{"id":55510,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/linux-udalenie-pula-blokirovok-dev-random"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"linux-udalenie-pula-blokirovok-dev-random","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","title":{"rendered":"Linux: blo\u0137\u0113\u0161anas baseina dz\u0113\u0161ana \/dev\/random","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u0101 zin\u0101ms, \\\/dev\\\/random, kriptogr\u0101fiski iztur\u012bg\u0101 pseidojau\u0161u skait\u013cu \u0123eneratora (CSPRNG) jom\u0101, ir viena nepat\u012bkama probl\u0113ma \u2013 blo\u0137\u0113\u0161ana. \u0160aj\u0101 rakst\u0101 st\u0101st\u012bts, k\u0101 to var atrisin\u0101t. <\/p>\n

P\u0113d\u0113jo da\u017e m\u0113ne\u0161u laik\u0101 nejau\u0161o skait\u013cu \u0123ener\u0113\u0161anas l\u012bdzek\u013ci kodol\u0101 nedaudz p\u0101rb\u016bv\u0113ti, ta\u010du probl\u0113mas \u0161aj\u0101 apak\u0161sist\u0113m\u0101 risin\u0101tas pla\u0161\u0101k\u0101 laika posm\u0101.<\/a><\/noindex>Visjaun\u0101k\u0101s izmai\u0146as<\/a><\/noindex> tika veiktas, lai nov\u0113rstu ilgsto\u0161u getrandom() sist\u0113mas zvana blo\u0137\u0113\u0161anu sist\u0113mas iel\u0101d\u0113\u0161anas laik\u0101, bet c\u0113lonis tam bija blo\u0137\u0113jo\u0161\u0101 nejau\u0161o skait\u013cu baseina uzved\u012bba. Jaun\u0101kais iel\u0101pu versij\u0101 tika no\u0146emts \u0161is baseins, un, iesp\u0113jams, tam vajadz\u0113tu non\u0101kt galvenaj\u0101 kodol\u0101. <\/p>\n

Endijs Lutomirskis (Andy Lutomirski) decembra beig\u0101s public\u0113ja tre\u0161o iel\u0101pu versiju. Tas ievie\u0161 \u201edivas galven\u0101s semantisk\u0101s izmai\u0146as Linux nejau\u0161o API\u201c<\/i>. Iel\u0101ps pievieno jaunu GRND_INSECURE flag sist\u0113mas zvanam getrandom() (lai ar\u012b Lutomirskis to sauc par getentropy(), kas ir \u012bstenots glibc, izmantojot getrandom() ar noteiktiem flagiem); \u0161is flags nodro\u0161ina, ka zvans vienm\u0113r atgrie\u017e piepras\u012bto datu apjomu, bet bez garantijas, ka \u0161ie dati ir nejau\u0161i. Kodolam b\u016bs j\u0101dara viss iesp\u0113jamais, lai sniegtu lab\u0101kos nejau\u0161os datus, kas tam ir \u0161obr\u012bd. \u201eIesp\u0113jams, lab\u0101kais, ko var dar\u012bt, ir nosaukt to par \u201eINSECURE\u201c<\/i> (neapdro\u0161in\u0101tu), lai kav\u0113tu \u0161\u012b API izmanto\u0161anu liet\u0101m, kas prasa dro\u0161\u012bbu.\u201c<\/a><\/noindex><\/p>\n

Iel\u0101pumi ar\u012b no\u0146em blo\u0137\u0113jo\u0161o baseinu. Pa\u0161laik kodols atbalsta divus nejau\u0161o datu baseinus, viens no kuriem atbilst \\\/dev\\\/random, bet otrs \u2013 \\\/dev\\\/urandom, k\u0101 aprakst\u012bts \u0161aj\u0101 rakst\u0101<\/a><\/noindex> 2015. gada dokument\u0101. Blo\u0137\u0113jo\u0161ais baseins ir baseins \\\/dev\\\/random; las\u012b\u0161ana no \u0161\u012b ier\u012bces tiks blo\u0137\u0113ta (dom\u0101jams, t\u0101s nosaukuma d\u0113\u013c) l\u012bdz tam, kam\u0113r no sist\u0113mas netiks sav\u0101kta \"pietiekama\" entropija, lai apmierin\u0101tu piepras\u012bjumu. Turpm\u0101kas las\u012b\u0161anas no \u0161\u012b faila ar\u012b tiks blo\u0137\u0113tas, ja basein\u0101 nav pietiekami daudz entropijas. <\/p>\n

