{"id":105272,"date":"2022-10-09T09:37:09","date_gmt":"2022-10-09T07:37:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov"},"modified":"2022-10-09T09:37:09","modified_gmt":"2022-10-09T07:37:09","slug":"v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","title":{"rendered":"\u00c6ndringer er blevet vedtaget i OpenBSD for yderligere beskyttelse af processernes hukommelse.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Theo de Raadt har tilf\u00f8jet en r\u00e6kke patches til OpenBSD's kodebase for at give ekstra beskyttelse af processernes hukommelse i brugeromr\u00e5det. Udviklere f\u00e5r et nyt systemopkald og en tilh\u00f8rende biblioteksfunktion ved navn mimmutable, som g\u00f8r det muligt at fastl\u00e5se adgangsrettighederne, n\u00e5r det afspejles i hukommelsen (memory mappings). Efter fastl\u00e5sning kan de rettigheder, der er tildelt hukommelsesomr\u00e5det, s\u00e5som forbud mod skrivning og udf\u00f8relse, ikke \u00e6ndres ved senere opkald til funktionerne mmap(), mprotect() og munmap(), som vil returnere fejlen EPERM ved et fors\u00f8g p\u00e5 \u00e6ndring. <\/p>\n
For managing the ability to change rights of reflected memory for object files, a new section Mutable BSS (.openbsd.mutable, Mutable Block Starting Symbol) has been proposed, along with new flags PF_MUTABLE and UVM_ET_IMMUTABLE. The linker has been updated to support defining the sections «openbsd.mutable» and placing them in a separate area in BSS, aligned to the memory page boundary. By calling the function mimmutable, it becomes possible to mark all reflected areas as immutable, except for sections marked as «openbsd.mutable». This new feature will be delivered to users in the OpenBSD 7.3 release. \n Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"