{"id":31890,"date":"2019-10-31T21:43:45","date_gmt":"2019-10-31T18:43:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mandatnaya-model-raspredeleniya-prav-v-freebsd\/"},"modified":"2019-10-31T21:43:45","modified_gmt":"2019-10-31T18:43:45","slug":"mandatnaya-model-raspredeleniya-prav-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","title":{"rendered":"Modeli mandatar i shp\u00ebrndarjes s\u00eb t\u00eb drejtave n\u00eb FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hyrje<\/h2>\n

P\u00ebr t\u00eb siguruar nj\u00eb nivel shtes\u00eb sigurie t\u00eb serverit, mund t\u00eb p\u00ebrdorni modelin mandat<\/a><\/noindex> e shp\u00ebrndarjes s\u00eb qasjes. N\u00eb k\u00ebt\u00eb publikim do t\u00eb p\u00ebrshkruhet se si mund t\u00eb lanconi apache n\u00eb jail me qasje vet\u00ebm n\u00eb ato komponime q\u00eb jan\u00eb t\u00eb nevojshme p\u00ebr pun\u00ebn e duhur t\u00eb apache dhe php. Sipas k\u00ebtij principi mund t\u00eb kufizoni jo vet\u00ebm apache, por gjithashtu \u00e7do stak tjet\u00ebr.
\n<\/a><\/noindex><\/p>\n

P\u00ebrgatitja<\/h2>\n

Ky metod do t'i p\u00ebrshtatet vet\u00ebm sistemit t\u00eb skedar\u00ebve ufs, n\u00eb k\u00ebt\u00eb shembull n\u00eb sistemin kryesor do t\u00eb p\u00ebrdoret zfs, dhe n\u00eb jail p\u00ebrkat\u00ebsisht ufs. E para q\u00eb duhet t\u00eb b\u00ebni \u00ebsht\u00eb t\u00eb rind\u00ebrtoni b\u00ebrtham\u00ebn, gjat\u00eb instalimit t\u00eb FreeBSD instaloni burimin e kodit.
\nPasi q\u00eb sistemi t\u00eb jet\u00eb instaluar, redaktoni skedarin:<\/p>\n

\/usr\/src\/sys\/amd64\/conf\/GENERIC\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb skedar duhet t\u00eb shtoni vet\u00ebm nj\u00eb rresht:<\/p>\n
options     MAC_MLS\n<\/code><\/pre>\n
Shenja mls\/high do t\u00eb ket\u00eb nj\u00eb status dominues mbi shenj\u00ebn mls\/low, aplikacionet q\u00eb do t\u00eb lancohen me shenj\u00ebn mls\/low nuk do t\u00eb mund t\u00eb aksesojn\u00eb skedar\u00ebt q\u00eb kan\u00eb shenj\u00ebn mls\/high. M\u00eb shum\u00eb rreth t\u00eb gjitha etiketimeve t\u00eb disponueshme n\u00eb sistemin FreeBSD mund t\u00eb lexoni n\u00eb k\u00ebt\u00eb udh\u00ebzimin<\/a><\/noindex>.
