관리-도구
편집 파일: cluserselect.cpython-37.pyc
B �v6d�f � @ s� d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl m Z d dl m Z mZmZmZ d dlmZ d dlZdd lmZ dd lmZ d d lmZmZ dd lm Z dd l m Z d dl m Z G dd� de�Z!dS )� )�print_function)�absolute_import)�divisionN)� configparser)�S_IRUSR�S_IWUSR�S_IRGRP�S_IROTH)� iteritems� )�ClSelect)�ClSelectExcept)�ClPwd� clcaptain)�clprint)�utils)�ExternalProgramFailedc @ sX e Zd ZdZdZdZdZdZdJdd�Ze dKd d ��Z d d � Z dLdd�Z dMdd�Z dd� Zdd� Zdd� Zdd� ZdNd d �ZdOd d �ZdPd d!�Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� ZdQd,d-�ZdRd.d/�Ze e�Zd0d1� Z d2d3� Z d4d5� Z d6d7� Z d8d9� Z d:d;� Z!e e!�Z!d<d=� Z"d>d?� Z#e e#�Z#dSd@dA�Z$dBdC� Z%dDdE� Z&e e&�Z&dFdG� Z'dHdI� Z(dS )T� ClUserSelectz /var/cagefsz'/usr/share/cagefs-skeleton/usr/selectorz /usr/selectorz/etc/cagefs/excludez.cl.selector/selector.pathNc C s� t j�d�sdS x�|D ]�}| j�|�}t j�|jd�}t j�|�s| �|�}zFyt� |� W n2 t t fk r� } zt � ||��W dd}~X Y nX W dt�|� X qW dS )z� Creates flags mod_lsapi_reset_me in users' home directories in order to recreate CRIU images when php version/extensions/options have changed For details see LVEMAN-1210 :param users: list of usernames (strings) z /var/run/mod_lsapi/criu.enabledNZmod_lsapi_reset_me)�os�path�isfile�_clpwd�get_pw_by_name�join�pw_dir� _change_uidr �write�OSErrorr r �UnableToSaveDatar � _restore_uid)�self�users�user�pwr �previous_user_data�e� r& �F/opt/alt/python37/lib/python3.7/site-packages/clselect/cluserselect.py�clean_crui_images% s "z ClUserSelect.clean_crui_imagesTc C s� y.dt jkrt j�d� ddlm}m}m} W n0 tk r^ td� |rVt � d� ndS Y nX |r�|� r�|� }|r�y2|d }|� d�s�td � |r�t � d� ndS W n t k r� Y nX ||| d t � � dk|d �} | r�|r�t � d� | S ) z� Switch symlink for alt php. Create .cagefs directory if not created Rerurn True if error has occured z/usr/share/cagefsr )�configure_alt_php�is_ea4_enabled�read_cpanel_ea4_php_confz ERROR: CageFS not installed.r T�defaultzea-phpzlERROR: system default PHP version is alt-php. PHP Selector is disabled. Use cPanel MultiPHP manager instead.F)� write_log� drop_perm�configure_multiphp)�sysr �append� cagefsctlr) r* r+ � ImportError�print�exit� startswith�KeyErrorr �geteuid) �versionr# � exit_on_errorr/ r) r* r+ �confZ default_php�errorr& r& r' �switch_symlink_for_alt_php; s2 z'ClUserSelect.switch_symlink_for_alt_phpc C s� | j rtd� t�d� t�� dkr6td� t�d� | �� }x<t|�D ]0\}}td|� | j� |�}t j ||ddd� qHW d S )NzPERROR: this option does not work in "single user" mode (when CageFS is disabled)r r z ERROR: root privileges requiredzProcessing userF)r: r/ ) �without_cagefsr4 r0 r5 r r8 �get_user_version_mapr r r r r= )r Zusers_vers_dictr" r9 r# r& r& r' �apply_symlinks_rulesd s z!ClUserSelect.apply_symlinks_rules�phpc C s2 t �| |� t� | _t� | _|r(|| _ng | _d S )N)r �__init__r r �set�_user_excludes�exclude_pid_list)r �itemrE r& r& r' rB q s zClUserSelect.