{"id":41110,"date":"2020-02-05T21:30:57","date_gmt":"2020-02-05T18:30:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/metody-otklyucheniya-zashhity-lockdown-v-ubuntu-dlya-udalyonnogo-obhoda-uefi-secure-boot"},"modified":"2020-02-05T21:30:57","modified_gmt":"2020-02-05T18:30:57","slug":"metody-otklyucheniya-zashhity-lockdown-v-ubuntu-dlya-udalyonnogo-obhoda-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/metody-otklyucheniya-zashhity-lockdown-v-ubuntu-dlya-udalyonnogo-obhoda-uefi-secure-boot","title":{"rendered":"Metodat p\u00ebr t\u00eb \u00e7aktivizuar mbrojtjen Lockdown n\u00eb Ubuntu p\u00ebr kalimin e siguris\u00eb UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Andrej Konovalov nga kompania Google publikoi<\/a><\/noindex> nj\u00eb metod\u00eb p\u00ebr \u00e7aktivizimin e mbrojtjes n\u00eb distanc\u00eb Lockdown<\/a><\/noindex>, e ofruar n\u00eb paket\u00ebn me b\u00ebrtham\u00ebn Linux q\u00eb vjen me Ubuntu (metodat e propozuara teorikisht duhet<\/a><\/noindex> t\u00eb funksionojn\u00eb me b\u00ebrthamat Fedora dhe distribucione t\u00eb tjera, por nuk jan\u00eb testuar). <\/p>\n

Lockdown kufizon aksesin e p\u00ebrdoruesit root n\u00eb b\u00ebrtham\u00eb dhe bllokon rrug\u00ebt p\u00ebr t\u00eb kaluar UEFI Secure Boot. P\u00ebr shembull, n\u00eb modin lockdown, akseset n\u00eb \/dev\/mem, \/dev\/kmem, \/dev\/port, \/proc\/kcore, debugfs, modin e debugging t\u00eb kprobes, mmiotrace, tracefs, BPF, PCMCIA CIS (Struktura e Informacionit t\u00eb Kart\u00ebs), disa nd\u00ebrfaqe ACPI dhe regjistrat MSR t\u00eb CPU, bllokohen thirrjet kexec_file dhe kexec_load, ndalohet kalimi n\u00eb gjumin e thell\u00eb, kufizohet p\u00ebrdorimi i DMA p\u00ebr pajisjet PCI, ndalohet importimi i kodit ACPI nga variablat EFI, nuk lejohet manipulimi me portet e hyrjes\/daljes, duke p\u00ebrfshir\u00eb ndryshimin e numrit t\u00eb nd\u00ebrprerjes dhe portit t\u00eb hyrjes\/daljes p\u00ebr portin serial.<\/p>\n

Mekanizmi Lockdown s\u00eb fundmi u shtua n\u00eb b\u00ebrtham\u00ebn kryesore t\u00eb Linux 5.4<\/a><\/noindex>, porosie t\u00eb sjellura n\u00eb distribucionet e kernelit, ai gjithsesi realizohet n\u00eb form\u00ebn e patches ose \u00ebsht\u00eb i plot\u00ebsuar me patches. Nj\u00eb nga dallimet e shtesave t\u00eb ofruara n\u00eb distribucionet nga implementimi i integruar n\u00eb kernel \u00ebsht\u00eb mund\u00ebsia p\u00ebr t\u00eb \u00e7aktivizuar bllokimin e ofruar kur ka qasje fizike n\u00eb sistem. <\/p>\n

N\u00eb Ubuntu dhe Fedora p\u00ebr t\u00eb \u00e7aktivizuar Lockdown \u00ebsht\u00eb parashikuar nj\u00eb kombinim \u00e7el\u00ebsh Alt+SysRq+X. N\u00ebnkuptohet se kombinimi Alt+SysRq+X mund t\u00eb p\u00ebrdoret vet\u00ebm me qasje fizike n\u00eb pajisje, dhe n\u00eb rastin e nj\u00eb sulmi n\u00eb distanc\u00eb dhe marrjes s\u00eb aksesit root, sulmuesi nuk do t\u00eb mund t\u00eb \u00e7aktivizoj\u00eb Lockdown dhe, p\u00ebr shembull, t\u00eb ngarkoj\u00eb nj\u00eb modul n\u00eb kernel pa n\u00ebnshkrim digjital me rootkit. <\/p>\n

