N\u00eb komponenti systemd-coredump, i cili siguron p\u00ebrpunimin e skedar\u00ebve kernel q\u00eb krijohen pas p\u00ebrfundimeve t\u00eb papritura t\u00eb proceseve, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2022-4415), e cila lejon nj\u00eb p\u00ebrdorues lokal t\u00eb paprik\u00ebt t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen e memories s\u00eb proceseve me privilegje, t\u00eb cilat jan\u00eb nisur me flagun suid root. Problemi n\u00eb konfigurimin e parazgjedhur \u00ebsht\u00eb konfirmuar n\u00eb shp\u00ebrndarjet openSUSE, Arch, Debian, Fedora dhe SLES. <\/p>\n
Dob\u00ebsia shkaktohet nga mungesa e p\u00ebrpunimit t\u00eb duhur t\u00eb parametrit sysctl fs.suid_dumpable n\u00eb systemd-coredump, i cili me vler\u00ebn e parazgjedhur 2 lejon gjenerimin e core-dump p\u00ebr proceset me flagun suid. N\u00ebnkuptohet se t\u00eb drejtat e aksesit p\u00ebr skedar\u00ebt e core dump t\u00eb proceseve suid duhet t\u00eb vendosen p\u00ebr t\u00eb lejuar leximin vet\u00ebm nga p\u00ebrdoruesi root. Utiliteti systemd-coredump, i cili thirret nga kerneli p\u00ebr t\u00eb ruajtur skedar\u00ebt kernel, ruan skedarin e core n\u00ebn identifikuesin root, por gjithashtu ofron akses n\u00eb skedar\u00ebt e core n\u00eb baz\u00eb t\u00eb ACL, duke lejuar leximin n\u00eb baz\u00eb t\u00eb identifikuesit t\u00eb pronarit, i cili fillimisht nisi procesin. <\/p>\n
Kjo karakteristik\u00eb lejon ngarkimin e skedar\u00ebve t\u00eb core pa marr\u00eb parasysh se aplikacioni mund t\u00eb ndryshoj\u00eb identifikuesin e p\u00ebrdoruesit dhe t\u00eb vazhdoj\u00eb me privilegje t\u00eb ngritura. Sulmi p\u00ebrfshin q\u00eb p\u00ebrdoruesi mund t\u00eb nis\u00eb nj\u00eb aplikacion suid dhe t'i d\u00ebrgoj\u00eb atij sinjalin SIGSEGV, pas s\u00eb cil\u00ebs t\u00eb ngarkoj\u00eb p\u00ebrmbajtjen e skedarit t\u00eb core q\u00eb p\u00ebrfshin nj\u00eb segment t\u00eb memories s\u00eb procesit gjat\u00eb p\u00ebrfundimit t\u00eb papritur. <\/p>\n
Sipas zhvilluesve t\u00eb systemd, dob\u00ebsia shfaqet q\u00eb nga l\u00ebshimi i systemd 247 (n\u00ebntor 2020), por sipas k\u00ebrkuesit q\u00eb zbuloi problemin, l\u00ebshimi 246 \u00ebsht\u00eb gjithashtu i preksh\u00ebm. Dob\u00ebsia shfaqet n\u00ebse systemd \u00ebsht\u00eb nd\u00ebrtuar me bibliotek\u00ebn libacl (e cila \u00ebsht\u00eb e parazgjedhur n\u00eb t\u00eb gjitha shp\u00ebrndarjet e njohura). Nj\u00eb rregullim \u00ebsht\u00eb ende i disponuesh\u00ebm n\u00eb form\u00ebn e nj\u00eb patchu. Mund t\u00eb ndiqni rregullimin n\u00eb shp\u00ebrndarjet e m\u00ebposhtme: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Gentoo, Arch. Si nj\u00eb zgjidhje alternative p\u00ebr mbrojtje, mund t\u00eb vendosni sysctl fs.suid_dumpable n\u00eb vler\u00ebn 0, e cila \u00e7on n\u00eb ndalimin e d\u00ebrgimit t\u00eb dump-eve tek sistemi systemd-coredump. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"