\nM\u00eb pas kaloni n\u00eb katalogun \/usr\/src:<\/p>\n
cd \/usr\/src\n<\/code><\/pre>\n
P\u00ebr t\u00eb nisur nd\u00ebrtimin e b\u00ebrtham\u00ebs ekzekutoni (n\u00eb \u00e7el\u00ebsin j tregoni numrin e b\u00ebrthamave n\u00eb sistem):<\/p>\n
make -j 4 buildkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
Pasi q\u00eb b\u00ebrthama t\u00eb jet\u00eb nd\u00ebrtuar, duhet ta instaloni:<\/p>\n
make installkernel KERNCONF=GENERIC\n<\/code><\/pre>\n
Pasi t\u00eb instalohet b\u00ebrthama, mos u nxito t\u00eb rinisni sistemin, sepse \u00ebsht\u00eb e nevojshme t\u00eb kaloni p\u00ebrdoruesit n\u00eb klas\u00ebn e login, duke e konfigurua paraprakisht at\u00eb. Redaktoni skedarin \/etc\/login.conf, n\u00eb k\u00ebt\u00eb skedar duhet t\u00eb redaktoni klas\u00ebn e login default, duke e sjell\u00eb n\u00eb form\u00ebn:<\/p>\n
default:\n        :passwd_format=sha512:\n        :copyright=\/etc\/COPYRIGHT:\n        :welcome=\/etc\/motd:\n        :setenv=MAIL=\/var\/mail\/$,BLOCKSIZE=K:\n        :path=\/sbin \/bin \/usr\/sbin \/usr\/bin \/usr\/local\/sbin \/usr\/local\/bin ~\/bin:\n        :nologin=\/var\/run\/nologin:\n        :cputime=unlimited:\n        :datasize=unlimited:\n        :stacksize=unlimited:\n        :memorylocked=64K:\n        :memoryuse=unlimited:\n        :filesize=unlimited:\n        :coredumpsize=unlimited:\n        :openfiles=unlimited:\n        :maxproc=unlimited:\n        :sbsize=unlimited:\n        :vmemoryuse=unlimited:\n        :swapuse=unlimited:\n        :pseudoterminals=unlimited:\n        :kqueues=unlimited:\n        :umtxp=unlimited:\n        :priority=0:\n        :ignoretime@:\n        :umask=022:\n        :label=mls\/equal:\n<\/code><\/pre>\n
Rreshti :label=mls\/equal do t'i jap\u00eb mund\u00ebsin\u00eb p\u00ebrdoruesve q\u00eb jan\u00eb n\u00eb k\u00ebt\u00eb klas\u00eb t\u00eb ken\u00eb qasje n\u00eb skedar\u00ebt q\u00eb jan\u00eb t\u00eb sh\u00ebnuara me \u00e7do etiket\u00eb (mls\/low, mls\/high). Pas k\u00ebtyre manovrave, \u00ebsht\u00eb e nevojshme t\u00eb rinnd\u00ebrtohet baza e t\u00eb dh\u00ebnave dhe t\u00eb vendosni p\u00ebrdoruesin root (si dhe ata q\u00eb e kan\u00eb nevojshme) n\u00eb k\u00ebt\u00eb klas\u00eb login:<\/p>\n
cap_mkdb \/etc\/login.conf\npw usermod root -L default\n<\/code><\/pre>\n
P\u00ebr t\u00eb b\u00ebr\u00eb q\u00eb politika t\u00eb ndikohet vet\u00ebm n\u00eb skedar\u00eb, duhet t\u00eb redaktoni skedarin \/etc\/mac.conf, duke l\u00ebn\u00eb vet\u00ebm nj\u00eb rresht:<\/p>\n
default_labels file ?mls\n<\/code><\/pre>\n
Gjithashtu, \u00ebsht\u00eb e nevojshme t\u00eb shtoni modulon mac_mls.ko n\u00eb fillimin automatik:<\/p>\n
echo 'mac_mls_load=\"YES\"' >> \/boot\/loader.conf\n<\/code><\/pre>\n
Pas k\u00ebsaj, mund t\u00eb rinisni sistemin pa asnj\u00eb problem. Si t\u00eb krijoni jail<\/a><\/noindex> mund t\u00eb lexoni n\u00eb nj\u00eb nga publikimet e mia. Por para se t\u00eb krijoni jail, duhet t\u00eb shtoni nj\u00eb disk t\u00eb ngurt\u00eb dhe t\u00eb krijoni nj\u00eb sistem skedar\u00ebsh mbi t\u00eb dhe t\u00eb aktivizoni multilabel, krijoni nj\u00eb sistem skedar\u00ebsh ufs2 me madh\u00ebsi klasteri 64kb:<\/p>\n
