{"id":86642,"date":"2020-06-27T19:42:50","date_gmt":"2020-06-27T17:42:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2020-06-27T19:42:50","modified_gmt":"2020-06-27T17:42:50","slug":"vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"Vydanie modulu LKRG 0.8 na ochranu proti zneu\u017e\u00edvaniu zranite\u013enost\u00ed v jadre Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Projekt Openwall <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/announce\/2020\/06\/25\/1\">publikoval<\/a><\/noindex> vydanie modulu jadra <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.8<\/a><\/noindex>  (Linux Kernel Runtime Guard) je ur\u010den\u00fd na detekciu a blokovanie \u00fatokov a naru\u0161en\u00ed integrity \u0161trukt\u00far jadra. Napr\u00edklad modul m\u00f4\u017ee chr\u00e1ni\u0165 pred neopr\u00e1vnen\u00fdm zmenen\u00edm pracuj\u00faceho jadra a pokusmi o zmenu pr\u00e1vomoc\u00ed pou\u017e\u00edvate\u013esk\u00fdch procesov (ur\u010denie aplik\u00e1cie exploitov). Modul je vhodn\u00fd na ochranu pred u\u017e zn\u00e1mymi exploitmi pre jadro Linux (napr\u00edklad v situ\u00e1ci\u00e1ch, ke\u010f je problematick\u00e9 aktualizova\u0165 jadro v syst\u00e9me), ako aj na \u010delenie exploitom pre e\u0161te nezn\u00e1me zranite\u013enosti. K\u00f3d projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/Adam_pi3\/lkrg-main\/src\/master\/\">distribuovan\u00fd<\/a><\/noindex> pod licenciou GPLv2.<\/p>\n<p>Medzi zmenami v novej verzii:<\/p>\n<ul>\n<li class=\"l\">  Zmenilo sa pozicionovanie projektu LKRG, ktor\u00fd sa u\u017e nerozde\u013euje na jednotliv\u00e9 podsyst\u00e9my na kontrolu integrity a ur\u010denie aplik\u00e1cie exploitov, ale sa prezentuje ako celistv\u00fd produkt na detekciu \u00fatokov a r\u00f4znych naru\u0161en\u00ed integrity;\n<li class=\"l\">  Zaru\u010den\u00e1 kompatibilita s jadrom Linux od verzie 5.3 do 5.7, ako aj s jadrom zostaven\u00fdm s agres\u00edvnymi optimaliz\u00e1ciami GCC, bez mo\u017enosti CONFIG_USB a CONFIG_STACKTRACE alebo s mo\u017enos\u0165ou CONFIG_UNWINDER_ORC, ako aj s jadrom, v ktorom ch\u00fdbaj\u00fa zachytite\u013en\u00e9 LKRG funkcie, ak sa bez nich d\u00e1 zaob\u00eds\u0165;\n<li class=\"l\">  Pri zostavovan\u00ed bola zaru\u010den\u00e1 kontrola niektor\u00fdch povinn\u00fdch nastaven\u00ed jadra CONFIG_* pre vytvorenie zmyslupln\u00fdch chybov\u00fdch hl\u00e1sen\u00ed namiesto nejasn\u00fdch probl\u00e9mov;\n<li class=\"l\">  Pridan\u00e1 podpora pre re\u017eimy sp\u00e1nku (ACPI S3, suspend to RAM) a hlbok\u00e9ho sp\u00e1nku (S4, suspend to disk);\n<li class=\"l\">  Do Makefile bola pridan\u00e1 podpora DKMS;\n<li class=\"l\">  Realizovan\u00e1 experiment\u00e1lna podpora 32-bitov\u00fdch platforiem ARM (testovan\u00e9 na Raspberry Pi 3 Model B). Predt\u00fdm dostupn\u00e1 podpora AArch64 (ARM64) bola doplnen\u00e1 o zabezpe\u010denie kompatibility s doskou Raspberry Pi 4;\n<li class=\"l\">  Boli pridan\u00e9 nov\u00e9 spracovate\u013esk\u00e9 h\u00e1\u010dky (hook), vr\u00e1tane spracovate\u013ea volania capable(), aby sa lep\u0161ie ur\u010dili exploity manipuluj\u00face s &lt;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/capabilities.7.html\">capabilities<\/a><\/noindex>&lt;, a nie s identifik\u00e1tormi procesov (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/credentials.7.html\">credentials<\/a><\/noindex>);\n<li class=\"l\">  Navrhnut\u00e1 nov\u00e1 logika ur\u010dovania pokusov o vyst\u00fapenie z obmedzen\u00ed