{"id":36129,"date":"2019-10-31T22:09:46","date_gmt":"2019-10-31T19:09:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chasto-zadavaemye-voprosy-po-selinux-faq\/"},"modified":"2019-10-31T22:09:46","modified_gmt":"2019-10-31T19:09:46","slug":"chasto-zadavaemye-voprosy-po-selinux-faq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chasto-zadavaemye-voprosy-po-selinux-faq","title":{"rendered":"Pyetjet m\u00eb t\u00eb shpeshta n\u00eb lidhje me SELinux (FAQ)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! N\u00eb ve\u00e7anti p\u00ebr student\u00ebt e kursit <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/k52L\/\">\u00abSiguria e Linux\u00bb<\/a><\/noindex> ne kemi p\u00ebrgatitur p\u00ebrkthimin e FAQ-\u00ebve zyrtar\u00eb t\u00eb projektit SELinux. Na duket se ky p\u00ebrkthim mund t\u00eb jet\u00eb i dobish\u00ebm jo vet\u00ebm p\u00ebr student\u00ebt, prandaj po e ndajm\u00eb me ju.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pyetjet m\u00eb t\u00eb shpeshta n\u00eb lidhje me SELinux (FAQ)\" src=\"\/wp-content\/uploads\/2019\/07\/7f244c6dca8425c20136a6774b14c752.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ne p\u00ebrpiqemi t\u00eb p\u00ebrgjigjemi n\u00eb disa nga pyetjet m\u00eb t\u00eb shpeshta n\u00eb lidhje me projektin SELinux. Momentalisht, pyetjet ndahen n\u00eb dy kategori kryesore. T\u00eb gjitha pyetjet dhe p\u00ebrgjigjet jan\u00eb paraqitur <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/What-We-Do\/Research\/SELinux\/FAQs\/\">n\u00eb faqen e FAQ<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2 id=\"obzor\">P\u00ebrmbledhje<\/h2>\n<p><\/p>\n<h3 id=\"obzor-1\">P\u00ebrmbledhje<\/h3>\n<p><\/p>\n<ol>\n<li>\u00c7far\u00eb \u00ebsht\u00eb Linux i siguruar p\u00ebrmir\u00ebsuar?<br \/>\nLinux i siguruar p\u00ebrmir\u00ebsuar (SELinux \u2014 Security-enhanced Linux) \u00ebsht\u00eb nj\u00eb realizim referent i arkitektur\u00ebs s\u00eb siguris\u00eb Flask p\u00ebr kontrollin fleksib\u00ebl t\u00eb aksesit. Ai u krijua p\u00ebr t\u00eb demonstruar p\u00ebrdorimin e mekanizmave fleksib\u00ebl t\u00eb menaxhimit t\u00eb qasjes dhe si k\u00ebta mekanizma mund t\u00eb shtohen n\u00eb sistemin operativ. Arkitektura Flask m\u00eb pas u integrua n\u00eb Linux dhe u portua n\u00eb disa sisteme t\u00eb tjera, duke p\u00ebrfshir\u00eb sistemin operativ Solaris, sistemin operativ FreeBSD dhe kernelin Darwin, q\u00eb prodhuan nj\u00eb gam\u00eb t\u00eb gjer\u00eb pun\u00ebsh lidhur me t\u00eb. Arkitektura Flask ofron mb\u00ebshtetje t\u00eb p\u00ebrgjithshme p\u00ebr zbatimin e shum\u00eb llojeve t\u00eb politikave t\u00eb kontrollit t\u00eb aksesit, p\u00ebrfshir\u00eb ato t\u00eb bazuara n\u00eb konceptet e Zbatimit t\u00eb Llojit, Kontrollit t\u00eb Aksesit t\u00eb Baza n\u00eb Rolle dhe Siguris\u00eb n\u00eb M\u00eb shum\u00eb Nivele.<\/li>\n<li>\u00c7far\u00eb ofron Linux i siguruar p\u00ebrmir\u00ebsuar q\u00eb nuk ofron standardi Linux?<br \/>\nNuk ka asnj\u00eb kuptim t\u00eb p\u00ebrdorimit t\u00eb privilegjeve, dhe jo ndarjen e dob\u00ebsive t\u00eb njohura t\u00eb mekanizmave tradicionale t\u00eb mbrojtjes s\u00eb Linux-it (p.sh. var\u00ebsia nga skedar\u00ebt binar\u00eb setuid\/setgid).<br \/>\nSiguria e nj\u00eb sistemi Linux t\u00eb pandryshuar varet nga sakt\u00ebsia e b\u00ebrtham\u00ebs, t\u00eb gjitha aplikacioneve me privilegje dhe \u00e7do konfigurimi t\u00eb tyre. Nj\u00eb problem n\u00eb cil\u00ebndo nga k\u00ebto fusha mund t\u00eb \u00e7oj\u00eb n\u00eb kompromentimin e sistemit t\u00eb gjith\u00eb. N\u00eb an\u00ebn tjet\u00ebr, siguria e nj\u00eb sistemi t\u00eb modifikuar, t\u00eb bazuar n\u00eb b\u00ebrtham\u00ebn Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar, varet, para s\u00eb gjithash, nga sakt\u00ebsia e b\u00ebrtham\u00ebs dhe konfigurimi i politik\u00ebs s\u00eb saj t\u00eb siguris\u00eb. Edhe pse problemet me sakt\u00ebsin\u00eb ose konfigurimin e aplikacioneve mund t\u00eb lejojn\u00eb nj\u00eb kompromentim t\u00eb kufizuar t\u00eb programeve t\u00eb p\u00ebrdoruesve individual\u00eb dhe demon\u00ebve t\u00eb sistemit, ato nuk p\u00ebrb\u00ebjn\u00eb nj\u00eb rrezik p\u00ebr sigurin\u00eb e programeve t\u00eb tjera t\u00eb p\u00ebrdoruesve dhe demon\u00ebve t\u00eb sistemit ose p\u00ebr sigurin\u00eb e sistemit si t\u00ebr\u00ebsi.