Ib ceg ruaj khov tshiab ntawm Flatpak 1.12 cov cuab yeej tau raug luam tawm, uas muab cov txheej txheem rau kev tsim cov pob khoom siv tus kheej uas tsis khi rau Linux faib tshwj xeeb thiab khiav hauv ib lub thawv tshwj xeeb uas cais cov ntawv thov los ntawm qhov seem ntawm cov kab ke. Kev them nyiaj yug rau khiav Flatpak tej pob khoom yog muab rau Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux thiab Ubuntu. Cov pob Flatpak suav nrog hauv Fedora repository thiab tau txais kev txhawb nqa los ntawm tus thawj tswj hwm GNOME daim ntawv thov.
Cov kev hloov tshiab tseem ceeb hauv Flatpak 1.12 ceg:
- Txhim kho kev tswj hwm ntawm nested sandbox ib puag ncig siv nyob rau hauv lub pob flatpak nrog tus neeg siv khoom rau qhov kev pabcuam Steam game. Hauv nested sandboxes, kev tsim cov hierarchies sib cais ntawm /usr thiab /app directories raug tso cai, uas yog siv hauv Chav los tso ua si hauv ib lub thawv cais nrog nws tus kheej / usr muab faib, cais tawm ntawm ib puag ncig nrog Steam tus thov kev pab.
- Tag nrho cov khoom siv nrog tib daim ntawv teev npe (app-ID) qhia cov /tmp thiab $XDG_RUNTIME_DIR cov npe. Optionally, siv tus "--allow=per-app-dev-shm" chij, koj tuaj yeem pab kom siv cov /dev/shm qhia cov npe.
- Txhim kho kev txhawb nqa rau Text User Interface (TUI) daim ntawv thov xws li gdb.
- Kev ua kom nrawm dua ntawm "ostree prune" hais kom ua tau ntxiv rau qhov kev tsim kho tshiab-repo utility, optimized rau kev ua hauj lwm nrog repositories nyob rau hauv archive hom.
- Qhov tsis muaj zog CVE-2021-41133 hauv kev siv lub portal mechanism, cuam tshuam nrog qhov tsis muaj kev thaiv cov kev hu xov tooj tshiab cuam tshuam txog kev sib koom ua ke hauv cov cai seccomp, tau raug kho. Qhov tsis txaus ntseeg tau tso cai rau daim ntawv thov los tsim lub nested sandbox kom hla lub "portal" cov txheej txheem pov thawj uas siv los npaj kev nkag mus rau cov peev txheej sab nraum lub thawv.
Raws li qhov tshwm sim, tus neeg tawm tsam, los ntawm kev ua haujlwm txuas nrog kev hu xov tooj, tuaj yeem hla lub sandbox cais tawm thiab tau txais kev nkag mus rau tag nrho cov ntsiab lus ntawm tus tswv tsev ib puag ncig. Qhov tsis muaj peev xwm tsuas yog siv tau rau hauv cov pob khoom uas muab cov ntawv thov nkag ncaj qha rau AF_UNIX sockets, xws li cov siv los ntawm Wayland, Pipewire, thiab pipewire-pulse. Hauv kev tso tawm 1.12.0, qhov kev pheej hmoo tsis raug tshem tawm tag nrho, yog li hloov kho 1.12.1 tau tso tawm kub ntawm nws lub luj taws.
Cia peb nco ntsoov koj tias Flatpak tso cai rau cov neeg tsim daim ntawv thov kom yooj yim rau kev faib tawm ntawm lawv cov kev pab cuam uas tsis suav nrog hauv cov txheej txheem faib chaw khaws cia los ntawm kev npaj ib lub thawv thoob ntiaj teb yam tsis muaj kev tsim cais sib dhos rau txhua qhov kev faib tawm. Rau cov neeg siv kev ruaj ntseg, Flatpak tso cai rau koj los khiav cov lus nug hauv ib lub thawv, muab kev nkag mus rau lub network nkaus xwb thiab cov neeg siv cov ntaub ntawv cuam tshuam nrog daim ntawv thov. Rau cov neeg siv txaus siab rau cov khoom tshiab, Flatpak tso cai rau koj los nruab qhov kev sim tshiab thiab ruaj khov tso tawm ntawm daim ntawv thov yam tsis tas yuav hloov pauv rau lub kaw lus. Piv txwv li, Flatpak tej pob khoom yog tsim rau LibreOffice, Midori, GIMP, Inkscape, Kdenlive, Chav, 0 AD, Visual Studio Code, VLC, Slack, Skype, Telegram Desktop, Android Studio, thiab lwm yam.
Txhawm rau txo cov pob loj, nws suav nrog tsuas yog daim ntawv thov tshwj xeeb, thiab cov txheej txheem yooj yim thiab cov tsev qiv ntawv duab (GTK, Qt, GNOME thiab KDE cov tsev qiv ntawv, thiab lwm yam) yog tsim los ua plug-in standard runtime ib puag ncig. Qhov sib txawv tseem ceeb ntawm Flatpak thiab Snap yog tias Snap siv cov khoom ntawm lub hauv paus system ib puag ncig thiab kev sib cais raws li kev lim dej hu, thaum Flatpak tsim lub thawv cais tawm ntawm lub kaw lus thiab ua haujlwm nrog cov sijhawm ua haujlwm loj, tsis muab cov pob khoom raws li kev cia siab, tab sis tus qauv. ib qhov system ib puag ncig (piv txwv li, txhua lub tsev qiv ntawv tsim nyog rau kev ua haujlwm ntawm GNOME lossis KDE cov haujlwm).
