{"id":16483,"date":"2026-08-31T10:43:47","date_gmt":"2026-08-31T07:43:47","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16483"},"modified":"2026-08-31T10:43:47","modified_gmt":"2026-08-31T07:43:47","slug":"vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/","title":{"rendered":"VPS&#8217;te Ge\u00e7ici Dosya (\/tmp) Alan\u0131n\u0131n G\u00fcvenli\u011fi Nas\u0131l Sa\u011flan\u0131r?"},"content":{"rendered":"<p>Linux tabanl\u0131 i\u015fletim sistemlerinde, \/tmp dizini genellikle g\u00f6z ard\u0131 edilen ancak sunucu g\u00fcvenli\u011fi i\u00e7in hayati \u00f6neme sahip bir bile\u015fendir. Uygulamalar\u0131n ve sistem servislerinin ge\u00e7ici dosyalar olu\u015fturdu\u011fu bu alan, do\u011fru yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131nda ciddi g\u00fcvenlik zafiyetlerine yol a\u00e7abilir. \u00d6zellikle payla\u015f\u0131ml\u0131 kaynaklara sahip olan ve s\u00fcrekli d\u0131\u015f tehditlere maruz kalan sanal sunucularda (VPS), \/tmp dizininin g\u00fcvenli\u011fini sa\u011flamak, yetkisiz eri\u015fimleri, zararl\u0131 yaz\u0131l\u0131m s\u0131zmalar\u0131n\u0131 ve veri ihlallerini \u00f6nlemenin ilk ad\u0131mlar\u0131ndan biridir. Bu makalede, \/tmp dizininin ne oldu\u011funu, bar\u0131nd\u0131rd\u0131\u011f\u0131 riskleri ve bu riskleri ortadan kald\u0131rmak i\u00e7in at\u0131lmas\u0131 gereken ad\u0131mlar\u0131 detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aa686dcaf045\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6aa686dcaf045\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmp-Dizinine-Giris-ve-Guvenlik-Riskinin-Anlasilmasi\" >\/tmp Dizinine Giri\u015f ve G\u00fcvenlik Riskinin Anla\u015f\u0131lmas\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmp-Dizini-Nedir-ve-Isletim-Sistemindeki-Rolu\" >\/tmp Dizini Nedir ve \u0130\u015fletim Sistemindeki Rol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Guvenligi-Saglanmamis-Bir-tmp-Dizinine-Iliskin-Potansiyel-Tehditler\" >G\u00fcvenli\u011fi Sa\u011flanmam\u0131\u015f Bir \/tmp Dizinine \u0130li\u015fkin Potansiyel Tehditler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#VPS-Sunucularinda-tmp-Guvenliginin-Ozel-Onemi\" >VPS Sunucular\u0131nda \/tmp G\u00fcvenli\u011finin \u00d6zel \u00d6nemi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmp-Dizini-Uzerinden-Gerceklestirilebilen-Yaygin-Saldiri-Vektorleri\" >\/tmp Dizini \u00dczerinden Ger\u00e7ekle\u015ftirilebilen Yayg\u0131n Sald\u0131r\u0131 Vekt\u00f6rleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Yetkisiz-Kod-ve-Betik-Calistirma-Script-Execution\" >Yetkisiz Kod ve Betik \u00c7al\u0131\u015ft\u0131rma (Script Execution)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Sembolik-Baglanti-Symlink-Saldirilari-ile-Yetki-Yukseltme\" >Sembolik Ba\u011flant\u0131 (Symlink) Sald\u0131r\u0131lar\u0131 ile Yetki Y\u00fckseltme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Gecici-Dosyalar-Araciligiyla-Veri-Sizintisi-ve-Bilgi-Toplama\" >Ge\u00e7ici Dosyalar Arac\u0131l\u0131\u011f\u0131yla Veri S\u0131z\u0131nt\u0131s\u0131 ve Bilgi Toplama<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Rootkit-ve-Zararli-Yazilimlarin-Barindirilmasi\" >Rootkit ve Zararl\u0131 Yaz\u0131l\u0131mlar\u0131n Bar\u0131nd\u0131r\u0131lmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Dosya-Sistemi-Kaynaklarini-Tuketerek-Hizmet-Reddi-Denial-of-Service-Saldirilari\" >Dosya Sistemi Kaynaklar\u0131n\u0131 T\u00fcketerek Hizmet Reddi (Denial of Service) Sald\u0131r\u0131lar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Temel-Guvenlik-Adimi-tmp-Icin-Ayri-Bir-Disk-Bolumu-Partition-Olusturmak\" >Temel G\u00fcvenlik Ad\u0131m\u0131: \/tmp \u0130\u00e7in Ayr\u0131 Bir Disk B\u00f6l\u00fcm\u00fc (Partition) Olu\u015fturmak<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Ayri-Bir-Bolum-Kullanmanin-Guvenlik-Avantajlari\" >Ayr\u0131 Bir B\u00f6l\u00fcm Kullanman\u0131n G\u00fcvenlik Avantajlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#fdisk-veya-parted-ile-Yeni-Bir-Disk-Bolumu-Yaratma\" >fdisk veya parted ile Yeni Bir Disk B\u00f6l\u00fcm\u00fc Yaratma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#mkfs-Komutu-ile-Bolumu-Bicimlendirme-ext4-xfs-vb\" >mkfs Komutu ile B\u00f6l\u00fcm\u00fc Bi\u00e7imlendirme (ext4, xfs vb.)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#etcfstab-Dosyasini-Duzenleyerek-Bolumu-Kalici-Olarak-Baglama\" >\/etc\/fstab Dosyas\u0131n\u0131 D\u00fczenleyerek B\u00f6l\u00fcm\u00fc Kal\u0131c\u0131 Olarak Ba\u011flama<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmp-Bolumunu-Guvenli-Seceneklerle-Sisteme-Dahil-Etme-Mounting\" >\/tmp B\u00f6l\u00fcm\u00fcn\u00fc G\u00fcvenli Se\u00e7eneklerle Sisteme Dahil Etme (Mounting)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#noexec-Secenegi-Calistirilabilir-Dosyalarin-Engellenmesi\" >`noexec` Se\u00e7ene\u011fi: \u00c7al\u0131\u015ft\u0131r\u0131labilir Dosyalar\u0131n Engellenmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#nosuid-Secenegi-SUIDSGID-Izinlerinin-Devre-Disi-Birakilmasi\" >`nosuid` Se\u00e7ene\u011fi: SUID\/SGID \u0130zinlerinin Devre D\u0131\u015f\u0131 B\u0131rak\u0131lmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#nodev-Secenegi-Aygit-Device-Dosyalarinin-Yorumlanmasinin-Onlenmesi\" >`nodev` Se\u00e7ene\u011fi: Ayg\u0131t (Device) Dosyalar\u0131n\u0131n Yorumlanmas\u0131n\u0131n \u00d6nlenmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Guvenli-Secenekleri-Iceren-Ornek-Bir-etcfstab-Satiri-ve-Analizi\" >G\u00fcvenli Se\u00e7enekleri \u0130\u00e7eren \u00d6rnek Bir \/etc\/fstab Sat\u0131r\u0131 ve Analizi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#RAM-Uzerinde-Calisan-Gecici-Dosya-Sistemi-tmpfs-Kullanimi\" >RAM \u00dczerinde \u00c7al\u0131\u015fan Ge\u00e7ici Dosya Sistemi: tmpfs Kullan\u0131m\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmpfs-Nedir-ve-Geleneksel-Disk-Bolumunden-Farklari\" >tmpfs Nedir ve Geleneksel Disk B\u00f6l\u00fcm\u00fcnden Farklar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmpfs-Kullanmanin-Performans-ve-Guvenlik-Acisindan-Faydalari\" >tmpfs Kullanman\u0131n Performans ve G\u00fcvenlik A\u00e7\u0131s\u0131ndan Faydalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmp-Dizini-Icin-tmpfs-Yapilandirmasi-ve-Boyut-Sinirlamasi\" >\/tmp Dizini \u0130\u00e7in tmpfs Yap\u0131land\u0131rmas\u0131 ve Boyut S\u0131n\u0131rlamas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmpfs-ile-Kalici-Disk-Bolumu-Yonteminin-Karsilastirilmasi\" >tmpfs ile Kal\u0131c\u0131 Disk B\u00f6l\u00fcm\u00fc Y\u00f6nteminin Kar\u015f\u0131la\u015ft\u0131r\u0131lmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Ileri-Duzey-Guvenlik-Onlemleri-ve-Iyi-Uygulamalar\" >\u0130leri D\u00fczey G\u00fcvenlik \u00d6nlemleri ve \u0130yi Uygulamalar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Sticky-Bit-Izninin-tmp-icin-1777-Anlami-ve-Kontrolu\" >Sticky Bit \u0130zninin (\/tmp i\u00e7in 1777) Anlam\u0131 ve Kontrol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#tmpwatch-veya-tmpreaper-ile-tmp-Dizinini-Periyodik-Olarak-Temizleme\" >tmpwatch veya tmpreaper ile \/tmp Dizinini Periyodik Olarak Temizleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Dosya-Sistemi-Izleme-Araclariyla-Inotify-Auditd-tmp-Aktivitelerinin-Takibi\" >Dosya Sistemi \u0130zleme Ara\u00e7lar\u0131yla (Inotify, Auditd) \/tmp Aktivitelerinin Takibi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#AppArmor-veya-SELinux-Profilleri-ile-tmp-Erisiminin-Kisitlanmasi\" >AppArmor veya SELinux Profilleri ile \/tmp Eri\u015fiminin K\u0131s\u0131tlanmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Yapilandirmanin-Dogrulanmasi-ve-Test-Edilmesi\" >Yap\u0131land\u0131rman\u0131n Do\u011frulanmas\u0131 ve Test Edilmesi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#mount-grep-tmp-Komutu-ile-Baglama-Seceneklerini-Kontrol-Etme\" >`mount | grep \/tmp` Komutu ile Ba\u011flama Se\u00e7eneklerini Kontrol Etme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#noexec-Korumasini-Test-Etme-Ornek-Bir-Betik-Calistirma-Denemesi\" >`noexec` Korumas\u0131n\u0131 Test Etme: \u00d6rnek Bir Betik \u00c7al\u0131\u015ft\u0131rma Denemesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#nosuid-Korumasini-Test-Etme-SUID-Biti-Atanmis-Bir-Dosya-Olusturma-Denemesi\" >`nosuid` Korumas\u0131n\u0131 Test Etme: SUID Biti Atanm\u0131\u015f Bir Dosya Olu\u015fturma Denemesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#VPSte-tmp-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >VPS&#8217;te \/tmp G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Guvenlik-Odakli-ve-Ozellestirilebilir-Sunucu-Yapilandirmalari\" >G\u00fcvenlik Odakl\u0131 ve \u00d6zelle\u015ftirilebilir Sunucu Yap\u0131land\u0131rmalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Uzman-Teknik-Destek-Ekibinden-Yapilandirma-Yardimi\" >Uzman Teknik Destek Ekibinden Yap\u0131land\u0131rma Yard\u0131m\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Yuksek-Performansli-Donanim-ile-tmpfs-Kullaniminda-Verimlilik\" >Y\u00fcksek Performansl\u0131 Donan\u0131m ile tmpfs Kullan\u0131m\u0131nda Verimlilik<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.ihs.com.tr\/blog\/vps-te-gecici-dosya-tmp-alaninin-guvenligi-nasil-saglanir\/#Gelismis-Guvenlik-Servisleri-ve-Danismanlik-Hizmetleri\" >Geli\u015fmi\u015f G\u00fcvenlik Servisleri ve Dan\u0131\u015fmanl\u0131k Hizmetleri<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"tmp-Dizinine-Giris-ve-Guvenlik-Riskinin-Anlasilmasi\"><\/span>\/tmp Dizinine Giri\u015f ve G\u00fcvenlik Riskinin Anla\u015f\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Her sunucu y\u00f6neticisinin bilmesi gereken temel konulardan biri, \/tmp dizininin i\u015flevi ve potansiyel tehlikeleridir. Bu b\u00f6l\u00fcm, \/tmp dizininin temellerini ve neden \u00f6zel bir g\u00fcvenlik \u00f6nlemi gerektirdi\u011fini a\u00e7\u0131klamaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmp-Dizini-Nedir-ve-Isletim-Sistemindeki-Rolu\"><\/span>\/tmp Dizini Nedir ve \u0130\u015fletim Sistemindeki Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizini, Linux ve di\u011fer UNIX benzeri i\u015fletim sistemlerinde, t\u00fcm kullan\u0131c\u0131lar ve uygulamalar taraf\u0131ndan yaz\u0131labilir olan genel bir klas\u00f6rd\u00fcr. Ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, &#8220;temporary&#8221; (ge\u00e7ici) kelimesinin k\u0131saltmas\u0131d\u0131r. Programlar \u00e7al\u0131\u015f\u0131rken ihtiya\u00e7 duyduklar\u0131 ge\u00e7ici dosyalar\u0131, oturum bilgilerini, \u00f6nbellek verilerini veya anl\u0131k i\u015flem \u00e7\u0131kt\u0131lar\u0131n\u0131 bu dizinde saklar. Sistemin yeniden ba\u015flat\u0131lmas\u0131yla birlikte bu dizindeki verilerin b\u00fcy\u00fck \u00e7o\u011funlu\u011fu silinir. Bu evrensel yazma izni, onu i\u015flevsel k\u0131larken ayn\u0131 zamanda bir g\u00fcvenlik riski haline getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenligi-Saglanmamis-Bir-tmp-Dizinine-Iliskin-Potansiyel-Tehditler\"><\/span>G\u00fcvenli\u011fi Sa\u011flanmam\u0131\u015f Bir \/tmp Dizinine \u0130li\u015fkin Potansiyel Tehditler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>E\u011fer \/tmp dizini varsay\u0131lan ayarlarla b\u0131rak\u0131l\u0131rsa, sald\u0131rganlar i\u00e7in bir giri\u015f kap\u0131s\u0131 haline gelebilir. Buraya