{"id":105272,"date":"2022-10-09T09:37:09","date_gmt":"2022-10-09T07:37:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov"},"modified":"2022-10-09T09:37:09","modified_gmt":"2022-10-09T07:37:09","slug":"v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","title":{"rendered":"I OpenBSD har \u00e4ndringar antagits f\u00f6r att ge ytterligare skydd f\u00f6r processminnet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Theo de Raadt har lagt till en serie patchar i OpenBSD:s kodbas f\u00f6r att ge ytterligare skydd f\u00f6r processminnet i anv\u00e4ndarrummet. Utvecklarna har f\u00f6reslagit ett nytt systemanrop och en relaterad bibliotekfunktion som heter mimmutable, som m\u00f6jligg\u00f6r l\u00e5sning av \u00e5tkomstr\u00e4ttigheter vid minnesavbildning (memory mappings). N\u00e4r r\u00e4ttigheterna v\u00e4l har l\u00e5sts, till exempel skriv- och k\u00f6rf\u00f6rbud, kan de inte l\u00e4ngre \u00e4ndras genom efterf\u00f6ljande anrop av funktionerna mmap(), mprotect() och munmap(), som vid f\u00f6rs\u00f6k att \u00e4ndra kommer att returnera ett felmeddelande, EPERM. <\/p>\n

F\u00f6r att hantera m\u00f6jligheten att \u00e4ndra r\u00e4ttigheterna f\u00f6r reflekterat minne f\u00f6r objektfiler har en ny sektion Mutable BSS (.openbsd.mutable, Mutable Block Starting Symbol) f\u00f6reslagits, och nya flaggor PF_MUTABLE och UVM_ET_IMMUTABLE har lagts till. L\u00e4nkaren har f\u00e5tt st\u00f6d f\u00f6r att definiera sektionerna \"openbsd.mutable\" och placera dem i ett separat omr\u00e5de i BSS, justerat vid minnessidans gr\u00e4ns. Genom anrop av funktionen mimmutable ges m\u00f6jlighet att markera alla reflekterade omr\u00e5den som of\u00f6r\u00e4nderliga (immutable), f\u00f6rutom sektioner markerade som \"openbsd.mutable\". Denna nya funktion kommer att n\u00e5 anv\u00e4ndarna i versionen OpenBSD 7.3.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (Theo de Raadt) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenBSD \u0441\u0435\u0440\u0438\u044e \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0438\u043c \u043e\u0434\u043d\u043e\u0438\u043c\u0451\u043d\u043d\u0430\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u0447\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f mimmutable, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c (memory mappings). \u041f\u043e\u0441\u043b\u0435 \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0430\u0432\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105272","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 I OpenBSD har \u00e4ndringar antagits f\u00f6r att ge ytterligare skydd f\u00f6r processminnet | ProHoster","description":"Theo de Raadt har lagt till en serie patchar i OpenBSD:s kodbas f\u00f6r att ge ytterligare skydd f\u00f6r processminnet i anv\u00e4ndarrummet.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 | ProHoster","og:description":"\u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (Theo de Raadt) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenBSD \u0441\u0435\u0440\u0438\u044e \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-09T07:37:09+00:00","article:modified_time":"2022-10-09T07:37:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/105272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=105272"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/105272\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=105272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=105272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=105272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}