{"id":86642,"date":"2020-06-27T19:42:50","date_gmt":"2020-06-27T17:42:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2020-06-27T19:42:50","modified_gmt":"2020-06-27T17:42:50","slug":"vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"Megjelent az LKRG 0.8 modul a Linux kernel sebezhet\u0151s\u00e9geinek kihaszn\u00e1l\u00e1sa elleni v\u00e9delem \u00e9rdek\u00e9ben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Openwall projekt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/announce\/2020\/06\/25\/1\">k\u00f6zz\u00e9tett<\/a><\/noindex> a kernelm\u00f3d fejleszt\u00e9se <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.8<\/a><\/noindex>  (Linux Kernel Runtime Guard), amely a kernel strukt\u00far\u00e1k t\u00e1mad\u00e1sainak \u00e9s integrit\u00e1s s\u00e9rt\u00e9seknek a felfedez\u00e9s\u00e9re \u00e9s blokkol\u00e1s\u00e1ra szolg\u00e1l. P\u00e9ld\u00e1ul a modul v\u00e9delmet ny\u00fajthat a m\u0171k\u00f6d\u0151 kernelben v\u00e9grehajtott jogosulatlan m\u00f3dos\u00edt\u00e1sokkal \u00e9s a felhaszn\u00e1l\u00f3i folyamatok jogosults\u00e1gainak megv\u00e1ltoztat\u00e1s\u00e1ra tett k\u00eds\u00e9rletekkel szemben (exploit alkalmaz\u00e1sok azonos\u00edt\u00e1sa). A modul alkalmas a Linux kernel m\u00e1r ismert exploitjaival szembeni v\u00e9delem biztos\u00edt\u00e1s\u00e1ra (p\u00e9ld\u00e1ul olyan helyzetekben, amikor a rendszerben neh\u00e9z a kernel friss\u00edt\u00e9se), illetve ismeretlen sebezhet\u0151s\u00e9gekre vonatkoz\u00f3 exploitokkal szembeni v\u00e9dekez\u00e9sre is. A projekt k\u00f3dja <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/Adam_pi3\/lkrg-main\/src\/master\/\">terjeszt\u00e9sre ker\u00fcl<\/a><\/noindex> GPLv2 licenc alatt.<\/p>\n<p>Az \u00faj verzi\u00f3ban tal\u00e1lhat\u00f3 v\u00e1ltoz\u00e1sok:<\/p>\n<ul>\n<li class=\"l\">  Megv\u00e1ltozott az LKRG projekt pozicion\u00e1l\u00e1sa, amely most m\u00e1r nem oszlik fel k\u00fcl\u00f6n alrendszerekre az integrit\u00e1s ellen\u0151rz\u00e9s\u00e9re \u00e9s az exploitok alkalmaz\u00e1s\u00e1nak meghat\u00e1roz\u00e1s\u00e1ra, hanem egy egys\u00e9ges term\u00e9kk\u00e9nt ker\u00fcl bemutat\u00e1sra, amely az t\u00e1mad\u00e1sok \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 integrit\u00e1s s\u00e9rt\u00e9sek felfedez\u00e9s\u00e9re szolg\u00e1l;\n<li class=\"l\">  Biztos\u00edtva van a kompatibilit\u00e1s a 5.3 \u00e9s 5.7 k\u00f6z\u00f6tti Linux magokkal, valamint olyan magokkal, amelyeket agressz\u00edv GCC optimaliz\u00e1l\u00e1sokkal \u00e9p\u00edtettek, CONFIG_USB \u00e9s CONFIG_STACKTRACE opci\u00f3k n\u00e9lk\u00fcl, vagy CONFIG_UNWINDER_ORC opci\u00f3val, valamint olyan magokkal, amelyekb\u0151l hi\u00e1nyoznak az LKRG \u00e1ltal megfigyelhet\u0151 funkci\u00f3k, ha ezek n\u00e9lk\u00fcl is meg lehet oldani;\n<li class=\"l\">  A ford\u00edt\u00e1s sor\u00e1n ellen\u0151rz\u00e9sre ker\u00fcltek a CONFIG_* k\u00f6telez\u0151 kernelbe\u00e1ll\u00edt\u00e1sok, hogy \u00e9rtelmes hiba\u00fczeneteket kapjunk a hom\u00e1lyos hib\u00e1k helyett;\n<li class=\"l\">  Hozz\u00e1adva a