{"id":35921,"date":"2025-12-05T15:40:49","date_gmt":"2025-12-05T12:40:49","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=35921"},"modified":"2025-12-05T15:40:49","modified_gmt":"2025-12-05T12:40:49","slug":"ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/","title":{"rendered":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131"},"content":{"rendered":"

<\/p>\n

Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131<\/h2>\n

Ubuntu 14.04 LTS (Trusty Tahr), uzun s\u00fcreli destek sa\u011flayan ve bir\u00e7ok kurumsal ortamda veya belirli uygulama ba\u011f\u0131ml\u0131l\u0131klar\u0131 nedeniyle hala kullan\u0131lan, zaman\u0131nda pop\u00fcler bir Linux da\u011f\u0131t\u0131m\u0131 s\u00fcr\u00fcm\u00fcd\u00fcr. G\u00fcncel s\u00fcr\u00fcmler kadar modern \u00f6zelliklere sahip olmasa da, temel sistem y\u00f6netimi ve g\u00fcvenlik prensipleri bu s\u00fcr\u00fcmde de b\u00fcy\u00fck \u00f6nem ta\u015f\u0131r. Bu makalede, Ubuntu 14.04 sunucular\u0131n\u0131zda veya masa\u00fcst\u00fc ortamlar\u0131n\u0131zda ayr\u0131cal\u0131k y\u00f6netimi i\u00e7in sudo<\/code>‘nun nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131, ayr\u0131ca uzaktan g\u00fcvenli eri\u015fim i\u00e7in SSH anahtarlar\u0131n\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve kullan\u0131laca\u011f\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz. Bu iki bile\u015fen, herhangi bir Linux sisteminin g\u00fcvenli ve verimli y\u00f6netimi i\u00e7in vazge\u00e7ilmezdir.<\/p>\n

Giri\u015f: Neden Sudo ve SSH Anahtarlar\u0131?<\/h3>\n

Linux sistemlerinde root<\/code> kullan\u0131c\u0131s\u0131, sistem \u00fczerindeki t\u00fcm yetkilere sahip olan s\u00fcper kullan\u0131c\u0131d\u0131r. root<\/code> olarak do\u011frudan \u00e7al\u0131\u015fmak veya s\u00fcrekli root<\/code> olarak oturum a\u00e7mak, ciddi g\u00fcvenlik riskleri ta\u015f\u0131r. Yanl\u0131\u015f bir komut, t\u00fcm sistemi kullan\u0131lamaz hale getirebilir veya \u00f6nemli verilerin kaybolmas\u0131na neden olabilir. \u0130\u015fte bu noktada sudo<\/code> (superuser do) devreye girer. sudo<\/code>, yetkilendirilmi\u015f kullan\u0131c\u0131lar\u0131n, kendi parolalar\u0131n\u0131 kullanarak belirli komutlar\u0131 root<\/code> ayr\u0131cal\u0131klar\u0131yla \u00e7al\u0131\u015ft\u0131rmas\u0131na olanak tan\u0131r. Bu, minimum ayr\u0131cal\u0131k prensibine uygun bir yakla\u015f\u0131md\u0131r ve her eylemin loglanabilir olmas\u0131n\u0131 sa\u011flayarak denetlenebilirli\u011fi art\u0131r\u0131r.<\/p>\n

\u00d6te yandan, sunuculara veya di\u011fer uzak sistemlere eri\u015fim i\u00e7in genellikle SSH (Secure Shell) protokol\u00fc kullan\u0131l\u0131r. Geleneksel olarak SSH ba\u011flant\u0131lar\u0131 parola tabanl\u0131 kimlik do\u011frulama ile yap\u0131l\u0131r. Ancak parolalar, kaba kuvvet sald\u0131r\u0131lar\u0131na (brute-force) veya zay\u0131f parola se\u00e7imlerine kar\u015f\u0131 savunmas\u0131zd\u0131r. SSH anahtarlar\u0131, bu g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmak i\u00e7in \u00e7ok daha g\u00fc\u00e7l\u00fc ve kullan\u0131\u015fl\u0131 bir alternatif sunar. Anahtar tabanl\u0131 kimlik do\u011frulama, bir genel (public) ve bir \u00f6zel (private) anahtar \u00e7ifti kullanarak \u00e7al\u0131\u015f\u0131r. \u00d6zel anahtar istemcide g\u00fcvenli bir \u015fekilde saklan\u0131r, genel anahtar ise sunucuya yerle\u015ftirilir. Bu y\u00f6ntem, parola girmeye gerek kalmadan g\u00fcvenli ve otomatikle\u015ftirilmi\u015f ba\u011flant\u0131lar kurmay\u0131 m\u00fcmk\u00fcn k\u0131lar.<\/p>\n

Bu makale, Ubuntu 14.04’\u00fcn g\u00fcvenli\u011fini ve y\u00f6netilebilirli\u011fini art\u0131rmak i\u00e7in bu iki temel bile\u015fenin nas\u0131l entegre edilece\u011fini ad\u0131m ad\u0131m a\u00e7\u0131klayacakt\u0131r.<\/p>\n

Sudo Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h3>\n

sudo<\/code>, Ubuntu’da varsay\u0131lan olarak y\u00fckl\u00fc gelir ve genellikle kurulum s\u0131ras\u0131nda olu\u015fturulan ilk kullan\u0131c\u0131ya sudo<\/code> ayr\u0131cal\u0131klar\u0131 otomatik olarak atan\u0131r. Ancak, yeni kullan\u0131c\u0131lar olu\u015fturman\u0131z veya mevcut kullan\u0131c\u0131lar\u0131n ayr\u0131cal\u0131klar\u0131n\u0131 y\u00f6netmeniz gerekti\u011finde bu s\u00fcreci anlamak \u00f6nemlidir.<\/p>\n

