{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Lejet e skedar\u00ebve n\u00eb Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve. Ne po p\u00ebrfshihemi aktivisht n\u00eb pun\u00eb dhe q\u00eb n\u00eb janar po p\u00ebrgatitemi p\u00ebr shum\u00eb lansime t\u00eb fuqishme. Mes t\u00eb tjerave, \u00ebsht\u00eb shpallur regjistrimi p\u00ebr nj\u00eb grup t\u00eb ri t\u00eb kursit q\u00eb t\u00eb gjith\u00eb e duan. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">\"Administrator Linux\"<\/a><\/noindex>. Para lansimit, tradicionalisht ndajm\u00eb nj\u00eb p\u00ebrkthim t\u00eb materialeve t\u00eb dobishme.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Lejet e skedar\u00ebve n\u00eb Linux\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Lejet e skedar\u00ebve ofrojn\u00eb nj\u00eb alternativ\u00eb t\u00eb sigurt p\u00ebr skedar\u00ebt e ekzekutuesh\u00ebm SUID, por mund t\u00eb duken disi t\u00eb komplikuara me sa duket.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nT\u00eb gjith\u00eb e dim\u00eb q\u00eb skedar\u00ebt binar\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> jan\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">jan\u00eb nj\u00eb zgjidhje e keqe n\u00eb terma t\u00eb siguris\u00eb.<\/a><\/noindex>. P\u00ebr fat t\u00eb mir\u00eb, n\u00ebse aplikacionit tuaj i nevojiten disa privilegje t\u00eb kufizuara, ekziston nj\u00eb m\u00ebnyr\u00eb m\u00eb efikase e quajtur <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">lejet e skedar\u00ebve.<\/a><\/noindex>.<\/p>\n<p>Do t'ju kursej koh\u00eb n\u00ebse d\u00ebshiron t\u00eb shmang\u00ebsh leximin e holl\u00ebsish\u00ebm t\u00eb artikullit m\u00eb sip\u00ebr: n\u00eb thelb, lejet e skedar\u00ebve lejojn\u00eb proceset q\u00eb nisin n\u00eb em\u00ebr t\u00eb p\u00ebrdoruesit root dhe, p\u00ebr rrjedhoj\u00eb, kan\u00eb t\u00eb drejt\u00eb t\u00eb b\u00ebjn\u00eb di\u00e7ka, t\u00eb ruajn\u00eb disa aft\u00ebsi specifike t\u00eb kufizuara <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">n\u00eb k\u00ebt\u00eb list\u00eb<\/a><\/noindex>, kur ata heqin privilegjet dhe nisin si nj\u00eb p\u00ebrdorues pa privilegje. Kjo do t\u00eb thot\u00eb se n\u00ebse nj\u00eb sulmues arrin t\u00eb comprometoj\u00eb nj\u00eb proces p\u00ebrmes nj\u00eb mbushjeje t\u00eb tamponit ose nj\u00eb eksploit tjet\u00ebr, ai nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb p\u00ebrfitoj\u00eb nga asgj\u00eb tjet\u00ebr p\u00ebrve\u00e7 disa privilegjeve minimale q\u00eb v\u00ebrtet i nevojiten procesit.<\/p>\n<p>Lejet jan\u00eb ideale p\u00ebr sh\u00ebrbimet q\u00eb zakonisht nisin n\u00eb em\u00ebr t\u00eb p\u00ebrdoruesit root, por \u00e7far\u00eb ndodh me utilitat e linj\u00ebs komandave? P\u00ebr fat t\u00eb mir\u00eb, kjo mb\u00ebshtetet po ashtu me kusht q\u00eb t\u00eb keni instaluar utilitat e duhura. N\u00ebse p\u00ebrdorni Ubuntu, p\u00ebr shembull, ju nevojitet paketa <code>libcap2-bin<\/code>. Ju gjithashtu do t'ju duhet nj\u00eb kernell jo arkaik (duke filluar nga versioni<b> 2.6.24<\/b>).<\/p>\n<p>K\u00ebto funksione lejojn\u00eb lidhjen e lejeve me skedar\u00ebt e ekzekutuesh\u00ebm n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me vendosjen e bitit SUID, por vet\u00ebm p\u00ebr nj\u00eb grup t\u00eb caktuar lejesh. Utilitari <code>setcap<\/code> p\u00ebrdoret p\u00ebr t\u00eb shtuar dhe hequr leje nga nj\u00eb skedar.