{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"近期，微軟"},{"type":"link","attrs":{"href":"https:\/\/github.com\/microsoft\/CBL-Mariner\/releases\/tag\/1.0.20210807-1.0","title":null,"type":null},"content":[{"type":"text","text":"已經更新了"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"其內部開源容器 CBL-Mariner。此次更新將內核升級到了 5.10.52.1 版本，並啓用"},{"type":"codeinline","content":[{"type":"text","text":"\/dev\/mcelog"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。除了大量的安全修復外，cronie 和 logrotate 已添加到圖像中，就像 Microsoft 的存儲庫一樣。Moby-containerd 已更新至 1.4.4 版，swig 已更新至 4.0.2。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#333333","name":"user"}}],"text":"微軟的"},{"type":"text","text":"CBL-Mariner Linux "},{"type":"link","attrs":{"href":"https:\/\/github.com\/microsoft\/CBL-Mariner\/releases\/tag\/1.0.20200906","title":null,"type":null},"content":[{"type":"text","text":"在 GitHub 上發佈即將一週年，"}]},{"type":"text","text":"開發人員在此期間一直保持維護和更新，並在今年7月將其開源。不過，"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner"},{"type":"text","text":"目前還是以微軟內部自用爲主。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner是由微軟的Linux系統組創建，也就是WindowsSubsystem for Linux 2 背後的技術團隊。作爲微軟雲基礎設施和邊緣產品和服務的內部Linux發行版，CBL-Mariner旨在爲設備和服務提供統一平臺，但主要用於服務器端而非桌面端。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"據官方介紹，CBL-Mariner項目是微軟對各種 Linux 技術不斷增加投資的一部分，例如 SONiC、Azure Sphere OS 和 Windows Subsystem for Linux (WSL)。此外，CBL-Mariner 不會改變他們對任何現有第三方 Linux 發行版的態度或承諾。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"CBL-Mariner是一款非常輕量級的Linux，可以將其用作容器或容器主機。CBL-Mariner 的設計理念是，一組小的通用核心包可以滿足第一方雲和邊緣服務的普遍需求，同時允許各個團隊在通用核心之上分層附加包，爲他們的工作負載生成鏡像。這可以通過一個簡單的構建系統實現，該系統支持："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"包生成：從 SPEC 文件和源文件中生成所需的一組 RPM 包。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"鏡像生成：從給定的一組包中生成所需的鏡像，如 ISO 或 VHD。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner軟件包系統基於RPM，軟件包更新系統同時使用dnf和tdnf，後者全稱Tiny DNF，是一個基於dnf的軟件包管理器，來自VMware的Photon OS。CBL-Mariner還支持基於鏡像的更新機制，其使用RPM-OSTree來實現，rpm-ostree是一個基於OSTree的開源工具，用於管理可啓動的、不可變的、版本化的文件系統樹。rpm-ostree背後的想法是使用一個客戶-服務器架構，以可靠的方式保持Linux主機的更新和與最新的軟件包同步。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"微軟認爲，操作系統的精簡特性有助於提高安全性：通過將核心映像功能集中到內部雲客戶所需功能上，加載的服務會更少，攻擊媒介也更少。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner遵循 \"默認安全\"原則，操作系統的大部分方面都是以安全爲重點的。它有一個加固的內核、簽名更新、ASLR、基於編譯器的加固和防篡改日誌等許多功能。由於大小有限、攻擊面很小，用戶很容易通過RPM向其部署安全補丁。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"一旦出現安全漏洞，CBL-Mariner 可以支持基於包的更新模型和基於鏡像的更新模型。利用通用的 RPM 包管理器系統，CBL-Mariner 提供最新的安全補丁和修復程序，以實現快速週轉時間的目標。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"微軟沒有給出 CBL-Mariner 的 ISO 鏡像，不過微軟 Azure 工程師Juan Manuel Rey發佈了詳細教程："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/blog.jreypo.io\/2021\/07\/09\/a-look-into-cbl-mariner-microsoft-internal-linux-distribution\/","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/blog.jreypo.io\/2021\/07\/09\/a-look-into-cbl-mariner-microsoft-internal-linux-distribution\/"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在過去，紅帽的 CoreOS 曾經是 Linux 容器的首選主機，但最近被廢棄了，所以用戶亟需一個替代方案。CBL 的代表的則是“Common Base Linux”，也被外界解讀爲CoreOS的替代。通過爲其雲服務創建自己的發行版，微軟可以根據自己的時間表來更新和管理主機和容器實例。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"微軟方面已經成立了一個正式的 "},{"type":"link","attrs":{"href":"https:\/\/www.oschina.net\/action\/GoToLink?url=http%3A%2F%2Flinux.microsoft.com%2F","title":null,"type":null},"content":[{"type":"text","text":"Linux Systems Group "}]},{"type":"text","text":"來處理公司的大部分 Linux 相關工作，CBL-Mariner 就是其推出的項目之一。此外，Linux Systems Group 開發的與 Linux 相關的可交付成果還包括有："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"WSL2 隨附的 WSL2 Linux內核；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"一個 Azure-tuned Linux 內核，可作爲許多常見 Linux 發行版的補丁程序進行使用，對其進行優化以與微軟的 Hyper-V 虛擬機管理程序配合使用；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"以及企業和安全團隊提出的 Linux 安全模塊（LSM）Integrity Policy Enforcement（IPE）。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]}]}
自用 Linux容器即將發行一週年，微軟再對版本更新