v\u00e1rakoz\u00f3 (ACPI S3, suspend to RAM) \u00e9s alv\u00f3 (S4, suspend to disk) m\u00f3dok t\u00e1mogat\u00e1sa;\n<li class=\"l\">  A Makefile-ba be\u00e9p\u00edtett t\u00e1mogat\u00e1s az DKMS sz\u00e1m\u00e1ra;\n<li class=\"l\">  K\u00eds\u00e9rleti t\u00e1mogat\u00e1s ker\u00fclt bevezet\u00e9sre a 32 bites ARM platformok sz\u00e1m\u00e1ra (tesztelve Raspberry Pi 3 Model B-n). Az el\u0151z\u0151leg el\u00e9rhet\u0151 AArch64 (ARM64) t\u00e1mogat\u00e1s kieg\u00e9sz\u00fclt a Raspberry Pi 4 t\u00e1blag\u00e9ppel val\u00f3 kompatibilit\u00e1ssal;\n<li class=\"l\">  \u00daj hook-ok ker\u00fcltek bevezet\u00e9sre, k\u00f6zt\u00fck a capable() h\u00edv\u00e1si hook a manipul\u00e1l\u00f3 exploitok jobb azonos\u00edt\u00e1s\u00e1\u00e9rt, amely a &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/capabilities.7.html\">capabilities<\/a><\/noindex>&#171;, nem pedig a folyamatok azonos\u00edt\u00f3i (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/credentials.7.html\">credentials<\/a><\/noindex>);\n<li class=\"l\">  \u00daj logika javasolt a n\u00e9vtartom\u00e1nyok (p\u00e9ld\u00e1ul Docker kont\u00e9nerek) korl\u00e1toz\u00e1saib\u00f3l val\u00f3 kijut\u00e1si k\u00eds\u00e9rletek azonos\u00edt\u00e1s\u00e1ra;\n<li class=\"l\">  x86-64 rendszereken biztos\u00edtva van a SMAP (Supervisor Mode Access Prevention) bit ellen\u0151rz\u00e9se \u00e9s alkalmaz\u00e1sa, amely megakad\u00e1lyozza, hogy a felhaszn\u00e1l\u00f3i t\u00e9rben l\u00e9v\u0151 adatokhoz hozz\u00e1f\u00e9rjenek a kernel szintj\u00e9n v\u00e9grehajtott privilegiz\u00e1lt k\u00f3d. Az SMEP (Supervisor Mode Execution Prevention) v\u00e9delmet kor\u00e1bban val\u00f3s\u00edtott\u00e1k meg;\n<li class=\"l\">  A munka sor\u00e1n biztos\u00edtott a LKRG be\u00e1ll\u00edt\u00e1sainak elhelyez\u00e9se a mem\u00f3ri\u00e1ban, amely \u00e1ltal\u00e1ban csak olvashat\u00f3;\n<li class=\"l\">  A napl\u00f3ba \u00edrt inform\u00e1ci\u00f3k, amelyek a t\u00e1mad\u00e1sok szempontj\u00e1b\u00f3l a leghasznosabbak lehetnek (p\u00e9ld\u00e1ul a kernelben l\u00e9v\u0151 c\u00edmek inform\u00e1ci\u00f3ja), a hibakeres\u00e9si m\u00f3d (log_level=4 \u00e9s felette) korl\u00e1toz\u00f3dnak, amely alap\u00e9rtelmez\u00e9s szerint ki van kapcsolva.\n<li class=\"l\">  N\u00f6velt\u00e9k a folyamatk\u00f6vet\u0151 adatb\u00e1zis sk\u00e1l\u00e1zhat\u00f3s\u00e1g\u00e1t - egy RB fa helyett, melyet egy spinlock v\u00e9dett, egy 512 RB f\u00e1b\u00f3l \u00e1ll\u00f3 hash t\u00e1bla ker\u00fclt bevezet\u00e9sre, amelyet megfelel\u0151en 512 olvas\u00f3-\u00edr\u00f3 z\u00e1rol\u00e1s v\u00e9d;\n<li class=\"l\">  Bevezet\u00e9sre ker\u00fclt \u00e9s alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyez\u00e9sre ker\u00fclt egy m\u00f3d, amelyben a folyamatazonos\u00edt\u00f3k integrit\u00e1s\u00e1nak ellen\u0151rz\u00e9s\u00e9t gyakran csak a jelenlegi feladat eset\u00e9ben v\u00e9gzik, valamint opcion\u00e1lisan az aktiv\u00e1lt (fel\u00e9bred\u0151) feladatok eset\u00e9ben. A t\u00f6bbi, alv\u00f3 \u00e1llapotban l\u00e9v\u0151 vagy az LKRG API kernelj\u00e9vel kapcsolatban nem l\u00e9v\u0151 feladatn\u00e1l ritk\u00e1bban hajtj\u00e1k v\u00e9gre az ellen\u0151rz\u00e9st.