EdC d Z ddlZddlZddlZddlZddlZddlZddlmZm Z ddl
m Z m Z ddl
mZ ddlmZmZ ddlmZmZ ddlmZ d d
lmZ d d lmZ ej e Z d Z d
Z d Z!dZ"e G d d Z#e G d d Z$e G d d Z%d Z&d Z'd Z(d Z)d"dZ*d Z+d Z,d Z-ej. d Z/d Z0d Z1d Z2d! Z3dS )#z9Per-user domain config persistence (~/.lve/domains.json). N) dataclassfield)ListOptional)
disable_quota)ClPwddrop_privileges) userdomainsdocroot)CPAPIException ) id_registry)LvdErrorz.lvez domains.json)cpupmemionprociopsepvmemc e Zd ZU dZee ed< dZee ed< dZee ed< dZ ee ed< dZ
ee ed< dZ ee ed< dZ ee ed< d Z
ed
Zd Zd ZdS )
DomainLimitsNr r r r r r r c H d | j D S )z+Return only fields that are set (non-None).c i | ]
\ }}||| S N .0kvs py/websiteisolation/config.py
z(DomainLimits.to_dict../ s HHHA!-1--- )__dict__itemsselfs r! to_dictzDomainLimits.to_dict- s$ HH !4!4!6!6HHHHr# c b |s
| S | di d | D S )Nc F i | ] \ }}|t v |t | S r ) LIMIT_FIELDSintr s r! r" z*DomainLimits.from_dict..5 s. NNNDAqA z(DomainLimits.__bool__..= s& AAQ1D=AAAAAAr# )anyr$ valuesr& s r! __bool__zDomainLimits.__bool__< s- AA$-*>*>*@*@AAAAAAr# )__name__
__module__ __qualname__r r r, __annotations__r r r r r r r( classmethodr0 r4 r: r r# r! r r # s C# D(3- B
E8C= D(3- B
D(3- I I I P P [P
) ) )
B B B B Br# r c \ e Zd ZU dZeed< ee Zeed< d Z e
d Z dS ) DomainEntry namedefault_factorylimitsc D | j | j dS )NrC rF )rC rF r( r& s r! r( zDomainEntry.to_dictE s' Ik))++
r# c | | dd t | d S )NrC rB rF rH )getr r0 r- s r! r0 zDomainEntry.from_dictK sI s&"%% ))$((8*<*<==
r# N) r; r< r= rC strr> r r rF r( r? r0 r r# r! rA rA @ sj D#NNN 5 >>>FL>>>
[
r# rA c e Zd ZU eZeed< ee Z e
e ed< eddd Z e
e ed< d Zd Zd
Zd Zd Zedd
Zed Zd Zeej d Zed Zd Z dS ) LvdConfigversionrD domainsNF)defaultreprcompare_lve_idc 8 | j D ]}|j |k r|c S dS )z5Find domain entry by name. Returns None if not found.N)rO rC )r' rC ds r! find_domainzLvdConfig.find_domainY s1 Av~~ tr# c 8 fd| j D | _ dS )z Remove domain entry by name.c * g | ]}|j k
|S r rC )r rU rC s r!
z+LvdConfig.remove_domain..b s BBBa16T>>>>>r# N)rO )r' rC s `r!
remove_domainzLvdConfig.remove_domain` s$ BBBB4<BBB r# c H t | j | }|rS| | @| j t | | dS dS dS # t $ r' t d| j |d Y dS w xY w)zEResolve domain name from *docroot* and add it to the config.
NrY z(add_domain_by_docroot: uid=%s docroot=%sTexc_info)
_resolve_domain_for_docrootrS rV rO appendrA saver logwarningr' r domain_names r! add_domain_by_docrootz LvdConfig.add_domain_by_docrootd s >5dlGLLK
t / / < < D ##K[$A$A$ABBB
D D > > > KKB g
>
>
>
>
>
> >s A(A0 0-B! B!c " t | j | }|r@| | -| | | dS dS dS # t
$ r' t d| j |d Y dS w xY w)zJResolve domain name from *docroot* and remove it from the config.
