🥇Fedora 40 ikukonzekera kuphatikiza kudzipatula kwadongosolo

Fedora 40 ikupereka zosintha zodzipatula pazantchito zosasinthika, komanso ntchito zomwe zikuyenda ndizovuta monga PostgreSQL, Apache httpd, Nginx, ndi MariaDB. Kusinthaku kukuyembekezeka kuwongolera kwambiri chitetezo chagawidwe pakusasinthika kwake ndikupangitsa kutsekereza zowopsa zosadziwika muntchito zamakina. Pempholi silinawunikidwebe ndi FESCo (Fedora Engineering Steering Committee), komiti yachitukuko chaukadaulo yogawa Fedora. Lingaliroli likhozanso kukanidwa panthawi yowunikira anthu.

Zokonda zovomerezeka kuti muyambitse:

PrivateTmp=inde - kupereka maulalo osiyana okhala ndi mafayilo osakhalitsa.
ProtectSystem=inde/zodzaza/zolimba - khazikitsani mafayilo amafayilo mumachitidwe owerengera okha (munjira "yathunthu" - / etc/, mumachitidwe okhwima - mafayilo onse kupatula / dev/, /proc/ ndi / sys/).
ProtectHome=yes - imaletsa kulowa m'ndandanda wanyumba za ogwiritsa ntchito.
PrivateDevices = inde - kusiya mwayi wopita ku / dev / null, / dev / zero, ndi / dev / mwachisawawa
ProtectKernelTunables=inde - mwayi wowerengera /proc/sys/, /sys/, /proc/acpi, /proc/fs, /proc/irq, ndi zina.
ProtectKernelModules=inde - letsa kutsitsa kwa ma module a kernel.
ProtectKernelLogs=inde - imalepheretsa kulowa kwa buffer ya kernel log.
ProtectControlGroups=inde - mwayi wowerengera / sys/fs/cgroup/
NoNewPrivileges=inde - imalepheretsa kukwera kwa mwayi kudzera pa mbendera za setuid, setgid, ndi luso.
PrivateNetwork=inde - kuyika malo osiyana a network stack namespace.
ProtectClock=inde - imaletsa kusintha nthawi.
ProtectHostname=yes - imaletsa kusintha dzina la wolandila.
ProtectProc=invisible - imabisa njira zina mu /proc.
Wogwiritsa = - sinthani wogwiritsa ntchito

Kuphatikiza apo, zokonda zotsatirazi zitha kuganiziridwa: