{"id":31890,"date":"2019-10-31T21:43:45","date_gmt":"2019-10-31T18:43:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mandatnaya-model-raspredeleniya-prav-v-freebsd\/"},"modified":"2019-10-31T21:43:45","modified_gmt":"2019-10-31T18:43:45","slug":"mandatnaya-model-raspredeleniya-prav-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","title":{"rendered":"Mandatmodel for tildeling af rettigheder i FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Introduktion<\/h2>\n

For an additional level of server security, you can use a mandatory model<\/a><\/noindex> of access control. This publication will describe how to run Apache in a jail with access only to those components that are necessary for the proper functioning of Apache and PHP. This principle can be applied not only to Apache but also to any other stack.
\n<\/a><\/noindex><\/p>\n

Forberedelse<\/h2>\n

This method is suitable only for the UFS file system; in this example, ZFS will be used in the main system, while UFS will be used in the jail. First, you need to rebuild the kernel; when installing FreeBSD, make sure to install the source code.
\nAfter the system is installed, edit the file:<\/p>\n

\/usr\/src\/sys\/amd64\/conf\/GENERIC\n<\/code><\/pre>\n
You need to add just one line to this file:<\/p>\n
options     MAC_MLS\n<\/code><\/pre>\n
The label mls\/high will dominate over the label mls\/low; applications running with the label mls\/low will not be able to access files marked with the label mls\/high. More detailed information about all available labels in the FreeBSD system can be found in this vejledningen<\/a><\/noindex>.
\nNext, navigate to the directory \/usr\/src:<\/p>\n
cd \/usr\/src\n<\/code><\/pre>\n
To start building the kernel, execute (in the j option specify the number of cores in the system):<\/p>\n
make -j 4 buildkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
After the kernel is built, it needs to be installed:<\/p>\n
make installkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
After installing the kernel, do not rush to reboot the system, as users need to be switched to the login class after configuring it. Edit the file \/etc\/login.conf, and in this file, you need to modify the default login class to look like this:<\/p>\n
default:\n        :passwd_format=sha512:\n        :copyright=\/etc\/COPYRIGHT:\n        :welcome=\/etc\/motd:\n        :setenv=MAIL=\/var\/mail\/$,BLOCKSIZE=K:\n        :path=\/sbin \/bin \/usr\/sbin \/usr\/bin \/usr\/local\/sbin \/usr\/local\/bin ~\/bin:\n        :nologin=\/var\/run\/nologin:\n        :cputime=unlimited:\n        :datasize=unlimited:\n        :stacksize=unlimited:\n        :memorylocked=64K:\n        :memoryuse=unlimited:\n        :filesize=unlimited:\n        :coredumpsize=unlimited:\n        :openfiles=unlimited:\n        :maxproc=unlimited:\n        :sbsize=unlimited:\n        :vmemoryuse=unlimited:\n        :swapuse=unlimited:\n        :pseudoterminals=unlimited:\n        :kqueues=unlimited:\n        :umtxp=unlimited:\n        :priority=0:\n        :ignoretime@:\n        :umask=022:\n        :label=mls\/equal:\n<\/code><\/pre>\n
The line :label=mls\/equal will allow users who belong to this class to access files marked with any label (mls\/low, mls\/high). After these modifications, it is necessary to rebuild the database and place the user root (as well as those who need it) in this login class:<\/p>\n
cap_mkdb \/etc\/login.conf\npw usermod root -L default\n<\/code><\/pre>\n
For the policy to apply only to files, you need to edit the file \/etc\/mac.conf, leaving only one line in it:<\/p>\n
default_labels file ?mls\n<\/code><\/pre>\n
You also need to add the mac_mls.ko module to auto-start:<\/p>\n
