{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Faili \u00f5igused Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Tere k\u00f5igile. Meie meeskond on aktiivselt t\u00f6\u00f6s ja juba jaanuaris valmistame ette palju p\u00f5nevaid lansseerimisi. Nende seas on kuulutatud v\u00e4lja uus kursuse grupp, mis on k\u00f5igile h\u00e4sti tuntud. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">\u201eLinuxi administraator\u201c<\/a><\/noindex>. Traditsiooniliselt jagame enne lansseerimist kasulikku materjali t\u00f5lget.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Faili \u00f5igused Linuxis\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Faili \u00f5igused pakuvad turvalist alternatiivi SUID-v\u00e4l executible failidele, kuid need v\u00f5ivad esmapilgul tunduda veidi segased.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nMe k\u00f5ik teame, et binaarfailid <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> on <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">on halb lahendus turvalisuse seisukohalt<\/a><\/noindex>. \u00d5nneks, kui teie rakendus vajab teatud piiratud privileege, on olemas t\u00f5husam meetod, mida nimetatakse <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">faili \u00f5igusteks<\/a><\/noindex>.<\/p>\n<p>Ma s\u00e4\u00e4stan teie aega, kui soovite v\u00e4ltida \u00fclaltoodud artikli p\u00f5hjalikku lugemist: p\u00f5him\u00f5tteliselt v\u00f5imaldavad faili\u00f5igused protsessidel, mis k\u00e4ivitatakse root-kasutaja nimel ja seega teevad, mida nad soovivad, s\u00e4ilitada teatavad v\u00f5imalused, piiratud <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">selle nimekirjaga.<\/a><\/noindex>, kui nad t\u00fchistavad \u00f5igused ja t\u00f6\u00f6tavad privileege mitteomava kasutajana. See t\u00e4hendab, et kui r\u00fcndajal \u00f5nnestub protsess kompromiteerida n\u00e4iteks puhver\u00fclevoolu v\u00f5i m\u00f5ne muu eksploitiga, ei saa ta kasutada midagi muud, kui ainult teatud minimaalset \u00f5iguste hulka, mis on protsessile t\u00f5eliselt vajalik.<\/p>\n<p>\u00d5igused sobivad suurep\u00e4raselt teenustele, mis tavaliselt k\u00e4ivitatakse root-kasutaja nimel, kuid kuidas on k\u00e4surea utiliitidega? \u00d5nneks toetatakse seda samuti, kui teil on \u00f5iged utiliidid installitud. Kui kasutate n\u00e4iteks Ubuntu\u2019t, vajate paketti <code>libcap2-bin<\/code>. Samuti peate k\u00e4itama mitte arhaistlikku kerneli (alates versioonist<b> 2.6.24<\/b>).<\/p>\n<p>Need funktsioonid v\u00f5imaldavad siduda \u00f5igusi t\u00e4idetavate failidega, sarnaselt SUID bitti seadistamisega, kuid ainult spetsiifilisema \u00f5iguste kogumi jaoks. Utiliiti <code>setcap<\/code> kasutatakse \u00f5iguste lisamiseks ja eemaldamiseks faililt.<\/p>\n<p>Esimene samm on valida vajalikud \u00f5igused. Selle artikli puhul eeldan, et olemas on v\u00f5rgu diagnostikavahend nimega <code>tracewalk<\/code>, mis peaks olema v\u00f5imeline t\u00f6\u00f6tama <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">toorimata soketid<\/a><\/noindex>. Tavaliselt peab selleks rakendus k\u00e4ivituma root-kasutaja nime all, kuid vaadates <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">nimekirja <\/a><\/noindex>selgub, et vajalik on ainult luba <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Eeldades, et viibite kaustas, kus asub binaarfail <code>tracewalk<\/code>, saate sellele lubamise j\u00e4rgmisega:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nPraegu