{"id":31890,"date":"2019-10-31T21:43:45","date_gmt":"2019-10-31T18:43:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mandatnaya-model-raspredeleniya-prav-v-freebsd\/"},"modified":"2019-10-31T21:43:45","modified_gmt":"2019-10-31T18:43:45","slug":"mandatnaya-model-raspredeleniya-prav-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","title":{"rendered":"Modeli mandatorial i shp\u00ebrndarjes s\u00eb t\u00eb drejtave n\u00eb FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hyrje<\/h2>\n

P\u00ebr t\u00eb siguruar nj\u00eb nivel t\u00eb shtuar sigurie p\u00ebr serverin, mund t\u00eb p\u00ebrdoret modeli mandatar<\/a><\/noindex> i shp\u00ebrndarjes s\u00eb qasjes. N\u00eb k\u00ebt\u00eb publikim do t\u00eb p\u00ebrshkruhet se si mund t\u00eb ekzekutohet apache n\u00eb jail me qasje vet\u00ebm n\u00eb ata komponent\u00eb q\u00eb jan\u00eb t\u00eb nevojsh\u00ebm p\u00ebr funksionimin korrekt t\u00eb apache dhe php. Duke ndjekur k\u00ebt\u00eb parim, mund t\u00eb kufizoni jo vet\u00ebm apache-n, por gjithashtu \u00e7do stak tjet\u00ebr.
\n<\/a><\/noindex><\/p>\n

P\u00ebrgatitja<\/h2>\n

Ky metod do t\u00eb p\u00ebrshtatet vet\u00ebm p\u00ebr sistemin e skedar\u00ebve ufs; n\u00eb k\u00ebt\u00eb shembull, n\u00eb sistemin kryesor do t\u00eb p\u00ebrdoret zfs, nd\u00ebrsa n\u00eb jail p\u00ebrkat\u00ebsisht ufs. Si fillim, \u00ebsht\u00eb e nevojshme t\u00eb rind\u00ebrtohet b\u00ebrthama, gjat\u00eb instalimit t\u00eb FreeBSD, instaloni kodin burimor.
\nPasi sistemi t\u00eb jet\u00eb instaluar, redaktoni skedarin:<\/p>\n

\/usr\/src\/sys\/amd64\/conf\/GENERIC\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb skedar \u00ebsht\u00eb e nevojshme t\u00eb shtoni vet\u00ebm nj\u00eb rresht:<\/p>\n
options     MAC_MLS\n<\/code><\/pre>\n
Shenja mls\/high do t\u00eb ket\u00eb nj\u00eb pozici\u00f3n dominuese mbi shenj\u00ebn mls\/low; aplikacionet q\u00eb do t\u00eb ekzekutohen me shenj\u00ebn mls\/low nuk do t\u00eb ken\u00eb qasje n\u00eb skedar\u00ebt q\u00eb kan\u00eb shenj\u00ebn mls\/high. M\u00eb shum\u00eb detaje mbi t\u00eb gjitha shenjat e disponueshme n\u00eb sistemin FreeBSD mund t\u00eb lexohen n\u00eb k\u00ebt\u00eb udh\u00ebzimin<\/a><\/noindex>.
\nM\u00eb pas kaloni n\u00eb katalogun \/usr\/src:<\/p>\n
cd \/usr\/src\n<\/code><\/pre>\n
P\u00ebr t\u00eb nisur nd\u00ebrtimin e b\u00ebrtham\u00ebs, kryeni (n\u00eb \u00e7el\u00ebsin j, specifikoni numrin e b\u00ebrthamave n\u00eb sistem):<\/p>\n
make -j 4 buildkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
Pasi b\u00ebrthama t\u00eb jet\u00eb nd\u00ebrtuar, \u00ebsht\u00eb e nevojshme t\u00eb instalohet:<\/p>\n
make installkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
Pas instalimit t\u00eb b\u00ebrtham\u00ebs, mos u ngutni t\u00eb ribleni sistemin, pasi \u00ebsht\u00eb e nevojshme t\u00eb kaloni p\u00ebrdoruesit n\u00eb klas\u00ebn e loginit, duke e konfiguruar at\u00eb paraprakisht. Redaktoni skedarin \/etc\/login.conf; n\u00eb k\u00ebt\u00eb skedar \u00ebsht\u00eb e nevojshme t\u00eb redaktoni klas\u00ebn e loginit default, duke e sjell\u00eb at\u00eb n\u00eb form\u00ebn:<\/p>\n
