{"id":170848,"date":"2026-05-18T00:24:30","date_gmt":"2026-05-17T22:24:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux"},"modified":"2026-05-18T00:24:30","modified_gmt":"2026-05-17T22:24:30","slug":"modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","title":{"rendered":"ModuleJail Linuxi tuumamoodulite blokeerimiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jasper Nuyens, Linux Belgiumi asutaja, kes l\u00f5i Linuxi laiendi, et kasutada seda Tesla autot\u00f6\u00f6stuse infos\u00fcsteemis, pakkus lihtsat viisi Linuxi tuuma r\u00fcnnakupinna v\u00e4hendamiseks, et alandada kompromiteerimise t\u00f5en\u00e4osust, arvestades AI abil avastatud ohtlike haavatavuste suurenemist. Kuna paljusid haavatavusi leitakse tavaliselt konkreetsetes tuuma moodulites, mis on saadaval automaatselt laadimiseks, kuid mida enamik kasutajaid ei kasuta, soovitas Jasper vaikimisi blokeerida need moodulid, mida s\u00fcsteem praegu ei kasuta v\u00f5i mis on harva kasutatavad. <\/p>\n

Tuumas on saadaval mitut tuhat moodulit, kuid enamikus s\u00fcsteemides kasutatakse ainult m\u00f5nda sada, samas kui \u00fclej\u00e4\u00e4nud j\u00e4\u00e4vad laadimiseks k\u00e4ttesaadavaks ja v\u00f5ivad potentsiaalselt sisaldada haavatavusi. Idee on ellu viidud skripti ModuleJail kaudu, mis m\u00e4\u00e4rab praeguses s\u00fcsteemis kasutatavate moodulite nimekirja (kasutades \/proc\/modules) ja paneb automaatselt mittekasutatavad moodulid musta nimekirja. Skript on kirjutatud shellis, kasutab levinud s\u00fcsteemi utiliite (piisab busyboxist) ja levitatakse GPLv3 litsentsi alusel. <\/p>\n

Skript toetab k\u00e4itamist Debianis, Ubuntus, RHELis, Fedoras, SUSEs, AlmaLinuxis, Rocky Linuxis, Alpinis ja Arch Linuxis, genereerides oma t\u00f6\u00f6 tulemusena faili \/etc\/modprobe.d\/modulejail-blacklist.conf, mida s\u00fcsteem kasutab automaatsete kerneli moodulite laadimise keelamiseks. Selline l\u00e4henemine v\u00f5imaldab proaktiivselt kaitsta oma s\u00fcsteemi, ilma et peaks laadima spetsialiseeritud kerneli mooduleid v\u00f5i k\u00e4ivitama t\u00e4iendavaid taustprotsesse s\u00fcsteemi j\u00e4lgimiseks. <\/p>\n

Kasutajale antakse vajadusel v\u00f5imalus lisada valgesse nimekirja mooduleid, mis hetkel ei ole laaditud, kuid v\u00f5ivad potentsiaalselt t\u00f6\u00f6s olla. Samuti on v\u00f5imalik aktiveerida profiile, mis lubavad kasutada k\u00f5ige vajalikumaid mooduleid s\u00fcsteemi t\u00fc\u00fcpilistes rakendustes. Pakutakse profiile \u201eminimal\u201d (ainult k\u00f5ige t\u00e4htsamad moodulid ja p\u00f5hifailis\u00fcsteemid), \u201econservative\u201d (+ t\u00fc\u00fcpilised draiverid serveritele ja virtuaalmasinad<\/a>) ja desktop (+ draiverid WiFi, Bluetoothi, heli ja video jaoks).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170848","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ModuleJail Linuxi tuumamoodulite blokeerimiseks | ProHoster","description":"Jasper Nuyens, Linux Belgium'i asutaja, kes loonud laienduse Linuxi kasutamiseks Tesla s\u00f5idukite infos\u00fcsteemis, pakkus v\u00e4lja lihtsa viisi Linuxi tuumapinna r\u00fcnnaku pindala v\u00e4hendamiseks, et v\u00e4hendada kompremiteerimise t\u00f5en\u00e4osust AI vaarude avastamise plahvatuse taustal. Kuna paljusid haavatavusi leitakse tavaliselt spetsiaalsetes autoloading tuumamoodulites, mis on kergesti k\u00e4ttesaadavad, kuid","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ModuleJail \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-17T22:24:30+00:00","article:modified_time":"2026-05-17T22:24:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170848"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170848\/revisions"}],"predecessor-version":[{"id":181605,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170848\/revisions\/181605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}