__init__Fc s �� |� ��|�}��|�}tj�|�s.|S ��� � tj�|�j�}tj� |�sV|S t� |���j r��j sx�� �j� ��j �j kr�|S tj����jkr�|S yFtt� ��fdd�t� �� ���d }|� | d � | d �j fS ttfk �r |S X dS )zl Returns alternative version for a user @param user: string @return: string c s � | d �j �kS )N�data)�_item)�i)� alternatives�link_dstr r& r' �<lambda>� s z*ClUserSelect.get_version.<locals>.<lambda>r r9 rG N)�_check_user_in_cagefs�_compose_user_alt_path�_compose_native_infor r �isdir�get_all_alternatives_datar rH �islink�readlinkr> �_native_contents�_load_native_contents�dirname� SELECTOR_PATH�list�filter�keys� IndexErrorr7 )r r" �show_native_version�alt_path�native� full_pathr9 r& )rJ rK r r' � get_versionz s4 zClUserSelect.get_versionc C sn t j�|�sj| �|�}zFyt�|� W n2 ttfk rX } zt� ||��W d d }~X Y nX W d t � |� X d S )N) r r rP r r �mkdirr r r r r r )r r r" r$ r% r& r& r' � create_dir� s "zClUserSelect.create_dirc C sh | j �|�}tj�|| j�}| �|�}| �||� | jd|d dd� | jd|d dd� | � |� dS )z\ Creates additional directory and symlinks for use in "without CageFS" mode z ../php-cliz/phpT)�check_existencez../phpz/php-cgiN) r � get_homedirr r r � SELECTOR2_DIRr rb �_create_symlinkr )r r" �homedirZ path_in_homeZcur_userr& r& r' �create_selector_symlinks� s z%ClUserSelect.create_selector_symlinksc C s@ t j�tj�r<y| j�d| j�S tj t t fk r: dS X dS )N�versionsr^ ) r r r r � DEFAULTS_PATH�_dh�getrH � ConfigParser�Error�IOErrorr7 )r r& r& r' �get_default_version� s z ClUserSelect.get_default_versionc C s� t j�| j�|�dd�}t j�|�s6| �|| �� � nhy$| �|�}| �||� d| j �� W nB t j t tfk r� } z tdt|�� t�d� W d d }~X Y nX d S )Nz .cl.selectorz defaults.cfgri z*Error while restoring settings from backupr )r r r r rd r � set_versionrp �_get_default_config_handlerrl rH rm rn ro r7 r4 �strr0 r5 )r r" �user_backup_path�dhr% r& r& r' �set_version_from_backup� s z$ClUserSelect.set_version_from_backupc C s6 t �| j| j�| j�|��tj||||�}|r2|S dS )zz Sets alternative version for a users with the same uid @param user: string @return: None N)r �apply_for_at_least_one_user� _set_versionr � get_names�get_uidr �NoUserSelector)r r" r9 �return_summaryr\ r: rG r& r& r' rq � s zClUserSelect.set_versionc C s> | j r| �|�}| �|� | �|�}tj�|�sN| j rD| �||� n t� |��| � � }||krp|dkrpt� |��| � |� | j �|�} |dk�r�| j r�| js�| �| j� x�t| j�D ] \} } | �| |d | ||� q�W n�d} d} tj�d| jf | �}tj�|��r<tj�d| j | �}tj�|| �}| �||||� d} x�t�| j�D ]Z}| j|k�r^�qJ|�d��rt| �rt�qJtj�||�}tj�| j|�}| �||||� �qJW n:x8t|| d �D ]$\} }| �|tj�|| �||� �q�W | j �r�t�|� n tj || |d � | � ||� | � |� | � |� |�r:| � ||�S d S ) zg Sets alternative version for a