{"id":106430,"date":"2023-01-21T00:48:13","date_gmt":"2023-01-20T22:48:13","guid":{"rendered":"https:\/\/prohoster.info\/?p=106430"},"modified":"2023-01-26T22:45:20","modified_gmt":"2023-01-26T20:45:20","slug":"v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","title":{"rendered":"In OpenBSD, the sshd has undergone relinking during boot.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
OpenBSD implements a vulnerability exploitation protection technique based on randomly relinking the sshd executable file at each system boot. Previously, a similar relinking technique was applied to the kernel and the libraries libc.so, libcrypto.so, and ld.so; now it will also be applied to certain executable files. This method is also planned to be implemented for ntpd and other server applications in the near future. The change has already been included in the CURRENT branch and will be offered in the OpenBSD 7.3 release. <\/p>\n
Recompilation makes the function shifts in libraries less predictable, complicating the creation of exploits that utilize return-oriented programming (ROP). When using ROP techniques, an attacker does not attempt to place their code in memory but instead operates with existing pieces of machine instructions in loaded libraries, which end with return control instructions (typically the ends of library functions). The exploit's operation reduces to building a chain of calls to these blocks (\"gadgets\") to achieve the desired functionality. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"