Ukuqaliswa kwe-sudo ne-su ku-Rust kuhloselwe ukuthuthukisa ukuphepha kulezi zinsiza.
Ezinyangeni ezintathu ezedlule, sabelane lapha kubhulogi ngezindaba zokudalwa kwephrojekthi ethi "Sudo-rs" yi-ISRG, engumsunguli wephrojekthi ethi Let's Encrypt futhi ekhuthaza ukuthuthukiswa kobuchwepheshe ukuze kwandiswe ukuphepha kwe-inthanethi.
Kuleyo ncwadi sabelane ngeminye yemininingwane nezici zephrojekthi, okuhloswe ngayo ukudala ukusetshenziswa kwezinsiza ze-SUDO kanye ne-SU eRust (ungabheka incwadi kusixhumanisi esilandelayo ).
Inguqulo yokuqala ezinzile ye-sudo-rs
Isizathu sokusho lokhu ukuthi inguqulo yokuqala eqinile yephrojekthi yeSudo-rs isanda kwethulwa , lapho onjiniyela abavela kuFerrous Systems kanye neTweede Golf bahlanganyele ekuthuthukisweni ngezimali ezinikezwe yiGoogle, iCisco kanye ne-Amazon Web Services.
Kulabo abangajwayelene nephrojekthi ethi "Sudo-rs", ngingakutshela ukuthi inhloso yayo ukuthuthukisa izinguqulo ze-Rust ze-SUDO kanye ne-SU utilities, ezenzelwe ukwenza imiyalo egameni labanye abasebenzisi, njengoba i-SUDO iyisevisi yekhonsoli ezinhlelweni zokusebenza ezifana ne-Unix ukwenza imiyalo enamalungelo omunye umsebenzisi, ngokuzenzakalelayo i-root superuser.
Imisebenzi ethi `sudo` kanye nethi `su`, ku-`sudo-rs`, yabhalwa kusukela ekuqaleni ku-Rust, ulimi olusetshenziswa kakhulu futhi olunconywayo embonini, njengoba selube ngolunye lwezilimi eziyinhloko ze-Android futhi lusekelwa ngisho nanjengolimi lwesibili lokuhlela ku-kernel ye-Linux. I-Microsoft, yona, ikhulume ngezikhathi eziningana ngenhloso yayo yokubhala kabusha i-kernel kanye neminye yemitapo yolwazi ye-Windows equkethe.
Kuthiwa lezi zinsiza ziyahambisana nezinsiza zakudala ze-SUDO kanye ne-SU noma nini lapho kungenzeka, okuvumela ama-sudo-rs ukuthi asetshenziswe njengokufaka esikhundleni se-SUDO ezimweni ezijwayelekile ezihambisana nokucushwa okuzenzakalelayo kwe-/etc/sudoers ku-Ubuntu kanye ne-Debian. Ama-Sudo-rs asevele esetshenzisiwe esikhundleni sephakheji yendabuko ye-SUDO ekusakazweni kwe-Wolfi Linux, ngenhloso yokuhlinzeka ngezinga eliphezulu lokuphepha.
Ukusetshenziswa kolimi lwe-Rust ekuthuthukiseni i-SU ne-SUDO kufanele kunciphise ingozi yobuthakathaka obubangelwa ukuphathwa kwememori okungaphephile futhi kuqede ukwenzeka kwamaphutha njengokufinyelela indawo yememori ngemuva kokuthi ikhululiwe futhi iphelelwe yimemori emingceleni ye-buffer.
Ngaphezu kwalokho, ukuqinisekisa izinga elifanele lokuphepha, iphrojekthi ithuthukise uhlu olwandisiwe lwezivivinyo , oluvumela futhi ukuqapha ukugcinwa kwezinga elidingekayo lokuhambisana nesisetshenziswa sokuqala se-sudo. Ukuze kuncishiswe indawo yokuhlasela kanye nenani lobuthakathaka obungaba khona kuma-sudo-rs, kwanqunywa ukuthi kuyekwe ukusetshenziswa kokusebenza kwe-sudo okusetshenziswa kakhulu.
Phakathi komehluko nge-SUDO , kushiwo ukuthi imodi ye-use_pty ezenzakalelayo ifakiwe, phakathi kwezici ezingakasetshenziswa yi-mail_badpass, kanye nokuhambisana ne-sendmail, kuyilapho izici ezingakaqaliswa, kodwa zizongezwa esikhathini esizayo: i-sudoedit utility, izindlela ze-NOEXEC kanye ne-NOINTERCEPT, ukwesekwa kokuxhumanisa ukucushwa "okuzenzakalelayo" kuvinjelwa kubasebenzisi ngabanye kanye nemiyalo, ikhono lokuqinisekisa ngaphandle kokusebenzisa i-PAM.
Kuhle ukusho ukuthi kule nyanga kaSepthemba, kulindeleke ukuthi ikwazi ukuqinisekisa ikhwalithi yokuqaliswa nokuthi ukuhlolwa okuzimele kwesisekelo sekhodi ye-sudo-rs nakho kuhlelwe.
Ngaphezu kwalokho, kushiwo ukuthi inguqulo yesibili ihlelelwe ukwengeza amathuluzi okusebenza ezindaweni ezinabasebenzisi abaningi , njengemodi ye-NOEXEC, amalogi okuhlola, ikhono lama -sudoers lokufaka amamephu kubabungazi, kanye nokusekelwa kwamaqembu abasebenzisi angafika ku-16. Inguqulo yesithathu ihlelelwe ukuhambisana nokucushwa kwama -sudoers okusetshenziswa ku-Fedora, futhi izokwengeza futhi isisetshenziswa se -sudoedit futhi isebenzise izindlela ze-SELinux ne-AppArmor ukuthuthukisa ukuphepha.
Okokugcina , uma unesithakazelo sokufunda okwengeziwe ngalokhu , ungathola imininingwane kusixhumanisi esilandelayo.