<\/li>\n<li>P\u00ebr \u00e7far\u00eb \u00ebsht\u00eb e dobishme?<br \/>\nVe\u00e7orit\u00eb e reja t\u00eb Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar jan\u00eb t\u00eb destinuara p\u00ebr t\u00eb siguruar ndarjen e informacionit bazuar n\u00eb k\u00ebrkesat e konfidencialitetit dhe integritetit. Ato jan\u00eb b\u00ebr\u00eb p\u00ebr t\u00eb parandaluar proceset nga leximi i t\u00eb dh\u00ebnave dhe programeve, falsifikimin e t\u00eb dh\u00ebnave dhe programeve, kalimin e mekanizmave t\u00eb siguris\u00eb s\u00eb aplikacioneve, ekzekutimin e programeve t\u00eb pasigurta ose nd\u00ebrhyrjen n\u00eb procese t\u00eb tjera n\u00eb shkelje t\u00eb politik\u00ebs s\u00eb siguris\u00eb s\u00eb sistemit. Ato gjithashtu ndihmojn\u00eb n\u00eb kufizimin e d\u00ebmshm\u00ebris\u00eb potenciale q\u00eb mund t\u00eb shkaktojn\u00eb programet malinje ose t\u00eb pap\u00ebrshtatshme. Po ashtu, ato duhet t\u00eb jen\u00eb t\u00eb dobishme p\u00ebr t\u00eb mund\u00ebsuar p\u00ebrdorimin e nj\u00eb sistemi nga p\u00ebrdorues t\u00eb ndrysh\u00ebm me lejet e siguris\u00eb p\u00ebrkat\u00ebse p\u00ebr qasje n\u00eb lloje t\u00eb ndryshme informacioni me k\u00ebrkesa t\u00eb ndryshme p\u00ebr siguri pa d\u00ebm t\u00eb k\u00ebtyre k\u00ebrkesave.<\/li>\n<li>Si mund t\u00eb marr nj\u00eb kopje?<br \/>\nShum\u00eb distribucione Linux p\u00ebrfshijn\u00eb mb\u00ebshtetje p\u00ebr SELinux, tashm\u00eb t\u00eb integruar si nj\u00eb funksionalitet i paracaktuar ose si nj\u00eb paket\u00eb shtes\u00eb. Kodi kryesor i p\u00ebrdoruesit t\u00eb SELinux \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SELinuxProject\">GitHub<\/a><\/noindex>. P\u00ebrdoruesit p\u00ebrfundimtar\u00eb zakonisht duhet t\u00eb p\u00ebrdorin paketat q\u00eb ofrohen nga distribuimi i tyre.<\/li>\n<li>\u00c7far\u00eb p\u00ebrfshihet n\u00eb l\u00ebshimin tuaj?<br \/>\nL\u00ebshimi NSA SELinux p\u00ebrfshin kodin kryesor t\u00eb p\u00ebrdoruesit t\u00eb SELinux. Mb\u00ebshtetje p\u00ebr SELinux tashm\u00eb \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb kernelin kryesor t\u00eb Linux 2.6, i disponuesh\u00ebm n\u00eb kernel.org. Kodi kryesor i p\u00ebrdoruesit t\u00eb SELinux p\u00ebrb\u00ebhet nga nj\u00eb bibliotek\u00eb p\u00ebr manipulimin e politikave binar (libsepol), nj\u00eb kompilator politike (checkpolicy), nj\u00eb bibliotek\u00eb p\u00ebr aplikacione q\u00eb ofrojn\u00eb siguri (libselinux), nj\u00eb bibliotek\u00eb p\u00ebr mjetet e menaxhimit t\u00eb politikave (libsemanage) dhe disa utilitar\u00eb t\u00eb lidhur me politikat (policycoreutils).<br \/>\nP\u00ebrve\u00e7 kernelit me mb\u00ebshtetje SELinux dhe kodit kryesor t\u00eb p\u00ebrdoruesit, do t'ju nevojitet nj\u00eb politik\u00eb dhe disa paketa t\u00eb korrigjuara p\u00ebr SELinux p\u00ebr p\u00ebrdorim. Politika mund t\u00eb merret nga <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/TresysTechnology\/refpolicy\/wiki\">projekti i politik\u00ebs referuese SELinux<\/a><\/noindex>. <\/li>\n<li>A mund ta instaloj Linux me mbrojtje t\u00eb forcuar mbi nj\u00eb sistem ekzistues Linux?<br \/>\nPo, ju mund t\u00eb instaloni vet\u00ebm modifikimet SELinux mbi nj\u00eb sistem ekzistues Linux, ose mund t\u00eb instaloni nj\u00eb shp\u00ebrndarje Linux q\u00eb tashm\u00eb p\u00ebrfshin mb\u00ebshtetje p\u00ebr SELinux. SELinux p\u00ebrb\u00ebhet nga nj\u00eb kernel Linux me mb\u00ebshtetje SELinux, nj\u00eb grup t\u00eb p\u00ebrbashk\u00ebt bibliotekash dhe utilitar\u00ebsh, disa paketa t\u00eb p\u00ebrdoruesit t\u00eb modifikuara dhe konfigurimin e politik\u00ebs. P\u00ebr ta instaluar at\u00eb n\u00eb nj\u00eb sistem ekzistues Linux q\u00eb nuk ka mb\u00ebshtetje p\u00ebr SELinux, ju duhet t\u00eb jeni n\u00eb gjendje t\u00eb kompiloni softuerin, si dhe t\u00eb keni paketat e tjera t\u00eb nevojshme t\u00eb sistemit. N\u00ebse shp\u00ebrndarja juaj Linux tashm\u00eb p\u00ebrfshin mb\u00ebshtetje p\u00ebr SELinux, nuk keni nevoj\u00eb t\u00eb nd\u00ebrtoni ose t\u00eb instaloni l\u00ebshimin NSA SELinux.<\/li>\n<li>Sa kompatibil \u00ebsht\u00eb Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar me Linux t\u00eb pamodifikuar?