{"id":100612,"date":"2021-06-28T10:23:04","date_gmt":"2021-06-28T08:23:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-13"},"modified":"2021-06-28T10:23:04","modified_gmt":"2021-06-28T08:23:04","slug":"reliz-yadra-linux-5-13","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","title":{"rendered":"Linux 5.13 tuuma v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &#171;misc&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU  Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI (Control Flow Integrity), LSM-\u043c\u043e\u0434\u0443\u043b\u044c Landlock \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0431\u0430\u0437\u0435 virtio, multi-shot \u0440\u0435\u0436\u0438\u043c \u0432 io_uring.       <\/p>\n<p>\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 17189 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2150 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 (\u0441\u0430\u043c\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438), \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 60 \u041c\u0411 (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 12996 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e 794705 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430, \u0443\u0434\u0430\u043b\u0435\u043d\u043e 399590 \u0441\u0442\u0440\u043e\u043a). \u041e\u043a\u043e\u043b\u043e 47% \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 5.13 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 14% \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043c\u0435\u044e\u0442  \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, 13%  \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, 5% &#8212; \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 4% c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438  \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.    <\/p>\n<p>P\u00f5hilised uuendused:  <\/p>\n<ul>\n<li class=\"l\"> <b>Disski alams\u00fcsteem, sisend\/v\u00e4ljund ja failis\u00fcsteemid<\/b>\n<ul>\n<li class=\"l\"> Lisatud tugi EROFS-i (Enhanced Read-Only File System) failis\u00fcsteemile, mille on v\u00e4lja pakkunud Huawei ja mis on m\u00f5eldud ainult lugemisre\u017eiimis olevate jaotiste jaoks. Uus failis\u00fcsteem toetab andmete salvestamist kokkusurutud kujul ning v\u00f5rreldes Ext4-ga n\u00e4itab see sarnast j\u00f5udlust j\u00e4rjestikuste lugemisoperatsioonide tegemisel, kuid \u00fcletab Ext4-d andmete juhusliku ligip\u00e4\u00e4su korral kordades. N\u00e4iteks 4:1 kokkusurumise astme ja testimise korral <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-dronten\/\"   title=\"serveril\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2637\">serveril<\/a> HDD-ga \u00fcletas EROFS failis\u00fcsteem Ext4 juhuslikus lugemises rohkem kui kuus korda, samas kui Android-smartfoniga, millel on Flash, peaaegu kolm korda. Nagu teiste lugemiseks m\u00f5eldud failis\u00fcsteemide puhul, on EROFS struktuur oluliselt lihtsustatud, j\u00e4ttes rakenduses v\u00e4lja m\u00f5ned metadatatsoonid, nagu t\u00f6\u00f6nahast vaba plokkide kaart.\n<li class=\"l\"> \u0414\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b SMB3 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f &#171;rasize&#187;, \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u043a\u043d\u0430 \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f (readahead) \u0434\u043b\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0438\u0434\u043e\u0432 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n<li class=\"l\"> Ext4 fail s\u00fcsteem v\u00f5imaldab katalooge kustutades elementide \u00fcmberkirjutamist. Samuti on ext4-s lubatud samal ajal kasutada suurustundetust re\u017eiimi ja kr\u00fcpteerimist.\n<li class=\"l\"> ExFAT fail s\u00fcsteemis on lisatud toe ioctl-k\u00e4sklusele FITRIM (discard), et teavitada salvestusseadet kasutamata blokke.