Morero oa Openwall o phatlalalitse ho lokolloa ha kernel module LKRG 0.9.2 (Linux Kernel Runtime Guard), e etselitsoeng ho lemoha le ho thibela litlhaselo le tlōlo ea botšepehi ba mehaho ea kernel. Ka mohlala, mochine o ka sireletsa khahlanong le liphetoho tse sa lumelloeng ho kernel e sebetsang le ho leka ho fetola tumello ea mekhoa ea mosebedisi (ho lemoha tšebeliso ea liketso). Mojule o loketse ka bobeli bakeng sa ho hlophisa ts'ireletso khahlano le ts'ebetso ea bofokoli ba Linux kernel (mohlala, maemong ao ho leng thata ho nchafatsa kernel tsamaisong), le bakeng sa ho sebetsana le litlatsetso bakeng sa bofokoli bo sa tsejoeng. Khoutu ea projeke e ajoa tlasa laesense ea GPLv2. U ka bala ka likarolo tsa ts'ebetsong ea LKRG phatlalatso ea pele ea morero.
Har'a liphetoho tsa mofuta o mocha:
- Ho lumellana ho fanoa ka lithollo tsa Linux ho tloha ho 5.14 ho ea ho 5.16-rc, hammoho le lintlafatso ho LTS kernels 5.4.118+, 4.19.191+ le 4.14.233+.
- Ts'ehetso e kentsoeng bakeng sa litlhophiso tse fapaneng tsa CONFIG_SECCOM.
- Ts'ehetso e ekelitsoeng bakeng sa "nolkrg" kernel parameter ho tima LKRG ka nako ea ho qala.
- Re lokisitse maikutlo a fosahetseng ka lebaka la maemo a morabe ha o ntse o sebetsa ka SECCOMP_FILTER_FLAG_TSYNC.
- E ntlafalitse bokhoni ba ho sebelisa CONFIG_HAVE_STATIC_CALL setting ho Linux kernels 5.10+ ho thibela maemo a morabe ha o laolla li-module tse ling.
- Mabitso a li-module tse koetsoeng ha u sebelisa lkrg.block_modules=1 setting a bolokiloe ka har'a log.
- Ho kenngwa tshebetsong ha maemo a sysctl faeleng /etc/sysctl.d/01-lkrg.conf
- E kenyellelitse faele ea tlhophiso ea dkms.conf bakeng sa tsamaiso ea DKMS (Dynamic Kernel Module Support) e sebelisetsoang ho haha li-module tsa motho oa boraro ka mor'a ho ntlafatsa kernel.
- Ts'ehetso e ntlafalitsoeng le e ntlafalitsoeng bakeng sa meaho ea ntlafatso le litsamaiso tse tsoelang pele tsa kopanyo.
Source: opennet.ru