{"id":34414,"date":"2025-11-16T10:40:48","date_gmt":"2025-11-16T07:40:48","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=34414"},"modified":"2025-11-16T10:40:48","modified_gmt":"2025-11-16T07:40:48","slug":"centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/","title":{"rendered":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?"},"content":{"rendered":"

<\/p>\n

CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?<\/h2>\n

Giri\u015f: Parola G\u00fcvenli\u011finin \u00d6nemi ve CentOS 6 Ba\u011flam\u0131<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, siber g\u00fcvenlik tehditleri s\u00fcrekli olarak evrim ge\u00e7irmekte ve daha karma\u015f\u0131k hale gelmektedir. Bir sunucunun veya Sanal \u00d6zel Sunucunun (VPS) g\u00fcvenli\u011fi, genellikle en zay\u0131f halkas\u0131 olan parolalarla ba\u015flar. Zay\u0131f veya kolay tahmin edilebilir parolalar, yetkisiz eri\u015fim, veri ihlalleri ve sistemin k\u00f6t\u00fcye kullan\u0131lmas\u0131 gibi ciddi sonu\u00e7lara yol a\u00e7abilir. Bu nedenle, g\u00fc\u00e7l\u00fc bir parola politikas\u0131 uygulamak, herhangi bir sunucu y\u00f6neticisi i\u00e7in temel bir gerekliliktir.<\/p>\n

CentOS 6, piyasaya s\u00fcr\u00fclmesinin \u00fczerinden uzun zaman ge\u00e7mesine ra\u011fmen, baz\u0131 kurumsal ortamlar, eski uygulamalar\u0131n uyumlulu\u011fu veya belirli donan\u0131m gereksinimleri nedeniyle hala bu i\u015fletim sistemini kullanmaya devam etmektedir. CentOS 6 i\u00e7in resmi destek sona ermi\u015f olsa da, bu t\u00fcr sistemlerin g\u00fcvenli\u011fini sa\u011flamak kritik \u00f6nem ta\u015f\u0131maktad\u0131r. Bu makale, CentOS 6 VPS \u00fczerinde parola politikalar\u0131n\u0131 nas\u0131l etkili bir \u015fekilde ayarlayaca\u011f\u0131n\u0131z\u0131, parola karma\u015f\u0131kl\u0131\u011f\u0131, ya\u015fland\u0131rma, ge\u00e7mi\u015f kontrol\u00fc ve hesap kilitleme mekanizmalar\u0131 dahil olmak \u00fczere ayr\u0131nt\u0131l\u0131 bir \u015fekilde a\u00e7\u0131klayacakt\u0131r. Amac\u0131m\u0131z, sunucunuzu potansiyel parola tabanl\u0131 sald\u0131r\u0131lara kar\u015f\u0131 daha diren\u00e7li hale getirmektir.<\/p>\n

Parola G\u00fcvenli\u011finin Temelleri: Neden G\u00fc\u00e7l\u00fc Parolalara \u0130htiya\u00e7 Duyar\u0131z?<\/h3>\n

Parolalar, bir sisteme eri\u015fim i\u00e7in ilk savunma hatt\u0131d\u0131r. Ne yaz\u0131k ki, bir\u00e7ok kullan\u0131c\u0131 kolay hat\u0131rlanabilen, ancak ayn\u0131 zamanda kolayca tahmin edilebilir parolalar se\u00e7me e\u011filimindedir. Bu durum, siber sald\u0131rganlar i\u00e7in bir a\u00e7\u0131k kap\u0131 b\u0131rak\u0131r.<\/p>\n

Yayg\u0131n Parola Sald\u0131r\u0131 T\u00fcrleri<\/h4>\n

* Brute Force Sald\u0131r\u0131lar\u0131:<\/strong> Sald\u0131rgan, olas\u0131 her parola kombinasyonunu sistematik olarak dener. Parola ne kadar k\u0131sa ve basitse, bu sald\u0131r\u0131 o kadar h\u0131zl\u0131 ba\u015far\u0131l\u0131 olur.
\n* S\u00f6zl\u00fck Sald\u0131r\u0131lar\u0131:<\/strong> Sald\u0131rgan, yayg\u0131n olarak kullan\u0131lan kelimelerin, isimlerin ve say\u0131 kombinasyonlar\u0131n\u0131n bir listesini (s\u00f6zl\u00fck) kullanarak parolalar\u0131 dener.
\n* Kredensiyal Doldurma (Credential Stuffing):<\/strong> Ba\u015fka bir web sitesinden veya hizmetten ele ge\u00e7irilmi\u015f kullan\u0131c\u0131 ad\u0131 ve parola \u00e7iftlerini kullanarak, ayn\u0131 kombinasyonlar\u0131n di\u011fer sistemlerde de \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 deneme giri\u015fimidir.
\n* G\u00f6kku\u015fa\u011f\u0131 Tablolar\u0131 (Rainbow Tables):<\/strong> \u00d6nceden hesaplanm\u0131\u015f parola hash’lerinin bir tablosunu kullanarak, ele ge\u00e7irilen parola hash’lerinden orijinal parolay\u0131 bulmaya \u00e7al\u0131\u015f\u0131r.<\/p>\n

G\u00fc\u00e7l\u00fc Bir Parolan\u0131n \u00d6zellikleri<\/h4>\n

G\u00fc\u00e7l\u00fc bir parola, yukar\u0131da belirtilen sald\u0131r\u0131lara kar\u015f\u0131 dayan\u0131kl\u0131 olmal\u0131d\u0131r. Temel \u00f6zellikleri \u015funlard\u0131r:<\/p>\n