ignoreerige sufiks <code>=eip<\/code> luba osas, r\u00e4\u00e4gin sellest paari sekundi p\u00e4rast. Pange t\u00e4hele, et lubade nimi on v\u00e4ikestes t\u00e4htedes. N\u00fc\u00fcd saate kontrollida, kas olete \u00f5igesti seadistanud load, j\u00e4rgmisega:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nV\u00f5i v\u00f5ite loetleda k\u00f5ik \u00f5igused, mis on antud antud t\u00e4ideviimise failile:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nViidatud jaoks saate kustutada k\u00f5ik load j\u00e4rgnevast t\u00e4ideviimise failist j\u00e4rgmisega:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\nSelles etapis peaksite suutma k\u00e4ivitada t\u00e4ideviimise faili kui mitteprivileegitud kasutaja ning see peaks suutma t\u00f6\u00f6tada toorimata soketidega, kuid mitte olema muid privileege, millega root-kasutaja omab.<\/p>\n<p>Nii et mida t\u00e4hendab see kummaline sufiks <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>t\u00f5husad, p\u00e4randatavad ja lubatud<\/i>:<\/p>\n<ul>\n<li><b>T\u00f5husad<\/b> lubatud \u00f5igused on need, mis m\u00e4\u00e4ravad, mida protsess tegelikult teha v\u00f5ib. N\u00e4iteks ei saa see teha toorete pistikute k\u00e4sitlemist, kui <code>CAP_NET_RAW<\/code> see ei ole t\u00f5husas kogumis.<\/li>\n<li><b>Lubatud<\/b> \u00f5igused on need, mis on protsessile lubatud, kui ta neid n\u00f5uab vastava s\u00fcsteemi kutsumise kaudu. Need ei luba protsessil tegelikult midagi teha, kui ta pole spetsiaalselt kirjutatud konkreetse loa taotlemiseks. See v\u00f5imaldab kirjutada protsesse, et lisada eriti olulisi \u00f5igusi t\u00f5husasse kogumisse ainult siis, kui need t\u00f5eliselt vajalikud on.<\/li>\n<li><b>P\u00e4randatavad<\/b> \u00f5igused on need, mis v\u00f5ivad olla p\u00e4randatud t\u00fctardprotsessi lubatud kogumis. Operatsiooni ajal <code>fork()<\/code> v\u00f5i <code>clone()<\/code> t\u00fctardprotsessile antakse alati koopia vanema protsessi \u00f5igustest, kuna sel hetkel k\u00e4itab see endiselt sama t\u00e4itmisfaili. P\u00e4randatud kogumit kasutatakse, kui <code>exec()<\/code> (v\u00f5i analoog) kutsub \u00fcles asendama t\u00e4itmisfaili teisega. Sellel etapil varjitakse protsessi olemasolev komplekt p\u00e4rimise kaudu saadud komplektiga, et saada uus komplekt, mida kasutab uus protsess.<\/li>\n<\/ul>\n<p>\nSeega t\u00f6\u00f6riist <code>setcap<\/code> v\u00f5imaldab meil iseseisvalt lisada nende kolme komplekti \u00f5igusi antud t\u00e4itmisfailile. Pange t\u00e4hele, et grupi v\u00e4\u00e4rtusi t\u00f5lgendatakse failide juurdep\u00e4\u00e4su \u00f5iguste jaoks veidi erinevalt:<\/p>\n<ul>\n<li><b>Saadaval <\/b>faili\u00f5igused on need, mis on alati kergesti saadaval t\u00e4itmisfailile, isegi kui vanemprotsess, mis selle k\u00e4ivitas, ei omanud neid. Varem nimetati neid \u201esundj\u00f5ududeks\u201d \u00f5igusteks.<\/li>\n<li><b>P\u00e4rimise <\/b>faili\u00f5igused m\u00e4\u00e4ravad t\u00e4iendava maski, mida saab kasutada ka \u00f5iguste eemaldamiseks kutsuva protsessi komplektist. Need kehtivad koos kutsuva protsessi p\u00e4randkomplektiga, seega p\u00e4randatakse \u00f5igus ainult siis, kui see eksisteerib m\u00f5lemas komplektis.<\/li>\n<li><b>T\u00f5husad <\/b>Failide \u00f5igused on tegelikult vaid \u00fcks bitt, mitte komplekt, ja kui see on seadistatud, t\u00e4hendab see, et kogu saadaval olev komplekt kopeeritakse ka uue protsessi efektiivsetesse \u00f5igustesse. Seda saab kasutada \u00f5iguste lisamiseks protsessidele, mis ei ole spetsiaalselt kirjutatud nende taotlemiseks. Kuna see on \u00fcks bitt, peab selle seadistamine mingile \u00f5igusele olema k\u00f5ikide \u00f5iguste jaoks. V\u00f5ite m\u00f5elda sellele kui legatsi bitile, sest seda kasutatakse \u00f5iguste lubamiseks rakendustes, mis neid ei toeta.