Emva kweenyanga ezimbini zophuhliso, uLinus Torvalds wayikhulula i-kernel. Linux 6.2. Π‘ΡΠ΅Π΄ΠΈ Π½Π°ΠΈΠ±ΠΎΠ»Π΅Π΅ Π·Π°ΠΌΠ΅ΡΠ½ΡΡ ΠΈΠ·ΠΌΠ΅Π½Π΅Π½ΠΈΠΉ: ΡΠ°Π·ΡΠ΅ΡΡΠ½ ΠΏΡΠΈΡΠΌ ΠΊΠΎΠ΄Π° ΠΏΠΎΠ΄ Π»ΠΈΡΠ΅Π½Π·ΠΈΠ΅ΠΉ Copyleft-Next, ΡΠ»ΡΡΡΠ΅Π½Π° ΡΠ΅Π°Π»ΠΈΠ·Π°ΡΠΈΡ RAID5/6 Π² Btrfs, ΠΏΡΠΎΠ΄ΠΎΠ»ΠΆΠ΅Π½Π° ΠΈΠ½ΡΠ΅Π³ΡΠ°ΡΠΈΡ ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΠΈ ΡΠ·ΡΠΊΠ° Rust, ΡΠ½ΠΈΠΆΠ΅Π½Ρ Π½Π°ΠΊΠ»Π°Π΄Π½ΡΠ΅ ΡΠ°ΡΡ ΠΎΠ΄Ρ ΠΏΡΠΈ Π·Π°ΡΠΈΡΠ΅ ΠΎΡ Π°ΡΠ°ΠΊ Retbleed, Π΄ΠΎΠ±Π°Π²Π»Π΅Π½Π° Π²ΠΎΠ·ΠΌΠΎΠΆΠ½ΠΎΡΡΡ ΡΠ΅Π³ΡΠ»ΠΈΡΠΎΠ²Π°Π½ΠΈΡ ΠΏΠΎΡΡΠ΅Π±Π»Π΅Π½ΠΈΡ ΠΏΠ°ΠΌΡΡΠΈ ΠΏΡΠΈ ΠΎΠ±ΡΠ°ΡΠ½ΠΎΠΉ Π·Π°ΠΏΠΈΡΠΈ, Π΄Π»Ρ TCP Π΄ΠΎΠ±Π°Π²Π»Π΅Π½ ΠΌΠ΅Ρ Π°Π½ΠΈΠ·ΠΌ Π±Π°Π»Π°Π½ΡΠΈΡΠΎΠ²ΠΊΠΈ PLB (Protective Load Balancing), Π΄ΠΎΠ±Π°Π²Π»Π΅Π½ Π³ΠΈΠ±ΡΠΈΠ΄Π½ΡΠΉ ΠΌΠ΅Ρ Π°Π½ΠΈΠ·ΠΌ Π·Π°ΡΠΈΡΡ ΠΏΠΎΡΠΎΠΊΠ° Π²ΡΠΏΠΎΠ»Π½Π΅Π½ΠΈΡ ΠΊΠΎΠΌΠ°Π½Π΄ (FineIBT), Π² BPF ΠΏΠΎΡΠ²ΠΈΠ»Π°ΡΡ Π²ΠΎΠ·ΠΌΠΎΠΆΠ½ΠΎΡΡΡ ΠΎΠΏΡΠ΅Π΄Π΅Π»Π΅Π½ΠΈΡ ΡΠΎΠ±ΡΡΠ²Π΅Π½Π½ΡΡ ΠΎΠ±ΡΠ΅ΠΊΡΠΎΠ² ΠΈ ΡΡΡΡΠΊΡΡΡ Π΄Π°Π½Π½ΡΡ , Π² ΡΠΎΡΡΠ°Π² Π²ΠΊΠ»ΡΡΠ΅Π½Π° ΡΡΠΈΠ»ΠΈΡΠ° rv (Runtime Verification), ΡΠ½ΠΈΠΆΠ΅Π½ΠΎ ΡΠ½Π΅ΡΠ³ΠΎΠΏΠΎΡΡΠ΅Π±Π»Π΅Π½ΠΈΠ΅ Π² ΡΠ΅Π°Π»ΠΈΠ·Π°ΡΠΈΠΈ Π±Π»ΠΎΠΊΠΈΡΠΎΠ²ΠΎΠΊ RCU.
Inguqulelo entsha ibandakanya ukulungiswa kwe-16843 ukusuka kubaphuhlisi be-2178, ubungakanani be-patch yi-62 MB (utshintsho oluchaphazelekayo lweefayile ze-14108, i-730195 imigca yekhowudi yongezwa, i-409485 imigca yacinywa). Ngokumalunga ne-42% yazo zonke iinguqu ezifakwe kwi-6.2 zihambelana nabaqhubi besixhobo, malunga ne-16% yeenguqu zihambelana nokuhlaziya ikhowudi ethile kwi-architectures ye-hardware, i-12% inxulumene ne-stack yenethiwekhi, i-4% inxulumene neenkqubo zefayile, kunye ne-3% zinxulumene ne-kernel yangaphakathi yendlela esezantsi.