\n<li class=\"l\">  \u00daj sysctl \u00e9s modulbe\u00e1ll\u00edt\u00e1sok ker\u00fcltek hozz\u00e1ad\u00e1sra az LKRG finomhangol\u00e1s\u00e1hoz, valamint k\u00e9t sysctl a fejleszt\u0151k \u00e1ltal el\u0151k\u00e9sz\u00edtett finomhangolt be\u00e1ll\u00edt\u00e1si k\u00e9szletek (profiles) k\u00f6z\u00f6tti egyszer\u0171bb v\u00e1laszt\u00e1s \u00e9rdek\u00e9ben;\n<li class=\"l\">  Az alap\u00e9rtelmezett be\u00e1ll\u00edt\u00e1sok m\u00f3dos\u00edtott\u00e1k a s\u00e9r\u00fcl\u00e9sekkor val\u00f3 gyors \u00e9szlel\u00e9s \u00e9s a hat\u00e9kony reakci\u00f3 k\u00f6z\u00f6tti m\u00e9rs\u00e9kelt egyens\u00faly megteremt\u00e9se \u00e9rdek\u00e9ben, mik\u00f6zben figyelembe veszik a teljes\u00edtm\u00e9nyre gyakorolt hat\u00e1st \u00e9s a hamis riaszt\u00e1sok kock\u00e1zat\u00e1t.\n<li class=\"l\">  A systemd unit f\u00e1jl \u00fajragondolt a LKRG modul korai bet\u00f6lt\u00e9s\u00e9re (a modul kikapcsol\u00e1s\u00e1hoz a kernel parancssori param\u00e9tere haszn\u00e1lhat\u00f3);\n<\/ul>\n<p>Figyelembev\u00e9tel\u00e9vel a leg\u00fajabb verzi\u00f3ban javasolt optimaliz\u00e1l\u00e1sok r\u00e9v\u00e9n a LKRG 0.8 alkalmaz\u00e1sa eset\u00e9n a teljes\u00edtm\u00e9ny cs\u00f6kken\u00e9se alap\u00e9rtelmezett (&#171;heavy&#187;) m\u00f3dban 2,5%-ra, m\u00edg a k\u00f6nny\u00edtett (&#171;light&#187;) m\u00f3dban 2%-ra tehet\u0151. <\/p>\n<p>A nemr\u00e9giben v\u00e9gzett <noindex><a rel=\"nofollow\" href=\"http:\/\/jultika.oulu.fi\/files\/nbnfioulu-202004201485.pdf\">kutat\u00e1s<\/a><\/noindex> a LKRG rootkit-\u00e9szlel\u00e9si csomagok hat\u00e9konys\u00e1g\u00e1r\u00f3l  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/lkrg-users\/2020\/06\/14\/5\">megmutatta<\/a><\/noindex> A legjobb eredm\u00e9nyek, hamis riaszt\u00e1sok n\u00e9lk\u00fcl, a tesztelt 9 rootkit k\u00f6z\u00fcl 8-at az alapkernel szintj\u00e9n azonos\u00edtva (felfedezett rootkitek: Diamorphine, Honey Pot Bears, LilyOfTheValley, Nuk3 Gh0st, Puszek, Reptile, Rootfoo Linux Rootkit \u00e9s Sutekh, de a Keysniffer kimaradt, amely egy kernelmodul a keylogger, de nem szigor\u00faan \u00e9rtelmezve rootkit). \u00d6sszehasonl\u00edt\u00e1sk\u00e9ppen, az AIDE, OSSEC \u00e9s Rootkit Hunter 2 rootkit-et azonos\u00edtott 9-b\u0151l, m\u00edg a Chkrootkit egyet sem. Ezenk\u00edv\u00fcl az LKRG nem t\u00e1mogatja a felhaszn\u00e1l\u00f3i t\u00e9rben elhelyezett rootkitek azonos\u00edt\u00e1s\u00e1t, \u00edgy a legnagyobb hat\u00e9konys\u00e1g az AIDE \u00e9s az LKRG kombin\u00e1l\u00e1s\u00e1val \u00e9rhet\u0151 el, amely lehet\u0151v\u00e9 tette 15 rootkit azonos\u00edt\u00e1s\u00e1t minden t\u00edpusb\u00f3l.