{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Lejet e skedar\u00ebve n\u00eb Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve. Ne jemi aktivisht duke u angazhuar n\u00eb pun\u00eb dhe n\u00eb janar do t\u00eb p\u00ebrgatisim shum\u00eb lan\u00e7ime t\u00eb fuqishme. Mes t\u00eb tjerash, \u00ebsht\u00eb shpallur regjistrimi p\u00ebr nj\u00eb grup t\u00eb ri t\u00eb kursit t\u00eb dashur nga t\u00eb gjith\u00ebt. <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">\u00abAdministrator Linux\u00bb<\/a><\/noindex>. N\u00eb prag t\u00eb lan\u00e7imit, tradicionalisht ndajm\u00eb p\u00ebrkthimin e materialeve t\u00eb dobishme.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Lejet e skedar\u00ebve n\u00eb Linux\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Lejet e skedar\u00ebve ofrojn\u00eb nj\u00eb alternativ\u00eb t\u00eb sigurt ndaj skedar\u00ebve ekzekutiv\u00eb SUID, por mund t\u00eb duken paksa t\u00eb nd\u00ebrlikuara n\u00eb shikim t\u00eb par\u00eb.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nT\u00eb gjith\u00eb ne e dim\u00eb q\u00eb skedar\u00ebt binar\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> jan\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">\u00ebsht\u00eb nj\u00eb zgjidhje e keqe n\u00eb aspektin e siguris\u00eb<\/a><\/noindex>. Fatmir\u00ebsisht, n\u00ebse aplikacioni juaj k\u00ebrkon disa privilegje t\u00eb kufizuara, ekziston nj\u00eb m\u00ebnyr\u00eb m\u00eb efektive, e njohur si <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">lejet e skedar\u00ebve<\/a><\/noindex>.<\/p>\n<p>Do t'ju kursej koh\u00eb, n\u00ebse d\u00ebshironi t\u00eb shmangni leximin e detajuar t\u00eb artikullit m\u00eb sip\u00ebr: n\u00eb thelb, lejet e skedar\u00ebve lejojn\u00eb proceset q\u00eb fillojn\u00eb n\u00ebn emrin e p\u00ebrdoruesit root dhe, p\u00ebr rrjedhoj\u00eb, kan\u00eb t\u00eb drejt\u00eb t\u00eb b\u00ebjn\u00eb di\u00e7ka, t\u00eb ruajn\u00eb disa mund\u00ebsi, t\u00eb kufizuara <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">me k\u00ebt\u00eb list\u00eb<\/a><\/noindex>, kur ata heq\u00ebn privilegjet dhe fillojn\u00eb si nj\u00eb p\u00ebrdorues pa privilegje. Kjo do t\u00eb thot\u00eb se n\u00ebse nj\u00eb sulmues arrin t\u00eb kompromentoj\u00eb procesin me an\u00eb t\u00eb mbivendosjes s\u00eb buffers apo nj\u00eb shfryt\u00ebzimi tjet\u00ebr, ai nuk do t\u00eb mund t\u00eb p\u00ebrdor\u00eb asgj\u00eb p\u00ebrve\u00e7 privilegjeve minimale q\u00eb nevojiten p\u00ebr procesin.<\/p>\n<p>Lejet jan\u00eb ideale p\u00ebr sh\u00ebrbimet q\u00eb zakonisht jan\u00eb t\u00eb nisura n\u00ebn emrin e p\u00ebrdoruesit root, por si ndodhet me utilitetet e vij\u00ebs s\u00eb komand\u00ebs? Fatmir\u00ebsisht, kjo mb\u00ebshtetet nj\u00ebsoj n\u00ebse keni instaluar utilitetet e duhura. N\u00ebse po p\u00ebrdorni Ubuntu, p\u00ebr shembull, do t'ju nevojitet paketi <code>libcap2-bin<\/code>. Ju gjithashtu duhet t\u00eb keni nj\u00eb b\u00ebrtham\u00eb jo arkaike (duke filluar nga versioni<b> 2.6.24<\/b>).<\/p>\n<p>K\u00ebto funksione lejojn\u00eb lidhjen e lejeve me skedar\u00ebt ekzekutiv\u00eb nj\u00ebsoj si konfigurimi i bitit SUID, por vet\u00ebm p\u00ebr nj\u00eb grup t\u00eb caktuar lejesh. Utilitari <code>setcap<\/code> p\u00ebrdoret p\u00ebr t\u00eb shtuar dhe hequr leje nga skedari.