{"id":112745,"date":"2024-01-08T15:10:13","date_gmt":"2024-01-08T13:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-6-7"},"modified":"2024-01-08T15:10:13","modified_gmt":"2024-01-08T13:10:13","slug":"reliz-yadra-linux-6-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-6-7","title":{"rendered":"A Linux 6.7-es kernel kiad\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00e9t h\u00f3napos fejleszt\u00e9s ut\u00e1n Linus Torvalds bemutatta a Linux 6.7 kernel kiad\u00e1s\u00e1t. A legfontosabb v\u00e1ltoz\u00e1sok k\u00f6z\u00f6tt szerepel a Bcachefs f\u00e1jlrendszer integr\u00e1l\u00e1sa, az Itanium architekt\u00fara t\u00e1mogat\u00e1s\u00e1nak megsz\u00fcntet\u00e9se, a Nouvea m\u0171k\u00f6d\u00e9se GSP-R firmware-rel, a TLS-enk\u00f3dol\u00e1s t\u00e1mogat\u00e1sa az NVMe-TCP-ben, kiv\u00e9telek haszn\u00e1lat\u00e1nak lehet\u0151s\u00e9ge a BPF-ben, a futex t\u00e1mogat\u00e1sa az io_uring-ban, a fq (Fair Queuing) \u00fctemez\u0151 teljes\u00edtm\u00e9ny\u00e9nek optimaliz\u00e1l\u00e1sa, a TCP-AO (TCP Authentication Option) kiterjeszt\u00e9s t\u00e1mogat\u00e1sa \u00e9s a Landlock v\u00e9delem mechanizmus\u00e1n bel\u00fcli h\u00e1l\u00f3zati kapcsolatok korl\u00e1toz\u00e1s\u00e1nak lehet\u0151s\u00e9ge, valamint a hozz\u00e1f\u00e9r\u00e9s kezel\u00e9s\u00e9nek bevezet\u00e9se a user namespace-hez \u00e9s az io_uring-hoz AppArmor-on kereszt\u00fcl.      <\/p>\n<p>Az \u00faj verzi\u00f3 18405 jav\u00edt\u00e1st fogadott el 2066 fejleszt\u0151t\u0151l, a jav\u00edt\u00e1s m\u00e9rete 72 MB (a v\u00e1ltoz\u00e1sok 13467 f\u00e1jlt \u00e9rintettek, 906147 sor k\u00f3d ker\u00fclt hozz\u00e1ad\u00e1sra, 341048 sor lett t\u00f6r\u00f6lve). Az el\u0151z\u0151 kiad\u00e1sban 15291 jav\u00edt\u00e1s volt \u00f6sszesen 2058 fejleszt\u0151t\u0151l, a jav\u00edt\u00e1s m\u00e9rete 39 MB. A 6.7-es verzi\u00f3ban bemutatott \u00f6sszes v\u00e1ltoz\u00e1s k\u00f6r\u00fclbel\u00fcl 45%-a eszk\u00f6zmeghajt\u00f3kkal kapcsolatos, k\u00f6r\u00fclbel\u00fcl 14% a hardverspecifikus k\u00f3d friss\u00edt\u00e9s\u00e9vel, 13% a h\u00e1l\u00f3zati veremmel, 5% a f\u00e1jlrendszerekkel, \u00e9s 3% a kern bels\u0151 alrendszereivel kapcsolatos.            <\/p>\n<p>A 6.7 kernel f\u0151 \u00fajdons\u00e1gai:  <\/p>\n<ul>\n<li class=\"l\"> <b>Lemezszubsziszt\u00e9ma, bemenet\/kipontoz\u00e1s \u00e9s f\u00e1jlrendszerek<\/b>\n<ul>\n<li class=\"l\"> A kernelbe bevett\u00e9k a Bcachefs f\u00e1jlrendszer k\u00f3dj\u00e1t, amelyben a teljes\u00edtm\u00e9ny, megb\u00edzhat\u00f3s\u00e1g \u00e9s sk\u00e1l\u00e1zhat\u00f3s\u00e1g szintj\u00e9nek el\u00e9r\u00e9s\u00e9re tett k\u00eds\u00e9rletet tettek, amely a XFS-sel t\u00e1rs\u00edthat\u00f3, a Btrfs \u00e9s ZFS kib\u0151v\u00edtett funkcionalit\u00e1s\u00e1nak elemeivel kombin\u00e1lva. P\u00e9ld\u00e1ul a Bcachefs t\u00e1mogatja az olyan lehet\u0151s\u00e9geket, mint a t\u00f6bb eszk\u00f6zbe val\u00f3 be\u00e9p\u00edt\u00e9s a part\u00edci\u00f3ba, t\u00f6bbr\u00e9teg\u0171 t\u00e1rol\u00e1s (az als\u00f3 r\u00e9teg a gyakran haszn\u00e1lt adatok gyors SSD-n, a fels\u0151 r\u00e9teg a kev\u00e9sb\u00e9 keresett adatok HDD-n), replik\u00e1l\u00e1s (RAID 