ืคึผืจืึธื”ืึธืกื˜ืขืจ > Siemens ื”ืื˜ ื‘ืืคืจื™ื™ื˜ ื“ื™ Jailhouse 0.12 ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ

Siemens ื”ืื˜ ื‘ืืคืจื™ื™ื˜ ื“ื™ Jailhouse 0.12 ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ

Siemens ืคื™ืจืžืข ืืจื•ื™ืก ืคืจื™ื™ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืžืขืœื“ื•ื ื’ ื“ื–ืฉืึทื™ืœื”ืึธื•ืกืข 0.12. ื“ื™ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืฉื˜ื™ืฆื˜ x86_64 ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ VMX + EPT ืึธื“ืขืจ SVM + NPT (AMD-V) ื™ืงืกื˜ืขื ืฉืึทื ื–, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ARMv7 ืื•ืŸ ARMv8/ARM64 ืคึผืจืึทืกืขืกืขืจื– ืžื™ื˜ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ื™ืงืกื˜ืขื ืฉืึทื ื–. ืกืขืคึผืขืจืึทื˜ืœื™ ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผื™ื ื’ ื‘ื™ืœื“ ื’ืขื ืขืจืึทื˜ืึธืจ ืคึฟืึทืจ ื“ื™ ื“ื–ืฉืึทื™ืœื”ืึธื•ืกืข ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ, ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ืขื‘ื™ืึทืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคึฟืึทืจ ื’ืขืฉื˜ื™ืฆื˜ ื“ืขื•ื•ื™ืกืขืก. ืคึผืจืึธื™ืขืงื˜ ืงืึธื“ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš ืœื™ื™ืกืึทื ืกื˜ ืื•ื ื˜ืขืจ GPLv2.

ื“ื™ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ื•ื•ื™ ืึท ืžืึธื“ื•ืœืข ืคึฟืึทืจ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืื•ืŸ ื’ื™ื˜ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ ืžื“ืจื’ื”. ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืคึฟืึทืจ ื’ืึทืกื˜ ืกื™ืกื˜ืขืžืขืŸ ื–ืขื ืขืŸ ืฉื•ื™ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืœื™ื ื•ืงืก ืงืขืจืŸ. ืฆื• ืคื™ืจืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜, ื“ื™ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ืžืึธื“ืขืจืŸ ืงืคึผื•ืก ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜. ื“ื™ ืึธืคึผืฉื™ื™ื“ื ื“ื™ืง ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ ื“ื–ืฉืึทื™ืœื”ืึธื•ืกืข ื–ืขื ืขืŸ ื–ื™ื™ึทืŸ ืœื™ื™ื˜ื•ื•ื™ื™ื˜ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื•ืŸ ืคืึธืงื•ืก ืื•ื™ืฃ ื‘ื™ื™ื ื“ื™ื ื’ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืฆื• ืึท ืคืึทืจืคืขืกื˜ื™ืงื˜ ืงืคึผื•, ื‘ืึทืจืึทืŸ ื’ืขื’ื ื˜ ืื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื“ืขื•ื•ื™ืกืขืก. ื“ืขืจ ืฆื•ื’ืึทื ื’ ืึทืœืึทื•ื– ืื™ื™ืŸ ื’ืฉืžื™ื•ืช ืžื•ืœื˜ื™ืคึผืจืึทืกืขืกืขืจ ืกืขืจื•ื•ืขืจ ืฆื• ืฉื˜ื™ืฆืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืขื˜ืœืขื›ืข ืคืจื™ื™ึท ื•ื•ื™ืจื˜ื•ืึทืœ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ, ื™ืขื“ืขืจ ืคื•ืŸ ื•ื•ืึธืก ืื™ื– ืึทืกื™ื™ื ื“ ืฆื• ื–ื™ื™ืŸ ืื™ื™ื’ืขื ืข ืคึผืจืึทืกืขืกืขืจ ื”ืึทืจืฅ.

