ืคึผืจืึธืืขืงื ืึทืกืขืืืืื ืืขื ืขื ืฆืืืขืืจืืื
ืืืืคึผื
- ืืึทื ืืึธื ืืืจืื ื ืืืืฃ 4 ืคึผืึทืจืืืฉืึทื ื "/", "/ ืฉืืืืื", "/ ืืืึทืจ" ืืื "/ ืืืื". ืื "/" ืืื "/ ืฉืืืืื" ืคึผืึทืจืืืฉืึทื ื ืืขื ืขื ืืึธืื ืืขื ืืื ืืืืขื ืขื-ืืืืื ืืึธืืข, ืืื "/ ืืืื" ืืื "/ ืืืึทืจ" ืืขื ืขื ืืึธืื ืืขื ืืื ื ืึธืขืงืกืขืง ืืึธืืข;
- ืงืขืจื ืขื ืืึทืืข CONFIG_SETCAP. ืื ืกืขืืงืึทืคึผ ืืึธืืืืข ืงืขื ืขื ืืืกืืืืึทื ืกืคึผืขืกืืคืืขื ืกืืกืืขื ืงืืืคึผืึทืืืืึทืืื ืึธืืขืจ ืืขืื ืืื ืคึฟืึทืจ ืึทืืข ืืืืขืจื. ืืขืจ ืืึธืืืืข ืืื ืงืึทื ืคืืืืขืจื ืืืจื ืื ืกืืคึผืขืจืืกืขืจ ืืฉืขืช ืื ืกืืกืืขื ืืื ืคืืืกื ืืืง ืืืจื ืื sysctl ืฆืืืื ื ืึธืืขืจ /proc/sys/setcap ืืขืงืขืก ืืื ืงืขื ืขื ืืืื ืคืึทืจืคืจืืืจื ืคืื ืืืื ืขื ืืขืจืื ืืขื ืืื ืืขืจ ืืืืึทืืขืจ ืจืขืืึธืึธื.
ืืื ื ืึธืจืืึทื ืืึธืืข, CAP_CHOWN(0), CAP_DAC_OVERRIDE(1), CAP_DAC_READ_SEARCH(2), CAP_FOWNER(3) ืืื 21(CAP_SYS_ADMIN) ืืขื ืขื ืคืึทืจืงืจืืคึผืื ืืื ืื ืกืืกืืขื. ืื ืกืืกืืขื ืืื ืืืืืขืงืขืจื ืฆื ืืืื ื ืึธืจืืึทื ืฉืืึทื ืืื ืื ืืืื ืืืืึทืจืข-ืืขืคืึธืจืขืืืื ืืึทืคึฟืขื (ืืึทืื ืืื ื ืืื ืงืืืคึผืึทืืืืึทืืื). ืืึทืืืจื ืืืืฃ ืื ืืึธืืืืข, ืืืจ ืงืขื ืขื ืึทื ืืืืืงืืขื ืื ืืึทืจื ืึทืก ืคืื ืืืืขืจ ืืขืืืขืืก. - ืงืึธืจ ืืึทืืข PROC_RESTRICT_ACCESS. ืืขืจ ืึธืคึผืฆืืข ืืืืึทืฅ ืึทืงืกืขืก ืฆื ืื /proc/pid ืืืจืขืงืืขืจืื ืืื ืื /proc ืืขืงืข ืกืืกืืขื ืคึฟืื 555 ืฆื 750, ืืฉืขืช ืื ืืจืืคึผืข ืคืื โโโโืึทืืข ืืืจืขืงืืขืจืื ืืื ืึทืกืืื ื ืฆื ืืืึธืจืฆื. ืืขืจืืืขืจ, ื ืืฆืขืจืก ืืขื ืืืืื ืืืืขืจ ืคึผืจืึทืกืขืกืึทื ืืื ืื "ืคึผืก" ืืึทืคึฟืขื. ืืืึธืจืฆื ื ืึธื ืืขื ืึทืืข ืคึผืจืึทืกืขืกืึทื ืืื ืื ืกืืกืืขื.
- CONFIG_FS_ADVANCED_CHOWN ืงืขืจื ืืึทืืข ืฆื ืืึธืื ืจืขืืืืขืจ ื ืืฆืขืจืก ืฆื ืืืืฉื ืึธืื ืขืจืฉืืคึผ ืคืื ืืขืงืขืก ืืื ืกืืืืืจืขืงืืึธืจืืขืก ืืื ืืืืขืจ ืืืจืขืงืืขืจืื.
- ืขืืืขืืข ืขื ืืขืจืื ืืขื ืฆื ืคืขืืืงืืึทื ืกืขืืืื ืืก (ืืืฉื UMASK ืฉืืขืื ืฆื 077).
ืืงืืจ: opennet.ru