G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda siber g\u00fcvenlik, bireylerden b\u00fcy\u00fck kurumsal yap\u0131lara kadar herkes i\u00e7in hayati bir \u00f6neme sahiptir. Sunucular\u0131n ve sistemlerin g\u00fcvenli\u011fini sa\u011flamak, potansiyel sald\u0131r\u0131lara kar\u015f\u0131 ilk savunma hatt\u0131n\u0131 olu\u015fturur. Bu rehberde, eski ama hala baz\u0131 ortamlarda kullan\u0131lan bir i\u015fletim sistemi olan Ubuntu 12.04 LTS (Precise Pangolin) \u00fczerinde Bastille g\u00fcvenlik arac\u0131n\u0131 kullanarak sistem s\u0131k\u0131la\u015ft\u0131rma (hardening) s\u00fcrecini ad\u0131m ad\u0131m ele alaca\u011f\u0131z.<\/p>\n
Bastille, Linux sistemlerini g\u00fcvenlik standartlar\u0131na uygun hale getirmek i\u00e7in tasarlanm\u0131\u015f, kullan\u0131m\u0131 kolay ve etkile\u015fimli bir ara\u00e7t\u0131r. Sistem y\u00f6neticilerinin, g\u00fcvenlik politikalar\u0131n\u0131 uygulamalar\u0131na ve olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmalar\u0131na yard\u0131mc\u0131 olur.<\/p>\n
Sistem s\u0131k\u0131la\u015ft\u0131rma, bir i\u015fletim sistemini, uygulamay\u0131 veya sunucuyu potansiyel sald\u0131r\u0131lara kar\u015f\u0131 daha diren\u00e7li hale getirmek i\u00e7in g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 azaltma ve g\u00fcvenlik \u00f6nlemlerini art\u0131rma s\u00fcrecidir. Bu, gereksiz hizmetleri kapatmay\u0131, dosya izinlerini d\u00fczenlemeyi, a\u011f yap\u0131land\u0131rmalar\u0131n\u0131 optimize etmeyi ve di\u011fer g\u00fcvenlik pratiklerini uygulamay\u0131 i\u00e7erir.<\/p>\n
Ubuntu 12.04, uzun zaman \u00f6nce ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fcn sonuna gelmi\u015f (End-of-Life – EOL) bir s\u00fcr\u00fcmd\u00fcr. Bu, Canonical’\u0131n art\u0131k bu s\u00fcr\u00fcme g\u00fcvenlik g\u00fcncellemeleri veya hata d\u00fczeltmeleri sa\u011flamad\u0131\u011f\u0131 anlam\u0131na gelir. Bu nedenle, Ubuntu 12.04 kullanmaya devam etmek, sisteminizi ciddi g\u00fcvenlik risklerine maruz b\u0131rak\u0131r. Ancak, baz\u0131 \u00f6zel durumlar veya eski altyap\u0131lar nedeniyle hala bu s\u00fcr\u00fcm\u00fc kullanmak zorunda olanlar i\u00e7in Bastille gibi ara\u00e7lar, mevcut riskleri bir nebze olsun azaltmaya yard\u0131mc\u0131 olabilir. Unutulmamal\u0131d\u0131r ki, en iyi g\u00fcvenlik \u00f6nlemi, desteklenen ve g\u00fcncel bir i\u015fletim sistemi kullanmakt\u0131r.<\/p>\n
Bastille Linux, sistem y\u00f6neticilerine a\u015fa\u011f\u0131daki konularda yard\u0131mc\u0131 olan bir ara\u00e7t\u0131r:<\/p>\n
Bu rehberin amac\u0131, Bastille’i kurmak ve Ubuntu 12.04 sisteminizi temel d\u00fczeyde s\u0131k\u0131la\u015ft\u0131rmak i\u00e7in pratik bilgiler sunmakt\u0131r.<\/p>\n
