{"id":33991,"date":"2023-07-28T16:22:16","date_gmt":"2023-07-28T08:22:16","guid":{"rendered":"https:\/\/www.juejinka.com\/?p=33991"},"modified":"2023-07-28T16:22:17","modified_gmt":"2023-07-28T08:22:17","slug":"%e7%a0%94%e7%a9%b6%e4%ba%ba%e5%91%98%e8%ad%a6%e5%91%8a%ef%bc%8c4%e6%88%90ubuntu%e5%90%ab%e6%9c%89%e6%bc%8f%e6%b4%9e%e9%a3%8e%e9%99%a9","status":"publish","type":"post","link":"https:\/\/www.juejinka.com\/y\/33991.html","title":{"rendered":"\u7814\u7a76\u4eba\u5458\u8b66\u544a\uff0c4\u6210Ubuntu\u542b\u6709\u6f0f\u6d1e\u98ce\u9669"},"content":{"rendered":"\n<p>\u6765\u81eaWiz Research\u7684\u4e24\u540d\u8d44\u5b89\u7814\u7a76\u4eba\u5458Sagi Tzadik\u4e0eShir Tamari\u572826\u65e5\u6307\u51fa\uff0cUbuntu\u4e2d\u542b\u6709\u4e24\u4e2a\u4e0eOverlayFS\u6709\u5173\u7684\u6743\u9650\u6269\u5f20\u6f0f\u6d1e\uff0c\u5f71\u54cd\u4e8640%\u7684Ubuntu\u7528\u6237\uff0c\u800c\u4e14\u4ee5\u524d\u7684\u653b\u51fb\u7a0b\u5e8f\u5c31\u9002\u7528\u3002 \u4e0d\u8fc7\uff0cUbuntu\u572825\u65e5\u5df2\u501f\u7531\u91ca\u51faUbuntu 23.04\uff0c\u4fee\u8865\u4e86\u5305\u62ec\u8fd9\u4e24\u4e2a\u6f0f\u6d1e\u5728\u5185\u76848\u4e2a\u5b89\u5168\u6f0f\u6d1e\u3002<\/p>\n\n\n\n<p>OverlayFS\u4e3a\u4e00Linux\u6863\u6848\u7cfb\u7edf\uff0c\u7531\u4e8e\u5b83\u53ef\u5728\u9884\u5148\u6784\u5efa\u597d\u7684\u6620\u50cf\u6587\u4ef6\u4e0a\u90e8\u7f72\u52a8\u6001\u6863\u6848\u7cfb\u7edf\uff0c\u56e0\u800c\u968f\u7740\u5bb9\u5668\u7684\u5174\u8d77\u800c\u53d8\u5f97\u66f4\u70ed\u95e8\uff0c\u7136\u800c\uff0c\u7531\u4e8e\u975e\u5e38\u6743\u7528\u6237\u7ecf\u5e38\u5f97\u4ee5\u5229\u7528\u7528\u6237\u547d\u540d\u7a7a\u95f4\uff08User Namespace\uff09\u8bbf\u95eeOverlayFS\uff0c\u4f7f\u5f97\u5b83\u6210\u4e3a\u5438\u5f15\u9ed1\u5ba2\u7684\u653b\u51fb\u8868\u9762\u3002<\/p>\n\n\n\n<p>Tzadik\u4e0eTamari\u8bf4\uff0c\u57fa\u4e8eLinux\u7684Ubuntu\u57282018\u5e74\u9488\u5bf9OverlayFS\u6a21\u7ec4\u4f5c\u4e86\u8bb8\u591a\u53d8\u66f4\uff0c\u867d\u7136\u8fd9\u4e9b\u53d8\u66f4\u5e76\u672a\u5e26\u6765\u4efb\u4f55\u5b89\u5168\u98ce\u9669\uff0c\u4f46Linux Kernel\u9879\u76ee\u57282019\u5e74\u4e0e2022\u5e74\u6267\u884c\u7684OverlayFS\u53d8\u66f4\u5374\u4e0eUbuntu\u7684\u4f5c\u6cd5\u51b2\u7a81\uff0c\u800c\u5206\u522b\u4ea7\u751f\u4e86CVE-2023-32629\u4e0eCVE-2023-2640\u6f0f\u6d1e\u3002<\/p>\n\n\n\n<p>\u6709\u9274\u4e8e\u5b83\u4eec\u662f\u57fa\u4e8eUbuntu\u7684\u53d8\u66f4\u624d\u884d\u751f\u7684\uff0c\u56e0\u6b64\u8fd9\u4e24\u4e2a\u6f0f\u6d1e\u5e76\u672a\u6ce2\u53ca\u5176\u5b83Linux\u64cd\u4f5c\u7cfb\u7edf\u3002 \u6839\u636eUbuntu\u7684\u8bf4\u660e\uff0c\u8fd9\u4e24\u4e2a\u6f0f\u6d1e\u6e90\u81ea\u4e8eUbuntu\u4e2d\u7684OverlayFS\u5728\u7279\u5b9a\u60c5\u51b5\u4e0b\u65e0\u6cd5\u59a5\u5584\u68c0\u67e5\u6743\u9650\uff0c\u800c\u5141\u8bb8\u672c\u5730\u7aef\u9ed1\u5ba2\u6269\u5f20\u6743\u9650\u3002<\/p>\n\n\n\n<p>\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u90a3\u4e9b\u8fc7\u53bb\u9501\u5b9aOverlayFS\u6f0f\u6d1e\u6240\u5f00\u53d1\u7684\u653b\u51fb\u7a0b\u5e8f\uff0c\u5b8c\u5168\u4e0d\u9700\u8981\u4fee\u6539\u5c31\u80fd\u653b\u51fbCVE-2023-32629\u4e0eCVE-2023-2640\uff0cUbuntu\u7528\u6237\u6700\u597d\u5c3d\u901f\u4fee\u8865\u3002<\/p>\n\n\n\n<p>\u81f3\u4e8eUbuntu 23.04\u672c\u5468\u6240\u4fee\u8865\u7684\u5176\u5b83\u6f0f\u6d1e\uff0c\u5219\u7686\u76f4\u63a5\u6e90\u81eaLinux Kernel\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6765\u81eaWiz Research\u7684\u4e24\u540d\u8d44\u5b89\u7814\u7a76\u4eba\u5458Sagi Tzadik\u4e0eShir Tamari\u572826\u65e5\u6307\u51fa\uff0cUbuntu\u4e2d\u542b\u6709\u4e24\u4e2a\u4e0eOverlayFS\u6709\u5173\u7684\u6743\u9650\u6269\u5f20\u6f0f\u6d1e\uff0c\u5f71\u54cd\u4e8640%&#8230;<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"special":[],"_links":{"self":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/33991"}],"collection":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/comments?post=33991"}],"version-history":[{"count":1,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/33991\/revisions"}],"predecessor-version":[{"id":33992,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/33991\/revisions\/33992"}],"wp:attachment":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/media?parent=33991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/categories?post=33991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/tags?post=33991"},{"taxonomy":"special","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/special?post=33991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}