Iphrojekthi ye-Wifibox 0.10 isiyatholakala, okuhloswe ngayo ukuxazulula inkinga ye-FreeBSD isebenzisa ama-adaptha angenawaya lapho abashayeli abadingekayo bengekho. Ukusebenza kwama-adaptha ayinkinga ku-FreeBSD kuqinisekiswa ngokwethula isistimu yezivakashi ene-Linux, lapho abashayeli bomdabu be-Linux bamadivayisi angenantambo balayishwa khona.
Ukufakwa kwesistimu yezivakashi enabashayeli kuyazenzakalela, futhi zonke izingxenye ezidingekayo zipakishwa ngendlela yephakheji ye-wifibox esenziwe ngomumo, eyethulwa ekubhuthini kusetshenziswa isevisi ye-rc efakiwe. Kubandakanya ukushintshela kumodi yokulala kuphathwa ngendlela efanele. Indawo ingase isetshenziselwe noma imaphi amakhadi e-WiFi asekelwa ku-Linux, kodwa ihlolwe kakhulukazi kuma-Intel chips. Ukusebenza okulungile kubuye kwahlolwa kumasistimu ane-Qualcomm Atheros kanye ne-AMD RZ608 (MediaTek MT7921K) yama-chips angenantambo.
Isistimu yesivakashi yethulwa kusetshenziswa i-Bhyve hypervisor, ehlela ukudlulisela phambili ukufinyelela ekhadini elingenantambo. Idinga isistimu esekela i-hardware virtualization (AMD-Vi noma i-Intel VT-d). Isistimu yesivakashi isekelwe ekusabalaliseni kwe-Alpine Linux, eyakhelwe phezu kwesisekelo selabhulali yesistimu ye-Musl kanye nesethi yezinsiza ze-BusyBox. Usayizi wesithombe uthatha cishe u-30MB kudiski futhi udla cishe u-90MB we-RAM.
Ukuze uxhume kunethiwekhi engenantambo, kusetshenziswa iphakheji ye-wpa_supplicant, amafayela okumisa avumelaniswa nezilungiselelo ezivela endaweni eyinhloko ye-FreeBSD. Isokhethi yokulawula ye-Unix edalwe ngu-wpa_supplicant idluliselwa endaweni yokusingatha, ekuvumela ukuthi usebenzise izinsiza ezijwayelekile ze-FreeBSD ukuze uxhume futhi usebenze nenethiwekhi engenantambo, okuhlanganisa izinsiza ze-wpa_cli kanye ne-wpa_gui (net/wpa_supplicant_gui).
Ekukhishweni okusha, indlela yokudlulisela i-WPA endaweni eyinhloko iklanywe kabusha, okwenze kwaba nokwenzeka ukusebenza nakho kokubili i-wpa_supplicant kanye ne-hostapd. Inani lememori elidingekayo kusistimu yesivakashi lehlisiwe. Ukusekelwa kwe-FreeBSD 13.0-RELEASE kunqanyuliwe.
Ukwengeza, singawubona umsebenzi wokuthuthukisa abashayeli abanikezwa ku-FreeBSD amakhadi angenawaya kuma-Intel ne-Realtek chips. Ngokusekelwa i-FreeBSD Foundation, ukuthuthukiswa komshayeli omusha we-iwlwifi ofakwe ku-FreeBSD 13.1 kuyaqhubeka. Umshayeli usekelwe kumshayeli we-Linux kanye nekhodi evela ku-net80211 Linux subsystem, isekela izinga le-802.11ac futhi ingasetshenziswa nama-Intel ama-chips amasha. Umshayeli ulandwa ngokuzenzakalelayo ngesikhathi sokuqalisa lapho ikhadi elidingekayo elingenantambo litholwa. Izingxenye zesitaki se-Linux ezingenantambo zinikwe amandla kusetshenziswa isendlalelo se-LinuxKPI. Phambilini, umshayeli we-iwm wayethuthelwe iFreeBSD ngendlela efanayo.
Ngokuhambisanayo, ukuthuthukiswa kwabashayeli i-rtw88 kanye ne-rtw89 ye-Realtek RTW88 kanye ne-RTW89 yama-chips angenantambo kwaqala, nawo athuthukiswayo ngokudlulisela abashayeli abahambisanayo besuka ku-Linux futhi basebenze kusetshenziswa isendlalelo se-LinuxKPI. Umshayeli we-rtw88 ulungele ukuhlolwa kokuqala, kuyilapho umshayeli we-rtw89 esathuthukiswa.
Ngaphezu kwalokho, singasho ukushicilelwa kwemininingwane kanye nokuxhashazwa osekwenziwe kakade okuhlobene nokuba sengozini (CVE-2022-23088) kusitaki esingenantambo se-FreeBSD, esalungiswa kusibuyekezo sika-April. Ukuba sengozini kukuvumela ukuthi usebenzise ikhodi yakho ezingeni le-kernel ngokuthumela ifremu eklanywe ngokukhethekile ngenkathi iklayenti likumodi yokuskena kwenethiwekhi (esiteji ngaphambi kokubophezela kwe-SSID). Inkinga ibangelwa ukuchichima kwebhafa kumsebenzi othi ieee80211_parse_beacon() lapho kuncozululwa amafreyimu ebhikhoni adluliswa indawo yokufinyelela. Ukuchichima kudalwe ukuntuleka kokuhlola ukuthi usayizi wedatha wangempela ufana nosayizi oshiwo kunkambu kanhlokweni. Inkinga ivela ezinguqulweni zeFreeBSD ezakhiwe kusukela ngo-2009.
Izinguquko zakamuva ku-FreeBSD ezingahlobene nesitaki esingenantambo zifaka phakathi: ukwenziwa kahle kwesikhathi sokuqalisa, esincishiswe sisuka kumasekhondi ayi-10 kuye kwayi-8 kusistimu yokuhlola; isibhamu semojula ye-GEOM sisetshenziswe ukuze kudluliselwe izinguquko ezenziwe phezu kwediski efinyeleleka ngemodi yokufunda kuphela kwenye idiski; Nge-crypto API ye-kernel, i-cryptographic primitives XChaCha20-Poly1305 AEAD kanye ne-curve25519, edingekayo kumshayeli we-VPN WireGuard, isilungisiwe.
Source: opennet.ru