1\/10), gyors\u00edt\u00f3t\u00e1raz\u00e1s, \u00e1tl\u00e1that\u00f3 adatkompresszi\u00f3 (LZ4, gzip \u00e9s ZSTD m\u00f3dok), \u00e1llapotfelv\u00e9telek (snapshotok), integrit\u00e1s-ellen\u0151rz\u00e9s ellen\u0151rz\u0151 \u00f6sszeg alapj\u00e1n, hibajav\u00edt\u00f3 k\u00f3dok Reeds-Solomon t\u00e1rol\u00e1s\u00e1nak lehet\u0151s\u00e9ge (RAID 5\/6) \u00e9s adat titkos\u00edtott form\u00e1ban t\u00f6rt\u00e9n\u0151 t\u00e1rol\u00e1sa (ChaCha20 \u00e9s Poly1305 haszn\u00e1lat\u00e1val). A Bcachefs teljes\u00edtm\u00e9nye meghaladja a Btrfs-t \u00e9s m\u00e1s, Copy-on-Write alap\u00fa f\u00e1jlrendszereket, \u00e9s sebess\u00e9ge k\u00f6zel \u00e1ll az Ext4 \u00e9s XFS sebess\u00e9g\u00e9hez.\n<li class=\"l\"> A Btrfs f\u00e1jlrendszerben egy egyszer\u0171s\u00edtett kv\u00f3ta m\u00f3d ker\u00fclt bevezet\u00e9sre, amely lehet\u0151v\u00e9 teszi a nagyobb teljes\u00edtm\u00e9ny el\u00e9r\u00e9s\u00e9t az\u00e1ltal, hogy csak abban az almapp\u00e1ban k\u00f6veti a kiterjed\u00e9seket, ahol azok l\u00e9trej\u00f6ttek, ami jelent\u0151sen egyszer\u0171s\u00edti a sz\u00e1m\u00edt\u00e1sokat \u00e9s n\u00f6veli a teljes\u00edtm\u00e9nyt, de nem engedi figyelembe venni a t\u00f6bb almapp\u00e1ban k\u00f6z\u00f6sen haszn\u00e1lt kiterjed\u00e9seket.\n<li class=\"l\"> A Btrfs-hez \u00faj adatstrukt\u00fara, a &#171;stripe tree&#187; ker\u00fclt hozz\u00e1ad\u00e1sra, amely megfelel\u0151 logikai lek\u00e9pez\u00e9s\u00e9hez alkalmas az extents-eknek olyan helyzetekben, amikor a fizikai lek\u00e9pez\u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 eszk\u00f6z\u00f6k\u00f6n nem egyezik. E strukt\u00fara egyel\u0151re a RAID0 \u00e9s RAID1 megval\u00f3s\u00edt\u00e1sokban van haszn\u00e1latban z\u00f3n\u00e1s blokkeszk\u00f6z\u00f6k eset\u00e9n. A j\u00f6v\u0151ben ezt a strukt\u00far\u00e1t a magasabb szint\u0171 RAID-ekben k\u00edv\u00e1nj\u00e1k alkalmazni, ami megoldhatja a jelenlegi megval\u00f3s\u00edt\u00e1sban fenn\u00e1ll\u00f3 probl\u00e9m\u00e1k egy r\u00e9sz\u00e9t.\n<li class=\"l\"> A Ceph f\u00e1jlrendszerben megval\u00f3s\u00edtott\u00e1k a csatolt f\u00e1jlrendszerek felhaszn\u00e1l\u00f3i azonos\u00edt\u00f3k lek\u00e9pez\u00e9s\u00e9nek t\u00e1mogat\u00e1s\u00e1t, amely a f\u00e1jlok egy adott felhaszn\u00e1l\u00f3val val\u00f3 \u00f6sszehangol\u00e1s\u00e1ra szolg\u00e1l, ha egy m\u00e1sik felhaszn\u00e1l\u00f3 csatolt r\u00e9sz\u00e9n tal\u00e1lhat\u00f3k.\n<li class=\"l\"> Az efivarfs-be hozz\u00e1adt\u00e1k az uid \u00e9s gid megad\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t a csatol\u00e1skor, ez\u00e1ltal lehet\u0151v\u00e9 t\u00e9ve az UEFI v\u00e1ltoz\u00f3k m\u00f3dos\u00edt\u00e1s\u00e1t olyan folyamatok sz\u00e1m\u00e1ra, amelyek nem rendelkeznek root jogosults\u00e1ggal.\n<li class=\"l\"> Az exFAT-hoz ioctl-h\u00edv\u00e1sok ker\u00fcltek bevezet\u00e9sre a f\u00e1jlrendszer attrib\u00fatumainak olvas\u00e1s\u00e1ra \u00e9s m\u00f3dos\u00edt\u00e1s\u00e1ra. Nulla m\u00e9ret\u0171 k\u00f6nyvt\u00e1rak feldolgoz\u00e1sa is megval\u00f3sult.\n<li class=\"l\"> Az F2FS-ben megval\u00f3s\u00edtott\u00e1k a 16K m\u00e9ret\u0171 blokkok haszn\u00e1lat\u00e1nak lehet\u0151s\u00e9g\u00e9t.