Yekuyedza tsigiro yekuvakazve iyo Linux kernel muClang ine CFI kuchengetedza michina

Kees Cook, aimbova mukuru sysadmin we kernel.org uye mutungamiri weUbuntu Security Team, ari kushanda kuGoogle kuchengetedza Android neChromeOS, yakagadzirirwa experimental repository ine zvigamba zvinokutendera kuti uvake kernel yeiyo x86_64 yekuvakisa uchishandisa iyo Clang compiler uye activate iyo CFI (Control Flow Integrity) nzira yekudzivirira. CFI inopa kucherechedzwa kwemamwe marudzi ehunhu husina kutsanangurwa hunogona kutungamira mukukanganiswa kweiyo yakajairika kudzora kuyerera semhedzisiro yezviitwa.

Ngatirangarirei kuti mu LLVM 9 shanduko dzinodiwa kuvaka iyo Linux kernel uchishandisa Clang pa x86_64 masisitimu akaverengerwa. Android uye ChromeOS mapurojekiti atove shandisa Clang yekuvaka kernel uye Google iri kuyedza Clang sepuratifomu huru yekuvaka kernels yekugadzira kwayo Linux masisitimu. Kernel akasiyana akavakwa achishandisa Clang zvakare anovandudza mapurojekiti linaro ΠΈ CROS.

Source: opennet.ru

Voeg