{"id":120192,"date":"2024-10-15T19:09:13","date_gmt":"2024-10-15T17:09:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth"},"modified":"2024-10-15T19:09:13","modified_gmt":"2024-10-15T17:09:13","slug":"v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","title":{"rendered":"Dans OpenSSH, le code d'authentification a \u00e9t\u00e9 d\u00e9plac\u00e9 vers un processus distinct sshd-auth","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les d\u00e9veloppeurs d'OpenSSH ont continu\u00e9 \u00e0 s\u00e9parer sshd en plusieurs fichiers ex\u00e9cutables distincts. Lors de la premi\u00e8re \u00e9tape de s\u00e9paration r\u00e9alis\u00e9e en mai, les fonctions li\u00e9es \u00e0 la gestion des sessions ont \u00e9t\u00e9 extraites de sshd dans un processus distinct, sshd-session, tandis que sshd ne conserve que la fonctionnalit\u00e9 n\u00e9cessaire \u00e0 l'acceptation de nouvelles connexions r\u00e9seau et au d\u00e9marrage de sshd-session pour chaque nouvelle session. Hier, un changement a \u00e9t\u00e9 apport\u00e9 \u00e0 la base de code d'OpenSSH, ajoutant un autre processus - sshd-auth, dans lequel le code ex\u00e9cutant l'authentification a \u00e9t\u00e9 d\u00e9plac\u00e9 depuis sshd-session. <\/p>\n

Le processus sshd-auth est lanc\u00e9 depuis sshd-session et permet d'isoler davantage les donn\u00e9es li\u00e9es \u00e0 l'authentification dans l'espace d'adressage d'un processus distinct, ce qui emp\u00eache l'acc\u00e8s \u00e0 ces donn\u00e9es en m\u00e9moire lors d'attaques contre le code utilis\u00e9 pour traiter les \u00e9tapes de connexion jusqu'\u00e0 la fin de l'authentification. De plus, ce changement r\u00e9duit l\u00e9g\u00e8rement la consommation de m\u00e9moire, car le code li\u00e9 \u00e0 l'authentification n'est pr\u00e9sent en m\u00e9moire que pendant l'authentification, puis est d\u00e9charg\u00e9 \u00e0 la fin du processus sshd-auth. <\/p>\n

De la m\u00eame mani\u00e8re que pour sshd, ssh-session et ssh-agent, une op\u00e9ration de r\u00e9organisation al\u00e9atoire du fichier ex\u00e9cutable a \u00e9t\u00e9 appliqu\u00e9e au processus sshd-auth lors de chaque d\u00e9marrage du syst\u00e8me d'exploitation. La r\u00e9organisation al\u00e9atoire rend difficile la pr\u00e9vision des d\u00e9calages des fonctions dans les fichiers ex\u00e9cutables et les biblioth\u00e8ques, ce qui complique la cr\u00e9ation d'exploits utilisant des m\u00e9thodes de programmation orient\u00e9e retour (ROP - Return-Oriented Programming). En utilisant la technique ROP, un attaquant ne tente pas d'ins\u00e9rer son code en m\u00e9moire, mais op\u00e8re avec des morceaux d'instructions machine d\u00e9j\u00e0 existants, se terminant par une instruction de retour (g\u00e9n\u00e9ralement, il s'agit des termes de fonctions). Le travail de l'exploit se r\u00e9sume \u00e0 construire une cha\u00eene d'appels de blocs similaires (\u00ab gadgets \u00bb) pour obtenir la fonctionnalit\u00e9 requise.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432 \u043c\u0430\u0435 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0438\u0437 sshd \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-session \u0431\u044b\u043b\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u0430 \u0432 sshd \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0434\u043b\u044f \u043f\u0440\u0438\u0451\u043c\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 sshd-session \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0430\u043d\u0441\u0430. \u0412\u0447\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0431\u044b\u043b\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120192","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dans OpenSSH, le code d'authentification a \u00e9t\u00e9 d\u00e9plac\u00e9 dans un processus distinct sshd-auth | ProHoster","description":"Les d\u00e9veloppeurs d'OpenSSH ont poursuivi la s\u00e9paration de sshd en plusieurs fichiers ex\u00e9cutables distincts.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u043a\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 sshd-auth | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 sshd \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openssh-kod-autentifikaczii-vynesen-v-otdelnyj-proczess-sshd-auth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-15T17:09:13+00:00","article:modified_time":"2024-10-15T17:09:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120192","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 07:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:19:19","updated":"2026-01-23 07:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/120192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=120192"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/120192\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=120192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=120192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=120192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}