{"id":124728,"date":"2025-05-15T09:05:09","date_gmt":"2025-05-15T07:05:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij"},"modified":"2025-05-15T09:05:09","modified_gmt":"2025-05-15T07:05:09","slug":"proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","title":{"rendered":"Projekt Tor p\u0159edstavil Oniux, n\u00e1stroj pro s\u00ed\u0165ovou izolaci aplikac\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
V\u00fdvoj\u00e1\u0159i projektu Tor p\u0159edstavili n\u00e1stroj Oniux, ur\u010den\u00fd k vynucen\u00e9mu sm\u011brov\u00e1n\u00ed provozu jednotliv\u00fdch aplikac\u00ed p\u0159es s\u00ed\u0165 Tor. Pro sv\u00e9 \u00fa\u010dely p\u0159ipom\u00edn\u00e1 Oniux d\u0159\u00edve dostupn\u00fd program torsocks a li\u0161\u00ed se vyu\u017eit\u00edm izolovan\u00fdch prostor\u016f n\u00e1zv\u016f (network namespace), kter\u00e9 poskytuje j\u00e1dro Linux, m\u00edsto nahrazov\u00e1n\u00ed funkc\u00ed standardn\u00ed knihovny pomoc\u00ed mechanismu LD_PRELOAD. K\u00f3d n\u00e1stroje je naps\u00e1n v jazyce Rust a distribuuje se pod licenci Apache 2.0 a MIT. <\/p>\n
Oniux umo\u017e\u0148uje vytvo\u0159it pro jakoukoli aplikaci izolovan\u00fd kontejner, jeho\u017e provoz je vynucen\u011b p\u0159esm\u011brov\u00e1n pouze p\u0159es s\u00ed\u0165 Tor. Pro odes\u00edl\u00e1n\u00ed provozu se vytv\u00e1\u0159\u00ed tunel na z\u00e1klad\u011b onionmasq, uvnit\u0159 kontejneru vypad\u00e1 jako virtu\u00e1ln\u00ed s\u00ed\u0165ov\u00e9 rozhran\u00ed (TUN). P\u0159\u00edstup k dostupn\u00fdm v r\u00e1mci hlavn\u00edho prost\u0159ed\u00ed s\u00ed\u0165ov\u00fdm rozhran\u00edm je blokov\u00e1n na \u00farovni izolace s\u00ed\u0165ov\u00e9ho stacku v samostatn\u00e9m prostoru n\u00e1zv\u016f. <\/p>\n
Ve srovn\u00e1n\u00ed s torsocks nov\u00e1 utilita neomezuje pouze na nahrazov\u00e1n\u00ed knihovn\u00edch funkc\u00ed, ale tak\u00e9 blokuje mo\u017en\u00e9 kan\u00e1ly \u00faniku (nap\u0159\u00edklad p\u0159esm\u011brov\u00e1n\u00ed p\u0159es torsocks lze obej\u00edt p\u0159\u00edm\u00fdm vol\u00e1n\u00edm syst\u00e9mov\u00fdch vol\u00e1n\u00ed j\u00e1dra). Program tak\u00e9 chr\u00e1n\u00ed p\u0159ed \u00faniky zp\u016fsoben\u00fdmi chybami v konfiguraci SOCKS proxy, kter\u00e1 sm\u011bruje provoz do s\u00edt\u011b Tor. Cenou za p\u0159\u00edsn\u011bj\u0161\u00ed izolaci je ztr\u00e1ta multiplatformnosti \u2014 Oniux m\u016f\u017ee fungovat pouze v Linuxu. <\/p>\n
N\u00e1stroj Oniux je samostatn\u00fd a nevy\u017eaduje spu\u0161t\u011bn\u00ed samostatn\u00e9ho na pozad\u00ed b\u011b\u017e\u00edc\u00edho procesu Tor. Interakce se s\u00edt\u00ed Tor v Oniux je postavena s vyu\u017eit\u00edm knihovny vyv\u00edjen\u00e9 projektem Arti, zat\u00edmco torsocks je zalo\u017een na CTor a pou\u017e\u00edv\u00e1 SOCKS proxy. N\u00e1stroj Oniux se m\u016f\u017ee uk\u00e1zat jako u\u017eite\u010dn\u00fd pro spou\u0161t\u011bn\u00ed aplikac\u00ed a slu\u017eeb, kter\u00e9 jsou kriticky d\u016fle\u017eit\u00e9 z hlediska zaji\u0161t\u011bn\u00ed soukrom\u00ed. <\/p>\n
Pou\u017eit\u00ed spo\u010d\u00edv\u00e1 v p\u0159id\u00e1n\u00ed vol\u00e1n\u00ed utilitky \u201eoniux\u201c p\u0159ed spu\u0161t\u011bn\u00edm po\u017eadovan\u00e9ho programu. Nap\u0159\u00edklad pro odesl\u00e1n\u00ed po\u017eadavku p\u0159es curl na Tor lze prov\u00e9st p\u0159\u00edkaz \u201eoniux curl URL\u201c, a pro sm\u011brov\u00e1n\u00ed jak\u00fdchkoli po\u017eadavk\u016f p\u0159es Tor v r\u00e1mci relace s p\u0159\u00edkazov\u00fdm interpretem \u2014 \u201eoniux bash\u201c. Podporov\u00e1na je izolace grafick\u00fdch aplikac\u00ed. \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"