\n<li class=\"l\"> XFS fail s\u00fcsteemis on lisatud v\u00f5imalus vabastada ruumi viimase jaotuse grupist, mis on esimene samm olemasolevate XFS jaotuste suuruse v\u00e4hendamise funktsiooni rakendamisel.\n<li class=\"l\"> Lisatud on uus s\u00fcsteemik\u00f5ne quotactl_path, mis erineb quotactlist sellest, et v\u00f5imaldab kvote hallata mitte spetsiaalse seadme faili kaudu, vaid failis\u00fcsteemi mount-punkti tee m\u00e4\u00e4ramise kaudu.\n<li class=\"l\"> Fanotify mehhanismis on laiendatud v\u00f5imalusi, mis on kergesti ligip\u00e4\u00e4setavad mitteprivileegitud kasutajatele. N\u00e4iteks inotify sarnaselt saab n\u00fc\u00fcd, ilma SYS_CAP_ADMIN \u00f5igusteta, j\u00e4lgida s\u00fcndmusi OPEN, ACCESS, MODIFY ja CLOSE failide ja kaustade kohta.                                    <\/ul>\n<li class=\"l\"> <b>M\u00e4lu ja s\u00fcsteemiteenused<\/b>\n<ul>\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 cgroup  &#8212; &#171;Misc&#187; (CONFIG_CGROUP_MISC), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0430\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0430 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0430\u0432\u0430\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 cgroup  \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 AMD SEV (Secure Encrypted Virtualization).\n<li class=\"l\"> \u0412 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435  \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 POLL \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0440\u0435\u0436\u0438\u043c &#171;multi-shot&#187;, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c POLL \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f, \u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c  \u0438 \u043c\u043e\u0436\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0431\u044b\u0442\u0438\u0439.\n<li class=\"l\"> Reaalajas tuumavarsest on \u00fcle toodud kood, mis tagab tuuma voogudes tarkvara genereeritud katkestuste t\u00f6\u00f6tlemise, mis v\u00f5imaldab neid k\u00f5rgema prioriteediga protsessidega v\u00e4lja t\u00f5rjuda.\n<li class=\"l\"> Lisatud sisemine netfs teegi, kuhu on viidud t\u00fc\u00fcpilised funktsioonid, mida kasutatakse v\u00f5rgufailis\u00fcsteemides.\n<li class=\"l\"> PowerPC arhitektuurile on rakendatud ajakontrollide (time namespaces) toimet, mis v\u00f5imaldavad konteineris oma aega kasutada.\n<li class=\"l\"> RISC-V arhitektuuri jaoks on rakendatud kexec, crash dump, kprobe ja tuuma k\u00e4ivitamine kohapeal (execute-in-place, k\u00e4itamine algses m\u00e4lus, ilma laadimata RAM-i).\n<li class=\"l\"> BPF-i j\u00e4lgimisprogrammides on v\u00f5imalik kasutada \u00fclesande kohalikku andmete salvestust (task-local storage), mis tagab k\u00f5rgema j\u00f5udluse, sidudes andmed konkreetse BPF-i t\u00f6\u00f6tlejaga.\n<li class=\"l\"> Uus mehhanism otse tuumafunktsioonide kutsumiseks BPF-programmidest on rakendatud, mida on juba kasutatud TCP \u00fclekande algoritmide teostamiseks. Turvalisuse tagamiseks peavad kutsutavad funktsioonid olema selgelt m\u00e4\u00e4ratletud heakskiidulikus nimekirjas.\n<li class=\"l\"> Funktsioonide j\u00e4lgimis\u00fcsteemi ftrace on lisatud valik func-no-repeats, mis v\u00f5imaldab kuvada j\u00e4rjestikuseid korduvaid funktsiooni kutsungeid loendina.\n<li class=\"l\"> Kasutajapoolse m\u00e4luh\u00e4irete (userfaultfd()) s\u00fcsteemikutsesse, mis on m\u00f5eldud lehek\u00fclgede veateadete k\u00e4sitlemiseks, on lisatud v\u00f5imalus hallata osalisi veateateid, kus m\u00e4heleht on olemas, kuid sellel ei ole kirjet m\u00e4lulehek\u00fcljete tabelis.\n<li class=\"l\"> Tugi toetamine erifaili \/dev\/kmem l\u00f5petati, mis andis juurdep\u00e4\u00e4su kogu tuuma aadressiruumi. See fail on tunnistatud aegunuks ja tekitab turvaprobleeme.\n<li class=\"l\"> Intel'i kiipide jaoks on v\u00e4lja t\u00f6\u00f6tatud uus jahutuse juhtimise draiver, mis v\u00f5imaldab protsessori sageduse v\u00e4hendamist \u00fclekuumenemise ohu korral. Erinevalt olemasolevast TCC (Thermal Control Circuit) aktiveerimise mehhanismist manipuleerib uus draiver suhteliste v\u00e4\u00e4rtustega, st v\u00e4hendab sagedust oluliselt temperatuuri t\u00f5usmist ootamata, kuid mitte enne kriitilise v\u00e4\u00e4rtuse \u00fcletamist.                <\/ul>\n<li class=\"l\"> <b>Virtualiseerimine ja turvalisus<\/b>\n<ul>\n<li class=\"l\"> LSM-modul, mis tagab rakenduste isoleerimise l\u00e4bi Landlocki, on loodud protsessigruppide vahelise suhtluse piiramiseks v\u00e4liskeskkonnaga. See on v\u00e4lja t\u00f6\u00f6tatud arvesse v\u00f5ttes selliseid isoleerimismeetodeid nagu XNU Sandbox, FreeBSD Capsicum ja OpenBSD Pledge\/Unveil. Juurdep\u00e4\u00e4su m\u00e4\u00e4ramine toimub BPF-programmi abil, kuid erinevalt seccomp-bpf'ist ei filtri Landlock s\u00fcsteemik\u00f5nesid ja nende argumente, vaid v\u00f5imaldab piirata ydraakobjektide kasutamist, nagu failihierarhiad. Landlock v\u00f5imaldab igal protsessil, sealhulgas ilma privileegideta, end t\u00f5husalt isoleerida ja takistada isoleerimise \u00fcmbersuunamist haavatavuste v\u00f5i pahatahtlike muudatuste avastamise korral. Landlock loob protsessile kaitstud isoleeritud keskkonnad, mida rakendatakse olemasolevate juurdep\u00e4\u00e4suhaldusmehhanismide \u00fclemise kihtina. N\u00e4iteks v\u00f5ib programm keelata juurdep\u00e4\u00e4su failidele v\u00e4ljaspool t\u00f6\u00f6kausta.\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0439 \u0432 \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0435\u043a. \u0421\u0443\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0433\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0438 \u0441\u0442\u0435\u043a\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0434\u0440\u0435\u0441\u0430\u0445, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435 \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0435\u043a\u0430 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u0441\u044f.  \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 &#171;randomize_kstack_offset=on\/off&#187; \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT. \u041d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0440\u0430\u0441\u0445\u043e\u0434\u044b  \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 1% \u043f\u043e\u0442\u0435\u0440\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n<li class=\"l\"> Lisatud on tugi kernel'i \u00fclesehitamiseks, mis sisaldab Clang'i kompilaatoris CFI (Control Flow Integrity, juhtimisvoo terviklikkuse) kaitse mehhanismi, mis lisab iga kaudse funktsiooni kutsungi eel kontrolli, et tuvastada m\u00f5ningaid m\u00e4\u00e4ramatuse vorme, mis v\u00f5ivad potentsiaalselt katkestada normaalse t\u00e4itmise j\u00e4rjekorra (control flow) haldamise, muuta m\u00e4lu funktsioonide pointereid. CFI sissel\u00fclitamiseks on ette n\u00e4htud parameeter CONFIG_CFI_CLANG.\n<li class=\"l\"> \u0412 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u044f\u0434\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (key ring) \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 (Trusted Keys) \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0438 \u0438\u0437 TPM-\u043c\u043e\u0434\u0443\u043b\u0435\u0439, \u043d\u043e \u0438 \u0438\u0437 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 TEE (Trusted Execution Environment). \u0414\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 &#171;trusted.source&#187;. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 ASN.1.\n<li class=\"l\"> K\u00e4ivitamise ajal on lisatud parameeter, et ennetavalt laadida tagasi kutsutud sertifikaatide nimekiri. Lahendatud on probleem (CVE-2020-26541), mille t\u00f5ttu ignoreeriti UEFI Secure Boot mustas nimekirjas sertifikaate, mis on esitatud formaadis EFI_CERT_X509_GUID, mis v\u00f5imaldas s\u00fcsteemi laadimist tagasi kutsutud sertifikaadiga.\n<li class=\"l\"> Ydri kr\u00fcptos\u00fcsteemi on lisatud ECDSA digitaalsete allkirjade kontrollimise toimetuse toetamist, mis p\u00f5hineb elliptilistel k\u00f5veratel.