]j+ d dl Z d dlZd dlZd dlZd dlZdZdZdZdZ e j e
Z G d de Z
G d d e Z G d
d Zd Zd dZd dZ d dZd Zd Zd Zd dZdedefdZdefdZd Z dS ) Nz/etc/cagefs/cagefs.mpz/usr/sbin/cagefsctlz/usr/share/cagefs-skeletonz /var/.cagefsc e Zd Zd Zd ZdS )CagefsMpConflictc 2 d| dt d| d| _ d S )NzConflict in adding 'z' to z5 because of pre-existing alternative specification: '')CAGEFS_MP_FILENAME_msg)selfnew_item
existing_items q/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib/python3.11/site-packages/clcommon/clcagefs.py__init__zCagefsMpConflict.__init__ sE
T8
T
T2D
T
TCP
T
T
T
c | j S N)r r s r __str__zCagefsMpConflict.__str__ s
yr N)__name__
__module__ __qualname__r
r r r r r s2
r r c e Zd ZdZd ZdS )CagefsNotSupportedErrorz Cagefs Not Supported Exceptionc < t | | d S r ) Exceptionr
)r messages r r
z CagefsNotSupportedError.__init__% s 4)))))r N)r r r __doc__r
r r r r r " s) ((* * * * *r r c e Zd ZdZdZdZd Zd Zd Ze d Z
d Z d Z d
Z
e d Ze d Ze d
Zd Zd ZdS ) CagefsMpItemz@!%* !c |dd dk r d| _ dS | dk r d| _ dS || _ dS )zConstructor
:param arg: Is either path to add to cagefs.mp or a raw line is read from cagefs.mp
:param prefix: The same as adding prefix '!' to arg before passing it to ctorN #r )
_path_specstrip)r args r r
zCagefsMpItem.__init__. sI rr7c>> "DOOO
YY[[B
"DOOO !DOOOr c ^ | dk r|| j d|d| _ | S )z%Specify mode as in fluent constructor@N,03o)prefixr$ )r modes r r, zCagefsMpItem.mode; s; ;;==C D$4!% = =4 = = =DO r c | j S r r$ r s r r zCagefsMpItem.__str__C s
r c 8 | dk rdS | d dk r| dz S | S )Nr /r )paths r
_add_slashzCagefsMpItem._add_slashF s, 2::3 8s??#: r c d t | }| s| rdS t | }t | }| | S NF)r _adoptis_dummyr3 r2
startswith)r anotheradopted this_pathtest_preexist_in_paths r pre_exist_inzCagefsMpItem.pre_exist_inN s %%g.. ==?? g . . 0 0 5 ++DIIKK88 , 7 7 G G ##$9:::r c t | }| s| rdS | | k rdS t j t j gi}g }| | | | v S )NFT)r r6 r7 r+ _PREFIX_MOUNT_RW_PREFIX_MOUNT_ROget)r existingr: prefix_compatibility_map null_optionss r is_compatible_by_prefix_withz)CagefsMpItem.is_compatible_by_prefix_withY s %%h// ==?? g . . 0 0 5 ;;==GNN , , , ,4$0$ALDaCb#c {{}} 8 < <W^^=M=M| \ \\\r c | j d u S r r. r s r r7 zCagefsMpItem.is_dummyh s $&&r c N t | t r| S t | S r )
isinstancer )xs r r6 zCagefsMpItem._adoptk s% a & & #H ?? "r c 8 | d d S )zjCut off mode from path spec like @/var/run/screen,777
Only one comma per path spec is allowed ;-)r) r )split path_specs r
_cut_off_modezCagefsMpItem._cut_off_moder s s##A&&r c @ | t j S r )lstripr PREFIX_LISTrL s r _cut_off_prefixz CagefsMpItem._cut_off_prefixz s 8999r c p t t | j S r )r rR rN r$ r s r r2 zCagefsMpItem.path~ s& ++L,F,Ft,W,WXXXr c Z | j | k r
| j d S dS )Nr r )r$ r2 r s r r+ zCagefsMpItem.prefix s) ?diikk ) )?1% %2r N)r r r rQ r? r@ r
r, r staticmethodr3 r= rE r7 r6 rN rR r2 r+ r r r r r ) s K " " " \ ; ; ;
]
]
] ' ' ' # # \# ' ' \' : : \:Y Y Y r r c J t j t S r )osr2 existsCAGEFSCTL_TOOLr r r is_cagefs_presentrZ s
7>>. ) ))r c |d}|d}t j | st j | |t j | | t j | || d S )Nr1 )rW r2 isdirmkdirchmodchown)r2 r, owner_idgroup_ids r _mk_mount_dir_setup_permrc sm
7==
t HT8X&&&&&r Fc
t sd S | t ddg}n
t d| g}|r-t j |t j t j d S t j |t j t j d d S )Nz --wait-lockz
--remount-allz --remount)stdoutstderrFre rf check)rZ rY
subprocessPopenDEVNULLrun)userremount_in_backgroundcommands r _remount_cagefsrp s |!=/B!;5
% %
% %
r r c t | ||| t sdS t j t
s3t
j t dgt j t j d t t t
dd 5 }t || z
| d |D } fd | D }
|
sb| d
d |&| }t! d ||
t! |
|rt# | n1 |
d st' |
d ddd dS # 1 swxY w Y dS )a
Add mount point to /etc/cagefs/cagefs.mp
:param path: Directory path to be added in cagefs.mp and mounted
from within setup_mount_dir_cagefs().
If this directory does not exist, then it is created.