<br \/>\nLinux me siguri t\u00eb p\u00ebrmir\u00ebsuar ofron kompatibilitet binar me aplikacionet ekzistuese t\u00eb Linux dhe me modul\u00ebt ekzistues t\u00eb kernelit t\u00eb Linux, por disa module t\u00eb kernelit mund t\u00eb k\u00ebrkojn\u00eb modifikime p\u00ebr t\u00eb bashk\u00ebpunuar si\u00e7 duhet me SELinux. K\u00ebto dy kategori t\u00eb kompatibilitetit diskutohen m\u00eb holl\u00ebsisht m\u00eb posht\u00eb:<\/p>\n<ul>\n<li>Kompatibiliteti i aplikacioneve<br \/>\nSELinux siguron q\u00eb ka binaritetin me aplikacionet ekzistuese. Ne kemi zgjeruar strukturat e t\u00eb dh\u00ebnave t\u00eb b\u00ebrtham\u00ebs duke p\u00ebrfshir\u00eb attribute t\u00eb reja sigurie, dhe kemi shtuar thirrje t\u00eb reja API p\u00ebr aplikacione q\u00eb ofrojn\u00eb siguri. Megjithat\u00eb, ne nuk kemi ndryshuar asnj\u00eb struktur\u00eb t\u00eb t\u00eb dh\u00ebnave q\u00eb jan\u00eb t\u00eb dukshme p\u00ebr aplikacionet, dhe nuk kemi ndryshuar nd\u00ebrfaqen e thirrjeve t\u00eb sistemit ekzistues, prandaj aplikacionet ekzistuese mund t\u00eb punojn\u00eb pa ndryshime n\u00ebse politika e siguris\u00eb e lejon at\u00eb.<\/li>\n<li>Kompatibiliteti i moduleve t\u00eb b\u00ebrtham\u00ebs<br \/>\nFillimisht, SELinux ofronte vet\u00ebm kompatibilitetin e burimeve p\u00ebr modulet ekzistuese t\u00eb b\u00ebrtham\u00ebs; ishte e nevojshme t\u00eb rikompilohej k\u00ebto module me kokat e b\u00ebrtham\u00ebs t\u00eb ndryshuara p\u00ebr t\u00eb kapur fushat e reja t\u00eb siguris\u00eb t\u00eb shtuara n\u00eb strukturat e t\u00eb dh\u00ebnave t\u00eb b\u00ebrtham\u00ebs. Duke qen\u00eb se LSM dhe SELinux tani jan\u00eb t\u00eb integruara n\u00eb b\u00ebrtham\u00ebn kryesore Linux 2.6, SELinux tani siguron binaritetin me modulet ekzistuese t\u00eb b\u00ebrtham\u00ebs. Megjithat\u00eb, disa module t\u00eb b\u00ebrtham\u00ebs mund t\u00eb nd\u00ebrveprojn\u00eb keq me SELinux pa ndryshime. P\u00ebr shembull, n\u00ebse nj\u00eb modul b\u00ebrtham\u00ebs alokon dhe vendos drejtp\u00ebrdrejt nj\u00eb objekt b\u00ebrtham\u00ebsh pa p\u00ebrdorur funksionet e zakonshme t\u00eb inicializimit, at\u00ebher\u00eb objektit t\u00eb b\u00ebrtham\u00ebs mund t'i mungojn\u00eb informacionet p\u00ebrkat\u00ebse mbi sigurin\u00eb. Disa module t\u00eb b\u00ebrtham\u00ebs gjithashtu mund t\u00eb mos ken\u00eb kontrollin e duhur mbi operacionet e tyre; \u00e7do thirrje ekzistuese n\u00eb funksionet e b\u00ebrtham\u00ebs ose funksionet e lejesve gjithashtu do t\u00eb aktivizoj\u00eb kontrollet e lejesve SELinux, por p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb me politikat MAC, mund t\u00eb k\u00ebrkohen elemente m\u00eb t\u00eb detajuara ose ndihm\u00ebse.<br \/>\nLinux me siguri t\u00eb p\u00ebrmir\u00ebsuar nuk duhet t\u00eb krijoj\u00eb probleme nd\u00ebrveprimi me sistemet normale Linux, n\u00ebse t\u00eb gjitha operacionet e nevojshme jan\u00eb t\u00eb lejuara nga konfigurimi i politik\u00ebs s\u00eb siguris\u00eb.<\/li>\n<\/ul>\n<\/li>\n<li>Cilat jan\u00eb q\u00ebllimet e shembullit t\u00eb konfigurimit t\u00eb politik\u00ebs s\u00eb siguris\u00eb?<br \/>\nN\u00eb nj\u00eb nivel t\u00eb lart\u00eb, q\u00ebllimi \u00ebsht\u00eb t\u00eb demonstrohet fleksibiliteti dhe sigurimi i mekanizmave t\u00eb detyruesh\u00ebm t\u00eb menaxhimit t\u00eb qasjes dhe t\u00eb ofrohet nj\u00eb sistem funksional i thjesht\u00eb me ndryshime minimale n\u00eb aplikacione. N\u00eb nj\u00eb nivel m\u00eb t\u00eb ul\u00ebt, politika ka nj\u00eb s\u00ebr\u00eb q\u00ebllimesh t\u00eb p\u00ebrshkruara n\u00eb dokumentacionin e politik\u00ebs. K\u00ebto q\u00ebllime p\u00ebrfshijn\u00eb menaxhimin e qasjes s\u00eb pap\u00ebrpunuar n\u00eb t\u00eb dh\u00ebna, mbrojtjen e integritetit t\u00eb b\u00ebrtham\u00ebs, softuerit t\u00eb sistemit, informacionit n\u00eb lidhje me konfigurimin e sistemit dhe log\u00ebve t\u00eb sistemit, kufizimin e d\u00ebmit potencial q\u00eb mund t\u00eb shkaktohet nga shfryt\u00ebzimi i nj\u00eb dob\u00ebsie n\u00eb nj\u00eb proces q\u00eb k\u00ebrkon privilegje, mbrojtjen e proceseve t\u00eb privilegjuara nga ekzekutimi i kodit keqdash\u00ebs, mbrojtjen e rolit t\u00eb administratorit dhe domainit nga hyrja pa autentikimin e p\u00ebrdoruesit, parandalimin e nd\u00ebrhyrjes s\u00eb proceseve t\u00eb zakonshme t\u00eb p\u00ebrdoruesve n\u00eb proceset sistemike ose procese t\u00eb administrator\u00ebve, si dhe mbrojtjen e p\u00ebrdoruesve dhe administrator\u00ebve nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb shfletuesit e tyre nga kode mobile keqdash\u00ebse.