user @param user: string @return: None r^ �/zphp.iniFz%s.etcTz.inirG )r: N)!r> r rM rN r r rP rb r r{ rQ �NoSuchAlternativeVersion�_remove_alternatives_linksr r rT rU rH r rf r � NATIVE_PATH�existsrW �listdir�endswithr r r= �_switch_php_da_isp�_reload_processes�_backup_settings� get_summary)r r" r9 r| r\ r: r$ r] rJ r# rF Z native_path�iniZnew_ini_createdZ new_ini_path�src�dst�filenamer r& r& r' rx � sZ zClUserSelect._set_versionc C s� | � |� | �� }| �|�}ddddd�i}t|�� �}|�d� | �|�d }xV|D ]N}||krji ||< | j�d| j |f d� || d< d|| d < d|| d < qVW y| j� d | j �} W n t j t j fk r� d} Y nX y d|| d < d|| d < W n tk �r t�| ��Y nX |�d�||d < |�d� |�|d � xHtt|��D ]8} || } | || d || d || d ff|| < �qTW t|�S ) zb Returns state of alternatives @param user: string @return: tuple r^ TF)�enabledr, �selectedr z%s%s�stater� r, r� ri )rM rQ rO �sortedrZ r1 r` rk � has_optionrH rl rm �NoSectionError� NoOptionErrorr7 r r~ �pop�remove�range�len�tuple) r r" r\ rJ � native_info�summary� alt_versionsZselected_versionr9 �default_version�idx�vr& r& r' r� sD zClUserSelect.get_summaryc C st | � |�}xZ|D ]R}y| j||dd� W q tk r` } zt�ddt|�d�� W dd}~X Y qX qW | �|� dS )z� Changes users of a supplied version to specified_version @param version: string @param current_version: string F)r: �text�ERROR)�status�messageN)� list_usersrq � Exceptionr � print_diagrs r( )r Z new_version�current_versionr! r" r% r& r& r' �change_to_version> s z ClUserSelect.change_to_versionc C s | � � }||kr|| S g S )z8 Returns users of a certain alternative )�get_version_user_map)r r9 rG r& r& r' r� M s zClUserSelect.list_usersc C s0 | j rddlm} |� gS t| �� �| �� ��S )zF Returns all valid system users @return: list r )�get_cpanel_user)r> Zclselectctlphpr� rX �_get_system_users� difference�_get_user_excludes)r r� r& r& r' �list_all_usersV s zClUserSelect.list_all_usersc C s� t � }d|d< d|d< d|d< d}tj�|� y dd l}W n& tk r` td� t�d� Y nX tj� |j |� |�|d�}tj� |d �r�tj� |d �s�|� ||� d S ) Nr �initZreinit�verbosez/usr/share/cagefsz ERROR: CageFS not installed.r �etcz /cl.selectorz /cl.php.d)�dictr0 r r1 r2 r3 r4 r5 r r ZBASEDIRZget_user_prefixr� Zcpetc_for_user)r r" �config�LIBDIRr2 Zcagefs_etc_pathr& r& r' �cagefs_copy_etca s z ClUserSelect.cagefs_copy_etcc C sP | � � }i }x>|D ]6}y| �|d�d ||< W q tjk rF wY qX qW |S )zH Returns user version map as dict @return: dict Fr )r� r` r � NotCageFSUser)r � actual_usersrG r" r& r& r' r? t s z!ClUserSelect.get_user_version_mapc C sn |p | � � }i }xX|D ]P}y2| �|d�d }||kr<g ||< || �|� W q tjk rd wY qX qW |S )zH Returns users grouped by version @return: dict Fr )r� r` r1 r r� )r Z user_namesr� rG r" r9 r& r& r' r� � s z!ClUserSelect.get_version_user_mapc C s� yJ|r<t j�|�r2t �|�| kr,t �|� q<dS n t�|� t�| |� W