Ntxiv nrog rau cov txheej txheem txheej txheem ib puag ncig (runtime), ntsia los ntawm lub chaw cia khoom tshwj xeeb, ntxiv kev cia siab (khoom) xav tau rau kev ua haujlwm ntawm daim ntawv thov raug muab. Nyob rau hauv tag nrho, runtime thiab bundle tsim lub filling ntawm lub thawv, txawm lub fact tias runtime yog ntsia nyias thiab khi rau ob peb lub thawv ib zaug, uas tso cai rau koj kom tsis txhob duplicating system cov ntaub ntawv uas muaj rau ntim. Ib lub kaw lus tuaj yeem muaj ntau lub sijhawm sib txawv nruab (GNOME, KDE) lossis ntau lub sijhawm ntawm tib lub sijhawm (GNOME 3.40, GNOME 3.42). Ib lub thawv nrog rau daim ntawv thov raws li kev vam khom siv tsuas yog khi rau ib lub sijhawm tshwj xeeb, tsis suav nrog cov pob khoom uas ua rau lub sijhawm ua haujlwm. Tag nrho cov ntsiab lus uas ploj lawm yog ntim ncaj qha nrog daim ntawv thov. Thaum lub thawv tsim, cov ntsiab lus ntawm lub sijhawm ua haujlwm tau teeb tsa raws li /usr muab faib, thiab cov pob khoom tau teeb tsa hauv /app directory.
Lub sijhawm ua haujlwm thiab cov ntawv thov ntim tau tsim los siv OSTree thev naus laus zis, uas cov duab tau hloov kho atomically los ntawm Git-zoo li qhov chaw cia khoom, uas tso cai rau cov txheej txheem tswj hwm los siv rau cov khoom faib (piv txwv li, koj tuaj yeem yob rov qab lub kaw lus sai sai. yav dhau los xeev). RPM tej pob khoom raug txhais rau hauv OSTree repository siv ib txheej tshwj xeeb rpm-ostree. Kev sib cais thiab kev hloov tshiab ntawm cov pob khoom hauv qhov chaw ua haujlwm tsis tau txais kev txhawb nqa; lub kaw lus hloov kho tsis yog nyob rau theem ntawm tus kheej cov khoom, tab sis tag nrho, atomically hloov nws lub xeev. Muab cov cuab yeej los siv cov kev hloov tshiab nce ntxiv, tshem tawm qhov xav tau los hloov tag nrho cov duab nrog txhua qhov hloov tshiab.
Lub chaw tsim khoom sib cais yog ywj siab ntawm kev faib khoom siv thiab, nrog rau cov chaw tsim nyog ntawm lub pob, tsis muaj kev nkag mus rau cov ntaub ntawv thiab cov txheej txheem ntawm cov neeg siv lossis cov txheej txheem tseem ceeb, tsis tuaj yeem nkag mus rau cov cuab yeej ncaj qha, tshwj tsis yog cov zis ntawm DRI, thiab hu mus rau lub network subsystem. Graphics tso zis thiab lub koom haum input yog siv los ntawm Wayland raws tu qauv los yog ntawm X11 socket forwarding. Kev cuam tshuam nrog ib puag ncig sab nraud yog ua raws li DBus kev xa xov thiab ib qho tshwj xeeb Portals API.
Rau kev sib cais, Bubblewrap txheej thiab ib txwm siv Linux ntim virtualization technologies, raws li kev siv cgroups, namespaces, Seccomp thiab SELinux. PulseAudio yog siv los tawm suab. Hauv qhov no, kev cais tawm tuaj yeem ua tsis taus, uas yog siv los ntawm cov neeg tsim khoom ntawm ntau pob nrov kom tau txais kev nkag mus rau tag nrho cov ntaub ntawv kaw lus thiab txhua yam khoom siv hauv lub cev. Piv txwv li, GIMP, VSCodium, PyCharm, Octave, Inkscape, Audacity, thiab VLC tuaj nrog ib qho kev txwv cais tawm uas tawm tag nrho nkag mus rau hauv cov npe hauv tsev.
Yog tias cov pob khoom uas muaj kev nkag mus rau cov npe hauv tsev raug cuam tshuam, txawm tias muaj "sandboxed" daim ntawv lo hauv cov lus piav qhia ntawm pob, tus neeg tawm tsam tsuas yog xav hloov cov ntaub ntawv ~ / .bashrc los ua nws cov cai. Ib qho teeb meem tshwj xeeb yog kev tswj hwm ntawm kev hloov pauv ntawm cov pob khoom thiab kev ntseeg siab ntawm cov neeg tsim cov pob khoom, uas feem ntau tsis cuam tshuam nrog cov phiaj xwm loj lossis kev faib khoom.
Tau qhov twg los: opennet.ru