{"id":35977,"date":"2019-10-31T22:08:56","date_gmt":"2019-10-31T19:08:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-yadra-linux-5-2\/"},"modified":"2019-10-31T22:08:56","modified_gmt":"2019-10-31T19:08:56","slug":"reliz-yadra-linux-5-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-yadra-linux-5-2","title":{"rendered":"Izdaja jedra Linux 5.2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 <noindex><a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2019\/7\/7\/281\">\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b<\/a><\/noindex> \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">Linux 5.2<\/a><\/noindex>. Med najopaznej\u0161imi spremembami so: delovni na\u010din Ext4 brez upo\u0161tevanja velikosti \u010drk, lo\u010deni sistemski klici za priklju\u010ditev datote\u010dnega sistema, gonilniki za GPU Mali 4xx\/6xx\/7xx, mo\u017enost obdelave spremembe vrednosti sysctl v BPF programih, modul device-mapper dm-dust, za\u0161\u010dita pred napadi MDS, podpora za Sound Open Firmware za DSP, optimizacija zmogljivosti BFQ, in razvoj podkomponente PSI (Pressure Stall Information) do mo\u017enosti uporabe v Androidu.<\/p>\n<p>V novo razli\u010dico je bilo sprejetih 15100 popravkov od 1882 razvijalcev,<br \/>\nVelikost patche je 62 MB (spremembe so zajele 30,889 datotek, dodanih je bilo 625,094 vrstic kode, odstranjeno je bilo 531,864 vrstic). Pribli\u017eno 45 % vseh predstavljenih v 5.2<br \/>\nje povezanih z gonilniki naprav, pribli\u017eno 21% sprememb ima<br \/>\npovezavo z nadgradnjo strojne kode, 12%<br \/>\nje povezanih z omre\u017eno steko, 3 % - datote\u010dnimi sistemi in 3 % z notranjimi<br \/>\npodsystemi jedra. 12,4 % vseh sprememb je pripravila podjetje Intel, 6,3 % - Red Hat, 5,4 % - Google, 4,0 % - AMD, 3,1 % - SUSE, 3 % - IBM, 2,7 % - Huawei, 2,7 % - Linaro, 2,2 % - ARM, 1,6 % - Oracle.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/kernelnewbies.org\/Linux_5.2\">Glavne<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/788532\/\">novosti<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> <b>\u0414\u0438\u0441\u043a\u043e\u0432\u0430\u044f \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0432\u0432\u043e\u0434\/\u0432\u044b\u0432\u043e\u0434 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b<\/b>\n<ul>\n<li class=\"l\"> Za Ext4 je dodana  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50581\">podpora<\/a><\/noindex> deluje brez upo\u0161tevanja velikosti znakov v imenih datotek, kar se aktivira samo v povezavi z dolo\u010denimi praznimi imeniki s pomo\u010djo novega atributa \u00ab+F\u00bb (EXT4_CASEFOLD_FL). Ko je ta atribut nastavljen na imenik, se vse operacije z datotekami in podimeniki znotraj izvajajo brez upo\u0161tevanja velikosti znakov, velikost znakov se ne upo\u0161teva pri operacijah iskanja in odpiranja datotek (na primer, datoteke Test.txt, test.txt in test.TXT v takih imenikih se \u0161tejejo za enake). Privzeto ostaja FS ob\u010dutljiv na velikost, razen imenikov z atributom \u00abchattr +F\u00bb;\n<li class=\"l\"> Poenotene so funkcije obdelave znakov UTF-8 v imenih datotek, ki se uporabljajo pri izvajanju operacij primerjave in normalizacije nizov;\n<li class=\"l\"> V XFS je dodana infrastruktura za spremljanje stanja datote\u010dnega sistema in nov ioctl za zahtevo statusa delovanja. Izvedena je eksperimentalna mo\u017enost za pregledovanje v realnem \u010dasu (online scrub) \u0161tevcov superblokov.