<\/li>\n<\/ul>\n<p>\n\u00d5iguste m\u00e4\u00e4ramisel kaudu <code>setcap<\/code> kolm t\u00e4hte <code>e<\/code>, <code>i<\/code> ja <code>p<\/code> viitavad <i>efektiivsele, p\u00e4randatud ja saadaval<\/i> komplektile vastavalt. Nii et varasem spetsifikatsioon:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 n\u00e4itab, et \u00f5igust <code>CAP_NET_RAW<\/code> peab olema lisatud saadaval ja p\u00e4randatud komplektidesse ning et efektiivne bitt peab samuti olema seadistatud. See asendab k\u00f5ik varem m\u00e4\u00e4ratud \u00f5igused failis. Mitme \u00f5iguse seadistamiseks korraga kasutage nimekirja komadega:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">\u00d5iguste juhend<\/a><\/noindex> arutab k\u00f5ik seda p\u00f5hjalikumalt, kuid loodan, et see postitus on veidi dem\u00fcstifitseerinud toimuvat. R\u00e4\u00e4kida tuleb veel m\u00f5nest ettevaatusest ja nippidest.<\/p>\n<p>Esiteks ei toimi failiv\u00f5imeid s\u00fcmboolsete linkidega \u2013 peate neid rakendama otse binaarfailile (st s\u00fcmboolse lingi sihtfailile).<\/p>\n<p>Teiseks ei toimi nad t\u00f5lgendatavate skriptidega. N\u00e4iteks, kui teil on Python skript, millele soovite m\u00e4\u00e4rata \u00f5igusi, peate \u00f5igused m\u00e4\u00e4rama Python t\u00f5lgendajale endale. See on ilmselgelt potentsiaalne turvarisk, kuna k\u00f5ik selle t\u00f5lgendajaga t\u00e4idetavad skriptid omavad neid \u00f5igusi, kuigi see on siiski oluliselt parem kui SUID rakendamine. N\u00e4ib, et k\u00f5ige levinum lahendus on kirjutada eraldi t\u00e4idetav fail C v\u00f5i sarnases keeles, mis suudab vajalikke toiminguid teha ja kutsuda skriptist seda faili. See on sarnane l\u00e4henemisviis, mida kasutab Wireshark, mis kasutab binaarfaili <code>\/usr\/bin\/dumpcap<\/code> privilegeeritud toimingute tegemiseks:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nKolmandaks, failide \u00f5igused keelatakse, kui kasutate keskkonnamuutujat <code>LD_LIBRARY_PATH<\/code> ilmsete turvakaalutluste t\u00f5ttu<i>(1)<\/i>. Sama kehtib ka <code>LD_PRELOAD<\/code>,nii palju kui mina tean.<\/p>\n<p><i>1. Kuna pahatahtlik isik suudab ilmselt asendada \u00fche standardsetest teekidest ja kasutada <code>LD_LIBRARY_PATH<\/code>, et panna oma teeke kutsuma eelistatult s\u00fcsteemis, ja seega k\u00e4ivitama enda omaval arbirikoodi sama privileegiga nagu kutse tegeva rakenduse. <br \/>\n<\/i><\/p>\n<p><i><b>Sellega on k\u00f5ik. Kursuse programmi kohta saate rohkem teada <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">veebiseminaril, mis toimub 24. jaanuaril.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Failide \u00f5igused Linuxis | ProHoster","description":"Tere k\u00f5igile. Meie meeskond teeb aktiivselt t\u00f6\u00f6d ja juba jaanuaris valmistame ette palju v\u00f5imsaid lansse. Muudest teadetest on v\u00e4lja kuulutatud uus voog populaarseks saanud kursuseks \"Linuxi administraator\". K\u00e4ivituminise eel jagame traditsiooniliselt kasulikku teavet. Failide \u00f5igused pakuvad turvalist alternatiivi SUID t\u00e4itefailidele, kuid v\u00f5ivad esmapilgul tunduda veidi segased. Me k\u00f5ik teame, et","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}