yerle\u015ftirilen zararl\u0131 bir betik (script), sunucudaki bir ba\u015fka zafiyetle birle\u015fti\u011finde \u00e7al\u0131\u015ft\u0131r\u0131labilir ve sistem \u00fczerinde yetki elde edilebilir. Ayr\u0131ca, di\u011fer kullan\u0131c\u0131lar\u0131n ge\u00e7ici dosyalar\u0131na eri\u015fim, veri s\u0131z\u0131nt\u0131lar\u0131na veya hizmetlerin i\u015fleyi\u015finin bozulmas\u0131na neden olabilir. Bu tehditler, basit bir ihmalin ne kadar b\u00fcy\u00fck sorunlara yol a\u00e7abilece\u011finin bir g\u00f6stergesidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-Sunucularinda-tmp-Guvenliginin-Ozel-Onemi\"><\/span>VPS Sunucular\u0131nda \/tmp G\u00fcvenli\u011finin \u00d6zel \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>VPS (Virtual Private Server) ortamlar\u0131, kaynaklar\u0131n sanalla\u015ft\u0131r\u0131larak birden fazla kullan\u0131c\u0131ya payla\u015ft\u0131r\u0131ld\u0131\u011f\u0131 yap\u0131lard\u0131r. Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">vps<\/a> \u00fczerindeki bir kullan\u0131c\u0131n\u0131n g\u00fcvenlik a\u00e7\u0131\u011f\u0131, ayn\u0131 fiziksel makinedeki di\u011fer kullan\u0131c\u0131lar\u0131 da etkileyebilir. Bu nedenle, \/tmp g\u00fcvenli\u011fi gibi izolasyon ve koruma mekanizmalar\u0131, VPS sunucular\u0131nda standart bir sunucuya g\u00f6re \u00e7ok daha kritiktir. G\u00fcvenli\u011fi sa\u011flanmam\u0131\u015f bir \/tmp, sald\u0131rgan\u0131n sadece bir hesab\u0131 de\u011fil, t\u00fcm sunucuyu tehlikeye atmas\u0131na olanak tan\u0131yabilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"tmp-Dizini-Uzerinden-Gerceklestirilebilen-Yaygin-Saldiri-Vektorleri\"><\/span>\/tmp Dizini \u00dczerinden Ger\u00e7ekle\u015ftirilebilen Yayg\u0131n Sald\u0131r\u0131 Vekt\u00f6rleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sald\u0131rganlar, hedeflerine ula\u015fmak i\u00e7in genellikle en zay\u0131f halkay\u0131 ararlar ve yap\u0131land\u0131r\u0131lmam\u0131\u015f bir \/tmp dizini tam da b\u00f6yle bir hedeftir. Bu b\u00f6l\u00fcmde, bu dizin \u00fczerinden ger\u00e7ekle\u015ftirilebilecek yayg\u0131n sald\u0131r\u0131 t\u00fcrlerini inceleyece\u011fiz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yetkisiz-Kod-ve-Betik-Calistirma-Script-Execution\"><\/span>Yetkisiz Kod ve Betik \u00c7al\u0131\u015ft\u0131rma (Script Execution)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En yayg\u0131n sald\u0131r\u0131 t\u00fcrlerinden biri, sald\u0131rgan\u0131n \/tmp dizinine zararl\u0131 bir betik (\u00f6rne\u011fin bir Perl, Python veya Shell scripti) y\u00fcklemesidir. Ard\u0131ndan, sunucudaki ba\u015fka bir zay\u0131fl\u0131\u011f\u0131 (\u00f6rne\u011fin, bir web uygulamas\u0131ndaki komut enjeksiyonu a\u00e7\u0131\u011f\u0131) kullanarak bu beti\u011fi tetikler. \/tmp dizini \u00e7al\u0131\u015ft\u0131r\u0131labilir dosyalara izin verecek \u015fekilde ayarlanm\u0131\u015fsa, bu betik sistemde \u00e7al\u0131\u015f\u0131r ve sald\u0131rgan\u0131n sunucu \u00fczerinde kontrol sahibi olmas\u0131na yol a\u00e7abilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sembolik-Baglanti-Symlink-Saldirilari-ile-Yetki-Yukseltme\"><\/span>Sembolik Ba\u011flant\u0131 (Symlink) Sald\u0131r\u0131lar\u0131 ile Yetki Y\u00fckseltme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sembolik ba\u011flant\u0131 (symlink) sald\u0131r\u0131lar\u0131 daha karma\u015f\u0131k bir y\u00f6ntemdir. Sald\u0131rgan, \/tmp dizininde, normalde eri\u015femeyece\u011fi kritik bir sistem dosyas\u0131na (\u00f6rne\u011fin `\/etc\/passwd`) i\u015faret eden bir sembolik ba\u011flant\u0131 olu\u015fturur. Ard\u0131ndan, k\u00f6k (root) yetkileriyle \u00e7al\u0131\u015fan ve \/tmp dizinindeki bir dosyaya yazma i\u015flemi yapan me\u015fru bir uygulaman\u0131n (\u00f6rne\u011fin bir g\u00fcncelleme beti\u011fi) bu sembolik ba\u011flant\u0131n\u0131n \u00fczerine yazmas\u0131n\u0131 tetikler. Sonu\u00e7 olarak, uygulama asl\u0131nda kritik sistem dosyas\u0131n\u0131 de\u011fi\u015ftirmi\u015f olur ve bu da yetki y\u00fckseltme gibi ciddi sonu\u00e7lara yol a\u00e7abilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gecici-Dosyalar-Araciligiyla-Veri-Sizintisi-ve-Bilgi-Toplama\"><\/span>Ge\u00e7ici Dosyalar Arac\u0131l\u0131\u011f\u0131yla Veri S\u0131z\u0131nt\u0131s\u0131 ve Bilgi Toplama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Uygulamalar, \/tmp dizinine bazen hassas bilgiler i\u00e7eren ge\u00e7ici dosyalar yazabilir. \u00d6rne\u011fin, bir veritaban\u0131 yedekleme beti\u011fi ge\u00e7ici olarak parola bilgilerini veya bir web formu kullan\u0131c\u0131 verilerini buraya kaydedebilir. E\u011fer dosya izinleri do\u011fru ayarlanmazsa, sunucuda d\u00fc\u015f\u00fck yetkili bir kullan\u0131c\u0131 bu dosyalara eri\u015ferek \u00f6nemli bilgileri ele ge\u00e7irebilir. Bu, sald\u0131r\u0131n\u0131n sonraki a\u015famalar\u0131 i\u00e7in bilgi toplama amac\u0131yla da kullan\u0131labilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Rootkit-ve-Zararli-Yazilimlarin-Barindirilmasi\"><\/span>Rootkit ve Zararl\u0131 Yaz\u0131l\u0131mlar\u0131n Bar\u0131nd\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizini, evrensel yazma izni sayesinde rootkit&#8217;lerin ve di\u011fer zararl\u0131 yaz\u0131l\u0131mlar\u0131n ilk b\u0131rak\u0131ld\u0131\u011f\u0131 yerlerden biridir. Sald\u0131rgan, ele ge\u00e7irdi\u011fi bir sunucuda kal\u0131c\u0131l\u0131k sa\u011flamak i\u00e7in zararl\u0131 yaz\u0131l\u0131m bile\u015fenlerini \u00f6nce \/tmp&#8217;ye y\u00fckler ve oradan sistemin daha derinlerine yaymaya \u00e7al\u0131\u015f\u0131r. Bu dizinin d\u00fczenli olarak izlenmemesi, zararl\u0131 yaz\u0131l\u0131mlar\u0131n