{"id":99848,"date":"2021-04-15T22:22:47","date_gmt":"2021-04-15T20:22:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2021-04-15T22:22:47","modified_gmt":"2021-04-15T20:22:47","slug":"vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"LKRG 0.9.0 mooduli v\u00e4ljaanne Linuxi tuuma haavatavuste ekspluateerimise kaitseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Openwall'i projekt avaldas LKRG 0.9.0 (Linux Kernel Runtime Guard) tuumamooduli, mis on m\u00f5eldud tuumarakenduste r\u00fcnnakute ja terviklikkuse rikkumiste tuvastamiseks ja blokeerimiseks. N\u00e4iteks v\u00f5ib moodul kaitsta lubamatute muudatuste tegemise eest t\u00f6\u00f6tavas tuumas ja kasutajaprotsesside volituste muutmise katsete vastu (ekspoite kasutamise tuvastamine). Moodul sobib nii Linuxi tuuma tuntud haavatavuste vastu kaitsmiseks (n\u00e4iteks olukordades, kus s\u00fcsteemi on keeruline v\u00e4rskendada), kui ka tundmatute haavatavuste ekspoite takistamiseks. Projekti kood on litsentsitud GPLv2 alusel.    <\/p>\n<p>Uues versioonis on j\u00e4rgmised muudatused:  <\/p>\n<ul>\n<li class=\"l\">   K\u00e4ideldavus on tagatud Linuxi tuumadega 5.8 kuni 5.12, samuti stabiilsete tuumadega 5.4.87 ja uuematega (mis sisaldavad uuendusi tuumadest alates 5.8) ning RHEL versioonide tuumadega kuni 8.4, s\u00e4ilitades toe k\u00f5igi varasemate tuumade versioonide, sealhulgas RHEL 7 tuumade jaoks;\n<li class=\"l\">   LKRG koostamise v\u00f5imalus on lisatud mitte ainult kui v\u00e4line moodul, vaid ka Linuxi tuuma puu koostisosana, sealhulgas selle lisamine tuuma pildile;\n<li class=\"l\">   Lisatud tugi paljudele t\u00e4iendavatele tuuma ja s\u00fcsteemi konfigureerimisele;\n<li class=\"l\">   Mitmed olulised vead ja puudused LKRG-s on parandatud;\n<li class=\"l\">   M\u00f5nede LKRG komponentide rakendamine on oluliselt lihtsustatud;\n<li class=\"l\">   Edasise toe ja t\u00f5rkeotsingu lihtsustamiseks on tehtud muudatusi LKRG-s;\n<li class=\"l\">   LKRG testimiseks on lisatud integratsioon out-of-tree ja mkosi-ga;\n<li class=\"l\">   Projekti hoidla on kantud BitBucketist GitHubi ja lisatud pidev integreerimine GitHub Actions'i ja mkosi abil, sealhulgas LKRG koostamise ja laadimise kontrollimine Ubuntu vabastamiste tuumadesse ning projekti poolt pakutavad Ubuntu igap\u00e4evased v\u00e4rskete mainline-tuumade koosted.  <\/ul>\n<p>Selles LKRG versioonis on mitu arendajat, kes varem projektis ei osalenud, andnud oma otsese panuse (pull requestide kaudu GitHubis). Konkreetsemalt, Boris Lukashevi poolt on lisatud v\u00f5imalus koondada Linuxi tuumapuu osana, ning Vitali Chikunov ALT Linuxist on integreeritud mkosi ja GitHub Actions.    <\/p>\n<p>Kokkuv\u00f5ttes, hoolimata olulistest t\u00e4iendustest, on LKRG koodiridade arv veidi v\u00e4henenud teist korda j\u00e4rjest (varem v\u00e4henes see ka versioonide 0.8 ja 0.8.1 vahel).    <\/p>\n<p>Praegu on Arch Linuxis pakett LKRG uuendatud versioonile 0.9.0 ja mitmed teised paketid kasutavad hiljutisi git-versioone LKRG-st, mis t\u00f5en\u00e4oliselt uuendatakse samuti versioonile 0.9.0 ja edasi.    <\/p>\n<p>T\u00e4iendavalt v\u00f5ib m\u00e4rkida hiljutist avaldust OS Avro arendajatelt (Venemaa modifikatsioon Sailfish OS), mis k\u00e4sitleb LKRG v\u00f5imaliku tugevdamist ARM TrustZone'i abil.    <\/p>\n<p>LKRG kohta lisainfot vt versiooni 0.8 teadaandes ja sel ajal toimunud arutelus.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54974\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.0 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99848","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.0 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.9.0 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.0 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-04-15T20:22:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-04-15T20:22:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LKRG 0.9.0 moduli v\u00e4ljaanne Linuxi tuuma haavatavuste kaitsmiseks | ProHoster","description":"Openwall projekt avaldas LKRG 0.9.0 (Linux Kernel Runtime Guard) k\u00e4rkesemoduli v\u00e4ljaande, mis on m\u00f5eldud tuvastama ja blokeerima r\u00fcnnakute ning tuumal struktuuride terviklikkuse rikkumisi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.9.0 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.9.0 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-15T20:22:47+00:00","article:modified_time":"2021-04-15T20:22:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99848","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-15 20:38:01","updated":"2022-10-03 23:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=99848"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99848\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=99848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=99848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=99848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}