ืžื™ื˜ ืึท ืขื ื’ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืฆื• ื“ื™ ืงืคึผื•, ื“ื™ ืึธื•ื•ื•ืขืจื›ืขื“ ืคื•ืŸ ื“ื™ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืื™ื– ืžื™ื ืึทืžื™ื™ื–ื“ ืื•ืŸ ื–ื™ื™ืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื™ื– ื‘ืื˜ื™ื™ื˜ื™ืง ืกื™ืžืคึผืœืึทืคื™ื™ื“, ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ื ื™ื˜ ื“ืึทืจืคึฟืŸ ืฆื• ืœื•ื™ืคืŸ ืึท ืงืึธืžืคึผืœืขืงืก ืžื™ื˜ืœ ืึทืœืึทืงื™ื™ืฉืึทืŸ ืกืงืขื“ื–ืฉื•ืœืขืจ - ืึทืœืึทืงื™ื™ื˜ื™ื ื’ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืงืคึผื• ื”ืึทืจืฅ ื™ื ืฉื•ืจื– ืึทื– ืงื™ื™ืŸ ืื ื“ืขืจืข ื˜ืึทืกืงืก ื–ืขื ืขืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื•ื™ืฃ ื“ืขื ืงืคึผื•. . ื“ื™ ืžื™ื™ึทืœืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ืฆื•ื’ืึทื ื’ ืื™ื– ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฆื•ืฉื˜ืขืœืŸ ื’ืขืจืึทื ื˜ื™ื“ ืึทืงืกืขืก ืฆื• ืจืขืกื•ืจืกืŸ ืื•ืŸ ืคึผืจื™ื“ื™ืงื˜ืึทื‘ืึทืœ ืคืึธืจืฉื˜ืขืœื•ื ื’, ื•ื•ืึธืก ืžืื›ื˜ ื“ื–ืฉืึทื™ืœื”ืึธื•ืกืข ืึท ืคึผืึทืกื™ืง ืœื™ื™ื–ื•ื ื’ ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ื˜ืึทืกืงืก ื’ืขื˜ืืŸ ืื™ืŸ ืคืึทืงื˜ื™ืฉ ืฆื™ื™ื˜. ื“ื™ ื“ืึทื•ื ืกื™ื™ื“ ืื™ื– ืœื™ืžื™ื˜ืขื“ ืกืงืึทืœืึทื‘ื™ืœื™ื˜ื™, ืœื™ืžื™ื˜ืขื“ ื“ื•ืจืš ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืงืคึผื• ืงืึธืจืขืก.

ืื™ืŸ ื“ื–ืฉืึทื™ืœื”ืึธื•ืกืข ื˜ืขืจืžื™ื ืึธืœืึธื’ื™ืข, ื•ื•ื™ืจื˜ื•ืึทืœ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ื–ืขื ืขืŸ ื’ืขืจื•ืคืŸ "ืงืึทืžืขืจืึทืก" (ืฆืขืœ, ืื™ืŸ ื“ื™ ื“ื–ืฉืึทื™ืœื›ืึทื•ืก ืงืึธื ื˜ืขืงืกื˜). ื™ืŸ ื“ืขืจ ืึทืคึผืึทืจืึทื˜, ื“ื™ ืกื™ืกื˜ืขื ืงื•ืงื˜ ื•ื•ื™ ืึท ืื™ื™ืŸ-ืคึผืจืึทืกืขืกืขืจ ืกืขืจื•ื•ืขืจ ืžื™ื˜ ืคืึธืจืฉื˜ืขืœื•ื ื’ ื ืึธืขื ื˜ ืฆื• ื“ืขืจ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืคื•ืŸ ืึท ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืงืคึผื• ื”ืึทืจืฅ. ื“ืขืจ ืึทืคึผืึทืจืึทื˜ ืงืขื ืขืŸ ืœื•ื™ืคืŸ ื“ื™ ืกื•ื•ื™ื•ื•ืข ืคื•ืŸ โ€‹โ€‹ืึท ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืกื˜ืจื™ืคึผื˜-ืึทืจืึธืคึผ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ืคึฟืึทืจ ืคืœื™ืกื ื“ื™ืง ืื™ื™ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืึธื“ืขืจ ืกืคึผืขืฆื™ืขืœ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื™ื—ื™ื“ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื“ื™ื–ื™ื™ื ื“ ืฆื• ืกืึธืœื•ื•ืข ืคืึทืงื˜ื™ืฉ-ืฆื™ื™ื˜ ืคึผืจืึธื‘ืœืขืžืก. ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ื– ื‘ืึทืฉื˜ื™ืžื˜ .ืกืขืœ ื˜ืขืงืขืก, ื•ื•ืึธืก ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ืงืคึผื•, ื–ื›ึผืจื•ืŸ ืžืงื•ืžื•ืช ืื•ืŸ ื™ / ืึธ ืคึผืึธืจืฅ ืึทืœืึทืงื™ื™ื˜ื™ื“ ืฆื• ื“ื™ ืกื•ื•ื™ื•ื•ืข.

