Baaritaanka diidmada Squid ee hoos yimaada SELinux
Kala sooc xeerarka gelitaanka Squid, fasaxyada nidaamka faylka, calaamadaha dekedda iyo diidmada siyaasadda amniga ee martigeliyaha ka hor intaadan beddelin dhaqangelinta.
Diidmada gelitaanka HTTP ee uu Squid soo saaro iyo “Permission denied” ee nidaamka hawlgalka waxay dhacaan xadad kala duwan. Go'aanso in Squid furayo fayl, xidhayo socket, ku xirmayo bannaanka ama diidayo codsiga macmiilka.
Isku xidh dhacdada hubinta
Nidaamyada SELinux, isku waafaji khaladka adeegga iyo diiwaanka hubintiisa. Domainka isha, nooca bartilmaameedka, fasalka shayga iyo fasaxa la diiday waxay muujinayaan hawlgalka siyaasaddu xannibtay. Milkiyadda Unix ee saxda ah ma caddeyso in calaamadda amnigu ku habboon tahay.
Dekedda dhegeysiga gaarka ah waxay u baahan kartaa calaamadda dekedda u dhiganta. Galka log ama kaydka la raray waxay u baahan kartaa calaamadaynta faylalka. Khalka jidka log ee Squid, sidoo kale hubi gudbinta galka iyo fasaxyada qoraaga ka hor intaadan u nisbayn calaamad. Fasaxa adeeg baxsan oo aan caadi ahayn waa hawlgalkale; tusaalooyinka Squid SELinux ee Red Hat way kala soocaan kiisaskan.
Isticmaal siyaasadda qaybinta rakiban iyo hagidda maamulka. Wadooyinka xirmada, calaamadaha iyo xaddidnaanta way kala duwanaan karaan sawirrada dhexdooda. Nidaamyada isticmaala AppArmor, baadh profaylkeeda halkii aad ka dhaqan gelin lahayd amarrada SELinux.
Sax siyaasadda ama goobta caddayntu tilmaamayso, adigoo ilaalinaya dhaqangelinta martigeliyaha. Hubinta macmiilka iyo xeerarka gelitaanka Squid laftiisu weli way khusaan ka dib markii dhibaatada siyaasadda martigeliyaha la hagaajiyay.