:param added_by: package or component, mount dir relates to, or whatever will
stay in cagefs.mp with "# added by..." comment
:param mode: If is not None: Regardless of whether directory exists or not prior this call,
it's permissions will be set to mode.
:param owner_id: Regardless of whether directory exists or not prior this call,
it's owner id will be set to.
If None, the owner won't be changed.
:param group_id: Regardless of whether directory exists or not prior this call,
it's group id will be set to.
If None, the group won't be changed.
:param prefix: Mount point prefix. Default is mount as RW.
Pass '!' to add read-only mount point.
Refer CageFS section at http://docs.cloudlinux.com/ for more options.
:param remount_cagefs: If True, cagefs skeleton will be automatically
remounted to apply changes.
:param remount_in_background: If True, cagefs remount will be done in separate
background process, without waiting for completion
:returns: None
Propagates native EnvironmentError if no CageFS installed or something else goes wrong.
Raises CagefsMpConflict if path is already specified in cagefs.mp, but in a way which is opposite
to mount_as_readonly param.
Nz --create-mpFrg zr+utf-8encodingc 3 > K | ]}| V d S r )rstrip).0 file_lines r <genexpr>z)setup_mount_dir_cagefs.<locals>.<genexpr> s. >>y ((**>>>>>>r c > g | ]} | |S r )r= )rw rI r
s r
<listcomp>z*setup_mount_dir_cagefs.<locals>.<listcomp> s, PPP!x7L7LQ7O7OPAPPPr r z# next line is added by )filern r1 )rc rZ rW r2 rX r ri rl rY rk add_new_line_to_cagefs_mpopenr r, seekr% printrp rE r ) r2 added_byr, ra rb r+ remount_cagefsrn f trim_nl_iterpre_exist_optionr
s @r setup_mount_dir_cagefsr s b T48<<< 7>>, - -
] + % %
$ 9 9 9 CQ
..33D99>>A>>> PPPP|PPP
C
FF1aLLL##>>++0(CCCC ( # # # #
M 6KLLLL667G7KLL C"8-=b-ABB B'C C C C C C C C C C C C C C C C C Cs CFF Fc t t dd 5 } | cd d d S # 1 swxY w Y d S )Nrrr rs )r r readlines)r s r _get_cagefs_mp_linesr
s
# 8 8 8 A{{}} s
9= =c t t dd 5 }| | cd d d S # 1 swxY w Y d S )Nwrr rs )r r
writelines)linesr s r _write_cagefs_mp_linesr s
# 8 8 8 #A||E""# # # # # # # # # # # # # # # # # #s
:>>c t } | r?| d dk r5| d d dk r%| dxx dz
cc< t | dS dS dS dS )zR
Add new line to the end of /etc/cagefs/cagefs.mp file if it is not there
r r r1
N)r r )r s r r r ss
! " "E &qR E"IbMT$9$9
b T u%%%%%& & $9$9r c 8 t }t j dt j dt j | d fd|D }t
| t
| k rdS t | |rt | dS dS )af
Remove mount points matching given path from cagefs.mp file
:param str path: Path that should be removed from file.
:param bool remount_cagefs: Remount cagefs skeleton or not
:param remount_in_background: If True, cagefs remount will be done in separate
background process, without waiting for completion
:return: Nothing
z^[z]?z(,\d+)?$c > g | ]} | |S r )match)rw liner s r r{ z+remove_mount_dir_cagefs.<locals>.<listcomp>/ s( L L Laggdmm L L L Lr Nr~ ) r recompiler rQ escapelenr rp )r2 r rn r lines_with_excluded_pathr s @r remove_mount_dir_cagefsr # s
! " "E
N 1NNRYt__NNNOOA L L L L L L L 5zzS122223444 E.CDDDDDDE Er r2 returnc t dd 5 }|D ]4}| d }|d }|| k r ddd dS 5 ddd n # 1 swxY w Y d S )
zACheck the fact that directory is mounted i.e. listed in mountinfoz/proc/self/mountinforr rs )maxsplit NTF)r rK )r2 mountinfo_filer mountinfo_entry_parts mount_points r _is_directory_mountedr : s
$w 7 7 7 >" D$(JJJ$:$: ! 02Kd"" # 5s *A AA Ac t t } | sDt j t r t
dt | S )zRecommended way to check whether process is running inside CageFS
Please avoid testing for /var/.cagefs existence.
Replace with this function call when possible.
z+%s should not exist in the real file system)r CAGEFS_DIR_PATHrW r2 r] loggerwarning)
in_cagefs_s r in_cagefsr G sK '77J W"'--88 WDoVVV r c d}|t j vr t j | ddl}n# t $ r Y dS w xY w | | sdS n"# t $ r}t d |d}~ww xY wdS )z,
Check that cagefs enabled for user
z/usr/share/cagefs/r NFz;ERROR: CageFS version is unsupported. Please update CageFS.T)sysr2 append cagefsctl ImportErroris_user_enabledAttributeErrorr )rm cagefs_lib_dirr es r _is_cagefs_enabledr S s - ) ) HOON + + + uul((.. 5 l l l%&cddjkkl 4s' 36
AAA
A?*A::A?)r[ NNr5 )Nr[ NNr FF)FF) loggingrW r ri r r rY CAGEFS_SKELETON_PATHr getLoggerr r r r r r rZ rc rp r r r r r strboolr r r r r r <module>r s
, &3 8 $ $ y * * * * *i * * *\ \ \ \ \ \ \ \~* * *
'
'
'
'
2
WC WC WC WCt
# # # & & &E E E E.
4 r