Ukusatshalaliswa kwe-Whonix 18.2, okuhlose ukuhlinzeka ngokungaziwa okuqinisekisiwe, ukuphepha, kanye nokuvikelwa kobumfihlo, sekukhishwe. Ukusatshalaliswa kusekelwe ku- Debian i-GNU/Linux futhi isebenzisa i-Tor ukuqinisekisa ukungaziwa. Umsebenzi wephrojekthi unelayisensi ngaphansi kwelayisensi ye-GPLv3. Izithombe ziyatholakala ukuze zilandwe. imishini ebonakalayo ngefomethi ye-ova ye-VirtualBox (2.6 GB ene-LXQt kanye ne-1.5 GB console) kanye ne-qcow2 ye-KVM hypervisor (4 GB ene-LXQt kanye ne-2.3 GB console).
Isici esihlukile se-Whonix ukuhlukaniswa kokusabalalisa kube izingxenye ezimbili ezisebenzisekayo ezihlukene: i-Whonix-Gateway, esebenzisa isango lenethiwekhi lokuxhumana okungaziwa, kanye ne-Whonix-Workstation, equkethe ideskithophu. Izingxenye ziyizindawo zesistimu ezihlukene, ezilethwa ngaphakathi kwesithombe esisodwa sokuqalisa futhi zisebenza ezindaweni ezahlukene. imishini ebonakalayoUkufinyelela kunethiwekhi kusuka endaweni ye-Whonix-Workstation kungenzeka kuphela nge-Whonix-Gateway, ehlukanisa indawo yokusebenza ekusebenzisaneni okuqondile nomhlaba wangaphandle futhi ivumela kuphela ukusetshenziswa kwamakheli enethiwekhi angamanga. Le ndlela ivikela umsebenzisi ekuvuthweni kwedatha yangempela. Amakheli e-IP uma kwenzeka isiphequluli sewebhu sigqekeziwe noma ubuthakathaka busetshenziswa kabi obunikeza umhlaseli ukufinyelela kwezimpande ohlelweni.
Ukugebenga i-Whonix-Workstation kuzovumela umhlaseli ukuthi athole imingcele yenethiwekhi engelona iqiniso kuphela, njengoba imingcele ye-IP yangempela neye-DNS ifihliwe ngemuva komngcele wesango lenethiwekhi elinikwa amandla i-Whonix-Gateway, ehambisa ithrafikhi nge-Tor kuphela. Kufanele kucatshangelwe ukuthi izingxenye ze-Whonix ziklanyelwe ukusebenza ngendlela yamasistimu ezivakashi, i.e. Amathuba okuxhashazwa kobungozi obubalulekile bezinsuku ezingu-0 ezinkundleni zokuxhumana ezinganikeza ukufinyelela kusistimu yomsingathi akunakukhishwa. Ngenxa yalokhu, akunconyiwe ukusebenzisa i-Whonix-Workstation kukhompyutha efanayo njenge-Whonix-Gateway.
I-Whonix-Workstation iza nendawo yomsebenzisi ye-LXQt ngokuzenzakalelayo. Ifaka phakathi izinhlelo ezifana ne-VLC kanye ne-Tor Browser. I-Whonix-Gateway iza nesethi yezinhlelo zokusebenza zeseva, kufaka phakathi amaseva e-Apache httpd, ngnix, kanye ne-IRC, angasetshenziswa ukusebenzisa izinsizakalo ezifihliwe ze-Tor. Ukuxhuma phezu kwe-Tor kungenzeka ku-Freenet, i2p, JonDonym, SSH, kanye i-VPNUma efisa, umsebenzisi angasebenzisa i-Whonix-Gateway kuphela futhi axhume izinhlelo zakhe ezijwayelekile ngayo, okuhlanganisa Windows, okuvumela ukufinyelela okungaziwa ezindaweni zokusebenza ezikhona.
Isimo sesistimu sisekelwe ekusakazweni okuvikelwe kwe-Kicksecure, okuthuthukiswa ngesikhathi esifanayo ngabathuthukisi abafanayo futhi okwandayo Debian Izindlela ezengeziwe kanye nezilungiselelo zokuphepha okwandisiwe: I-AppArmor yokuhlukaniswa, ukufaka izibuyekezo nge-Tor, ukusebenzisa imojuli ye-tally2 PAM ukuvikela ekuqageleni iphasiwedi, ukwandisa i-entropy ye-RNG, ukukhubaza i-SUID, ukungavuli amachweba enethiwekhi ngokuzenzakalelayo, kusetshenziswa izincomo ezivela ku-KSPP (i-Kernel Self Protection Project), ukwengeza ukuvikelwa ekuphuzeni kolwazi lomsebenzi we-CPU, njll.
Izinguquko eziyinhloko:
- Ngibuyekeze indawo ye-Kicksecure ukuze ngisebenzise iphakheji ye-Sequoia-PGP (ukuqaliswa kwe-OpenPGP ku-Rust) esikhundleni se-GnuPG, futhi ngikhubaze indawo yokugcina ngokuzenzakalelayo. Debian Ithrekhi Esheshayo: Uma usebenzisa i-LXQt, ukufakwa kwe-Qps (isikhombimsebenzisi sokubuka izinqubo ezisebenzayo) kumisiwe, futhi ukwesekwa kwe-qemu:///session kungeziwe ukuze kusetshenziswe imishini ebonakalayo ngabasebenzisi abangenamalungelo.
- Kuye kwenziwa ukuhlolwa kwezokuphepha kwangaphakathi futhi sekuqalwe ukuhlolwa kwangaphandle.
- Iphakheji ye-Kloak ethuthukisiwe, esetshenziselwa ukuphikisana nokuhlonza umsebenzisi ngokusekelwe kokufakwa kwekhibhodi kanye nokunyakaza kwegundane.
- Ukusatshalaliswa kwe-Qubes-Whonix-Gateway kufaka phakathi iphakheji ye-fwupd-qubes-vm.
- Kubhalwe kabusha nguWhonix-Windows-Umfaki kanye ne-Whonix-Windows-Umqalisi.
- Ukwakhiwa okuthuthukisiwe kwamadivayisi aneziprosesa ze-Apple Silicon.
Source: opennet.ru