Izinto ezintsha eziphambili kwi-kernel 6.2:
- Iinkonzo zememori kunye nenkqubo
- Kuvumelekile ukubandakanya kwikhowudi yekernel kunye notshintsho olubonelelwe phantsi kwelayisensi ye-Copyleft-Elandelayo 0.3.1. Ilayisensi ye-Copyleft-Elandelayo yenziwe ngomnye wababhali be-GPLv3 kwaye ihambelana ngokupheleleyo nelayisensi ye-GPLv2, njengoko ingqinwe ngamagqwetha avela kwi-SUSE kunye ne-Red Hat. Xa kuthelekiswa ne-GPLv2, ilayisenisi ye-Copyleft-Elandelayo ixinene kakhulu kwaye kulula ukuyiqonda (inxalenye yentshayelelo kunye nokukhankanywa kwezinto eziyalelweyo zisusiwe), ichaza ixesha kunye nenkqubo yokuphelisa ulwaphulo-mthetho, kwaye isusa ngokuzenzekelayo iimfuno ze-copyleft zesoftware ephelelwe lixesha. uneminyaka engaphezu kwe-15 ubudala.
I-Copyleft-Okulandelayo ikwaqulathe igatya lesibonelelo sobuxhakaxhaka bobunini, abathi, ngokungafaniyo ne-GPLv2, yenze le layisensi ihambelane nelayisenisi ye-Apache 2.0. Ukuqinisekisa ukuhambelana okupheleleyo ne-GPLv2, i-Copyleft-Elandelayo ichaza ngokucacileyo ukuba umsebenzi ophuma kwi-derivative unokubonelelwa phantsi kwelayisensi ye-GPL ukongeza kwilayisenisi ye-Copyleft-Elandelayo.
- Ulwakhiwo lubandakanya "i-rv" eluncedo, ebonelela nge-interface yokusebenzisana ukusuka kwindawo yomsebenzisi kunye nabaphathi be-RV (i-Runtime Verification) yenkqubo ephantsi, eyenzelwe ukujonga ukusebenza okuchanekileyo kwiinkqubo ezinokwethenjelwa kakhulu eziqinisekisa ukungabikho kokungaphumeleli. Uqinisekiso lwenziwa ngexesha lokuqhuba ngokuqhoboshela izibambi kumanqaku okulandelela ajonga eyona nkqubela-phambili yophumezo ngokuchasene nemodeli emiselwe kwangaphambili yereferensi yomatshini echaza indlela yokuziphatha elindelekileyo yesistim.
- Isixhobo se-zRAM, esivumela ulwahlulo lokutshintsha ukuba lugcinwe kwimemori kwifom ecinezelweyo (isixhobo sebhloko senziwe kwinkumbulo apho ukutshintshwa kwenziwa ngoxinzelelo), sisebenzisa ukukwazi ukupakisha kwakhona amaphepha usebenzisa enye ialgorithm ukufezekisa inqanaba eliphezulu. yoxinzelelo. Umbono ophambili kukubonelela ngokhetho phakathi kwe-algorithms ezininzi (lzo, lzo-rle, lz4, lz4hc, zstd), banikezela ngolungelelwaniso lwabo phakathi kwesantya soxinzelelo/uxinzelelo kunye nenqanaba loxinzelelo, okanye ngokwelona nqanaba liphezulu kwiimeko ezikhethekileyo (umzekelo, ukucinezela okukhulu amaphepha enkumbulo).
- Yongeza "iommufd" API yokulawula inkqubo yokulawula imemori ye-I / O - IOMMU (I/O Memory-Management Unit) ukusuka kwindawo yomsebenzisi. I-API entsha yenza kube lula ukulawula iitafile zephepha lememori ye-I / O usebenzisa iinkcazo zefayile.
- I-BPF ibonelela ngesakhono sokwenza iintlobo, uchaze izinto zakho, wakhe owakho ulawulo lwezinto, kwaye udale ngokuguquguqukayo ulwakhiwo lwedatha yakho, njengoluhlu oludityanisiweyo. Kwiiprogram ze-BPF eziya kwimowudi yokulala (BPF_F_SLEEPABLE), inkxaso ye-bpf_rcu_read_{,un}lock() izitshixo yongeziwe. Iphunyeziwe inkxaso yokugcina task_struct izinto. Kongezwe uhlobo lwemephu BPF_MAP_TYPE_CGRP_STORAGE, ibonelela ngogcino lwasekuhlaleni lwamaqela.
