{"id":71650,"date":"2020-02-27T08:51:33","date_gmt":"2020-02-27T05:51:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mozilla-nachinaet-vnedrenie-tehnologii-izolyaczii-bibliotek-rlbox"},"modified":"2020-03-03T16:10:40","modified_gmt":"2020-03-03T13:10:40","slug":"mozilla-nachinaet-vnedrenie-tehnologii-izolyaczii-bibliotek-rlbox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-nachinaet-vnedrenie-tehnologii-izolyaczii-bibliotek-rlbox","title":{"rendered":"Mozilla fillon zbatimin e teknologjis\u00eb p\u00ebr izolimin e bibliotekave RLBox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ish-hetues nga Universiteti i Stanfordit, Universiteti i Kalifornis\u00eb n\u00eb San Diego dhe Universiteti i Teksasit n\u00eb Austin krijuan<\/a><\/noindex> instrumentin RLBox<\/a><\/noindex>, i cili mund t\u00eb p\u00ebrdoret si nj\u00eb nivel shtes\u00eb izolimi p\u00ebr t'i bllokuar dob\u00ebsit\u00eb n\u00eb bibliotekat funksionale. RLBox synon t\u00eb zgjidh\u00eb problemin e siguris\u00eb me bibliotekat e pal\u00ebve t\u00eb treta q\u00eb nuk jan\u00eb n\u00ebn kontrollin e zhvilluesve, por dob\u00ebsit\u00eb n\u00eb t\u00eb cilat mund t\u00eb komprometojn\u00eb projektin kryesor. <\/p>\n

Kompania Mozilla planifikon<\/a><\/noindex> t\u00eb angazhoj\u00eb RLBox n\u00eb nd\u00ebrtimet Linux t\u00eb Firefox 74 dhe nd\u00ebrtimet macOS t\u00eb Firefox 75 p\u00ebr izolimin e ekzekutimit t\u00eb bibliotek\u00ebs Grafit<\/a><\/noindex>, e cila \u00ebsht\u00eb p\u00ebrgjegj\u00ebse p\u00ebr renditjen e fonteve. N\u00eb k\u00ebt\u00eb kuptim, RLBox nuk \u00ebsht\u00eb specifik p\u00ebr Firefox dhe mund t\u00eb p\u00ebrdoret p\u00ebr izolimin e \u00e7do biblioteke n\u00eb projekte t\u00eb ndryshme. Arritjet<\/a><\/noindex> RLBox distribuohen<\/a><\/noindex> n\u00eb p\u00ebrputhje me licenc\u00ebn MIT. N\u00eb k\u00ebt\u00eb moment, RLBox mb\u00ebshtet pun\u00ebn n\u00eb platformat Linux dhe macOS, mb\u00ebshtetje p\u00ebr Windows pritet m\u00eb von\u00eb.<\/p>\n

Mekanizmi<\/a><\/noindex> i funksionimit t\u00eb RLBox p\u00ebrb\u00ebhet nga kompaktimi i kodit C\/C++ t\u00eb bibliotek\u00ebs s\u00eb izoluar n\u00eb kodin nd\u00ebrmjet\u00ebs t\u00eb nivelit t\u00eb ul\u00ebt WebAssembly, i cili m\u00eb pas formohet n\u00eb nj\u00eb modul WebAssembly, autoritetet e t\u00eb cilit caktohen n\u00eb lidhje vet\u00ebm me k\u00ebt\u00eb modul (p.sh., nj\u00eb bibliotek\u00eb p\u00ebr p\u00ebrpunimin e vargjeve nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb hap\u00eb nj\u00eb soket rrjeti apo nj\u00eb skedar). Transformimi i kodit C\/C++ n\u00eb WebAssembly b\u00ebhet me ndihm\u00ebn e wasi-sdk<\/a><\/noindex>. <\/p>\n

P\u00ebr ekzekutimin e menj\u00ebhersh\u00ebm, moduli WebAssembly kompilohet n\u00eb kodin makinerik me ndihm\u00ebn e kompilatorit Lucet<\/a><\/noindex> dhe ekzekutohet n\u00eb nj\u00eb «nano-proces» t\u00eb ve\u00e7ant\u00eb, i izoluar nga pjesa tjet\u00ebr e memories s\u00eb aplikacionit. Kompilatori Lucet \u00ebsht\u00eb i bazuar n\u00eb t\u00eb nj\u00ebjtin kod si makina JIT. Cranelift<\/a><\/noindex>, i p\u00ebrdorur n\u00eb Firefox p\u00ebr ekzekutimin e WebAssembly. <\/p>\n

Moduli i nd\u00ebrtuar punon n\u00eb nj\u00eb zon\u00eb t\u00eb ve\u00e7ant\u00eb t\u00eb memories dhe nuk ka qasje n\u00eb hap\u00ebsir\u00ebn tjet\u00ebr adresore. N\u00eb rastin e shfryt\u00ebzimit t\u00eb dob\u00ebsis\u00eb n\u00eb bibliotek\u00eb, sulmuesi do t\u00eb jet\u00eb i kufizuar dhe nuk do t\u00eb mund t\u00eb aksesoj\u00eb zonat e memories s\u00eb procesit kryesor ose t\u00eb transferoj\u00eb kontrollin jasht\u00eb mjedisit t\u00eb izoluar. <\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