<\/p>\n<p>Hapi i par\u00eb \u00ebsht\u00eb t\u00eb zgjidhni lejet e nevojshme p\u00ebr ju. P\u00ebr k\u00ebt\u00eb artikull, un\u00eb supozoj se ekziston nj\u00eb mjet diagnostikimi t\u00eb rrjetit, i quajtur <code>tracewalk<\/code>, i cili duhet t\u00eb jet\u00eb n\u00eb gjendje t\u00eb p\u00ebrdor\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">soket t\u00eb pap\u00ebrpunuara.<\/a><\/noindex>Kjo zakonisht k\u00ebrkon q\u00eb aplikacioni t\u00eb filloj\u00eb si p\u00ebrdorues root, por gjat\u00eb shqyrtimit <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">lista <\/a><\/noindex>zgjidhet se vet\u00ebm leja <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Duke supozojm\u00eb se ndodheni n\u00eb katalogun ku ndodhet skedari binar <code>tracewalk<\/code>, mund t\u00eb shtoni k\u00ebt\u00eb leje n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nN\u00eb k\u00ebt\u00eb faz\u00eb injoroni prapashtes\u00ebn <code>=eip<\/code> p\u00ebr lejen, do t'ju flas p\u00ebr t\u00eb pas disa sekondash. Shihni se emri i lejes shkruhet me liter t\u00eb vog\u00ebl. Tani mund t\u00eb kontrolloni n\u00ebse keni konfiguruar lejet si\u00e7 duhet, duke p\u00ebrdorur:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nOse mund t\u00eb shihni nj\u00eb list\u00eb t\u00eb gjitha lejeve t\u00eb vendosura p\u00ebr k\u00ebt\u00eb skedar ekzekutues:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nP\u00ebr referenc\u00eb, gjithashtu mund t\u00eb hiqni t\u00eb gjitha lejet nga skedari ekzekutues duke p\u00ebrdorur:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\nN\u00eb k\u00ebt\u00eb faz\u00eb duhet t\u00eb jeni n\u00eb gjendje t\u00eb ekzekutoni skedarin ekzekutues si nj\u00eb p\u00ebrdorues pa privilegje, dhe ai duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb punoj\u00eb me soket t\u00eb pap\u00ebrpunuar, por pa ndonj\u00eb privilegj tjet\u00ebr q\u00eb ka p\u00ebrdoruesi root.<\/p>\n<p>Pra, \u00e7far\u00eb do t\u00eb thot\u00eb kjo prapashtes\u00eb e \u00e7uditshme <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efektive, t\u00eb trash\u00ebguara dhe t\u00eb lejueshme (effective, inheritable dhe permitted)<\/i>:<\/p>\n<ul>\n<li><b>Lejet efektive (Effective)<\/b> jan\u00eb ato q\u00eb p\u00ebrcaktojn\u00eb se \u00e7far\u00eb mund t\u00eb b\u00ebj\u00eb procesi n\u00eb t\u00eb v\u00ebrtet\u00eb. P\u00ebr shembull, ai nuk mund t\u00eb trajtoj\u00eb soket t\u00eb pap\u00ebrpunuar n\u00ebse <code>CAP_NET_RAW<\/code> nuk \u00ebsht\u00eb n\u00eb grupin efektiv.<\/li>\n<li><b>Lejet e lejueshme (Permitted)<\/b> jan\u00eb ato q\u00eb lejohet t\u00eb ket\u00eb procesi, n\u00ebse e k\u00ebrkon at\u00eb me thirrjen p\u00ebrkat\u00ebse. Ato nuk lejojn\u00eb procesin t\u00eb b\u00ebj\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb asgj\u00eb, p\u00ebrve\u00e7 n\u00ebse \u00ebsht\u00eb shkruar posa\u00e7\u00ebrisht p\u00ebr t\u00eb k\u00ebrkuar lejen e caktuar. Kjo lejon q\u00eb proceset t\u00eb krijohen p\u00ebr t\u00eb shtuar leje ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme n\u00eb grupin efektiv vet\u00ebm p\u00ebr at\u00eb periudh\u00eb kur ato jan\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb t\u00eb nevojshme.