Kullewa, mai zuwa Linux 5.4 wanda zai kara mana tsaro

Kullewa

Lokacin da muke magana game da Linux, abu na farko da yake yawan tuna wa da yawa shine m, amma kuma tsaro. Kodayake babu cikakken tsarin aiki, yadda tsarin aikin penguin ke gudanar da izini yana sa wahalar amfani da wahala. Amma komai na iya inganta, an hada da tsaro, sannan Linux 5.4 zasu hada da sabon tsarin tsaro da suka kira Kullewa.

Linus Torvalds ya amince da fasalin a ranar Asabar din da ta gabata, bayan an kwashe shekaru ana mahawara. A koyaushe zai isa Linux 5.4, sigar kwaya wacce ke karɓar buƙatun aiki yanzu, amma za a kashe ta tsohuwa. Zai zama LSM (Linux Securiry Module ko Linux na koyaushe na tsaro) kuma an yanke shawarar ƙin kunna shi ta tsohuwa saboda canje-canjen na iya haifar da tsarin aiki aiki.

Kullewa za a kashe ta tsohuwa a cikin Linux 5.4

La Babban aiki Kullewa zai ƙarfafa rarrabuwa tsakanin matakan mai amfani da lambar kernel hana ko da asusun mai gudanarwa daga ma'amala tare da lambar kernel Linux, wani abu da za'a iya yi har yanzu. Sabuwar LSM za ta takura wasu ayyukan kernel, ta hana asusunan tushen lalata sauran tsarin aiki. Daga cikin wasu abubuwa, Kullewa zai taƙaita samun dama ga ayyukan kernel wanda ke ba da izinin aiwatar da lambar ba da izini ta hanyar aiwatarwar mai amfani, zai kulle matakai daga iya karanta / rubutawa zuwa tunanin / dev / mem y / dev / kmem da kuma damar bude / dev / tashar jiragen ruwa.

Za a sami hanyoyi biyu na Kullewa: "mutunci" da "sirri", kowane ɗayan daban ne kuma yana ƙuntata damar zuwa ayyukan kernel daban-daban:

Idan an saita shi zuwa mutunci, ayyukan kernel da ke ba masu amfani damar gyara kwayar suna aiki. Idan an saita shi zuwa sirri, ayyukan kernel wanda ke ba masu amfani damar cire bayanai daga kwaya suma an kashe su.

Wannan muhimmin mataki ne akan hanya don samar da Linux mafi aminci, wanda ake tattaunawa tun shekara ta 2010. Wataƙila, kamar yadda Afrilu 2020 Bari mu buga ƙasa da labarai masu alaƙa da kwari na tsaro da Canonical ya gyara albarkacin fasalin da zai samu daga Disamba.

swags
Labari mai dangantaka:
SWAPGS Attack, "sabon Specter" wanda ya shafi masu sarrafa Intel

Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.