{"id":92546,"date":"2020-08-28T07:42:57","date_gmt":"2020-08-28T05:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-openzfs-narushayushhaya-obrabotku-prav-dostupa-vo-freebsd"},"modified":"2020-08-28T07:42:57","modified_gmt":"2020-08-28T05:42:57","slug":"uyazvimost-v-openzfs-narushayushhaya-obrabotku-prav-dostupa-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimost-v-openzfs-narushayushhaya-obrabotku-prav-dostupa-vo-freebsd","title":{"rendered":"S\u00e5rbarhet i OpenZFS som bryter mot \u00e5tkomstr\u00e4ttigheter i FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I till\u00e4ggna<\/a><\/noindex> p\u00e5 Utvecklarna av FreeBSD har beslutat att f\u00f6lja det allm\u00e4nna exemplet och inte f\u00f6rs\u00f6ka h\u00e5lla sig kvar vid Illumos, eftersom denna implementation redan ligger l\u00e5ngt efter n\u00e4r det g\u00e4ller funktionalitet och kr\u00e4ver stora resurser f\u00f6r att underh\u00e5lla koden och \u00f6verf\u00f6ra \u00e4ndringar. \u00abZFS on Linux\u00bb betraktas nu som det enda samarbetande projektet f\u00f6r utveckling av ZFS. St\u00f6det f\u00f6r FreeBSD kommer att integreras direkt i koden f\u00f6r \u00abZFS on Linux\u00bb och utvecklas i det huvudsakliga arkivet f\u00f6r detta projekt.<\/a><\/noindex> koden f\u00f6r att st\u00f6dja operativsystemet FreeBSD har identifierat en kritisk s\u00e5rbarhet<\/a><\/noindex> (CVE-2020-24717<\/a><\/noindex>), vilket leder till felaktig hantering av \u00e5tkomstr\u00e4ttigheter. Problemet \u00e4r att beh\u00f6righeterna som st\u00e4lls in f\u00f6r gruppen behandlades som beh\u00f6righeter f\u00f6r filens \u00e4gare. Problemet har \u00e5tg\u00e4rdats<\/a><\/noindex> i uppdateringen OpenZFS 2.0.0-rc1<\/a><\/noindex>. \u00c5tg\u00e4rden \u00e4r tillagt<\/a><\/noindex> till \u00f6vers\u00e4ttning<\/a><\/noindex> koden basen f\u00f6r FreeBSD HEAD i OpenZFS.<\/p>\n

Problemet uppstod eftersom alla element i \u00e5tkomstkontrollistan (ACE) som st\u00e4lldes in f\u00f6r gruppens \u00e4gare (group@) och vanliga grupper (group:) delegerades till den aktuella anv\u00e4ndaren.
\nTill exempel hanterades \u00e5tkomstl\u00e4get 0770 (skrivbeh\u00f6righet endast f\u00f6r medlemmar av gruppen) som 0777 (skrivbeh\u00f6righet f\u00f6r alla anv\u00e4ndare). En liknande situation observerades med ACL, d\u00e4r f\u00f6ljande ACL blev ekvivalent med beh\u00f6righeterna 0777, eftersom kontrollen av gruppmedlemskap f\u00f6r builtin_administrators returnerade True.<\/p>\n

# owner: root
\n # group: wheel
\n grupp:builtin_administrators:rwxpDdaARWcCos:\u2014 \u2014 \u2014 :till\u00e5t<\/p>\n

\u00c4ven i OpenZFS-porten f\u00f6r FreeBSD har ytterligare ett problem uppt\u00e4ckts g\u00e4llande tilldelning av r\u00e4ttigheter f\u00f6r att v\u00e4xla till katalog (cd), oavsett tillst\u00e5ndet f\u00f6r exekveringsflaggan f\u00f6r kataloger. Inloggning i katalogen var m\u00f6jlig \u00e4ven vid tydligt f\u00f6rbud genom ACL (\"deny \u2014 execute\") <\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 OpenZFS \u043a\u043e\u0434\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u041e\u0421 FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-24717), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0430\u0432\u0430, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0433\u0440\u0443\u043f\u043f\u044b, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0444\u0430\u0439\u043b\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 OpenZFS 2.0.0-rc1. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u043e \u0434\u043e \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b FreeBSD HEAD \u043d\u0430 OpenZFS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarhet i OpenZFS som inskr\u00e4nker hanteringen av \u00e5tkomstr\u00e4ttigheter i FreeBSD | ProHoster","description":"I den tillagda koden f\u00f6r OpenZFS.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimost-v-openzfs-narushayushhaya-obrabotku-prav-dostupa-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenZFS, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 OpenZFS \u043a\u043e\u0434\u0435 \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimost-v-openzfs-narushayushhaya-obrabotku-prav-dostupa-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-28T05:42:57+00:00","article:modified_time":"2020-08-28T05:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:06:39","updated":"2022-09-29 20:55:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/92546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=92546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/92546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=92546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=92546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=92546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}