{"id":55510,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/linux-udalenie-pula-blokirovok-dev-random"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"linux-udalenie-pula-blokirovok-dev-random","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","title":{"rendered":"Linux: fshirja e grupit t\u00eb bllokimeve \/dev\/random","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Si \u00ebsht\u00eb e njohur, \/dev\/random, nj\u00eb gjeneruesi t\u00eb numrave psevdor t\u00eb rast\u00ebsish\u00ebm q\u00eb \u00ebsht\u00eb kriptografikisht i sigurt (CSPRNG), ka nj\u00eb problem t\u00eb pak\u00ebndsh\u00ebm \u2013 bllokimet. Ky artikull shpjegon se si mund ta zgjidhni k\u00ebt\u00eb problem. <\/p>\n

Gjat\u00eb disa muajve t\u00eb fundit, mjetet p\u00ebr gjenerimin e numrave t\u00eb rastit n\u00eb b\u00ebrtham\u00eb jan\u00eb riparuar pak, por problemet n\u00eb k\u00ebt\u00eb n\u00ebnsistem po zgjidheshin p\u00ebr nj\u00eb periudh\u00eb m\u00eb t\u00eb gjer\u00eb. e koh\u00ebs.<\/a><\/noindex>Ndryshimet m\u00eb t\u00eb fundit<\/a><\/noindex> u b\u00ebn\u00eb me q\u00ebllim q\u00eb t\u00eb parandalohet bllokimi i zgjatur i thirrjes s\u00eb sistemit getrandom() gjat\u00eb ngarkimit t\u00eb sistemit, por arsyeja n\u00ebnkuptuese e k\u00ebsaj ishte sjellja e mbushjes bllokuese t\u00eb rasteve t\u00eb rastshme. Nj\u00eb patch i fundit do t\u00eb eliminonte k\u00ebt\u00eb mbushje, dhe pritej q\u00eb ai t\u00eb kalonte n\u00eb b\u00ebrtham\u00ebn kryesore. <\/p>\n

Andy Lutomirski publikoi versionin e tret\u00eb t\u00eb patch-it n\u00eb fund t\u00eb dhjetorit. Ai b\u00ebn \u201cdy ndryshime kryesore semantike n\u00eb API-t\u00eb e numrave t\u00eb rastit n\u00eb Linux\u201d<\/i>. Patch-i shton nj\u00eb flamur t\u00eb ri GRND_INSECURE n\u00eb thirrjen e sistemit getrandom() (ndon\u00ebse Lutomirski e quan at\u00eb getentropy(), e cila implementohet n\u00eb glibc p\u00ebrmes getrandom() me flamuj t\u00eb ngurt\u00eb); ky flamur detyron thirrjen t\u00eb kthej\u00eb gjithmon\u00eb numrin e k\u00ebrkuar t\u00eb t\u00eb dh\u00ebnave, por pa garanci se ato t\u00eb dh\u00ebna jan\u00eb t\u00eb rast\u00ebsishme. B\u00ebrthama thjesht do t\u00eb p\u00ebrpiqet t\u00eb ofroj\u00eb t\u00eb dh\u00ebnat m\u00eb t\u00eb rast\u00ebsishme q\u00eb ka n\u00eb at\u00eb moment. \u201cNdoshta, gj\u00ebja m\u00eb e mir\u00eb q\u00eb mund t\u00eb b\u00ebhet \u00ebsht\u00eb ta quajm\u00eb at\u00eb 'INSECURE'<\/i> (jo i sigurt), p\u00ebr t\u00eb penguar p\u00ebrdorimin e k\u00ebtij API p\u00ebr gj\u00ebra q\u00eb k\u00ebrkojn\u00eb siguri.\u201d<\/a><\/noindex><\/p>\n