<\/li>\n<li>Pse u zgjodh Linux si platform\u00eb baz\u00eb?<br \/>\nLinux u zgjodh si platforma p\u00ebr implementimin e saj fillestar p\u00ebr shkak t\u00eb suksesit t\u00eb saj n\u00eb rritje dhe ambientit t\u00eb hapur t\u00eb zhvillimit. Linux ofron nj\u00eb mund\u00ebsi t\u00eb shk\u00eblqyer p\u00ebr t\u00eb demonstruar se kjo funksionalitet mund t\u00eb jet\u00eb e suksesshme n\u00eb sistemin operativ kryesor dhe, nj\u00ebkoh\u00ebsisht, t\u00eb kontribuoni n\u00eb sigurin\u00eb e nj\u00eb sistemi t\u00eb p\u00ebrdorur gjer\u00ebsisht. Platforma Linux gjithashtu ofron nj\u00eb mund\u00ebsi t\u00eb shk\u00eblqyer p\u00ebr k\u00ebt\u00eb pun\u00eb p\u00ebr t\u00eb marr\u00eb nj\u00eb pamje sa m\u00eb t\u00eb gjer\u00eb dhe, ndoshta, do t\u00eb sh\u00ebrbej\u00eb si nj\u00eb baz\u00eb p\u00ebr k\u00ebrkime t\u00eb tjera n\u00eb fush\u00ebn e siguris\u00eb nga entuziast\u00eb t\u00eb tjer\u00eb.<\/li>\n<li>Pse e realizuat k\u00ebt\u00eb pun\u00eb?<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/what-we-do\/research\/ia-research\/\">Laboratori Komb\u00ebtar i K\u00ebrkimeve p\u00ebr Sigurin\u00eb e Informacionit <\/a><\/noindex>Agjencia e Siguris\u00eb Komb\u00ebtare \u00ebsht\u00eb p\u00ebrgjegj\u00ebse p\u00ebr k\u00ebrkimin dhe zhvillimin e teknologjive t\u00eb avancuara t\u00eb nevojshme q\u00eb NSA t\u00eb mund t\u00eb ofroj\u00eb zgjidhje, Produkte dhe Sh\u00ebrbime p\u00ebr sigurimin e informacionit p\u00ebr infrastruktura informacioni q\u00eb jan\u00eb kritikisht t\u00eb r\u00ebnd\u00ebsishme p\u00ebr interesat e siguris\u00eb komb\u00ebtare t\u00eb SHBA.<br \/>\nKrijimi i nj\u00eb sistemi operativ t\u00eb sigurt dhe t\u00eb p\u00ebrmir\u00ebsuar mbetet nj\u00eb detyr\u00eb ky\u00e7e k\u00ebrkimore. Q\u00ebllimi yn\u00eb \u00ebsht\u00eb t\u00eb krijojm\u00eb nj\u00eb arkitektur\u00eb efektive q\u00eb ofron mb\u00ebshtetje t\u00eb nevojshme p\u00ebr sigurin\u00eb, duke ekzekutuar programet n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb madhe e dukshme p\u00ebr p\u00ebrdoruesin dhe t\u00ebrheq\u00ebse p\u00ebr ofruesit. Ne besojm\u00eb se nj\u00eb hap i r\u00ebnd\u00ebsish\u00ebm n\u00eb arritjen e k\u00ebtij q\u00ebllimi \u00ebsht\u00eb demonstrimi se si mekanizmat e menaxhimit t\u00eb aksesit t\u00eb detyruesh\u00ebm mund t\u00eb integrohen me sukses n\u00eb sistemin operativ kryesor.<\/li>\n<li>Si \u00ebsht\u00eb e lidhur kjo me k\u00ebrkimet e m\u00ebparshme t\u00eb OS t\u00eb NSA?<br \/>\nK\u00ebrkuesit nga Laboratori Komb\u00ebtar p\u00ebr Sigurin\u00eb e Informatave t\u00eb NSA n\u00eb bashk\u00ebpunim me Secure Computing Corporation (SCC) zhvilluan nj\u00eb arkitektur\u00eb t\u00eb fuqishme dhe fleksib\u00ebl t\u00eb kontrollit t\u00eb detyruesh\u00ebm t\u00eb aksesit t\u00eb bazuar n\u00eb Type Enforcement, nj\u00eb mekaniz\u00ebm q\u00eb u zhvillua p\u00ebr her\u00eb t\u00eb par\u00eb p\u00ebr sistemin LOCK. NSA dhe SCC zhvilluan dy prototipa t\u00eb arkitektur\u00ebs t\u00eb bazuar n\u00eb Mach: DTMach dhe DTOS (<noindex><a rel=\"nofollow\" href=\"http:\/\/www.cs.utah.edu\/flux\/dtos\/\">http:\/\/www.cs.utah.edu\/flux\/dtos\/<\/a><\/noindex>). NSA dhe SCC pastaj punuan me grupin k\u00ebrkues Flux nga Universiteti i Utah, p\u00ebr t\u00eb transferuar arkitektur\u00ebn n\u00eb sistemin operativ k\u00ebrkimor Fluke. Gjat\u00eb k\u00ebtij trasferi, arkitektura u p\u00ebrmir\u00ebsua p\u00ebr t\u00eb ofruar mb\u00ebshtetje m\u00eb t\u00eb mir\u00eb p\u00ebr politikat dinamike t\u00eb siguris\u00eb. Kjo arkitektur\u00eb e p\u00ebrmir\u00ebsuar u quajt Flask (<noindex><a rel=\"nofollow\" href=\"http:\/\/www.cs.utah.edu\/flux\/flask\/\">http:\/\/www.cs.utah.edu\/flux\/flask\/<\/a><\/noindex>). Tani NSA ka integruar arkitektur\u00ebn Flask n\u00eb sistemin operativ Linux, p\u00ebr t\u00eb kaluar k\u00ebt\u00eb teknologji n\u00eb nj\u00eb komunitet m\u00eb t\u00eb gjer\u00eb t\u00eb zhvilluesve dhe p\u00ebrdoruesve.<\/li>\n<li>A \u00ebsht\u00eb Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar nj\u00eb sistem operativ t\u00eb besuesh\u00ebm?