Sudo Nedir ve Neden \u00d6nemlidir?<\/h4>\n

sudo<\/code>, yetkili kullan\u0131c\u0131lar\u0131n belirli komutlar\u0131 s\u00fcper kullan\u0131c\u0131 veya ba\u015fka bir kullan\u0131c\u0131 olarak \u00e7al\u0131\u015ft\u0131rmas\u0131na izin veren bir programd\u0131r. Temel amac\u0131, root<\/code> kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan kullan\u0131m\u0131n\u0131 en aza indirmek ve b\u00f6ylece sistem g\u00fcvenli\u011fini art\u0131rmakt\u0131r.<\/p>\n

* Minimum Ayr\u0131cal\u0131k Prensibi:<\/strong> Kullan\u0131c\u0131lar\u0131n sadece ihtiya\u00e7 duyduklar\u0131 ayr\u0131cal\u0131klara sahip olmas\u0131n\u0131 sa\u011flar. Bu, olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n veya hatalar\u0131n etkisini s\u0131n\u0131rlar.
\n* Denetlenebilirlik:<\/strong> sudo<\/code> arac\u0131l\u0131\u011f\u0131yla ger\u00e7ekle\u015ftirilen t\u00fcm i\u015flemler, sistem loglar\u0131nda kaydedilir (\/var\/log\/auth.log<\/code>). Bu, kimin ne zaman hangi komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131 izlemeyi kolayla\u015ft\u0131r\u0131r.
\n* Kullan\u0131m Kolayl\u0131\u011f\u0131:<\/strong> Kullan\u0131c\u0131lar\u0131n root<\/code> parolas\u0131 yerine kendi parolalar\u0131n\u0131 kullanarak ayr\u0131cal\u0131kl\u0131 komutlar\u0131 \u00e7al\u0131\u015ft\u0131rmalar\u0131na olanak tan\u0131r, bu da root<\/code> parolas\u0131n\u0131n payla\u015f\u0131lmas\u0131 ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r.<\/p>\n

Yeni Bir Kullan\u0131c\u0131 Olu\u015fturma<\/h4>\n

\u0130lk ad\u0131m, sudo<\/code> ayr\u0131cal\u0131klar\u0131 verece\u011fimiz yeni bir kullan\u0131c\u0131 olu\u015fturmakt\u0131r. E\u011fer zaten bir kullan\u0131c\u0131n\u0131z varsa bu ad\u0131m\u0131 atlayabilirsiniz.<\/p>\n

Mevcut bir sudo<\/code> kullan\u0131c\u0131s\u0131 olarak oturum a\u00e7\u0131n (genellikle Ubuntu kurulumunda olu\u015fturulan ilk kullan\u0131c\u0131) ve a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n

