{"id":106390,"date":"2023-01-19T00:48:17","date_gmt":"2023-01-18T22:48:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72"},"modified":"2023-01-19T00:48:17","modified_gmt":"2023-01-18T22:48:17","slug":"vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72","title":{"rendered":"Shp\u00ebrthimi i sistemit t\u00eb izolueseve t\u00eb aplikacioneve Firejail 0.9.72","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb publikuar ribashkimi i projektit Firejail 0.9.72, i cili zhvillon nj\u00eb sistem p\u00ebr ekzekutimin e izoluar t\u00eb aplikacioneve grafike, konsol\u00eb dhe server, duke minimizuar rrezikun e komprometimit t\u00eb sistemit kryesor gjat\u00eb \u0437\u0430\u043f\u0443\u0441\u043ana e programeve q\u00eb nuk jan\u00eb t\u00eb besueshme ose jan\u00eb potencialisht t\u00eb ndjeshme. Programi \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C, shp\u00ebrndahen n\u00ebn Licenc\u00ebn GPLv2 dhe mund t\u00eb funksionoj\u00eb n\u00eb \u00e7do shp\u00ebrndarje Linux me b\u00ebrtham\u00eb m\u00eb t\u00eb vjet\u00ebr se 3.0. Paketat e gatshme me Firejail jan\u00eb p\u00ebrgatitur n\u00eb formatet deb (Debian, Ubuntu) dhe rpm (CentOS, Fedora). <\/p>\n

P\u00ebr izolimin n\u00eb Firejail p\u00ebrdoren hap\u00ebsira em\u00ebrtimi (namespaces), AppArmor dhe filtrimi i thirrjeve sistemore (seccomp-bpf) n\u00eb Linux. Pas fillimit, programi dhe t\u00eb gjith\u00eb proceset e tij dyt\u00ebsore p\u00ebrdorin pamje t\u00eb ve\u00e7anta t\u00eb burimeve t\u00eb b\u00ebrtham\u00ebs, t\u00eb tilla si stogu rrjetor, tabela e proceseve dhe pik\u00ebt e montimit. Aplikacionet q\u00eb varen nga nj\u00ebra-tjetra mund t\u00eb grupohen n\u00eb nj\u00eb sandbox t\u00eb zakonsh\u00ebm. N\u00ebse d\u00ebshirohet, Firejail mund t\u00eb p\u00ebrdoret gjithashtu p\u00ebr t\u00eb ekzekutuar kontejner\u00eb Docker, LXC dhe OpenVZ. <\/p>\n

Ndryshe nga mjetet e izolimit t\u00eb konteiner\u00ebve, firejail \u00ebsht\u00eb jasht\u00ebzakonisht e thjesht\u00eb p\u00ebr t'u konfiguruar dhe nuk k\u00ebrkon p\u00ebrgatitjen e nj\u00eb imazhi sistemor \u2014 struktura e konteinerit formohet n\u00eb fluksi n\u00eb baz\u00eb t\u00eb p\u00ebrmbajtjes aktuale t\u00eb FS dhe fshihet pas p\u00ebrfundimit t\u00eb aplikacionit. Sigurohen mjete fleksibile p\u00ebr p\u00ebrcaktimin e rregullave t\u00eb qasjes n\u00eb sistemin e skedar\u00ebve, ku mund t\u00eb p\u00ebrcaktoni se cilat skedare dhe drejtime lejohen ose ndalohen p\u00ebr qasje, lidhni p\u00ebr t\u00eb dh\u00ebnat FS temporar\u00eb (tmpfs), kufizoni qasjen n\u00eb skedare ose drejtime vet\u00ebm p\u00ebr lexim, dhe bashkoni drejtime p\u00ebrmes bind-mount dhe overlayfs. <\/p>\n

P\u00ebr nj\u00eb num\u00ebr t\u00eb madh aplikacionesh t\u00eb njohura, si Firefox, Chromium, VLC dhe Transmission, jan\u00eb p\u00ebrgatitur profile gatishm\u00ebrie p\u00ebr izolimin e thirrjeve sistemore. P\u00ebr t\u00eb fituar privilegjet e nevojshme p\u00ebr t\u00eb konfiguruar nj\u00eb ambient t\u00eb izoluar, ekzekutuesi firejail vendoset me flamurin SUID root (pas inicializimit, privilegjet hiqen). P\u00ebr t\u00eb ekzekutuar programin n\u00eb modalitetin e izolimit, mjafton t\u00eb jepni emrin e aplikacionit si argument t\u00eb utilitarit firejail, p\u00ebr shembull, \u00abfirejail firefox\u00bb ose \u00absudo firejail \/etc\/init.d\/nginx start\u00bb. <\/p>\n

N\u00eb versionin e ri: <\/p>\n