{"id":55510,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/linux-udalenie-pula-blokirovok-dev-random"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"linux-udalenie-pula-blokirovok-dev-random","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","title":{"rendered":"Linux: lukupooli eemaldamine \/dev\/random","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nagu teada, \/dev\/random, kr\u00fcptograafiliselt turvaline valejuhuslike numbrite generaator (CSPRNG), omab \u00fchte ebameeldivat probleemi \u2013 lukustusi. K\u00e4esolevas artiklis k\u00e4sitletakse, kuidas seda probleemi lahendada. <\/p>\n

Viimase paari kuu jooksul on juhuslike numbrite genereerimise vahendeid tuumas veidi ringi tehtud, kuid selle alla kuuluvaid probleeme lahendati laiemas ajavahemikus.<\/a><\/noindex>Viimased muudatused<\/a><\/noindex> tehti selleks, et v\u00e4ltida s\u00fcsteemik\u00f5ne getrandom() pikaajalist lukustamist s\u00fcsteemi k\u00e4ivitamisel, kuid aluseks olev p\u00f5hjus oli blokkeeriva juhusliku basseini k\u00e4itumine. Hiljutine puhastus eemaldas selle basseini ja oodati, et see suundub p\u00f5hituuma. <\/p>\n

Andy Lutomirski avaldas detsembri l\u00f5pus kolmanda versiooni pat\u0161ist. See toob kaasa \"kaks peamist semantilist muutust Linuxi juhuslikes API-des\".<\/i>Pat\u0161 lisab uue lipu GRND_INSECURE s\u00fcsteemik\u00f5ntele getrandom() (kuigi Lutomirski viitab sellele kui getentropy(), mis on glibc-s rakendatud getrandom() abil fikseeritud lippudega); see lipp sunnib k\u00f5net alati tagastama n\u00f5utud andmete arvu, kuid ilma garantiita, et need andmed on juhuslikud. Tuum p\u00fc\u00fcab lihtsalt anda parimaid juhuslikke andmeid, mis tal sel hetkel on. \"T\u00f5en\u00e4oliselt on parim, mida teha saab, nimetada seda 'INSECURE' (ebaturvaliseks), et takistada selle API kasutamist asjade jaoks, mis vajavad turvalisust.\"<\/i> Pat\u0161id eemaldavad samuti blokkeeriva basseini. Praegu toetab tuum kahte juhuslike andmete basseini, millest \u00fcks vastab \/dev\/random ja teine \/dev\/urandom, nagu on kirjeldatud selle<\/a><\/noindex><\/p>\n

2015. aasta. Blokkeeriv bassein on \/dev\/random jaoks; lugemine sellest seadmest blokeeritakse (millele viitab selle nimi), kuni s\u00fcsteemist kogutakse \"piisavalt\" entropiat, et rahuldada taotlust. Edasised lugemised sellest failist blokeeritakse samuti, kui basseinis ei ole piisavalt entropiat. artiklis<\/a><\/noindex> 2015 \u0433\u043e\u0434\u0430. \u0411\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u043b \u2014 \u044d\u0442\u043e \u043f\u0443\u043b \u0434\u043b\u044f \/dev\/random; \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u0443\u0434\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f (\u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0432 \u0432\u0438\u0434\u0443 \u0435\u0433\u043e \u0438\u043c\u044f) \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u00ab\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f\u00bb \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0432 \u043f\u0443\u043b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438. <\/p>\n

\u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0447\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \/dev\/random \u0432\u0435\u0434\u0435\u0442 \u0441\u0435\u0431\u044f \u043a\u0430\u043a getrandom() \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c flags \u0440\u0430\u0432\u043d\u044b\u043c \u043d\u0443\u043b\u044e (\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0444\u043b\u0430\u0433 GRND_RANDOM \u0432 noop). \u041f\u043e\u0441\u043b\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CRNG), \u0447\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \/dev\/random \u0438 \u0432\u044b\u0437\u043e\u0432\u044b getrandom(…,0) \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0438 \u0432\u0435\u0440\u043d\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n

Lutumirski \u00fctleb: \u201eMina arvan, et Linuxi lukkuplokk on oma aja \u00e4ra elanud. Linuxi CRNG genereerib v\u00e4ljundeid, mis on piisavalt head nende kasutamiseks isegi v\u00f5tmete genereerimisel. Lukustav plokk ei ole enam mingil praktilisel viisil tugevam ja selle s\u00e4ilitamiseks on vaja palju kahtlase v\u00e4\u00e4rtusega infrastruktuuri.\u201c <\/i><\/p>\n