\n<li class=\"l\"> Dodana je nova naprava device-mapper \u00ab<noindex>dm-dust<\/noindex>\u00ab, ki omogo\u010da simulacijo napak na nosilcu ali napak pri branju s diska. Modul poenostavi odpravljanje napak in testiranje aplikacij ter razli\u010dnih sistemov shranjevanja v pogojih morebitnih napak;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/784267\/\">Izvedeno<\/a><\/noindex> znatna optimizacija performansi BFQ planera ulaza\/izlaza. U uslovima visokog optere\u0107enja ulaza\/izlaza izvr\u0161ene su optimizacije <noindex><a rel=\"nofollow\" href=\"https:\/\/algo.ing.unimo.it\/people\/paolo\/disk_sched\/results.php\">omogo\u010da<\/a><\/noindex> do 80% smanjiti vreme takvih operacija kao \u0161to su pokretanje aplikacija;\n<li class=\"l\"> Dodana serija sistemskih poziva za montiranje datote\u010dnih sistema: <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=24dcb3d90a1f67fe08c68a004af37df059d74005\">fsopen()<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=a07b20004793d8926f78d63eb5980559f7813404\">open_tree()<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=cf3cba4a429be43e5527a3f78859b1bfd9ebc5fb\">fspick()<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=93766fbd2696c2c4453dd8e1070977e9cd4e6b6d\">fsmount()<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=ecdab150fddb42fe6a739335257949220033b782\">fsconfig()<\/a><\/noindex> in <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=2db154b3ea8e14b04fee23e3fdfd5e9d17fbc6ae\">move_mount()<\/a><\/noindex>. Ovi sistemski pozivi omogu\u0107avaju odvojeno procesuiranje razli\u010ditih faza montiranja (obra\u0111ivanje superbloka, dobijanje informacija o FS-u, montiranje, priklju\u010divanje na ta\u010dku montiranja), koje je ranije izvr\u0161avano pomo\u0107u zajedni\u010dkog sistemskog poziva mount(). Odvojeni pozivi pru\u017eaju mogu\u0107nost izvr\u0161avanja slo\u017eenijih scenarija montiranja i posebno obavljanja operacija, kao \u0161to su ponovna konfiguracija superbloka, uklju\u010divanje opcija, izmene ta\u010dke montiranja i premje\u0161tanje u drugi prostor imena. Pored toga, odvojena obrada omogu\u0107ava precizno odre\u0111ivanje uzroka izlaza kodova gre\u0161aka i postavljanje vi\u0161e izvora za vi\u0161eslojne FS, kao \u0161to je overlayfs;\n<li class=\"l\"> U interfejs za asinhrono ulaz\/izlaz io_uring je dodata nova operacija IORING_OP_SYNC_FILE_RANGE, koja obavlja radnje ekvivalentne sistemskom pozivu <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man2\/sync_file_range.2.html\">sync_file_range()<\/a><\/noindex>, kao i ostvarena mogu\u0107nost registracije eventfd sa io_uring i dobijanja obave\u0161tenja o zavr\u0161etku operacija;\n<li class=\"l\"> Za datote\u010dni sistem CIFS dodat je ioctl FIEMAP, koji omogu\u0107ava efikasno mapiranje ekstenta, kao i podr\u0161ku za re\u017eime SEEK_DATA i SEEK_HOLE;\n<li class=\"l\"> U FUSE podsystemu <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=ad2ba64dd489805e7ddf5fecf166cae1e09fc5c0\">je bil predlagan<\/a><\/noindex> API za upravljanje ke\u0161iranjem podataka;\n<li class=\"l\"> U Btrfs izvr\u0161ena je optimizacija implementacije qgroups i pove\u0107ana brzina izvr\u0161avanja fsync za datoteke sa vi\u0161e tvrdih linkova. Unapre\u0111en je kod provere integriteta podataka, koji sada uzima u obzir potencijalnu \u0161tetu informacija u RAM-u pre nego \u0161to podaci budu preba\u010deni na disk;\n<li class=\"l\"> U CEPH dodata je podr\u0161ka za izvoz snimaka putem NFS;\n<li class=\"l\"> Izbolj\u0161ana je implementacija montiranja NFSv4 v na\u010dinu \u00absoft\u00bb (ob pojavu napake dostopa do stre\u017enika v na\u010dinu \u00absoft\u00bb se takoj vrne koda napake, medtem ko v na\u010dinu \u00abhard\u00bb nadzor ne preide, dokler se ne obnovi dostopnost FS ali izte\u010de \u010dasovna omejitev). V novi izdaji je zagotavljena natan\u010dnej\u0161a obdelava \u010dasovne omejitve, pospe\u0161eno je okrevanje po napaki in dodana nova mo\u017enost montiranja \u00absofterr\u00bb, ki omogo\u010da spremembo kode napake (ETIMEDOUT), ki se vrne, ko nastopi \u010dasovna