sudo adduser yeni_kullanici<\/code><\/pre>\n
yeni_kullanici<\/code> yerine istedi\u011finiz kullan\u0131c\u0131 ad\u0131n\u0131 yaz\u0131n. Komut sizden yeni kullan\u0131c\u0131 i\u00e7in bir parola belirlemenizi isteyecektir. G\u00fc\u00e7l\u00fc bir parola se\u00e7ti\u011finizden emin olun. Ayr\u0131ca, ad, telefon numaras\u0131 gibi ek bilgiler de girmenizi isteyebilir; bu alanlar\u0131 bo\u015f b\u0131rakmak i\u00e7in Enter tu\u015funa basabilirsiniz.<\/p>\n
Adding user yeni_kullanici' ...\nAdding new group <\/code>yeni_kullanici' (1001) ...\nAdding new user yeni_kullanici' (1001) with group <\/code>yeni_kullanici' ...\nCreating home directory \/home\/yeni_kullanici' ...\nCopying files from <\/code>\/etc\/skel' ...\nEnter new UNIX password:\nRetype new UNIX password:\npasswd: password updated successfully\nChanging the user information for yeni_kullanici\nEnter the new value, or press ENTER for the default\n        Full Name []:\n        Room Number []:\n        Work Phone []:\n        Home Phone []:\n        Other []:\nIs the information correct? [Y\/n] Y<\/code><\/pre>\n
Kullan\u0131c\u0131ya Sudo Ayr\u0131cal\u0131klar\u0131 Tan\u0131ma<\/h4>\n
Yeni olu\u015fturdu\u011funuz veya mevcut bir kullan\u0131c\u0131ya sudo<\/code> ayr\u0131cal\u0131klar\u0131 vermek i\u00e7in en yayg\u0131n y\u00f6ntem, kullan\u0131c\u0131y\u0131 sudo<\/code> grubuna eklemektir. Ubuntu’da sudo<\/code> grubu, varsay\u0131lan olarak sudo<\/code> komutunu kullanma yetkisine sahiptir.<\/p>\n
sudo usermod -aG sudo yeni_kullanici<\/code><\/pre>\n
*   usermod<\/code>: Kullan\u0131c\u0131 \u00f6zelliklerini de\u011fi\u015ftirmek i\u00e7in kullan\u0131l\u0131r.
\n*   -aG<\/code>: Kullan\u0131c\u0131y\u0131 belirtilen gruba ekler (append to group). -a<\/code> (append) se\u00e7ene\u011fi \u00f6nemlidir, \u00e7\u00fcnk\u00fc G<\/code> ile tek ba\u015f\u0131na kullan\u0131ld\u0131\u011f\u0131nda kullan\u0131c\u0131y\u0131 di\u011fer gruplar\u0131ndan \u00e7\u0131kar\u0131p sadece belirtilen gruba dahil edebilir.
\n*   sudo<\/code>: Kullan\u0131c\u0131n\u0131n eklenece\u011fi grup.
\n*   yeni_kullanici<\/code>: Ayr\u0131cal\u0131k verilecek kullan\u0131c\u0131n\u0131n ad\u0131.<\/p>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra, yeni_kullanici<\/code> art\u0131k sudo<\/code> ayr\u0131cal\u0131klar\u0131na sahip olacakt\u0131r. Bu de\u011fi\u015fikli\u011fin etkili olmas\u0131 i\u00e7in kullan\u0131c\u0131n\u0131n oturumu kapat\u0131p tekrar a\u00e7mas\u0131 gerekebilir.<\/p>\n
Alternatif Y\u00f6ntem: \/etc\/sudoers<\/code> Dosyas\u0131n\u0131 D\u00fczenleme (visudo<\/code> ile)<\/strong><\/p>\n
Daha geli\u015fmi\u015f sudo<\/code> yap\u0131land\u0131rmalar\u0131 i\u00e7in \/etc\/sudoers<\/code> dosyas\u0131n\u0131 do\u011frudan d\u00fczenlemek gerekebilir. Bu dosya, sudo<\/code> komutunun nas\u0131l davranaca\u011f\u0131n\u0131 belirleyen kurallar\u0131 i\u00e7erir. Bu dosyay\u0131 asla do\u011frudan bir metin d\u00fczenleyiciyle a\u00e7may\u0131n.<\/strong> Bunun yerine, visudo<\/code> komutunu kullanmal\u0131s\u0131n\u0131z. visudo<\/code>, dosyay\u0131 d\u00fczenlemek i\u00e7in varsay\u0131lan d\u00fczenleyiciyi (genellikle vi<\/code> veya nano<\/code>) a\u00e7ar ve kaydetmeden \u00f6nce s\u00f6zdizimi hatalar\u0131n\u0131 kontrol eder. Bu, yanl\u0131\u015f bir yap\u0131land\u0131rman\u0131n sistemi kilitlemesini \u00f6nler.<\/p>\n
sudo visudo<\/code><\/pre>\n
A\u00e7\u0131lan dosyada, sudo<\/code> grubuna ayr\u0131cal\u0131k veren sat\u0131r\u0131 g\u00f6receksiniz:<\/p>\n
# Allow members of group sudo to execute any command\n%sudo   ALL=(ALL:ALL) ALL<\/code><\/pre>\n
Bu sat\u0131r, sudo<\/code> grubundaki t\u00fcm kullan\u0131c\u0131lar\u0131n ( %sudo<\/code> ), herhangi bir terminalden ( ALL<\/code> ), herhangi bir kullan\u0131c\u0131 olarak ( ALL<\/code> ), herhangi bir grup olarak ( :ALL<\/code> ) ve herhangi bir komutu ( ALL<\/code> ) \u00e7al\u0131\u015ft\u0131rmas\u0131na izin verildi\u011fi anlam\u0131na gelir.<\/p>\n
Belirli bir kullan\u0131c\u0131ya sudo<\/code> ayr\u0131cal\u0131\u011f\u0131 vermek isterseniz, bu sat\u0131r\u0131n alt\u0131na a\u015fa\u011f\u0131daki gibi bir sat\u0131r ekleyebilirsiniz:<\/p>\n
yeni_kullanici ALL=(ALL:ALL) ALL<\/code><\/pre>\n
Dikkat:<\/strong> Baz\u0131 durumlarda, bir kullan\u0131c\u0131n\u0131n sudo<\/code> komutunu kullan\u0131rken parola girmesini istemeyebilirsiniz (\u00f6rne\u011fin, otomatikle\u015ftirilmi\u015f betikler i\u00e7in). Bu durumda NOPASSWD<\/code> se\u00e7ene\u011fini kullanabilirsiniz:<\/p>\n
yeni_kullanici ALL=(ALL) NOPASSWD: ALL<\/code><\/pre>\n
