TUF 1.0 ilipo, chimango chokonzekera zosintha zotetezedwa

Kutulutsidwa kwa TUF 1.0 (The Update Framework) kwasindikizidwa, kupereka zida zowunikira motetezeka ndikutsitsa zosintha. Cholinga chachikulu cha pulojekitiyi ndikuteteza kasitomala kuti asawukidwe ngati nkhokwe ndi zomangamanga, kuphatikiza kutsutsa kukwezedwa ndi omwe akuwukira zosintha zabodza zomwe zidapangidwa atapeza makiyi opanga ma signature a digito kapena kusokoneza malo osungira. Pulojekitiyi imapangidwa motsogozedwa ndi Linux Foundation ndipo imagwiritsidwa ntchito kupititsa patsogolo chitetezo chotumiza zosintha pama projekiti monga Docker, Fuchsia, Automotive Grade Linux, Bottlerocket ndi PyPI (kuphatikiza kutsimikizira kutsitsa ndi metadata mu PyPI kukuyembekezeka mu posachedwa). Khodi yokhazikitsidwa ndi TUF idalembedwa ku Python ndikugawidwa pansi pa layisensi ya Apache 2.0.

Pulojekitiyi ikupanga mndandanda wamalaibulale, mawonekedwe a mafayilo ndi zofunikira zomwe zingathe kuphatikizidwa mosavuta ndi machitidwe omwe alipo kale, kupereka chitetezo pakagwa vuto lalikulu kumbali ya opanga mapulogalamu. Kuti mugwiritse ntchito TUF, ndikokwanira kuwonjezera metadata yofunikira kumalo osungira, ndikuphatikiza njira zoperekedwa mu TUF pakutsitsa ndikutsimikizira mafayilo mu code ya kasitomala.

Dongosolo la TUF limatenga ntchito zowunikira zosintha, kutsitsa zosinthazo, ndikutsimikizira kukhulupirika kwake. Kukhazikitsa kosinthika sikumasokoneza mwachindunji metadata yowonjezera, kutsimikizira ndi kutsitsa komwe kumachitidwa ndi TUF. Kuti muphatikizidwe ndi mapulogalamu ndi makina opangira zosintha, API yotsika kwambiri kuti mupeze metadata ndi kukhazikitsa API ngclient yapamwamba, yokonzekera kuphatikizidwa ndi mapulogalamu, amaperekedwa.

Zina mwa ziwopsezo zomwe TUF ingathe kuthana nazo ndikulowetsa zotulutsa zakale mobisa kuti aletse kuwongolera zovuta zamapulogalamu kapena kubweza kwa wogwiritsa ntchito ku mtundu wakale womwe uli pachiwopsezo, komanso kupititsa patsogolo zosintha zoyipa zomwe zasainidwa moyenera pogwiritsa ntchito chiwopsezo. key, DoS ikuukira makasitomala, monga kudzaza disk ndi zosintha zosatha.

Kutetezedwa ku kuwonongeka kwa zomangamanga za opereka mapulogalamu kumatheka posunga ma rekodi osiyana, otsimikizika a momwe nkhokwe kapena ntchito. Metadata yotsimikiziridwa ndi TUF imaphatikizapo zambiri zokhudza makiyi omwe angakhale odalirika, ma cryptographic hashes kuti ayese kukhulupirika kwa mafayilo, ma signature owonjezera a digito kuti atsimikizire metadata, zambiri zokhudza manambala amtundu, ndi zambiri zokhudza moyo wa zolemba. Makiyi omwe amagwiritsidwa ntchito potsimikizira amakhala ndi moyo wocheperako ndipo amafuna kusinthidwa pafupipafupi kuti atetezedwe ndi makiyi akale.

Kuchepetsa chiopsezo cha kusagwirizana kwa dongosolo lonse kumatheka pogwiritsa ntchito chitsanzo chokhulupilira chogawana, chomwe chipani chilichonse chimangokhala ndi malo omwe ali nawo mwachindunji. Dongosololi limagwiritsa ntchito maudindo omwe ali ndi makiyi awoawo, mwachitsanzo, makiyi omwe ali ndi maudindo omwe ali ndi metadata m'malo osungira, nthawi yosinthira zosintha ndi misonkhano yomwe mukufuna, nawonso, gawo lomwe limayang'anira zikwangwani zamisonkhano. maudindo okhudzana ndi chiphaso cha mafayilo operekedwa.

TUF 1.0 ilipo, chimango chokonzekera zosintha zotetezedwa

Kuti muteteze ku kusokoneza kwakukulu, njira yochotseratu makiyi ndikusinthanso makiyi amagwiritsidwa ntchito. Kiyi iliyonse imakhala ndi mphamvu zochepa zokha, ndipo ntchito zotsimikizira zimafuna kugwiritsa ntchito makiyi angapo (kutulutsa kwa kiyi imodzi sikulola kuukira kwanthawi yayitali kwa kasitomala, komanso kusokoneza dongosolo lonse, makiyi a otenga nawo mbali ayenera kukhala. kugwidwa). Wothandizira amatha kuvomereza mafayilo aposachedwa kwambiri kuposa mafayilo omwe adalandilidwa kale, ndipo deta imatsitsidwa molingana ndi kukula komwe kwafotokozedwa mu metadata yotsimikizika.

Kutulutsidwa kosindikizidwa kwa TUF 1.0.0 kumapereka kukhazikitsidwa kolembetsedwanso kokhazikika komanso kokhazikika kwa TUF komwe mungagwiritse ntchito ngati chitsanzo chokonzekera popanga zomwe mwakhazikitsa kapena kuphatikiza mapulojekiti anu. Kukhazikitsa kwatsopano kuli ndi code yochepa kwambiri (mizere ya 1400 m'malo mwa 4700), ndiyosavuta kusunga ndipo imatha kukulitsidwa mosavuta, mwachitsanzo, ngati kuli kofunikira kuwonjezera chithandizo chamagulu enaake amtundu, machitidwe osungirako kapena ma aligorivimu achinsinsi.

Source: opennet.ru

Kuwonjezera ndemanga