Muudatused on tehtud silmas pidades, et olemasolevad programmused ei saaks kahjustada, ja tegelikult on probleemide arv, nagu n\u00e4iteks GnuPG v\u00f5tmete genereerimise pika ootamisega, v\u00e4henemas.<\/p>\n

\u201eNeed seerjad ei tohiks rikkuda \u00fchtegi olemasolevat programmi. \/dev\/urandom j\u00e4\u00e4b muutumatuks. \/dev\/random on endiselt lukustatud kohe p\u00e4rast s\u00fcsteemi k\u00e4ivitamist, kuid lukustamine toimub v\u00e4hem kui varem. getentropy() olemasolevate lippudega tagastab tulemuse, mis on praktiliste eesm\u00e4rkide jaoks sama sobiv kui varem.\u201c<\/i> <\/p>\n

Lutumirski m\u00e4rkis, et endiselt j\u00e4\u00e4b lahtiseks k\u00fcsimus, kas kernel peaks pakkuma nn \u201et\u00f5elisi juhuslikke numbreid\u201c, mida teatud m\u00e4\u00e4ral pidi pakkuma lukustav kernel. Ta n\u00e4eb sellega seoses vaid \u00fchte p\u00f5hjust: \u201eriiklike standardite j\u00e4rgimine\u201c. Lutumirski esitas h\u00fcpoteesi, et kui kernel peab seda tagama, peaks see olema tehtud t\u00e4iesti erineva liidese kaudu v\u00f5i peaks see olema viidud kasutajaruumi, andes sellele v\u00f5imaluse hankida toore s\u00fcndmuste proovide andmeid, mida saab kasutada sellise lukkuploki loomiseks. <\/p>\n

Stephan M\u00fcller v\u00e4itis, et tema komplekt parandustena<\/a><\/noindex> Linuxi juhuslike numbrite generaator (LRNG) (praegu on v\u00e4lja antud 26. versioon) v\u00f5ib olla viis t\u00f5estuslike juhuslike arvude esitlemiseks rakendustele, mis seda vajavad. LRNG \"vastab t\u00e4ielikult n\u00f5uetele \u201eEttepanekud entropiaallikate kohta, mida kasutatakse juhuslike bittide genereerimiseks\u201c SP800-90B\", mis teeb sellest lahenduse riiklikele standarditele.
\nMatthew Garrett esitas vastuv\u00e4ite termini \u201et\u00f5elised juhuslikud andmed\u201d suhtes, m\u00e4rkides, et valitud seadmeid on p\u00f5him\u00f5tteliselt v\u00f5imalik piisavalt t\u00e4pselt mudeldada, et muudab need ettearvatavaks: \u201eme ei vali siin kvant\u00fcritusi.\u201d<\/p>\n

M\u00fcller vastas, et see termin p\u00e4rineb Saksamaa standardist AIS 31, et kirjeldada juhuslike numbrite generaatorit, mis toob tulemuse \u201esama kiirus kui aluseks olev m\u00fcraallikas genereerib entropiat.\u201d <\/p>\n

Lisaks terminoloogia erinevustele toob blokeerimise olemasolu, nagu seda pakuvad LRNG-i plaastrid, lihtsalt kaasa mitmesuguseid probleeme, eriti kui see on saadaval privileegideta. <\/p>\n

Nagu \u00fctles Lutomirski: \u201eSee ei lahenda probleemi. Kui kaks erinevat kasutajat k\u00e4ivitavad rumalaid programme, nagu gnupg, siis nad lihtsalt v\u00e4listavad \u00fcksteist. Ma n\u00e4en, et praegusel hetkel on kaks peamist probleemi \\\/dev\\\/random: see on altid DoS-ile (st ressursside \u00e4rakasutamisele, pahatahtlikule m\u00f5jule v\u00f5i millelegi sarnasele), ja kuna selle kasutamiseks ei ole vaja privileege, on see ka kuritarvitamisele kalduv. Gnupg on vale, see on t\u00e4ielik kokkuvarisemine. Kui me lisame uue privileegideta liidese, mida gnupg ja sarnased programmid kasutavad, kaotame me j\u00e4lle.\u201d<\/i> <\/p>\n