Bu, yeni_kullanici<\/code>‘n\u0131n sudo<\/code> ile herhangi bir komutu parola girmeden \u00e7al\u0131\u015ft\u0131rabilece\u011fi anlam\u0131na gelir. Ancak bu, ciddi bir g\u00fcvenlik riski olu\u015fturur ve yaln\u0131zca kesinlikle gerekli oldu\u011funda ve riskleri tam olarak anlad\u0131\u011f\u0131n\u0131zda kullan\u0131lmal\u0131d\u0131r.<\/strong><\/p>\n
D\u00fczenlemeleri yapt\u0131ktan sonra, dosyay\u0131 kaydedin ve visudo<\/code>‘dan \u00e7\u0131k\u0131n. (Vi d\u00fczenleyicisinde kaydetmek i\u00e7in Esc<\/code> tu\u015funa bas\u0131n, ard\u0131ndan :wq<\/code> yaz\u0131p Enter<\/code> tu\u015funa bas\u0131n.)<\/p>\n
Sudo Kurulumunu Test Etme<\/h4>\n
Yeni kullan\u0131c\u0131yla oturum a\u00e7\u0131n veya su - yeni_kullanici<\/code> komutuyla kullan\u0131c\u0131ya ge\u00e7i\u015f yap\u0131n. Ard\u0131ndan, sudo<\/code> ile bir komut \u00e7al\u0131\u015ft\u0131rmay\u0131 deneyin:<\/p>\n
sudo apt update<\/code><\/pre>\n
E\u011fer her \u015fey do\u011fru yap\u0131land\u0131r\u0131ld\u0131ysa, sizden yeni_kullanici<\/code>‘n\u0131n parolas\u0131n\u0131 girmeniz istenecektir. Parolay\u0131 girdikten sonra apt update<\/code> komutu root<\/code> ayr\u0131cal\u0131klar\u0131yla \u00e7al\u0131\u015fmal\u0131d\u0131r.<\/p>\n
Ayr\u0131ca, sudo -l<\/code> komutuyla kullan\u0131c\u0131n\u0131n hangi sudo<\/code> yetkilerine sahip oldu\u011funu listeleyebilirsiniz:<\/p>\n
sudo -l<\/code><\/pre>\n
Bu komut, kullan\u0131c\u0131n\u0131n sudo<\/code> ile hangi komutlar\u0131 \u00e7al\u0131\u015ft\u0131rabilece\u011fini ve parola isteyip istemedi\u011fini g\u00f6sterir.<\/p>\n
Sudo G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h4>\n
*   G\u00fc\u00e7l\u00fc Parolalar:<\/strong> sudo<\/code> kullanan t\u00fcm kullan\u0131c\u0131lar i\u00e7in g\u00fc\u00e7l\u00fc ve benzersiz parolalar kullan\u0131n.
\n*   Minimum Ayr\u0131cal\u0131k:<\/strong> Yaln\u0131zca ger\u00e7ekten ihtiya\u00e7 duyan kullan\u0131c\u0131lara sudo<\/code> ayr\u0131cal\u0131klar\u0131 verin. Gereksiz yere herkese sudo<\/code> yetkisi vermekten ka\u00e7\u0131n\u0131n.
\n*   NOPASSWD<\/code> Kullan\u0131m\u0131ndan Ka\u00e7\u0131n\u0131n:<\/strong> M\u00fcmk\u00fcn oldu\u011funca NOPASSWD<\/code> se\u00e7ene\u011fini kullanmay\u0131n. E\u011fer kullanmak zorundaysan\u0131z, bu kural\u0131 belirli komutlarla s\u0131n\u0131rlay\u0131n, ALL<\/code> yerine. \u00d6rne\u011fin: yeni_kullanici ALL=(ALL) NOPASSWD: \/usr\/bin\/apt update<\/code>.
\n*   Loglar\u0131 Kontrol Edin:<\/strong> \/var\/log\/auth.log<\/code> dosyas\u0131n\u0131 d\u00fczenli olarak kontrol ederek sudo<\/code> kullan\u0131m\u0131n\u0131 denetleyin ve \u015f\u00fcpheli etkinlikleri tespit edin.
\n*   Sudo Zaman A\u015f\u0131m\u0131:<\/strong> Varsay\u0131lan olarak, sudo<\/code> bir s\u00fcre sonra tekrar parola ister. Bu s\u00fcreyi visudo<\/code> i\u00e7inde Defaults timestamp_timeout=X<\/code> (X saniye cinsinden) ile ayarlayabilirsiniz. Daha k\u0131sa bir zaman a\u015f\u0131m\u0131, sistem g\u00fcvenli\u011fini art\u0131r\u0131r.<\/p>\n
SSH Anahtarlar\u0131n\u0131n Kurulumu ve Kullan\u0131m\u0131<\/h3>\n
SSH anahtarlar\u0131, sunuculara parola girmeden, \u015fifreli ve g\u00fcvenli bir \u015fekilde ba\u011flanman\u0131n en iyi yoludur. Bu y\u00f6ntem, kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00e7ok daha diren\u00e7lidir ve otomasyon senaryolar\u0131 i\u00e7in vazge\u00e7ilmezdir.<\/p>\n
SSH Nedir ve Neden Anahtarlar Kullan\u0131lmal\u0131?<\/h4>\n
SSH (Secure Shell), \u015fifrelenmi\u015f bir protokol kullanarak a\u011f \u00fczerinden g\u00fcvenli bir \u015fekilde komut \u00e7al\u0131\u015ft\u0131rmak, dosya transferi yapmak ve di\u011fer a\u011f hizmetlerini kullanmak i\u00e7in kullan\u0131l\u0131r. Geleneksel olarak, SSH ba\u011flant\u0131lar\u0131 kullan\u0131c\u0131 ad\u0131 ve parola ile kimlik do\u011frulamas\u0131 yapar.<\/p>\n
*   Parola Tabanl\u0131 Kimlik Do\u011frulaman\u0131n Zay\u0131fl\u0131klar\u0131:<\/strong>
\n    *   Kaba Kuvvet Sald\u0131r\u0131lar\u0131:<\/strong> Sald\u0131rganlar, do\u011fru parolay\u0131 bulana kadar s\u00fcrekli farkl\u0131 parolalar deneyebilir.
\n    *   Zay\u0131f Parolalar:<\/strong> Kullan\u0131c\u0131lar\u0131n zay\u0131f veya tahmin edilebilir parolalar se\u00e7me e\u011filimi, sistemleri riske atar.
\n    *   Parola S\u0131z\u0131nt\u0131lar\u0131:<\/strong> Parolalar, veri ihlalleri veya keylogger’lar arac\u0131l\u0131\u011f\u0131yla \u00e7al\u0131nabilir.
\n*   Anahtar Tabanl\u0131 Kimlik Do\u011frulaman\u0131n Avantajlar\u0131:<\/strong>
\n    *   Y\u00fcksek G\u00fcvenlik:<\/strong> Anahtarlar \u00e7ok uzun ve karma\u015f\u0131k oldu\u011fundan, kaba kuvvet sald\u0131r\u0131lar\u0131yla k\u0131r\u0131lmalar\u0131 pratik olarak imkans\u0131zd\u0131r.
