§ …jÈ"ãóÜ—dZddlZddlZddlZddlmZddlmZddlm Z m Z mZmZm Z ddlmZmZn#e$r d„Zd „ZYnwxYweje¦«Zdd„Zdd„Zd ed dfd„Zd ed dfd„ZdS)z» Website isolation support for SSA (clos_ssa.ini) files. This module provides functions to manage clos_ssa.ini files in per-website directories when CageFS website isolation is enabled. éN)Úiglob)Ú disable_quotaé)Ú INI_FILE_NAMEÚINI_USER_LOCATIONS_BASEÚ$INI_USER_LOCATIONS_WEBSITE_ISOLATIONÚis_excluded_pathÚextract_php_version)Ú(is_website_isolation_allowed_server_wideÚis_isolation_enabledcó—dS©NF©róúL/opt/cloudlinux/venv/lib64/python3.11/site-packages/ssa/website_isolation.pyrr"ó€Øˆurcó—dSrr)Úusers rrr%rrÚreturnc ón—t¦«sdSi}tD]‚}t|d¦«D]h}t|¦«rŒ |d|¦«}n"#t d|¦«YŒExYwtj |t¦«} ||j |j¦«5t j|tj tjz¦«}t j|¦«5}t!|¦«}|r+| ¦«|j |jf||j|f<ddd¦«n#1swxYwYddd¦«n#1swxYwYŒ2#t&$rYŒ?t($rt d|¦«YŒfwxYwŒ„|sdSt-¦«} t.D]è}t|d¦«D]Î}t|¦«rŒ |d|¦«}n"#t d|¦«YŒExYwt1|j¦«sŒ]t!|¦«}|sŒo|j|f} | |vrŒ}|| \}}} tj |t¦«}tj tj |¦«¦«sŒë ||| ¦«5t7¦«5t|d¦«5}| |¦«ddd¦«n#1swxYwYddd¦«n#1swxYwYddd¦«n#1swxYwY| |j¦«Œ#t($r4}t d|t=|¦«¦«Yd}~ŒÈd}~wwxYwŒê| D]}t?|¦«ŒdS)zŸ Copy clos_ssa.ini files from base user paths to per-website directories. :param user_context_func: Context manager function for user permissions NÚpathrú!Cannot get pw_record for path: %súFailed to read %sÚwúFailed to create %s: %s) rrrr ÚloggerÚdebugÚosrÚjoinrÚpw_uidÚpw_gidÚopenÚO_RDONLYÚ O_NOFOLLOWÚfdopenr ÚreadÚpw_nameÚFileNotFoundErrorÚ ExceptionÚwarningÚsetrrÚexistsÚdirnamerÚwriteÚaddÚstrÚ"_regenerate_user_website_isolation)Úuser_context_funcÚbase_ini_filesÚlocationÚdir_pathÚ pw_recordÚini_fileÚfdÚfÚphp_verÚcreated_iniÚkeyÚcontentÚuidÚgidÚeÚusernames rÚ$copy_inis_to_website_isolation_pathsrB+s,€õ4Ñ5Ô5ðØˆð€NÝ+ðñˆÝ˜h vÔ.Ñ/Ô/ð ñ ˆHÝ Ñ)Ô)ð Øð Ø,˜H VÔ,¨XÑ6Ô6 øð Ý—’Ð@À(ÑKÔKÐKØøøøå”w—|’| HmÑ<Ô<ˆHð Ø&Ð& yÔ'7¸Ô9IÑJÔJððÝœ 2¬;½¼Ñ+FÑGÔGBÝœ 2™œð¨!Ý"5°hÑ"?Ô"?˜Ø"ðà !