* Uzunluk:<\/strong> En az 12-16 karakter uzunlu\u011funda olmal\u0131d\u0131r. Uzunluk, karma\u015f\u0131kl\u0131ktan daha \u00f6nemlidir.
\n* Karma\u015f\u0131kl\u0131k:<\/strong> B\u00fcy\u00fck harfler, k\u00fc\u00e7\u00fck harfler, say\u0131lar ve \u00f6zel karakterlerin bir kombinasyonunu i\u00e7ermelidir.
\n* Benzersizlik:<\/strong> Farkl\u0131 hesaplar i\u00e7in farkl\u0131 parolalar kullan\u0131lmal\u0131d\u0131r.
\n* Tahmin Edilemezlik:<\/strong> Ki\u015fisel bilgilerden (do\u011fum tarihi, evcil hayvan ad\u0131 vb.) veya yayg\u0131n kelimelerden t\u00fcretilmemelidir.<\/p>\n

CentOS 6’n\u0131n varsay\u0131lan parola ayarlar\u0131 genellikle temel g\u00fcvenlik gereksinimlerini kar\u015f\u0131lamaz. Bu nedenle, sistem y\u00f6neticilerinin bu ayarlar\u0131 manuel olarak g\u00fc\u00e7lendirmesi gerekmektedir.<\/p>\n

CentOS 6’daki Temel Yap\u0131land\u0131rma Dosyalar\u0131 ve Ara\u00e7lar<\/h3>\n

CentOS 6’da parola politikas\u0131n\u0131 yap\u0131land\u0131rmak i\u00e7in birka\u00e7 ana dosya ve ara\u00e7 bulunmaktad\u0131r:<\/p>\n

\/etc\/login.defs<\/code><\/h4>\n

Bu dosya, yeni kullan\u0131c\u0131lar i\u00e7in ge\u00e7erli olacak sistem \u00e7ap\u0131nda genel parola ve oturum a\u00e7ma ayarlar\u0131n\u0131 i\u00e7erir. Parola ya\u015fland\u0131rma (\u00f6mr\u00fc), minimum parola uzunlu\u011fu gibi parametreler buradan ayarlanabilir.<\/p>\n

PAM (Pluggable Authentication Modules)<\/h4>\n

PAM, Linux sistemlerinde kimlik do\u011frulama hizmetlerini yap\u0131land\u0131rmak i\u00e7in esnek bir \u00e7er\u00e7evedir. Parola karma\u015f\u0131kl\u0131\u011f\u0131, ge\u00e7mi\u015f kontrol\u00fc ve hesap kilitleme gibi geli\u015fmi\u015f parola politikalar\u0131 PAM mod\u00fclleri arac\u0131l\u0131\u011f\u0131yla y\u00f6netilir. CentOS 6’da ana PAM yap\u0131land\u0131rma dosyalar\u0131 \u015funlard\u0131r:<\/p>\n

* \/etc\/pam.d\/system-auth<\/code>: \u00c7o\u011fu sistem hizmeti i\u00e7in varsay\u0131lan kimlik do\u011frulama yap\u0131land\u0131rmas\u0131n\u0131 tan\u0131mlayan ana PAM yap\u0131land\u0131rma dosyas\u0131d\u0131r.
\n* \/etc\/pam.d\/password-auth<\/code>: Parola kimlik do\u011frulamas\u0131 i\u00e7in \u00f6zel olarak kullan\u0131lan bir ba\u015fka \u00f6nemli PAM dosyas\u0131d\u0131r. Genellikle system-auth<\/code> ile benzer veya onunla ba\u011flant\u0131l\u0131d\u0131r.<\/p>\n

Bu iki dosya genellikle sembolik ba\u011flant\u0131lar veya do\u011frudan kopyalar arac\u0131l\u0131\u011f\u0131yla birbirine ba\u011fl\u0131d\u0131r ve birinde yap\u0131lan de\u011fi\u015fikliklerin di\u011ferini de etkilemesi beklenir.<\/p>\n

pam_pwquality<\/code> (veya pam_cracklib<\/code>)<\/h4>\n

Bu PAM mod\u00fcl\u00fc, parolalar\u0131n kalitesini ve karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in kullan\u0131l\u0131r. CentOS 6’da genellikle pam_cracklib<\/code> mod\u00fcl\u00fc kullan\u0131l\u0131rken, daha yeni sistemlerde pam_pwquality<\/code> tercih edilir. Ancak, pam_pwquality<\/code> CentOS 6 i\u00e7in de paket olarak mevcuttur ve daha geli\u015fmi\u015f \u00f6zellikler sunar.<\/p>\n

chage<\/code> Komutu<\/h4>\n

chage<\/code> (change age) komutu, kullan\u0131c\u0131 parolalar\u0131n\u0131n ya\u015fland\u0131rma bilgilerini (son de\u011fi\u015ftirilme tarihi, maksimum \u00f6mr\u00fc, uyar\u0131 s\u00fcresi vb.) y\u00f6netmek i\u00e7in kullan\u0131l\u0131r. Bu komut, bireysel kullan\u0131c\u0131lar i\u00e7in parola politikalar\u0131n\u0131 \u00f6zelle\u015ftirmeye olanak tan\u0131r.<\/p>\n

\/etc\/login.defs<\/code> ile Genel Parola Politikas\u0131 Yap\u0131land\u0131rma<\/h3>\n