\n<li class=\"l\"> Az automatikus csatol\u00e1si mechanizmust, az autofs-t, \u00e1t\u00e1ll\u00edtott\u00e1k az \u00faj part\u00edci\u00f3s csatol\u00e1si API haszn\u00e1lat\u00e1ra.\n<li class=\"l\"> Az OverlayFS-hez \u00faj &#171;lowerdir+&#187; \u00e9s &#171;datadir+&#187; csatlakoztat\u00e1si opci\u00f3k ker\u00fcltek bevezet\u00e9sre. Hozz\u00e1adva a t\u00e1mogat\u00e1s az OverlayFS r\u00e9tegezett csatlakoztat\u00e1s\u00e1hoz xattrs-szel.\n<li class=\"l\"> Az XFS optimaliz\u00e1lta a CPU terhel\u00e9s\u00e9t a val\u00f3s idej\u0171 blokk eloszt\u00e1si k\u00f3dj\u00e1ban. Lehet\u0151v\u00e9 v\u00e1lt az olvas\u00e1si \u00e9s FICLONE m\u0171veletek egyidej\u0171 v\u00e9grehajt\u00e1sa.\n<li class=\"l\"> Az EXT2 k\u00f3dj\u00e1t \u00e1t\u00e1ll\u00edtott\u00e1k a mem\u00f3riaoldalak folyamataira (page folios) val\u00f3 haszn\u00e1latra.                          <\/ul>\n<li class=\"l\"> <b>Mem\u00f3ria \u00e9s rendszerszolg\u00e1ltat\u00e1sok<\/b>\n<ul>\n<li class=\"l\"> Megsz\u0171nt az ia64 architekt\u00fara t\u00e1mogat\u00e1sa, amelyet az Intel Itanium processzorok alkalmaztak, amelyek \u00e9rt\u00e9kes\u00edt\u00e9se 2021-ben teljesen le\u00e1llt. Az Itanium processzorokat az Intel 2001-ben mutatta be, de az ia64 architekt\u00fara nem tudta felvenni a versenyt az AMD64-el, f\u0151k\u00e9nt az AMD64 magasabb teljes\u00edtm\u00e9nye \u00e9s a z\u00f6kken\u0151mentesebb \u00e1t\u00e1ll\u00e1s miatt a 32 bites x86 processzorokr\u00f3l. Ennek eredm\u00e9nyek\u00e9nt az Intel \u00e9rdekei az x86-64 processzorok fel\u00e9 tol\u00f3dtak, m\u00edg az Itanium sorsa <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/\"   title=\"szerverek\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1896\">szerverek<\/a> HP Integrity, melynek megrendel\u00e9se h\u00e1rom \u00e9vvel ezel\u0151tt megsz\u0171nt. Az ia64 t\u00e1mogat\u00e1s\u00e1hoz sz\u00fcks\u00e9ges k\u00f3dot elt\u00e1vol\u00edtott\u00e1k a kernb\u0151l, f\u0151k\u00e9nt a platform hosszan tart\u00f3 t\u00e1mogat\u00e1s\u00e1nak hi\u00e1nya miatt. Linus Torvalds kifejezte hajland\u00f3s\u00e1g\u00e1t az ia64 t\u00e1mogat\u00e1s\u00e1nak vissza\u00e1ll\u00edt\u00e1s\u00e1ra a kernben, de csak akkor, ha tal\u00e1lkozik egy olyan karbantart\u00f3val, aki legal\u00e1bb egy \u00e9vig demonstr\u00e1lni tudja a platform megfelel\u0151 t\u00e1mogat\u00e1s\u00e1t a f\u0151 kernel felett.\n<li class=\"l\"> A \"ia32_emulation\" kernel command line parameter has been added, allowing the enabling and disabling of 32-bit mode emulation support during the boot process for kernels built for the x86-64 architecture. Practically, the new parameter allows the kernel to be built with compatibility support for 32-bit applications, but by default, this mode is disabled to reduce the attack vector on the kernel, as the API for ensuring compatibility is less tested than the core kernel interfaces.