Inkqubo 255

Uguqulelo olutsha lwesistim yomphathi wenkqubo yasimahla ikhutshiwe.

Utshintsho oluphazamisa ukuhambelana komva:

• Ngoku kunyuswa isahlulelo esahlukileyo /usr/ ixhaswa kuphela kwinqanaba le-initramfs.

• Ukukhutshwa kwexesha elizayo kuya kususa inkxaso yeSystem V init scripts kunye namaqela v1.

• Khetha Indlela yokuMisa=, HibernateState= и HybridSleepState= ukusuka kwicandelo [Lala] ziyekisiwe kwi-systemd-sleep.conf kwaye azinampembelelo kwindlela yokuziphatha.

Utshintsho kumsebenzi womphathi:

• IiDaemons ngoku ziqaliswa kusetyenziswa posix_spawn() endaweni yendibaniselwano yefolokhwe() kunye ne-exec(); isicelo sokutsala #27890.

• i-systemd ngoku isebenzisa izichazi zefayile zePIDFD ukugcina umkhondo weenkqubo zomntwana; oku kwenza lula ingqiqo yomsebenzi womphathi; isicelo sokutsala #29142, #29594, #29455.

• Inketho entsha SurviveFinalKillSignal= ivumela i-daemon ukuba inqande ukuma xa usebenzisa indlela yokuqalisa ngokutsha okuthambileyo; isicelo sokutsala #28545.

• Iiyunithi ngoku zixhasa ukhetho IMemoryPeak=, ImemoriSwapPeak=, MemorySwapCurrent= и MemoryZSwapCurrent=; olu khetho luhambelana neparameters inkumbulo.incopho, memory.swap.peak, inkumbulo.tshintshisa.yangoku и imemori.zswap.iipropati zangoku ukusuka kumaqela v2.

• Inketho entsha ConditionSecurity= ikuvumela ukuba uxelele inkqubo ukuba inkonzo inokuqalwa kuphela ukuba indlela ibiqalwe ngomfanekiso oqinisekisiweyo we-UK.

TPM2 inkxaso:

• systemd-cryptenroll ngoku ikuvumela ukuba ukhankanye indawo ethile yePCR kunye nehashi.

• systemd-cryptenroll ikuvumela ukuba ukhankanye isalathiso sesitshixo; isicelo sokutsala #29427.

• Ngoku kunokwenzeka ukuba ubophe umthamo we-LUKS kwi-chip ethile ye-TPM2 ngaphandle kokufikelela kuyo, ukuba isitshixo sikawonke-wonke siyaziwa.

• I-systemd-cryptsetup binary isiwe kuyo / usr / bin / kwaye ingasetyenziswa ngaphandle kwe-systemd.

• Icandelo langaphakathi le-systemd-pcrphase linikwe elinye igama libe yi-systemd-pcrextend.

• Icandelo elitsha, i-systemd-pcrlock, ikuvumela ukuba uqikelele amangeniso e-PCR ngokusekelwe kulwazi lwenkqubo olukhoyo; isicelo sokutsala #28891.

systemd-boot, systemd-stub, ukify, bootctl, kernel-install:

• bootctl ngoku ikuvumela ukuba uqinisekise ukuba inkqubo yaqalwa ukusuka ku uki.

• i-systemd-boot ixhasa izitshixo ezishushu zokuvala kunye nokuphinda uqalise inkqubo.

• i-systemd-boot ayisalayishi iiblobhu zeDevicetree ezingathembekanga xa iSecureBoot yenziwe yasebenza.

• i-systemd-boot kunye ne-systemd-stub ngoku zineziphawuli ezahlukileyo kwicandelo .sbat, kwaye i-UEFI ingababiza ngokuzimeleyo; isicelo sokutsala #29196.

• Icandelo ukify alisalingwa; ephunyeziweyo ngoku ikhona / usr / bin /.

systemd-networkd:

• Inkxaso eyongeziweyo yetekhnoloji ye-Rapid Commit.

• i-dbus interface systemd-networkd ngoku ikuvumela ukuba ufumane ulwazi malunga nobume bomthengi we-DHCP; zibophelele #28896.

• Ukhetho NTSset= ikuvumela ukuba ubophe uqwalaselo lojongano lomsebenzi womnatha kwiseti yemithetho izinto ezingenamsebenzi.

• Icandelo [IPv6AcceptRA] ixhasa iinketho ezintsha: SebenzisaPREF64=, UseHopLimit=, UseICMP6RateLimit= и NTSset=.

• Icandelo [IPv6SendRA] ngoku ixhasa iinketho RetransmitSec=, HopLimit=, Ummeli wasekhaya=, HomeAgentLifetimeSec= и HomeAgentPreference=.

• Iifayile zoqwalaselo ezenziwe kwiinketho zomgca womyalelo we kernel ngoku zinezimaphambili 70-; Ukubaluleka kwezi fayile ngoku kuphezulu kunokubaluleka kweefayile zoqwalaselo ezingagqibekanga.

umthombo: linux.org.ru