Amekae Ŋlɔa Nudzodzoewo? Kernel ƒe Afɔku 125,000 ƒe Kpɔkpɔ Deto

Le ɣeyiɣi si me dijitaal dɔwɔnuwoe nye míaƒe agbenɔnɔ ƒe akpa sia akpa kloe ƒe gɔmeɖoanyi me la, míaƒe dɔwɔɖoɖowo ƒe akpa vevitɔ kekeake—si nye dɔwɔɖoɖoa ƒe akpa si le eme— ƒe dedienɔnɔe nye nu vevitɔ kekeake. Numekuku blibo aɖe si wowɔ nyitsɔ laa si ku nu me le Linux ƒe kernel ƒe afɔku siwo wu 125,000 ŋu na kekeli si tɔgbe medzɔ kpɔ o la na dedienɔnɔ ƒe vodada vevi siawo dzɔ tso. Nusiwo ŋu woke ɖo ɖe ŋutinya sesẽ aɖe si yi ŋgɔ wu fɔbubu bɔbɔe la fia, si na gɔmesese veviwo asitsaha siwo le agbagba dzem be yewoatu mɔ̃ɖaŋununya ƒe gɔmeɖoanyi siwo te ŋu nɔa te ɖe nɔnɔme sesẽwo nu eye wole dedie ɖo. ### Vodadaa Dzɔtsoƒe: Nyaɖeɖefia wɔnuku aɖe Nunya si bɔ ate ŋu afia be dedienɔnɔ ƒe kuxi akpa gãtɔ tso dɔwɔƒe siwo si nuteƒekpɔkpɔ mele o alo nuwɔla vɔ̃ɖiwo gbɔ. Gake nyatakakaawo gblɔ nya bubu aɖe. Kernel bugs ƒe akpa gãtɔ—si ade 60%—menye coder yeyewoe to wo vɛ o ke boŋ dɔwɔƒe gã bibiwoe to wo vɛ. Esiawo nye ame ɖekaɖeka siwo se kernel la ƒe xɔtuɖaŋu si gɔme sese sesẽ la gɔme deto, eye wode dɔ asi na wo be woawɔ nɔnɔme sesẽwo kple dɔwɔwɔ ƒe nyonyome ŋudɔ. Nunya si tututu na wote ŋu doa nukua ɖe ŋgɔ hã nana wowɔa vodada siwo menya kpɔna dzea sii bɔbɔe o, siwo kpɔa ŋusẽ gã aɖe ɖe ame dzi. Nya sia si tsi tre ɖe wo nɔewo ŋu la te gbe ɖe edzi be nusiwo gɔme sese sesẽ ye nye dedienɔnɔ ƒe futɔ vevitɔ, ke menye ŋutetemanɔamesi o. Le nu yeyewo dodo ɖe ŋgɔ kple dɔwɔwɔ nyuie yometiti madzudzɔmadzudzɔe me la, eŋutinunyala bibiwo gɔ̃ hã ate ŋu awɔ chinks le dijitaal aʋawɔnuwo me le manyamanya me. ### Gbɔdzɔgbɔdzɔa ƒe Nɔnɔme: Ŋkuɖodzinyawoe ɖua dzi Ne míeku nu me tsitotsito le afɔku ƒomevi tɔxɛawo me la, eɖea kuxi aɖe si nɔa anyi ɖaa eye wonya nyuie la fiana. Ŋkuɖodzinyawo ƒe dedienɔnɔ dzi dada yi edzi le ŋusẽ kpɔm ɖe kernel dedienɔnɔ ƒe vodadawo ƒe nɔnɔme dzi. Nyawo abe vodada siwo wowɔna le zazã vɔ megbe, buffer ƒe agbɔsɔsɔ fũ, kple mɔɖeɖe le seɖoƒe godo ene nye CVE siwo katã ŋu woka nya ta le (Common Vulnerabilities and Exposures) ƒe akpa vevi aɖe. Vodada siawo dzɔna ne kernel la mekpɔ ŋkuɖodzinu dzi nyuie o, si ate ŋu ana amedzidzelawo nawɔ kɔpi si wodi alo agbã ɖoɖoa. Alesi nya siawo bɔe la te gbe ɖe afɔku siwo le ɖoɖowɔɖi ƒe gbegbɔgblɔwo abe C ene zazã me dzi, siwo naa dziɖuɖu sẽŋu si mebɔ o gake wotsɔa ŋkuɖodzinyawo dzi kpɔkpɔ nyuie ƒe agba da ɖe ewɔla dzi tẽ. Nusi ŋu woke ɖo sia nye ŋkuɖodzinu vevie be togbɔ be kɔmpiutadziɖoɖo ƒe akpa veviwo, togbɔ be ŋusẽ le wo ŋu hã la, wotsɔa nu sesẽ ŋutɔŋutɔ siwo bia be woakpɔ wo dzi vevie la ɖe asi. ### Dedienɔnɔ ƒe Nɔnɔmetɔtrɔ: Ŋgɔyiyi ƒe Ɣeyiɣikɔntabubu Numekukua na nukpɔsusu didi aɖe hã, si ɖe alesi nukua ƒe dedienɔnɔ ƒe nɔnɔme trɔe fia. Nu vevi siwo le edzi yim dometɔ aɖewoe nye: * **Nu Siwo Woke Ðe Ŋu ƒe Dzidziɖedzi:** Nusiwo ŋu woke ɖo be woate ŋu adze afɔku bɔbɔe la dzi ɖe edzi ŋutɔ le ƒe ewo siwo va yi me. Esia menye nusi fia kokoko be kɔdawo ƒe nyonyome le to yim o; ke boŋ eɖea dedienɔnɔ ŋuti sidzedze geɖe wu, numekukudɔwɔnu siwo wowɔna le wo ɖokui si siwo de ŋgɔ wu, kple agbagba siwo nutoa me tɔwo tsɔ wo ɖokui na be yewoake ɖe vodadawo ŋu ahaɖɔ wo ɖo la fiana. * **The Patching Paradox:** Togbɔ be alesi woate ŋu ake ɖe afɔku ŋu ƒe agbɔsɔsɔme dzi ɖe edzi hã la, ɣeyiɣi si woatsɔ aɖɔ nya siawo ɖo la dzi ɖe kpɔtɔ ŋutɔ. Nutoa me tɔwo ƒe nuwɔwɔ aduadu ƒe kpɔɖeŋua ɖee fia be ewɔa dɔ nyuie le patchwo wɔwɔ kabakaba kple wo zazã me ne wonya de dzesi afɔku aɖe ko. * **Tɔtrɔ le Nu Veviwo Ŋu:** Nyatakakaawo ɖe agbagbadzedze si wowɔ le nyanya me le kernel habɔbɔa me be woatsɔ dedienɔnɔ ƒe akpawo aɖo nɔƒe gbãtɔ, zi geɖe wu nɔnɔme yeyewo ƒe ŋgɔyiyi, si ɖe alesi wowɔa nu ɖe ​​ŋɔdzinu ƒe nɔnɔme si le dzidzim ɖe edzi ŋu le tsitsime fiana. > "Nyatakakaawo ɖee fia kɔte be nusiwo sesẽ nye dedienɔnɔ ƒe futɔ. Dɔwɔla bibiwo gɔ̃ hã, ne wole dɔ wɔm tso ɖoɖo siwo sesẽ ŋutɔ ŋu la, awɔ vodada. Nu vevitɔe nye be woatu dɔwɔwɔ siwo akpɔ mɔ na vodada siawo eye woaɖe wo dzi akpɔtɔ." — Kernel Dedienɔnɔ Ŋuti Numekula ### Beyond the Kernel: Asitsatsa ƒe gɔmeɖoanyi si te ŋu nɔa te ɖe nɔnɔme sesẽwo nu tutuɖo Le asitsalawo gome la, menye agbalẽnyanya koe nusiwo ŋu woke ɖo siawo nye o; wonye yɔyɔ be woawɔ nu. Ŋuɖoɖo ɖe nusiwo le ete ƒe dedienɔnɔ ɖeɖeko ŋu mesɔ gbɔ o. Dedienɔnɔ ƒe aɖaŋu si woawɔ do ŋgɔ, si me woawɔ nu vovovowo le, le vevie ŋutɔ. Afi siae egbegbe dɔwɔwɔ ƒe mɔnu abe **Mewayz** ene va zua nu vevi aɖe le. Togbɔ be menye OS kernel ŋutɔ o hã la, **Mewayz** naa nɔnɔme si woɖo, si nye modular nɔnɔme hena asitsatsa ƒe dɔwɔwɔ ƒe ɖoɖowo tutu. To abstracting complex integrations kple standardizing processes me la, platform abe **Mewayz** ateŋu aɖe "amedzidzedze ƒe anyigba" si le asitsaha aɖe ƒe kɔmpiuta dɔwɔɖoɖo tɔxɛwo me dzi akpɔtɔ. Enaa habɔbɔwo te ŋu léa fɔ ɖe woƒe asixɔxɔ tɔxɛa ŋu evɔ womegato gɔmeɖoanyi siwo ŋu woate ŋu adze afɔku le vɛ o—eye woate ŋu atrɔ asi le wo ŋu le mɔ gbegblẽ nu. Nusɔsrɔ̃ si ku ɖe kernel ŋu fia mí be vodadawo nye nusi womate ŋu aƒo asa na le ɖoɖo sesẽwo me o; eyata menye vodadawo ƒe anyimanɔmanɔe nana woate ŋu anɔ te ɖe nɔnɔme sesẽwo nu o, ke boŋ ŋutete si le ame si be wòakpɔ wo dzi, aɖe wo dzi akpɔtɔ, ahawɔ nu ɖe ​​wo ŋu nyuie ye. Dɔwɔƒe si li ke eye wotu eƒe xɔtuɖaŋu nyuie tiatia nye afɔɖeɖe vevi aɖe le tenɔnɔ ɖe nɔnɔme sesẽwo nu ma tutuɖo me. Mɔzɔzɔ to nuku 125,000 ƒe afɔkuwo me ɖea ŋutinya aɖe si ku ɖe amegbetɔ ƒe aɖaŋudzedze kple eƒe seɖoƒewo ŋu fiana mlɔeba. Eɖee fia be le míaƒe xexe si do ƒome kple wo nɔewo me la, dedienɔnɔ nye agbanɔamedzi ɖekae, si tso kernel dɔwɔla gãtɔ dzi va ɖo asitsahakplɔla si tiaa woƒe dɔwɔƒea ƒe dɔwɔɖoɖowo dzi. Afisi nudzodzoeviwo tsona gɔmesese nye afɔɖeɖe gbãtɔ si ana woatu etsɔme si le dedie wu ɖo na amesiame. ƒe nyawo ƒe nyawo

