NgoMeyi 29, 2014
I-SELinux okanye i-Safe-Enhanced Linux yinkomfa yokukhusela i-kernel ye-kernel, eyenza abasebenzisi bakwazi ukufikelela nokulawula iinkqubo ezininzi zokukhuseleko . Le modyuli ihlukanisa ukuthotyelwa kwezigqibo zokhuseleko kwimigaqo-nkqubo yokhuseleko jikelele. Ngenxa yoko, indima yabasebenzisi be-SELinux ayinxulumene nendima yabasebenzisi benkqubo.
Ngokwenene, inkqubo inika indima, igama lomsebenzisi kunye negama kumsebenzisi. Ngoko ke, ngelixa abasebenzisi abaninzi bengabelana ngegama elifanayo lomsebenzisi we-SELinux, ulawulo lokufikelela lulawulwa nge-domain, oluqwalaselwe yimigaqo-nkqubo eyahlukeneyo. Le migaqo ngokuqhelekileyo ibandakanya imiyalelo ethile kunye neemvume, okufuneka umsebenzisi ayenayo ukuze athole ukufikelela kwinkqubo. Umgaqo oqhelekileyo wenziwe ngemephu okanye iifayile zokubhaliweyo, ifayile yomgaqo kunye nefayili yomsebenzisi. Ezi fayile zidibaniswe nezixhobo ze-SELinux zinikezelwe, ukwenza ifayile enye yefayile. Le fayili ithe ilayishwe kwi-kernel, ukwenzela ukuba yenzeke.
Yintoni i-Android?
Iprojekthi SE SE i-Android okanye iPhuculo loKhuseleko lwe-Android lavela khona ukuze idibanise izikhelo ezibalulekileyo kwi-Android. Ngokusebenzisa iSELinux kwi-Android, ijolise ukudala iinkonzo ezikhuselekileyo . Le projekthi, nangona kunjalo, ayikhawulelwanga ku-SELinux.
SE i-Android ngu-SELinux; isetyenziswe kwinkqubo yayo yokusebenza yeselula. Iinjongo zokuqinisekisa ukhuseleko lwezixhobo kwiindawo ezikude. Ngenxa yoko, ichaza ngokucacileyo izenzo ezithatha iinkqubo ngaphakathi kwenkqubo yayo; ngoko wenqaba ukufikelela ngaphandle kokuchazwe kumgaqo-nkqubo.
Ngethuba i-Android 4.3 yayiyiyokuqala ukunika inkxaso inkxaso ye-SELinux, i- Android 4.4 aka KitKat ngowokuqala ukukhululwa ukwenza umsebenzi wokunyanzelisa i-SELinux kwaye uyifake kwisenzo. Ngenxa yoko, unokongeza kwi-kernel e-SELinux exhaswa kwi-Android 4.3, ukuba ukhangeleke kuphela ukusebenza nomsebenzi wayo oyintloko. Kodwa phantsi kwe-Android KitKat, inkqubo inemo yokunyanzeliswa kwehlabathi jikelele.
I-Android ivuseleleke kakhulu ukhuseleko, njengoko ibeka umda ukungena ngemvume okungagunyazisiyo kwaye ikhusela idatha ephumayo kwizinhlelo zokusebenza. Ngoxa i-Android 4.3 iquka i-Android ye-Android, ayiyikuyenza ngokuzenzakalelayo. Nangona kunjalo, ngokuvela kwe-Android 4.4, kunokwenzeka ukuba inkqubo iya kuthi inikwe amandla ngokuzenzekelayo kwaye izakufaka ngokuzenzekelayo iinkonzo ezahlukeneyo ukwenzela ukuba abalawuli beenkqubo bakwazi ukulawula iinkqubo ezahlukeneyo zokhuseleko ngaphakathi kwipulatifomu.
Ukutyelela i-SE ye-Android yeProjekthi yeWebhsayithi yeFayile ukuze ukwazi kabanzi