priestorov mien (napr\u00edklad z kontajnerov Docker);\n<li class=\"l\">  Na syst\u00e9moch x86-64 bola zabezpe\u010den\u00e1 kontrola a aplik\u00e1cia bitu SMAP (Supervisor Mode Access Prevention), ur\u010den\u00e9ho na blokovanie pr\u00edstupu k d\u00e1tam v pou\u017e\u00edvate\u013eskom priestore z privilegovan\u00e9ho k\u00f3du vykon\u00e1van\u00e9ho na \u00farovni jadra. Ochrana SMEP (Supervisor Mode Execution Prevention) bola realizovan\u00e1 sk\u00f4r;\n<li class=\"l\">  V priebehu prev\u00e1dzky bola zabezpe\u010den\u00e1 lokaliz\u00e1cia nastaven\u00ed LKRG na str\u00e1nke pam\u00e4te, ktor\u00e1 je zvy\u010dajne dostupn\u00e1 iba na \u010d\u00edtanie;\n<li class=\"l\">  V\u00fdstup do logov obsahuje inform\u00e1cie, ktor\u00e9 m\u00f4\u017eu by\u0165 najviac u\u017eito\u010dn\u00e9 pre \u00fatoky (napr\u00edklad inform\u00e1cie o adres\u00e1ch v jadre), a je obmedzen\u00fd na re\u017eim ladenia (log_level=4 a vy\u0161\u0161ie), ktor\u00fd je predvolene vypnut\u00fd.\n<li class=\"l\">  Zv\u00fd\u0161en\u00e1 \u0161k\u00e1lovate\u013enos\u0165 datab\u00e1zy na sledovanie procesov \u2014 namiesto jedn\u00e9ho stromu RB chr\u00e1nen\u00e9ho jednou spinlock bolo zapojen\u00fdch 512 stromov RB, chr\u00e1nen\u00fdch zodpovedaj\u00facimi 512 zamykaniami na \u010d\u00edtanie-zap\u00edsanie;\n<li class=\"l\">  Bola implementovan\u00e1 a predvolene zapnut\u00e1 funkcia, v ktorej sa kontrola integrity identifik\u00e1torov procesov \u010dasto vykon\u00e1va len pre aktu\u00e1lnu \u00falohu, ako aj volite\u013ene pre aktivovan\u00e9 (prebuden\u00e9) \u00falohy. Pre ostatn\u00e9 \u00falohy, ktor\u00e9 s\u00fa v stave sp\u00e1nku alebo pracuj\u00fa bez volania kontrolovan\u00e9ho v LKRG API jadra, sa kontrola vykon\u00e1va zriedkavej\u0161ie.\n<li class=\"l\">  Pridan\u00e9 nov\u00e9 sysctl a parametre modulu na jemn\u00e9 ladenie LKRG, ako aj dva sysctl na zjednodu\u0161en\u00e9 nastavenie v\u00fdberom z pripraven\u00fdch s\u00faborov jemn\u00e9ho nastavenia (profily);\n<li class=\"l\">  Predvolen\u00e9 nastavenia boli zmenen\u00e9 na dosiahnutie vyv\u00e1\u017eenej\u0161ieho pomeru medzi r\u00fdchlos\u0165ou odha\u013eovania poru\u0161en\u00ed a efekt\u00edvnos\u0165ou reakcie na jednej strane a vplyvom na v\u00fdkon a rizikom falo\u0161n\u00fdch poplachov na druhej strane;\n<li class=\"l\">  Jednotkov\u00fd s\u00fabor systemd bol prepracovan\u00fd na na\u010d\u00edtanie modulu LKRG v ranom \u0161t\u00e1diu sp\u00fa\u0161\u0165ania (na vypnutie modulu m\u00f4\u017ee by\u0165 pou\u017eit\u00fd parameter pr\u00edkazov\u00e9ho riadku jadra);\n<\/ul>\n<p>S prihliadnut\u00edm na n\u00e1vrhy optimiz\u00e1ci\u00ed v novej verzii sa pokles v\u00fdkonu pri pou\u017eit\u00ed LKRG 0.8 odhaduje na 2,5 % v predvolenom re\u017eime (\u201eheavy\u201c) a 2 % v \u013eahkom re\u017eime (\u201elight\u201c). <\/p>\n<p>V ned\u00e1vno vykonanej <noindex><a rel=\"nofollow\" href=\"http:\/\/jultika.oulu.fi\/files\/nbnfioulu-202004201485.pdf\">\u0161t\u00fadii<\/a><\/noindex> \u00fa\u010dinnosti bal\u00edkov na odha\u013eovanie rootkitov LKRG  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/lkrg-users\/2020\/06\/14\/5\">uk\u00e1zal<\/a><\/noindex> najlep\u0161ie v\u00fdsledky, bez falo\u0161n\u00fdch poplachov, odhalili 8 z 9 testovan\u00fdch rootkitov, ktor\u00e9 pracovali na \u00farovni jadra (boli odhalen\u00e9 rootkity Diamorphine, Honey Pot Bears, LilyOfTheValley, Nuk3 Gh0st, Puszek, Reptile, Rootfoo Linux Rootkit a