\n<li class=\"l\"> Folyamatosan \u00e1tker\u00fclnek a Rust-for-Linux \u00e1gb\u00f3l sz\u00e1rmaz\u00f3 v\u00e1ltoz\u00e1sok, amelyek a Rust nyelv m\u00e1sodlagos nyelvk\u00e9nt val\u00f3 haszn\u00e1lat\u00e1ra vonatkoznak a driverek \u00e9s kern modulok fejleszt\u00e9s\u00e9ben (a Rust t\u00e1mogat\u00e1s alap\u00e9rtelmez\u00e9s szerint nem akt\u00edv, \u00e9s nem teszi k\u00f6telez\u0151v\u00e9 a Rustot a kern \u00e9p\u00edt\u00e9si f\u00fcgg\u0151s\u00e9gei k\u00f6z\u00e9). Az \u00faj verzi\u00f3ban a Rust 1.73 kiad\u00e1s\u00e1nak haszn\u00e1lat\u00e1ra val\u00f3 \u00e1t\u00e1ll\u00e1s t\u00f6rt\u00e9nt, \u00e9s egy k\u00f6tegkezel\u00e9si (workqueues) API javasolt.\n<li class=\"l\"> Lehet\u0151v\u00e9 v\u00e1lt a binfmt_misc mechanizmus haszn\u00e1lata \u00faj v\u00e9grehajthat\u00f3 f\u00e1jlform\u00e1tumok (p\u00e9ld\u00e1ul Java vagy Python alkalmaz\u00e1sok futtat\u00e1sa) t\u00e1mogat\u00e1s\u00e1ra, elk\u00fcl\u00f6n\u00fclt nem privil\u00e9giz\u00e1lt n\u00e9vterekben (namespace).\n<li class=\"l\"> In the cpuset cgroup controller, which manages the allocation of CPU cores during task execution, a distinction has been made between local and remote partitioning. These differ based on whether the parent cgroup is a valid root section or not. New settings \"cpuset.cpus.exclusive\" and \"cpuset.cpus.exclusive.effective\" have also been added for exclusive CPU binding.\n<li class=\"l\"> A BPF alrendszerben megval\u00f3s\u00edtott\u00e1k a kiv\u00e9telek t\u00e1mogat\u00e1s\u00e1t, amelyeket a BPF programb\u00f3l s\u00fcrg\u0151ss\u00e9gi kil\u00e9p\u00e9sk\u00e9nt dolgoznak fel, lehet\u0151v\u00e9 t\u00e9ve a biztons\u00e1gos veremkeres\u00e9st. Ezen k\u00edv\u00fcl a BPF programokban enged\u00e9lyezt\u00e9k a kptr mutat\u00f3k haszn\u00e1lat\u00e1t a CPU-hoz val\u00f3 k\u00f6t\u0151d\u00e9s sor\u00e1n.\n<li class=\"l\"> Az io_uring alrendszerhez hozz\u00e1adt\u00e1k a futex m\u0171veletek t\u00e1mogat\u00e1s\u00e1t, valamint \u00faj m\u0171veleteket val\u00f3s\u00edtottak meg: IORING_OP_WAITID (aszimmetrikus waitid verzi\u00f3), SOCKET_URING_OP_GETSOCKOPT (getsockoptand v\u00e1ltozat), SOCKET_URING_OP_SETSOCKOPT (setsockopt v\u00e1ltozat) \u00e9s IORING_OP_READ_MULTISHOT (t\u00f6bbsz\u00f6ri olvas\u00e1si m\u0171veletek, amelyek nem \u00e1llnak le, am\u00edg vannak adatok vagy a puffert meg nem t\u00f6ltik).\n<li class=\"l\"> K\u00f6nny\u0171s\u00faly\u00fa, egyir\u00e1ny\u00fa FIFO sorok megval\u00f3s\u00edt\u00e1sa ker\u00fclt hozz\u00e1ad\u00e1sra, amelyek csak a sorb\u00f3l val\u00f3 elt\u00e1vol\u00edt\u00e1s eset\u00e9n ig\u00e9nyelnek spin-lockot a folyamat kontextus\u00e1ban, \u00e9s atomikus sorba helyez\u00e9s eset\u00e9n nem ig\u00e9nyelnek spin-lockot b\u00e1rmilyen kontextusban.\n<li class=\"l\"> A ring buffer called \"objpool\" with a scalable implementation of a high-performance queue for allocating and returning objects has been added.\n<li class=\"l\"> Hozz\u00e1adt\u00e1k a futex2 \u00faj API-j\u00e1nak kezdeti v\u00e1ltoz\u00e1sait, amely a NUMA rendszerekben magasabb teljes\u00edtm\u00e9nnyel rendelkezik, t\u00e1mogat m\u00e1s, mint 32 bites m\u00e9reteket, \u00e9s a multiplex rendszerh\u00edv\u00e1s, a futex() helyett haszn\u00e1lhat\u00f3.