\n    *   Parolas\u0131z Eri\u015fim:<\/strong> Anahtar \u00e7ifti bir kez kurulduktan sonra, sunucuya ba\u011flanmak i\u00e7in parola girmenize gerek kalmaz (anahtar parolas\u0131 hari\u00e7).
\n    *   Otomasyon:<\/strong> Betiklerin ve otomasyon ara\u00e7lar\u0131n\u0131n sunuculara g\u00fcvenli bir \u015fekilde ba\u011flanmas\u0131n\u0131 sa\u011flar.
\n    *   Asimetrik \u015eifreleme:<\/strong> Bir genel anahtar (public key) ve bir \u00f6zel anahtar (private key) \u00e7ifti kullan\u0131l\u0131r. Genel anahtar sunucuda saklan\u0131r, \u00f6zel anahtar ise istemcide. \u00d6zel anahtar, genel anahtar\u0131n \u015fifresini \u00e7\u00f6zebilir, ancak tersi m\u00fcmk\u00fcn de\u011fildir.<\/p>\n
SSH Anahtar \u00c7ifti Olu\u015fturma<\/h4>\n
SSH anahtar \u00e7ifti, genellikle istemci makinenizde olu\u015fturulur. \u0130stemci makineniz bir masa\u00fcst\u00fc bilgisayar, diz\u00fcst\u00fc bilgisayar veya ba\u015fka bir sunucu olabilir.<\/p>\n
Bir terminal a\u00e7\u0131n ve a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
ssh-keygen -t ed25519 -b 4096 -C \"kullanici_adi@host_adi\"<\/code><\/pre>\n
*   ssh-keygen<\/code>: SSH anahtar \u00e7ifti olu\u015fturmak i\u00e7in kullan\u0131lan komut.
\n*   -t ed25519<\/code>: Olu\u015fturulacak anahtar\u0131n t\u00fcr\u00fcn\u00fc belirtir. Ed25519, modern ve g\u00fcvenli bir anahtar t\u00fcr\u00fcd\u00fcr. Eski sistemlerle uyumluluk i\u00e7in RSA da kullanabilirsiniz (-t rsa -b 4096<\/code>). -b 4096<\/code> RSA i\u00e7in bit uzunlu\u011funu belirtir, Ed25519 i\u00e7in bu parametreye gerek yoktur.
\n*   -C \"kullanici_adi@host_adi\"<\/code>: Anahtara bir yorum ekler. Bu, \u00f6zellikle birden fazla anahtar\u0131n\u0131z oldu\u011funda anahtarlar\u0131 tan\u0131mlaman\u0131za yard\u0131mc\u0131 olur.<\/p>\n
Komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra, sizden anahtar \u00e7iftinin kaydedilece\u011fi konumu ve iste\u011fe ba\u011fl\u0131 bir parola (passphrase) girmenizi isteyecektir:<\/p>\n
Generating public\/private ed25519 key pair.\nEnter file in which to save the key (\/home\/kullanici_adi\/.ssh\/id_ed25519):<\/code><\/pre>\n
Varsay\u0131lan konumu (\/home\/kullanici_adi\/.ssh\/id_ed25519<\/code>) kabul etmek i\u00e7in Enter tu\u015funa basabilirsiniz.<\/p>\n
Enter passphrase (empty for no passphrase): \nEnter same passphrase again:<\/code><\/pre>\n
Burada bir parola (passphrase) belirlemeniz \u015fiddetle tavsiye edilir. Bu parola, \u00f6zel anahtar\u0131n\u0131z\u0131n \u00e7al\u0131nmas\u0131 durumunda ek bir g\u00fcvenlik katman\u0131 sa\u011flar. Her ba\u011flant\u0131da bu parolay\u0131 girmeniz gerekecektir, ancak ssh-agent<\/code> kullanarak bu i\u015flemi kolayla\u015ft\u0131rabilirsiniz. E\u011fer parola girmek istemiyorsan\u0131z, Enter tu\u015funa basarak bo\u015f b\u0131rakabilirsiniz (ancak bu, g\u00fcvenlik riskini art\u0131r\u0131r).<\/p>\n
\u0130\u015flem tamamland\u0131\u011f\u0131nda, ~\/.ssh\/<\/code> dizininde iki dosya olu\u015facakt\u0131r:<\/p>\n
*   id_ed25519<\/code>: \u00d6zel anahtar\u0131n\u0131z. Bu dosyay\u0131 asla kimseyle payla\u015fmay\u0131n!<\/strong>
\n*   id_ed25519.pub<\/code>: Genel anahtar\u0131n\u0131z. Bu anahtar\u0131 sunucular\u0131n\u0131za kopyalayacaks\u0131n\u0131z.<\/p>\n
Genel Anahtar\u0131 Ubuntu Sunucuya Kopyalama<\/h4>\n
Olu\u015fturdu\u011funuz genel anahtar\u0131 (\u00f6rne\u011fin id_ed25519.pub<\/code>), ba\u011flanmak istedi\u011finiz Ubuntu 14.04 sunucusuna kopyalaman\u0131z gerekir. Bunun en kolay ve \u00f6nerilen yolu ssh-copy-id<\/code> komutunu kullanmakt\u0131r.<\/p>\n
Y\u00f6ntem 1: ssh-copy-id<\/code> Kullanarak (\u00d6nerilen)<\/strong><\/p>\n
ssh-copy-id<\/code> arac\u0131, genel anahtar\u0131n\u0131z\u0131 uzak sunucuya g\u00fcvenli bir \u015fekilde kopyalar ve do\u011fru dosya izinlerini ayarlar.<\/p>\n
ssh-copy-id -i ~\/.ssh\/id_ed25519.pub yeni_kullanici@sunucu_ip_adresi<\/code><\/pre>\n
*   -i ~\/.ssh\/id_ed25519.pub<\/code>: Kopyalanacak genel anahtar\u0131n yolunu belirtir.
\n*   yeni_kullanici<\/code>: Sunucudaki kullan\u0131c\u0131 ad\u0131 (burada sudo<\/code> ayr\u0131cal\u0131klar\u0131 verdi\u011fimiz kullan\u0131c\u0131).
\n*   sunucu_ip_adresi<\/code>: Ubuntu 14.04 sunucunuzun IP adresi veya hostname’i.<\/p>\n
Bu komut, sizden yeni_kullanici<\/code>‘n\u0131n sunucudaki parolas\u0131n\u0131 isteyecektir. Parolay\u0131 girdikten sonra, genel anahtar\u0131n\u0131z sunucudaki ~\/.ssh\/authorized_keys<\/code> dosyas\u0131na eklenecektir.<\/p>\n
