{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Faili\u00f5igused Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Tere k\u00f5igile. Meie meeskond t\u00f6\u00f6tab aktiivselt ja valmistame jaanuaris ette mitmeid v\u00f5imsaid lansseerimisi. Muude hulgas on avatud uus grupp k\u00f5igile armastatud kursusele. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">Linuxi administraator<\/a><\/noindex>. Traditsiooniliselt jagame lansseerimise eel kasulikku materjali t\u00f5lget.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Faili\u00f5igused Linuxis\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Faili\u00f5igused pakuvad turvalisemat alternatiivi SUID t\u00e4itmisskriptidele, kuid v\u00f5ivad esmapilgul tunduda veidi segased.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nMe k\u00f5ik teame, et binaarfailid <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> terminid \u00abprimary\/secondary\u00bb. <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">on halvad lahendused turvavaatepunktist.<\/a><\/noindex>. \u00d5nneks, kui teie rakendus vajab piiratud privileege, on olemas efektiivsem viis, mida nimetatakse <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">faili\u00f5igusteks.<\/a><\/noindex>.<\/p>\n<p>Ma s\u00e4\u00e4stan teie aega, kui soovite v\u00e4ltida eelneva artikli p\u00f5hjalikku lugemist: p\u00f5him\u00f5tteliselt v\u00f5imaldavad faili\u00f5igused protsessidel, mis k\u00e4ivitatakse root-kasutaja nime all ja seega omavad \u00f5igusi midagi teha, s\u00e4ilitada teatud v\u00f5imalusi, piiratud <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">selle nimekirjaga<\/a><\/noindex>, kui nad loobuvad privileegidest ja k\u00e4ivituvad mitteprivileegitud kasutajana. See t\u00e4hendab, et kui kurjategija suudab kompromiteerida protsessi n\u00e4iteks puhver\u00fclevoolu v\u00f5i muu r\u00fcnnaku abil, ei saa ta kasutada muud kui teatud minimaalset privileegi, mis tegelikult protsessile vajalik on.<\/p>\n<p>\u00d5igused sobivad suurep\u00e4raselt teenustele, mis tavaliselt k\u00e4ivitatakse root-kasutaja nime all, aga kuidas on k\u00e4sureateenustega? \u00d5nneks on ka see toetatud, kui teil on \u00f5iged utiliidid paigaldatud. N\u00e4iteks Ubuntu puhul peate teil olema pakett <code>libcap2-bin<\/code>. Samuti peate kasutama mitte-ajaloolist kernelit (alates versioonist<b> 2.6.24<\/b>).<\/p>\n<p>Need funktsioonid v\u00f5imaldavad linkida \u00f5igusi t\u00e4itmisfailidega, sarnaselt SUID bitti seadistamisega, kuid ainult teatud \u00f5iguste kogumile. Utiliidi <code>setcap<\/code> kasutatakse \u00f5iguste lisamiseks ja eemaldamiseks faililt.<\/p>\n<p>Esimene samm on valida vajalikud \u00f5igused. K\u00e4esolevas artiklis eeldan, et eksisteerib v\u00f5rgu diagnostika t\u00f6\u00f6riist nimega <code>tracewalk<\/code>, mis peab suutma kasutada <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">tooreid sokette.<\/a><\/noindex>Tavaliselt n\u00f5uab see, et rakendus k\u00e4ivituks root-kasutaja nime all, kuid vaatamise k\u00e4igus <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">nimekirjast <\/a><\/noindex>selgub, et vajatakse ainult \u00f5igust <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Eeldades, et olete kaustas, kus on binaarfail <code>tracewalk<\/code>, saate selle \u00f5iguse lisada j\u00e4rgmiselt:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nPraegu ignoreerige sufiks <code>=eip<\/code> \u00f5iguse jaoks, r\u00e4\u00e4gin sellest m\u00f5ne sekundi p\u00e4rast. Pange t\u00e4hele, et \u00f5iguse nimi on v\u00e4ikestes t\u00e4htedes. N\u00fc\u00fcd saate kontrollida, kas olete \u00f5igused \u00f5igesti seadistatud, kasutades:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nV\u00f5i saate kuvada loendi k\u00f5igist \u00f5igustest, mis on antud k\u00e4ivitatavale failile:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nTeabe jaoks saate samuti eemaldada k\u00f5ik \u00f5igused k\u00e4ivitatavast failist, kasutades:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\nSellel hetkel peaksite olema v\u00f5imeline k\u00e4ivitatavat faili k\u00e4itama kui mitteprivileegitud kasutaja, ja sellel peaks olema v\u00f5imalik t\u00f6\u00f6tada toorete sokettidega, kuid ei tohiks olla muid privileege, millega omab root-kasutaja.<\/p>\n<p>Nii et mida t\u00e4hendab see kummaline sufiks <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efektiivne, p\u00e4randatud ja lubatud (effective, inheritable ja permitted)<\/i>:<\/p>\n<ul>\n<li><b>Efektiivsed (Effective)<\/b> \u00f5igused on need, mis m\u00e4\u00e4ravad, mida protsess tegelikult teha v\u00f5ib. N\u00e4iteks ei saa ta tegeleda toorete sokettidega, kui <code>CAP_NET_RAW<\/code> ei ole efektiivses kogus.<\/li>\n<li><b>Lubatud (Permitted)<\/b> \u00f5igused on need, mis on protsessile lubatud, kui ta neid vastava kutsungi kaudu k\u00fcsib. Need ei luba protsessil tegelikult midagi teha, kui ta ei ole spetsiaalselt kirjutatud, et k\u00fcsida antud \u00f5igust. See v\u00f5imaldab kirjutada protsesse, et lisada eriti olulisi \u00f5igusi efektiivsesse kogusse ainult selle ajaks, kui need t\u00f5eliselt vajalikud on.<\/li>\n<li><b>P\u00e4randatud (Inheritable)<\/b> \u00f5igused on need, mis v\u00f5ivad olla p\u00e4randatud k\u00e4ttesaadavas kogus loodud alamprotsessile. Operatsiooni ajal <code>fork()<\/code> v\u00f5i <code>clone()<\/code> saab alamprotsess alati koopia vanema protsessi \u00f5igustest, kuna sel hetkel t\u00e4idab ta endiselt sama k\u00e4ivitatavat faili. P\u00e4randatud kogust kasutatakse, kui <code>exec()<\/code> (v\u00f5i analoog) kutsutakse, et asendada k\u00e4ivitatavat faili teisega. Sel hetkel varjatakse protsessi k\u00e4ttesaadav kogus p\u00e4randatud kogusega, et saada k\u00e4ttesaadav kogus, mida kasutatakse uue protsessi jaoks.<\/li>\n<\/ul>\n<p>\nSeega kas utiliit <code>setcap<\/code> v\u00f5imaldab meil lisada nende kolme komplekti \u00f5igused s\u00f5ltumatult antud t\u00e4itmisfailile. Pange t\u00e4hele, et r\u00fchma v\u00e4\u00e4rtust t\u00f5lgendatakse failide juurde p\u00e4\u00e4semise \u00f5igustes veidi erinevalt:<\/p>\n<ul>\n<li><b>Saadaval <\/b>faili\u00f5igused - need on \u00f5igused, mis on alati kergesti k\u00e4tte saadavad t\u00e4itmisfailile, isegi kui vanemprotsess, mis seda kutsus, ei olnud neid saanud. Varem nimetati neid \"sund\u00f5igusteks\".<\/li>\n<li><b>p\u00e4randatud <\/b>faili\u00f5igused m\u00e4\u00e4ravad t\u00e4iendava maski, mida saab kasutada \u00f5iguste eemaldamiseks kutsuva protsessi komplektist. Need kehtivad koos kutsuva protsessi p\u00e4randatud komplektiga, seega p\u00e4randatakse \u00f5igus ainult siis, kui see esineb m\u00f5lemas komplektis.