{"id":107119,"date":"2023-03-06T12:48:15","date_gmt":"2023-03-06T10:48:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=107119"},"modified":"2023-03-06T16:13:41","modified_gmt":"2023-03-06T14:13:41","slug":"dlya-izbavleniya-glibc-ot-problemy-2038-goda-predlozheno-prekratit-ispolzovanie-utmp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dlya-izbavleniya-glibc-ot-problemy-2038-goda-predlozheno-prekratit-ispolzovanie-utmp","title":{"rendered":"P\u00ebr t\u00eb eliminuar problemin e vitit 2038 n\u00eb Glibc, propozimi \u00ebsht\u00eb q\u00eb t\u00eb nd\u00ebrpritet p\u00ebrdorimi i utmp","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Thorsten Kukuk, lideri i grupit p\u00ebr zhvillimin e teknologjive t\u00eb s\u00eb ardhmes n\u00eb kompanin\u00eb SUSE, i cili ka drejtuar projektin SUSE LINUX Enterprise Server p\u00ebr 10 vjet, ka propozuar q\u00eb t\u00eb hiqet skedari \/var\/run\/utmp n\u00eb distribuimet p\u00ebr t\u00eb zgjidhur plot\u00ebsisht problemin e vitit 2038 n\u00eb Glibc. T\u00eb gjitha aplikacionet q\u00eb p\u00ebrdorin utmp, wtmp dhe lastlog, rekomandohet t\u00eb kalojn\u00eb n\u00eb marrjen e list\u00ebs s\u00eb p\u00ebrdoruesve p\u00ebrmes systemd-logind. <\/p>\n

M\u00eb 19 janar 2038 do t\u00eb ndodhi tejkalimi i numrave t\u00eb epok\u00ebs, t\u00eb caktuar nga tipi 32-bit time_t. N\u00eb bibliotek\u00ebn Glibc, pavar\u00ebsisht nga implementimi i tipit 64-bit time_t, p\u00ebr t\u00eb ruajtur kompatibilitetin me aplikacionet 32-bit, n\u00eb disa raste n\u00eb platformat 64-bit vazhdon t\u00eb p\u00ebrdoret tipi 32-bit time_t. Nj\u00eb nga k\u00ebto raste \u00ebsht\u00eb skedari \/var\/run\/utmp, i cili ruan t\u00eb dh\u00ebna rreth p\u00ebrdoruesve q\u00eb aktualisht jan\u00eb duke punuar n\u00eb sistem. Fusha me koh\u00eb n\u00eb utmp caktohet duke p\u00ebrdorur nj\u00eb vler\u00eb 32-bit time_t. <\/p>\n

Thjesht z\u00ebvend\u00ebsimi i fush\u00ebs me koh\u00ebn n\u00eb utmp nga tipi 32-bit n\u00eb 64-bit nuk do t\u00eb funksionoj\u00eb, pasi kjo do t\u00eb \u00e7oj\u00eb n\u00eb ndryshimin e ABI Glibc (do t\u00eb ndryshoj\u00eb tipi n\u00eb funksione si login(), getutid() dhe utmpname()) dhe do t\u00eb prish\u00eb kompatibilitetin me aplikacionet q\u00eb p\u00ebrdorin utmp, duke p\u00ebrfshir\u00eb w, who, uptime, login, su, sudo, useradd, systemd, sysvinit, menaxher\u00ebt e ekranit tcsh, xterm, emacs, openssh, qemu, samba, rsyslog, etj. P\u00ebr shkak t\u00eb numrit t\u00eb madh t\u00eb potencialeve pengesave dhe pun\u00ebs s\u00eb madhe, ideja e z\u00ebvend\u00ebsimit t\u00eb tipit time_t n\u00eb utmp \u00ebsht\u00eb refuzuar nga zhvilluesit e Glibc. Po p\u00ebr t\u00eb nj\u00ebjt\u00ebn arsye \u00ebsht\u00eb hedhur posht\u00eb edhe varianti i p\u00ebrdorimit t\u00eb hap\u00ebsir\u00ebs s\u00eb lir\u00eb n\u00eb struktur\u00ebn utmp p\u00ebr t\u00eb shtuar nj\u00eb fush\u00eb shtes\u00eb 64-bit p\u00ebr koh\u00ebn. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, ndryshimi i tipit n\u00eb utmp nuk zgjidh probleme t\u00eb tjera q\u00eb gjithashtu duhet t\u00eb eliminohen. P\u00ebr shembull, p\u00ebr t\u00eb shkruar n\u00eb utmp k\u00ebrkohen privilegje speciale, gj\u00eb q\u00eb k\u00ebrkon q\u00eb proceset t\u00eb ken\u00eb privilegje t\u00eb shtes\u00eb. Nj\u00eb problem tjet\u00ebr \u00ebsht\u00eb se arkitektura e utmp lejon q\u00eb p\u00ebrdoruesit lokal\u00eb t\u00eb kryejn\u00eb sulme DoS q\u00eb shkaktojn\u00eb nd\u00ebrprerje t\u00eb sh\u00ebrbimit utmp p\u00ebrmes manipulimeve me bllokimet n\u00eb skedar, duke b\u00ebr\u00eb q\u00eb t\u00eb mos jet\u00eb i sigurt se p\u00ebrmbajtja e utmp reflekton gjendjen reale n\u00eb sistem. P\u00ebr t\u00eb menaxhuar aksesin n\u00eb utmp, \u00ebsht\u00eb propozuar t\u00eb p\u00ebrdoret nj\u00eb proces i ri n\u00eb sfond, por p\u00ebr k\u00ebto detyra tashm\u00eb egziston procesi systemd-logind dhe nisja e nj\u00eb procesi t\u00eb specializuar nuk \u00ebsht\u00eb e arsyeshme (aplikacionet do t\u00eb duhet t\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna n\u00eb dy trajtues n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb). <\/p>\n