The authenticity of host 'sunucu_ip_adresi (sunucu_ip_adresi)' can't be established.\nECDSA key fingerprint is SHA256:...\nAre you sure you want to continue connecting (yes\/no)? yes\nWarning: Permanently added 'sunucu_ip_adresi' (ECDSA) to the list of known hosts.\nyeni_kullanici@sunucu_ip_adresi's password: \n\nNumber of key(s) added: 1\n\nNow try logging into the machine, with:   \"ssh 'yeni_kullanici@sunucu_ip_adresi'\"\nand check to make sure that only the key(s) you wanted were added.<\/code><\/pre>\n
Y\u00f6ntem 2: Manuel Kopyalama (E\u011fer ssh-copy-id<\/code> Yoksa veya Tercih Edilirse)<\/strong><\/p>\n
E\u011fer ssh-copy-id<\/code> kullan\u0131lam\u0131yorsa veya manuel olarak yapmak istiyorsan\u0131z, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyin:<\/p>\n
1.  Genel Anahtar\u0131 Kopyalay\u0131n:<\/strong> \u0130stemci makinenizde genel anahtar\u0131n\u0131z\u0131n i\u00e7eri\u011fini kopyalay\u0131n:<\/p>\n
cat ~\/.ssh\/id_ed25519.pub<\/code><\/pre>\n
    \u00c7\u0131kt\u0131y\u0131 kopyalay\u0131n (\u00f6rne\u011fin ssh-ed25519 AAAA...<\/code>).<\/p>\n
2.  Sunucuya Ba\u011flan\u0131n:<\/strong> Parola kullanarak sunucuya SSH ile ba\u011flan\u0131n:<\/p>\n
ssh yeni_kullanici@sunucu_ip_adresi<\/code><\/pre>\n
    yeni_kullanici<\/code>‘n\u0131n parolas\u0131n\u0131 girin.<\/p>\n
3.  SSH Dizini Olu\u015fturun (E\u011fer Yoksa):<\/strong> Sunucuda, kullan\u0131c\u0131n\u0131n ana dizininde .ssh<\/code> dizinini olu\u015fturun ve izinlerini do\u011fru ayarlay\u0131n:<\/p>\n
mkdir -p ~\/.ssh\n    chmod 700 ~\/.ssh<\/code><\/pre>\n
4.  authorized_keys<\/code> Dosyas\u0131n\u0131 Olu\u015fturun\/D\u00fczenleyin:<\/strong> Genel anahtar\u0131 authorized_keys<\/code> dosyas\u0131na ekleyin. E\u011fer dosya yoksa olu\u015fturulur, varsa anahtar sonuna eklenir.<\/p>\n
echo \"GENEL_ANAHTAR_\u0130\u00c7ER\u0130\u011e\u0130\" >> ~\/.ssh\/authorized_keys<\/code><\/pre>\n
    GENEL_ANAHTAR_\u0130\u00c7ER\u0130\u011e\u0130<\/code> yerine kopyalad\u0131\u011f\u0131n\u0131z genel anahtar\u0131n tamam\u0131n\u0131 yap\u0131\u015ft\u0131r\u0131n. \u00d6rne\u011fin:<\/p>\n
echo \"ssh-ed25519 AAAA... yeni_kullanici@host_adi\" >> ~\/.ssh\/authorized_keys<\/code><\/pre>\n
5.  authorized_keys<\/code> \u0130zinlerini Ayarlay\u0131n:<\/strong> Bu dosyan\u0131n izinleri \u00e7ok \u00f6nemlidir. Yaln\u0131zca sahibinin okuma ve yazma izni olmal\u0131d\u0131r.<\/p>\n
chmod 600 ~\/.ssh\/authorized_keys<\/code><\/pre>\n
Bu ad\u0131mlar\u0131 tamamlad\u0131ktan sonra, genel anahtar\u0131n\u0131z sunucuda do\u011fru bir \u015fekilde yap\u0131land\u0131r\u0131lm\u0131\u015f olacakt\u0131r.<\/p>\n
SSH Anahtar Kimlik Do\u011frulamay\u0131 Test Etme<\/h4>\n
Genel anahtar\u0131 sunucuya kopyalad\u0131ktan sonra, istemci makinenizden parola kullanmadan ba\u011flanmay\u0131 deneyin:<\/p>\n
ssh yeni_kullanici@sunucu_ip_adresi<\/code><\/pre>\n
E\u011fer anahtar\u0131n\u0131za bir parola (passphrase) belirlediyseniz, sizden bu parolay\u0131 girmeniz istenecektir. E\u011fer belirlemediyseniz veya ssh-agent<\/code> kullan\u0131yorsan\u0131z, do\u011frudan sunucuya ba\u011flanman\u0131z gerekir. Ba\u015far\u0131l\u0131 bir \u015fekilde ba\u011flan\u0131rsan\u0131z, anahtar tabanl\u0131 kimlik do\u011frulama do\u011fru \u015fekilde \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n
SSH Arac\u0131s\u0131 (ssh-agent) ve Anahtar Y\u00f6netimi<\/h4>\n
E\u011fer SSH anahtar\u0131n\u0131za bir parola belirlediyseniz, her ba\u011flant\u0131 kurdu\u011funuzda bu parolay\u0131 girmeniz gerekir. Bu, g\u00fcvenlik i\u00e7in iyi olsa da, s\u00fcrekli tekrar eden bir i\u015flem olabilir. ssh-agent<\/code>, \u00f6zel anahtar\u0131n\u0131z\u0131n \u015fifresini bir kez \u00e7\u00f6zerek, oturumunuz boyunca bu parolay\u0131 tekrar girmenize gerek kalmadan SSH ba\u011flant\u0131lar\u0131 kurman\u0131z\u0131 sa\u011flayan bir programd\u0131r.<\/p>\n
1.  ssh-agent<\/code>‘\u0131 Ba\u015flatma:<\/strong> \u00c7o\u011fu masa\u00fcst\u00fc ortam\u0131nda ssh-agent<\/code> otomatik olarak ba\u015flat\u0131l\u0131r. E\u011fer ba\u015flat\u0131lmad\u0131ysa veya bir sunucuda kullan\u0131yorsan\u0131z, \u015fu komutla ba\u015flatabilirsiniz:<\/p>\n
eval \"$(ssh-agent -s)\"<\/code><\/pre>\n
    Bu komut, ssh-agent<\/code>‘\u0131 ba\u015flat\u0131r ve gerekli ortam de\u011fi\u015fkenlerini ayarlar.<\/p>\n
2.  \u00d6zel Anahtar\u0131 ssh-agent<\/code>‘a Ekleme:<\/strong> Anahtar\u0131n\u0131z\u0131 ssh-agent<\/code>‘a eklemek i\u00e7in ssh-add<\/code> komutunu kullan\u0131n:<\/p>\n
ssh-add ~\/.ssh\/id_ed25519<\/code><\/pre>\n
    E\u011fer anahtar\u0131n\u0131z\u0131n bir parolas\u0131 varsa, sizden bu parolay\u0131 girmenizi isteyecektir. Parolay\u0131 bir kez girdikten sonra, oturumunuz s\u00fcresince tekrar girmeniz gerekmez.<\/p>\n
