{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Failu at\u013caujas Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Sveiki visiem. M\u0113s akt\u012bvi iek\u013caujamies darb\u0101 un jau janv\u0101r\u012b gatavojam daudz jaud\u012bgu uzs\u0101kumu. Starp citu, ir pazi\u0146ots par jauna kursa uzs\u0101k\u0161anu, kas visiem ir iecien\u012bts. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">Linux administrators<\/a><\/noindex>. Pirms uzs\u0101k\u0161anas tradicion\u0101li dal\u0101mies ar noder\u012bga materi\u0101la tulkojumu.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Failu at\u013caujas Linux\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Failu at\u013caujas pied\u0101v\u0101 dro\u0161u alternat\u012bvu izpild\u0101miem SUID failiem, ta\u010du, pirmo reizi skatoties, t\u0101s var likties nedaudz mulsino\u0161as.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nM\u0113s visi zin\u0101m, ka bin\u0101rie faili <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> ir <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">slikta izv\u0113le dro\u0161\u012bbas zi\u0146\u0101<\/a><\/noindex>. Par laimi, ja j\u016bsu lietojumprogrammai ir nepiecie\u0161amas da\u017eas ierobe\u017eotas privil\u0113\u0123ijas, ir efekt\u012bv\u0101ks veids, ko sauc par <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">failu at\u013cauj\u0101m.<\/a><\/noindex>.<\/p>\n<p>Es ietaup\u012b\u0161u jums laiku, ja v\u0113laties izvair\u012bties no detaliz\u0113tas raksta izlas\u012b\u0161anas: b\u016bt\u012bb\u0101 failu at\u013caujas \u013cauj procesiem, kas tiek palaisti root lietot\u0101ja v\u0101rd\u0101 un t\u0101d\u0113j\u0101di ir ties\u012bgi dar\u012bt kaut ko, saglab\u0101t noteiktas iesp\u0113jas, kas ir ierobe\u017eotas <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">\u0161aj\u0101 sarakst\u0101<\/a><\/noindex>, kad tie nolai\u017e privil\u0113\u0123ijas un tiek palaisti k\u0101 nepiel\u0101gots lietot\u0101js. Tas noz\u012bm\u0113, ka, ja uzbruc\u0113jam izdodas kompromit\u0113t procesu ar buferp\u0101rsniegumu vai citu eksplojumu, vi\u0146\u0161 nevar\u0113s izmantot neko citu k\u0101 noteiktas minim\u0101l\u0101s privil\u0113\u0123ijas, kas tie\u0161\u0101m nepiecie\u0161amas procesam.<\/p>\n<p>At\u013caujas lieliski der pakalpojumiem, kas parasti vienm\u0113r tiek palaisti root lietot\u0101ja v\u0101rd\u0101, bet k\u0101 ir ar komandrindas r\u012bkiem? Par laimi, tas t\u0101pat ir atbalst\u012bts, ja jums ir uzst\u0101d\u012bti pareizie r\u012bki. Ja izmantojat Ubuntu, jums, piem\u0113ram, b\u016bs nepiecie\u0161ams pakotne <code>libcap2-bin<\/code>. Jums ar\u012b b\u016bs j\u0101palai\u017e nemoderns kodols (s\u0101kot no versijas<b> 2.6.24<\/b>).<\/p>\n<p>\u0160\u012bs funkcijas \u013cauj saist\u012bt at\u013caujas ar izpild\u0101miem failiem l\u012bdz\u012bgi, k\u0101 iestat\u012bt SUID bitu, bet tikai noteiktam at\u013cauju kopumam. R\u012bks <code>setcap<\/code> tiek izmantots at\u013cauju pievieno\u0161anai un dz\u0113\u0161anai no faila.