Sutekh, ale Keysniffer, ktor\u00fd je modulom jadra s keyloggerom a nie rootkitom v pravom slova zmysle, bol vynechan\u00fd). Na porovnanie, bal\u00edky AIDE, OSSEC a Rootkit Hunter odhalili 2 rootkity z 9, zatia\u013e \u010do Chkrootkit neodhalil ani jeden. LKRG v\u0161ak nepodporuje odha\u013eovanie rootkitov umiestnen\u00fdch v priestore pou\u017e\u00edvate\u013ea, preto sa najvy\u0161\u0161ia \u00fa\u010dinnos\u0165 dosahuje pri pou\u017eit\u00ed kombin\u00e1cie AIDE a LKRG, ktor\u00e1 umo\u017enila odhali\u0165 14 z 15 rootkitov v\u0161etk\u00fdch typov.<\/p>\n<p>Okrem toho je potrebn\u00e9 poznamena\u0165, \u017ee v\u00fdvoj\u00e1r distrib\u00facie <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51009\">Whonix<\/a><\/noindex> za\u010dal <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whonix.org\/wiki\/Linux_Kernel_Runtime_Guard_LKRG\">formovanie<\/a><\/noindex> pripravil bal\u00ed\u010dky DKMS pre Debian, Whonix, Qubes a Kicksecure, pri\u010dom bal\u00edk pre <noindex><a rel=\"nofollow\" href=\"https:\/\/aur.archlinux.org\/packages\/lkrg-dkms\/\">Arch Linux<\/a><\/noindex> u\u017e bol aktualizovan\u00fd na verziu 0.8. Bal\u00edky s LKRG s\u00fa tie\u017e dostupn\u00e9 v rusk\u00fdch <noindex><a rel=\"nofollow\" href=\"https:\/\/packages.altlinux.org\/ru\/sisyphus\/srpms\/kernel-source-lkrg\">ALT Linux<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52955\">Astra Linux<\/a><\/noindex>.<\/p>\n<p>Kontrola integrity v LKRG sa vykon\u00e1va na z\u00e1klade porovn\u00e1vania aktu\u00e1lneho k\u00f3du a d\u00e1t jadra a modulov, niektor\u00fdch d\u00f4le\u017eit\u00fdch \u0161trukt\u00far d\u00e1t a nastaven\u00ed CPU so zachovan\u00fdmi hashmi alebo k\u00f3piami pr\u00edslu\u0161n\u00fdch oblast\u00ed pam\u00e4te, \u0161trukt\u00far d\u00e1t alebo registrov. Kontroly sa aktivuj\u00fa ako periodicky pod\u013ea \u010dasova\u010da, tak aj pri zrealizovan\u00ed r\u00f4znych udalost\u00ed.<\/p>\n<p>Ur\u010denie mo\u017en\u00e9ho vyu\u017eitia exploitov a blokovanie \u00fatokov sa vykon\u00e1va u\u017e v \u0161t\u00e1diu pred poskytnut\u00edm pr\u00edstupu k zdrojom jadrom (napr\u00edklad pred otvoren\u00edm s\u00faboru), ale po z\u00edskan\u00ed neopr\u00e1vnen\u00fdch pr\u00e1vnost\u00ed procesom (napr\u00edklad zmenou UID). Pri zisten\u00ed neopr\u00e1vnenej \u010dinnosti procesov sa predvolene vykon\u00e1va ich n\u00faten\u00e9 ukon\u010denie, \u010do posta\u010duje na blokovanie mnoh\u00fdch exploitov.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53244\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86642","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie modulu LKRG 0.8 na ochranu proti zneu\u017e\u00edvaniu zranite\u013enost\u00ed v jadre Linux | ProHoster","description":"Projekt Openwall zverejnil vydanie modulu jadra","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:50+00:00","article:modified_time":"2020-06-27T17:42:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86642","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:11:04","updated":"2022-10-02 21:11:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/86642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=86642"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/86642\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=86642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=86642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=86642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}