]"}8 d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z dZ
dZd Zd
efd Zd ed
efd
Zd ed
efdZd ed
efdZd Zd Zd ed
efdZd ZdS ) N)Path)ClPwd)drop_privileges)get_user_var_cagefs_path)
write_via_tmpl %#Ds_ l c N t | }t j | d S )Nz/.cagefs/isolates.mounts)r pathlibr )user
cagefs_dirs Wopt/cloudlinux/venv/lib/python3.11/site-packages/clcagefslib/webisolation/jail_utils.pyget_jail_config_pathr
s( )$//J <:??? @ @@
document_rootc l t }| d D ]}||z }|t z dz }|dS )z
Generates unique id for an isolate website using FNV-1a 64-bit hash.
FNV-1a has excellent avalanche properties and distribution.
Must match the docroot_hash() function in jail C code.
zutf-8l 016x)_FNV_OFFSET_BASISencode
_FNV_PRIME)r
hash_valuechars r get_website_idr sP #J $$W-- D Dd
:-1CC
r r
c t | }t | }t t | dz }||z }| ddd | dd t
j t | dd t
j t | d t d }| d }t ||| t
j |d
t
j ||j d | d }t ||| t
j |d t
j |dd d
S )z
Create website token directory structure and files in /var/cagefs.
Creates:
- /var/cagefs//.cagefs/website// - token directory
.cagefs/websiteTi exist_okparentsmodei )r r r z/.cagefs.token z/.cagefs.websitei$ N)
r get_pw_by_namer r r mkdiroschownstrchmod_generate_passwordr pw_uid) r
r pw
website_idwebsite_base_dir website_dirtokentoken_file_pathdocroot_file_paths r create_website_token_directoryr/ + sj
% %B
..J 4T : :;;>OO"Z/K D$UCCCt%000 HS
q!$$$HS
u%%% r " "E
%444O+666H_e$$$H_bi+++ '888+ 0-@@@ H
&&&H
1%%%%%r c \ t | }t |j sdS t t |j | }t
| 5 | ddd ddd dS # 1 swxY w Y dS )z
Create overlay storage directory in user's home.
Creates:
- /.cagefs/websites// - storage base for overlays
Drops privileges to user before creating to ensure proper ownership.
NTi r )r r r pw_direxistsfull_website_pathr r! )r
r r( storage_bases r create_overlay_storage_directoryr5 Z s
% %B ?? ! ! # # )")]CCDDL D DD$UCCCD D D D D D D D D D D D D D D D D Ds ;B!!B%(B%c t t | dz }|t | z }| rt j | dS dS )z=
Remove website token directory structure and files.
r N)r r r r2 shutilrmtreer
r r* r+ s r remove_website_token_directoryr: l sg 4T : :;;>OO"^M%B%BBK #
k"""""# #r c \ t j dt | S )z5
Returns path: websites/
websites)r" pathjoinr )docroots r website_suffix_with_hashr@ x s" 7<<
N7$;$; < </.cagefs/websites/
z.cagefs)r" r= r> r@ )homedirr? s r r3 r3 s% 7<<,DW,M,M N NNr c t t | dz }|t | z }|dz d dS )z,
Removes cached namespace from disk
r z .cagefs.mntT)
missing_okN)r r r unlinkr9 s r invalidate_ns_cacherF sU 4T : :;;>OO"^M%B%BBK= ((D(99999r c | dk s| dk rt d dt t j | }d fd|D }|S )z
Generate a random password/token using the same algorithm as the C function.
Uses cryptographically secure random bytes and converts them to alphanumeric characters.
r r z Invalid buffer length requested>0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz c 3 . K | ]}|z V d S )N ).0bcharset charset_sizes r z%_generate_password.. s- EE1WQ -.EEEEEEr )
ValueErrorlensecrets token_bytesr> )length random_bytesresultrN rO s @@r r& r& sx
{{fsll:;;;NGw<r\ s
* * * * * * 3 3 3 3 3 3 ( ( ( ( ( ( )
A A A
#
,& ,&S ,& ,& ,& ,&^D3 Ds D D D D$ # #S # # # #= = =O O O:c :# : : : : r