Blo\u0137\u0113\u0161anas baseina izsl\u0113g\u0161ana noz\u012bm\u0113, ka las\u012b\u0161ana no \/dev\/random uzvedas k\u0101 getrandom() ar karoga v\u0113rt\u012bbu nulli (un p\u0101rv\u0113r\u0161 GRND_RANDOM karogu par noop). P\u0113c kriptogr\u0101fisk\u0101 nejau\u0161o skait\u013cu \u0123eneratora (CRNG) inicializ\u0101cijas las\u012b\u0161ana no \/dev\/random un getrandom(…,0) izsaukumi vairs nenov\u0113rs\u012bs bloku un atgriez\u012bs piepras\u012bto nejau\u0161o datu daudzumu.<\/p>\n

Lutomirsks saka: \u201eEs uzskatu, ka Linux blo\u0137\u0113jo\u0161ais baseins ir novecojis. CRNG Linux \u0123ener\u0113 izejas, kas ir pietiekami labas, lai t\u0101s var\u0113tu izmantot pat atsl\u0113gu \u0123ener\u0113\u0161anai. Blo\u0137\u0113jo\u0161ais baseins vairs nav sp\u0113c\u012bg\u0101ks nek\u0101 jebkur\u0101 materi\u0101l\u0101 noz\u012bm\u0113, un t\u0101 uztur\u0113\u0161anai ir nepiecie\u0161ama liela ap\u0161aub\u0101mas v\u0113rt\u012bbas infrastrukt\u016bra.\u201d <\/i><\/p>\n

Izmai\u0146as tika veiktas, \u0146emot v\u0113r\u0101 to, lai eso\u0161\u0101s programmas patie\u0161\u0101m netiktu ietekm\u0113tas, un paties\u012bb\u0101 probl\u0113mu ar ilgsto\u0161u gaid\u012b\u0161anu, piem\u0113ram, GnuPG atsl\u0113gu \u0123ener\u0113\u0161an\u0101, k\u013c\u016bs maz\u0101k.<\/p>\n

\u201e\u0160\u012bs s\u0113rijas nedr\u012bkst trauc\u0113t nek\u0101das eso\u0161\u0101s programmas. \/dev\/urandom paliek nemain\u012bgs. \/dev\/random joproj\u0101m tiek blo\u0137\u0113ts t\u016bl\u012bt p\u0113c iel\u0101des, bet blo\u0137\u0113\u0161an\u0101s ir maz\u0101ka nek\u0101 agr\u0101k. getentropy() ar eso\u0161ajiem karogiem atgriez\u012bs rezult\u0101tu, kas praktiskai izmanto\u0161anai b\u016bs tikpat piem\u0113rots k\u0101 agr\u0101k.\u201d<\/i> <\/p>\n

Lutomirsks nor\u0101d\u012bja, ka joproj\u0101m ir atv\u0113rts jaut\u0101jums par to, vai kodam b\u016btu j\u0101nodro\u0161ina t\u0101 sauktie \u201e\u012bstie nejau\u0161i skait\u013ci\u201d, ko noteikt\u0101 m\u0113r\u0101 vajadz\u0113ja dar\u012bt blo\u0137\u0113jo\u0161ajam kodam. Vi\u0146\u0161 tam redz tikai vienu iemeslu: \u201evalsts standartiem atbilsto\u0161as pras\u012bbas\u201d. Lutomirsks pie\u013c\u0101va, ka, ja kodam tas j\u0101nodro\u0161ina, tad tas b\u016btu j\u0101veic caur piln\u012bgi citu interfeisu vai j\u0101b\u016bt p\u0101rceltam uz lietot\u0101ja telpu, sniedzot iesp\u0113ju ieg\u016bt neapstr\u0101d\u0101tus notikumu paraugus, kurus var izmantot, lai izveidotu t\u0101du blo\u0137\u0113\u0161anas baseinu.\u201d <\/p>\n

