Ridding Linux Kernel ntawm Tus Cwj Pwm-Hloov Code rau Cov Txheej Txheem Pib nrog X

Jason A. Donenfeld, tus sau ntawm VPN WireGuard, tau txais kev mloog ntawm cov neeg tsim khoom mus rau qhov qias neeg hack tam sim no hauv Linux kernel code uas hloov tus cwj pwm rau cov txheej txheem uas nws lub npe pib nrog lub cim "X". Thaum xub thawj siab ib muag, kev kho zoo li no feem ntau yog siv rau hauv rootkits kom tawm hauv qhov tsis sib haum xeeb hauv cov txheej txheem khi, tab sis kev soj ntsuam pom tau tias qhov kev hloov pauv tau ntxiv rau xyoo 2019 txhawm rau txhim kho ib ntus tus neeg siv-chaw sib raug zoo ua txhaum cai uas tau tshwm sim, raws li txoj cai. kev hloov pauv hauv cov ntsiav yuav tsum tsis txhob cuam tshuam daim ntawv thov kev sib raug zoo.

Cov teeb meem tshwm sim thaum sim siv atomic video hom hloov tshuab hauv xf86-video-modesetting DDX tus tsav tsheb siv hauv X.Org server, uas ua rau muaj kev cuam tshuam rau cov txheej txheem pib nrog lub cim "X" (nws tau xav tias qhov kev ua haujlwm tau thov. mus rau "xorg"). Yuav luag tam sim ntawd, qhov teeb meem hauv X.Org tau kho (kev siv lub atomic API yog neeg xiam oob qhab los ntawm lub neej ntawd), tab sis kev txhim kho ib ntus tsis nco qab tshem tawm ntawm cov ntsiav, thiab kev sim xa ib qho ioctl rau atomically hloov hom rau. tag nrho cov txheej txheem pib nrog lub cim "X" tseem txuas ntxiv ua kom rov qab ua qhov yuam kev. yog (tam sim no->comm[0] == 'X' && req->value == 1) { pr_info("broken atomic modeset userspace detected, disabling atomic\n"); rov -EOPNOSUPP; }

Tau qhov twg los: opennet.ru

Ntxiv ib saib