j@ d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl m Z d dl
mZmZmZmZ d dlmZ d dlmZmZ d d lmZ d d
lmZ d d lm Z m Z m Z d d l m Z d d
l!m"Z" d dl#m$Z$ ddl%m&Z& ddl'm(Z( dZ)dZ*d8dZ+d9dZ,d Z-d Z.d Z/d Z0d Z1d Z2d Z3d:d Z4d8d Z5d;d!Z6d;d"Z7d# Z8d$ Z9d% Z:d& Z;d' Zd! {## ? $
"--// W > > > -c!fc!ff===>
A 2 Q Q#((3----Q
Ns AA B'(BBc
D t j | t d t j t j |d|| }| \ }}nA# t
t f$ r-}t j | d t | d}~ww xY w|j
||fS )a
Runs external process and returns output.
Differs from subprocess.check_output, run_command above, and check_output below in that it does not
throw an exception if process's return code != 0
:param cmd: command and arguments as a list
:param env_data
:param preexec_fn: Pre-exec function. None if don't need
:param cwd: Directory name to set as current
:return Cortege: (ret_code, stdout, stderr)
r T)r r r
preexec_fnr cwdr r N) r# r$ r% r& r( r) r* r r+ r, r- )r0 r1 r9 r: processr3 r4 r5 s r6 run_command_fullr< C s
> " {## ? ?!
#..00 W > > > -c!fc!ff===> w //s AA B((BBc d} t | }| }| n# t t f$ r Y nw xY w|S )z8
Reads file contents and returns it as a string
)r% readcloser) r* )filenamedefaults_contentsfs r6 read_file_as_stringrD _ sb
NN FFHH W
s 7< AAc t | i | d S N) check_output)argskwargss r6
check_callrJ m s $!&!!!!! c | dd }| d }| dd }| dd }|r| |z
} |d= t j d | t j t j dd|}nA# t
t f$ r-}t j | d t | d}~ww xY w|
\ }} |r)| | | ||
|j rt j |p| p| |S )
av
check_output(val1, val2, val3, arg4=val4)
equivalent
check_output(args=(val1, val2, val3), arg4=val4)
or equivalent
check_output(val1, args=(val2, val3), arg4=val4)
DON'T USE check_output((val1, val2, val3), arg4=val4)
:param tuple *args: arguments for command line
:param dict **kwargs: parameters for subprocess.Popen
:return str:
errorNrH r2 waitT)rH r r r r )popgetr# r$ r& r) r* r r+ r, r( writer@ rN r- r. )
rH rI rM args_from_kwargsr2 rN pr5 r r s
r6 rG rG q sN
JJw % %E zz&))
ZZ$
'
'F ::fd # #D 6N? l$zz]a l lek l l W ? ? ? -d1gs1vv>>>?]]__NFF
V | N 253LF3LfMMM Ms #*B C (CC c D fdt j D S )Nc g | ]A}t j t j | ?|BS rO )ospathisdirr/ ).0drX s r6
z list_dirs.. s< P P P!27== dA9N9N+O+O PA P P PrK )rW listdirrX s `r6 list_dirsr_ s' P P P Prz$'' P P PPrK c
# K | V |D ]M\ }}| t | z V |D ]1}| d t t ||f z V 2Nd S )N.)r, r/ map)rX versionsmajorminorsminors r6
versioningrg s
JJJ! < <
vSZZ < ":":;;; ; ; ; ; << >G ! " " i &&S\S\S\^f^f^f'ghhh G rK rc d}t | || } | }| n# | w xY w|S )zg
read file and close
:param path: file path
:param mode: reading mode
:return str:
N)modeerrors)r% r? r@ )rX r r datastreams r6 file_readr sU D
$T&
1
1
1F{{}} Ks ? Ac g }t | | } | }| n# | w xY w|S )zE
read litle file and close
:param path:
:return str:
r )r% readlinesr@ )rX r r r s r6 file_readlinesr sW D
$v
&
&
&F !! Ks > Awc t | || } | | | dS # | w xY wzN
write litle data to file and close
:param path:
:return str:
r N)r% rR r@ )rX liner r r s r6
file_writer sR $V
,
,
,F T ? Ac t | || } | | | dS # | w xY wr )r%
writelinesr@ )rX linesr r r s r6 file_writelinesr sT $V
,
,
,F% r c t j d dk r+t j d dk r| | S | |d }t | dk r|d ||d f}n |d ddf}|S )z
str.partition for all python versions
:param s: string to parse
:param sep: separator to split by
:return: cortege - see str.partition function for python 2.5+
r ro r r> )sys version_info partitionsplitlen)srv s_parts ret_corteges r6 rt rt s a C$4Q$71$<$<{{3 ggc1ooG
7||q qz3
3 qz2r* rK c t |d }n# t $ r Y dS w xY wd}t j | }|D ] }| | r|dz