Bastille’i kurmadan ve kullanmadan \u00f6nce, sisteminizde baz\u0131 \u00f6n haz\u0131rl\u0131klar yapman\u0131z kritik \u00f6neme sahiptir. Bu ad\u0131mlar, olas\u0131 sorunlar\u0131 \u00f6nlemeye ve s\u0131k\u0131la\u015ft\u0131rma s\u00fcrecinin sorunsuz ilerlemesini sa\u011flamaya yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n
Bastille, sistem yap\u0131land\u0131rmas\u0131nda \u00f6nemli de\u011fi\u015fiklikler yapar. Bu de\u011fi\u015fiklikler, sisteminizin beklendi\u011fi gibi \u00e7al\u0131\u015fmamas\u0131na veya hatta ba\u015flamamas\u0131na neden olabilir. Bu nedenle, Bastille’i \u00e7al\u0131\u015ft\u0131rmadan \u00f6nce sisteminizin tam bir yede\u011fini almak mutlak suretle gereklidir. Sanal makine kullan\u0131yorsan\u0131z bir anl\u0131k g\u00f6r\u00fcnt\u00fc (snapshot) almak, fiziksel sunucu kullan\u0131yorsan\u0131z tam bir disk yede\u011fi almak en g\u00fcvenli yakla\u015f\u0131md\u0131r.<\/p>\n
Ubuntu 12.04 EOL oldu\u011fu i\u00e7in do\u011frudan g\u00fcvenlik g\u00fcncellemeleri almayacakt\u0131r. Ancak, daha \u00f6nce y\u00fcklenmi\u015f olan paketler i\u00e7in mevcut olabilecek son g\u00fcncellemeleri kontrol etmek yine de iyi bir uygulamad\u0131r. Bu, sistemde zaten var olan ve Bastille’in do\u011frudan ele almad\u0131\u011f\u0131 bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmaya yard\u0131mc\u0131 olabilir.<\/p>\n
Bir terminal a\u00e7\u0131n ve a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
\nsudo apt-get update\nsudo apt-get upgrade\n<\/code><\/pre>\napt-get update<\/code> komutu, paket listelerini g\u00fcncellerken, apt-get upgrade<\/code> komutu mevcut paketlerin daha yeni s\u00fcr\u00fcmlerini y\u00fckler. EOL bir sistemde bu komutlar\u0131n \u00e7ok az veya hi\u00e7 g\u00fcncelleme getirmemesi beklenir, ancak yine de denemek faydal\u0131d\u0131r.<\/p>\n2.3. Root Yetkisi ve Temel Bilgiler<\/h4>\n
Bastille’i \u00e7al\u0131\u015ft\u0131rmak i\u00e7in root<\/code> yetkisine sahip olman\u0131z gerekmektedir. \u00c7o\u011fu komutu sudo<\/code> ile \u00e7al\u0131\u015ft\u0131raca\u011f\u0131z. Ayr\u0131ca, Bastille’in ne t\u00fcr de\u011fi\u015fiklikler yapabilece\u011fi hakk\u0131nda temel bir anlay\u0131\u015fa sahip olmak, kar\u015f\u0131n\u0131za \u00e7\u0131kacak se\u00e7enekleri daha bilin\u00e7li bir \u015fekilde se\u00e7menize yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n3. Bastille Kurulumu<\/h3>\n
Ubuntu 12.04 i\u00e7in Bastille’i do\u011frudan apt<\/code> depolar\u0131ndan y\u00fcklemek, sistemin EOL olmas\u0131 nedeniyle zor olabilir. Paket depolar\u0131nda art\u0131k bulunmayabilir veya eri\u015filemeyebilir. Bu durumda, Bastille’in eski bir .deb<\/code> paketini bulup elle kurmak veya kaynak koddan derlemek gerekebilir. Ancak, elle kurulum daha pratik bir yakla\u015f\u0131md\u0131r.<\/p>\n3.1. Bastille Paketini \u0130ndirme<\/h4>\n
