?? ?????????? ????? ?????? ???????? ?? ?? ????? ????? polkit ??? ??? ??? ???????? ???? ?? ????? ???? ???? ? ??????? ???? ??? ??? ?????? ? ?????? ??? ?????? ?? ????? ???? ???? ??????????? ???? ????.
??? ????? ?? ?? ????? CVE-2021-3560 (???? CVSS: 7.8) ????????? ??? ???[?] ??? ???????? polkit ??? ????? ?? ????? ????? ???????? ? ???? ???? ?????? GitHub ???? Kevin Backhouse ??? ??? ?? ??? ?? ??? ????? ?? ????? ?? ?? ?? commit ?????????[?] ?? ? ?????? ???? ???? ????? ???. Red Hat’s Cedric Buissart ????? ???[?] ?? ????????? ????? ?? Debian? ????? ?? polkit 0.105 ??? ????????? ?????.
Polkit (née PolicyKit) ????????? ???? ????? ? ?????? ?????? ?? ????????? ?????? ??? ? ???? ?????? ?????????? ??????? ?? ????????? ???? ??????? ??????[?].
Red Hat ?????????? ???[?]: “????????? ?? ?????? ??????? ?????? ??? ?? ???? ???? ?? polkit_system_bus_name_get_creds_sync ?? dbus-daemon ??? ??????? ???? ??? ????????? ?? ???? ??????????? ????? ???? ? ????????? ???????? ???? ??????? ?? ????? ???. ???????? ????? ??? ??????????? ??????? ???? ? ???????? ??????? ? ?????? ?? ????? ???? ????? ???.”
RHEL 8 ? Fedora 21 (?? ??????)? Debian Bullseye ? ??????? ????? ???? ?? ????????? ????? ?????? ????? ?? ??? ????? ?????????? polkit ???? ?????. ??? ????? ?? ???? ????? ?? ?? ? ???? ???? ????? ??? ????? ??? ???[?].
Backhouse ?? ???????? ?? ?? ????? ?? ???? ????? ??? ?? ??? ???? ???: “??? ?????????? ?? ??? ??????????? ???? ??????????? ???. ???? ???? ???? ??? ??? ??? ????? ?? ??????? ??? ?? ??? ?? ???????? ????????? ????? bash ? kill ? dbus-send ??????? ??????[?-?]. ???? ???? ????? ?? ????? dbus-send (????? ???? ????? ????? ????) ??? ????? ???? ?? ?????? ????????? polkit ???? ?? ????? ?????? ??????? ???.”
“dbus-send” ?? ??????? ?????? ??? ??????? ?????? (IPC) ??? ?? ???? ????? ???? ?? ?????? ???? D-Bus ??????? ??????[??] ? ????? ??????? ?????? ??? ????? ?????? ?? ?????? ??????? ??? ?? ????? ????? ??????. Daemon ????? ???? Polkit ???????? ????? ???? ?? ?????? ????? ???? ????? ???? ???? ????????????? ???? ??????[??].
?? ???? ?? ?????? ??? ??? ???? ??? ??? ????? ???? ?????? ???? polkit ???? ????? ????? ?? ?????? ?????? ?????? ? ?? ??????? ?????? ?????? ???? ?? ????? ?? ???????? ???? (UID 0) ???? ???[??]? ??????? ???????? ??????? ?? ????? ??????.
Backhouse ?????????? ???: “???? ????? ???? ?? ?????????? ???? ?? ???? ????? ????? ??? ?? ??? ???? ? ???????? ????? ?????? ????? ???? ???? ??” ???? ?????” ?? ?? ???? ?? ????? ???? ?????? ???. ?? ???? ???? ??????? ??? ???? ??? ?????? ?? ??????????? ??????????? ????. ??? ?????? ???? ????? ??? ????? ????? ??? ???? ???? ??? ???? ???. “
?? ??????? ????? ?????? ???? ??????? ?????? ??? ?? ?????? ???? ?? ????? ??????? ???? ?? ??? ??? ?? ????? ????.
?????
[?] https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug
[?] https://gitlab.freedesktop.org/polkit/polkit/-/commit/bfa5036bfb93582c5a87c44b847957479d911e38
[?] https://seclists.org/oss-sec/2021/q2/180
[?] https://en.wikipedia.org/wiki/Polkit
[?] https://access.redhat.com/security/cve/CVE-2021-3560
[?] https://www.freedesktop.org/software/polkit/releases
[?] https://linux.die.net/man/1/bash
[?] https://linux.die.net/man/2/kill
[?] https://linux.die.net/man/1/dbus-send
[??] https://en.wikipedia.org/wiki/D-Bus
[??] https://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html
[??] https://en.wikipedia.org/wiki/User_identifier
[??] https://thehackernews.com/2021/06/7-year-old-polkit-flaw-lets.html
??????? :
???? ??????
