ISigstore: Iprojekthi yokuphucula ikhonkco lonikezo lomthombo ovulekileyo
Namhlanje siza kuthetha "Sigstore". Enye yezinto ezininzi Iiprojekthi zasimahla nezivuliweyo phantsi koqeqesho lwe Isiseko seLinux.
"Sigstore" Ngokuyisiseko iprojekthi eyenzelwe ukubonelela ngenkonzo elungileyo yoluntu engenzi nzuzo, ukuya phucula unikezelo de isoftware evulekile ukuququzelela ukwamkelwa kwesoftware ye-cryptographic signature exhaswa bubuchwephesha bobhaliso lobuchwephesha.
"Sigstore"Ayisiyiyo yodwa Iprojekthi yeLinux Foundation ebesithetha ngazo kwizihlandlo ezidlulileyo. Omnye wabo ebenjalo IBanga leZithuthi leLinux, esichaza ngelo xesha ngolu hlobo lulandelayo:
"Umgangatho weZithuthi (Umgangatho) weLinux yiprojekthi yokusebenzisana evulekileyo edibanisa oomatshini, abathengisi kunye neenkampani zetekhnoloji ukukhawulezisa uphuhliso nokwamkelwa kwesoftware evulekileyo ngokupheleleyo yemoto yexesha elizayo. Nge-Linux embindini wayo, i-AGL iphuhlisa iqonga elivulekileyo ukusuka emhlabeni ukuya phezulu elinokuthi lisebenze njengomgangatho weefektri wokwenza ukuba uphuculo olukhawulezayo lweempawu ezintsha kunye neetekhnoloji." Isiseko seLinux: Yazisa kwi-Consumer Electronics Show 2020
Emva kwexesha, kupapasho lwexesha elizayo siza kujongana nezinye iiprojekthi, kodwa kwabo banqwenela ukuphonononga ezinye zabo bodwa, banokwenza njalo ngale linki ilandelayo: Iiprojekthi zeLinux Foundation.
ISigstore: Iprojekthi yeSiseko seLinux
Yintoni iSigstore?
Ngokutsho kwakhe Indawo esemthethweni yeSigstoreikwayile:
"Iprojekthi eyenziweyo ngenjongo yokubonelela ngenkonzo elungileyo yoluntu engenzi nzuzo yokuphucula ikhonkco lonikezelo lwesoftware evulekileyo ngokuququzelela ukwamkelwa kwesiginesha yesoftware ebhaliweyo, exhaswa bubuchwephesha bobhaliso lobuchwephesha. Ukongeza, izama ukuqeqesha abaphuhlisi besoftware ukuba basayine ngokukhuselekileyo isoftware yezinto ezinje ngeefayile zokukhupha, imifanekiso yezikhongozeli, iibhanari, ibhili yezinto ezibonakalayo, kunye nokunye."
Ukongeza, le projekthi ifuna ukuqinisekisa ukuba:
"Izinto ezisayiniweyo zigcinwa kwirekhodi eluntwini-elinobungqina."
Kutheni le nto iSigstore ibalulekile?
Le projekthi, izixhobo zayo kunye namalungu, ifuna ukuyiphepha «uhlaselo lonikezelo lwesoftwe », ezinje, kwenzeka ntoni nge I-SolarWinds nabanye bayaziwa kumaxesha akutshanje.
"UMicrosoft uthe abahlaseli batyeshele ukubeka esweni kunye nesoftware yolawulo lweSolarWinds ', ebavumela ukuba bazenze nawuphi na umsebenzisi okhoyo kunye neakhawunti kwintlangano, kubandakanya neakhawunti enkulu. I-Russia kuthiwa ixhaphaze iileya zecandelo lonikezelo ukufikelela kwiinkqubo zearhente zikarhulumente."
Makuqondwe ngu «uhlaselo lonikezelo lwesoftwe » kwisenzo apho, I-hacker ifaka ikhowudi enobungozi kwisoftware esemthethweni ukuyisasaza kuyo yonke indawo.
Yiyo loo nto, iiprojekthi zasimahla / ezivulekileyo ezisimahla nezilula ukuziphumeza, ezinje nge "Sigstore" ziyimfuneko ngakumbi nangakumbi kwimihla yethu.
Ungaluthintela njani uhlaselo kunikezelo lwesoftware?
Nangona, ngamanye amaxesha, siye sanikezela ngengcebiso ngokhuseleko, eluncedo kuye wonke umntu kwaye ngawo onke amaxesha okanye iimeko, ezi ngcebiso zilandelayo zijolise ngqo ekunciphiseni olu hlaselo kangangoko:
- Gcina uluhlu lwezinto zonke kunye nesoftware yomntu wesithathu, zombini zisimahla kwaye zivulekile, kunye nokuthengisa kunye nokuvalwa, ezisetyenzisiweyo.
- Yazi ukuba semngciphekweni okwaziwayo nokuzayo, kwazo zonke izicelo kunye neenkqubo ezisetyenzisiweyo, ukufaka isicelo ngokukhawuleza kwiipatches ezikhoyo ngokusemthethweni.
