Kev ua haujlwm rau kev ua UTF-8 cov cim hauv cov npe cov ntaub ntawv, uas yog siv thaum ua cov hlua sib piv thiab kev ua haujlwm zoo, tau koom ua ke;
XFS ntxiv cov txheej txheem rau kev saib xyuas kev noj qab haus huv ntawm cov ntaub ntawv thiab ioctl tshiab rau kev nug txog kev noj qab haus huv. Ib qho kev sim ua haujlwm tau siv los kuaj xyuas cov txee superblock online.
Ntxiv tshiab module ntaus ntawv-mapper "dm-pua", uas tso cai rau koj simulate cov tsos ntawm cov blocks phem ntawm kev tshaj tawm lossis yuam kev thaum nyeem ntawv los ntawm disk. Lub module tso cai rau koj los ua kom yooj yim debugging thiab kuaj cov ntawv thov thiab ntau lub tshuab cia nyob rau hauv lub ntsej muag ntawm qhov ua tsis tiav;
Ua tiav Kev ua tau zoo tseem ceeb rau BFQ I/O teem sijhawm. Nyob rau hauv tej yam kev mob ntawm siab I / O load, optimizations ua tso cai Txo lub sijhawm ua haujlwm xws li tso cov ntawv thov txog li 80%.
Ntxiv ib tug series ntawm system hu rau mounting cov ntaub ntawv systems: fsopen(), qhib_tree(), fspick(), fsmount(), fsconfig() ΠΈ mov_mount(). Cov kev hu xov tooj no tso cai rau koj cais cov txheej txheem sib txawv ntawm mounting (txheej txheem superblock, tau txais cov ntaub ntawv hais txog cov ntaub ntawv kaw lus, mount, txuas mus rau qhov taw tes mount), uas yav tas los tau ua los ntawm kev siv lub npe hu ua general mount() system call. Kev hu xov tooj sib cais muab lub peev xwm los ua qhov nyuaj mount scenarios thiab ua haujlwm sib cais xws li kev teeb tsa lub superblock, ua kom muaj kev xaiv, hloov qhov taw tes mount, thiab txav mus rau qhov chaw sib txawv. Tsis tas li ntawd, kev ua haujlwm sib cais tso cai rau koj kom raug txiav txim siab vim li cas rau qhov tso tawm ntawm cov lej yuam kev thiab teeb tsa ntau qhov chaw rau ntau txheej txheej ntaub ntawv, xws li overlayfs;
Kev ua haujlwm tshiab IORING_OP_SYNC_FILE_RANGE tau ntxiv rau qhov sib txuas rau asynchronous I/O io_uring, uas ua haujlwm sib npaug rau kev hu xov tooj. sync_file_range(), thiab kuj tau siv lub peev xwm los sau npe eventfd nrog io_uring thiab tau txais cov ntawv ceeb toom txog kev ua tiav ntawm kev ua haujlwm;
Rau CIFS cov ntaub ntawv kaw lus, FIEMAP ioctl tau ntxiv, muab kev ua haujlwm tau zoo, nrog rau kev txhawb nqa rau SEEK_DATA thiab SEEK_HOLE hom;
Kev siv ntawm NFSv4 mounting hauv "mos" hom tau raug txhim kho (yog tias muaj kev ua yuam kev tshwm sim hauv kev nkag mus rau lub server hauv "mos", hu rau tam sim rov qab qhov yuam kev, thiab hauv "nyuaj" hom tswj tsis tau muab kom txog thaum FS Lub sijhawm muaj los yog ncua sij hawm rov qab los). Qhov kev tso tawm tshiab no muab kev tuav sijhawm kom raug ntau dua, rov qab poob sai dua, thiab qhov kev xaiv tshiab "softer" mount uas tso cai rau koj hloov qhov yuam kev (ETIMEDOUT) rov qab thaum lub sijhawm tshwm sim;
Nfsdcld API, tsim los taug qab lub xeev ntawm NFS cov neeg siv khoom, tso cai rau NFS server kom raug taug qab lub xeev ntawm tus neeg siv khoom thaum rov pib dua. Yog li, nfsdcld daemon tam sim no tuaj yeem ua raws li tus neeg tuav nfsdcltrack;
Kev ua haujlwm tau ua kom tshem tawm cov chaw hauv cov ntsiav uas tso cai rau kev ua tiav los ntawm cov ntawv sau tau cuam tshuam txog thaj chaw nco, uas tso cai rau thaiv qhov muaj peev xwm uas tuaj yeem siv tau thaum muaj kev tawm tsam;
Ib qho tshiab kernel hais kom ua kab parameter "mitigations=" tau ntxiv, muab txoj hauv kev yooj yim los tswj kev ua haujlwm ntawm qee cov tswv yim los tiv thaiv qhov tsis zoo cuam tshuam nrog kev ua tiav ntawm cov lus qhia ntawm CPU. Dhau "mitigations = off" disables tag nrho cov uas twb muaj lawm txoj kev, thiab lub neej ntawd hom "mitigations = auto" enables kev tiv thaiv tab sis tsis cuam tshuam rau kev siv ntawm Hyper Threading. Hom "mitigations = auto, nosmt" kuj tseem cuam tshuam Hyper Threading yog tias xav tau los ntawm txoj kev tiv thaiv.
