I-Linux Foundation imemezele ukuthi i-Google ihlinzeke ngemali yomsebenzi ukuze kugcinwe izindlela zokuphepha ku-Linux kernel nokuqinisa ukuphepha kwe-kernel. UGustavo Silva noNathan Chancellor bazoqashwa ngokugcwele.
UNathan waziwa ngomsebenzi wakhe wokuqinisekisa ukuthi i-Linux kernel yakhiwe kusetshenziswa i-Clang compiler kanye nokuhlanganisa izindlela zokuvikela isikhathi ezifana ne-CFI (Control Flow Integrity) ekwakheni. Umsebenzi kaNathan wesikhathi esizayo esigabeni sokuqala uzogxila ekususeni wonke amaphutha avelayo lapho kusetshenziswa i-Clang/LLVM, nokusebenzisa isistimu yokuhlanganisa eqhubekayo yokuhlola ukwakha okusekelwe ku-Clang. Uma izinkinga ezaziwayo sezixazululiwe, umsebenzi uzoqala ukungeza izithuthukisi zokuphepha ezengeziwe ezinikezwe umdidiyeli we-Clang ku-kernel.
UGustavo ungomunye wabahlanganyeli abakhuthele kuphrojekthi ye-KSPP (Kernel Self Protection Project) ukuze kuthuthukiswe ubuchwepheshe bokuvikela obusebenzayo ku-Linux kernel. Umsebenzi oyinhloko ka-Gustavo kuzoba ukuqeda izigaba ezithile zokuchichima kwebhafa ngokufaka esikhundleni sazo zonke izimo zamalungu afanayo anobude obuziro noma aqukethe isici esisodwa esinesimemezelo sohlelo olufanayo olungenasici (Ilungu Le-Flexible Array). Ngaphezu kwalokho, u-Gustavo uzobandakanyeka ekulungiseni amaphutha kukhodi ngaphambi kokuba ingene engxenyeni eyinhloko ye-kernel, futhi ithuthukise izindlela zokuvikela ezisebenzayo ku-kernel.
Source: opennet.ru