Ukuhlola ukwenqatshwa kwe-Squid ngaphansi kwe-SELinux
Hlukanisa imithetho yokufinyelela ye-Squid, izimvume zesistimu yamafayela, amalebula ephothi kanye nokwenqatshwa komgomo wokuphepha we-host ngaphambi kokushintsha ukuphoqelela.
Ukwenqatshwa kokufinyelela kwe-HTTP okukhiqizwa yi-Squid kanye ne-“Permission denied” yesistimu yokusebenza kwenzeka emingceleni ehlukene. Thola ukuthi i-Squid yayivula ifayela, ibopha i-socket, ixhuma ngaphandle noma inqaba isicelo sekhasimende.
Hlanganisa umcimbi wokucwaninga
Kuzinhlelo ze-SELinux, fanisa iphutha lesevisi nerekhodi layo lokucwaninga. Isizinda somthombo, uhlobo lwelitshe, ikilasi lento kanye nemvume enqatshiwe kukhombisa ukuthi yimuphi umsebenzi ovimbwe umgomo. Ubunikazi be-Unix obulungile abufakazeli ukuthi ilebula lokuphepha lifanele.
Iphothi yokulalela yangokwezifiso ingase idinge ilebula lephothi elihambisanayo. Idikhishini yelogi noma yekheshi esusiwe ingase idinge ukulebulwa kwamafayela. Ekwehlulekeni komzila welogi we-Squid, hlola futhi ukudlula kwedikhishini nezimvume zombhali ngaphambi kokukhomba ilebula. Imvume yesevisi ephumayo engavamile ingomunye umsebenzi futhi; izibonelo ze-Squid SELinux ze-Red Hat zihlukanisa lezi zimo.
Sebenzisa umgomo wokusabalalisa ofakiwe kanye nesiqondiso sokuphatha. Izindlela zamaphakethe, amalebula kanye nokuvinjwa kungahluka phakathi kwezithombe. Ezinhlelweni ezisebenzisa i-AppArmor, hlola iphrofayela yayo esikhundleni sokusebenzisa imiyalo ye-SELinux.
Lungisa umgomo noma indawo okukhonjwa ubufakazi ngenkathi ugcina ukuphoqelela ku-host. Ukuqinisekiswa kwekhasimende kanye nemithetho yokufinyelela ye-Squid uqobo kusasebenza ngemva kokulungiswa kwenkinga yomgomo we-host.