default:\n        :passwd_format=sha512:\n        :copyright=\/etc\/COPYRIGHT:\n        :welcome=\/etc\/motd:\n        :setenv=MAIL=\/var\/mail\/$,BLOCKSIZE=K:\n        :path=\/sbin \/bin \/usr\/sbin \/usr\/bin \/usr\/local\/sbin \/usr\/local\/bin ~\/bin:\n        :nologin=\/var\/run\/nologin:\n        :cputime=unlimited:\n        :datasize=unlimited:\n        :stacksize=unlimited:\n        :memorylocked=64K:\n        :memoryuse=unlimited:\n        :filesize=unlimited:\n        :coredumpsize=unlimited:\n        :openfiles=unlimited:\n        :maxproc=unlimited:\n        :sbsize=unlimited:\n        :vmemoryuse=unlimited:\n        :swapuse=unlimited:\n        :pseudoterminals=unlimited:\n        :kqueues=unlimited:\n        :umtxp=unlimited:\n        :priority=0:\n        :ignoretime@:\n        :umask=022:\n        :label=mls\/equal:\n<\/code><\/pre>\n
Rreshti :label=mls\/equal, do t'u jap\u00eb mund\u00ebsi p\u00ebrdoruesve q\u00eb p\u00ebrfshihen n\u00eb k\u00ebt\u00eb klas\u00eb p\u00ebr t\u00eb pasur qasje n\u00eb skedar\u00ebt q\u00eb jan\u00eb t\u00eb sh\u00ebnuar me \u00e7do etiket\u00eb (mls\/low, mls\/high). Pas k\u00ebtyre manipulimeve, \u00ebsht\u00eb e nevojshme t\u00eb rind\u00ebrtohet baza e t\u00eb dh\u00ebnave dhe t\u00eb vendoset p\u00ebrdoruesi root (si dhe ata q\u00eb e k\u00ebrkojn\u00eb k\u00ebt\u00eb) n\u00eb k\u00ebt\u00eb klas\u00eb logimi:<\/p>\n
cap_mkdb \/etc\/login.conf\npw usermod root -L default\n<\/code><\/pre>\n
P\u00ebr t\u00eb siguruar q\u00eb politika t\u00eb prekje vet\u00ebm skedar\u00ebt, \u00ebsht\u00eb e nevojshme t\u00eb redaktoni skedarin \/etc\/mac.conf; lini n\u00eb t\u00eb vet\u00ebm nj\u00eb rresht:<\/p>\n
default_labels file ?mls\n<\/code><\/pre>\n
Gjithashtu \u00ebsht\u00eb e nevojshme t\u00eb shtoni modulin mac_mls.ko n\u00eb auto-start:<\/p>\n
echo 'mac_mls_load=\"YES\"' >> \/boot\/loader.conf\n<\/code><\/pre>\n
Pas k\u00ebsaj mund t\u00eb ribleni sigurt sistemin. Si t\u00eb krijoni jail<\/a><\/noindex> mund t\u00eb lexoni n\u00eb nj\u00eb nga publikimet e mia. Por para se t\u00eb krijoni jail, \u00ebsht\u00eb e nevojshme t\u00eb shtoni nj\u00eb disk t\u00eb ngurt\u00eb dhe t\u00eb krijoni n\u00eb t\u00eb nj\u00eb sistem skedar\u00ebsh dhe t\u00eb aktivizoni multilabel, krijoni nj\u00eb sistem skedar\u00ebsh ufs2 me madh\u00ebsin\u00eb e klasterit 64kb:<\/p>\n
newfs -O 2 -b 64kb \/dev\/ada1\ntunefs -l enable \/dev\/ada1\n<\/code><\/pre>\n
Pas krijimit t\u00eb sistemit t\u00eb skedar\u00ebve dhe shtimit t\u00eb multilabel, \u00ebsht\u00eb e nevojshme t\u00eb shtoni diskun e ngurt\u00eb n\u00eb \/etc\/fstab; shtoni rreshtin n\u00eb k\u00ebt\u00eb skedar:<\/p>\n
\/dev\/ada1               \/jail  ufs     rw              0       1\n<\/code><\/pre>\n
N\u00eb Mountpoint sh\u00ebnoni katalogun ku do t\u00eb montoni disku e ngurt\u00eb, n\u00eb Pass sigurohuni t\u00eb sh\u00ebnoni 1 (n\u00eb \u00e7far\u00eb rendi do t\u00eb b\u00ebhet kontrolli i k\u00ebtij disku t\u00eb ngurt\u00eb) \u2014 kjo \u00ebsht\u00eb e nevojshme, pasi sistemi i skedar\u00ebve ufs \u00ebsht\u00eb i ndjesh\u00ebm ndaj nd\u00ebrprerjeve t\u00eb papritura t\u00eb energjis\u00eb. Pas k\u00ebtyre veprimeve montoni diskun:<\/p>\n
mount \/dev\/ada1 \/jail\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb katalog vendosni jail. Pasi jail t\u00eb filloj\u00eb, \u00ebsht\u00eb e nevojshme t\u00eb b\u00ebni t\u00eb nj\u00ebjtat manipulime q\u00eb keni b\u00ebr\u00eb n\u00eb sistemin e kryesor me p\u00ebrdoruesit dhe skedar\u00ebt \/etc\/login.conf, \/etc\/mac.conf. <\/p>\n
Konfigurimi<\/h2>\n
P\u00ebrpara se t\u00eb vendosni etiketat e nevojshme, rekomandoj t\u00eb instaloni t\u00eb gjitha paketat e nevojshme; n\u00eb rastin tim, etiketat do t\u00eb vendosen duke marr\u00eb parasysh k\u00ebto paketa:<\/p>\n
