Owen Taylor, a creator of GNOME Shell and the Pango library, part of the Fedora Workstation development team, has proposed a plan for default encryption of system partitions and user home directories in Fedora Workstation. The benefits of moving to default encryption include data protection in case of laptop theft, protection against attacks on unattended devices, and ensuring privacy and integrity out of the box without additional manual steps. <\/p>\n
According to the drafted plan, Btrfs fscrypt will be used for encryption. For system partitions, encryption keys are planned to be stored in the TPM module and used in conjunction with digital signatures applied to verify the integrity of the bootloader, kernel, and initrd (meaning that during the system boot process, the user won\u2019t need to enter a password to decrypt system partitions). When encrypting home directories, the keys are planned to be generated based on the user\u2019s login and password (the encrypted home directory will be mounted upon user login). <\/p>\n
The timeline for implementing the initiative depends on the distribution's transition to a unified kernel image UKI (Unified Kernel Image), which consolidates in one file the handler for loading the kernel from UEFI (UEFI boot stub), the Linux kernel image, and the system environment initrd loaded into memory. Without UKI support, it is not possible to guarantee the integrity of the initrd environment, where keys for decrypting the filesystem are determined (for example, an attacker could substitute the initrd and simulate a password request; to prevent this, a verified boot of the entire chain until the filesystem is mounted is required). <\/p>\n
A Fedora telep\u00edt\u0151ben jelenleg el\u00e9rhet\u0151 egy opci\u00f3 a blokkszint\u0171 part\u00edci\u00f3k titkos\u00edt\u00e1s\u00e1ra dm-crypt seg\u00edts\u00e9g\u00e9vel, ami k\u00fcl\u00f6n jelsz\u00f3t ig\u00e9nyel, amely nincs \u00f6sszekapcsolva a felhaszn\u00e1l\u00f3i fi\u00f3kkal. Ebben a megold\u00e1sban felmer\u00fclnek olyan probl\u00e9m\u00e1k, mint a t\u00f6bbfelhaszn\u00e1l\u00f3s rendszerekben val\u00f3 hib\u00e1s alkalmaz\u00e1s, a nemzetk\u00f6zies\u00edt\u00e9s \u00e9s a mozg\u00e1skorl\u00e1tozottak sz\u00e1m\u00e1ra ny\u00fajtott t\u00e1mogat\u00e1s hi\u00e1nya, valamint a t\u00e1mad\u00e1sok lehet\u0151s\u00e9ge a bootloader hamis\u00edt\u00e1ssal (a t\u00e1mad\u00f3 \u00e1ltal telep\u00edtett bootloader az eredeti bootloadernek \u00e1lc\u00e1zva k\u00e9rheti a dek\u00f3dol\u00f3 jelsz\u00f3t), \u00e9s a framebuffer t\u00e1mogat\u00e1s\u00e1nak sz\u00fcks\u00e9gess\u00e9ge az initrd-ben a jelsz\u00f3megad\u00e1s k\u00e9r\u00e9s\u00e9nek megjelen\u00edt\u00e9s\u00e9hez. \u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 Fedora Workstation. \u0418\u0437 \u043f\u043b\u044e\u0441\u043e\u0432 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0440\u0430\u0436\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430, \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107724","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Fedora fontol\u00f3ra veszi az alap\u00e9rtelmezett f\u00e1jlrendszer titkos\u00edt\u00e1s\u00e1nak bevezet\u00e9s\u00e9t | ProHoster","description":"Owen Taylor, a GNOME Shell \u00e9s a Pango k\u00f6nyvt\u00e1r l\u00e9trehoz\u00f3ja, aki a Fedora munka\u00e1llom\u00e1sok fejleszt\u00e9si munkacsoportj\u00e1nak tagja, javaslatot tett a rendszerpart\u00edci\u00f3k \u00e9s a felhaszn\u00e1l\u00f3i mapp\u00e1k alap\u00e9rtelmezett titkos\u00edt\u00e1s\u00e1nak bevezet\u00e9s\u00e9re.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0424\u0421 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e | ProHoster","og:description":"\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-04T16:48:10+00:00","article:modified_time":"2023-04-04T17:05:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/107724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=107724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/107724\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=107724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=107724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=107724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"