nT t k r� } z6|dk rz|dk rzt � |||��t � d| ||f ��W dd}~X Y nX dS )z� Creates symlink from src to dst @param src: string @param dst: string @param user: string @param version: string @param check_existence: bool @return: None Nz(Cannot create symlink from %s to %s (%s)) r r rR rS �unlinkr �remove_file_or_dirr �symlinkr� r �UnableToSetAlternative�SelectorException)r� r� r" r9 rc r% r& r& r' rf � s z ClUserSelect._create_symlinkc C sp | j r | j S tj�| j�s t� S xHt�| j�D ]8}tj�| j|�}| j �tt dd� t � |�� � ��� q.W | j S )zE Returns list of user excludes @return: list c S s | � � S )N)�strip)�xr& r& r' rL � � z1ClUserSelect._get_user_excludes.<locals>.<lambda>) rD r r rP �CAGEFS_EXCLUDErC r� r �update�mapr �read_file_as_string� splitlines)r rF Zfull_item_pathr& r& r' r� � s z ClUserSelect._get_user_excludesc C s� | j r dS d}tj�|� y ddl}W n& tk rL td� t�d� Y nX y|�|�sdt � |��W n& t k r� td� t�d� Y nX dS )z4 Check that cagefs enabled for user Nz/usr/share/cagefsr z ERROR: CageFS not installed.r z;ERROR: CageFS version is unsupported. Please update CageFS.) r> r0 r r1 r2 r3 r4 r5 �is_user_enabledr r� �AttributeError)r r" r� r2 r& r& r' rM � s z"ClUserSelect._check_user_in_cagefsc C sJ xDt �|�D ]6}| j|kr q t j�||�}t j�|�s8q t �|� q W dS )zg Removes all symlinks from directory @param path: string @return: None N)r r� rH r r rR r� )r r r� r_ r& r& r' r � s z'ClUserSelect._remove_alternatives_linksc C sH | j r| j�|�}|d S t| j�|��}tj�| j|dd� |dd�S )zz Composes and returns user alternative directory path @param user: string @return: string z /.cl.selector���Nr� z cl.selector) r> r rd rs rz r r r � CAGEFS_PATH)r r" rg �uidr& r& r' rN � s z#ClUserSelect._compose_user_alt_pathc C s | j �� }t|�� �S )zB Returns set of system users @return: set )r � get_user_dictrC rZ )r Z users_dictr& r& r' r� � s z ClUserSelect._get_system_usersc C s@ t j�| �r<yt �| � W n tk r: t�| d��Y nX dS )z? Deletes file to be written if it is a symlink z'Cannot delete symlink while saving dataN)r r rR r� r r r )� file_pathr& r& r' �_delete_if_symlink� s z ClUserSelect._delete_if_symlinkc C s� | j �|�}|j}|j}t�� }t�� }||kr8||fS y$t�|� t�|� t � � ||fS t k r� } zt � ||��W dd}~X Y nX dS )z� Changes to another uid and returns tuple of previous euid and egid @param user: string @return: tuple N)r r �pw_uid�pw_gidr r8 �getegid�setegid�seteuid�secureio�set_capabilityr r �UnableToChangeToAnotherUser)r r" �entryZnew_uidZnew_gidZcur_euidZcur_egidr% r& r& r' r s zClUserSelect._change_uidc C sx | d t �� krttjdd� y t �| d � t �| d � W n6 tk rr } zt�t | d �|��W dd}~X Y nX dS )zw Restores changed uid and gid to original ones @param uid_and_gid: tuple @return: None r T)�clearr N) r r8 r� r� r� r� r r r� rs )Z uid_and_gidr% r& r& r' r