I-RusBITech-Astra LLC yethule ikhithi yokusabalalisa enezinhloso ezikhethekile Astra Linux Uhlelo Olukhethekile 1.8, olungasetshenziswa ukuvikela ulwazi oluyimfihlo kanye nezimfihlo zesifundazwe kuze kufike ezingeni "lokubaluleka okukhethekile". Ukusatshalaliswa kusekelwe kusizindalwazi sephakheji. Debian i-GNU/Linux futhi iqukethe izindlela zokuphepha ezengeziwe, njengohlelo lokulawula ukufinyelela oluyimpoqo oluyimfihlo, ukuhlolwa kwamabhuku, ubuqotho bamafayela, kanye nokuqapha ubuqiniso (i-PARSEC), ukususwa kwamafayela okuqinisekisiwe, kanye ne-kernel eyakhiwe ngama-patches okuphepha. Indawo yomsebenzisi yakhelwe endaweni yedeskithophu ye-Fly eyimfihlo enezingxenye ezisebenzisa umtapo wezincwadi we-Qt.
Ukusatshalaliswa kusatshalaliswa ngaphansi kwesivumelwano selayisense, esibeka imikhawulo eminingana kubasebenzisi. Ikakhulukazi, ukusetshenziswa kwezentengiselwano ngaphandle kwesivumelwano selayisense, ukuhlukaniswa, kanye nokuhlukaniswa komkhiqizo akuvunyelwe. Okwangempela, kwaklanywa ngokukhethekile Astra Linux, ama-algorithms okusebenza, kanye namakhodi omthombo ahlukaniswa njengezimfihlo zokuhweba. Umsebenzisi unikezwa ilungelo lokuphinda akhiqize ikhophi eyodwa kuphela yomkhiqizo kukhompyutha eyodwa noma umshini obonakalayo, futhi inikeza ilungelo lokwenza ikhophi eyodwa kuphela yokusekelayo yemidiya yomkhiqizo. Ukwakhiwa kokufakwa okuphelele akukatholakali emphakathini, kodwa izithombe zesitsha kanye imishini ebonakalayo.
Ukukhululwa kuphumelele ngempumelelo isethi yokuhlolwa ohlelweni lokuqinisekisa ukuphepha kolwazi lwe-FSTEC yaseRussia ekuqaleni, izinga eliphezulu lokuthembela, i.e. ingasetshenziswa ukucubungula ulwazi olwakha imfihlo yezwe "yokubaluleka okukhethekile". Isitifiketi siqinisekisa ukuhambisana nezidingo zokuphepha zamasistimu okusebenza, amathuluzi e-virtualization kanye nama-container, kanye ne-DBMS.
Izinguquko eziyinhloko:
- Isizindalwazi sephakheji sibuyekeziwe ku- Debian 12.
- Kunamaphakheji amabili e-kernel ongakhetha kuwo. Linux, ngokusekelwe ekukhishweni okungu-6.1 no-6.6. I-Kernel 6.1 iza nezinguquko nokulungiswa okuvela ku-ISP RAS futhi izosekelwa kuyo yonke inkathi yokuphila kwe-OS. I-Kernel 6.6 ihlukaniswe njengomjikelezo wokulungisa wesikhashana.
- Kuhlongozwa amakhosombe amabili ahlukene: Ayinhloko kanye Nandisiwe. Eyokuqala ihlanganisa amaphakheji adlule umjikelezo ogcwele wezitifiketi, kanti eyesibili iqukethe amathuluzi okuthuthukisa, amaphakheji okwakha indawo yokugcina enkulu, kanye namaphakheji ezinhlelo zokusebenza ezengeziwe kanye nesistimu.
- Isifaki esisha, i-astra-installer, sisetshenziswa, esiqaliswa ngemva kokuqalisa kwesistimu kumodi ebukhoma. Isilawuli kude sokufakwa sisekelwa kusetshenziswa iphrothokholi ye-VNC.
- Inqubo yokuvuselela kusuka egatsheni iye yenziwa ngokuzenzakalelayo Astra Linux 1.7 ukuze kukhishwe i-1.8, uma kwenzeka kuba nezinkinga ngesikhathi sokubuyekeza, kungenzeka ukubuyela esimweni sangaphambilini.
- Kusetshenziswa isikimu sokunikeza amagama angabikezelwa kuzixhumi ezibonakalayo zenethiwekhi.
- Iseva ye-Kea DHCP ifakiwe.
- Isixhumi esibonakalayo sokuphatha uhlelo lwe-fly-admin-smc sithathelwe indawo ithuluzi le-astra-systemsettings, elinikeza ukufinyelela kumamojula wezilungiselelo ahlukahlukene. Phakathi kwezinye izinto, imojula yokuphatha inqubomgomo yokuphepha yendawo ihlanganisiwe, engadingi ukuqhuba uhlelo oluhlukile lwe-fly-admin-smc. Amamojula nawo ayatholakala ekuphathweni komsebenzisi, ukulawula ukufinyelela okuyisibopho, ukulawula ubuqotho okuyisibopho, ukuqapha ubuqotho befayela kusetshenziswa amasiginesha edijithali, ukusetha uhlelo lokucwaningwa kwamabhuku, ukubala amadrayivu axhunyiwe, ukusetha ukusula inkumbulo, ukunika amandla imodi ye-kiosk eyingcaca, kanye nokuhlola isimo sokuphepha. imisebenzi.
- Amaphrofayili okucushwa asevele enziwe anconyiwe wamathuluzi okuvikela ulwazi asetshenziselwe izimo ezahlukahlukene zokusetshenziswa. Ngaphambilini, ukuze kuhambisane nezigaba zokuphepha ezihlukahlukene zezinhlelo, kwanikezwa imiyalelo yokumisa edinga umsebenzi wezandla ngumlawuli. Enguqulweni entsha, inqubo yokushintsha izilungiselelo iyazenzakalela.
- Ukuze kuqashwe ngamandla ubuqotho besofthiwe, ikhono lokusebenzisa i-CIPF CryptoPro CSP nezitifiketi zokuqinisekisa amasiginesha edijithali akhishwe isiphathimandla sokunikeza izitifiketi lengeziwe.
- Isitayela esisha sokuklama se-Astra Proxima sihlongozwa, esibonisa izitayela zesimanje ekwakhiweni kwesixhumi esibonakalayo, kodwa ngesikhathi esifanayo silondoloza umklamo ojwayelekile kanye ne-minimalism. Izindlela ezine zokuklama ziyatholakala: ukukhanya, okumnyama, okwenziwe lula (ngaphandle kwemiphumela yezithombe) kanye nokusetshenziswa.
- Imenyu yohlelo lokusebenza yenziwe yesimanje futhi yahlelwa kabusha (kungenzeka ukuthi ubuyele kumenyu yakudala).
- Kwengezwe itimu yomsindo ethi "Star Minimalism", edalwe ngokubamba iqhaza kwe-Roscosmos ngokusekelwe kumsindo ovela ezintweni zasemkhathini wangempela.
- Iphakheji ye-fly-dm-rdp yengeziwe ukuze kuhlelwe ukuxhumeka okukude kusistimu ngephrothokholi ye-RDP.
- Umphathi wefayela le-fly-fm wengeze umhleli webha yamathuluzi kanye nekhono lokubonisa izinsiza zenethiwekhi ezikhweziwe kuphaneli yokuzulazula. Kumodi yamaphaneli amabili, imigqa yekheli emibili engazimele iyasetshenziswa.
- Iphakheji ye-OpenSSL ibuyekezelwe kunguqulo 3.2.0.
- I-Tantor DBMS ibuyekezelwe kusisekelo sekhodi ye-PostgreSQL 15 (ngaphambilini i-PostgreSQL 11 yayisetshenziswa) kanye nezengezo zokuvikela ulwazi nokulawula ukufinyelela. * Iziphequluli ze-Chromium, i-Chromium-gost ne-Firefox zinesitifiketi esakhelwe ngaphakathi esivela esikhungweni sokunikeza izitifiketi soMnyango Wokuthuthukiswa Kwedijithali we-Russian Federation.
- Ukusekelwa okwengeziwe kwezifinyezo zemishini ebonakalayo ene-UEFI, ukuthekelisa/ukungenisa kwemishini ebonakalayo enezifinyezo, kwakha amakhophi ayisipele emishini ebonakalayo esebenzisa i-virtnbdbackup, okuhlanganisa imishini ebonakalayo ibe ngamaqembu ku-virt-manager.
- Amathuluzi okulawula ubuqotho okuyisibopho asebenzisa ikhono lokusebenzisa izinga lobuqotho lesigaba, lapho impande yesistimu yefayela nazo zonke izinto zefayela ngemva kokufakwa zinobuqotho bomugqa onguziro, futhi izinto zefayela nezinqubo eziqalisiwe zingabelwa ubuqotho bomugqa ongalungile.
- Kwengezwe ikhono lokuqapha ubuqotho bezinto zesistimu yefayela namaphakheji e-deb asekelwe kuzifanekiso, okuyizinhlu zamafayela okufanele ahlolwe kusetshenziswa amasheke.
- Amalungelo amasha angeziwe: cap_perfmon (ivumela ukusetshenziswa kwezinhlelo zokuqapha), i-cap_bpf (ivumela okunye ukusebenza nge-BPF), i-cap_checkpoint_restore (ikuvumela ukuthi unqume i-PID eyabelwe inqubo elandelayo edalwe ngaphakathi kwendawo yamagama).
Source: opennet.ru
