{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Permisiunile fi\u0219ierelor \u00een Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Bun\u0103 ziua tuturor. Ne integr\u0103m activ \u00een munc\u0103 \u0219i deja \u00een ianuarie preg\u0103tim multe lans\u0103ri puternice. Printre altele, a fost anun\u021bat \u00eenceperea unui nou curs foarte apreciat. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">\u201eAdministrator Linux\u201d<\/a><\/noindex>. \u00cen preajma lans\u0103rii, \u00eemp\u0103rt\u0103\u0219im tradi\u021bional traducerea unui material util.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Permisiunile fi\u0219ierelor \u00een Linux\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Permisiunile de fi\u0219iere ofer\u0103 o alternativ\u0103 sigur\u0103 la fi\u0219ierele executabile SUID, dar pot p\u0103rea pu\u021bin confuze la prima vedere.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTo\u021bi \u0219tim c\u0103 fi\u0219ierele binare <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> sunt <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">o solu\u021bie proast\u0103 din punct de vedere al securit\u0103\u021bii<\/a><\/noindex>. Din fericire, dac\u0103 aplica\u021bia dumneavoastr\u0103 necesit\u0103 privilegii limitate, exist\u0103 o modalitate mai eficient\u0103, numit\u0103 <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">permisiuni de fi\u0219iere<\/a><\/noindex>.<\/p>\n<p>\u00ce\u021bi voi economisi timpul, dac\u0103 dore\u0219ti s\u0103 evi\u021bi citirea detaliat\u0103 a articolului de mai sus: \u00een esen\u021b\u0103, permisiunile de fi\u0219iere permit proceselor care sunt lansate sub identitatea utilizatorului root \u0219i, prin urmare, au dreptul de a face orice, s\u0103 p\u0103streze anumite capacit\u0103\u021bi, limitate <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">la aceast\u0103 list\u0103<\/a><\/noindex>, atunci c\u00e2nd renun\u021b\u0103 la privilegii \u0219i sunt lansate ca utilizator f\u0103r\u0103 privilegii. Asta \u00eenseamn\u0103 c\u0103, dac\u0103 un atacator reu\u0219e\u0219te s\u0103 compromit\u0103 un proces printr-o suprascriere a buffer-ului sau prin alt\u0103 vulnerabilitate, el nu va putea beneficia dec\u00e2t de anumite privilegii minime, de care procesul are cu adev\u0103rat nevoie.<\/p>\n<p>Permisiunile sunt excelente pentru serviciile care de obicei sunt lansate sub identitatea utilizatorului root, dar ce zici de utilitarele de linie de comand\u0103? Din fericire, acest lucru este de asemenea sus\u021binut, cu condi\u021bia ca tu s\u0103 ai instalate utilitarele corecte. Dac\u0103 folose\u0219ti Ubuntu, de exemplu, vei avea nevoie de pachetul <code>libcap2-bin<\/code>. De asemenea, va trebui s\u0103 rulezi un kernel nu arhaic (\u00eencep\u00e2nd cu versiunea<b> 2.6.24<\/b>).<\/p>\n<p>Aceste func\u021bii permit legarea permisiunilor la fi\u0219ierele executabile \u00een mod similar cu configurarea bitului SUID, dar doar pentru un anumit set de permisiuni. Utilitarul <code>setcap<\/code> este folosit pentru a ad\u0103uga \u0219i elimina permisiuni dintr-un fi\u0219ier.<\/p>\n<p>Primul pas este s\u0103 alegi permisiunile de care ai nevoie. Pentru acest articol, presupun c\u0103 exist\u0103 un instrument de diagnosticare a re\u021belei, numit <code>tracewalk<\/code>, care ar trebui s\u0103 fie capabil s\u0103 foloseasc\u0103 <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">sockets neprocesate<\/a><\/noindex>. \u00cen mod obi\u0219nuit, pentru aceasta, aplica\u021bia trebuie s\u0103 fie executat\u0103 sub identitatea utilizatorului root, dar c\u00e2nd te ui\u021bi <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">la lista <\/a><\/noindex>se dovede c\u0103 este necesar doar un permisiune <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Presupun\u00e2nd c\u0103 te afli \u00een directorul unde se afl\u0103 fi\u0219ierul binar <code>tracewalk<\/code>, po\u021bi