g6u@ d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZmZ G d de Z
G d de Z G d de Z G d d
e Z
d Zg d Zd
gZg dZdZdZdZ G d d ZdS ) N)S_IRUSRS_IRGRPc e Zd Zd ZdS )
NoSuchUserc D t | d| d d S )NzNo such user () Exception__init__)selfusers /builddir/build/BUILDROOT/alt-python27-cllib-3.4.36-1.el9.cloudlinux.x86_64/opt/cloudlinux/venv/lib/python3.11/site-packages/clsudo.pyr zNoSuchUser.__init__ s* 4!9$!9!9!9::::: N__name__
__module__ __qualname__r r r r r s# ; ; ; ; ;r r c e Zd Zd ZdS ) NoSuchGroupc D t | d| d d S )NzNo such group (r r )r groups r r zNoSuchGroup.__init__ s* 4!;5!;!;!;<<<<>>>>r Nr r r r r r s# ? ? ? ? ?r r z /etc/sudoers)z/bin/psz /bin/grepz
/sbin/servicez%/usr/bin/getcontrolpaneluserspackagesz/usr/sbin/lvectlz>/usr/local/directadmin/plugins/new_lvemanager/admin/GetDomainsz0/usr/share/l.v.e-manager/utils/cloudlinux-cli.pyz5/usr/share/l.v.e-manager/utils/cloudlinux-cli-user.py)/usr/bin/cl-selectorz/usr/bin/pinisetz/usr/sbin/lvepsz/usr/bin/selectorctlzDefaults:%s !requirettyz-%%%s ALL=NOPASSWD: LVECTL_CMDS, SELECTOR_CMDSzDefaults:%%%s !requirettyc x e Zd ZdZdZg ZdZdZdZdZ dZ
dZ dZ dZ
dZdZeefd Zeefd Zeefd Zeefd Zeefd Zeefd Zed
Zed Zed Zed
Zed Z ed Z ed Z dS )Clsudoz/
Adds CloudLinux users to sudoers file
NFc t | t | t | t j s:t j dd t z t j s:t j dd t z t j s:t j dd t z t j
s"t j | d t j s"t j | d t j s"t j | d t j s(t j t" | fz t dS ) z@
Adds username to sudoers file (for lvemanager)
Cmnd_Alias LVECTL_CMDS = , z Cmnd_Alias LVECTL_USER_CMDS = Cmnd_Alias SELECTOR_CMDS = ALL=NOPASSWD: LVECTL_CMDS% ALL=(ALL) NOPASSWD: LVECTL_USER_CMDS ALL=NOPASSWD: SELECTOR_CMDSN)r# update_commands_list _check_user
_get_contents has_alias sudoers_listappendjoinALIAS_LVECTL_CMDShas_user_aliasALIAS_LVECTL_USER_CMDShas_selector_aliasALIAS_SELECTOR_CMDS
has_rightshas_user_rightshas_selector_rights
has_actionDEFAULTS_REQUIRETTY_write_contentsr
sudoers_files r add_userzClsudo.add_userE s ##L1114 T""" c & &'BTYYO`EaEa'a b b b$ m & &'G$))TjJkJk'k l l l( g & &'DtyyQdGeGe'e f f f L & &$'J'J'J K K K% W & &$'U'U'U V V V) N & &$'L'L'L M M M F & &':dW'D E E E r c |t _ t | t | t j s t j d t j s"t j | d t j s(t j t | fz t
dS )z<
Adds username to sudoers file (for cagefs)
zOCmnd_Alias CAGEFS_CMDS = /usr/sbin/cagefsctl, /bin/ps, /bin/grep, /sbin/service ALL=NOPASSWD: CAGEFS_CMDSN) r# filepathr, r- has_cagefs_aliasr/ r0 has_cagefs_rightsr: r; r< r= s r add_cagefs_userzClsudo.add_cagefs_user_ s
'4 T"""& L & & (K
L
L
L' L & &$'J'J'J K K K F & &':dW'D E E E r c t | t | t | t j s:t j dd t z t j s:t j dd t z t j s(t j t | fz t j
s(t j t | fz t dS )zJ
Adds group to sudoers file, grants access to LVE Manager
r% r& r' N)r# r+ _check_group_get_contents_groupr. r/ r0 r1 r2 r5 r6 r: GROUP_LVECTL_SELECTORhas_group_actionGROUP_DEFAULTS_REQUIRETTYr< )
group_namer> s r add_lvemanager_groupzClsudo.add_lvemanager_groupp s ##L111J'''"":... c & &'BTYYO`EaEa'a b b b( g & &'DtyyQdGeGe'e f f f N & &'<
