanda a ciki ta hanyar kayan haɗin kai da yawa, gami da wanda ake kira Anyi aiki keɓaɓɓen tsari don Apache da sauran sanannun sabobin gidan yanar gizo, da kuma wani da ake kira Farashin SSH, sun kasance fiye da tsarin GNU / Linux 26,000 sun daidaita tun daga watan Mayun shekarar da ta gabata, shin wannan yana nuna cewa GNU / Linux ba su da tsaro?

Da farko dai, sanya abubuwa cikin mahallin, idan muka kwatanta lambobin da suka gabata tare da kusan kwamfutocin Windows miliyan 2 da aka samu matsala ta hanyar bootnet Samun nasara Kafin rufewa a cikin Disamba 2013, yana da sauƙi a kammala cewa, dangane da tsaro, Tsarin GNU / Linux har yanzu suna da aminci fiye da waɗanda suke amfani da Tsarin Gudanar da Microsoft, amma shin laifin GNU / Linux ne cewa tsarin 26,000 tare da wannan OS sun sami matsala?

Kamar yadda yake game da mahimmancin raunin PHP da aka tattauna a sama, wanda ke shafar tsarin ba tare da sabunta kwaya ba, waɗannan sauran hare-haren sun haɗa da tsarin da ba a canza sunan mai amfani da / ko kalmar wucewa ba wanda ya kiyaye an buɗe tashoshin jiragen ruwa 23 da 80 ba dole ba; To shin da gaske laifin GNU / Linux ne?

A bayyane yake, amsar ita ce A'A, matsalar ba OS ake amfani da ita ba amma rashin kula ne da rashin kulawar masu kula da waɗannan tsarin waɗanda basu fahimci iyakar abin da masanin tsaro ya faɗa ba Bruce schneier abin da ya kamata a ƙone a cikin kwakwalwarmu: Tsaro NE tsari BA samfurin bane.

Ba shi da amfani idan muka girka ingantaccen tsarin idan muka bar shi watsi kuma kada mu shigar da abubuwan sabuntawa da zarar an sake su. Hakanan, ba shi da amfani a ci gaba da sabunta tsarinmu idan ana ci gaba da amfani da takaddun shaidar tabbatarwa waɗanda suka bayyana ta tsohuwa yayin shigarwa. A kowane yanayi, hakan ne matakan tsaro na farko, waɗanda ba saboda maimaitawa bane, ana amfani dasu da kyau.

Idan kuna da ƙarƙashin kulawarku tsarin GNU / Linux tare da Apache ko wani sabar yanar gizo mai buɗewa kuma kuna son bincika idan an sami matsala, hanya mai sauƙi ce. A game da binne, dole ne ka buɗe m ka rubuta wannan umarnin:

ssh -G

Idan amsar ta bambanta da:

ssh: illegal option – G

sannan jerin ingantattun zaɓuɓɓuka don wannan umarnin, to tsarinku ya sami matsala.

Ga yanayin da Anyi aiki, aikin yana da ɗan rikitarwa. Dole ne ku buɗe m ku rubuta:

curl -i http://myserver/favicon.iso | grep "Location:"

Idan tsarinku ya kasance damuwa, to Anyi aiki zai sake tura buƙatar kuma ya ba ku fitarwa mai zuwa:

Location: http://google.com

In ba haka ba, ba zai dawo da komai ba ko wani wuri na daban.

Nau'in cututtukan cututtukan ƙwayoyin cuta na iya zama kamar ba shi da kyau, amma ita ce kawai aka tabbatar da tasiri: cikakken tsarin gogewa, sake shigarwa daga karce kuma sake saita dukkan takardun shaidarka mai amfani da mai gudanarwa daga tashar da ba a sanya ta ba. Idan kun sami wahala, la'akari da hakan, idan da kun canza takardun shaidarku da sauri, da ba ku daidaita tsarin ba.

Don cikakken bayani kan hanyoyin da waɗannan cututtukan ke aiki, da kuma takamaiman hanyoyin da ake amfani da su don yaɗa su da kuma matakan da suka dace da za a ɗauka, muna ba da shawarar zazzagewa da karanta cikakken nazarin abubuwan "Operation Windigo" samuwa a mahaɗin mai zuwa:

Aikin Windigo

A ƙarshe, a asali ƙarshe: Babu wani tsarin aiki wanda aka tabbatar akan masu kulawa ko rashin kulawa; Game da aminci, koyaushe akwai abin da za a yi, saboda kuskure na farko kuma mafi girma shi ne tunanin cewa mun riga mun cimma shi, ko ba ku tunanin haka?