YeFreeBSD, kuitiswa kwechishandiso chekuzviparadzanisa nevamwe kunorongwa, kuyeuchidza plegde uye kuvhura masisitimu mafoni akagadzirwa neOpenBSD chirongwa. Kuzviparadzanisa nevamwe muplegde kunowanikwa nekurambidza kupinda kune masisitimu mafoni asingashandiswe mukushandisa, uye mukuvheneka nekuvhura nekusarudza kuvhura nzira chete kune yega faira nzira dzinogona kushanda nadzo. Yechishandiso, rudzi rwechena runyorwa rwekufona system uye mafaera nzira inoumbwa, uye mamwe ese mafoni uye nzira zvinorambidzwa.
Musiyano uripo pakati peanalogue yeplegde uye kuvheneka iri kugadziridzwa yeFreeBSD inodzika pasi pakupihwa kweyekuwedzera dhizaini iyo inokutendera iwe kuparadzanisa maapplication pasina kuita shanduko kune yavo kodhi kana nekushoma shanduko. Rangarira kuti muOpenBSD, plegde uye kuvhenekera kwakanangwa kubatanidzwa kwakasimba nenzvimbo yepasi uye inoshandiswa nekuwedzera akakosha zvirevo kune kodhi yekushandisa yega yega. Kurerutsa sangano redziviriro, mafirita anotendera iwe kuti udzivise granularity padanho rekufona kwega yega system uye kushandura makirasi ekufona system (yekupinda / kubuda, kuverenga mafaera, kunyora mafaera, sockets, ioctl, sysctl, process launch, nezvimwewo). Masevhisi ekurambidza mabasa anogona kushevedzwa mukodhi yekushandisa sezvo zvimwe zviito zvichiitwa, semuenzaniso, kuwana zvigadziko uye mafaera zvinogona kurambwa mushure mekuvhura mafaera anodiwa uye nekumisikidza network yekubatanidza.
Munyori wechiteshi cheplegde uye kuvhenekera kweFreeBSD inotarisira kupa kugona kusiyanisa zvikumbiro, izvo jira rekushandisa rinotsanangurwa, iro rinokutendera kuti ushandise mitemo inotsanangurwa mune yakaparadzana faira kune zvikumbiro. Kugadziriswa kwakarongwa kunosanganisira faira ine zvigadziriso zvekutanga zvinotsanangura makirasi ekufona kwesistimu uye akajairwa faira nzira dzakanangana kune mamwe maapplication (kushanda neruzha, kupindirana kwenetiweki, kutema miti, nezvimwewo), pamwe nefaira rine mitemo yekuwana kune chaiyo maapplication.
Chishandiso cheketeni chinogona kushandiswa kusiyanisa zvakanyanya zvisina kugadziridzwa zvinoshandiswa, maseva maitiro, graphical application, uye kunyangwe yese desktop zvikamu. Curtain inogona kushandiswa pamwe chete neiyo yekuzviparadzanisa nzira inopihwa neJail neCapsicum subsystems. Izvo zvakare zvinogoneka kuronga nested kuparadzaniswa, kana kwakatangwa zvikumbiro kugara nhaka yemitemo yakatarwa yekushandiswa kwemubereki, uchivawedzera nezvirambidzo zvega. Mamwe mashandiro e kernel (debugging zvivakwa, POSIX/SysV IPC, PTYs) anochengetedzwazve neanovharisa machira anodzivirira kupinda kune kernel zvinhu zvisina kugadzirwa neazvino kana maitiro evabereki.
Maitirwo anogona kugadzirisa ayo ega nekudaidza curtainctl kana nekushandisa libcurtain's plegde() uye unveil() mabasa, akafanana neanowanikwa muOpenBSD. Kutevera makiyi apo application ichiri kushanda, sysctl 'security.curtain.log_level' inopihwa. Kuwanikwa kune X11 uye Wayland protocol kunogoneswa zvakasiyana nekutsanangura iyo "-X"/"-Y" uye "-W" sarudzo paunenge uchimhanyisa keteni, asi rutsigiro rwegraphical application haisati yadzikamiswa zvakakwana uye ine akati wandei matambudziko asina kugadziriswa. matambudziko anonyanya kuoneka kana uchishandisa X11, uye Wayland tsigiro inoitwa zvirinani). Vashandisi vanogona kuwedzera zvimwe zvirambidzo nekugadzira mafaera emitemo yemuno (~/.curtain.conf). Semuenzaniso, kubvumira kunyora kubva kuFirfox chete kune ~/Downloads/dhairekitori, unogona kuwedzera "[firefox]" chikamu chine mutemo "~/Downloads/: rw +".
Kuitwa kwacho kunosanganisira iyo mac_curtain kernel module yekumanikidza kupinda kutonga (MAC, Inosungirwa Kupinda Kudzora), seti yezvigamba zveFreeBSD kernel nekuitwa kwevanodiwa vanobata uye mafirita, iyo libcurtain raibhurari yekushandisa plegde uye kuvheneka mabasa mukushandisa, iyo keteni utility, semuenzaniso mafaera ekugadzirisa, seti bvunzo uye zvigamba zvezvimwe zvirongwa munzvimbo yemushandisi (semuenzaniso, yekushandisa $ TMPDIR kubatanidza basa nemafaira enguva pfupi). Pazvinogoneka, munyori anotarisira kudzikisa huwandu hweshanduko dzinoda zvigamba kune kernel uye maapplication.
Source: opennet.ru