]j | d dl Z d dlZd dlZd dlmZ ddlmZ G d d Zd dZed Z d
Z
d
d Z dS ) N)contextmanager )FormattedExceptionc z e Zd ZdZ G d de ZddZd Zd Zd Z d Z
d
Z d Z d Z
d
Zd Zd ZddZdS )ClPwdz/etc/login.defsc e Zd Z fdZ xZS )ClPwd.NoSuchUserExceptionc d t t j | j dd|idg|R i | d S )NzNo such user (%(user)s)usermessagecontext)superr NoSuchUserException__init__)selfr argskwargs __class__s n/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib/python3.11/site-packages/clcommon/clpwd.pyr z"ClPwd.NoSuchUserException.__init__ sc ;E%+T 2 2 ;4 "D>= =
)__name__
__module__ __qualname__r
__classcell__)r s @r r r s8 r r Nc i | _ i | _ i | _ i | _ | | d | _ d S || _ d S )N )
_user_key_map _uid_key_map_user_full_map
_uid_full_mapget_sys_min_uid_min_uid)r min_uids r r zClPwd.__init__ sK ? 0 0 5 5DMMM #DMMMr c 8 | | j S N)_load_passwd_databaser r s r
get_user_dictzClPwd.get_user_dict' ""$$$!!r c 8 | | j S r& )r' r r( s r get_uid_dictzClPwd.get_uid_dict+ s ""$$$ r c 8 | | j S r& )r' r r( s r get_user_full_dictzClPwd.get_user_full_dict/ s ""$$$""r c 8 | | j S r& )r' r! r( s r get_uid_full_dictzClPwd.get_uid_full_dict3 r* r c | | S # t $ r }t | |d}~ww xY w)z*
Return pw_entry for user
N)r. KeyErrorr r r r es r get_pw_by_namezClPwd.get_pw_by_name7 sS 9**,,T2 2 9 9 9++D11q 8 9
AAAc | | S # t $ r }t | |d}~ww xY w)z7
Return list of passwd entries for uid
Nr0 r2 r r )r uidr4 s r
get_pw_by_uidzClPwd.get_pw_by_uid@ sS 8))++C0 0 8 8 8++C00a 7 8r6 c | | j S # t $ r }t | |d}~ww xY w)z&
Returns uid for user
N)r. pw_uidr2 r r r3 s r get_uidz
ClPwd.get_uidI sV 9**,,T29 9 9 9 9++D11q 8 9 !
A AA c | | j S # t $ r }t | |d}~ww xY w)z`
Returns homedir for a user
@param user: string
@return: string
N)r. pw_dirr2 r r r3 s r get_homedirzClPwd.get_homedirR sV 9**,,T29 9 9 9 9++D11q 8 9r> c | j st j D ]}|| j |j < |j | j vrg | j |j < | j |j | |j | j k rQ|| j |j < |j | j vrg | j |j < | j |j | dS dS )zZ
Loads the passwd database and fills user_to_uid and user_to_homedir maps
N)
r! pwdgetpwallr pw_namer< appendr# r r )r entrys r r' zClPwd._load_passwd_database] s !