\n<li class=\"l\"> ARM32 \u00e9s S390x architekt\u00far\u00e1khoz hozz\u00e1adt\u00e1k a BPF utas\u00edt\u00e1sk\u00e9szlet (cpuv4) t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> For the RISC-V architecture, support has been implemented for the Shadow-Call Stack checking mode available in Clang 17, designed to protect against the overwriting of the return address from a function in case of a stack buffer overflow. The essence of the protection lies in saving the return address in a separate \"shadow\" stack after control is passed to the function and retrieving this address before exiting the function.\n<li class=\"l\"> A KSM (Kernel Samepage Merging) mechanizmushoz \u00faj intelligens mem\u00f3riaoldalak szkennel\u00e9si m\u00f3d ker\u00fclt bevezet\u00e9sre, amely nyomon k\u00f6veti a sikertelen\u00fcl szkennelet oldalakat, \u00e9s cs\u00f6kkenti azok ism\u00e9telt szkennel\u00e9s\u00e9nek intenzit\u00e1s\u00e1t. Az \u00faj m\u00f3d aktiv\u00e1l\u00e1s\u00e1hoz \u00faj be\u00e1ll\u00edt\u00e1st adtak hozz\u00e1: \"\/sys\/kernel\/mm\/ksm\/smart_scan\".\n<li class=\"l\"> Bevezet\u00e9sre ker\u00fclt egy \u00faj ioctl parancs, a PAGEMAP_SCAN, amely a userfaultfd() haszn\u00e1lat\u00e1val lehet\u0151v\u00e9 teszi a mem\u00f3riater\u00fclet \u00edr\u00e1sainak azonos\u00edt\u00e1s\u00e1t. Ez az \u00faj funkci\u00f3 p\u00e9ld\u00e1ul haszn\u00e1lhat\u00f3 a CRIU folyamat\u00e1llapot\u00e1nak ment\u00e9s\u00e9re \u00e9s helyre\u00e1ll\u00edt\u00e1s\u00e1ra, vagy j\u00e1t\u00e9kokhoz kapcsol\u00f3d\u00f3 csal\u00e1sg\u00e1tl\u00f3 rendszerekben.\n<li class=\"l\"> A build rendszerben, ha Clang ford\u00edt\u00f3 van telep\u00edtve, alap\u00e9rtelmezetten enged\u00e9lyezve van a perf alrendszert haszn\u00e1l\u00f3 p\u00e9ld\u00e1k, BPF programok form\u00e1j\u00e1ban t\u00f6rt\u00e9n\u0151 ford\u00edt\u00e1sa.\n<li class=\"l\"> Elt\u00e1vol\u00edtott\u00e1k a videobuf r\u00e9gi r\u00e9teg\u00e9t, amelyet a m\u00e9dia alrendszer keretbufferei kezel\u00e9s\u00e9re haszn\u00e1ltak, \u00e9s amelyet t\u00f6bb mint 10 \u00e9vvel ezel\u0151tt cser\u00e9ltek le az \u00faj videobuf2 implement\u00e1ci\u00f3ra.                        <\/ul>\n<li class=\"l\"> <b>Virtualiz\u00e1ci\u00f3 \u00e9s biztons\u00e1g<\/b>\n<ul>\n<li class=\"l\"> Az fscrypt alrendszerhez hozz\u00e1adt\u00e1k a blokkokkal t\u00f6rt\u00e9n\u0151 adatmegtart\u00e1s lehet\u0151s\u00e9g\u00e9t, amely kisebb, mint a f\u00e1jlrendszer blokkja. Ez sz\u00fcks\u00e9ges lehet olyan hardveres titkos\u00edt\u00e1si mechanizmusok aktiv\u00e1l\u00e1s\u00e1hoz, amelyek csak kis blokkokat t\u00e1mogatnak (p\u00e9ld\u00e1ul a 4096-os blokkm\u00e9ret\u0171 UFS vez\u00e9rl\u0151k haszn\u00e1lhat\u00f3ak 16K blokk m\u00e9ret\u0171 f\u00e1jlrendszerekhez).\n<li class=\"l\"> In the \"iommufd\" subsystem, which allows managing IOMMU (I\/O Memory-Management Unit) page tables through file descriptors from user space, the tracking of not-yet-flushed dirty data for DMA operations has been added. This is necessary for determining memory with unflushed data during process migration.\n<li class=\"l\"> A Landlock mechanizmushoz, amely lehet\u0151v\u00e9 teszi a folyamatcsoportok k\u00fcls\u0151 k\u00f6rnyezettel val\u00f3 interakci\u00f3j\u00e1nak korl\u00e1toz\u00e1s\u00e1t, hozz\u00e1adt\u00e1k a TCP socketekhez val\u00f3 hozz\u00e1f\u00e9r\u00e9s szab\u00e1lyainak defini\u00e1l\u00e1s\u00e1nak t\u00e1mogat\u00e1s\u00e1t. P\u00e9ld\u00e1ul l\u00e9trehozhatunk egy szab\u00e1lyt, amely csak a 443-as port el\u00e9r\u00e9s\u00e9t enged\u00e9lyezi HTTPS kapcsolatok l\u00e9trehoz\u00e1s\u00e1hoz.