<\/li>\n<li><b>t\u00f5husad <\/b>faili\u00f5igused on tegelikult vaid \u00fcks bit, mitte komplekt, ja kui see on seatud, siis t\u00e4hendab see, et kogu saadaval olev komplekt kopeeritakse ka uue protsessi t\u00f5husasse komplekti. Seda saab kasutada \u00f5iguste lisamiseks protsessidele, mis ei ole spetsiaalselt loodud nende k\u00fcsimiseks. Kuna see on \u00fcks bit, kui seadistate selle m\u00f5nele \u00f5igusele, peab see olema seatud k\u00f5igile \u00f5igustele. Saate m\u00f5elda sellele kui p\u00e4randibitile, kuna seda kasutatakse \u00f5iguste lubamiseks rakendustes, mis neid ei toeta.<\/li>\n<\/ul>\n<p>\n\u00d5iguste m\u00e4\u00e4ramisel l\u00e4bi <code>setcap<\/code> kolme t\u00e4he <code>e<\/code>, <code>i<\/code> ja <code>p<\/code> seonduvad <i>t\u00f5husate, p\u00e4randatud ja kergesti k\u00e4tte saadavate<\/i> komplektide vastavalt. Nii et varasem spetsifikatsioon:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 n\u00e4itab, et \u00f5igus <code>CAP_NET_RAW<\/code> peab olema lisatud kergesti k\u00e4tte saadavatele ja p\u00e4randatud komplektidele ja et t\u00f5hus bit peab samuti olema seadistatud. See asendab k\u00f5ik varem seatud \u00f5igused failis. Mitme \u00f5iguse korraga seadmiseks kasutage loendit, eraldatud koma abil:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">\u00d5iguste juhend<\/a><\/noindex> arutab seda k\u00f5ike \u00fcksikasjalikumalt, kuid loodetavasti on see postitus natuke dem\u00fcstifitseerinud, mis toimub. J\u00e4\u00e4nud on mainida vaid m\u00f5ned hoiatavad ja n\u00e4pun\u00e4ited.<\/p>\n<p>Esiteks, faili\u00f5igused ei t\u00f6\u00f6ta s\u00fcmboolsed lingid \u2014 peate need rakendama otse binaarfailile (st s\u00fcmboolse lingi sihtpunktile).<\/p>\n<p>Teiseks, nad ei t\u00f6\u00f6tle t\u00f5lgendatavaid skripte. N\u00e4iteks, kui teil on Python skript, millele soovite \u00f5igused m\u00e4\u00e4rata, peate need m\u00e4\u00e4rama ise Python t\u00f5lgendusprogrammile. See on selgelt potentsiaalne turvaprobleem, kuna k\u00f5ik selle t\u00f5lgendusprogrammi kaudu k\u00e4itatavad skriptid saavad m\u00e4\u00e4ratud \u00f5igused, kuigi see on siiski oluliselt parem kui SUID-i kasutamine. K\u00f5ige levinum lahendus n\u00e4ib olevat eraldi C v\u00f5i selle analoogkeeles kirjutatud t\u00e4itmisfaili kirjutamine, mis suudab vajalikud toimingud teostada ja kutsuda seda skriptist. See on sarnane l\u00e4henemisele, mida kasutab Wireshark, millel on binaarfail. <code>\/usr\/bin\/dumpcap<\/code> privileegide teostamiseks:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nKolmandaks, failide \u00f5igused t\u00fchistatakse, kui kasutate keskkonnamuutujat <code>LD_LIBRARY_PATH<\/code> turvalisuse p\u00e4rast arusaadavatel p\u00f5hjustel.<i>(1)<\/i>. Sama kehtib ka <code>LD_PRELOAD<\/code>, niipalju kui ma tean.<\/p>\n<p><i>1. Kuna r\u00fcndaja v\u00f5ib ilmselgelt asendada \u00fche standardsetest teekidest ja kasutada <code>LD_LIBRARY_PATH<\/code>, et sundida oma teeki kutsuma s\u00fcsteemi ees, ja seega lasta oma suvalisel koodil t\u00f6\u00f6tada samade privileegidega nagu kutsuv rakendus. <br \/>\n<\/i><\/p>\n<p><i><b>Sellega on k\u00f5ik. Kursuse programmi kohta saab rohkem teada <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">veebiseminarilt, mis toimub 24. jaanuaril.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Faili\u00f5igused Linuxis | ProHoster","description":"Tere k\u00f5igile. Me seab end aktiivselt t\u00f6\u00f6le ja juba jaanuaris valmistame ette palju v\u00f5imsaid lansseeringuid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}