<\/li>\n<li><b>Lejet e trash\u00ebguara (Inheritable)<\/b> jan\u00eb ato q\u00eb mund t\u00eb trash\u00ebgohen n\u00eb grupin e lejeve t\u00eb dorez\u00ebs t\u00eb procesit t\u00eb ri t\u00eb lindur. Gjat\u00eb operacionit <code>fork()<\/code> ose <code>clone()<\/code> procesit t\u00eb ri gjithmon\u00eb i jepet nj\u00eb kopje e lejeve t\u00eb procesit prind, pasi n\u00eb at\u00eb moment ai ende po ekzekuton t\u00eb nj\u00ebjtin skedar ekzekutues. Grupi trash\u00ebgues p\u00ebrdoret kur <code>exec()<\/code> (ose analog) thirret p\u00ebr t\u00eb z\u00ebvend\u00ebsuar skedarin ekzekutues me nj\u00eb tjet\u00ebr. N\u00eb k\u00ebt\u00eb faz\u00eb grupi i lejeve t\u00eb procesit maskohet nga grupi trash\u00ebgues p\u00ebr t\u00eb marr\u00eb grupin e lejeve q\u00eb do t\u00eb p\u00ebrdoret p\u00ebr procesin e ri.<\/li>\n<\/ul>\n<p>\nPra, utilitarja <code>setcap<\/code> na lejon t\u00eb na lejoj\u00eb t\u00eb shtojm\u00eb lejet e k\u00ebtyre tre grupeve ndaras p\u00ebr k\u00ebt\u00eb skedar ekzekutiv. Vini re se vlera e grupeve interpretohet pak ndryshe p\u00ebr t\u00eb drejtat e aksesit n\u00eb skedar\u00eb:<\/p>\n<ul>\n<li><b>T\u00eb disponuesh\u00ebm <\/b>lejet e skedar\u00ebve jan\u00eb ato q\u00eb jan\u00eb gjithmon\u00eb t\u00eb disponueshme p\u00ebr skedarin ekzekutiv, edhe n\u00ebse procesi prind q\u00eb e thirri at\u00eb nuk i kishte ato. M\u00eb par\u00eb quheshin \"leje t\u00eb detyrueshme\".<\/li>\n<li><b>T\u00eb trash\u00ebguara <\/b>lejet e skedar\u00ebve p\u00ebrcaktojn\u00eb nj\u00eb mask\u00eb shtes\u00eb, e cila gjithashtu mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb hequr leje nga grupi i procesit thirr\u00ebs. Ato aplikohen p\u00ebrve\u00e7 grupit t\u00eb trash\u00ebguar t\u00eb procesit thirr\u00ebs, k\u00ebshtu q\u00eb leja trash\u00ebgohet vet\u00ebm n\u00ebse ajo ekziston n\u00eb t\u00eb dy grupet.<\/li>\n<li><b>Efektive <\/b>lejet e skedar\u00ebve n\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebrfaq\u00ebsojn\u00eb vet\u00ebm nj\u00eb bit, jo nj\u00eb grup, dhe n\u00ebse ai \u00ebsht\u00eb aktivizuar, at\u00ebher\u00eb kjo do t\u00eb thot\u00eb se e gjith\u00eb grupi i disponuesh\u00ebm gjithashtu kopjohet n\u00eb grupin efektiv t\u00eb procesit t\u00eb ri. Kjo mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shtuar leje n\u00eb procese q\u00eb nuk jan\u00eb shkruar posa\u00e7\u00ebrisht p\u00ebr t'i k\u00ebrkuar ato. Duke qen\u00eb se ky \u00ebsht\u00eb nj\u00eb bit, n\u00ebse e aktivizoni at\u00eb p\u00ebr ndonj\u00eb leje, ai duhet t\u00eb aktivizohet p\u00ebr t\u00eb gjitha lejet. Mund ta mendoni si nj\u00eb bit legjacie, sepse p\u00ebrdoret p\u00ebr t\u00eb lejuar p\u00ebrdorimin e lejeve p\u00ebr aplikacione q\u00eb nuk i mb\u00ebshtesin ato.