mod_php73-7.3.4_1 PHP Scripting Language\nphp73-7.3.4_1 PHP Scripting Language\nphp73-ctype-7.3.4_1 The ctype shared extension for php\nphp73-curl-7.3.4_1 The curl shared extension for php\nphp73-dom-7.3.4_1 The dom shared extension for php\nphp73-extensions-1.0 \"meta-port\" to install PHP extensions\nphp73-filter-7.3.4_1 The filter shared extension for php\nphp73-gd-7.3.4_1 The gd shared extension for php\nphp73-gettext-7.3.4_1 The gettext shared extension for php\nphp73-hash-7.3.4_1 The hash shared extension for php\nphp73-iconv-7.3.4_1 The iconv shared extension for php\nphp73-json-7.3.4_1 The json shared extension for php\nphp73-mysqli-7.3.4_1 The mysqli shared extension for php\nphp73-opcache-7.3.4_1 The opcache shared extension for php\nphp73-openssl-7.3.4_1 The openssl shared extension for php\nphp73-pdo-7.3.4_1 The pdo shared extension for php\nphp73-pdo_sqlite-7.3.4_1 The pdo_sqlite shared extension for php\nphp73-phar-7.3.4_1 The phar shared extension for php\nphp73-posix-7.3.4_1 The posix shared extension for php\nphp73-session-7.3.4_1 The session shared extension for php\nphp73-simplexml-7.3.4_1 The simplexml shared extension for php\nphp73-sqlite3-7.3.4_1 The sqlite3 shared extension for php\nphp73-tokenizer-7.3.4_1 The tokenizer shared extension for php\nphp73-xml-7.3.4_1 The xml shared extension for php\nphp73-xmlreader-7.3.4_1 The xmlreader shared extension for php\nphp73-xmlrpc-7.3.4_1 The xmlrpc shared extension for php\nphp73-xmlwriter-7.3.4_1 The xmlwriter shared extension for php\nphp73-xsl-7.3.4_1 The xsl shared extension for php\nphp73-zip-7.3.4_1 The zip shared extension for php\nphp73-zlib-7.3.4_1 The zlib shared extension for php\napache24-2.4.39 \n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb shembull, etiketat do t\u00eb caktohen duke marr\u00eb parasysh var\u00ebsit\u00eb e k\u00ebtyre pakove. Sigurisht, mund t\u00eb veproni m\u00eb thjesht, duke caktuar etiketat mls\/low p\u00ebr folderin \/usr\/local\/lib dhe skedar\u00ebt q\u00eb ndodhen n\u00eb k\u00ebt\u00eb katalog, duke lejuar paketat e ardhshme t\u00eb ken\u00eb akses n\u00eb bibliotekat n\u00eb k\u00ebt\u00eb katalog, por mendoj se \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb ofrohet qasje vet\u00ebm p\u00ebr skedar\u00ebt e nevojsh\u00ebm. Nd stoppni jail dhe caktoni etiketat mls\/high p\u00ebr t\u00eb gjith\u00eb skedar\u00ebt:<\/p>\n
setfmac -R mls\/high \/jail\n<\/code><\/pre>\n
Kur caktohen etiketat, procesi do t\u00eb ndalet n\u00ebse setfmac ndesh n\u00eb lidhje t\u00eb ngurta, n\u00eb shembullin tim hiqja lidhjet e ngurta n\u00eb katalog\u00ebt e m\u00ebposht\u00ebm:<\/p>\n
\/var\/db\/etcupdate\/current\/\n\/var\/db\/etcupdate\/current\/etc\n\/var\/db\/etcupdate\/current\/usr\/share\/openssl\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.UTF-8\n\/var\/db\/etcupdate\/current\/usr\/share\/nls\n\/etc\/ssl\n\/usr\/local\/etc\n\/usr\/local\/etc\/fonts\/conf.d\n\/usr\/local\/openssl\n<\/code><\/pre>\n
Pasi t\u00eb caktohen etiketat, \u00ebsht\u00eb e nevojshme t\u00eb caktohen etiketat mls\/low p\u00ebr apache. E para \u00ebsht\u00eb t\u00eb zbulohet cilat skedar\u00eb jan\u00eb t\u00eb nevojsh\u00ebm p\u00ebr t\u00eb nisur apache:<\/p>\n
ldd \/usr\/local\/sbin\/httpd\n<\/code><\/pre>\n
