{"id":54610,"date":"2019-12-30T00:00:00","date_gmt":"2019-12-29T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62"},"modified":"2020-02-18T14:02:39","modified_gmt":"2020-02-18T11:02:39","slug":"vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62","title":{"rendered":"Lansarea sistemului de izolare a aplica\u021biilor Firejail 0.9.62","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dup\u0103 \u0219ase luni de dezvoltare <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\/releases\/tag\/0.9.62\">disponibil<\/a><\/noindex> lansarea proiectului <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/\">Firejail 0.9.62<\/a><\/noindex>, \u00een cadrul c\u0103ruia se dezvolt\u0103 un sistem pentru execu\u021bia izolat\u0103 a aplica\u021biilor grafice, de consol\u0103 \u0219i server. Utilizarea Firejail permite minimizarea riscului de compromisare a sistemului de baz\u0103 la lansarea programelor ce nu sunt de \u00eencredere sau poten\u021bial vulnerabile. Programul este scris \u00een limbajul C, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\">se r\u0103sp\u00e2nde\u0219te<\/a><\/noindex> sub licen\u021ba GPLv2 \u0219i poate func\u021biona pe orice distribu\u021bie Linux cu kernel mai recent de 3.0. Pachetele gata preg\u0103tite cu Firejail <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceforge.net\/projects\/firejail\/files\/firejail\/\">sunt preg\u0103tite<\/a><\/noindex> sunt disponibile \u00een formate deb (Debian, Ubuntu) \u0219i rpm (CentOS, Fedora).<\/p>\n<p>Pentru izolarea \u00een Firejail <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/features-3\/\">se utilizeaz\u0103<\/a><\/noindex>  spa\u021bii de nume (namespaces), AppArmor \u0219i filtrarea apelurilor de sistem (seccomp-bpf) \u00een Linux. Dup\u0103 lansare, programul \u0219i toate procesele sale derivate utilizeaz\u0103 viziuni separate ale resurselor kernel, cum ar fi stiva de re\u021bea, tabela de procese \u0219i punctele de montare. Aplica\u021biile interdependente pot fi combinate \u00eentr-un singur sandbox comun. De asemenea, Firejail poate fi folosit pentru lansarea containerelor Docker, LXC \u0219i OpenVZ. <\/p>\n<p>Spre deosebire de metodele de izolare a containerelor, firejail este extrem de <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/documentation-2\/basic-usage\/\">simplu<\/a><\/noindex> \u00een configura\u021bie \u0219i nu necesit\u0103 preg\u0103tirea unei imagini de sistem \u2014 con\u021binutul containerului este creat la nevoie pe baza con\u021binutului FS-ului curent \u0219i este \u0219ters dup\u0103 finalizarea aplica\u021biei. Sunt oferite instrumente flexibile pentru definirea regulilor de acces la sistemul de fi\u0219iere, put\u00e2ndu-se specifica la care fi\u0219iere \u0219i directoare accesul este permis sau interzis, se pot conecta FS-uri temporare (tmpfs) pentru date, restric\u021bion\u00e2nd accesul la fi\u0219iere sau directoare doar \u00een modul de citire, \u0219i se pot combina directoare prin bind-mount \u0219i overlayfs.<\/p>\n<p>Pentru un num\u0103r mare de aplica\u021bii populare, inclusiv Firefox, Chromium, VLC \u0219i Transmission, au fost preg\u0103tite <noindex><a rel=\"nofollow\" href=\"https:\/\/firejail.wordpress.com\/documentation-2\/building-custom-profiles\/\">profiluri<\/a><\/noindex> izolarea apelurilor de sistem. Pentru a ob\u021bine privilegiile necesare configur\u0103rii unui mediu izolat, fi\u0219ierul executabil firejail este instalat cu flag-ul SUID root (dup\u0103 ini\u021bializare, privilegiile sunt resetate). Pentru a rula un program \u00een modul de izolare, este suficient s\u0103 specifici numele aplica\u021biei ca argument al utilitarului firejail, de exemplu, \u201efirejail firefox\u201d sau \u201esudo firejail \/etc\/init.d\/nginx start\u201d. <\/p>\n<p>\u00cen noua versiune:<\/p>\n<ul>\n<li class=\"l\"> \u00cen fi\u0219ierul de configurare \/etc\/firejail\/firejail.config <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/netblue30\/firejail\/blob\/master\/etc\/firejail.config#L38\">a fost ad\u0103ugat\u0103<\/a><\/noindex> setarea file-copy-limit, care permite limitarea dimensiunii fi\u0219ierelor ce vor fi copiate \u00een memorie atunci c\u00e2nd se folosesc op\u021biunile \u201e--private-*\u201d (de default, limita este setat\u0103 la 500MB).