{"id":31890,"date":"2019-10-31T21:43:45","date_gmt":"2019-10-31T18:43:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mandatnaya-model-raspredeleniya-prav-v-freebsd\/"},"modified":"2019-10-31T21:43:45","modified_gmt":"2019-10-31T18:43:45","slug":"mandatnaya-model-raspredeleniya-prav-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","title":{"rendered":"Mandate model for the distribution of rights in FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sissejuhatus<\/h2>\n

Serveri t\u00e4iendava turvataseme tagamiseks v\u00f5ib kasutada volitatud mudelit<\/a><\/noindex> juurdep\u00e4\u00e4su jaotust. K\u00e4esolevas publikatsioonis kirjeldatakse, kuidas saab k\u00e4ivitada apache'i vanglas, millel on juurdep\u00e4\u00e4s ainult neile komponentidele, mis on vajalikud apache'i ja php korrektselt toimimiseks. Selle p\u00f5him\u00f5ttega saab piirata mitte ainult apache'i, vaid ka igasuguseid muid kogumeid.
\n<\/a><\/noindex><\/p>\n

Ettevalmistus<\/h2>\n

See meetod sobib ainult ufs-failis\u00fcsteemile, antud n\u00e4ites kasutatakse p\u00f5hiss\u00fcsteemis zfs-i ja vanglas vastavalt ufs-i. K\u00f5igepealt tuleb kerneli taas koostada, FreeBSD installimise ajal installige l\u00e4htekood.
\nP\u00e4rast s\u00fcsteemi installimist redigeerige faili:<\/p>\n

\/usr\/src\/sys\/amd64\/conf\/GENERIC\n<\/code><\/pre>\n
Sellesse faili tuleb lisada ainult \u00fcks rida:<\/p>\n
options     MAC_MLS\n<\/code><\/pre>\n
M\u00e4rge mls\/high omab domineerivat positsiooni m\u00e4rge mls\/low \u00fcle, rakendused, mis k\u00e4ivitatakse mls\/low m\u00e4rgiga, ei saa juurdep\u00e4\u00e4su failidele, millel on mls\/high m\u00e4rge. T\u00e4iendava teabe saamiseks k\u00f5ikide s\u00fcsteemis FreeBSD saadaval olevate m\u00e4rgete kohta v\u00f5ib lugeda sellest juhendist<\/a><\/noindex>.
\nSeej\u00e4rel minge katalooge \/usr\/src:<\/p>\n
cd \/usr\/src\n<\/code><\/pre>\n
Kerneli koostamise k\u00e4ivitamiseks k\u00e4ivitage (v\u00f5tmes j m\u00e4\u00e4rake s\u00fcsteemis olevate tuumade arv):<\/p>\n
make -j 4 buildkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
P\u00e4rast k\u00e4rgede kokkupanekut peate selle installima:<\/p>\n
make installkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
P\u00e4rast k\u00e4rgede installimist \u00e4rge kiirustage s\u00fcsteemi taask\u00e4ivitama, sest peate kasutajad viima sisselogimisklassidesse, eelnevalt neid seadistades. Redigeerige faili \/etc\/login.conf, kus peate redigeerima sisselogimisklassi default, tuues selle j\u00e4rgmisse vormi:<\/p>\n
default:\n        :passwd_format=sha512:\n        :copyright=\/etc\/COPYRIGHT:\n        :welcome=\/etc\/motd:\n        :setenv=MAIL=\/var\/mail\/$,BLOCKSIZE=K:\n        :path=\/sbin \/bin \/usr\/sbin \/usr\/bin \/usr\/local\/sbin \/usr\/local\/bin ~\/bin:\n        :nologin=\/var\/run\/nologin:\n        :cputime=unlimited:\n        :datasize=unlimited:\n        :stacksize=unlimited:\n        :memorylocked=64K:\n        :memoryuse=unlimited:\n        :filesize=unlimited:\n        :coredumpsize=unlimited:\n        :openfiles=unlimited:\n        :maxproc=unlimited:\n        :sbsize=unlimited:\n        :vmemoryuse=unlimited:\n        :swapuse=unlimited:\n        :pseudoterminals=unlimited:\n        :kqueues=unlimited:\n        :umtxp=unlimited:\n        :priority=0:\n        :ignoretime@:\n        :umask=022:\n        :label=mls\/equal:\n<\/code><\/pre>\n
Rida :label=mls\/equal, v\u00f5imaldab kasutajatel, kes kuuluvad sellesse klassi, p\u00e4\u00e4seda ligi failidele, mis on m\u00e4rgitud mis tahes etiketiga (mls\/low, mls\/high). P\u00e4rast neid manipuleerimisi tuleb andmebaas \u00fcmber ehitada ja kasutaja root (ning ka need, kellel seda on vaja) peab olema sellesse sisenemise klassi lisatud:<\/p>\n
