{"id":34721,"date":"2019-10-31T22:00:00","date_gmt":"2019-10-31T19:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd\/"},"modified":"2019-10-31T22:00:00","modified_gmt":"2019-10-31T19:00:00","slug":"plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd","title":{"rendered":"Planet p\u00ebr forcimin e mekanizmit t\u00eb mbrojtjes W^X n\u00eb OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Theo de Raadt <noindex><a rel=\"nofollow\" href=\"https:\/\/marc.info\/?l=openbsd-tech&#038;m=155899373514678&#038;w=2\">ndau<\/a><\/noindex> planet p\u00ebr forcimin e mekanizmit t\u00eb mbrojtjes s\u00eb memories W^X (Write XOR Execute). Thelbi i k\u00ebtij mekanizmi \u00ebsht\u00eb q\u00eb faqet e memories s\u00eb procesit nuk mund t\u00eb jen\u00eb nj\u00ebkoh\u00ebsisht t\u00eb qasshme p\u00ebr shkrim dhe ekzekutim. K\u00ebshtu, kodi mund t\u00eb ekzekutohet vet\u00ebm pasi t\u00eb ndalohet shkrimi, nd\u00ebrsa shkrimi n\u00eb nj\u00eb faqe memorieje \u00ebsht\u00eb i mundur vet\u00ebm pasi t\u00eb ndalohet ekzekutimi. Mekanizmi W^X ndihmon n\u00eb mbrojtjen e aplikacioneve n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit nga sulmet tipike t\u00eb kryera p\u00ebrmes mbushjes s\u00eb buffer-it, p\u00ebrfshir\u00eb mbushjen e stack-ut, dhe \u00ebsht\u00eb aktiv n\u00eb OpenBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=44506\">si parazgjedhje<\/a><\/noindex>.<\/p>\n<p>Q\u00eb nga fillimi i pun\u00ebs mbi W^X ishte e qart\u00eb se kjo do t\u00eb ishte nj\u00eb rrug\u00eb e gjat\u00eb, pasi ekziston nj\u00eb num\u00ebr i konsideruesh\u00ebm aplikacionesh q\u00eb p\u00ebrdorin JIT. Zbatimet e JIT mund t\u00eb ndahen n\u00eb tri kategori:<\/p>\n<ul>\n<li class=\"l\"> Nd\u00ebrrimi i memories mes gjendjeve W dhe X, duke u pajtuar me \"kostot\" e thirrjeve sistemore <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/mprotect.2\">mprotect<\/a><\/noindex>.\n<li class=\"l\"> Ato q\u00eb krijojn\u00eb pseudonime midis nj\u00eb \u00e7ifti hart\u00ebzimesh W dhe X t\u00eb s\u00eb nj\u00ebjt\u00ebs memorie.\n<li class=\"l\"> Varianti m\u00eb \"i papast\u00ebr\" \u2014 modelet e memories W|X, q\u00eb lejojn\u00eb ekzekutimin dhe shkrimin n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb.\n<\/ul>\n<p>Aktualisht, ka shum\u00eb m\u00eb pak programe q\u00eb p\u00ebrdorin variantin e tret\u00eb dhe m\u00eb shum\u00eb q\u00eb p\u00ebrdorin t\u00eb parin dhe t\u00eb dytin. Megjithat\u00eb, q\u00eb t\u00eb ishte e nevojshme ekzekutimi i programeve me W|X JIT (kryesisht, Chromium dhe Iridum), u shtua nj\u00eb opsion p\u00ebr montimin e sistemit t\u00eb skedar\u00ebve \"wxallowed\", i cili lejonte p\u00ebrdorimin e memories p\u00ebr shkrim dhe ekzekutim n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, n\u00eb rast se skedari ELF i ekzekutuesh\u00ebm ishte i sh\u00ebnuar me markerin \"wxneeded\", nd\u00ebrsa aplikacionet e vet\u00eb ishin mbrojtur p\u00ebrmes mekanizmave. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=43295\">pledge<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49042\">unveil<\/a><\/noindex> p\u00ebr t\u00eb kufizuar p\u00ebrkat\u00ebsisht list\u00ebn e thirrjeve t\u00eb sistemit q\u00eb p\u00ebrdoren dhe pjes\u00ebt e sistemit t\u00eb skedar\u00ebve t\u00eb qasshme p\u00ebr aplikacionin.<\/p>\n<p>P\u00ebr ta v\u00ebshtir\u00ebsuar m\u00eb tej shfryt\u00ebzimin e cenueshm\u00ebrive n\u00eb aplikacione t\u00eb tilla, \u00ebsht\u00eb propozuar nj\u00eb shtes\u00eb e mekanizmit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48243\">MAP_STACK<\/a><\/noindex>, e cila kontrollon n\u00ebse thirrja e sistemit po ekzekutohet nga nj\u00eb faqe memorieje e qasshme p\u00ebr shkrim. N\u00ebse faqja \u00ebsht\u00eb e qasshme p\u00ebr shkrim, procesi p\u00ebrfundon me forc\u00eb. K\u00ebshtu, nj\u00eb sulmues nuk do t\u00eb mund t\u00eb p\u00ebrdor\u00eb thirrje sistemi dhe do t\u00eb detyrohet t\u00eb p\u00ebrpiqet t\u00eb gjej\u00eb gadget-et e nevojshme n\u00eb zbatimin e JIT ose madje t\u00eb b\u00ebj\u00eb pun\u00ebn edhe m\u00eb t\u00eb v\u00ebshtir\u00eb t\u00eb zbulimit t\u00eb stub-eve t\u00eb thirrjeve t\u00eb sistemit drejtp\u00ebrdrejt brenda <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=44320\">libc t\u00eb lidhur rast\u00ebsisht<\/a><\/noindex>. <\/p>\n<p>Proceset e Chrome\/Iridium tashm\u00eb jan\u00eb t\u00eb mbrojtura mjaftuesh\u00ebm n\u00eb m\u00ebnyr\u00eb t\u00eb besueshme me pledge dhe unveil, por heqja e mund\u00ebsis\u00eb p\u00ebr t\u00eb p\u00ebrdorur, p\u00ebr shembull, thirrjen e sistemit write(2), padyshim ka nj\u00eb p\u00ebrpar\u00ebsi t\u00eb caktuar, pasi i krijon v\u00ebshtir\u00ebsi shtes\u00eb sulmuesit. Megjithat\u00eb, v\u00ebshtir\u00ebsi mund t\u00eb shfaqen edhe n\u00ebse implementimi i JIT p\u00ebrdor thirrje natyrore t\u00eb sistemit nga memoria W|X. Sidoqoft\u00eb, ka arsye p\u00ebr t\u00eb shpresuar se nuk do t\u00eb p\u00ebrballemi me di\u00e7ka t\u00eb till\u00eb, pasi ABI ka ndryshuar disa her\u00eb, por askush nuk ka raportuar ndonj\u00ebher\u00eb probleme.