El Ukuthuthukiswa kwenguqulo elandelayo yeFedora 45 kuyaqhubeka futhi ithembisa ukuba yisibuyekezo esinqumayo maqondana nokuphepha kanye nokusebenziseka kalula.
Futhi yilokho Iziphakamiso zobuchwepheshe zakamuva ezithunyelwe kwiKomidi Eliqondisa Ubunjiniyela beFedora Zembula ukugxila okucacile ekwenzeni inqubo yokufaka ibe yesimanje kanye nokuqinisa ukuvikelwa ekubuthakathakeni okubalulekile kwezinga lehadiwe.
Njengoba kucatshangwa njengenye yezinguqulo ezizogxila kakhulu ekuqineni kwesakhiwo sohlelo, inguqulo elandelayo ye I-Fedora 45 ayifuni nje kuphela ukwenza kube lula ukuthunyelwa kwezinhlelo zayo zokusebenza, kodwa futhi nokuzivikela kusuka ku-kernel yazo..
Ukufakwa okukude kwesimanje nge-Anaconda WebUI
Uno izinguquko eziphawuleka kakhulu Kuma-atomic desktop editions, njengeSilverblue neKinoite, yi- Ukusetshenziswa kwe-interface yewebhu ye-Anaconda WebUI yokuphatha ukufakwa ngokuphelele kude.
Uma uhlelo oluqondiwe luqala ngepharamitha ethile, Abasebenzisi bazokwazi ukuqedela yonke inqubo kusuka kusiphequluli sewebhu kwenye ikhompyuthaLesi sixazululo siqeda ngokuphelele isidingo sokusebenzisa amaklayenti edeskithophu akude avamile, asebenza ngaphansi kwendawo ephephile edinga ukuqinisekiswa kwe-PIN futhi abethela yonke ithrafikhi yenethiwekhi ngokuzenzakalelayo.
I-interface yewebhu ye-Anaconda isivele isekela ukufinyelela kokuthuthukiswa okukude nge-inst.webui.remote, kodwa ngaphandle kokuqinisekiswa, i-TLS, noma ukuhlukaniswa kokucushwa. Lolu shintsho lunezela izilawuli zokukhiqiza ezidingekayo ukuze lusetshenziswe njengesici sokuzikhethela.
Ukuqinisekiswa okusekelwe ku-PIN kulandela i-inst.rdppattern, ngenketho yokuphuma (inst.webui.remote.noauth) yokuthuthukiswa kanye namanethiwekhi athembekile.
I-HTTPS enezitifiketi ezizisayinile: I-Cockpit izikhiqiza ngokuzenzakalelayo.
I-Port 443 iyindlela ezenzakalelayo yokuthi abasebenzisi baxhumeke kuphela nge-https://
Ukucushwa kwekhabhinethi okuhlukanisiwe ukuvimbela izilungiselelo zomfaki ukuthi zingangeni ohlelweni olufakiwe.
Ukufinyelela kude akuvunyelwe ngokuzenzakalelayo; umsebenzisi kumele akuvumele ngokusobala esebenzisa inketho yokuqalisa ethi `inst.webui.remote`. Ngaphandle kwalokhu kusebenze, ukuziphatha kuhlala kungashintshi. Lolu shintsho lusebenza ezithombeni ze-Atomic Desktop.
Ngokwengeziwe, Lesi sinyathelo sihlose ukufaka esikhundleni sesifaki sakudala esisekelwe ku-interface yesithombe se-GTK ngaleli thuluzi elisha lewebhu. ihlanganiswe ngqo ngaphakathi kwezithombe zokufaka. Lolu shintsho luwusizo kakhulu kumadivayisi anezinsizakusebenza zehadiwe ezilinganiselwe kakhulu, njengoba ukucubungula okunzima kwesiphequluli kusebenza emshinini wokulawula womlawuli, okushiya idivayisi eqondiwe ukuthi icubungule isevisi yewebhu elula kakhulu.
Ukuqina kwe-kernel kanye nokuhlanzwa kwe-cryptographic
Ngakolunye uhlangothi i ukusatshalaliswa kuthatha isinyathelo sokuqala sokumisa i-API yesikhala somsebenzisi se-crypto, ingxenye ethi Kumenyezelwe ukuthi akusasebenzi ngenxa yezingozi zokuphepha ezingaba khona. Uhlelo luthi ukusetshenziswa kwalesi sixhumi esibonakalayo Kuzokhawulelwa eqenjini elincane kakhulu lamaphakheji aziwayo, ivula indlela yokususwa kwayo kokugcina okuhleliwe ezinguqulweni ze-kernel zesikhathi esizayo.
Ngokuhambisanayo, Ukuphelelwa yisikhathi kwezindlela ezithile zokusheshisa i-cryptographic hardware kuyaxazululwa. okwandise ngokungadingekile indawo yokuhlasela futhi okwakusetshenziswe ngaphambilini ukuguqula idatha ngonya. Ngokususa lezi zingxenye ezithile, Abathuthukisi baqinisekisa indawo ephephile kakhulu ngaphandle kokulahlekelwa ukusebenza kahle, ukuthembela ngokugcwele ekusetshenzisweni kwe-cryptographic okwenziwa ngqo nangokuphephile endaweni yomsebenzisi.
Ukuvikelwa okuthuthukisiwe ngobuchwepheshe be-Shadow Stack
Ngaphezu kwalokho, futhi Kuphakanyisiwe la Ukunika amandla okuzenzakalelayo kobuchwepheshe be-Shadow Stack ezinhlelweni ezihambisanayo ezingama-64-bit. Le ndlela yokusebenza, esekelwa yihadiwe yamaphrosesa anamuhla njenge-Intel kusukela esizukulwaneni seshumi nanye kuya phambili kanye nokwakhiwa kwe-AMD kwe-Zen3, idala uhlu oluzimele nolungaguquki lwamakheli okubuyisela imisebenzi eyenziwa uhlelo.
Uma umhlaseli ezama ukubhala kabusha ikheli lokubuyisa kwimemori eyinhloko ngokuchichima kwe-buffer, Uhlelo luzobona ngokushesha ukungafani ngokukuqhathanisa ne-Shadow Stack futhi luzokhiqiza okuhlukile.Lesi sinyathelo sivimbela ngempumelelo ukwenziwa kwekhodi engagunyaziwe. Sizovikela ngokusobala zonke izinhlelo zokusebenza kanye nemitapo yolwazi ehlanganiswe ngamathuluzi ajwayelekile okusabalalisa, sithuthukise kakhulu ukuma kokuphepha kwesistimu yokusebenza ngaphandle kokudinga ukungenelela komsebenzisi.