- ΠΠ»Ρ ΠΌΠ΅Ρ Π°Π½ΠΈΠ·ΠΌΠ° Π±Π»ΠΎΠΊΠΈΡΠΎΠ²ΠΎΠΊ RCU (Read-copy-update) ΡΠ΅Π°Π»ΠΈΠ·ΠΎΠ²Π°Π½ ΠΎΠΏΡΠΈΠΎΠ½Π°Π»ΡΠ½ΡΠΉ ΠΌΠ΅Ρ Π°Π½ΠΈΠ·ΠΌ Β«Π»Π΅Π½ΠΈΠ²ΡΡ Β» callback-Π²ΡΠ·ΠΎΠ²ΠΎΠ², Π² ΠΊΠΎΡΠΎΡΠΎΠΌ ΠΏΠΎ ΡΠ°ΠΉΠΌΠ΅ΡΡ Π² ΠΏΠ°ΠΊΠ΅ΡΠ½ΠΎΠΌ ΡΠ΅ΠΆΠΈΠΌΠ΅ ΡΠ°Π·ΠΎΠΌ ΠΎΠ±ΡΠ°Π±Π°ΡΡΠ²Π°Π΅ΡΡΡ Π½Π΅ΡΠΊΠΎΠ»ΡΠΊΠΎ callback-Π²ΡΠ·ΠΎΠ²ΠΎΠ². ΠΡΠΈΠΌΠ΅Π½Π΅Π½ΠΈΠ΅ ΠΏΡΠ΅Π΄Π»ΠΎΠΆΠ΅Π½Π½ΠΎΠΉ ΠΎΠΏΡΠΈΠΌΠΈΠ·Π°ΡΠΈΠΈ ΠΏΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ Π½Π° 5-10% ΡΠ½ΠΈΠ·ΠΈΡΡ ΡΠ½Π΅Π³ΡΠΎΠΏΠΎΡΡΠ΅Π±Π»Π΅Π½ΠΈΠ΅ Π½Π° ΡΡΡΡΠΎΠΉΡΡΠ²Π°Ρ Android ΠΈ ChromeOS Π·Π° ΡΡΡΡ ΠΎΡΠΊΠ»Π°Π΄ΡΠ²Π°Π½ΠΈΡ RCU-Π·Π°ΠΏΡΠΎΡΠΎΠ² Π²ΠΎ Π²ΡΠ΅ΠΌΡ ΠΏΡΠΎΡΡΠΎΡ ΠΈΠ»ΠΈ Π½ΠΈΠ·ΠΊΠΎΠΉ Π½Π°Π³ΡΡΠ·ΠΊΠΈ Π½Π° ΡΠΈΡΡΠ΅ΠΌΡ.
- Yongezwa i-sysctl split_lock_mitigate ukulawula indlela inkqubo esabela ngayo xa ibona ukutshixa okuqhekekayo okwenzekayo xa ufikelela kwidatha engalungelelanisiweyo kwimemori ngenxa yedatha ewela imigca emibini ye-cache ye-CPU xa uqhuba umyalelo we-athomu. Izithintelo ezinjalo zikhokelela ekunciphiseni okukhulu ekusebenzeni. Ukucwangcisa u-split_lock_mitigate ukuya ku-0 kuphela kukhupha isilumkiso sokuba kukho ingxaki, ngelixa ukusetha u-split_lock_mitigate ukuya ku-1 kubangela inkqubo ebangele ukuba i-lock icothiswe ukugcina ukusebenza kwayo yonke inkqubo.
- Uzalisekiso olutsha lwe-qspinlock lucetyiwe kuyilo lwePowerPC, olubonisa ukusebenza okuphezulu kunye nokusombulula ezinye iingxaki zokutshixa ezivela kwiimeko ezizodwa.
- I-MSI (Isiphazamiso esiSayineyo soMyalezo) ikhowudi yokuphatha ephazamisayo iye yaphinda yasetyenziswa, isusa iingxaki eziqokelelweyo zezakhiwo kunye nokongeza inkxaso yokubophelela abaphathi ngabanye kwizixhobo ezahlukeneyo.
- Kwiinkqubo ezisekelwe kwi-LoongArch imiyalelo yokubeka i-architecture esetyenziswe kwi-Loongson 3 5000 processors kunye nokuphumeza i-RISC ISA entsha, efana ne-MIPS kunye ne-RISC-V, ukuxhaswa kwe-ftrace, ukukhuselwa kwe-stack, ukulala kunye neendlela zokulinda ziphunyeziwe.
- Ukukwazi ukwabela amagama kwiindawo zememori engaziwayo ekwabelwanayo kuyo kunikezelwe (ngaphambili amagama ebenokwabelwa kuphela imemori yabucala engaziwa eyabelwe inkqubo ethile).
- Kongezwe ipharamitha yomgca womyalelo wekernel entsha βtrace_triggerβ, eyilelwe ukuvula umkhondo osetyenziselwa ukubophelela imiyalelo enemiqathango ebizwa xa kusenziwa uqwalaselo lolawulo (umzekelo, trace_trigger=βsched_switch.stacktrace ukuba prev_state == 2β³).
- Iimfuno zenguqulelo yephakheji ye-binutils zandisiwe. Ukwakha i-kernel ngoku kufuna ubuncinci be-binutils 2.25.
- Xa ufowunela u-exec(), ukukwazi ukubeka inkqubo kwindawo yegama, apho ixesha lahlukile kwixesha lenkqubo, yongezwe.