Patch-et gjithashtu eliminojn\u00eb mbushjen bllokuese. Aktualisht, b\u00ebrthama mb\u00ebshtet dy mbushje t\u00eb t\u00eb dh\u00ebnave t\u00eb rastit, nj\u00ebra \u00ebsht\u00eb \/dev\/random dhe tjetra \u00ebsht\u00eb \/dev\/urandom, si\u00e7 p\u00ebrshkruhet n\u00eb k\u00ebt\u00eb artikulli yn\u00eb<\/a><\/noindex> 2015. Mbushja bllokuese \u00ebsht\u00eb nj\u00eb mbushje p\u00ebr \/dev\/random; leximi p\u00ebr k\u00ebt\u00eb aparat do t\u00eb bllokohet (kuptohet nga emri i tij) derisa t\u00eb grumbullohet 'mjaft' entropi p\u00ebr t\u00eb p\u00ebrmbushur k\u00ebrkes\u00ebn. Leximet e m\u00ebtejshme nga ky sked\u00eb gjithashtu bllokohen, n\u00ebse nuk ka mjaft entropi n\u00eb mbushje. <\/p>\n

Shk\u00ebputja e grupit t\u00eb bllokimeve do t\u00eb thot\u00eb q\u00eb leximi nga \/dev\/random sillet si getrandom() me vlerat e flags t\u00eb vendosura n\u00eb zero (dhe e kthen flagun GRND_RANDOM n\u00eb noop). Pas inicializimit t\u00eb gjeneruesit criptografik t\u00eb numrave t\u00eb rast\u00ebsish\u00ebm (CRNG), leximi nga \/dev\/random dhe thirrjet getrandom(…,0) nuk do t\u00eb shkaktojn\u00eb bllokim dhe do t\u00eb kthejn\u00eb sasin\u00eb e k\u00ebrkuar t\u00eb t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme.<\/p>\n

Lutomirski thot\u00eb: \u00abUn\u00eb mendoj se pishina bllokuese e Linux-it \u00ebsht\u00eb e tejkaluar. CRNG i Linux-it gjeneron t\u00eb dh\u00ebna q\u00eb jan\u00eb mjaft t\u00eb mira p\u00ebr t'i p\u00ebrdorur edhe p\u00ebr gjenerimin e \u00e7el\u00ebsave. Pishina bllokuese nuk \u00ebsht\u00eb m\u00eb e fuqishme n\u00eb asnj\u00eb aspekt t\u00eb r\u00ebnd\u00ebsish\u00ebm dhe p\u00ebr ta mbajtur at\u00eb k\u00ebrkohet shum\u00eb infrastruktur\u00eb me vler\u00eb t\u00eb dyshimt\u00eb\u00bb. <\/i><\/p>\n

Ndryshimet jan\u00eb b\u00ebr\u00eb me q\u00ebllimin q\u00eb programet ekzistuese t\u00eb mos preken n\u00eb t\u00eb v\u00ebrtet\u00eb, dhe n\u00eb fakt, problemet me pritjen e gjat\u00eb t\u00eb gj\u00ebrave si gjenerimi i \u00e7el\u00ebsave GnuPG do t\u00eb jen\u00eb m\u00eb pak t\u00eb shpeshta.<\/p>\n

\u00abK\u00ebto seri nuk duhet t\u00eb d\u00ebmtojn\u00eb asnj\u00eb program ekzistues. \/dev\/urandom mbetet i pandryshuar. \/dev\/random ende bllokohet menj\u00ebher\u00eb pas ngarkimit, por bllokohet m\u00eb pak se m\u00eb par\u00eb. getentropy() me flamujt ekzistues do t\u00eb kthej\u00eb rezultat q\u00eb do t\u00eb jet\u00eb po aq i p\u00ebrshtatsh\u00ebm p\u00ebr q\u00ebllime praktike si m\u00eb par\u00eb\u00bb.<\/i> <\/p>\n

