9 makore mushure mekuumbwa kwebazi re 1.8.x itsva yakakosha kuburitswa kwekushandisa , inoshandiswa kuronga kuitiswa kwemirairo pachinzvimbo chevamwe vashandisi.
Kuchinja kukuru:
- Chikamu background process , yakagadzirirwa matanda epakati kubva kune mamwe masisitimu. Paunenge uchivaka sudo ne "-enable-openssl" sarudzo, data inofambiswa pamusoro peiyo encrypted yekutaurirana chiteshi (TLS). Kugadzirisa kutumira kwematanda kunoitwa uchishandisa iyo log_servers sarudzo mune sudoers. Kudzima rutsigiro rweiyo nyowani yekutumira dhizaini, iyo "--disable-log-server" uye "--disable-log-client" sarudzo dzakawedzerwa. Kuti uedze kudyidzana nesevha kana kutumira matanda aripo, sudo_sendlog utility inokurudzirwa;
- mukana ye sudo muPython, inogoneswa kana uchivaka ne "-enable-python" sarudzo;
- Rudzi rutsva rwe plugin rwakawedzerwa - "kuongorora", kune mameseji emafoni akabudirira uye asina kubudirira, pamwe nekukanganisa kunoitika, anotumirwa. Rudzi rutsva rwe plugin runokutendera kuti ubatanidze vabati vako vekucheka matanda izvo zvisingaenderane neyakajairwa kushanda (somuenzaniso, mubati wekunyora matanda muJSON fomati inoshandiswa nenzira yeplugin);
- Yakawedzera rudzi rutsva rweplugin, "mvumo", kuita mamwe macheki mushure mekubudirira kwekutanga-kwakavakirwa mvumo yekutarisa mune sudoers. Mapulagi akati wandei erudzi urwu anogona kutsanangurwa muzvirongwa, asi kusimbiswa kwekushanda kunopihwa chete kana kwakatenderwa nemapulagi ese akanyorwa muzvirongwa;
- Iyo "sudo -S" yekuraira ikozvino inodhinda zvese zvikumbiro kune yakajairwa kubuda kana stderr, pasina kuwana iyo terminal control kifaa;
- Mune sudoers, panzvimbo yeCmnd_Alias, kutsanangura Cmd_Alias ββββikozvino kugamuchirwa;
- Yakawedzera nyowani pam_ruser uye pam_rhost zvigadziriso kugonesa / kudzima kuseta zita rekushandisa uye maitiro evaenzi paunenge uchigadzira chikamu kuburikidza nePAM;
- Inopa kugona kutsanangura inodarika imwe SHA-2 hashi pamutsara wakaparadzaniswa necomma. Iyo SHA-2 hash inogona zvakare kushandiswa mune sudoers pamwe chete ne "ZVESE" kiyi kiyi kutsanangura mirairo inogona kungoitwa kana hashi ichienderana;
- sudo uye sudo_logsrvd inopa kusikwa kweimwe faira regi muJSON fomati, inoratidza ruzivo nezve ese maparamita emirairo yakatangwa, kusanganisira zita remuenzi. Iri log rinoshandiswa ne sudoreplay utility, iyo ikozvino ine kugona kusefa mirairo nezita remuenzi;
- Rondedzero yemirairo yemutsetse nharo yakapfuura nepakati peSUDO_COMMAND nharaunda inosiyana yave kuderedzwa kusvika ku4096 mavara.
Source: opennet.ru