3.  Kal\u0131c\u0131 ssh-agent<\/code>:<\/strong> ssh-agent<\/code>‘\u0131n her oturum a\u00e7t\u0131\u011f\u0131n\u0131zda otomatik olarak ba\u015flamas\u0131n\u0131 ve anahtar\u0131n\u0131z\u0131 eklemesini sa\u011flamak i\u00e7in, yukar\u0131daki komutlar\u0131 .bashrc<\/code> veya .zshrc<\/code> gibi kabuk yap\u0131land\u0131rma dosyan\u0131za ekleyebilirsiniz. Ancak, bu i\u015flem masa\u00fcst\u00fc ortamlar\u0131nda genellikle otomatikle\u015fmi\u015ftir ve manuel m\u00fcdahale gerektirmeyebilir.<\/p>\n
SSH Sunucu Yap\u0131land\u0131rmas\u0131 (Ubuntu 14.04 Sunucuda)<\/h4>\n
SSH anahtarlar\u0131n\u0131 kullanmaya ba\u015flad\u0131ktan sonra, sunucunuzun g\u00fcvenli\u011fini daha da art\u0131rmak i\u00e7in SSH sunucu yap\u0131land\u0131rmas\u0131n\u0131 (sshd_config<\/code>) d\u00fczenlemeniz \u015fiddetle tavsiye edilir.<\/p>\n
1.  sshd_config<\/code> Dosyas\u0131n\u0131 A\u00e7ma:<\/strong> Sunucuda sudo<\/code> ayr\u0131cal\u0131klar\u0131 olan bir kullan\u0131c\u0131 olarak oturum a\u00e7\u0131n ve a\u015fa\u011f\u0131daki komutla yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/ssh\/sshd_config<\/code><\/pre>\n
    (Veya tercih etti\u011finiz d\u00fczenleyiciyi kullan\u0131n, \u00f6rne\u011fin vi<\/code>).<\/p>\n
2.  \u00d6nemli Yap\u0131land\u0131rma De\u011fi\u015fiklikleri:<\/strong><\/p>\n
    *   PermitRootLogin no<\/code>:<\/strong> root<\/code> kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan SSH ile ba\u011flanmas\u0131n\u0131 engelleyin. Bu, en \u00f6nemli g\u00fcvenlik \u00f6nlemlerinden biridir. root<\/code> olarak \u00e7al\u0131\u015fman\u0131z gerekti\u011finde, normal bir kullan\u0131c\u0131 olarak ba\u011flan\u0131p sudo<\/code> kullan\u0131n.<\/p>\n
PermitRootLogin no<\/code><\/pre>\n
    *   PasswordAuthentication no<\/code>:<\/strong> Anahtar tabanl\u0131 kimlik do\u011frulaman\u0131z\u0131n d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olduktan sonra<\/strong>, parola tabanl\u0131 kimlik do\u011frulamay\u0131 tamamen devre d\u0131\u015f\u0131 b\u0131rak\u0131n. Bu, kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00e7ok g\u00fc\u00e7l\u00fc bir savunmad\u0131r. Bu de\u011fi\u015fikli\u011fi yapmadan \u00f6nce anahtar\u0131n\u0131zla sorunsuz ba\u011flanabildi\u011finizden emin olun, aksi takdirde sunucuya eri\u015fiminizi kaybedebilirsiniz!<\/strong><\/p>\n
PasswordAuthentication no<\/code><\/pre>\n
    *   PubkeyAuthentication yes<\/code>:<\/strong> Genel anahtar kimlik do\u011frulamas\u0131n\u0131n etkin oldu\u011fundan emin olun (varsay\u0131lan olarak genellikle yes<\/code>‘tir).<\/p>\n
PubkeyAuthentication yes<\/code><\/pre>\n
    *   Port<\/code> De\u011fi\u015fikli\u011fi (\u0130ste\u011fe Ba\u011fl\u0131 ama \u00d6nerilir):<\/strong> SSH’nin varsay\u0131lan portu olan 22’yi de\u011fi\u015ftirmek, otomatik botlar\u0131n ve taray\u0131c\u0131lar\u0131n sunucunuzu bulmas\u0131n\u0131 zorla\u015ft\u0131r\u0131r. \u00d6rne\u011fin, 2222 gibi y\u00fcksek numaral\u0131 bir port kullanabilirsiniz.<\/p>\n
Port 2222<\/code><\/pre>\n
        E\u011fer portu de\u011fi\u015ftirirseniz, g\u00fcvenlik duvar\u0131n\u0131zda (ufw) yeni porta izin vermeyi unutmay\u0131n: sudo ufw allow 2222\/tcp<\/code>. Ba\u011flan\u0131rken de ssh -p 2222 yeni_kullanici@sunucu_ip_adresi<\/code> komutunu kullanman\u0131z gerekir.<\/p>\n
    *   AllowUsers<\/code> veya AllowGroups<\/code> (\u0130ste\u011fe Ba\u011fl\u0131):<\/strong> Yaln\u0131zca belirli kullan\u0131c\u0131lar\u0131n veya gruplar\u0131n SSH ile ba\u011flanmas\u0131na izin vererek eri\u015fimi daha da k\u0131s\u0131tlayabilirsiniz.<\/p>\n
AllowUsers yeni_kullanici baska_kullanici\n        # Veya\n        # AllowGroups sshusers<\/code><\/pre>\n
3.  De\u011fi\u015fiklikleri Kaydet ve SSH Servisini Yeniden Ba\u015flat:<\/strong> Yap\u0131land\u0131rma dosyas\u0131n\u0131 kaydedin ve SSH servisini yeniden ba\u015flatarak de\u011fi\u015fikliklerin etkili olmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n
sudo service ssh restart\n    # Veya eski init sistemi i\u00e7in\n    # sudo \/etc\/init.d\/ssh restart<\/code><\/pre>\n
    Servisi yeniden ba\u015flatt\u0131ktan sonra, yeni kurallar\u0131n\u0131z ge\u00e7erli olacakt\u0131r.<\/p>\n
SSH G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h4>\n
*   \u00d6zel Anahtar\u0131n\u0131z\u0131 Koruyun:<\/strong> \u00d6zel anahtar\u0131n\u0131z, evinizin anahtar\u0131 gibidir. Onu kimseyle payla\u015fmay\u0131n ve g\u00fcvenli bir yerde saklay\u0131n. Bir parola (passphrase) ile koruyun.
\n*   Parola Kimlik Do\u011frulamay\u0131 Kapat\u0131n:<\/strong> Anahtar tabanl\u0131 kimlik do\u011frulamas\u0131 \u00e7al\u0131\u015f\u0131r \u00e7al\u0131\u015fmaz, parola tabanl\u0131 kimlik do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n (PasswordAuthentication no<\/code>).
