{"id":106390,"date":"2023-01-19T00:48:17","date_gmt":"2023-01-18T22:48:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72"},"modified":"2023-01-19T00:48:17","modified_gmt":"2023-01-18T22:48:17","slug":"vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-sistemy-izolyaczii-prilozhenij-firejail-0-9-72","title":{"rendered":"L\u00ebshimi i sistemit t\u00eb izolimit t\u00eb aplikacioneve Firejail 0.9.72","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb publikuar versione i projektit Firejail 0.9.72, q\u00eb zhvillon nj\u00eb sistem p\u00ebr ekzekutimin e izoluar t\u00eb aplikacioneve grafike, konsol\u00eb dhe server. Ky sistem lejon minimizimin e rrezikut t\u00eb p\u00ebrfshirjes s\u00eb sistemit kryesor gjat\u00eb ekzekutimit t\u00eb programeve q\u00eb nuk meritojn\u00eb besimin ose q\u00eb mund t\u00eb jen\u00eb t\u00eb cenuesh\u00ebm. Programi \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C, shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2 dhe mund t\u00eb funksionoj\u00eb n\u00eb \u00e7do distribucion Linux me nj\u00eb b\u00ebrtham\u00eb m\u00eb t\u00eb re se 3.0. Paketa gatishm\u00ebrie p\u00ebr Firejail jan\u00eb p\u00ebrgatitur n\u00eb formatet deb (Debian, Ubuntu) dhe rpm (CentOS, Fedora). <\/p>\n

P\u00ebr izolimin n\u00eb Firejail p\u00ebrdoren hap\u00ebsira emrash (namespaces), AppArmor dhe filtrimi i thirrjeve sistemike (seccomp-bpf) n\u00eb Linux. Pas nisjes, programi dhe t\u00eb gjith\u00eb proceset e tij t\u00eb bir\u00ebsuara p\u00ebrdorin pamje t\u00eb ve\u00e7anta t\u00eb burimeve t\u00eb b\u00ebrtham\u00ebs, si\u00e7 jan\u00eb steka rrjetit, tabela e proceseve dhe pik\u00ebt e montimit. Aplikacionet e lidhura mund t\u00eb grupohen n\u00eb nj\u00eb sandbox t\u00eb p\u00ebrbashk\u00ebt. N\u00ebse d\u00ebshirohet, Firejail mund t\u00eb p\u00ebrdoret gjithashtu p\u00ebr ekzekutimin e konteiner\u00ebve Docker, LXC dhe OpenVZ. <\/p>\n

Ndryshe nga mjetet e izolimit t\u00eb en\u00ebve, firejail \u00ebsht\u00eb ekstremisht i thjesht\u00eb p\u00ebr t'u konfiguruar dhe nuk k\u00ebrkon p\u00ebrgatitjen e nj\u00eb imazhi sistemor \u2014 p\u00ebrb\u00ebrja e en\u00ebs formohet n\u00eb fluturim mbi baz\u00ebn e p\u00ebrmbajtjes aktuale t\u00eb sistemit t\u00eb skedar\u00ebve dhe hiqet pas p\u00ebrfundimit t\u00eb aplikacionit. Ofron mjete fleksib\u00ebl p\u00ebr caktimin e rregullave t\u00eb aksesit n\u00eb sistemin e skedar\u00ebve, duke lejuar ose ndaluar qasjen n\u00eb skedar\u00eb dhe direktor\u00eb, duke lidhur p\u00ebr t\u00eb dh\u00ebnat sisteme t\u00eb p\u00ebrkohshme (tmpfs), duke kufizuar aksesin n\u00eb skedar\u00eb ose direktor\u00eb vet\u00ebm p\u00ebr lexim, dhe duke kombinuar direktor\u00ebt p\u00ebrmes bind-mount dhe overlayfs. <\/p>\n

P\u00ebr nj\u00eb num\u00ebr t\u00eb madh aplikacionesh t\u00eb njohura, p\u00ebrfshir\u00eb Firefox, Chromium, VLC dhe Transmission, jan\u00eb p\u00ebrgatitur profile t\u00eb gatshme p\u00ebr izolimin e thirrjeve sistemore. P\u00ebr t\u00eb fituar privilegjet e nevojshme p\u00ebr konfigurimin e nj\u00eb mjedisi t\u00eb izoluar, skedari ekzekutiv firejail instalohet me flag SUID root (pas inizializimit, privilegjet hiqen). P\u00ebr t\u00eb ekzekutuar programin n\u00eb modalitetin e izolimit, mjafton t\u00eb jepni emrin e aplikacionit si argument t\u00eb utilitarit firejail, p\u00ebr shembull, \u00abfirejail firefox\u00bb ose \u00absudo firejail \/etc\/init.d\/nginx start\u00bb. <\/p>\n

N\u00eb l\u00ebshimin e ri: <\/p>\n