{"id":100924,"date":"2021-08-05T22:22:35","date_gmt":"2021-08-05T20:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kis-kuk-iz-google-prizval-modernizirovat-proczess-raboty-nad-oshibkami-v-yadre-linux"},"modified":"2026-02-08T16:56:03","modified_gmt":"2026-02-08T14:56:03","slug":"kis-kuk-iz-google-prizval-modernizirovat-proczess-raboty-nad-oshibkami-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/kis-kuk-iz-google-prizval-modernizirovat-proczess-raboty-nad-oshibkami-v-yadre-linux","title":{"rendered":"Kees Cook de la Google a cerut modernizarea procesului de gestionare a erorilor \u00een nucleul Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kees Cook, fost administrator \u0219ef de sistem la kernel.org \u0219i lider al echipei de securitate Ubuntu, care lucreaz\u0103 acum la Google pentru a proteja Android \u0219i ChromeOS, \u0219i-a exprimat \u00eengrijorarea cu privire la actualul proces de corectare a erorilor \u00een ramurile stabile ale nucleului. \u00cen fiecare s\u0103pt\u0103m\u00e2n\u0103, aproximativ o sut\u0103 de corecturi sunt incluse \u00een ramurile stabile, iar dup\u0103 \u00eenchiderea ferestrei de acceptare a modific\u0103rilor pentru urm\u0103toarea versiune, cifra ajunge aproape la o mie (manti\u0219orii re\u021bin corecturile p\u00e2n\u0103 la \u00eenchiderea ferestrei, iar dup\u0103 formarea '-rc1' le public\u0103 pe toate deodat\u0103), ceea ce este prea mult \u0219i necesit\u0103 un efort considerabil pentru \u00eentre\u021binerea produselor bazate pe nucleul Linux.<\/p>\n

\u00cen opinia lui Kees, procesului de gestionare a erorilor \u00een nucleu nu i se acord\u0103 aten\u021bia cuvenit\u0103 \u0219i nucleul are nevoie de cel pu\u021bin 100 de dezvoltatori suplimentari pentru a lucra coordonat \u00een acest domeniu. Dezvoltatorii principali ai nucleului corecteaz\u0103 regulat erorile, dar nu exist\u0103 nicio garan\u021bie c\u0103 aceste corecturi vor fi transferate \u00een versiunile nucleului utilizate de produc\u0103torii ter\u021bi. Utilizatorii diferitelor produse bazate pe nucleul Linux nu au, de asemenea, posibilitatea de a controla care erori au fost corectate \u0219i ce nucleu este utilizat pe dispozitivele lor. \u00cen cele din urm\u0103, responsabilitatea pentru securitatea produselor lor revine produc\u0103torilor, dar \u00een contextul unei intensit\u0103\u021bi foarte mari de publicare a corecturilor \u00een ramurile stabile ale nucleului, ace\u0219tia se reg\u0103sesc \u00een fa\u021ba alegerii - s\u0103 includ\u0103 toate corecturile, s\u0103 portabileze selectiv cele mai importante sau s\u0103 ignore toate corecturile.<\/p>\n

\"Kees<\/center>O solu\u021bie optim\u0103 ar fi mutarea doar a celor mai importante corec\u021bii \u0219i vulnerabilit\u0103\u021bi, dar problema principal\u0103 const\u0103 \u00een identificarea acestor erori din fluxul general. Cele mai multe probleme emergente sunt consecin\u021ba utiliz\u0103rii limbajului C, care necesit\u0103 o mare precizie \u00een manipularea memoriei \u0219i a pointerilor. \u00cengreuneaz\u0103 \u0219i mai mult situa\u021bia faptul c\u0103 multe corec\u021bii poten\u021biale de vulnerabilitate nu sunt \u00eenso\u021bite de identificatori CVE sau primesc un astfel de identificator dup\u0103 o anumit\u0103 perioad\u0103 de timp de la publicarea corec\u021biei. \u00cen aceste condi\u021bii, produc\u0103torilor le este foarte greu s\u0103 deosebeasc\u0103 corec\u021biile secundare de problemele importante care afecteaz\u0103 securitatea. Statisticile arat\u0103 c\u0103 peste 40% din vulnerabilit\u0103\u021bi sunt remediate \u00eenainte de a primi un identificator CVE, iar \u00een medie, \u00eent\u00e2rzierea dintre lansarea corec\u021biei \u0219i atribuirea CVE este de trei luni (adic\u0103, ini\u021bial, corec\u021bia este perceput\u0103 ca o eroare obi\u0219nuit\u0103, dar doar dup\u0103 c\u00e2teva luni devine clar c\u0103 a fost remediat\u0103 o vulnerabilitate).<\/p>\n

\u00cen concluzie, f\u0103r\u0103 un ram separat pentru corec\u021biile vulnerabilit\u0103\u021bilor \u0219i f\u0103r\u0103 informa\u021bii legate de securitatea problemei, produc\u0103torii de produse bazate pe nucleul Linux sunt nevoi\u021bi s\u0103 transfere constant toate corec\u021biile din ultimele ramuri stabile. Dar aceast\u0103 munc\u0103 necesit\u0103 resurse semnificative \u0219i se confrunt\u0103 cu rezisten\u021b\u0103 \u00een cadrul companiilor din cauza temerii de a provoca modific\u0103ri regresive ce ar putea afecta func\u021bionarea normal\u0103 a produsului.<\/p>\n

