Morero oa Openwall o lokollotse module ea kernel ea LKRG 0.9.0 (Linux Kernel Runtime Guard, e etselitsoeng ho lemoha le ho thibela litlhaselo le tlōlo ea botšepehi ba sebopeho sa kernel. Mohlala, mojule o ka sireletsa khahlanong le liphetoho tse sa lumelloang ho kernel e sebetsang le ho leka ho fetola litokelo tsa lits'ebetso tsa basebelisi (ho lemoha li-exploits). Mojule o loketse ho sireletsa khahlanong le li-exploits tsa bofokoli ba kernel bo tsejoang. Linux (mohlala, maemong ao ho ntlafatsa kernel ea sistimi ho leng thata) le ho loantša mekhoa e mebe bakeng sa bofokoli bo sa tsejoeng. Khoutu ea projeke e abuoa tlas'a laesense ea GPLv2.
Har'a liphetoho tsa mofuta o mocha:
- Ho lumellana le li-kernels hoa netefatsoa Linux ho tloha ho 5.8 ho isa ho 5.12, hammoho le di-kernel tse tsitsitseng tsa 5.4.87 le tse latelang (tse kenyeletsang dikarolo tse ntjha tse tswang ho di-kernel tsa 5.8 le tse latelang) le di-kernel tse tswang ho diphetolelo tsa RHEL ho fihlela ho 8.4, ha di ntse di boloka tshehetso bakeng sa diphetolelo tsohle tsa di-kernel tse neng di tshehetswa pele, tse kang di-kernel tse tswang ho RHEL 7;
- Ho ekelitsoe bokhoni ba ho haha LKRG eseng feela e le mojule oa kantle, empa hape e le karolo ea sefate sa kernel Linux, ho kenyeletsoa le ho kenyelletsoa ha eona setšoantšong sa kernel;
- Tšehetso e ekelitsoeng bakeng sa litlhophiso tse ling tse ngata tsa kernel le sistimi;
- E lokisitse liphoso le mefokolo e 'maloa ea bohlokoa ho LKRG;
- Ho kenngwa tshebetsong ha dikarolo tse ding tsa LKRG ho nolofaditswe haholo;
- Ho entsoe liphetoho ho nolofatsa tšehetso e eketsehileng le ho lokisa liphoso tsa LKRG;
- Bakeng sa ho leka LKRG, ho kenyeletsoa kopanyo le kantle ho sefate le mkosi;
- Sebaka sa polokelo ea projeke se tlositsoe ho tloha ho BitBucket ho ea ho GitHub 'me kopanyo e tsoelang pele e ekelitsoe ho sebelisoa GitHub Actions le mkosi, ho kenyeletsoa le ho hlahloba lihaho tsa LKRG le ho kenya li-kernel tse lokolloang. Ubuntu, hammoho le ho tse fanoeng ke projeke Ubuntu Meaho ea letsatsi le letsatsi ea li-corenue tsa morao-rao.
Bahlahisi ba 'maloa ba neng ba e-so kene morerong ona pele ba kentse letsoho ka kotloloho phetolelong ena ea LKRG (ka likopo tsa ho hula ho GitHub). Ka ho khetheha, Boris Lukashev o ekelitse bokhoni ba ho haha e le karolo ea sefate sa kernel. Linux, le Vitaly Chikunov ho tsoa ho ALT Linux — kopanyo le mkosi le Diketso tsa GitHub.
Ka kakaretso, ho sa tsotellehe keketseho e kgolo, palo ya mela ya LKRG e fokotsehile hanyane ka lekgetlo la bobedi ka tatellano (pele e ne e boetse e fokotsehile pakeng tsa mefuta ya 0.8 le 0.8.1).
Hona jwale, sephutheloana sa LKRG se ho Arch Linux e se e ntlafalitsoe ho ea ho mofuta oa 0.9.0, 'me liphutheloana tse ling tse' maloa li sebelisa mefuta ea morao-rao ea git ea LKRG 'me ho ka etsahala hore e ntlafatsoe ho ea ho mofuta oa 0.9.0 le ho feta haufinyane.
Ho phaella moo, ho bohlokwa ho hlokomela kgatiso ya moraorao e tswang ho bahlahisi ba Aurora OS (phetolelo ya Serussia ya Sailfish OS) mabapi le ho matlafatswa ho ka bang teng ha LKRG ho sebediswa ARM TrustZone.
Bakeng sa tlhahisoleseding e batsi ka LKRG, bona tsebiso ya 0.8 le puisano e ileng ya etsahala ka nako eo.
Source: opennet.ru