omejitev;\n<li class=\"l\"> V API nfsdcld, namenjenem za spremljanje stanja strank NFS, je omogo\u010deno pravilno spremljanje stanja stranke s strani NFS stre\u017enika ob ponovnem zagonu. Tako lahko demon nfsdcld sedaj deluje kot obdelovalec nfsdcltrack;\n<li class=\"l\"> Za AFS <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=6c6c1d63c243025956f061e67fff3a615aa0f6be\">je dodana<\/a><\/noindex> emulacija zaklepov razponov bajtov v datotekah (<noindex><a rel=\"nofollow\" href=\"http:\/\/docs.openafs.org\/ReleaseNotesWindows\/ch03s19.html\">Zaklepanje razponov bajtov<\/a><\/noindex>);\n<\/ul>\n<li class=\"l\"> <b>Virtualizacija in varnost<\/b>\n<ul>\n<li class=\"l\"> Opravljeno je bilo delo za odpravo mest v jedru, ki omogo\u010dajo izvajanje kode iz dostopnih za pisanje odra\u017eenih obmo\u010dij pomnilnika, kar omogo\u010da blokiranje potencialnih ranljivosti, ki jih je mogo\u010de izkoristiti pri napadih;\n<li class=\"l\"> Dodana je nova parameter za ukazno vrstico jedra \u00abmitigations=\u00bb, ki ponuja poenostavljen na\u010din za upravljanje vklopa razli\u010dnih tehnik za\u0161\u010dite pred ranljivostmi, povezanimi s spekulativnim izvajanjem navodil v CPU. Posredovanje \u00abmitigations=off\u00bb izklju\u010di vse obstoje\u010de metode, privzeti na\u010din \u00abmitigations=auto\u00bb vklopi za\u0161\u010dito, ne da bi vplival na uporabo Hyper Threading. Na\u010din \u00abmitigations=auto,nosmt\u00bb dodatno izklju\u010di Hyper Threading, \u010de to zahteva za\u0161\u010ditna metoda.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/0d7a78643f6972214e99205b364e508f8ea9598e\">Dodana<\/a><\/noindex> podpora za elektronski digitalni podpis po GOST R 34.10-2012 (RFC 7091, ISO\/IEC 14888-3), <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=0d7a78643f6972214e99205b364e508f8ea9598e\">razvit<\/a><\/noindex> Vitalijem \u010cikunovim iz &#171;Bazalt SPO&#187;. U ugra\u0111enu implementaciju TLS dodana je podr\u0161ka za AES128-CCM. U modul crypto_simd dodana je podr\u0161ka za algoritme AEAD;\n<li class=\"l\"> V Kconfig <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=9f671e58159adea641f76c56d1f0bbdcb3c524ff\">je dodana<\/a><\/noindex> odvojena sekcija &#171;kernel hardening&#187; sa opcijama za ja\u010danje za\u0161tite jezgra. Trenutno u novoj sekciji su prikupljene samo postavke za uklju\u010divanje poja\u010danja provere GCC-pluginova;\n<li class=\"l\"> Koda jedra je skoraj <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=b4b52b881cf0\">je oslobo\u0111en<\/a><\/noindex> od neprekidnih izraza case u switch (bez return ili break nakon svake grupe case). Preostalo je ispraviti 32 od 2311 slu\u010daja sli\u010dne upotrebe switch, nakon \u010dega \u0107e prilikom kompajliranja jezgra mo\u0107i da se primeni re\u017eim &#171;-Wimplicit-fallthrough&#187;;\n<li class=\"l\"> Za arhitekturo PowerPC je bila uvedena podpora za strojne mehanizme omejevanja neza\u017eelenih poti dostopa jedra do podatkov v prostoru uporabnika;\n<li class=\"l\"> Dodati su kodovi za blokiranje  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50684\">napadi<\/a><\/noindex> klasa MDS (Microarchitectural Data Sampling) u procesorima Intel. Proveriti podlo\u017enost sistema ovoj ranjivosti mo\u017ee se putem SysFS-variablne &#171;\/sys\/devices\/system\/cpu\/vulnerabilities\/mds&#187;. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/hw-vuln\/mds.html\">Na voljo<\/a><\/noindex> dva re\u017eima za\u0161tite: pun, koji zahteva prisustvo a\u017euriranog mikrokoda, i zaobilazan, koji ne garantuje potpuno \u010di\u0161\u0107enje CPU bafera pri prebacivanju kontrole u korisni\u010dki prostor ili gostuju\u0107i sistem. Za upravljanje re\u017eimima za\u0161tite u jezgro je dodat parametar &#171;mds=&#187;, koji mo\u017ee imati vrednosti &#171;full&#187;, &#171;full,nosmt&#187; (+ isklju\u010divanje Hyper-Threadinga) i &#171;off&#187;;\n<li class=\"l\"> Na sistemima x86-64 za IRQ, mehanizme debagovanja i obrada izuzetaka dodana je za\u0161tita &#171;stack guard-page&#187;, \u010dija je su\u0161tina u zameni na granici sa stekom stranica memorije, \u010dije se kori\u0161\u0107enje vodi do generisanja izuzetka (page-fault);\n<li class=\"l\"> Dodata je sysctl postavka vm.unprivileged_userfaultfd, koja upravlja mogu\u0107no\u0161\u0107u kori\u0161\u0107enja sistemskog poziva userfaultfd() od strane nepovoljenih procesa;\n<\/ul>\n<li class=\"l\"> <b>Mre\u017ena podsistem<\/b>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=d15662682db232da77136cd348f4c9df312ca6f9\">Dodana<\/a><\/noindex> podr\u0161ka za IPv6 gateway-e za IPv4 rute. Na primer, sada je mogu\u0107e navesti pravila usmeravanja tipa &#171;ip ro add 172.16.1.0\/24 via inet6 2001:db8::1 dev eth0&#187;;\n<li class=\"l\"> Za ICMPv6 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0438 \u0441\u0443 ioctl pozivi icmp_echo_ignore_anycast i icmp_echo_ignore_multicast za ignorisanje ICMP ECHO za anycast i<br \/>\nmulticast adrese. <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=0bc199854405543b0debe67c735c0aae94f1d319\">Dodana<\/a><\/noindex> mogu\u0107nost ograni\u010denja intenziteta obrade ICMPv6 paketa;<\/p>\n<li class=\"l\"> Za mesh-protokol B.A.T.M.A.N. (&#171;Better Approach To Mobile Adhoc Networking&#187;), koji omogu\u0107ava kreiranje decentralizovanih mre\u017ea, svaki \u010dvor u kojem je povezan sa susednim \u010dvorovima, <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/32e727449c792b689c2a06a8b4cc9fef6270c5a7\">je dodana<\/a><\/noindex> podr\u0161ka za prevo\u0111enje iz multicast u unicast, kao i mogu\u0107nost upravljanja putem sysfs;\n<li class=\"l\"> U ethtool <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=3aeb0803f7ea11ff2fc478f7d58f2b8e713af380\">dodano<\/a><\/noindex> novi parametar Fast Link Down, koji omogu\u0107ava skra\u0107ivanje vremena prijema informacija o doga\u0111aju isklju\u010divanja linka za 1000BaseT (u uobi\u010dajenim uslovima ka\u0161njenje iznosi do 750ms);\n<li class=\"l\"> \u041f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/1713cb37bf671e5d98919536941a8b56337874fd\">mo\u017enost<\/a><\/noindex> vezivanje tunela Foo-Over-UDP na odre\u0111enu adresu, mre\u017eni interfejs ili soket (ranije je vezivanje vr\u0161eno samo prema zajedni\u010dkoj maski);\n<li class=\"l\"> U be\u017ei\u010dnom steku <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=cb74e9775871f8c82a1297cf76209f10ab5bbe3d\">je zagotovljena<\/a><\/noindex> mogu\u0107nost implementacije handlera<br \/>\nOWE (Opportunistic Wireless Encryption) u korisni\u010dkom prostoru;<\/p>\n<li class=\"l\"> U Netfilter, u nat lancima dodata je podr\u0161ka za adresne porodice inet (na primjer, sada mo\u017eete koristiti jednu pravilo prevo\u0111enja za obradu ipv4 i ipv6, bez odvajanja pravila za ipv4 i ipv6);\n<li class=\"l\"> U netlink <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=ef6243acb4782df587a4d7d6c310fa5b5d82684b\">dodano<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=8cb081746c031fb164089322e2336a0bf5b3070c\">na\u010din<\/a><\/noindex> strict za strogu provjeru ta\u010dnosti svih poruka i atributa, u kojem se ne dozvoljava prekora\u010denje o\u010dekivanih veli\u010dina atributa i zabranjeno je dodavanje dodatnih podataka na kraju poruka;\n<\/ul>\n<li class=\"l\"> <b>Pomnilnik in sistemske storitve<\/b>\n<ul>\n<li class=\"l\"> U sistemski poziv clone() dodat je flag CLONE_PIDFD, pri \u010demu roditeljskom procesu vra\u0107a se fajl descriptor &#171;pidfd&#187;, povezan s kreiranim podprocesom. Ovaj fajl