SELinux Imibuzo Evame Ukubuzwa (FAQ)

Sanibonani nonke! Ikakhulukazi kubafundi bezifundo "Linux Security" silungiselele ukuhunyushwa kwe-FAQ esemthethweni yephrojekthi ye-SELinux. Kithina kubonakala sengathi lokhu kuhumusha kungase kube usizo hhayi kubafundi kuphela, ngakho sabelana ngakho nawe.

SELinux Imibuzo Evame Ukubuzwa (FAQ)

Sizamile ukuphendula eminye yemibuzo evame ukubuzwa mayelana nephrojekthi ye-SELinux. Imibuzo okwamanje ihlukaniswe izigaba ezimbili eziyinhloko. Yonke imibuzo nezimpendulo inikezwa ekhasini le-FAQ.

Uhlolojikelele

Uhlolojikelele

  1. Iyini i-Linux Ethuthukisiwe Ngokuvikeleka?
    I-Linux ethuthukisiwe yezokuphepha (SELinux) iwukuqaliswa kwereferensi yesakhiwo sokuphepha se-Flask sokulawula ukufinyelela okuguquguqukayo, okuphoqelelwe. Yakhelwe ukubonisa ukuba wusizo kwezinqubo zokuphoqelela eziguquguqukayo nokuthi lezo zindlela zingangezwa kanjani ohlelweni lokusebenza. I-Flask architecture yabe isihlanganiswa ku-Linux futhi yathunyelwa kwezinye izinhlelo eziningana, okuhlanganisa isistimu yokusebenza ye-Solaris, isistimu yokusebenza ye-FreeBSD, kanye ne-Darwin kernel, okwenza kube nohlu olubanzi lwemisebenzi ehlobene. Isakhiwo se-Flask sinikeza ukwesekwa okujwayelekile kokuphoqelela izinhlobo eziningi zezinqubomgomo zokulawula ukufinyelela, okuhlanganisa nalezo ezisekelwe emicabangweni Yokuphoqelelwa Kohlobo, Ukulawulwa Kokufinyelela Okusekelwe Endimeni, kanye Nokuphepha Kwezinga Eliningi.
  2. I-Linux ethuthukisiwe yezokuphepha inikeza ini ukuthi i-Linux ejwayelekile ayikwazi?
    I-Linux kernel ethuthukisiwe ngokuvikeleka iphoqelela izinqubomgomo zokulawula ukufinyelela eziphoqelelwayo ezikhawulela izinhlelo zabasebenzisi namaseva esistimu kusethi encane yamalungelo abawadingayo ukuze benze umsebenzi wabo. Ngalo mkhawulo, ikhono lalezi zinhlelo zabasebenzisi namadayimoni esistimu okubangela ukulimala uma kwenzeka kuba sengozini (isibonelo, ngenxa yokuchichima kwebhafa noma ukungalungiseki kahle) liyancishiswa noma liyasuswa. Le nqubo yokukhawulela isebenza ngokuzimela ezindleleni zokulawula ukufinyelela kwe-Linux evamile. Ayinawo umqondo we-superuser "impande", futhi ayihlanganyeli ngamaphutha aziwayo wezindlela zokuphepha ze-Linux ezijwayelekile (isb, ukuncika kumabhanari we-setuid/setgid).
    Ukuvikeleka kwesistimu ye-Linux engashintshiwe kuncike ekunembeni kwe-kernel, zonke izinhlelo zokusebenza ezinelungelo, kanye nokucushwa kwazo ngakunye. Inkinga kunoma iyiphi yalezi zindawo ingaphazamisa lonke uhlelo. Ngokuphambene, ukuphepha kwesistimu elungisiwe okusekelwe ku-Linux kernel ethuthukisiwe kuncike kakhulu ekunembeni kwe-kernel kanye nokucushwa kwenqubomgomo yayo yokuphepha. Nakuba izinkinga zokulunga kohlelo lokusebenza noma ukucushwa zingase zivumele ukubekelwa engozini okukhawulelwe kwezinhlelo zomsebenzisi ngamunye namadayimoni esistimu, azibeki engcupheni yokuvikeleka kwezinye izinhlelo zabasebenzisi namadayimoni esistimu noma ekuvikelekeni kwesistimu lilonke.
  3. Ulungele ini?
