{"id":31890,"date":"2019-10-31T21:43:45","date_gmt":"2019-10-31T18:43:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mandatnaya-model-raspredeleniya-prav-v-freebsd\/"},"modified":"2019-10-31T21:43:45","modified_gmt":"2019-10-31T18:43:45","slug":"mandatnaya-model-raspredeleniya-prav-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","title":{"rendered":"FreeBSD-s \u00f5iguste jaotamise mandaadimudel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sissejuhatus<\/h2>\n

Serveri t\u00e4iendava turvalisuse tagamiseks v\u00f5ib kasutada mandaadi mudelit<\/a><\/noindex> juurdep\u00e4\u00e4su jaotamiseks. Selles v\u00e4ljaandes k\u00e4sitletakse, kuidas k\u00e4ivitada apache'i jailis, milles on juurdep\u00e4\u00e4s ainult neile komponentidele, mis on vajalikud apache'i ja php korrektseks t\u00f6\u00f6tamiseks. Selle printsiibi alusel saab piirata mitte ainult apache'i, vaid ka mistahes teist steki.
\n<\/a><\/noindex><\/p>\n

Ettevalmistus<\/h2>\n

See meetod sobib ainult ufs-failis\u00fcsteemile, antud n\u00e4ites kasutatakse p\u00f5hitehases zfs-i ja jailis vastavalt ufs-i. Esiteks tuleb kerneli kokku panna, FreeBSD installimisel installige allikakood.
\nP\u00e4rast s\u00fcsteemi installimist editeerige faili:<\/p>\n

\/usr\/src\/sys\/amd64\/conf\/GENERIC\n<\/code><\/pre>\n
Sellele failile tuleb lisada vaid \u00fcks rida:<\/p>\n
options     MAC_MLS\n<\/code><\/pre>\n
mls\/high m\u00e4rgis omab mls\/low m\u00e4rgise \u00fclekaalu, rakendused, mis t\u00f6\u00f6tavad mls\/low m\u00e4rgisega, ei saa juurde p\u00e4\u00e4seda failidele, mis on mls\/high m\u00e4rgisega. T\u00e4iendavat teavet k\u00f5ikide FreeBSD-s saadaval olevate m\u00e4rkide kohta saab lugeda antud juhendist<\/a><\/noindex>.
\nSeej\u00e4rel liikuge katalooge \/usr\/src:<\/p>\n
cd \/usr\/src\n<\/code><\/pre>\n
Kerneli koostamise k\u00e4ivitamiseks t\u00e4itke (j v\u00f5tmes m\u00e4rkige s\u00fcsteemis olevate tuumade arv):<\/p>\n
make -j 4 buildkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
P\u00e4rast kerneli koostamist on vajalik installida see:<\/p>\n
make installkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
P\u00e4rast kerneli installimist \u00e4rge kiirustage s\u00fcsteemi taask\u00e4ivitama, kuna peate kasutajad login-k klassi viima, eelnevalt selle seadistades. Redigeerige faili \/etc\/login.conf, see fail peab olema edititud algklass default, viige see j\u00e4rgmisse vormi:<\/p>\n
default:\n        :passwd_format=sha512:\n        :copyright=\/etc\/COPYRIGHT:\n        :welcome=\/etc\/motd:\n        :setenv=MAIL=\/var\/mail\/,$BLOCKSIZE=K:\n        :path=\/sbin \/bin \/usr\/sbin \/usr\/bin \/usr\/local\/sbin \/usr\/local\/bin ~\/bin:\n        :nologin=\/var\/run\/nologin:\n        :cputime=unlimited:\n        :datasize=unlimited:\n        :stacksize=unlimited:\n        :memorylocked=64K:\n        :memoryuse=unlimited:\n        :filesize=unlimited:\n        :coredumpsize=unlimited:\n        :openfiles=unlimited:\n        :maxproc=unlimited:\n        :sbsize=unlimited:\n        :vmemoryuse=unlimited:\n        :swapuse=unlimited:\n        :pseudoterminals=unlimited:\n        :kqueues=unlimited:\n        :umtxp=unlimited:\n        :priority=0:\n        :ignoretime@:\n        :umask=022:\n        :label=mls\/equal:\n<\/code><\/pre>\n
Rida :label=mls\/equal v\u00f5imaldab kasutajatel, kes kuuluvad sellesse klassi, p\u00e4\u00e4seda juurde failidele, mis on m\u00e4rgistatud mistahes etiketti (mls\/low, mls\/high). P\u00e4rast neid toiminguid tuleb andmebaas uuesti koostada ja lisada kasutaja root (ning need, kellele see on vajalik) sellesse sisselogimise klassi:<\/p>\n
cap_mkdb \/etc\/login.conf\npw usermod root -L default\n<\/code><\/pre>\n
