ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื›ืจืึธื ื™ืฉ

ะ’ ื›ืจืึธื ื™, ืึทืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ NTP ืคึผืจืึธื˜ืึธืงืึธืœ ื’ืขื ื™ืฆื˜ ืฆื• ืกื™ื ื’ืงืจืึทื ื™ื™ื– ื“ื™ ืคึผื™ื ื˜ืœืขืš ืฆื™ื™ื˜ ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-14367), ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ืึธื•ื•ื•ืขืจืจื™ื™ื˜ ืงื™ื™ืŸ ื˜ืขืงืข ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื ืžื™ื˜ ืึทืงืกืขืก ืฆื• ื“ื™ ื”ื™ื’ืข ืึทื ืคึผืจื™ื•ื•ื™ืœื™ื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืงืขื ืขืŸ ื‘ืœื•ื™ื– ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ื“ื™ ื‘ืึทื ื™ืฆืขืจ ื›ืจืึธื ื™ืฉ, ื•ื•ืึธืก ืจืึทื“ื•ืกืึทื– ื–ื™ื™ึทืŸ ื’ืขืคืึทืจ. ืึธื‘ืขืจ, ื“ื™ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืงืึทืžืคึผืจืึทืžื™ื™ื–ื™ื– ื“ื™ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜ ืžื“ืจื’ื” ืื™ืŸ ื›ืจืึธื ื™ืฉ ืื•ืŸ ืงืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ืื•ื™ื‘ ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ืงืึธื“ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ื ืึธืš ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ื–ืขื ืขืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืึทื ืกื™ื™ืฃ ืฉืึทืคื•ื ื’ ืคื•ืŸ ืึท ืคึผื™ื“ ื˜ืขืงืข, ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ื‘ืืฉืืคืŸ ืื™ืŸ ืึท ื‘ื™ื ืข ื•ื•ืขืŸ Chrony ื”ืื˜ ื ื™ืฉื˜ ื ืึธืš ื‘ืึทืฉื˜ืขื˜ื™ืง ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื•ืŸ ืื™ื– ืคืœื™ืกื ื“ื™ืง ื•ื•ื™ ื•ื•ืึธืจืฆืœ. ืื™ืŸ ื“ืขื ืคืึทืœ, ื“ื™ /run/chrony ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ, ืื™ืŸ ื•ื•ืึธืก ื“ื™ ืคึผื™ื“ ื˜ืขืงืข ืื™ื– ื’ืขืฉืจื™ื‘ืŸ, ืื™ื– ื’ืขื•ื•ืขืŸ ื‘ืืฉืืคืŸ ืžื™ื˜ ืจืขื›ื˜ 0750 ื“ื•ืจืš systemd-tmpfiles ืึธื“ืขืจ ื•ื•ืขืŸ chronyd ืื™ื– ืœืึธื ื˜ืฉื˜ ืื™ืŸ ืคืึทืจื‘ืึทื ื“ ืžื™ื˜ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืื•ืŸ ื’ืจื•ืคึผืข "chrony". ืื–ื•ื™, ืื•ื™ื‘ ืื™ืจ ื”ืึธื‘ืŸ ืฆื•ื˜ืจื™ื˜ ืฆื• ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื›ืจืึธื ื™, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื“ื™ ืคึผื™ื“ ื˜ืขืงืข /run/chrony/chronyd.pid ืžื™ื˜ ืึท ืกื™ืžื‘ืึธืœื™ืฉ ืœื™ื ืง. ื ืกื™ืžื‘ืึธืœื™ืฉ ืœื™ื ืง ืงืขื ืขืŸ ืคื•ื ื˜ ืฆื• ืงื™ื™ืŸ ืกื™ืกื˜ืขื ื˜ืขืงืข ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ ื•ื•ืขืŸ Chronyd ืื™ื– ืœืึธื ื˜ืฉื˜.

ื•ื•ืึธืจืฆืœ # ืกื™ืกื˜ืขืืงื˜ืœ ื”ืึทืœื˜ืŸ chronyd.service
root # sudo -u chrony /bin/bash

chrony$ cd /run/chrony
chrony$ ln -s /etc/shadow chronyd.pid
ื›ืจื•ื ื™$ ืึทืจื•ื™ืกื’ืึทื ื’

root # /usr/sbin/chronyd -n
^C
# ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ /etc/shadow, ื“ื™ Chronyd ืคึผืจืึธืฆืขืก ืฉื™ื™ึทืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืจืื˜ืขื•ื•ืขื˜
ื•ื•ืึธืจืฆืœ # ืงืึทืฅ / ืขื˜ืง / ืฉืึธื˜ืŸ
15287

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืื™ืŸ ืึทืจื•ื™ืกื’ืขื‘ืŸ ื›ืจื•ื ื™ 3.5.1. ืคึผืขืงืœ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื•ื•ืึธืก ืคืึทืจืจื™ื›ื˜ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื–ืขื ืขืŸ ื‘ืืจืขื›ื˜ื™ื’ื˜ ืคึฟืึทืจ ืคืขื“ืึธืจืึท. ืื™ืŸ ื“ืขื ืคึผืจืึธืฆืขืก ืคื•ืŸ ืคึผืจื™ืคึผืขืจื™ื ื’ ืึท ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืคึฟืึทืจ rhel, ื“ืขื‘ื™ืึทืŸ ะธ ื•ื‘ื•ื ื˜ื•.

SUSE ืื•ืŸ openSUSE ืคึผืจืึธื‘ืœืขื ื ื™ื˜ ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ, ื–ื™ื ื˜ ื“ื™ ืกื™ืžื‘ืึธืœื™ืฉ ืœื™ื ืง ืคึฟืึทืจ ื›ืจืึธื ื™ ืื™ื– ื‘ืืฉืืคืŸ ื’ืœื™ื™ึทืš ืื™ืŸ ื“ื™ / ืœื•ื™ืคืŸ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ, ืึธืŸ ื ื™ืฆืŸ ื ืึธืš ืกื•ื‘ื“ื™ืจืขืงื˜ืึธืจื™ืขืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’