\/etc\/login.defs<\/code> dosyas\u0131, yeni olu\u015fturulan kullan\u0131c\u0131lar i\u00e7in varsay\u0131lan parola ya\u015fland\u0131rma ve di\u011fer baz\u0131 g\u00fcvenlik ayarlar\u0131n\u0131 belirler. Bu ayarlar, PAM taraf\u0131ndan uygulanan karma\u015f\u0131kl\u0131k kurallar\u0131ndan ba\u011f\u0131ms\u0131zd\u0131r ancak onlarla birlikte \u00e7al\u0131\u015f\u0131r.<\/p>\n

Dosyay\u0131 d\u00fczenlemek i\u00e7in root<\/code> yetkileriyle bir metin d\u00fczenleyici kullan\u0131n:<\/p>\n

sudo vi \/etc\/login.defs<\/code><\/pre>\n
A\u015fa\u011f\u0131daki parametreleri bulup d\u00fczenleyebilirsiniz:<\/p>\n
*   PASS_MAX_DAYS<\/code><\/strong>: Bir parolan\u0131n ge\u00e7erli olabilece\u011fi maksimum g\u00fcn say\u0131s\u0131. Bu s\u00fcrenin sonunda kullan\u0131c\u0131dan parolas\u0131n\u0131 de\u011fi\u015ftirmesi istenir.
\n    *   \u00d6nerilen: 90 g\u00fcn (3 ayda bir parola de\u011fi\u015fimi)
\n    *   \u00d6rnek: PASS_MAX_DAYS 90<\/code>
\n*   PASS_MIN_DAYS<\/code><\/strong>: Bir parolan\u0131n de\u011fi\u015ftirilmeden \u00f6nce ge\u00e7mesi gereken minimum g\u00fcn say\u0131s\u0131. Bu, kullan\u0131c\u0131lar\u0131n parolalar\u0131n\u0131 hemen de\u011fi\u015ftirmesini ve ge\u00e7mi\u015fteki parolalar\u0131n\u0131 tekrar kullanmas\u0131n\u0131 engellemeye yard\u0131mc\u0131 olur (PAM’deki ge\u00e7mi\u015f kontrol\u00fc ile birlikte).
\n    *   \u00d6nerilen: 7 g\u00fcn (bir hafta)
\n    *   \u00d6rnek: PASS_MIN_DAYS 7<\/code>
\n*   PASS_WARN_AGE<\/code><\/strong>: Parolan\u0131n s\u00fcresi dolmadan ka\u00e7 g\u00fcn \u00f6nce kullan\u0131c\u0131ya uyar\u0131 verilmeye ba\u015flanaca\u011f\u0131n\u0131 belirler.
\n    *   \u00d6nerilen: 14 g\u00fcn
\n    *   \u00d6rnek: PASS_WARN_AGE 14<\/code>
\n*   ENCRYPT_METHOD<\/code><\/strong>: Parolalar\u0131n \u015fifrelenmesi i\u00e7in kullan\u0131lan algoritmay\u0131 belirler. Daha g\u00fc\u00e7l\u00fc bir algoritma kullanmak, ele ge\u00e7irilen parola hash’lerinin k\u0131r\u0131lmas\u0131n\u0131 zorla\u015ft\u0131r\u0131r.
\n    *   \u00d6nerilen: SHA512<\/code> (varsay\u0131lan genellikle SHA512<\/code>‘dir, ancak emin olmak i\u00e7in kontrol edin).
\n    *   \u00d6rnek: ENCRYPT_METHOD SHA512<\/code><\/p>\n
Bu de\u011fi\u015fiklikler, yeni olu\u015fturulan kullan\u0131c\u0131lar i\u00e7in ge\u00e7erli olacakt\u0131r. Mevcut kullan\u0131c\u0131lar i\u00e7in bu ayarlar\u0131 uygulamak veya de\u011fi\u015ftirmek i\u00e7in chage<\/code> komutunu kullanman\u0131z gerekecektir.<\/p>\n
PAM ile Parola Karma\u015f\u0131kl\u0131\u011f\u0131 ve Kalite Kontrol\u00fc<\/h3>\n
Parola karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 zorunlu k\u0131lmak i\u00e7in Pluggable Authentication Modules (PAM) \u00e7er\u00e7evesini kullan\u0131r\u0131z. CentOS 6’da bu genellikle pam_cracklib.so<\/code> veya daha geli\u015fmi\u015f olan pam_pwquality.so<\/code> mod\u00fcl\u00fc ile yap\u0131l\u0131r. pam_pwquality<\/code> daha modern ve esnek se\u00e7enekler sundu\u011fundan, m\u00fcmk\u00fcnse bunu kullanman\u0131z\u0131 \u00f6neririz. E\u011fer sisteminizde pam_pwquality<\/code> paketi y\u00fckl\u00fc de\u011filse, a\u015fa\u011f\u0131daki komutla y\u00fckleyebilirsiniz:<\/p>\n
sudo yum install pam_pwquality<\/code><\/pre>\n
PAM yap\u0131land\u0131rmas\u0131 genellikle \/etc\/pam.d\/system-auth<\/code> ve \/etc\/pam.d\/password-auth<\/code> dosyalar\u0131nda yap\u0131l\u0131r. Bu dosyalar, sembolik ba\u011flant\u0131lar veya kopyalar arac\u0131l\u0131\u011f\u0131yla birbirine benzer veya ayn\u0131 i\u00e7eri\u011fe sahip olabilir. En iyi uygulama, her iki dosyay\u0131 da d\u00fczenlemektir, ancak genellikle system-auth<\/code> dosyas\u0131nda yap\u0131lan de\u011fi\u015fiklikler di\u011ferini de etkileyebilir.<\/p>\n
Her iki dosyay\u0131 da d\u00fczenlemek i\u00e7in:<\/p>\n
sudo vi \/etc\/pam.d\/system-auth\nsudo vi \/etc\/pam.d\/password-auth<\/code><\/pre>\n
