Yadda Ake Kare Haɗin Hard da Alama a cikin CentOS/RHEL 7
A cikin Linux, hanyoyin haɗin yanar gizo masu wuya da taushi ana yin la'akari da fayiloli, waɗanda suke da mahimmanci, idan ba a kiyaye su da kyau ba, duk wani lahani da ke cikin su na iya yin amfani da shi ta hanyar masu amfani da tsarin mugaye ko maharan.
Rashin lahani na gama gari shine tseren symlink. Lalacewar tsaro ce a cikin software, wanda ke zuwa lokacin da shirin ke ƙirƙirar fayiloli ba tare da tsaro ba (musamman fayilolin wucin gadi), kuma mai amfani da tsarin ƙeta zai iya ƙirƙirar hanyar haɗin (mai laushi) zuwa irin wannan fayil ɗin.
Wannan yana faruwa a zahiri; shirin yana bincika idan fayil ɗin temp ya wanzu ko a'a, idan babu shi, ya ƙirƙiri fayil ɗin. Amma a cikin ɗan gajeren lokacin tsakanin duba fayil ɗin da ƙirƙirar shi, mai yiyuwa ne maharin ya ƙirƙiri hanyar haɗi ta alama zuwa fayil kuma ba a ba shi izinin shiga ba.
Don haka lokacin da shirin ke gudana tare da ingantaccen gata ya ƙirƙiri fayil ɗin mai suna iri ɗaya da wanda maharin ya ƙirƙira, a zahiri yana ƙirƙirar fayil ɗin manufa (wanda aka haɗa-da) wanda maharin ke niyyar shiga. Wannan, saboda haka, na iya bai wa maharin hanya ta satar bayanai masu mahimmanci daga tushen asusun ko aiwatar da mugun shirin akan tsarin.
Don haka, a cikin wannan labarin, za mu nuna muku yadda ake amintaccen haɗin gwiwa mai ƙarfi da alama daga masu amfani da mugunta ko masu satar bayanai a cikin rarrabawar CentOS/RHEL 7.
A kan CentOS/RHEL 7 akwai muhimmin fasalin tsaro wanda ke ba da izinin ƙirƙirar hanyoyin haɗin gwiwa ko shirye-shirye kawai idan wasu sharuɗɗan sun gamsu kamar yadda aka bayyana a ƙasa.
Don mai amfani da tsarin don ƙirƙirar hanyar haɗi, ɗayan waɗannan sharuɗɗan dole ne a cika.
- mai amfani kawai zai iya haɗawa zuwa fayilolin da ya mallaka.
- Dole ne mai amfani ya fara karantawa da rubuta damar shiga fayil, wanda yake son danganta shi da shi.
Ana ba da izinin aiwatarwa kawai don bin hanyoyin haɗin yanar gizo waɗanda ke waje da rubutattun duniya (ana ba wa sauran masu amfani damar rubutawa) kundayen adireshi waɗanda ke da ƙugiya masu ɗanɗano, ko ɗaya daga cikin masu zuwa ya zama gaskiya.
- Tsarin da ke biye da hanyar haɗin yanar gizo shine ma'abucin hanyar haɗin alamar.
- ma'abucin littafin kuma shine ma'abucin alamar mahaɗin.
Kunna ko Kashe Kariya akan Haɗin Hard da Alama
Mahimmanci, ta tsohuwa, ana kunna wannan fasalin ta amfani da sigogin kernel a cikin fayil /usr/lib/sysctl.d/50-default.conf (darajar 1 tana nufin kunna).
fs.protected_hardlinks = 1 fs.protected_symlinks = 1
Koyaya, saboda dalili ɗaya ko ɗayan, idan kuna son kashe wannan fasalin tsaro; ƙirƙirar fayil mai suna /etc/sysctl.d/51-no-protect-links.conf tare da waɗannan zaɓuɓɓukan kwaya a ƙasa (darajar 0 tana nufin kashewa).
Yi la'akari da waccan 51 a cikin sunan fayil (51-no-protect-links.conf), dole ne a karanta shi bayan babban fayil ɗin don soke saitunan tsoho.
fs.protected_hardlinks = 0 fs.protected_symlinks = 0
Ajiye kuma rufe fayil ɗin. Sannan yi amfani da umarnin da ke ƙasa don aiwatar da canje-canjen da ke sama (wannan umarnin a zahiri yana ɗaukar saituna daga kowane fayil ɗin tsarin tsarin).
# sysctl --system OR # sysctl -p #on older systems
Hakanan kuna iya son karanta waɗannan labarai na gaba.
- Yadda ake Kare Fayil ɗin Vim a Linux
- 5 'chattr' Umurni don Sanya Fayiloli Masu Muhimmanci (Ba a Canjawa) a cikin Linux
Shi ke nan! Kuna iya aika tambayoyinku ko raba duk wani tunani da ya shafi wannan batu ta hanyar amsa tambayoyin da ke ƙasa.