<br \/>\nShprehja \"Sistemi operativ i besuar\" zakonisht i referohet nj\u00eb sistemi operativ q\u00eb ofron mb\u00ebshtetje t\u00eb mjaftueshme p\u00ebr mbrojtjen shum\u00ebnivjerr dhe v\u00ebrtetimin e sakt\u00ebsis\u00eb, p\u00ebr t'u p\u00ebrmbushur nj\u00eb grup t\u00eb caktuar k\u00ebrkesash qeveritare. Linux-i me siguri t\u00eb p\u00ebrmir\u00ebsuar p\u00ebrfshin ide t\u00eb dobishme nga k\u00ebto sisteme, por p\u00ebrqendrohet n\u00eb kontrollin e detyruesh\u00ebm t\u00eb aksesit. Detyra fillestare e zhvillimit t\u00eb Linux-it me siguri t\u00eb p\u00ebrmir\u00ebsuar ishte krijimi i funksionalitetit t\u00eb dobish\u00ebm q\u00eb ofron p\u00ebrfitime t\u00eb dukshme mbrojtjeje n\u00eb nj\u00eb gam\u00eb t\u00eb gjer\u00eb mjedisesh reale p\u00ebr t\u00eb demonstruar k\u00ebt\u00eb teknologji. SELinux vet\u00eb nuk \u00ebsht\u00eb nj\u00eb sistem operativ i besuar, por ofron nj\u00eb funksion kritik mbrojtjeje - kontrollin e detyruesh\u00ebm t\u00eb aksesit - t\u00eb nevojsh\u00ebm p\u00ebr nj\u00eb sistem operativ t\u00eb besuar. SELinux \u00ebsht\u00eb integruar n\u00eb shp\u00ebrndarjet e Linux-it q\u00eb jan\u00eb vler\u00ebsuar sipas Profilit t\u00eb Mbrojtjes s\u00eb Siguris\u00eb t\u00eb Etiketuar. Informacione mbi produktet e verifikuara dhe t\u00eb verifikueshme mund t\u00eb gjenden n\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/niap-ccevs.org\/\">http:\/\/niap-ccevs.org\/<\/a><\/noindex>.<\/li>\n<li>A \u00ebsht\u00eb v\u00ebrtet e mbrojtur?<br \/>\nKoncepi i sistemit t\u00eb mbrojtur p\u00ebrfshin shum\u00eb atribute (p.sh., sigurin\u00eb fizike, sigurin\u00eb e stafit, etj.), dhe Linux-i me siguri t\u00eb p\u00ebrmir\u00ebsuar merret vet\u00ebm me nj\u00eb grup shum\u00eb t\u00eb ngusht\u00eb t\u00eb k\u00ebtyre atributeve (dmth., me elementet e kontrolleve t\u00eb aksesit t\u00eb detyruesh\u00ebm n\u00eb sistemin operativ). N\u00eb fjal\u00eb t\u00eb tjera, \"sistemi i mbrojtur\" do t\u00eb thot\u00eb mjaft i mbrojtur p\u00ebr t\u00eb mbajtur disa informata n\u00eb bot\u00ebn reale nga nj\u00eb kund\u00ebrshtar real, p\u00ebr t\u00eb cilin informacioni pritet t\u00eb paralajm\u00ebroj\u00eb pronarin dhe\/ose p\u00ebrdoruesin. Linux-i me siguri t\u00eb p\u00ebrmir\u00ebsuar \u00ebsht\u00eb p\u00ebrshtatur vet\u00ebm p\u00ebr t\u00eb demonstruar element\u00ebt e domosdosh\u00ebm t\u00eb kontrollit n\u00eb nj\u00eb sistem operativ modern, si\u00e7 \u00ebsht\u00eb Linux-i, dhe prandaj vet\u00eb nuk do t\u00eb p\u00ebrmbush\u00eb ndonj\u00eb definicion t\u00ebrheq\u00ebs t\u00eb nj\u00eb sistemi t\u00eb mbrojtur. Ne besojm\u00eb se teknologjia e demonstruar n\u00eb Linux-in me siguri t\u00eb p\u00ebrmir\u00ebsuar do t\u00eb jet\u00eb e dobishme p\u00ebr ata q\u00eb krijojn\u00eb sisteme t\u00eb mbrojtura.<\/li>\n<li>\u00c7far\u00eb keni b\u00ebr\u00eb p\u00ebr t\u00eb rritur garantimin?<br \/>\nQ\u00ebllimi i k\u00ebtij projekti ishte t\u00eb shtonte elemente t\u00eb kontrollit t\u00eb qasjes s\u00eb detyrueshme duke b\u00ebr\u00eb ndryshime minimale n\u00eb Linux. Ky q\u00ebllim i fundit e kufizon shum\u00eb at\u00eb q\u00eb mund t\u00eb b\u00ebhet p\u00ebr t\u00eb rritur garantimin, prandaj nuk kishte pun\u00eb t\u00eb fokusuar n\u00eb rritjen e garantimit t\u00eb Linux. Nga ana tjet\u00ebr, p\u00ebrmir\u00ebsimet bazohen n\u00eb pun\u00ebn e m\u00ebparshme p\u00ebr zhvillimin e nj\u00eb arkitekture sigurie me nj\u00eb shkall\u00eb t\u00eb lart\u00eb besueshm\u00ebrie, dhe shumica e k\u00ebtyre parimeve t\u00eb projektimit jan\u00eb transferuar n\u00eb Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar.<\/li>\n<li>A do t\u00eb vler\u00ebsoj\u00eb CCEVS Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar?<br \/>\nLinux me siguri t\u00eb p\u00ebrmir\u00ebsuar nuk \u00ebsht\u00eb vet\u00eb i destinuar p\u00ebr t\u00eb adresuar t\u00ebr\u00eb grupin e problemeve t\u00eb siguris\u00eb q\u00eb paraqet profili i mbrojtjes. Edhe pse do t\u00eb ishte e mundur t\u00eb vler\u00ebsohej vet\u00ebm funksionaliteti i tij aktual, ne besojm\u00eb se nj\u00eb vler\u00ebsim i till\u00eb do t\u00eb kishte vler\u00eb t\u00eb kufizuar. Sidoqoft\u00eb, ne kemi punuar me t\u00eb tjer\u00eb p\u00ebr t\u00eb p\u00ebrfshir\u00eb k\u00ebt\u00eb teknologji n\u00eb distribucione Linux q\u00eb jan\u00eb vler\u00ebsuar, si dhe ato q\u00eb jan\u00eb n\u00eb vler\u00ebsim. Informacionin mbi produktet e vler\u00ebsuara dhe t\u00eb verifikuara mund ta gjeni n\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/niap-ccevs.org\/\">http:\/\/niap-ccevs.org\/<\/a><\/noindex>.