OpenBSD imagwiritsa ntchito kulumikizanso nthawi ya boot kwa sshd

OpenBSD imagwiritsa ntchito njira yotsutsana ndi kugwiritsa ntchito masuku pamutu yomwe imadalira kulumikizanso mwachisawawa kwa fayilo yotheka ya sshd nthawi iliyonse dongosolo likayamba. M'mbuyomu, njira yolumikizirananso yofananira idagwiritsidwa ntchito pa kernel ndi malaibulale libc.so, libcrypto.so ndi ld.so, ndipo tsopano idzagwiritsidwa ntchito pamafayilo ena omwe angathe kukwaniritsidwa. Posachedwapa, njirayi ikukonzekeranso kukhazikitsidwa kwa ntpd ndi mapulogalamu ena a seva. Kusinthaku kwaphatikizidwa kale munthambi ya CURRENT ndipo kuperekedwa kumasulidwa kwa OpenBSD 7.3.

Kulumikizananso kumapangitsa kuti kusamuka kwa ntchito kumalaibulale kusakhale kodziwikiratu, zomwe zimapangitsa kuti zikhale zovuta kupanga zabwino pogwiritsa ntchito njira zobwereranso (ROP). Pogwiritsa ntchito njira ya ROP, wowukirayo samayesa kuyika nambala yake pamtima, koma amagwiritsa ntchito zidutswa zamakina zomwe zilipo kale m'malaibulale odzaza, kutha ndi malangizo obwerera (monga lamulo, awa ndi malekezero a ntchito za library) . Ntchito yogwiritsa ntchitoyo imatsikira pakumanga ma foni angapo ku midadada yofananira ("zida zamagetsi") kuti mupeze zomwe mukufuna.

Source: opennet.ru

Kuwonjezera ndemanga