{"id":103534,"date":"2022-03-14T15:36:53","date_gmt":"2022-03-14T13:36:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-tuf-1-0-frejmvork-dlya-organizaczii-bezopasnoj-dostavki-obnovlenij"},"modified":"2022-03-14T15:36:53","modified_gmt":"2022-03-14T13:36:55","slug":"dostupen-tuf-1-0-frejmvork-dlya-organizaczii-bezopasnoj-dostavki-obnovlenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dostupen-tuf-1-0-frejmvork-dlya-organizaczii-bezopasnoj-dostavki-obnovlenij","title":{"rendered":"TUF 1.0 \u00ebsht\u00eb i disponuesh\u00ebm, nj\u00eb korniz\u00eb p\u00ebr organizimin e shp\u00ebrndarjes s\u00eb sigurt t\u00eb azhornimeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar versioni i korniz\u00ebs TUF 1.0 (The Update Framework), q\u00eb ofron mjete p\u00ebr kontrollin e sigurt t\u00eb disponueshm\u00ebris\u00eb dhe shkarkimit t\u00eb azhornimeve. Q\u00ebllimi kryesor i projektit \u00ebsht\u00eb mbrojtja e klientit nga sulmet tipike ndaj depozitave dhe infrastrukturave, duke p\u00ebrfshir\u00eb parandalimin e shp\u00ebrndarjes s\u00eb azhornimeve t\u00eb rreme nga haker\u00ebt pas fitimit t\u00eb aksesit n\u00eb \u00e7el\u00ebsat p\u00ebr krijimin e n\u00ebnshkrimeve digjitale ose kompromiseve t\u00eb depozitave. Projekti zhvillohet n\u00ebn ombrell\u00ebn e organizat\u00ebs Linux Foundation dhe p\u00ebrdoret p\u00ebr rritjen e siguris\u00eb s\u00eb shp\u00ebrndarjes s\u00eb azhornimeve n\u00eb projekte t\u00eb tilla si Docker, Fuchsia, Automotive Grade Linux, Bottlerocket dhe PyPI (p\u00ebrfshirja e verifikimit t\u00eb shkarkimeve dhe metadata n\u00eb PyPI pritet s\u00eb shpejti). Kodi i implementimit referues t\u00eb TUF \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Python dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
Projekti po zhvillon nj\u00eb seri bibliotekash, formatesh skedash dhe utilitesh q\u00eb mund t\u00eb integrohen leht\u00ebsisht n\u00eb sistemet ekzistuese t\u00eb p\u00ebrdit\u00ebsimit t\u00eb aplikacioneve, duke ofruar mbrojtje n\u00eb rast kompromise t\u00eb \u00e7el\u00ebsave nga ana e zhvilluesve t\u00eb softuerit. P\u00ebr t\u00eb p\u00ebrdorur TUF, mjafton t\u00eb shtoni metadatat e nevojshme n\u00eb depo, nd\u00ebrsa n\u00eb kodin e klientit duhet t\u00eb integrohen procedurat e ofruara nga TUF p\u00ebr ngarkimin dhe verifikimin e skedar\u00ebve. <\/p>\n
Korniza TUF merr p\u00ebrsip\u00ebr detyrat e kontrollit t\u00eb shfaqjes s\u00eb p\u00ebrdit\u00ebsimeve, ngarkimit t\u00eb p\u00ebrdit\u00ebsimeve dhe verifikimit t\u00eb integritetit t\u00eb tyre. Sistemi i instalimit t\u00eb p\u00ebrdit\u00ebsimeve nuk p\u00ebrzihet drejtp\u00ebrdrejt me metadat\u00ebs e tjera, verifikimi dhe ngarkimi i t\u00eb cilave merr p\u00ebrsip\u00ebr TUF. P\u00ebr integrimin me aplikacionet dhe sistemet e instalimit t\u00eb p\u00ebrdit\u00ebsimeve, ofrohet nj\u00eb API i nivelit t\u00eb ul\u00ebt p\u00ebr qasje n\u00eb metadatat dhe realizimi i nj\u00eb API t\u00eb klientit t\u00eb nivelit t\u00eb lart\u00eb ngclient, i gatsh\u00ebm p\u00ebr integrim me aplikacionet. <\/p>\n
TUF mund t\u00eb p\u00ebrballoj\u00eb me sulme si vendosja e versioneve t\u00eb vjetra si p\u00ebrdit\u00ebsime, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb bllokohet rregullimi i dob\u00ebsive n\u00eb softuer ose p\u00ebr ta detyruar p\u00ebrdoruesin t\u00eb kthehet n\u00eb nj\u00eb version t\u00eb vjet\u00ebr t\u00eb dob\u00ebt, si dhe p\u00ebrhapjen e p\u00ebrdit\u00ebsimeve t\u00eb d\u00ebmshme, t\u00eb cilat jan\u00eb n\u00ebnshkruar sakt\u00ebsisht me nj\u00eb \u00e7el\u00ebs t\u00eb komprometuar, duke kryer sulme DoS ndaj klient\u00ebve, si\u00e7 \u00ebsht\u00eb mbushja e diskut me nj\u00eb p\u00ebrdit\u00ebsim t\u00eb pafund. <\/p>\n
