Ukukhutshwa kwe-OpenSSH 8.6 kunye nokulungiswa komngcipheko

Ukukhutshwa kwe-OpenSSH 8.6 kushicilelwe, ukuphunyezwa okuvulekileyo komxhasi kunye neseva yokusebenza usebenzisa i-SSH 2.0 kunye ne-SFTP protocol. Uguqulelo olutsha lususa ubuthathaka ekuphunyezweni komyalelo we-LogVerbose, ovele kukhupho lwangaphambili kwaye ikuvumela ukuba ukwandise inqanaba lolwazi lolungiso lweempazamo olulahlwe kwilogi, kubandakanya ukukwazi ukucoca ngeetemplates, imisebenzi kunye neefayile ezinxulumene nekhowudi eyenziweyo. ngamalungelo okusetha ngokutsha kwinkqubo ekwanti ye-sshd kwindawo yebhokisi yesanti.

Umhlaseli ofumana ulawulo lwenkqubo engasebenziyo esebenzisa ubuthathaka obukhoyo obungaziwayo unokusebenzisa umba we-LogVerbose ukugqitha kwibhokisi yesanti kwaye ahlasele inkqubo ebaleka ngamalungelo aphezulu. Ukuba sesichengeni kweLogVerbose kucingelwa ukuba akunakufane kwenzeke ekusebenzeni kuba useto lweLogVerbose luvaliwe ngokungagqibekanga kwaye lusetyenziswa kuphela ngexesha lolungiso. Uhlaselo lukwafuna ukufumana ubuthathaka obutsha kwinkqubo engafanelekanga.

Utshintsho kwi-OpenSSH 8.6 alunxulumananga nokuba sesichengeni:

  • Ulwandiso olutsha lweprothokholi luphunyeziwe kwi-sftp kunye ne-sftp-server "[imeyile ikhuselwe]", evumela umxhasi we-SFTP ukuba afumane ulwazi malunga nezithintelo ezibekwe kumncedisi, kubandakanywa imida kubukhulu bepakethe yesayizi kunye nokubhala nokufunda imisebenzi. Kwi-sftp, ulwandiso olutsha lusetyenziselwa ukukhetha ubungakanani obufanelekileyo bebhloko xa kudluliswa idatha.
  • Ulungiselelo lweModuliFile longezwe kwi sshd_config ye sshd, ikuvumela ukuba uchaze indlela eya kwifayile ye "moduli" equlathe amaqela eDH-GEX.
  • I-TEST_SSH_ELAPSED_TIMES imo eguquguqukayo yongezwe kuvavanyo lweyunithi ukwenza imveliso yexesha eligqithileyo ukusukela oko kuqhutywa uvavanyo ngalunye.
  • Ujongano lwesicelo sephasiwedi ye-GNOME lwahlulwe lwaziinketho ezimbini, enye ye-GNOME2 kunye neye-GNOME3 (contrib/gnome-ssk-askpass3.c). Umahluko we-GNOME3 wokuphucula ukuhambelana kweWayland isebenzisa umnxeba oya ku-gdk_seat_grab () xa ulawula ikhibhodi kunye nokubanjwa kwempuku.
  • Ukungavumeli okuthambileyo kwefowuni ye-fstatat64 yongezwe kwi-seccomp-bpf-based sandbox esetyenziswa kwi-Linux.

umthombo: opennet.ru

Yongeza izimvo