{"id":100612,"date":"2021-06-28T10:23:04","date_gmt":"2021-06-28T08:23:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-13"},"modified":"2021-06-28T10:23:04","modified_gmt":"2021-06-28T08:23:04","slug":"reliz-yadra-linux-5-13","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","title":{"rendered":"Il rilascio del kernel Linux 5.13","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &#171;misc&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU  Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI (Control Flow Integrity), LSM-\u043c\u043e\u0434\u0443\u043b\u044c Landlock \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0431\u0430\u0437\u0435 virtio, multi-shot \u0440\u0435\u0436\u0438\u043c \u0432 io_uring.       <\/p>\n<p>\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 17189 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2150 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 (\u0441\u0430\u043c\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438), \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 60 \u041c\u0411 (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 12996 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e 794705 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430, \u0443\u0434\u0430\u043b\u0435\u043d\u043e 399590 \u0441\u0442\u0440\u043e\u043a). \u041e\u043a\u043e\u043b\u043e 47% \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 5.13 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 14% \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043c\u0435\u044e\u0442  \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, 13%  \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, 5% &#8212; \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 4% c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438  \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.    <\/p>\n<p>Novit\u00e0 principali:  <\/p>\n<ul>\n<li class=\"l\"> <b>Sottosistema disco, I\/O e file system<\/b>\n<ul>\n<li class=\"l\"> \u00c8 stata aggiunta la supporto per il file system EROFS (Enhanced Read-Only File System), proposto da Huawei per l'uso su partizioni disponibili in modalit\u00e0 sola lettura. Il nuovo file system supporta la memorizzazione dei dati in formato compresso e, rispetto a Ext4, mostra prestazioni simili nelle operazioni di lettura sequenziale, ma supera ampiamente Ext4 nel caso di accesso casuale ai dati. Ad esempio, con un livello di compressione di 4 e testando su <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/dts-dronten\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2637\">server<\/a> un disco rigido, il file system EROFS ha superato Ext4 in operazioni di lettura casuale di oltre sei volte, e in un'operazione su uno smartphone Android con Flash, quasi tre volte. Come in altri file system read-only, la struttura EROFS \u00e8 notevolmente semplificata eliminando alcune aree di metadati durante l'implementazione, come la mappa dei blocchi liberi.\n<li class=\"l\"> \u0414\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b SMB3 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f &#171;rasize&#187;, \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u043a\u043d\u0430 \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f (readahead) \u0434\u043b\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0438\u0434\u043e\u0432 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n<li class=\"l\"> Nel file system ext4 \u00e8 garantita la riscrittura degli elementi delle directory durante l'eliminazione dei file. In ext4 \u00e8 inoltre consentito l'uso simultaneo della modalit\u00e0 di funzionamento senza distinzione tra maiuscole e minuscole e della crittografia.\n<li class=\"l\"> Nel file system exFAT \u00e8 stata aggiunta la supporto per il comando ioctl FITRIM (discard), per informare il dispositivo su settori non utilizzati nel file system.\n<li class=\"l\"> Nel file system XFS \u00e8 stata aggiunta la possibilit\u00e0 di recuperare spazio dall'ultima area di allocazione nel file system, il che rappresenta il primo passo verso l'implementazione della funzionalit\u00e0 di riduzione delle dimensioni delle partizioni esistenti con file system XFS.\n<li class=\"l\"> \u00c8 stata aggiunta una nuova chiamata di sistema quotactl_path, che si differenzia da quotactl in quanto consente di gestire le quote non tramite un file di dispositivo speciale, ma specificando il percorso della directory di montaggio del file system.\n<li class=\"l\"> Nel meccanismo fanotify sono state ampliate le funzionalit\u00e0 disponibili per gli utenti non privilegiati. Ad esempio, analogamente a inotify, senza i diritti SYS_CAP_ADMIN \u00e8 ora possibile monitorare gli eventi OPEN, ACCESS, MODIFY e CLOSE per file e directory.                                    <\/ul>\n<li class=\"l\"> <b>Memoria e servizi di sistema<\/b>\n<ul>\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 cgroup  &#8212; &#171;Misc&#187; (CONFIG_CGROUP_MISC), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0430\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0430 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0430\u0432\u0430\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 cgroup  \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 AMD SEV (Secure Encrypted Virtualization).