\n<li class=\"l\"> Az AppArmor alrendszerhez hozz\u00e1adt\u00e1k a io_uring mechanizmushoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s kezel\u00e9s\u00e9t \u00e9s a felhaszn\u00e1l\u00f3i azonos\u00edt\u00f3k helyn\u00e9v (user namespaces) l\u00e9trehoz\u00e1s\u00e1t, lehet\u0151v\u00e9 t\u00e9ve, hogy bizonyos folyamatok sz\u00e1m\u00e1ra csak egyes funkci\u00f3khoz legyen hozz\u00e1f\u00e9r\u00e9s.\n<li class=\"l\"> API ker\u00fclt bevezet\u00e9sre az autentik\u00e1l\u00e1sra <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/vps\/\"   title=\"virtu\u00e1lis g\u00e9pekhez\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2025\">virtu\u00e1lis g\u00e9pekhez<\/a> a folyamatok bet\u00f6lt\u00e9s\u00e9nek integrit\u00e1s\u00e1nak meger\u0151s\u00edt\u00e9s\u00e9re.\n<li class=\"l\"> A LoongArch rendszereken a KVM hypervisor haszn\u00e1lat\u00e1val t\u00f6rt\u00e9n\u0151 virtualiz\u00e1ci\u00f3 t\u00e1mogat\u00e1sa val\u00f3sult meg.\n<li class=\"l\"> A KVM hypervisor haszn\u00e1lat\u00e1val RISC-V rendszereken megjelent a Smstateen b\u0151v\u00edtm\u00e9ny t\u00e1mogat\u00e1sa, amely blokkolja a virtu\u00e1lis g\u00e9p CPU regiszterekhez val\u00f3 hozz\u00e1f\u00e9r\u00e9s\u00e9t, amelyeket a hypervisor kifejezetten nem t\u00e1mogat. Emellett megjelent a vend\u00e9g rendszerekben a Zicond b\u0151v\u00edtm\u00e9ny haszn\u00e1lat\u00e1nak t\u00e1mogat\u00e1sa, amely lehet\u0151v\u00e9 teszi bizonyos felt\u00e9teles eg\u00e9sz sz\u00e1m\u0171 m\u0171veletek alkalmaz\u00e1s\u00e1t.\n<li class=\"l\"> A KVM \u00e1ltal kezelt x86 architekt\u00far\u00e1val rendelkez\u0151 vend\u00e9g rendszerekben legfeljebb 4096 virtu\u00e1lis CPU haszn\u00e1lata enged\u00e9lyezett.                <\/ul>\n<li class=\"l\"> <b>H\u00e1l\u00f3zati alrendszer<\/b>\n<ul>\n<li class=\"l\"> Az NVMe-TCP meghajt\u00f3 (NVMe over TCP), amely lehet\u0151v\u00e9 teszi az NVMe t\u00e1rol\u00f3k el\u00e9r\u00e9s\u00e9t h\u00e1l\u00f3zaton kereszt\u00fcl (NVM Express over Fabrics) TCP protokoll haszn\u00e1lat\u00e1val, t\u00e1mogat\u00e1st ny\u00fajtott az adat\u00e1tviteli csatorna titkos\u00edt\u00e1s\u00e1nak TLS haszn\u00e1lat\u00e1val (KTLS \u00e9s a h\u00e1tt\u00e9rfolyamat a felhaszn\u00e1l\u00f3i t\u00e9rben, tlshd, a kapcsolatok koordin\u00e1l\u00e1s\u00e1hoz).\n<li class=\"l\"> A fq (Fair Queuing) csomag\u00fctemez\u0151 teljes\u00edtm\u00e9ny\u00e9nek optimaliz\u00e1l\u00e1s\u00e1t hajtott\u00e1k v\u00e9gre, ami 5%-os n\u00f6veked\u00e9st eredm\u00e9nyezett a TCP Request\/Response (tcp_rr) tesztn\u00e9l magas terhel\u00e9sek mellett, valamint 13%-os n\u00f6veked\u00e9st a korl\u00e1tlan UDP csomag\u00e1raml\u00e1s eset\u00e9n.\n<li class=\"l\"> An optional feature has been added to the TCP protocol for using timestamps (TCP TS) with microsecond accuracy (RFC 7323), which allows for more precise delay estimation and the creation of more advanced congestion control modules. To enable this, the command \"ip route add 10\/8 ... features tcp_usec_ts\" can be used.