{"id":118544,"date":"2024-07-29T09:43:08","date_gmt":"2024-07-29T07:43:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oshibka-v-lsm-module-landlock-pozvolyala-zanovo-poluchit-sbroshennye-privilegii"},"modified":"2024-07-29T09:43:08","modified_gmt":"2024-07-29T07:43:08","slug":"oshibka-v-lsm-module-landlock-pozvolyala-zanovo-poluchit-sbroshennye-privilegii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/oshibka-v-lsm-module-landlock-pozvolyala-zanovo-poluchit-sbroshennye-privilegii","title":{"rendered":"LSM modulu Landlock-da s\u0259hv, geri qaytar\u0131lm\u0131\u015f imtiyazlar\u0131n b\u0259rpa olunmas\u0131na imkan verirdi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google Project Zero komandas\u0131nda yer alan \u042f\u043d\u043d \u0425\u043e\u0440\u043d (Jann Horn), Spectre v\u0259 Meltdown z\u0259iflikl\u0259rini tapd\u0131\u011f\u0131 d\u00f6vrd\u0259, Linux t\u0259hl\u00fck\u0259sizlik modulu (LSM) Landlock-un icras\u0131ndak\u0131 m\u0259ntiqi x\u0259tan\u0131 a\u015fkar etdi. Bu x\u0259ta proqram\u0131n sistem \u00e7a\u011f\u0131r\u0131\u015flar\u0131na fork() v\u0259 keyctl() daxil olmaqla \u00e7\u0131xar\u0131lm\u0131\u015f priviliegiyalar\u0131 geri alma\u011fa imkan tan\u0131y\u0131r. <\/p>\n

Landlock mexanizmi, imtiyazlar\u0131 olmayan proqramlar\u0131n i\u015f \u00fc\u00e7\u00fcn laz\u0131m olmayan imtiyazlar\u0131 silm\u0259sin\u0259 imkan verir, bel\u0259likl\u0259, proqram t\u0259hl\u00fck\u0259sizliyi art\u0131rmaq m\u0259qs\u0259dil\u0259 sistem\u0259 \u0259lav\u0259 giri\u015fini k\u00f6n\u00fcll\u00fc \u015f\u0259kild\u0259 m\u0259hdudla\u015fd\u0131r\u0131r. M\u0259s\u0259l\u0259n, proqram \u00f6z\u00fcn\u00fcn i\u015f kataloqundan k\u0259nar fayllara giri\u015fini qada\u011fan ed\u0259 bil\u0259r. <\/p>\n

Google m\u00fch\u0259ndisinin a\u015fkar etdiyi kimi, modulun \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 t\u0259r\u0259find\u0259n n\u0259z\u0259r\u0259 al\u0131nmam\u0131\u015f b\u0259zi v\u0259ziyy\u0259tl\u0259r m\u00f6vcuddur v\u0259 bu, proqram\u0131n m\u00fc\u0259yy\u0259n \u015f\u0259rtl\u0259rd\u0259 \u00e7\u0131xar\u0131lm\u0131\u015f imtiyazlar\u0131 yenid\u0259n \u0259ld\u0259 etm\u0259sin\u0259 imkan tan\u0131y\u0131r. Bu x\u0259tan\u0131n ham\u0131s\u0131 Landlock LSM modulu olan kernelin b\u00fct\u00fcn versiyalar\u0131nda m\u00f6vcuddur, \u00e7\u00fcnki bu modulun ilkin icras\u0131ndan qaynaqlan\u0131r. Bug\u00fcn t\u0259qdim edil\u0259n 6.11-rc1 kernelinin test versiyas\u0131nda a\u015fkar edilmi\u015f problemin d\u00fcz\u0259li\u015fi daxil edilmi\u015fdir, lakin h\u0259l\u0259 stabil filiallara k\u00f6\u00e7\u00fcr\u00fclm\u0259yib.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042f\u043d\u043d \u0425\u043e\u0440\u043d (Jann Horn) \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero, \u0432 \u0441\u0432\u043e\u0451 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Spectre \u0438 Meltdown, \u043d\u0430\u0448\u0451\u043b \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Linux (LSM) Landlock, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u0443\u0436\u0435 \u0441\u0431\u0440\u043e\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0432\u044b\u0437\u043e\u0432\u0430\u043c fork() \u0438 keyctl(). \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Landlock \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-118544","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Landlock LSM modulundak\u0131 x\u0259ta \u00e7\u0131xar\u0131lm\u0131\u015f imtiyazlar\u0131n yenid\u0259n \u0259ld\u0259 olunmas\u0131na imkan verirdi | ProHoster","description":"Google Project Zero komandas\u0131nda yer alan \u042f\u043d\u043d \u0425\u043e\u0440\u043d (Jann Horn), Spectre v\u0259 Meltdown z\u0259iflikl\u0259rini tapd\u0131\u011f\u0131 d\u00f6vrd\u0259, Linux t\u0259hl\u00fck\u0259sizlik modulu (LSM) Landlock-un icras\u0131ndak\u0131 m\u0259ntiqi x\u0259tan\u0131 a\u015fkar etdi. Bu x\u0259ta proqram\u0131n \u00e7\u0131xar\u0131lm\u0131\u015f imtiyazlar\u0131 geri alma\u011fa imkan tan\u0131y\u0131r.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/oshibka-v-lsm-module-landlock-pozvolyala-zanovo-poluchit-sbroshennye-privilegii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 LSM-\u043c\u043e\u0434\u0443\u043b\u0435 Landlock \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 | ProHoster","og:description":"\u042f\u043d\u043d \u0425\u043e\u0440\u043d (Jann Horn) \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero, \u0432 \u0441\u0432\u043e\u0451 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Spectre \u0438 Meltdown, \u043d\u0430\u0448\u0451\u043b \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Linux (LSM) Landlock, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/oshibka-v-lsm-module-landlock-pozvolyala-zanovo-poluchit-sbroshennye-privilegii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-29T07:43:08+00:00","article:modified_time":"2024-07-29T07:43:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"118544","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 05:02:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:02:19","updated":"2026-01-23 05:02:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/118544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=118544"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/118544\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=118544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=118544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=118544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}