} | |S )z"
find regex count in file
r Nr r )r% r* recompilesearchr@ )patternrX rC counterregexr s r6 grepr s sOO tt G Jw E << qLGGGIII Ns
!!c $ ddl m} || S )z
Determines is user should be skipped in selectorctl work
:param username: user name to check
:return: True - user should be skipped, False - not
r )is_admin)clcommon.cpapir )usernamer s r6 user_should_be_skippedr s( (''''' 8H rK c t j | se t | d d S # t t
f$ r>}t
d| dt | t j d Y d }~d S d }~ww xY wd S )Ni zError: failed to create:r )
rW rX rY r r* r) printr, r exit)dest_dirr5 s r6 make_dirr & s
7== " " 5 ) ) ) ) )! +XsCFF C C C HQKKKKKKKKK s 3 B3A==Bc t j | n# t $ r Y nw xY wt j | rt j | d d S d S )NT)rW unlinkr) rX rY shutilrmtreer^ s r6 remove_file_or_dirr / sn
$
w}}T "
dD!!!!!" "s
$$c t j | rEt j | | k r+t j | t j | | d S d S t
| t j | | d S # t $ r@}t d|d| dt | t j d Y d }~d S d }~ww xY w)Nz Error: failed to create symlinkz->r r ) rW rX islinkreadlinkr symlinkr r) r r, r r )srcdstr5 s r6 make_symlinkr 8 s
7>># !{3 3&& #
3$$$$$ '&
s # # # JsC
/dCc!ffMMM s A B &$B
C5CCc 2 t j | ddd S )N ),z: T)indent
separators sort_keys)jsondumps)r s r6 pretty_jsonr F s :d1 M M MMrK r Fc | }d} t | | \ }}n# t $ rC t j |dd | | d t j d Y nt $ r: |rn4t j |ddt z d t j d Y nAt $ r5 t j |dd|d | d t j d Y nw xY w||fS )
a
Safely resolve username and doc_root by domain,
or resolve document root by username,
or resolve document root and username by effective uid
:param pass_not_supported_panel: pass not supported panel for php selector
:param msg_format: error messages' format (json or text)
:param user: str -> name of unix user
:param domain: str -> domain of panel user
:return: tuple -> user, doc_root
N)ry domainERRORz(No domain found for user: {}, domain: {})statusmessager z6NodeJs/Ruby/Python selector not supported for %s panelzDomain z is not owned by the user )
r r r
print_diagformatr r r r r )ry r
msg_formatpass_not_supported_panel result_userresult_doc_roots r6 $safely_resolve_username_and_doc_rootr K sW KO'D(
(
(
$ __ 77a7h7himou7v7vww
# "/gjq/qrr
HQKKK 77bhbhbhjnjn7opp
''s A
C''A C');C'&C'c t | | d }|D ](}t | | d }||k r
|| c S )t d | )a
Transform all directories to realpath, compare and return config value
:param user: str -> unix user - owner of the config
:param directory: str -> wanted directory key
:param config: dict -> config to get value from,
should have directories as keys
r %Config does not contain directory: {})r~ KeyErrorr )ry rz config
abs_directoryconf_dir abs_conf_dirs r6 get_using_realpath_keysr u s{ i003M $ $"42215 L ( ((# # # # ) :AA)LL
M
MMrK c t | | d }d}t | }|D ]#}t | | d }||k r||= d}$|s"t d | dS )a
Transform all directories to realpath, compare and remove directory key
:param user: str -> unix user - owner of the config
:param directory: str -> wanted directory key
:param config: dict -> config to remove key from,
should have directories as keys
r FTr N)r~ listkeysr r )ry rz r r removed_at_least_one config_keysr r s r6 delete_using_realpath_keysr s i003M v{{}}%%K ( ("42215 L ( (x #' R>EEiPPQQQR RrK c ^ t | | d t | | d k S )a#
Checks that two paths in user home directory are the same after
stripping symlinks
:param user: Unix user whose home directory contains both paths
:type path1: str
:type path2: str
:return: True if paths are canonically the same otherwise False
:rtype: bool