- ΠΠ°ΡΠ°Π»ΡΡ ΠΏΠ΅ΡΠ΅Π½ΠΎΡ ΠΈΠ· Π²Π΅ΡΠΊΠΈ Rust-for-Linux Π΄ΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½ΠΎΠΉ ΡΡΠ½ΠΊΡΠΈΠΎΠ½Π°Π»ΡΠ½ΠΎΡΡΠΈ, ΡΠ²ΡΠ·Π°Π½Π½ΠΎΠΉ Ρ ΠΈΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°Π½ΠΈΠ΅ΠΌ ΡΠ·ΡΠΊΠ° Rust Π² ΠΊΠ°ΡΠ΅ΡΡΠ²Π΅ Π²ΡΠΎΡΠΎΠ³ΠΎ ΡΠ·ΡΠΊΠ° Π΄Π»Ρ ΡΠ°Π·ΡΠ°Π±ΠΎΡΠΊΠΈ Π΄ΡΠ°ΠΉΠ²Π΅ΡΠΎΠ² ΠΈ ΠΌΠΎΠ΄ΡΠ»Π΅ΠΉ ΡΠ΄ΡΠ°. ΠΠΎΠ΄Π΄Π΅ΡΠΆΠΊΠ° Rust Π½Π΅Π°ΠΊΡΠΈΠ²Π½Π° ΠΏΠΎ ΡΠΌΠΎΠ»ΡΠ°Π½ΠΈΡ ΠΈ Π½Π΅ ΠΏΡΠΈΠ²ΠΎΠ΄ΠΈΡ ΠΊ Π²ΠΊΠ»ΡΡΠ΅Π½ΠΈΡ Rust Π² ΡΠΈΡΠ»ΠΎ ΠΎΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΡΡ ΡΠ±ΠΎΡΠΎΡΠ½ΡΡ Π·Π°Π²ΠΈΡΠΈΠΌΠΎΡΡΠ΅ΠΉ ΠΊ ΡΠ΄ΡΡ. ΠΡΠ΅Π΄Π»ΠΎΠΆΠ΅Π½Π½Π°Ρ Π² ΠΏΡΠΎΡΠ»ΠΎΠΌ Π²ΡΠΏΡΡΠΊΠ΅ Π±Π°Π·ΠΎΠ²Π°Ρ ΡΡΠ½ΠΊΡΠΈΠΎΠ½Π°Π»ΡΠ½ΠΎΡΡΡ ΡΠ°ΡΡΠΈΡΠ΅Π½Π° Π²ΠΎΠ·ΠΌΠΎΠΆΠ½ΠΎΡΡΡΠΌΠΈ Π΄Π»Ρ ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΈ Π½ΠΈΠ·ΠΊΠΎΡΡΠΎΠ²Π½Π΅Π²ΠΎΠ³ΠΎ ΠΊΠΎΠ΄Π°, ΡΠ°ΠΊΠΈΡ ΠΊΠ°ΠΊ ΡΠΈΠΏ Vec ΠΈ ΠΌΠ°ΠΊΡΠΎΡΡ pr_debug!(), pr_cont!() ΠΈ pr_alert!(), Π° ΡΠ°ΠΊΠΆΠ΅ ΠΏΡΠΎΡΠ΅Π΄ΡΡΠ½ΡΠΉ ΠΌΠ°ΠΊΡΠΎΡ Β«#[vtable]Β», ΡΠΏΡΠΎΡΠ°ΡΡΠΈΠΉ ΡΠ°Π±ΠΎΡΡ Ρ ΡΠ°Π±Π»ΠΈΡΠ°ΠΌΠΈ ΡΠΊΠ°Π·Π°ΡΠ΅Π»Π΅ΠΉ Π½Π° ΡΡΠ½ΠΊΡΠΈΠΈ. ΠΠΎΠ±Π°Π²Π»Π΅Π½ΠΈΠ΅ Π²ΡΡΠΎΠΊΠΎΡΡΠΎΠ²Π½Π΅Π²ΡΡ Rust-ΠΎΠ±Π²ΡΠ·ΠΎΠΊ Π½Π°Π΄ ΠΏΠΎΠ΄ΡΠΈΡΡΠ΅ΠΌΠ°ΠΌΠΈ ΡΠ΄ΡΠ°, ΠΊΠΎΡΠΎΡΡΠ΅ ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡ ΡΠΎΠ·Π΄Π°Π²Π°ΡΡ ΠΏΠΎΠ»Π½ΠΎΡΠ΅Π½Π½ΡΠ΅ Π΄ΡΠ°ΠΉΠ²Π΅ΡΡ Π½Π° Rust, ΠΎΠΆΠΈΠ΄Π°Π΅ΡΡΡ Π² ΡΠ»Π΅Π΄ΡΡΡΠΈΡ Π²ΡΠΏΡΡΠΊΠ°Ρ .
- Uhlobo lwe "char" olusetyenziswe kwikernel ngoku lubhengezwe ukuba alusayinwanga ngokwendalo kulo lonke ulwakhiwo.
- Indlela yokwabiwa kwememori ye-slab - i-SLOB (i-slab allocator), eyenzelwe iinkqubo ezinomlinganiselo omncinci wememori, ibhengezwe ukuba iphelelwe lixesha. Esikhundleni se-SLOB, phantsi kweemeko eziqhelekileyo kuyacetyiswa ukuba usebenzise i-SLUB okanye i-SLAB. Kwiinkqubo ezinememori encinci, kuyacetyiswa ukuba usebenzise i-SLUB kwimo ye-SLUB_TINY.
- Kuvumelekile ukubandakanya kwikhowudi yekernel kunye notshintsho olubonelelwe phantsi kwelayisensi ye-Copyleft-Elandelayo 0.3.1. Ilayisensi ye-Copyleft-Elandelayo yenziwe ngomnye wababhali be-GPLv3 kwaye ihambelana ngokupheleleyo nelayisensi ye-GPLv2, njengoko ingqinwe ngamagqwetha avela kwi-SUSE kunye ne-Red Hat. Xa kuthelekiswa ne-GPLv2, ilayisenisi ye-Copyleft-Elandelayo ixinene kakhulu kwaye kulula ukuyiqonda (inxalenye yentshayelelo kunye nokukhankanywa kwezinto eziyalelweyo zisusiwe), ichaza ixesha kunye nenkqubo yokuphelisa ulwaphulo-mthetho, kwaye isusa ngokuzenzekelayo iimfuno ze-copyleft zesoftware ephelelwe lixesha. uneminyaka engaphezu kwe-15 ubudala.