echo 'mac_mls_load=\"YES\"' >> \/boot\/loader.conf\n<\/code><\/pre>\n
After that, you can safely reboot the system. How to create jail<\/a><\/noindex> can be read in one of my publications. But before creating a jail, you need to add a hard drive and create a filesystem on it, and enable multilabel on it, create a ufs2 filesystem with a cluster size of 64kb:<\/p>\n
newfs -O 2 -b 64kb \/dev\/ada1\ntunefs -l enable \/dev\/ada1\n<\/code><\/pre>\n
After creating the filesystem and adding multilabel, you need to add the hard drive to \/etc\/fstab, add a line to this file:<\/p>\n
\/dev\/ada1               \/jail  ufs     rw              0       1\n<\/code><\/pre>\n
In Mountpoint, specify the directory where you will mount the hard drive, in Pass, be sure to specify 1 (the order in which this hard drive will be checked) \u2014 this is necessary because the ufs filesystem is sensitive to sudden power outages. After these actions, mount the disk:<\/p>\n
mount \/dev\/ada1 \/jail\n<\/code><\/pre>\n
In this directory, install the jail. After the jail is running, you need to perform the same operations as in the main system with users and files \/etc\/login.conf, \/etc\/mac.conf. <\/p>\n
Indstillinger<\/h2>\n
Before installing the necessary labels, I recommend installing all the required packages; in my case, the labels will be set according to these packages:<\/p>\n
mod_php73-7.3.4_1              PHP Scripting Language\nphp73-7.3.4_1                  PHP Scripting Language\nphp73-ctype-7.3.4_1            Den delte ctype-udvidelse for php\nphp73-curl-7.3.4_1             Den delte curl-udvidelse for php\nphp73-dom-7.3.4_1              Den delte dom-udvidelse for php\nphp73-extensions-1.0           \"meta-port\" til installation af PHP-udvidelser\nphp73-filter-7.3.4_1           Den delte filter-udvidelse for php\nphp73-gd-7.3.4_1               Den delte gd-udvidelse for php\nphp73-gettext-7.3.4_1          Den delte gettext-udvidelse for php\nphp73-hash-7.3.4_1             Den delte hash-udvidelse for php\nphp73-iconv-7.3.4_1            Den delte iconv-udvidelse for php\nphp73-json-7.3.4_1             Den delte json-udvidelse for php\nphp73-mysqli-7.3.4_1           Den delte mysqli-udvidelse for php\nphp73-opcache-7.3.4_1          Den delte opcache-udvidelse for php\nphp73-openssl-7.3.4_1          Den delte openssl-udvidelse for php\nphp73-pdo-7.3.4_1              Den delte pdo-udvidelse for php\nphp73-pdo_sqlite-7.3.4_1       Den delte pdo_sqlite-udvidelse for php\nphp73-phar-7.3.4_1             Den delte phar-udvidelse for php\nphp73-posix-7.3.4_1            Den delte posix-udvidelse for php\nphp73-session-7.3.4_1          Den delte session-udvidelse for php\nphp73-simplexml-7.3.4_1        Den delte simplexml-udvidelse for php\nphp73-sqlite3-7.3.4_1          Den delte sqlite3-udvidelse for php\nphp73-tokenizer-7.3.4_1        Den delte tokenizer-udvidelse for php\nphp73-xml-7.3.4_1              Den delte xml-udvidelse for php\nphp73-xmlreader-7.3.4_1        Den delte xmlreader-udvidelse for php\nphp73-xmlrpc-7.3.4_1           Den delte xmlrpc-udvidelse for php\nphp73-xmlwriter-7.3.4_1        Den delte xmlwriter-udvidelse for php\nphp73-xsl-7.3.4_1              Den delte xsl-udvidelse for php\nphp73-zip-7.3.4_1              Den delte zip-udvidelse for php\nphp73-zlib-7.3.4_1             Den delte zlib-udvidelse for php\napache24-2.4.39 \n<\/code><\/pre>\n