password<\/code> y\u0131\u011f\u0131n\u0131 i\u00e7inde pam_pwquality.so<\/code> (veya pam_cracklib.so<\/code>) mod\u00fcl\u00fcn\u00fc aray\u0131n. Genellikle a\u015fa\u011f\u0131daki gibi bir sat\u0131r bulunur:<\/p>\n
password    requisite     pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=<\/code><\/pre>\n
Bu sat\u0131ra veya password requisite pam_unix.so<\/code> sat\u0131r\u0131n\u0131n hemen \u00fcst\u00fcne\/alt\u0131na a\u015fa\u011f\u0131daki parametreleri ekleyerek parola karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 zorunlu k\u0131labilirsiniz:<\/p>\n
password    requisite     pam_pwquality.so authtok_type= minlen=12 lcredit=-1 ucredit=-1 dcredit=-1 ocredit=-1 difok=7 reject_username retry=3<\/code><\/pre>\n
Yukar\u0131daki parametrelerin anlamlar\u0131:<\/p>\n
*   minlen=12<\/code><\/strong>: Parolan\u0131n minimum uzunlu\u011fu 12 karakter olmal\u0131d\u0131r.
\n*   lcredit=-1<\/code><\/strong>: Parola en az bir k\u00fc\u00e7\u00fck harf i\u00e7ermelidir (eksikse -1 kredi puan\u0131).
\n*   ucredit=-1<\/code><\/strong>: Parola en az bir b\u00fcy\u00fck harf i\u00e7ermelidir.
\n*   dcredit=-1<\/code><\/strong>: Parola en az bir rakam i\u00e7ermelidir.
\n*   ocredit=-1<\/code><\/strong>: Parola en az bir \u00f6zel karakter i\u00e7ermelidir (\u00f6rne\u011fin, !, @, #, $).
\n*   difok=7<\/code><\/strong>: Yeni parolan\u0131n eski paroladan en az 7 karakter farkl\u0131 olmas\u0131 gerekir. Bu, kullan\u0131c\u0131lar\u0131n k\u00fc\u00e7\u00fck de\u011fi\u015fikliklerle parolalar\u0131n\u0131 de\u011fi\u015ftirmesini engeller.
\n*   reject_username<\/code><\/strong>: Parolan\u0131n, kullan\u0131c\u0131n\u0131n ad\u0131n\u0131 (veya ad\u0131n\u0131n tersini) i\u00e7ermesini engeller.
\n*   retry=3<\/code><\/strong>: Parola politikas\u0131 gereksinimleri kar\u015f\u0131lanmad\u0131\u011f\u0131nda kullan\u0131c\u0131ya 3 deneme hakk\u0131 tan\u0131r.<\/p>\n
Bu ayarlar, kullan\u0131c\u0131lar\u0131n yeni bir parola belirlerken bu gereksinimleri kar\u015f\u0131lamas\u0131n\u0131 sa\u011flayacakt\u0131r.<\/p>\n
chage<\/code> ile Parola Ya\u015fland\u0131rma ve S\u00fcre Sonu Y\u00f6netimi<\/h3>\n
chage<\/code> komutu, mevcut kullan\u0131c\u0131 hesaplar\u0131n\u0131n parola ya\u015fland\u0131rma ve sona erme tarihlerini y\u00f6netmek i\u00e7in kullan\u0131l\u0131r. \/etc\/login.defs<\/code> dosyas\u0131ndaki ayarlar yeni kullan\u0131c\u0131lar i\u00e7in varsay\u0131lan de\u011ferleri belirlerken, chage<\/code> mevcut kullan\u0131c\u0131lar \u00fczerinde bu ayarlar\u0131 de\u011fi\u015ftirmeye veya uygulamaya yarar.<\/p>\n
Bir Kullan\u0131c\u0131n\u0131n Mevcut Parola Bilgilerini G\u00f6r\u00fcnt\u00fcleme<\/h4>\n
chage -l <\/code><\/pre>\n
\u00d6rnek:<\/p>\n
chage -l denemeuser<\/code><\/pre>\n
\u00c7\u0131kt\u0131, kullan\u0131c\u0131n\u0131n parolas\u0131n\u0131n son de\u011fi\u015ftirilme tarihi, s\u00fcresinin dolaca\u011f\u0131 tarih, minimum ve maksimum g\u00fcnler, uyar\u0131 g\u00fcnleri ve hesap etkinli\u011fi hakk\u0131nda bilgiler i\u00e7erecektir.<\/p>\n
Parola Ya\u015fland\u0131rma Ayarlar\u0131n\u0131 Yap\u0131land\u0131rma<\/h4>\n
*   chage -M  <\/code><\/strong>: Parolan\u0131n ge\u00e7erli olabilece\u011fi maksimum g\u00fcn say\u0131s\u0131n\u0131 ayarlar. Bu, \/etc\/login.defs<\/code> i\u00e7indeki PASS_MAX_DAYS<\/code> parametresine kar\u015f\u0131l\u0131k gelir.
\n    *   \u00d6rnek: chage -M 90 denemeuser<\/code> (denemeuser parolas\u0131n\u0131n 90 g\u00fcn sonra s\u00fcresi dolar)
\n*   chage -m  <\/code><\/strong>: Parolan\u0131n de\u011fi\u015ftirilmeden \u00f6nce ge\u00e7mesi gereken minimum g\u00fcn say\u0131s\u0131n\u0131 ayarlar. Bu, \/etc\/login.defs<\/code> i\u00e7indeki PASS_MIN_DAYS<\/code> parametresine kar\u015f\u0131l\u0131k gelir.
\n    *   \u00d6rnek: chage -m 7 denemeuser<\/code> (denemeuser parolas\u0131n\u0131 7 g\u00fcn i\u00e7inde de\u011fi\u015ftiremez)
\n*   chage -W  <\/code><\/strong>: Parolan\u0131n s\u00fcresi dolmadan \u00f6nce ka\u00e7 g\u00fcn uyar\u0131 verilece\u011fini ayarlar. Bu, \/etc\/login.defs<\/code> i\u00e7indeki PASS_WARN_AGE<\/code> parametresine kar\u015f\u0131l\u0131k gelir.
