{"id":120192,"date":"2024-10-15T19:09:13","date_gmt":"2024-10-15T17:09:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth"},"modified":"2024-10-15T19:09:13","modified_gmt":"2024-10-15T17:09:13","slug":"v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","title":{"rendered":"OpenSSH-s on autentimise kood viidud eraldi protsessi sshd-auth","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH arendajad j\u00e4tkasid sshd-i jagamist mitmeks eraldi t\u00e4idetavaks failiks. Maikuus toimunud esimeses etapis viidi sshd-st eraldi protsessi sshd-session'isse funktsioonid, mis on seotud sessioonide t\u00f6\u00f6tlemisega, ning sshd-sse j\u00e4\u00e4b vaid funktsionaalsus, mis on vajalik uue v\u00f5rgu\u00fchenduse vastuv\u00f5tmiseks ja iga uue sessiooni jaoks sshd-session'i k\u00e4ivitamiseks. Eile tehti OpenSSH koodibaasis muudatus, mis lisas veel \u00fche protsessi - sshd-auth, kuhu sshd-session'ist viidi \u00fcle autentimise tegelev kood. <\/p>\n

Protsess sshd-auth k\u00e4ivitatakse sshd-sessionist ja v\u00f5imaldab veelgi isoleerida autentimisega seotud andmed eraldi protsessi aadressiruumi, mis ei luba p\u00e4\u00e4seda nendele andmetele m\u00e4lus, kui r\u00fcnnatakse koodi, mida kasutatakse \u00fchendamise etappide t\u00f6\u00f6tlemiseks enne autentimise l\u00f5pule viimist. Lisaks v\u00e4hendab muudatus veidi m\u00e4lutarvet, kuna autentimisega seotud kood on n\u00fc\u00fcd m\u00e4lus olemas ainult autentimise ajal ja seej\u00e4rel laaditakse v\u00e4lja sshd-auth protsessi l\u00f5petamisel. <\/p>\n

Sarnaselt sshd, ssh-session ja ssh-agent'iga rakendati sshd-auth protsessi jaoks t\u00e4idetava faili juhuslikku \u00fcmberkorraldamist igal operatsioonis\u00fcsteemi k\u00e4ivitamisel. Juhuslik \u00fcmberkorraldamine muudab funktsioonide viidete \u00e4raarvamise keeruliseks t\u00e4idetavates failides ja raamatukogudes, mis teeb keeruliseks ROP (Return-Oriented Programming) meetoditega eksploiteerimise loomise. ROP tehnikat kasutades ei \u00fcritab r\u00fcndaja paigutada oma koodi m\u00e4llu, vaid opereerib juba olemasolevate masiinijuhiste t\u00fckkidega, mis l\u00f5ppevad juhtimise tagastamise k\u00e4suga (tavaliselt funktsioonide l\u00f5ppudega). Eksploidi t\u00f6\u00f6 seisneb selliste plokkide (\"gad\u017eetide\") kutsumise ahelate ehitamises, et saada vajalik funktsionaalsus.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432 \u043c\u0430\u0435 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0438\u0437 sshd \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-session \u0431\u044b\u043b\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u0430 \u0432 sshd \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0434\u043b\u044f \u043f\u0440\u0438\u0451\u043c\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 sshd-session \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0430\u043d\u0441\u0430. \u0412\u0447\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0431\u044b\u043b\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120192","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH-s on autentimise kood viidud eraldi protsessi sshd-auth | ProHoster","description":"OpenSSH arendajad on j\u00e4tkanud sshd jagamist mitmeks eraldi t\u00e4idesaatvaks failiks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u043a\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-auth | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-15T17:09:13+00:00","article:modified_time":"2024-10-15T17:09:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120192","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 07:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:19:19","updated":"2026-01-23 07:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=120192"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120192\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=120192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=120192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=120192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}