    Izici ezintsha ezithuthukisiwe zokuvikela ze-Linux ziklanyelwe ukuhlinzeka ngokuhlukaniswa kolwazi ngokusekelwe kumfihlo kanye nezidingo zobuqotho. Zenzelwe ukuvimbela izinqubo ekufundeni idatha nezinhlelo, ukuphazamisa idatha nezinhlelo, ukweqa izindlela zokuphepha zohlelo lokusebenza, ukwenza izinhlelo ezingathenjwa, noma ukuphazamisa ezinye izinqubo eziphula inqubomgomo yokuphepha yesistimu. Futhi zisiza ukukhawulela umonakalo ongaba khona ongadalwa uhlelo olungayilungele ikhompuyutha noma izinhlelo ezingalungile. Kufanele futhi zibe wusizo ekuqinisekiseni ukuthi abasebenzisi abanezimvume ezihlukene zokuphepha bangasebenzisa isistimu efanayo ukuze bafinyelele izinhlobo ezihlukene zolwazi ezinezidingo ezihlukile zokuphepha ngaphandle kokuphazamisa lezo zidingo.
  4. Ngingayithola kanjani ikhophi?
    Ukusabalalisa okuningi kwe-Linux kufaka ukusekelwa kwe-SELinux esivele yakhelwe ngaphakathi njengesici esizenzakalelayo noma njengephakheji ozikhethela yona. Ikhodi eyisisekelo ye-SELinux yomsebenzisi iyatholakala ku- GitHub. Abasebenzisi bokugcina kufanele ngokuvamile basebenzise amaphakheji anikezwe ukusatshalaliswa kwawo.
  5. Yini efakiwe ekukhishweni kwakho?
    Ukukhishwa kwe-NSA kwe-SELinux kufaka phakathi ikhodi yendawo yomsebenzisi eyinhloko ye-SELinux. Ukusekelwa kwe-SELinux sekuvele kufakiwe ku-Linux 2.6 kernel evamile, etholakala ku-kernel.org. Ikhodi eyisisekelo ye-SELinux yomsebenzisi wezwe iqukethe ilabhulali yokukhohlisa inqubomgomo kanambambili (libsepol), umdidiyeli wenqubomgomo (checkpolicy), umtapo wolwazi wezinhlelo zokusebenza zokuphepha (libselinux), umtapo wolwazi wamathuluzi okuphatha inqubomgomo (i-libsemanage), kanye nezinsiza ezimbalwa ezihlobene nenqubomgomo ( policycoreutils).
    Ngokungeziwe ku-Kernel enikwe amandla yi-SELinux kanye nekhodi eyisisekelo yendawo yomsebenzisi, uzodinga inqubomgomo kanye namanye amaphakheji e-SELinux anamathiselwe endaweni yomsebenzisi ukuze usebenzise i-SELinux. Ipholisi ingatholakala ku Iphrojekthi yenqubomgomo yenkomba ye-SELinux.
  6. Ngingakwazi ukufaka i-Linux eqinile ohlelweni olukhona lwe-Linux?
    Yebo, ungafaka kuphela izinguquko ze-SELinux ohlelweni olukhona lwe-Linux, noma ungafaka ukusabalalisa kwe-Linux osekuvele kufaka phakathi ukwesekwa kwe-SELinux. I-SELinux iqukethe i-Linux kernel esekelwa yi-SELinux, isethi ewumsuka yamalabhulali nezinsiza, amanye amaphakheji abasebenzisi ashintshiwe, kanye nokucushwa kwenqubomgomo. Ukuze uyifake ohlelweni olukhona lwe-Linux oluntula ukwesekwa kwe-SELinux, kufanele ukwazi ukuhlanganisa isofthiwe futhi ube namanye amaphakheji wesistimu adingekayo. Uma ukusatshalaliswa kwakho kwe-Linux sekuvele kufaka usekelo lwe-SELinux, awudingi ukwakha noma ukufaka ukukhishwa kwe-NSA kwe-SELinux.
  7. Ihambisana kangakanani i-Linux ethuthukiswe ngokuvikeleka neLinux engalungiswanga?
    I-Linux ethuthukisiwe yokuvikela inikeza ukuhambisana kanambambili nezinhlelo zokusebenza ze-Linux ezikhona kanye namamojula akhona e-Linux kernel, kodwa amanye amamojula e-kernel angase adinge ukuguqulwa ukuze asebenzisane kahle ne-SELinux. Lezi zigaba ezimbili zokuhambisana zixoxwa ngokuningiliziwe ngezansi:

    • Ukuhambisana kohlelo lokusebenza
      I-SELinux inikeza ukuhambisana kanambambili nezinhlelo zokusebenza ezikhona. Sinwebe izakhiwo zedatha ye-kernel ukuze sifake izibaluli ezintsha zokuphepha futhi sengeze amakholi amasha we-API wezinhlelo zokusebenza zokuphepha. Kodwa-ke, asikashintshi noma yiziphi izakhiwo zedatha ezibonakalayo zohlelo lokusebenza, futhi asizange siguqule ukuxhumana kwanoma yiziphi izingcingo zesistimu ezikhona, ngakho-ke izinhlelo zokusebenza ezikhona zisengasebenza inqobo nje uma inqubomgomo yokuvikela izivumela.
    • Ukuhambisana kwemojuli ye-Kernel
      Ekuqaleni, i-SELinux inikeze kuphela ukuhambisana kokuqala kwamamojula akhona e-kernel; bekudingeka ukuthi kuhlanganiswe kabusha amamojula anjalo anezihloko ze-kernel eziguquliwe ukuze kuthathwe izinkambu zokuphepha ezintsha ezingezwe ezakhiweni zedatha ye-kernel. Ngenxa yokuthi i-LSM ne-SELinux manje sekuhlanganiswe ne-Linux 2.6 kernel evamile, i-SELinux manje isihlinzeka ngokuhambisana kanambambili namamojula akhona e-kernel. Nokho, amanye amamojula e-kernel angase angasebenzisani kahle ne-SELinux ngaphandle kokuguqulwa. Isibonelo, uma imojuli ye-kernel yabela ngokuqondile futhi isetha into ye-kernel ngaphandle kokusebenzisa imisebenzi evamile yokuqalisa, into ye-kernel ingase ingabi nolwazi olufanele lokuvikela. Amanye amamojula e-kernel angase futhi antule izilawuli ezifanele zokuphepha ekusebenzeni kwawo; noma yiziphi izingcingo ezikhona eziya emisebenzini ye-kernel noma imisebenzi yemvume izophinda iqalise ukuhlolwa kwemvume ye-SELinux, kodwa izilawuli ezinohlamvu oluhle kakhulu noma ezengeziwe zingadingeka ukuze kuphoqelelwe izinqubomgomo ze-MAC.
      I-Linux ethuthukisiwe yokuvikeleka akufanele idale izinkinga zokusebenzisana namasistimu e-Linux avamile uma konke ukusebenza okudingekayo kuvunyelwe ukucushwa kwenqubomgomo yezokuphepha.
  8. Iyini inhloso yesibonelo sokucushwa kwenqubomgomo yezokuphepha?
    Ezingeni eliphezulu, umgomo ukukhombisa ukuguquguquka nokuvikeleka kwezilawuli zokufinyelela eziphoqelelwe kanye nokuhlinzeka ngesistimu yokusebenza elula enezinguquko ezincane zohlelo lokusebenza. Ezingeni eliphansi, inqubomgomo inesethi yemigomo, echazwe emibhalweni yenqubomgomo. Le migomo ihlanganisa ukulawula ukufinyelela okungahluziwe kwedatha, ukuvikela ubuqotho be-kernel, isofthiwe yesistimu, ulwazi lokucushwa kwesistimu kanye namalogi esistimu, ukukhawulela umonakalo ongaba khona ongabangelwa ukuxhaphaza ubungozi enqubweni edinga amalungelo, ukuvikela izinqubo ezinelungelo ekusetshenzisweni. ikhodi enonya, vikela indima yomqondisi nesizinda ekungeneni ngemvume ngaphandle kokuqinisekisa komsebenzisi, vimbela izinqubo zabasebenzisi ezivamile ukuthi zingaphazamisi izinqubo zesistimu noma zokuphatha, futhi uvikele abasebenzisi nabalawuli ekusebenziseni ubungozi esipheqululini sabo ngekhodi yeselula enonya.
  9. Kungani i-Linux ikhethwe njengenkundla eyisisekelo?