\n<li class=\"l\"> \u00cen directorul \/usr\/share\/doc\/firejail au fost ad\u0103ugate \u0219abloane pentru crearea de noi profile de limitare a aplica\u021biilor.\n<li class=\"l\"> \u00cen profile este permis\u0103 utilizarea debugger-elor.\n<li class=\"l\"> Filtrarea apelurilor de sistem a fost \u00eembun\u0103t\u0103\u021bit\u0103 prin mecanismul seccomp.\n<li class=\"l\"> A fost asigurat\u0103 autodetectarea flag-urilor de compilare.\n<li class=\"l\"> Apelul chroot este acum efectuat nu pe baza unei c\u0103i, ci folosind puncte de montare bazate pe descriptorul de fi\u0219ier.\n<li class=\"l\"> Directorul \/usr\/share a fost inclus \u00een lista alb\u0103 a diverselor profile.\n<li class=\"l\"> \u00cen sec\u021biunea contrib au fost ad\u0103ugate noi scripturi auxiliare gdb-firejail.sh \u0219i sort.py.\n<li class=\"l\"> Protec\u021bia \u00een faza de execu\u021bie a codului privilegiat (SUID) a fost \u00eent\u0103rit\u0103.\n<li class=\"l\"> Pentru profile au fost implementate noi caracteristici condi\u021bionale HAS_X11 \u0219i HAS_NET pentru a verifica prezen\u021ba unui server X \u0219i accesul la re\u021bea.\n<li class=\"l\"> Au fost ad\u0103ugate profile pentru lansarea izolat\u0103 a aplica\u021biilor (num\u0103rul total de profile a fost crescut la 884):\n<ul>\n<li>i2p,\n<li>tor-browser (AUR),\n<li>Zulip,\n<li>rsync,\n<li>signal-cli,\n<li>tcpdump,\n<li>tshark,\n<li>qgis,\n<li>OpenArena,\n<li>godot,\n<li>klatexformula,\n<li>klatexformula_cmdl,\n<li>links,\n<li>xlinks,\n<li>pandoc,\n<li>teams-for-linux,\n<li>gnome-sound-recorder,\n<li>newsbeuter,\n<li>keepassxc-cli,\n<li>keepassxc-proxy,\n<li>rhythmbox-client,\n<li>jerry,\n<li>zeal,\n<li>mpg123,\n<li>conplay,\n<li>mpg123.bin,\n<li>mpg123-alsa,\n<li>mpg123-id3dump,\n<li>out123,\n<li>mpg123-jack,\n<li>mpg123-nas,\n<li>mpg123-openal,\n<li> mpg123-oss,\n<li>mpg123-portaudio,\n<li>mpg123-pulse,\n<li> mpg123-strip,\n<li>pavucontrol-qt,\n<li>gnome-characters,\n<li>gnome-character-map,\n<li>Whalebird,\n<li>tb-starter-wrapper,\n<li>bzcat,\n<li>kiwix-desktop,\n<li>bzcat,\n<li>zstd,\n<li>pzstd,\n<li>zstdcat,\n<li>zstdgrep,\n<li>zstdless,\n<li>zstdmt,\n<li>unzstd,\n<li>ar,\n<li>gnome-latex,\n<li> pngquant,\n<li>kalgebra,\n<li>kalgebramobile,\n<li>amuled,\n<li>kfind,\n<li>profanity,\n<li>audio-recorder,\n<li>cameramonitor,\n<li>ddgtk,\n<li>drawio,\n<li>unf,\n<li>gmpc,\n<li>electron-mail,\n<li>gist,\n<li>gist-paste.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52115\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Firejail 0.9.62, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 Firejail \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0432 \u043b\u044e\u0431\u043e\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linux [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-54610","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail 0.9.62 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-12-29T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:02:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea sistemului de izolare a aplica\u021biilor Firejail 0.9.62 | ProHoster","description":"Dup\u0103 \u0219ase luni de dezvoltare, versiunea proiectului este disponibil\u0103","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail 0.9.62 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-izolyatsii-prilozhenij-firejail-0-9-62","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-29T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 12:05:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:01:33","updated":"2026-01-24 12:05:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/54610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=54610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/54610\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=54610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=54610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=54610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}