P\u00ebr zhvilluesit ofrohet nj\u00eb nivel i lart\u00eb API<\/a><\/noindex>, i cili lejon thirrjen e funksioneve t\u00eb bibliotek\u00ebs n\u00eb modin e izoluar. WebAssembly-ndihm\u00ebsit praktikisht nuk k\u00ebrkojn\u00eb burime shtes\u00eb dhe nd\u00ebrlidhja me ta nuk \u00ebsht\u00eb shum\u00eb m\u00eb e ngadalshme se thirrja e funksioneve t\u00eb zakonshme (funksionet e bibliotek\u00ebs ekzekutohen n\u00eb form\u00ebn e kodit natyror, dhe shpenzimet ndodhin vet\u00ebm gjat\u00eb kopjimit dhe kontrollimit t\u00eb t\u00eb dh\u00ebnave gjat\u00eb nd\u00ebrveprimit me mjedisin e izoluar). Funksionet e bibliotek\u00ebs s\u00eb izoluar nuk mund t\u00eb thirren direkt dhe p\u00ebr t\u00eb arritur tek ato \u00ebsht\u00eb e nevojshme t\u00eb aplikohet
\n shtresa invoke_sandbox_function(). <\/p>\n

Nga ana tjet\u00ebr, n\u00ebse nga biblioteka duhet t\u00eb thirren funksione t\u00eb jashtme, k\u00ebto funksione duhet t\u00eb jen\u00eb qart\u00eb t\u00eb p\u00ebrcaktuara duke p\u00ebrdorur metod\u00ebn register_callback (me t\u00eb drejt\u00eb RLBox ofron akses n\u00eb funksionet e bibliotek\u00ebs standarde<\/a><\/noindex>). P\u00ebr t\u00eb siguruar nj\u00eb funksionim t\u00eb sigurt t\u00eb memories (memory safety) e izolimit t\u00eb ekzekutimit t\u00eb kodit nuk \u00ebsht\u00eb e mjaftueshme dhe \u00ebsht\u00eb e nevojshme t\u00eb sigurohet gjithashtu kontrolli i rrjedhave t\u00eb t\u00eb dh\u00ebnave t\u00eb kthyera.<\/p>\n

Vlerat e formuara n\u00eb mjedisin e izoluar sh\u00ebnohen si t\u00eb dyshimta, kufizohen p\u00ebrmes etiketave tainted<\/a><\/noindex> dhe p\u00ebr «pastrimin» k\u00ebrkojn\u00eb verifikim<\/a><\/noindex> dhe kopjim n\u00eb memorien e aplikacionit.
\nPa pastrim, p\u00ebrpjekja p\u00ebr t\u00eb p\u00ebrdorur t\u00eb dh\u00ebna t\u00eb ndotura n\u00eb nj\u00eb kontekst q\u00eb k\u00ebrkon t\u00eb dh\u00ebna t\u00eb zakonshme (dhe anasjelltas) \u00e7on n\u00eb gjenerimin e gabimeve gjat\u00eb faz\u00ebs s\u00eb kompilimit. Argumentet e vogla t\u00eb funksioneve, vlerat q\u00eb kthehen dhe strukturat kalohen p\u00ebrmes kopjimit midis memories s\u00eb procesit dhe memories s\u00eb mjedisit t\u00eb izoluar. P\u00ebr grupe t\u00eb m\u00ebdha t\u00eb dh\u00ebnash, memoria ndahet n\u00eb mjedisin e izoluar, nd\u00ebrsa procesit kryesor i kthehet nj\u00eb tregues i drejtp\u00ebrdrejt\u00eb «referenca-sandbox». <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0421\u0442\u0435\u043d\u0434\u0444\u043e\u0440\u0434\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u041e\u0441\u0442\u0438\u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 RLBox, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439. RLBox \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435\u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71651,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71650","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla fillon implementimin e teknologjis\u00eb s\u00eb izolimit t\u00eb bibliotekave RLBox | ProHoster","description":"Ish-hetues nga Universiteti i Stanfordit, Universiteti i Kalifornis\u00eb n\u00eb San Diego dhe Universiteti i Teksasit n\u00eb Austin","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-nachinaet-vnedrenie-tehnologii-izolyaczii-bibliotek-rlbox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a RLBox | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0421\u0442\u0435\u043d\u0434\u0444\u043e\u0440\u0434\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u041e\u0441\u0442\u0438\u043d\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-nachinaet-vnedrenie-tehnologii-izolyaczii-bibliotek-rlbox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T05:51:33+00:00","article:modified_time":"2020-03-03T13:10:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71650","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:32:42","updated":"2022-09-29 09:11:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71650"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71650\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/71651"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71650"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71650"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}