{"id":99848,"date":"2021-04-15T22:22:47","date_gmt":"2021-04-15T20:22:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2021-04-15T22:22:47","modified_gmt":"2021-04-15T20:22:47","slug":"vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-9-0-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"Dalja e modulit LKRG 0.9.0 p\u00ebr mbrojtjen nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb kernelin Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Projekti Openwall publikoi versionin e modulit t\u00eb kernelit LKRG 0.9.0 (Linux Kernel Runtime Guard), i cili \u00ebsht\u00eb i destinuar p\u00ebr t\u00eb identifikuar dhe bllokuar sulmet dhe shkeljet e integritetit t\u00eb strukturave t\u00eb kernelit. P\u00ebr shembull, moduli mund t\u00eb mbroj\u00eb nga ndryshimet e paautorizuara n\u00eb kernelin aktiv dhe p\u00ebrpjekjet p\u00ebr t\u00eb ndryshuar autorizimet e proceseve t\u00eb p\u00ebrdoruesve (p\u00ebrcaktimi i aplikimit t\u00eb eksploit\u00ebve). Moduli \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm si p\u00ebr organizimin e mbrojtjes nga eksploit\u00ebt e dob\u00ebsive t\u00eb njohura t\u00eb kernelit Linux (p\u00ebr shembull, n\u00eb situatat kur \u00ebsht\u00eb problematike t\u00eb p\u00ebrdit\u00ebsohet kernel-i n\u00eb sistem), ashtu edhe p\u00ebr t\u00eb p\u00ebrballuar eksploit\u00ebt p\u00ebr dob\u00ebsit\u00eb q\u00eb ende nuk jan\u00eb t\u00eb njohura. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2. <\/p>\n
Nd\u00ebr ndryshimet n\u00eb versionin e ri: <\/p>\n
\n
\u00cbsht\u00eb siguruar p\u00ebrputhshm\u00ebria me kernelat Linux nga 5.8 deri n\u00eb 5.12, si dhe me kernelat stabil\u00eb 5.4.87 dhe m\u00eb t\u00eb rinj (t\u00eb cilat p\u00ebrfshijn\u00eb risit\u00eb nga kernelat 5.8 dhe m\u00eb t\u00eb rinj) dhe me kernelat nga versionet RHEL deri n\u00eb 8.4, duke ruajtur mb\u00ebshtetje p\u00ebr t\u00eb gjitha versionet e kaluara t\u00eb kernelave, si\u00e7 jan\u00eb kernelat nga RHEL 7;\n
\u00cbsht\u00eb shtuar mund\u00ebsia e nd\u00ebrtimit t\u00eb LKRG jo vet\u00ebm si modul t\u00eb jasht\u00ebm, por edhe si pjes\u00eb e pem\u00ebs s\u00eb kernelit Linux, p\u00ebrfshir\u00eb integrimin n\u00eb imazhin e kernelit;\n
P\u00ebr testimin e LKRG, \u00ebsht\u00eb shtuar integrimi me out-of-tree dhe mkosi;\n
Repoja e projektit \u00ebsht\u00eb transferuar nga BitBucket n\u00eb GitHub dhe \u00ebsht\u00eb shtuar integrimi i vazhduesh\u00ebm duke p\u00ebrdorur GitHub Actions dhe mkosi, duke p\u00ebrfshir\u00eb verifikimin e nd\u00ebrtimit dhe ngarkimin e LKRG n\u00eb kernelat e l\u00ebshimeve t\u00eb Ubuntu, si dhe n\u00eb nd\u00ebrtimet e p\u00ebrditshme t\u00eb Ubuntu q\u00eb ofrohen nga projekti. <\/ul>\n
N\u00eb k\u00ebt\u00eb version t\u00eb LKRG, disa zhvillues q\u00eb nuk kishin marr\u00eb pjes\u00eb m\u00eb par\u00eb n\u00eb projekt kontribuuan drejtp\u00ebrdrejt (p\u00ebrmes pull requests n\u00eb GitHub). N\u00eb ve\u00e7anti, Boris Lukashev shtoi mund\u00ebsin\u00eb e nd\u00ebrtimit si pjes\u00eb e pem\u00ebs s\u00eb b\u00ebrtham\u00ebs Linux, nd\u00ebrsa Vitaly Chikunov nga ALT Linux - integretimin me mkosi dhe GitHub Actions. <\/p>\n
N\u00eb p\u00ebrgjith\u00ebsi, edhe pse jan\u00eb b\u00ebr\u00eb shtesa t\u00eb r\u00ebnd\u00ebsishme, numri i linjave t\u00eb kodit t\u00eb LKRG paksa zvog\u00eblohet p\u00ebr her\u00eb t\u00eb dyt\u00eb radhazi (m\u00eb par\u00eb ai gjithashtu ishte zvog\u00ebluar midis versioneve 0.8 dhe 0.8.1). <\/p>\n
Aktualisht, paketa me LKRG n\u00eb Arch Linux \u00ebsht\u00eb p\u00ebrdit\u00ebsuar tashm\u00eb n\u00eb versionin 0.9.0, dhe disa paketa t\u00eb tjera p\u00ebrdorin versione t\u00eb fundit git t\u00eb LKRG dhe, p\u00ebr shumic\u00ebn e mund\u00ebsive, do t\u00eb p\u00ebrdit\u00ebsohen gjithashtu n\u00eb versionin 0.9.0 e m\u00eb tej. <\/p>\n
P\u00ebr m\u00eb tep\u00ebr, mund t\u00eb theksohet publikimi i fundit nga zhvilluesit e OS Aurora (modifikimi rus i Sailfish OS) p\u00ebr forcimin e LKRG me ARM TrustZone. <\/p>\n