\n    *   \u00d6rnek: chage -W 14 denemeuser<\/code> (denemeuser parolas\u0131n\u0131n s\u00fcresi dolmadan 14 g\u00fcn \u00f6nce uyar\u0131 al\u0131r)
\n*   chage -E  <\/code><\/strong>: Kullan\u0131c\u0131 hesab\u0131n\u0131n sona erece\u011fi tarihi ayarlar. Bu tarihten sonra kullan\u0131c\u0131 oturum a\u00e7amaz.
\n    *   \u00d6rnek: chage -E 2025-12-31 denemeuser<\/code> (denemeuser hesab\u0131 31 Aral\u0131k 2025’te sona erer)
\n*   chage -I  <\/code><\/strong>: Parolan\u0131n s\u00fcresi dolduktan sonra hesab\u0131n kilitlenmeden \u00f6nce ka\u00e7 g\u00fcn aktif kalaca\u011f\u0131n\u0131 ayarlar. Bu, kullan\u0131c\u0131n\u0131n s\u00fcresi dolmu\u015f bir parolay\u0131 de\u011fi\u015ftirmek i\u00e7in belirli bir s\u00fcreye sahip olmas\u0131n\u0131 sa\u011flar.
\n    *   \u00d6rnek: chage -I 30 denemeuser<\/code> (parola s\u00fcresi dolduktan sonra 30 g\u00fcn i\u00e7inde de\u011fi\u015ftirilmezse hesap kilitlenir)
\n*   chage -d 0 <\/code><\/strong>: Kullan\u0131c\u0131n\u0131n bir sonraki oturum a\u00e7\u0131\u015f\u0131nda parolas\u0131n\u0131 de\u011fi\u015ftirmesini zorunlu k\u0131lar.
\n    *   \u00d6rnek: chage -d 0 denemeuser<\/code><\/p>\n
Bu komutlar\u0131 kullanarak, her bir kullan\u0131c\u0131n\u0131n parola politikas\u0131 ayarlar\u0131n\u0131 detayl\u0131 bir \u015fekilde kontrol edebilirsiniz. T\u00fcm mevcut kullan\u0131c\u0131lar i\u00e7in bu ayarlar\u0131 toplu olarak uygulamak isterseniz, bir betik yazman\u0131z gerekebilir.<\/p>\n
Parola Ge\u00e7mi\u015fini Zorunlu K\u0131lma (Tekrar Kullan\u0131m\u0131n\u0131 Engelleme)<\/h3>\n
Kullan\u0131c\u0131lar\u0131n eski parolalar\u0131n\u0131 tekrar kullanmas\u0131n\u0131 engellemek, parola g\u00fcvenli\u011finin \u00f6nemli bir y\u00f6n\u00fcd\u00fcr. Bu, PAM yap\u0131land\u0131rmas\u0131 arac\u0131l\u0131\u011f\u0131yla pam_pwquality<\/code> veya pam_unix.so<\/code> mod\u00fcl\u00fcn\u00fcn remember<\/code> se\u00e7ene\u011fi kullan\u0131larak yap\u0131l\u0131r.<\/p>\n
pam_pwquality.so<\/code> mod\u00fcl\u00fcn\u00fc kullan\u0131yorsan\u0131z, remember<\/code> se\u00e7ene\u011fini do\u011frudan bu mod\u00fcle ekleyebilirsiniz. Ancak, CentOS 6’da genellikle pam_unix.so<\/code> mod\u00fcl\u00fc parola ge\u00e7mi\u015fini y\u00f6netmek i\u00e7in kullan\u0131l\u0131r.<\/p>\n
system-auth<\/code> ve password-auth<\/code> dosyalar\u0131nda password sufficient pam_unix.so<\/code> sat\u0131r\u0131n\u0131 bulun ve remember=<\/code> se\u00e7ene\u011fini ekleyin. <\/code>, ka\u00e7 \u00f6nceki parolan\u0131n hat\u0131rlanaca\u011f\u0131n\u0131 ve tekrar kullan\u0131lamayaca\u011f\u0131n\u0131 belirtir.<\/p>\n
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok remember=5<\/code><\/pre>\n
Bu \u00f6rnekte, kullan\u0131c\u0131lar\u0131n son 5 parolalar\u0131n\u0131 tekrar kullanmalar\u0131 engellenir. Bu sat\u0131r\u0131n genellikle password requisite pam_pwquality.so<\/code> sat\u0131r\u0131n\u0131n alt\u0131nda veya yak\u0131n\u0131nda olmas\u0131 gerekir.<\/p>\n
\u00d6nemli Not:<\/strong> remember<\/code> se\u00e7ene\u011fi yaln\u0131zca yeni parolalar belirlendi\u011finde ge\u00e7mi\u015fi kontrol eder. Mevcut parolalar\u0131n ge\u00e7mi\u015fini geriye d\u00f6n\u00fck olarak kontrol etmez.<\/p>\n
Hesap Kilitleme Politikas\u0131 (Brute Force Korumas\u0131)<\/h3>\n
Brute force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 korunman\u0131n en etkili yollar\u0131ndan biri, belirli say\u0131da ba\u015far\u0131s\u0131z oturum a\u00e7ma giri\u015fiminden sonra hesab\u0131 kilitlemektir. CentOS 6’da bu, pam_faillock.so<\/code> veya pam_tally2.so<\/code> mod\u00fclleri kullan\u0131larak yap\u0131land\u0131r\u0131labilir. pam_faillock<\/code> daha modern ve esnek oldu\u011fundan, onu kullanmay\u0131 tercih etmelisiniz.<\/p>\n
pam_faillock<\/code> mod\u00fcl\u00fcn\u00fc yap\u0131land\u0131rmak i\u00e7in system-auth<\/code> ve password-auth<\/code> dosyalar\u0131n\u0131 d\u00fczenlemeniz gerekecektir.<\/p>\n
