{"id":114498,"date":"2024-03-22T12:26:01","date_gmt":"2024-03-22T10:26:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inczident-s-temoj-oformleniya-kde-udalyayushhej-polzovatelskie-fajly"},"modified":"2024-03-22T12:26:01","modified_gmt":"2024-03-22T10:26:01","slug":"inczident-s-temoj-oformleniya-kde-udalyayushhej-polzovatelskie-fajly","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/inczident-s-temoj-oformleniya-kde-udalyayushhej-polzovatelskie-fajly","title":{"rendered":"Incident me tem\u00ebn e dizajnit KDE q\u00eb fshin skedar\u00ebt e p\u00ebrdoruesit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Projekti KDE rekomandoi t\u00eb abstenoni nga instalimi i temave globale dhe widget-eve jozyrtare p\u00ebr KDE pas incidentit t\u00eb fshirjes s\u00eb t\u00eb gjitha skedar\u00ebve personal\u00eb t\u00eb nj\u00eb p\u00ebrdoruesi q\u00eb kishte instaluar tem\u00ebn Grey Layout nga katalogu KDE Store, e cila num\u00ebronte rreth 4000 shkarkime. Supozohet se incidenti \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim, i lidhur me p\u00ebrdorimin e pasigurt t\u00eb komand\u00ebs \u00abrm -rf\u00bb. <\/p>\n
N\u00eb temat globale t\u00eb dizajnit KDE parashikohet mund\u00ebsia e p\u00ebrdorimit t\u00eb plazmoideve, t\u00eb cilat mund t\u00eb ekzekutojn\u00eb komandat e rastit dhe q\u00eb nd\u00ebr t\u00eb tjera mund t\u00eb p\u00ebrdoren p\u00ebr fshirjen e skedar\u00ebve. Kur p\u00ebrdoren n\u00eb kod konstruksione si \u00abrm -rf $VAR\/*\u00bb, mund t\u00eb ndodhi nj\u00eb situat\u00eb ku variabla $VAR \u00ebsht\u00eb e pa inicializuar, duke \u00e7uar n\u00eb ekzekutimin e v\u00ebrtet\u00eb t\u00eb komand\u00ebs \u00abrm -rf \/*\u00bb. M\u00eb par\u00eb, gabime t\u00eb ngjashme jan\u00eb shfaqur n\u00eb skenaret e inicializimit t\u00eb Squid, Steam dhe bumblebee. <\/p>\n
Incidenti i ndodhur lidhet me thirrjen e kodit nga widget-i PlasmaConfSaver, i cili ka nj\u00eb skenar save.sh q\u00eb ekzekuton fshirjen e skedar\u00ebve t\u00eb vjet\u00ebr t\u00eb konfigurimit q\u00eb kan\u00eb mbetur pas instalimit t\u00eb kaluar. Skedar\u00ebt fshihen me komand\u00ebn \u00abrm -Rf \u00ab$configFolder\u00bb, nd\u00ebrsa n\u00eb kod nuk ka kontroll mbi vendosjen e variabl\u00ebs $configFolder, e cila kalon si argument i komand\u00ebs (\u00abconfigFolder=$2\u00bb). Fillimisht, kodi ishte planifikuar p\u00ebr p\u00ebrdorim n\u00eb KDE 5, por p\u00ebr shkak t\u00eb ndryshimeve n\u00eb KDE 6 logjika e thirrjes s\u00eb trajtuesve mund t\u00eb jet\u00eb prishur dhe n\u00eb variabl\u00ebn rezultante ka qen\u00eb nj\u00eb vler\u00eb q\u00eb \u00e7oi n\u00eb fshirjen e t\u00eb dh\u00ebnave t\u00eb gjith\u00eb p\u00ebrdoruesit (p\u00ebr shembull, n\u00eb vend t\u00eb ekzekutimit \u00absh save.sh somepath\/...\u00bb, mund t\u00eb ishte ekzekutuar kodi \u00absh save.sh somepath \/...\u00bb, duke b\u00ebr\u00eb q\u00eb n\u00eb variabl\u00ebn configFolder t\u00eb kishte vler\u00ebn \u00ab\/\u00bb). <\/p>\n
Zhvilluesit e KDE kan\u00eb nd\u00ebrmend t\u00eb kryejn\u00eb nj\u00eb audit t\u00eb temave t\u00eb pal\u00ebve t\u00eb treta, t\u00eb vendosura n\u00eb katalogun e KDE Store, p\u00ebr t\u00eb identifikuar gabime t\u00eb ngjashme, si dhe t\u00eb organizojn\u00eb njoftime gjat\u00eb instalimit t\u00eb temave nga p\u00ebrdoruesit e jasht\u00ebm. P\u00ebr m\u00eb tep\u00ebr, po diskutohet p\u00ebr futjen e nj\u00eb kontrolli paraprak p\u00ebr projektet e vendosura n\u00eb KDE Store, me q\u00ebllim p\u00ebr t'u p\u00ebrballur me vendosjen e temave nga sulmuesit, t\u00eb cilat synojn\u00eb t\u00eb kryejn\u00eb veprime t\u00eb d\u00ebmshme, si\u00e7 jan\u00eb vjedhja e t\u00eb dh\u00ebnave konfidenciale dhe nisja e proceseve p\u00ebr t\u00eb z\u00ebvend\u00ebsuar numrat e portefeuilleve kriptografik\u00eb n\u00eb memorie. <\/p>\n
Zakonisht, shum\u00eb p\u00ebrdorues nuk mendojn\u00eb se kur instalojn\u00eb nj\u00eb tem\u00eb, kodi mund t\u00eb ekzekutohet, prandaj nuk i kushtojn\u00eb v\u00ebmendje t\u00eb mjaftueshme siguris\u00eb gjat\u00eb instalimit t\u00eb temave. Temat globale jo vet\u00ebm q\u00eb ndikojn\u00eb n\u00eb pamje, por gjithashtu ndryshojn\u00eb sjelljen e Plasma dhe mund t\u00eb p\u00ebrfshijn\u00eb implementime t\u00eb tyre p\u00ebr bllokuesit e ekranit dhe applet\u00ebt, dmth, komponent\u00eb q\u00eb ekzekutojn\u00eb kod. P\u00ebr shkak t\u00eb munges\u00ebs s\u00eb burimeve, projektet e shp\u00ebrndara n\u00eb katalogun KDE Store nuk kontrollohen dhe publikohen ekskluzivisht n\u00eb baz\u00eb t\u00eb besimit, duke qen\u00eb se \u00e7do kush mund t\u00eb regjistrohet n\u00eb katalog. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"