Siideynta moduleka LKRG 0.9.4 si looga ilaaliyo ka faa'iidaysiga dayacanka Linux kernel

Mashruuca Openwall wuxuu daabacay siideynta moduleka kernel LKRG 0.9.4 (Linux Kernel Runtime Guard), oo loogu talagalay in lagu ogaado lagana hortago weerarrada iyo xadgudubyada sharafta qaab-dhismeedka kernel-ka. Tusaale ahaan, cutubku wuxuu ka ilaalin karaa isbeddellada aan la oggolayn ee kernel-ka socda iyo isku dayga lagu beddelayo oggolaanshaha hababka adeegsadaha (ogaanshaha isticmaalka ka faa'iidaysiga). Module-ku wuxuu ku habboon yahay labadaba abaabulka ilaalinta ka-faa'iidaysiga dayacanka kernel-ka Linux ee hore loo yaqaan (tusaale ahaan, xaaladaha ay adag tahay in la cusboonaysiiyo kernel-ka nidaamka), iyo ka-hortagga ka faa'iidaysiga dayacanka aan weli la garanayn. Xeerka mashruuca waxa lagu qaybiyaa shatiga GPLv2. Waxaad ka akhriyi kartaa sifooyinka hirgelinta LKRG marka ugu horeysa ee lagu dhawaaqo mashruuca.

Waxaa ka mid ah isbeddelada nooca cusub:

  • Taageero lagu daray nidaamka init OpenRC.
  • Waafaqsanaanta kernels LTS Linux 5.15.40+ waa la hubiyay.
  • Qaabaynta farriimaha lagu soo bandhigay diiwaanka dib ayaa loo habeeyay si loo fududeeyo falanqaynta tooska ah iyo fududaynta aragtida inta lagu jiro falanqaynta gacanta.
  • Farriimaha LKRG waxay leeyihiin qaybahooda log, taasoo u sahlaysa inay ka soocaan farriimaha kale ee kernel-ka.
  • Qaybta kernel-ka ayaa laga beddelay p_lkrg loona beddelay lkrg.
  • Tilmaamaha rakibida lagu daray iyadoo la adeegsanayo DKMS.

Source: opennet.ru

Add a comment