<\/p>\n<p>Tov\u00e1bb\u00e1 megjegyezhet\u0151, hogy a disztrib\u00faci\u00f3 fejleszt\u0151je <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51009\">Whonix<\/a><\/noindex> megkezdte <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whonix.org\/wiki\/Linux_Kernel_Runtime_Guard_LKRG\">k\u00e9pz\u00e9s<\/a><\/noindex> elk\u00e9sz\u00fclt csomagokat DKMS sz\u00e1m\u00e1ra Debian, Whonix, Qubes \u00e9s Kicksecure rendszerrel, a csomag pedig <noindex><a rel=\"nofollow\" href=\"https:\/\/aur.archlinux.org\/packages\/lkrg-dkms\/\">Arch Linux<\/a><\/noindex> m\u00e1r friss\u00edtve lett a 0.8-as verzi\u00f3ra. Az LKRG csomagok szint\u00e9n el\u00e9rhet\u0151k orosz <noindex><a rel=\"nofollow\" href=\"https:\/\/packages.altlinux.org\/ru\/sisyphus\/srpms\/kernel-source-lkrg\">A PCManFM-Qt f\u00e1jlkezel\u0151 \u00e9s az azt t\u00e1mogat\u00f3 LibFM-Qt k\u00f6nyvt\u00e1r szerkeszt\u00e9s\u00e9be egyablakos \u00fczemm\u00f3d t\u00e1mogat\u00e1sa ker\u00fclt, amely megsz\u00fcnteti a k\u00fcl\u00f6n ablakokban val\u00f3 p\u00e1rbesz\u00e9deket.<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52955\">Astra Linux<\/a><\/noindex>.<\/p>\n<p>Az LKRG integrit\u00e1s-ellen\u0151rz\u00e9se az aktu\u00e1lis k\u00f3d \u00e9s a kernel adatok, modulok, valamint n\u00e9h\u00e1ny fontos adatstrukt\u00fara \u00e9s CPU be\u00e1ll\u00edt\u00e1sok lementett hash-eivel vagy a megfelel\u0151 mem\u00f3ria, adatstrukt\u00far\u00e1k vagy regiszterek m\u00e1solataival v\u00e9gzett \u00f6sszehasonl\u00edt\u00e1son alapul. Az ellen\u0151rz\u00e9sek id\u0151z\u00edt\u0151 alapj\u00e1n \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 esem\u00e9nyek bek\u00f6vetkeztekor is aktiv\u00e1l\u00f3dnak.<\/p>\n<p>A potenci\u00e1lis exploitable alkalmaz\u00e1sok azonos\u00edt\u00e1sa \u00e9s a t\u00e1mad\u00e1sok blokkol\u00e1sa a kernel \u00e1ltal a forr\u00e1sokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s biztos\u00edt\u00e1sa el\u0151tt t\u00f6rt\u00e9nik (p\u00e9ld\u00e1ul a f\u00e1jl megnyit\u00e1sa el\u0151tt), de miut\u00e1n a folyamat jogosulatlan jogosults\u00e1gokat szerzett (p\u00e9ld\u00e1ul UID megv\u00e1ltoztat\u00e1sa). Jogosulatlan folyamatok viselked\u00e9se eset\u00e9n alap\u00e9rtelmezetten k\u00e9nyszer\u00edtett le\u00e1ll\u00edt\u00e1s t\u00f6rt\u00e9nik, ami elegend\u0151 sz\u00e1mos exploit blokkol\u00e1s\u00e1hoz.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53244\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86642","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LKRG 0.8 kiad\u00e1sa a Linux kernel sebezhet\u0151s\u00e9geivel szembeni v\u00e9delme \u00e9rdek\u00e9ben | ProHoster","description":"Az Openwall projekt kiadta a kernel modul verzi\u00f3j\u00e1t","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:50+00:00","article:modified_time":"2020-06-27T17:42:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86642","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:11:04","updated":"2022-10-02 21:11:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/86642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=86642"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/86642\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=86642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=86642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=86642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}