ืคึผืจืึธื”ืึธืกื˜ืขืจ > ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจื˜ืœ; ื“ืจ. ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื•ื™ืกืคืึธืจืฉืŸ ื“ื™ ื›ืึทืจื“ืึทื ื™ื ื’ ืกืงื™ืžื– ื•ื•ืึธืก ืึทืจื‘ืขื˜ ืื•ื™ืก ืคื•ืŸ ื“ื™ ืงืขืกื˜ืœ ืื•ื™ืฃ ืคื™ื ืฃ ืคืึธืœืงืก ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–. ืคึฟืึทืจ ื™ืขื“ืขืจ, ืžื™ืจ ื’ืขื ื•ืžืขืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืงืขืจืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ืœืึธื•ื“ื™ื“ ืึทืœืข ื“ื™ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ืŸ ืึทื ืึทืœื™ื™ื–ื“ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกืงื™ืžื– ืื™ืŸ ื“ื™ ืึทื˜ืึทื˜ืฉื˜ ื‘ื™ื ืึทืจื™ืขืก. ื“ื™ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื•ื•ืึธืก ื–ืขื ืขืŸ ื‘ืึทื˜ืจืึทื›ื˜ ื–ืขื ืขืŸ OpenSUSE 12.4, Debian 9, CentOS, RHEL 6.10 ืื•ืŸ 7, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ Ubuntu 14.04, 12.04 ืื•ืŸ 18.04 LTS.

ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึทื– ืืคื™ืœื• ื™ืงืขืจื“ื™ืง ืกืงื™ืžื– ืึทื–ืึท ื•ื•ื™ ืกื˜ืึทืงื™ื ื’ ืงืึทื ืึทืจื™ืขืก ืื•ืŸ ืฉื˜ืขืœืข-ืคืจื™ื™ึท ืงืึธื“ ื–ืขื ืขืŸ ื ื™ืฉื˜ ื ืึธืš ืื ื’ืขื ื•ืžืขืŸ ื“ื•ืจืš ืึทืœืขืžืขืŸ. ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืื™ื– ืืคื™ืœื• ืขืจื’ืขืจ ืคึฟืึทืจ ืงืึธืžืคึผื™ืœืขืจืก ื•ื•ืขืŸ ืขืก ืงื•ืžื˜ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ื™ ืกื˜ืึทืง ืงืœืึทืฉ, ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜ืึธืจ ืื™ืŸ ื™ืื ื•ืืจ ื ืึธืš ืืจื•ื™ืกื’ืขื‘ืŸ. ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืกื™ืกื˜ืขื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืึธื‘ืขืจ ื ื™ื˜ ืึทืœืฅ ืื™ื– ืึทื–ื•ื™ ืคืึทืจืคืึทืœืŸ. ื ื‘ืึทื˜ื™ื™ื˜ื™ืง ื ื•ืžืขืจ ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ื™ื ืกื˜ืจื•ืžืขื ื˜ ื™ืงืขืจื“ื™ืง ืฉื•ืฅ ืžืขื˜ื”ืึธื“ืก, ืื•ืŸ ื–ื™ื™ืขืจ ื ื•ืžืขืจ ื•ื•ืืงืกื˜ ืคื•ืŸ ื•ื•ืขืจืกื™ืข ืฆื• ื•ื•ืขืจืกื™ืข.

ื“ื™ ืจืขืฆืขื ื–ื™ืข ื”ืึธื˜ ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ื™ ื’ืจืขืกื˜ืข ื ื•ืžืขืจ ืคื•ืŸ ืฉื•ืฅ ืžืขื˜ื”ืึธื“ืก ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ Ubuntu 18.04 ื‘ื™ื™ ื“ื™ ืึทืก ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืœืขื•ื•ืขืœืก, ื ืื›ื’ืขื’ืื ื’ืขืŸ ื“ื•ืจืš ื“ืขื‘ื™ืึทืŸ 9. ืื•ื™ืฃ ื“ื™ ืื ื“ืขืจืข ื”ืึทื ื˜, OpenSUSE 12.4, CentOS 7 ืื•ืŸ RHEL 7 ืื•ื™ืš ื™ื ืกื˜ืจื•ืžืขื ื˜ ื™ืงืขืจื“ื™ืง ืฉื•ืฅ ืกืงื™ืžื– ืื•ืŸ ืึธื ืœื™ื™ื’ืŸ ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืฉื•ืฅ. ืื™ื– ื’ืขื ื™ืฆื˜ ืืคื™ืœื• ืžืขืจ ื•ื•ื™ื™ื“ืœื™ ืžื™ื˜ ืึท ืคื™ืœ ื“ืขื ืกืขืจ ื’ืึทื ื’ ืคื•ืŸ ืคืขืœื™ืงื™ื™ึทื˜ ืคึผืึทืงืึทื“ื–ืฉืึทื–.

ื”ืงื“ืžื”

ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ืขื ืฉื•ืจ ื”ื•ื™ืš ืงื•ื•ืึทืœื™ื˜ืขื˜ ื•ื•ื™ื™ื›ื•ื•ืืจื’. ื˜ืจืึธืฅ ืึท ืจื™ื–ื™ืง ื ื•ืžืขืจ ืคื•ืŸ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืกื˜ืึทื˜ื™ืง ืงืึธื“ ืึทื ืึทืœื™ืกื™ืก ืื•ืŸ ื“ื™ื ืึทืžื™ืฉ ืจื•ื ื˜ื™ืžืข ืึทื ืึทืœื™ืกื™ืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืคึผืจืึธื’ืจืขืก ืื™ืŸ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ืงืึธืžืคึผื™ืœืขืจืก ืื•ืŸ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฉืคึผืจืึทื›ืŸ, ืžืึธื“ืขืจืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ื ืึธืš ืกืึทืคืขืจื– ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ื–ืขื ืขืŸ ืงืขืกื™ื™ื“ืขืจ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ืึทื˜ืึทืงืขืจื–. ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืื™ื– ืืคื™ืœื• ืขืจื’ืขืจ ืื™ืŸ ื™ืงืึธื•ืกื™ืกื˜ืึทืžื– ื•ื•ืึธืก ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืœืขื’ืึทื˜ ืงืึธื“. ืื™ืŸ ืึทื–ืึท ืงืึทืกืขืก, ืžื™ืจ ื–ืขื ืขืŸ ื ื™ืฉื˜ ื‘ืœื•ื™ื– ืคื™ื™ืกื˜ ืžื™ื˜ ื“ื™ ืื™ื™ื‘ื™ืง ืคึผืจืึธื‘ืœืขื ืคื•ืŸ ื“ืขืจื’ื™ื™ื•ื ื’ ืžืขื’ืœืขืš ืขืงืกืคึผืœื•ื™ื˜ืึทื‘ืึทืœ ืขืจืจืึธืจืก, ืึธื‘ืขืจ ืžื™ืจ ื–ืขื ืขืŸ ืื•ื™ืš ืœื™ืžื™ื˜ืขื“ ื“ื•ืจืš ืฉื˜ืจืขื ื’ ืฆื•ืจื™ืง ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืคืจืึทืžืขื•ื•ืึธืจืงืก, ื•ื•ืึธืก ืึธืคื˜ ื“ืึทืจืคืŸ ืื•ื ื“ื– ืฆื• ื•ืคื”ื™ื˜ืŸ ืœื™ืžื™ื˜ืขื“, ืึธื“ืขืจ ืืคื™ืœื• ืขืจื’ืขืจ, ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืึธื“ืขืจ ื•ื•ืึธื’ืŸ ืงืึธื“.

ื“ืึธืก ืื™ื– ื•ื•ื• ืžืขื˜ื”ืึธื“ืก ืคื•ืŸ ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ืึธื“ืขืจ ื›ืึทืจื“ืึทื ื™ื ื’ ืžื’ื™ืœื” ืงื•ืžืขืŸ ืื™ืŸ ืฉืคึผื™ืœ. ืžื™ืจ ืงืขื ืขืŸ ื ื™ืฉื˜ ืคืึทืจืžื™ื™ึทื“ืŸ ืขื˜ืœืขื›ืข ื˜ื™ื™ืคึผืก ืคื•ืŸ ืขืจืจืึธืจืก, ืึธื‘ืขืจ ืžื™ืจ ืงืขื ืขืŸ ืžืึทื›ืŸ ื“ื™ ืึทื˜ืึทืงืขืจ 'ืก ืœืขื‘ืŸ ืžืขืจ ืฉื•ื•ืขืจ ืื•ืŸ ื˜ื™ื™ืœ ืกืึธืœื•ื•ืข ื“ื™ ืคึผืจืึธื‘ืœืขื ื“ื•ืจืš ืคึผืจืขื•ื•ืขื ื˜ื™ื ื’ ืึธื“ืขืจ ืคึผืจืขื•ื•ืขื ื˜ื™ื ื’ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ื“ื™ ื˜ืขื•ืชื™ื. ืึทื–ืึท ืฉื•ืฅ ืื™ื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึทืœืข ืžืึธื“ืขืจืŸ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ, ืึธื‘ืขืจ ื“ื™ ืžืขื˜ื”ืึธื“ืก ื–ืขื ืขืŸ ื–ื™ื™ืขืจ ืึทื ื“ืขืจืฉ ืื™ืŸ ืงืึทืžืคึผืœืขืงืกื™ื˜ื™, ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜ ืื•ืŸ ืคืึธืจืฉื˜ืขืœื•ื ื’: ืคึฟื•ืŸ ืึธื ืœื™ื™ื’ืŸ ืงืึทื ืึทืจื™ืขืก ืื•ืŸ ASLR ืฆื• ืคื•ืœ ืฉื•ืฅ ืงืคื™ ะธ ืจืึธืคึผ. ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ืื™ืŸ ื•ื•ืึธืก ืฉื•ืฅ ืžืขื˜ื”ืึธื“ืก ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื™ืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ืื•ืŸ ืื•ื™ืš ื•ื ื˜ืขืจื–ื•ื›ืŸ ื“ื™ ืคึผืจืึธืคึผืขืจื˜ื™ืขืก ืคื•ืŸ ื“ื™ ื‘ื™ื ืึทืจื™ืขืก ื•ื•ืึธืก ื–ืขื ืขืŸ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš ื“ื™ ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกื™ืกื˜ืขืžืขืŸ ืคื•ืŸ ื™ืขื“ืขืจ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’.

