{"id":77154,"date":"2020-04-08T07:41:59","date_gmt":"2020-04-08T05:41:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy"},"modified":"2020-04-08T07:41:59","modified_gmt":"2020-04-08T05:41:59","slug":"microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","title":{"rendered":"Microsoft a propus un modul de kernel Linux pentru verificarea integrit\u0103\u021bii sistemului.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii de la Microsoft au prezentat<\/a><\/noindex> mecanismul de verificare a integrit\u0103\u021bii IPE<\/a><\/noindex> (Integrity Policy Enforcement), implementat sub forma unui modul LSM (Linux Security Module) pentru nucleul Linux. Modulul permite definirea unei politici generale de asigurare a integrit\u0103\u021bii pentru \u00eentregul sistem, indic\u00e2nd ce opera\u021biuni sunt permise \u0219i cum ar trebui s\u0103 se verifice autenticitatea componentelor. Prin intermediul IPE se poate specifica care fi\u0219iere executabile sunt permise a fi pornite \u0219i se garanteaz\u0103 c\u0103 aceste fi\u0219iere sunt identice cu versiunea furnizat\u0103 de o surs\u0103 de \u00eencredere. Cod a fost deschis<\/a><\/noindex> sub licen\u021ba MIT.<\/p>\n

IPE vizeaz\u0103 crearea unor sisteme complet verificabile, al c\u0103ror integritate este confirmat\u0103 de la \u00eenc\u0103rc\u0103torul ini\u021bial \u0219i nucleu p\u00e2n\u0103 la fi\u0219ierele executabile finale, configura\u021bii \u0219i fi\u0219iere \u00eenc\u0103rcate. \u00cen caz de modificare sau substituire a unui fi\u0219ier, IPE poate bloca opera\u021biunea sau poate \u00eenregistra incidentul de \u00eenc\u0103lcare a integrit\u0103\u021bii. Mecanismul propus poate fi aplicat \u00een firmware pentru dispozitive \u00eencorporate, unde tot software-ul \u0219i set\u0103rile sunt special compilate \u0219i furnizate de c\u0103tre proprietar; de exemplu, \u00een centrele de date Microsoft, IPE este folosit \u00een echipamentele pentru firewall-uri.<\/p>\n

Fa\u021b\u0103 de alte sisteme de verificare a integrit\u0103\u021bii, precum IMA<\/a><\/noindex>, IPE se distinge prin independen\u021ba fa\u021b\u0103 de metadatele din FS \u2014 toate propriet\u0103\u021bile care determin\u0103 validitatea opera\u021biunilor sunt stocate direct \u00een nucleu. Pentru a verifica integritatea con\u021binutului fi\u0219ierelor, se aplic\u0103 mecanismele deja existente \u00een nucleu bazate pe hash-uri criptografice.
\ndm-verity<\/a><\/noindex> sau fs-verity<\/a><\/noindex>.
\nAnalog cu SELinux, sunt sus\u021binute dou\u0103 moduri de operare: \u00abpermissive\u00bb \u0219i \u00abenforce\u00bb. \u00cen modul permissive, sunt doar \u00eenregistrate problemele la efectuarea verific\u0103rilor, ceea ce, de exemplu, poate fi utilizat pentru testarea preliminar\u0103 a mediului.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 IPE (Integrity Policy Enforcement), \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0432\u0438\u0434\u0435 LSM-\u043c\u043e\u0434\u0443\u043b\u044f (Linux Security Module) \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0443\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0438 \u043a\u0430\u043a\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 IPE \u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u0430\u043a\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-77154","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a propus un modul pentru nucleul Linux dedicat verific\u0103rii integrit\u0103\u021bii sistemului | ProHoster","description":"Dezvoltatorii de la Microsoft au prezentat mecanismul de verificare a integrit\u0103\u021bii","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-08T05:41:59+00:00","article:modified_time":"2020-04-08T05:41:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"77154","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:23:21","updated":"2022-10-02 19:20:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/77154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=77154"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/77154\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=77154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=77154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=77154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}