Andrey Konovalov tregoi se metodat e lidhura me p\u00ebrdorimin e tastier\u00ebs p\u00ebr t\u00eb konfirmuar pranin\u00eb fizike t\u00eb p\u00ebrdoruesit jan\u00eb t\u00eb pafuqishme. Nj\u00eb m\u00ebnyr\u00eb e thjesht\u00eb p\u00ebr t\u00eb \u00e7aktivizuar Lockdown do t\u00eb ishte simulimi programatik i<\/a><\/noindex> shtypjes s\u00eb Alt+SysRq+X p\u00ebrmes \/dev\/uinput, por kjo opsion \u00ebsht\u00eb bllokuar fillimisht. Megjithat\u00eb, \u00ebsht\u00eb identifikuar t\u00eb pakt\u00ebn dy m\u00ebnyra t\u00eb tjera p\u00ebr t\u00eb inxhinieruar Alt+SysRq+X. <\/p>\n

M\u00ebnyra e par\u00eb \u00ebsht\u00eb e lidhur me p\u00ebrdorimin e interface-it \"sysrq-trigger\" \u2014 p\u00ebr t\u00eb simuluar, mjafton t\u00eb aktivizoni k\u00ebt\u00eb interface, duke shkruar \"1\" n\u00eb \/proc\/sys\/kernel\/sysrq, dhe pastaj t\u00eb shkruani \"x\" n\u00eb \/proc\/sysrq-trigger. Ky \u00ebsht\u00eb nj\u00eb anashkalim i dh\u00ebn\u00eb. i eliminuar<\/a><\/noindex> n\u00eb p\u00ebrdit\u00ebsimin e dhjetorit t\u00eb kernelit t\u00eb Ubuntu dhe n\u00eb Fedora 31. E ve\u00e7anta \u00ebsht\u00eb se zhvilluesit, si\u00e7 \u00ebsht\u00eb rasti me \/dev\/uinput, fillimisht p\u00ebrpoq\u00ebn<\/a><\/noindex> t\u00eb bllokonin k\u00ebt\u00eb metod\u00eb, por bllokimi nuk funksionoi p\u00ebr shkak t\u00eb gabimit<\/a><\/noindex> n\u00eb kodin e saj.<\/p>\n

Metoda e dyt\u00eb lidhet me emulimin e tastier\u00ebs p\u00ebrmes USB\/IP<\/a><\/noindex> dhe d\u00ebrgimin e sekuenc\u00ebs Alt+SysRq+X me tastier\u00ebn virtuale. N\u00eb kernelin e ofruar nga Ubuntu, USB\/IP \u00ebsht\u00eb aktivizuar sipas default (CONFIG_USBIP_VHCI_HCD=m dhe CONFIG_USBIP_CORE=m) dhe jan\u00eb ofruar modul\u00eb t\u00eb nevojsh\u00ebm me firm\u00eb digjitale t\u00eb verifikuar usbip_core dhe vhci_hcd. Sulmuesi mund t\u00eb krijoj\u00eb<\/a><\/noindex> nj\u00eb pajisje USB virtuale, duke nisur<\/a><\/noindex> nj\u00eb procesor rrjeti n\u00eb nd\u00ebrfaqen loopback dhe duke e lidhur at\u00eb si nj\u00eb pajisje USB t\u00eb larg\u00ebt p\u00ebrmes USB\/IP. Rreth k\u00ebsaj metode u njoftua<\/a><\/noindex> zhvilluesve t\u00eb Ubuntu, por korigjimi ende nuk \u00ebsht\u00eb l\u00ebshuar.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u043d\u0434\u0440\u0435\u0439 \u041a\u043e\u043d\u043e\u0432\u0430\u043b\u043e\u0432 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b Lockdown, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 \u0441 \u044f\u0434\u0440\u043e\u043c Linux, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 Ubuntu (\u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u044f\u0434\u0440\u043e\u043c Fedora \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043d\u043e \u043e\u043d\u0438 \u043d\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b). Lockdown \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u043a \u044f\u0434\u0440\u0443 \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043f\u0443\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 UEFI Secure Boot. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 lockdown \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41110","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Metodat p\u00ebr \u00e7aktivizimin e mbrojtjes Lockdown n\u00eb Ubuntu p\u00ebr anashkalimin e UEFI Secure Boot | ProHoster","description":"Andrei Konovalov from Google published a method for remotely disabling protection.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/metody-otklyucheniya-zashhity-lockdown-v-ubuntu-dlya-udalyonnogo-obhoda-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0435\u0442\u043e\u0434\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b Lockdown \u0432 Ubuntu \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 UEFI Secure Boot | ProHoster","og:description":"\u0410\u043d\u0434\u0440\u0435\u0439 \u041a\u043e\u043d\u043e\u0432\u0430\u043b\u043e\u0432 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b","og:url":"https:\/\/prohoster.info\/sq\/blog\/metody-otklyucheniya-zashhity-lockdown-v-ubuntu-dlya-udalyonnogo-obhoda-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-05T18:30:57+00:00","article:modified_time":"2020-02-05T18:30:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41110","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:48:15","updated":"2022-09-28 13:36:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=41110"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41110\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=41110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=41110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=41110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}