91\hO7_ d dl Z d dlZd dlZdZdZ G d de Z G d d Zd Zdd
Z dd
Z
d Z d Z ddZ
dS ) Nz/etc/cagefs/cagefs.mpz/usr/sbin/cagefsctlc e Zd Zd Zd ZdS )CagefsMpConflictc 2 d|dt d|d| _ d S )NzConflict in adding 'z' to z5 because of pre-existing alternative specification: '')CAGEFS_MP_FILENAME_msg)selfnew_item
existing_items T/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/subsys/clcagefs.py__init__zCagefsMpConflict.__init__ s, xx+++]]]
<
c | j S N)r r s r __str__zCagefsMpConflict.__str__ s
yr N)__name__
__module__ __qualname__r
r r r r r s2
r r c e Zd ZdZdZdZd Zd Zd Ze d Z
d Z d Z d
Z
e d Ze d Ze d
Zd Zd Zd ZdS ) CagefsMpItems @!%r !c |dd dk r d| _ dS | dk r d| _ dS || _ dS )zConstructor
:param arg: Is either path to add to cagefs.mp or a raw line is read
from cagefs.mp
:param prefix: The same as adding prefix '!' to arg before passing it
to ctorN #r )
_path_specstrip)r args r r
zCagefsMpItem.__init__# sI rr7d?? "DOOO
YY[[C
"DOOO !DOOOr c \ | dk r|d| j |fz | _ | S )z%Specify mode as in fluent constructor @Ns %s,%03o)prefixr )r modes r r# zCagefsMpItem.mode2 s4 ;;==D T%5 (DOT+B BDO r c 4 t j | j S r )osfsdecoder r s r r zCagefsMpItem.__str__: s {4?+++r c 8 | dk rdS | d dk r| dz S | S )Nr // r )paths r
_add_slashzCagefsMpItem._add_slash= s. 3;;4 8w $; r c d t | }| s| rdS t | }t | }| | S )NF)r _adoptis_dummyr, r+
startswith)r anotheradopted this_pathtest_preexist_in_paths r pre_exist_inzCagefsMpItem.pre_exist_inE s %%g.. ==?? g . . 0 0 5 ++DIIKK88 , 7 7 G G ##$9:::r c t | }| s| rdS | | k rdS t j t j gi}g }| | | | v S )NFT)r r. r/ r" _PREFIX_MOUNT_RW_PREFIX_MOUNT_ROget)r existingr2 prefix_compatibility_map null_optionss r is_compatible_by_prefix_withz)CagefsMpItem.is_compatible_by_prefix_withP s %%h// ==?? g . . 0 0 5 ;;==GNN , , , ,4
)L,I+J$
{{}} 8 < < NN l!
!
r c | j d u S r r r s r r/ zCagefsMpItem.is_dummyc s $&&r c N t | t r| S t | S r )
isinstancer )xs r r. zCagefsMpItem._adoptf s% a & & #H ?? "r c 8 | d d S )zjCut off mode from path spec like @/var/run/screen,777
Only one comma per path spec is allowed ;-) ,r )split path_specs r
_cut_off_modezCagefsMpItem._cut_off_modem s t$$Q''r c @ | t j S r )lstripr PREFIX_LISTrF s r _cut_off_prefixz CagefsMpItem._cut_off_prefixu s 8999r c p t t | j S r )r rL rH r r s r r+ zCagefsMpItem.pathy s- ++ & &t 7 7
r c ^ | j | k r| j dd S dS )Nr r r )r r+ r s r r" zCagefsMpItem.prefix~ s- ?diikk ) )?1Q3' '3r c | j S r r? r s r speczCagefsMpItem.spec s
r N)r r r rK r7 r8 r
r# r staticmethodr, r5 r= r/ r. rH rL r+ r" rP r r r r r s K
"
"
" , , , \ ; ; ;
&' ' ' # # \# ( ( \( : : \:
r r c J t j t S r )r% r+ existsCAGEFSCTL_TOOLr r r is_cagefs_presentrU s
7>>. ) ))r c |d}|d}t j | st j | |t j | | t j | || d S )Nr) )r% r+ isdirmkdirchmodchown)r+ r# owner_idgroup_ids r _mk_mount_dir_setup_permr^ sm
7==
t HT8X&&&&&r r Tc
t | ||| t j t st j t dg t j t dg t t d } t || z
|
d |D }
fd|D } | s| dd | dd }|
d
| d z d z |
d z | |rt j t d
g n1
| d st%
| d | dS # | w xY w)a
Add mount point to /etc/cagefs/cagefs.mp
:param path: Directory path to be added in cagefs.mp and mounted
from within setup_mount_dir_cagefs().
If this directory does not exist, then it is created.
:param added_by: package or component, mount dir relates to, or whatever
will stay in cagefs.mp with "# added by..." comment
:param mode: If is not None: Regardless of whether directory exists or not
prior this call, it's permissions will be set to mode.
:param owner_id: Regardless of whether directory exists or not prior this
call, it's owner id will be set to.
If None, the owner won't be changed.
:param group_id: Regardless of whether directory exists or not prior this
call, it's group id will be set to.
If None, the group won't be changed.
:param prefix: Mount point prefix. Default is mount as RW.
Pass '!' to add read-only mount point.
Refer CageFS section at http://docs.cloudlinux.com/
for more options.
:param remount_cagefs: If True, cagefs skeleton will be automatically
remounted to apply changes.
:returns: None
Propagates native EnvironmentError if no CageFS installed or something
else goes wrong.
Raises CagefsMpConflict if path is already specified in cagefs.mp,
but in a way which is opposite to mount_as_readonly param.
z --create-mpz
--check-mpzrb+c 3 > K | ]}| V d S r )rstrip).0 file_lines r z)setup_mount_dir_cagefs.. s. FFy ((**FFFFFFr c > g | ]} | |S r )r5 )rb rB r
s r
z*setup_mount_dir_cagefs.. s<
x'<'>, - - 9 7888O^\2333
'//I
..33D99FFIFFF
#
C NN1a ''c22H OO+hoog.F.FFN
OOHMMOOe 3 4 4 4 OO
C ABBB667G7KLL C"8-=b-ABB B s
D(G Gc t t d 5 } | cd d d S # 1 swxY w Y d S )Nrb)rn r readlines)fs r _get_cagefs_mp_linesr~ s
$ ' ' 1{{}} s 7;;c t t d 5 }| | cd d d S # 1 swxY w Y d S )Nwb)rn r
writelines)linesr} s r _write_cagefs_mp_linesr s
$ ' ' #1||E""# # # # # # # # # # # # # # # # # #s 8<<c t }t j dt j t j | fz fd|D }t
| |r t j t dg dS dS )z
Remove mount points matching given path from cagefs.mp file
:param str path: Path that should be removed from file.
:param bool remount_cagefs: Remount cagefs skeleton or not
:return: Nothing
s ^[%s]?%s(,\d+)?$c 3 F K | ]} | |V d S r )match)rb liners r rd z*remove_mount_dir_cagefs.. s2 L Laggdmm L L L L L L Lr rk N)
r~ recompiler rK escaper rl rm rT )r+ ru r lines_with_excluded_pathr s @r remove_mount_dir_cagefsr s
! " "E
8")D// JJ A M L L L L L L 3444 ; 9:::::; ;r )rV NN)rV NNr T)T)r% r rl r rT Exceptionr r rU r^ ry r~ r r r r r r s
, & y g g g g g g g g T* * *
'
'
'
'&
V V V Vr
# # #
; ; ; ; ; ;r