Kua tukuna te tohatoha Whonix 18.2, e aro ana ki te whakarato i te ingoakore, te haumarutanga, me te tiakitanga tūmataiti kua oti te whakarite. Ko te pūtake o te tohatoha ko Debian GNU/Linux ā, e whakamahi ana i a Tor hei whakarite i te huna. Kei raro i te raihana GPLv3 te mahi a te kaupapa. Kei te wātea ngā whakaahua hei tango. mihini mariko i te hōputu ova mō VirtualBox (2.6 GB me te LXQt me te papatohu 1.5 GB) me qcow2 mō te hypervisor KVM (4 GB me te LXQt me te papatohu 2.3 GB).
Ko tētahi āhuatanga motuhake o Whonix ko te wehenga o te tohatoha kia rua ngā wāhanga whakahaere motuhake: Whonix-Gateway, e whakatinana ana i tētahi kēti whatunga mō ngā whakawhitiwhiti kōrero ingoamuna, me Whonix-Workstation, kei roto ko tētahi papamahi. He taiao pūnaha motuhake ngā wāhanga, e tukuna ana i roto i tētahi ahua whakaara kotahi, ā, e rere ana i roto i ngā taiao rerekē. mihini marikoKa taea anake te uru atu ki te whatunga mai i te taiao Whonix-Workstation mā te Whonix-Gateway, e wehe ana i te taiao mahi mai i te taunekeneke tika ki te ao o waho, ā, ka taea anake te whakamahi i ngā wāhitau whatunga rūpahu. Mā tēnei huarahi ka tiakina te kaiwhakamahi mai i te turuturu raraunga o te ao tūturu. Wāhitau IP mēnā ka taumanutia tētahi pūtirotiro tukutuku, ka whakamahia rānei tētahi ngoikoretanga e hoatu ana ki te kaiwhakaeke te urunga pakiaka ki te pūnaha.
Ko te hacking Whonix-Workstation ka taea e te kaitukino te tiki i nga tawhā whatunga tito noa, na te mea kei te huna nga tohu IP me te DNS i muri i te taitapa o te keeti whatunga e whakahaerea ana e Whonix-Gateway, e arai ana i nga waka ma Tor anake. Me whai whakaaro ko nga waahanga Whonix i hangaia kia rere i te ahua o nga punaha manuhiri, i.e. kaore e taea te whakakore i te kaha ki te whakamahi i nga whakaraeraetanga 0-ra tino nui i roto i nga papaaho mariko ka taea te uru atu ki te punaha manaaki. Na tenei, kaore i te tūtohu kia whakahaeretia a Whonix-Workstation i runga i te rorohiko kotahi me Whonix-Gateway.
Kei roto i te Whonix-Workstation te taiao kaiwhakamahi LXQt i te taunoa. Kei roto ko ngā kaupapa pēnei i te VLC me te Tor Browser. Kei roto i te Whonix-Gateway he huinga tono tūmau, tae atu ki ngā tūmau Apache httpd, ngnix, me IRC, ka taea te whakamahi hei whakahaere i ngā ratonga huna a Tor. Ka taea te whakapūtanga i runga i te Tor mō Freenet, i2p, JonDonym, SSH, me VPNKi te hiahiatia, ka taea e te kaiwhakamahi te whakamahi i te Whonix-Gateway anake me te hono i ā rātou pūnaha noa mā roto, tae atu ki Windows, e āhei ai te urunga ingoamuna ki ngā teihana mahi o nāianei.
Ko te taiao pūnaha e hangai ana ki te tohatoha tiaki a Kicksecure, e whakawhanakehia ana i te taha o ngā kaiwhakawhanake kotahi, ā, e whakawhanui ana Debian Ngā tikanga me ngā tautuhinga tāpiri mō te whakanui ake i te haumarutanga: AppArmor mō te wehe, te tāuta i ngā whakahōutanga mā Tor, te whakamahi i te kōwae PAM tally2 hei tiaki i te matapae kupuhipa, te whakawhānui i te entropy mō te RNG, te whakakore i te SUID, te kore e whakatuwhera i ngā tauranga whatunga mā te taunoa, te whakamahi i ngā taunakitanga mai i te KSPP (Kernel Self Protection Project), te tāpiri i te tiakitanga mai i te turuturu o ngā mōhiohio mahi CPU, me ētahi atu.
Nga huringa matua:
- I whakahoutia te taiao Kicksecure kia whakamahia te mōkihi Sequoia-PGP (he whakatinanatanga OpenPGP i roto i te Rust) hei utu mō te GnuPG, ā, i monoa te putunga raraunga mā te taunoa. Debian Ara Tere: Ina whakamahia te LXQt, kua mutu te tāutanga o Qps (he atanga mō te tiro i ngā tukanga e rere ana); kua tāpirihia te tautoko mō te qemu:///session mō te whakahaere i ngā mīhini mariko e ngā kaiwhakamahi kāore i te whai mana.
- Kua oti te arotake haumarutanga ā-roto, ā, kua tīmatahia hoki te arotake haumarutanga o waho.
- Mōkihi Kloak kua whakapaitia, e whakamahia ana hei ārai i te tautuhi kaiwhakamahi i runga i te tāuru papapātuhi me ngā nekehanga kiore.
- Kei roto i te tohatoha Qubes-Whonix-Gateway te mōkihi fwupd-qubes-vm.
- I tuhia anō e Whonix-Windows-Kaitāuta me Whonix-Windows-Kaiwhakaoho.
- He hanganga whakapai ake mō ngā taputapu me ngā tukatuka Apple Silicon.
Source: opennet.ru