<\/p>\n<p>Pirmais solis ir izv\u0113l\u0113ties nepiecie\u0161am\u0101s at\u013caujas. \u0160aj\u0101 rakst\u0101 es pie\u0146emu, ka past\u0101v t\u012bklo\u0161anas diagnostikas r\u012bks, ko sauc par <code>tracewalk<\/code>, kuram vajadz\u0113tu sp\u0113t izmantot <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">neapstr\u0101d\u0101tus soketus.<\/a><\/noindex>Parasti t\u0101dai lietojumprogrammai ir j\u0101palaist root lietot\u0101ja v\u0101rd\u0101, bet, p\u0101rbaudot <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">saraksta <\/a><\/noindex>, izr\u0101d\u0101s, ka nepiecie\u0161ama tikai at\u013cauja <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Pie\u0146emot, ka atrodaties katalog\u0101, kur atrodas bin\u0101rais fails <code>tracewalk<\/code>, j\u016bs varat pievienot \u0161o at\u013cauju \u0161\u0101di:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nPag\u0101ju\u0161aj\u0101 laik\u0101 ignor\u0113jiet sufiksu <code>=eip<\/code> par at\u013cauju, es jums par to past\u0101st\u012b\u0161u p\u0113c da\u017e\u0101m sekund\u0113m. L\u016bdzu, \u0146emiet v\u0113r\u0101, ka at\u013caujas nosaukums ir mazajiem burtiem. Tagad j\u016bs varat p\u0101rbaud\u012bt, vai esat pareizi konfigur\u0113jis at\u013caujas, izmantojot:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nVai ar\u012b varat izvad\u012bt visu at\u013cauju sarakstu, kas noteiktas konkr\u0113tajam izpild\u0101mam failam:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nLai b\u016btu skaidr\u012bba, j\u016bs varat ar\u012b no\u0146emt visas at\u013caujas no izpild\u0101m\u0101 faila, izmantojot:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\n\u0160aj\u0101 posm\u0101 jums vajadz\u0113tu b\u016bt iesp\u0113jai palaist izpild\u0101mo failu k\u0101 nepilnvarotam lietot\u0101jam, un tam vajadz\u0113tu sp\u0113t str\u0101d\u0101t ar neapstr\u0101d\u0101tiem soketiem, ta\u010du tam nevajadz\u0113tu b\u016bt nek\u0101du citu privil\u0113\u0123iju, ko ieg\u016bst root lietot\u0101js.<\/p>\n<p>T\u0101tad, ko noz\u012bm\u0113 \u0161is d\u012bvainais sufikss <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efekt\u012bv\u0101s, mantojam\u0101s un pieejam\u0101s (effective, inheritable un permitted)<\/i>:<\/p>\n<ul>\n<li><b>Efekt\u012bv\u0101s (Effective)<\/b> at\u013caujas ir t\u0101s, kas nosaka, ko process faktiski var dar\u012bt. Piem\u0113ram, tam nevar b\u016bt sakari ar neapstr\u0101d\u0101tiem soketiem, ja <code>CAP_NET_RAW<\/code> tas nav efekt\u012bv\u0101 kop\u0101.<\/li>\n<li><b>Pieejam\u0101s (Permitted)<\/b> at\u013caujas ir t\u0101s, ko procesam ir at\u013cauts ieg\u016bt, ja tas t\u0101s pieprasa ar atbilsto\u0161o izsaukumu. T\u0101s ne\u013cauj procesam faktiski neko dar\u012bt, ja vien tas nav \u012bpa\u0161i uzrakst\u012bts, lai piepras\u012btu attiec\u012bgo at\u013cauju. Tas \u013cauj rakst\u012bt procesus, lai pievienotu \u012bpa\u0161i svar\u012bgas at\u013caujas efekt\u012bvai kopai tikai br\u012bd\u012b, kad t\u0101s patie\u0161\u0101m ir nepiecie\u0161amas.