\n<li class=\"l\"> \u0412 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435  \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 POLL \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0440\u0435\u0436\u0438\u043c &#171;multi-shot&#187;, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c POLL \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f, \u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c  \u0438 \u043c\u043e\u0436\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0431\u044b\u0442\u0438\u0439.\n<li class=\"l\"> \u00c8 stato trasferito dal ramo realtime del kernel il codice che gestisce le interruzioni generate software nei thread del kernel, consentendo di preemptarle con processi di maggiore priorit\u00e0.\n<li class=\"l\"> \u00c8 stata aggiunta una libreria interna netfs, nella quale sono state trasferite le funzioni di uso comune nelle file system di rete.\n<li class=\"l\"> Per l'architettura PowerPC \u00e8 stata implementata la supporto per gli spazi dei nomi temporali (time namespaces), che consentono di utilizzare un proprio tempo all'interno del contenitore.\n<li class=\"l\"> Per l'architettura RISC-V \u00e8 stata implementata la supporto per kexec, crash dump, kprobe e l'esecuzione del kernel in loco (execute-in-place, esecuzione dal supporto originale, senza copia in RAM).\n<li class=\"l\"> Nei programmi BPF per il tracciamento \u00e8 stata introdotta la possibilit\u00e0 di utilizzare uno storage dei dati locale per il compito (task-local storage), che offre prestazioni superiori attraverso l'associazione dei dati a uno specifico gestore BPF.\n<li class=\"l\"> \u00c8 stato implementato un nuovo meccanismo per la chiamata diretta di funzioni del kernel dai programmi BPF, gi\u00e0 utilizzato nell'implementazione di algoritmi di sovraccarico TCP. Per motivi di sicurezza, le funzioni chiamate devono essere esplicitamente definite in una lista bianca.\n<li class=\"l\"> Nel sistema di tracciamento delle funzioni ftrace \u00e8 stata aggiunta l'opzione func-no-repeats, che permette di riflettere le chiamate consecutive ripetute di una funzione in forma di contatore.\n<li class=\"l\"> Nella system call userfaultfd(), progettata per gestire i page fault (accesso a pagine di memoria non allocate) nello spazio utente, \u00e8 stata aggiunta la possibilit\u00e0 di gestire i fault parziali, in cui la pagina di memoria \u00e8 presente ma non c'\u00e8 un'entrata nella tabella delle pagine di memoria.\n<li class=\"l\"> Il supporto per il file speciale \/dev\/kmem \u00e8 stato interrotto, il quale consentiva l'accesso all'intero spazio degli indirizzi del kernel. Questo file \u00e8 stato dichiarato obsoleto e causa di problemi di sicurezza.\n<li class=\"l\"> Per i chip Intel \u00e8 stato implementato un nuovo driver per la gestione della dissipazione del calore, che riduce la frequenza della CPU in caso di pericolo di surriscaldamento. A differenza del meccanismo attuale di attivazione TCC (Thermal Control Circuit), il nuovo driver manipola i valori relativi, cio\u00e8 pu\u00f2 abbassare la frequenza all'inizio di un significativo aumento della temperatura, senza attendere di superare il limite critico.                <\/ul>\n<li class=\"l\"> <b>Virtualizzazione e sicurezza<\/b>\n<ul>\n<li class=\"l\"> \u00c8 incluso un modulo LSM di isolamento delle applicazioni chiamato Landlock, che limita le interazioni con l'ambiente esterno di un gruppo di processi e progettato tenendo conto di meccanismi di isolamento come XNU Sandbox, FreeBSD Capsicum e OpenBSD Pledge\/Unveil. La logica di concessione degli accessi \u00e8 determinata tramite un programma BPF, ma a differenza di seccomp-bpf, Landlock non filtra le chiamate di sistema e i loro argomenti; piuttosto, consente di limitare l'uso degli oggetti del kernel, come le gerarchie dei file. Con Landlock, qualsiasi processo, incluso quello non privilegiato, pu\u00f2 isolarsi in modo sicuro e prevenire la violazione dell'isolamento nel caso venga rilevata una vulnerabilit\u00e0 o una modifica dannosa nell'applicazione. Landlock consente a un processo di creare ambienti isolati e protetti, realizzati come un ulteriore strato sopra i meccanismi di controllo degli accessi esistenti. Ad esempio, un programma pu\u00f2 impedire l'accesso ai file al di fuori della directory di lavoro.\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0439 \u0432 \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0435\u043a. \u0421\u0443\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0433\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0438 \u0441\u0442\u0435\u043a\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0434\u0440\u0435\u0441\u0430\u0445, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435 \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0435\u043a\u0430 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u0441\u044f.  \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 &#171;randomize_kstack_offset=on\/off&#187; \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT. \u041d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0440\u0430\u0441\u0445\u043e\u0434\u044b  \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 1% \u043f\u043e\u0442\u0435\u0440\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n<li class=\"l\"> \u00c8 stato aggiunto il supporto per la compilazione del kernel con l'inclusione nel compilatore Clang del meccanismo di protezione CFI (Control Flow Integrity), che aggiunge una verifica prima di ogni chiamata indiretta a funzione per identificare alcune forme di comportamento indefinito, che potrebbero potenzialmente compromettere l'ordine normale di esecuzione (control flow) a causa dell'applicazione di exploit che modificano i puntatori a funzione memorizzati in memoria. Per abilitare il CFI \u00e8 stato proposto il parametro CONFIG_CFI_CLANG.\n<li class=\"l\"> \u0412 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u044f\u0434\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (key ring) \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 (Trusted Keys) \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0438 \u0438\u0437 TPM-\u043c\u043e\u0434\u0443\u043b\u0435\u0439, \u043d\u043e \u0438 \u0438\u0437 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 TEE (Trusted Execution Environment). \u0414\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 &#171;trusted.source&#187;. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 ASN.1.\n<li class=\"l\"> \u00c8 stato aggiunto un parametro per il pre-caricamento della lista dei certificati revocati durante l'avvio del core. \u00c8 stato risolto il problema (CVE-2020-26541) riguardante l'ignorare nel blacklist UEFI Secure Boot i certificati forniti nel formato EFI_CERT_X509_GUID, che permetteva di avviare il sistema con un certificato revocato.\n<li class=\"l\"> Nella sottosistema crittografico del core \u00e8 stato aggiunto il supporto per la verifica delle firme digitali ECDSA basate su curve ellittiche.\n<li class=\"l\"> \u00c8 stata implementata la possibilit\u00e0 di verificare le politiche SELinux tramite la sottosistema IMA (Integrity Measurement Architecture), che assicura il mantenimento di un database di hash per la verifica dell'integrit\u00e0 dei dati.                              <\/ul>\n<li class=\"l\"> <b>Sottosistema di rete<\/b>\n<ul>\n<li class=\"l\"> Il supporto per la tecnologia WiMAX \u00e8 stato rimosso, poich\u00e9 non viene pi\u00f9 utilizzato nelle reti pubbliche, e nel kernel l'unico driver che pu\u00f2 utilizzare WiMAX rimane il driver obsoleto Intel 2400m. Nel configuratore di rete NetworkManager, il supporto per WiMAX \u00e8 stato interrotto nel 2015. Attualmente, WiMax \u00e8 praticamente stato completamente soppiantato da tecnologie come LTE, HSPA+ e Wi-Fi 802.11n.\n<li class=\"l\"> \u00c8 stato aggiunto il driver per l'adattatore di rete MANA (Microsoft Azure Network Adapter).\n<li class=\"l\"> Nel driver ath11k \u00e8 stata aggiunta la supporto per i moduli wireless Qualcomm QCN9074 con supporto 802.11ax.\n<li class=\"l\"> Nel driver iwlwifi \u00e8 stata implementata la possibilit\u00e0 di scansione passiva dei canali nella banda 6GHz. Per l'Ucraina \u00e8 stata aggiunta la possibilit\u00e0 di attivare\/disattivare IEEE 802.11ax in base ai parametri nel BIOS.\n<li class=\"l\"> \u00c8 stata ottimizzata la sottosistema XDP (eXpress Data Path), che consente di manipolare i pacchetti di rete prima che vengano elaborati dallo stack di rete del kernel Linux. I test condotti mostrano un aumento delle prestazioni di XDP del 4-8%. Per i dispositivi virtio, il guadagno di prestazioni dell'elaborazione software AF_XDP pu\u00f2 raggiungere il 33%.\n<li class=\"l\"> Nel ICMP \u00e8 stata implementata la supporto per messaggi PROBE estesi, definiti nella RFC 8335.\n<li class=\"l\"> Prosegue l'integrazione nel kernel MPTCP (MultiPath TCP), un'estensione del protocollo TCP per gestire le connessioni TCP con la consegna dei pacchetti simultaneamente su diversi percorsi attraverso diverse interfacce di rete collegate a diversi <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/lir\/ipv4\/\"   title=\"indirizzi IP\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4455\">indirizzi IP<\/a>. Nella nuova versione \u00e8 stata aggiunta la supporto per sockopt per impostare opzioni TCP predefinite. \u00c8 stata implementata la possibilit\u00e0 di resettare singoli sottoflussi (subflow).\n<li class=\"l\"> In netfilter \u00e8 stata aggiunta la supporto alla gestione delle risorse tramite una gerarchia unificata di cgroups v2.\n<li class=\"l\"> In ethtool \u00e8 stato implementato un'interfaccia per la lettura delle statistiche IEEE MIB con supporto per mlx5 e bnxt. Ai driver di rete \u00e8 stato consentito di estrarre dati arbitrari da SFP EEPROM, manipolando non la coppia offset+dimensione, ma le pagine di memoria.        <\/ul>\n<li class=\"l\"> <b>Attrezzature<\/b>\n<ul>\n<li class=\"l\"> \u00c8 stato implementato il supporto iniziale per il chip ARM di Apple M1, che copre il controller delle interruzioni, il timer, UART, SMP, funzioni per la gestione delle I\/O e MMIO. Il reverse engineering della GPU non \u00e8 ancora completato; per l'output sono forniti supporto per framebuffer e console tramite porta seriale.\n<li class=\"l\"> \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u044f\u0434\u0440\u0430 \u043e\u0442 \u0441\u0442\u0430\u0440\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b &#171;gasket&#187; (Google ASIC), &#171;sysace&#187;, &#171;umem&#187; \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432.