sudo vi \/etc\/pam.d\/system-auth\nsudo vi \/etc\/pam.d\/password-auth<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131rlar\u0131 auth<\/code> y\u0131\u011f\u0131n\u0131na ekleyin:<\/p>\n
1.  En \u00fcste, auth required pam_env.so<\/code> sat\u0131r\u0131n\u0131n alt\u0131na veya yak\u0131n\u0131na ekleyin:<\/strong><\/p>\n
auth        required      pam_faillock.so preauth silent deny=5 unlock_time=600<\/code><\/pre>\n
    Bu sat\u0131r, kullan\u0131c\u0131n\u0131n kimlik do\u011frulamas\u0131 ba\u015flamadan \u00f6nce ba\u015far\u0131s\u0131z denemeleri kontrol eder ve hesab\u0131 kilitler. deny=5<\/code> 5 ba\u015far\u0131s\u0131z denemeden sonra hesab\u0131 kilitler. unlock_time=600<\/code> hesab\u0131 600 saniye (10 dakika) boyunca kilitli tutar. silent<\/code> se\u00e7ene\u011fi, kilitleme durumunda kullan\u0131c\u0131ya hata mesaj\u0131 g\u00f6stermez.<\/p>\n
2.  auth sufficient pam_unix.so<\/code> sat\u0131r\u0131n\u0131n alt\u0131na ekleyin:<\/strong><\/p>\n
auth        [success=1 default=bad] pam_unix.so\n    auth        required      pam_faillock.so authfail deny=5 unlock_time=600<\/code><\/pre>\n
    Bu sat\u0131r, pam_unix.so<\/code> mod\u00fcl\u00fc ba\u015far\u0131s\u0131z olursa (yani parola yanl\u0131\u015f girilirse) ba\u015far\u0131s\u0131z denemeleri kaydeder. success=1<\/code> bir sonraki kurala atlar (yani pam_unix.so<\/code> ba\u015far\u0131l\u0131 olursa). default=bad<\/code> ise ba\u015far\u0131s\u0131z olursa pam_faillock.so<\/code> kural\u0131na ge\u00e7ilmesini sa\u011flar.<\/p>\n
\u00d6nemli:<\/strong> pam_faillock.so<\/code> mod\u00fcl\u00fcn\u00fc eklerken, auth<\/code> y\u0131\u011f\u0131n\u0131n\u0131n s\u0131ras\u0131na dikkat etmek kritik \u00f6neme sahiptir. Yanl\u0131\u015f yerle\u015ftirme, oturum a\u00e7ma sorunlar\u0131na neden olabilir.<\/p>\n
Hesap kilitlendi\u011finde, faillock<\/code> komutu ile kilitlenme durumunu g\u00f6r\u00fcnt\u00fcleyebilir veya s\u0131f\u0131rlayabilirsiniz:<\/p>\n
*   Bir kullan\u0131c\u0131n\u0131n kilitlenme durumunu g\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
faillock --user <\/code><\/pre>\n
*   Bir kullan\u0131c\u0131n\u0131n kilitlenme sayac\u0131n\u0131 s\u0131f\u0131rlama (kilidi a\u00e7ma):<\/strong><\/p>\n
faillock --user  --reset<\/code><\/pre>\n
Bu mekanizma, \u00f6zellikle SSH gibi d\u0131\u015far\u0131dan eri\u015filebilen hizmetlerde brute force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00f6nemli bir koruma katman\u0131 sa\u011flar.<\/p>\n
Denetim ve \u0130zleme<\/h3>\n
Parola politikas\u0131n\u0131 ayarlamak sadece ba\u015flang\u0131\u00e7t\u0131r. Uygulanan politikalar\u0131n etkinli\u011fini s\u00fcrd\u00fcrmek ve potansiyel g\u00fcvenlik sorunlar\u0131n\u0131 tespit etmek i\u00e7in d\u00fczenli denetim ve izleme yapmak hayati \u00f6neme sahiptir.<\/p>\n
Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 Kontrol Etme<\/h4>\n
Parola politikas\u0131yla ilgili t\u00fcm yap\u0131land\u0131rma dosyalar\u0131n\u0131 (\u00f6rne\u011fin, \/etc\/login.defs<\/code>, \/etc\/pam.d\/system-auth<\/code>, \/etc\/pam.d\/password-auth<\/code>) d\u00fczenli olarak g\u00f6zden ge\u00e7irin. Yetkisiz de\u011fi\u015fiklikler olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n
\/etc\/shadow<\/code> Dosyas\u0131n\u0131 Analiz Etme<\/h4>\n
\/etc\/shadow<\/code> dosyas\u0131, kullan\u0131c\u0131 parolalar\u0131n\u0131n hash’lerini ve parola ya\u015fland\u0131rma bilgilerini depolar. Bu dosyay\u0131 inceleyerek, her kullan\u0131c\u0131n\u0131n parola ya\u015fland\u0131rma ayarlar\u0131n\u0131n bekledi\u011finiz gibi olup olmad\u0131\u011f\u0131n\u0131 kontrol edebilirsiniz.<\/p>\n
\u00d6rnek bir \/etc\/shadow<\/code> sat\u0131r\u0131:<\/p>\n
denemeuser:$6$saltsalt$hashedpassword:19700:7:90:14::30:<\/code><\/pre>\n
*   denemeuser<\/code>: Kullan\u0131c\u0131 ad\u0131
\n*   $6$saltsalt$hashedpassword<\/code>: Parola hash’i (SHA512)