M\u00fcller m\u00e4rkis, et getrandom() lisamine v\u00f5imaldab GnuPG-l n\u00fc\u00fcd seda liidest kasutada, kuna see tagab vajaliku garantii, et bassein on initsialiseeritud. P\u00e4rast arutelu GnuPG arendaja Werner Kocha kanssa usub M\u00fcller, et garantii on ainus p\u00f5hjus, miks GnuPG hetkel loeb otse \\\/dev\\\/random. Kuid kui on olemas privileegideta liides, mis on teenuse keelamise all (nagu praegu \\\/dev\\\/random), siis Lutomirski s\u00f5nul kasutatakse seda ebat\u00e4pselt m\u00f5nede rakenduste poolt. <\/p>\n

\u0422\u0435\u043e\u0434\u043e\u0440 \u0426\u0430\u043e (Theodore Yue Tak Ts’o), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b Linux, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u0441\u0432\u043e\u0435 \u043c\u043d\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0443\u043b\u0430. \u041e\u043d \u0441\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0443\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0434\u0435\u0438, \u0447\u0442\u043e Linux \u0438\u043c\u0435\u0435\u0442 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (TRNG): \u00ab\u044d\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0441\u0441\u043c\u044b\u0441\u043b\u0438\u0446\u0435\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u044d\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e, \u0447\u0442\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u0434\u0435\u043b\u0430\u043b\u0438 *BSD".<\/i><\/p>\n

He is also concerned that providing a TRNG mechanism will merely serve as bait for application developers and believes that, given the various types of hardware supported by Linux, it is impossible to guarantee TRNG in the kernel. The issue will not be resolved even by the possibility of working with hardware based solely on root privileges: \u00ab\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e\u0431\u044b \u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0446\u0435\u043b\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043a\u0430\u043a root, \u043f\u043e\u0442\u043e\u043c\u0443 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043a \u0432\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u00ab\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u0438\u043c\u00bb \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u0447\u0438\u0441\u043b\u0430\u043c".<\/i><\/p>\n

Mueller asked if Tsao has abandoned the implementation of the blocking pool that he himself proposed long ago. Tsao replied that he plans to adopt Lutomirski's patches and is actively opposed to reintroducing the blocking interface back into the kernel. <\/p>\n

\u201cThe kernel cannot provide any guarantees regarding whether the noise source has been characterized properly. The only thing that a GPG or OpenSSL developer can get is a vague sense that TRUERANDOM is 'better', and since they want greater security, they will undoubtedly try to use it. At some point, it will be blocked, and when some other clever user (perhaps a distribution release engineer) includes it in the init script and the systems stop working, users will only be left to complain to Linus Torvalds himself.\u201d<\/i> <\/p>\n

Tsao also advocates for providing cryptographers and those who truly need TRNG with a way to collect their own entropy in user space to use it at their discretion. He states that collecting entropy is not a process that can be performed by the kernel across all the hardware it supports; moreover, the kernel itself cannot evaluate the amount of entropy provided by different sources. <\/p>\n

\u201eYdin ei saa sekoittaa erilaisia h\u00e4iri\u00f6l\u00e4hteit\u00e4 kesken\u00e4\u00e4n, eik\u00e4 sen tietenk\u00e4\u00e4n pit\u00e4isi v\u00e4itt\u00e4\u00e4 tiet\u00e4v\u00e4ns\u00e4, kuinka paljon entropiabittej\u00e4 se saa, kun se yritt\u00e4\u00e4 pelata jotain 'kikattelevan entropian peli\u00e4' yksinkertaisella CPU-arkkitehtuurilla IoT\/Embedded-k\u00e4ytt\u00f6tapaukseen, kun kaikki on synkronoituna yhdest\u00e4 p\u00e4\u00e4generaattorista, eik\u00e4 ole mit\u00e4\u00e4n CPU-ohjekoodia rekisterin uudelleenj\u00e4rjest\u00e4miseen tai uudelleennime\u00e4miseen jne.\u201c.<\/p>\n

\u201eVoidaan puhua ty\u00f6kalujen tarjoamisesta, jotka yritt\u00e4v\u00e4t tehd\u00e4 n\u00e4m\u00e4 laskelmat, mutta t\u00e4llaisia asioita tulisi suorittaa jokaisen k\u00e4ytt\u00e4j\u00e4n laitteistolla, mik\u00e4 on suurimmalle osalle jakeluversioiden k\u00e4ytt\u00e4jist\u00e4 k\u00e4yt\u00e4nn\u00f6ss\u00e4 mahdotonta. Jos se on tarkoitettu vain kryptograafeille, niin se tehd\u00e4\u00e4n heid\u00e4n k\u00e4ytt\u00e4j\u00e4tilassaan. Ja \u00e4lk\u00e4\u00e4mme yksinkertaistako GPG:t\u00e4, OpenSSL:t\u00e4 jne., jotta kaikki sanovat: 'haluamme 'todellista satunnaisuutta' emmek\u00e4 hyv\u00e4ksy v\u00e4hemp\u00e4\u00e4'. Voidaan keskustella siit\u00e4, kuinka tarjoamme rajapintoja kryptograafeille, jotta he voivat saada tarvittavat tiedot p\u00e4\u00e4syll\u00e4 ensisijaisiin h\u00e4iri\u00f6l\u00e4hteisiin, jotka ovat eristettyj\u00e4 ja nimettyj\u00e4, ja ehk\u00e4 jollain tavalla h\u00e4iri\u00f6l\u00e4hde voi todentaa itsens\u00e4 kirjastossa tai sovelluksessa k\u00e4ytt\u00e4j\u00e4tilassa.\u201c.<\/i><\/p>\n