cap_mkdb \/etc\/login.conf\npw usermod root -L default\n<\/code><\/pre>\n
Et poliitika puudutaks ainult faile, tuleb redigeerida fail \/etc\/mac.conf, j\u00e4ttes sinna vaid \u00fche rida:<\/p>\n
default_labels file ?mls\n<\/code><\/pre>\n
Samuti tuleb lisada moodul mac_mls.ko automaatk\u00e4ivitusse:<\/p>\n
echo 'mac_mls_load=\"YES\"' >> \/boot\/loader.conf\n<\/code><\/pre>\n
P\u00e4rast seda v\u00f5ib julgelt s\u00fcsteemi taask\u00e4ivitada. Kuidas luua jail<\/a><\/noindex> saate lugeda \u00fches mu postitustes. Kuid enne jaili loomist on vajalik lisada k\u00f5vaketas ja luua sellele failis\u00fcsteem, samuti aktiveerida multilabel; looge failis\u00fcsteem ufs2, mille klastrite suurus on 64kb:<\/p>\n
newfs -O 2 -b 64kb \/dev\/ada1\ntunefs -l enable \/dev\/ada1\n<\/code><\/pre>\n
P\u00e4rast failis\u00fcsteemi loomist ja multilabeli lisamist tuleb k\u00f5vaketas lisada \/etc\/fstab, lisage see rida sellesse faili:<\/p>\n
\/dev\/ada1               \/jail  ufs     rw              0       1\n<\/code><\/pre>\n
Mountpoint'i puhul m\u00e4rkige kaust, kuhu monteerite k\u00f5vaketta, ja Pass'i puhul m\u00e4rkige kindlasti 1 (kuidas kontrollitakse seda k\u00f5vaketast) \u2014 see on vajalik, kuna failis\u00fcsteem ufs on tundlik j\u00e4rskude elektri katkestuste suhtes. P\u00e4rast neid toiminguid monteerige ketas:<\/p>\n
mount \/dev\/ada1 \/jail\n<\/code><\/pre>\n
Installige jail sellele kaustale. Kui jail t\u00f6\u00f6tab, tuleb seal teha samad toimingud, mis p\u00f5hiss\u00fcsteemis kasutajate ja failidega \/etc\/login.conf, \/etc\/mac.conf. <\/p>\n
Seadistamine<\/h2>\n
Enne vajalike m\u00e4rkide seadistamist soovitan installida k\u00f5ik vajalikud paketid, minu juhul seadistatakse m\u00e4rkid vastavalt nendele paketidele:<\/p>\n
mod_php73-7.3.4_1              PHP skriptimiske keel\nphp73-7.3.4_1                  PHP skriptimiske keel\nphp73-ctype-7.3.4_1            ctype jagatud laiendus php jaoks\nphp73-curl-7.3.4_1             curl jagatud laiendus php jaoks\nphp73-dom-7.3.4_1              dom jagatud laiendus php jaoks\nphp73-extensions-1.0           \"meta-port\" PHP laiendite installimiseks\nphp73-filter-7.3.4_1           filter jagatud laiendus php jaoks\nphp73-gd-7.3.4_1               gd jagatud laiendus php jaoks\nphp73-gettext-7.3.4_1          gettext jagatud laiendus php jaoks\nphp73-hash-7.3.4_1             hash jagatud laiendus php jaoks\nphp73-iconv-7.3.4_1            iconv jagatud laiendus php jaoks\nphp73-json-7.3.4_1             json jagatud laiendus php jaoks\nphp73-mysqli-7.3.4_1           mysqli jagatud laiendus php jaoks\nphp73-opcache-7.3.4_1          opcache jagatud laiendus php jaoks\nphp73-openssl-7.3.4_1          openssl jagatud laiendus php jaoks\nphp73-pdo-7.3.4_1              pdo jagatud laiendus php jaoks\nphp73-pdo_sqlite-7.3.4_1       pdo_sqlite jagatud laiendus php jaoks\nphp73-phar-7.3.4_1             phar jagatud laiendus php jaoks\nphp73-posix-7.3.4_1            posix jagatud laiendus php jaoks\nphp73-session-7.3.4_1          sessioon jagatud laiendus php jaoks\nphp73-simplexml-7.3.4_1        simplexml jagatud laiendus php jaoks\nphp73-sqlite3-7.3.4_1          sqlite3 jagatud laiendus php jaoks\nphp73-tokenizer-7.3.4_1        tokenizer jagatud laiendus php jaoks\nphp73-xml-7.3.4_1              xml jagatud laiendus php jaoks\nphp73-xmlreader-7.3.4_1        xmlreader jagatud laiendus php jaoks\nphp73-xmlrpc-7.3.4_1           xmlrpc jagatud laiendus php jaoks\nphp73-xmlwriter-7.3.4_1        xmlwriter jagatud laiendus php jaoks\nphp73-xsl-7.3.4_1              xsl jagatud laiendus php jaoks\nphp73-zip-7.3.4_1              zip jagatud laiendus php jaoks\nphp73-zlib-7.3.4_1             zlib jagatud laiendus php jaoks\napache24-2.4.39 \n<\/code><\/pre>\n
