{"id":55510,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/linux-udalenie-pula-blokirovok-dev-random"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"linux-udalenie-pula-blokirovok-dev-random","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","title":{"rendered":"Linux: blokeeringute basseini eemaldamine \/dev\/random","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nagu teada, on \/dev\/random, kr\u00fcptograafiliselt turvaline pseudojuhuslike arvude generaator (CSPRNG), \u00fche ebameeldiva probleemiga - takistustega. Selles artiklis k\u00e4sitletakse, kuidas seda lahendada. <\/p>\n

Viimase paari kuu jooksul on juhuslike arvude genereerimise vahendeid tuumas veidi \u00fcmber t\u00f6\u00f6tatud, kuid selle alamk\u00e4su probleemide lahendamine on toimunud laiemates ajaraamides.<\/a><\/noindex>Viimased muudatused<\/a><\/noindex> tehti selleks, et v\u00e4ltida s\u00fcsteemikutsu getrandom() pikaldast blokeerimist s\u00fcsteemi k\u00e4ivitamisel, kuid selle aluseks olid takistava juhusliku basseini k\u00e4itumine. Hiljutine parandus eemaldas selle basseini ja oodati, et see suundub p\u00f5hituuma. <\/p>\n

Andy Lutomirski avaldas detsembri l\u00f5pus kolmanda versiooni parandusest. See toob endaga \u201ekaks peamist semantilist muudatust Linuxi juhuslikes API-des\u201c<\/i>. Patach lisab uue GRND_INSECURE lipu s\u00fcsteemik\u00f5nele getrandom() (kuigi Lutomiirski nimetab seda getentropy'ks, mis on glibc-s rakendatud getrandom() kaudu fikseeritud lippudega); see lipp sunnib k\u00f5net alati tagastama soovitud andmete hulga, kuid ilma garantiita, et need andmed oleksid juhuslikud. S\u00fcdamik p\u00fc\u00fcab lihtsalt anda parimaid juhuslikke andmeid, mis tal antud hetkel on. \u201eT\u00f5en\u00e4oliselt on parim, mida teha, nimetada seda 'INSECURE' (mitteohutuks), et takistada selle API kasutamist asjade jaoks, mis vajavad turvalisust.\u201c<\/i> (\u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c), \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u044d\u0442\u043e\u0433\u043e API \u0434\u043b\u044f \u0432\u0435\u0449\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0443\u0436\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb.<\/a><\/noindex><\/p>\n

Patchid eemaldavad ka blokeeritud puu. Praegu toetab s\u00fcdamik kahte juhuslike andmete puu, millest \u00fcks vastab \/dev\/random'ile ja teine \/dev\/urandom'ile, nagu on kirjeldatud selles artiklis<\/a><\/noindex> 2015. aastal. Blokeeritud puu on puu \/dev\/random jaoks; selle seadme lugemine blokeeritakse (t\u00e4hendab, et selle nimi) seni, kuni s\u00fcsteemist on kogutud piisav entropia, et rahuldada p\u00e4ringut. Edasi lugemine sellest failist blokeeritakse samuti, kui puus pole piisavalt entropiat. <\/p>\n

\u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0447\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \/dev\/random \u0432\u0435\u0434\u0435\u0442 \u0441\u0435\u0431\u044f \u043a\u0430\u043a getrandom() \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c flags \u0440\u0430\u0432\u043d\u044b\u043c \u043d\u0443\u043b\u044e (\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0444\u043b\u0430\u0433 GRND_RANDOM \u0432 noop). \u041f\u043e\u0441\u043b\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CRNG), \u0447\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \/dev\/random \u0438 \u0432\u044b\u0437\u043e\u0432\u044b getrandom(…,0) \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0438 \u0432\u0435\u0440\u043d\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n

Lutomirski \u00fctleb: \u00abMa arvan, et Linuxi blokeeriv plokk on oma aja \u00fcle elanud. Linuxi CRNG genereerib v\u00e4ljundit, mis on piisavalt hea, et seda kasutada isegi v\u00f5tmete genereerimiseks. Blokeeriv plokk ei ole mingil materiaalsel tasemel tugevam ja selle hoidmiseks on vajalik palju k\u00fcsitava v\u00e4\u00e4rtusega infrastruktuuri.\u00bb <\/i><\/p>\n

Muudatused on tehtud eesm\u00e4rgiga, et olemasolevad programmid ei kannataks ja tegelikult muutub v\u00e4hem probleemseks pika ooteaegade olukord, nagu GnuPG v\u00f5tmete genereerimine.<\/p>\n

