Sasha Levin oa NVIDIA, ea hlokomelang makala a LTS a kernel ea Linux mme a sebeletsa boto ea boeletsi ea Linux Foundation, o lokisitse sete ea li-patches tse kenyang tšebetsong mokhoa oa killswitch bakeng sa kernel ea Linux. Tšobotsi e sisintsoeng e lumella ho tima ts'ebetso e itseng ea kernel hang-hang. Killswitch e reretsoe ho ba molemo bakeng sa ho thibela bofokoli ba nakoana ho fihlela ntlafatso ea kernel e nang le tokiso e kentsoe.
Killswitch e laoloa ka faele ea "/sys/kernel/security/killswitch/control", e u lumellang ho hlophisa ho kenella ha mehala ea ts'ebetso ea kernel ka mabitso a eona. Mohlala, ho thibela bofokoli ba Copy Fail, eketsa feela taelo ea "engage af_alg_sendmsg -1" faeleng ea taolo ho nolofalletsa ho kenella ha mohala oa ts'ebetso ea af_alg_sendmsg ebe u khutlisa khoutu ea phoso "-1" ho e-na le hoo.
Litlhaku life kapa life tse tšehetsoang ke sistimi e nyane ea kprobes li ka sebelisoa e le mabitso. Bongata ba bofokoli bo tebileng ba kernel bo sa tsoa fumanoa bo teng lits'ebetsong tse nyane tse sebelisoang ke palo e nyane ea basebelisi (mohlala, AF_ALG, ksmbd, nf_tables, vsock, ax25). Bakeng sa basebelisi ba bangata, tšitiso ea tahlehelo ea ts'ebetso mesebetsing e itseng ha e na thuso ea ho sebelisa kernel e nang le bofokoli bo tsejoang, bo sa patjoang ho fihlela patch e kentsoe. Mokhoa oa killswitch o bohlokoa haholo moelelong oa bofokoli ba hona joale ba Dirty Frag, boo ho bona ho ileng ha phatlalatsoa taba pele bothata bo lokisoa kernel.
Source: opennet.ru