\n*   19700<\/code>: Parolan\u0131n son de\u011fi\u015ftirildi\u011fi tarih (Epoch g\u00fcnleri cinsinden)
\n*   7<\/code>: Minimum parola \u00f6mr\u00fc (g\u00fcn)
\n*   90<\/code>: Maksimum parola \u00f6mr\u00fc (g\u00fcn)
\n*   14<\/code>: Parola s\u00fcresi dolmadan uyar\u0131 verilecek g\u00fcn say\u0131s\u0131
\n*   ::<\/code>: Hesap sona erme tarihi (bo\u015fsa ayarlanmam\u0131\u015f)
\n*   30<\/code>: Parola s\u00fcresi dolduktan sonra hesab\u0131n kilitlenmeden \u00f6nce aktif kalaca\u011f\u0131 g\u00fcn say\u0131s\u0131<\/p>\n
Bu bilgiler, chage -l<\/code> komutuyla da kolayca g\u00f6r\u00fcnt\u00fclenebilir.<\/p>\n
Log Kay\u0131tlar\u0131n\u0131 \u0130zleme<\/h4>\n
Ba\u015far\u0131s\u0131z oturum a\u00e7ma giri\u015fimleri, \/var\/log\/secure<\/code> dosyas\u0131nda kaydedilir. Bu log dosyas\u0131n\u0131 d\u00fczenli olarak inceleyerek potansiyel brute force sald\u0131r\u0131lar\u0131n\u0131 veya yetkisiz eri\u015fim giri\u015fimlerini tespit edebilirsiniz.<\/p>\n
sudo tail -f \/var\/log\/secure | grep \"Failed password\"<\/code><\/pre>\n
Log izleme ara\u00e7lar\u0131 (\u00f6rne\u011fin, ELK Stack, Splunk, Graylog) veya intrusion detection system (IDS) gibi \u00e7\u00f6z\u00fcmler, bu t\u00fcr olaylar\u0131 otomatik olarak tespit edip sizi uyarabilir.<\/p>\n
En \u0130yi Uygulamalar ve Dikkat Edilmesi Gerekenler<\/h3>\n
Parola politikas\u0131 uygulamas\u0131, sadece teknik yap\u0131land\u0131rmadan ibaret de\u011fildir. Kapsaml\u0131 bir g\u00fcvenlik stratejisinin par\u00e7as\u0131 olmal\u0131d\u0131r.<\/p>\n
*   Kullan\u0131c\u0131 E\u011fitimi:<\/strong> En g\u00fc\u00e7l\u00fc parola politikalar\u0131 bile, kullan\u0131c\u0131lar g\u00fcvenlik uygulamalar\u0131 hakk\u0131nda e\u011fitilmezse zay\u0131f kalabilir. Kullan\u0131c\u0131lara neden g\u00fc\u00e7l\u00fc parolalar kullanmalar\u0131 gerekti\u011fini, nas\u0131l olu\u015fturacaklar\u0131n\u0131 ve parola g\u00fcvenli\u011fiyle ilgili en iyi uygulamalar\u0131 \u00f6\u011fretin.
\n*   G\u00fcvenlik ve Kullan\u0131labilirlik Dengesi:<\/strong> \u00c7ok kat\u0131 parola politikalar\u0131, kullan\u0131c\u0131lar\u0131n parolalar\u0131n\u0131 unutmas\u0131na veya not almas\u0131na yol a\u00e7arak g\u00fcvenlik risklerini art\u0131rabilir. G\u00fcvenlik ile kullan\u0131labilirlik aras\u0131nda bir denge kurmaya \u00e7al\u0131\u015f\u0131n.
\n*   D\u00fczenli Politika G\u00f6zden Ge\u00e7irme:<\/strong> Siber tehditler s\u00fcrekli de\u011fi\u015fti\u011fi i\u00e7in, parola politikan\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin ve g\u00fcncelleyin.
\n*   SSH Anahtarlar\u0131 Kullan\u0131m\u0131:<\/strong> M\u00fcmk\u00fcn oldu\u011funca, sunucuya SSH ile eri\u015fim i\u00e7in parola yerine SSH anahtarlar\u0131n\u0131 kullan\u0131n. Bu, \u00e7ok daha g\u00fcvenli bir kimlik do\u011frulama y\u00f6ntemidir ve brute force sald\u0131r\u0131lar\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azalt\u0131r.
\n*   \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA):<\/strong> Parola tabanl\u0131 kimlik do\u011frulamas\u0131n\u0131n \u00fczerine bir katman daha eklemek i\u00e7in \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA) uygulay\u0131n. Bu, bir sald\u0131rgan parolay\u0131 ele ge\u00e7irse bile sisteme eri\u015fmesini engeller.
\n*   Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 Yedekleme:<\/strong> Herhangi bir kritik yap\u0131land\u0131rma dosyas\u0131nda de\u011fi\u015fiklik yapmadan \u00f6nce daima bir yedek al\u0131n. Bu, yanl\u0131\u015f bir yap\u0131land\u0131rma durumunda kolayca geri d\u00f6nmenizi sa\u011flar.<\/p>\n
sudo cp \/etc\/login.defs \/etc\/login.defs.bak\n    sudo cp \/etc\/pam.d\/system-auth \/etc\/pam.d\/system-auth.bak\n    sudo cp \/etc\/pam.d\/password-auth \/etc\/pam.d\/password-auth.bak<\/code><\/pre>\n