<\/li>\n<\/ul>\n<p>\nKur specifikoni lejet p\u00ebrmes <code>setcap<\/code> tre shkronjave <code>e<\/code>, <code>i<\/code> dhe <code>p<\/code> i referohen <i>grupeve efektive, t\u00eb trash\u00ebguara dhe t\u00eb aksesueshme<\/i> p\u00ebrkat\u00ebsisht. Pra, specifikimi m\u00eb i hersh\u00ebm:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 tregon se leja <code>CAP_NET_RAW<\/code> duhet t\u00eb shtohet n\u00eb grupet e aksesit dhe t\u00eb trash\u00ebguara dhe se gjithashtu duhet t\u00eb vendoset bita efektiv. Kjo do t\u00eb z\u00ebvend\u00ebsoj\u00eb \u00e7do leje t\u00eb vendosur m\u00eb par\u00eb n\u00eb skedar. P\u00ebr t\u00eb vendosur disa leje n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, p\u00ebrdorni nj\u00eb list\u00eb ndar\u00eb me presje:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">Manuali p\u00ebr lejet<\/a><\/noindex> diskuton t\u00eb gjitha k\u00ebto n\u00eb detaje, por, shpresoj, ky post ka demistifikuar paksa at\u00eb q\u00eb po ndodh. Duhet vet\u00ebm t\u00eb p\u00ebrmenden disa paralajm\u00ebrime dhe truke.<\/p>\n<p>S\u00eb pari, mund\u00ebsit\u00eb e skedar\u00ebve nuk funksionojn\u00eb me lidhjet simbolike \u2014 ju duhet t'i aplikoni ato n\u00eb vet\u00eb skedarin binar (dmth n\u00eb q\u00ebllimin e lidhjes simbolike).<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, ato nuk punojn\u00eb me skriptet e interpretuara. P\u00ebr shembull, n\u00ebse keni nj\u00eb skript Python dhe d\u00ebshironi t'i caktoni nj\u00eb leje, duhet ta caktoni vet\u00eb interpretuesit Python. Kjo p\u00ebrb\u00ebn nj\u00eb problem t\u00eb mundsh\u00ebm sigurie, sepse t\u00eb gjitha skriptet q\u00eb ekzekutohen me k\u00ebt\u00eb interpretues do t\u00eb ken\u00eb lejen e caktuar, ndonj\u00ebher\u00eb akoma m\u00eb mir\u00eb se sa t\u00eb p\u00ebrdoret SUID. Zgjidhja m\u00eb e zakonshme duket se \u00ebsht\u00eb t\u00eb shkruhet nj\u00eb skedar ekzekutiv t\u00eb ve\u00e7ant\u00eb n\u00eb C ose nj\u00eb analog, i cili mund t\u00eb kryej\u00eb operacionet e nevojshme dhe ta th\u00ebrras\u00eb at\u00eb nga skripti. Kjo \u00ebsht\u00eb si qasja e p\u00ebrdorur nga Wireshark, i cili p\u00ebrdor nj\u00eb skedar binar <code>\/usr\/bin\/dumpcap<\/code> p\u00ebr t\u00eb kryer operacione t\u00eb privilegjuara:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nN\u00eb t\u00eb tret\u00eb, lejet e skedar\u00ebve \u00e7aktivizohen n\u00ebse p\u00ebrdorni nj\u00eb variab\u00ebl mjedisi <code>LD_LIBRARY_PATH<\/code> p\u00ebr arsye sigurie t\u00eb qarta<i>(1)<\/i>. E nj\u00ebjta gj\u00eb vlen edhe p\u00ebr <code>LD_PRELOAD<\/code>, aq sa di un\u00eb.<\/p>\n<p><i>1. Sepse nj\u00eb sulmues mund t\u00eb ndryshoj\u00eb nj\u00eb nga bibliotekat standarde dhe t\u00eb p\u00ebrdor\u00eb <code>LD_LIBRARY_PATH<\/code>, p\u00ebr t\u00eb b\u00ebr\u00eb q\u00eb biblioteka e tij t\u00eb thirret p\u00ebrpara asaj sistemike, dhe si rezultat t\u00eb ket\u00eb kodin e tij arbitrar t\u00eb ekzekutuar me t\u00eb nj\u00ebjtat privilegje si aplikacioni q\u00eb e thirr. <br \/>\n<\/i><\/p>\n<p><i><b>Kjo \u00ebsht\u00eb gjith\u00e7ka. Detajet mbi programin e kursit mund t\u00eb njihen n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">webinarin q\u00eb do t\u00eb zhvillohet m\u00eb 24 janar.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lejet e skedar\u00ebve n\u00eb Linux | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve. Ne po p\u00ebrgatitemi me intensitet p\u00ebr t'u angazhuar n\u00eb pun\u00eb dhe tashm\u00eb n\u00eb janar kemi shum\u00eb lan\u00e7ime t\u00eb fuqishme t\u00eb p\u00ebrgatitura.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}