\n<li class=\"l\"> A TCP veremben hozz\u00e1adtak egy TCP-AO (TCP Authentication Option, RFC 5925) b\u0151v\u00edtm\u00e9ny t\u00e1mogat\u00e1s\u00e1t, amely lehet\u0151v\u00e9 teszi a TCP fejl\u00e9c MAC-k\u00f3dok (Message Authentication Code) \u00e1ltali ellen\u0151rz\u00e9s\u00e9t, modern HMAC-SHA1 \u00e9s CMAC-AES-128 algoritmusok haszn\u00e1lat\u00e1val, a r\u00e9gebbi MD5 algoritmus alap\u00fa TCP-MD5 opci\u00f3 helyett.\n<li class=\"l\"> A new type of virtual network device called \"netkit\" has been added, where data transfer logic is set using a BPF program.\n<li class=\"l\"> A KSMBD, ami egy kernel szint\u0171 SMB szerver megval\u00f3s\u00edt\u00e1s, t\u00e1mogat\u00e1st kapott a kombin\u00e1lt karakterek szurrog\u00e1tp\u00e1rait tartalmaz\u00f3 f\u00e1jlnevek \u00e1tkonvert\u00e1l\u00e1s\u00e1hoz.\n<li class=\"l\"> Az NFS-ben jav\u00edtott\u00e1k a folyamatok megval\u00f3s\u00edt\u00e1s\u00e1t RPC-szolg\u00e1ltat\u00e1sokkal. Hozz\u00e1adva a \u00edr\u00e1si deleg\u00e1l\u00e1s t\u00e1mogat\u00e1sa (NFSv4.1+). Az NFSD-be be\u00e9p\u00edtett\u00e9k a netlink feldolgoz\u00f3t rpc_status n\u00e9ven. Javult az NFSv4.x kliensek t\u00e1mogat\u00e1sa a knfsd-n val\u00f3 \u00fajb\u00f3li export\u00e1l\u00e1s alkalm\u00e1val.                      <\/ul>\n<li class=\"l\"> <b>Hardver<\/b>\n<ul>\n<li class=\"l\"> A Nouveau kernel module has been added to provide initial support for GSP-RM firmware, which is used in NVIDIA RTX 20+ GPUs to offload initialization and GPU management tasks to a separate GSP (GPU System Processor) microcontroller. GSP-RM support allows the Nouveau driver to operate through firmware calls, rather than direct hardware interaction coding, significantly simplifying the addition of support for new NVIDIA GPUs by using existing calls for initialization and power management.\n<li class=\"l\"> The AMDGPU driver has implemented support for GC 11.5, NBIO 7.11, SMU 14, SMU 13.0 OD, DCN 3.5, VPE 6.1, and DML2. Improved support for seamless booting (no flickering when switching video modes) has been added.\n<li class=\"l\"> The i915 driver has implemented support for Intel Meteor Lake chips and added initial support for Intel LunarLake (Xe 2).\n<li class=\"l\"> Support for asymmetric data transfer channels introduced in the USB4 v2 specifications (120\/40G) has been added.\n<li class=\"l\"> Support for ARM SoCs has been added: Qualcomm Snapdragon 720G (used in Xiaomi smartphones), AMD Pensando Elba, Renesas R8A779F4 (R-Car S4-8), USRobotics USR8200 (used in routers and NAS).\n<li class=\"l\"> Support for the Fairphone 5 smartphone and ARM boards Orange Pi 5, QuartzPro64, Turing RK1, Variscite MX6, BigTreeTech CB1, Freescale LX2162, Google Spherion, Google Hayato, Genio 1200 EVK, RK3566 Powkiddy RGB30 has been added.\n<li class=\"l\"> Support for RISC-V boards Milk-V Pioneer and Milk-V Duo has been added.\n<li class=\"l\"> Support for audio interfaces of HUAWEI laptops equipped with AMD CPUs has been added. Support for additional speakers installed on Dell Oasis 13\/14\/16 laptops has been added. Support for built-in speakers of ASUS K6500ZC has been added. Support for mute indicators on HP 255 G8 and G10 laptops has been added. Support for audio drivers acp6.3 has been added. Support for professional recording interfaces Focusrite Clarett+ 2Pre and 4Pre has been added.                  <\/ul>\n<\/ul>\n<p>A Latin American Free Software Foundation has simultaneously created a completely free kernel version 6.7 \u2014 Linux-libre 6.7-gnu, which has been cleaned of firmware elements and drivers containing non-free components or code segments restricted by the manufacturer. In version 6.7, the blob cleaning code has been updated in various drivers and subsystems, such as the amdgpu, nouveau, adreno, mwifiex, mt7988, ath11k, avs, and btqca drivers. The cleaning code for the localtalk and rtl8192u drivers has been removed due to their exclusion from the kernel. Unnecessary cleaning components for the xhci-pci, rtl8xxxu, and rtw8822b drivers, previously added by mistake, have been eliminated. The blob names in the dts files for the Aarch64 architecture have been cleaned up. Blobs in the new mt7925, tps6598x, aw87390, and aw88399 drivers have been removed.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60398\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0424\u0421 Bcachefs, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Itanium, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b Nouvea \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438 GSP-R, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS-\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 NVMe-TCP, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432 BPF, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 futex \u0432 io_uring, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 fq (Fair Queuing), \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f TCP-AO (TCP Authentication Option) \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112745","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-6-7\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-6-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-01-08T13:10:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-01-08T13:10:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux 6.7-es kernel kiad\u00e1s | ProHoster","description":"K\u00e9t h\u00f3napos fejleszt\u00e9s ut\u00e1n Linus Torvalds bemutatta a Linux 6.7-es kernel kiad\u00e1s\u00e1t.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-6-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.7.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-6-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-08T13:10:13+00:00","article:modified_time":"2024-01-08T13:10:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112745","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 16:53:34","updated":"2026-02-09 17:11:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=112745"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112745\/revisions"}],"predecessor-version":[{"id":159269,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112745\/revisions\/159269"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=112745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=112745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=112745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}