\u201eNeed seeriad ei tohi rikkuda olemasolevaid programme. \/dev\/urandom j\u00e4\u00e4b muutumatuks. \/dev\/random j\u00e4\u00e4b endiselt kohe p\u00e4rast laadimist blokeerituks, kuid v\u00e4hem kui varem. getentropy() koos olemasolevate lipudega tagastab tulemuse, mis on praktiliste eesm\u00e4rkide jaoks sama sobiv nagu varem.\u201d<\/i> <\/p>\n

Lutomirski m\u00e4rkis, et siiani on avatud k\u00fcsimus, kas kernel peaks pakkuma nn \u201ep\u00e4ris juhuslikke numbreid\u201d, nagu peaks blokeeriv kernel mingil m\u00e4\u00e4ral tegema. Ta n\u00e4eb selleks vaid \u00fchte p\u00f5hjust: \u201eriiklike standardite j\u00e4rgimine\u201d. Lutomirski pakkus, et kui kernel peab seda tagama, siis peaks see toimuma t\u00e4iesti erineva liidese kaudu v\u00f5i tuleks see viia kasutajaruumi, pakkudes talle v\u00f5imalust hankida tooreid s\u00fcndmuste proovide, mida saab kasutada sellise blokeerimismahuti moodustamiseks. <\/p>\n

Stephan M\u00fcller pakkus, et tema komplekt pat\u0161id<\/a><\/noindex> Linuxi juhuslike arvn\u00e4htude generaator (LRNG) (praegu on v\u00e4lja antud 26. versioon) v\u00f5ib olla viis t\u00f5eliselt juhuslike arvn\u00e4htude pakkumiseks rakendustele, mis seda vajavad. LRNG \"vastab t\u00e4ielikult \"Juhendite n\u00f5uetele energiaallikate jaoks, mida kasutatakse juhuslike bitide genereerimiseks\" SP800-90B\", mist\u00f5ttu on see lahendus riiklikele standarditele.
\nMatthew Garrett kahtles m\u00f5iste \"t\u00f5elised juhuslikud andmed\" \u00fcle, m\u00e4rkides, et valitud seadmeid saab p\u00f5him\u00f5tteliselt simuleerida piisavalt t\u00e4pselt, et muuta need ennustatavaks: \"me ei korja siin kvant\u00fcritusi\".<\/p>\n

M\u00fcller vastas, et see termin tuleneb Saksamaa standardist AIS 31, mis kirjeldab juhuslikke arvn\u00e4htude generaatorit, mis ainult v\u00e4ljastab tulemuse \"sama kiirusel, millega baasiline m\u00fcraallikas tootab entropiat\". <\/p>\n

Lisaks terminoloogia erinevustele t\u00f5i LRNG pat\u0161ides ette n\u00e4htud lukustamisbaseni olemasolu lihtsalt kaasa erinevaid probleeme, v\u00e4hemalt kui see on kergesti ligip\u00e4\u00e4setav ilma privileege omamata. <\/p>\n

Kuidas \u00fctles Lutomirski: \u201eSee ei lahenda probleemi. Kui kaks erinevat kasutajat k\u00e4ivitavad rumalaid programme, nagu gnupg, lihtsalt t\u00fchjendavad nad \u00fcksteist. N\u00e4en, et hetkel on kaks peamist probleemi \/dev\/randomiga: see on aldis DoS-le (st ressursi ammendamine, halvad m\u00f5jud v\u00f5i midagi sarnast), ja kuna selle kasutamiseks ei ole mingeid privileege n\u00f5utud, on see samuti aldis kuritarvitustele. Gnupg on vale, see on t\u00e4ielik kokkuvarisemine. Kui lisame uue mittepriviligeeritud liidese, mida gnupg ja sarnased programmid kasutavad, siis kaotame me j\u00e4lle.\u201d<\/i> <\/p>\n

M\u00fcller m\u00e4rkis, et getrandom() lisamine v\u00f5imaldab n\u00fc\u00fcd GnuPG-l seda liidest kasutada, kuna see tagab, et puhver on initsialiseeritud. P\u00e4rast arutelusid GnuPG arendaja Werner Kocho (Werner Koch) kanssa usub M\u00fcller, et see garantii on ainus p\u00f5hjus, miks GnuPG praegu loeb otse \/dev\/random. Kuid kui on olemas privileegita liides, mis on aldis teenuse keelamisele (nagu praegu \/dev\/random), siis v\u00e4idab Lutomirski, et seda kasutatakse valesti m\u00f5nede rakenduste poolt. <\/p>\n

