Kutseka, gawo la Linux 5.4 lomwe likubwera lomwe liziwonjezera chitetezo chathu

Tikamayankhula za Linux, chinthu choyamba chomwe chimabwera m'maganizo mwa ambiri ndi otsiriza, komanso chitetezo. Ngakhale kulibe magwiridwe antchito abwino, momwe magwiridwe antchito a penguin amatengera zilolezo kumapangitsa zovuta kukhala zovuta kugwiritsa ntchito. Koma zonse zitha kusintha, kuphatikiza chitetezo, ndipo Linux 5.4 iphatikizira gawo latsopano lachitetezo lomwe ayitanira Lockdown.

Linus Torvalds adavomereza nkhaniyi Loweruka lapitali, atakhala kuti akambirane kwa zaka zingapo. Gawo la module ifika ku Linux 5.4, mtundu wa kernel womwe tsopano ukulandila kufunsa kwa ntchito, koma udzalemala mwachisawawa. Idzakhala LSM (Linux Securiry Module kapena module yachitetezo ya Linux) ndipo lingaliro loti lisayikidwe mwachisawawa lapangidwa chifukwa kusinthaku kungayambitse makinawo.

Lockdown idzakhumudwitsidwa mwachisawawa mu Linux 5.4

La Ntchito yayikulu Lockdown ilimbitsa magawano pakati pa ogwiritsa ntchito ndi nambala ya kernel kuletsa ngakhale akaunti ya administrator kuti isagwirizane ndi kernel code Linux, china chomwe chingachitike mpaka pano. LSM yatsopano idzaletsa ntchito zina za kernel, kuletsa mizu ya akaunti kusokoneza machitidwe ena onse. Mwazina, Lockdown iziletsa kufikira kwa ntchito za kernel zomwe zimaloleza kuponderezedwa kwa ma code operekedwa ndi ma userland, zimatseka njira kuti athe kuwerenga / kulemba kukumbukira / dev / mem y / dev / kmem ndi mwayi wotsegula / dev / port.

Padzakhala mitundu iwiri ya Lockdown: "umphumphu" ndi "chinsinsi", iliyonse ndiyapadera ndipo imaletsa kufikira kwa magwiridwe antchito amtundu wina:

Ngati yayikidwa pakukhulupirika, ntchito za kernel zomwe zimalola kutilandland isinthe kernel ndizolumala. Ngati yayikidwa mwachinsinsi, ntchito za kernel zomwe zimalola kuti ogwiritsa ntchito kutulutsa zidziwitso ku kernel nawonso ndizolemala.

Ili ndi gawo lofunikira panjira yopangitsa Linux kukhala yotetezeka kwambiri, yomwe yakhala ikukambidwa kuyambira 2010. Mwinanso, kuyambira Epulo 2020 Tiyeni tilembere nkhani zochepa zokhudzana ndi nsikidzi zotetezedwa zomwe zidakhazikitsidwa ndi Canonical chifukwa chazomwe zidzapezeke kuyambira Disembala.

Nkhani yowonjezera:

SWAPGS Attack, "Specter yatsopano" yomwe imakhudza ma processor a Intel