CVE ืื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜

ืžื™ืจ ื”ืึธื‘ืŸ ืึทืœืข ื’ืขื–ืขืŸ ืึทืจื˜ื™ืงืœืขืŸ ืžื™ื˜ ื˜ื™ื˜ืœืขืŸ ื•ื•ื™ "ื“ื™ ืžืขืจืกื˜ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธื ืก ืคื•ืŸ ื“ื™ ื™ืึธืจ" ืึธื“ืขืจ "ื“ื™ ืžืขืจืกื˜ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ." ื™ื•ื–ืฉืึทื•ื•ืึทืœื™ ื–ื™ื™ ืฆื•ืฉื˜ืขืœืŸ ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืื•ื™ืฃ ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ ืจืขืงืึธืจื“ืก ื•ื•ืขื’ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ื™ CVE (ืคึผืจืึธืกื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื•ืŸ ื™ืงืกืคึผืึธื•ื–ืฉืขืจื–), ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื ืึทืฉืึทื ืึทืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื“ืึทื˜ืึทื‘ืึทืกืข (NVD) ืคื•ืŸ ื ื™ืกื˜ ืื•ืŸ ืื ื“ืขืจืข ืžืงื•ืจื™ื. ื“ืขืจื ืึธืš, ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืึธื“ืขืจ ืึทืก ื–ืขื ืขืŸ ืจืึทื ื’ืงื˜ ืœื•ื™ื˜ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ CVEs. ืฆื•ื ื‘ืึทื“ื•ื™ืขืจืŸ, ื›ืึธื˜ืฉ CVEs ื–ืขื ืขืŸ ื–ื™ื™ืขืจ ื ื•ืฆื™ืง ืคึฟืึทืจ ื˜ืจืึทืงื™ื ื’ ื™ืฉื•ื– ืื•ืŸ ื™ื ืคืึธืจืžื™ื ื’ ื•ื•ืขื ื“ืึธืจืก ืื•ืŸ ื™ื•ื–ืขืจื–, ื–ื™ื™ ื–ืึธื’ืŸ ืงืœื™ื™ืŸ ื•ื•ืขื’ืŸ ื“ื™ ืคืึทืงื˜ื™ืฉ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ื“ื™ ื•ื•ื™ื™ื›ื•ื•ืืจื’.

ื•ื•ื™ ืึท ื‘ื™ื™ืฉืคึผื™ืœ, ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ CVE ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืคื™ืจ ื™ืึธืจ ืคึฟืึทืจ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืื•ืŸ ื“ื™ ืคื™ื ืฃ ืžืขืจืกื˜ ืคืึธืœืงืก ืกืขืจื•ื•ืขืจ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, ื ื™ื™ืžืœื™ Ubuntu, Debian, Red Hat Enterprise Linux ืื•ืŸ OpenSUSE.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 1

ื•ื•ืึธืก ื“ืขืจืฆื™ื™ืœื˜ ืื•ื ื“ื– ื“ืขื ื’ืจืึทืคื™ืง? ื˜ื•ื˜ ืึท ื”ืขื›ืขืจ ื ื•ืžืขืจ ืคื•ืŸ CVEs ืžื™ื™ื ืขืŸ ืึทื– ืื™ื™ืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืื™ื– ืžืขืจ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื•ื•ื™ ืื ื“ืขืจืŸ? ืงื™ื™ืŸ ืขื ื˜ืคืขืจ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืื™ืจ ื•ื•ืขื˜ ื–ืขืŸ ืึทื– ื“ืขื‘ื™ืึทืŸ ื”ืื˜ ืฉื˜ืืจืงืขืจ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืขืงืึทื ื™ื–ืึทืžื– ืงืึทืžืคึผืขืจื“ ืžื™ื˜, ื–ืึธื’ืŸ, OpenSUSE ืึธื“ืขืจ RedHat ืœื™ื ื•ืงืก, ืื•ืŸ ื ืึธืš ื“ืขื‘ื™ืึทืŸ ื”ืื˜ ืžืขืจ CVEs. ืึธื‘ืขืจ, ื–ื™ื™ ื˜ืึธืŸ ื ื™ื˜ ื“ืึทื•ื•ืงืข ืžื™ื™ื ืขืŸ ื•ื•ื™ืงืึทื ื“ ื–ื™ื›ืขืจื”ื™ื™ื˜: ืืคื™ืœื• ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืึท CVE ืงืขืŸ ื ื™ืฉื˜ ืึธื ื•ื•ื™ื™ึทื–ืŸ ืฆื™ ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืขืงืกืคึผืœื•ื™ื˜ืึทื“. ืฉื˜ืจืขื ื’ืงื™ื™ึทื˜ ืกืงืึธืจื– ื’ืขื‘ืŸ ืึทืŸ ืึธื ื•ื•ื™ื™ึทื– ืคื•ืŸ ื•ื•ื™ ืžื™ืกื˜ืึธืžืข ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืึธื‘ืขืจ ืœืขืกืึธืฃ ืขืงืกืคึผืœื•ื™ื˜ืึทื‘ื™ืœื™ื˜ื™ ื“ืขืคึผืขื ื“ืก ืฉื•ื•ืขืจ ืื•ื™ืฃ ื“ื™ ืคึผืจืึทื˜ืขืงืฉืึทื ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืึทืคืขืงื˜ืึทื“ ืกื™ืกื˜ืขืžืขืŸ ืื•ืŸ ื“ื™ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ื™ ืึทื˜ืึทืงืขืจื–. ื“ืขืจืฆื•, ื“ืขืจ ืึทื•ื•ืขืง ืคื•ืŸ CVE ืจื™ืคึผืึธืจืฅ ื–ืื’ื˜ ื’ืึธืจื ื™ืฉื˜ ื•ื•ืขื’ืŸ ืื ื“ืขืจืข ืึทื ืจืขื’ื™ืกื˜ืจื™ืจื˜ ืึธื“ืขืจ ืื•ืžื‘ืึทืงืึทื ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ื“ืขืจ ื—ื™ืœื•ืง ืื™ืŸ CVE ืงืขืŸ ื–ื™ื™ืŸ ืจืขื›ื˜ ืฆื• ืื ื“ืขืจืข ืกื™ื‘ื•ืช ื•ื•ื™ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืงื•ื•ืึทืœื™ื˜ืขื˜, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ ืจืขืกื•ืจืกืŸ ืึทืœืึทืงื™ื™ื˜ื™ื“ ืฆื• ื˜ืขืกื˜ื™ื ื’ ืึธื“ืขืจ ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื‘ืึทื–ืข. ืื™ืŸ ืื•ื ื“ื–ืขืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ืขื‘ื™ืึทืŸ ืก ื”ืขื›ืขืจ ื ื•ืžืขืจ ืคื•ืŸ CVEs ืงืขืŸ ืคืฉื•ื˜ ืึธื ื•ื•ื™ื™ึทื–ืŸ ืึทื– ื“ืขื‘ื™ืึทืŸ ืฉื™ืคึผืก ืžืขืจ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืคึผืึทืงืึทื“ื–ืฉืึทื–.

ื“ืึธืš, ื“ื™ CVE ืกื™ืกื˜ืขื ื’ื™ื˜ ื ื•ืฆื™ืง ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฉืึทืคึฟืŸ ืฆื•ื ืขืžืขืŸ ืคึผืจืึทื˜ืขืงืฉืึทื ื–. ื“ื™ ื‘ืขืกืขืจ ืžื™ืจ ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื“ื™ ืกื™ื‘ื•ืช ืคึฟืึทืจ ืคึผืจืึธื’ืจืึทื ื“ื•ืจื›ืคืึทืœ, ื“ื™ ื’ืจื™ื ื’ืขืจ ืขืก ืื™ื– ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืžืขื’ืœืขืš ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืžืขื˜ื”ืึธื“ืก ืื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ืฆื•ื ืขืžืขืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ื“ื™ื˜ืขืงืฉืึทืŸ ืื•ืŸ ืขื ื˜ืคืขืจ. ืื™ืŸ Fig. 2 ื•ื•ื™ื™ื–ื˜ ื“ื™ ืงืึทื˜ืขื’ืึธืจื™ืขืก ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคึฟืึทืจ ืึทืœืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื™ื‘ืขืจ ื“ื™ ืœืขืฆื˜ืข ืคื™ืจ ื™ืึธืจ (ืžืึธืงืขืจ). ืขืก ืื™ื– ื’ืœื™ื™ืš ืงืœืึธืจ ืึทื– ืจื•ื‘ึฟ CVEs ืคืึทืœืŸ ืื™ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืงืึทื˜ืขื’ืึธืจื™ืขืก: ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ืกืขืจื•ื•ื™ืก (ื“ืึธืก), ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ืงืึธื“, ืึธื•ื•ื•ืขืจืคืœืึธื•, ื–ื™ืงืึธืจืŸ ืงืึธืจื•ืคึผืฆื™ืข, ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ (ืขืงืกืคื™ืœื˜ืจื™ื™ืฉืึทืŸ) ืื•ืŸ ืคึผืจื™ื•ื•ื™ืœืขื’ื™ืข ืขืกืงืึทืœื™ืจื•ื ื’. ื›ืึธื˜ืฉ ืคื™ืœืข CVEs ื–ืขื ืขืŸ ื’ืขืจืขื›ื ื˜ ืงื™ื™ืคืœ ืžืืœ ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืงืึทื˜ืขื’ืึธืจื™ืขืก, ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ ื“ื™ ื–ืขืœื‘ืข ื™ืฉื•ื– ืึธื ื”ืึทืœื˜ืŸ ื™ืึธืจ ื ืึธืš ื™ืึธืจ. ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื˜ื™ื™ืœ ืคื•ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื•ื•ืขืœืŸ ืึธืคึผืฉืึทืฆืŸ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ืฉื•ืฅ ืกืงื™ืžื– ืฆื• ืคืึทืจืžื™ื™ึทื“ืŸ ื“ื™ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 2