Lutomirski vuri n\u00eb dukje se pyetja n\u00eb lidhje me n\u00ebse b\u00ebrthama duhet t\u00eb ofroj\u00eb at\u00eb q\u00eb quhet \"numra t\u00eb rast\u00ebsish\u00ebm t\u00eb v\u00ebrtet\u00eb\" mbetet ende e hapur, e cila n\u00eb nj\u00eb far\u00eb measure do t\u00eb duhej t\u00eb b\u00ebhej nga b\u00ebrthama bllokuese. Ai sheh p\u00ebr k\u00ebt\u00eb vet\u00ebm nj\u00eb arsye: \"p\u00ebrputhja me standardet shtet\u00ebrore\". Lutomirski sugjeroi se n\u00ebse b\u00ebrthama duhet ta siguroj\u00eb k\u00ebt\u00eb, at\u00ebher\u00eb duhet t\u00eb b\u00ebhet n\u00eb nj\u00eb nd\u00ebrfaqe krejt\u00ebsisht tjet\u00ebr ose duhet t\u00eb transferohet n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, duke i dh\u00ebn\u00eb atij mund\u00ebsin\u00eb t\u00eb nxjerr\u00eb mostra t\u00eb pap\u00ebrpunuara ngjarjesh q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb krijuar nj\u00eb pishin\u00eb t\u00eb till\u00eb bllokuese. <\/p>\n

Stefan M\u00fcller sugjeroi se seti i tij patch-e<\/a><\/noindex> P\u00ebr gjeneratorin e numrave t\u00eb rastit Linux (LRNG) (aktualisht n\u00eb versionin 26), ai mund t\u00eb jet\u00eb nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb siguruar numra t\u00eb v\u00ebrtet\u00eb t\u00eb rastit p\u00ebr aplikacione q\u00eb kan\u00eb nevoj\u00eb p\u00ebr to. LRNG \"plot\u00ebson k\u00ebrkesat e 'Rekomandimeve p\u00ebr burimet e entropis\u00eb t\u00eb p\u00ebrdorura p\u00ebr gjenerimin e bit\u00ebve t\u00eb rastit' SP800-90B\", duke e b\u00ebr\u00eb at\u00eb nj\u00eb zgjidhje p\u00ebr problemin e standardeve t\u00eb shtetit.
\nMatthew Garrett kishte nj\u00eb kund\u00ebrshtim ndaj termit 't\u00eb dh\u00ebna t\u00eb v\u00ebrteta t\u00eb rastit', duke theksuar se pajisjet e zgjedhura n\u00eb parim mund t\u00eb modelohen mjaft sakt\u00ebsisht p\u00ebr t'i b\u00ebr\u00eb ato t\u00eb parashikueshme: 'ne k\u00ebtu nuk po merremi me ngjarje kuantike'.<\/p>\n

M\u00fcller p\u00ebrgjigji se ky term e ka origjin\u00ebn nga standardi gjerman AIS 31 p\u00ebr t\u00eb p\u00ebrshkruar gjeneratorin e numrave t\u00eb rastit, i cili jep vet\u00ebm rezultatet \"me t\u00eb nj\u00ebjt\u00ebn shpejt\u00ebsi q\u00eb burimi i zhurm\u00ebs prodhon entropi\". <\/p>\n

P\u00ebrve\u00e7 keqkuptimeve t\u00eb terminologjis\u00eb, ekzistenca e nj\u00eb pule bllokimi, si\u00e7 propozohen n\u00eb patch-\u00ebt LRNG, do t\u00eb \u00e7onte thjesht n\u00eb probleme t\u00eb ndryshme, s\u00eb paku n\u00ebse \u00ebsht\u00eb e aksesueshme pa privilegje. <\/p>\n

