{"id":36939,"date":"2019-10-31T22:14:51","date_gmt":"2019-10-31T19:14:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opublikovan-kod-analizatora-bezopasnosti-proshivok-fwanalyzer\/"},"modified":"2019-10-31T22:14:51","modified_gmt":"2019-10-31T19:14:51","slug":"opublikovan-kod-analizatora-bezopasnosti-proshivok-fwanalyzer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovan-kod-analizatora-bezopasnosti-proshivok-fwanalyzer","title":{"rendered":"Avaldatud FwAnalyzeri p\u00fcsivara turvaanal\u00fcsaatori kood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cruise, autot juhtimise tehnoloogiatele keskenduv ettev\u00f5te, avatud<\/a><\/noindex> projekti l\u00e4htekoodid FwAnalyzer<\/a><\/noindex>, mis pakub t\u00f6\u00f6riistu Linuxi p\u00f5histe pildifirmade anal\u00fc\u00fcsimiseks ja potentsiaalsete haavatavuste ning andmeleakide tuvastamiseks. Kood on kirjutatud Go keeles ja levitatakse<\/a><\/noindex> lisensiga Apache 2.0.<\/p>\n

toetab piltide anal\u00fc\u00fcsi, mis kasutavad ext2\/3\/4, FAT\/VFat, SquashFS ja UBIFS failis\u00fcsteeme. Pildi avamiseks kasutatakse tavap\u00e4raseid utiliite nagu e2tools, mtools, squashfs-tools ja ubi_reader. FwAnalyzer extrahib pildist katalooge ja hindab sisu reeglite kogumi p\u00f5hjal. Reeglid v\u00f5ivad olla seotud failis\u00fcsteemi metaandmete, failit\u00fc\u00fcpide ja sisu p\u00f5hjal. V\u00e4ljundiks on JSON-formaadis aruanne, mis kokkuv\u00f5tab pildist ekstraheeritud teabe ning esitab hoiatuse ja nimekirja failidest, mis ei vasta t\u00f6\u00f6deldud reeglitele. <\/p>\n

toetab failide ja kataloogide juurdep\u00e4\u00e4su\u00f5iguste kontrolli (nt tuvastatakse, kas k\u00f5igil on kirjutamis\u00f5igus ja vale UID\/GID m\u00e4\u00e4ramine), m\u00e4\u00e4ratakse kindlaks, kas olemas on suid-geeniusega t\u00e4idetavad failid ning SELinux'i m\u00e4rgiste kasutamine, tuvastatakse unustatud kr\u00fcptov\u00f5tmed ja potentsiaalselt ohtlikud failid. Sisu hulgast eristatakse inseneride j\u00e4relej\u00e4\u00e4nud paroole ja silumisandmeid, tuuakse v\u00e4lja versiooniteave, teostatakse t\u00e4idise kontrollimine SHA-256 r\u00e4si p\u00f5hjal ning otsitakse staatiliste maskide ja regulaaravaldiste abil. V\u00e4liste anal\u00fc\u00fcsiskripte saab siduda teatud failit\u00fc\u00fcpide juurde. Androidi p\u00f5histe piltide puhul tuvastatakse kogumise parameetrid (nt ro.secure=1 re\u017eiimi kasutamine, ro.build.type olek ja SELinux'i aktiveerimine).<\/p>\n

FwAnalyzerit saab kasutada teiste piltide turvaprobleemide anal\u00fc\u00fcsi lihtsustamiseks, kuid selle peamine eesm\u00e4rk on kvaliteedikontroll oma piltides v\u00f5i lepinguliste kolmandate osapoolte tarnijate poolt. FwAnalyzeri reeglid v\u00f5imaldavad koostada t\u00e4pse spetsifikatsiooni pildi olekust ning tuvastada lubamatud k\u00f5rvalekalded, nagu vale juurdep\u00e4\u00e4su \u00f5iguste m\u00e4\u00e4ramine v\u00f5i suletud v\u00f5tmete ja silumiskoodi j\u00e4tmine (nt kontrollimine aitab v\u00e4ltida selliseid olukordi nagu j\u00e4tmine<\/a><\/noindex> testimise faasis kasutatud ssh-serverist, eelnevalt m\u00e4\u00e4ratud<\/a><\/noindex> inseneride parool, saadav<\/a><\/noindex> lugemis\u00f5igus \/etc\/config\/shadow failile v\u00f5i unustatud<\/a><\/noindex> v\u00f5tmed<\/a><\/noindex> digitaalse allkirja koostamise).<\/p>\n

\"Avaldatud<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cruise, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u043c\u0438, \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 FwAnalyzer, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0431\u0430\u0437\u0435 Linux \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u0438\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u0438\u0437 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b ext2\/3\/4, FAT\/VFat, SquashFS \u0438 UBIFS. \u0414\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27676,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36939","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Avaldatud FwAnalyzer'i turvaskanneri kood | ProHoster","description":"Cruise, mis on spetsialiseerunud autot\u00f6\u00f6stuse automatiseerimise tehnoloogiatele, avas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovan-kod-analizatora-bezopasnosti-proshivok-fwanalyzer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0434 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a FwAnalyzer | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cruise, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u043c\u0438, \u043e\u0442\u043a\u0440\u044b\u043b\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovan-kod-analizatora-bezopasnosti-proshivok-fwanalyzer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:51+00:00","article:modified_time":"2019-10-31T19:14:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36939","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:26:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:36:24","updated":"2026-01-22 05:26:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36939","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36939"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36939\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27676"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}