ื˜ืึทืกืงืก

ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืžื™ืจ ื‘ื“ืขื” ืฆื• ืขื ื˜ืคึฟืขืจืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืฉืืœื•ืช:

  • ื•ื•ืึธืก ืื™ื– ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–? ื•ื•ืึธืก ืฉื•ืฅ ืžืขืงืึทื ื™ื–ืึทืžื– ืขืงืกื™ืกื˜ื™ืจืŸ ืื™ืŸ ื“ื™ ืงืขืจืŸ ืื•ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–?
  • ื•ื•ื™ ื”ืื˜ ื“ื™ ืึทื“ืึทืคึผืฉืึทืŸ ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืขืงืึทื ื™ื–ืึทืžื– ื’ืขื‘ื™ื˜ืŸ ืื™ื‘ืขืจ ืฆื™ื™ึทื˜ ืึทืจื™ื‘ืขืจ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–?
  • ื•ื•ืึธืก ื–ืขื ืขืŸ ื“ื™ ื“ื•ืจื›ืฉื ื™ื˜ืœืขืš ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื– ืคึฟืึทืจ ื™ืขื“ืขืจ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’?
  • ื•ื•ืึธืก ืคึผืจืึทื˜ืขืงืฉืึทื ื– ื–ืขื ืขืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟืึทืจ ื™ืขื“ืขืจ ื‘ื™ื™ื ืขืจื™?

ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–

ืขืก ื˜ื•ืจื ืก ืื•ื™ืก ืึทื– ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืคึผื™ื ื˜ืœืขืš ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืื•ื™ืฃ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื™ื ืกื˜ืึทืœื™ื™ืฉืึทื ื–, ื•ื•ื™ื™ึทืœ ืื™ืŸ ืจื•ื‘ึฟ ืงืึทืกืขืก ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ืึทื•ื ืœืึธื•ื“ื– ื˜ื•ื˜ ื ื™ืฉื˜ ืึธื ื•ื•ื™ื™ึทื–ืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืงื˜ื™ืฉ ื™ื ืกื˜ืึทืœื™ื™ืฉืึทื ื–. ืึธื‘ืขืจ, ื™ื•ื ื™ืงืก ื•ื•ืขืจื™ืึทื ืฅ ืžืึทื›ืŸ ื“ื™ ืžืขืจื”ื™ื™ึทื˜ ืคื•ืŸ ืกืขืจื•ื•ืขืจ ืกื™ืกื˜ืขืžืขืŸ (ืื•ื™ืฃ ื•ื•ืขื‘ ืกืขืจื•ื•ืขืจืก 69,2%, ื“ื•ืจืš ืกื˜ืึทื˜ื™ืกื˜ื™ืง W3techs ืื•ืŸ ืื ื“ืขืจืข ืงื•ื•ืืœืŸ), ืื•ืŸ ื–ื™ื™ืขืจ ื˜ื™ื™ืœืŸ ืื™ื– ืงืขืกื™ื™ื“ืขืจ ื’ืจืึธื•ื™ื ื’. ืื–ื•ื™, ืคึฟืึทืจ ืื•ื ื“ื–ืขืจ ืคืึธืจืฉื•ื ื’ ืžื™ืจ ืคืึธื•ืงื™ืกื˜ ืื•ื™ืฃ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื‘ื ื™ืžืฆื ืื•ื™ืก ืคื•ืŸ ื“ื™ ืงืขืกื˜ืœ ืื•ื™ืฃ ื“ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข Google Cloud. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ืžื™ืจ ื”ืึธื‘ืŸ ืื•ื™ืกื’ืขืงืœื™ื‘ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืึทืก:

ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ / ื•ื•ืขืจืกื™ืข
ื“ื™ ื”ืึทืจืฅ
ื‘ื™ืœื“

ืึธืคึผืขื ืกื•ืกืข 12.4
4.12.14-95.3-ืคืขืœื™ืงื™ื™ึทื˜
#1 SMP Wed Dec 5 06:00:48 UTC 2018 (63a8d29)

ื“ืขื‘ื™ืึทืŸ 9 (ืื•ื™ืกืฉื˜ืจืขืงืŸ)
4.9.0-8-ืึทืžื“64
#1 SMP Debian 4.9.130-2 (2018-10-27)

CentOS 6.10
2.6.32-754.10.1.el6.x86_64
#1 SMP Tue Jan 15 17:07:28 UTC 2019

CentOS 7
3.10.0-957.5.1.el7.x86_64
#1 SMP ืคืจื™ื™ 1 ืคืขื‘ืจื•ืืจ 14:54:57 UTC 2019

Red Hat Enterprise Linux Server 6.10 (Santiago)
2.6.32-754.9.1.el6.x86_64
#1 SMP Wed Nov 21 15:08:21 EST 2018

Red Hat Enterprise Linux Server 7.6 (Maipo)
3.10.0-957.1.3.el7.x86_64
#1 SMP Thu Nov 15 17:36:42 UTC 2018

Ubuntu 14.04 (ื˜ืจื•ืกื˜ื™ ื˜ืึทื”ืจ)
4.4.0-140-ื“ื–ืฉืึทื ืขืจื™ืง

#166~14.04.1-Ubuntu SMP Sat Nov 17 01:52:43 UTC 20โ€ฆ

Ubuntu 16.04 (Xenial Xerus)
4.15.0-1026-ื’ืงืคึผ
#27~16.04.1-ื•ื‘ื•ื ื˜ื• ืกืžืคึผ ืคืจื™ื™ 7 ื“ืขืฆืขืžื‘ืขืจ 09:59:47 UTC 2018

Ubuntu 18.04 (ื‘ื™ืึธื ื™ืง ื‘ื™ื•ื•ืขืจ)
4.15.0-1026-ื’ืงืคึผ
#27-Ubuntu SMP Thu 6 ื“ืขืฆืขืžื‘ืขืจ 18:27:01 UTC 2018

ื˜ื™ืฉ ืงืกื ื•ืžืงืก

ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ

ืœืึธืžื™ืจ ืœืขืจื ืขืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืงืขืจืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ืคึผืจืึธืคึผืขืจื˜ื™ืขืก ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ื‘ื ื™ืžืฆื ื“ื•ืจืš ื“ื™ ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืคื•ืŸ ื™ืขื“ืขืจ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ ื“ื™ ืงืขืกื˜ืœ. ืื–ื•ื™, ืžื™ืจ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื‘ืœื•ื™ื– ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคื•ืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืžื™ืจืขืจื– ืคื•ืŸ ื™ืขื“ืขืจ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’, ื™ื’ื ืึธืจื™ื ื’ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคื•ืŸ ืึทื ืกื˜ื™ื™ื‘ืึทืœ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ื– (ืึทื–ืึท ื•ื•ื™ ื“ืขื‘ื™ืึทืŸ 'ื˜ืขืกื˜ื™ื ื’' ืžื™ืจืขืจื–) ืื•ืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืคึผืึทืงืึทื“ื–ืฉืึทื– (ืึทื–ืึท ื•ื•ื™ Nvidia ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคื•ืŸ ื ืึธืจืžืึทืœ ืžื™ืจืขืจื–). ืื™ืŸ ื“ืขืจืฆื•, ืžื™ืจ ื˜ืึธืŸ ื ื™ื˜ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ืžื ื”ื’ ืงืขืจืŸ ืงืึทืžืคึผื™ื™ืœื– ืึธื“ืขืจ ื–ื™ื›ืขืจื”ื™ื™ื˜-ืคืึทืจื’ืœื™ื•ื•ืขืจื˜ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื–.

ืงืขืจื ืขืœ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืึทื ืึทืœื™ืกื™ืก

ืžื™ืจ ื’ืขื•ื•ืขื ื“ื˜ ืึทืŸ ืึทื ืึทืœื™ืกื™ืก ืฉืจื™ืคื˜ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืคืจื™ื™ ืงืงืึธื ืคื™ื’ ื˜ืฉืขืงืขืจ. ืœืึธืžื™ืจ ืงื•ืงืŸ ืื™ืŸ ื“ื™ ืฉื•ืฅ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืคื•ืŸ ื“ื™ ื ืึธืžืขืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื•ืŸ ืคืึทืจื’ืœื™ื™ึทื›ืŸ ื–ื™ื™ ืžื™ื˜ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ืงืึธืจ ื–ื™ืš ืคืึทืจื˜ื™ื™ื“ื™ืงื•ื ื’ ืคึผืจืึธื™ืขืงื˜ (KSPP). ืคึฟืึทืจ ื™ืขื“ืขืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืึธืคึผืฆื™ืข, ื˜ื™ืฉ 2 ื‘ืืฉืจื™ื™ื‘ื˜ ื“ื™ ื’ืขื‘ืขื˜ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ: ื“ื™ ื˜ืฉืขืงืงื‘ืึธืงืก ืื™ื– ืคึฟืึทืจ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื•ื•ืึธืก ื ืึธื›ืงื•ืžืขืŸ ืžื™ื˜ ื“ื™ KSSP ืจืขืงืึทืžืึทื ื“ื™ื™ืฉืึทื ื– (ื–ืขืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืคึฟืึทืจ ืึท ื“ืขืจืงืœืขืจื•ื ื’ ืคื•ืŸ ื˜ืขืจืžื™ื ืขืŸ). ื“ืึธ; ืื™ืŸ ืฆื•ืงื•ื ืคึฟื˜ ืึทืจื˜ื™ืงืœืขืŸ ืžื™ืจ ื•ื•ืขื˜ ื“ืขืจืงืœืขืจืŸ ื•ื•ื™ ืคื™ืœืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืขื˜ื”ืึธื“ืก ื’ืขืงื•ืžืขืŸ ืื™ืŸ ื–ื™ื™ึทืขื ื“ื™ืง ืื•ืŸ ื•ื•ื™ ืฆื• ื›ืึทืง ืึท ืกื™ืกื˜ืขื ืื™ืŸ ื–ื™ื™ืขืจ ืึทื•ื•ืขืง).

