Iphrojekthi ye-Openwall ishicilele ukukhululwa kwemojula ye-kernel LKRG 0.9.0 (Linux Kernel Runtime Guard), eklanyelwe ukuthola futhi ivimbe ukuhlaselwa kanye nokwephulwa kobuqotho bezakhiwo ze-kernel. Isibonelo, imojuli ingavikela ezinguqukweni ezingagunyaziwe ku-kernel esebenzayo futhi izame ukushintsha izimvume zezinqubo zomsebenzisi (ukuthola ukusetshenziswa kokuxhashazwa). Imojula ifanele kokubili ukuhlela ukuvikela ezenzweni zobungozi be-Linux kernel osewaziwayo (isibonelo, ezimeni lapho kunzima khona ukubuyekeza i-kernel ohlelweni), kanye nokubala ukuxhashazwa ngobungozi obungaziwa okwamanje. Ikhodi yephrojekthi isatshalaliswa ngaphansi kwelayisensi ye-GPLv2.
Phakathi kwezinguquko zenguqulo entsha:
- Ukuhambisana kunikezwa ngama-Linux kernels asuka ku-5.8 kuya ku-5.12, kanye nama-kernels azinzile 5.4.87 nakamuva (okuhlanganisa nokuqanjwa kabusha okuvela kuma-kernel 5.8 nakamuva) kanye nama-kernels asuka ezinguqulweni ze-RHEL kufika ku-8.4, kuyilapho kugcinwa ukusekelwa kwazo zonke izinguqulo ezisekelwe ngaphambilini ze-RHEL izikhwebu, ezifana nezikhwebu ezivela ku-RHEL 7;
- Kwengezwe ikhono lokwakha i-LKRG hhayi nje njengemojula yangaphandle, kodwa futhi njengengxenye yesihlahla se-Linux kernel, kuhlanganise nokufakwa kwayo emfanekisweni we-kernel;
- Ukwesekwa okwengeziwe kwe-kernel eyengeziwe kanye nokuhlelwa kwesistimu;
- Kulungiswe amaphutha amaningana abalulekile kanye nokushiyeka ku-LKRG;
- Ukuqaliswa kwezinye izingxenye ze-LKRG kwenziwe kwaba lula kakhulu;
- Izinguquko zenziwe ukuze kube lula ukwesekwa nokulungisa iphutha le-LKRG;
- Ukuze kuhlolwe i-LKRG, ukuhlanganiswa nokungaphandle kwesihlahla kanye nomkosi kungeziwe;
- Inqolobane yephrojekthi isusiwe ku-BitBucket yayiswa ku-GitHub futhi ukuhlanganiswa okuqhubekayo kwengezwe kusetshenziswa i-GitHub Actions kanye ne-mkosi, okuhlanganisa ukuhlola ukwakhiwa nokulayishwa kwe-LKRG kuma-kernel akhishwayo e-Ubuntu, kanye nokwakhiwa kwansuku zonke kwezinhlamvu zamuva eziyinhloko ezinikezwa Ubuntu project.
Onjiniyela abaningana abebengahileleki kuphrojekthi ngaphambilini benze iminikelo eqondile kule nguqulo ye-LKRG (ngezicelo zokudonsa ku-GitHub). Ikakhulukazi, u-Boris Lukashev wengeze ikhono lokwakha njengengxenye yesihlahla se-Linux kernel, futhi u-Vitaly Chikunov ovela ku-ALT Linux wengeze ukuhlanganiswa ne-mkosi kanye ne-GitHub Actions.
Sekukonke, naphezu kokwengezwa okuphawulekayo, inani lemigqa yekhodi ye-LKRG liye lancishiswa kancane okwesibili ngokulandelana (futhi lancishiswa ngaphambilini phakathi kwezinguqulo 0.8 kanye ne-0.8.1).
Okwamanje, iphakheji ye-LKRG ku-Arch Linux isivele ivuselelwe ukuze ibe yinguqulo engu-0.9.0, futhi idlanzana lamanye amaphakheji asebenzisa izinguqulo zakamuva ze-git ze-LKRG futhi cishe azobuyekezwa enguqulweni engu-0.9.0 nangaphezulu maduzane.
Ukwengeza, singaphawula ukushicilelwa kwakamuva okuvela kubathuthukisi be-Aurora OS (ukuguqulwa kwesiRashiya kwe-Sailfish OS) mayelana nokuqiniswa okungenzeka kwe-LKRG kusetshenziswa i-ARM TrustZone.
Ukuze uthole ulwazi olwengeziwe mayelana ne-LKRG, bheka isimemezelo senguqulo 0.8 kanye nengxoxo eyenzeka ngaleso sikhathi.
Source: opennet.ru