Bastille’in Ubuntu 12.04 ile uyumlu bir s\u00fcr\u00fcm\u00fcn\u00fc bulman\u0131z gerekecektir. Genellikle bu t\u00fcr eski paketler, Debian\/Ubuntu ar\u015fiv sitelerinde veya SourceForge gibi platformlarda bulunabilir. Varsayal\u0131m ki bastille_2.1.2-1_all.deb<\/code> gibi bir paket buldunuz ve sisteminize indirdiniz. (Bu rehber i\u00e7in \u00f6rnek bir isimdir, ger\u00e7ek paketin ad\u0131 farkl\u0131 olabilir.)<\/p>\nA\u015fa\u011f\u0131daki komutu kullanarak paketi indirebilirsiniz (e\u011fer do\u011frudan bir URL’den eri\u015filebiliyorsa):<\/p>\n
\nwget http:\/\/example.com\/path\/to\/bastille_2.1.2-1_all.deb\n<\/code><\/pre>\nNot: http:\/\/example.com\/path\/to\/bastille_2.1.2-1_all.deb<\/code> yerine, buldu\u011funuz ger\u00e7ek paketin URL’sini yazmal\u0131s\u0131n\u0131z. E\u011fer do\u011frudan URL bulamazsan\u0131z, paketi bilgisayar\u0131n\u0131za indirip daha sonra scp<\/code> veya sftp<\/code> ile Ubuntu sunucunuza aktarman\u0131z gerekebilir.<\/em><\/p>\n3.2. Paketi Kurma<\/h4>\n
Paketi indirdikten sonra, dpkg<\/code> komutu ile kurabilirsiniz:<\/p>\n\nsudo dpkg -i bastille_2.1.2-1_all.deb\n<\/code><\/pre>\nKurulum s\u0131ras\u0131nda ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131 ya\u015fanabilir. E\u011fer ba\u011f\u0131ml\u0131l\u0131k hatalar\u0131 al\u0131rsan\u0131z, a\u015fa\u011f\u0131daki komutla eksik ba\u011f\u0131ml\u0131l\u0131klar\u0131 gidermeyi deneyin:<\/p>\n
\nsudo apt-get install -f\n<\/code><\/pre>\nBu komut, dpkg<\/code> taraf\u0131ndan belirtilen eksik ba\u011f\u0131ml\u0131l\u0131klar\u0131 apt-get<\/code> kullanarak otomatik olarak indirmeye ve kurmaya \u00e7al\u0131\u015facakt\u0131r. Kurulum tamamland\u0131ktan sonra, Bastille kullan\u0131ma haz\u0131r olacakt\u0131r.<\/p>\n4. Bastille ile Sistem S\u0131k\u0131la\u015ft\u0131rma<\/h3>\n
Bastille’in temel i\u015flevi, etkile\u015fimli bir men\u00fc arac\u0131l\u0131\u011f\u0131yla sisteminizi yap\u0131land\u0131rman\u0131za olanak sa\u011flamas\u0131d\u0131r. Bu b\u00f6l\u00fcmde, Bastille’i nas\u0131l \u00e7al\u0131\u015ft\u0131raca\u011f\u0131n\u0131z\u0131 ve sisteminizi nas\u0131l s\u0131k\u0131la\u015ft\u0131raca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n
4.1. Bastille’i Ba\u015flatma<\/h4>\n
Bastille’i yap\u0131land\u0131rma modunda ba\u015flatmak i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
\nsudo bastille -c\n<\/code><\/pre>\nBu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, Bastille sizi etkile\u015fimli bir dizi soru ve men\u00fc ile kar\u015f\u0131layacakt\u0131r. Her soru, sisteminizin belirli bir y\u00f6n\u00fcyle ilgili bir g\u00fcvenlik ayar\u0131n\u0131 yap\u0131land\u0131rman\u0131za olanak tan\u0131r.<\/p>\n