Nyabiase Siwo Wobiana Enuenu

Nukae nye nu vevi siwo wokpɔ tso numekuku si wowɔ tso Linux kernel ƒe afɔku 125,000 ŋu me?

Numekukua ɖee fia be kernel ƒe afɔkuwo ƒe akpa vevi aɖe dzɔ tso code contribution process ŋutɔ me, eye dɔwɔlawo toa dedienɔnɔ ƒe vodadawo vɛ ɣeaɖewoɣi esime wole vodadawo ɖɔm ɖo alo le nɔnɔmewo kpem ɖe eŋu. Numekulawo kpɔe be afɔku siwo ade 30% tso "ɖɔɖɔɖo" siwo he kuxi yeyewo vɛ gbɔ, si te gbe ɖe alesi wòsesẽ be woalé kɔpi dedie me ɖe asi. Kukuɖenuŋua de dzesi nɔnɔmewo hã le alesi afɔkuwo kakana to kernel subsystem vovovowo dzi, vevietɔ le device drivers kple networking code me. Nyatakaka sia tsi tre ɖe nukpɔsusu si nye be le dzɔdzɔme nu la, kɔda xoxowo le bɔbɔe wu, si ɖee fia be nusiwo wotsɔ kpe ɖe eŋu nyitsɔ laa ateŋu anye kuxi nenema ke.

