{"id":86642,"date":"2020-06-27T19:42:50","date_gmt":"2020-06-27T17:42:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2020-06-27T19:42:50","modified_gmt":"2020-06-27T17:42:50","slug":"vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"Rilascio del modulo LKRG 0.8 per la protezione contro lo sfruttamento delle vulnerabilit\u00e0 nel kernel Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Progetto Openwall <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/announce\/2020\/06\/25\/1\">ha pubblicato<\/a><\/noindex> rilascio del modulo del kernel <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.8<\/a><\/noindex>  (Linux Kernel Runtime Guard), progettato per rilevare e bloccare attacchi e violazioni dell'integrit\u00e0 delle strutture del kernel. Ad esempio, il modulo pu\u00f2 proteggere contro modifiche non autorizzate del kernel in esecuzione e tentativi di alterare i privilegi dei processi utente (identificazione dell'uso di exploit). Il modulo \u00e8 adatto sia per organizzare la protezione contro exploit noti per il kernel Linux (ad esempio, in situazioni in cui \u00e8 problematico aggiornare il kernel), sia per contrastare exploit per vulnerabilit\u00e0 sconosciute. Codice del progetto <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/Adam_pi3\/lkrg-main\/src\/master\/\">distribuito<\/a><\/noindex> \u00e8 sotto licenza GPLv2.<\/p>\n<p>Tra le modifiche nella nuova versione:<\/p>\n<ul>\n<li class=\"l\">  \u00c8 stato modificato il posizionamento del progetto LKRG, ora presentato come un prodotto unico per la rilevazione di attacchi e diverse violazioni dell'integrit\u00e0, anzich\u00e9 diviso in sottosistemi separati per il controllo dell'integrit\u00e0 e l'identificazione di exploit;\n<li class=\"l\">  \u00c8 stata garantita la compatibilit\u00e0 con i kernel Linux dalla versione 5.3 alla 5.7, cos\u00ec come con i kernel compilati con ottimizzazioni aggressive di GCC, senza le opzioni CONFIG_USB e CONFIG_STACKTRACE o con l'opzione CONFIG_UNWINDER_ORC, e anche con i kernel nei quali mancano le funzioni LKRG intercettate, se ci\u00f2 \u00e8 possibile;\n<li class=\"l\">  In fase di compilazione, \u00e8 stato implementato un controllo di alcune impostazioni obbligatorie del kernel CONFIG_* per generare messaggi di errore significativi invece di crash poco chiari;\n<li class=\"l\">  Aggiunta la compatibilit\u00e0 con le modalit\u00e0 di sospensione (ACPI S3, suspend to RAM) e ibernazione (S4, suspend to disk);\n<li class=\"l\">  Supporto DKMS aggiunto nel Makefile;\n<li class=\"l\">  Implementato il supporto sperimentale per piattaforme ARM a 32 bit (testato su Raspberry Pi 3 Model B). Il supporto precedente per AArch64 (ARM64) \u00e8 stato esteso per garantire compatibilit\u00e0 con la scheda Raspberry Pi 4;\n<li class=\"l\">  \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 (hook), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u0437\u043e\u0432\u0430 capable() \u0434\u043b\u044f \u043b\u0443\u0447\u0448\u0435\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/capabilities.7.html\">capacit\u00e0<\/a><\/noindex>&#171;, \u0430 \u043d\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/credentials.7.html\">credentials<\/a><\/noindex>);\n<li class=\"l\">  Proposta una nuova logica per identificare i tentativi di uscita dai vincoli degli spazi dei nomi (ad esempio, dai contenitori Docker);\n<li class=\"l\">  Nei sistemi x86-64 \u00e8 garantito il controllo e l'applicazione del bit SMAP (Supervisor Mode Access Prevention), progettato per bloccare l'accesso ai dati nello spazio utente da codice privilegiato eseguito a livello di kernel. La protezione SMEP (Supervisor Mode Execution Prevention) \u00e8 stata implementata in precedenza;\n<li class=\"l\">  Durante l'esecuzione, le impostazioni LKRG vengono allocate in una pagina di memoria normalmente accessibile solo in lettura;\n<li class=\"l\">  Il logging delle informazioni che possono essere pi\u00f9 utili per gli attacchi (ad esempio, informazioni sugli indirizzi nel kernel) \u00e8 limitato al livello di debug (log_level=4 e superiore), disabilitato di default.\n<li class=\"l\">  \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u0443\u0435\u043c\u043e\u0441\u0442\u044c \u0411\u0414 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 &#8212; \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u0435\u0440\u0435\u0432\u0430 RB, \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0434\u043d\u0438\u043c spinlock, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0445\u044d\u0448 \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u0438\u0437 512 \u0434\u0435\u0440\u0435\u0432\u044c\u0435\u0432 RB, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e 512 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0447\u0442\u0435\u043d\u0438\u044f-\u0437\u0430\u043f\u0438\u0441\u0438;\n<li class=\"l\">  Implementato e abilitato per impostazione predefinita un modo in cui il controllo dell'integrit\u00e0 degli identificatori di processo viene di frequente eseguito solo per il compito attuale, e facoltativamente per i compiti attivati (che si risvegliano). Per gli altri compiti che si trovano in uno stato di sospensione o operano senza interagire con l'API controllata LKRG del kernel, il controllo viene eseguito con minore frequenza.