\u0422\u0435\u043e\u0434\u043e\u0440 \u0426\u0430\u043e (Theodore Yue Tak Ts’o), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b Linux, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u0441\u0432\u043e\u0435 \u043c\u043d\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0443\u043b\u0430. \u041e\u043d \u0441\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0443\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0434\u0435\u0438, \u0447\u0442\u043e Linux \u0438\u043c\u0435\u0435\u0442 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (TRNG): \u00ab\u044d\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0441\u0441\u043c\u044b\u0441\u043b\u0438\u0446\u0435\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u044d\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e, \u0447\u0442\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u0434\u0435\u043b\u0430\u043b\u0438 *BSD".<\/i><\/p>\n

Ta on mures, et TRNG mehhanismi pakkumine teenib lihtsalt rakenduste arendajate k\u00f6itmiseks ja arvab, et arvestades Linuxi toetatavaid erinevaid riistvara t\u00fc\u00fcpe, on k\u00fcllalt keeruline tagada TRNG tuumas. Probleemi ei lahenda isegi juurprivileegide alusel t\u00f6\u00f6tamine. \u00ab\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e\u0431\u044b \u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0446\u0435\u043b\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043a\u0430\u043a root, \u043f\u043e\u0442\u043e\u043c\u0443 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043a \u0432\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u00ab\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u0438\u043c\u00bb \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u0447\u0438\u0441\u043b\u0430\u043c".<\/i><\/p>\n

M\u00fcller k\u00fcsis, kas Cao on loobunud blokeeriva koosluse rakendamisest, mida ta ise juba ammu soovitas. Cao vastas, et plaanib v\u00f5tta Lutomirski pat\u0161id ja on aktiivselt vastu blokeeriva liidese lisamisele tagasi tuumasse. <\/p>\n

Kern ei saa anda mingeid garantiisid selle kohta, kas m\u00fcrasaajate kirjeldamine on olnud n\u00f5uetekohane. Ainus, mille GPG v\u00f5i OpenSSL arendaja v\u00f5ib saada, on h\u00e4gune tunne, et TRUERANDOM on \"parem\", ja kuna nad soovivad suuremat turvalisust, \u00fcritavad nad seda kindlasti kasutada. Teatud hetkel hakatakse seda blokeerima, ja kui m\u00f5ni muu tark kasutaja (v\u00f5ib-olla jaotuse funktsioneerimise spetsialist) lisab selle init-skripti, ei t\u00f6\u00f6ta s\u00fcsteemid enam; kasutajatel j\u00e4\u00e4b vaid Linus Torvaldsi kaebamine.<\/i> <\/p>\n

Cao toetab samuti kr\u00fcptograafidele ja neile, kes t\u00f5eliselt vajavad TRNG-d, v\u00f5imalust koguda omaenda entropiat kasutajaruumi, et kasutada seda omal \u00e4ra. Ta \u00fctleb, et entropia kogumine ei ole protsess, mida tuum saab teha k\u00f5ikide toetatud riistvarade puhul, veelgi enam ei saa tuum ise hinnata, kui palju entropiat pakuvad erinevad allikad. <\/p>\n

\u00abTuum ei tohiks segada erinevaid m\u00fcra allikaid ning see ei tohiks proovida v\u00e4ita, kui palju bitiv\u00e4het ta saab, p\u00fc\u00fcdes m\u00e4ngida mingit \"t\u00f5rvatud entropia m\u00e4ngu\" lihtsas, uskumatult aluses CPU arhitektuuris IoT\/embeddatud kasutusjuhtude jaoks, kui k\u00f5ik on \u00fcksiku meistrigeneraatoriga des\u00fcnkroniseeritud, pole mingit CPU k\u00e4sku registri \u00fcmberpaigutamiseks v\u00f5i \u00fcmbernimetamiseks jne.\u00bb<\/p>\n

\u201eSaame r\u00e4\u00e4kida t\u00f6\u00f6riistade pakkumisest, mis p\u00fc\u00fcavad neid arvutusi teha, kuid sellised asjad peaksid toimuma iga kasutaja seadmetes, mis on enamiku levituse kasutajate jaoks lihtsalt ebat\u00f5hus. Kui see on m\u00f5eldud ainult kr\u00fcptograafidele, siis las see toimuda nende kasutajaruumi. Ja \u00e4rgem lihtsustagem GPG-d, OpenSSL-i jne, nii et k\u00f5ik \u00fctlevad: \u201eme tahame \u201et\u00f5elist juhuslikkust\u201c ja ei lepi millegagi v\u00e4hemaga\u201c. V v\u00f5ime r\u00e4\u00e4kida sellest, kuidas pakume kr\u00fcptograafidele liideseid, et nad saaksid vajalikku teavet t\u00e4nu juurdep\u00e4\u00e4sule esmasele noise source'ile, mis on eraldatud ja nimetatud, ja v\u00f5ib-olla suudab noise source m\u00f5nel viisil end autentida raamatukogus v\u00f5i kasutajarakenduses.\u201d<\/i><\/p>\n