descriptor, na primer, mo\u017ee se koristiti za slanje signala bez bojazni od stanja utrke (odmah nakon slanja signala ciljanom PID-u mo\u017ee biti oslobo\u0111en zbog zavr\u0161etka rada procesa i zauzet drugim procesom);\n<li class=\"l\"> Za drugo razli\u010dico cgroups je bila dodana funkcionalnost kontrolerja freezer, s katero lahko ustavite delovanje v cgroup in za\u010dasno osvobodite nekatere vire (CPU, vhod\/izhod in potencialno celo pomnilnik) za izvajanje drugih nalog. Upravljanje poteka preko upravljalnih datotek cgroup.freeze in cgroup.events v drevesu cgroup. Zapis 1 v cgroup.freeze zamrzne procese v trenutni cgroup in vseh otro\u0161kih skupinah. Ker zamrznitev zahteva nekaj \u010dasa, je dodatno ponujena datoteka cgroup.events, preko katere lahko izveste, kdaj je operacija zaklju\u010dena;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e1cf33aafb84\">Zagotovljeno je<\/a><\/noindex> izvoz atributov pomnilnika, pritrjenih na vsak vozli\u0161\u010de v sysfs, kar omogo\u010da iz uporabni\u0161kega prostora dolo\u010diti zna\u010daj obdelave bank pomnilnika v sistemih s heterogeno pomnilnikom;\n<li class=\"l\"> Izbolj\u0161an je bil pod sistem PSI (Pressure Stall Information), ki omogo\u010da analizo informacij o \u010dasu \u010dakanja na pridobitev razli\u010dnih virov (CPU, pomnilnik, vhod\/izhod) za dolo\u010dene naloge ali nize procesov v cgroup. S PSI lahko obdelovalci v uporabni\u0161kem prostoru natan\u010dneje ocenijo raven obremenitve sistema in zna\u010daj upo\u010dasnitev dela, v primerjavi s Load Average. V novi razli\u010dici je bila zagotovljena podpora za nastavitev pragov ob\u010dutljivosti in mo\u017enost uporabe klica poll() za obve\u0161\u010danje o spro\u017eitvi nastavljenih pragov v dolo\u010denem \u010dasovnem obdobju. Ta mo\u017enost omogo\u010da organizacijo spremljanja pomanjkanja pomnilnika v Androidu v zgodnji fazi, dolo\u010danje izvora te\u017eav in zaklju\u010devanje nepomembnih aplikacij, ne da bi pri\u0161lo do opaznih te\u017eav za uporabnike. Pri stresnem testiranju so orodja za spremljanje porabe pomnilnika na osnovi PSI pokazala 10-krat manj la\u017enih spro\u017eitev v primerjavi z statistiko vmpressure;\n<li class=\"l\"> Optimizacija kode za preverjanje BPF-programov je omogo\u010dila do 20-krat hitrej\u0161o preverjanje za ve\u010dje programe. Optimizacija je omogo\u010dila pove\u010danje omejitve velikosti BPF-programov z 4096 na milijon navodil;\n<li class=\"l\"> Za BPF-programi <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=d859900c4c56\">zagotovljene<\/a><\/noindex> mo\u017enost dostopa do globalnih podatkov, kar omogo\u010da opredeljevanje globalnih spremenljivk in konstant v programih;\n<li class=\"l\"> Dodano <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/torvalds\/linux\/blob\/master\/Documentation\/bpf\/prog_cgroup_sysctl.rst\">API<\/a><\/noindex>, kar omogo\u010da nadzor iz BPF-programov nad spremembami parametrov sysctl;\n<li class=\"l\"> Za arhitekturo MIPS32 je bil implementiran JIT-kompajler za eBPF virtualno napravo;\n<li class=\"l\"> Za 32-bitno arhitekturo PowerPC je bila dodana podpora za orodje za odpravljanje napak KASan (Kernel address sanitizer), ki omogo\u010da odkrivanje napak pri delu s pomnilnikom;\n<li class=\"l\"> Na sistemih x86-64 je bilo odstranjenih omejitev pri postavljanju dumpov stanja ob zru\u0161itvi jedra (crash-dump) v obmo\u010dja pomnilnika nad 896MB;\n<li class=\"l\"> Za arhitekturo s390 je bila implementirana podpora za randomizacijo naslovnega prostora jedra (KASLR) in mo\u017enost verifikacije digitalnih podpisov pri nalaganju jedra preko kexec_file_load();\n<li class=\"l\"> Za arhitekturo PA-RISC je bila dodana podpora za jedrski razhro\u0161\u010devalnik (KGDB), preusmeritvene oznake in