Iyo Linux kernel ndiyo musana weLinux inoshanda masisitimu (OS), uye ndiyo yakakosha interface pakati pehardware yekombuta nemaitiro ayo.
Linus Torvalds akafumurwa kuburikidza nechiziviso chekuwanikwa kweshanduro itsva ye Linux kernel 6.1. izvo pamwe ndizvo imwe yeshanduro dzakanyanya kukosha dzakaburitswa mukati memakore makumi matatu apfuura Uye ndezvekuti chinoita kuti kuburitswa uku kuve kwakakosha ndechekuti kubva mushanduro iyi mutauro wechipiri unounzwa pakuvandudzwa kwekernel, inova mutauro weRust.
Saizvozvo Rust iri kungowana iyo yepamutemo API yekubvumidza kuvandudzwa kwemamodule akaparadzana kana vatyairi veLinux. Izvi zvinoreva kuti kuvhurwa kweLinux kernel kumutauro uyu kuri kuenderera mberi nemhedzisiro yekuti kubviswa kwemutauro weC hakuna kurongwa mangwana. Zvisinei, ishanduko ine mavambo ayo mukuwanikwa uye kukwanisa kwevatatu vanobatanidzwa mukugadzirwa kwekernel.
Main nyowani maficha eLinux 6.1
Iyo huru innovation yeLinux 6.1 ndiyo Kusvika kweRust, semakore akati wandei, basa ranga richienderera kuseri kwezviitiko kuita kuti kernel ikwane yemutauro uri kubuda wechirongwa. Mune ramangwana, zvinofanirwa kunge zvichigoneka kwete chete chirongwa mamodule muC, asiwo muRust.
Mune yazvino mamiriro inongobvumira kuunganidza, kurodha uye kurodha iri nyore kwazvo muenzaniso module. Sedanho rekutanga, Linus Torvalds aingoda nyore "Mhoro nyika!" Naizvozvo, mamwe mamodule anobatsira uye, pamusoro pezvose, hazvigoneke muRust mune yazvino kernel. Nekudaro, iyo kernel nyowani inopa yekutanga tarisiro yekuti Rust inobatanidza sei uye ndeapi matambudziko anofanirwa kukundwa.
Chimwe chitsva chinoitwa neiyi vhezheni itsva yeLinux 6.1 ndiyo AMD Platform Management Framework rutsigiro, iyo inovimbisa kuvandudzwa kwekuita neakasiyana AMD CPUs (Central Processing Units).
AMD Platform Management Framework zvakare rutsigiro rwakazara rwe AMT (otomatiki modhi shanduko) uye yeCnQF (Yakanaka uye Yakanyarara Framework). Kutanga neichi chigadziriso, vashandisi veiyo distro vanozonyanya kuwana yakadzika uye yakawandisa simba uye tembiricha manejimendi.
Mukuwedzera kune izvozvo, tinogona zvakare kuwana izvozvo MGLRU michina inosanganisirwa (multi-generational LRU), iyo yakatsiva kushandiswa kwekare kweLRU (Zvishoma Zvichangobva Kushandiswa) zvichibva pamitsara miviri ine nhanho dzakawanda-nhanho inotarisisa zvirinani kuti ndeapi mapeji endangariro anonyatso shandiswa uye anogona kumanikidzwa kubuda.
Yakawedzerwa rutsigiro rwemaple muti data chimiro inokurudzirwa neOracle mainjiniya, iyo inomisikidzwa seyakanyanya kutsiva iyo "mutsvuku-muti mutema" chimiro. Maple muti uyemutsauko wemuti B iyo inotsigira range indexing uye yakagadzirirwa kushandisa zvakanaka cache yemazuva ano processors. Mamwe mamemory management subsystems atove akatakurwa kumuti wemepu, une mhedzisiro yakanaka pakuita kwayo. Mune ramangwana, muti wemepu unogona kushandiswa kushandisa renji yekuvhara.
Iyo zvakare inomira kunze muLinux 6.1 iyo akawedzera kufona kwakakosha kwekugoverwa kwendangariro muzvirongwa zveBPF (memory allocator), iyo inopa yakachengeteka ndangariro kugoverwa mumamiriro eBPF pane yakajairwa kmalloc (). Chikamu chekutanga cheshanduko chakabatanidzwa, ichipa kugona kugadzira vatyairi vemidziyo yekupinza ine HID (Human Interface Device) interface, inoshandiswa nenzira yeBPF zvirongwa. Kodhi yacho yakabviswa zvachose kubva kukernel kutsigira a.out executable faira fomati, iyo yakaderedzwa muvhezheni 5.1 uye, seyeshanduro 5.18 uye 5.19, yakaremara kune ese makuru ekuvaka.
Iyo a.out fomati haisati yashandiswa paLinux masisitimu kwenguva yakareba, uye maturusi emazuva ano haatsigire kugadzirwa kwemafaira e.out mukumisikidzwa kweLinux. Iyo a.out file loader inogona kushandiswa zvachose munzvimbo yevashandisi.
Yakatsiva kushandiswa kweCFI kuchengetedza nzira (Control Flow Integrity), uchiwedzera cheki pamberi peimwe neimwe isina kunanga basa kufona kuti uone mamwe maitiro asina kutsanangurwa maitiro anogona kutungamira mukutyorwa kweyakajairwa kuuraya kurongeka (kudzora kuyerera) semhedzisiro yekushandisa maexploits anoshandura mapoinzi ebasa akachengetwa mundangariro.
Iyo yenguva dzose CFI yekuitwa kwechirongwa cheLLVM yakasimudzwa neyakasiyana, zvakare yakavakirwa pakushandiswa kweClang, asi yakanyatso gadziridzwa kuchengetedza yakaderera-level subsystems uye inoshanda sisitimu kernels. MuLLVM kuita kutsva kuchatsanangurwa muClang 16 vhezheni uye ichagoneswa nesarudzo "-fsanitize=kcfi".
Musiyano wakakosha wekushandiswa kutsva ndeyekuti haina kusungirirwa kubatanidza nguva optimizations (LTO) uye haikonzeri mukutsiviwa kwemanongedzo ebasa ane zvinongedzo mutafura yekusvetuka.
Yeimwe shanduko izvo zvinoratidzika
- Kune Linux Security Module (LSM) modules, kugona kugadzira vatongi vanobata mashandiro ekugadzira nzvimbo dzezita kunopihwa.
- Yakapihwa maturusi ekuona PKCS#7 masaini edhijitari muzvirongwa zveBPF.
- /dev/random yakadzosa kugona kuvhura mune isiri-blocking mode (O_NONBLOCK), iyo yakabviswa nekusaziva mu5.6 kernel.
- Yakawedzera yambiro pa x86 masisitimu apo kernel subsystems inogovera mapeji ekurangarira ayo ari maviri anogoneka uye anonyorwa. Mune ramangwana, mukana wekurambidza zvachose mamepu akadaro ari kutariswa.
pakupedzisira kana uri kufarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.