Linux Kernel 4.8 正式版发布了。 Linux是一个宏内核（monolithic kernel）系统。设备驱动程序可以完全访问硬件。Linux内的设备驱动程序可以方便地以模块化（modularize）的形式设置，并在系统运行期间可直接装载或卸载。 更新内容： Checker incorporates some address-space checks normally performed separately with thesparse tool. Colorize simply adds color to some diagnostic output. Constify makes structures containing only function pointers const. Initify moves string constants that are only referenced in __init or __exit functions to the appropriate ELF sections. Kallocstat generates information on sizes passed to kmalloc(). Kernexec is there to "to make KERNEXEC/amd64 almost as good as it is on i386"; it ensures that, for example, user-space pages are not executable by the kernel. Latent_entropy tries to generate entropy (randomness) from the kernel's execution; more on this one below. Randomize_layout reorganizes structure layout randomly. Rap implements grsecurity's "return address protection" mechanism, described in this presentation [PDF]. Size_overflow (described on this page) detects some integer overflows. Stackleak tracks kernel-stack usage so that the stack can be cleared on return to user space. Structleak forcibly clears structure fields if they might be copied to user space.
更多详情，点击此处查看。 下载地址： | 
