{"id":102806,"date":"2021-12-29T15:36:50","date_gmt":"2021-12-29T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0"},"modified":"2021-12-29T15:36:50","modified_gmt":"2021-12-29T13:36:50","slug":"%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d0%bc%d0%be%d0%b4%d1%83%d0%bb%d1%8f-lkrg-0-9-2-%d0%b4%d0%bb%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d1%8b-%d0%be%d1%82-%d1%8d%d0%ba%d1%81%d0%bf%d0%bb%d1%83%d0%b0","title":{"rendered":"Shp\u00ebrthimi i modulit LKRG 0.9.2 p\u00ebr mbrojtjen nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb b\u00ebrtham\u00ebn Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Projekti Openwall publikoi shp\u00ebrthimin e modulit t\u00eb b\u00ebrtham\u00ebs LKRG 0.9.2 (Linux Kernel Runtime Guard), i cili \u00ebsht\u00eb i dizajnuar p\u00ebr t\u00eb identifikuar dhe bllokuar sulmet dhe shkeljet e integritetit t\u00eb strukturave t\u00eb b\u00ebrtham\u00ebs. P.sh., moduli mund t\u00eb mbroj\u00eb nga ndryshimet e paautorizuara n\u00eb b\u00ebrtham\u00ebn aktive dhe p\u00ebrpjekjet p\u00ebr t\u00eb ndryshuar fuqit\u00eb e proceseve t\u00eb p\u00ebrdoruesve (p\u00ebrcaktimi i p\u00ebrdorimit t\u00eb shfryt\u00ebzimeve). Moduli \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm si p\u00ebr organizimin e mbrojtjes nga shfryt\u00ebzimet e dob\u00ebsive tashm\u00eb t\u00eb njohura t\u00eb b\u00ebrtham\u00ebs Linux (p.sh., n\u00eb situatat kur \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb azhurnohet b\u00ebrthama n\u00eb sistem), ashtu edhe p\u00ebr t'u p\u00ebrballur me shfryt\u00ebzimet p\u00ebr dob\u00ebsit\u00eb ende t\u00eb panjohura. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2. P\u00ebr ve\u00e7orit\u00eb e implementimit t\u00eb LKRG, mund t\u00eb lexoni n\u00eb njoftimin e par\u00eb t\u00eb projektit. <\/p>\n
Nd\u00ebr ndryshimet n\u00eb versionin e ri: <\/p>\n
\n
\u00cbsht\u00eb siguruar p\u00ebrputhshm\u00ebria me b\u00ebrthamat Linux nga 5.14 deri n\u00eb 5.16-rc, si dhe me azhurnimet e b\u00ebrthamave LTS 5.4.118+, 4.19.191+ dhe 4.14.233+.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr konfigurime t\u00eb ndryshme t\u00eb CONFIG_SECCOMP.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr parametrin e b\u00ebrtham\u00ebs «nolkrg» p\u00ebr t\u00eb deaktivizuar LKRG n\u00eb faz\u00ebn e ngarkes\u00ebs.\n
\u00cbsht\u00eb mund\u00ebsuar p\u00ebrdorimi i parametrave CONFIG_HAVE_STATIC_CALL n\u00eb b\u00ebrthamat Linux 5.10+ p\u00ebr t\u00eb bllokuar gjendjet e gar\u00ebs gjat\u00eb shp\u00ebrndarjes s\u00eb moduleve t\u00eb tjera.\n
\u00cbsht\u00eb siguruar ruajtja n\u00eb log e emrave t\u00eb moduleve, t\u00eb bllokuara duke p\u00ebrdorur parametrin lkrg.block_modules=1.\n
\u00cbsht\u00eb realizuar vendosja e parametrave sysctl n\u00eb skedarin \/etc\/sysctl.d\/01-lkrg.conf\n
\u00cbsht\u00eb shtuar skedari i konfigurimit dkms.conf p\u00ebr sistemin DKMS (Dynamic Kernel Module Support), i p\u00ebrdorur p\u00ebr nd\u00ebrtimin e moduleve t\u00eb jashtme pas p\u00ebrdit\u00ebsimit t\u00eb b\u00ebrtham\u00ebs.\n
\u00cbsht\u00eb p\u00ebrmir\u00ebsuar dhe p\u00ebrdit\u00ebsuar mb\u00ebshtetje p\u00ebr nd\u00ebrtimet e depurimit dhe sistemet e integrimit t\u00eb vazhduesh\u00ebm. <\/ul>\n