    I-Linux yakhethwa njengenkundla yokuqaliswa kwenkomba yokuqala yalo msebenzi ngenxa yempumelelo yayo ekhulayo kanye nendawo evulekile yokuthuthuka. I-Linux inikeza ithuba elihle kakhulu lokukhombisa ukuthi lokhu kusebenza kungaba yimpumelelo kusistimu yokusebenza yokusingatha futhi, ngesikhathi esifanayo, kufaka isandla ekuvikelekeni kwesistimu esetshenziswa kakhulu. Inkundla ye-Linux iphinde inikeze ithuba elihle kakhulu lalo msebenzi ukuze uthole umbono obanzi kakhulu futhi mhlawumbe usebenze njengesisekelo socwaningo olwengeziwe lwezokuphepha olwenziwe ngabanye abathanda.
  10. Kungani wenze lo msebenzi?
    ILabhorethri Yokucwaninga Ngezokuphepha Kolwazi Kazwelonke I-Ejensi Yezokuphepha Kazwelonke inomthwalo wemfanelo wokucwaninga nokuthuthukiswa kobuchwepheshe obuthuthukile ukuze i-NSA ikwazi ukuhlinzeka ngezixazululo zokuphepha kolwazi, imikhiqizo, kanye nezinsizakalo kwingqalasizinda yolwazi ebaluleke kakhulu ezintshisakalweni zokuphepha zezwe lase-US.
    Ukudala isistimu yokusebenza evikelekile esebenzayo kuseyinselelo enkulu yocwaningo. Umgomo wethu uwukwenza i-architecture ephumelelayo enikeza ukwesekwa okudingekayo kokuvikeleka, eqhuba izinhlelo ngendlela esobala kakhulu kumsebenzisi, futhi ekhangayo kubathengisi. Sikholelwa ukuthi isinyathelo esibalulekile sokufeza lo mgomo ukukhombisa ukuthi izindlela zokulawula ukufinyelela okuphoqelekile zingahlanganiswa kanjani ngempumelelo ohlelweni oluyinhloko lokusebenza.
  11. Lokhu kuhlobana kanjani nocwaningo lwangaphambilini lwe-OS NSA?
    Abacwaningi e-National Assurance Research Laboratory ye-NSA babambisene ne-Secure Computing Corporation (SCC) ukuze bakhe ukwakhiwa kwesakhiwo esinamandla nesivumelana nezimo esisekelwe ku-Type Enforcement, indlela eqalwe uhlelo lwe-LOCK. I-NSA kanye ne-SCC bathuthukise izakhiwo ezimbili ze-prototype ezisekelwe ku-Mach: i-DTMach ne-DTOS (http://www.cs.utah.edu/flux/dtos/). I-NSA kanye ne-SCC babe sebesebenzisana ne-Flux Research Group eNyuvesi yase-Utah ukuze bathumele izakhiwo ku-Fluke Research Operating System. Phakathi nalokhu kufuduka, i-architecture iye yacwengwa ukuze inikeze ukusekela okungcono kwezinqubomgomo zokuphepha ezinamandla. Lesi sakhiwo esithuthukisiwe sethiwe iFlask (http://www.cs.utah.edu/flux/flask/). Manje i-NSA isihlanganise i-Flask architecture ohlelweni lokusebenza lwe-Linux ukuze ilethe ubuchwepheshe kumthuthukisi obanzi kanye nomphakathi wabasebenzisi.
  12. Ingabe i-Linux enokuphepha okuthuthukisiwe iyisistimu yokusebenza ethembekile?
    Inkulumo ethi "Uhlelo Oluthembekile Lokusebenza" ngokuvamile ibhekisela kusistimu yokusebenza enikeza ukusekela okwanele kokuvikeleka okunengqimba nokuqinisekisa ukuze kuhlangatshezwane nesethi ethile yezimfuneko zikahulumeni. I-Linux ethuthukiswe ukuvikeleka ihlanganisa nemininingwane ewusizo evela kulawa masistimu, kodwa igxile ekulawuleni ukufinyelela okuphoqelelwe. Umgomo wasekuqaleni wokuthuthukisa i-Linux ethuthukisiwe kwezokuphepha kwakuwukudala ukusebenza okuwusizo okunikeza izinzuzo ezibonakalayo zokuphepha ezindaweni eziningi zomhlaba wangempela ukubonisa lobu buchwepheshe. I-SELinux akuyona ngokwayo isistimu yokusebenza ethembekile, kodwa inikeza isici esibalulekile sokuphepha-ukulawula ukufinyelela okuphoqelelwe-okudingekayo kusistimu yokusebenza ethembekile. I-SELinux ihlanganiswe nokusatshalaliswa kwe-Linux okukalwe ngokuya ngePhrofayela Yokuvikela Ukuphepha Enelebula. Ulwazi mayelana nemikhiqizo ehloliwe nehloliwe ingatholakala ku http://niap-ccevs.org/.