\n<li class=\"l\"> \u041f\u043e\u0441\u043b\u0435 13 \u043b\u0435\u0442 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0432\u0435\u0442\u043a\u0435 staging \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0451\u043d \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &#171;comedi&#187; \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n<li class=\"l\"> Aggiunto il driver GUD (Generic USB Display) con l'implementazione di un driver di base per schermi e adattatori TV collegati tramite USB. Il driver fornisce propriet\u00e0 DRM (Direct Rendering Manager) per la rotazione dell'immagine, gestione della luminosit\u00e0, accesso a EDID, configurazione delle modalit\u00e0 video e connessione TV, che possono essere utilizzate come base per lo sviluppo di driver specifici per dispositivi.\n<li class=\"l\"> \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &#171;virtio&#187; \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0432\u0443\u043a\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435 \u0438 \u0431\u0435\u0437 \u044d\u043c\u0443\u043b\u044f\u0446\u0438\u0438.\n<li class=\"l\"> Nel driver amdgpu \u00e8 stata aggiunta la supporto iniziale per la GPU Aldebaran (gfx90a). \u00c8 stata attivata la supporto iniziale per la tecnologia di sincronizzazione adattiva FreeSync su HDMI (precedentemente disponibile solo per DisplayPort), che consente di regolare la frequenza di aggiornamento delle informazioni sullo schermo. \u00c8 stata attivata la supporto per ASSR (Alternate Scrambler Seed Reset). \u00c8 stata aggiunta una ioctl per richiedere funzionalit\u00e0 legate alla codifica e alla decodifica video. \u00c8 stata aggiunta la modalit\u00e0 CONFIG_DRM_AMD_SECURE_DISPLAY per rilevare modifiche nei display che visualizzano informazioni critiche. \u00c8 stata aggiunta la supporto per il meccanismo di risparmio energetico ASPM.\n<li class=\"l\"> Nel driver i915 per le schede grafiche Intel \u00e8 stata attivata la supporto per i chip Intel Alderlake-S. \u00c8 stata aggiunta la supporto per eDP MSO (Embedded DisplayPort Multi-SST Operation).\n<li class=\"l\"> \u00c8 stata attivata la supporto per il controller di gioco Luna (Amazon), cos\u00ec come per i touchscreen Hycon HY46XX, ILITEK Lego Series e MStar MSG2638.      <\/ul>\n<\/ul>\n<p>\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043b\u0430\u0442\u0438\u043d\u043e\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0439 \u0424\u043e\u043d\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u041f\u041e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b  \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430 5.11 &#8212; Linux-libre 5.11-gnu, \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442  \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0435\u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c. \u0412 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430   comedi. \u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0447\u0438\u0441\u0442\u043a\u0430 \u0434\u0440\u0430\u0439\u0432\u0430\u0435\u0440\u043e\u0432 cyclades, isicom tty \u0438 i2400m wimax, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0438\u0437 \u044f\u0434\u0440\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d \u043a\u043e\u0434 \u0447\u0438\u0441\u0442\u043a\u0438 \u0431\u043b\u043e\u0431\u043e\u0432 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 amdgpu, i915 csr, r8152 usb, mhi bus, x86 touchscreen \u0438 qualcomm arm64.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55397\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &#171;misc&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100612","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/reliz-yadra-linux-5-13\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/reliz-yadra-linux-5-13\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Rilascio del kernel Linux 5.13 | ProHoster","description":"Dopo due mesi di sviluppo, Linus Torvalds ha presentato il rilascio del kernel Linux 5.13. Tra le modifiche pi\u00f9 significative: il file system EROFS, il supporto iniziale per i chip Apple M1, il controller cgroup \"misc\", l'interruzione del supporto per \/dev\/kmem, il supporto per nuove GPU Intel e AMD, la possibilit\u00e0 di chiamare direttamente le funzioni del kernel dai programmi BPF, la randomizzazione dello stack del kernel per ogni chiamata di sistema, e la possibilit\u00e0 di compilazione in Clang con protezione CFI.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &quot;misc&quot;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/reliz-yadra-linux-5-13","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-28T08:23:04+00:00","article:modified_time":"2021-06-28T08:23:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-28 08:57:57","updated":"2026-02-09 21:38:12"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=100612"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100612\/revisions"}],"predecessor-version":[{"id":164333,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100612\/revisions\/164333"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=100612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=100612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=100612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}