Kuyini i-SELinux futhi izuzisa kanjani i-Android?

Ngo-Meyi 29, 2014

I-SELinux noma i-Security-Enhanced Linux iyi-module yezokuphepha ye-kernel, eyenza abasebenzisi bakwazi ukufinyelela nokuphatha izinqubomgomo eziningi zokuphepha zokulawula. Le modamu ihlukanisa ukulandelwa kwezinqumo zokuphepha ezivela ezinkambisweni eziningi zokuphepha. Ngakho-ke, indima yabasebenzisi be-SELinux ayikho ngempela ehlobene nezindima zabasebenzisi basistimu.

Ngokuyinhloko, uhlelo lunikeza indima, igama lomsebenzisi kanye nesizinda kumsebenzisi. Ngakho-ke, nakuba abasebenzisi abaningi bengabelana ngegama lomsebenzisi elifanayo le-SELinux, ukulawulwa kokufinyelela kuphethwe ngesizinda, esilungiselelwe izinqubomgomo ezahlukene. Lezi zinqubomgomo zivame ukufaka iziqondiso ezithile nezimvume, okumele umsebenzisi abe nakho ukuze athole ukufinyelela ohlelweni. Inqubomgomo evamile eyenziwe ngefayela lokumaka noma i-labeling, ifayela lomthetho kanye nefayela lokusebenzisana. Lawa mafayela ahlanganiswe namathuluzi we-SELinux anikeziwe, ukwakha inqubomgomo eyodwa yefayela. Leli fayela lilayishwa ku-kernel, ukuze likwazi ukusebenza.

Yini i-SE Android?

I-Project SE Android noma ukuthuthukiswa kokuvikeleka kwe-Android kuvele khona ukuze kulungiswe izikhala ezibucayi ekuvikelekeni kwe-Android. Ngokusebenzisa i-SELinux ku-Android, ihlose ukudala izinhlelo zokusebenza eziphephile . Le phrojekthi, noma kunjalo, ayikhawulelwe ku-SELinux.

SE Android i-SELinux; esetshenziselwa uhlelo lwalo lokusebenza olusebenzayo. Ihlose ukuqinisekisa ukuphepha kwezinhlelo zokusebenza ezindaweni ezikude. Ngakho-ke, ichaza ngokucacile izenzo ezithatha izinhlelo zokusebenza ngaphakathi kwesistimu yayo; ngaleyo ndlela wenqabela ukufinyelela okungavunyelwe kwinqubomgomo.

Ngenkathi i-Android 4.3 eyona yokuqala ukunika amandla ukusekelwa kwe-SELinux, i- Android 4.4 aka KitKat yilona ukukhululwa kokuqala ukwenza ngempela ukuphoqelela i-SELinux futhi uyibeke esenzweni. Ngakho-ke, ungangezela ku-kernel esekelwa yi-SELinux ku-Android 4.3, uma ufuna kuphela ukusebenza nomsebenzi wayo oyinhloko. Kodwa ngaphansi kwe-Android KitKat, uhlelo lunemodi yokusebenza yomhlaba wonke eyakhelwe ngaphakathi.

I-Android Android ivikelekile kakhulu, njengoba inqamulela ukufinyelela okungagunyaziwe futhi ivimbela idatha ephuma kuzinhlelo zokusebenza. Ngesikhathi i-Android 4.3 ihlanganisa i-SE ye-Android, ayikwazi ukuyenza ngokuzenzakalelayo. Kodwa-ke, ngokuvela kwe-Android 4.4, kungenzeka ukuthi uhlelo luzovunyelwa ngokuzenzakalelayo futhi luzofaka ngokuzenzakalelayo izinsiza ezihlukahlukene ukunika amandla abalawuli besistimu ukuphatha izinqubomgomo ezihlukahlukene zokuphepha ngaphakathi kwesikhulumi.

Vakashela ikhasi lewebhu le-SE Android Project ukuze wazi kabanzi.