uzun s\u00fcre fark edilmeden kalmas\u0131na neden olabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dosya-Sistemi-Kaynaklarini-Tuketerek-Hizmet-Reddi-Denial-of-Service-Saldirilari\"><\/span>Dosya Sistemi Kaynaklar\u0131n\u0131 T\u00fcketerek Hizmet Reddi (Denial of Service) Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>E\u011fer \/tmp dizini i\u00e7in bir boyut s\u0131n\u0131r\u0131 (quota) belirlenmemi\u015fse, bir sald\u0131rgan veya hatal\u0131 \u00e7al\u0131\u015fan bir betik, bu dizini anlams\u0131z verilerle doldurarak disk alan\u0131n\u0131n tamam\u0131n\u0131 t\u00fcketebilir. Bu durum, sunucunun yeni ge\u00e7ici dosya olu\u015fturamamas\u0131na ve bir\u00e7ok sistem hizmetinin (veritabanlar\u0131, web sunucular\u0131 vb.) durmas\u0131na neden olur. Bu, etkili bir Hizmet Reddi (Denial of Service &#8211; DoS) sald\u0131r\u0131s\u0131d\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Temel-Guvenlik-Adimi-tmp-Icin-Ayri-Bir-Disk-Bolumu-Partition-Olusturmak\"><\/span>Temel G\u00fcvenlik Ad\u0131m\u0131: \/tmp \u0130\u00e7in Ayr\u0131 Bir Disk B\u00f6l\u00fcm\u00fc (Partition) Olu\u015fturmak<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\/tmp dizinini sunucunun ana dosya sisteminden ay\u0131rmak, g\u00fcvenli\u011fi art\u0131rman\u0131n en temel ve etkili yollar\u0131ndan biridir. Bu i\u015flem, olas\u0131 bir sald\u0131r\u0131n\u0131n etkisini \/tmp ile s\u0131n\u0131rlayarak t\u00fcm sistemi koruma alt\u0131na al\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ayri-Bir-Bolum-Kullanmanin-Guvenlik-Avantajlari\"><\/span>Ayr\u0131 Bir B\u00f6l\u00fcm Kullanman\u0131n G\u00fcvenlik Avantajlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizinini ayr\u0131 bir disk b\u00f6l\u00fcm\u00fcne ta\u015f\u0131mak, birka\u00e7 \u00f6nemli avantaj sa\u011flar. \u0130lk olarak, bu b\u00f6l\u00fcme \u00f6zel ba\u011flama (mount) se\u00e7enekleri belirleyebilirsiniz. \u00d6rne\u011fin, bu b\u00f6l\u00fcmdeki dosyalar\u0131n \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 (`noexec`) veya SUID bitlerinin tan\u0131nmas\u0131n\u0131 (`nosuid`) engelleyebilirsiniz. \u0130kinci olarak, \/tmp dizini tamamen dolsa bile, bu durum sunucunun k\u00f6k (\/) veya di\u011fer kritik dosya sistemlerini etkilemez, b\u00f6ylece DoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 bir koruma katman\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"fdisk-veya-parted-ile-Yeni-Bir-Disk-Bolumu-Yaratma\"><\/span>fdisk veya parted ile Yeni Bir Disk B\u00f6l\u00fcm\u00fc Yaratma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu i\u015flem genellikle sunucu kurulumu s\u0131ras\u0131nda yap\u0131l\u0131r, ancak \u00e7al\u0131\u015fan bir sisteme de eklenebilir. \u00d6ncelikle `fdisk -l` veya `lsblk` komutlar\u0131yla mevcut disk ve b\u00f6l\u00fcmleri listeleyin. Ard\u0131ndan, `fdisk \/dev\/sdX` (X, disk harfidir) gibi bir komutla disk b\u00f6l\u00fcmleme arac\u0131n\u0131 ba\u015flat\u0131n. Yeni bir b\u00f6l\u00fcm olu\u015fturmak i\u00e7in `n` komutunu kullan\u0131n, b\u00f6l\u00fcm tipini (genellikle primary), ba\u015flang\u0131\u00e7 ve biti\u015f sekt\u00f6rlerini belirleyin. Boyut olarak genellikle 1GB ile 4GB aras\u0131 bir alan yeterli olacakt\u0131r. De\u011fi\u015fiklikleri kaydetmek i\u00e7in `w` komutunu kullan\u0131n.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"mkfs-Komutu-ile-Bolumu-Bicimlendirme-ext4-xfs-vb\"><\/span>mkfs Komutu ile B\u00f6l\u00fcm\u00fc Bi\u00e7imlendirme (ext4, xfs vb.)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yeni olu\u015fturulan b\u00f6l\u00fcm\u00fc kullanmadan \u00f6nce bir dosya sistemiyle bi\u00e7imlendirmeniz gerekir. \u00d6rne\u011fin, `\/dev\/sda3` ad\u0131nda yeni bir b\u00f6l\u00fcm olu\u015fturduysan\u0131z, bunu ext4 dosya sistemiyle bi\u00e7imlendirmek i\u00e7in `mkfs.ext4 \/dev\/sda3` komutunu \u00e7al\u0131\u015ft\u0131rmal\u0131s\u0131n\u0131z. Bu komut, b\u00f6l\u00fcm \u00fczerine dosya yaz\u0131labilmesi i\u00e7in gerekli yap\u0131y\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"etcfstab-Dosyasini-Duzenleyerek-Bolumu-Kalici-Olarak-Baglama\"><\/span>\/etc\/fstab Dosyas\u0131n\u0131 D\u00fczenleyerek B\u00f6l\u00fcm\u00fc Kal\u0131c\u0131 Olarak Ba\u011flama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Olu\u015fturdu\u011funuz b\u00f6l\u00fcm\u00fcn sunucu her yeniden ba\u015flad\u0131\u011f\u0131nda otomatik olarak \/tmp dizinine ba\u011flanmas\u0131 i\u00e7in `\/etc\/fstab` dosyas\u0131n\u0131 d\u00fczenlemeniz gerekir. Bu dosyaya, yeni b\u00f6l\u00fcm\u00fc, ba\u011flanma noktas\u0131n\u0131, dosya sistemi t\u00fcr\u00fcn\u00fc ve en \u00f6nemlisi g\u00fcvenlik se\u00e7eneklerini i\u00e7eren bir sat\u0131r eklenir. Bu ad\u0131m, yap\u0131land\u0131rman\u0131n kal\u0131c\u0131 olmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"tmp-Bolumunu-Guvenli-Seceneklerle-Sisteme-Dahil-Etme-Mounting\"><\/span>\/tmp B\u00f6l\u00fcm\u00fcn\u00fc G\u00fcvenli Se\u00e7eneklerle Sisteme Dahil Etme (Mounting)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\/tmp i\u00e7in ayr\u0131 bir b\u00f6l\u00fcm olu\u015fturduktan sonraki en kritik ad\u0131m, bu b\u00f6l\u00fcm\u00fc sisteme dahil ederken (mount ederken) do\u011fru g\u00fcvenlik se\u00e7eneklerini kullanmakt\u0131r. Bu se\u00e7enekler, \/tmp \u00fczerinden gelebilecek tehditlerin b\u00fcy\u00fck bir k\u0131sm\u0131n\u0131 proaktif olarak engeller.