Aikin aiwatar da sudo da su utilities a cikin Rust

ISRG (Rukunin Binciken Tsaro na Intanet), wanda shine wanda ya kafa aikin Bari Mu Encrypt kuma yana haɓaka HTTPS da haɓaka fasahar haɓaka tsaro ta Intanet, ya gabatar da aikin Sudo-rs don ƙirƙirar aiwatar da sudo da su utilities da aka rubuta a ciki. Tsatsa wanda ke ba ku damar aiwatar da umarni a madadin wasu masu amfani. A ƙarƙashin lasisin Apache 2.0 da MIT, an riga an buga sigar farko ta Sudo-rs, ba a shirya don amfani gabaɗaya ba. Aikin, wanda ya fara aiki a watan Disamba 2022, an shirya kammala shi a watan Satumba na 2023.

A halin yanzu ana mayar da hankali kan aiwatar da fasalulluka a cikin Sudo-rs waɗanda ke ba da damar yin amfani da shi azaman canji na zahiri don sudo a cikin al'amuran amfani na yau da kullun (daidaitattun sudoers akan Ubuntu, Fedora, da Debian). A nan gaba, akwai shirye-shirye don ƙirƙirar ɗakin karatu wanda ke ba da damar shigar da ayyukan sudo cikin wasu shirye-shirye da kuma samar da wata hanyar daidaitawa ta madadin da ke guje wa ɓarna ma'anar tsarin fayil ɗin sudoers. Dangane da aikin sudo da aka aiwatar, za a kuma shirya bambance-bambancen kayan amfanin su. Bugu da ƙari, tsare-tsaren sun ambaci tallafi don SELinux, AppArmor, LDAP, kayan aikin dubawa, ikon tantancewa ba tare da amfani da PAM ba, da aiwatar da duk zaɓuɓɓukan layin umarni sudo.

A cewar Microsoft da Google, kusan kashi 70 cikin XNUMX na lahani suna faruwa ta hanyar sarrafa ƙwaƙwalwar ajiya mara aminci. Ana sa ran yin amfani da yaren Rust don haɓaka su da sudo zai rage haɗarin raunin da ke haifar da rashin lafiyar ƙwaƙwalwar ajiya da kuma kawar da faruwar kurakurai kamar samun damar wurin ƙwaƙwalwar ajiya bayan an sake shi da buffer overruns. Injiniyoyin Ferrous Systems da Tweede Golf ne ke haɓaka Sudo-rs tare da kuɗin da kamfanoni ke bayarwa kamar Google, Cisco, Sabis na Yanar Gizo na Amazon.

Ana ba da amincin ƙwaƙwalwar ajiya a cikin Tsatsa a lokacin tattarawa ta hanyar duba tunani, kiyaye bin diddigin mallakar abu da tsawon rayuwa (ikon), haka kuma ta hanyar kimanta daidaitaccen damar ƙwaƙwalwar ajiya yayin aiwatar da lambar. Tsatsa kuma yana ba da kariya daga ambaliya mai lamba, yana buƙatar ƙaddamar da ƙima mai mahimmanci kafin amfani, yana sarrafa kurakurai mafi kyau a cikin daidaitaccen ɗakin karatu, yana amfani da ra'ayi na nassoshi marasa canzawa da masu canji ta tsohuwa, yana ba da buga rubutu mai ƙarfi don rage kurakurai masu ma'ana.

source: budenet.ru

Add a comment