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ

ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ื“ื™ ื ื™ื™ึทืข ืงืขืจื ืึทืœื– ื”ืึธื‘ืŸ ืฉื˜ืจืขื ื’ืขืจืข ืกืขื˜ื˜ื™ื ื’ืก ืื•ื™ืก ืคื•ืŸ ื“ื™ ืงืขืกื˜ืœ. ืฆื•ื ื‘ื™ื™ืฉืคึผื™ืœ, CentOS 6.10 ืื•ืŸ RHEL 6.10 ืื•ื™ืฃ ื“ื™ 2.6.32 ืงืขืจืŸ ืคืขืœืŸ ืจื•ื‘ึฟ ืคื•ืŸ ื“ื™ ืงืจื™ื˜ื™ืฉ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ื ื™ื™ึทืขืจ ืงืขืจื ืึทืœื– ืึทื–ืึท ื•ื•ื™ SMAP, ืฉื˜ืจืขื ื’ ืจื•ื•ืงืก ืคึผืขืจืžื™ืฉืึทื ื–, ืึทื“ืจืขืก ืจืึทื ื“ืึทืžื™ื–ื™ื™ืฉืึทืŸ ืึธื“ืขืจ copy2usr ืฉื•ืฅ. ืขืก ื–ืึธืœ ื–ื™ื™ืŸ ืื ื’ืขื•ื•ื™ื–ืŸ ืึทื– ืคื™ืœืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืึธืคึผืฆื™ืขืก ืื™ืŸ ื“ื™ ื˜ื™ืฉ ื–ืขื ืขืŸ ื ื™ืฉื˜ ื‘ื ื™ืžืฆื ืื™ืŸ ืขืœื˜ืขืจืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื“ื™ ืงืขืจืŸ ืื•ืŸ ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึธื ื•ื•ืขื ื“ืœืขืš ืื™ืŸ ืคืึทืงื˜ - ื“ืึธืก ืื™ื– ื ืึธืš ืื ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ื“ื™ ื˜ื™ืฉ ื•ื•ื™ ืึท ืคืขืœืŸ ืคื•ืŸ ื’ืขื”ืขืจื™ืง ืฉื•ืฅ. ืคึผื•ื ืงื˜ ืึทื–ื•ื™, ืื•ื™ื‘ ืึท ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืึธืคึผืฆื™ืข ืื™ื– ื ื™ืฉื˜ ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ืึท ื’ืขื’ืขื‘ืŸ ื•ื•ืขืจืกื™ืข, ืื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืจื™ืงื•ื•ื™ื™ืขืจื– ืึทื– ื“ื™ ืึธืคึผืฆื™ืข ืื™ื– ืคืึทืจืงืจื™ืคึผืœื˜, ื“ืึธืก ืื™ื– ื’ืขื”ืืœื˜ืŸ ืึท ื’ืœื™ื™ึทืš ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ.

ืืŸ ืื ื“ืขืจ ืคื•ื ื˜ ืฆื• ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื•ื•ืขืŸ ื™ื ื˜ืขืจืคึผืจืขื˜ื™ื ื’ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ: ืขื˜ืœืขื›ืข ืงืขืจืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ื•ื•ืึธืก ืคืึทืจื’ืจืขืกืขืจืŸ ื“ื™ ื‘ืึทืคืึทืœืŸ ื™ื™ื‘ืขืจืคืœืึทืš ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืคึฟืึทืจ ื–ื™ื›ืขืจื”ื™ื™ื˜. ืึทื–ืึท ื‘ื™ื™ืฉืคื™ืœืŸ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ื•ืคึผืจืึธื‘ืขืก ืื•ืŸ ืงืคึผืจืึธื‘ืขืก, ืงืขืจืŸ ืžืึทื“ื–ืฉื•ืœื– ืื•ืŸ BPF / eBPF. ืื•ื ื“ื–ืขืจ ืจืขืงืึธืžืขื ื“ืึทืฆื™ืข ืื™ื– ืฆื• ื ื•ืฆืŸ ื“ื™ ืื•ื™ื‘ืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ืฆื• ืฆื•ืฉื˜ืขืœืŸ ืคืึทืงื˜ื™ืฉ ืฉื•ืฅ, ื•ื•ื™ื™ึทืœ ื–ื™ื™ ื–ืขื ืขืŸ ื ื™ื˜-ื ื™ื˜ื•ื•ื™ืึทืœ ืฆื• ื ื•ืฆืŸ ืื•ืŸ ื–ื™ื™ืขืจ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืึทืกื•ืžื– ืึทื– ื‘ื™ื™ื–ืข ืึทืงื˜ืขืจื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื’ืขื’ืจื™ื ื“ืขื˜ ืึท ืคื•ื˜ื›ืึธื•ืœื“ ืื™ืŸ ื“ืขื ืกื™ืกื˜ืขื. ืึธื‘ืขืจ ืื•ื™ื‘ ื“ื™ ืึธืคึผืฆื™ืขืก ื–ืขื ืขืŸ ืขื ื™ื™ื‘ืึทืœื“, ื“ืขืจ ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ืžื•ื–ืŸ ืึทืงื˜ื™ื•ื•ืœื™ ืžืึธื ื™ื˜ืึธืจ ืคึฟืึทืจ ื–ื™ื“ืœืขืŸ.

ืงื•ืง ื•ื•ื™ื™ึทื˜ืขืจ ืื™ืŸ ื“ื™ ืื™ื™ื ืกืŸ ืื™ืŸ ื˜ืึทื‘ืœืข 2, ืžื™ืจ ื–ืขืŸ ืึทื– ืžืึธื“ืขืจืŸ ืงืขืจื ืึทืœื– ืฆื•ืฉื˜ืขืœืŸ ืขื˜ืœืขื›ืข ืึธืคึผืฆื™ืขืก ืคึฟืึทืจ ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ืงืขื’ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืึทื–ืึท ื•ื•ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ืื•ืŸ ืกื˜ืึทืง / ืงื•ืคึผืข ืึธื•ื•ื•ืขืจืคืœืึธื•ื–. ืึธื‘ืขืจ, ืžื™ืจ ื‘ืึทืžืขืจืงืŸ ืึทื– ืืคื™ืœื• ื“ื™ ืžืขืจืกื˜ ืคืจื™ืฉ ืคืึธืœืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื”ืึธื‘ืŸ ื ื™ืฉื˜ ื ืึธืš ื™ืžืคึผืœืึทืžืขื ืึทื“ ืžืขืจ ืงืึธืžืคึผืœื™ืฆื™ืจื˜ ืฉื•ืฅ (ืœืžืฉืœ ืžื™ื˜ ืคึผืึทื˜ืฉืึทื– ื’ืจืกืขืงื•ืจื™ื˜ื™) ืึธื“ืขืจ ืžืึธื“ืขืจืŸ ืฉื•ืฅ ืงืขื’ืŸ ืงืึธื“ ืจื™ื™ื•ืก ืื ืคืืœืŸ (ืœืžืฉืœ. ืงืึธืžื‘ื™ื ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืจืึทื ื“ืึทืžื™ื–ื™ื™ืฉืึทืŸ ืžื™ื˜ ืกืงื™ืžื– ื•ื•ื™ R ^ X ืคึฟืึทืจ ืงืึธื“). ืฆื• ืžืึทื›ืŸ ืขื ื™ื ื™ื ืขืจื’ืขืจ, ืืคื™ืœื• ื“ื™ ืžืขืจ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ื“ื™ืคืขื ืกื™ื– ื˜ืึธืŸ ื ื™ื˜ ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ื“ื™ ืคื•ืœ ืงื™ื™ื˜ ืคื•ืŸ ืื ืคืืœืŸ. ื“ืขืจื™ื‘ืขืจ, ืขืก ืื™ื– ืงืจื™ื˜ื™ืฉ ืคึฟืึทืจ ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจืก ืฆื• ื“ืขืจื’ืึทื ื’ ืงืœื•ื’ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ืžื™ื˜ ืกืึทืœื•ืฉืึทื ื– ื•ื•ืึธืก ืคืึธืจืฉืœืึธื’ืŸ ืจื•ื ื˜ื™ืžืข ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืื•ืŸ ืคืึทืจื”ื™ื˜ื•ื ื’.

ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืึทื ืึทืœื™ืกื™ืก

ื ื™ื˜ ืกืึทืคึผืจื™ื™ื–ื™ื ื’ืœื™, ืคืึทืจืฉื™ื“ืขื ืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื”ืึธื‘ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืขืงืœ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก, ื–ืึทืžืœื•ื ื’ ืึธืคึผืฆื™ืขืก, ื‘ื™ื‘ืœื™ืึธื˜ืขืง ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–, ืืื–"ื• ื•. ื“ื™ืคืคืขืจืขื ืกืขืก ืขืงืกื™ืกื˜ื™ืจืŸ ืืคื™ืœื• ืคึฟืึทืจ ืคึฟืึทืจื‘ื•ื ื“ืขื ืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืžื™ื˜ ืึท ืงืœื™ื™ืŸ ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– (ืœืžืฉืœ, ืงืึธืจื•ื˜ื™ืœื– ืื•ื™ืฃ ื•ื‘ื•ื ื˜ื• ืึธื“ืขืจ ื“ืขื‘ื™ืึทืŸ). ืฆื• ืึธืคึผืฉืึทืฆืŸ ื“ื™ ื“ื™ืคืขืจืึทื ืกื™ื–, ืžื™ืจ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืึทืœืข ื‘ื ื™ืžืฆื ืคึผืึทืงืึทื“ื–ืฉืึทื–, ื™ืงืกื˜ืจืึทืงื˜ื™ื“ ื–ื™ื™ืขืจ ืื™ื ื”ืึทืœื˜ ืื•ืŸ ืึทื ืึทืœื™ื™ื–ื“ ื“ื™ ื‘ื™ื ืึทืจื™ืขืก ืื•ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–. ืคึฟืึทืจ ื™ืขื“ืขืจ ืคึผืขืงืœ, ืžื™ืจ ื”ืึทืœื˜ืŸ ืฉืคึผื•ืจ ืคื•ืŸ ื“ื™ ืื ื“ืขืจืข ืคึผืึทืงืึทื“ื–ืฉืึทื– ืขืก ื“ืขืคึผืขื ื“ืก ืื•ื™ืฃ, ืื•ืŸ ืคึฟืึทืจ ื™ืขื“ืขืจ ื‘ื™ื™ื ืขืจื™, ืžื™ืจ ืฉืคึผื™ืจื˜ ื–ื™ื™ึทืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–. ืื™ืŸ ื“ืขื ืึธืคึผื˜ื™ื™ืœื•ื ื’ ืžื™ืจ ื‘ืขืงื™ืฆืขืจ ืกืึทืžืขืจื™ื™ื– ื“ื™ ืงืึทื ืงืœื•ื–ืฉืึทื ื–.

ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–

ืื™ืŸ ื’ืึทื ืฅ, ืžื™ืจ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ 361 ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคึฟืึทืจ ืึทืœืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, ื™ืงืกื˜ืจืึทืงื˜ื™ื“ ื‘ืœื•ื™ื– ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคื•ืŸ ืคืขืœื™ืงื™ื™ึทื˜ ืžื™ืจืขืจื–. ืžื™ืจ ืื™ื’ื ืึธืจื™ืจื˜ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืึธืŸ ELF ืขืงืกืขืงื•ื˜ืึทื‘ืœืขืก, ืึทื–ืึท ื•ื•ื™ ืงื•ื•ืืœืŸ, ืคืึทื ืฅ, ืืื–"ื• ื•. ื ืึธืš ืคื™ืœื˜ืขืจื™ื ื’, 556 ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคืืจื‘ืœื™ื‘ืŸ, ืžื™ื˜ ืึท ื’ืึทื ืฅ ืคื•ืŸ 129 ื‘ื™ื ืึทืจื™ืขืก. ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ืŸ ื˜ืขืงืขืก ืึทืจื™ื‘ืขืจ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื™ื– ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ Fig. 569.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 3

ืื™ืจ ืงืขืŸ ื‘ืึทืžืขืจืงืŸ ืึทื– ื“ื™ ืžืขืจ ืžืึธื“ืขืจืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’, ื“ื™ ืžืขืจ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืขืก ื›ึผื•ืœืœ, ื•ื•ืึธืก ืื™ื– ืœืึทื“ื–ืฉื™ืงืึทืœ. ืึธื‘ืขืจ, Ubuntu ืื•ืŸ Debian ืคึผืึทืงื™ื“ื–ืฉื™ื– ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืคื™ืœืข ืžืขืจ ื‘ื™ื ืึทืจื™ืขืก (ื‘ื™ื™ื“ืข ืขืงืกืขืงื•ื˜ืึทื‘ืœืขืก ืื•ืŸ ื“ื™ื ืึทืžื™ืฉ ืžืึทื“ื–ืฉื•ืœื– ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื–) ื•ื•ื™ CentOS, SUSE ืื•ืŸ RHEL, ื•ื•ืึธืก ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืึทืคืขืงืฅ ื“ื™ ื‘ืึทืคืึทืœืŸ ื™ื™ื‘ืขืจืคืœืึทืš ืคื•ืŸ ื•ื‘ื•ื ื˜ื• ืื•ืŸ ื“ืขื‘ื™ืึทืŸ (ืขืก ื–ืึธืœ ื–ื™ื™ืŸ ืื ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ื™ ื ื•ืžืขืจืŸ ืคืึทืจื˜ืจืึทื›ื˜ื  ืึทืœืข ื‘ื™ื™ื ืขืจื™ื– ืคื•ืŸ ืึทืœืข ื•ื•ืขืจืกื™ืขืก. ืคึผืขืงืœ, ื“ืึธืก ืื™ื–, ืขื˜ืœืขื›ืข ื˜ืขืงืขืก ื–ืขื ืขืŸ ืึทื ืึทืœื™ื™ื–ื“ ืขื˜ืœืขื›ืข ืžืึธืœ). ื“ืึธืก ืื™ื– ืกืคึผืขืฆื™ืขืœ ื•ื•ื™ื›ื˜ื™ืง ื•ื•ืขืŸ ืื™ืจ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืฆื•ื•ื™ืฉืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื–. ืื–ื•ื™, ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืึท ืื™ื™ืŸ ืคึผืขืงืœ ื‘ื™ื™ื ืขืจื™ ืงืขื ืขืŸ ื•ื•ื™ืจืงืŸ ืคื™ืœืข ืคึผืึทืจืฅ ืคื•ืŸ ื“ื™ ื™ืงืึธื•ืกื™ืกื˜ืึทื, ืคึผื•ื ืงื˜ ื•ื•ื™ ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืงืขื ืขืŸ ื•ื•ื™ืจืงืŸ ืึทืœืข ื‘ื™ื ืึทืจื™ืขืก ื•ื•ืึธืก ืึทืจื™ื™ึทื ืคื™ืจ ืขืก. ื•ื•ื™ ืึท ืกื˜ืึทืจื˜ื™ื ื’ ืคื•ื ื˜, ืœืึธื–ืŸ ืื•ื ื“ื– ืงื•ืง ืื™ืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืฆื•ื•ื™ืฉืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ:

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 4

ืื™ืŸ ื›ึผืžืขื˜ ืึทืœืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, 60% ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ื”ืึธื‘ืŸ ื‘ื™ื™ึท ืžื™ื ื“ืกื˜ืขืจ 10 ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–. ืื™ืŸ ื“ืขืจืฆื•, ืขื˜ืœืขื›ืข ืคึผืึทืงืึทื“ื–ืฉืึทื– ื”ืึธื‘ืŸ ืึท ื‘ืื˜ื™ื™ื˜ื™ืง ื’ืจืขืกืขืจืข ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– (ืžืขืจ ื•ื•ื™ 100). ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืึทืคึผืœื™ื™ื– ืฆื• ืคืึทืจืงืขืจื˜ ืคึผืขืงืœ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–: ื•ื•ื™ ื“ืขืจื•ื•ืึทืจื˜, ืขื˜ืœืขื›ืข ืคึผืึทืงืึทื“ื–ืฉืึทื– ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคื™ืœืข ืื ื“ืขืจืข ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื™ืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’, ืึทื–ื•ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ืกืขืœืขืงื˜ืขื“ ื•ื•ื™ื™ื ื™ืง ื–ืขื ืขืŸ ื”ื•ื™ืš ืจื™ื–ื™ืงื™ืจืŸ. ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื™ ืคืืœื’ืขื ื“ืข ื˜ื™ืฉ ืœื™ืกื˜ืขื“ ื“ื™ 20 ืคึผืึทืงืึทื“ื–ืฉืึทื– ืžื™ื˜ ื“ื™ ืžืึทืงืกื™ืžื•ื ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืงืขืจื˜ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืื™ืŸ SLES, Centos 7, Debian 9 ืื•ืŸ Ubuntu 18.04 (ื™ืขื“ืขืจ ืฆืขืœ ื™ื ื“ื™ืงื™ื™ืฅ ื“ื™ ืคึผืขืงืœ ืื•ืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืงืขืจื˜ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื–).

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ื˜ื™ืฉ ืงืกื ื•ืžืงืก

ื˜ืฉื™ืงืึทื•ื•ืข ืคืึทืงื˜. ื›ืึธื˜ืฉ ืึทืœืข ืึทืกืกืขืกืก ืึทื ืึทืœื™ื™ื–ื“ ื–ืขื ืขืŸ ื’ืขื‘ื•ื™ื˜ ืคึฟืึทืจ ื“ื™ x86_64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ, ืื•ืŸ ืจื•ื‘ึฟ ืคึผืึทืงืึทื“ื–ืฉืึทื– ื”ืึธื‘ืŸ ื“ื™ ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ ื“ื™ืคื™ื™ื ื“ ื•ื•ื™ x86_64 ืื•ืŸ x86, ืคึผืึทืงืึทื“ื–ืฉืึทื– ืึธืคื˜ ืึทื ื˜ื”ืึทืœื˜ืŸ ื‘ื™ื ืึทืจื™ืขืก ืคึฟืึทืจ ืื ื“ืขืจืข ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ, ื•ื•ื™ ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ืคื™ื’ื•ืจืข 5. XNUMX.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 5

ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืึธืคึผื˜ื™ื™ืœื•ื ื’, ืžื™ืจ ื•ื•ืขืœืŸ ื“ืขืœื•ื• ืื™ืŸ ื“ื™ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก ืคื•ืŸ ื“ื™ ืึทื ืึทืœื™ื™ื–ื“ ื‘ื™ื ืึทืจื™ืขืก.

