{"id":114685,"date":"2024-04-01T00:25:44","date_gmt":"2024-03-31T22:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock"},"modified":"2024-04-01T00:25:44","modified_gmt":"2024-03-31T22:25:44","slug":"v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","title":{"rendered":"A change was detected in the xz codebase that prevented the activation of the Landlock protection mechanism","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
In the xz project repository, modifications by the backdoor author to block protection mechanisms continue to surface. A change was detected in the CMakeLists.txt build script that prevented the use of the Landlock application isolation mechanism, despite its support in the system. An unnecessary dot was intentionally added to the C code checking the availability of the Landlock system call, causing the Landlock check to fail under all conditions. <\/p>\n
The change was added by Jia Tan on February 26 as part of the implementation of enhanced Landlock support checking. Previously, support for Landlock was determined solely based on the presence of the header file linux\/landlock.h<\/code>, but the change introduced a C language test that additionally calls prctl for verification. Due to the presence of a leading dot in the initial line, this code was non-functional, and the test always failed. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"