<\/li>\n<li>A keni p\u00ebrpjekur t\u00eb rregulloni ndonj\u00eb vulnerabilitet?<br \/>\nJo, ne nuk kemi k\u00ebrkuar dhe nuk kemi gjetur asnj\u00eb vulnerabilitet gjat\u00eb pun\u00ebs son\u00eb. Ne vet\u00ebm kemi b\u00ebr\u00eb minimumin e nevojsh\u00ebm p\u00ebr t\u00eb shtuar mekanizmat tan\u00eb t\u00eb rinj.<\/li>\n<li>A \u00ebsht\u00eb ky sistem i miratuar p\u00ebr p\u00ebrdorim qeveritar?<br \/>\nLinux-i me siguri t\u00eb p\u00ebrmir\u00ebsuar nuk ka miratim t\u00eb ve\u00e7ant\u00eb ose t\u00eb shtuar p\u00ebr p\u00ebrdorim qeveritar p\u00ebrkundrejt versioneve t\u00eb tjera t\u00eb Linux. Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar nuk ka miratim t\u00eb ve\u00e7ant\u00eb ose t\u00eb shtuar p\u00ebr p\u00ebrdorim qeveritar p\u00ebr \u00e7do version tjet\u00ebr t\u00eb Linux.<\/li>\n<li>Si ndryshon nga iniciativa t\u00eb tjera?<br \/>\nLinux-i me siguri t\u00eb p\u00ebrmir\u00ebsuar ka nj\u00eb arkitektur\u00eb t\u00eb qart\u00eb p\u00ebr kontrollin e detyruesh\u00ebm t\u00eb qasjes fleksib\u00ebl, e cila \u00ebsht\u00eb verifikuar eksperimentalisht p\u00ebrmes disa sistemeve prototipike (DTMach, DTOS, Flask). Studime t\u00eb detajuara jan\u00eb kryer p\u00ebr aft\u00ebsin\u00eb e arkitektur\u00ebs p\u00ebr t\u00eb mb\u00ebshtetur nj\u00eb gam\u00eb t\u00eb gjer\u00eb politikash sigurie dhe jan\u00eb n\u00eb dispozicion n\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/www.cs.utah.edu\/flux\/dtos\/\">http:\/\/www.cs.utah.edu\/flux\/dtos\/<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"http:\/\/www.cs.utah.edu\/flux\/flask\/\">http:\/\/www.cs.utah.edu\/flux\/flask\/<\/a><\/noindex>.<br \/>\nArkitektura ofron menaxhim t\u00eb detajuar p\u00ebr shum\u00eb abstraksione t\u00eb b\u00ebrtham\u00ebs dhe sh\u00ebrbimeve, t\u00eb cilat nuk kontrollohen nga sisteme t\u00eb tjera. Disa nga karakteristikat dalluese t\u00eb sistemit Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar jan\u00eb:<\/p>\n<ul>\n<li>Ndarja e past\u00ebr e politik\u00ebs nga t\u00eb drejtat e aplikimit<\/li>\n<li>Interface t\u00eb qarta t\u00eb politikave<\/li>\n<li>Pavar\u00ebsia nga politik\u00eb dhe gjuh\u00eb t\u00eb caktuara politike<\/li>\n<li>Pavar\u00ebsia nga formate t\u00eb caktuara dhe p\u00ebrmbajtja e etiketave t\u00eb siguris\u00eb<\/li>\n<li>Etiketa dhe elemente kontrolli t\u00eb ve\u00e7anta p\u00ebr objektet dhe sh\u00ebrbimet themelore<\/li>\n<li>Caching i vendimeve p\u00ebr akses p\u00ebr eficienc\u00eb<\/li>\n<li>Mb\u00ebshtetje p\u00ebr ndryshimet e politikave<\/li>\n<li>Kontrolli mbi iniciimin e procesit dhe trash\u00ebgimin\u00eb dhe ekzekutimin e programit<\/li>\n<li>Menaxhimi i sistemeve t\u00eb skedar\u00ebve, katalog\u00ebve, skedar\u00ebve dhe p\u00ebrshkrimeve t\u00eb skedar\u00ebve t\u00eb hapur<\/li>\n<li>Menaxhimi i socket-eve, mesazheve dhe nd\u00ebrfaqeve rrjet<\/li>\n<li>Kontrolli i p\u00ebrdorimit t\u00eb 'Aft\u00ebsive'<\/li>\n<\/ul>\n<\/li>\n<li>Cilat jan\u00eb kufizimet e licenc\u00ebs p\u00ebr k\u00ebt\u00eb sistem?<br \/>\nT\u00eb gjitha kodet burimore t\u00eb gjetura n\u00eb faqen e internetit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\">https:\/\/www.nsa.gov<\/a><\/noindex>, shp\u00ebrndahen n\u00ebn t\u00eb nj\u00ebjtat kushte si kodet burimore origjinale. P\u00ebr shembull, korrigjimet p\u00ebr b\u00ebrthamat Linux dhe korrigjimet p\u00ebr shum\u00eb utilitar\u00eb ekzistues, t\u00eb disponuesh\u00ebm k\u00ebtu, l\u00ebshohen sipas kushteve <noindex><a rel=\"nofollow\" href=\"http:\/\/www.gnu.org\/licenses\/gpl.html\">Licenca Publike GNU (GPL)<\/a><\/noindex>.<\/li>\n<li>A ka kontroll eksporti?<br \/>\nP\u00ebr Linux me siguri t\u00eb avancuar, nuk ka elemente kontrolli eksporti p\u00ebrve\u00e7 \u00e7do versioni tjet\u00ebr Linux.<\/li>\n<li>A do ta p\u00ebrdor\u00eb NSA brenda vendit?<br \/>\nP\u00ebr arsye t\u00eb qarta, NSA nuk komenton p\u00ebrdorimin operativ.