I dette eksempel vil m\u00e6rkerne blive tildelt med hensyntagen til afh\u00e6ngighederne af de p\u00e5g\u00e6ldende pakker. Man kan selvf\u00f8lgelig v\u00e6lge en simplere tilgang ved at tildele m\u00e6rkerne mls\/low for mappen \/usr\/local\/lib og de filer, der ligger i denne katalog, s\u00e5 kan efterf\u00f8lgende installerede pakker (f.eks. yderligere udvidelser til php) f\u00e5 adgang til bibliotekerne i denne mappe, men jeg mener, det er bedre kun at give adgang til de filer, der er n\u00f8dvendige. Stop jail og tildel mls\/high m\u00e6rker til alle filer:<\/p>\n
setfmac -R mls\/high \/jail\n<\/code><\/pre>\n
N\u00e5r m\u00e6rkerne tildeles, vil processen blive stoppet, hvis setfmac st\u00f8der p\u00e5 h\u00e5rde links. I mit eksempel fjernede jeg de h\u00e5rde links i f\u00f8lgende kataloger:<\/p>\n
\/var\/db\/etcupdate\/current\/\n\/var\/db\/etcupdate\/current\/etc\n\/var\/db\/etcupdate\/current\/usr\/share\/openssl\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.UTF-8\n\/var\/db\/etcupdate\/current\/usr\/share\/nls\n\/etc\/ssl\n\/usr\/local\/etc\n\/usr\/local\/etc\/fonts\/conf.d\n\/usr\/local\/openssl\n<\/code><\/pre>\n
N\u00e5r m\u00e6rkerne er tildelt, er det n\u00f8dvendigt at tildele mls\/low m\u00e6rker til apache; f\u00f8rst skal det klarl\u00e6gges, hvilke filer der er n\u00f8dvendige for at starte apache:<\/p>\n
ldd \/usr\/local\/sbin\/httpd\n<\/code><\/pre>\n
N\u00e5r denne kommando udf\u00f8res, vises afh\u00e6ngighederne p\u00e5 sk\u00e6rmen, men det vil ikke v\u00e6re tilstr\u00e6kkeligt at angive de n\u00f8dvendige etiketter for disse filer, da de mapper, som disse filer findes i, har etiketten mls\/high. Derfor skal etiketten mls\/low ogs\u00e5 angives for disse mapper. Ved opstart af Apache vil den ogs\u00e5 vise de filer, der er n\u00f8dvendige for dens opstart, og for PHP kan disse afh\u00e6ngigheder findes i httpd-error.log.<\/p>\n
setfmac mls\/low \/\nsetfmac mls\/low \/usr\/local\/lib\/libpcre.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libaprutil-1.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgdbm.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libexpat.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libapr-1.so.0\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/lib\/libc.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libintl.so.8\nsetfmac mls\/low \/var\nsetfmac mls\/low \/var\/run\nsetfmac mls\/low \/var\/log\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac mls\/low \/var\/run\/httpd.pid\nsetfmac mls\/low \/lib\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0.0.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\nsetfmac mls\/low \/usr\/local\/lib\nsetfmac mls\/low \/libexec\nsetfmac mls\/low \/libexec\/ld-elf.so.1\nsetfmac  mls\/low \/dev\nsetfmac  mls\/low \/dev\/random\nsetfmac  mls\/low \/usr\/local\/libexec\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\/*\nsetfmac  mls\/low \/etc\/pwd.db\nsetfmac  mls\/low \/etc\/passwd\nsetfmac  mls\/low \/etc\/group\nsetfmac  mls\/low \/etc\/\nsetfmac  mls\/low \/usr\/local\/etc\nsetfmac -R mls\/low \/usr\/local\/etc\/apache24\nsetfmac mls\/low \/usr\nsetfmac mls\/low \/usr\/local\nsetfmac mls\/low \/usr\/local\/sbin\nsetfmac mls\/low \/usr\/local\/sbin\/*\nsetfmac -R mls\/low \/usr\/local\/etc\/rc.d\/\nsetfmac mls\/low \/usr\/local\/sbin\/htcacheclean\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac -R mls\/low \/usr\/local\/www\nsetfmac mls\/low \/usr\/lib\nsetfmac mls\/low \/tmp\nsetfmac -R mls\/low \/usr\/local\/lib\/php\nsetfmac -R mls\/low \/usr\/local\/etc\/php\nsetfmac mls\/low \/usr\/local\/etc\/php.conf\nsetfmac mls\/low \/lib\/libelf.so.2\nsetfmac mls\/low \/lib\/libm.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libxml2.so.2\nsetfmac mls\/low \/lib\/libz.so.6\nsetfmac mls\/low \/usr\/lib\/liblzma.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libiconv.so.2\nsetfmac mls\/low \/usr\/lib\/librt.so.1\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/usr\/local\/lib\/libpng16.so.16\nsetfmac mls\/low \/usr\/lib\/libbz2.so.4\nsetfmac mls\/low \/usr\/local\/lib\/libargon2.