{"id":107724,"date":"2023-04-04T18:48:10","date_gmt":"2023-04-04T16:48:10","guid":{"rendered":"https:\/\/prohoster.info\/?p=107724"},"modified":"2023-04-04T19:05:55","modified_gmt":"2023-04-04T17:05:55","slug":"v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","title":{"rendered":"Ve Fedo\u0159e se zva\u017euje mo\u017enost pou\u017eit\u00ed \u0161ifrov\u00e1n\u00ed souborov\u00e9ho syst\u00e9mu jako v\u00fdchoz\u00ed.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Owen Taylor, tv\u016frce GNOME Shell a knihovny Pango, kter\u00fd je \u010dlenem pracovn\u00ed skupiny pro rozvoj Fedora pro pracovn\u00ed stanice, p\u0159edlo\u017eil k diskusi pl\u00e1n na \u0161ifrov\u00e1n\u00ed syst\u00e9mov\u00fdch odd\u00edl\u016f a dom\u00e1c\u00edch adres\u00e1\u0159\u016f u\u017eivatel\u016f ve Fedora Workstation jako v\u00fdchoz\u00ed. Mezi v\u00fdhody p\u0159echodu na v\u00fdchoz\u00ed \u0161ifrov\u00e1n\u00ed pat\u0159\u00ed ochrana dat v p\u0159\u00edpad\u011b kr\u00e1de\u017ee notebooku, ochrana p\u0159ed \u00fatoky na opu\u0161t\u011bn\u00e1 za\u0159\u00edzen\u00ed, udr\u017een\u00ed d\u016fv\u011brnosti a integrity ji\u017e z krabice bez nutnosti dal\u0161\u00edch manipulac\u00ed. <\/p>\n

Podle p\u0159ipraven\u00e9ho n\u00e1vrhu pl\u00e1nu se k \u0161ifrov\u00e1n\u00ed pl\u00e1nuje pou\u017e\u00edt Btrfs fscrypt. Kl\u00ed\u010de \u0161ifrov\u00e1n\u00ed pro syst\u00e9mov\u00e9 odd\u00edly se pl\u00e1nuje uchov\u00e1vat v modulu TPM a pou\u017e\u00edvat v\u00e1zan\u00e9 na digit\u00e1ln\u00ed podpisy, kter\u00e9 slou\u017e\u00ed k ov\u011b\u0159ov\u00e1n\u00ed integrity zav\u00e1d\u011b\u010de, j\u00e1dra a initrd (tj. b\u011bhem procesu zav\u00e1d\u011bn\u00ed syst\u00e9mu se u\u017eivatel nebude muset zad\u00e1vat heslo pro de\u0161ifrov\u00e1n\u00ed syst\u00e9mov\u00fdch odd\u00edl\u016f). P\u0159i \u0161ifrov\u00e1n\u00ed dom\u00e1c\u00edch adres\u00e1\u0159\u016f se pl\u00e1nuje generov\u00e1n\u00ed kl\u00ed\u010d\u016f na z\u00e1klad\u011b u\u017eivatelsk\u00e9ho jm\u00e9na a hesla (p\u0159ipojen\u00ed \u0161ifrovan\u00e9ho dom\u00e1c\u00edho adres\u00e1\u0159e se provede b\u011bhem p\u0159ihl\u00e1\u0161en\u00ed u\u017eivatele do syst\u00e9mu). <\/p>\n

\u010casov\u00fd r\u00e1mec realizace t\u00e9to iniciativy z\u00e1vis\u00ed na p\u0159echodu distribuce na jednotn\u00fd obraz j\u00e1dra UKI (Unified Kernel Image), kter\u00fd spojuje v jednom souboru na\u010d\u00edtac\u00ed mechanismus pro j\u00e1dro z UEFI (UEFI boot stub), obraz j\u00e1dra Linux a na\u010d\u00edtan\u00e9 do pam\u011bti syst\u00e9mov\u00e9 prost\u0159ed\u00ed initrd. Bez podpory UKI nen\u00ed mo\u017en\u00e9 garantovat nem\u011bnnost obsahu prost\u0159ed\u00ed initrd, ve kter\u00e9m doch\u00e1z\u00ed k ur\u010den\u00ed kl\u00ed\u010d\u016f pro de\u0161ifrov\u00e1n\u00ed FS (nap\u0159\u00edklad \u00fato\u010dn\u00edk m\u016f\u017ee podvrhnout initrd a simulovat po\u017eadavek na heslo; k tomu, aby se tomu zabr\u00e1nilo, je nutn\u00e9 ov\u011b\u0159it, \u017ee cel\u00e1 \u0159et\u011bzce je na\u010dtena p\u0159ed p\u0159ipojen\u00edm FS). <\/p>\n

V aktu\u00e1ln\u00ed podob\u011b m\u00e1 instal\u00e1tor Fedora mo\u017enost \u0161ifrov\u00e1n\u00ed odd\u00edl\u016f na blokov\u00e9 \u00farovni pomoc\u00ed dm-crypt, s pou\u017eit\u00edm samostatn\u00e9 fr\u00e1ze pro heslo, kter\u00e1 nen\u00ed spojena s u\u017eivatelsk\u00fdm \u00fa\u010dtem. Tato ter\u010d \u0159e\u0161en\u00ed vykazuje probl\u00e9my, jako je nepou\u017eitelnost pro odd\u011blen\u00e9 \u0161ifrov\u00e1n\u00ed v v\u00edc u\u017eivatelsk\u00fdch syst\u00e9mech, absence podpory internacionalizace a prost\u0159edk\u016f pro osoby se zdravotn\u00edm posti\u017een\u00edm, mo\u017enost prov\u00e1d\u011bn\u00ed \u00fatok\u016f pomoc\u00ed podvr\u017een\u00e9ho zav\u00e1d\u011b\u010de (nainstalovan\u00fd \u00fato\u010dn\u00edkem zav\u00e1d\u011b\u010d se m\u016f\u017ee tv\u00e1\u0159it jako origin\u00e1ln\u00ed zav\u00e1d\u011b\u010d a po\u017eadovat heslo pro de\u0161ifrov\u00e1n\u00ed), a pot\u0159ebu podpory framebufferu v initrd pro zobrazen\u00ed v\u00fdzvy k zad\u00e1n\u00ed hesla.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 Fedora Workstation. \u0418\u0437 \u043f\u043b\u044e\u0441\u043e\u0432 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0440\u0430\u0436\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430, \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107724","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ve Fedo\u0159e zva\u017euj\u00ed mo\u017enost pou\u017eit\u00ed v\u00fdchoz\u00edho \u0161ifrov\u00e1n\u00ed souborov\u00e9ho syst\u00e9mu | ProHoster","description":"Owen Taylor, tv\u016frce GNOME Shell a knihovny Pango, kter\u00fd je \u010dlenem pracovn\u00ed skupiny pro v\u00fdvoj Fedora pro pracovn\u00ed stanice, p\u0159edlo\u017eil k diskusi pl\u00e1n pro \u0161ifrov\u00e1n\u00ed syst\u00e9mov\u00fdch odd\u00edl\u016f a dom\u00e1c\u00edch adres\u00e1\u0159\u016f jako v\u00fdchoz\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0424\u0421 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e | ProHoster","og:description":"\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-04T16:48:10+00:00","article:modified_time":"2023-04-04T17:05:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/107724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=107724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/107724\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=107724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=107724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=107724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}