{"id":107724,"date":"2023-04-04T18:48:10","date_gmt":"2023-04-04T16:48:10","guid":{"rendered":"https:\/\/prohoster.info\/?p=107724"},"modified":"2023-04-04T19:05:55","modified_gmt":"2023-04-04T17:05:55","slug":"v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","title":{"rendered":"Fedora \u00f6verv\u00e4ger att inf\u00f6ra standard FS-kryptering","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Owen Taylor, skaparen av GNOME Shell och Pango-biblioteket, som ing\u00e5r i arbetsgruppen f\u00f6r utveckling av Fedora f\u00f6r arbetsstationer, har lagt fram ett f\u00f6rslag om standardkryptering av systempartitioner och anv\u00e4ndarnas hemkataloger i Fedora Workstation. F\u00f6rdelarna med att \u00f6verg\u00e5 till standardkryptering inkluderar skydd av data vid st\u00f6ld av b\u00e4rbara datorer, skydd mot attacker p\u00e5 obevakade enheter, samt att uppr\u00e4tth\u00e5lla konfidentialitet och integritet direkt utan behov av on\u00f6diga \u00e5tg\u00e4rder. <\/p>\n

Enligt det utarbetade utkastet f\u00f6r kryptering planeras anv\u00e4ndning av Btrfs fscrypt. F\u00f6r systempartitionerna planerar man att lagra krypteringsnycklar i TPM-modulen och anv\u00e4nda dem kopplade till de digitala signaturer som anv\u00e4nds f\u00f6r att kontrollera integriteten hos bootloadern, k\u00e4rnan och initrd (det vill s\u00e4ga vid systemets start beh\u00f6ver anv\u00e4ndaren inte ange l\u00f6senord f\u00f6r att dekryptera systempartitionerna). Vid kryptering av hemkataloger planerar man att generera nycklar baserat p\u00e5 anv\u00e4ndarnamn och l\u00f6senord (anslutningen av den krypterade hemkatalogen kommer att ske vid inloggningen av anv\u00e4ndaren). <\/p>\n

Tidsramarna f\u00f6r genomf\u00f6randet av initiativet beror p\u00e5 \u00f6verg\u00e5ngen av distributionen till den enhetliga k\u00e4rnbilden UKI (Unified Kernel Image), som kombinerar en bootloader f\u00f6r att ladda k\u00e4rnan fr\u00e5n UEFI (UEFI boot stub), Linux-k\u00e4rnbilden och det inl\u00e4sta systemmilj\u00f6n initrd i en fil. Utan st\u00f6d f\u00f6r UKI kan man inte garantera att inneh\u00e5llet i initrd-milj\u00f6n f\u00f6rblir of\u00f6r\u00e4ndrat, d\u00e4r nycklarna f\u00f6r dekryptering av filsystemet fastst\u00e4lls (till exempel kan en angripare byta ut initrd och simulera en l\u00f6senordsbeg\u00e4ran, f\u00f6r att undvika detta kr\u00e4vs en verifierad laddning av hela kedjan fram till montering av filsystemet). <\/p>\n

I den nuvarande versionen av Fedora-installationsprogrammet finns det ett alternativ f\u00f6r att kryptera partitioner p\u00e5 blockniv\u00e5 med hj\u00e4lp av dm-crypt och en separat l\u00f6senfras som inte \u00e4r kopplad till anv\u00e4ndarkontot. Det finns vissa problem med denna l\u00f6sning, s\u00e5som ol\u00e4mplighet f\u00f6r separat kryptering i flerspelarsystem, brist p\u00e5 internationellt st\u00f6d och hj\u00e4lpmedel f\u00f6r personer med funktionsneds\u00e4ttningar, m\u00f6jligheten att genomf\u00f6ra attacker genom att byta ut bootloadern (den installerade bootloadern kan l\u00e5tsas vara den \u00e4kta och beg\u00e4ra dekrypteringsl\u00f6senordet), samt behovet av att st\u00f6dja framebuffer i initrd f\u00f6r att visa l\u00f6senordsf\u00f6rfr\u00e5gan.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 Fedora Workstation. \u0418\u0437 \u043f\u043b\u044e\u0441\u043e\u0432 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0440\u0430\u0436\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430, \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107724","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fedora \u00f6verv\u00e4ger m\u00f6jligheten till standard FS-kryptering | ProHoster","description":"Owen Taylor, skaparen av GNOME Shell och Pango-biblioteket, som ing\u00e5r i Fedora-arbetsgrupp f\u00f6r station\u00e4ra datorer, har f\u00f6reslagit en plan f\u00f6r kryptering av systempartitioner och hemkataloger som standard.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0424\u0421 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e | ProHoster","og:description":"\u041e\u0443\u044d\u043d \u0422\u0435\u0439\u043b\u043e\u0440 (Owen Taylor), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c GNOME Shell \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Pango, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e Fedora \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-fedora-rassmatrivayut-vozmozhnost-primeneniya-shifrovaniya-fs-po-umolchaniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-04T16:48:10+00:00","article:modified_time":"2023-04-04T17:05:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/107724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=107724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/107724\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=107724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=107724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=107724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}