- Inkqubo engaphantsi kweDisk, I/O kunye neeNkqubo zeFayile
- Uphuculo lwenziwe kwi-Btrfs ejoliswe ekulungiseni ingxaki "yokubhala" kwi-RAID 5 / 6 ukuphunyezwa (inzame yokubuyisela i-RAID ukuba ukuphazamiseka kwenzeka ngexesha lokubhala kwaye akunakwenzeka ukuqonda ukuba yiyiphi ibhloko apho i-RAID ibhalwe ngokuchanekileyo, enokukhokelela ekutshatyalalisweni kwebhloko, ehambelana neebhloko ezibhalwe phantsi). Ukongeza, ii-SSD ngoku zenzekela ngokuzenzekelayo ukusebenza kokulahla okungahambelaniyo ngokungagqibekanga xa kunokwenzeka, ukuvumela ukuphuculwa komsebenzi ngenxa yokwahlulahlula ngokufanelekileyo imisebenzi yokulahla kwimigca kunye nokuqhutyelwa komgca ngumqhubekekisi ongasemva. Ukusebenza okuphuculweyo kokuthumela kunye nokusebenza kwe-lseek, kunye neFIEMAP ioctl.
- Izakhono zokulawula ukubhala okumisiweyo (i-writeback, ukugcinwa kwemvelaphi yedatha etshintshileyo) kwizixhobo zebhloko zandisiwe. Kwezinye iimeko, njengaxa usebenzisa izixhobo zebhlokhi yenethiwekhi okanye ii-USB drives, ukubhala okuvila kunokubangela ukusetyenziswa kwe-RAM enkulu. Ukuze ulawule ukuziphatha kwevila ubhala kwaye ugcine ubungakanani bekhasi le-cache ngaphakathi kwemida ethile, iiparameters ezintsha ezingqongqo, i-min_bytes, max_bytes, min_ratio_fine kunye ne-max_ratio_fine ziye zaziswa kwi-sysfs (/sys/class/bdi/).
- Inkqubo yefayile ye-F2FS isebenzisa i-atomic esikhundleni se-ioctl yokusebenza, ekuvumela ukuba ubhale idatha kwifayile ngaphakathi komsebenzi omnye we-athomu. I-F2FS yongeza i-cache yobungakanani bebhloko ukunceda ukuchonga idatha esetyenziswa ngokusebenzayo okanye idatha engakhange ifikelelwe ixesha elide.
- Kwi-ext4 FS kuphela izilungiso zeempazamo eziqatshelweyo.
- Π ΡΠ°ΠΉΠ»ΠΎΠ²ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΠ΅ ntfs3 ΠΏΡΠ΅Π΄Π»ΠΎΠΆΠ΅Π½ΠΎ Π½Π΅ΡΠΊΠΎΠ»ΡΠΊΠΎ Π½ΠΎΠ²ΡΡ ΠΎΠΏΡΠΈΠΉ ΠΌΠΎΠ½ΡΠΈΡΠΎΠ²Π°Π½ΠΈΡ: Β«nocaseΒ» Π΄Π»Ρ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ ΡΡΡΡΠΎΠΌ ΡΠ΅Π³ΠΈΡΡΡΠ° ΡΠΈΠΌΠ²ΠΎΠ»ΠΎΠ² Π² ΠΈΠΌΠ΅Π½Π°Ρ ΡΠ°ΠΉΠ»ΠΎΠ² ΠΈ Π΄ΠΈΡΠ΅ΠΊΡΠΎΡΠΈΠΉ; windows_name Π΄Π»Ρ Π·Π°ΠΏΡΠ΅ΡΠ° ΡΠΎΠ·Π΄Π°Π½ΠΈΡ ΠΈΠΌΡΠ½ ΡΠ°ΠΉΠ»ΠΎΠ², ΡΠΎΠ΄Π΅ΡΠΆΠ°ΡΠΈΡ ΡΠΈΠΌΠ²ΠΎΠ»Ρ, Π½Π΅Π΄ΠΎΠΏΡΡΡΠΈΠΌΡΠ΅ Π΄Π»Ρ ΠΠ‘ Windows; hide_dot_files Π΄Π»Ρ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Π½Π°Π·Π½Π°ΡΠ΅Π½ΠΈΠ΅ΠΌ ΠΌΠ΅ΡΠΊΠΈ ΡΠΊΡΡΡΡΡ ΡΠ°ΠΉΠ»ΠΎΠ² Π΄Π»Ρ ΡΠ°ΠΉΠ»ΠΎΠ², Π½Π°ΡΠΈΠ½Π°ΡΡΠΈΡ ΡΡ Π½Π° ΡΠΎΡΠΊΡ.
- Inkqubo yefayile ye-Squashfs isebenzisa "imisonto=" ukhetho lokunyuka, elikuvumela ukuba uchaze inani lemisonto ukufanisa imisebenzi yoxinzelelo. I-squashfs yazisa kwakhona ukukwazi ukwenza imephu ye-ID yomsebenzisi kwiinkqubo zefayile ezinyusiweyo, ezisetyenziselwa ukufanisa iifayile zomsebenzisi othile kwisahlulo sangaphandle esinyusiweyo kunye nomnye umsebenzisi kwinkqubo yangoku.
- Ukuphunyezwa koluhlu lolawulo lofikelelo lwePOSIX (POSIX ACLs) luphinde lwasetyenziswa. Ukuphunyezwa okutsha kuphelisa imiba yoyilo, kwenza lula ukugcinwa kwekhowudi, kwaye kuzisa iindidi zedatha ezikhuselekileyo.