§¢¡¤¨)Ô*:¸IÔ’>¥"¤'§/¢/°(Ñ";Ô";Ñ<Ô<ð Øð Ø&Ð& s¨CÑ0Ô0ð)ð)µ-±/´/ð)ð)Ý˜h¨Ñ,Ô,ð)°ØŸš Ñ(Ô(Ð(ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)ð—’ Ô 1Ñ2Ô2Ð2Ñ2øÝð ð ð Ý—’Ð8¸(ÅCÈÁFÄFÑKÔKÐKØ‘øøøøð øøøñ9 ð> ð5ð5ˆÝ*¨8Ñ4Ô4Ð4Ð4ð5ð5sýÁAÁA7Â E$Â6AEÃ7=E Ä4EÅE ÅEÅE ÅEÅE$ÅEÅE$ÅEÅE$Å$ FÅ1$FÆFÇ#G5Ç5HÊ;MËL7ËL Ë'L Ë=L Ì L Ì L ÌL ÌL ÌL7Ì L$ Ì$L7Ì'L$ Ì(L7Ì+MÌ7L;Ì;MÌ>L;Ì?MÍ NÍ()NÎNc óÐ—t¦«sdSt¦«}tD]>}t|d¦«D]}t |¦«rŒ |d|¦«}n#YŒ*xYwt j |t¦«}t j |¦«rŸ ||j |j¦«5tj|¦«ddd¦«n#1swxYwY| |j¦«ŒÏ#t$r4}t d|t%|¦«¦«Yd}~Œd}~wwxYwŒ|D]}t'|¦«ŒŒ@dS)z’ Remove clos_ssa.ini files from all per-website directories. :param user_context_func: Context manager function for user permissions NrrzFailed to remove %s: %s)rr+rrr rrrrr,r r!Úunlinkr/r'r)rr*r0r1)r2Úremoved_inir4r5r6r7r@rAs rÚ(remove_inis_from_website_isolation_pathsrFzsÊ€õ4Ñ5Ô5ðØˆå‘%”%€Kå8ð9ñ9ˆÝ˜h vÔ.Ñ/Ô/ð ñ ˆHÝ Ñ)Ô)ð Øð Ø,˜H VÔ,¨XÑ6Ô6 øð Øøøøå”w—|’| HmÑ<Ô<ˆHÝŒw~Š~˜hÑ'Ô'ð ðØ*Ð*¨9Ô+;¸YÔ=MÑNÔNð,ð,Ýœ (Ñ+Ô+Ð+ð,ð,ð,ñ,ô,ð,ð,ð,ð,ð,ð,øøøð,ð,ð,ð,à—O’O IÔ$5Ñ6Ô6Ð6Ð6øÝ ðððÝ—N’NÐ#<¸hÍÈAÉÌÑOÔOÐOØHHH‘Høøøøðøøøñ ð$ð 9ð 9ˆHÝ.¨xÑ8Ô8Ð8Ð8ñ 9ð%9ð9sHÁA$Á$A(Â0D ÃC'ÃD Ã'C+Ã+D Ã.C+Ã/D Ä EÄ)EÅErcóº— tjdd|gddd¬¦«dS#tj$r,}t d||j¦«Yd}~dSd}~wwxYw)z` Needed to terminate php processes to immediately apply clos_ssa.ini creation/deletion. z/usr/sbin/cagefsctlz--site-isolation-regenerateT)Úcapture_outputÚcheckÚtextzBFailed to trigger cagefsctl site isolation regeneration for %s: %sN)Ú subprocessÚrunÚCalledProcessErrorrr*Ústdout)rr@s rr1r1›s¡€ð ÝŒØ "Ð$AÀ4ÐHØØØð ñ ô ð ð ð øõÔ(ð ð ð ÝŠØPØØ ŒHñ ô ð ð ð ð ð ð ð øøøøð øøøs‚ŸA®!AÁAc ó´—t¦«sdSt d|¦«i}tD]‡}t |d¦«D]m}t|¦«rŒ |d|¦«}|j|krŒ1n"#t d|¦«YŒQxYwtj |t¦«} ||j|j ¦«5tj|tjtjz¦«}tj|¦«5}t%|¦«} | r$| ¦«|j|j f|| <ddd¦«n#1swxYwYddd¦«n#1swxYwYŒ7#t($rYŒDt*$rt d|¦«YŒkwxYwŒ‰|st d|¦«dSt.D]×}t |d¦«D]½}t|¦«rŒ |d|¦«}|j|krŒ1n"#t d|¦«YŒQxYwt%|¦«} | sŒf| |vrŒk|| \} }}tj |t¦«}tj tj |¦«¦«sŒÙ |||¦«5t5¦«5t|d¦«5}| | ¦«ddd¦«n#1swxYwYddd¦«n#1swxYwYddd¦«n#1swxYwYt