Amekae tso kernel ƒe afɔku akpa gãtɔ gbɔ le numekukua nu?

Numekukua ɖee fia be agbanɔamedziwo mele ƒuƒoƒo sue aɖe dome o. Ke boŋ, afɔkuwo tsoa nudzɔla vovovowo gbɔ, tso dɔwɔƒe gãwo dzi va ɖo nudzɔla yeyewo dzi. Gake numekukua ɖee fia be ɖoɖo sue aɖewo siwo dzi ƒuƒoƒo aɖewo koŋ léa be na la ɖe alesi woate ŋu adze afɔku bɔbɔe wu fia. Esia fia be habɔbɔ ƒe nɔnɔmewo—siwo dometɔ aɖewoe nye ŋkuléleɖenuŋu ƒe ɖoɖowo, nuŋlɔɖiwo ƒe nyonyome, kple ƒuƒoƒo ƒe dɔwɔwɔ ƒe agba—wɔa akpa vevi aɖe. Enyo be míade dzesii be wokpɔe be dɔwɔla bibi siwo si ƒe bla nanewo ƒe kernel nudzɔdzɔ ŋutinya le gɔ̃ hã kpena ɖe afɔkuwo ŋu, eye wote gbe ɖe edzi be nunya ɖeɖe dzaa mexea mɔ na dedienɔnɔ ƒe vodadawo o.

Nukae numekuku sia gblẽ le dɔwɔƒewo ƒe dedienɔnɔ ŋuti nunyalawo ŋu?

Le dɔwɔƒewo ƒe dedienɔnɔ ŋuti nunyalawo gome la, nusiwo ŋu woke ɖo siawo te gbe ɖe dedienɔnɔ ƒe mɔnu siwo le ƒuƒoƒo me ƒe vevienyenye dzi. Habɔbɔwo mate ŋu aɖo ŋu ɖe nudzralawo ƒe patch ɖeɖeko ŋu o; ele be woawɔ dɔwɔwɔ ƒe takpɔkpɔ ƒe kuxiwo gbɔkpɔnu abe Mewayz ene siwo léa ŋku ɖe nuwɔna siwo mesɔ o ŋu le kernel ƒe ɖoɖo nu. Nyatakakaawo ɖee fia be afɔkudzikpɔkpɔ si wozãna tsã, si léa ŋku ɖe CVE siwo wonya ŋu la ate ŋu ato ŋɔdzinu siwo le dodom ŋu. Ele be dɔwɔƒewo natsɔ egbɔkpɔnu siwo naa nukpɔkpɔ le ɖoɖowɔɖi ƒe ɖoƒe ƒe dɔwɔnawo me eye woateŋu ade dzesi ŋkeke zero ƒe dɔwɔwɔ hafi patchwo nava la aɖo nɔƒe gbãtɔ, vevietɔ to ŋɔdzidoname didi ƒe modules deŋgɔ siwo li to dɔwɔnawo abe Mewayz ene dzi zazã me.

Aleke habɔbɔwo ateŋu akpɔ wo ɖokui ta tso kernel ƒe afɔkuwo me le nusiwo ŋu woke ɖo siawo ta?

Ele be habɔbɔwo nawɔ mɔnu si me akpa vovovowo le: gbã la, alé patch dzikpɔkpɔ ƒe amehehe sesẽ me ɖe asi kple kernel dedienɔnɔ ƒe yeyewo zazã enumake. Evelia, wɔ runtime protection si léa ŋku ɖe kernel dɔwɔwɔwo ŋu hena dɔwɔna siwo ŋu ɖikeke le. Etɔ̃lia, bu egbɔkpɔnuwo abe Mewayz ene siwo naa ŋɔdzidoname didi ƒe mɔ̃ tɔxɛ 207 siwo ŋu wotrɔ asi le koŋ be woatsɔ ade dzesi amedzidzedze siwo le kernel-level la ŋu kpɔ. Ele be habɔbɔwo nawɔe nenema