{"id":114685,"date":"2024-04-01T00:25:44","date_gmt":"2024-03-31T22:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock"},"modified":"2024-04-01T00:25:44","modified_gmt":"2024-03-31T22:25:44","slug":"v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","title":{"rendered":"xz koodibaasis tuvastati muudatus, mis takistas Landlocki kaitsemehhanismi aktiveerimist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekt xz arhiivis j\u00e4tkuvad muudatused, mille on teinud tagaukse autor, et blokeerida kaitses\u00fcsteemide mehhanismid. CMakeLists.txt koostamisstsenaariumis tuvastati muudatus, mis ei lubanud xz kasutada Landlock'i rakenduste eraldamise mehhanismi, kui see on s\u00fcsteemis toetatud. C programmikood, mis kontrollib Landlock'i s\u00fcsteemik\u00f5nede k\u00e4ttesaadavust, sisaldas tahtlikult liigset punkti, mis p\u00f5hjustas selle, et Landlock'i olemasolu kontroll eba\u00f5nnestus k\u00f5igis olukordades. <\/p>\n

Muutatus lisati Jia Tan poolt 26. veebruaril, et rakendada laienenud Landlocki toe kontrolli. Varem tehtud toetuse j\u00e4reldus p\u00f5hines ainult pealkirjafaili 'linux\/landlock.h' olemasolul, kuid muudatuses lisati C-keeles kirjutatud test, mis t\u00e4iendavalt kutsub prctl'i, et kontrollida. Alguses j\u00e4\u00e4nud punktit\u00fcki t\u00f5ttu ei olnud see kood funktsionaalne ja test l\u00f5ppes alati eba\u00f5nnestumisega.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 CMakeLists.txt \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 xz \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock, \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 Landlock, \u0431\u044b\u043b\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u043d\u044f\u044f \u0442\u043e\u0447\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114685","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt xz koodibaasis tuvastati muudatus, mis takistas Landlock'i kaitsemehhanismi aktiveerimist | ProHoster","description":"Projekt xz arhiivis j\u00e4tkuvad muudatused, mille on teinud tagaukse autor, et blokeerida kaitses\u00fcsteemide mehhanismid. CMakeLists.txt koostamisstsenaariumis tuvastati muudatus, mis ei lubanud xz kasutada Landlock'i rakenduste eraldamise mehhanismi, kui see on s\u00fcsteemis toetatud. C programmikood, mis kontrollib Landlock'i s\u00fcsteemik\u00f5nede k\u00e4ttesaadavust, sisaldas tahtlikult liigset punkti, mis p\u00f5hjustas sellele, et Landlock'i olemasolu kontroll eba\u00f5nnestus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 xz \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043c\u0435\u0448\u0430\u0432\u0448\u0435\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Landlock | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 CMakeLists.txt \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 xz \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock, \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 Landlock, \u0431\u044b\u043b\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u043d\u044f\u044f \u0442\u043e\u0447\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-31T22:25:44+00:00","article:modified_time":"2024-03-31T22:25:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114685","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=114685"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114685\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=114685"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=114685"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=114685"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}