ื‘ื™ื™ื ืขืจื™ ื˜ืขืงืข ืฉื•ืฅ ืกื˜ืึทื˜ื™ืกื˜ื™ืง

ืื™ืŸ ื“ื™ ืึทื‘ืกืึธืœื•ื˜ ืžื™ื ื™ืžื•ื, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื•ื™ืกืคืึธืจืฉืŸ ืึท ื™ืงืขืจื“ื™ืง ื’ืึทื ื’ ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืึธืคึผืฆื™ืขืก ืคึฟืึทืจ ื“ื™ื™ืŸ ื™ื’ื–ื™ืกื˜ื™ื ื’ ื‘ื™ื ืึทืจื™ืขืก. ืขื˜ืœืขื›ืข ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืงื•ืžืขืŸ ืžื™ื˜ ืกืงืจื™ืคึผืก ื•ื•ืึธืก ื“ื•ืจื›ืคื™ืจืŸ ืึทื–ืึท ื˜ืฉืขืงืก. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ืขื‘ื™ืึทืŸ / ื•ื‘ื•ื ื˜ื• ื”ืื˜ ืึทื–ืึท ืึท ืฉืจื™ืคื˜. ื“ืึธ ืื™ื– ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ื–ื™ื™ืŸ ืึทืจื‘ืขื˜:

$ hardening-check $(which docker)
/usr/bin/docker:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: no, only unprotected functions found!
 Read-only relocations: yes
 Immediate binding: yes

ื“ื™ ืฉืจื™ืคื˜ ื˜ืฉืขืงืก ืคื™ื ืฃ ืฉื•ืฅ ืคืึทื ื’ืงืฉืึทื ื–:

  • ืฉื˜ืขืœืข ื™ื ื“ืขืคึผืขื ื“ืขื ื˜ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข (PIE): ื™ื ื“ื™ืงื™ื™ืฅ ืฆื™ ื“ื™ ื˜ืขืงืกื˜ ืึธืคึผื˜ื™ื™ืœื•ื ื’ ืคื•ืŸ ืึท ืคึผืจืึธื’ืจืึทื ืงืขื ืขืŸ ื–ื™ื™ืŸ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืื™ืŸ ื–ื›ึผืจื•ืŸ ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ืจืึทื ื“ืึทืžื™ื–ื™ื™ืฉืึทืŸ ืื•ื™ื‘ ASLR ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืื™ืŸ ื“ื™ ืงืขืจืŸ.
  • ืึธื ืœื™ื™ื’ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“: ืฆื™ ืกื˜ืึทืง ืงืึทื ืึทืจื™ืขืก ื–ืขื ืขืŸ ืขื ื™ื™ื‘ืึทืœื“ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ืึธื ืœื™ื™ื’ืŸ ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืื ืคืืœืŸ.
  • ืคืึธืจื˜ื™ืคื™ ืžืงื•ืจ: ืฆื™ ืึทื ืกื™ื™ืฃ ืคืึทื ื’ืงืฉืึทื ื– (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, strcpy) ื–ืขื ืขืŸ ืจื™ืคึผืœื™ื™ืกื˜ ืžื™ื˜ ื–ื™ื™ืขืจ ืžืขืจ ื–ื™ื›ืขืจ ืงืึทื•ื ืขืจืคึผืึทืจืฅ, ืื•ืŸ ืงืึทืœืœืก ืึธืคึผื’ืขืฉื˜ืขืœื˜ ื‘ื™ื™ ืจื•ื ื˜ื™ืžืข ื–ืขื ืขืŸ ืจื™ืคึผืœื™ื™ืกื˜ ืžื™ื˜ ื–ื™ื™ืขืจ ื•ื ื˜ืฉืขืงืงืขื“ ืงืึทื•ื ืขืจืคึผืึทืจืฅ (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, memcpy ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ __memcpy_chk).
  • ืจื™ืœืึธื•ืงื™ื™ืฉืึทื ื– ื‘ืœื•ื™ื– ืคึฟืึทืจ ืœื™ื™ืขื ืขืŸ (RELRO): ืฆื™ ื“ื™ ืจื™ืœืึธื•ืงื™ื™ืฉืึทืŸ ื˜ื™ืฉ ืื™ื™ื ืกืŸ ื–ืขื ืขืŸ ืื ื’ืขืฆื™ื™ื›ื ื˜ ื‘ืœื•ื™ื– ืคึฟืึทืจ ืœื™ื™ืขื ืขืŸ ืื•ื™ื‘ ื–ื™ื™ ื–ืขื ืขืŸ ื˜ืจื™ื’ืขืจื“ ืื™ื™ื“ืขืจ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื”ื™ื™ื‘ื˜.
  • ื’ืœื™ื™ืš ื‘ื™ื™ื ื“ื™ื ื’: ืฆื™ ื“ื™ ืจื•ื ื˜ื™ืžืข ืœื™ื ืงืขืจ ืึทืœืึทื•ื– ืึทืœืข ืžืึธื•ื•ืขืก ืื™ื™ื“ืขืจ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื“ื™ ืคึผืจืึธื’ืจืึทื ื”ื™ื™ื‘ื˜ (ื“ืึธืก ืื™ื– ืขืงื•ื•ื™ื•ื•ืึทืœืขื ื˜ ืฆื• ืึท ืคื•ืœ RELRO).

ื–ืขื ืขืŸ ื“ื™ ืื•ื™ื‘ืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ื’ืขื ื•ื’? ืœื™ื™ื“ืขืจ ื ื™ื™ืŸ. ืขืก ื–ืขื ืขืŸ ื‘ืืงืื ื˜ ื•ื•ืขื’ืŸ ืฆื• ื‘ื™ื™ืคึผืึทืก ืึทืœืข ื“ื™ ืื•ื™ื‘ืŸ ื“ื™ืคืขื ืกื™ื–, ืึธื‘ืขืจ ื“ื™ ื˜ืึทืคืขืจ ื“ื™ ืคืึทืจื˜ื™ื™ื“ื™ืงื•ื ื’, ื“ื™ ื”ืขื›ืขืจ ื“ื™ ื‘ืึทืจ ืคึฟืึทืจ ื“ื™ ืึทื˜ืึทืงืขืจ. ืœืžืฉืœ, RELRO ื‘ื™ื™ืคึผืึทืก ืžืขื˜ื”ืึธื“ืก ืžืขืจ ืฉื•ื•ืขืจ ืฆื• ืฆื•ืœื™ื™ื’ืŸ ืื•ื™ื‘ PIE ืื•ืŸ ื‘ืึทืœื“ื™ืง ื‘ื™ื™ื ื“ื™ื ื’ ื–ืขื ืขืŸ ืื™ืŸ ื•ื•ื™ืจืงื•ื ื’. ืคึผื•ื ืงื˜ ืึทื–ื•ื™, ืคื•ืœ ASLR ืจื™ืงื•ื•ื™ื™ืขืจื– ื ืึธืš ืึทืจื‘ืขื˜ ืฆื• ืฉืึทืคึฟืŸ ืึท ืืจื‘ืขื˜ืŸ ื’ื•ื•ื•ืจืข. ืึธื‘ืขืจ, ืกืึทืคื™ืกื˜ืึทืงื™ื™ื˜ื™ื“ ืึทื˜ืึทืงืขืจื– ื–ืขื ืขืŸ ืฉื•ื™ืŸ ืฆื•ื’ืขื’ืจื™ื™ื˜ ืฆื• ื˜ืจืขืคืŸ ืึทื–ืึท ืคึผืจืึทื˜ืขืงืฉืึทื ื–: ื–ื™ื™ืขืจ ืึทื•ื•ืขืง ื•ื•ืขื˜ ื™ืกืขื ืฉืึทืœื™ ืคืึทืจื’ื™ื›ืขืจืŸ ื“ื™ ื›ืึทืง. ืขืก ืื™ื– ื“ืขืจื™ื‘ืขืจ ื™ืงืขืจื“ื™ืง ืึทื– ื“ื™ ืžื™ื˜ืœืขืŸ ื–ืขื ืขืŸ ื’ืขื”ืืœื˜ืŸ ื ื™ื™ื˜ื™ืง ืžื™ื ื™ืžื•ื.

ืžื™ืจ ื’ืขื•ื•ืืœื˜ ืฆื• ืœืขืจื ืขืŸ ื•ื•ื™ ืคื™ืœืข ื‘ื™ื™ื ืขืจื™ ื˜ืขืงืขืก ืื™ืŸ ื“ื™ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืื™ืŸ ืงืฉื™ื ื–ืขื ืขืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ื“ื•ืจืš ื“ื™ ืื•ืŸ ื“ืจื™ื™ ืื ื“ืขืจืข ืžืขื˜ื”ืึธื“ืก:

  • ื•ื ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื‘ื™ืกืœ (NX) ืคึผืจื™ื•ื•ืขื ืฅ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืื™ืŸ ืงื™ื™ืŸ ื’ืขื’ื ื˜ ื•ื•ืึธืก ื–ืึธืœ ื ื™ื˜ ื–ื™ื™ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข, ืึทื–ืึท ื•ื•ื™ ื“ื™ ืึธื ืœื™ื™ื’ืŸ ืงื•ืคึผืข, ืืื–"ื• ื•.
  • RPATH/RUNPATH ื“ื™ื ืึธื•ืฅ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื“ืจืš ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ื“ื™ ื“ื™ื ืึทืžื™ืฉ ืœืึธื•ื“ืขืจ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ื•ื•ืึธืก ืจื™ื›ื˜ืŸ ืœื™ื™ื‘ืจืขืจื™ื–. ื“ืขืจ ืขืจืฉื˜ืขืจ ืื™ื– ืงืึทืžืคึผืึทืœืกืขืจื™ ืคึฟืึทืจ ืงื™ื™ืŸ ืžืึธื“ืขืจืŸ ืกื™ืกื˜ืขื: ื“ืขืจ ืึทื•ื•ืขืง ืึทืœืึทื•ื– ืึทื˜ืึทืงืขืจื– ืฆื• ืึทืจื‘ื™ื˜ืจืขืจืึทืœื™ ืฉืจื™ื™ึทื‘ืŸ ื“ื™ ืคึผื™ื™ืœืึธื•ื“ ืื™ืŸ ื–ื›ึผืจื•ืŸ ืื•ืŸ ื•ื™ืกืคื™ืจืŸ ืขืก ื•ื•ื™ ืขืก ืื™ื–. ืคึฟืึทืจ ื“ื™ ืจื’ืข, ืคืึทืœืฉ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื“ืจืš ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ื”ืขืœืคึฟืŸ ื™ื ื˜ืจืึธื•ื“ื•ืกื™ื ื’ ืึทื ืจื™ืœื™ื™ืึทื‘ืึทืœ ืงืึธื“ ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืึท ื ื•ืžืขืจ ืคื•ืŸ ืคึผืจืึธื‘ืœืขืžืก (ืœืžืฉืœ. ืคึผืจื™ื•ื•ื™ืœืขื’ื™ืข ืขืกืงืึทืœื™ืจื•ื ื’ืื•ืŸ ืื ื“ืขืจืข ืคืจืื‘ืœืขืžืขืŸ).
  • ืกื˜ืึทืง ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืฉื•ืฅ ื’ื™ื˜ ืฉื•ืฅ ืงืขื’ืŸ ืื ืคืืœืŸ ื•ื•ืึธืก ืคืึทืจืฉืึทืคืŸ ื“ื™ ืึธื ืœื™ื™ื’ืŸ ืฆื• ืึธื•ื•ื•ืขืจืœืึทืคึผ ืื ื“ืขืจืข ื’ืขื‘ื™ื˜ืŸ ืคื•ืŸ ื–ื›ึผืจื•ืŸ (ืึทื–ืึท ื•ื•ื™ ื“ื™ ืงื•ืคึผืข). ื’ืขื’ืขื‘ืŸ ืคืจื™ืฉ ืขืงืกืคึผืœื•ื™ืฅ ืึทื‘ื™ื•ื–ื™ื ื’ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ืกื™ืกื˜ืขืžื“ ืงื•ืคึผืข ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก, ืžื™ืจ ืคึผืขืœืฅ ืขืก ืื™ื– ืฆื•ื ืขืžืขืŸ ืฆื• ืึทืจื™ื™ึทื ื ืขืžืขืŸ ื“ืขื ืžืขืงืึทื ื™ื–ืึทื ืื™ืŸ ืื•ื ื“ื–ืขืจ ื“ืึทื˜ืึทืกืขื˜.

