{"id":77154,"date":"2020-04-08T07:41:59","date_gmt":"2020-04-08T05:41:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy"},"modified":"2020-04-08T07:41:59","modified_gmt":"2020-04-08T05:41:59","slug":"microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","title":{"rendered":"Microsoft har f\u00f6reslagit en k\u00e4rnmodul f\u00f6r Linux f\u00f6r att s\u00e4kerst\u00e4lla systemintegritet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Utvecklare fr\u00e5n Microsoft har presenterat<\/a><\/noindex> integritetskontrollmekanism IPE<\/a><\/noindex> (Integrity Policy Enforcement), implementerad som en LSM-modul (Linux Security Module) f\u00f6r Linux-k\u00e4rnan. Modulen m\u00f6jligg\u00f6r att definiera en \u00f6vergripande integritetspolicy f\u00f6r hela systemet, som anger vilka operationer som \u00e4r till\u00e5tna och hur komponenternas \u00e4kthet ska verifieras. Med hj\u00e4lp av IPE kan du specificera vilka k\u00f6rbara filer som f\u00e5r k\u00f6ras och s\u00e4kerst\u00e4lla att dessa filer \u00e4r identiska med versionen som tillhandah\u00e5lls av en p\u00e5litlig k\u00e4lla. Koden \u00e4r \u00f6ppen<\/a><\/noindex> licensieras under MIT.<\/p>\n

IPE syftar till att skapa helt verifierbara system vars integritet bekr\u00e4ftas fr\u00e5n den inledande bootloadern och k\u00e4rnan till de slutliga k\u00f6rbara filerna, konfigurationerna och de laddade filerna. Om en fil \u00e4ndras eller manipuleras kan IPE blockera operationen eller logga faktumet av integritetsbrott. Den f\u00f6reslagna mekanismen kan till\u00e4mpas i firmware f\u00f6r inb\u00e4ddade enheter d\u00e4r all programvara och inst\u00e4llningar specifikt byggs och tillhandah\u00e5lls av \u00e4garen, till exempel i datacenter. Microsoft IPE anv\u00e4nds i utrustning f\u00f6r brandv\u00e4ggar.<\/p>\n

Till skillnad fr\u00e5n andra integritetskontrollsystem, som IMA<\/a><\/noindex>, IPE \u00e4r oberoende av metadata i filsystemet \u2014 alla egenskaper som definierar till\u00e5ten operationer lagras direkt i k\u00e4rnan. F\u00f6r att verifiera integriteten hos filinneh\u00e5ll anv\u00e4nds redan befintliga mekanismer i k\u00e4rnan baserat p\u00e5 kryptografiska hashv\u00e4rden.
\ndm-verity<\/a><\/noindex> eller fs-verity<\/a><\/noindex>.
\nP\u00e5 liknande s\u00e4tt som med SELinux st\u00f6ds tv\u00e5 drifts\u00e4tt, \"permissive\" och \"enforce\". I det f\u00f6rsta l\u00e4get loggas endast problem under kontroller, vilket till exempel kan anv\u00e4ndas f\u00f6r att f\u00f6rhandsgranska testmilj\u00f6n.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 IPE (Integrity Policy Enforcement), \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0432\u0438\u0434\u0435 LSM-\u043c\u043e\u0434\u0443\u043b\u044f (Linux Security Module) \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0443\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0438 \u043a\u0430\u043a\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 IPE \u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u0430\u043a\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-77154","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft har f\u00f6reslagit en k\u00e4rnmodul f\u00f6r Linux f\u00f6r att s\u00e4kerst\u00e4lla systemintegritet | ProHoster","description":"Utvecklare fr\u00e5n Microsoft har presenterat en mekanism f\u00f6r integritetskontroll","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-predlozhil-modul-yadra-linux-dlya-proverki-czelostnosti-sistemy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-08T05:41:59+00:00","article:modified_time":"2020-04-08T05:41:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"77154","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:23:21","updated":"2022-10-02 19:20:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/77154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=77154"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/77154\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=77154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=77154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=77154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}