<\/p>\n<p>Hapi i par\u00eb \u00ebsht\u00eb t\u00eb zgjidhni lejet q\u00eb ju nevojiten. N\u00eb k\u00ebt\u00eb artikull do t\u00eb supozoj se ekziston nj\u00eb mjet diagnostikimi t\u00eb rrjetit, i quajtur <code>tracewalk<\/code>, i cili duhet t\u00eb jet\u00eb n\u00eb gjendje t\u00eb p\u00ebrdor\u00eb <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">sockets t\u00eb pap\u00ebrpunuara<\/a><\/noindex>. Zakonisht k\u00ebrkohet q\u00eb aplikacioni t\u00eb ekzekutohet me emrin e p\u00ebrdoruesit root, por kur shihni <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">list\u00ebn <\/a><\/noindex>kuptohet se k\u00ebrkohet vet\u00ebm leja <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Duke supozuar se ndodheni n\u00eb katalogun ku ndodhet skedari binar <code>tracewalk<\/code>, mund t\u00eb shtoni k\u00ebt\u00eb leje n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nMund ta injoroni sufixin <code>=eip<\/code> p\u00ebr lejen, do ta shpjegoj k\u00ebt\u00eb pas pak sekondash. Mos harroni se emri i lejes \u00ebsht\u00eb me shkronja t\u00eb vogla. Tani mund t\u00eb kontrolloni n\u00ebse i keni vendosur lejet si\u00e7 duhet me:<\/p>\n<pre><code class=\"bash\">setcap -v cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nOse mund t\u00eb printoni nj\u00eb list\u00eb t\u00eb t\u00eb gjitha lejeve t\u00eb vendosura p\u00ebr k\u00ebt\u00eb skedari ekzekutues:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nP\u00ebr referenc\u00eb, gjithashtu mund t\u00eb hiqni t\u00eb gjitha lejet nga skedari ekzekutues duke p\u00ebrdorur:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\nN\u00eb k\u00ebt\u00eb pik\u00eb, duhet t\u00eb keni mund\u00ebsi t\u00eb ekzekutoni skedarin ekzekutues si nj\u00eb p\u00ebrdorues jo privilegjuar, dhe ai duhet t\u00eb jet\u00eb n\u00eb gjendje t\u00eb punoj\u00eb me sockets t\u00eb pap\u00ebrpunuara, por t\u00eb mos ket\u00eb ndonj\u00eb privilegje tjet\u00ebr q\u00eb i p\u00ebrkasin p\u00ebrdoruesit root.<\/p>\n<p>Pra, \u00e7far\u00eb do t\u00eb thot\u00eb ky sufix i \u00e7uditsh\u00ebm <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efektive, trash\u00ebgueshme dhe t\u00eb lejuara (effective, inheritable dhe permitted)<\/i>:<\/p>\n<ul>\n<li><b>Efektive (Effective)<\/b> lejet jan\u00eb ato q\u00eb p\u00ebrcaktojn\u00eb se \u00e7far\u00eb mund n\u00eb t\u00eb v\u00ebrtet\u00eb t\u00eb b\u00ebj\u00eb procesi. P\u00ebr shembull, ai nuk mund t\u00eb merret me soket t\u00eb pap\u00ebrpunuar n\u00ebse <code>CAP_NET_RAW<\/code> nuk \u00ebsht\u00eb n\u00eb grupin efektiv.<\/li>\n<li><b>T\u00eb lejuara (Permitted)<\/b> lejet jan\u00eb ato q\u00eb lejohet t\u00eb ket\u00eb procesi, n\u00ebse ai i k\u00ebrkon ato n\u00ebp\u00ebrmjet thirrjes p\u00ebrkat\u00ebse. Ato nuk lejojn\u00eb procesit t\u00eb b\u00ebj\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb ndonj\u00eb gj\u00eb, p\u00ebrve\u00e7 n\u00ebse ai \u00ebsht\u00eb shkruar ve\u00e7an\u00ebrisht p\u00ebr t\u00eb k\u00ebrkuar lejen e caktuar. Kjo lejon krijimin e proceseve p\u00ebr shtimin e lejeve ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme n\u00eb grupin efektiv vet\u00ebm p\u00ebr at\u00eb periudh\u00eb kur ato jan\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb t\u00eb nevojshme.