V\u00fdvoj\u00e1\u0159i OpenSSH pokra\u010dovali ve \u010dlen\u00ed sshd na n\u011bkolik samostatn\u00fdch spustiteln\u00fdch soubor\u016f. V prvn\u00edm kroku, kter\u00fd byl realizov\u00e1n v kv\u011btnu, byly funkce souvisej\u00edc\u00ed s zpracov\u00e1n\u00edm relac\u00ed p\u0159eneseny ze sshd do samostatn\u00e9ho procesu sshd-session, p\u0159i\u010dem\u017e v sshd z\u016fstala pouze funk\u010dnost pot\u0159ebn\u00e1 pro p\u0159ijet\u00ed nov\u00e9ho s\u00ed\u0165ov\u00e9ho spojen\u00ed a spu\u0161t\u011bn\u00ed sshd-session pro ka\u017edou novou relaci. V\u010dera bylo do k\u00f3dov\u00e9 z\u00e1kladny OpenSSH p\u0159id\u00e1no dal\u0161\u00ed zm\u011bny, kter\u00e1 p\u0159idala je\u0161t\u011b jeden proces \u2014 sshd-auth, do kter\u00e9ho byl z sshd-session p\u0159enesen k\u00f3d prov\u00e1d\u011bj\u00edc\u00ed autentizaci. <\/p>\n
Proces sshd-auth je spou\u0161t\u011bn ze sshd-session a umo\u017e\u0148uje d\u00e1le izolovat souvisej\u00edc\u00ed data o autentizaci v adresn\u00edm prostoru samostatn\u00e9ho procesu, co\u017e zabr\u00e1n\u00ed p\u0159\u00edstupu k t\u011bmto dat\u016fm v pam\u011bti v p\u0159\u00edpad\u011b \u00fatok\u016f na k\u00f3d, kter\u00fd se pou\u017e\u00edv\u00e1 k obsluze f\u00e1z\u00ed p\u0159ipojen\u00ed p\u0159ed dokon\u010den\u00edm autentizace. Krom\u011b toho zm\u011bna m\u00edrn\u011b sni\u017euje spot\u0159ebu pam\u011bti, proto\u017ee k\u00f3d souvisej\u00edc\u00ed s autentizac\u00ed je nyn\u00ed v pam\u011bti p\u0159\u00edtomen pouze v dob\u011b prov\u00e1d\u011bn\u00ed autentizace a pot\u00e9 je odstran\u011bn p\u0159i ukon\u010den\u00ed procesu sshd-auth. <\/p>\n
Podobn\u011b jako u sshd, ssh-session a ssh-agent byla v procesu sshd-auth aplikov\u00e1na operace n\u00e1hodn\u00e9 reorganizace spustiteln\u00e9ho souboru b\u011bhem ka\u017ed\u00e9ho spu\u0161t\u011bn\u00ed opera\u010dn\u00edho syst\u00e9mu. N\u00e1hodn\u00e1 reorganizace zt\u011b\u017euje p\u0159edv\u00eddat posuny funkc\u00ed ve spustiteln\u00fdch souborech a knihovn\u00e1ch, co\u017e zt\u011b\u017euje vytv\u00e1\u0159en\u00ed exploit\u016f vyu\u017e\u00edvaj\u00edc\u00edch metody n\u00e1vratov\u011b orientovan\u00e9ho programov\u00e1n\u00ed (ROP \u2014 Return-Oriented Programming). P\u0159i pou\u017eit\u00ed techniky ROP se \u00fato\u010dn\u00edk nesna\u017e\u00ed um\u00edstit sv\u016fj k\u00f3d do pam\u011bti, ale operuje ji\u017e existuj\u00edc\u00edmi \u00faseky strojov\u00fdch instrukc\u00ed kon\u010d\u00edc\u00edmi p\u0159\u00edkazem pro n\u00e1vrat \u0159\u00edzen\u00ed (obvykle to jsou konce funkc\u00ed). Pr\u00e1ce exploitu spo\u010d\u00edv\u00e1 v budov\u00e1n\u00ed \u0159et\u011bzce vol\u00e1n\u00ed podobn\u00fdch blok\u016f (\u201egadgets\u201c) pro z\u00edsk\u00e1n\u00ed po\u017eadovan\u00e9 funk\u010dnosti. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432 \u043c\u0430\u0435 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0438\u0437 sshd \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-session \u0431\u044b\u043b\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u0430 \u0432 sshd \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0434\u043b\u044f \u043f\u0440\u0438\u0451\u043c\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 sshd-session \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0430\u043d\u0441\u0430. \u0412\u0447\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0431\u044b\u043b\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120192","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V OpenSSH byl k\u00f3d autentizace p\u0159enesen do samostatn\u00e9ho procesu sshd-auth | ProHoster","description":"V\u00fdvoj\u00e1\u0159i OpenSSH pokra\u010dovali v rozd\u011blen\u00ed sshd na n\u011bkolik samostatn\u00fdch spustiteln\u00fdch soubor\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u043a\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-auth | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-15T17:09:13+00:00","article:modified_time":"2024-10-15T17:09:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120192","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 07:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:19:19","updated":"2026-01-23 07:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=120192"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120192\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=120192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=120192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=120192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"