B
B
B5:#EM2<t'99979D&u|4"5<077>>><4=008=D&u}5 |4+<<<:<)%,7%el3::5AAA
B
B
B
Br c | | }n-# t $ r }t | |d}~ww xY wd |D S )zs
Return names of users with uid specified
@param uid: int
@return: list of strings
Nc g | ] }|j
S )rE ).0rG s r
<listcomp>z#ClPwd.get_names.<locals>.<listcomp>x s 333%
333r r8 )r r9 entriesr4 s r get_nameszClPwd.get_namesm sj 8,,..s3GG 8 8 8++C00a 7 8 4373333s
AAAr c t j | j rt | j dd 5 }| }ddd n # 1 swxY w Y |D ]d}| d rM t | d d c S # t $ r Y `w xY we|S )z
Return system defined MIN_UID from /etc/login.def or def_min_uid
@param def_min_uid: int
@return: MIN_UID: int
rzutf-8)encodingNUID_MINr ) ospathexistsLOGIN_DEF_FILEopen readlines
startswithintsplitstrip
ValueError)r def_min_uidflineslines r r" zClPwd.get_sys_min_uidz s 7>>$- . . d)3AAA
&Q
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
??9-- "4::i#8#8#;#A#A#C#C D DDDD% s# A A!$A!9B>>
C
C r& )r )r r r rV r r r r) r, r. r0 r5 r: r= rA r' rN r" rJ r r r r s &N 0 $ $ $ $" " "! ! !# # #" " "9 9 98 8 89 9 9 9 9 9B B B 4 4 4 r r Tc 0 t j }|dk r rt j } fdt j D }|j }||vr| | t j | |r3t j |j t j
|j n2t j |j t j
|j |r) t j d< |j t j d< dS dS dS dS )z
Drop current root privileges to user
:param effective_or_real: if True - drop euid, else - drop ruid
:param user: name of unix user
:param set_env: bool -> if true set $HOME and $USER env variables
:return: None
r c 0 g | ]}|j v |j S rJ )gr_memgr_gid)rK groupr s r rL z(drop_user_privileges.<locals>.<listcomp> s' XXX45<CWCWu|CWCWCWr USERHOMEN)rS geteuidrC getpwnamgrpgetgrallpw_gidrF setgroupssetegidseteuidr< setgidsetuidenvironr@ )r effective_or_realset_env current_euiduser_pwd user_groupsmain_user_groups ` r drop_user_privilegesrz s :<<LqT<%%XXXX XXX "/ + - - / / /
[!!! ' Jx ' ' ' Jx ' ' ' ' Iho & & & Iho & & & 1!%BJv !) BJv % 1 1r c # K t j t j t j }}} t | dd n-# t
$ r }t | |d}~ww xY w dV t j | t j | t j
| dS # t j | t j | t j
| w xY w)zk
Temporary drop privileges to some user
:type user: str
:raises: ClPwd.NoSuchUserException
TF)rt ru N) rS getuidgetgid getgroupsrz r2 r r rp ro rn )r old_uidold_gid
old_groupsr4 s r drop_privilegesr s $&9;; R\^^jWG5 TT5IIIII 5 5 5''--145!
7
7
Z
7
7
Z s# A
A:A55A:>C >C>c | t d ddlm} ddlm} || } |d \ }}n## t
$ r} |dd| id |d}~ww xY w|S )
zw
Resolve document root by username
:param user: str -> name of unix user
:return: str -> document root
Nz-Cannot resolve docroot without specified userr ) userdomains)NoDomainr z!No domain for user %(user)s foundr r )r cpapir cpapi.cpapiexceptionsr
IndexError)r r r domains_list_resultr4 s r _resolve_doc_root_by_userr s | !PQQQ #"""""////// ;t$$L O 66 h: ~
Ms 6
A AAc & ddl m} ddlm} | }d}t j }|' || \ }}| |}n| |k r |d |}nB| t
| }n/|dk r)t j | j }t
| }||fS )a
Resolve username and doc_root by domain,
or resolve document root by username,
or resolve document root and username by effective uid
:param user: str -> name of unix user
:param domain: str -> domain of panel user
:return: tuple -> user, doc_root
r )docroot)
IncorrectDataNz User and domain are in conflict)r r )
r r r r rS ri r rC getpwuidrE ) r domainr r result_userresult_doc_rootrv doc_root domain_users r resolve_username_and_doc_rootr s 444444KO:<<L
' + <%KK
[
- ABB B"
3>>> l<008 3EEE ''r )NTT)NN) rS rC rk
contextlibr clexceptionr r rz r r r rJ r r <module>r s
% % % % % % + + + + + +y y y y y y y yx1 1 1 1< ! ! !& 4 ( ( ( ( ( (r