Si\u00e7 tha Lutomirski: \"Kjo nuk e zgjidh problemin. N\u00ebse dy p\u00ebrdorues t\u00eb ndrysh\u00ebm ekzekutojn\u00eb programe t\u00eb tjera t\u00eb padobishme, si gnupg, ata thjesht do t\u00eb shterojn\u00eb nj\u00ebri-tjetrin. Un\u00eb shoh q\u00eb aktualisht ekzistojn\u00eb dy probleme kryesore me \/dev\/random: ai \u00ebsht\u00eb i prirur ndaj DoS (dmth. shterimi i burimeve, ndikim t\u00eb d\u00ebmsh\u00ebm ose di\u00e7ka t\u00eb ngjashme) dhe, pasi nuk k\u00ebrkohen privilegje p\u00ebr p\u00ebrdorimin e tij, ai gjithashtu \u00ebsht\u00eb i prirur ndaj abuzimeve. Gnupg \u00ebsht\u00eb gabim, \u00ebsht\u00eb nj\u00eb kollaps i plot\u00eb. N\u00ebse ne shtojm\u00eb nj\u00eb nd\u00ebrfaqe t\u00eb re t\u00eb pap\u00ebrjashtuar q\u00eb do t\u00eb p\u00ebrdorin gnupg dhe programe t\u00eb ngjashme, ne do t\u00eb humbasim p\u00ebrs\u00ebri.\"<\/i> <\/p>\n

M\u00fcller vuri n\u00eb dukje se shtimi i getrandom() tani do t'i lejoj\u00eb GnuPG t\u00eb p\u00ebrdor\u00eb k\u00ebt\u00eb nd\u00ebrfaqe, pasi ajo do t\u00eb siguroj\u00eb garancin\u00eb e nevojshme q\u00eb puli \u00ebsht\u00eb inicializuar. N\u00eb baz\u00eb t\u00eb diskutimeve me zhvilluesin e GnuPG Werner Koch, M\u00fcller mendon se garancia \u00ebsht\u00eb arsyeja e vetme pse GnuPG aktualisht lexon drejtp\u00ebrdrejt nga \/dev\/random. Por n\u00ebse ka nj\u00eb nd\u00ebrfaqe t\u00eb pap\u00ebrjashtuar q\u00eb \u00ebsht\u00eb e prirur ndaj refuzimit t\u00eb sh\u00ebrbimit (si\u00e7 \u00ebsht\u00eb sot \/dev\/random), at\u00ebher\u00eb sipas Lutomirski, ajo do t\u00eb p\u00ebrdoret n\u00eb m\u00ebnyr\u00eb t\u00eb gabuar nga disa aplikacione. <\/p>\n

Teodoro Cao (Theodore Yue Tak Ts’o), zhvilluesi i n\u00ebnsistemit t\u00eb numrave t\u00eb rast\u00ebsish\u00ebm n\u00eb Linux, duket se ka ndryshuar mendje p\u00ebr domosdoshm\u00ebrin\u00eb e nj\u00eb grupi bllokues. Ai tha se heqja e k\u00ebtij grupi do t\u00eb lejoj\u00eb q\u00eb t\u00eb zhduket ideja se Linux ka nj\u00eb gjenerues t\u00eb v\u00ebrtet\u00eb t\u00eb numrave t\u00eb rast\u00ebsish\u00ebm (TRNG): \"kjo nuk \u00ebsht\u00eb pa kuptim, sepse \u00ebsht\u00eb pik\u00ebrisht ajo q\u00eb gjithmon\u00eb kan\u00eb b\u00ebr\u00eb *BSD\".<\/i><\/p>\n

Ai gjithashtu \u00ebsht\u00eb i shqet\u00ebsuar se ofrimi i nj\u00eb mekanizmi TRNG do t\u00eb sh\u00ebrbej\u00eb thjesht si nj\u00eb kurth p\u00ebr zhvilluesit e aplikacioneve dhe mendon se, n\u00eb t\u00eb v\u00ebrtet\u00eb, duke marr\u00eb parasysh tipo t\u00eb ndryshme hardueri t\u00eb mb\u00ebshtetur nga Linux, nuk \u00ebsht\u00eb e mundur t\u00eb garantohet TRNG n\u00eb b\u00ebrtham\u00eb. Problemi nuk do t\u00eb zgjidhet as nga mund\u00ebsia e pun\u00ebs me harduerin vet\u00ebm mbi privilegjet root: \"Zhvilluesit e aplikacioneve sugjerojn\u00eb q\u00eb aplikacioni i tyre p\u00ebr q\u00ebllime sigurie t\u00eb instalohet si root, sepse vet\u00ebm k\u00ebshtu mund t\u00eb keni akses n\u00eb 'numrat e rast\u00ebsish\u00ebm me t\u00eb v\u00ebrtet\u00eb t\u00eb mir\u00eb'\".<\/i><\/p>\n

