Kugawa kwa Whonix 18.2, komwe cholinga chake ndi kupereka chitsimikizo chotsimikizira kusadziwika, chitetezo, komanso chitetezo chachinsinsi, kwatulutsidwa. Kugawa kumeneku kumachokera pa Debian GNU/Linux ndipo imagwiritsa ntchito Tor kuti iwonetsetse kuti anthu sakudziwika. Ntchito ya pulojekitiyi ili ndi chilolezo pansi pa GPLv3. Zomwe zikupezeka kuti zitsitsidwe ndi zithunzi za makina enieni mu mtundu wa .ova wa VirtualBox (2.6 GB yokhala ndi LXQt ndi 1.5 GB ya console) ndi mtundu wa qcow2 wa KVM hypervisor (4 GB yokhala ndi LXQt ndi 2.3 GB ya console).
Mbali yapadera ya Whonix ndikugawika kwa magawo awiri omwe adakhazikitsidwa padera - Whonix-Gateway ndikukhazikitsa njira yolumikizirana mosadziwika bwino ndi Whonix-Workstation yokhala ndi desktop. Zigawo ndizosiyana siyana zomwe zimaperekedwa mkati mwa chithunzi chimodzi cha boot ndikuyendetsa makina osiyanasiyana. Kufikira pa intaneti kuchokera ku malo a Whonix-Workstation kumangochitika kudzera pa Whonix-Gateway, yomwe imalekanitsa malo ogwira ntchito kuti asagwirizane ndi dziko lakunja ndikulola kugwiritsa ntchito maadiresi ongopeka okha. Njirayi imakuthandizani kuti muteteze wogwiritsa ntchito kuti asatulutse adilesi yeniyeni ya IP ngati msakatuli akubedwa kapena chiwopsezo chikugwiritsidwa ntchito chomwe chimapatsa wowukirayo mwayi wofikira padongosolo.
Kuthyolako Whonix-Workstation kudzalola wowukirayo kupeza zongopeka zama netiweki magawo, popeza magawo enieni a IP ndi DNS amabisika kuseri kwa malire a chipata cha netiweki choyendetsedwa ndi Whonix-Gateway, chomwe chimayenda kudzera pa Tor. Ziyenera kuganiziridwa kuti zigawo za Whonix zidapangidwa kuti ziziyenda mwa mawonekedwe a kachitidwe ka alendo, i.e. kuthekera kogwiritsa ntchito zovuta zamasiku a 0 m'mapulatifomu owoneka bwino omwe angapereke mwayi wopezeka pagulu la alendo sangalepheretse. Chifukwa cha izi, sizovomerezeka kuyendetsa Whonix-Workstation pakompyuta yomweyo monga Whonix-Gateway.
Whonix-Workstation imabwera ndi malo ogwiritsira ntchito a LXQt mwachisawawa. Imakhala ndi mapulogalamu monga VLC ndi Tor Browser. Whonix-Gateway imaphatikizapo mapulogalamu a seva, kuphatikiza ma seva a Apache httpd, ngnix, ndi IRC, omwe angagwiritsidwe ntchito kuyendetsa ntchito zobisika za Tor. Kuyika tunnel pa Tor n'kotheka pa Freenet, i2p, JonDonym, SSH, ndi VPN. Ngati mukufuna, wogwiritsa ntchito angagwiritse ntchito Whonix-Gateway yokha ndikulumikiza machitidwe awo wamba kudzera mu izo, kuphatikiza Windows, zomwe zimathandiza kuti anthu azitha kupeza malo ogwirira ntchito omwe alipo kale popanda kudziwitsa anthu ena.
Malo ogwirira ntchito amachokera ku Kicksecure yotetezedwa, yomwe ikupangidwa nthawi imodzi ndi opanga omwewo ndikukulitsa. Debian Njira zina ndi zokonzera zowonjezera chitetezo: AppArmor yodzipatula, kukhazikitsa zosintha kudzera pa Tor, kugwiritsa ntchito gawo la tally2 PAM kuti muteteze ku kuyerekeza mawu achinsinsi, kukulitsa entropy ya RNG, kuletsa SUID, kusatsegula madoko a netiweki mwachisawawa, kugwiritsa ntchito malangizo ochokera ku KSPP (Kernel Self Protection Project), kuwonjezera chitetezo ku kutayikira kwa chidziwitso cha zochita za CPU, ndi zina zotero.
Zosintha zazikulu:
- Ndasintha malo a Kicksecure kuti ndigwiritse ntchito phukusi la Sequoia-PGP (kukhazikitsa kwa OpenPGP mu Rust) m'malo mwa GnuPG, ndikuletsa malo osungiramo zinthu mwachisawawa. Debian Njira Yachangu: Mukagwiritsa ntchito LXQt, kukhazikitsa Qps (njira yowonera njira zoyendetsera) kwayimitsidwa, ndipo chithandizo cha qemu:///session chawonjezedwa kuti chigwiritsidwe ntchito ndi makina enieni ndi ogwiritsa ntchito opanda mwayi.
- Kafukufuku wa chitetezo chamkati wachitika ndipo kafukufuku wakunja wayambitsidwa.
- Phukusi la Kloak lokonzedwa bwino, lomwe limagwiritsidwa ntchito polimbana ndi kudziwika kwa ogwiritsa ntchito kutengera momwe kiyibodi imalowera komanso mayendedwe a mbewa.
- Kugawa kwa Qubes-Whonix-Gateway kumaphatikizapo phukusi la fwupd-qubes-vm.
- Yolembedwanso ndi Whonix-Windows-Wokhazikitsa ndi Whonix-Windows-Woyambitsa.
- Kapangidwe kabwino ka zipangizo zokhala ndi mapurosesa a Apple Silicon.
Source: opennet.ru