\n<li class=\"l\">  Aggiunti nuovi parametri sysctl e opzioni del modulo per la messa a punto fine di LKRG, cos\u00ec come due sysctl per una configurazione semplificata scegliendo tra set di configurazioni dettagliate preparati dagli sviluppatori (profiles);\n<li class=\"l\">  Le impostazioni predefinite sono state modificate per raggiungere un miglior equilibrio tra prontezza nel rilevare le violazioni e l\u2019efficacia della reazione da un lato, e impatto sulle prestazioni e rischio di falsi positivi dall\u2019altro;\n<li class=\"l\">  Il file unit di systemd \u00e8 stato rielaborato per caricare il modulo LKRG in una fase iniziale di avvio (per disabilitare il modulo pu\u00f2 essere utilizzato un parametro della riga di comando del kernel);\n<\/ul>\n<p>\u0421 \u0443\u0447\u0451\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 LKRG 0.8 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 2.5% \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (&#171;heavy&#187;) \u0438 2% \u0432 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (&#171;light&#187;). <\/p>\n<p>In un recente <noindex><a rel=\"nofollow\" href=\"http:\/\/jultika.oulu.fi\/files\/nbnfioulu-202004201485.pdf\">ricerca<\/a><\/noindex> efficacia dei pacchetti per rilevare rootkit LKRG  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/lkrg-users\/2020\/06\/14\/5\">ha mostrato<\/a><\/noindex> i migliori risultati, senza falsi positivi, hanno identificato 8 dei 9 rootkit testati, operanti a livello di kernel (sono stati rilevati rootkit come Diamorphine, Honey Pot Bears, LilyOfTheValley, Nuk3 Gh0st, Puszek, Reptile, Rootfoo Linux Rootkit e Sutekh, ma \u00e8 stato omesso Keysniffer, che \u00e8 un modulo kernel con keylogger, e non un rootkit nel senso stretto del termine). A titolo di confronto, i pacchetti AIDE, OSSEC e Rootkit Hunter hanno identificato 2 rootkit su 9, mentre Chkrootkit non ha identificato alcuno. Tuttavia, \u00e8 importante notare che LKRG non supporta la rilevazione di rootkit posizionati nello spazio utente, quindi la massima efficacia si ottiene utilizzando la combinazione AIDE e LKRG, che ha effettuato il rilevamento di 14 dei 15 rootkit di tutti i tipi.<\/p>\n<p>\u00c8 possibile notare inoltre che lo sviluppatore della distribuzione <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51009\">Whonix<\/a><\/noindex> ho iniziato <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whonix.org\/wiki\/Linux_Kernel_Runtime_Guard_LKRG\">\u00e8 in fase di creazione<\/a><\/noindex> pacchetti pronti con DKMS per Debian, Whonix, Qubes e Kicksecure, e il pacchetto per <noindex><a rel=\"nofollow\" href=\"https:\/\/aur.archlinux.org\/packages\/lkrg-dkms\/\">Arch Linux<\/a><\/noindex> \u00e8 gi\u00e0 stato aggiornato alla versione 0.8. I pacchetti con LKRG sono anche disponibili in Russia. <noindex><a rel=\"nofollow\" href=\"https:\/\/packages.altlinux.org\/ru\/sisyphus\/srpms\/kernel-source-lkrg\">ALT Linux<\/a><\/noindex> e <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52955\">Astra Linux<\/a><\/noindex>.<\/p>\n<p>La verifica dell'integrit\u00e0 in LKRG avviene confrontando il codice attuale e i dati del kernel e dei moduli, alcune importanti strutture dati e impostazioni della CPU con gli hash salvati o le copie delle aree di memoria, delle strutture dati o dei registri corrispondenti. Le verifiche vengono attivate sia periodicamente tramite timer che al verificarsi di vari eventi.<\/p>\n<p>La determinazione di possibili exploit e il blocco degli attacchi avvengono prima che il kernel conceda accesso alle risorse (ad esempio, prima che un file venga aperto), ma dopo che un processo ha ottenuto permessi non autorizzati (ad esempio, cambiando l'UID). Quando viene rilevato un comportamento non autorizzato dei processi, questi vengono terminati forzatamente per impostazione predefinita, il che \u00e8 sufficiente per bloccare molti exploit.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53244\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86642","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rilascio del modulo LKRG 0.8 per la protezione contro l'esploitazione delle vulnerabilit\u00e0 nel kernel Linux | ProHoster","description":"Il progetto Openwall ha pubblicato una versione del modulo del kernel","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:50+00:00","article:modified_time":"2020-06-27T17:42:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86642","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:11:04","updated":"2022-10-02 21:11:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/86642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=86642"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/86642\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=86642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=86642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=86642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}