K\u00e4ytiin pieni keskustelu siit\u00e4, milt\u00e4 t\u00e4llainen rajapinta voisi n\u00e4ytt\u00e4\u00e4, sill\u00e4 esimerkiksi joidenkin tapahtumien voi olla turvallisuuteen vaikuttavia seurauksia. Cao huomautti, ett\u00e4 n\u00e4pp\u00e4inpainallusten (eli n\u00e4pp\u00e4inten painallusten) skannauskoodit sekoittuvat altaaseen osana entropian keruuta: \u201eT\u00e4m\u00e4n siirt\u00e4minen k\u00e4ytt\u00e4j\u00e4tilaan, jopa privilegioidun j\u00e4rjestelm\u00e4kutsun kautta, olisi v\u00e4hint\u00e4\u00e4nkin vahingollista\u201c. On t\u00e4ysin mahdollista, ett\u00e4 muut tapahtuma-aikahaastattelut voivat luoda jotakin tietovuotoa sivukanavilla. <\/p>\n

Seega tekib tunne, et Linuxi juhuslike arvude alamprogrammi pikaajaline probleem on lahenduse teel. Hiljutised muudatused juhuslike arvude alamprogrammis on tegelikult kaasa toonud ainult DoS probleeme selle kasutamisel. N\u00fc\u00fcd on aga v\u00e4lja t\u00f6\u00f6tatud t\u00f5husad viisid, kuidas saada parimaid juhuslikke arve, mida tuum suudab pakkuda. Kui TRNG on Linuxis endiselt soovitav, siis tuleb see puudus tulevikus k\u00f5rvaldada, kuid t\u00f5en\u00e4oliselt ei toimu see tuuma sees. <\/p>\n

Veidi reklaami \ud83d\ude42<\/h3>\n

\nAit\u00e4h, et olete meiega. Kas teile meeldivad meie artiklid? Kas soovite n\u00e4ha rohkem huvitavat sisu? Toetage meid, tellides teenuse v\u00f5i soovitades meid tuttavatele. Pilve VPS arendajatele alates $4.99<\/a><\/noindex>, ainulaadne entry-level serverite analoog, mille oleme teie jaoks v\u00e4lja m\u00f5elnud:<\/b> Kogu t\u00f5de VPS (KVM) E5-2697 v3 (6 Cores) 10GB DDR4 480GB SSD 1Gbps alates $19 v\u00f5i kuidas jagada serverit \u00f5igesti?<\/a><\/noindex> (saadaval RAID1 ja RAID10 variandid, kuni 24 tuuma ja kuni 40GB DDR4).<\/p>\n

Dell R730xd on Equinixi Tier IV andmekeskuses Amsterdamis kaks korda odavam?<\/b> Ainult meie juures 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB alates $199<\/a><\/noindex> Hollandis! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 alates $99!<\/b><\/b> Lugege sellest Kuidas luua ettev\u00f5tte tasemel infrastruktuuri, kasutades Dell R730xd E5-2650 v4 servereid, mille hind on 9000 eurot, taskukohase hinna eest?<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 \u044f\u0434\u0440\u0435 \u0431\u044b\u043b\u0438 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b, \u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0435\u0448\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043c\u043e\u043a. \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55510","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux: lukustuspuuli eemaldamine \\\/dev\\\/random | ProHoster","description":"Nagu teada, \/dev\/random, kr\u00fcptograafiliselt turvaline valejuhuslike numbrite generaator (CSPRNG), omab \u00fchte ebameeldivat probleemi \u2013 lukustusi. K\u00e4esolevas artiklis k\u00e4sitletakse, kuidas seda probleemi lahendada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Linux: \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \/dev\/random | ProHoster","og:description":"\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-21T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55510","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:30","updated":"2022-10-02 22:01:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}