kprobes;\n<\/ul>\n<li class=\"l\"> <b>Oprema<\/b>\n<ul>\n<li class=\"l\"> Uklju\u010den je drajver <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=a1d2a6339961efc078208dc3b2f006e9e9a8e119\">Lima<\/a><\/noindex> za GPU Mali 400\/450, ki se uporablja v mnogih starej\u0161ih \u010dipih z ARM arhitekturo. Za novej\u0161e GPU Mali je bil dodan gonilnik Panfrost, ki podpira \u010dipe na osnovi mikroarhitektur Midgard (Mali-T6xx, Mali-T7xx, Mali-T8xx) in Bifrost (Mali G3x, G5x, G7x);\n<li class=\"l\"> Dodana je podpora za avdio naprave, ki uporabljajo odprte programe. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48266\">Sound Open Firmware<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.sofproject.org\/\">SOF<\/a><\/noindex>). Kljub obstoju odprtih gonilnikov je koda za programsko opremo avdio\u010dipov ostala zaprta in je bila dostavljena v binarni obliki. Projekt Sound Open Firmware je razvil Intel za ustvarjanje odprtih programov za DSP \u010dipe, povezanih z obdelavo zvoka (kasneje se je razvoju pridru\u017eil tudi Google). V okviru projekta je trenutno \u017ee pripravljena odprta programska oprema za avdio \u010dipe platform Intel Baytrail, CherryTrail, Broadwell, ApolloLake, GeminiLake, CannonLake in IceLake;\n<li class=\"l\"> V DRM gonilniku Intel (i915) je bila dodana podpora za \u010dipe<br \/>\nElkhartlake (Gen11). Dodani so bili PCI identifikatorji za \u010dipe Comet Lake (Gen9). Stabilizirana je podpora za \u010dipe Icelake, za katere so dodani tudi dodatni PCI identifikatorji naprav.<br \/>\n <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=d57b39e3ee3cdb4b00452090e386d197980cefc9\">Vklju\u010den<\/a><\/noindex><br \/>\nasynchronous switching mode between two buffers in video memory (async flip) during write operations via mmio, which significantly improved the performance of some 3D applications (for example, performance in the 3DMark Ice Storm test increased by 300-400%). Support for technology added <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/HDCP\">HDCP2.2<\/a><\/noindex> (High-bandwidth Digital Content Protection) for encrypting video signals transmitted via HDMI;<\/p>\n<li class=\"l\"> In the amdgpu driver for the Vega20 GPU <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=457109829f4ee4107e8c7108237afba21fabbb5e\">je dodana<\/a><\/noindex>  support for RAS (Reliability, Availability, Serviceability) and experimental support for the SMU 11 subsystem, which replaces the Powerplay technology. For the Vega12 GPU <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=750cced1c08b5258202f29ed954513be8f38df1b\">je dodana<\/a><\/noindex> support for BACO mode (Bus Active, Chip Off). Initial support added for XGMI, a high-speed bus (PCIe 4.0) for connecting GPUs. Missing identifiers for Polaris10 GPU-based cards were added to the amdkfd driver;\n<li class=\"l\"> Support for boards based on the NVIDIA Turing 117 (TU117, used in GeForce GTX 1650) chipset has been added to the Nouveau driver.<br \/>\n kconfig <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=b30a43ac7132cdda833ac4b13dd1ebd35ace14b7\">je dodana<\/a><\/noindex> settings to disable deprecated features that are no longer in use in current libdrm releases;<\/p>\n<li class=\"l\"> U API-ju DRM i drajveru amdgpu dodana je podr\u0161ka za objekte sinhronizacije &#171;timeline&#187;, \u0161to omogu\u0107ava izbegavanje klasi\u010dnih zaklju\u010davanja.