4.2. Yap\u0131land\u0131rma Ad\u0131mlar\u0131<\/h4>\n
Bastille, sisteminizi farkl\u0131 kategorilerde s\u0131k\u0131la\u015ft\u0131rman\u0131za olanak tan\u0131yan bir dizi mod\u00fcl sunar. Tipik olarak a\u015fa\u011f\u0131daki gibi mod\u00fcllerle kar\u015f\u0131la\u015facaks\u0131n\u0131z:<\/p>\n
4.2.1. Dosya \u0130zinleri ve Sahiplikleri (File Permissions and Ownerships)<\/h5>\n
Bu b\u00f6l\u00fcm, sistemdeki kritik dosyalar\u0131n ve dizinlerin izinlerini ve sahipliklerini g\u00fc\u00e7lendirmeye odaklan\u0131r. Bastille, genellikle herkese yazma izni olan (world-writable) dosyalar\u0131 ve dizinleri daraltmay\u0131, varsay\u0131lan olarak korunmas\u0131 gereken dosyalar\u0131n izinlerini s\u0131k\u0131la\u015ft\u0131rmay\u0131 \u00f6nerir. \u00d6rne\u011fin, \/etc\/passwd<\/code>, \/etc\/shadow<\/code> gibi dosyalar\u0131n sadece root taraf\u0131ndan okunabilir olmas\u0131n\u0131 sa\u011flar.<\/p>\n4.2.2. Hizmetler ve S\u00fcre\u00e7ler (Services and Processes)<\/h5>\n
Sisteminizde \u00e7al\u0131\u015fan gereksiz hizmetleri kapatmak, sald\u0131r\u0131 y\u00fczeyini \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r. Bastille, genellikle varsay\u0131lan olarak kurulu gelen ancak sunucunuzun i\u015flevi i\u00e7in gerekli olmayan hizmetleri (\u00f6rne\u011fin, oyun sunucular\u0131, eski protokoller vb.) devre d\u0131\u015f\u0131 b\u0131rakman\u0131z\u0131 \u00f6nerir. Her bir hizmet hakk\u0131nda bilgi edinin ve ger\u00e7ekten ihtiyac\u0131n\u0131z olmayanlar\u0131 kapat\u0131n.<\/p>\n
4.2.3. A\u011f Yap\u0131land\u0131rmas\u0131 (Network Configuration)<\/h5>\n
Bu mod\u00fcl, a\u011f ile ilgili g\u00fcvenlik ayarlar\u0131n\u0131 i\u00e7erir. \u00d6rne\u011fin:<\/p>\n
\n- ICMP (ping) isteklerine yan\u0131t vermeyi k\u0131s\u0131tlamak.<\/li>\n
- SYN flood sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flamak.<\/li>\n
- IP y\u00f6nlendirmeyi (IP forwarding) devre d\u0131\u015f\u0131 b\u0131rakmak (e\u011fer sunucunuz bir router de\u011filse).<\/li>\n
- K\u00f6t\u00fc niyetli paketlerin (spoofed, source-routed) reddedilmesini sa\u011flamak.<\/li>\n<\/ul>\n
4.2.4. Kullan\u0131c\u0131 Hesaplar\u0131 ve Kimlik Do\u011frulama (User Accounts and Authentication)<\/h5>\n
Bu b\u00f6l\u00fcm, kullan\u0131c\u0131 g\u00fcvenli\u011fini art\u0131rmaya odaklan\u0131r:<\/p>\n
\n- Kullan\u0131c\u0131lar\u0131n bo\u015f parola kullanmas\u0131n\u0131 engellemek.<\/li>\n
- Parola ya\u015fland\u0131rma politikalar\u0131 uygulamak (parolalar\u0131n belirli aral\u0131klarla de\u011fi\u015ftirilmesini zorunlu k\u0131lmak).<\/li>\n
