{"id":153282,"date":"2026-01-04T11:12:36","date_gmt":"2026-01-04T09:12:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-sistemy-izolyaczii-prilozhenij-firejail-0-9-78"},"modified":"2026-01-04T11:12:36","modified_gmt":"2026-01-04T09:12:36","slug":"reliz-sistemy-izolyaczii-prilozhenij-firejail-0-9-78","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/reliz-sistemy-izolyaczii-prilozhenij-firejail-0-9-78","title":{"rendered":"Dalja e sistemit t\u00eb izolimit t\u00eb aplikacioneve Firejail 0.9.78","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb publikuar versioni i projektit Firejail 0.9.78, q\u00eb zhvillon nj\u00eb sistem p\u00ebr ekzekutimin e izoluar t\u00eb aplikacioneve grafike, konsol\u00eb dhe serverike, duke minimizuar rrezikun e kompromitimit t\u00eb sistemit kryesor kur ekzekutohen programe q\u00eb nuk jan\u00eb t\u00eb besueshme ose potencialisht t\u00eb cenueshme. Programi \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C, shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2 dhe mund t\u00eb funksionoj\u00eb n\u00eb \u00e7do distribucion Linux me nj\u00eb b\u00ebrtham\u00eb m\u00eb t\u00eb re se 3.0. Pakot e gatshme me Firejail jan\u00eb p\u00ebrgatitur n\u00eb formatet deb (Debian, Ubuntu) dhe rpm (CentOS, Fedora). <\/p>\n

P\u00ebr izolimin n\u00eb Firejail p\u00ebrdoren hap\u00ebsira em\u00ebrtimi (namespaces), AppArmor dhe filtrimi i thirrjeve sistemore (seccomp-bpf) n\u00eb Linux. Pas fillimit, programi dhe t\u00eb gjith\u00eb proceset e tij dyt\u00ebsore p\u00ebrdorin pamje t\u00eb ve\u00e7anta t\u00eb burimeve t\u00eb b\u00ebrtham\u00ebs, t\u00eb tilla si stogu rrjetor, tabela e proceseve dhe pik\u00ebt e montimit. Aplikacionet q\u00eb varen nga nj\u00ebra-tjetra mund t\u00eb grupohen n\u00eb nj\u00eb sandbox t\u00eb zakonsh\u00ebm. N\u00ebse d\u00ebshirohet, Firejail mund t\u00eb p\u00ebrdoret gjithashtu p\u00ebr t\u00eb ekzekutuar kontejner\u00eb Docker, LXC dhe OpenVZ. <\/p>\n

Ndryshe nga mjetet e izolimit t\u00eb konteiner\u00ebve, firejail \u00ebsht\u00eb ekstremisht i thjesht\u00eb p\u00ebr t'u konfiguruar dhe nuk k\u00ebrkon p\u00ebrgatitjen e nj\u00eb imazhi sistemor \u2014 p\u00ebrb\u00ebrja e konteinerit formohet n\u00eb moment n\u00eb baz\u00eb t\u00eb p\u00ebrmbajtjes aktuale t\u00eb sistemit t\u00eb skedar\u00ebve dhe hiqet pas p\u00ebrfundimit t\u00eb aplikacionit. Ofrohen mjete fleksib\u00ebl p\u00ebr p\u00ebrcaktimin e rregullave t\u00eb qasjes n\u00eb sistemin e skedar\u00ebve, duke lejuar t\u00eb p\u00ebrcaktohet se p\u00ebr cilat skedar\u00eb dhe dosje \u00ebsht\u00eb e lejuar ose e ndaluar qasja, t\u00eb lidhen sisteme t\u00eb skedar\u00ebve t\u00eb p\u00ebrkohsh\u00ebm (tmpfs), t\u00eb kufizohet qasja n\u00eb skedar\u00eb ose dosje vet\u00ebm n\u00eb lexim, t\u00eb kombinohen dosjet p\u00ebrmes bind-mount dhe overlayfs. <\/p>\n

P\u00ebr nj\u00eb num\u00ebr t\u00eb madh aplikacionesh t\u00eb njohura, si Firefox, Chromium, VLC dhe Transmission, jan\u00eb p\u00ebrgatitur profile gatishm\u00ebrie p\u00ebr izolimin e thirrjeve sistemore. P\u00ebr t\u00eb fituar privilegjet e nevojshme p\u00ebr t\u00eb konfiguruar nj\u00eb ambient t\u00eb izoluar, ekzekutuesi firejail vendoset me flamurin SUID root (pas inicializimit, privilegjet hiqen). P\u00ebr t\u00eb ekzekutuar programin n\u00eb modalitetin e izolimit, mjafton t\u00eb jepni emrin e aplikacionit si argument t\u00eb utilitarit firejail, p\u00ebr shembull, \u00abfirejail firefox\u00bb ose \u00absudo firejail \/etc\/init.d\/nginx start\u00bb. <\/p>\n

N\u00eb versionin e ri: <\/p>\n