{"id":114685,"date":"2024-04-01T00:25:44","date_gmt":"2024-03-31T22:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock"},"modified":"2024-04-01T00:25:44","modified_gmt":"2024-03-31T22:25:44","slug":"v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","title":{"rendered":"I koden til xz er der identificeret en \u00e6ndring, som har forhindret aktiveringen af Landlock-beskyttelsesmekanismen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I projektets xz-repository forts\u00e6tter \u00e6ndringer at dukke op, som er lavet af forfatteren af bagd\u00f8ren for at blokere beskyttelsesmekanismer. I build scriptet CMakeLists.txt er der opdaget en \u00e6ndring, som ikke tillod brug af Landlock-applikationsisolationsmekanismen, n\u00e5r den blev underst\u00f8ttet af systemet. I C-koden, der kontrollerer tilg\u00e6ngeligheden af systemopkaldet Landlock, blev der med vilje tilf\u00f8jet et ekstra punktum, hvilket medf\u00f8rte, at kontroltesten for Landlock ikke kunne passeres under nogen omst\u00e6ndigheder. <\/p>\n

\u00c6ndringen blev tilf\u00f8jet af Jia Tan den 26. februar under p\u00e5skud af at implementere en udvidet kontrol af underst\u00f8ttelsen af Landlock. Tidligere blev vurderingen af underst\u00f8ttelsen af Landlock kun baseret p\u00e5 tilstedev\u00e6relsen af header-filen \u00ablinux\/landlock.h\u00bb, men i \u00e6ndringen blev der tilf\u00f8jet en test skrevet i C, som yderligere kalder prctl for at kontrollere det. P\u00e5 grund af en efterladt punkt i starten af linjen var denne kode ubrugelig, og testen afsluttede altid med fiasko.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 CMakeLists.txt \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 xz \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock, \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 Landlock, \u0431\u044b\u043b\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u043d\u044f\u044f \u0442\u043e\u0447\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114685","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47I xz-kodebasen er der opdaget en \u00e6ndring, som forhindrede aktiveringen af Landlock-beskyttelsesmekanismen | ProHoster","description":"I projektets xz-repository forts\u00e6tter \u00e6ndringer at dukke op, som er lavet af forfatteren af bagd\u00f8ren for at blokere beskyttelsesmekanismer.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 xz \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043c\u0435\u0448\u0430\u0432\u0448\u0435\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Landlock | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-31T22:25:44+00:00","article:modified_time":"2024-03-31T22:25:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/114685","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=114685"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/114685\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=114685"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=114685"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=114685"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}