Ntxiv Kev them nyiaj yug rau hluav taws xob digital kos npe raws li GOST R 34.10-2012 (RFC 7091, ISO / IEC 14888-3), tsim tawm Vitaly Chikunov los ntawm Basalt SPO. Ntxiv kev txhawb nqa rau AES128-CCM rau kev siv TLS haiv neeg. Ntxiv kev txhawb nqa rau AEAD algorithms rau crypto_simd module;
Hauv Kconfig ntxiv cais "kernel hardening" ntu nrog cov kev xaiv los txhim kho cov kev tiv thaiv kernel. Tam sim no, ntu tshiab tsuas muaj cov chaw rau kev ua kom GCC xyuas-txhim kho plugins;
Lub kernel code yog yuav luag xa los ntawm cov ntaub ntawv tsis tawg hauv kev hloov pauv (tsis muaj rov qab los yog tawg tom qab txhua qhov xwm txheej thaiv). Nws tseem yuav txhim kho 32 ntawm 2311 qhov xwm txheej ntawm kev siv qhov hloov pauv, tom qab ntawd nws yuav tuaj yeem siv hom "-Wimplicit-fallthrough" thaum tsim lub kernel;
Ntxiv sysctl teeb tsa vm.unprivileged_userfaultfd, uas tswj lub peev xwm ntawm cov txheej txheem tsis tsim nyog siv userfaultfd() system hu;
Network subsystem
Ntxiv IPv6 qhov rooj txhawb nqa rau IPv4 txoj hauv kev. Piv txwv li, tam sim no koj tuaj yeem teev cov kev cai routing xws li "ip ro ntxiv 172.16.1.0/24 ntawm inet6 2001: db8:: 1 dev eth0";
Rau ICMPv6, ioctl hu icmp_echo_ignore_anycast thiab icmp_echo_ignore_multicast yog siv los tsis quav ntsej ICMP ECHO rau anycast thiab
multicast chaw nyob. Ntxiv muaj peev xwm txwv qhov kev siv ntawm ICMPv6 pob ntawv ua tiav;
Rau BATMAN (Txoj Kev Zoo Tshaj Plaws Rau Mobile Adhoc Networking) mesh raws tu qauv, uas tso cai rau kev tsim cov kev sib koom ua ke uas txhua qhov txuas txuas nrog cov neeg nyob sib ze, ntxiv txhawb kev tshaj tawm los ntawm multicast rau unicast, nrog rau kev muaj peev xwm tswj tau ntawm sysfs;
Hauv ethtool ntxiv tus tshiab Fast Link Down parameter, uas tso cai rau koj txo lub sij hawm nws yuav siv sij hawm kom tau txais cov ntaub ntawv hais txog ib tug link down tshwm sim rau 1000BaseT (nyob rau hauv ib txwm tej yam kev mob ncua yog mus txog 750ms);
tshwm sim sijhawm khi Foo-Over-UDP tunnels rau ib qho chaw nyob, network interface lossis lub qhov (socket) (yav dhau los khi tau ua tiav los ntawm lub npog ntsej muag nkaus xwb);
Hauv cov kab ke wireless muab muaj peev xwm ua tau raws li cov neeg siv khoom
OWE (Opportunistic Wireless Encryption) hauv qhov chaw neeg siv;
Hauv Netfilter, kev txhawb nqa rau tsev neeg inet chaw nyob tau ntxiv rau nat chains (piv txwv li, tam sim no koj tuaj yeem siv ib txoj cai txhais lus los ua ipv4 thiab ipv6, yam tsis tau cais cov cai rau ipv4 thiab ipv6);
Tus tsav tsheb Nouveau tau ntxiv kev txhawb nqa rau cov laug cam raws li NVIDIA Turing 117 chipset (TU117, siv hauv GeForce GTX 1650). IN
kconfig ua ntxiv teeb tsa kom lov tes taw cov haujlwm uas tsis siv lawm uas tsis siv nyob rau hauv tam sim no tso tawm ntawm libdrm;
Kev them nyiaj yug rau " ncua sij hawm" cov khoom synchronization tau ntxiv rau DRM API thiab tus tsav tsheb amdgpu, tso cai rau koj ua yam tsis muaj kev thaiv classic.
Tus neeg tsav tsheb vboxvideo rau VirtualBox virtual GPU tau raug txav los ntawm ceg txheem ntseeg mus rau lub ntsiab qauv;