<\/li>\n<li><b>Mantojamas (Inheritable)<\/b> at\u013caujas ir t\u0101s, kuras var manto b\u0113rnu procesa pieejamaj\u0101 kop\u0101. Veicot oper\u0101ciju <code>fork()<\/code> vai <code>clone()<\/code> b\u0113rnu procesam vienm\u0113r tiek dota vec\u0101ku procesa at\u013cauju kopija, jo taj\u0101 br\u012bd\u012b tas joproj\u0101m izpilda to pa\u0161u izpild\u0101mo failu. Mantojamo kopu izmanto, kad <code>exec()<\/code> (vai l\u012bdz\u012bgas) izsaukums tiek veikts, lai nomain\u012btu izpild\u0101mo failu ar citu. \u0160aj\u0101 posm\u0101 procesa pieejam\u0101 kopa tiek mask\u0113ta ar mantojamo kopu, lai ieg\u016btu pieejamo kopu, kas tiks izmantota jaunajam procesam.<\/li>\n<\/ul>\n<p>\nT\u0101d\u0113j\u0101di util\u012bta <code>setcap<\/code> \u013cauj mums pievienot \u0161o triju kopu at\u013caujas neatkar\u012bgi \u0161im izpild\u0101mam failam. \u0145emiet v\u0113r\u0101, ka grupu v\u0113rt\u012bba tiek interpret\u0113ta nedaudz cit\u0101di failu pieejas ties\u012bb\u0101m:<\/p>\n<ul>\n<li><b>Pieejami <\/b>failu at\u013caujas \u2014 ir t\u0101s, kas vienm\u0113r ir pieejamas izpild\u0101mam failam, pat ja vec\u0101kam procesam, kas to izsauc, nav t\u0101s. Agr\u0101k t\u0101s tika sauktas par \u201epiespiedu\u201d at\u013cauj\u0101m.<\/li>\n<li><b>Mantojam\u0101s <\/b>failu at\u013caujas nosaka papildu masku, kas var tikt izmantota, lai ar\u012b dz\u0113stu at\u013caujas no zvano\u0161\u0101 procesa kopas. T\u0101s tiek piem\u0113rotas papildus dzimtajai kopai, t\u0101p\u0113c at\u013cauja tiek mantojama tikai tad, ja t\u0101 past\u0101v ab\u0101s kop\u0101s.<\/li>\n<li><b>Efekt\u012bv\u0101s <\/b>failu at\u013caujas ir paties\u012bb\u0101 tikai viens bits, nevis kopa, un, ja tas ir iestat\u012bts, tas noz\u012bm\u0113, ka visa pieejam\u0101 kopa tiek ar\u012b kop\u0113ta jauna procesa efekt\u012bvaj\u0101 kop\u0101. To var izmantot, lai pievienotu at\u013caujas procesiem, kuri nav speci\u0101li rakst\u012bti to piepras\u012b\u0161anai. T\u0101 k\u0101 tas ir viens bits, ja j\u016bs to iestat\u0101t k\u0101dai at\u013caujai, tas j\u0101noraida vis\u0101m at\u013cauj\u0101m. J\u016bs varat dom\u0101t par to k\u0101 par manto\u0161anas bitu, jo tas tiek izmantots, lai at\u013cautu at\u013cauju izmanto\u0161anu lietojumiem, kas t\u0101s neatbalsta.<\/li>\n<\/ul>\n<p>\nIestatot at\u013caujas caur <code>setcap<\/code> tr\u012bs burtiem <code>e<\/code>, <code>i<\/code> un <code>p<\/code> attiecas uz <i>efekt\u012bvaj\u0101m, mantojamaj\u0101m un pieejamaj\u0101m<\/i> kop\u0101m attiec\u012bgi. T\u0101tad, agr\u0101k\u0101 specifik\u0101cija:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 nor\u0101da, ka at\u013cauja <code>CAP_NET_RAW<\/code> ir j\u0101pie\u0161\u0137ir pieejam\u0101m un