\n<li class=\"l\"> Rakendatud on SELinuxi poliitikate sertifitseerimist IMA (Integrity Measurement Architecture) alusel, mis tagab andmete terviklikkuse kontrollimiseks hashide andmebaasi haldamise.                              <\/ul>\n<li class=\"l\"> <b>V\u00f5rgu alams\u00fcsteem<\/b>\n<ul>\n<li class=\"l\"> WiMAX tehnoloogia tugi on eemaldatud, kuna see ei ole enam avalikes v\u00f5rkudes kasutusel, ja ainsaks tuumajuhiks, millega WiMAX-i kasutada, j\u00e4\u00e4b vananenud Intel 2400m draiver. NetworkManageri v\u00f5rgukonfiguratoris l\u00f5petati WiMAX-i tugi 2015. aastal. Praeguseks on WiMax praktiliselt t\u00e4ielikult asendatud selliste tehnoloogiatega nagu LTE, HSPA+ ja Wi-Fi 802.11n.\n<li class=\"l\"> Lisatud draiver MANA (Microsoft Azure Network Adapter) v\u00f5rgukohandurile.\n<li class=\"l\"> Draiverisse ath11k on lisatud tugi Qualcomm QCN9074 juhtmeta moodulitele, mis toetavad 802.11ax.\n<li class=\"l\"> Draiveris iwlwifi on rakendatud passiivse skaneerimise v\u00f5imalus 6 GHz vahemikus. Ukrainale on lisatud tugi IEEE 802.11ax sisse- ja v\u00e4ljal\u00fclitamiseks BIOSi seadete p\u00f5hjal.\n<li class=\"l\"> XDP (eXpress Data Path) alams\u00fcsteemi optimeerimine on v\u00f5imaldanud manipuleerida v\u00f5rgupakettidega enne nende t\u00f6\u00f6tlemist Linuxi tuumav\u00f5rgustikus. Tehtud testid n\u00e4itavad XDP j\u00f5udluse suurenemist 4\u20138%. Virtio seadmete puhul v\u00f5ib AF_XDP tarkvarat\u00f6\u00f6tluse j\u00f5udluskasv ulatuda 33%-ni.\n<li class=\"l\"> ICMP-is on rakendatud laiendatud PROBE s\u00f5numite tugi, nagu on m\u00e4\u00e4ratletud RFC 8335-s.\n<li class=\"l\"> J\u00e4tkatud integreerimist MPTCP (MultiPath TCP) tuumasse, TCP protokolli laiendus, mis organiseerib TCP-\u00fchenduse, edastades pakette samal ajal mitme marsruudi kaudu erinevate v\u00f5rguliideste kaudu, mis on seotud erinevate <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/lir\/ipv4\/\"   title=\"IP-aadressidega\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4455\">IP-aadressidega<\/a>. Uues v\u00e4ljaandes on lisatud sockopt toe t\u00fc\u00fcpide valikute m\u00e4\u00e4ramiseks. Teostatud on eraldi alamvoogude (subflow) l\u00e4htestamise v\u00f5imalus.\n<li class=\"l\"> Netfilterisse on lisatud ressursside haldamise tugi, kasutades \u00fchtset cgroups v2 hierarhiat.\n<li class=\"l\"> Ethtoolis on rakendatud liides IEEE MIB statistika lugemiseks, toetades mlx5 ja bnxt. V\u00f5rgudraiveritele on lubatud \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 SFP EEPROM, manipuleerides mitte paariga nihke + suurus, vaid m\u00e4lu lehtedega.        <\/ul>\n<li class=\"l\"> <b>Seadmed<\/b>\n<ul>\n<li class=\"l\"> On rakendatud esialgne tugi Apple M1 ARM-kiibile, mis h\u00f5lmab katkestuste kontrollerit, taimerit, UART-i, SMP-d, sisendi\/v\u00e4ljundi korraldamise funktsioone ja MMIO-d. GPU tagasiviimine ei ole veel l\u00f5petatud, v\u00e4ljundi korraldamiseks on pakutud raamifailide ja konsooli toetust j\u00e4rjestikuse porta kaudu.\n<li class=\"l\"> \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u044f\u0434\u0440\u0430 \u043e\u0442 \u0441\u0442\u0430\u0440\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b &#171;gasket&#187; (Google ASIC), &#171;sysace&#187;, &#171;umem&#187; \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432.\n<li class=\"l\"> \u041f\u043e\u0441\u043b\u0435 13 \u043b\u0435\u0442 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0432\u0435\u0442\u043a\u0435 staging \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0451\u043d \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &#171;comedi&#187; \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n<li class=\"l\"> Lisatud on GUD (Generic USB Display) draiver, mis rakendab p\u00f5hija juhi ekraanidele ja TV-adapteritele, mis on \u00fchendatud USB-liidese kaudu. Draiver pakub DRM-i omadusi (Direct Rendering Manager) pildi p\u00f6\u00f6ramiseks, heledusreguleerimiseks, EDID-i juurde p\u00e4\u00e4semiseks, videore\u017eiimide seadistamiseks ja TV-\u00fchendamiseks, mida saab kasutada spetsiifiliste seadmete draiverite loomise aluseks.