M\u00fcller pyeti n\u00ebse Tsao e kishte t\u00ebrhequr implementimin e poolit bllokues, t\u00eb cilin ai vet\u00eb e kishte propozuar prej koh\u00ebsh. Tsao u p\u00ebrgjigj se planifikon t\u00eb marr\u00eb patch-at e Lutomirskit dhe \u00ebsht\u00eb aktivisht kund\u00ebr rikthimit t\u00eb nd\u00ebrfaqes bllokuese n\u00eb b\u00ebrtham\u00eb. <\/p>\n

\u00abB\u00ebrthama nuk mund t\u00eb jap\u00eb garanci se \u00ebsht\u00eb karakterizuar burimi i zhurm\u00ebs n\u00eb m\u00ebnyr\u00eb t\u00eb duhur. E vetmja gj\u00eb q\u00eb mund t\u00eb marr\u00eb nj\u00eb zhvillues i GPG ose OpenSSL \u00ebsht\u00eb nj\u00eb ndjesi e paqart\u00eb se TRUERANDOM \u00ebsht\u00eb \"m\u00eb i mir\u00eb\", dhe p\u00ebrderisa ata duan m\u00eb shum\u00eb siguri, padyshim q\u00eb do t\u00eb p\u00ebrpiqen ta p\u00ebrdorin at\u00eb. N\u00eb nj\u00eb pik\u00eb, ai do t\u00eb bllokohet, dhe kur ndonj\u00eb p\u00ebrdorues tjet\u00ebr i zgjuar (ndoshta nj\u00eb specialist i \u00e7lirimit t\u00eb shp\u00ebrndarjes) e vendos at\u00eb n\u00eb skriptin init dhe sistemet ndalen s\u00eb funksionuari, p\u00ebrdoruesve do t\u2019u mbetet vet\u00ebm t\u00eb ankohen te Linus Torvalds\".<\/i> <\/p>\n

Tsao gjithashtu mb\u00ebshtet ofrimin e nj\u00eb metode p\u00ebr kriptograf\u00ebt dhe ata q\u00eb v\u00ebrtet kan\u00eb nevoj\u00eb p\u00ebr TRNG, p\u00ebr t\u00eb mbledhur entropin\u00eb e tyre n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit p\u00ebr ta p\u00ebrdorur sipas d\u00ebshir\u00ebs s\u00eb tyre. Ai thot\u00eb se mbledhja e entropis\u00eb nuk \u00ebsht\u00eb nj\u00eb proces q\u00eb mund t\u00eb kryhet nga b\u00ebrthama n\u00eb t\u00eb gjitha harduer\u00ebt q\u00eb mb\u00ebshtet, p\u00ebrve\u00e7 se vet\u00eb b\u00ebrthama nuk mund t\u00eb vler\u00ebsoj\u00eb sasin\u00eb e entropis\u00eb q\u00eb ofrohet nga burime t\u00eb ndryshme. <\/p>\n

\u00abB\u00ebrthama nuk duhet t\u00eb p\u00ebrziej burime t\u00eb ndryshme noise s\u00eb bashku, dhe natyrisht nuk duhet t\u00eb p\u00ebrpiqet t\u00eb mbaj\u00eb pretendime se sa bit\u00eb entropie merr kur p\u00ebrpiqet t\u00eb luaj\u00eb nj\u00eb \"loj\u00eb t\u00eb shk\u00ebputur entropie\" n\u00eb nj\u00eb arkitektur\u00eb CPU t\u00eb thjesht\u00eb deri n\u00eb tmerr p\u00ebr rastet e p\u00ebrdorimit IoT\/Embedded, kur gjith\u00e7ka \u00ebsht\u00eb e pa sinkronizuar me nj\u00eb gjenerator master t\u00eb vet\u00ebm, kur nuk ka asnj\u00eb udh\u00ebzim CPU p\u00ebr riorganizimin ose rinominimin e regjistrit, etj.\u00bb.<\/p>\n