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"noexec-Secenegi-Calistirilabilir-Dosyalarin-Engellenmesi\"><\/span>`noexec` Se\u00e7ene\u011fi: \u00c7al\u0131\u015ft\u0131r\u0131labilir Dosyalar\u0131n Engellenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`noexec` (no-execute) se\u00e7ene\u011fi, bir dosya sistemindeki dosyalar\u0131n \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na izin verilmemesini sa\u011flar. Bu, \/tmp g\u00fcvenli\u011findeki en \u00f6nemli ad\u0131md\u0131r. Bir sald\u0131rgan \/tmp dizinine zararl\u0131 bir betik y\u00fcklese bile, `noexec` se\u00e7ene\u011fi sayesinde i\u015fletim sistemi bu beti\u011fi \u00e7al\u0131\u015ft\u0131rmay\u0131 reddedecektir. Bu basit \u00f6nlem, yetkisiz kod \u00e7al\u0131\u015ft\u0131rma sald\u0131r\u0131lar\u0131n\u0131 neredeyse tamamen imkans\u0131z hale getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"nosuid-Secenegi-SUIDSGID-Izinlerinin-Devre-Disi-Birakilmasi\"><\/span>`nosuid` Se\u00e7ene\u011fi: SUID\/SGID \u0130zinlerinin Devre D\u0131\u015f\u0131 B\u0131rak\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`nosuid` se\u00e7ene\u011fi, SUID (Set User ID) ve SGID (Set Group ID) bitlerinin bu dosya sisteminde yok say\u0131lmas\u0131n\u0131 sa\u011flar. SUID biti, bir dosyan\u0131n, onu \u00e7al\u0131\u015ft\u0131ran kullan\u0131c\u0131 kimli\u011fiyle de\u011fil, dosyan\u0131n sahibi olan kullan\u0131c\u0131 (genellikle root) kimli\u011fiyle \u00e7al\u0131\u015fmas\u0131na izin verir. Sald\u0131rganlar, \/tmp dizinine SUID biti ayarlanm\u0131\u015f bir dosya koyarak yetki y\u00fckseltmeye \u00e7al\u0131\u015fabilir. `nosuid` se\u00e7ene\u011fi, bu t\u00fcr bir sald\u0131r\u0131 giri\u015fimini ba\u015f\u0131ndan engeller.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"nodev-Secenegi-Aygit-Device-Dosyalarinin-Yorumlanmasinin-Onlenmesi\"><\/span>`nodev` Se\u00e7ene\u011fi: Ayg\u0131t (Device) Dosyalar\u0131n\u0131n Yorumlanmas\u0131n\u0131n \u00d6nlenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`nodev` se\u00e7ene\u011fi, karakter veya blok ayg\u0131t dosyalar\u0131n\u0131n (\u00f6rne\u011fin `\/dev\/sda` gibi disk ayg\u0131tlar\u0131) bu dosya sisteminde yorumlanmas\u0131n\u0131 \u00f6nler. Sald\u0131rganlar, \/tmp dizininde sahte ayg\u0131t dosyalar\u0131 olu\u015fturarak donan\u0131ma veya hassas sistem kaynaklar\u0131na do\u011frudan eri\u015fmeye \u00e7al\u0131\u015fabilirler. `nodev` bu riski ortadan kald\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenli-Secenekleri-Iceren-Ornek-Bir-etcfstab-Satiri-ve-Analizi\"><\/span>G\u00fcvenli Se\u00e7enekleri \u0130\u00e7eren \u00d6rnek Bir \/etc\/fstab Sat\u0131r\u0131 ve Analizi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yukar\u0131daki t\u00fcm se\u00e7enekleri bir araya getirdi\u011fimizde, `\/etc\/fstab` dosyas\u0131na eklenecek sat\u0131r \u015fu \u015fekilde g\u00f6r\u00fcnmelidir:<\/p>\n<p><code>\/dev\/sda3 \/tmp ext4 defaults,nosuid,nodev,noexec 0 0<\/code><\/p>\n<p>Bu sat\u0131r\u0131n analizi \u015f\u00f6yledir:<\/p>\n<ul>\n<li><b>\/dev\/sda3:<\/b> G\u00fcvenli hale getirmek istedi\u011fimiz disk b\u00f6l\u00fcm\u00fcn\u00fcn ad\u0131.<\/li>\n<li><b>\/tmp:<\/b> Bu b\u00f6l\u00fcm\u00fcn ba\u011flanaca\u011f\u0131 dizin.<\/li>\n<li><b>ext4:<\/b> B\u00f6l\u00fcm\u00fcn dosya sistemi t\u00fcr\u00fc.<\/li>\n<li><b>defaults,nosuid,nodev,noexec:<\/b> Ba\u011flama se\u00e7enekleri. `defaults` standart se\u00e7enekleri i\u00e7erirken, devam\u0131ndaki `nosuid`, `nodev` ve `noexec` kritik g\u00fcvenlik katmanlar\u0131n\u0131 ekler.<\/li>\n<li><b>0 0:<\/b> Bu de\u011ferler, dosya sistemi denetimi (fsck) ve yedekleme (dump) ayarlar\u0131yla ilgilidir ve \/tmp i\u00e7in genellikle 0 olarak ayarlan\u0131r.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"RAM-Uzerinde-Calisan-Gecici-Dosya-Sistemi-tmpfs-Kullanimi\"><\/span>RAM \u00dczerinde \u00c7al\u0131\u015fan Ge\u00e7ici Dosya Sistemi: tmpfs Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\/tmp dizinini g\u00fcvenli hale getirmenin bir di\u011fer modern ve pop\u00fcler y\u00f6ntemi, fiziksel bir disk b\u00f6l\u00fcm\u00fc yerine sistemin belle\u011fini (RAM) kullanan `tmpfs` dosya sistemini tercih etmektir. Bu yakla\u015f\u0131m hem performans hem de g\u00fcvenlik a\u00e7\u0131s\u0131ndan \u00f6nemli avantajlar sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmpfs-Nedir-ve-Geleneksel-Disk-Bolumunden-Farklari\"><\/span>tmpfs Nedir ve Geleneksel Disk B\u00f6l\u00fcm\u00fcnden Farklar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`tmpfs`, i\u00e7eri\u011fini fiziksel bir diskte de\u011fil, sanal bellekte (RAM ve gerekirse takas alan\u0131 &#8211; swap) saklayan ge\u00e7ici bir dosya sistemidir. Bu sayede dosya okuma\/yazma i\u015flemleri disk G\/\u00c7 (I\/O) beklemesi olmadan, bellek h\u0131z\u0131nda ger\u00e7ekle\u015fir. Geleneksel disk b\u00f6l\u00fcm\u00fcnden en temel fark\u0131, sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda i\u00e7eri\u011finin tamamen kaybolmas\u0131 ve disk yerine RAM kaynaklar\u0131n\u0131 t\u00fcketmesidir. Bu \u00f6zellik, ge\u00e7ici veriler i\u00e7in ideal bir \u00e7\u00f6z\u00fcm sunar ve <a href=\"https:\/\/www.ihs.com.tr\/blog\/redis-ve-memcached-destegi-sunan-hosting-in-performansa-etkisi\/\" target=\"_blank\">Redis ve Memcached gibi bellek i\u00e7i teknolojilerin<\/a> performans mant\u0131\u011f\u0131na benzer.