newfs -O 2 -b 64kb \/dev\/ada1\ntunefs -l enable \/dev\/ada1\n<\/code><\/pre>\n
Pas krijimit t\u00eb sistemit t\u00eb skedar\u00ebve dhe shtimit t\u00eb multilabel, duhet t\u00eb shtoni diskun e ngurt\u00eb n\u00eb \/etc\/fstab, shtoni rreshtin n\u00eb k\u00ebt\u00eb skedar:<\/p>\n
\/dev\/ada1               \/jail  ufs     rw              0       1\n<\/code><\/pre>\n
N\u00eb Mountpoint p\u00ebrcaktoni katalogun ku do t\u00eb montoni diskun e ngurt\u00eb, n\u00eb Pass sigurohuni t\u00eb vendosni 1 (n\u00eb cilin rend do t\u00eb b\u00ebhet kontrolli i k\u00ebtij disku) \u2014 kjo \u00ebsht\u00eb e nevojshme, pasi sistemi i skedar\u00ebve ufs \u00ebsht\u00eb i ndjesh\u00ebm ndaj nd\u00ebrprerjeve t\u00eb papritura t\u00eb energjis\u00eb. Pas k\u00ebtyre veprimeve, montoni diskun:<\/p>\n
mount \/dev\/ada1 \/jail\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb katalog instaloni jail. Pas aktivizimit t\u00eb jail, duhet t\u00eb b\u00ebni t\u00eb nj\u00ebjtat manipulime q\u00eb b\u00ebni n\u00eb sistemin kryesor me p\u00ebrdoruesit dhe skedar\u00ebt \/etc\/login.conf, \/etc\/mac.conf. <\/p>\n
Configuration<\/h2>\n
Para se t\u00eb vendosni etiketat e nevojshme, rekomandoj t\u00eb instaloni t\u00eb gjith\u00eb paketat e nevojshme, n\u00eb rastin tim etiketat do t\u00eb vendosen duke marr\u00eb parasysh k\u00ebto paketa:<\/p>\n
mod_php73-7.3.4_1              Gjuha e Skriptimit PHP\nphp73-7.3.4_1                  Gjuha e Skriptimit PHP\nphp73-ctype-7.3.4_1            Zgjatja e ndar\u00eb ctype p\u00ebr php\nphp73-curl-7.3.4_1             Zgjatja e ndar\u00eb curl p\u00ebr php\nphp73-dom-7.3.4_1              Zgjatja e ndar\u00eb dom p\u00ebr php\nphp73-extensions-1.0           \"meta-port\" p\u00ebr t\u00eb instaluar zgjatje PHP\nphp73-filter-7.3.4_1           Zgjatja e ndar\u00eb filter p\u00ebr php\nphp73-gd-7.3.4_1               Zgjatja e ndar\u00eb gd p\u00ebr php\nphp73-gettext-7.3.4_1          Zgjatja e ndar\u00eb gettext p\u00ebr php\nphp73-hash-7.3.4_1             Zgjatja e ndar\u00eb hash p\u00ebr php\nphp73-iconv-7.3.4_1            Zgjatja e ndar\u00eb iconv p\u00ebr php\nphp73-json-7.3.4_1             Zgjatja e ndar\u00eb json p\u00ebr php\nphp73-mysqli-7.3.4_1           Zgjatja e ndar\u00eb mysqli p\u00ebr php\nphp73-opcache-7.3.4_1          Zgjatja e ndar\u00eb opcache p\u00ebr php\nphp73-openssl-7.3.4_1          Zgjatja e ndar\u00eb openssl p\u00ebr php\nphp73-pdo-7.3.4_1              Zgjatja e ndar\u00eb pdo p\u00ebr php\nphp73-pdo_sqlite-7.3.4_1       Zgjatja e ndar\u00eb pdo_sqlite p\u00ebr php\nphp73-phar-7.3.4_1             Zgjatja e ndar\u00eb phar p\u00ebr php\nphp73-posix-7.3.4_1            Zgjatja e ndar\u00eb posix p\u00ebr php\nphp73-session-7.3.4_1          Zgjatja e ndar\u00eb session p\u00ebr php\nphp73-simplexml-7.3.4_1        Zgjatja e ndar\u00eb simplexml p\u00ebr php\nphp73-sqlite3-7.3.4_1          Zgjatja e ndar\u00eb sqlite3 p\u00ebr php\nphp73-tokenizer-7.3.4_1        Zgjatja e ndar\u00eb tokenizer p\u00ebr php\nphp73-xml-7.3.4_1              Zgjatja e ndar\u00eb xml