<\/li>\n<li><b>Trash\u00ebgueshme (Inheritable)<\/b> lejet jan\u00eb ato q\u00eb mund t\u00eb trash\u00ebgohen n\u00eb grupin e lejeve t\u00eb procesit t\u00eb ri t\u00eb lindur. Gjat\u00eb operacionit <code>fork()<\/code> ose <code>clone()<\/code> procesi i ri gjithmon\u00eb merr nj\u00eb kopje t\u00eb lejeve t\u00eb procesit prind, sepse n\u00eb at\u00eb moment ai ende po ekzekuton t\u00eb nj\u00ebjtin skedar ekzekutiv. Grupi i trash\u00ebguar p\u00ebrdoret kur <code>exec()<\/code> (ose analoge) thirret p\u00ebr t\u00eb z\u00ebvend\u00ebsuar skedarin ekzekutiv me nj\u00eb tjet\u00ebr. N\u00eb k\u00ebt\u00eb faz\u00eb, grupi i disponuesh\u00ebm i procesit maskohet nga grupi trash\u00ebgues p\u00ebr t\u00eb marr\u00eb grupin e disponuesh\u00ebm q\u00eb do t\u00eb p\u00ebrdoret p\u00ebr procesin e ri.<\/li>\n<\/ul>\n<p>\nK\u00ebshtu, utilitari <code>setcap<\/code> na lejon t\u00eb shtojm\u00eb lejet e k\u00ebtyre tre grupeve n\u00eb m\u00ebnyr\u00eb t\u00eb pavarur p\u00ebr skedarin ekzekutiv t\u00eb dh\u00ebn\u00eb. Vini re se vlera e grupeve interpretohet paksa ndryshe p\u00ebr t\u00eb drejtat e qasjes n\u00eb skedar\u00eb:<\/p>\n<ul>\n<li><b>T\u00eb disponueshme <\/b>lejet e skedar\u00ebve \u2014 jan\u00eb ato q\u00eb gjithmon\u00eb jan\u00eb t\u00eb disponueshme p\u00ebr skedarin ekzekutiv, edhe n\u00ebse procesi prind q\u00eb e thirri at\u00eb nuk i kishte ato. M\u00eb par\u00eb quheshin leje \u201ct\u00eb detyrueshme\u201d.<\/li>\n<li><b>Trash\u00ebguar <\/b>lejet e skedar\u00ebve p\u00ebrcaktojn\u00eb nj\u00eb mask\u00eb t\u00eb shtes\u00ebs, e cila gjithashtu mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb hequr lejet nga grupi i procesit thirr\u00ebs. Ato zbatohen p\u00ebrve\u00e7 grupit trash\u00ebgues t\u00eb procesit thirr\u00ebs, k\u00ebshtu q\u00eb leja trash\u00ebgohet vet\u00ebm n\u00ebse ekziston n\u00eb t\u00eb dy grupet.<\/li>\n<li><b>Efektive <\/b>lehtet e skedar\u00ebve n\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebrfaq\u00ebsojn\u00eb vet\u00ebm nj\u00eb bit, dhe jo nj\u00eb grup, dhe n\u00ebse \u00ebsht\u00eb vendosur, at\u00ebher\u00eb kjo do t\u00eb thot\u00eb q\u00eb e gjith\u00eb grupe e duhur gjithashtu kopjohet n\u00eb grupin efektiv t\u00eb procesit t\u00eb ri. Kjo mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shtuar leje n\u00eb procese q\u00eb nuk jan\u00eb shkruar posa\u00e7\u00ebrisht p\u00ebr ta k\u00ebrkuar. Duke qen\u00eb se kjo \u00ebsht\u00eb nj\u00eb bit, n\u00ebse e vendosni at\u00eb p\u00ebr ndonj\u00eb leje, ajo duhet t\u00eb vendoset p\u00ebr t\u00eb gjitha lejet. Mund ta mendoni at\u00eb si nj\u00eb bit legjacy, sepse p\u00ebrdoret p\u00ebr t\u00eb lejuar p\u00ebrdorimin e lejimeve p\u00ebr aplikacionet q\u00eb nuk i mb\u00ebshtesin ato.<\/li>\n<\/ul>\n<p>\nKur specifikoni lejet p\u00ebrmes <code>setcap<\/code> tre shkronjave <code>e<\/code>, <code>i<\/code> dhe <code>p<\/code> lidhen me <i>efektive, trash\u00ebgueshm\u00ebris\u00eb dhe t\u00eb aksesueshm\u00ebris\u00eb<\/i> grupeve p\u00ebrkat\u00ebse. Pra, specifikimi m\u00eb her\u00ebt:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 tregon se leja <code>CAP_NET_RAW<\/code> duhet t\u00eb shtohet n\u00eb grupet e aksesueshme dhe trash\u00ebguese dhe q\u00eb gjithashtu duhet t\u00eb vendoset bit efekti. Kjo do t\u00eb z\u00ebvend\u00ebsoj\u00eb \u00e7do leje q\u00eb ishte vendosur m\u00eb par\u00eb n\u00eb skedar. P\u00ebr t\u00eb vendosur disa leje menj\u00ebher\u00eb, p\u00ebrdorni nj\u00eb list\u00eb p\u00ebrmes nj\u00eb presjeje:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">Udh\u00ebzues p\u00ebr lejet<\/a><\/noindex> diskutohet gjith\u00e7ka n\u00eb detaje, por shpresoj se ky post e demistifikoi paksa at\u00eb q\u00eb po ndodh. Na mbetet t\u00eb p\u00ebrmendim vet\u00ebm disa paralajm\u00ebrime dhe truke.