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmpfs-Kullanmanin-Performans-ve-Guvenlik-Acisindan-Faydalari\"><\/span>tmpfs Kullanman\u0131n Performans ve G\u00fcvenlik A\u00e7\u0131s\u0131ndan Faydalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Performans a\u00e7\u0131s\u0131ndan `tmpfs`, disk tabanl\u0131 \u00e7\u00f6z\u00fcmlerden \u00e7ok daha h\u0131zl\u0131d\u0131r. \u00d6zellikle s\u0131k s\u0131k ge\u00e7ici dosya olu\u015fturan web uygulamalar\u0131 veya derleme i\u015flemleri i\u00e7in bu fark belirgindir. G\u00fcvenlik a\u00e7\u0131s\u0131ndan ise, `tmpfs` do\u011fas\u0131 gere\u011fi ge\u00e7icidir; sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda t\u00fcm zararl\u0131 dosyalar veya kal\u0131nt\u0131lar otomatik olarak temizlenir. Ayr\u0131ca, `tmpfs` i\u00e7in de `noexec`, `nosuid` ve `nodev` gibi g\u00fcvenlik se\u00e7enekleri rahatl\u0131kla uygulanabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmp-Dizini-Icin-tmpfs-Yapilandirmasi-ve-Boyut-Sinirlamasi\"><\/span>\/tmp Dizini \u0130\u00e7in tmpfs Yap\u0131land\u0131rmas\u0131 ve Boyut S\u0131n\u0131rlamas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizinini `tmpfs` olarak yap\u0131land\u0131rmak i\u00e7in `\/etc\/fstab` dosyas\u0131na a\u015fa\u011f\u0131daki gibi bir sat\u0131r eklenir:<\/p>\n<p><code>tmpfs \/tmp tmpfs defaults,nosuid,nodev,noexec,size=1G 0 0<\/code><\/p>\n<p>Burada en \u00f6nemli parametre `size=1G`&#8217;dir. Bu parametre, \/tmp dizininin kullanabilece\u011fi maksimum RAM miktar\u0131n\u0131 1 Gigabyte ile s\u0131n\u0131rlar. Bu s\u0131n\u0131rland\u0131rmay\u0131 yapmamak, bir uygulaman\u0131n veya sald\u0131rgan\u0131n t\u00fcm sistem belle\u011fini t\u00fcketerek sunucuyu \u00e7\u00f6kertmesine yol a\u00e7abilece\u011fi i\u00e7in hayati \u00f6neme sahiptir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmpfs-ile-Kalici-Disk-Bolumu-Yonteminin-Karsilastirilmasi\"><\/span>tmpfs ile Kal\u0131c\u0131 Disk B\u00f6l\u00fcm\u00fc Y\u00f6nteminin Kar\u015f\u0131la\u015ft\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Her iki y\u00f6ntemin de kendine \u00f6zg\u00fc avantajlar\u0131 ve dezavantajlar\u0131 vard\u0131r. Se\u00e7im, sunucunun kullan\u0131m amac\u0131na ve kaynaklar\u0131na ba\u011fl\u0131d\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>Ayr\u0131 Disk B\u00f6l\u00fcm\u00fc<\/th>\n<th>tmpfs (RAM Diski)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>Performans<\/b><\/td>\n<td>Disk h\u0131z\u0131na ba\u011fl\u0131d\u0131r (SSD&#8217;de h\u0131zl\u0131, HDD&#8217;de yava\u015f).<\/td>\n<td>\u00c7ok y\u00fcksek (RAM h\u0131z\u0131nda).<\/td>\n<\/tr>\n<tr>\n<td><b>Kal\u0131c\u0131l\u0131k<\/b><\/td>\n<td>Yeniden ba\u015flatma sonras\u0131 veriler (genellikle) korunur.<\/td>\n<td>Yeniden ba\u015flatma sonras\u0131 t\u00fcm veriler silinir.<\/td>\n<\/tr>\n<tr>\n<td><b>Kaynak Kullan\u0131m\u0131<\/b><\/td>\n<td>Sabit disk alan\u0131 kullan\u0131r.<\/td>\n<td>RAM ve takas alan\u0131 (swap) kullan\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>G\u00fcvenlik<\/b><\/td>\n<td>`noexec`, `nosuid` vb. ile \u00e7ok g\u00fcvenlidir.<\/td>\n<td>Ayn\u0131 g\u00fcvenlik se\u00e7eneklerini destekler, ayr\u0131ca verilerin ge\u00e7ici olmas\u0131 ek bir avantajd\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>En Uygun Senaryo<\/b><\/td>\n<td>D\u00fc\u015f\u00fck RAM&#8217;e sahip sunucular, yeniden ba\u015flatma sonras\u0131 log veya dosya takibi gereken durumlar.<\/td>\n<td>Y\u00fcksek RAM&#8217;e sahip sunucular, y\u00fcksek I\/O gerektiren uygulamalar (\u00f6r. derleme, yo\u011fun web uygulamalar\u0131).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Ileri-Duzey-Guvenlik-Onlemleri-ve-Iyi-Uygulamalar\"><\/span>\u0130leri D\u00fczey G\u00fcvenlik \u00d6nlemleri ve \u0130yi Uygulamalar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\/tmp dizinini ayr\u0131 bir b\u00f6l\u00fcme veya tmpfs&#8217;e ta\u015f\u0131y\u0131p g\u00fcvenli se\u00e7eneklerle ba\u011flamak harika bir ba\u015flang\u0131\u00e7t\u0131r. Ancak tam kapsaml\u0131 bir koruma i\u00e7in ek \u00f6nlemler ve en iyi uygulamalar da devreye al\u0131nmal\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sticky-Bit-Izninin-tmp-icin-1777-Anlami-ve-Kontrolu\"><\/span>Sticky Bit \u0130zninin (\/tmp i\u00e7in 1777) Anlam\u0131 ve Kontrol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizininin izinleri genellikle `1777` olarak ayarlan\u0131r. Bu izin `drwxrwxrwt` olarak g\u00f6r\u00fcn\u00fcr. Buradaki `t`, &#8220;sticky bit&#8221; olarak adland\u0131r\u0131lan \u00f6zel bir izindir. Bu izin, bir dizin i\u00e7indeki dosyalar\u0131n veya alt dizinlerin yaln\u0131zca dosyan\u0131n\/dizinin sahibi, dizinin sahibi veya root kullan\u0131c\u0131s\u0131 taraf\u0131ndan silinebilmesini veya yeniden adland\u0131r\u0131labilmesini sa\u011flar. Yani, bir kullan\u0131c\u0131 \/tmp i\u00e7ine bir dosya olu\u015fturdu\u011funda, ba\u015fka bir kullan\u0131c\u0131 (root hari\u00e7) o dosyay\u0131 silemez. Bu, kullan\u0131c\u0131lar\u0131n birbirlerinin ge\u00e7ici dosyalar\u0131na m\u00fcdahale etmesini \u00f6nleyen temel bir g\u00fcvenlik mekanizmas\u0131d\u0131r. `ls -ld \/tmp` komutu ile bu izni kontrol edebilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"tmpwatch-veya-tmpreaper-ile-tmp-Dizinini-Periyodik-Olarak-Temizleme\"><\/span>tmpwatch veya tmpreaper ile \/tmp Dizinini Periyodik Olarak Temizleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucunun s\u00fcrekli \u00e7al\u0131\u015fmas\u0131 durumunda \/tmp dizini zamanla eski ve gereksiz dosyalarla dolabilir. `tmpwatch` veya `tmpreaper` gibi ara\u00e7lar, belirli bir s\u00fcredir eri\u015filmemi\u015f dosyalar\u0131 otomatik olarak silmek i\u00e7in kullan\u0131l\u0131r. \u00d6rne\u011fin, son 36 saattir eri\u015filmeyen t\u00fcm dosyalar\u0131 temizlemek i\u00e7in bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/cron-jobs-101-hosting-panelinizde-zamanlanmis-gorevleri-otomatize-etme\/\" target=\"_blank\">cron job<\/a> ayarlanabilir. Bu, hem disk alan\u0131n\u0131 verimli kullanmay\u0131 sa\u011flar hem de unutulmu\u015f potansiyel zararl\u0131 dosyalar\u0131n temizlenmesine yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dosya-Sistemi-Izleme-Araclariyla-Inotify-Auditd-tmp-Aktivitelerinin-Takibi\"><\/span>Dosya Sistemi \u0130zleme Ara\u00e7lar\u0131yla (Inotify, Auditd) \/tmp Aktivitelerinin Takibi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u015e\u00fcpheli aktiviteleri tespit etmek i\u00e7in \/tmp dizinindeki dosya olu\u015fturma, silme ve de\u011fi\u015ftirme olaylar\u0131n\u0131 izlemek \u00f6nemlidir. `inotify-tools` gibi ara\u00e7lar ger\u00e7ek zamanl\u0131 izleme sa\u011flarken, `auditd` (Linux Audit Daemon) \u00e7ok daha detayl\u0131 ve kural tabanl\u0131 bir denetim mekanizmas\u0131 sunar. \u00d6rne\u011fin, \/tmp dizininde \u00e7al\u0131\u015ft\u0131r\u0131labilir bir dosya olu\u015fturuldu\u011funda veya bir dosyan\u0131n izinleri de\u011fi\u015ftirildi\u011finde uyar\u0131 \u00fcreten kurallar tan\u0131mlanabilir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Ara\u00e7<\/th>\n<th>\u0130zleme Y\u00f6ntemi<\/th>\n<th>Avantajlar\u0131<\/th>\n<th>Dezavantajlar\u0131<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>Inotify (inotify-tools)<\/b><\/td>\n<td>Ger\u00e7ek zamanl\u0131, kernel tabanl\u0131 olay izleme.<\/td>\n<td>Hafif, h\u0131zl\u0131 ve kullan\u0131m\u0131 kolay. Anl\u0131k bildirimler i\u00e7in ideal.<\/td>\n<td>Kal\u0131c\u0131 log tutmaz, detayl\u0131 raporlama yetenekleri s\u0131n\u0131rl\u0131d\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>Auditd (Audit Daemon)<\/b><\/td>\n<td>Kural tabanl\u0131, detayl\u0131 sistem denetimi.<\/td>\n<td>\u00c7ok detayl\u0131 loglama, g\u00fcvenlik uyumlulu\u011fu (\u00f6rn. PCI-DSS) i\u00e7in uygun, geriye d\u00f6n\u00fck analiz imkan\u0131.<\/td>\n<td>Yap\u0131land\u0131rmas\u0131 daha karma\u015f\u0131k, daha fazla sistem kayna\u011f\u0131 t\u00fcketebilir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"AppArmor-veya-SELinux-Profilleri-ile-tmp-Erisiminin-Kisitlanmasi\"><\/span>AppArmor veya SELinux Profilleri ile \/tmp Eri\u015fiminin K\u0131s\u0131tlanmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>AppArmor veya SELinux gibi Zorunlu Eri\u015fim Kontrol\u00fc (Mandatory Access Control &#8211; MAC) sistemleri, g\u00fcvenli\u011fi bir ad\u0131m \u00f6teye ta\u015f\u0131r. Bu sistemler, belirli uygulamalar\u0131n \/tmp dizinine nas\u0131l eri\u015febilece\u011fini tan\u0131mlayan detayl\u0131 profiller ve politikalar olu\u015fturman\u0131za olanak tan\u0131r. \u00d6rne\u011fin, Apache web sunucusunun \/tmp dizininde yaln\u0131zca belirli bir isim desenine sahip dosyalar olu\u015fturabilmesini ve ba\u015fka hi\u00e7bir dosyay\u0131 okuyamamas\u0131n\u0131 sa\u011flayabilirsiniz. Bu, bir uygulama zafiyeti s\u00f6m\u00fcr\u00fclse bile sald\u0131rgan\u0131n hareket alan\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde k\u0131s\u0131tlar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Yapilandirmanin-Dogrulanmasi-ve-Test-Edilmesi\"><\/span>Yap\u0131land\u0131rman\u0131n Do\u011frulanmas\u0131 ve Test Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>G\u00fcvenlik yap\u0131land\u0131rmas\u0131n\u0131 yapt\u0131ktan sonra, her \u015feyin beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in do\u011frulama ve test ad\u0131mlar\u0131n\u0131 uygulamak \u00e7ok \u00f6nemlidir. &#8220;G\u00fcven ama do\u011frula&#8221; prensibi burada da ge\u00e7erlidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"mount-grep-tmp-Komutu-ile-Baglama-Seceneklerini-Kontrol-Etme\"><\/span>`mount | grep \/tmp` Komutu ile Ba\u011flama Se\u00e7eneklerini Kontrol Etme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yap\u0131land\u0131rman\u0131z\u0131n aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol etmenin en h\u0131zl\u0131 yolu `mount` komutunu kullanmakt\u0131r. Terminale `mount | grep \/tmp` yazd\u0131\u011f\u0131n\u0131zda, \/tmp b\u00f6l\u00fcm\u00fc i\u00e7in ge\u00e7erli olan ba\u011flama se\u00e7eneklerini g\u00f6rebilirsiniz. \u00c7\u0131kt\u0131da `noexec`, `nosuid` ve `nodev` se\u00e7eneklerinin parantez i\u00e7inde listelendi\u011finden emin olmal\u0131s\u0131n\u0131z. \u00d6rne\u011fin:<\/p>\n<p><code>tmpfs on \/tmp type tmpfs (rw,nosuid,nodev,noexec,relatime,size=1024000k)<\/code><\/p>\n<h3><span class=\"ez-toc-section\" id=\"noexec-Korumasini-Test-Etme-Ornek-Bir-Betik-Calistirma-Denemesi\"><\/span>`noexec` Korumas\u0131n\u0131 Test Etme: \u00d6rnek Bir Betik \u00c7al\u0131\u015ft\u0131rma Denemesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`noexec` se\u00e7ene\u011finin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 test etmek i\u00e7in basit bir shell beti\u011fi olu\u015fturabilirsiniz:<\/p>\n<ol>\n<li><code>cd \/tmp<\/code> komutu ile \/tmp dizinine gidin.<\/li>\n<li><code>echo '#!\/bin\/bash' > test.sh<\/code> ve <code>echo 'echo \"Calisti!\"' >> test.sh<\/code> komutlar\u0131 ile basit bir betik olu\u015fturun.<\/li>\n<li><code>chmod +x test.sh<\/code> komutu ile beti\u011fe \u00e7al\u0131\u015ft\u0131rma izni verin.<\/li>\n<li><code>.\/test.sh<\/code> komutu ile beti\u011fi \u00e7al\u0131\u015ft\u0131rmay\u0131 deneyin.