Igatsha elisha leSudo 1.9.0 lifika futhi lezi yizindaba zalo

Ngemuva kweminyaka eyi-9 yokwakheka kwegatsha le-1.8.x leSudo, ukukhishwa kwenguqulo entsha kumenyezelwe isici esibalulekile sosizo esisetshenziselwa ukuhlela ukwenziwa komyalo egameni labanye abasebenzisi, inguqulo entsha ikhona "I-Sudo 1.9.0" futhi lokho kuphawula negatsha elisha.

Sudo insiza ebaluleke kakhulu futhi esetshenziswe ezinhlelweni ezisebenza njenge-Unix, njengeLinux, BSD, noma iMac OS X, njengoba kushiwo, lokhu ivumela abasebenzisi ukusebenzisa izinhlelo ngamalungelo okuphepha omunye umsebenzisi (imvamisa umsebenzisi wezimpande) ngokuphepha, ngaleyo ndlela abe umphathi omkhulu okwesikhashana.

Ngokuzenzakalelayo, umsebenzisi kufanele aqinisekise ngephasiwedi yakhe lapho esebenzisa i-Sudo. Lapho umsebenzisi eseqinisekisiwe futhi uma ifayili lokumiswa le / etc / sudoers livumela ukunika umsebenzisi ukufinyelela kumyalo odingekayo, uhlelo luyalwenza.

Kukhona inketho yokunika amandla ipharamitha ye-NOPASSWD ukuze ugweme ukufaka iphasiwedi dkanye nomsebenzisi lapho wenza umyalo. Ifayela lokumiswa / njll / le-sudoers licacisa ukuthi yibaphi abasebenzisi abangenza imiphi imiyalo egameni labanye abasebenzisi.

Njengoba i-Sudo iqinile kakhulu ngefomethi yaleli fayela futhi noma yimaphi amaphutha angadala izinkinga ezinkulu, kukhona okusetshenziswayo kwe-visudo; Le nketho isetshenziselwa ukubheka ukuthi ifayela le- / etc / sudoers alisetshenziswa kusuka kwesinye isikhathi somsebenzisi wezimpande, ngaleyo ndlela kugwenywe ukuhlela okuningi ngenkohlakalo yefayela.

Izindaba eziyinhloko kuSudo 1.9.0

Kule nguqulo entsha umsebenzi owenziwe futhin unikeze ukwakheka inqubo yangemuva «Sudo_logsrvd«, lokhu yakhelwe ukubhaliswa okukodwa kwezinye izinhlelo. Lapho kwakhiwa iSudo ngenketho «-Nika amandla-ukuvula«, Idatha idluliselwa ngaphezulu kwesiteshi sokuxhumana esibethelwe (TLS).

Amarekhodi ihlelwe kusetshenziswa inketho ye-log_servers kuma-sudoers kanye nokukhubaza ukwesekwa kwendlela entsha yokuhambisa ilog, i - '-Khubaza-log-server»Kanye ne-« –disable-log-client ».

Futhi, uhlobo olusha lwe-plugin lungeziwe «Ukucwaningwa kwamabhuku», othumela imiyalezo emayelana nezingcingo eziphumelelayo nezingaphumeleli, kanye nangamaphutha enzekayo, kanye nohlobo olusha lwe-plugin olukuvumela ukuthi uxhume izilawuli zakho ukuze ungene futhi ezinganciki ekusebenzeni okujwayelekile. Isibonelo, isilawuli sokubhala amarekhodi ngefomethi ye-JSON senziwa ngendlela ye-plugin.)

Futhi uhlobo olusha lwama-plugins lungeziwe «kuvunyelweLokho zisetshenziselwa ukwenza amasheke angeziwe ngemuva kokuhlolwa okuyisisekelo kokugunyazwa abaphumelelayo abathanda umthetho. Ama-plugins amaningi alolu hlobo angacaciswa kuzilungiselelo, kepha ukuqinisekiswa kokusebenza kukhishwa kuphela uma kuvunywa yiwo wonke ama-plugins asohlwini lwezilungiselelo.

KuSudo futhi Sudo_logsrvd, ifayela lokungena elengeziwe lenziwa ngefomethi ye-JSON, ekhombisa imininingwane emayelana nayo yonke imingcele yemiyalo esebenzayo, kufaka phakathi negama lomgcini. Le rejista isetshenziswa ngumbuso sudore, lapho kungenzeka khona ukuhlunga imiyalo ngegama lomethuleli.

Uhlu lokuphikisana komugqa womyalo ludlule kokuhlukahluka kwemvelo sudo_command manje isinqunyelwe izinhlamvu ezingama-4096.

Kwezinye izinguquko okugqamile esikhangisweni:

  • Umyalo weSudo -S manje uprinta zonke izicelo kokukhipha okujwayelekile noma ku-stderr, ngaphandle kokufinyelela kudivayisi yokulawula ukuphela.
  • Ukuhlola ukuxhumana neseva noma ukuthumela izingodo ezikhona, insiza ye- sudo_sendlog iyaphakanyiswa;
  • Kungezwe amandla wokuthuthukisa ama-plugins eSudo ePython, enikwa amandla ngesikhathi sokuhlanganiswa nenketho «-Nika amandla-python".
  • En amajezi, esikhundleni Cmnd_Aliases, Cmd_Aliases Manje kusebenza futhi.
  • Kungezwe izilungiselelo ezintsha pam_ruser kanye pam_rhost ukunika amandla / ukukhubaza ukusetha igama lomsebenzisi nezilungiselelo zokubamba lapho usetha iseshini nge-PAM.
  • Kungenzeka ucacise ngaphezulu kwe-hashi eyodwa ye-SHA-2 kulayini womyalo ohlukaniswe ngokhefana. I-hasha ye-SHA-2 nayo ingasetshenziswa kuma-sudoers ngokuhlangana negama elithi "BONKE" ukuchaza imiyalo engenziwa kuphela lapho i-hashi ifana.

Yiba ngowokuqala ukuphawula

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.