{"id":102806,"date":"2021-12-29T15:36:50","date_gmt":"2021-12-29T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0"},"modified":"2021-12-29T15:36:50","modified_gmt":"2021-12-29T13:36:50","slug":"%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","title":{"rendered":"LKRG 0.9.2 mooduli v\u00e4ljalaskmine Linuxi tuuma haavatavuste \u00e4rahoidmiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Openwall projekt avaldas Linuxi tuuma LKRG 0.9.2 (Linux Kernel Runtime Guard) mooduli, mis on m\u00f5eldud tuuma struktuuride r\u00fcnnakute ja terviklikkuse rikkumiste tuvastamiseks ja blokeerimiseks. N\u00e4iteks v\u00f5ib moodul kaitsta volitamata muudatuste eest t\u00f6\u00f6tavas tuumas ja kasutajaprotsesside privileegide muutmise katsete eest (exploitide rakendamise tuvastamine). Moodul sobib nii olemasolevate Linuxi tuuma haavatavuste (nt olukordades, kus s\u00fcsteemi on keeruline uuendada) exploitide kaitsmiseks kui ka veel tundmatute haavatavuste exploitide ennetamiseks. Projekti kood on litsentseeritud GPLv2 alusel. LKRG rakendamise erip\u00e4radest saab lugeda projekti esimesest \u00fcleskutsest.         <\/p>\n<p>Uues versioonis on j\u00e4rgmised muudatused:  <\/p>\n<ul>\n<li class=\"l\"> Tagatud on \u00fchilduvus Linuxi tuumadega versioonides 5.14 kuni 5.16-rc, samuti LTS-tuumade v\u00e4rskendustega 5.4.118+, 4.19.191+ ja 4.14.233+.\n<li class=\"l\"> Lisatud tugi erinevatele CONFIG_SECCOMP konfiguratsioonidele.\n<li class=\"l\"> Tuetust on lisatud tuuma parameetrit &#171;nolkrg&#187; LKRG deaktiveerimiseks selle k\u00e4ivitamise etapis.\n<li class=\"l\"> Eemaldatud vale aktiveerimine SECCOMP_FILTER_FLAG_TSYNC t\u00f6\u00f6tlemise k\u00e4igus esineva v\u00f5istluse olukorra t\u00f5ttu.\n<li class=\"l\"> T\u00f6\u00f6tatud on v\u00e4lja v\u00f5imalus kasutada CONFIG_HAVE_STATIC_CALL seadistust Linuxi tuumades 5.10+ teiste moodulite v\u00e4ljalaskmiseks ja v\u00f5istlusolukordade blokeerimiseks.\n<li class=\"l\"> Tagatud on blokeeritud moodulite nimede salvestamine logisse, kui kasutatakse seadistust lkrg.block_modules=1.\n<li class=\"l\"> Tehtud on sysctl seadistuste asetus failis \/etc\/sysctl.d\/01-lkrg.conf.\n<li class=\"l\"> Lisatud on dkms.conf konfiguratsioonifail DKMS (Dynamic Kernel Module Support) s\u00fcsteemile, mis on m\u00f5eldud kolmandate osapoolte moodulite kogumiseks p\u00e4rast tuuma v\u00e4rskendamist.\n<li class=\"l\"> Parandatud ja uuendatud on versioonide toetamist ja pideva integratsiooni s\u00fcsteeme.      <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56430\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.2 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102806","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.2 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.9.2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.2 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-12-29T13:36:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-12-29T13:36:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 LKRG 0.9.2 mooduli v\u00e4ljalaskmine Linuxi tuuma haavatavuste ekspliteerimise kaitseks | ProHoster","description":"Openwall projekt avaldas Linuxi tuuma LKRG 0.9.2 (Linux Kernel Runtime Guard) mooduli, mis on m\u00f5eldud tuuma struktuuride r\u00fcnnakute ja terviklikkuse rikkumiste tuvastamiseks ja blokeerimiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.9.2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.2 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-29T13:36:50+00:00","article:modified_time":"2021-12-29T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102806","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-29 13:37:54","updated":"2022-09-28 16:30:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102806"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102806\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}