Kungani isexwayiso se-vpnc sokuhlanza umzila sivela kukhonteyina

Amalogi amasha ekhonteyina avame ukuphela ngesikhalo Read-only file system mayelana ne-/proc/sys/net/ipv4/route/flush, futhi lolo mugqa usolwa ngenxa yomhubhe ongase uphile ngokuphelele. Umbhalo ongemuva kwawo uqondisa ekungeneni kwekhaneli okungasakwenziyo lutho olusizayo njengoba ingqikithi yemizila ye-IPv4 isinyamalele. Ngaphakathi kwekhonteyina i-/proc/sys igxunyekwa ngokufunda-kuphela, ngakho ukudluliselwa kwesinye indawo kwenqatshwa ngaphambi kokuba noma yiliphi inani lifike futhi isheli iphrinta lokho kunqatshwa. Umhubhe osebenzayo ungaphrinta lesi sexwayiso inqobo nje uma umugqa wakudala uhlala kuskripthi, futhi i---privileged ayikwenzi umbhalo ube nencazelo.

Ukuthi iskripthi sasizama ukuhlanza ini

Izikripthi zokuxhuma ezindala zaziphela ngokuhlanza ingqikithi: ukubhala inani efayeleni lokulawula lekhaneli nokucela isitaki se-IPv4 ukuba silahle ingqikithi yaso yomzila, ukuze umzila omusha womhubhe ukhethwe ngaphandle kokulinda ukuthi okungenayo okudala kuphelelwe yisikhathi. Ifayele lalibhekiswe ngaphansi kwe-/proc/sys/net/ipv4/, okwenza umsebenzi waba ukudluliselwa kwesheli hhayi umyalo womzila. Ikhaneli 3.6 yasusa leyo ngqikithi, kanye nesizathu sokuba khona kokuhlanza. Akukho lutho endleleni yedatha yamanje oluncike kulowo mbhalo.

Ukungena ngokwako kwasinda njengefayele elidala lokubhala-kuphela, ngakho iskripthi esisabhala kuwo sifinyelela indlela yangempela nokuhlolwa kwezimvume kwangempela. Kusibungu umbhalo ubuyisela impumelelo futhi awushintshi lutho. Kukhonteyina lokho kudluliselwa kuyafanayo kuhlangana ne-/proc/sys yokufunda-kuphela futhi kuhluleke nge-EROFS, okushicilelwa isheli njengomlayezo wesistimu yamafayele yokufunda-kuphela. Emakhaneli lapho indlela ingekho ngempela khona, amagama aba yi-No such file or directory, futhi isiphetho asishintshi.

La maphutha amabili akhuluma izinto ezahlukene, futhi umehluko ufanele ugcinwe ucwile. I-Read-only file system isho ukuthi ikhaneli yafinyelela ekungeneni futhi yanqaba umbhalo; i-No such file or directory isho ukuthi ukungena akusekho. Awukho umlayezo okhuluma ngethuluzi lomhubhe, imizila noma ukuxazululwa kwamagama, ngakho akukho okungathethelela amalungelo engeziwe.

Ukulandelana yikho okwenza umlayezo ubonakale unesizathu. Iskripthi sokuxhuma sifaka imizila, sishintsha isimo se-interface futhi sibhala kabusha ukuxazululwa kwamagama ngaphambi kokufinyelela ekuhlanzeni ekugcineni, ngakho umugqa wokugcina ophrintiwe yiwo umugqa abantu abawucaphunayo noma ngabe zonke izinyathelo ezibalulekile zibuyisele impumelelo. Umhubhe ozinzile futhi othwala ithrafikhi ngenkathi uphrinta lesi sexwayiso uhambisana ngqo nendlela esenhla.

Hlola ukugxunyekwa nomzila ngaphambi kokwengeza ilungelo

Ukufunda okuthathu kuhlukanisa isexwayiso sangaphezulu nokuhluleka kwangempela: noma iskripthi esifakiwe sisawuthwala umugqa, ukuthi i-/proc/sys igxunyekwe kanjani, kanye nokuthi ithrafikhi yohlelo iya ngempela kuphi. Zisebenzise endaweni efanayo yamagama yekhonteyina noma kusibungu lapho isexwayiso savela khona, ngoba ukuhlola emshinini ongahlobene kuphendula umbuzo ohlukile.

grep -n 'ipv4/route/flush' /usr/share/vpnc-scripts/vpnc-script
findmnt -no OPTIONS /proc/sys
ip -4 route get 10.20.5.10

Impendulo ye-grep ibuthaka kunokuba ibonakala, ngoba ukuthola kufakazela ukuthi umugqa ukhona, hhayi ukuthi usebenza ngaphandle kwesivikelo; iskripthi esinakekelwayo singathwala umbhalo ngaphakathi kwesivikelo esiwudlulayo. I-findmnt -no OPTIONS /proc/sys inquma ukugxunyekwa ngqo, futhi i-ro kuleyo okukhiphayo isho ukuthi wonke umbhalo ongaphansi kwalelo phuzu unqatshiwe, noma ngabe iskripthi senzani. Bese ukusesha umzila kukhombisa ukuthi indawo oya kuyo edingwa uhlelo ixazululwa ngokusebenzisa i-interface yomhubhe noma nge-gedi elijwayelekile lekhonteyina. Ukusesha okukhetha igedi elijwayelekile kusho ukuthi umhubhe wenyuka futhi akukho okudluliselwa kuwo, okuyinkinga yomzila hhayi yelungelo.

Ukulungiswa kuvela ngempela kuphi

Ukulungiswa okunakekelwayo kuhlala kuskripthi hhayi kumafulegi ekhonteyina. I-upstream vpnc-script ishintshile indlela esebenza ngayo lo msebenzi, ngakho qhathanisa ikhophi engaphakathi kwesithombe ne-upstream yamanje bese uyabuyekeza ngokusebenzisa iphakethe noma ukwakhiwa kwesithombe okunikeza lokho. Ifayele elihlelwe ngesandla ngaphakathi kwekhonteyina elisebenzayo alikwazi ukubuyekezwa futhi ngeke liphile ekwakhiweni okulandelayo.

I---privileged ibhalwe njengokunikeza wonke amakhono kanye nokufinyelela okubanzi kumadivayisi, ukunikezela okukhulu ngomlayezo ongashintshi lutho, ngakho shono ikhono elingekho uma ngempela likhona. Ngemva kokubuyekeza, phinda ukusesha umzila futhi vumela uhlelo lusebenzise umhubhe, ngoba ilogi ethule nokuxhumana okusebenzayo kuyimiphumela ehlukene.