Kuna poliitika kehtib ainult failide kohta, tuleb redigeerida faili \/etc\/mac.conf, j\u00e4ttes sinna vaid \u00fche rea:<\/p>\n
default_labels file ?mls\n<\/code><\/pre>\n
Samuti tuleb lisada moodul mac_mls.ko k\u00e4ivitamisnimekirja:<\/p>\n
echo 'mac_mls_load=\"YES\"' >> \/boot\/loader.conf\n<\/code><\/pre>\n
P\u00e4rast seda saab s\u00fcsteemi julgelt taask\u00e4ivitada. Kuidas luua jail<\/a><\/noindex> seda saab lugeda m\u00f5nest minu publikatsioonist. Kuid enne jail'i loomist tuleb lisada k\u00f5vaketas, luua sellele failis\u00fcsteem ja lubada multilabel; looge failis\u00fcsteem ufs2, mille klastr suurus on 64 kb:<\/p>\n
newfs -O 2 -b 64kb \/dev\/ada1\ntunefs -l enable \/dev\/ada1\n<\/code><\/pre>\n
P\u00e4rast failis\u00fcsteemi loomist ja multilabel'i lisamist tuleb k\u00f5vaketas lisada \/etc\/fstab faili, lisage sellesse faili j\u00e4rgmine rida:<\/p>\n
\/dev\/ada1               \/jail  ufs     rw              0       1\n<\/code><\/pre>\n
Mountpoint'i all n\u00e4idake katalooge, kuhu kavatsete k\u00f5vaketta mountida, ja Pass'is m\u00e4rkige kindlasti 1 (millises j\u00e4rjekorras kontrollitakse seda k\u00f5vaketast) \u2014 see on vajalik, kuna failis\u00fcsteem ufs on tundlik teravate elektrikatkestuste suhtes. P\u00e4rast neid toiminguid mountige ketas:<\/p>\n
mount \/dev\/ada1 \/jail\n<\/code><\/pre>\n
Installige jail sellesse kataloogi. P\u00e4rast jail'i t\u00f6\u00f6le hakkamist tuleb seal teha samu toiminguid, mis p\u00f5hiss\u00fcsteemis kasutajate ja failidega \/etc\/login.conf, \/etc\/mac.conf. <\/p>\n
Seadistamine<\/h2>\n
Enne vajalike etikettide seadmist soovitan paigaldada k\u00f5ik vajalikud paketid; minu puhul m\u00e4rgitakse etiketid nende pakkide alusel:<\/p>\n
mod_php73-7.3.4_1              PHP skriptikeel\nphp73-7.3.4_1                  PHP skriptikeel\nphp73-ctype-7.3.4_1            ctype jagatud laiendus php jaoks\nphp73-curl-7.3.4_1             curl jagatud laiendus php jaoks\nphp73-dom-7.3.4_1              dom jagatud laiendus php jaoks\nphp73-extensions-1.0           \"meta-port\" PHP laiendite installimiseks\nphp73-filter-7.3.4_1           filter jagatud laiendus php jaoks\nphp73-gd-7.3.4_1               gd jagatud laiendus php jaoks\nphp73-gettext-7.3.4_1          gettext jagatud laiendus php jaoks\nphp73-hash-7.3.4_1             hash jagatud laiendus php jaoks\nphp73-iconv-7.3.4_1            iconv jagatud laiendus php jaoks\nphp73-json-7.3.4_1             json jagatud laiendus php jaoks\nphp73-mysqli-7.3.4_1           mysqli jagatud laiendus php jaoks\nphp73-opcache-7.3.4_1          opcache jagatud laiendus php jaoks\nphp73-openssl-7.3.4_1          openssl jagatud laiendus php jaoks\nphp73-pdo-7.3.4_1              pdo jagatud laiendus php jaoks\nphp73-pdo_sqlite-7.3.4_1       pdo_sqlite jagatud laiendus php jaoks\nphp73-phar-7.3.4_1             phar jagatud laiendus php jaoks\nphp73-posix-7.3.4_1            posix jagatud laiendus php jaoks\nphp73-session-7.3.4_1          session jagatud laiendus php jaoks\nphp73-simplexml-7.3.4_1        simplexml jagatud laiendus php jaoks\nphp73-sqlite3-7.3.4_1          sqlite3 jagatud laiendus php jaoks\nphp73-tokenizer-7.3.4_1        tokenizer jagatud laiendus php jaoks\nphp73-xml-7.3.4_1              xml jagatud laiendus php jaoks\nphp73-xmlreader-7.3.4_1        xmlreader jagatud laiendus php jaoks\nphp73-xmlrpc-7.3.4_1           xmlrpc jagatud laiendus php jaoks\nphp73-xmlwriter-7.3.4_1        xmlwriter jagatud laiendus php jaoks\nphp73-xsl-7.3.4_1              xsl jagatud laiendus php jaoks\nphp73-zip-7.3.4_1              zip jagatud laiendus php jaoks\nphp73-zlib-7.3.4_1             zlib jagatud laiendus php jaoks\napache24-2.4.39 \n<\/code><\/pre>\n
