{"id":36370,"date":"2019-10-31T22:11:17","date_gmt":"2019-10-31T19:11:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux\/"},"modified":"2019-10-31T22:11:17","modified_gmt":"2019-10-31T19:11:17","slug":"vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux","title":{"rendered":"Sortie du module LKRG 0.7 pour la protection contre l'exploitation des vuln\u00e9rabilit\u00e9s dans le noyau Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Projet Openwall <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/announce@lists.openwall.com\/msg00169.html\">a publi\u00e9<\/a><\/noindex> publication du module du noyau <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.7<\/a><\/noindex>  (Linux Kernel Runtime Guard), permettant de d\u00e9tecter les modifications non autoris\u00e9es du noyau en fonctionnement (v\u00e9rification de l'int\u00e9grit\u00e9) ou les tentatives de modification des autorisations des processus utilisateur (d\u00e9tection des exploits). Ce module est adapt\u00e9 \u00e0 la protection contre les exploits d\u00e9j\u00e0 connus pour le noyau Linux (par exemple, dans les situations o\u00f9 il est probl\u00e9matique de mettre \u00e0 jour le noyau), ainsi qu'\u00e0 la r\u00e9sistance aux exploits pour des vuln\u00e9rabilit\u00e9s encore inconnues. Pour en savoir plus sur les sp\u00e9cificit\u00e9s de LKRG, vous pouvez lire le <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47989\">premier communiqu\u00e9 de presse du projet<\/a><\/noindex>. <\/p>\n<p>Parmi les changements dans la nouvelle version :<\/p>\n<ul>\n<li class=\"l\"> Le code a \u00e9t\u00e9 refactoris\u00e9 pour supporter diff\u00e9rentes architectures de CPU. Un support initial pour l'architecture ARM64 a \u00e9t\u00e9 ajout\u00e9 ;\n<li class=\"l\"> Compatibilit\u00e9 assur\u00e9e avec les noyaux Linux 5.1 et 5.2, ainsi qu'avec les noyaux compil\u00e9s sans inclure lors de la compilation des options CONFIG_DYNAMIC_DEBUG, CONFIG_ACPI et CONFIG_STACKTRACE, et avec les noyaux compil\u00e9s avec l'option CONFIG_STATIC_USERMODEHELPER. Un support exp\u00e9rimental pour les noyaux du projet grsecurity a \u00e9t\u00e9 ajout\u00e9 ;<br \/>\nLa logique d'initialisation a \u00e9t\u00e9 consid\u00e9rablement modifi\u00e9e ;<\/p>\n<li class=\"l\"> Dans le sous-syst\u00e8me de v\u00e9rification de l'int\u00e9grit\u00e9, l'auto-hachage (self-hashing) a \u00e9t\u00e9 r\u00e9activ\u00e9 et un \u00e9tat de concurrence a \u00e9t\u00e9 \u00e9limin\u00e9 dans le moteur des labels de saut (*_JUMP_LABEL), ce qui entra\u00eene des blocages mutuels lors de l'initialisation en m\u00eame temps que des \u00e9v\u00e9nements de chargement ou de d\u00e9chargement d'autres modules ;\n<li class=\"l\"> Dans le code de d\u00e9tection des exploits, de nouveaux sysctl lkrg.smep_panic (activ\u00e9 par d\u00e9faut) et lkrg.umh_lock (d\u00e9sactiv\u00e9 par d\u00e9faut) ont \u00e9t\u00e9 ajout\u00e9s, ainsi que des v\u00e9rifications suppl\u00e9mentaires du bit SMEP\/WP, la logique de suivi des nouvelles t\u00e2ches dans le syst\u00e8me a \u00e9t\u00e9 modifi\u00e9e, la logique interne de synchronisation avec les ressources des t\u00e2ches a \u00e9t\u00e9 retravaill\u00e9e, et un support pour OverlayFS a \u00e9t\u00e9 ajout\u00e9, inclu dans la liste blanche d'Ubuntu Apport.\n<li class=\"l\"> \ud83e\udd47Publication du module LKRG 0.7 pour la protection contre les exploitations de vuln\u00e9rabilit\u00e9s dans le noyau Linux | ProHoster\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51139\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.7 (Linux Kernel Runtime Guard), \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e (\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438) \u0438\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445 \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e), \u0442\u0430\u043a \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36370","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.7 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:11:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:11:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Publication du module LKRG 0.7 pour la protection contre les exploitations de vuln\u00e9rabilit\u00e9s dans le noyau Linux | ProHoster","description":"Le projet Openwall a publi\u00e9 une version du module du noyau","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.7 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-modulya-lkrg-0-7-dlya-zashhity-ot-ekspluatatsii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:11:17+00:00","article:modified_time":"2019-10-31T19:11:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36370","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 03:03:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:46:25","updated":"2026-01-22 03:03:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=36370"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36370\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=36370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=36370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=36370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}