\u00abMund t\u00eb flitet p\u00ebr ofrimin e mjeteve q\u00eb p\u00ebrpiqen t\u00eb b\u00ebjn\u00eb k\u00ebto llogaritje, por gj\u00ebra t\u00eb tilla duhet t\u00eb realizohen n\u00eb harduerin e \u00e7do p\u00ebrdoruesi, q\u00eb p\u00ebr shumic\u00ebn e p\u00ebrdoruesve t\u00eb distribucionit \u00ebsht\u00eb thjesht e pa praktikueshme. N\u00ebse kjo \u00ebsht\u00eb e destinuar vet\u00ebm p\u00ebr kriptograf\u00ebt, at\u00ebher\u00eb le t\u00eb b\u00ebhet n\u00eb hap\u00ebsir\u00ebn e tyre t\u00eb p\u00ebrdoruesit. Dhe le t\u00eb mos e thjeshtojm\u00eb GPG, OpenSSL etj., n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb gjith\u00eb t\u00eb thon\u00eb: \"ne duam 'rast\u00ebsin\u00eb e v\u00ebrtet\u00eb' dhe nuk pranojm\u00eb m\u00eb pak\". Mund t\u00eb flitet se si ne ofrojm\u00eb nd\u00ebrfaqe kriptograf\u00ebve p\u00ebr t\u00eb mund\u00ebsuar q\u00eb ata t\u00eb marrin informacionin e nevojsh\u00ebm fal\u00eb qasjes n\u00eb burimet primare t\u00eb noise, t\u00eb ndara dhe t\u00eb em\u00ebruara, dhe ndoshta se ndonj\u00eb m\u00ebnyr\u00eb burimi noise mund t\u00eb autentifikoj\u00eb veten n\u00eb bibliotek\u00ebn ose aplikacionin e hap\u00ebsir\u00ebs s\u00eb p\u00ebrdoruesit\u00bb.<\/i><\/p>\n

Ndodhi nj\u00eb diskutim i vog\u00ebl se si mund t\u00eb duket nj\u00eb nd\u00ebrfaqe e till\u00eb, pasi, p\u00ebr shembull, disa ngjarje mund t\u00eb ken\u00eb pasoja n\u00eb lidhje me sigurin\u00eb. Cao theksoi se kodet e skanimit t\u00eb tastier\u00ebs (dmth. shtypjet e \u00e7el\u00ebsave) p\u00ebrzihen n\u00eb nj\u00eb rezervuar si pjes\u00eb e mbledhjes s\u00eb entropis\u00eb: \u00abTransferta e k\u00ebtij n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, edhe p\u00ebrmes nj\u00eb thirrjeje t\u00eb privilegjuar sistemore, do t\u00eb ishte, t\u00eb pakt\u00ebn, e pakujdesshme\u00bb. \u00cbsht\u00eb e mundshme q\u00eb edhe koha e ngjarjeve t\u00eb tjera t\u00eb krijoj\u00eb ndonj\u00eb rrjedhje informacioni p\u00ebr kanal\u00ebt an\u00ebsor\u00eb. <\/p>\n