\u0160tefans Millers (Stephan M\u00fcller) pie\u013c\u0101va, ka vi\u0146a komplekts \u012bsin\u0101jumus<\/a><\/noindex> Linux nejau\u0161o skait\u013cu \u0123enerators (LRNG) (pa\u0161laik ir izn\u0101kusi 26. versija) var sniegt \u012bstus nejau\u0161us skait\u013cus lietojumprogramm\u0101m, kur\u0101m tas ir nepiecie\u0161ams. LRNG \"piln\u012bb\u0101 atbilst SP800-90B ieteikumiem par entropijas avotiem nejau\u0161u bitu \u0123ener\u0113\u0161anai\", kas padara to par risin\u0101jumu valsts standartu probl\u0113mai.
\nM\u0113tejs Garrets (Matthew Garrett) iebilda pret terminu \"\u012bsti nejau\u0161i dati\", nor\u0101dot, ka izv\u0113l\u0113t\u0101s ier\u012bces princip\u0101 var tikt pietiekami prec\u012bzi model\u0113tas, lai padar\u012btu t\u0101s prognoz\u0113jamas: \"m\u0113s \u0161eit neizv\u0113lamies kvantu notikumus.\"<\/p>\n

M\u012blers atbild\u0113ja, ka \u0161is termins n\u0101k no V\u0101cijas standarta AIS 31, lai aprakst\u012btu nejau\u0161u skait\u013cu \u0123eneratoru, kas tikai izsniedz rezult\u0101tus \"t\u0101pat k\u0101 pamatavots rada troksni, kas \u0123ener\u0113 entropiju\". <\/p>\n

Papildus terminolo\u0123ijas neskaidr\u012bb\u0101m blo\u0137\u0113\u0161anas baseina esam\u012bba, k\u0101 ierosina LRNG kori\u0123\u0113jumi, vienk\u0101r\u0161i rad\u012bs da\u017e\u0101das probl\u0113mas, vismaz, ja tas ir pieejams bez privil\u0113\u0123ij\u0101m. <\/p>\n

K\u0101 teica Lutomirskis: \"Tas neatrisina probl\u0113mu. Ja divi da\u017e\u0101di lietot\u0101ji palaid\u012bs mu\u013c\u0137\u012bgas programmas, piem\u0113ram, gnupg, vi\u0146i vienk\u0101r\u0161i izn\u012bcin\u0101s viens otru. Es redzu, ka \u0161obr\u012bd past\u0101v divas galven\u0101s probl\u0113mas ar \/dev\/random: tam ir nosliece uz DoS (t.i., resursu izs\u012bk\u0161anu, \u013caunpr\u0101t\u012bgu ietekmi vai kaut ko taml\u012bdz\u012bgu), un, t\u0101 k\u0101 tam nav nepiecie\u0161amas nek\u0101das privil\u0113\u0123ijas, tas ar\u012b ir pak\u013cauts \u013caunpr\u0101t\u012bgai izmanto\u0161anai. Gnupg ir nepareizi, tas ir piln\u012bgs sabrukums. Ja m\u0113s pievienosim jaunu nepievienotu interfeisu, ko izmantos gnupg un l\u012bdz\u012bgas programmas, m\u0113s atkal zaud\u0113sim.\"<\/i> <\/p>\n