ืึทื–ื•ื™, ืึธืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืึทื“ื™ืฉืึทืŸ, ืœืึธื–ืŸ ืื•ื ื“ื– ื‘ืึทืงื•ืžืขืŸ ืึทืจืึธืคึผ ืฆื• ื“ื™ ื ื•ืžืขืจืŸ. ื˜ืึทื‘ืœืขืก 4 ืื•ืŸ 5 ืึทื ื˜ื”ืึทืœื˜ืŸ ืึท ืงื™ืฆืขืจ ืคื•ืŸ ื“ื™ ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื– ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, ืจื™ืกืคึผืขืงื˜ื™ื•ื•ืœื™.

  • ื•ื•ื™ ืื™ืจ ืงืขื ืขืŸ ื–ืขืŸ, NX ืฉื•ืฅ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื•ืžืขื˜ื•ื, ืžื™ื˜ ื–ืขืœื˜ืŸ ืื•ื™ืกื ืขืžืขืŸ. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ืื™ืจ ืงืขื ืขืŸ ื˜ืึธืŸ ืึท ื‘ื™ืกืœ ื ื™ื“ืขืจื™ืงืขืจ ื ื•ืฆืŸ ืื™ืŸ Ubuntu ืื•ืŸ Debian ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืงืึทืžืคึผืขืจื“ ืžื™ื˜ CentOS, RHEL ืื•ืŸ OpenSUSE.
  • ืกื˜ืึทืง ืงืึทื ืึทืจื™ืขืก ืคืขืœื ื“ื™ืง ืื™ืŸ ืคื™ืœืข ืขืจื˜ืขืจ, ืกืคึผืขืฆื™ืขืœ ืื™ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืžื™ื˜ ืขืœื˜ืขืจืข ืงืขืจื ืึทืœื–. ืขื˜ืœืขื›ืข ืคึผืจืึธื’ืจืขืก ืื™ื– ื’ืขื–ืขืŸ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืคื•ืŸ Centos, RHEL, Debian ืื•ืŸ Ubuntu.
  • ืžื™ื˜ ื“ื™ ื•ื™ืกื ืขื ืคื•ืŸ Debian ืื•ืŸ Ubuntu 18.04, ืจื•ื‘ึฟ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื”ืึธื‘ืŸ ื ืขื‘ืขืš PIE ืฉื˜ื™ืฆืŸ.
  • ืกื˜ืึทืง ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืฉื•ืฅ ืื™ื– ืฉื•ื•ืึทืš ืื™ืŸ OpenSUSE, Centos 7 ืื•ืŸ RHEL 7, ืื•ืŸ ื›ืžืขื˜ ื ื™ื˜-ืขื’ื–ื™ืกื˜ืึทื ื˜ ืื™ืŸ ืื ื“ืขืจืข.
  • ืึทืœืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืžื™ื˜ ืžืึธื“ืขืจืŸ ืงืขืจื ืึทืœื– ื”ืึธื‘ืŸ ืขื˜ืœืขื›ืข ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ RELRO, ืžื™ื˜ Ubuntu 18.04 ืœื™ื“ื™ื ื’ ื“ื™ ื•ื•ืขื’ ืื•ืŸ ื“ืขื‘ื™ืึทืŸ ืงื•ืžื˜ ืื™ืŸ ืจื’ืข.

ื•ื•ื™ ืฉื•ื™ืŸ ื“ืขืจืžืื ื˜, ื“ื™ ืžืขื˜ืจื™ืงืก ืื™ืŸ ื“ืขื ื˜ื™ืฉ ื–ืขื ืขืŸ ื“ื™ ื“ื•ืจื›ืฉื ื™ื˜ืœืขืš ืคึฟืึทืจ ืึทืœืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื“ื™ ื‘ื™ื™ื ืขืจื™ ื˜ืขืงืข. ืื•ื™ื‘ ืื™ืจ ืงื•ืง ื‘ืœื•ื™ื– ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื˜ืขืงืขืก, ื“ื™ ื ื•ืžืขืจืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทื ื“ืขืจืฉ (ืœืžืฉืœ, ื–ืขืŸ ื“ืขื‘ื™ืึทืŸ ืคึผืจืึธื’ืจืขืก ืžื™ื˜ PIE ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ). ื“ืขืจืฆื•, ืจื•ื‘ึฟ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื˜ื™ืคึผื™ืงืœื™ ื‘ืœื•ื™ื– ืคึผืจื•ื‘ื™ืจืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืึท ื‘ื™ืกืœ ืคืึทื ื’ืงืฉืึทื ื– ืื™ืŸ ื“ื™ ื‘ื™ื™ื ืขืจื™ ื•ื•ืขืŸ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื ื’ ืกื˜ืึทื˜ื™ืกื˜ื™ืง, ืึธื‘ืขืจ ืื•ื ื“ื–ืขืจ ืึทื ืึทืœื™ืกื™ืก ื•ื•ื™ื™ื–ื˜ ื“ื™ ืืžืช ืคึผืจืึธืฆืขื ื˜ ืคื•ืŸ ืคืึทื ื’ืงืฉืึทื ื– ื•ื•ืึธืก ื–ืขื ืขืŸ ืคืึทืจื’ืœื™ื•ื•ืขืจื˜. ื“ืขืจื™ื‘ืขืจ, ืื•ื™ื‘ 5 ืคื•ืŸ 50 ืคืึทื ื’ืงืฉืึทื ื– ื–ืขื ืขืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืื™ืŸ ืึท ื‘ื™ื™ื ืขืจื™, ืžื™ืจ ื’ืขื‘ืŸ ืขืก ืึท ื›ืขื–ืฉื‘ืŸ ืคื•ืŸ 0,1, ื•ื•ืึธืก ืงืึธืจืึทืกืคึผืึทื ื“ื– ืฆื• 10% ืคื•ืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ื– ื–ืขื ืขืŸ ื’ืขืฉื˜ืืจืงื˜.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ื˜ื™ืฉ 4. ื–ื™ื›ืขืจื”ื™ื™ื˜ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก ืคึฟืึทืจ ื“ื™ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ Fig. 3 (ื™ืžืคึผืœืึทืžืึทื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืคืึทื ื’ืงืฉืึทื ื– ื•ื•ื™ ืึท ืคึผืจืึธืฆืขื ื˜ ืคื•ืŸ ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก)

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ื˜ื™ืฉ 5. ื–ื™ื›ืขืจื”ื™ื™ื˜ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก ืคึฟืึทืจ ื“ื™ ืœื™ื™ื‘ืจืขืจื™ื– ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ืคื™ื’ื•ืจืข. 3 (ื™ืžืคึผืœืึทืžืึทื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืคืึทื ื’ืงืฉืึทื ื– ื•ื•ื™ ืึท ืคึผืจืึธืฆืขื ื˜ ืคื•ืŸ ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื–)

ืึทื–ื•ื™ ืื™ื– ืขืก ืคึผืจืึธื’ืจืขืก? ืขืก ืื™ื– ื‘ืืฉื˜ื™ืžื˜: ื“ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื–ืขืŸ ืคึฟื•ืŸ ื“ื™ ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืคึฟืึทืจ ื™ื—ื™ื“ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– (ืœืžืฉืœ, ื“ืขื‘ื™ืึทืŸ), ื•ื•ื™ ืื•ื™ืš ืคื•ืŸ ื“ื™ ืœื•ื—ื•ืช ืื•ื™ื‘ืŸ. ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ ืื™ืŸ Fig. ืคื™ื’ื•ืจ 6 ื•ื•ื™ื™ื–ื˜ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืฉื•ืฅ ืžืขืงืึทื ื™ื–ืึทืžื– ืื™ืŸ ื“ืจื™ื™ ืกืึทืงืกืขืกื™ื•ื• ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืคื•ืŸ Ubuntu LTS 5 (ืžื™ืจ ื”ืึธื‘ืŸ ืื™ื‘ืขืจื’ืขื”ื™ืคึผืขืจื˜ ืกื˜ืึทื˜ื™ืง ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืฉื•ืฅ ืกื˜ืึทื˜ื™ืกื˜ื™ืง). ืžื™ืจ ื‘ืึทืžืขืจืงืŸ ืึทื– ืคึฟื•ืŸ ื•ื•ืขืจืกื™ืข ืฆื• ื•ื•ืขืจืกื™ืข, ืžืขืจ ืื•ืŸ ืžืขืจ ื˜ืขืงืขืก ืฉื˜ื™ืฆืŸ ืึธื ืœื™ื™ื’ืŸ ืงืึทื ืึทืจื™ืขืก, ืื•ืŸ ืžืขืจ ืื•ืŸ ืžืขืจ ื‘ื™ื ืึทืจื™ืขืก ื–ืขื ืขืŸ ืฉื™ืคึผื˜ ืžื™ื˜ ืคื•ืœ RELRO ืฉื•ืฅ.