Nz+remove_domain_by_docroot: uid=%s docroot=%sTr] )r_ rS rV r[ ra r rb rc rd s r! remove_domain_by_docrootz"LvdConfig.remove_domain_by_docrootp s >5dlGLLK
t / / < < H"";///
H H > > > KKE g
>
>
>
>
>
> >s AA -B
Bc 4 | j d | j D dS )Nc 6 g | ]}| S r )r( r rU s r! rZ z%LvdConfig.to_dict.. s ::: :::r# rN rO rl r& s r! r( zLvdConfig.to_dict| s) |::T\:::
r# c t |t rd|vr | | S | | dt d |d D | S )NrO rS rN c B g | ] }t | S r )rA r0 rk s r! rZ z'LvdConfig.from_dict.. s& GGG![**1--GGGr# )rN rO rS )
isinstancedictrJ LVD_CONFIG_VERSION)r. r/ lve_ids r! r0 zLvdConfig.from_dict st $%% '$)>)>3v&&& &sHHY(:;;GGtIGGG
r# c | | 5 | | cddd S # 1 swxY w Y dS )z;Load domains.json for a user (acquires flock for the read).N)_flock_read)r. rs s r! loadzLvdConfig.load s ZZ
% %99V$$ % % % % % % % % % % % % % % % % % %s 8<<c | j t d | | j 5 | ddd dS # 1 swxY w Y dS )z@Write domains.json for this user (acquires flock for the write).Nz,cannot save: config has no associated lve_id)rS r ru _writer& s r! ra zLvdConfig.save s < IJJ J
[[
&
& KKMMM s AAAc # 4 K t | 5 t | }t j |d }t j |t j t j z d } t j |t j
dV t j |t j t j | n8# t j |t j t j | w xY w ddd dS # 1 swxY w Y dS )z+Exclusive flock on a per-user sidecar file.z
.domains.locki N)
user_contextensure_config_dirospathjoinopenO_CREATO_RDWRfcntlflockLOCK_EXLOCK_UNclose)rs
config_dir lock_pathfds r! ru zLvdConfig._flock s( &
!
! *622J Z AAIBJ$:EBBB
B
... B
... B
... s* A D
0#C4D
5C<<D
DDc t | }t j | s | | S t |dd 5 }t j | }d d d n # 1 swxY w Y nK# t
j t f$ r2}t
d|| | | cY d }~S d }~ww xY w| || S )Nrn rzutf-8)encodingz failed to read config %s: %srs ) config_pathr} r~ existsr jsonrw JSONDecodeErrorIOErrorrb rc r0 )r. rs r~ fr/ es r! rv zLvdConfig._read s* 6""w~~d## '3v&&& & 'dC'222
$ay||
$
$
$
$
$
$
$
$
$
$
$
$
$
$
$$g. ' ' ' KK6a @ @ @3v&&& & & & & & & ' }}T&}111sA A; A/# A; /A33A; 6A37A; ;C'B>8C>Cc t | j }t | j }t j | d dz } t
||| d S # t $ r}t d| d| |d }~ww xY w)N )indent
zfailed to write config z: ) r| rS r r dumpsr( _write_via_tmpr r )r' r r~ contentr s r! ry zLvdConfig._write s &t|44
4<((*T\\^^A666= I :tW 5 5 5 5 5 I I I@T@@Q@@AAq H Is A( (
B
2BB
r ) r; r< r= rr rN r, r> r listrO r rA rS r rV r[ rf rh r( r? r0 rw ra staticmethod
contextlibcontextmanagerru rv ry r r# r! rM rM S s] %GS%%%!&t!
>
>
>
>
>
[
% % [%
\
2
2 [
2I I I I Ir# rM c " t d S )Nr )min_uid)r r r# r! _clpwdr s r# c t | d j S # t j $ r}t d| d |d}~ww xY w)z Get home directory for a uid.r zuser with uid z
not foundN)r
get_pw_by_uidpw_dirr NoSuchUserExceptionr )uidexcs r! get_homedirr sj Bxx%%c**1-44 $ B B B777788cABs +. AAAc t | S # t j $ r}t d| d |d}~ww xY w)zResolve username to uid.zuser 'z ' not foundN)r get_uidr r r )usernamer s r! get_uid_by_usernamer sb @xx ))) $ @ @ @555566C?@s # A AA c t | d S # t j t f$ r}t d| |d}~ww xY w)zResolve username from uid.r zno user found for uid N)r get_namesr r
IndexErrorr )rs r s r! get_usernamer si Cxx!!&))!,, %z 2 C C C88899sBCs &) AAAc | t | S |t | S t j }|dk rt d |S )zo
Resolve lve_id from either --lve-id or --username.
If neither, use effective UID (end-user mode).