- Gereksiz sistem kullan\u0131c\u0131lar\u0131n\u0131 kilitlemek veya devre d\u0131\u015f\u0131 b\u0131rakmak.<\/li>\n
- Giri\u015f denemesi ba\u015far\u0131s\u0131zl\u0131k limiti belirlemek.<\/li>\n<\/ul>\n
4.2.5. Loglama ve Denetim (Logging and Auditing)<\/h5>\n
Sistem g\u00fcnl\u00fcklerinin do\u011fru bir \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131 ve korunmas\u0131, g\u00fcvenlik olaylar\u0131n\u0131 tespit etmek ve analiz etmek i\u00e7in hayati \u00f6neme sahiptir. Bastille, g\u00fcnl\u00fck dosyalar\u0131n\u0131n izinlerini g\u00fc\u00e7lendirmeyi ve \u00f6nemli olaylar\u0131n kaydedildi\u011finden emin olmay\u0131 \u00f6nerir.<\/p>\n
4.3. De\u011fi\u015fiklikleri Uygulama ve Geri Alma<\/h4>\n
Bastille, her ad\u0131mda size bir se\u00e7enek sunar ve bu se\u00e7ene\u011fin ne anlama geldi\u011fini a\u00e7\u0131klar. Se\u00e7imlerinizi yapt\u0131ktan sonra, Bastille de\u011fi\u015fiklikleri sisteminize uygular. Baz\u0131 de\u011fi\u015fiklikler i\u00e7in sistemin yeniden ba\u015flat\u0131lmas\u0131 gerekebilir.<\/p>\n
E\u011fer uygulad\u0131\u011f\u0131n\u0131z de\u011fi\u015fikliklerden memnun kalmazsan\u0131z veya sisteminizde beklenmedik sorunlar ya\u015farsan\u0131z, Bastille’in geri alma (revert) \u00f6zelli\u011fini kullanabilirsiniz.<\/p>\n
T\u00fcm Bastille de\u011fi\u015fikliklerini geri almak i\u00e7in:<\/p>\n
\nsudo bastille -r\n<\/code><\/pre>\nBu komut, Bastille taraf\u0131ndan yap\u0131lan t\u00fcm yap\u0131land\u0131rma de\u011fi\u015fikliklerini geri alacakt\u0131r. Bu, \u00f6zellikle test ortamlar\u0131nda veya bir de\u011fi\u015fikli\u011fin beklenmedik sorunlara yol a\u00e7t\u0131\u011f\u0131 durumlarda \u00e7ok kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
5. Bastille Kullan\u0131m \u00d6rnekleri ve En \u0130yi Uygulamalar<\/h3>\n
Bastille’i kullan\u0131rken dikkat etmeniz gereken baz\u0131 \u00f6nemli noktalar ve en iyi uygulamalar bulunmaktad\u0131r.<\/p>\n
5.1. Ad\u0131m Ad\u0131m Yap\u0131land\u0131rma Senaryosu<\/h4>\n
1. Bastille’i Ba\u015flat\u0131n:<\/strong><\/p>\nsudo bastille -c<\/code><\/pre>\n2. Giri\u015f ve Bilgilendirme:<\/strong> Bastille size arac\u0131n ne yapt\u0131\u011f\u0131n\u0131 ve riskleri a\u00e7\u0131klayan bir kar\u015f\u0131lama mesaj\u0131 g\u00f6sterecektir. Dikkatlice okuyun ve devam etmek i\u00e7in onaylay\u0131n.
\n3. Mod\u00fcl Se\u00e7imi:<\/strong> Bastille, s\u0131k\u0131la\u015ft\u0131rmak istedi\u011finiz mod\u00fclleri (Dosya \u0130zinleri, Hizmetler, A\u011f vb.) se\u00e7menizi isteyecektir. \u0130lk ba\u015fta t\u00fcm mod\u00fclleri se\u00e7mek yerine, her birini tek tek veya k\u00fc\u00e7\u00fck gruplar halinde ele alman\u0131z \u00f6nerilir.