<\/li>\n<li>A ndryshon Deklarata e Garancive nga 26 Korrik 2002, q\u00eb Secure Computing Corporation pozicionon NSA se SELinux \u00ebsht\u00eb ofruar n\u00eb kuad\u00ebr t\u00eb Licenc\u00ebs Publike GNU?<br \/>\nPozita e NSA nuk ka ndryshuar. NSA vazhdon t\u00eb besoj\u00eb se p\u00ebrkushtimet dhe kushtet e Licenc\u00ebs Publike Standard GNU rregullojn\u00eb p\u00ebrdorimin, kopjimin, shp\u00ebrndarjen dhe modifikimin e SELinux. Shih <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/news-features\/press-room\/press-releases\/2001\/se-linux.shtml\">Njoftimin p\u00ebr shtyp t\u00eb NSA nga 2 Janar 2001<\/a><\/noindex>.<\/li>\n<li>A mb\u00ebshtet NSA softuerin me kode t\u00eb hapura?<br \/>\nIniciativat e NSA p\u00ebr t\u00eb rritur sigurin\u00eb e softuerit p\u00ebrfshijn\u00eb si softuerin pronar ashtu edhe at\u00eb me kod burimor t\u00eb hapur, dhe ne kemi p\u00ebrdorur me sukses modele t\u00eb pronarit dhe t\u00eb hapura n\u00eb aktivitetet tona k\u00ebrkimore. Puna e NSA p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar sigurin\u00eb e softuerit \u00ebsht\u00eb motivuar nga nj\u00eb konsiderat\u00eb t\u00eb thjesht\u00eb: t\u00eb shfryt\u00ebzojm\u00eb sa m\u00eb efikasisht burimet tona p\u00ebr t'u ofruar klient\u00ebve t\u00eb NSA mund\u00ebsit\u00eb m\u00eb t\u00eb mira t\u00eb siguris\u00eb n\u00eb produktet m\u00eb t\u00eb p\u00ebrdorura. Q\u00ebllimi i programit k\u00ebrkimor t\u00eb NSA \u00ebsht\u00eb zhvillimi i arritjeve teknologjike q\u00eb mund t\u00eb ndahen me komunitetin e zhvilluesve t\u00eb softuerit n\u00ebp\u00ebrmjet mekanizmave t\u00eb ndrysh\u00ebm t\u00eb transferimit. NSA nuk mb\u00ebshtet dhe nuk promovon asnj\u00eb produkt specifik t\u00eb softuerit ose model biznesi. P\u00ebrkundrazi, NSA ndihmon n\u00eb rritjen e siguris\u00eb.<\/li>\n<li>A mb\u00ebshtet NSA Linux?<br \/>\nSi\u00e7 p\u00ebrmendi m\u00eb sip\u00ebr, NSA nuk mb\u00ebshtet dhe nuk promovon asnj\u00eb produkt specifik t\u00eb softuerit ose platform\u00eb; NSA vet\u00ebm ndihmon n\u00eb rritjen e siguris\u00eb. Arkitektura Flask, e demonstruar n\u00eb implementimin referues t\u00eb SELinux, \u00ebsht\u00eb transferuar n\u00eb disa sisteme operative t\u00eb tjera, p\u00ebrfshir\u00eb Solaris, FreeBSD dhe Darwin, e transferuar n\u00eb hipervizorin Xen dhe aplikohet n\u00eb aplikacione si X Window System, GConf, D-BUS dhe PostgreSQL. Konceptet e arkitektur\u00ebs Flask jan\u00eb t\u00eb aplicueshme gjer\u00ebsisht n\u00eb nj\u00eb gam\u00eb t\u00eb gjer\u00eb sistemesh dhe mjedisesh.<\/li>\n<\/ol>\n<p><\/p>\n<h2 id=\"sotrudnichestvo\">Bashk\u00ebpunimi<\/h2>\n<p><\/p>\n<ol>\n<li>Si e planifikojm\u00eb bashk\u00ebpunimin me komunitetin Linux?<br \/>\nNe kemi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/what-we-do\/research\/selinux\/\">nj\u00eb grup faqesh n\u00eb NSA.gov<\/a><\/noindex>, t\u00eb cilat do t\u00eb sh\u00ebrbejn\u00eb si m\u00ebnyra jon\u00eb kryesore p\u00ebr t\u00eb publikuar informacionin mbi Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar. N\u00ebse jeni t\u00eb interesuar p\u00ebr Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar, ju rekomandojm\u00eb t\u00eb bashkoheni me list\u00ebn e d\u00ebrguesve t\u00eb zhvilluesve, t\u00eb shikoni kodin burimor dhe t\u00eb jepni mendimin tuaj (ose kodin). P\u00ebr t'u bashkuar me list\u00ebn e d\u00ebrguesve t\u00eb zhvilluesve, shih. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/what-we-do\/research\/selinux\/mailing-list.shtml\">Faqen e list\u00ebs s\u00eb d\u00ebrguesve t\u00eb zhvilluesve SELinux<\/a><\/noindex>. <\/li>\n<li>Kush mund t\u00eb ndihmoj\u00eb?<br \/>\nSELinux tani mbSupported dhe po zhvillohet nga komuniteti i zhvilluesve t\u00eb softuerit p\u00ebr Linux me kod burimor t\u00eb hapur.<\/li>\n<li>A financojn\u00eb NSA ndonj\u00eb pun\u00eb pasuese?<br \/>\nAktualisht, NSA nuk po shqyrton propozime p\u00ebr pun\u00eb t\u00eb m\u00ebtejshme.<\/li>\n<li>Cili \u00ebsht\u00eb tipi i mb\u00ebshtetjes q\u00eb \u00ebsht\u00eb n\u00eb dispozicion?<br \/>\nNe kemi n\u00eb plan t\u00eb adresojm\u00eb \u00e7\u00ebshtjet p\u00ebrmes list\u00ebs s\u00eb postimeve selinux@tycho.nsa.gov, por nuk do t\u00eb mund t\u00eb p\u00ebrgjigjemi n\u00eb t\u00eb gjitha pyetjet n\u00eb lidhje me nj\u00eb faqe t\u00eb ve\u00e7ant\u00eb.<\/li>\n<li>Kush ndihmoi? \u00c7far\u00eb b\u00ebn\u00eb ata?