Megjithat\u00eb, edhe n\u00ebse zgjidhet problemi me sulmet DoS, p\u00ebrmbajtja e utmp mbetet vet\u00ebm informuese, pa garantuar pasqyrimin e realitetit. P\u00ebr shembull, simulator\u00eb dhe multiplexer\u00eb t\u00eb ndrysh\u00ebm t\u00eb terminaleve reflektojn\u00eb gjendjen e tyre ndryshe - nisja e pes\u00eb terminaleve GNOME do t\u00eb \u00e7oj\u00eb n\u00eb pasqyrim n\u00eb utmp t\u00eb nj\u00eb p\u00ebrdoruesi, nd\u00ebrsa nisja e pes\u00eb terminaleve konsole ose xterm n\u00eb KDE do t\u00eb \u00e7oj\u00eb n\u00eb gjasht\u00eb. Po ashtu, sjellja e screen dhe tmux ndryshon; n\u00eb rastin e par\u00eb, \u00e7do sesion mendohet si nj\u00eb p\u00ebrdorues i ve\u00e7ant\u00eb, nd\u00ebrsa n\u00eb t\u00eb dytin reflektohet vet\u00ebm nj\u00eb p\u00ebrdorues p\u00ebr t\u00eb gjitha sesionet. <\/p>\n

Si rezultat, si zgjidhje m\u00eb e thjesht\u00eb propozohet kalimi i t\u00eb gjitha aplikacioneve n\u00eb p\u00ebrdorimin e sh\u00ebrbimit alternativ ekzistues systemd-logind dhe, pasi t\u00eb mos mbeten programe aktuale q\u00eb p\u00ebrdorin utmp, t\u00eb ndaloj\u00eb regjistrimin n\u00eb utmp. P\u00ebr z\u00ebvend\u00ebsimin e wtmp, propozohet t\u00eb p\u00ebrgatiten nd\u00ebrfaqet p\u00ebr regjistrimin dhe leximin e informacionit rreth p\u00ebrdoruesve p\u00ebrmes systemd-journald. N\u00eb kodin e baz\u00ebs s\u00eb versionit t\u00eb ardhsh\u00ebm systemd 254 jan\u00eb p\u00ebrfshir\u00eb tashm\u00eb funksionet e nevojshme p\u00ebr t\u00eb ofruar t\u00eb dh\u00ebna q\u00eb z\u00ebvend\u00ebsojn\u00eb utmp p\u00ebrmes libsystemd duke p\u00ebrdorur API sd-login.h ose p\u00ebrmes DBUS.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0441\u0442\u0435\u043d \u041a\u0443\u043a\u0443\u043a (Thorsten Kukuk), \u043b\u0438\u0434\u0435\u0440 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0431\u0443\u0434\u0443\u0449\u0435\u0433\u043e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SUSE (Future Technology Team, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 openSUSE MicroOS \u0438 SLE Micro), \u0440\u0430\u043d\u0435\u0435 10 \u043b\u0435\u0442 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c SUSE LINUX Enterprise Server, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0444\u0430\u0439\u043b\u0430 \/var\/run\/utmp \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b 2038 \u0433\u043e\u0434\u0430 \u0432 Glibc. \u0412\u0441\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 utmp, wtmp \u0438 lastlog, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107119","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebr t\u00eb eliminuar problemin e vitit 2038 me Glibc, \u00ebsht\u00eb propozuar q\u00eb t\u00eb ndiqet ndalimi i p\u00ebrdorimit t\u00eb utmp | ProHoster","description":"T\u00f6rsten Kukuk, lideri i grupit p\u00ebr zhvillimin e teknologjive t\u00eb s\u00eb ardhmes n\u00eb kompanin\u00eb SUSE (Future Technology Team, zhvillon openSUSE MicroOS dhe SLE Micro), i cili m\u00eb par\u00eb drejtonte projektin SUSE LINUX Enterprise Server p\u00ebr 10 vjet, propozoi t\u00eb hiqte skedarin \/var\/run\/utmp n\u00eb shp\u00ebrndarjet p\u00ebr t\u00eb zgjidhur plot\u00ebsisht problemin e vitit 2038 n\u00eb Glibc. T\u00eb gjitha aplikacionet q\u00eb p\u00ebrdorin utmp, wtmp dhe lastlog sugjerohet t\u00eb transferohen.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dlya-izbavleniya-glibc-ot-problemy-2038-goda-predlozheno-prekratit-ispolzovanie-utmp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043b\u044f \u0438\u0437\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f Glibc \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b 2038 \u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 utmp | ProHoster","og:description":"\u0422\u043e\u0440\u0441\u0442\u0435\u043d \u041a\u0443\u043a\u0443\u043a (Thorsten Kukuk), \u043b\u0438\u0434\u0435\u0440 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0431\u0443\u0434\u0443\u0449\u0435\u0433\u043e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SUSE (Future Technology Team, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 openSUSE MicroOS \u0438 SLE Micro), \u0440\u0430\u043d\u0435\u0435 10 \u043b\u0435\u0442 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c SUSE LINUX Enterprise Server, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0444\u0430\u0439\u043b\u0430 \/var\/run\/utmp \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b 2038 \u0433\u043e\u0434\u0430 \u0432 Glibc. \u0412\u0441\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 utmp, wtmp \u0438 lastlog, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dlya-izbavleniya-glibc-ot-problemy-2038-goda-predlozheno-prekratit-ispolzovanie-utmp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-06T10:48:15+00:00","article:modified_time":"2023-03-06T14:13:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=107119"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107119\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=107119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=107119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=107119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}