Siemens ื”ืื˜ ื‘ืืคืจื™ื™ื˜ ื“ื™ Jailhouse 0.12 ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ

ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข

  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ Raspberry Pi 4 ืžืึธื“ืขืœ ื‘ ืื•ืŸ ื˜ืขืงืกืึทืก ื™ื ืกื˜ืจื•ืžืขื ืฅ J721E-EVM ืคึผืœืึทื˜ืคืึธืจืžืก;
  • ืจื™ื•ื•ืขืจืงื˜ ivshmem ืžื™ื˜ืœ ื’ืขื ื™ืฆื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื™ื ื˜ืขืจืึทืงืฉืึทืŸ ืฆื•ื•ื™ืฉืŸ ืกืขืœื–. ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ ื“ื™ ื ื™ื™ึท ivshem, ืื™ืจ ืงืขื ืขืŸ ื™ื ืกื˜ืจื•ืžืขื ื˜ ืึท ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคึฟืึทืจ VIRTIO;

    Siemens ื”ืื˜ ื‘ืืคืจื™ื™ื˜ ื“ื™ Jailhouse 0.12 ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ

  • ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ ืฉืึทืคื•ื ื’ ืคื•ืŸ ื’ืจื•ื™ืก ื–ื™ืงืึธืจืŸ ื‘ืœืขื˜ืขืจ (ื”ืขืžืึทืคึผืึทื’ืข) ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ CVE-2018-12207 ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื–, ื•ื•ืึธืก ืึทืœืึทื•ื– ืึทืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ืึทื˜ืึทืงืขืจ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜, ืจื™ื–ืึทืœื˜ื™ื ื’ ืื™ืŸ ืึท ืกื™ืกื˜ืขื ื”ืขื ื’ืขืŸ ืื™ืŸ ื“ื™ "ืžืึทืฉื™ืŸ ื˜ืฉืขืง ื˜ืขื•ืช" ืฉื˜ืึทื˜;
  • ืคึฟืึทืจ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ ARM64 ืคึผืจืึทืกืขืกืขืจื–, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ SMMUv3 (ืกื™ืกื˜ืขื ื–ื›ึผืจื•ืŸ ืžืึทื ืึทื’ืขืžืขื ื˜ ื™ื•ื ื™ื˜) ืื•ืŸ TI PVU (ืคึผืขืจื™ืคืขืจืึทืœ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ื™ื•ื ื™ื˜) ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“. PCI ืฉื˜ื™ืฆืŸ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืคึฟืึทืจ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ื•ื•ืึธืก ืœื•ื™ืคืŸ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ (ื ืึทืงืขื˜-ืžืขื˜ืึทืœ);
  • ะะฐ ัะธัั‚ะตะผะฐั… x86 ะดะปั ะบะพั€ะฝะตะฒั‹ั… ะบะฐะผะตั€ ั€ะตะฐะปะธะทะพะฒะฐะฝะฐ ะฒะพะทะผะพะถะฝะพัั‚ัŒ ะฒะบะปัŽั‡ะตะฝะธั ะฟั€ะตะดะพัั‚ะฐะฒะปัะตะผะพะณะพ ะฟั€ะพั†ะตััะพั€ะฐะผะธ Intel ั€ะตะถะธะผะฐ CR4.UMIP (User-Mode Instruction Prevention), ะฟะพะทะฒะพะปััŽั‰ะตะณะพ ะทะฐะฟั€ะตั‚ะธั‚ัŒ ะฒั‹ะฟะพะปะฝะตะฝะธะต ะฒ ะฟั€ะพัั‚ั€ะฐะฝัั‚ะฒะต ะฟะพะปัŒะทะพะฒะฐั‚ะตะปั ะฝะตะบะพั‚ะพั€ั‹ั… ะธะฝัั‚ั€ัƒะบั†ะธะน, ั‚ะฐะบะธั… ะบะฐะบ SGDT, SLDT, SIDT, SMSW ะธ STR, ะบะพั‚ะพั€ั‹ะต ะผะพะณัƒั‚ ะฟั€ะธะผะตะฝัั‚ัŒัั ะฒ ะฐั‚ะฐะบะฐั…, ะฝะฐั†ะตะปะตะฝะฝั‹ั… ะฝะฐ ะฟะพะฒั‹ัˆะตะฝะธะต ะฟั€ะธะฒะธะปะตะณะธะน ะฒ ัะธัั‚ะตะผะต.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’