<br \/>\nPrototipi i Linux me siguri t\u00eb p\u00ebrmir\u00ebsuar u zhvilluar nga NSA n\u00eb bashk\u00ebpunim me partner\u00eb k\u00ebrkimor\u00eb nga NAI Labs, Secure Computing Corporation (SCC) dhe MITER Corporation. Pas lansimit fillestar publik, pati shum\u00eb materiale t\u00eb tjera. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nsa.gov\/what-we-do\/research\/selinux\/contributors.shtml\">Shikoni list\u00ebn e pjes\u00ebmarr\u00ebsve<\/a><\/noindex>.<\/li>\n<li>Si mund t\u00eb m\u00ebsoj m\u00eb shum\u00eb?<br \/>\nJu rekomandojm\u00eb t\u00eb vizitoni faqet tona t\u00eb internetit, t\u00eb lexoni dokumentacionin dhe punimet e kaluara k\u00ebrkimore, si dhe t\u00eb merrni pjes\u00eb n\u00eb list\u00ebn ton\u00eb t\u00eb postimeve selinux@vger.kernel.org.<\/li>\n<\/ol>\n<p><\/p>\n<p>A e konsideroni p\u00ebrkthimin t\u00eb dobish\u00ebm? Lini komentet tuaja!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/459598\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0443\u0440\u0441\u0430 &#171;\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Linux&#187; \u043c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e FAQ \u043f\u0440\u043e\u0435\u043a\u0442\u0430 SELinux. \u041d\u0430\u043c \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u0438\u043c \u0441 \u0432\u0430\u043c\u0438. \u041c\u044b \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043e\u0442\u0432\u0435\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0435 SELinux. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0434\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438. \u0412\u0441\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27020,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36129","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0443\u0440\u0441\u0430 &quot;\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Linux&quot; \u043c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e FAQ \u043f\u0440\u043e\u0435\u043a\u0442\u0430 SELinux.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chasto-zadavaemye-voprosy-po-selinux-faq\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0430\u0441\u0442\u043e \u0437\u0430\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043f\u043e SELinux (FAQ) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0443\u0440\u0441\u0430 &quot;\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Linux&quot; \u043c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e FAQ \u043f\u0440\u043e\u0435\u043a\u0442\u0430 SELinux.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chasto-zadavaemye-voprosy-po-selinux-faq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:09:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:09:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pyetje t\u00eb shpeshta rreth SELinux (FAQ) | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! E krijuar posa\u00e7\u00ebrisht p\u00ebr student\u00ebt e kursit \"Siguria e Linuxit\", ne kemi p\u00ebrgatitur nj\u00eb p\u00ebrkthim t\u00eb FAQ-it zyrtar t\u00eb projektit SELinux.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chasto-zadavaemye-voprosy-po-selinux-faq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0430\u0441\u0442\u043e \u0437\u0430\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043f\u043e SELinux (FAQ) | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0443\u0440\u0441\u0430 &quot;\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Linux&quot; \u043c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e FAQ \u043f\u0440\u043e\u0435\u043a\u0442\u0430 SELinux.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chasto-zadavaemye-voprosy-po-selinux-faq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:46+00:00","article:modified_time":"2019-10-31T19:09:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36129","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:08:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:50:23","updated":"2026-01-22 02:08:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36129"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36129\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27020"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}