  13. Ingabe uvikelekile ngempela?
    Umqondo wesistimu evikelekile uhlanganisa izici eziningi (isibonelo, ukuphepha ngokomzimba, ukuphepha kwabasebenzi, njll.), kanye ne-Linux enamakheli okuphepha athuthukile kuphela isethi emincane kakhulu yalezi zibaluli (okungukuthi, izilawuli zokuphoqelela zesistimu yokusebenza). Ngamanye amazwi, "isistimu evikelekile" isho ukuvikeleka ngokwanele ukuvikela ulwazi oluthile emhlabeni wangempela kusitha sangempela lapho umnikazi kanye/noma umsebenzisi wolwazi axwayiswa ngaso. I-Linux ethuthukisiwe yezokuphepha ihloselwe kuphela ukukhombisa izilawuli ezidingekayo kusistimu yokusebenza yesimanje njenge-Linux, ngakho-ke ngokwayo mancane amathuba okuthi ilingane nanoma iyiphi incazelo ethokozisayo yesistimu evikelekile. Sikholelwa ukuthi ubuchwepheshe obuboniswa ku-Linux ethuthukisiwe yezokuphepha buzoba usizo kubantu abakha amasistimu avikelekile.
  14. Wenzeni ukuthuthukisa isiqinisekiso?
    Umgomo wale phrojekthi bekuwukwengeza izilawuli zokufinyelela eziphoqelelwe ngezinguquko ezincane ku-Linux. Lo mgomo wokugcina ukhawulela kakhulu lokho okungenziwa ukuze kuthuthukiswe iwaranti, ngakho akubanga khona umsebenzi wokuthuthukisa iwaranti ye-Linux. Ngakolunye uhlangothi, ukuthuthukiswa kwakhela emsebenzini wangaphambilini wokuklama i-architecture yokuphepha ephezulu, futhi iningi lalezi zimiso zokuklama liye ladluliselwa ku-Linux ethuthukisiwe yezokuPhepha.
  15. Ingabe i-CCEVS izohlola i-Linux ngokuvikeleka okuthuthukisiwe?
    Ngokwayo, i-Linux enokuphepha okuthuthukisiwe ayakhelwe ukubhekana nesethi egcwele yezinkinga zokuphepha ezimelwe iphrofayela yezokuphepha. Nakuba kungenzeka ukuhlola kuphela ukusebenza kwayo kwamanje, sikholwa ukuthi ukuhlaziya okunjalo kungaba kwenani elilinganiselwe. Kodwa-ke, sisebenze nabanye ukufaka lobu buchwepheshe ekusabalazweni kwe-Linux okuhloliwe kanye nokusabalalisa okusahlolwayo. Ulwazi mayelana nemikhiqizo ehloliwe nehloliwe ingatholakala ku http://niap-ccevs.org/.
  16. Uke wazama ukulungisa noma yibuphi ubungozi?
    Cha, asizange sibheke noma sithole noma yibuphi ubungozi phakathi nomsebenzi wethu. Sinikele kuphela okwanele ngobuncane obungenalutho ukuze sengeze amagiya ethu amasha.
  17. Ingabe lolu hlelo lugunyaziwe ukuthi lusetshenziswe uhulumeni?
    I-Linux ethuthukiswe ukuvikeleka ayinakho ukugunyazwa okukhethekile noma okwengeziwe kokusetshenziswa kukahulumeni kunoma iyiphi enye inguqulo ye-Linux.
  18. Kwehluke kanjani lokhu kwezinye izinhlelo?
    I-Linux ethuthukisiwe ngokuvikeleka inokwakheka okuchazwe kahle kokulawulwa kokufinyelela okuphoqelelwe okuguquguqukayo okuhlolwe ngokuhlolwa ngezinhlelo ezimbalwa ze-prototype (DTMach, DTOS, Flask). Kuye kwenziwa izifundo ezinemininingwane mayelana nekhono lezakhiwo ukusekela izinqubomgomo zokuphepha eziningi futhi ziyatholakala ku- http://www.cs.utah.edu/flux/dtos/ и http://www.cs.utah.edu/flux/flask/.
    I-architecture ihlinzeka ngokulawula okuhlaziywe kahle kokudonswa kwe-kernel okuningi namasevisi angalawulwa amanye amasistimu. Ezinye zezici ezihlukanisayo zesistimu ye-Linux enokuphepha okunwetshiwe yilezi:

    • Ukwehlukaniswa okumsulwa kwenqubomgomo kumalungelo okuqinisa
    • Izixhumi ezibonakalayo zenqubomgomo ezichazwe kahle
    • Ukuzimela kuzinqubomgomo ezithile nezilimi zenqubomgomo
    • Ukuzimela kumafomethi athile kanye nokuqukethwe kwamalebula okuvikela
    • Hlukanisa Amalebula Nezilawuli Zezinto Ze-Kernel Namasevisi
    • Izinqumo Zokufinyelela Kunqolobane Zokusebenza Kahle
    • Ukusekela izinguquko zenqubomgomo
    • Ukulawula ukuqaliswa kwenqubo kanye nefa kanye nokwenziwa kohlelo
    • Phatha izinhlelo zamafayela, izinkomba, amafayela, nezincazelo zefayela ezivulekile
    • Ukuphatha amasokhethi, imilayezo nezixhumi ezibonakalayo zenethiwekhi
    • Lawula ukusetshenziswa kwe-"Amathuba"
  19. Iyini imikhawulo yamalayisensi yalolu hlelo?
    Wonke amakhodi omthombo atholakala kusayithi https://www.nsa.gov, isatshalaliswa ngaphansi kwemigomo efanayo namakhodi omthombo wangempela. Isibonelo, ukulungiswa kwe-Linux kernel nokulungiswa kwezinsiza eziningi ezikhona lapha kukhishwa ngaphansi kwemigomo. I-GNU General Public License (GPL).
  20. Ingabe zikhona izilawuli zokuthumela ngaphandle?
    Azikho izilawuli zokuthekelisa ezengeziwe ze-Linux ezinokuvikeleka okunwetshiwe uma kuqhathaniswa nanoma iyiphi enye inguqulo ye-Linux.
  21. Ingabe i-NSA ihlela ukuyisebenzisa ekhaya?
    Ngezizathu ezisobala, i-NSA ayiphawuli ngokusetshenziswa kokusebenza.
  22. Ingabe Isitatimende SangoJulayi 26, 2002 Seziqinisekiso esivela ku-Secure Computing Corporation siyashintsha ukuma kwe-NSA kokuthi i-SELinux yenziwe yatholakala ngaphansi kwe-GNU General Public License?
    Isikhundla se-NSA asikashintshi. I-NSA isakholelwa ukuthi imigomo nemibandela ye-GNU General Public License ilawula ukusetshenziswa, ukukopishwa, ukusatshalaliswa, nokuguqulwa kwe-SELinux. Cm. Ukukhishwa kwabezindaba kwe-NSA ngoJanuwari 2, 2001.
  23. Ingabe i-NSA iyayisekela isofthiwe yomthombo ovulekile?
    Izinyathelo zokuphepha zesofthiwe ye-NSA zihlanganisa kokubili isofthiwe yobunikazi neyomthombo ovulekile, futhi sisebenzise ngempumelelo kokubili amamodeli obunikazi nawomthombo ovulekile emisebenzini yethu yocwaningo. Umsebenzi we-NSA wokuthuthukisa ukuvikeleka kwesofthiwe ugqugquzelwa ukucabangela okukodwa okulula: ukusebenzisa ngokugcwele izinsiza zethu ukuze sinikeze amakhasimende e-NSA izinketho ezingcono kakhulu zokuphepha emikhiqizweni yawo esetshenziswa kakhulu. Umgomo wohlelo locwaningo lwe-NSA ukuthuthukisa intuthuko yezobuchwepheshe okungabiwa nomphakathi wokuthuthukisa isofthiwe ngokusebenzisa izindlela ezihlukahlukene zokudlulisa. I-NSA ayitusi noma iphromothe noma yimuphi umkhiqizo wesofthiwe noma imodeli yebhizinisi. Kunalokho, i-NSA ikhuthaza ukuphepha.
  24. Ingabe i-NSA iyayisekela i-Linux?
    Njengoba kuphawuliwe ngenhla, i-NSA ayitusi noma ayikhuthazi noma yimuphi umkhiqizo wesofthiwe noma inkundla; I-NSA inikela kuphela ekukhuphuleni ukuphepha. Isakhiwo se-Flask esikhonjiswe ekusetshenzisweni kwereferensi ye-SELinux sifakwe kwezinye izinhlelo zokusebenza ezimbalwa ezihlanganisa i-Solaris, i-FreeBSD, ne-Darwin, efakwe ku-Xen hypervisor, futhi yasetshenziswa ezinhlelweni ezifana ne-X Window System, i-GConf, i-D-BUS, ne-PostgreSQL. . Imiqondo ye-flask architecture isetshenziswa kabanzi ezinhlobonhlobo zezinhlelo nezindawo.