Mbrojtja nga komprometimi i infrastruktur\u00ebs s\u00eb ofruesit t\u00eb softuerit arrihet duke mbajtur regjistrime t\u00eb ve\u00e7anta t\u00eb verifikueshme p\u00ebr gjendjen e depozit\u00ebs ose aplikacionit. Metadatot e verifikueshme TUF p\u00ebrfshijn\u00eb informacion mbi \u00e7el\u00ebsat e besuesh\u00ebm, hash-e kriptografik\u00eb p\u00ebr t\u00eb vler\u00ebsuar integritetin e skedar\u00ebve, n\u00ebnshkrime t\u00eb tjera dixhitale p\u00ebr t\u00eb v\u00ebrtetuar metadatot, t\u00eb dh\u00ebna p\u00ebr numrat e versioneve dhe t\u00eb dh\u00ebna p\u00ebr koh\u00ebn e jet\u00ebs s\u00eb regjistrimeve. \u00c7el\u00ebsat e p\u00ebrdorur p\u00ebr verifikim kan\u00eb nj\u00eb jet\u00eb t\u00eb kufizuar dhe k\u00ebrkojn\u00eb azhurnim t\u00eb vazhduesh\u00ebm p\u00ebr t\u00eb mbrojtur nga formimi i n\u00ebnshkrimeve me \u00e7el\u00ebsa t\u00eb vjet\u00ebr. <\/p>\n
Reducimi i rrezikut t\u00eb komprometimit t\u00eb sistemit t\u00ebr\u00ebsor realizohet p\u00ebrmes p\u00ebrdorimit t\u00eb nj\u00eb modeli me ndarje besimi, ku secila pal\u00eb \u00ebsht\u00eb e kufizuar vet\u00ebm n\u00eb at\u00eb fush\u00eb p\u00ebr t\u00eb cil\u00ebn \u00ebsht\u00eb drejtp\u00ebrdrejt p\u00ebrgjegj\u00ebse. N\u00eb sistem p\u00ebrdoret nj\u00eb hierarki rolesh me \u00e7el\u00ebsa t\u00eb vet\u00eb, p\u00ebr shembull, roli rr\u00ebnj\u00eb n\u00ebnshkruan \u00e7el\u00ebsat p\u00ebr rolet q\u00eb jan\u00eb p\u00ebrgjegj\u00ebse p\u00ebr metadat\u00ebn n\u00eb repositor, t\u00eb dh\u00ebnat mbi koh\u00ebn e krijimit t\u00eb p\u00ebrdit\u00ebsimeve dhe nd\u00ebrtimet p\u00ebrkat\u00ebse; gjithashtu, roli p\u00ebrgjegj\u00ebs p\u00ebr nd\u00ebrtimet n\u00ebnshkruan rolet q\u00eb lidhen me verifikimin e skedar\u00ebve t\u00eb shp\u00ebrndar\u00eb.
<\/center> <\/p>\n
P\u00ebr t\u00eb mbrojtur nga komprometimi i \u00e7el\u00ebsave p\u00ebrdoret nj\u00eb mekaniz\u00ebm i shk\u00ebputjes dhe z\u00ebvend\u00ebsimit t\u00eb \u00e7el\u00ebsave. N\u00eb \u00e7do \u00e7el\u00ebs t\u00eb ve\u00e7ant\u00eb p\u00ebrqendrohen vet\u00ebm autorizimet minimale t\u00eb nevojshme, nd\u00ebrsa p\u00ebr operacionet e verifikimit k\u00ebrkohet p\u00ebrdorimi i disa \u00e7el\u00ebsave (shkelja e nj\u00eb \u00e7el\u00ebsi t\u00eb vet\u00ebm nuk lejon menj\u00ebher\u00eb sulmin ndaj klientit, por p\u00ebr t\u00eb komprometuar sistemin e gjith\u00eb duhet t\u00eb kapeshin \u00e7el\u00ebsat e t\u00eb gjith\u00eb pjes\u00ebmarr\u00ebsve). Klienti mund t\u00eb pranoj\u00eb vet\u00ebm skedar\u00ebt q\u00eb jan\u00eb krijuar pas skedar\u00ebve q\u00eb ka marr\u00eb m\u00eb par\u00eb, dhe t\u00eb dh\u00ebnat ngarkohen vet\u00ebm n\u00eb p\u00ebrputhje me madh\u00ebsin\u00eb e caktuar n\u00eb metadat\u00ebn e n\u00ebnshkruar. <\/p>\n
Botimi i publikimit TUF 1.0.0 ofron nj\u00eb zbatim t\u00eb rishkruar dhe t\u00eb stabilizuar t\u00eb specifikimeve TUF, t\u00eb cilin mund ta p\u00ebrdorni si nj\u00eb shembull t\u00eb gatsh\u00ebm p\u00ebr t\u00eb krijuar zbatime t\u00eb tjera ose p\u00ebr ta integruar n\u00eb projektet tuaja. Zbatimi i ri ka n\u00eb m\u00ebnyr\u00eb t\u00eb konsiderueshme m\u00eb pak kod (1400 rreshta n\u00eb vend t\u00eb 4700), \u00ebsht\u00eb m\u00eb i thjesht\u00eb p\u00ebr t'u mbajtur dhe mund t\u00eb zgjeroni leht\u00eb, p\u00ebr shembull, kur \u00ebsht\u00eb e nevojshme t\u00eb shtoni mb\u00ebshtetje p\u00ebr staket specifike t\u00eb rrjetit, sisteme ruajtjeje ose algoritme enkriptimi. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"TUF](\"\/wp-content\/uploads\/2022\/03\/e88156df6bdc88b840e7f230c7588cbb.jpg\")
<\/center> <\/p>\n