Kua kitea he hapa nui o te mōkihi i roto i te putunga AUR (Arch User Repository) e whakamahia ana e Arch. Linux mō te tohatoha i ngā tono tuatoru. I riro i ngā kaiwhakaeke te mana whakahaere o ngā mōkihi e 469, ā, i taea e rātou te werowero i te waehere kino ki roto i aua mōkihi hei tahae i ngā kupuhipa me ngā kī urunga mai i ngā pūnaha a ngā kaiwhakamahi. I roto i ētahi atu mea, i whakauruhia te waehere kino ki roto i te mōkihi ALVR, e tohatohahia ana mā te AUR, ā, he rongonui i waenga i ngā kaitākaro rorohiko.
I tangohia e ngā kaiwhakaeke te mana tiaki o ngā mōkihi me te tūnga "pani" me te kore he kaitiaki. I whakamahia e rātou te ingoa o te kaitiaki whakamutunga engari he wāhitau īmēra rerekē, kātahi ka tāpirihia he taurangi kotahi, ā, ka whakaputa i tētahi whakahōutanga. I tāpirihia e te taurangi "npm" ki te rārangi whakawhirinaki PKGBUILD, ā, i whakaurua he rārangi ki roto i te poraka post_install o te tuhinga install.sh hei tāuta i ētahi mōkihi NPM. I whakaurua ki ngā mōkihi NPM i tāutahia tētahi, neke atu rānei, ngā mōkihi rongonui me te mōkihi atomic-lockfile, kei roto ko te pūmanawa huna. I tāpirihia te tāutanga mōkihi NPM ki ngā kaupapa katoa i takahia, tae atu ki ngā mea kāore i whakamahi i te JavaScript, i te NPM rānei.
I te whakahohenga, ka noho tonu te pūmanawa kino i roto i te pūnaha hei ratonga pūnaha kua whakaingoatia matapōkeretia, ā, i te wā i whakahaerehia ai, ka huna i a ia anō hei miro kernel. I te wā i whakahaerehia ai me ngā mana pakiaka, ka hangaia te ratonga i te taumata pūnaha (/etc/systemd/system) ā, i whakahohehia anō hoki te rootkit taumata kernel. I te wā i whakahaerehia ai me ngā mana kaiwhakamahi, ka whakahaerehia hei kaiwhakamahi (~/.config/systemd/user). I matawaihia e te pūmanawa kino, ā, ka tukuna ngā karere ki tētahi tūmau o waho. tūmau Ngā kī me ngā taipitopito tuakiri VPN, Docker, Podman, me SSH, tae atu ki ngā raraunga tairongo i tangohia mai i te pūtirotiro, te hītori whakahau anga, ngā kī putea moni matihiko, me ngā tohu urunga mō Slack, Microsoft Teams, Discord, GitHub, NPM, me Vault.
Source: opennet.ru