<\/p>\n<p>S\u00eb pari, mund\u00ebsit\u00eb e skedar\u00ebve nuk funksionojn\u00eb me symlink \u2014 ju duhet t'i aplikoni ato p\u00ebr skedarin binar t\u00eb vet\u00eb (dmth. p\u00ebr objektin e symlinkut).<\/p>\n<p>S\u00eb dyti, ato nuk funksionojn\u00eb me skriptet interpretuese. P\u00ebr shembull, n\u00ebse keni nj\u00eb skript Python p\u00ebr t\u00eb cilin d\u00ebshironi t\u00eb caktoni leje, duhet ta caktoni p\u00ebr interpretuesin e Python-it. Sigurisht, kjo \u00ebsht\u00eb nj\u00eb problem potencial sigurie, sepse at\u00ebher\u00eb t\u00eb gjitha skriptet q\u00eb ekzekutohen me k\u00ebt\u00eb interpretues do t\u00eb ken\u00eb lejen e caktuar, megjithat\u00eb, kjo \u00ebsht\u00eb ende ndjesh\u00ebm m\u00eb mir\u00eb se t\u00eb b\u00ebni SUID. Rruga m\u00eb e zakonshme p\u00ebr t\u00eb kaluar k\u00ebt\u00eb duket se \u00ebsht\u00eb t\u00eb shkruani nj\u00eb skedar t\u00eb ve\u00e7ant\u00eb ekzekutues n\u00eb C ose nj\u00eb analog, i cili mund t\u00eb kryej\u00eb operacionet e nevojshme dhe ta th\u00ebrras\u00eb at\u00eb nga skripti. Kjo \u00ebsht\u00eb e ngjashme me qasjen q\u00eb p\u00ebrdor Wireshark, i cili p\u00ebrdor skedarin binar <code>\/usr\/bin\/dumpcap<\/code> p\u00ebr t\u00eb kryer operacione me privilegje:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nP\u00ebr m\u00eb tep\u00ebr, lejet e skedar\u00ebve \u00e7aktivizohen n\u00ebse p\u00ebrdorni nj\u00eb variab\u00ebl mjedisi <code>LD_LIBRARY_PATH<\/code> p\u00ebr arsye t\u00eb qarta sigurie<i>(1)<\/i>. E nj\u00ebjta gj\u00eb vlen edhe p\u00ebr <code>LD_PRELOAD<\/code>, p\u00ebr aq sa di un\u00eb.<\/p>\n<p><i>1. Sepse nj\u00eb sulmues, natyrisht, mund t\u00eb z\u00ebvend\u00ebsoj\u00eb nj\u00eb nga bibliotekat standarde dhe t\u00eb p\u00ebrdor\u00eb <code>LD_LIBRARY_PATH<\/code>, p\u00ebr ta detyruar biblioteken e tij t\u00eb thirret n\u00eb vend t\u00eb asaj sistemike dhe, p\u00ebr pasoj\u00eb, t\u00eb ket\u00eb kodin e tij t\u00eb d\u00ebshiruara duke u ekzekutuar me t\u00eb nj\u00ebtat privilegje si aplikacioni q\u00eb e th\u00ebrret. <br \/>\n<\/i><\/p>\n<p><i><b>Kjo \u00ebsht\u00eb gjith\u00e7ka. M\u00eb shum\u00eb rreth programit t\u00eb kursit do t\u00eb mund t\u00eb m\u00ebsoni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">webinarin q\u00eb do t\u00eb zhvillohet m\u00eb 24 janar.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lejet e skedar\u00ebve n\u00eb Linux | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve. Ne po futemi aktivisht n\u00eb pun\u00eb dhe tashm\u00eb n\u00eb janar po p\u00ebrgatisim shum\u00eb lan\u00e7ime t\u00eb fuqishme. Nd\u00ebr t\u00eb tjera, \u00ebsht\u00eb shpallur regjistrimi p\u00ebr nj\u00eb grup t\u00eb ri t\u00eb kursit t\u00eb dashur \"Administratori Linux\". N\u00eb prag t\u00eb lan\u00e7imit, natyrisht, po ndajm\u00eb p\u00ebrkthimin e materialit t\u00eb dobish\u00ebm. Lejet e skedar\u00ebve ofrojn\u00eb nj\u00eb alternativ\u00eb t\u00eb sigurt p\u00ebr skedar\u00ebt e ekzekutuesh\u00ebm SUID, por mund t\u00eb duken pak t\u00eb ngat\u00ebrruara n\u00eb shikim t\u00eb par\u00eb. T\u00eb gjith\u00eb e dim\u00eb se","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}