\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &#171;virtio&#187; \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0432\u0443\u043a\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435 \u0438 \u0431\u0435\u0437 \u044d\u043c\u0443\u043b\u044f\u0446\u0438\u0438.\n<li class=\"l\"> amdgpu draiverisse on lisatud esmane tugi GPU Aldebaran (gfx90a). FreeSync tehnoloogia esmane tugi HDMI-le on aktiveeritud (varem oli saadaval ainult DisplayPort'is), v\u00f5imaldades ekraanil uuendussageduse kohandamist. ASSR (Alternatiivne Segaja T\u00fchjendamise Reset) tugi on lisatud. Lisatud ioctl video kodeerimise ja dekodeerimisega seotud v\u00f5imaluste p\u00e4rimiseks. Lisatud CONFIG_DRM_AMD_SECURE_DISPLAY re\u017eiim kriitilise teabe kuvamiseks m\u00f5eldud ekraanide muutuste tuvastamiseks. Energiat s\u00e4\u00e4stva mehhanismi ASPM tugi on samuti lisatud.\n<li class=\"l\"> i915 draiveris Intel graafikakaartidele on lisatud tugi Intel Alderlake-S kiipidele. Lisatud eDP MSO (Embedded DisplayPort Multi-SST Operation) tugi.\n<li class=\"l\"> Lisatud tugi m\u00e4ngukontrollerile Luna (Amazon), samuti puuteekraanidele Hycon HY46XX, ILITEK Lego seeriale ja MStar MSG2638.      <\/ul>\n<\/ul>\n<p>\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043b\u0430\u0442\u0438\u043d\u043e\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0439 \u0424\u043e\u043d\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u041f\u041e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b  \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430 5.11 &#8212; Linux-libre 5.11-gnu, \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442  \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0435\u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c. \u0412 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430   comedi. \u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u0434\u0440\u0430\u0439\u0432\u0430\u0435\u0440\u043e\u0432 cyclades, isicom tty \u0438 i2400m wimax, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0438\u0437 \u044f\u0434\u0440\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d \u043a\u043e\u0434 \u0447\u0438\u0441\u0442\u043a\u0438 \u0431\u043b\u043e\u0431\u043e\u0432 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 amdgpu, i915 csr, r8152 usb, mhi bus, x86 touchscreen \u0438 qualcomm arm64.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55397\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &#171;misc&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100612","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-yadra-linux-5-13\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-yadra-linux-5-13\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxi tuuma version 5.13 | ProHoster","description":"P\u00e4rast kahte kuud arendust esitles Linus Torvalds Linuxi tuuma versiooni 5.13. K\u00f5ige m\u00e4rgatavamate muudatuste seas on: failis\u00fcsteem EROFS, esialgne tugi Apple M1 kiipidele, cgroup-kontroller \"misc\", \/dev\/kmem toe l\u00f5petamine, uute Intel ja AMD GPUde tugi, v\u00f5imalus kutsuda otse tuuma funktsioone BPF-programmidest, tuuma stacki randomiseerimine iga s\u00fcsteemi kutse jaoks, v\u00f5imalus kompilatsiooniks Clang'iga CFI kaitsega.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-28T08:23:04+00:00","article:modified_time":"2021-06-28T08:23:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-28 08:57:57","updated":"2026-02-09 21:38:12"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100612"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100612\/revisions"}],"predecessor-version":[{"id":164333,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100612\/revisions\/164333"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}