Nr z(root must specify --lve-id or --username)r, r r} geteuidr )rs r r s r! resolve_lve_idr sR
6{{"8,,,
*,,C
axxABBB Jr# c v t | }t j |t t
S )z.Return path to the user's domains.json config.)r r} r~ r LVD_CONFIG_DIRLVD_CONFIG_FILE)rs homedirs r! r r s' &!!G
7<< A AAr# c t | }t j |t }t j | st j |dd |S )zCreate ~/.lve/ directory with proper permissions if it doesn't exist.
Caller must ensure privileges are already dropped to the target user.i T)modeexist_ok)r r} r~ r r isdirmakedirs)rs r r s r! r| r| sY &!!G g~66J
7== $ $ ;
JUT:::: r# c p d} t j d| d 5 }|j }| | | t j | ddd n # 1 swxY w Y t j || |rGt
j
| r* t j | dS # t $ r Y dS w xY wdS dS # |rEt
j
| r' t j | w # t $ r Y w w xY ww w xY w)z8Write content to a file atomically via a temporary file.NwF)dirdelete)
tempfileNamedTemporaryFilerC writeflushr} fsyncfilenoreplacer~ r removeOSError) directoryfilenamer temp_pathtmps r! r r s I
()E
J
J
J #cI IIg IIKKK HSZZ\\ " " " # # # # # # # # # # # # # # #
9h''' 22
)$$$$$
9 22
)$$$$
se C+ AA>2 C+ >BC+ BC+ C
C$#C$+"D5D#"D5#
D0-D5/D00D5c # K t j dk rct | }t | 5 t 5 dV ddd n # 1 swxY w Y ddd dS # 1 swxY w Y dS dV dS )u Drop privileges to the target user if running as root.
CLOS-4370: when invoked as root we pair drop_privileges with
secureio.disable_quota — creating ~/.lve/ and the lockfile / writing
domains.json must succeed even when the user is over disk quota,
otherwise OSError(EDQUOT) inside this block aborts batch operations
like `lvectl apply all` and leaves the rest of the users with stale
limits. disable_quota raises CAP_SYS_RESOURCE in the effective set
r N)r} r r r r )rs r s r! r{ r{ s
z||q ''
X
&
&
EEE s5 A0A A0A A0 A A00A47A4c t j } t j | sg S g }t j | D ]5} | t | &# t $ r Y 2w xY w|S )a Return list of LVE IDs (UIDs) that have domain isolation configured.
Scans the id_registry directory for per-user registry files.
Users only appear here after ``lvdctl set`` or ``lvdctl apply``
has been called at least once for one of their domains.
) r LVD_IDS_DIRr} r~ r listdirr` r,
ValueError)ids_dirresultrC s r! find_all_lve_ids_with_configr # s %G
7== ! !
F
7## MM#d)) $ $ $ $ H Ms "A**
A76A7c 6 t | S )z2Load the domain isolation config for a given user.)rM rw r s r! load_configr 6 s >>& ! !!r# c z t | d S # t $ r}t d| d |d}~ww xY w)z8Resolve domain name to document root path via panel API.r z&failed to resolve docroot for domain ''N)
cpapi_docroot Exceptionr )re r s r! resolve_docrootr ; s[ Y [))!,, Y Y YN NNNOOUXXYs
:5:c t | }t | pg D ]\ }}||k r|c S n;# t t t f$ r! t
d| |d Y nw xY wdS )zBReturn domain name whose document root matches *docroot*, or None.z4Cannot resolve domain for docroot: uid=%s docroot=%sTr] N)r r
r r r rb rc )r r r re drs r! r_ r_ C s i $$ +H 5 5 ; # #OKW}}"""" #
ng . i i i JCQXcg hhhhhi 4s .3 3 5A+*A+)NN)4__doc__r r r loggingr} r dataclassesr r typingr r secureior clcommon.clpwdr r clcommon.cpapir
r r clcommon.cpapi.cpapiexceptionsr rB r
exceptionsr getLoggerr; rb r r rr r+ r rA rM r r r r r r r| r r r{ r r r r_ r r# r! r s @ ? ( ( ( ( ( ( ( ( ! ! ! ! ! ! ! ! " " " " " " 2 1 1 1 1 1 1 1 @ @ @ @ @ @ @ @ 9 9 9 9 9 9 g!! C B B B B B B B B8
$ lI lI lI lI lI lI lI lI^ B B B@ @ @C C C B B B $ $ &" " "
Y Y Y r#