}'L M M M& R & &'@J='P Q Q Q r c |t _ t t j d 5 }| t _ ddd n # 1 swxY w Y d}d}|t
t j k rjt j | }| d|v s
t | fz |v r"t j | d}e|dz
}|t
t j k j|rt dS dS # t t f$ r}t |d}~ww xY w) z5
Removes username from sudoers file
utf-8encodingNr Fz ALL=NOPASSWD:T )
r# rB openread
splitlinesr/ lenr; remover< IOErrorOSErrorr )r
r> fidxremovedlinees r remove_userzClsudo.remove_user s
' ,fo888
cmnd_dictis_sudoer_changer[ command_string
aliase_key aliase_list cmnd_listaliase_cmnd_items r r+ zClsudo.update_commands_list sE ' '//&/:: /@1DF F #,V-@#A#A ) ) C +4??+<+<
"
"'
K //%3%;%;J%K%K%Q%Q%S%SN . 4 4S 9 9I,7 " "(+9<11$7$>$>~$N$NM$ 1,0) - ?? 663A3I3I 2 D4 4+C0 n443A3I3I D U4 4+C0 15F- 888NJJ15F. KK'
'
P ! , , ,"$$! + ,s EG G>*G99G>c ~ dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _ d| }d| }t j
| d } t t t j
D ]\ }}d|v r[d|vr#| dd t j
|< d |vr#| dd
t j
|< d t _ dd |v r
d t _ ud
|v r
d t _ | | r#| | }|r d t _ | | r d t _ dS # t" t$ f$ r}t' |d}~ww xY w)zS
Reads file into list of strings
@param group_name: string
F%z
Defaults:%z/\s*ALL=NOPASSWD:\s*LVECTL_CMDS,\s*SELECTOR_CMDSrd r r! r r r Trc r N)r# r: rJ r. r7 r5 r9 rC rD r r rk rl r/ rn
startswithr rX rY r )rL group_prefix group_action
group_patternr[ rs r r^ s r rH zClsudo._get_contents_group" s ""' !$)!%*""' #( ':'' 0J00
z#b#b#bcc
, " " "'01D'E'E
3
3#^- ?? 663A3I3I 2 D4 4+C0 n443A3I3I D U4 4+C0 15F- +~=='+F$ +~==.2F+ !,,\:: 1$1$8$8 $H$HM$ 1,0)!,,\:: 3.2F+3
3
34 ! , , ,"$$! + ,s DF F<(F77F<c 4 t j t j } d}t j || \ }}t j |d }| d t j
dz | t t z }t j || t | st nm# t t" f$ rY} t j | rt j | n# t( $ r Y nw xY wt+ |d}~ww xY w t j |t j dS # t" $ r}t+ |d}~ww xY w)zX
Writes data to temporary file then checks it and rewrites sudoers file
lve_sudoers_)prefixdirw
N)rg rh ri r# rB tempfilemkstempfdopenwriter1 r/ closer r chmod_is_file_validrX rY existsunlinkr
r rename)rj temp_prefixfd temp_pathfomaskr^ s r r< zClsudo._write_contentsU s
-wv77H(K $ ,KX N N NMB 2s##B HHTYYv 233d: ; ; ; HHJJJW$D HY % % %((33
! - - -
7>>),, )Ii(((
#%%1 ,
- - Ii 1 1 1 1 1 - - -#%%1 , -sN C'C* *E<3D0/E0
D=:E<D==EE E9 9
FFFc
ddd| g}t j |t j t j t j 5 }| |j dk r d d d dS d d d n # 1 swxY w Y dS )Nz/usr/sbin/visudoz-cz-f)stdinstdoutstderrr FT)
subprocessPopenDEVNULLPIPESTDOUT communicate
returncode)filenamecmdprocs r r zClsudo._is_file_validq s
(
$ ? $
!## $ ts !A88A<?A<) r r r __doc__rB r/ r: rJ r. r3 r7 r8 r5 r9 rC rD staticmethod SUDOERS_FILEr? rE rM r_ ra r+ r, rG rk r- rH r< r r r r r# r# 4 s HLJ INJO $0 ! ! ! \!2 +7 ! ! ! \! 6B ! ! ! \!& '3 , , , \,, '3 # # # \ # *6 ) ) ) \)6 * * \* 1 1 \1 8 8 \8 >, >, \>,@ 0, 0, \0,d - - \-6 \ r r# )rg ry r~ r r r statr r r
r r r r r r2 r4 r6 r; rI rK r# r r r r s
! ! ! ! ! ! ! !; ; ; ; ; ; ; ;
= = = = =) = = =
= = = = =y = = =
? ? ? ? ? ? ? ?
I I I RR mmm / G 7 M M M M M M M M M Mr