Сотрудничество

  1. Sihlela kanjani ukusebenzelana nomphakathi weLinux?
    Sine isethi yamakhasi ewebhu ku-NSA.gov, okuzosebenza njengendlela yethu eyinhloko yokushicilela ulwazi lwe-Linux oluthuthukisiwe. Uma uthanda i-Linux ngokuvikeleka okuthuthukisiwe, sikukhuthaza ukuthi ujoyine uhlu lwamakheli kanjiniyela, ubuke ikhodi yomthombo, futhi unikeze ngempendulo yakho (noma ikhodi). Ukuze ujoyine uhlu lwamakheli kanjiniyela, bona Ikhasi lohlu lokuposa lonjiniyela be-SELinux.
  2. Ubani ongasiza?
    I-SELinux manje isigcinwe futhi ithuthukisiwe ngumphakathi wesoftware ye-Linux yomthombo ovulekile.
  3. Ingabe i-NSA ixhasa noma yimuphi umsebenzi wokulandelela?
    I-NSA njengamanje ayizicabangi iziphakamiso zokuqhubeka nomsebenzi.
  4. Iluphi uhlobo losekelo olukhona?
    Sihlose ukuxazulula izinkinga ngohlu lwama-imeyili [i-imeyili ivikelwe], kodwa ngeke sikwazi ukuphendula yonke imibuzo ehlobene nesayithi elithile.
  5. Ubani owasiza? Benzeni?
    I-prototype ye-Linux ethuthukisiwe yezokuphepha yathuthukiswa yi-NSA ngozakwethu bocwaningo abavela ku-NAI Labs, Secure Computing Corporation (SCC), kanye ne-MITER Corporation. Kuningi okunye okwalandela ngemva kokukhululwa komphakathi kokuqala. Bheka uhlu lwabahlanganyeli.
  6. Ngingathola kanjani okwengeziwe?
    Sikukhuthaza ukuthi uvakashele amakhasi ethu ewebhu, ufunde imibhalo kanye namaphepha ocwaningo adlule, futhi ubambe iqhaza ohlwini lwethu lokuposa. [i-imeyili ivikelwe]

Ingabe ukuthola ukuhumusha kuwusizo? Bhala amazwana!

Source: www.habr.com

Engeza amazwana