ืงื™ื™ืคืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ OpenBSD

ืขืงืกืคึผืขืจืฅ ืคื•ืŸ Qualys Labs ื”ืึธื‘ืŸ ื“ื™ืกืงืึทื•ื•ืขืจื“ ืขื˜ืœืขื›ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจืึธื‘ืœืขืžืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึธืคึผื ืึทืจืŸ ืžื’ื™ืœื” ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื“ื™ ืคึผืึทืจืึธืœ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืžืขืงืึทื ื™ื–ืึทืžื– ื’ืขื ื™ืฆื˜ ืื™ืŸ BSD (ืึทื ืึทืœืึธื’ ืฆื• PAM). ื“ืขืจ ืงื•ื ืฅ ืื™ื– ืฆื• ืคืึธืจืŸ ื“ื™ ื ืืžืขืŸ "-challenge" ืึธื“ืขืจ "-schallenge:passwd", ื•ื•ืึธืก ืื™ื– ื“ืขืžืึธืœื˜ ื™ื ื˜ืขืจืคึผืจืึทื˜ืึทื“ ื ื™ืฉื˜ ื•ื•ื™ ืึท ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ, ืึธื‘ืขืจ ื•ื•ื™ ืึทืŸ ืึธืคึผืฆื™ืข. ื ืึธืš ื“ืขื, ื“ื™ ืกื™ืกื˜ืขื ืึทืงืกืขืคึผืฅ ืงื™ื™ืŸ ืคึผืึทืจืึธืœ. ืฉืคึผื™ืจืขื•ื•ื“ื™ืง, ื“.ื”. ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, ืึทื ืึธื˜ืขืจื™ื™ื–ื“ ืึทืงืกืขืก ืื™ื– ืขืจืœื•ื™ื‘ื˜ ื“ื•ืจืš ื“ื™ ืกืขืจื•ื•ื™ืกืขืก smtpd, ldapd, radiusd. ื“ื™ sshd ืกืขืจื•ื•ื™ืก ืงืขืŸ ื ื™ืฉื˜ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“, ื•ื•ื™ื™ึทืœ sshd ื‘ืืžืขืจืงื˜ ืึทื– ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ "-challenge" ื˜ื•ื˜ ื ื™ืฉื˜ ืขืงืกื™ืกื˜ื™ืจืŸ. ื“ื™ ืกื• ืคึผืจืึธื’ืจืึทื ืงืจืึทืฉื™ื– ื•ื•ืขืŸ ืขืก ืคืจื•ื•ื•ื˜ ืฆื• ื’ื•ื•ื•ืจืข ืขืก, ื•ื•ื™ื™ึทืœ ืขืก ืื•ื™ืš ืคืจื•ื•ื•ื˜ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ื“ื™ ื™ื•ื“ ืคื•ืŸ ืึท ื ื™ื˜-ืขื’ื–ื™ืกื˜ืึทื ื˜ ื‘ืึทื ื™ืฆืขืจ.

ืคืืจืฉื™ื™ื“ืขื ืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืื•ื™ืš ื“ื™ืกืงืœืึธื•ื–ื“ ืื™ืŸ Xlock, ืื™ืŸ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื“ื•ืจืš S/Key ืื•ืŸ Yubikey, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ืกื•, ื ื™ื˜ ืฉื™ื™ึทื›ื•ืช ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ "-ื”ืึธืœื“ืขืจื•ื ื’" ื‘ืึทื ื™ืฆืขืจ. ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ xlock ืึทืœืึทื•ื– ืึท ื ืึธืจืžืึทืœ ื‘ืึทื ื™ืฆืขืจ ืฆื• ืขืกืงืึทืœื™ื™ื˜ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืฆื• ื“ื™ ืึทื•ื˜ื” ื’ืจื•ืคึผืข. ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืขืกืงืึทืœื™ื™ื˜ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืคื•ืŸ ื“ื™ ืึทื•ื˜ื” ื’ืจื•ืคึผืข ืฆื• ื“ืขืจ ื•ื•ืึธืจืฆืœ ื‘ืึทื ื™ืฆืขืจ ื“ื•ืจืš ืคืึทืœืฉ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ S/Key ืื•ืŸ Yubikey ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืžืขืงืึทื ื™ื–ืึทืžื–, ืึธื‘ืขืจ ื“ืึธืก ืงืขืŸ ื ื™ืฉื˜ ืึทืจื‘ืขื˜ืŸ ืื™ืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ OpenBSD ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื•ื•ื™ื™ึทืœ S/Key ืื•ืŸ Yubikey ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื–ืขื ืขืŸ ืคืึทืจืงืจื™ืคึผืœื˜. ืฆื•ื ืกื•ืฃ, ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืกื• ืึทืœืึทื•ื– ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืฆื• ืคืึทืจื’ืจืขืกืขืจืŸ ืœื™ืžืึทืฅ ืื•ื™ืฃ ืกื™ืกื˜ืขื ืจืขืกื•ืจืกืŸ, ืึทื–ืึท ื•ื•ื™ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืขืคืขื ืขืŸ ื˜ืขืงืข ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก.

ืื™ืŸ ื“ืขื ืžืึธืžืขื ื˜, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜, ื–ื™ื›ืขืจื”ื™ื™ื˜ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื–ืขื ืขืŸ ื‘ืืจืขื›ื˜ื™ื’ื˜ ื“ื•ืจืš ื“ื™ ื ืึธืจืžืึทืœ syspatch (8) ืžืขืงืึทื ื™ื–ืึทื.

ืžืงื•ืจ: linux.org.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster