Ukukhishwa kwe-IWD 2.0, iphakheji yokuhlinzeka ngoxhumo lwe-Wi-Fi ku-Linux

Ukukhishwa kwe-Wi-Fi daemon IWD 2.0 (iNet Wireless Daemon), ethuthukiswe yi-Intel njengenye indlela yekhithi yamathuluzi ye-wpa_supplicant yokuhlela ukuxhunywa kwezinhlelo ze-Linux kunethiwekhi engenantambo, kuyatholakala. I-IWD ingasetshenziswa iyodwa noma njengesipele se-Network Manager kanye ne-ConnMan network configurators. Iphrojekthi ilungele ukusetshenziswa kumadivayisi ashumekiwe futhi yenzelwe inkumbulo encane kanye nokusetshenziswa kwesikhala sediski. I-IWD ayisebenzisi imitapo yolwazi yangaphandle futhi ifinyelela kuphela amakhono anikezwe i-Linux kernel evamile (i-Linux kernel ne-Glibc kwanele ukusebenza). Ihlanganisa ukuqaliswa kwayo kweklayenti le-DHCP kanye nesethi yemisebenzi ye-cryptographic. Ikhodi yephrojekthi ibhalwe ngo-C futhi ilayisensi ngaphansi kwe-LGPLv2.1.

Ukukhishwa okusha kunikeza izinto ezintsha ezilandelayo:

  • Usekelo olungeziwe lokumisa amakheli, amasango nemizila yamanethiwekhi e-IPv4 kanye ne-IPv6 (usebenzisa i-iwd ngaphandle kokusebenzisa izinsiza ezengeziwe).
  • Kungenzeka ukushintsha ikheli le-MAC ekuqaleni.
  • Kukhona uhlu lwamaphoyinti okufinyelela angasetshenziselwa ukuzulazula (ngaphambilini, indawo eyodwa yokufinyelela esebenza kahle kakhulu yakhethelwa ukuzulazula, kodwa manje uhlu luyagcinwa, lubekwe ku-BSS, ukuze ukhethe ngokushesha izindawo zokufinyelela eziyisipele uma kwenzeka ukwehluleka ukuxhuma kwekhethiwe).
  • Kusetshenziswe ukulondoloza isikhashana futhi kuqaliswe kabusha amaseshini e-TLS e-EAP (Iphrothokholi Yokuqinisekisa Eyengeziwe).
  • Kungezwe usekelo lwama-ciphers anokhiye abangu-256-bit.
  • Ukuqaliswa kwemodi yephoyinti lokufinyelela kungeze usekelo lokuqinisekisa amaklayenti kusetshenziswa ifa le-TKIP (I-Temporal Key Integrity Protocol). Ushintsho luvumele usekelo lwezingxenyekazi zekhompuyutha ezindala ezingasekeli ama-cipher ngaphandle kwe-TKIP.

Source: opennet.ru

Engeza amazwana