OpenBSD siv boot-time relinking rau sshd

OpenBSD siv cov txheej txheem tiv thaiv kev siv dag zog uas tso siab rau kev sib txuas ntawm cov ntaub ntawv sshd executable txhua zaus lub kaw lus khau raj. Yav dhau los, cov txheej txheem zoo sib xws tau siv rau cov ntsiav thiab cov tsev qiv ntawv libc.so, libcrypto.so thiab ld.so, thiab tam sim no yuav siv rau qee cov ntaub ntawv ua tiav. Nyob rau hauv lub neej yav tom ntej, cov txheej txheem kuj tau npaj los siv rau ntpd thiab lwm yam kev siv server. Qhov kev hloov pauv tau suav nrog hauv CURRENT ceg thiab yuav muab rau hauv OpenBSD 7.3 tso tawm.

Relinking ua rau nws muaj peev xwm ua kom muaj kev hloov pauv hauv cov tsev qiv ntawv tsawg dua, uas ua rau nws nyuaj rau tsim kev siv los ntawm kev siv rov qab-oriented programming (ROP) txoj kev. Thaum siv cov txheej txheem ROP, tus neeg tawm tsam tsis sim tso nws cov cai hauv lub cim xeeb, tab sis ua haujlwm ntawm cov lus qhia ntawm lub tshuab uas twb muaj nyob rau hauv cov tsev qiv ntawv, xaus nrog cov lus qhia rov qab (raws li txoj cai, cov no yog qhov kawg ntawm lub tsev qiv ntawv ua haujlwm) . Kev ua haujlwm ntawm kev siv los nqis tes los tsim cov saw hlau hu rau cov blocks zoo sib xws ("gadgets") kom tau txais qhov xav tau ua haujlwm.

Tau qhov twg los: opennet.ru

Ntxiv ib saib