*   De\u011fi\u015fiklikleri Test Etme:<\/strong> Parola politikas\u0131 ayarlar\u0131nda de\u011fi\u015fiklik yapt\u0131ktan sonra, farkl\u0131 kullan\u0131c\u0131 hesaplar\u0131yla oturum a\u00e7may\u0131 deneyerek ve parola de\u011fi\u015ftirme i\u015flemlerini test ederek ayarlar\u0131n bekledi\u011finiz gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun. \u00d6zellikle kilitli kalma riskini \u00f6nlemek i\u00e7in root<\/code> veya ba\u015fka bir y\u00f6netici hesab\u0131 ile test yaparken dikkatli olun.<\/p>\n
Sonu\u00e7<\/h3>\n
CentOS 6 VPS \u00fczerinde g\u00fc\u00e7l\u00fc bir parola politikas\u0131 ayarlamak, sunucunuzun g\u00fcvenli\u011fini sa\u011flamak i\u00e7in at\u0131lmas\u0131 gereken temel bir ad\u0131md\u0131r. \/etc\/login.defs<\/code> ile genel ayarlar\u0131, PAM ile parola karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 ve ge\u00e7mi\u015f kontrol\u00fcn\u00fc, chage<\/code> ile kullan\u0131c\u0131 baz\u0131nda ya\u015fland\u0131rmay\u0131 ve pam_faillock<\/code> ile hesap kilitlemeyi yap\u0131land\u0131rarak, sunucunuzu parola tabanl\u0131 sald\u0131r\u0131lara kar\u015f\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirebilirsiniz.<\/p>\n
Unutmay\u0131n ki g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir. Sadece bir kez ayarlamak yeterli de\u011fildir; d\u00fczenli olarak denetlemeli, izlemeli ve geli\u015fen tehdit ortam\u0131na g\u00f6re politikan\u0131z\u0131 g\u00fcncellemelisiniz. Kullan\u0131c\u0131 e\u011fitimi ve ek g\u00fcvenlik katmanlar\u0131 (SSH anahtarlar\u0131, MFA) ile entegre edildi\u011finde, parola politikan\u0131z daha diren\u00e7li ve g\u00fcvenli bir VPS ortam\u0131 olu\u015fturman\u0131za yard\u0131mc\u0131 olacakt\u0131r. CentOS 6’n\u0131n deste\u011finin sona ermi\u015f olmas\u0131, bu sistemlerin g\u00fcvenli\u011fine daha da fazla dikkat etme gereklili\u011fini ortaya koymaktad\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?\nGiri\u015f: Parola G\u00fcvenli\u011finin \u00d6nemi ve CentOS 6 Ba\u011flam\u0131\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-34414","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nCentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?\" \/>\n<meta property=\"og:description\" content=\"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? Giri\u015f: Parola G\u00fcvenli\u011finin \u00d6nemi ve CentOS 6 Ba\u011flam\u0131 G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-16T07:40:48+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?\",\"datePublished\":\"2025-11-16T07:40:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\"},\"wordCount\":2941,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\",\"name\":\"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-16T07:40:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/","og_locale":"tr_TR","og_type":"article","og_title":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?","og_description":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? Giri\u015f: Parola G\u00fcvenli\u011finin \u00d6nemi ve CentOS 6 Ba\u011flam\u0131 G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya","og_url":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-16T07:40:48+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"17 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?","datePublished":"2025-11-16T07:40:48+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/"},"wordCount":2941,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/","url":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/","name":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-16T07:40:48+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/centos-6-vps-uzerinde-parola-politikasi-nasil-ayarlanir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"CentOS 6 VPS \u00dczerinde Parola Politikas\u0131 Nas\u0131l Ayarlan\u0131r?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34414"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34414\/revisions"}],"predecessor-version":[{"id":34415,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34414\/revisions\/34415"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}