s zClUserSelect._restore_uidc C s" |st j�|�sdS | �|� | �|�}t j�|�}y4dtt�� � }t j� ||�}t � |d|f � W nf t t tfk r� } zByt j�|�r�t �|� W n Y nX t�|� t�|| ��W dd} ~ X Y nFX y,ttB tB tB } t �||� t �|| � W n t k �r Y nX t�|� dS )z� Saves data to file @param user: string @param file_contents: string @param file_path: string @return: None Nz clseltmp_%sz%s )r r r� r� r rV rs �uuid�uuid4r r r ro r r r� r r r r r r r r �rename�chmod) r r" � file_contentsr� �creater$ Zfile_directoryrV � temp_pathr% �maskr& r& r' �_write_to_file' s0 zClUserSelect._write_to_filec C sD y@t �� }x2td�D ]&}|�� }|dk r8| j�|j� qP qW W n t jk rV Y nX yt� � |�}W n tj fk r� dS X y�x�t � � D ]�}y8||� � j |� � jgks�|�� �| j�dkr�w�|j}W n t jk r� w�Y nX y || jk�r t�|tj� W q� tfk �r w�Y q�X q�W W n ttfk �r> Y nX dS )z& Reloads user process � N���)�psutil�Processr� �parentrE r1 �pid� NoSuchProcessr rz �NoSuchUserException� process_iter�uids�real� effective�name�findrH r �kill�signal�SIGHUPr ro )r r" Z next_parentrI r� �procr� r& r& r' r� J s8 , z ClUserSelect._reload_processesc C sj g }yHt | �}x2|D ]*}|�d�r|d|�d�� }|�|� qW |�� W n ttfk rd Y nX |S )zH Get extension names from user extensions file comments z;---� z---)�openr6 �rfindr1 �closer ro )r � extensionsr� �line�extr& r& r' �_skim_over_extensionsn s z"ClUserSelect._skim_over_extensionsc C s� | � |� g }| �|�}tj�tj�|�d�}| �� }tj�| j�|�d�}tj� |�s�| � |�}yt � |� W n< t tfk r� } zt�|� t�||��W dd}~X Y nX t�|� tj�|d�} tj� |�r�d| j| �|�d f } n d| jf } |�| � x�t|�� �D ]p} | j�r6|d | �d d � d } n tj�|d | �d d �f d �} | �| �} |�d| j| d�t| ��f � �qW | �|d�|�| � dS )zk Scans all user settings and backups'em in homedir as INI file @param user: string zcl.php.dz .cl.selectorNz defaults.cfgz[versions] %s = %s r z[versions] %s = native z/alt_php�.� z.iniz alt-php%sz alt_php.iniz[%s%s] modules = %s �,� ) rM rN r r r rV rQ r rd rP r r ra r r r r r r rH r` r1 r� rZ r> �replacer� r� )r r" Zbackup_contentsZ user_alt_pathZ user_ext_pathrJ rt r$ r% Zuser_backup_filer9 �altZ curr_ext_pathr� r& r& r' r� sD z ClUserSelect._backup_settingsc C sF | j r d S tj�d� ddlm} ddlm} |||� |||� d S )Nz/usr/share/cagefsr )�da_change_user_php_ini)� ispmanager_create_user_wrapper)r> r0 r r1 Z cagefs_da_libr� Zcagefs_ispmanager_libr� )r r" r9 r� r� r& r& r' r� � s z ClUserSelect._switch_php_da_isp)N)TT)rA N)F)FFT)FFT)F)N)NNF)T))�__name__� __module__� __qualname__r� r� rW r� re r( � staticmethodr= r@ rB r` rb rh rp rv rq rx r� r� r� r� r� r? r� rf r� rM r rN r� r� r r r� r� r� r� r� r& r& r& r' r sT ( # : * #$*r )"� __future__r r r r r0 r� r� r� � future.movesr rm �statr r r r � future.utilsr r� �clselectr �clselectexceptr �clcommonr r � clselectprintr r� r �clcommon.utilsr r r& r& r& r' �<module> s$