\n<li class=\"l\"> The vboxvideo driver for the VirtualBox virtual GPU has been transferred from the staging branch to the main repository;\n<li class=\"l\"> Added aspeed driver for the ASPEED SoC GFX chip;\n<li class=\"l\"> Support added for ARM SoC and Intel Agilex boards (SoCFPGA), NXP i.MX8MM, Allwinner (RerVision H3-DVK (H3), Oceanic 5205 5inMFD, Beelink GS2 (H6), Orange Pi 3 (H6)), Rockchip (Orange Pi RK3399, Nanopi NEO4, Veyron-Mighty Chromebook), Amlogic: SEI Robotics SEI510,<br \/>\nST Micro (stm32mp157a, stm32mp157c), NXP (<br \/>\n    Eckelmann ci4x10 (i.MX6DL),<\/p>\n<p>    i.MX8MM EVK (i.MX8MM),<\/p>\n<p>    ZII i.MX7 RPU2 (i.MX7),<\/p>\n<p>    ZII SPB4 (VF610),<\/p>\n<p>    Zii Ultra (i.MX8M),<\/p>\n<p>    TQ TQMa7S (i.MX7Solo),<\/p>\n<p>    TQ TQMa7D (i.MX7Dual),<\/p>\n<p>    Kobo Aura (i.MX50),<\/p>\n<p>    Menlosystems M53 (i.MX53)), NVIDIA Jetson Nano (Tegra T210).<\/p>\n<\/ul>\n<\/ul>\n<p>Latinoameri\u0161ki sklad prostega programske opreme <noindex><a rel=\"nofollow\" href=\"http:\/\/www.fsfla.org\/ikiwiki\/selibre\/linux-libre\/\">je formirala<\/a><\/noindex><br \/>\nvarijantu <noindex><a rel=\"nofollow\" href=\"http:\/\/www.fsfla.org\/ikiwiki\/selibre\/linux-libre\/\">fully free kernel 5.2<\/a><\/noindex> \u2014 <noindex><a rel=\"nofollow\" href=\"http:\/\/linux-libre.fsfla.org\/pub\/linux-libre\/releases\/5.2-gnu\/\">Linux-libre 5.2-gnu<\/a><\/noindex>, cleaned from firmware and driver elements containing non-free components or code sections whose use is restricted by the manufacturer. The new release includes loading files<br \/>\nSound Open Firmware. Loading of blobs in the drivers<br \/>\n mt7615, rtw88, rtw8822b, rtw8822c, btmtksdio, iqs5xx, ishtp, and ucsi_ccg has been disabled. The code for cleaning blobs in the drivers and subsystems ixp4xx, imx-sdma, amdgpu, nouveau, and goya has been updated, as well as in the microcode documentation. Blob cleaning in the r8822be driver has been discontinued due to its removal.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Izvor: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51051\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.2. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0440\u0435\u0436\u0438\u043c \u0440\u0430\u0431\u043e\u0442\u044b Ext4 \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432, \u0440\u0430\u0437\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0424\u0421, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0434\u043b\u044f GPU Mali 4xx\/ 6xx\/7xx, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 sysctl \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 BPF, device-mapper \u043c\u043e\u0434\u0443\u043b\u044c dm-dust, \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a MDS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Sound Open Firmware \u0434\u043b\u044f DSP, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35977","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-yadra-linux-5-2\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-yadra-linux-5-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:08:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:08:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux kernel 5.2 release | ProHoster","description":"Po dveh mesecih razvoja je Linus Torvalds predstavil izid jedra Linux.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-yadra-linux-5-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.2 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-yadra-linux-5-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:08:56+00:00","article:modified_time":"2019-10-31T19:08:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:26","updated":"2026-01-22 01:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/35977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=35977"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/35977\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=35977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=35977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=35977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}