{"id":99808,"date":"2021-04-15T10:22:45","date_gmt":"2021-04-15T08:22:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavleny-patchi-dlya-randomizaczii-adresov-steka-yadra-linux-pri-sistemnyh-vyzovah"},"modified":"2021-04-15T10:22:45","modified_gmt":"2021-04-15T08:22:45","slug":"predstavleny-patchi-dlya-randomizaczii-adresov-steka-yadra-linux-pri-sistemnyh-vyzovah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavleny-patchi-dlya-randomizaczii-adresov-steka-yadra-linux-pri-sistemnyh-vyzovah","title":{"rendered":"Jan\u00eb prezantuar patch-e p\u00ebr randomizimin e adresave t\u00eb stack-ut t\u00eb kernel-it Linux gjat\u00eb thirrjeve t\u00eb sistemit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kees Cook, ish-kryeadministrator i kernel.org dhe drejtues i Ubuntu Security Team, i cili tani punon n\u00eb Google p\u00ebr forcimin e mbrojtjes s\u00eb Android dhe ChromeOS, ka publikuar nj\u00eb grup patch-esh q\u00eb zbatojn\u00eb randomizimin e zhvendosjeve n\u00eb stack-un e kernel-it gjat\u00eb p\u00ebrpunimit t\u00eb thirrjeve t\u00eb sistemit. K\u00ebto patch-e rrisin sigurin\u00eb e kernel-it duke ndryshuar vendosjen e stack-ut, \u00e7ka i b\u00ebn sulmet ndaj stack-ut duksh\u00ebm m\u00eb t\u00eb v\u00ebshtira dhe m\u00eb pak t\u00eb suksesshme. Zbatimi fillestar mb\u00ebshtet procesor\u00ebt ARM64 dhe x86\/x86_64. <\/p>\n

Ideja fillestare e patch-it i p\u00ebrket projektit PaX RANDKSTACK. N\u00eb vitin 2019, Elena Reshetova, inxhiniere nga kompania Intel, p\u00ebrpiqej t\u00eb krijonte nj\u00eb implementim t\u00eb k\u00ebtij koncepti, t\u00eb p\u00ebrshtatsh\u00ebm p\u00ebr t'u p\u00ebrfshir\u00eb n\u00eb b\u00ebrtham\u00ebn kryesore t\u00eb Linux-it. M\u00eb von\u00eb, iniciativ\u00ebn e mori Kis Kuk, i cili paraqiti nj\u00eb implementim t\u00eb p\u00ebrshtatsh\u00ebm p\u00ebr variantin e zakonsh\u00ebm t\u00eb b\u00ebrtham\u00ebs. Patch-et planifikohen t\u00eb p\u00ebrfshihen n\u00eb versionin 5.13. M\u00ebnyra do t\u00eb jet\u00eb e \u00e7aktivizuar nga e para. P\u00ebr aktivizimin jan\u00eb propozuar parameter\u00ebt e linj\u00ebs s\u00eb komand\u00ebs t\u00eb b\u00ebrtham\u00ebs «randomize_kstack_offset=on\/off» dhe konfigurimi CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT. Ngarkesat gjat\u00eb aktivizimit t\u00eb m\u00ebnyr\u00ebs vler\u00ebsohen t\u00eb jen\u00eb p\u00ebraf\u00ebrsisht 1% humbje e performanc\u00ebs. <\/p>\n

Thelbi i mbrojtjes s\u00eb propozuar q\u00ebndron n\u00eb zgjedhjen e nj\u00eb zhvendosjeje t\u00eb rast\u00ebsishme t\u00eb stack-ut p\u00ebr \u00e7do thirrje t\u00eb sistemit, gj\u00eb q\u00eb e v\u00ebshtir\u00ebson p\u00ebrcaktimin e organizimit t\u00eb stack-ut n\u00eb memorie, edhe n\u00ebse merren t\u00eb dh\u00ebna p\u00ebr adresat, pasi n\u00eb thirrjen e radh\u00ebs t\u00eb sistemit adresa baz\u00eb e stack-ut do t\u00eb ndryshoj\u00eb. Ndryshe nga zbatimi PaX RANDKSTACK, n\u00eb patch-et e propozuara p\u00ebr p\u00ebrfshirje n\u00eb kernel randomizimi nuk kryhet n\u00eb faz\u00ebn fillestare (cpu_current_top_of_stack), por pas vendosjes s\u00eb struktur\u00ebs pt_regs, \u00e7ka e b\u00ebn t\u00eb pamundur p\u00ebrdorimin e metodave t\u00eb bazuara n\u00eb ptrace p\u00ebr t\u00eb p\u00ebrcaktuar zhvendosjen e randomizuar gjat\u00eb ekzekutimit t\u00eb nj\u00eb thirrjeje t\u00eb sistemit me koh\u00ebzgjatje t\u00eb madhe.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0438\u0441 \u041a\u0443\u043a (Kees Cook), \u0431\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440 Ubuntu Security Team, \u043d\u044b\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043d\u0430\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b Android \u0438 ChromeOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0439 \u0432 \u0441\u0442\u044d\u043a\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041f\u0430\u0442\u0447\u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0442\u0435\u043a \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99808","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jan\u00eb prezantuar patch-e p\u00ebr randomizimin e adresave t\u00eb stack-ut t\u00eb kernel-it Linux gjat\u00eb thirrjeve t\u00eb sistemit | ProHoster","description":"Kees Cook, ish-kryeadministrator i kernel.org dhe drejtues i Ubuntu Security Team, i cili tani punon n\u00eb Google p\u00ebr forcimin e mbrojtjes s\u00eb Android dhe ChromeOS, ka publikuar nj\u00eb grup patch-esh me zbatim t\u00eb randomizimit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavleny-patchi-dlya-randomizaczii-adresov-steka-yadra-linux-pri-sistemnyh-vyzovah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 Linux \u043f\u0440\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u0438\u0441 \u041a\u0443\u043a (Kees Cook), \u0431\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440 Ubuntu Security Team, \u043d\u044b\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043d\u0430\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b Android \u0438 ChromeOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavleny-patchi-dlya-randomizaczii-adresov-steka-yadra-linux-pri-sistemnyh-vyzovah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-15T08:22:45+00:00","article:modified_time":"2021-04-15T08:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99808","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-15 08:37:16","updated":"2022-09-29 02:14:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=99808"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99808\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=99808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=99808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=99808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}