Antud n\u00e4ites m\u00e4\u00e4ratakse m\u00e4rgid andmepakettide s\u00f5ltuvusi arvestades. Muidugi on lihtsam seada m\u00e4rke kaustale \/usr\/local\/lib ja selle katalooge kuuluvatele failidele mls\/low, mist\u00f5ttu saavad hiljem installitud paketid (n\u00e4iteks PHP t\u00e4iendused) sellele kaustale juurdep\u00e4\u00e4su, kuid arvan, et oleks parem anda juurdep\u00e4\u00e4s ainult vajalikutele failidele. Peatage jail ja m\u00e4\u00e4rake k\u00f5ikidele failidele mls\/high m\u00e4rgid:<\/p>\n
setfmac -R mls\/high \/jail\n<\/code><\/pre>\n
M\u00e4rkide m\u00e4\u00e4ramisel peatub protsess, kui setfmac kohtab k\u00f5vasid linke; minu n\u00e4ites kustutasin k\u00f5vad lingid j\u00e4rgmistest kataloogidest:<\/p>\n
\/var\/db\/etcupdate\/current\/\n\/var\/db\/etcupdate\/current\/etc\n\/var\/db\/etcupdate\/current\/usr\/share\/openssl\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.UTF-8\n\/var\/db\/etcupdate\/current\/usr\/share\/nls\n\/etc\/ssl\n\/usr\/local\/etc\n\/usr\/local\/etc\/fonts\/conf.d\n\/usr\/local\/openssl\n<\/code><\/pre>\n
P\u00e4rast m\u00e4rkide m\u00e4\u00e4ramist on vajalik m\u00e4\u00e4rata apache'ile mls\/low m\u00e4rgid; k\u00f5igepealt tuleb v\u00e4lja selgitada, milliseid faile apache'i k\u00e4ivitamiseks vajalik:<\/p>\n
ldd \/usr\/local\/sbin\/httpd\n<\/code><\/pre>\n
P\u00e4rast selle k\u00e4su t\u00e4itmist kuvatakse ekraanil s\u00f5ltuvused, kuid nendele failidele vajalike m\u00e4rgiste seadmine ei ole piisav, kuna kataloogid, kus need failid asuvad, omavad m\u00e4rgist mls\/high. Seet\u00f5ttu tuleb ka nendele kataloogidele seadistada m\u00e4rgis mls\/low. Apache'i k\u00e4ivitamisel kuvatakse ka failid, mis on vajalikud selle k\u00e4ivitamiseks, ja PHP s\u00f5ltuvused saab teada httpd-error.log logifailist.<\/p>\n
setfmac mls\/low \/usr\/local\/lib\/libpcre.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libaprutil-1.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgdbm.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libexpat.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libapr-1.so.0\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/lib\/libc.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libintl.so.8\nsetfmac mls\/low \/var\nsetfmac mls\/low \/var\/run\nsetfmac mls\/low \/var\/log\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac mls\/low \/var\/run\/httpd.pid\nsetfmac mls\/low \/lib\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0.0.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\nsetfmac mls\/low \/usr\/local\/lib\nsetfmac mls\/low \/libexec\nsetfmac mls\/low \/libexec\/ld-elf.so.1\nsetfmac mls\/low \/dev\nsetfmac mls\/low \/dev\/random\nsetfmac mls\/low \/usr\/local\/libexec\nsetfmac mls\/low \/usr\/local\/libexec\/apache24\nsetfmac mls\/low \/usr\/local\/libexec\/apache24\/*\nsetfmac mls\/low \/etc\/pwd.db\nsetfmac mls\/low \/etc\/passwd\nsetfmac mls\/low \/etc\/group\nsetfmac mls\/low \/etc\/\nsetfmac mls\/low \/usr\/local\/etc\nsetfmac -R mls\/low \/usr\/local\/etc\/apache24\nsetfmac mls\/low \/usr\nsetfmac mls\/low \/usr\/local\nsetfmac mls\/low \/usr\/local\/sbin\nsetfmac mls\/low \/usr\/local\/sbin\/*\nsetfmac -R mls\/low \/usr\/local\/etc\/rc.d\/\nsetfmac mls\/low \/usr\/local\/sbin\/htcacheclean\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac -R mls\/low \/usr\/local\/www\nsetfmac mls\/low \/usr\/lib\nsetfmac mls\/low \/tmp\nsetfmac -R mls\/low \/usr\/local\/lib\/php\nsetfmac -R mls\/low \/usr\/local\/etc\/php\nsetfmac mls\/low \/usr\/local\/etc\/php.conf\nsetfmac mls\/low \/lib\/libelf.so.2\nsetfmac mls\/low \/lib\/libm.