<\/li>\n<\/ol>\n<p>E\u011fer `noexec` korumas\u0131 aktifse, komutu \u00e7al\u0131\u015ft\u0131ramayacak ve &#8220;Permission denied&#8221; (\u0130zin reddedildi) hatas\u0131 alacaks\u0131n\u0131z. Bu, koruman\u0131n ba\u015far\u0131l\u0131 oldu\u011funu g\u00f6sterir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"nosuid-Korumasini-Test-Etme-SUID-Biti-Atanmis-Bir-Dosya-Olusturma-Denemesi\"><\/span>`nosuid` Korumas\u0131n\u0131 Test Etme: SUID Biti Atanm\u0131\u015f Bir Dosya Olu\u015fturma Denemesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`nosuid` korumas\u0131n\u0131 test etmek biraz daha karma\u015f\u0131kt\u0131r ve genellikle basit bir C program\u0131 derlemeyi i\u00e7erir. Ancak temel mant\u0131k, SUID biti atanm\u0131\u015f bir program\u0131n \/tmp i\u00e7indeyken root yetkileriyle \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 g\u00f6rmektir. E\u011fer \/tmp dizininden \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda program root yetkileri kazanam\u0131yorsa, `nosuid` korumas\u0131 d\u00fczg\u00fcn bir \u015fekilde \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"VPSte-tmp-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>VPS&#8217;te \/tmp G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu kiralama<\/a> hizmeti se\u00e7erken, sa\u011flanan altyap\u0131n\u0131n g\u00fcvenli\u011fi ve esnekli\u011fi en az performans kadar \u00f6nemlidir. \/tmp g\u00fcvenli\u011fi gibi kritik yap\u0131land\u0131rmalar, do\u011fru sa\u011flay\u0131c\u0131 ile \u00e7ok daha kolay ve etkili bir \u015fekilde y\u00f6netilebilir. \u0130HS Telekom, T\u00fcrkiye&#8217;nin en iyi VPS sa\u011flay\u0131c\u0131lar\u0131ndan biri olarak bu alanda \u00f6ne \u00e7\u0131kmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Odakli-ve-Ozellestirilebilir-Sunucu-Yapilandirmalari\"><\/span>G\u00fcvenlik Odakl\u0131 ve \u00d6zelle\u015ftirilebilir Sunucu Yap\u0131land\u0131rmalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, m\u00fc\u015fterilerine g\u00fcvenlik standartlar\u0131 y\u00fcksek ve \u00f6zelle\u015ftirilebilir sunucu imajlar\u0131 sunar. Sunucu kurulumu s\u0131ras\u0131nda \/tmp dizinini ayr\u0131 bir b\u00f6l\u00fcme ay\u0131rmak veya tmpfs olarak yap\u0131land\u0131rmak gibi temel g\u00fcvenlik ad\u0131mlar\u0131n\u0131 kolayca uygulaman\u0131za olanak tan\u0131r. Bu proaktif yakla\u015f\u0131m, daha ilk g\u00fcnden itibaren sunucunuzun daha g\u00fcvenli olmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uzman-Teknik-Destek-Ekibinden-Yapilandirma-Yardimi\"><\/span>Uzman Teknik Destek Ekibinden Yap\u0131land\u0131rma Yard\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu makalede anlat\u0131lan ad\u0131mlar teknik bilgi gerektirebilir. \u0130HS Telekom&#8217;un 7\/24 hizmet veren uzman teknik destek ekibi, \/tmp g\u00fcvenli\u011fi veya di\u011fer sunucu s\u0131k\u0131la\u015ft\u0131rma (hardening) konular\u0131nda size yard\u0131mc\u0131 olmaya haz\u0131rd\u0131r. Karma\u015f\u0131k fstab d\u00fczenlemeleri veya g\u00fcvenlik mod\u00fcl\u00fc yap\u0131land\u0131rmalar\u0131 gibi konularda profesyonel destek almak, olas\u0131 hatalar\u0131n \u00f6n\u00fcne ge\u00e7er.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yuksek-Performansli-Donanim-ile-tmpfs-Kullaniminda-Verimlilik\"><\/span>Y\u00fcksek Performansl\u0131 Donan\u0131m ile tmpfs Kullan\u0131m\u0131nda Verimlilik<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\/tmp dizinini tmpfs olarak kullanmak, y\u00fcksek RAM performans\u0131 gerektirir. \u0130HS Telekom, en yeni nesil i\u015flemciler ve y\u00fcksek h\u0131zl\u0131 NVMe SSD&#8217;ler ile donat\u0131lm\u0131\u015f g\u00fc\u00e7l\u00fc bir altyap\u0131 sunar. Bu y\u00fcksek performansl\u0131 donan\u0131m, tmpfs gibi RAM tabanl\u0131 \u00e7\u00f6z\u00fcmlerden maksimum verim alman\u0131z\u0131 ve uygulamalar\u0131n\u0131z\u0131n \u0131\u015f\u0131k h\u0131z\u0131nda \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar. Farkl\u0131 ihtiya\u00e7lar i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> paketlerinden, daha g\u00fc\u00e7l\u00fc <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">vds<\/a> sunuculara kadar geni\u015f bir yelpaze sunulmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Guvenlik-Servisleri-ve-Danismanlik-Hizmetleri\"><\/span>Geli\u015fmi\u015f G\u00fcvenlik Servisleri ve Dan\u0131\u015fmanl\u0131k Hizmetleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Temel yap\u0131land\u0131rmalar\u0131n \u00f6tesinde, \u0130HS Telekom, DDoS korumas\u0131, g\u00fcvenlik duvar\u0131 y\u00f6netimi ve d\u00fczenli zafiyet taramalar\u0131 gibi geli\u015fmi\u015f g\u00fcvenlik servisleri de sunar. Ayr\u0131ca, kurumsal d\u00fczeyde g\u00fcvenlik ihtiya\u00e7lar\u0131 i\u00e7in dan\u0131\u015fmanl\u0131k hizmetleri ile sunucular\u0131n\u0131z\u0131n en g\u00fcncel g\u00fcvenlik standartlar\u0131na uygun hale getirilmesine yard\u0131mc\u0131 olur. Web sitenizin g\u00fcvenli\u011fi i\u00e7in olmazsa olmaz bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">ssl sertifikas\u0131<\/a> edinmek veya yeni bir proje i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">domain sorgulama<\/a> yapmak gibi t\u00fcm ihtiya\u00e7lar\u0131n\u0131zda yan\u0131n\u0131zdad\u0131r.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux tabanl\u0131 i\u015fletim sistemlerinde, \/tmp dizini genellikle g\u00f6z ard\u0131 edilen ancak sunucu g\u00fcvenli\u011fi i\u00e7in hayati \u00f6neme sahip bir bile\u015fendir. Uygulamalar\u0131n ve sistem&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16484,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[414],"tags":[],"class_list":["post-16483","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sunucu"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16483","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16483"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16483\/revisions"}],"predecessor-version":[{"id":16485,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16483\/revisions\/16485"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16484"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16483"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16483"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}