p\u00ebr php\nphp73-xmlreader-7.3.4_1        Zgjatja e ndar\u00eb xmlreader p\u00ebr php\nphp73-xmlrpc-7.3.4_1           Zgjatja e ndar\u00eb xmlrpc p\u00ebr php\nphp73-xmlwriter-7.3.4_1        Zgjatja e ndar\u00eb xmlwriter p\u00ebr php\nphp73-xsl-7.3.4_1              Zgjatja e ndar\u00eb xsl p\u00ebr php\nphp73-zip-7.3.4_1              Zgjatja e ndar\u00eb zip p\u00ebr php\nphp73-zlib-7.3.4_1             Zgjatja e ndar\u00eb zlib p\u00ebr php\napache24-2.4.39 \n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb shembull, etiketat do t\u00eb vendosen duke marr\u00eb parasysh var\u00ebsit\u00eb e k\u00ebtyre pakove. Sigurisht, mund t\u00eb procedohet m\u00eb thjesht, p\u00ebr dosjen \/usr\/local\/lib dhe dosjet q\u00eb ndodhen n\u00eb k\u00ebt\u00eb katalog, t\u00eb vendosen etiketat mls\/low dhe paketat e m\u00ebpasshme (p.sh. zgjatje shtes\u00eb p\u00ebr php) do t\u00eb ken\u00eb qasje n\u00eb bibliotekat n\u00eb k\u00ebt\u00eb katalog, por m\u00eb duket m\u00eb mir\u00eb t\u00eb ofrojm\u00eb qasje vet\u00ebm n\u00eb ato dosje q\u00eb jan\u00eb t\u00eb nevojshme. Ndaloje jail dhe vendos etiketat mls\/high p\u00ebr t\u00eb gjitha dosjet:<\/p>\n
setfmac -R mls\/high \/jail\n<\/code><\/pre>\n
Kur vendosen etiketat, procesi do t\u00eb ndalohet n\u00ebse setfmac haset me lidhje t\u00eb forta, n\u00eb shembullin tim un\u00eb hiqja lidhjet e forta n\u00eb k\u00ebto katalog\u00eb:<\/p>\n
\/var\/db\/etcupdate\/current\/\n\/var\/db\/etcupdate\/current\/etc\n\/var\/db\/etcupdate\/current\/usr\/share\/openssl\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.ISO8859-15\n\/var\/db\/etcupdate\/current\/usr\/share\/man\/en.UTF-8\n\/var\/db\/etcupdate\/current\/usr\/share\/nls\n\/etc\/ssl\n\/usr\/local\/etc\n\/usr\/local\/etc\/fonts\/conf.d\n\/usr\/local\/openssl\n<\/code><\/pre>\n
Pas vendosjes s\u00eb etiketave, \u00ebsht\u00eb e nevojshme t\u00eb vendosen etiketat mls\/low p\u00ebr apache, s\u00eb pari duhet t\u00eb zbulohet se cilat dosje jan\u00eb t\u00eb nevojshme p\u00ebr t\u00eb nisur apache:<\/p>\n
ldd \/usr\/local\/sbin\/httpd\n<\/code><\/pre>\n
Pas kryerjes s\u00eb k\u00ebsaj komande, do t\u00eb shfaqen var\u00ebsit\u00eb n\u00eb ekran, por vet\u00ebm t\u00eb vendosni etiketat e nevojshme p\u00ebr k\u00ebto skedar\u00eb nuk do t\u00eb mjaftoj\u00eb, pasi katalog\u00ebt ku ndodhen k\u00ebto skedar\u00eb kan\u00eb etiket\u00ebn mls\/high, prandaj \u00ebsht\u00eb gjithashtu e nevojshme t\u00eb vendoset etiket\u00eb mls\/low p\u00ebr k\u00ebta katalog\u00eb. Kur t\u00eb nisni apache, gjithashtu do t\u00eb shihni skedar\u00ebt e nevojsh\u00ebm p\u00ebr nisjen e tij, dhe p\u00ebr php, k\u00ebto var\u00ebsi mund t\u00eb merren n\u00eb log-un httpd-error.log.<\/p>\n