ad\u0103uga aceast\u0103 permisiune astfel:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u00centre timp, po\u021bi ignora sufixul <code>=eip<\/code> pentru permisiune, \u00ee\u021bi voi explica \u00een c\u00e2teva momente. Observ\u0103 c\u0103 numele permisiunii este scris cu litere mici. Acum po\u021bi verifica dac\u0103 ai configurat corect permisiunile folosind:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nSau po\u021bi lista toate permisiunile setate pentru acest fi\u0219ier executabil:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nPentru referin\u021b\u0103, po\u021bi elimina toate permisiunile din fi\u0219ierul executabil folosind:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\n\u00cen acest moment, ar trebui s\u0103 po\u021bi rula fi\u0219ierul executabil ca utilizator neprivilegiat, \u0219i acesta ar trebui s\u0103 aib\u0103 capacitatea de a lucra cu socket-uri brute, dar s\u0103 nu aib\u0103 alte privilegii care le de\u021bine utilizatorul root.<\/p>\n<p>Deci, ce \u00eenseamn\u0103 acest sufix ciudat <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efectiv, mo\u0219tenibil \u0219i permis (effective, inheritable \u0219i permitted)<\/i>:<\/p>\n<ul>\n<li><b>Permisiunile Efective (Effective)<\/b> sunt cele care determin\u0103 ceea ce procesul poate face efectiv. De exemplu, nu poate lucra cu socket-uri brute dac\u0103 <code>CAP_NET_RAW<\/code> nu se afl\u0103 \u00een setul efectiv.<\/li>\n<li><b>Permisiunile Permisibile (Permitted)<\/b> sunt cele care este permis s\u0103 le aib\u0103 procesul, dac\u0103 le solicit\u0103 prin apelul corespunz\u0103tor. Acestea nu permit procesului s\u0103 fac\u0103 efectiv nimic, dec\u00e2t dac\u0103 a fost specific creat pentru a solicita permisiunea specificat\u0103. Acest lucru permite scrierea proceselor pentru a ad\u0103uga permisiuni extrem de importante \u00een setul efectiv doar pentru perioada \u00een care acestea sunt efectiv necesare.<\/li>\n<li><b>Permisiunile Mo\u0219tenibile (Inheritable)<\/b> sunt cele care pot fi mo\u0219tenite \u00een setul disponibil al procesului copil. \u00cen timpul opera\u021biei <code>fork()<\/code> sau <code>clone()<\/code> procesului copil i se ofer\u0103 \u00eentotdeauna o copie a permisiunilor procesului p\u0103rinte, deoarece \u00een acel moment acesta \u00eenc\u0103 execut\u0103 acela\u0219i fi\u0219ier executabil. Setul mo\u0219tenit este utilizat atunci c\u00e2nd <code>exec()<\/code> (sau echivalentul) este apelat pentru a \u00eenlocui fi\u0219ierul executabil cu altul. \u00cen acest stadiu, setul accesibil al procesului este mascat de setul mo\u0219tenit pentru a ob\u021bine setul accesibil care va fi folosit pentru noul proces.<\/li>\n<\/ul>\n<p>\nAstfel, utilitarul <code>setcap<\/code> ne permite s\u0103 ad\u0103ug\u0103m permisiunile celor trei seturi independent pentru acest fi\u0219ier executabil. Re\u021bine\u021bi c\u0103 valoarea grupurilor este interpretat\u0103 pu\u021bin diferit pentru permisiunile fi\u0219ierelor:<\/p>\n<ul>\n<li><b>Linii de alimentare duble disponibile 2\u00d7220 V <\/b>permisiunile fi\u0219ierelor sunt cele care sunt \u00eentotdeauna disponibile pentru fi\u0219ierul executabil, chiar dac\u0103 procesul p\u0103rinte care l-a chemat nu le avea. \u00cen trecut, se numeau \u00abpermisiuni for\u021bate\u00bb.<\/li>\n<li><b>Mo\u0219tenite <\/b>permisiunile fi\u0219ierelor definesc o masc\u0103 suplimentar\u0103, care poate fi folosit\u0103 pentru a elimina permisiunile din setul procesului apelant. Acestea se aplic\u0103 \u00een plus fa\u021b\u0103 de setul mo\u0219tenit al procesului apelant, deci permisiunea este mo\u0219tenit\u0103 doar dac\u0103 exist\u0103 \u00een ambele seturi.