M\u012blers nor\u0101d\u012bja, ka getrandom() pievieno\u0161ana tagad \u013caus GnuPG izmantot \u0161o interfeisu, jo tas nodro\u0161in\u0101s nepiecie\u0161amo garantiju, ka baseins tika inicializ\u0113ts. Pamatojoties uz diskusij\u0101m ar GnuPG izstr\u0101d\u0101t\u0101ju Vernertu Koha (Werner Koch), M\u012blers uzskata, ka garantija ir vien\u012bgais iemesls, k\u0101d\u0113\u013c GnuPG pa\u0161laik tie\u0161i lasa no \/dev\/random. Bet, ja past\u0101v nepievienots interfeiss, kas ir pak\u013cauts pakalpojuma atteikumam (k\u0101 \u0161odien \/dev\/random), tad, p\u0113c Lutomirskis teikt\u0101, to nepareizi izmantos da\u017eas lietojumprogrammas. <\/p>\n

Teodors Cjao (Theodore Yue Tak Ts’o), Linux nejau\u0161o skait\u013cu apak\u0161sist\u0113mas izstr\u0101d\u0101t\u0101js, ac\u012bmredzot main\u012bjis savu viedokli par blo\u0137\u0113jo\u0161a baseina nepiecie\u0161am\u012bbu. Vi\u0146\u0161 nor\u0101d\u012bja, ka \u0161\u012b baseina izsl\u0113g\u0161ana efekt\u012bvi nov\u0113rs\u012bs ideju, ka Linux ir \u012bsts nejau\u0161o skait\u013cu \u0123enerators (TRNG): \u00abTas nav absurds, jo tie\u0161i t\u0101 vienm\u0113r ir dar\u012bju\u0161i *BSD\u00bb.<\/i><\/p>\n

Vi\u0146\u0161 ar\u012b izsaka ba\u017eas, ka TRNG meh\u0101nisma nodro\u0161in\u0101\u0161ana vienk\u0101r\u0161i kalpos k\u0101 k\u0101rdin\u0101jums lietojumprogrammu izstr\u0101d\u0101t\u0101jiem un uzskata, ka, \u0146emot v\u0113r\u0101 da\u017e\u0101dus aparat\u016bras tipus, ko atbalsta Linux, nav iesp\u0113jams garant\u0113t TRNG kodol\u0101. Probl\u0113mu neatrisin\u0101s pat iesp\u0113ja str\u0101d\u0101t ar aparat\u016bru tikai ar root privil\u0113\u0123ij\u0101m: \u00abLietot\u0146u izstr\u0101d\u0101t\u0101ji nor\u0101da, ka vi\u0146u lietotne dro\u0161\u012bbas nol\u016bkiem j\u0101instal\u0113 k\u0101 root, jo tikai t\u0101 varat piek\u013c\u016bt \u00abpatiesi labiem\u00bb nejau\u0161iem skait\u013ciem\u00bb.<\/i><\/p>\n

M\u012blers jaut\u0101ja, vai Cjao nav atteicies no blo\u0137\u0113jo\u0161\u0101 p\u016b\u013ca realiz\u0101cijas, kuru vi\u0146\u0161 pats ir sen pied\u0101v\u0101jis. Cjao atbild\u0113ja, ka pl\u0101no izmantot Lutomira ieteikumu un akt\u012bvi iebilst pret blo\u0137\u0113jo\u0161\u0101 interfeisa pievieno\u0161anu atpaka\u013c kodolam. <\/p>\n

\u00abKodolam nav nek\u0101du garantiju attiec\u012bb\u0101 uz to, vai troksnis avots ir bijis pien\u0101c\u012bgi raksturots. Vien\u012bg\u0101 lieta, ko GPG vai OpenSSL izstr\u0101d\u0101t\u0101js var ieg\u016bt, ir miglains apjausmas, ka TRUERANDOM ir \u201elab\u0101ks\u201c, un, t\u0101 k\u0101 vi\u0146i v\u0113las liel\u0101ku dro\u0161\u012bbu, vi\u0146i noteikti cent\u012bsies to izmantot. Noteikt\u0101 br\u012bd\u012b tas tiks blo\u0137\u0113ts, un kad k\u0101ds cits gudrs lietot\u0101js (iesp\u0113jams, izdal\u012b\u0161anas speci\u0101lists) ieliks to init skript\u0101 un sist\u0113mas p\u0101rst\u0101s darboties, lietot\u0101jiem paliks tikai s\u016bdz\u0113ties pa\u0161am Linusam Torvaldsam.\u00bb<\/i> <\/p>\n

