{"id":86642,"date":"2020-06-27T19:42:50","date_gmt":"2020-06-27T17:42:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2020-06-27T19:42:50","modified_gmt":"2020-06-27T17:42:50","slug":"vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"Vyd\u00e1n\u00ed modulu LKRG 0.8 pro ochranu proti exploit\u016fm zranitelnost\u00ed v j\u00e1dru Linuxu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Projekt Openwall <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/announce\/2020\/06\/25\/1\">vydal<\/a><\/noindex> vyd\u00e1n\u00ed j\u00e1drov\u00e9ho modulu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.8<\/a><\/noindex>  (Linux Kernel Runtime Guard), ur\u010den\u00fd k detekci a blokov\u00e1n\u00ed \u00fatok\u016f a poru\u0161en\u00ed integrity jadern\u00fdch struktur. Nap\u0159\u00edklad, modul m\u016f\u017ee chr\u00e1nit p\u0159ed neopr\u00e1vn\u011bn\u00fdmi zm\u011bnami v b\u011b\u017e\u00edc\u00edm j\u00e1d\u0159e a pokusy o zm\u011bnu opr\u00e1vn\u011bn\u00ed u\u017eivatelsk\u00fdch proces\u016f (detekce vyu\u017eit\u00ed exploit\u016f). Modul je vhodn\u00fd jak pro ochranu p\u0159ed ji\u017e zn\u00e1m\u00fdmi exploity jader Linux (nap\u0159\u00edklad v situac\u00edch, kdy je v syst\u00e9mu problematick\u00e9 aktualizovat j\u00e1dro), tak pro pot\u00edr\u00e1n\u00ed exploit\u016f pro dosud nezn\u00e1m\u00e9 zranitelnosti. K\u00f3d projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/Adam_pi3\/lkrg-main\/src\/master\/\">distribuov\u00e1no<\/a><\/noindex> pod licenc\u00ed GPLv2.<\/p>\n<p>Mezi zm\u011bnami v nov\u00e9 verzi:<\/p>\n<ul>\n<li class=\"l\">  Bylo zm\u011bn\u011bno zac\u00edlen\u00ed projektu LKRG, kter\u00fd nyn\u00ed nen\u00ed rozd\u011blen na jednotliv\u00e9 subsyst\u00e9my pro kontrolu integrity a ur\u010den\u00ed vyu\u017eit\u00ed exploit\u016f, ale je prezentov\u00e1n jako jednotn\u00fd produkt pro detekci \u00fatok\u016f a r\u016fzn\u00fdch poru\u0161en\u00ed integrity;\n<li class=\"l\">  Byla zaji\u0161t\u011bna kompatibilita s j\u00e1dry Linux od 5.3 do 5.7, jako\u017e i s j\u00e1dry sestaven\u00fdmi s agresivn\u00edmi optimalizacemi GCC, bez voleb CONFIG_USB a CONFIG_STACKTRACE nebo s volbou CONFIG_UNWINDER_ORC, a tak\u00e9 s j\u00e1dry, v nich\u017e chyb\u00ed zachyt\u00e1van\u00e9 funkce LKRG, pokud se bez nich lze obej\u00edt;\n<li class=\"l\">  P\u0159i sestaven\u00ed byla zaji\u0161t\u011bna kontrola n\u011bkter\u00fdch povinn\u00fdch nastaven\u00ed j\u00e1dra CONFIG_* pro tvorbu smyslupln\u00fdch chybov\u00fdch hl\u00e1\u0161en\u00ed nam\u00edsto nejasn\u00fdch selh\u00e1n\u00ed;\n<li class=\"l\">  Byla p\u0159id\u00e1na podpora re\u017eim\u016f sp\u00e1nku (ACPI S3, suspend to RAM) a hibernace (S4, suspend to disk);\n<li class=\"l\">  Do Makefile byla p\u0159id\u00e1na podpora DKMS;\n<li class=\"l\">  Byla realizov\u00e1na experiment\u00e1ln\u00ed podpora 32bitov\u00fdch platforem ARM (testov\u00e1no na Raspberry Pi 3 Model B). D\u0159\u00edve dostupn\u00e1 podpora AArch64 (ARM64) byla dopln\u011bna o zaji\u0161t\u011bn\u00ed kompatibility s deskou Raspberry Pi 4;\n<li class=\"l\">  Byly p\u0159id\u00e1ny nov\u00e9 zpracovatele (hook), v\u010detn\u011b zpracovatele pro vol\u00e1n\u00ed capable() pro lep\u0161\u00ed ur\u010den\u00ed exploit\u016f manipuluj\u00edc\u00edch &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/capabilities.7.html\">capabilities<\/a><\/noindex>&#171;, a ne identifik\u00e1tory proces\u016f (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/credentials.7.html\">credentials<\/a><\/noindex>);\n<li class=\"l\">  Byla navr\u017eena nov\u00e1 logika pro ur\u010den\u00ed pokus\u016f o opu\u0161t\u011bn\u00ed omezen\u00ed prostor\u016f n\u00e1zv\u016f (nap\u0159\u00edklad z kontejner\u016f Docker);\n<li class=\"l\">  Na syst\u00e9mech x86-64 byla zaji\u0161t\u011bna kontrola a uplatn\u011bn\u00ed bitu SMAP (Supervisor Mode Access Prevention), ur\u010den\u00e9ho k blokov\u00e1n\u00ed p\u0159\u00edstupu k dat\u016fm ve u\u017eivatelsk\u00e9m prostoru z privilegovan\u00e9ho k\u00f3du prov\u00e1d\u011bn\u00e9ho na \u00farovni j\u00e1dra. Ochrana SMEP (Supervisor Mode Execution Prevention) byla realizov\u00e1na d\u0159\u00edve;\n<li class=\"l\">  B\u011bhem provozu byla zaji\u0161t\u011bna um\u00edst\u011bn\u00ed nastaven\u00ed LKRG na str\u00e1nce pam\u011bti, kter\u00e1 je obvykle dostupn\u00e1 pouze pro \u010dten\u00ed;\n<li class=\"l\">  V\u00fdstup do log\u016f informac\u00ed, kter\u00e9 mohou b\u00fdt nejv\u00edce u\u017eite\u010dn\u00e9 pro \u00fatoky (nap\u0159\u00edklad informace o adres\u00e1ch v j\u00e1dru), je omezen na ladic\u00ed re\u017eim (log_level=4 a vy\u0161\u0161\u00ed), kter\u00fd je ve v\u00fdchoz\u00edm nastaven\u00ed vypnut\u00fd.\n<li class=\"l\">  Byla zv\u00fd\u0161ena \u0161k\u00e1lovatelnost DB pro sledov\u00e1n\u00ed proces\u016f &#8212; m\u00edsto jednoho stromu RB, chr\u00e1n\u011bn\u00e9ho jedn\u00edm spinlockem, byla pou\u017eita hash tabulka, kter\u00e1 obsahuje 512 strom\u016f RB, chr\u00e1n\u011bn\u00fdch p\u0159\u00edslu\u0161n\u011b 512 blok\u00e1dami pro \u010dten\u00ed a z\u00e1pis;\n<li class=\"l\">  Byl implementov\u00e1n a ve v\u00fdchoz\u00edm nastaven\u00ed zapnut re\u017eim, ve kter\u00e9m se kontrola integrity identifik\u00e1tor\u016f procesu \u010dasto prov\u00e1d\u00ed pouze pro aktu\u00e1ln\u00ed \u00falohu, a tak\u00e9 voliteln\u011b pro aktivovan\u00e9 (probuzen\u00e9) \u00falohy. Pro ostatn\u00ed \u00falohy, kter\u00e9 jsou ve sp\u00e1nkov\u00e9m stavu nebo b\u011b\u017e\u00ed bez osloven\u00ed kontrolovan\u00e9ho LKRG API j\u00e1dra, se kontrola prov\u00e1d\u00ed m\u00e9n\u011b \u010dasto.\n<li class=\"l\">  Byly p\u0159id\u00e1ny nov\u00e9 sysctl a parametry modulu pro jemn\u00e9 lad\u011bn\u00ed LKRG, stejn\u011b jako dva sysctl pro zjednodu\u0161en\u00e9 lad\u011bn\u00ed v\u00fdb\u011brem z p\u0159ipraven\u00fdch sad jemn\u00fdch nastaven\u00ed (profily);\n<li class=\"l\">  V\u00fdchoz\u00ed nastaven\u00ed byla zm\u011bn\u011bna pro dosa\u017een\u00ed vyv\u00e1\u017een\u011bj\u0161\u00ed rovnov\u00e1hy mezi operativnost\u00ed identifikace poru\u0161en\u00ed a efektivnost\u00ed reakce na jedn\u00e9 stran\u011b, a dopadem na v\u00fdkon a rizikem fale\u0161n\u00fdch pozitiv na stran\u011b druh\u00e9;\n<li class=\"l\">  Unit-f\u00e1ze systemd byla p\u0159epracov\u00e1na pro na\u010dten\u00ed modulu LKRG v ran\u00e9 f\u00e1zi spu\u0161t\u011bn\u00ed (pro vypnut\u00ed modulu lze pou\u017e\u00edt parametr p\u0159\u00edkazov\u00e9 \u0159\u00e1dky j\u00e1dra);\n<\/ul>\n<p>S ohledem na optimalizace navr\u017een\u00e9 v nov\u00e9 verzi se pokles v\u00fdkonu p\u0159i pou\u017eit\u00ed LKRG 0.8 odhaduje na \u00farovni 2,5 % v re\u017eimu standardn\u00edm (&#171;heavy&#187;) a 2 % v odleh\u010den\u00e9m re\u017eimu (&#171;light&#187;). <\/p>\n<p>V ned\u00e1vn\u00e9m <noindex><a rel=\"nofollow\" href=\"http:\/\/jultika.oulu.fi\/files\/nbnfioulu-202004201485.pdf\">v\u00fdzkumu<\/a><\/noindex> efektivity bal\u00ed\u010dk\u016f pro odhalen\u00ed rootkit\u016f LKRG  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/lkrg-users\/2020\/06\/14\/5\">uk\u00e1zalo<\/a><\/noindex> dos\u00e1hl nejlep\u0161\u00edch v\u00fdsledk\u016f, bez fale\u0161n\u00fdch pozitiv\u016f identifikoval 8 z 9 testovan\u00fdch rootkit\u016f, kter\u00e9 fungovaly na \u00farovni j\u00e1dra (byly identifikov\u00e1ny rootkity Diamorphine, Honey Pot Bears, LilyOfTheValley, Nuk3 