\n4. Sorular\u0131 Yan\u0131tlama:<\/strong> Her mod\u00fcl i\u00e7in Bastille size bir dizi soru soracakt\u0131r. \u00d6rne\u011fin, “SSH root giri\u015fi yasaklans\u0131n m\u0131?” veya “Gereksiz servisler kapat\u0131ls\u0131n m\u0131?”. Her soruyu dikkatlice okuyun ve sisteminizin gereksinimlerine g\u00f6re y<\/code> (evet) veya n<\/code> (hay\u0131r) ile yan\u0131tlay\u0131n. Emin olmad\u0131\u011f\u0131n\u0131z durumlarda ?<\/code> yazarak daha fazla bilgi alabilirsiniz.
\n5. De\u011fi\u015fiklikleri Uygulama:<\/strong> T\u00fcm sorular\u0131 yan\u0131tlad\u0131ktan sonra Bastille, se\u00e7ti\u011finiz de\u011fi\u015fiklikleri uygulay\u0131p uygulamayaca\u011f\u0131n\u0131z\u0131 soracakt\u0131r. y<\/code> ile onaylay\u0131n.
\n6. Sistemi Yeniden Ba\u015flatma (Gerekirse):<\/strong> Baz\u0131 de\u011fi\u015fikliklerin tam olarak etkili olabilmesi i\u00e7in sistemin yeniden ba\u015flat\u0131lmas\u0131 gerekebilir. Bastille size bu konuda bilgi verecektir.<\/p>\n5.2. En \u0130yi Uygulamalar<\/h4>\n\n- Test Ortam\u0131 Kullan\u0131n:<\/strong> Canl\u0131 bir sunucuda Bastille’i ilk kez \u00e7al\u0131\u015ft\u0131rmadan \u00f6nce, ayn\u0131 yap\u0131land\u0131rmaya sahip bir test veya geli\u015ftirme ortam\u0131nda denemeler yap\u0131n. Bu, olas\u0131 kesintileri \u00f6nleyecektir.<\/li>\n
- Ad\u0131m Ad\u0131m \u0130lerleme:<\/strong> T\u00fcm s\u0131k\u0131la\u015ft\u0131rma ad\u0131mlar\u0131n\u0131 bir kerede uygulamak yerine, her bir mod\u00fcl\u00fc ayr\u0131 ayr\u0131 veya k\u00fc\u00e7\u00fck gruplar halinde uygulay\u0131n. Her de\u011fi\u015fiklikten sonra sistemin d\u00fczg\u00fcn \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/li>\n
- Her Se\u00e7ene\u011fi Anlay\u0131n:<\/strong> Bastille’in sundu\u011fu her se\u00e7ene\u011fin ne anlama geldi\u011fini ve sisteminiz \u00fczerindeki potansiyel etkilerini anlay\u0131n. Bilmedi\u011finiz bir se\u00e7ene\u011fi uygulamaktan ka\u00e7\u0131n\u0131n veya \u00f6ncesinde ara\u015ft\u0131rma yap\u0131n.<\/li>\n
- Dok\u00fcmantasyon:<\/strong> Bastille’in yapt\u0131\u011f\u0131 de\u011fi\u015fiklikleri ve kendi yap\u0131land\u0131rma kararlar\u0131n\u0131z\u0131 belgeleyin. Bu, gelecekte sorun giderme veya sistem denetimi i\u00e7in faydal\u0131 olacakt\u0131r.<\/li>\n
- Di\u011fer G\u00fcvenlik Ara\u00e7lar\u0131yla Entegrasyon:<\/strong> Bastille tek ba\u015f\u0131na tam bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc de\u011fildir. Bir g\u00fcvenlik duvar\u0131 (ufw, iptables), sald\u0131r\u0131 tespit\/\u00f6nleme sistemi (IDS\/IPS), d\u00fczenli g\u00fcvenlik denetimleri ve yaz\u0131l\u0131m g\u00fcncellemeleri (desteklenen sistemler i\u00e7in) gibi di\u011fer g\u00fcvenlik ara\u00e7lar\u0131 ve pratiklerle birlikte kullan\u0131lmal\u0131d\u0131r.<\/li>\n
- Ubuntu 12.04 EOL Riskini Unutmay\u0131n:<\/strong> Bu rehber Ubuntu 12.04 i\u00e7in olsa da, bu i\u015fletim sisteminin EOL olmas\u0131n\u0131n getirdi\u011fi temel g\u00fcvenlik riskleri Bastille ile tamamen ortadan kald\u0131r\u0131lamaz. En iyi \u00e7\u00f6z\u00fcm, daha yeni ve desteklenen bir Ubuntu s\u00fcr\u00fcm\u00fcne ge\u00e7i\u015f yapmakt\u0131r.<\/li>\n<\/ul>\n
6. Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n
Bastille, eski bir Ubuntu 12.04 sistemini potansiyel g\u00fcvenlik tehditlerine kar\u015f\u0131 daha diren\u00e7li hale getirmek i\u00e7in de\u011ferli bir ara\u00e7t\u0131r. Gereksiz servisleri kapatarak, dosya izinlerini d\u00fczenleyerek ve a\u011f yap\u0131land\u0131rmalar\u0131n\u0131 g\u00fc\u00e7lendirerek sald\u0131r\u0131 y\u00fczeyini \u00f6nemli \u00f6l\u00e7\u00fcde azaltmaya yard\u0131mc\u0131 olur. Ancak, sistemin EOL olmas\u0131 nedeniyle Bastille’in sa\u011flad\u0131\u011f\u0131 koruman\u0131n s\u0131n\u0131rl\u0131 oldu\u011funu ve en iyi g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcn\u00fcn her zaman g\u00fcncel bir i\u015fletim sistemi kullanmak oldu\u011funu unutmamak \u00f6nemlidir. Bu rehberdeki ad\u0131mlar\u0131 izleyerek, Ubuntu 12.04 sisteminizin temel g\u00fcvenlik seviyesini art\u0131rabilirsiniz.<\/p>\n
S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h4>\n
S1: Bastille ne kadar g\u00fcvenli bir ara\u00e7t\u0131r?<\/strong>
\nC1: Bastille, sistem s\u0131k\u0131la\u015ft\u0131rma konusunda iyi bilinen ve sayg\u0131n bir ara\u00e7t\u0131r. Ancak, “g\u00fcvenli” kelimesi g\u00f6recelidir. Bastille, bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmaya yard\u0131mc\u0131 olurken, s\u0131f\u0131r g\u00fcn (zero-day) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flayamaz veya sistemin EOL olmas\u0131ndan kaynaklanan temel riskleri ortadan kald\u0131ramaz. Kullan\u0131c\u0131n\u0131n bilin\u00e7li se\u00e7imleri ve di\u011fer g\u00fcvenlik pratikleriyle birle\u015ftirildi\u011finde etkilidir.<\/p>\nS2: Bastille’in yapt\u0131\u011f\u0131 de\u011fi\u015fiklikleri nas\u0131l geri alabilirim?<\/strong>
\nC2: Bastille’in yapt\u0131\u011f\u0131 t\u00fcm de\u011fi\u015fiklikleri geri almak i\u00e7in sudo bastille -r<\/code> komutunu kullanabilirsiniz. Bu, sisteminizi Bastille \u00e7al\u0131\u015ft\u0131rmadan \u00f6nceki duruma d\u00f6nd\u00fcrmeye \u00e7al\u0131\u015facakt\u0131r. Ancak, tam bir geri d\u00f6n\u00fc\u015f i\u00e7in her zaman sistem yede\u011fine sahip olmak en g\u00fcvenli yoldur.<\/p>\nS3: Bastille’i ne s\u0131kl\u0131kla \u00e7al\u0131\u015ft\u0131rmal\u0131y\u0131m?<\/strong>
\nC3: Bastille genellikle bir kerelik bir s\u0131k\u0131la\u015ft\u0131rma arac\u0131 olarak kullan\u0131l\u0131r. Ancak, sisteminize yeni yaz\u0131l\u0131mlar y\u00fckledi\u011finizde veya \u00f6nemli yap\u0131land\u0131rma de\u011fi\u015fiklikleri yapt\u0131\u011f\u0131n\u0131zda, sisteminizin g\u00fcvenlik duru\u015funu tekrar g\u00f6zden ge\u00e7irmek i\u00e7in Bastille’i yeniden \u00e7al\u0131\u015ft\u0131rmay\u0131 d\u00fc\u015f\u00fcnebilirsiniz.<\/p>\nS4: Modern Ubuntu s\u00fcr\u00fcmlerinde Bastille kullanabilir miyim?<\/strong>