ืžื™ืœื™ืึทื ื– ืคื•ืŸ ื‘ื™ื ืึทืจื™ืขืก ืฉืคึผืขื˜ืขืจ. ื•ื•ื™ ืœื™ื ื•ืงืก ื’ืขื•ื•ืืงืกืŸ ืฉื˜ืืจืงืขืจ
ืคื™ื’. 6

ืฆื•ื ื‘ืึทื“ื•ื™ืขืจืŸ, ืึท ื ื•ืžืขืจ ืคื•ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื ืึธืš ื˜ืึธืŸ ื ื™ื˜ ื”ืึธื‘ืŸ ืงื™ื™ืŸ ืคื•ืŸ ื“ื™ ืื•ื™ื‘ืŸ ืคึผืจืึทื˜ืขืงืฉืึทื ื–. ืฆื•ื ื‘ื™ื™ืฉืคึผื™ืœ, ื•ื•ืขืŸ ืื™ืจ ืงื•ืง ืื™ืŸ Ubuntu 18.04, ืื™ืจ ื•ื•ืขื˜ ื‘ืึทืžืขืจืงืŸ ื“ื™ ngetty ื‘ื™ื™ื ืขืจื™ (ืึท ื’ืขื˜ื™ ืคืึทืจื‘ื™ื™ึทื˜), ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ mksh ืื•ืŸ lksh ืฉืขืœื–, ื“ื™ ืคึผื™ืงืึธืœื™ืกืคึผ ื™ื‘ืขืจื–ืขืฆืขืจ, ื“ื™ nvidia-cuda-toolkit ืคึผืึทืงืึทื“ื–ืฉืึทื– (ืึท ืคืึธืœืงืก ืคึผืขืงืœ ืคึฟืึทืจ ื’ืคึผื•-ืึทืงืกืขืœืขืจื™ื™ื˜ื™ื“ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–). ืึทื–ืึท ื•ื•ื™ ืžืึทืฉื™ืŸ ืœืขืจื ืขืŸ ืคืจืึทืžืขื•ื•ืึธืจืงืก), ืื•ืŸ klibc-utils. ืคึผื•ื ืงื˜ ืึทื–ื•ื™, ื“ื™ ืžืึทื ื“ืึธืก-ืงืœื™ืขื ื˜ ื‘ื™ื™ื ืขืจื™ (ืึทืŸ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ื™ื•ื•ืข ื’ืขืฆื™ื™ึทื’ ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืจืขื‘ืึธืึธื˜ ืžืืฉื™ื ืขืŸ ืžื™ื˜ ื™ื ืงืจื™ืคึผื˜ื™ื“ ื˜ืขืงืข ืกื™ืกื˜ืขืžืขืŸ) ืื•ืŸ rsh-redone-ืงืœื™ืขื ื˜ (ืึท ืจื™ื™ืžืคึผืœืขืžืขื ื˜ืึทื˜ื™ืึธืŸ ืคื•ืŸ rsh ืื•ืŸ rlogin) ืึธืŸ NX ืฉื•ืฅ, ื›ืึธื˜ืฉ ื–ื™ื™ ื”ืึธื‘ืŸ SUID ืจืขื›ื˜: (. ืื•ื™ืš, ืขื˜ืœืขื›ืข ืกื•ื™ื“ ื‘ื™ื ืึทืจื™ืขืก ืคืขืœืŸ ื™ืงืขืจื“ื™ืง ืฉื•ืฅ ืึทื–ืึท ื•ื•ื™ ืึธื ืœื™ื™ื’ืŸ ืงืึทื ืึทืจื™ืขืก (ืœืžืฉืœ, ื“ื™ Xorg.wrap ื‘ื™ื™ื ืขืจื™ ืคื•ืŸ ื“ื™ Xorg ืคึผืขืงืœ).

ืงื™ืฆืขืจ ืื•ืŸ ืกืึธืฃ ืจื™ืžืึทืจืงืก

ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื”ืึธื‘ืŸ ื›ื™ื™ืœื™ื™ื˜ื™ื“ ืขื˜ืœืขื›ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ ืžืึธื“ืขืจืŸ ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–. ื“ื™ ืึทื ืึทืœื™ืกื™ืก ื”ืื˜ ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ื™ ืœืขืฆื˜ืข Ubuntu LTS ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ (18.04) ื™ืžืคึผืœืึทืžืึทื ืฅ, ืื™ืŸ ื“ื•ืจื›ืฉื ื™ื˜ืœืขืš, ื“ื™ ืกื˜ืจืึธื ื’ืขืกื˜ ืึทืก ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืžื“ืจื’ื” ืฉื•ืฅ ืฆื•ื•ื™ืฉืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืžื™ื˜ ืœืขืคื™ืขืจืขืš ื ื™ื™ึท ืงืขืจื ืึทืœื–, ืึทื–ืึท ื•ื•ื™ Ubuntu 14.04, 12.04 ืื•ืŸ Debian 9. ืึธื‘ืขืจ, ื“ื™ ื™ื’ื–ืึทืžืึทื ื“ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– CentOS, RHEL ืื•ืŸ OpenSUSE ืื™ืŸ ืื•ื ื“ื–ืขืจ ื’ืึทื ื’ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ื–ื™ื™ ืคึผืจืึธื“ื•ืฆื™ืจืŸ ืึท ื“ืขื ืกืขืจ ื’ืึทื ื’ ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื–, ืื•ืŸ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ื•ื•ืขืจืกื™ืขืก (CentOS ืื•ืŸ RHEL) ื–ื™ื™ ื”ืึธื‘ืŸ ืึท ื”ืขื›ืขืจ ืคึผืจืึธืฆืขื ื˜ ืคื•ืŸ ืึธื ืœื™ื™ื’ืŸ ืฆื•ื ื•ื™ืคืฉื˜ื•ื™ืก ืฉื•ืฅ ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ื“ืขื‘ื™ืึทืŸ-ื‘ืื–ื™ืจื˜ ืงืึธืžืคึผืขื˜ื™ื˜ืึธืจืก (ื“ืขื‘ื™ืึทืŸ ืื•ืŸ ื•ื‘ื•ื ื˜ื•). ืงืึทืžืคึผืขืจื“ ืžื™ื˜ CentOS ืื•ืŸ RedHat ื•ื•ืขืจืกื™ืขืก, ืžื™ืจ ื‘ืึทืžืขืจืงืŸ ื’ืจื•ื™ืก ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืกื˜ืึทืง ืงืึทื ืึทืจื™ืขืก ืื•ืŸ RELRO ืคึฟื•ืŸ ื•ื•ืขืจืกื™ืขืก 6 ืฆื• 7, ืึธื‘ืขืจ ืื™ืŸ ื“ื•ืจื›ืฉื ื™ื˜ืœืขืš, CentOS ื”ืื˜ ืžืขืจ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื•ื•ื™ RHEL. ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืึทืœืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื–ืึธืœ ื‘ืึทืฆืึธืœืŸ ืกืคึผืขืฆื™ืขืœ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ื˜ ืฆื• PIE ืฉื•ืฅ, ื•ื•ืึธืก, ืžื™ื˜ ื“ื™ ื•ื™ืกื ืขื ืคื•ืŸ Debian 9 ืื•ืŸ Ubuntu 18.04, ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ื•ื•ื™ 10% ืคื•ืŸ ื“ื™ ื‘ื™ื ืึทืจื™ืขืก ืื™ืŸ ืื•ื ื“ื–ืขืจ ื“ืึทื˜ืึทืกืขื˜.

ืฆื•ื ืกื•ืฃ, ืขืก ื–ืึธืœ ื–ื™ื™ืŸ ืื ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื›ืึธื˜ืฉ ืžื™ืจ ื’ืขืคื™ืจื˜ ื“ื™ ืคืึธืจืฉื•ื ื’ ืžืึทื ื™ื•ืึทืœื™, ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื›ืฉื™ืจื™ื ื‘ื ื™ืžืฆื (ืœืžืฉืœ. ืœื™ื ื™ืก, ื˜ื™ื’ืขืจ, ื”ื•ื‘ื‘ืœืข), ื•ื•ืึธืก ื“ื•ืจื›ืคื™ืจืŸ ืึทื ืึทืœื™ืกื™ืก ืื•ืŸ ื”ืขืœืคึฟืŸ ื•ื™ืกืžื™ื™ื“ืŸ ืึทื ืกื™ื™ืฃ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื–. ืฆื•ื ื‘ืึทื“ื•ื™ืขืจืŸ, ืืคื™ืœื• ืฉื˜ืึทืจืง ืฉื•ืฅ ืื™ืŸ ื’ืœื™ื™ึทืš ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ืงืขืŸ ื ื™ืฉื˜ ื’ืึทืจืึทื ื˜ื™ืจืŸ ื“ื™ ืึทื•ื•ืขืง ืคื•ืŸ ืขืงืกืคึผืœื•ื™ืฅ. ืึทื– ืก ื•ื•ืึธืก ืžื™ืจ ืคืขืกื˜ ื’ืœื•ื™ื‘ืŸ ืึทื– ืขืก ืื™ื– ื•ื•ื™ื˜ืึทืœ ืฆื• ืขื ืฉื•ืจ ืคืึทืจืœืึธื–ืœืขืš ืžืึธื ื™ื˜ืึธืจื™ื ื’ ืื•ืŸ ืคืึทืจื”ื™ื˜ื•ื ื’ ืคื•ืŸ ืื ืคืืœืŸ ืื™ืŸ ืคืึทืงื˜ื™ืฉ ืฆื™ื™ื˜, ืคืึธื•ืงื™ืกื™ื ื’ ืื•ื™ืฃ ืคึผืึทื˜ืขืจื ื– ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืื•ืŸ ืคึผืจืขื•ื•ืขื ื˜ื™ื ื’ ื–ื™ื™.

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’