{"id":145102,"date":"2025-10-14T17:12:00","date_gmt":"2025-10-14T15:12:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/tehnicheskij-komitet-utverdil-izmenenie-povedeniya-systemd-v-debian"},"modified":"2025-10-14T17:12:00","modified_gmt":"2025-10-14T15:12:00","slug":"tehnicheskij-komitet-utverdil-izmenenie-povedeniya-systemd-v-debian","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/tehnicheskij-komitet-utverdil-izmenenie-povedeniya-systemd-v-debian","title":{"rendered":"Comitetul tehnic a aprobat schimbarea comportamentului systemd \u00een Debian.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Comitetul tehnic care ia decizii finale cu privire la problemele tehnice controversate din proiectul Debian a aprobat modificarea pachetului systemd, care schimb\u0103 comportamentul legat de directorul \/var\/lock. Managerul de sistem systemd, \u00eencep\u00e2nd cu versiunea 258, a restric\u021bionat posibilitatea de scriere \u00een directorul \/var\/lock doar pentru utilizatorii cu privilegii de root, \u00een vreme ce comitetul tehnic Debian a aprobat men\u021binerea vechiului comportament, care permite scrierea \u00een \/var\/lock de c\u0103tre orice utilizator. <\/p>\n

Regulile proiectului Debian prev\u0103d p\u0103strarea comportamentului ini\u021bial al aplica\u021biilor (set\u0103rilor stabilite \u00een upstream) la crearea pachetelor. Pentru a face modific\u0103ri specifice Debian \u00een pachete, \u00een condi\u021bii de ocolire a regulilor proiectului, este necesar\u0103 ob\u021binerea unei permisiuni speciale din partea comitetului tehnic. <\/p>\n

\u00cen cazul systemd, comitetul a sus\u021binut propunerea de a nu urma modificarea care schimba drepturile de acces la \/var\/lock \u00een vederea \u00eembun\u0103t\u0103\u021birii securit\u0103\u021bii, deoarece posibilitatea de scriere public\u0103 \u00een directorul \/var\/lock este men\u021bionat\u0103 \u00een specifica\u021bia FHS (Filesystem Hierarchy Standard) \u0219i este necesar\u0103 pentru continuarea func\u021bion\u0103rii unor programe existente. De exemplu, aplica\u021biile pentru func\u021bionarea pe porturi seriale, cum ar fi uucp, minicom, mgetty+sendfax \u0219i hylafax, utilizeaz\u0103 directorul \/var\/lock pentru a separa accesul la dispozitivele \/dev\/ttyS* prin crearea de fi\u0219iere de blocare. <\/p>\n

Necesitatea limit\u0103rii accesului la directorul \/var\/lock este explicat\u0103 de dezvoltatorii systemd prin protec\u021bia \u00eempotriva atacurilor DoS. Directorul \/var\/lock este un link simbolic c\u0103tre directorul \/run\/lock. Sec\u021biunea cu directorul \/run este, \u00een general, montat\u0103 separat prin tmpfs, iar posibilitatea de scriere necontrolat\u0103 \u00een el poate fi folosit\u0103 pentru a umple sec\u021biunea \u0219i a bloca crearea de noi fi\u0219iere \u00een ierarhia \/run. <\/p>\n

Pentru a preveni astfel de atacuri \u00een cazul unui acces nelimitat, \u00een Debian, anterior a fost utilizat un patch care monta \/run\/lock \u00eentr-o mic\u0103 parti\u021bie tmpfs separat\u0103. Anul trecut, acest patch a fost \u00eenlocuit cu unitatea run-lock.mount, iar vara aceasta, aceast\u0103 unitate a fost eliminat\u0103, dup\u0103 care \/run\/lock a ajuns \u00een parti\u021bia \/run. \u00cen comentariile de la decizia comitetului tehnic, fostul men\u021bin\u0103tor al systemd a recomandat s\u0103 nu se uite aceast\u0103 modificare \u0219i s\u0103 se revin\u0103 la montarea separat\u0103 a \/run\/lock, iar pe termen lung, s\u0103 se reconfigureze toate aplica\u021biile legate de \/run\/lock pentru a folosi mecanismul de blocare flock.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043f\u043e\u0440\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Debian, \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043f\u0430\u043a\u0435\u0442 \u0441 systemd, \u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u043c \/var\/lock. \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 systemd \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 258 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \/var\/lock \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 Debian \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-145102","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Comitetul tehnic a aprobat modificarea comportamentului systemd \u00een Debian | ProHoster","description":"Comitetul tehnic care ia decizii finale cu privire la chestiunile tehnice controversate din proiectul Debian a aprobat modificarea pachetului systemd care schimb\u0103 comportamentul \u00een cazul lucrului cu catalogul \/var\/lock.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/tehnicheskij-komitet-utverdil-izmenenie-povedeniya-systemd-v-debian","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f systemd \u0432 Debian | ProHoster","og:description":"\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043f\u043e\u0440\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Debian, \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043f\u0430\u043a\u0435\u0442 \u0441 systemd, \u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u043c \/var\/lock.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/tehnicheskij-komitet-utverdil-izmenenie-povedeniya-systemd-v-debian","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-14T15:12:00+00:00","article:modified_time":"2025-10-14T15:12:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"145102","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 15:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:19:19","updated":"2026-01-23 15:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/145102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=145102"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/145102\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=145102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=145102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=145102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}