- I-subsystem ye-fscrypt, esetyenziselwa uguqulelo olucacileyo lweefayile kunye nezalathisi, yongeze inkxaso ye-SM4 encryption algorithm (i-Chinese standard GB / T 32907-2016).
- Ikhono lokwakha i-kernel ngaphandle kwenkxaso ye-NFSv2 inikezelwe (kwixesha elizayo baceba ukuyeka ngokupheleleyo ukuxhasa i-NFSv2).
- Umbutho wokujonga amalungelo okufikelela kwizixhobo zeNVMe utshintshiwe. Inika amandla okufunda nokubhala kwisixhobo seNVMe ukuba inkqubo yokubhala inokufikelela kwifayile enikezelweyo yesixhobo (ngaphambili inkqubo kwakufuneka ibenemvume yeCAP_SYS_ADMIN).
- Kususwe umqhubi wephakheji we-CD/DVD, eyayekiswa ukusebenza ngo-2016.
- Ukwenziwa kweVirtual kunye noKhuseleko
- Indlela entsha yokukhusela kwi-Retbleed vulnerability iphunyeziwe kwi-Intel kunye ne-AMD CPUs, kusetyenziswa ukulandelela ubunzulu befowuni, okungacothiyo umsebenzi njengokhuseleko olukhoyo ngaphambili kwi-Retbleed. Ukwenza imo entsha isebenze, iparameter yomyalelo wekernel "retbleed=stuff" iye yacetywa.
- Kongezwe i-hybrid FineIBT yokukhusela umyalelo wokuhamba kwendlela yokukhusela, ukudibanisa ukusetyenziswa kwe-hardware ye-Intel IBT (i-Indirect Branch Tracking) imiyalelo kunye nokukhusela isofthiwe ye-kCFI (i-kernel Control Flow Integrity) ukuvala ukuphulwa komyalelo wesiqhelo wophumezo (ulawulo lokuhamba) njengesiphumo sokusetyenziswa. yezenzo eziguqula izikhombisi ezigcinwe kwinkumbulo kwimisebenzi. I-FineIBT ivumela ukuphunyezwa ngokutsiba okungathanga ngqo kuphela kwimeko yokutsiba ukuya kumyalelo we-ENDBR, obekwe ekuqaleni komsebenzi. Ukongeza, ngothelekiso kunye nomatshini we-kCFI, iihashes ziye zikhangelwe ukuqinisekisa ukungaguquki kwezikhombisi.
- Izithintelo ezongeziweyo ukuthintela ukuhlaselwa okuxhaphaza isizukulwana se "oops" ithi, emva kokuba imisebenzi eyingxaki igqitywe kwaye urhulumente ubuyiselwe ngaphandle kokumisa inkqubo. Ngenani elikhulu kakhulu leefowuni eziya kwimeko ye-"oops", i-counter counterflow overflow iyenzeka (i-refcount), evumela ukusetyenziswa kobuthathaka okubangelwa yi-NULL pointer dereferences. Ukukhusela uhlaselo olunjalo, umda wongezwe kwi-kernel kwinani eliphezulu lezinto ezibangela "oops", emva kokudlula apho i-kernel iya kuqalisa ukutshintshela kwi-"panic" state elandelwa yi-reboot, engayi kuvumela ukufezekisa. inani lophindaphindo olufunekayo ukuze kuphuphume ubalo kwakhona. Ngokungagqibekanga, umda umiselwe kwi-10 lamawaka "oops", kodwa ukuba unqwenela, unokutshintshwa nge-oops_limit parameter.
- Iparamitha yoqwalaselo eyongeziweyo LEGACY_TIOCSTI kunye ne-sysctl legacy_tiocsti ukukhubaza ukukwazi ukubeka idatha kwi-terminal usebenzisa ioctl TIOCSTI, ekubeni lo msebenzi unokusetyenziselwa ukufaka endaweni yoonobumba abangenasizathu kwi-terminal igalelo buffer kunye nokulinganisa igalelo lomsebenzisi.
- Uhlobo olutsha lwesakhiwo sangaphakathi, i-encoded_page, iyandululwa, apho amasuntswana asezantsi esalathisi asetyenziselwa ukugcina ulwazi olongezelelweyo olusetyenziselwa ukukhusela ngokuchasene nempazamo yesalathiso (ukuba isalathisi siyafuneka ngokwenene, la masuntswana ongezelelweyo kufuneka acocwe kuqala) .
- Kwiqonga le-ARM64, kwinqanaba le-boot, kuyenzeka ukuba wenze okanye ukhubaze ukuphunyezwa kwesoftware ye-Shadow Stack mechanism, esetyenziselwa ukukhusela ekubhaleni ngaphezulu idilesi yokubuyisela emsebenzini xa kukho ukuphuphuma kwebuffer kwisitaki ( ingundoqo yokukhusela kukugcina idilesi yokubuyisela kwi-stack "isithunzi" esahlukileyo emva kokuba ulawulo ludluliselwe kumsebenzi kunye nokubuyisela idilesi enikeziweyo ngaphambi kokuphuma emsebenzini). Inkxaso ye-hardware kunye nokuphunyezwa kwesoftware ye-Shadow Stack kwindibano yekernel enye ikuvumela ukuba usebenzise i-kernel enye kwiinkqubo ezahlukeneyo ze-ARM, kungakhathaliseki ukuba yinkxaso yabo kwimiyalelo yokuqinisekisa isalathisi. Ukufakwa kokuphunyezwa kwesoftware kuqhutyelwa ngokufakela indawo yemiyalelo efunekayo kwikhowudi ngexesha lokulayisha.