d |¦«Œ~#t*$r4} t d |t9| ¦«¦«Yd} ~ Œ·d} ~ wwxYwŒÙt d|¦«dS)ap Regenerate clos_ssa.ini files for a specific user's website isolation directories. This is called by cagefsctl when enabling website isolation for a user. Only creates per-website ini files if base per-user ini exists. :param user: Username to regenerate ini files for :param user_context_func: Context manager function for user permissions Nz:Regenerating clos_ssa.ini for user %s website isolation...rrrrz,No base clos_ssa.ini files found for user %srz Created %srz"Finished regenerating for user %s!)rrÚinforrr r'rrrrrr r!r"r#r$r%r r&r(r)r*rr,r-rr.r0)rr2r3r4r5r6r7r8r9r:r=r>r?r@s rÚregenerate_inis_for_userrQ®sZ€õ4Ñ5Ô5ðØˆå ‡K‚KÐLÈdÑSÔSÐSð€NÝ+ðñˆÝ˜h vÔ.Ñ/Ô/ð ñ ˆHÝ Ñ)Ô)ð Øð Ø,˜H VÔ,¨XÑ6Ô6 ØÔ$¨Ò,Ð,Øð-øð Ý—’Ð@À(ÑKÔKÐKØøøøå”w—|’| HmÑ<Ô<ˆHð Ø&Ð& yÔ'7¸Ô9IÑJÔJðeðeÝœ 2¬;½¼Ñ+FÑGÔGBÝœ 2™œðe¨!Ý"5°hÑ"?Ô"?˜Ø"ðeØ78·v²v±x´xÀÔAQÐS\ÔScÐ6d˜N¨7Ñ3ðeðeðeñeôeðeðeðeðeðeðeøøøðeðeðeðeðeðeðeñeôeðeðeðeðeðeðeøøøðeðeðeðeùøõ%ð ð ð Ø‘Ýð ð ð Ý—’Ð2°HÑ=Ô=Ð=Ø‘ð øøøñ+ ð2ðÝŠÐBÀDÑIÔIÐIØˆõ9ðñˆÝ˜h vÔ.Ñ/Ô/ð ñ ˆHÝ Ñ)Ô)ð Øð Ø,˜H VÔ,¨XÑ6Ô6 ØÔ$¨Ò,Ð,Øð-øð Ý—’Ð@À(ÑKÔKÐKØøøøå)¨(Ñ3Ô3ˆGØð Øà˜nÐ,Ð,Øà .¨wÔ 7ÑˆGS˜#Ý”w—|’| HmÑ<Ô<ˆHÝ”7—>’>¥"¤'§/¢/°(Ñ";Ô";Ñ<Ô<ð Øð Ø&Ð& s¨CÑ0Ô0ð)ð)µ-±/´/ð)ð)Ý˜h¨Ñ,Ô,ð)°ØŸš Ñ(Ô(Ð(ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)ð)ð)ð)ñ)ô)ð)ð)ð)ð)ð)ð)øøøð)ð)ð)ð)õ—’˜L¨(Ñ3Ô3Ð3Ñ3øÝð ð ð Ý—’Ð8¸(ÅCÈÁFÄFÑKÔKÐKØ‘øøøøð øøøñ7 õ>‡K‚KÐ4°dÑ;Ô;Ð;Ð;Ð;sýÁ!A?Á?BÃFÃAE7Ä6E ÅE7Å E$ Å$E7Å'E$ Å(E7Å+FÅ7E;Å;FÅ>E;Å?FÆ F9Æ$F9Æ8F9ÈH.È.I ËM:Ë"MË1L; ÌL$ÌL; Ì$L(Ì(L; Ì+L(Ì,L; Ì/MÌ;L? Ì?MÍL? ÍMÍM:ÍMÍM:ÍMÍM:Í: N8Î)N3Î3N8)rN)Ú__doc__ÚloggingrrKÚglobrÚsecureiorÚclos_ssa_inirrrr r Úclcagefslib.domainrrÚImportErrorÚ getLoggerÚ__name__rrBrFr0r1rQrrrúr[s”ðððð€€€Ø € € € ØÐÐÐØÐÐÐÐÐà"Ð"Ð"Ð"Ð"Ð"ðððððððððððððððØaÐaÐaÐaÐaÐaÐaÐaÐaøØðððððððððððð øøøð ˆÔ ˜8Ñ $Ô $€ðL5ðL5ðL5ðL5ð^9ð9ð9ð9ðB ¨Sð °Tð ð ð ð ð&P< 3ðP<¸dðP<ðP<ðP<ðP<ðP<ðP