A ina Linux ya kamata ya ajiye kalmar sirrin VPN? Ba a cikin bayanin martaba ba
Alamun sirri na NetworkManager suna yanke shawara ko bayanin martaba, wakilin zoben maɓalli ko kowa ba ya riƙe kalmar sirri. Amsar ta dogara da lokacin da haɗin ya fara.
Dole kalmar sirrin VPN ta zauna wani wuri: a cikin bayanin martabar haɗin, a cikin zoben maɓalli da tebur ke buɗewa, ko babu inda take. NetworkManager yana kiran wannan zaɓi alamar sirri, kuma zaɓin da ba daidai ba shine dalilin da haɗin ke aiki bayan shiga kuma ya kasa a matsayin sabis. Alamar layi ɗaya ne na saitin, kuma ita ce ke yanke shawara wace ɗaya daga cikin waɗannan sakamakon uku za ka samu.
Alamu uku suna rufe kusan kowane yanayi, kuma shawarar ta shafi lokacin da haɗin ya fara.
Alamun sirri uku, halaye uku
Alama ta 0 tana nufin ana ajiye sirrin tare da haɗin, a kowace taska da ke riƙe bayanin martabar. Alama ta 1 tana mai da shi mallakar wakili: sirrin yana zuwa daga wakilin sirri kamar zoben maɓalli na tebur, kuma NetworkManager yana neman sa lokacin kunnawa. Alama ta 2 tana nufin ba a ajiye ba, don haka ba a taɓa rubuta sirrin ba kuma dole a bayar kowace lokaci. Alama ta 4 tana nuna sirri a matsayin wanda ba a buƙata ba, ga haɗe-haɗen da ba sa buƙatar ko ɗaya da gaske.
| Flag | Where it lives | Works unattended |
|---|---|---|
| 0 saved | Connection profile | Yes, if the store is readable |
| 1 agent-owned | Secret agent or keyring | Only if that agent is available |
| 2 not-saved | Nowhere | No |
Saita alamun ga kowane sirri maimakon ga kowane haɗi. Haɗi ɗaya na iya samun kalmar sirri mallakar wakili da jimlar wucewar maɓallin keɓaɓɓe da aka ajiye.
Yanke shawara bisa lokacin da haɗin ya fara
Idan mai amfani da ya shiga ya fara haɗin, mallakar wakili ita ce tsohuwar zaɓi mai hankali: ana buɗe zoben maɓalli da shiga kuma sirrin ba ya zama a cikin fayil. Idan dole haɗin ya tashi kafin kowa ya shiga, mallakar wakili shine zaɓi mara kyau, saboda babu zoben maɓalli na zaman da za a buɗe.
Wannan shine duk shawarar. Duk sauran bambance-bambancen ta ne.
Ga sabis kafin shiga, wurin ajiya na matakin tsarin ko fayil ɗin maɓalli mai kariya shine tsarin da ake goyan bayansa, kuma izinin fayil ya zama kariya. Kada ka warware matsalar ta hanyar liƙa kalmar sirri a cikin rubutun harsashi da ke gudana lokacin tashi.
Abin da zoben maɓalli ke bayarwa da abin da bai bayarwa ba
Zoben maɓalli yana ajiye sirrin a wajen bayanin martabar haɗin kuma yana ɗaure shi da zaman mai amfani. Ba ya sa sirrin ya kasance ga sabis marar zaman, kuma ba ya ɓoye komai a kan hanyar sadarwa. Waɗannan halaye ne daban waɗanda mutane sukan haɗa. Abin da yake saya shi ne ƙaramin filin lalacewa idan fayil ɗin bayanin martaba ya zube.
Maɓallin keɓaɓɓe da bayanin martabar ya ambata yana buƙatar izininsa, ba tare da la'akari da inda kalmar sirri take ba.
Bincike ba tare da zubar da sirri ba
Sunayen haɗi, UUID da alamomi yawanci sun isa bayyana gazawa. nmcli connection show yana lissafa bayanin martabar, kuma alamun sirri suna gaya maka daga inda kalmar sirrin ya kamata ta zo.
Ka guji --show-secrets a cikin tikiti da hira. Da zarar an liƙa shi, takardar shaidar shiga ce a cikin rubutu.
Ajiye ba sokewa ba ne
Cire sirri daga zoben maɓalli ɗaya ba ya lalata takardar shaidar da mai aiki na nesa ya riga ya karɓa. Sokewar asusu aiki ne daga bangaren uwar garke, kuma ajiya ta gida wani al'amari ne daban da mai shi daban.
Yanke shawara biyun kafin abin ya faru, ba yayin da yake faruwa ba. Haɗin mai amfani na hulɗa da sabis kafin shiga suna buƙatar amsoshi daban-daban, kuma rubutun harsashi da aka raba ba ko ɗaya daga cikinsu ba ne. Takardar NetworkManager kan alamun sirri tana lissafa dukkan ƙimomin.