- Inkxaso eyongeziweyo yokusebenzisa indlela yesaziso sokuphuma engavumelaniyo kwiiprosesa ze-Intel, ezivumela ukukhangela uhlaselo lwenyathelo elinye kwikhowudi eyenziwe kwii-SGX enclaves.
- Iseti yemisebenzi icetywayo evumela i-hypervisor ukuba ixhase izicelo ezivela kwi-Intel TDX (i-Trusted Domain Extensions) iinkqubo zeendwendwe.
- Isetingi yokwakha i-kernel RANDOM_TRUST_BOOTLOADER kunye ne-RANDOM_TRUST_CPU zisusiwe, ngokuthanda umgca womyalelo ohambelanayo iinketho random.trust_bootloader kunye random.trust_cpu.
- I-Landlock mechanism, ekuvumela ukuba unciphise intsebenziswano yeqela leenkqubo kunye nokusingqongileyo kwangaphandle, yongeze inkxaso ye-LANDLOCK_ACCESS_FS_TRUNCATE iflegi, eyenza kube lula ukulawula ukuphunyezwa kwemisebenzi yokunqunyulwa kweefayile.
- Inkqubo engaphantsi yothungelwano
- Kwi-IPv6, inkxaso ye-PLB (i-Protective Load Balancing) yongezwe, indlela yokulinganisa umthwalo phakathi kwamakhonkco enethiwekhi ejoliswe ekunciphiseni amanqaku okulayisha ngaphezulu kwiiswitshi zamaziko edatha. Ngokutshintsha i-IPv6 Flow Label, i-PLB itshintsha ngokungenamkhethe iindlela zepakethe ukulinganisa umthwalo kwii-switch port. Ukunciphisa ukucwangcisa kwakhona ipakethi, lo msebenzi wenziwa emva kwamaxesha okungasebenzi xa kunokwenzeka. Ukusetyenziswa kwe-PLB kumaziko edatha ye-Google kuye kwanciphisa ukungalingani komthwalo kwii-ports zokutshintsha ngomyinge we-60%, ukunciphisa ukulahleka kwepakethi nge-33%, kunye nokunciphisa i-latency nge-20%.
- Umqhubi wongeziweyo wezixhobo zeMediaTek ezixhasa i-Wi-Fi 7 (802.11be).
- Inkxaso eyongeziweyo ye-800-gigabit links.
- Yongezwe ukukwazi ukuthiya ngokutsha ujongano lwenethiwekhi kubhabho, ngaphandle kokumisa umsebenzi.
- Ukukhankanywa kwedilesi ye-IP apho ipakethe ifike yongezwe kwimiyalezo yelog malunga nokhukhula lweSYN.
- Kwi-UDP, ukukwazi ukusebenzisa iitafile ze-hash ezahlukileyo kwiindawo zamagama ezahlukeneyo zothungelwano ziphunyeziwe.
- Kwiibhulorho zenethiwekhi, inkxaso ye-MAB (i-MAC Authentication Bypass) indlela yokuqinisekisa iphunyeziwe.
- Kwiprotocol ye-CAN (CAN_RAW), inkxaso ye-SO_MARK yemowudi yesokethi iphunyeziwe ukuze kufakwe izihluzo zetrafikhi ezisekelwe kwi-fwmark.
- ipset iphumeza i parameter entsha ye bitmask ekuvumela ukuba usete imaski esekwe kumasuntswana angenasizathu kwidilesi ye IP (umzekelo, "ipset create set1 hash:ip bitmask 255.128.255.0").
- Inkxaso eyongeziweyo yokusetyenzwa kweeheader zangaphakathi ngaphakathi kweepakethi ezichotshelwe kwi-nf_tables.
- Izixhobo
- Inkqubo engaphantsi kwe-"accel" yongezwa kunye nokuphunyezwa kwesakhelo se-accelerators ye-computational, enokuthi ibonelelwe mhlawumbi ngendlela ye-ASICs nganye okanye ngendlela yeebhloko ze-IP ngaphakathi kwe-SoC kunye ne-GPU. Ezi zikhawulezayo zijolise ikakhulu ekukhawuleziseni isisombululo seengxaki zokufunda koomatshini.
- Umqhubi we-amdgpu uquka inkxaso ye-GC, i-PSP, i-SMU kunye ne-NBIO IP components. Kwiinkqubo ze-ARM64, inkxaso ye-DCN (Display Core Next) iphunyeziwe. Ukuphunyezwa kwemveliso yesikrini ekhuselweyo isusiwe ekusebenziseni i-DCN10 ukuya kwi-DCN21 kwaye ngoku ingasetyenziselwa xa udibanisa izikrini ezininzi.
- Umqhubi we-i915 (Intel) uzinzile ukuxhaswa kwamakhadi evidiyo e-Intel Arc (DG2 / Alchemist) ecacileyo.
- Umqhubi weNouveau uxhasa i-NVIDIA GA102 (RTX 30) GPUs esekwe kuyilo lweAmpere. Kumakhadi e-nva3 (GT215), ukukwazi ukulawula ukukhanya kwasemva kongeziwe.
