Hana NetworkManager nuna kalmar sirri ta VPN da aka adana
Tambaya kowace lokaci, ba da ita ga mabudin ajiya, ko ajiye fayil wanda root kadai zai iya budewa. Kowanne zabi yana da banbancin fallasa, kuma tutar kalmar sirri ya kamata ta dace da shi.
NetworkManager na iya rike kalmar sirri ta VPN domin hadin ya tashi ba tare da kowa ya rubuta ta ba, kuma yana iya sake nuna wannan darajar ta hanyar edita ko ta nmcli --show-secrets. Akwai samfuran mallaka guda uku, kuma halin nunawa alama ce kawai ta wanda ka zaba. Da farko zabi samfurin, sannan ka saita tutar da ta dace da shi, maimakon ɓoye fili da wani mai rike wuri wanda zai rikita mutum na gaba.
Samfuran mallaka guda uku
Samfur na farko yana tambaya kowace lokaci. Ba a adana komai, sirrin yana wanzuwa ne kawai a lokacin kunnawa, kuma duk wanda ya fara hadin dole ya san kalmar sirrin. Shi ne zabi mafi karancin sauki kuma mafi saukin karewa.
Na biyu yana ba da sirrin ga mabudin ajiya mallakar mai amfani. Wakilin yana budewa lokacin da zaman ya fara kuma yana bayar da darajar idan an nema, wanda ke ajiye ta a wajen fayil din hadin amma yana daura hadin ga zaman wannan mai amfani. Daga nan sharudda biyu suka biyo: wakilin dole yana aiki, kuma dole ya kasance a bude.
Na uku yana adana shaidar da aka kare don hadin tsari. Yana jurewa bayan sake kunnawa kuma yana aiki kafin kowa ya shiga, kuma a madadin haka darajar tana kan faifai ana kiyaye ta da izinin fayil maimakon da ɓoye-boye.
Kowanne samfur yana da hankali a wuyar da ta dace. Kuskure shi ne hada su, kuma haka kwamfutar tafi-da-gida ke karewa da sirri a wurare biyu kuma babu amsa bayyananniya game da wanne ne mai iko. Rubuta wanne samfur ne profil ke amfani da shi. Layi daya a littafin tawagar yana ceto mutum na gaba daga kirkiro wuri na hudu da zai duba.
Karanta halin yanzu kafin canza shi
Duba profil din da halin sirrin a matsayin mai amfanin da ke sarrafa hadin. Umarni na biyu shi ne wanda ke gaya maka ko darajar ana iya karantawa da gaske.
nmcli connection show "Office VPN"
nmcli --show-secrets connection show "Office VPN"
sudo stat -c '%U %a %n' /etc/NetworkManager/system-connections/*.nmconnectionFayil din mabudi a wannan babban fayil yawanci mallakar root ne da yanayi 600. Wannan yana hana talakawan masu amfani shiga, kuma ba ya hana root shiga, wanda ke da muhimmanci idan ana raba wannan na’ura ko idan ajiyar aji yana gudana a matsayin root.
Izinin fayil iyaka ne, ba ɓoye-boye ba. Duk wanda zai iya karanta fayil din a matsayin root yana da kalmar sirrin a rubutu bayyananne. Wannan ciniki ne mai karbuwa ga uwar garke marar kulawa kuma mara kyau ga wurin aiki da aka raba. Rubuta shi sau daya yana hana doguwar muhawara kan ko an kare darajar.
Abin da kowace darajar tuta take yi
Sirrin VPN yana ɗauke da sifa flags, kuma darajojin ba su bayyana daga lambobi kadai ba.
| Value | Meaning | Practical effect |
|---|---|---|
| 0 | No special flag | Secret is typically saved with the connection |
| 1 | Agent-owned | A keyring or secret agent supplies it |
| 2 | Not saved | Prompted at each activation |
| 4 | Not required | Connection proceeds without asking |
Halin da ake gani ya kuma dogara ga plugin din da ko wakili yana aiki, don haka ɗauki teburin a matsayin yarjejeniya kuma halin da aka lura a matsayin abin da kake tabbatarwa. Darajar da ke aiki a tebur daya na iya yin daban a uwar garke marar zama. A cikin wannan gibin ne yawancin tikitin rudani suke.
Saita sifar a fili maimakon share layi da fatan. Tuta da ba ta nan ba manufa ba ce, kuma sabuntawar fakiti na gaba na iya cika ta da wani abu da ba ka nufa ba.
Daidaita samfurin da lokacin da hadin ke farawa
Idan hadin yana farawa ne kawai yayin da mai amfani ya shiga, mallakar wakili ya dace sosai kuma yana ajiye sirrin a wajen fayil din. Idan yana farawa a lokacin tashi, kafin wani zama ya kasance, wakili ba zai iya taimaka maka ba.
Wannan shi ne dukan shawara ga yawancin na’urori. Yana kuma bayyana nau’in rahotannin rudani inda hadin ke aiki cikin hulda kuma ya kasa bayan sake kunnawa. Tutar ba ta taba canzawa ba; yanayin ya canza.
Ga yanayin marar kulawa, amsa mai amfani ita ce fayil din da aka takaita mallakar root ko tushen shaidar da aka amince da shi. Ajiye shi a wajen profil din hadin idan an taba fitar da wannan profil ko an kwafa shi zuwa wata na’ura.
Idan darajar ta riga ta kasance a bayyane, juya ta
Canza tuta ba ya taba kalmar sirrin kanta. Darajar da ta bayyana a hoton allon, a tarihin shell, a fakitin da aka aika zuwa tallafi, ko a fayil din da sauran masu amfani za su iya budewa ya kamata a dauke ta a matsayin an bayyana.
Canza ta a uwar garke, sannan gyara abokin ciniki kuma ka dakatar da duk wani zama da ya tabbatar da tsohuwar. Share hadin gida ba ya soke komai a wancan gefe, kuma wannan shi ne bangaren da mutane ke mantawa.
Sannan daina saka kalmar sirrin a layin umarni. Tana shiga tarihin shell kuma tana iya bayyana a jerin ayyuka; yi amfani da tambayar hulda ko wakilin maimakon haka.
Tabbatar ta hanyar sake hadawa
Maimaita umarnin da ya nuna sirrin kuma tabbatar ba a sake buga filin ba. Sannan ka cire hadin ka sake hadawa, kuma sake kunnawa idan hadin yana farawa kai tsaye, domin rashin da ya fi ban sha’awa yana bayyana ne kawai idan yanayin zama ya canza.
Idan sirrin har yanzu yana bayyana, wani profil ko wani wakili ne ke bayar da shi. Bincika hadin da ke aiki da mabudin ajiya maimakon share fayiloli har sai alamar ta motsa.