Cjao ar\u012b aicina nodro\u0161in\u0101t kriptogr\u0101fiem un tiem, kam tie\u0161\u0101m ir nepiecie\u0161ams TRNG, iesp\u0113ju sav\u0101kt savu entropiju lietot\u0101ja telp\u0101, lai to izmantotu saviem m\u0113r\u0137iem. Vi\u0146\u0161 saka, ka entropijas v\u0101k\u0161ana nav process, ko var veikt kodols visiem tam atbalst\u012btajiem aparat\u016bras l\u012bdzek\u013ciem, turkl\u0101t pats kodols nevar nov\u0113rt\u0113t da\u017e\u0101du avotu nodro\u0161in\u0101to entropijas daudzumu. <\/p>\n

\u00abKodam nedr\u012bkst sajaukt kop\u0101 da\u017e\u0101dus troks\u0146a avotus, un tam noteikti nevajadz\u0113tu m\u0113\u0123in\u0101t apgalvot, ka tas zina, cik bitu entropijas tas ieg\u016bst, kad m\u0113\u0123ina sp\u0113l\u0113t k\u0101du \"raust\u012bto entropijas sp\u0113li\" uz \u0101rk\u0101rt\u012bgi vienk\u0101r\u0161as CPU architekt\u016bras lietot\u0101ja gad\u012bjumiem IOT\/Embedded, kad viss ir nesak\u0101rtots vien\u0101 galvenaj\u0101 \u0123enerator\u0101, kad nav nek\u0101du CPU instrukciju p\u0101rk\u0101rto\u0161anai vai re\u0123istra p\u0101rd\u0113v\u0113\u0161anai utt.\u00bb<\/p>\n

\u00abVar run\u0101t par r\u012bku nodro\u0161in\u0101\u0161anu, kas m\u0113\u0123ina veikt \u0161os apr\u0113\u0137inus, bet \u0161\u0101das lietas j\u0101\u012bsteno uz katra lietot\u0101ja apr\u012bkojuma, kas liel\u0101kajai da\u013cai izplat\u012bjuma lietot\u0101ju ir vienk\u0101r\u0161i nepraktiski. Ja tas paredz\u0113ts tikai kriptogr\u0101fiem, tad lai tas tiek izdar\u012bts vi\u0146u lietot\u0101ju telp\u0101. Un neaizmirs\u012bsim atvieglot GPG, OpenSSL utt., lai visi teiktu: \"m\u0113s v\u0113lamies 'patiesu nejau\u0161\u012bbu' un nepiekr\u012btam maz\u0101kam\". Var run\u0101t par to, k\u0101 m\u0113s nodro\u0161in\u0101m interfeisus kriptogr\u0101fiem, lai vi\u0146i var\u0113tu ieg\u016bt nepiecie\u0161amo inform\u0101ciju apmekl\u0113jot prim\u0101ros troks\u0146a avotus, kas ir atdal\u012bti un nosaukti, un, iesp\u0113jams, ka k\u0101d\u0101 veid\u0101 troks\u0146a avots var\u0113tu autentific\u0113ties bibliot\u0113k\u0101 vai lietot\u0146u telp\u0101.\u00bb<\/i><\/p>\n

Notika neliela diskusija par to, k\u0101 var\u0113tu izskat\u012bties \u0161\u0101ds interfeiss, jo, piem\u0113ram, da\u017e\u0101m notikumiem var b\u016bt sekas dro\u0161\u012bbas jaut\u0101jumos. Cao atz\u012bm\u0113ja, ka tastat\u016bras sken\u0113\u0161anas kodi (t.i., tausti\u0146u nospiedumi) tiek sajaukti kop\u0113j\u0101 p\u016bl\u012b k\u0101 da\u013ca no entropijas v\u0101k\u0161anas: \u00abP\u0101rvietojot to lietot\u0101ja telp\u0101, pat caur privil\u0113\u0123\u0113tu sist\u0113mas izsaukumu, b\u016btu vismaz neapdom\u012bgi\u00bb. Ir ar\u012b iesp\u0113ja, ka citi notikumu laiki var\u0113tu rad\u012bt k\u0101du inform\u0101cijas nopl\u016bdi caur blakus kan\u0101liem. <\/p>\n