setfmac mls\/low \/\nsetfmac mls\/low \/usr\/local\/lib\/libpcre.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libaprutil-1.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgdbm.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libexpat.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libapr-1.so.0\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/lib\/libc.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libintl.so.8\nsetfmac mls\/low \/var\nsetfmac mls\/low \/var\/run\nsetfmac mls\/low \/var\/log\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac mls\/low \/var\/run\/httpd.pid\nsetfmac mls\/low \/lib\nsetfmac mls\/low \/lib\/libcrypt.so.5\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\/libdb-5.3.so.0.0.0\nsetfmac mls\/low \/usr\/local\/lib\/db5\nsetfmac mls\/low \/usr\/local\/lib\nsetfmac mls\/low \/libexec\nsetfmac mls\/low \/libexec\/ld-elf.so.1\nsetfmac  mls\/low \/dev\nsetfmac  mls\/low \/dev\/random\nsetfmac  mls\/low \/usr\/local\/libexec\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\nsetfmac  mls\/low \/usr\/local\/libexec\/apache24\/*\nsetfmac  mls\/low \/etc\/pwd.db\nsetfmac  mls\/low \/etc\/passwd\nsetfmac  mls\/low \/etc\/group\nsetfmac  mls\/low \/etc\/\nsetfmac  mls\/low \/usr\/local\/etc\nsetfmac -R mls\/low \/usr\/local\/etc\/apache24\nsetfmac mls\/low \/usr\nsetfmac mls\/low \/usr\/local\nsetfmac mls\/low \/usr\/local\/sbin\nsetfmac mls\/low \/usr\/local\/sbin\/*\nsetfmac -R mls\/low \/usr\/local\/etc\/rc.d\/\nsetfmac mls\/low \/usr\/local\/sbin\/htcacheclean\nsetfmac mls\/low \/var\/log\/httpd-access.log\nsetfmac mls\/low \/var\/log\/httpd-error.log\nsetfmac -R mls\/low \/usr\/local\/www\nsetfmac mls\/low \/usr\/lib\nsetfmac mls\/low \/tmp\nsetfmac -R mls\/low \/usr\/local\/lib\/php\nsetfmac -R mls\/low \/usr\/local\/etc\/php\nsetfmac mls\/low \/usr\/local\/etc\/php.conf\nsetfmac mls\/low \/lib\/libelf.so.2\nsetfmac mls\/low \/lib\/libm.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libxml2.so.2\nsetfmac mls\/low \/lib\/libz.so.6\nsetfmac mls\/low \/usr\/lib\/liblzma.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libiconv.so.2\nsetfmac mls\/low \/usr\/lib\/librt.so.1\nsetfmac mls\/low \/lib\/libthr.so.3\nsetfmac mls\/low \/usr\/local\/lib\/libpng16.so.16\nsetfmac mls\/low \/usr\/lib\/libbz2.so.4\nsetfmac mls\/low \/usr\/local\/lib\/libargon2.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libpcre2-8.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libsqlite3.so.0\nsetfmac mls\/low \/usr\/local\/lib\/libgd.so.6\nsetfmac mls\/low \/usr\/local\/lib\/libjpeg.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libfreetype.so\nsetfmac mls\/low \/usr\/local\/lib\/libfontconfig.so.1\nsetfmac mls\/low \/usr\/local\/lib\/libtiff.so.5\nsetfmac mls\/low \/usr\/local\/lib\/libwebp.so.7\nsetfmac mls\/low \/usr\/local\/lib\/libjbig.so.2\nsetfmac mls\/low \/usr\/lib\/libssl.so.8\nsetfmac mls\/low \/lib\/libcrypto.so.8\nsetfmac mls\/low \/usr\/local\/lib\/libzip.so.5\nsetfmac mls\/low \/etc\/resolv.conf\n<\/code><\/pre>\n
N\u00eb k\u00ebt\u00eb list\u00eb vendosen etiketat mls\/low p\u00ebr t\u00eb gjitha skedar\u00ebt q\u00eb jan\u00eb t\u00eb nevojsh\u00ebm p\u00ebr funksionimin e sakt\u00eb t\u00eb lidhjes apache dhe php (p\u00ebr paketat q\u00eb jan\u00eb instaluar n\u00eb shembullin tim).<\/p>\n