<\/li>\n<li><b>Efective <\/b>permisiunile fi\u0219ierelor reprezint\u0103 de fapt un singur bit, nu un set, iar dac\u0103 este setat, \u00eenseamn\u0103 c\u0103 \u00eentregul set disponibil este de asemenea copiat \u00een setul efectiv al noului proces. Acesta poate fi folosit pentru a ad\u0103uga permisiuni la procese care nu au fost scrise special pentru a le solicita. Deoarece este un singur bit, dac\u0103 \u00eel seta\u021bi pentru o permisiune, acesta trebuie s\u0103 fie setat pentru toate permisiunile. Pute\u021bi s\u0103 v\u0103 g\u00e2ndi\u021bi la el ca la un bit de mo\u0219tenire, deoarece este folosit pentru a permite utilizarea permisiunilor pentru aplica\u021bii care nu le sus\u021bin.<\/li>\n<\/ul>\n<p>\nC\u00e2nd se specific\u0103 permisiunile prin <code>setcap<\/code> trei litere <code>e<\/code>, <code>i<\/code> \u0219i <code>p<\/code> se refer\u0103 la <i>efectiv, mo\u0219tenit \u0219i disponibil<\/i> seturi, respectiv. A\u0219adar, specifica\u021bia anterioar\u0103:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 indic\u0103 faptul c\u0103 permisiunea <code>CAP_NET_RAW<\/code> ar trebui s\u0103 fie ad\u0103ugat\u0103 la seturile disponibile \u0219i mo\u0219tenite \u0219i c\u0103 bitul efectiv ar trebui s\u0103 fie de asemenea setat. Aceasta va \u00eenlocui orice permisiuni setate anterior \u00een fi\u0219ier. Pentru a seta mai multe permisiuni simultan, folosi\u021bi o list\u0103 separat\u0103 prin virgul\u0103:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">Ghid pentru permisiuni<\/a><\/noindex> discut\u0103 toate acestea mai detaliat, dar, sper, acest post a demistificat pu\u021bin ceea ce se \u00eent\u00e2mpl\u0103. R\u0103m\u00e2ne doar s\u0103 men\u021bion\u0103m c\u00e2teva avertismente \u0219i trucuri.<\/p>\n<p>\u00cen primul r\u00e2nd, capacit\u0103\u021bile fi\u0219ierelor nu func\u021bioneaz\u0103 cu link-uri simbolice \u2014 trebuie s\u0103 le aplica\u021bi fi\u0219ierului binar \u00een sine (adic\u0103 \u021bintei link-ului simbolic).<\/p>\n<p>\u00cen al doilea r\u00e2nd, ele nu func\u021bioneaz\u0103 cu scripturi interpretate. De exemplu, dac\u0103 ave\u021bi un script Python c\u0103ruia dori\u021bi s\u0103-i atribui\u021bi permisiuni, trebuie s\u0103 le atribui\u021bi direct interpretului Python. Este evident c\u0103 aceasta reprezint\u0103 o poten\u021bial\u0103 problem\u0103 de securitate, deoarece toate scripturile executate cu acest interpret vor avea permisiunile specificate, de\u0219i este totu\u0219i considerabil mai bine dec\u00e2t s\u0103 folosi\u021bi SUID. Cea mai comun\u0103 solu\u021bie pare s\u0103 fie scrierea unui fi\u0219ier executabil separat \u00een C sau un echivalent, care poate efectua opera\u021biile necesare \u0219i a-l apela din script. Acest lucru este similar cu abordarea folosit\u0103 de Wireshark, care utilizeaz\u0103 un fi\u0219ier binar. <code>\/usr\/bin\/dumpcap<\/code> pentru a efectua opera\u021biuni privilegiate:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\n\u00cen al treilea r\u00e2nd, permisiunile fi\u0219ierelor sunt dezactivate dac\u0103 utiliza\u021bi o variabil\u0103 de mediu <code>LD_LIBRARY_PATH<\/code> din motive de securitate evidente<i>(1)<\/i>. Acela\u0219i lucru se aplic\u0103 \u0219i la <code>LD_PRELOAD<\/code>, \u00een m\u0103sura \u00een care \u0219tiu.<\/p>\n<p><i>1. Deoarece un atacator poate, evident, s\u0103 substituie una dintre bibliotecile standard \u0219i s\u0103 foloseasc\u0103 <code>LD_LIBRARY_PATH<\/code>, pentru a face biblioteca sa s\u0103 fie apelat\u0103 \u00eenaintea celei de sistem, av\u00e2nd astfel propriul cod arbitrar executat cu acelea\u0219i privilegii ca aplica\u021bia apelant\u0103. <br \/>\n<\/i><\/p>\n<p><i><b>Asta este tot. Detalii despre programul cursului vor putea fi g\u0103site la <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">webinarul care va avea loc pe 24 ianuarie.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Permisiunile fi\u0219ierelor \u00een Linux | ProHoster","description":"Salut tuturor. Ne integr\u0103m activ \u00een activitate \u0219i deja \u00een ianuarie preg\u0103tim multe lans\u0103ri puternice.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}