\nC4: Bastille, genellikle eski Linux da\u011f\u0131t\u0131mlar\u0131 i\u00e7in tasarlanm\u0131\u015f bir ara\u00e7t\u0131r ve modern Ubuntu s\u00fcr\u00fcmlerinde (apt<\/code> depolar\u0131nda) bulunmayabilir veya d\u00fczg\u00fcn \u00e7al\u0131\u015fmayabilir. Modern Linux sistemleri i\u00e7in daha g\u00fcncel ve aktif olarak geli\u015ftirilen g\u00fcvenlik ara\u00e7lar\u0131 (\u00f6rne\u011fin, Lynis, OpenSCAP) veya do\u011frudan i\u015fletim sistemi taraf\u0131ndan sunulan g\u00fcvenlik mekanizmalar\u0131 (AppArmor, SELinux) tercih edilmelidir.<\/p>\nS5: Bastille’in yapt\u0131\u011f\u0131 de\u011fi\u015fiklikleri nas\u0131l kontrol ederim?<\/strong>
\nC5: Bastille’in yapt\u0131\u011f\u0131 de\u011fi\u015fiklikleri manuel olarak kontrol etmek i\u00e7in, bastille -c<\/code> komutunu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda size sunulan se\u00e7enekleri ve bunlar\u0131n sistem \u00fczerindeki etkilerini bilmeniz gerekir. \u00d6rne\u011fin, dosya izinleri i\u00e7in ls -l<\/code> komutunu, \u00e7al\u0131\u015fan servisler i\u00e7in service --status-all<\/code> veya ps aux<\/code> komutlar\u0131n\u0131 kullanabilirsiniz. Ayr\u0131ca Bastille’in kendi log dosyalar\u0131n\u0131 da inceleyebilirsiniz.<\/p>\n<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda siber g\u00fcvenlik, bireylerden b\u00fcy\u00fck kurumsal yap\u0131","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-35724","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi\" \/>\n<meta property=\"og:description\" content=\"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda siber g\u00fcvenlik, bireylerden b\u00fcy\u00fck kurumsal yap\u0131\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-03T03:41:41+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi\",\"datePublished\":\"2025-12-03T03:41:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\"},\"wordCount\":2488,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\",\"name\":\"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-03T03:41:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi","og_description":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda siber g\u00fcvenlik, bireylerden b\u00fcy\u00fck kurumsal yap\u0131","og_url":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-03T03:41:41+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"13 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi","datePublished":"2025-12-03T03:41:41+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/"},"wordCount":2488,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/","name":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-03T03:41:41+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/bastille-ile-ubuntu-12-04-sistemini-sikilastirma-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Bastille ile Ubuntu 12.04 Sistemini S\u0131k\u0131la\u015ft\u0131rma Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35724"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35724\/revisions"}],"predecessor-version":[{"id":35725,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35724\/revisions\/35725"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}