{"id":114764,"date":"2024-04-03T12:25:48","date_gmt":"2024-04-03T10:25:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd"},"modified":"2024-04-03T12:25:48","modified_gmt":"2024-04-03T10:25:48","slug":"inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","title":{"rendered":"Initiativet f\u00f6r att minska beroenden i libsystemd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bland systemmanagerutvecklare p\u00e5g\u00e5r en diskussion om att minska beroendena i libsystemd-biblioteket, som kopplas ihop inte bara med systemd-komponenter utan ocks\u00e5 med m\u00e5nga externa applikationer. Till exempel anv\u00e4nder \u00f6ver 150 paket i Fedora libsystemd som beroende. Diskussionens initiativtagare anser att inf\u00f6randet av ytterligare externa bibliotek i libsystemd, som inte kontrolleras av systemd-utvecklarna, v\u00e4sentligt \u00f6kar attackytan vid en eventuell kompromettering av externa bibliotek, som skett med liblzma-biblioteket. <\/p>\n

Ut\u00f6ver liblzma och glibc laddar libsystemd \u00e4ven biblioteken libzstd, liblz4 och libgcrypt, d\u00e4r s\u00e4kerhetsunderh\u00e5llet blir en kritiskt viktig uppgift. Libsystemd ger tillg\u00e5ng till 12 grundl\u00e4ggande API:er (sd-bus, sd-daemon, sd-device, sd-event, sd-hwdb, sd-id128, sd-journal, sd-login, sd-netlink, sd-network, sd-path och sd-resolve), och en situation uppst\u00e5r d\u00e4r en applikation, till exempel som anv\u00e4nder libsystemd bara f\u00f6r att anropa funktionen sd_notify f\u00f6r att informera systemd om ett tillst\u00e5nds\u00e4ndring eller sd_journal f\u00f6r att skriva data till loggen, kopplas till alla andra bibliotek och API-hanterare. Som en l\u00f6sning f\u00f6resl\u00e5s att dela upp libsystemd i flera separata bibliotek, som ansvarar f\u00f6r specifika API:er, vilket skulle m\u00f6jligg\u00f6ra att extern beroende endast laddas in d\u00e4r de verkligen beh\u00f6vs. <\/p>\n

Systemd-utvecklarna anser att uppdelning \u00e4r orealistisk, eftersom de befintliga hanterarna i libsystemd \u00e4r \u00f6msesidigt kopplade. Uppdelningen skulle kr\u00e4va enormt arbete och leda till antingen f\u00f6rlust av effektivitet eller behov av kodduplicering. F\u00f6r att minska minnesanv\u00e4ndningen har libsystemd nyligen genomg\u00e5tt en f\u00f6r\u00e4ndring med implementeringen av dynamisk inl\u00e4sning av bibliotek som liblzma, libzstd och liblz4 genom att anv\u00e4nda anropet dlopen(), i situationer d\u00e4r deras funktioner verkligen \u00e4r n\u00f6dv\u00e4ndiga. En liknande f\u00f6r\u00e4ndring kommer att genomf\u00f6ras f\u00f6r libgcrypt fr\u00e5n och med n\u00e4sta version. <\/p>\n

S\u00e5dana l\u00f6sningar har kritiserats, eftersom ist\u00e4llet f\u00f6r tydlig och m\u00e4rkbar koppling, kommer inl\u00e4sningen av externa bibliotek nu att ske otydligt, vilket komplicerar diagnosen, eftersom kopplingen mellan API-anropen i libsystemd och anrop av funktioner fr\u00e5n externa bibliotek inte \u00e4r uppenbar. \u00d6verg\u00e5ngen till inl\u00e4sning genom dlopen() f\u00f6r\u00e4ndrar inte arkitekturen, utan d\u00f6ljer bara externa komponenter f\u00f6r deras underh\u00e5llare och anv\u00e4ndare. <\/p>\n

\u041b\u0435\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u0438\u0435 \u0441 \u0438\u0434\u0435\u0435\u0439 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f libsystemd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0442\u0430\u043a \u043a\u0430\u043a \u0442\u0430\u043a\u043e\u0439 \u0448\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 systemd \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u043a\u0430\u0436\u0434\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 API \u0438 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043c\u0451\u043d, \u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c — \u043a \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0438\u0437-\u0437\u0430 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430. <\/p>\n

Den implementerade avlastningen av externa bibliotek endast vid behov ses av Lenart som en optimal strategi. Problemet med att komplicera \u00e5tkomsten till data om dynamiskt laddade bibliotek f\u00f6resl\u00e5s l\u00f6sas genom att l\u00e4gga till ytterligare f\u00e4lt med information om s\u00e5dana dynamiska beroenden i ELF-filer, som kan behandlas av felhanterare och visas i utdata fr\u00e5n verktyget readelf. <\/p>\n

N\u00e4r det g\u00e4ller bindningen av ett stort antal applikationer till libsystemd rekommenderade Lenart applikationsutvecklare att inte f\u00f6rs\u00f6ka ladda libsystemd f\u00f6r en enda funktion, utan att implementera protokollhanteraren p\u00e5 applikationsniv\u00e5. Till exempel \u00e4r implementeringen av funktionen sd_notify() tillr\u00e4ckligt trivial och kan rymmas p\u00e5 n\u00e5gra rader kod vid anv\u00e4ndning av UNIX-sockets (AF_UNIX). En s\u00e5dan separat implementation av sd_notify har varit tillg\u00e4nglig f\u00f6r OpenSSH sedan 2017 och har nyligen blivit antagen i den b\u00e4rbara grenen av OpenSSH 9.8, vars release \u00e4r planerad till mitten av sommaren.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 Fedora \u0431\u043e\u043b\u0435\u0435 150 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 libsystemd \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u043e\u0440 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0432 libsystemd \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 systemd, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114764","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Initiativet f\u00f6r att minska beroenden i libsystemd | ProHoster","description":"Bland utvecklarna av systemhanteraren systemd p\u00e5g\u00e5r diskussioner om att minska beroenden i biblioteket libsystemd, som \u00e4r kopplat inte bara till komponenter av systemd, utan ocks\u00e5 till m\u00e5nga externa applikationer.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u043f\u043e \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 libsystemd | ProHoster","og:description":"\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-03T10:25:48+00:00","article:modified_time":"2024-04-03T10:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114764","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 21:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 21:20:19","updated":"2026-01-22 21:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/114764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=114764"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/114764\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=114764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=114764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=114764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}