mantojam\u0101m kop\u0101m un ka ar\u012b j\u0101b\u016bt iestat\u012btam efekt\u012bvam bitam. Tas aizst\u0101s visas iepriek\u0161noteikt\u0101s at\u013caujas fail\u0101. Lai uzreiz iestat\u012btu vair\u0101kas at\u013caujas, izmantojiet sarakstu pa komatiem:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">At\u013cauju ce\u013cvedis<\/a><\/noindex> apsprie\u017e visu to detaliz\u0113t\u0101k, bet, cerams, \u0161is ieraksts nedaudz atkl\u0101ja to, kas notiek. V\u0113l paliek tikai da\u017ei br\u012bdin\u0101jumi un triki.<\/p>\n<p>Vispirms, failu iesp\u0113jas nedarbojas ar simboliskaj\u0101m sait\u0113m \u2014 jums t\u0101s j\u0101piem\u0113ro pa\u0161am bin\u0101rajam failam (t.i., simbolisk\u0101s saites m\u0113r\u0137im).<\/p>\n<p>Otrk\u0101rt, tie nedarbojas ar interpret\u0113tajiem skriptiem. Piem\u0113ram, ja jums ir Python skripts, kuram v\u0113laties pie\u0161\u0137irt at\u013cauju, jums tas j\u0101piek\u0101rto pa\u0161am Python interpret\u0113t\u0101jam. Ac\u012bmredzot tas ir potenci\u0101ls dro\u0161\u012bbas risks, jo tad visiem skriptiem, kas tiek izpild\u012bti ar \u0161o interpret\u0113t\u0101ju, b\u016bs nor\u0101d\u012bt\u0101 at\u013cauja, lai gan tas joproj\u0101m ir iev\u0113rojami lab\u0101k nek\u0101 izmantot SUID. Visizplat\u012bt\u0101kais apvedce\u013c\u0161, \u0161\u0137iet, ir rad\u012bt atsevi\u0161\u0137u izpild\u0101mo failu C vai taml\u012bdz\u012bg\u0101 valod\u0101, kas var veikt nepiecie\u0161am\u0101s oper\u0101cijas un izsaukt to no skripta. Tas ir l\u012bdz\u012bgi k\u0101 pieeja, ko izmanto Wireshark, kas izmanto bin\u0101ro failu. <code>\/usr\/bin\/dumpcap<\/code> privileg\u0113tu darb\u012bbu veik\u0161anai:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nTre\u0161k\u0101rt, failu at\u013caujas tiek atsp\u0113jotas, ja izmantojat vides main\u012bgo <code>LD_LIBRARY_PATH<\/code> dro\u0161\u012bbas apsv\u0113rumu d\u0113\u013c<i>(1)<\/i>. Tas attiecas ar\u012b uz <code>LD_PRELOAD<\/code>, cik man zin\u0101ms.<\/p>\n<p><i>1. T\u0101 k\u0101 uzbruc\u0113js, ac\u012bmredzot, var aizvietot k\u0101du no standarta bibliot\u0113k\u0101m un izmantot <code>LD_LIBRARY_PATH<\/code>, lai pan\u0101ktu, ka vi\u0146a bibliot\u0113ka tiek izsaukta priek\u0161roka p\u0101r sist\u0113mas, un l\u012bdz ar to izpild\u012bt savu patva\u013c\u012bgo kodu ar t\u0101m pa\u0161\u0101m privil\u0113\u0123ij\u0101m k\u0101 sauco\u0161ajam lietojumam. <br \/>\n<\/i><\/p>\n<p><i><b>Uz to viss ir beidzies. S\u012bk\u0101k par kursa programmu var\u0113s uzzin\u0101t <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">vebin\u0101r\u0101, kas notiks 24. janv\u0101r\u012b.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Failu at\u013caujas Linux | ProHoster","description":"Sveiki visiem. M\u0113s akt\u012bvi iesaist\u0101mies darb\u0101 un jau janv\u0101r\u012b pl\u0101nojam daudz jaud\u012bgu uzs\u0101k\u0161anu.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}