Pasi t\u00eb ekzekutohet kjo komand\u00eb, do t\u00eb shfaqen var\u00ebsit\u00eb, por thjesht caktimi i etiketave t\u00eb nevojshme p\u00ebr k\u00ebto skedar\u00eb nuk do t\u00eb jet\u00eb e mjaftueshme, pasi katalog\u00ebt n\u00eb t\u00eb cil\u00ebt ndodhen k\u00ebto skedar\u00eb kan\u00eb etiket\u00ebn mls\/high, prandaj \u00ebsht\u00eb e nevojshme q\u00eb k\u00ebtyre katalog\u00ebve t\u00eb caktohen etiketat mls\/low. Kur apache t\u00eb nis\u00eb, gjithashtu do t\u00eb tregoj\u00eb skedar\u00ebt q\u00eb jan\u00eb t\u00eb nevojsh\u00ebm p\u00ebr nisjen e tij, dhe p\u00ebr php k\u00ebto var\u00ebsi mund t\u00eb merren n\u00eb logun httpd-error.log.<\/p>\n
setfmac mls\/low \/\nsetfmac mls\/low \/usr\/local\/lib\/libpcre.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libaprutil-1.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgdbm.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libexpat.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libapr-1.so.0\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/lib\/libc.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libintl.so.8\nsetfmac mls\/low \/var\nsetfmac mls\/low \/var\/run\nsetfmac mls\/low \/var\/log\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac mls\/low \/var\/run\/httpd.pid\nsetfmac mls\/low \/lib\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0.0.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\nsetfmac mls\/low \/usr\/local\/lib\nsetfmac mls\/low \/libexec\nsetfmac mls\/low \/libexec\/ld-elf.so.1\nsetfmac  mls\/low \/dev\nsetfmac  mls\/low \/dev\/random\nsetfmac  mls\/low \/usr\/local\/libexec\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\/*\nsetfmac  mls\/low \/etc\/pwd.db\nsetfmac  mls\/low \/etc\/passwd\nsetfmac  mls\/low \/etc\/\nsetfmac  mls\/low \/usr\/local\/etc\nsetfmac -R mls\/low \/usr\/local\/etc\/apache24\nsetfmac mls\/low \/usr\nsetfmac mls\/low \/usr\/local\nsetfmac mls\/low \/usr\/local\/sbin\nsetfmac mls\/low \/usr\/local\/sbin\/*\nsetfmac -R mls\/low \/usr\/local\/etc\/rc.d\/\nsetfmac mls\/low \/usr\/local\/sbin\/htcacheclean\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac -R mls\/low \/usr\/local\/www\nsetfmac mls\/low \/usr\/lib\nsetfmac mls\/low \/tmp\nsetfmac -R mls\/low \/usr\/local\/lib\/php\nsetfmac -R mls\/low \/usr\/local\/etc\/php\nsetfmac mls\/low \/usr\/local\/etc\/php.conf\nsetfmac mls\/low \/lib\/libelf.so.2\nsetfmac mls\/low \/lib\/libm.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libxml2.so.2\nsetfmac mls\/low \/lib\/libz.so.6\nsetfmac mls\/low \/usr\/lib\/liblzma.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libiconv.so.2\nsetfmac mls\/low \/usr\/lib\/librt.so.1\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/usr\/local\/lib\/libpng16.so.16\nsetfmac mls\/low \/usr\/lib\/libbz2.so.4\nsetfmac mls\/low \/usr\/local\/lib\/libargon2.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libpcre2-8.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libsqlite3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgd.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libjpeg.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libfreetype.so\nsetfmac mls\/low \/usr\/local\/lib\/libfontconfig.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libtiff.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libwebp.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libjbig.so.2\nsetfmac mls\/low \/usr\/lib\/libssl.so.8\nsetfmac mls\/low \/lib\/libcrypto.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libzip.so.5\nsetfmac mls\/low \/etc\/resolv.conf\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb list\u00eb caktohen etiketat mls\/low p\u00ebr t\u00eb gjith\u00eb skedar\u00ebt q\u00eb jan\u00eb t\u00eb nevojsh\u00ebm p\u00ebr funksionimin e sakt\u00eb t\u00eb lidhjes mes apache dhe php (p\u00ebr paketat q\u00eb jan\u00eb instaluar n\u00eb shembullin tim).<\/p>\n
