Aikin Openwall ya buga sakin ƙirar kernel LKRG 0.9.0 (Linux Kernel Runtime Guard), wanda aka tsara don ganowa da toshe hare-hare da keta mutuncin tsarin kwaya. Misali, tsarin zai iya karewa daga canje-canje mara izini ga kernel mai gudana da yunƙurin canza izini na hanyoyin mai amfani (gano amfani da abubuwan amfani). Tsarin ya dace duka don tsara kariya daga fa'idodin da aka sani na lahani na kwaya na Linux (misali, a cikin yanayin da ke da wahala a sabunta kwaya a cikin tsarin), da kuma magance fa'idodin har yanzu raunin da ba a san su ba. Ana rarraba lambar aikin a ƙarƙashin lasisin GPLv2.
Daga cikin canje-canje a cikin sabon sigar:
- Ana ba da jituwa tare da kernels na Linux daga 5.8 zuwa 5.12, haka kuma tare da kernels 5.4.87 da kuma daga baya (ciki har da sababbin abubuwa daga kernels 5.8 da kuma daga baya) kuma tare da kernels daga nau'ikan RHEL har zuwa 8.4, yayin da ake ci gaba da tallafawa duk nau'ikan tallafi na baya. kwaya, kamar kernels daga RHEL 7;
- Ƙara ikon gina LKRG ba kawai azaman ƙirar waje ba, har ma a matsayin ɓangare na bishiyar kernel Linux, gami da haɗa shi a cikin hoton kwaya;
- Ƙara goyon baya don ƙarin ƙarin kernel da saitunan tsarin;
- Kafaffen kurakurai masu yawa da gazawa a cikin LKRG;
- An sauƙaƙa aiwatar da wasu abubuwan LKRG;
- An yi canje-canje don sauƙaƙa ƙarin tallafi da cirewa na LKRG;
- Don gwada LKRG, an haɗa haɗin kai tare da bishiya da mkosi;
- An matsar da ma'ajin aikin daga BitBucket zuwa GitHub kuma an ƙara ci gaba da haɗin kai ta amfani da GitHub Actions da mkosi, gami da duba ginin da lodawa na LKRG cikin kernels na sakin Ubuntu, da kuma cikin ginin yau da kullun na sabbin kernels na yau da kullun waɗanda Ubuntu project.
Masu haɓakawa da yawa waɗanda ba su da hannu a cikin aikin a baya sun ba da gudummawa kai tsaye ga wannan sigar LKRG (ta hanyar buƙatun ja akan GitHub). Musamman, Boris Lukashev ya kara da ikon ginawa a matsayin wani ɓangare na bishiyar kernel na Linux, kuma Vitaly Chikunov daga ALT Linux ya ƙara haɗin kai tare da mkosi da GitHub Actions.
Gabaɗaya, duk da ƙarin ƙarin ƙarin, an ɗan rage adadin layukan lambar LKRG a karo na biyu a jere (shima an rage shi a baya tsakanin sigogin 0.8 da 0.8.1).
A halin yanzu, an riga an sabunta kunshin LKRG akan Arch Linux zuwa sigar 0.9.0, kuma adadin wasu fakitin suna amfani da sigogin git na kwanan nan na LKRG kuma wataƙila za a sabunta su zuwa sigar 0.9.0 kuma bayan nan ba da jimawa ba.
Bugu da ƙari, za mu iya lura da wani ɗaba'ar kwanan nan daga masu haɓaka Aurora OS (gyaran Rasha na Sailfish OS) game da yuwuwar ƙarfafa LKRG ta amfani da ARM TrustZone.
Don ƙarin bayani game da LKRG, duba sanarwar sigar 0.8 da tattaunawar da ta gudana a lokacin.
source: budenet.ru