Andrew Konovalov Injineli yesoftware kaGoogle, kutyhilwe indlela yokukhubaza ukhuseleko kude Amazing iboniswe kwi-Linux kernel ebonelelwe kwi-Ubuntu. Ngayo ibonisa ukuba iindlela zokhuselo azisebenzi, Kwaye ukwakhankanya ukuba iindlela azityhilileyo ithiyori kufuneka zisebenze kunye neFedora kernel nolunye usasazo ngokunjalo, (kodwa khange luvavanywe).
Kulabo abangazi ngokutshixeka, Kuya kufuneka bayazi ukuba licandelo le-Linux kernel leyo Umsebenzi wawo ophambili kukunciphisa ukufikelela komsebenzisi wengcambu kwikernel yenkqubo kunye nokusebenza isiwe kwimodyuli ye-LSM ilayishwe ngokuzithandela (iModyuli yoKhuseleko yeLinux), yona iseka isithintelo phakathi kwe-UID 0 kunye nekernel, ukunciphisa umda kwimisebenzi ethile ekwinqanaba elisezantsi.
Oku kuvumela umsebenzi wokutshixeka ukuba usekwe kumgaqo-nkqubo endaweni yokufaka iikhowudi nzima kumgaqo-nkqubo ocacileyo ngaphakathi kwendlela, ke iqhaga elibandakanyiweyo kwiModyuli yoKhuseleko yeLinux libonelela ngomiliselo ngomgaqo olula yenzelwe ukusetyenziswa ngokubanzi. Lo mgaqo-nkqubo ubonelela ngenqanaba legranularity elawulekayo ngelayini yomyalelo wekernel.
Malunga nokutshixa
Isitshixo sithintela ukufikelela kweengcambu kwi-kernel kunye neebhloko ze-UEFI ezikhuselekileyo zokuhamba ngokudlula kwiindlela.
Umzekelo, kwimowudi yokutshixa, ukufikelela kwi / dev / mem, / dev / kmem, / dev / port, / proc / kcore, debugfs, debug mode kprobes, mmiotrace, tracefs, BPF, PCMCIA CIS, phakathi kwezinye izinto, ezinye Isikelwe umda kunye neerejista ze-ACPI kunye neMSR zeCPU.
Ngelixa i-kexec_fayile kunye ne-kexec_load iminxeba itshixiwe, imo yokulala ayivumelekanga, ukusetyenziswa kwe-DMA kwizixhobo ze-PCI kunqunyelwe, ukungenisa ikhowudi ye-ACPI ukusuka kwizinto eziguquguqukayo ze-EFI akuvumelekanga, kunye nokuphathwa kwamazibuko okufaka / okuphuma, kubandakanya utshintsho inombolo yokuphazamisa kunye no-I / O izibuko lezibuko lezibuko.
Njengoko abanye besazi, indlela ye i-lockdown yongezwa kwi-Linux kernel 5.4, kodwa isaphunyezwa ngohlobo lweepatches okanye zongezwa ngamachaphaza kwiimbewu ezibonelelweyo nosasazo.
Apha, omnye umahluko phakathi kweeplagi ezibonelelweyo kulwabiwo kunye nokuphunyezwa kwe-kernel sisakhono sokukhubaza isitshixo esinikiweyo xa kukho ukufikelela ngokwasemzimbeni kwinkqubo.
Ubuntu kunye neFedora basebenzisa indibaniselwano ephambili I-Alt + SysRq + X ukukhubaza iqhaga. Iyaqondakala into yokuba indibaniselwano I-Alt + SysRq + X inokusetyenziswa kuphela ngokufikelela ngokwasemzimbeni kwisixhobo kwaye kwimeko yokuhlaselwa okukude kunye nokufikelela kwengcambu, umhlaseli akazokwazi ukukhubaza iqhaga.
Ukutshixa kunokukhubazeka ukude
UAndrei Konovalov wakungqina oko iindlela ezinxulumene nebhodi yezitshixo Ukuqinisekisa ubukho bomsebenzisi bomsebenzisi akusebenzi.
Yena uxele ukuba eyona ndlela ilula yokukhubaza isitshixo kukulinganisa cinezela I-Alt + SysRq + X kuhamba / dev / uinput, kodwa olu khetho luqale luthintelwe.
Kodwa, ubuncinci ezinye iindlela ezimbini zokutshintsha I-Alt + SysRq + X.
- Indlela yokuqala ibandakanya ukusebenzisa i-interface sysrq-ibangela: ukulinganisa, yenza nje ujongano ngokuchwetheza "1" kwi / inkqubo / sys / kernel / sysrq kwaye emva koko uchwetheze "x" kwi / proc / sysrq-ibangela.
Lo msantsa walungiswa kuhlaziyo lukaDisemba Ubuntu kernel nakwiFedora 31. Kuyaphawuleka ukuba abaphuhlisi, njengakwimeko ye / dev / uinput, baqale bazama ukuvimba le ndlela, kodwa ukuvimba akusebenzi ngenxa yegciwane kwikhowudi. - Indlela yesibini kukulingisa ikhibhodi nge-USB / IP kwaye emva koko uthumele ukulandelelana kweAlt + SysRq + X kwikhibhodi ebonakalayo.
Kwi-kernel, i-USB / IP ebonelelwa ngu-Ubuntu yenziwe ngokungagqibekanga kunye neemodyuli yibip_core y ivci_hcd eziyimfuneko zinikwa umsayino wedijithali ofunekayo.
Umhlaseli unokwenza isixhobo esibonakalayo se-USB ngokusebenzisa isilawuli senethiwekhi kwi-loopback interface kwaye uyixhume njengesixhobo esikude se-USB usebenzisa i-USB / IP.
Indlela echaziweyo ixeliwe kubaphuhlisi bo-Ubuntu, kodwa isisombululo asikakhululwa.
Umthombo: https://github.com