- Hlala unolwazi malunga nolwaphulo olufunyenweyo okanye uhlaselo olwenziwe, ukuba ngumnini kunye nabanikezeli besoftware, ukunqanda isimanga esingalindelwanga kwezi ndlela
- Ukuphelisa ngexeshana elifutshane, ezi nkqubo, iinkonzo kunye neeprotocol ezinokuthi zingafuneki (zingafuneki) okanye ziphelelwe lixesha (zingasetyenziswanga).
- Cwangcisa kwaye uphumeze ubuchule ngokudibeneyo kunye neemfuno zokhuseleko kunye nabanikezeli besoftware yakho, ukunciphisa umngcipheko we-IT kubo kunye neenkqubo zakho zokhuseleko.
- Qhuba uphicotho lwekhowudi rhoqo. Kwaye ugcine uhlaziyo lokhuselo oluhlaziyiweyo kunye neenkqubo zolawulo zotshintsho, ezifunekayo kwicandelo ngalinye lekhowudi eyenziweyo okanye esetyenzisiweyo.
- Yenza uvavanyo lokungena rhoqo ukuze uchonge iingozi ezinokubakho kwiqonga lakho lekhompyutha.
- Sebenzisa amanyathelo okhuseleko e-IT, anje ngolawulo lofikelelo kunye nokuqinisekiswa kwezinto ezimbini (2FA) ukukhusela iinkqubo zophuhliso lwesoftware.
- Sebenzisa isoftware yokhuseleko ngeendlela ezininzi zokukhusela. Ngokukodwa ngokuchasene ne-intrusions, ii-virus kunye ne-rasomwares, eziqhelekileyo kule mihla.
- Gcina ugcino lwakho okanye isicwangciso esingalindelekanga sihlaziyiwe, ukuze gcina ngokukhuselekileyo idatha ebalulekileyo yezicelo zakho, iinkqubo kunye nemisebenzi (iinkqubo), kwaye ube nakho ukubuyisa nayiphi na kuzo, ngexesha elifutshane.
Okungakumbi malunga Isigstore
Okokugqibela, abaphuhlisi be "Sigstore" bachaza kancinci ukusebenza kwale projekthi ngale ndlela ilandelayo:
"Isigstore ihambisa ubuchwephesha obukhoyo be-x509 ye-PKI kunye nokubhaliswa okungafihli nto. Abasebenzisi bavelisa izibini eziphambili zexesha elifutshane besebenzisa izixhobo zabaxhasi besigstore. Inkonzo ye-sigstore PKI iya kuthi emva koko ibonelele ngesatifikethi sokutyikitya esenziwe emva kwesibonelelo se-OpenID sokudibanisa. Zonke izatifikethi zirekhodwa kwirejista yokubonisa elubala kwiziqinisekiso kunye nezixhobo zokutyikitya isoftware zingeniswa kwirejista yobungqina obubonakalayo"
"Sebenzisa iirekhodi ezibonisa elubala kwazisa ingcambu yentembelo kwiakhawunti yomsebenzisi evulekileyo. Yiyo loo nto sinokuba nesiqinisekiso sokuba umsebenzisi obanga ibelawulo wayephethe iakhawunti yomboneleli ngenkonzo yesazisi ngexesha lokusayina. Nje ukuba umsebenzi wokutyikitya ugqityiwe, amaqhosha anokulahlwa, kususwe nasiphi na isidingo solawulo olongezelelweyo okanye imfuneko yokurhoxiswa okanye yokujikeleza."
Ngolwazi oluthe vetshe malunga "Sigstore" ungandwendwela eyakho iwebhusayithi esemthethweni kwiGitHub kunye nayo Uluntu (Iqela) loluntu malunga Uphando.
Isishwankathelo
Siyathemba ukuba oku "Uncedo oluncinci" malunga «Sigstore», Iprojekthi enomdla kwaye iluncedo Isiseko seLinuxYintoni a Ukusebenza elubala kunye nokutyikitywa kwesoftware ukulungelwa koluntu kunye nokungenzi nzuzo, eyenzelwe phucula unikezelo isoftware evulekileyo; Inomdla omkhulu kwaye iluncedo kuyo yonke «Comunidad de Software Libre y Código Abierto» kunye negalelo elikhulu ekusasazekeni kwendalo emangalisayo, enkulu kunye nokukhulayo kwezicelo ze «GNU/Linux».
Okwangoku, ukuba uyithandile le publicación, Sukuyeka yabelani nabanye, kwiiwebhusayithi zakho ozithandayo, amajelo, amaqela okanye uluntu lwenethiwekhi yoluntu okanye iinkqubo zemiyalezo, ngokukhethekileyo simahla, sivulekile kunye / okanye sikhuseleke ngakumbi njenge yocingo, Uphawu, IMododon okanye enye Ulungelelaniso, ngokukhethekileyo.
Kwaye khumbula ukutyelela iphepha lethu lasekhaya e «DesdeLinux» ukuphonononga ezinye iindaba, kunye nokujoyina ijelo lethu elisemthethweni le- ITelegram ye DesdeLinux. Ngelixa, ngolwazi oluthe kratya, ungandwendwela nayiphi na Ilayibrari ekwi-Intanethi njengaye VulaLibra y IJedIT, ukufikelela nokufunda iincwadi zedijithali (ii-PDFs) kwesi sihloko okanye ezinye.