Hapi i fundit do t\u00eb jet\u00eb konfigurimi i nisjes s\u00eb jail n\u00eb nivelin mls\/equal, dhe apache n\u00eb nivelin mls\/low. P\u00ebr t\u00eb nisur jail \u00ebsht\u00eb e nevojshme t\u00eb b\u00ebhen ndryshime n\u00eb skenarin \/etc\/rc.d\/jail, gjeni n\u00eb k\u00ebt\u00eb skenar funksionet jail_start, dhe vendosni variabl\u00ebn command n\u00eb form\u00ebn:<\/p>\n
command=\"setpmac mls\/equal $jail_program\"\n<\/code><\/pre>\n
Ekipi setpmac \u0437\u0430\u043f\u0443\u0441\u043a\u0430 nj\u00eb skedar ekzekutiv n\u00eb nivelin e nevojsh\u00ebm t\u00eb mandatit, n\u00eb k\u00ebt\u00eb rast mls\/equal, p\u00ebr t\u00eb pasur qasje n\u00eb t\u00eb gjitha etiketat. N\u00eb apache, duhet t\u00eb redaktoni skriptin e nisjes \/usr\/local\/etc\/rc.d\/apache24. B\u00ebni ndryshimet n\u00eb funksionin apache24_prestart:<\/p>\n
apache24_prestart() {\n        apache24_checkfib\n        apache24_precmd\n        eval \"setpmac mls\/low\" ${command} ${apache24_flags}\n}\n<\/code><\/pre>\n
N\u00eb zyrtaresh<\/a><\/noindex> mhb gjihet nj\u00eb shembull tjet\u00ebr n\u00eb udh\u00ebzues, por nuk arrita ta p\u00ebrdor sepse vazhdimisht shfaqej nj\u00eb mesazh p\u00ebr mos p\u00ebrdorimin e komand\u00ebs setpmac.<\/p>\n
P\u00ebrfundim<\/h2>\n
Ky m\u00ebnyr\u00eb e shp\u00ebrndarjes s\u00eb aksesit do t\u00eb shtoj\u00eb nj\u00eb nivel shtes\u00eb sigurie p\u00ebr apache (edhe pse kjo qasje mund t\u00eb p\u00ebrdoret p\u00ebr \u00e7do stak tjet\u00ebr), q\u00eb gjithashtu ekzekutohet n\u00eb jail, n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb p\u00ebr administratorin, gjith\u00e7ka do t\u00eb ndodhi n\u00eb m\u00ebnyr\u00eb transparente dhe pa u v\u00ebn\u00eb re.<\/p>\n
Lista e burimeve q\u00eb m\u00eb ndihmuan n\u00eb shkrimin e k\u00ebtij publikimi:<\/b><\/p>\n
https:\/\/www.freebsd.org\/doc\/ru_RU.KOI8-R\/books\/handbook\/mac.html<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31890","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Modeli i mandatit t\u00eb shp\u00ebrndarjes s\u00eb t\u00eb drejtave n\u00eb FreeBSD | ProHoster","description":"Hyrje P\u00ebr t\u00eb siguruar nj\u00eb nivel shtes\u00eb t\u00eb siguris\u00eb p\u00ebr serverin, mund t\u00eb p\u00ebrdorim modelin e mandatit t\u00eb shp\u00ebrndarjes s\u00eb aksesit. N\u00eb k\u00ebt\u00eb publikim do t\u00eb p\u00ebrshkruhet se si mund t\u00eb ekzekutohet apache n\u00eb jail me akses vet\u00ebm n\u00eb ato komponente, p\u00ebr t\u00eb cilat \u00ebsht\u00eb e nevojshme qasja p\u00ebr funksionimin e duhur t\u00eb apache dhe php. Sipas k\u00ebtij principi, mund t\u00eb kufizohet jo vet\u00ebm apache, por gjithashtu \u00e7do stak tjet\u00ebr. P\u00ebrgatitja","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043d\u0434\u0430\u0442\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0432 FreeBSD | ProHoster","og:description":"\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:45+00:00","article:modified_time":"2019-10-31T18:43:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31890","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 08:18:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:09:26","updated":"2026-01-21 08:18:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31890"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31890\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}