Gh0st, Puszek, Reptile, Rootfoo Linux Rootkit a Sutekh, ale byl vynech\u00e1n Keysniffer, co\u017e je modul j\u00e1dra s keyloggerem, nikoli rootkit v p\u0159\u00edm\u00e9m smyslu). Pro srovn\u00e1n\u00ed, bal\u00ed\u010dky AIDE, OSSEC a Rootkit Hunter identifikovaly 2 rootkity z 9, zat\u00edmco Chkrootkit \u017e\u00e1dn\u00fd. LKRG p\u0159itom nepodporuje identifikaci rootkit\u016f um\u00edst\u011bn\u00fdch v prostoru u\u017eivatele, tak\u017ee nejvy\u0161\u0161\u00ed efektivity je dosa\u017eeno vyu\u017eit\u00edm kombinace AIDE a LKRG, kter\u00e9 umo\u017enily identifikaci 14 z 15 rootkit\u016f v\u0161ech typ\u016f.<\/p>\n<p>D\u00e1le lze poznamenat, \u017ee v\u00fdvoj\u00e1\u0159 distribuce <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51009\">Whonix<\/a><\/noindex> za\u010dal <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whonix.org\/wiki\/Linux_Kernel_Runtime_Guard_LKRG\">vytv\u00e1\u0159en\u00ed<\/a><\/noindex> hotov\u00fdch bal\u00ed\u010dk\u016f s DKMS pro Debian, Whonix, Qubes a Kicksecure, a bal\u00ed\u010dek pro <noindex><a rel=\"nofollow\" href=\"https:\/\/aur.archlinux.org\/packages\/lkrg-dkms\/\">Arch Linux<\/a><\/noindex> je ji\u017e aktualizov\u00e1n na verzi 0.8. Bal\u00ed\u010dky s LKRG jsou tak\u00e9 p\u0159\u00edtomny v rusk\u00fdch <noindex><a rel=\"nofollow\" href=\"https:\/\/packages.altlinux.org\/ru\/sisyphus\/srpms\/kernel-source-lkrg\">ALT Linux<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52955\">Astra Linux<\/a><\/noindex>.<\/p>\n<p>Kontrola integrity v LKRG se prov\u00e1d\u00ed na z\u00e1klad\u011b porovn\u00e1n\u00ed aktu\u00e1ln\u00edho k\u00f3du a dat j\u00e1dra a modul\u016f, n\u011bkter\u00fdch d\u016fle\u017eit\u00fdch strukturovan\u00fdch dat a nastaven\u00ed CPU s ulo\u017een\u00fdmi hashi nebo kopi\u00ed p\u0159\u00edslu\u0161n\u00fdch oblast\u00ed pam\u011bti, strukturovan\u00fdch dat nebo registr\u016f. Kontroly jsou aktivov\u00e1ny jak periodicky podle \u010dasova\u010de, tak p\u0159i v\u00fdskytu r\u016fzn\u00fdch ud\u00e1lost\u00ed.<\/p>\n<p>Ur\u010den\u00ed mo\u017en\u00e9ho pou\u017eit\u00ed exploit\u016f a blokov\u00e1n\u00ed \u00fatok\u016f prob\u00edh\u00e1 ve f\u00e1zi p\u0159ed poskytnut\u00edm j\u00e1drem p\u0159\u00edstupu k prost\u0159edk\u016fm (nap\u0159\u00edklad p\u0159ed otev\u0159en\u00edm souboru), ale po z\u00edsk\u00e1n\u00ed neopr\u00e1vn\u011bn\u00fdch opr\u00e1vn\u011bn\u00ed procesem (nap\u0159\u00edklad zm\u011bna UID). P\u0159i zji\u0161t\u011bn\u00ed neopr\u00e1vn\u011bn\u00e9ho chov\u00e1n\u00ed proces\u016f se ve v\u00fdchoz\u00edm nastaven\u00ed provede jejich nucen\u00e9 ukon\u010den\u00ed, co\u017e je dostate\u010dn\u00e9 pro zablokov\u00e1n\u00ed mnoha exploit\u016f.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53244\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86642","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed modulu LKRG 0.8 pro ochranu p\u0159ed exploitac\u00ed zranitelnost\u00ed v j\u00e1d\u0159e Linux | ProHoster","description":"Projekt Openwall zve\u0159ejnil vyd\u00e1n\u00ed modulu j\u00e1dra","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:50+00:00","article:modified_time":"2020-06-27T17:42:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86642","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:11:04","updated":"2022-10-02 21:11:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=86642"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86642\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=86642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=86642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=86642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}