- Inkxaso eyongeziweyo yeeadaptha ezingenazingcingo ezisekelwe kwi-Realtek 8852CU, 8821BU, 8822CU, 8822DU (USB) kunye ne-MediaTek MT8723 chips, i-Broadcom BCM7996/4377/4378 i-Bluetooth interfaces, kunye ne-Motorcomm Ethernet i-Ethernet GERS4387YT
- I-ASoC eyongeziweyo (i-ALSA System kwi-Chip) inkxaso yeetshiphusi ezakhelwe ngaphakathi HP Stream 8, Advantech MICA-071, Dell SKU 0C11, Intel ALC5682I-VD, Xiaomi Redmi Book Pro 14 2022, i.MX93, Armada 38x, RK3588. Inkxaso eyongeziweyo ye-Focusrite Saffire Pro ye-audio interface ye-40. Yongezwe i-codec yomsindo ye-Realtek RT1318.
- Inkxaso eyongeziweyo yee-smartphones ze-Sony kunye neetafile (i-Xperia 10 IV, i-5 IV, i-X kunye ne-X compact, i-OnePlus One, i-3, i-3T kunye ne-Nord N100, i-Xiaomi Poco F1 kunye ne-Mi6, i-Huawei Watch, i-Google Pixel 3a, i-Samsung Galaxy Tab 4 10.1.
- Inkxaso eyongeziweyo ye-ARM SoC kunye ne-Apple T6000 (M1 Pro), T6001 (M1 Max), T6002 (M1 Ultra), i-Qualcomm MSM8996 Pro (Snapdragon 821), SM6115 (Snapdragon 662), SM4250 (Snapdragon 460), 6375 snapdragon 695 iibhodi , SDM670 (Snapdragon 670), MSM8976 (Snapdragon 652), MSM8956 (Snapdragon 650), RK3326 Odroid-Go/rg351, Zyxel NSA310S, InnoComm i.MX8MM, Odroid Go Ultra.
Kwangaxeshanye, iLatin American Free Software Foundation yenze inguqulelo ye-kernel 6.2 yasimahla ngokupheleleyo - Linux-libre 6.2-gnu, ΠΎΡΠΈΡΠ΅Π½Π½ΠΎΠ³ΠΎ ΠΎΡ ΡΠ»Π΅ΠΌΠ΅Π½ΡΠΎΠ² ΠΏΡΠΎΡΠΈΠ²ΠΎΠΊ ΠΈ Π΄ΡΠ°ΠΉΠ²Π΅ΡΠΎΠ², ΡΠΎΠ΄Π΅ΡΠΆΠ°ΡΠΈΡ
Π½Π΅ΡΠ²ΠΎΠ±ΠΎΠ΄Π½ΡΠ΅ ΠΊΠΎΠΌΠΏΠΎΠ½Π΅Π½ΡΡ ΠΈΠ»ΠΈ ΡΡΠ°ΡΡΠΊΠΈ ΠΊΠΎΠ΄Π°, ΠΎΠ±Π»Π°ΡΡΡ ΠΏΡΠΈΠΌΠ΅Π½Π΅Π½ΠΈΡ ΠΊΠΎΡΠΎΡΡΡ
ΠΎΠ³ΡΠ°Π½ΠΈΡΠ΅Π½Π° ΠΏΡΠΎΠΈΠ·Π²ΠΎΠ΄ΠΈΡΠ΅Π»Π΅ΠΌ. Π Π½ΠΎΠ²ΠΎΠΌ Π²ΡΠΏΡΡΠΊΠ΅ ΠΏΡΠΎΠ²Π΅Π΄Π΅Π½Π° ΡΠΈΡΡΠΊΠ° Π½ΠΎΠ²ΡΡ
Π±Π»ΠΎΠ±ΠΎΠ² Π² Π΄ΡΠ°ΠΉΠ²Π΅ΡΠ΅ nouveau. ΠΡΠΊΠ»ΡΡΠ΅Π½Π° Π·Π°Π³ΡΡΠ·ΠΊΠ° Π±Π»ΠΎΠ±ΠΎΠ² Π² Π΄ΡΠ°ΠΉΠ²Π΅ΡΠ°Ρ
mt7622, mt7996 wifi ΠΈ bcm4377 bluetooth. ΠΡΠΎΠ²Π΅Π΄Π΅Π½Π° ΡΠΈΡΡΠΊΠ° ΠΈΠΌΡΠ½ Π±Π»ΠΎΠ±ΠΎΠ² Π² dts-ΡΠ°ΠΉΠ»Π°Ρ
Π΄Π»Ρ Π°ΡΡ
ΠΈΡΠ΅ΠΊΡΡΡΡ Aarch64. ΠΠ±Π½ΠΎΠ²Π»ΡΠ½ ΠΊΠΎΠ΄ ΡΠΈΡΡΠΊΠΈ Π±Π»ΠΎΠ±ΠΎΠ² Π² ΡΠ°Π·Π»ΠΈΡΠ½ΡΡ
Π΄ΡΠ°ΠΉΠ²Π΅ΡΠ°Ρ
ΠΈ ΠΏΠΎΠ΄ΡΠΈΡΡΠ΅ΠΌΠ°Ρ
. ΠΡΠ΅ΠΊΡΠ°ΡΠ΅Π½Π° ΡΠΈΡΡΠΊΠ° Π΄ΡΠ°ΠΉΠ²Π΅ΡΠ° s5k4ecgx, ΡΠ°ΠΊ ΠΊΠ°ΠΊ ΠΎΠ½ Π±ΡΠ» ΡΠ΄Π°Π»ΡΠ½ ΠΈΠ· ΡΠ΄ΡΠ°.
umthombo: opennet.ru