{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"近期，微軟"},{"type":"link","attrs":{"href":"https:\/\/github.com\/microsoft\/CBL-Mariner\/releases\/tag\/1.0.20210807-1.0","title":null,"type":null},"content":[{"type":"text","text":"已經更新了"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"其內部開源容器 CBL-Mariner。此次更新將內核升級到了 5.10.52.1 版本，並啓用"},{"type":"codeinline","content":[{"type":"text","text":"\/dev\/mcelog"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。除了大量的安全修復外，cronie 和 logrotate 已添加到圖像中，就像 Microsoft 的存儲庫一樣。Moby-containerd 已更新至 1.4.4 版，swig 已更新至 4.0.2。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#333333","name":"user"}}],"text":"微軟的"},{"type":"text","text":"CBL-Mariner Linux "},{"type":"link","attrs":{"href":"https:\/\/github.com\/microsoft\/CBL-Mariner\/releases\/tag\/1.0.20200906","title":null,"type":null},"content":[{"type":"text","text":"在 GitHub 上發佈即將一週年，"}]},{"type":"text","text":"開發人員在此期間一直保持維護和更新，並在今年7月將其開源。不過，"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner"},{"type":"text","text":"目前還是以微軟內部自用爲主。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner是由微軟的Linux系統組創建，也就是WindowsSubsystem for Linux 2 背後的技術團隊。作爲微軟雲基礎設施和邊緣產品和服務的內部Linux發行版，CBL-Mariner旨在爲設備和服務提供統一平臺，但主要用於服務器端而非桌面端。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"據官方介紹，CBL-Mariner項目是微軟對各種 Linux 技術不斷增加投資的一部分，例如 SONiC、Azure Sphere OS 和 Windows Subsystem for Linux (WSL)。此外，CBL-Mariner 不會改變他們對任何現有第三方 Linux 發行版的態度或承諾。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"CBL-Mariner是一款非常輕量級的Linux，可以將其用作容器或容器主機。CBL-Mariner 的設計理念是，一組小的通用核心包可以滿足第一方雲和邊緣服務的普遍需求，同時允許各個團隊在通用核心之上分層附加包，爲他們的工作負載生成鏡像。這可以通過一個簡單的構建系統實現，該系統支持："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"包生成：從 SPEC 文件和源文件中生成所需的一組 RPM 包。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"鏡像生成：從給定的一組包中生成所需的鏡像，如 ISO 或 VHD。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner軟件包系統基於RPM，軟件包更新系統同時使用dnf和tdnf，後者全稱Tiny DNF，是一個基於dnf的軟件包管理器，來自VMware的Photon OS。CBL-Mariner還支持基於鏡像的更新機制，其使用RPM-OSTree來實現，rpm-ostree是一個基於OSTree的開源工具，用於管理可啓動的、不可變的、版本化的文件系統樹。rpm-ostree背後的想法是使用一個客戶-服務器架構，以可靠的方式保持Linux主機的更新和與最新的軟件包同步。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"微軟認爲，操作系統的精簡特性有助於提高安全性：通過將核心映像功能集中到內部雲客戶所需功能上，加載的服務會更少，攻擊媒介也更少。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"CBL-Mariner遵循 \"默認安全\"原則，操作系統的大部分方面都是以安全爲重點的。它有一個加固的內核、簽名更新、ASLR、基於編譯器的加固和防篡改日誌等許多功能。由於大小有限、攻擊面很小，用戶很容易通過RPM向其部署安全補丁。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"一旦出現安全漏洞，CBL-Mariner 可以支持基於包的更新模型和基於鏡像的更新模型。利用通用的 RPM 包管理器系統，CBL-Mariner 提供最新的安全補丁和修復程序，以實現快速週轉時間的目標。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"微軟沒有給出 CBL-Mariner 的 ISO 鏡像，不過微軟 Azure 工程師Juan Manuel Rey發佈了詳細教程："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/blog.jreypo.io\/2021\/07\/09\/a-look-into-cbl-mariner-microsoft-internal-linux-distribution\/","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/blog.jreypo.io\/2021\/07\/09\/a-look-into-cbl-mariner-microsoft-internal-linux-distribution\/"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在過去，紅帽的 CoreOS 曾經是 Linux 容器的首選主機，但最近被廢棄了，所以用戶亟需一個替代方案。CBL 的代表的則是“Common Base Linux”，也被外界解讀爲CoreOS的替代。通過爲其雲服務創建自己的發行版，微軟可以根據自己的時間表來更新和管理主機和容器實例。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"微軟方面已經成立了一個正式的 "},{"type":"link","attrs":{"href":"https:\/\/www.oschina.net\/action\/GoToLink?url=http%3A%2F%2Flinux.microsoft.com%2F","title":null,"type":null},"content":[{"type":"text","text":"Linux Systems Group "}]},{"type":"text","text":"來處理公司的大部分 Linux 相關工作，CBL-Mariner 就是其推出的項目之一。此外，Linux Systems Group 開發的與 Linux 相關的可交付成果還包括有："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"WSL2 隨附的 WSL2 Linux內核；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"一個 Azure-tuned Linux 內核，可作爲許多常見 Linux 發行版的補丁程序進行使用，對其進行優化以與微軟的 Hyper-V 虛擬機管理程序配合使用；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"以及企業和安全團隊提出的 Linux 安全模塊（LSM）Integrity Policy Enforcement（IPE）。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]}]}
發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章