K\u00ebshtu, krijohet p\u00ebrshtypja se nj\u00eb problem i vjet\u00ebr me n\u00ebn-sisteminin e numrave t\u00eb rast\u00ebsish\u00ebm n\u00eb Linux po shkon drejt zgjidhjes. Ndryshimet q\u00eb n\u00ebn-sistemi i numrave t\u00eb rast\u00ebsish\u00ebm ka p\u00ebrjetuar koh\u00ebt e fundit, n\u00eb fakt, kan\u00eb sjell\u00eb vet\u00ebm probleme DoS gjat\u00eb p\u00ebrdorimit t\u00eb tij. Tani, jan\u00eb shfaqur m\u00ebnyra efektive p\u00ebr t\u00eb marr\u00eb numra t\u00eb rast\u00ebsish\u00ebm m\u00eb t\u00eb mir\u00eb q\u00eb b\u00ebrthama mund t\u00eb ofroj\u00eb. N\u00ebse TRNG \u00ebsht\u00eb ende e d\u00ebshiruara p\u00ebr Linux, at\u00ebher\u00eb ky defekt do t\u00eb duhet t\u00eb zgjidhet n\u00eb t\u00eb ardhmen, por me shum\u00eb t\u00eb ngjar\u00eb, kjo nuk do t\u00eb b\u00ebhet brenda vet\u00eb b\u00ebrtham\u00ebs. <\/p>\n

Pak reklam\u00eb \ud83d\ude42<\/h3>\n

\nFaleminderit q\u00eb po q\u00ebndroni me ne. Ju p\u00eblqen artikujt tan\u00eb? Doni t\u00eb shihni m\u00eb shum\u00eb materiale interesante? Na mb\u00ebshtesni duke b\u00ebr\u00eb nj\u00eb porosi ose duke rekomanduar tek miqt\u00eb tuaj, VPS cloud p\u00ebr zhvillues nga $4.99<\/a><\/noindex>, nj\u00eb analog unik i server\u00ebve entry-level q\u00eb e kemi shpikur p\u00ebr Ju:<\/b> E gjith\u00eb e v\u00ebrteta n\u00eb lidhje me VPS (KVM) E5-2697 v3 (6 B\u00ebrthama) 10GB DDR4 480GB SSD 1Gbps nga $19 ose si ta ndajm\u00eb sakt\u00ebsisht serverin?<\/a><\/noindex> (opcionet me RAID1 dhe RAID10, deri n\u00eb 24 b\u00ebrthama dhe deri n\u00eb 40GB DDR4 jan\u00eb t\u00eb disponueshme).<\/p>\n

Dell R730xd dyfish m\u00eb i lir\u00eb n\u00eb qend\u00ebr t\u00eb t\u00eb dh\u00ebnave Equinix Tier IV n\u00eb Amsterdam?<\/b> Vet\u00ebm te ne 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB nga $199<\/a><\/noindex> n\u00eb Holand\u00eb! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 nga $99!<\/b><\/b> Lexoni rreth Si t\u00eb nd\u00ebrtoni nj\u00eb infrastruktur\u00eb t\u00eb klas\u00ebs korporative me p\u00ebrdorimin e server\u00ebve Dell R730xd E5-2650 v4 me \u00e7mim 9000 euro p\u00ebr pak para?<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 \u044f\u0434\u0440\u0435 \u0431\u044b\u043b\u0438 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b, \u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0435\u0448\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043c\u043e\u043a. \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55510","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux: heqja e grupeve t\u00eb bllokimit \\\/dev\\\/random | ProHoster","description":"Si \u00ebsht\u00eb e njohur, \/dev\/random, nj\u00eb gjeneruesi t\u00eb numrave psevdor t\u00eb rast\u00ebsish\u00ebm q\u00eb \u00ebsht\u00eb kriptografikisht i sigurt (CSPRNG), ka nj\u00eb problem t\u00eb pak\u00ebndsh\u00ebm \u2013 bllokimet. Ky artikull shpjegon se si mund ta zgjidhni k\u00ebt\u00eb problem.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Linux: \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0443\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \/dev\/random | ProHoster","og:description":"\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443 \/dev\/random, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b (CSPRNG), \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0435\u0435 \u0440\u0435\u0448\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/linux-udalenie-pula-blokirovok-dev-random","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-21T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55510","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:30","updated":"2022-10-02 22:01:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}