Toimus v\u00e4ike arutelu selle \u00fcle, milline selline kasutajaliides v\u00f5iks v\u00e4lja n\u00e4ha, arvestades, et n\u00e4iteks m\u00f5ned s\u00fcndmused v\u00f5ivad t\u00f5statada turvalisuse k\u00fcsimusi. Cao m\u00e4rkis, et klaviatuuriskaneerimise koodid (st klahvivajutused) segunevad kogumise osana entropiapooles: \u201eSeda kasutajaruumi viia, isegi l\u00e4bi privileege omava s\u00fcsteemikutsungi, oleks v\u00e4hemasti mitte ettevaatlik.\u201d On t\u00e4iesti v\u00f5imalik, et muutlikud s\u00fcndmused v\u00f5ivad luua mingit teavet k\u00f5rvalkanalite kaudu. <\/p>\n

Seega tekib tunne, et pikaajaline Linuxi juhuslike arvude alams\u00fcsteemi probleem on lahenduse teel. Hiljutised muutused juhuslike arvude alams\u00fcsteemis on tegelikult ainult tekitanud DoS-probleeme selle kasutamise k\u00e4igus. N\u00fc\u00fcd on aga saadaval efektiivsed viisid parimate juhuslike numbrite saamiseks, mida tuumik v\u00f5ib pakkuda. Kui TRNG on Linuxi jaoks endiselt soovitav, tuleb see puudus tulevikus lahendada, kuid t\u00f5en\u00e4oliselt ei tehta seda tuum ise. <\/p>\n

Veidi reklaami \ud83d\ude42<\/h3>\n

\nAit\u00e4h, et olete meiega. Kas teile meeldivad meie artiklid? Kas soovite n\u00e4ha rohkem huvitavaid materjale? Toetage meid, tehes tellimuse v\u00f5i soovitades meid tuttavatele. pilve VPS arendajatele alates $4,99<\/a><\/noindex>, ainulaadne sisenemise taseme serverite analoog, mille oleme teie jaoks v\u00e4lja m\u00f5elnud:<\/b> Kogu t\u00f5de VPS (KVM) E5-2697 v3 (6 Cores) 10GB DDR4 480GB SSD 1Gbps alates $19 v\u00f5i kuidas \u00f5ieti serverit jagada?<\/a><\/noindex> (saadaval on RAID1 ja RAID10 variandid, kuni 24 s\u00fcdamikku ja kuni 40GB DDR4).<\/p>\n

Kas Dell R730xd on kaks korda odavam Equinixi Tier IV andmete keskuses Amsterdamis?<\/b> Ainult meie juures 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB alates $199<\/a><\/noindex> Hollandi turul! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 alates $99!<\/b><\/b> Lugege, kuidas Luua ettev\u00f5tte tasemel infrastruktuur Dell R730xd E5-2650 v4 serveritega, mille hind on 9000 eurot, madala hinnaga?<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 \u044f\u0434\u0440\u0435 \u0431\u044b\u043b\u0438 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b, \u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0435\u0448\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043c\u043e\u043a. \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55510","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux: lukustuste eemaldamine \/dev\/random | ProHoster","description":"Nagu teada, on \/dev\/random, kr\u00fcptograafiliselt turvaline pseudojuhuslike numbrite generaator (CSPRNG), \u00fcks ebameeldiv probleem \u2013 lukustused. K\u00e4esolevas artiklis k\u00e4sitletakse, kuidas seda lahendada. Viimase paari kuu jooksul on juhuslike numbrite genereerimise vahendid tuumas veidi \u00fcmber t\u00f6\u00f6tatud, kuid selle alams\u00fcsteemi probleemide lahendamine on kestnud juba pikemat aega. K\u00f5ige viimased muudatused tehti","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Linux: \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \/dev\/random | ProHoster","og:description":"\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 \u044f\u0434\u0440\u0435 \u0431\u044b\u043b\u0438 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b, \u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0435\u0448\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043c\u043e\u043a. \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-21T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55510","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:30","updated":"2022-10-02 22:01:02"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}