r )r~ )ry path1path2s r6 realpaths_are_equalr s- tU # #A &+dE*B*B1*E EErK c l i }|si }t | |g|z }t j ||t j t j d }| \ }}|j } |s,| dk r&d | dt d}n| }||d< | |d< | rdnd |d
< |S ) z=
Run any process using the utility cagefs_enter_user
T)r r r r zUser's process "{}" failed and didn't return anything. It could mean that user has too small limit of PMEM for running of cloudlinux-selector. Please, increase the limit to user and try run process againrM )detailsresult timestampr2 r- Ffailed) CAGEFS_ENTER_USER_BINr# r$ r& r( r- r r strip)
ry path_to_utilityargs_for_utilityenv_varsr r0 r; r _retcodes
r6 run_process_in_cagefsr s
F $
8;K
KC s Q[Q`gklllG##%%IFA G
gmmCCI6/CZCZ
F8"F< &1ttEF8 MrK versionreturnc t dt d t d }d| dd }d}t d }| sdS t
| 5 }| }d d d n # 1 swxY w Y | d
st d | d ||v rd
S ||v r[t |
d
}| }|t | v rd
S n# | Y nxY wdS )ar
Check if python version is used by imunify packages
The algorithm is as follows:
- Verify if imunify services are installed
- Check if shebang contains the path to the specified Python version being checked
- If shebang contains the path to the imunify virtual environment,
determine the Python version it is based on by reading a symlink
lvemanagerF)releasedsnhandlez/opt/alt/pythonra r> z/opt/imunify360/venvz/usr/bin/imunify-serviceNz#!zERROR: "z" doesn't have a shebangT)r r LVEMANDSNreplacer is_filer% readline
startswith Exceptionru r r r, captureException) r
sentry_clientalt_pathimunify_venv_pathimunify_servicerC
first_linevenv_python_bin
python_bins r6 is_imunify_using_pythonr s '|_\=Z=Z`irwxxxM; b!9!9;;H.566O " " $ $ u)
/
"
" &a J & & & & & & & & & & & & & & & $$T** S Q Q Q QRR R z ! !4
* * ":#4#4T#:#:#@#@#B#B C CO(1133J3z??**t)&&((((( 5s7 'D0 6B D0 BD0 B /D0 A D0 0Ery c > t j fd}|S )z
Drops to user
c t j j t j j t j d< j t j d< d S )NUSERHOME)rW setgidpw_gidsetuidpw_uidenvironrs )ry user_pwds r6 funczdemote..func sG
(/"""
(/""" !
6 %_
6rK )rq rr )ry r r s ` @r6 demoter s: |D!!H- - - - - - KrK c l d }d}|D ](} | |g|R i |}|dz }# |$ r } | }Y d } ~ !d } ~ ww xY w|s||S )NFTrO )
r usersexception_typerH rI caught_exception
is_handled
user_aliasr r5 s
r6 apply_for_at_least_one_userr s J
T*6t666v66F
$ JJ ! ! ! !
Ms -(-c t | }d|j v r1|j dd }| | }t | S )a
Transforms a URL containing a wildcard ('*') in the netloc.
If the netloc of the URL contains a '*', it replaces the '*' with 'any'.
This is necessary because URLs with wildcards are not valid for HTTP requests.
Replacing '*' with 'any' ensures compatibility with systems or libraries
that do not support wildcards in URLs.
:param url: str - The URL to transform.
:return: str - The transformed URL with the wildcard replaced.
*any)netloc)r r r _replacer
)urlparsedr s r6 transform_wildcard_urlr" sT c]]F
fm &&sE22 // f rK rF )NNN)r N)r N)NNr F)J
__future__r r r rj rW rq r r# r r r r typingr r r r
pathlibr urllib.parser r
clcommon.clpwdr r r clcommon.cpapi.cpapiexceptionsr r r clcommon.utilsr clsentryr clsentry.utilsr
clselectprintr clselectexceptr r r r7 r< rD rJ rG r_ rg rm r~ r r r r rt r r r r r r r r r r r r, boolr r r r" rO rK r6 r/ s & % % % % % & & & & & &
/ / / / / / / / / / / / - - - - - - - - 8 8 8 8 8 8 " " " " " " P P P P P P P P P P ' ' ' ' ' ' ' ' ' ' ' ' * * * * * * " " " " " " * * * * * * 2 s 60 0 0 08 " " " DQ Q Q< < < &
$ & " " " N N N
'( '( '( '(TN N N"R R R(
F
F
F F$S $T $ $ $ $N $ rK