ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ eBPF ืกืึทื‘ืกื™ืกื˜ืึทื ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืจื’ืจืขืกืขืจืŸ ื“ื™ื™ืŸ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–

ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ eBPF ืกืึทื‘ืกื™ืกื˜ืขื (ืขืก ืื™ื– ืงื™ื™ืŸ CVE), ื•ื•ื™ ื ืขื›ื˜ืŸ ืก ืคึผืจืึธื‘ืœืขื ื•ื•ืึธืก ืึทืœืึทื•ื– ืึท ื”ื™ื’ืข ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ ืฆื• ื•ื™ืกืคื™ืจืŸ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืžื“ืจื’ื”. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืืจื•ื™ืก ื–ื™ื ื˜ ืœื™ื ื•ืงืก ืงืขืจืŸ 5.8 ืื•ืŸ ื‘ืœื™ื™ื‘ื˜ ืึทื ืคื™ืงืกื˜. ื ืืจื‘ืขื˜ืŸ ืขืงืกืคึผืœื•ื™ื˜ ืื™ื– ืฆื•ื’ืขื–ืื’ื˜ ืฆื• ื–ื™ื™ืŸ ืืจื•ื™ืก ืื•ื™ืฃ 18 ื™ืื ื•ืืจ.

ื“ื™ ื ื™ื™ึทืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ eBPF ืžื’ื™ืœื” ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืคึฟืึทืจ ื“ื•ืจื›ืคื™ืจื•ื ื’. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ื“ื™ eBPF ื•ื•ืขืจืึทืคื™ื™ืขืจ ื”ืื˜ ื ื™ืฉื˜ ืจืขื›ื˜ ื‘ืึทื’ืจืขื ืขืฆืŸ ืขื˜ืœืขื›ืข ื˜ื™ื™ืคึผืก ืคื•ืŸ *_OR_NULL ืคึผื•ื™ื ื˜ืขืจื–, ื•ื•ืึธืก ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืžืึทื ื™ืคึผื•ืœื™ืจืŸ ืคึผื•ื™ื ื˜ืขืจื– ืคื•ืŸ eBPF ืžื’ื™ืœื” ืื•ืŸ ื“ืขืจื’ืจื™ื™ื›ืŸ ืึท ืคืึทืจื’ืจืขืกืขืจืŸ ืื™ืŸ ื–ื™ื™ืขืจ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–. ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืขืก ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜ ืฆื• ืคืึทืจื•ื•ืขืจืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ BPF ืžื’ื™ืœื” ื“ื•ืจืš ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื™ื•ื–ืขืจื– ืžื™ื˜ ื“ื™ ื‘ืึทืคึฟืขืœ "sysctl -w kernel.unprivileged_bpf_disabled=1".

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’