Selles n\u00e4ites m\u00e4\u00e4ratakse sildid arvesse v\u00f5ttes nende pakettide s\u00f5ltuvusi. T\u00f5epoolest, v\u00f5iks asjad lihtsamaks teha, m\u00e4\u00e4rates sildid kataloogile \\\/usr\\\/local\\\/lib ning failidele, mis asuvad selles kataloogis, mls\\\/low, ning hiljem installitud paketid (nt php t\u00e4iendavad laiendused) saavad sellele kataloogile ligip\u00e4\u00e4su, kuid minu arvates on parem anda ligip\u00e4\u00e4s ainult neile failidele, mis on vajalikud. Peatage jail ja m\u00e4\u00e4rake k\u00f5ikidele failidele sildid mls\\\/high:<\/p>\n
setfmac -R mls\\\/high \\\/jail\n<\/code><\/pre>\n
Sildide m\u00e4\u00e4ramisel peatub protsess, kui setfmac satub k\u00f5vade linkidega kokku, minu n\u00e4ites eemaldasin k\u00f5vad lingid j\u00e4rgmistest kataloogidest:<\/p>\n
\/var\/db\/etcupdate\/current\/\n\/var\/db\/etcupdate\/current\/etc\n\/var\/db\/etcupdate\/current\/usr\/share\/openssl\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.UTF-8\n\/var\/db\/etcupdate\/current\/usr\/share\/nls\n\/etc\/ssl\n\/usr\/local\/etc\n\/usr\/local\/etc\/fonts\/conf.d\n\/usr\/local\/openssl\n<\/code><\/pre>\n
P\u00e4rast siltide m\u00e4\u00e4ramist on vajalik m\u00e4\u00e4rata apache'ile sildid mls\\\/low, esimesena tuleb v\u00e4lja selgitada, millised failid on apache'i k\u00e4ivitamiseks vajalikud:<\/p>\n
ldd \\\/usr\\\/local\\\/sbin\\\/httpd\n<\/code><\/pre>\n
P\u00e4rast selle k\u00e4su t\u00e4itmist kuvatakse ekraanile s\u00f5ltuvused, kuid nendele failidele vajalike m\u00e4rgiste seadmine ei ole piisav, kuna kataloogid, kus need failid asuvad, on m\u00e4rgistatud mls\/high, seega tuleb ka neile kataloogidele seadmiseks kasutada mls\/low. Apache k\u00e4ivitamisel kuvab see ka failid, mis on vajalikud selle k\u00e4ivitamiseks, ja php s\u00f5ltuvused on saadaval logifailis httpd-error.log.<\/p>\n
setfmac mls\/low \/\nsetfmac mls\/low \/usr\/local\/lib\/libpcre.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libaprutil-1.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgdbm.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libexpat.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libapr-1.so.0\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/lib\/libc.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libintl.so.8\nsetfmac mls\/low \/var\nsetfmac mls\/low \/var\/run\nsetfmac mls\/low \/var\/log\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac mls\/low \/var\/run\/httpd.pid\nsetfmac mls\/low \/lib\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0.0.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\nsetfmac mls\/low \/usr\/local\/lib\nsetfmac mls\/low \/libexec\nsetfmac mls\/low \/libexec\/ld-elf.so.1\nsetfmac mls\/low \/dev\nsetfmac mls\/low \/dev\/random\nsetfmac mls\/low \/usr\/local\/libexec\nsetfmac mls\/low \/usr\/local\/libexec\/apache24\nsetfmac mls\/low \/usr\/local\/libexec\/apache24\/*\nsetfmac mls\/low \/etc\/pwd.db\nsetfmac mls\/low \/etc\/passwd\nsetfmac mls\/low \/etc\/group\nsetfmac mls\/low \/etc\/\nsetfmac mls\/low \/usr\/local\/etc\nsetfmac -R mls\/low \/usr\/local\/etc\/apache24\nsetfmac mls\/low \/usr\nsetfmac mls\/low \/usr\/local\nsetfmac mls\/low \/usr\/local\/sbin\nsetfmac mls\/low \/usr\/local\/sbin\/*\nsetfmac -R mls\/low \/usr\/local\/etc\/rc.d\/\nsetfmac mls\/low \/usr\/local\/sbin\/htcacheclean\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac -R mls\/low \/usr\/local\/www\nsetfmac mls\/low \/usr\/lib\nsetfmac mls\/low \/tmp\nsetfmac -R mls\/low \/usr\/local\/lib\/php\nsetfmac -R mls\/low \/usr\/local\/etc\/php\nsetfmac mls\/low \/usr\/local\/etc\/php.conf\nsetfmac mls\/low \/lib\/libelf.so.2\nsetfmac mls\/low \/lib\/libm.