\n*   root<\/code> Eri\u015fimi Yok:<\/strong> PermitRootLogin no<\/code> ayar\u0131n\u0131 mutlaka kullan\u0131n.
\n*   SSH Portunu De\u011fi\u015ftirin:<\/strong> Varsay\u0131lan portu de\u011fi\u015ftirmek, otomatik sald\u0131r\u0131lar\u0131 azalt\u0131r.
\n*   fail2ban<\/code> Kullan\u0131n:<\/strong> fail2ban<\/code> gibi bir ara\u00e7, ba\u015far\u0131s\u0131z giri\u015f denemelerini izleyerek ve \u015f\u00fcpheli IP adreslerini otomatik olarak engelleyerek sunucunuzu kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 korur.
\n*   Anahtarlar\u0131n\u0131z\u0131 Yedekleyin:<\/strong> \u00d6zel anahtar\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde yedekleyin. Anahtar\u0131n\u0131z\u0131 kaybederseniz, sunucular\u0131n\u0131za eri\u015fiminizi kaybedebilirsiniz.
\n*   ~\/.ssh\/config<\/code> Dosyas\u0131:<\/strong> Birden fazla sunucuya ba\u011flan\u0131yorsan\u0131z, ~\/.ssh\/config<\/code> dosyas\u0131n\u0131 kullanarak ba\u011flant\u0131lar\u0131 kolayla\u015ft\u0131rabilirsiniz. \u00d6rne\u011fin:<\/p>\n
Host my_server\n        HostName sunucu_ip_adresi\n        User yeni_kullanici\n        Port 2222\n        IdentityFile ~\/.ssh\/id_ed25519<\/code><\/pre>\n
    Art\u0131k ssh my_server<\/code> yazarak ba\u011flanabilirsiniz.<\/p>\n
Sonu\u00e7<\/h3>\n
Ubuntu 14.04 \u00fczerinde sudo<\/code> ve SSH anahtarlar\u0131n\u0131n kurulumu ve do\u011fru yap\u0131land\u0131r\u0131lmas\u0131, sistem g\u00fcvenli\u011fini ve y\u00f6netim verimlili\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131ran temel ad\u0131mlard\u0131r. sudo<\/code> ile ayr\u0131cal\u0131k y\u00f6netimini merkezile\u015ftirerek root<\/code> kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan kullan\u0131m\u0131ndan kaynaklanan riskleri azalt\u0131r, her eylemin denetlenebilir olmas\u0131n\u0131 sa\u011flars\u0131n\u0131z. SSH anahtarlar\u0131 ise parola tabanl\u0131 kimlik do\u011frulaman\u0131n zay\u0131fl\u0131klar\u0131n\u0131 ortadan kald\u0131rarak sunucular\u0131n\u0131za g\u00fcvenli, \u015fifreli ve parolas\u0131z eri\u015fim imkan\u0131 sunar.<\/p>\n
Bu makalede anlat\u0131lan ad\u0131mlar\u0131 izleyerek, Ubuntu 14.04 sunucular\u0131n\u0131z\u0131 daha g\u00fcvenli ve y\u00f6netilebilir hale getirebilirsiniz. Unutulmamal\u0131d\u0131r ki, sistem g\u00fcvenli\u011fi s\u00fcrekli bir s\u00fcre\u00e7tir. D\u00fczenli g\u00fcncellemeler, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131 ve di\u011fer g\u00fcvenlik \u00f6nlemleriyle birlikte bu temel ad\u0131mlar, sa\u011flam bir g\u00fcvenlik duru\u015fu olu\u015fturman\u0131za yard\u0131mc\u0131 olacakt\u0131r. Her zaman en iyi g\u00fcvenlik uygulamalar\u0131n\u0131 takip edin ve sistemlerinizi d\u00fczenli olarak g\u00f6zden ge\u00e7irin.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131\nUbuntu 14.04 LTS (Trusty Tahr), uzun s\u00fcreli destek sa\u011flayan ve","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-35921","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 Ubuntu 14.04 LTS (Trusty Tahr), uzun s\u00fcreli destek sa\u011flayan ve\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-05T12:40:49+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"18 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131\",\"datePublished\":\"2025-12-05T12:40:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\"},\"wordCount\":3130,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\",\"name\":\"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-05T12:40:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131","og_description":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 Ubuntu 14.04 LTS (Trusty Tahr), uzun s\u00fcreli destek sa\u011flayan ve","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-05T12:40:49+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"18 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131","datePublished":"2025-12-05T12:40:49+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/"},"wordCount":3130,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/","name":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-05T12:40:49+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-14-04-uzerinde-sudo-ve-ssh-anahtarlarinin-kurulumu-ve-guvenli-kullanimi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 14.04 \u00dczerinde Sudo ve SSH Anahtarlar\u0131n\u0131n Kurulumu ve G\u00fcvenli Kullan\u0131m\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35921"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35921\/revisions"}],"predecessor-version":[{"id":35922,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35921\/revisions\/35922"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}