Munguva pfupi yapfuura kuburitswa kweshanduro nyowani yeFlatpak 1.12 yakaziviswa mune dzimwe shanduko uye kugadzirisa kwakaitwa, iko kuvandudzwa kweSteam, kururamisa kwekukanganisa uye zvakare rutsigiro rwekushandisa kweTUI kwakamira.
Kune avo vasingazive nezveFlatpak, iwe unofanirwa kuziva kuti izvi zvinoita kuti zvive nyore kune vanogadzira kunyorera kuti vaite nyore kugoverwa kwezvirongwa zvavo izvo zvisina kusanganiswa mune zvakajairwa zvekugovera matura nekugadzirira mudziyo wepasirese pasina kuumba akapatsanurwa magungano pane ega ega kugovera.
Kune vashandisi vanoziva nezvekuchengetedza, Flatpak inobvumira iyo isiriyo kunyorera kumhanya mumudziyo nekupa mukana chete kune yemushandisi network mabasa uye mafaera ane chekuita nechishandiso. Kune vashandisi vanofarira zvigadzirwa zvitsva.
Kuti udzikise saizi yepakeji, zvinongosanganisira zvinoenderana nekushandisa, uye iyo yekutanga system uye magiraibhurari emifananidzo (GTK, Qt, GNOME, uye maraibhurari eKDE, nezvimwewo) zvakagadzirwa senzvimbo dzinovharika dzakajairika nguva yekumhanya.
LMusiyano wakakosha pakati peFlatpak uye Snap ndeyekuti Snap inoshandisa yakakosha system nharaunda nharaundal uye kuzviparadzanisa zvichienderana nesystem yekusefa kusefa, nepo Flatpak ichigadzira mudziyo wakaparadzana kubva muchirongwa uye unoshanda nemahombe ekumhanya nguva, kupa kwete mapakeji sekuvimbika, asi zvakajairwa. Mamiriro ezvinhu eSystem (semuenzaniso, maraibhurari ese anodikanwa kumhanyisa zvirongwa zveGNOME kana zve KDE).
Kuwedzera kune yakajairika system nharaunda (nguva yekumhanya) yakaiswa kuburikidza neakasarudzika repamhepo, mamwe ekutsamira (package) anodikanwa kuti chishandiso chishande chinopihwa. Muchidimbu, iyo nguva yekumhanya uye pasuru inogadzira huwandu hwemidziyo, kunyangwe iyo nguva yekumhanyisa yakaiswa zvakasiyana uye ichibatana nemidziyo yakawanda kamwechete, kubvisa kudiwa kwekudzokorora zvakajairika mafaira mafaira kune Iwo midziyo.
Main nyowani maficha eFlatpak 1.12
Mune iyi vhezheni itsva kunatsiridza manejimendi ejecha sandboxes akajekeswa inoshandiswa mune flatpak package ine mutengi yemutambo wekutakura sevhisi Steam. Mumasanbox akavakirwa, inobvumidzwa kugadzira madhivhosi akaparadzana e / usr uye / madhairekitori eapp, ayo anoshandiswa naSteam kumhanyisa mitambo mumudziyo wakasiyana neayo / usr chikamu, chakaparadzaniswa nenharaunda nemutengi weSteam.
Zvakare, zvese package zviitiko neiyo imwechete yekushandisa ID govana iyo / tmp uye $ XDG_RUNTIME_DIR madhairekitori uye nesarudzo, uchishandisa iyo "-allow = per-app-dev-shm" mureza, unogona kugonesa kushandiswa kweyakagovaniswa dhairekitori / dev / shm.
Zvakare mune iyi vhezheni itsva inotsigirwa rutsigiro rwemavara mushandisi interface (TUI) manyorerwo akajekeswa senge gdb, pamwe nekumhanyisa kumisikidza iyo "ostree prune" yekuraira yakawedzerwawo kune yekuvaka-kugadzirisa-repo utility, yakagadzirirwa kushanda nefaira-mode repositories.
Kune rimwe divi zvinotaurwa izvo iyo kushushikana CVE-2021-41133 yakagadziriswa mukuitwa kweiyo portal mashini, zvine chekuita nekusavharira nzira nyowani dzekufona dzine chekuita nekukamura partitions mumasec secomp. Kushushikana kwakabvumidza iko kunyorera kuti kugadzire nested sandbox kupfuura nzira dze 'portal' dzekuongorora dzinoshandiswa kupa mukana kune zviwanikwa kunze kwemudziyo.
Nekuda kweizvozvo, anorwisa anogona kupfuura sandbox yekuzviparadzanisa michina kuitisa ane hukama-negomo system kufona uye uwane kuzara kuzere kwezvirimo munzvimbo yekugamuchira. Iyo kushushikana kunogona kungoshandiswa chete mumapakeji ayo anopa maapplication kuwana kwakananga kune zvigadziko zveAF_UNIX, senge izvo zvinoshandiswa neWayland, Pipewire, uye pipewire-pulse. Iyo kushushikana hakuna kunyatso gadzirirwa mushanduro 1.12.0, saka kugadzirisa 1.12.1 kwakaburitswa mukutsva kutsvaga.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo nezve iyi vhezheni nyowani, iwe unogona kutarisa iyo ruzivo Mune inotevera chinongedzo.