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libxml2.so.2\nsetfmac mls\/low \/lib\/libz.so.6\nsetfmac mls\/low \/usr\/lib\/liblzma.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libiconv.so.2\nsetfmac mls\/low \/usr\/lib\/librt.so.1\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/usr\/local\/lib\/libpng16.so.16\nsetfmac mls\/low \/usr\/lib\/libbz2.so.4\nsetfmac mls\/low \/usr\/local\/lib\/libargon2.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libpcre2-8.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libsqlite3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgd.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libjpeg.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libfreetype.so\nsetfmac mls\/low \/usr\/local\/lib\/libfontconfig.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libtiff.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libwebp.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libjbig.so.2\nsetfmac mls\/low \/usr\/lib\/libssl.so.8\nsetfmac mls\/low \/lib\/libcrypto.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libzip.so.5\nsetfmac mls\/low \/etc\/resolv.conf\n<\/code><\/pre>\n
Selles nimekirjas seatakse mls\/low m\u00e4rgid k\u00f5ikidele failidele, mis on vajalikud apache ja php koost\u00f6\u00f6 korrektseks toimimiseks (kogu selle n\u00e4ite jaoks installitud paketid).<\/p>\n
Viimase lihvina tuleb jail'i k\u00e4ivitamine seadistada mls\/equal tasemel ja apache mls\/low tasemel. Jail'i k\u00e4ivitamiseks on vajalikud muudatused skriptis \/etc\/rc.d\/jail, leidke selle skripti funktsioon jail_start ning seadke muutuja command j\u00e4rgmisse vormi:<\/p>\n
command=\"setpmac mls\/equal $jail_program\"\n<\/code><\/pre>\n
K\u00e4sk setpmac k\u00e4ivitab k\u00e4itatava faili vajalikul mandaattasandil, antud juhul mls\/equal, et p\u00e4\u00e4seda ligi k\u00f5ikidele siltidele. Apache'i puhul tuleb redigeerida k\u00e4ivitusskripti \/usr\/local\/etc\/rc.d\/apache24. Tehke muudatused funktsioonis apache24_prestart:<\/p>\n
apache24_prestart() {\n        apache24_checkfib\n        apache24_precmd\n        eval \"setpmac mls\/low\" ${command} ${apache24_flags}\n}\n<\/code><\/pre>\n
Uues ametlikus<\/a><\/noindex> juhendis on antud teine n\u00e4ide, kuid ma ei suutnud seda kasutada, kuna pidevalt ilmnes teade, et k\u00e4sku setpmac ei saa kasutada.<\/p>\n
Kokkuv\u00f5te<\/h2>\n
See juurdep\u00e4\u00e4sutegevuse jaotamise meetod lisab apache'ile t\u00e4iendava kaitsetaseme (kuigi see meetod sobib igasse teise tehnoloogiakupli), mis muuhulgas t\u00f6\u00f6tab jail'is, samal ajal toimub k\u00f5ike seda administraatori jaoks l\u00e4bipaistvalt ja m\u00e4rkamatult.<\/p>\n
Allikate loetelu, mis aitasid mul selle publikatsiooni kirjutamisel:<\/b><\/p>\n
https:\/\/www.freebsd.org\/doc\/ru_RU.KOI8-R\/books\/handbook\/mac.html<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31890","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mandaadimudeli \u00f5iguste jagamine FreeBSD-s | ProHoster","description":"Sissejuhatus Serveri t\u00e4iendava turvalisuse taseme tagamiseks saab kasutada","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043d\u0434\u0430\u0442\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0432 FreeBSD | ProHoster","og:description":"\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:45+00:00","article:modified_time":"2019-10-31T18:43:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31890","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 08:18:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:09:26","updated":"2026-01-21 08:18:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31890"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31890\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}