S\u0103 ne amintim c\u0103, potrivit lui Linus Torvalds, toate erorile sunt importante \u0219i vulnerabilit\u0103\u021bile nu ar trebui s\u0103 fie separate de alte tipuri de erori, fiind scoase \u00eentr-o categorie prioritar\u0103. Aceast\u0103 opinie este justificat\u0103 prin faptul c\u0103 pentru un dezvoltator obi\u0219nuit, care nu este specializat \u00een probleme de securitate, nu este evident\u0103 leg\u0103tura dintre corec\u021bie \u0219i o poten\u021bial\u0103 vulnerabilitate (pentru multe corec\u021bii, doar realizarea unui audit separat permite identificarea leg\u0103turii lor cu securitatea). \u00cen opinia lui Linus, problema identifik\u0103rii vulnerabilit\u0103\u021bilor din fluxul general de corec\u021bii ar trebui s\u0103 fie gestionat\u0103 de speciali\u0219tii \u00een securitate din echipele responsabile pentru suportul pachetelor cu nucleul \u00een distribu\u021biile Linux.<\/p>\n

Kees Cook consider\u0103 c\u0103 singura solu\u021bie pentru men\u021binerea securit\u0103\u021bii nucleului cu costuri ra\u021bionale pe termen lung este transferul inginerilor care se ocup\u0103 cu portarea corec\u021biilor \u00een compil\u0103rile locale ale nucleului, la o colaborare coordonat\u0103 pentru a sus\u021bine corecturile \u0219i vulnerabilit\u0103\u021bile din nucleul principal (upstream). \u00cen forma sa actual\u0103, mul\u021bi produc\u0103tori folosesc \u00een produsele lor versiuni mai vechi ale nucleului \u0219i aplic\u0103 corec\u021bii cu for\u021be proprii, ceea ce face ca inginerii din diferite companii s\u0103 \u00ee\u0219i dubleze munca, rezolv\u00e2nd aceea\u0219i problem\u0103.<\/p>\n

De exemplu, dac\u0103 10 companii, fiecare av\u00e2nd c\u00e2te un inginer responsabil cu portarea acelora\u0219i corec\u021bii, \u00ee\u0219i redirec\u021bioneaz\u0103 ace\u0219ti ingineri pentru a corecta erori \u00een upstream, atunci ace\u0219tia ar putea, \u00een loc s\u0103 porteze o corec\u021bie, s\u0103 rezolve 10 erori diferite pentru beneficiul comun sau s\u0103 se al\u0103ture revizuirii modific\u0103rilor propuse \u0219i s\u0103 evite includerea codului cu erori \u00een nucleu. Resursele ar putea fi de asemenea \u00eendreptate c\u0103tre crearea unor instrumente noi pentru testarea \u0219i analiza codului, care ar permite identificarea automat\u0103 timpurie a claselor tipice de erori care apar repetat.<\/p>\n

Kees Cook propune, de asemenea, utilizarea mai activ\u0103 a test\u0103rii automatizate \u0219i fuzzing-test\u0103rii direct \u00een procesul de dezvoltare a nucleului, aplicarea sistemelor de integrare continu\u0103 \u0219i abandonarea gestion\u0103rii arhaice a dezvolt\u0103rii prin email. \u00cen prezent, test\u0103rii eficiente \u00eei st\u0103 \u00een cale faptul c\u0103 principalele procese de testare sunt separate de dezvoltare \u0219i au loc doar dup\u0103 formarea versiunilor. Kees a recomandat, de asemenea, folosirea unor limbaje care faciliteaz\u0103 mai bine dezvoltarea pentru a reduce num\u0103rul de erori, nivel ridicat de securitate<\/a>, cum ar fi Rust.<\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0438\u0441 \u041a\u0443\u043a (Kees Cook), \u0431\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440 Ubuntu Security Team, \u043d\u044b\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043d\u0430\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b Android \u0438 ChromeOS, \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043a\u0430\u0445 \u044f\u0434\u0440\u0430. \u0415\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e \u0441\u0442\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u043a\u043d\u0430 \u043f\u0440\u0438\u0451\u043c\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043a \u0442\u044b\u0441\u044f\u0447\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100925,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100924","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kees Cook de la Google a apelat la modernizarea procesului de gestionare a erorilor \u00een nucleul Linux | ProHoster","description":"Kees Cook, fost administrator principal al kernel.org \u0219i lider al echipei de securitate Ubuntu, acum care lucreaz\u0103 la Google pentru a asigura protec\u021bia Android \u0219i ChromeOS, \u0219i-a exprimat \u00eengrijorarea cu privire la procesul actual.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/kis-kuk-iz-google-prizval-modernizirovat-proczess-raboty-nad-oshibkami-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0438\u0441 \u041a\u0443\u043a \u0438\u0437 Google \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041a\u0438\u0441 \u041a\u0443\u043a (Kees Cook), \u0431\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440 Ubuntu Security Team, \u043d\u044b\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043d\u0430\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b Android \u0438 ChromeOS, \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/kis-kuk-iz-google-prizval-modernizirovat-proczess-raboty-nad-oshibkami-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-05T20:22:36+00:00","article:modified_time":"2026-02-08T14:56:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100924","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-05 20:25:16","updated":"2026-02-08 14:56:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100924"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100924\/revisions"}],"predecessor-version":[{"id":157484,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100924\/revisions\/157484"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/100925"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}