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libpcre2-8.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libsqlite3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgd.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libjpeg.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libfreetype.so\nsetfmac mls\/low \/usr\/local\/lib\/libfontconfig.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libtiff.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libwebp.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libjbig.so.2\nsetfmac mls\/low \/usr\/lib\/libssl.so.8\nsetfmac mls\/low \/lib\/libcrypto.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libzip.so.5\nsetfmac mls\/low \/etc\/resolv.conf\n<\/code><\/pre>\n
Denne liste angiver etiketterne mls\/low for alle filer, der er n\u00f8dvendige for korrekt drift af kombinationen af Apache og PHP (for de pakker, der er installeret i mit eksempel).<\/p>\n
Det sidste trin vil v\u00e6re at konfigurere opstart af jail p\u00e5 niveauet mls\/equal og Apache p\u00e5 niveauet mls\/low. For at starte jail skal der foretages \u00e6ndringer i scriptet \/etc\/rc.d\/jail, find funktionen jail_start i dette script, og \u00e6ndr variablen command til:<\/p>\n
command=\"setpmac mls\/equal $jail_program\"\n<\/code><\/pre>\n
Kommandoen setpmac starter den udf\u00f8rbare fil p\u00e5 det n\u00f8dvendige mandatsniveau, i dette tilf\u00e6lde mls\/equal, for at f\u00e5 adgang til alle labels. I Apache er det n\u00f8dvendigt at redigere startscriptet \/usr\/local\/etc\/rc.d\/apache24. Foretag \u00e6ndringer i funktionen apache24_prestart:<\/p>\n
apache24_prestart() {\n        apache24_checkfib\n        apache24_precmd\n        eval \"setpmac mls\/low\" ${command} ${apache24_flags}\n}\n<\/code><\/pre>\n
I den officielle<\/a><\/noindex> I vejledningen er der angivet et andet eksempel, men jeg kunne ikke bruge det, da der konstant opstod en fejlmeddelelse om, at det var umuligt at bruge kommandoen setpmac.<\/p>\n
Output<\/h2>\n
Denne m\u00e5de at tildele adgang p\u00e5 vil tilf\u00f8je et ekstra lag af sikkerhed til Apache (selvom denne metode kan anvendes til enhver anden stak), som derudover k\u00f8rer i jail, samtidig med at alt dette foreg\u00e5r gennemsigtigt og uset for administratoren.<\/p>\n
Listen over kilder, der hjalp mig med at skrive dette indl\u00e6g:<\/b><\/p>\n
https:\/\/www.freebsd.org\/doc\/ru_RU.KOI8-R\/books\/handbook\/mac.html<\/a><\/noindex>
\n
Kilde: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31890","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mandatmodel for rettighedstildeling i FreeBSD | ProHoster","description":"Introduktion For at sikre et ekstra niveau af sikkerhed p\u00e5 serveren kan du bruge","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043d\u0434\u0430\u0442\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0432 FreeBSD | ProHoster","og:description":"\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:45+00:00","article:modified_time":"2019-10-31T18:43:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31890","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 08:18:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:09:26","updated":"2026-01-21 08:18:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=31890"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31890\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=31890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=31890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=31890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}