{"id":107724,"date":"2023-04-04T18:48:10","date_gmt":"2023-04-04T16:48:10","guid":{"rendered":"https:\/\/prohoster.info\/?p=107724"},"modified":"2023-04-04T19:05:55","modified_gmt":"2023-04-04T17:05:55","slug":"v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","title":{"rendered":"\u00cen Fedora se discut\u0103 despre aplicarea cript\u0103rii FS implicit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Owen Taylor, creator of GNOME Shell and the Pango library, who is part of the working group for the development of Fedora for workstations, has proposed a plan for default encryption of system partitions and user home directories in Fedora Workstation. The advantages of switching to default encryption include data protection in case of laptop theft, protection against attacks on unattended devices, and maintaining privacy and integrity out of the box without the need for unnecessary actions. <\/p>\n

According to the draft plan prepared for encryption, it is planned to use Btrfs fscrypt. For system partitions, encryption keys are planned to be stored in the TPM module and used in conjunction with digital signatures applied for integrity verification of the bootloader, kernel, and initrd (i.e., at system boot, the user will not need to enter a password to decrypt the system partitions). For home directories, keys are planned to be generated based on the user's login and password (the connection to the encrypted home directory will occur during user login). <\/p>\n

The implementation timeline for the initiative depends on the distribution's transition to the Unified Kernel Image (UKI), which combines a handler for loading the kernel from UEFI (UEFI boot stub), the Linux kernel image, and the memory-loaded initrd system environment into a single file. Without UKI support, the immutability of the initrd environment, where keys for decrypting the filesystem are determined, cannot be guaranteed (for example, an attacker can replace initrd and simulate a password prompt; to avoid this, a verified boot of the entire chain is required before mounting the filesystem). <\/p>\n

\u00cen forma sa actual\u0103, instalatorul Fedora are o op\u021biune pentru criptarea volumelor la nivel de bloc utiliz\u00e2nd dm-crypt, folosind o fraz\u0103 de parol\u0103 separat\u0103, care nu este legat\u0103 de contul utilizatorului. Aceast\u0103 solu\u021bie prezint\u0103 probleme precum inadecvarea pentru criptarea separat\u0103 \u00een sistemele multi-utilizator, lipsa suportului pentru interna\u021bionalizare \u0219i accesibilitate, posibilitatea de a efectua atacuri prin \u00eenlocuirea bootloader-ului (bootloader-ul instalat de atacator poate pretinde c\u0103 este bootloader-ul original \u0219i poate solicita parola de decriptare) \u0219i necesitatea suportului pentru framebuffer \u00een initrd pentru a afi\u0219a cererea de parol\u0103.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 Fedora Workstation. \u0418\u0437 \u043f\u043b\u044e\u0441\u043e\u0432 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0440\u0430\u0436\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430, \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107724","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fedora ia \u00een considerare aplicarea cript\u0103rii FS prin defect | ProHoster","description":"Owen Taylor, creatorul GNOME Shell \u0219i al bibliotecii Pango, membre al grupului de lucru pentru dezvoltarea Fedora pentru sta\u021bii de lucru, a propus discutarea unui plan de criptare implicit pentru parti\u021biile sistemului \u0219i folderele utilizatorilor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0424\u0421 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e | ProHoster","og:description":"\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-04T16:48:10+00:00","article:modified_time":"2023-04-04T17:05:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=107724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107724\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=107724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=107724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=107724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}