<\/p>\n<p>Ndryshimet tashm\u00eb jan\u00eb t\u00eb disponueshme n\u00eb snapshot-et e rregullta t\u00eb deg\u00ebs OpenBSD-Current dhe t\u00eb gjith\u00eb t\u00eb interesuarit ftohen t\u2019i testojn\u00eb.<\/p>\n<p>Theo b\u00ebri gjithashtu nj\u00eb koment t\u00eb ve\u00e7ant\u00eb p\u00ebr lajmet lidhur me shfaqjen n\u00eb Chrome\/Iridium t\u00eb modalitetit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50559\">JITless<\/a><\/noindex>. Nga pik\u00ebpamja e tij, kjo \u00ebsht\u00eb e pranueshme p\u00ebr disa modele p\u00ebrdorimi, megjithat\u00eb, ndoshta jo p\u00ebr t\u00eb gjitha, pasi n\u00eb k\u00ebt\u00eb mod \u00ebsht\u00eb e dukshme se ngarkesa mbi procesorin do t\u00eb rritet. Tani Chrome do t\u00eb funksionoj\u00eb kryesisht, n\u00ebse \"wxallowed\" \u00ebsht\u00eb \u00e7aktivizuar p\u00ebr \/usr\/local, megjithat\u00eb ka mund\u00ebsi probleme me disa zgjerime (n\u00eb rastin e caktuar, ghostery). Sidoqoft\u00eb, Theo shpreson q\u00eb funksionimi i plot\u00eb n\u00eb m\u00ebnyr\u00eb JITless do t\u00eb arrij\u00eb nj\u00eb gjendje t\u00eb plot\u00eb funksionale s\u00eb shpejti.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50763\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0422\u0435\u043e \u0414\u0435 \u0420\u0430\u0430\u0434\u0442 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u043b\u0430\u043d\u0430\u043c\u0438 \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 W^X (Write XOR Execute). \u0421\u0443\u0442\u044c \u043c\u0435\u0445\u043d\u0438\u0437\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u0438, \u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c W^X \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34721","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0422\u0435\u043e \u0414\u0435 \u0420\u0430\u0430\u0434\u0442 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u043b\u0430\u043d\u0430\u043c\u0438 \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 W^X (Write XOR Execute).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u043b\u0430\u043d\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b W^X \u0432 OpenBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0422\u0435\u043e \u0414\u0435 \u0420\u0430\u0430\u0434\u0442 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u043b\u0430\u043d\u0430\u043c\u0438 \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 W^X (Write XOR Execute).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Planet p\u00ebr forcimin e mekanizmit t\u00eb mbrojtjes W^X n\u00eb OpenBSD | ProHoster","description":"Theo de Raadt ndau planet p\u00ebr forcimin e mekanizmit t\u00eb mbrojtjes s\u00eb memories W^X (Write XOR Execute).","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043b\u0430\u043d\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b W^X \u0432 OpenBSD | ProHoster","og:description":"\u0422\u0435\u043e \u0414\u0435 \u0420\u0430\u0430\u0434\u0442 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u043b\u0430\u043d\u0430\u043c\u0438 \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 W^X (Write XOR Execute).","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/plany-po-usileniyu-mehanizma-zashhity-w-x-v-openbsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:00+00:00","article:modified_time":"2019-10-31T19:00:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34721","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:16:32","updated":"2026-01-21 20:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/34721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=34721"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/34721\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=34721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=34721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=34721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}