Hapi i fundit do t\u00eb jet\u00eb konfigurimi i nisjes s\u00eb jail n\u00eb nivelin mls\/equal, dhe apache n\u00eb nivelin mls\/low. P\u00ebr t\u00eb nisur jail duhet t\u00eb b\u00ebni ndryshime n\u00eb skriptin \/etc\/rc.d\/jail, gjeni n\u00eb k\u00ebt\u00eb skript funksionin jail_start, dhe ruani variablem command n\u00eb form\u00ebn:<\/p>\n
command=\"setpmac mls\/equal $jail_program\"\n<\/code><\/pre>\n
Komanda setpmac nis skedarin ekzekutiv n\u00eb nivelin e nevojsh\u00ebm t\u00eb mandatit, n\u00eb k\u00ebt\u00eb rast mls\/equal, p\u00ebr t\u00eb pasur qasje n\u00eb t\u00eb gjitha etiketat. T\u00eb nevojshme \u00ebsht\u00eb t\u00eb redaktoni skriptin e nisjes n\u00eb \/usr\/local\/etc\/rc.d\/apache24. B\u00ebni ndryshime n\u00eb funksionin apache24_prestart:<\/p>\n
apache24_prestart() {\n        apache24_checkfib\n        apache24_precmd\n        eval \"setpmac mls\/low\" ${command} ${apache24_flags}\n}\n<\/code><\/pre>\n
N\u00eb zyrtar<\/a><\/noindex> n\u00eb udh\u00ebzimin \u00ebsht\u00eb dh\u00ebn\u00eb nj\u00eb shembull tjet\u00ebr, por nuk arrita ta p\u00ebrdor k\u00ebt\u00eb pasi pem\u00eb e ndihm\u00ebs p\u00ebr ta p\u00ebrdorur komand\u00ebn setpmac vazhdimisht dilte nj\u00eb mesazh q\u00eb nuk ishte e mundur.<\/p>\n
P\u00ebrfundimi<\/h2>\n
Ky m\u00ebnyr\u00eb ndarjeje t\u00eb aksesit do t\u00eb shtoj\u00eb nj\u00eb shtres\u00eb shtes\u00eb mbrojtjeje p\u00ebr apache (n\u00eb t\u00eb v\u00ebrtet\u00eb ky m\u00ebnyr\u00eb do t\u00eb p\u00ebrmbushte \u00e7do stak tjet\u00ebr), q\u00eb gjithashtu nis n\u00eb jail, kurse p\u00ebr administratorin gjith\u00e7ka do t\u00eb ndodh\u00eb transparenc\u00eb dhe pa b\u00ebr\u00eb v\u00ebrejtje.<\/p>\n
Lista e burimeve q\u00eb m\u00eb ndihmuan n\u00eb shkrimin e k\u00ebtij publikimi:<\/b><\/p>\n
https:\/\/www.freebsd.org\/doc\/ru_RU.KOI8-R\/books\/handbook\/mac.html<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c apache \u0432 jail \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0442\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b apache \u0438 php. \u041f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e apache, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u044d\u043a. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31890","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Modeli mandatar i ndarjes s\u00eb t\u00eb drejtave n\u00eb FreeBSD | ProHoster","description":"Hyrje P\u00ebr t\u00eb siguruar nj\u00eb nivel shtes\u00eb siguria p\u00ebr serverin mund t\u00eb p\u00ebrdorni","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043d\u0434\u0430\u0442\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0432 FreeBSD | ProHoster","og:description":"\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mandatnaya-model-raspredeleniya-prav-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:45+00:00","article:modified_time":"2019-10-31T18:43:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31890","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 08:18:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:09:26","updated":"2026-01-21 08:18:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31890"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31890\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}