{"id":77154,"date":"2020-04-08T07:41:59","date_gmt":"2020-04-08T05:41:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy"},"modified":"2020-04-08T07:41:59","modified_gmt":"2020-04-08T05:41:59","slug":"microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","title":{"rendered":"Microsoft pakkus v\u00e4lja Linuxi tuuma mooduli s\u00fcsteemi terviklikkuse kontrollimiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsofti arendajad esitanud<\/a><\/noindex> terviklikkuse kontrollimise mehhanism IPE<\/a><\/noindex> Terviklikkuse Poliitika Rakendamine (Integrity Policy Enforcement), mis on rakendatud LSM-moodulina (Linux Security Module) Linuxi tuumas. Moodul v\u00f5imaldab m\u00e4\u00e4ratleda kogu s\u00fcsteemi terviklikkuse tagamise poliitika, mis n\u00e4itab, millised toimingud on lubatud ja kuidas tuleks komponente autentida. IPE abil saab m\u00e4\u00e4rata, millised t\u00e4idetavad failid on lubatud k\u00e4ivitamiseks ja garanteerida, et need failid on identsed usaldusv\u00e4\u00e4rse allika antud versiooniga. Kood avatud<\/a><\/noindex> MIT litsentsi alusel.<\/p>\n

IPE on suunatud t\u00e4ielikult kinnitatavate s\u00fcsteemide loomisele, mille terviklikkust kinnitatakse alglaadimisseadmest ja tuumast kuni l\u00f5ppt\u00e4idetavate failide, konfiguratsioonide ja laaditavate failideni. Faili muutumise v\u00f5i asendamise korral v\u00f5ib IPE operatsiooni blokeerida v\u00f5i logida terviklikkuse rikkumise fakti. Pakutavat mehhanismi saab rakendada sisseehitatud seadmete tarkvarades, kus kogu tarkvara ja seaded on spetsiaalselt koostatud ja antud omanikult, n\u00e4iteks Microsofti andakeskustes kasutatakse IPE-d tulem\u00fc\u00fcride riistvara juures.<\/p>\n

Teistest terviklikkuse kontrollimise s\u00fcsteemidest, nagu IMA<\/a><\/noindex>, IPE er s\u00f5ltumatud failis\u00fcsteemi metaandmetest \u2014 k\u00f5ik omadused, mis m\u00e4\u00e4ravad operatsioonide lubatavuse, salvestatakse otse tuumas. Failide sisu terviklikkuse kinnitamiseks kasutatakse juba olemasolevaid tuuma mehhanisme kr\u00fcptograafiliste r\u00e4sihash\u2019de p\u00f5hjal.
\ndm-verity<\/a><\/noindex> v\u00f5i fs-verity<\/a><\/noindex>.
\nSarnaselt SELinux'ile toetab see kahte t\u00f6\u00f6re\u017eiimi: \u201epermissive\u201d ja \u201eenforce\u201d. Esimeses re\u017eiimis logitakse ainult probleemid kontrollide t\u00e4itmise k\u00e4igus, mis n\u00e4iteks v\u00f5ib olla kasulik keskkonna eeltestimiseks.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 IPE (Integrity Policy Enforcement), \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0432\u0438\u0434\u0435 LSM-\u043c\u043e\u0434\u0443\u043b\u044f (Linux Security Module) \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0443\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0438 \u043a\u0430\u043a\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 IPE \u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u0430\u043a\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-77154","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft pakkus v\u00e4lja Linuxi tuuma mooduli s\u00fcsteemi terviklikkuse kontrollimiseks | ProHoster","description":"Microsofti arendajad esitlesid terviklikkuse kontrollimise mehhanismi","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-08T05:41:59+00:00","article:modified_time":"2020-04-08T05:41:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"77154","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:23:21","updated":"2022-10-02 19:20:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/77154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=77154"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/77154\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=77154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=77154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=77154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}