{"id":114685,"date":"2024-04-01T00:25:44","date_gmt":"2024-03-31T22:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock"},"modified":"2024-04-01T00:25:44","modified_gmt":"2024-03-31T22:25:44","slug":"v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","title":{"rendered":"\u00c8 stata rilevata una modifica nel codice base di xz che impediva l'attivazione del meccanismo di protezione Landlock.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nel repository del progetto xz continuano a emergere modifiche apportate dall'autore del backdoor per bloccare i meccanismi di protezione. Nello script di build CMakeLists.txt \u00e8 stata rilevata una modifica che impediva l'uso in xz del meccanismo di isolamento delle applicazioni Landlock, se supportato dal sistema. Nel codice C, che verifica la disponibilit\u00e0 della chiamata di sistema Landlock, \u00e8 stato intenzionalmente aggiunto un punto extra, causando il fallimento della verifica della presenza di Landlock in qualsiasi condizione. <\/p>\n

La modifica \u00e8 stata aggiunta da Jia Tan il 26 febbraio sotto la forma di implementazione di un controllo avanzato per la supporto di Landlock. In precedenza, la verifica del supporto di Landlock era basata esclusivamente sulla presenza del file di intestazione «linux\/landlock.h», mentre nella modifica \u00e8 stato aggiunto un test scritto in linguaggio C, che chiama inoltre prctl per la verifica. A causa della presenza della riga iniziale del punto, questo codice non era funzionante e il test si concludeva sempre con un errore.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 CMakeLists.txt \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 xz \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock, \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 Landlock, \u0431\u044b\u043b\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u043d\u044f\u044f \u0442\u043e\u0447\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114685","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nel codice sorgente di xz \u00e8 emersa una modifica che impediva l'attivazione del meccanismo di protezione Landlock | ProHoster","description":"Nel repository del progetto xz continuano a emergere modifiche apportate dall'autore del backdoor per bloccare i meccanismi di protezione. Nello script di build CMakeLists.txt \u00e8 stata rilevata una modifica che impediva l'uso in xz del meccanismo di isolamento delle applicazioni Landlock, se supportato dal sistema. Nel codice C, che verifica la disponibilit\u00e0 della chiamata di sistema Landlock, \u00e8 stato intenzionalmente aggiunto un punto extra, causando il fallimento della verifica.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 xz \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043c\u0435\u0448\u0430\u0432\u0448\u0435\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Landlock | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 CMakeLists.txt \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 xz \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock, \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 Landlock, \u0431\u044b\u043b\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438\u0448\u043d\u044f\u044f \u0442\u043e\u0447\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-kodovoj-baze-xz-vyyavleno-izmenenie-meshavshee-vklyucheniyu-mehanizma-zashhity-landlock","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-31T22:25:44+00:00","article:modified_time":"2024-03-31T22:25:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114685","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=114685"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114685\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=114685"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=114685"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=114685"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}