{"id":34673,"date":"2019-10-31T21:59:45","date_gmt":"2019-10-31T18:59:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60\/"},"modified":"2019-10-31T21:59:45","modified_gmt":"2019-10-31T18:59:45","slug":"vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60","title":{"rendered":"Lansarea sistemului de izolare a aplica\u021biilor Firejail 0.9.60","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\/releases\/tag\/0.9.60\">A v\u0103zut lumina zilei<\/a><\/noindex> lansarea proiectului <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/\">Firejail 0.9.60<\/a><\/noindex>, \u00een cadrul c\u0103ruia se dezvolt\u0103 un sistem pentru execu\u021bia izolat\u0103 a aplica\u021biilor grafice, de consol\u0103 \u0219i server. Utilizarea Firejail permite minimizarea riscului de compromisare a sistemului de baz\u0103 la lansarea programelor ce nu sunt de \u00eencredere sau poten\u021bial vulnerabile. Programul este scris \u00een limbajul C, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\">se r\u0103sp\u00e2nde\u0219te<\/a><\/noindex> sub licen\u021ba GPLv2 \u0219i poate func\u021biona pe orice distribu\u021bie Linux cu kernel mai recent de 3.0. Pachetele gata preg\u0103tite cu Firejail <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceforge.net\/projects\/firejail\/files\/firejail\/\">sunt preg\u0103tite<\/a><\/noindex> sunt disponibile \u00een formate deb (Debian, Ubuntu) \u0219i rpm (CentOS, Fedora).<\/p>\n<p>Pentru izolarea \u00een Firejail <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/features-3\/\">se utilizeaz\u0103<\/a><\/noindex>  spa\u021bii de nume (namespaces), AppArmor \u0219i filtrarea apelurilor de sistem (seccomp-bpf) \u00een Linux. Dup\u0103 lansare, programul \u0219i toate procesele sale copil folosesc vederi separate ale resurselor nucleului, cum ar fi stiva de re\u021bea, tabelul proceselor \u0219i punctele de montare. Aplica\u021biile interdependente pot fi grupate \u00eentr-un singur sandbox comun. Dac\u0103 se dore\u0219te, Firejail poate fi utilizat \u0219i pentru a lansa containere Docker, LXC \u0219i OpenVZ. <\/p>\n<p>Spre deosebire de metodele de izolare a containerelor, firejail este extrem de <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/documentation-2\/basic-usage\/\">simplu<\/a><\/noindex> \u00een configura\u021bie \u0219i nu necesit\u0103 preg\u0103tirea unei imagini de sistem \u2014 con\u021binutul containerului este generat dinamic pe baza con\u021binutului actual al sistemului de fi\u0219iere \u0219i este eliminat dup\u0103 terminarea aplica\u021biei. Se ofer\u0103 instrumente flexibile pentru definirea regulilor de acces la sistemul de fi\u0219iere, put\u00e2ndu-se specifica la ce fi\u0219iere \u0219i directoare accesul este permis sau interzis, se pot conecta sisteme de fi\u0219iere temporare (tmpfs) pentru date, se poate restric\u021biona accesul la fi\u0219iere sau directoare doar la citire, \u0219i se pot combina directoare prin bind-mount \u0219i overlayfs.<\/p>\n<p>Pentru un num\u0103r mare de aplica\u021bii populare, inclusiv Firefox, Chromium, VLC \u0219i Transmission, au fost preg\u0103tite <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/documentation-2\/building-custom-profiles\/\">profiluri<\/a><\/noindex> izolarea apelurilor de sistem. Pentru a rula un program \u00een modul de izolare, este suficient s\u0103 specifici numele aplica\u021biei ca argument al utilitarului firejail, de exemplu, \u201efirejail firefox\u201d sau \u201esudo firejail \/etc\/init.d\/nginx start\u201d. <\/p>\n<p>\u00cen noua versiune:<\/p>\n<ul>\n<li class=\"l\"> A fost eliminat\u0103 o vulnerabilitate care permitea unui proces mali\u021bios s\u0103 evite mecanismul de restric\u021bie a apelurilor de sistem. Esen\u021ba vulnerabilit\u0103\u021bii const\u0103 \u00een faptul c\u0103 filtrele Seccomp sunt copiate \u00een directorul \/run\/firejail\/mnt, disponibil pentru scriere \u00een interiorul mediu izolat. Procesele mali\u021bioase lansate \u00een modul de izolare pot modifica aceste fi\u0219iere, ceea ce va conduce la faptul c\u0103 noile procese lansate \u00een acela\u0219i mediu vor fi executate f\u0103r\u0103 aplicarea filtrului de apeluri de sistem.\n<li class=\"l\"> \u00cen filtru memory-deny-write-execute este blocat\u0103 apelarea \u201ememfd_create\u201d;\n<li class=\"l\"> A fost ad\u0103ugat\u0103 o nou\u0103 op\u021biune \u201eprivate-cwd\u201d pentru modificarea directorului de lucru pentru jail;\n<li class=\"l\"> A fost ad\u0103ugat\u0103 op\u021biunea \u201e--nodbus\u201d pentru blocarea socket-urilor D-Bus;\n<li class=\"l\"> A fost readus suportul pentru CentOS 6;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\/pull\/2601\">Oprit<\/a><\/noindex> suport pentru pachete \u00een formate <noindex><a rel=\"nofollow\" href=\"https:\/\/flatpak.org\/\">flatpak<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/snapcraft.io\/\">snap<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\/pull\/2601\/commits\/581d3cd01432c6666dbf6168fe5bdb3dae90fa46\">Se specific\u0103<\/a><\/noindex>, c\u0103 pentru aceste pachete ar trebui s\u0103 foloseasc\u0103 propriul lor instrumentar;<\/p>\n<li class=\"l\"> Au fost ad\u0103ugate noi profile pentru izolarea a 87 de programe suplimentare, printre care mypaint, nano, xfce4-mixer, gnome-keyring, redshift, font-manager, gconf-editor, gsettings, freeciv, lincity-ng, openttd, torcs, tremulous, warsow, freemind, kid3, freecol, opencity, utox, freeoffice-planmaker, freeoffice-presentations, freeoffice-textmaker, inkview, meteo-qt, ktouch, yelp \u0219i cantata.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50760\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0423\u0432\u0438\u0434\u0435\u043b \u0441\u0432\u0435\u0442 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Firejail 0.9.60, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 Firejail \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0432 \u043b\u044e\u0431\u043e\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linux \u0441 \u044f\u0434\u0440\u043e\u043c \u0441\u0442\u0430\u0440\u0448\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34673","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0423\u0432\u0438\u0434\u0435\u043b \u0441\u0432\u0435\u0442 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Firejail.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail 0.9.60 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0423\u0432\u0438\u0434\u0435\u043b \u0441\u0432\u0435\u0442 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Firejail.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:59:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:59:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea sistemului de izolare a aplica\u021biilor Firejail 0.9.60 | ProHoster","description":"A fost lansat proiectul Firejail.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail 0.9.60 | ProHoster","og:description":"\u0423\u0432\u0438\u0434\u0435\u043b \u0441\u0432\u0435\u0442 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Firejail.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-60","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:59:45+00:00","article:modified_time":"2019-10-31T18:59:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34673","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:10:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:16:33","updated":"2026-01-21 20:10:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34673"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34673\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}