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libxml2.so.2\nsetfmac mls\/low \/lib\/libz.so.6\nsetfmac mls\/low \/usr\/lib\/liblzma.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libiconv.so.2\nsetfmac mls\/low \/usr\/lib\/librt.so.1\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/usr\/local\/lib\/libpng16.so.16\nsetfmac mls\/low \/usr\/lib\/libbz2.so.4\nsetfmac mls\/low \/usr\/local\/lib\/libargon2.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libpcre2-8.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libsqlite3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgd.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libjpeg.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libfreetype.so\nsetfmac mls\/low \/usr\/local\/lib\/libfontconfig.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libtiff.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libwebp.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libjbig.so.2\nsetfmac mls\/low \/usr\/lib\/libssl.so.8\nsetfmac mls\/low \/lib\/libcrypto.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libzip.so.5\nsetfmac mls\/low \/etc\/resolv.conf\n<\/code><\/pre>\n
Selles loendis kuvatakse mls\/low sildid k\u00f5igi failide jaoks, mis on vajalikud apache ja php sidumise korrektseks toimimiseks (k\u00f5igi pakettide jaoks, mis on minu n\u00e4ites installitud).<\/p>\n
Viimase sammuna seadistatakse jaili k\u00e4ivitamine tasemel mls\/equal ja apache tasemel mls\/low. Jaili k\u00e4ivitamiseks tuleb teha muudatusi skriptis \/etc\/rc.d\/jail, leidke antud skriptis funktsioon jail_start, muuda muutujat command j\u00e4rgmiseks:<\/p>\n
command=\"setpmac mls\/equal $jail_program\"\n<\/code><\/pre>\n
K\u00e4sk setpmac k\u00e4ivitab t\u00e4itmisfaili vajalikul mandaattasemel, antud juhul mls\/equal, et p\u00e4\u00e4seda ligi k\u00f5igile siltidele. Apache'is tuleb redigeerida k\u00e4ivitusskripti \/usr\/local\/etc\/rc.d\/apache24. Tehke muudatus funktsioonis apache24_prestart:<\/p>\n
apache24_prestart() {\n        apache24_checkfib\n        apache24_precmd\n        eval \"setpmac mls\/low\" ${command} ${apache24_flags}\n}\n<\/code><\/pre>\n
V ametlikult<\/a><\/noindex> K\u00e4siraamatus on teine n\u00e4ide, kuid ma ei suutnud seda kasutada, kuna sain pidevalt teate, et k\u00e4sku setpmac ei saa kasutada.<\/p>\n
Kokkuv\u00f5te<\/h2>\n
See sellele juurdep\u00e4\u00e4su jaotuse meetodile lisatakse apache'ile t\u00e4iendav turvakiht (kuigi see sobib ka igale teisele tehnoloogiapakkumisele), mis k\u00e4ivitatakse samal ajal jail'is, j\u00e4\u00e4b administraatorile kogu see protsess l\u00e4bipaistvaks ja m\u00e4rkamatuks.<\/p>\n
Allikate loetelu, mis aitasid mul selle publikatsiooni kirjutamisel:<\/b><\/p>\n
https:\/\/www.freebsd.org\/doc\/ru_RU.KOI8-R\/books\/handbook\/mac.html<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31890","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mandaadi mudel \u00f5iguste jaotamisel FreeBSD | ProHoster","description":"Sissejuhatus Serveri t\u00e4iendava turvatasandi tagamiseks on v\u00f5imalik kasutada","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043d\u0434\u0430\u0442\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0432 FreeBSD | ProHoster","og:description":"\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:45+00:00","article:modified_time":"2019-10-31T18:43:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31890","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 08:18:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:09:26","updated":"2026-01-21 08:18:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31890"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31890\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}