T\u0101d\u0113j\u0101di rodas saj\u016bta, ka sen\u0101 Linux nejau\u0161o skait\u013cu apak\u0161sist\u0113mas probl\u0113ma tuvojas risin\u0101jumam. Izmai\u0146as, ko p\u0113d\u0113j\u0101 laik\u0101 ir piedz\u012bvojusi nejau\u0161o skait\u013cu apak\u0161sist\u0113ma, faktiski rad\u012bja tikai DoS probl\u0113mas t\u0101s lieto\u0161anas proces\u0101. Tagad ir pieejami efekt\u012bvi veidi, k\u0101 ieg\u016bt vislab\u0101kos nejau\u0161os skait\u013cus, ko kodols var nodro\u0161in\u0101t. Ja TRNG joproj\u0101m ir v\u0113lams Linux, tad \u0161o tr\u016bkumu n\u0101ksies nov\u0113rst n\u0101kotn\u0113, ta\u010du, visticam\u0101k, tas netiks dar\u012bts pa\u0161a kodola ietvaros. <\/p>\n

Mazliet rekl\u0101mas \ud83d\ude42<\/h3>\n

\nPaldies, ka paliekat ar mums. Vai jums pat\u012bk m\u016bsu raksti? V\u0113laties redz\u0113t vair\u0101k interesantus materi\u0101lus? Atbalstiet m\u016bs, veicot pas\u016bt\u012bjumu vai ieteicot draugiem, m\u0101ko\u0146u VPS izstr\u0101d\u0101t\u0101jiem no $4.99<\/a><\/noindex>, unik\u0101ls ieejas l\u012bme\u0146a serveru analogs, kuru m\u0113s izstr\u0101d\u0101j\u0101m jums:<\/b> Visa paties\u012bba par VPS (KVM) E5-2697 v3 (6 kodoli) 10GB DDR4 480GB SSD 1Gbps no $19 vai k\u0101 pareizi dal\u012bt serveri?<\/a><\/noindex> (pieejami varianti ar RAID1 un RAID10, l\u012bdz 24 kodoliem un l\u012bdz 40GB DDR4).<\/p>\n

Dell R730xd divas reizes l\u0113t\u0101k datu centr\u0101 Equinix Tier IV Amsterdam\u0101?<\/b> Tikai pie mums 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100TB no $199<\/a><\/noindex> N\u012bderland\u0113! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 no $99!<\/b><\/b> Lasiet par to K\u0101 izveidot korporat\u012bvas klases infrastrukt\u016bru, izmantojot Dell R730xd E5-2650 v4 serverus, kas maks\u0101 9000 eiro par niek\u0101m?<\/a><\/noindex>
\n
Avots: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 \u044f\u0434\u0440\u0435 \u0431\u044b\u043b\u0438 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b, \u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0435\u0448\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043c\u043e\u043a. \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55510","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux: blo\u0137\u0113\u0161anas baseina dz\u0113\u0161ana \"\/dev\/random\" | ProHoster","description":"K\u0101 zin\u0101ms, \\\/dev\\\/random, kriptogr\u0101fiski iztur\u012bg\u0101 pseidojau\u0161u skait\u013cu \u0123eneratora (CSPRNG) jom\u0101, ir viena nepat\u012bkama probl\u0113ma \u2013 blo\u0137\u0113\u0161ana. \u0160aj\u0101 rakst\u0101 st\u0101st\u012bts, k\u0101 to var atrisin\u0101t.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Linux: \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \/dev\/random | ProHoster","og:description":"\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-21T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55510","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:30","updated":"2022-10-02 22:01:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=55510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=55510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=55510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=55510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}