{"id":182443,"date":"2026-07-02T22:53:28","date_gmt":"2026-07-02T20:53:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim"},"modified":"2026-07-02T22:53:28","modified_gmt":"2026-07-02T20:53:29","slug":"problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","title":{"rendered":"Probleemid blokeerimise v\u00f5tmete puhastamisega m\u00e4lust, kui Linux siseneb ooteolekusse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

NixOS-i cryptsetup-suspend t\u00f6\u00f6riista portimise k\u00e4igus tuvastati LUKS-i (Linux Unified Key Setup) ketta kr\u00fcpteerimise alams\u00fcsteemis viga, mille t\u00f5ttu alates Linuxi kerneli 6.9 (probleemne commit) v\u00e4ljaandmisest, mis toimus 2024. aasta mais, lakkas t\u00f6\u00f6tamast kr\u00fcpteerimisv\u00f5tmete puhastamine juhuslikust m\u00e4lust s\u00fcsteemi magamisse minekul. <\/p>\n

Cryptsetup-suspend t\u00f6\u00f6riista kasutatakse Debianis LUKS-partitsioonide automaatseks blokeerimiseks enne unere\u017eiimi sisenemist. Eeldatakse, et juhul kui s\u00fclearvuti, mis on viidud unere\u017eiimi, varastatakse, ei p\u00e4\u00e4se kurjategija andmetele ligi, kuna unere\u017eiimist v\u00e4ljumisel on vajalik salajase koodi sisestamine, et taastada juurdep\u00e4\u00e4s kr\u00fcpteeritud andmetele. T\u00f5rke t\u00f5ttu Linuxi tuumas ei puhastatud LUKS-partitsiooni v\u00f5tmeid p\u00e4rast k\u00e4sku «cryptsetup luksSuspend» operatiivm\u00e4last, mis j\u00e4i n\u00e4htavaks l\u00e4bi \/proc\/keys, v\u00f5imaldades r\u00fcndajal need n\u00e4iteks «k\u00fclmrestartimise» meetodiga v\u00e4lja v\u00f5tta ja kasutada andmetele juurdep\u00e4\u00e4suks. <\/p>\n

Lukkude puhastamise puudumine tuvastati konkurentsitingimuse silumise k\u00e4igus, mille t\u00f5ttu tekkisid probleemid ootere\u017eiimi \u00fcleminekuga. Viga ilmnes p\u00e4rast 6.9 versiooni tuumaloomingulist \u00fcmberkorraldamist, mille k\u00e4igus seoti v\u00f5tmed kutsuva niidi k\u00fclge ja need pidid olema kustutatud p\u00e4rast selle l\u00f5petamist, kuid tegelikult j\u00e4id nad m\u00e4lu. Linuxi tuumale on ettepanek olnud \u00fchekordne patch, mis k\u00f5rvaldab tehtud vea. <\/p>\n

Seda plaastrit ei ole tuuma vastu vastu v\u00f5etud, kuna selles on tuvastatud puuduj\u00e4\u00e4k \u2014 plaastril on m\u00f5ju ainult f\u00fc\u00fcsilistele m\u00e4luseadmetele ning see ei t\u00f6\u00f6ta virtuaalsete loop-seadmete puhul. Probleemi lahendamiseks tuuma poolelt pakkusid cryptsetup'i arendajad v\u00e4lja v\u00f5tmete puhastamise k\u00f5rvallahenduse. See muudatus on juba vastu v\u00f5etud ja lisatakse cryptsetup 2.8.7 v\u00e4ljaande koosseisu. <\/p>\n

Lisaks sellele on NixOS-i jaoks loodud oma skriptide teostus, et blokeerida kr\u00fcptitud kettaid enne ootere\u017eiimi \u00fcleminekut, kus kasutatakse 2015. aastal vastu v\u00f5tmata vanemat patch\u2019i, mis sunniviisiliselt puhastab v\u00f5tmed m\u00e4lust enne unere\u017eiimi \u00fcleminekut.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 cryptsetup-suspend \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Debian \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182443","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Probleemid kr\u00fcpteerimisv\u00f5tmete puhastamisega RAM-ist, kui Linux l\u00e4heb uinuvasse seisundisse | ProHoster","description":"NixOS-i cryptsetup-suspend t\u00f6\u00f6tluse k\u00e4igus ilmnes t\u00f5rge LUKS-i (Linux Unified Key Setup) kettakr\u00fcpteerimise alam s\u00fcsteemis, mis on p\u00f5hjustatud Linuxi tuumast 6.9 (probleemne commit).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u0430 \u0438\u0437 \u041e\u0417\u0423 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 Linux \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-02T20:53:29+00:00","article:modified_time":"2026-07-02T20:53:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182443","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:10","updated":"2026-08-05 12:22:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182443"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182443\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}