관리-도구
편집 파일: utils.cpython-37.pyc
B �v6d�= � @ s d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl Z d dl m Z d dl mZmZmZmZ d dlmZ d dlmZ d d lmZ d d lmZmZmZ d d l m Z d d l m Z d d l m!Z! ddl"m#Z# ddl$m%Z% dZ&dZ'dSdd�Z(dTdd�Z)dd� Z*dd� Z+dd � Z,d d � Z-d d � Z.d!d"� Z/d#d$� Z0d%d&� Z1dUd(d)�Z2dVd*d+�Z3dWd-d.�Z4dXd/d0�Z5d1d2� Z6d3d4� Z7d5d6� Z8d7d8� Z9d9d:� Z:d;d<� Z;d=d>� Z<dYdAdB�Z=dCdD� Z>dEdF� Z?dGdH� Z@dZdIdJ�ZAeBeCdK�dLdM�ZDeBdN�dOdP�ZEdQdR� ZFdS )[� )�print_function)�absolute_import)�divisionN)�time)�AnyStr�List�Dict�Optional)�Path)� resolve_username_and_doc_root)�CP_NAME)�NoDomain� NotSupported� IncorrectData)� mod_makedirs)�init_sentry_client)�get_pkg_version� )�clprint)�ClSelectExceptz/sbin/cagefs_enter_userzbhttps://1ba721bc7abc4a8f89b1ffc185088bf7:3bac2b8189a043f7856d24046255f116@sentry.cloudlinux.com/19c C s� y0t j| td�t jt jd|dd�}|�� \}}W n: ttfk rj } zt� | d t |���W dd}~X Y nX |j dkr�t� |p�dd� | �|f ��|S )z� Runs external process and returns output :param cmd: command and arguments as a list :param env_data :return string z /dev/nullT)�stdin�stdout�stderr� close_fds�env�textr Nz output of the command: %s %s� )� subprocess�Popen�open�PIPE�STDOUT� communicate�OSError�IOErrorr �FileProcessError�str� returncode�ExternalProgramFailed�join)�cmd�env_data�output�std_out�std_err�e� r0 �?/opt/alt/python37/lib/python3.7/site-packages/clselect/utils.py� run_command& s & r2 c C sz y2t j| td�t jt j|d||d�}|�� \}}W n: ttfk rl } zt�| d t |���W dd}~X Y nX |j ||fS )a� Runs external process and returns output. Differs from subprocess.check_output, run_command above, and check_output below in that it does not throw an exception if process's return code != 0 :param cmd: command and arguments as a list :param env_data :param preexec_fn: Pre-exec function. None if don't need :param cwd: Directory name to set as current :return Cortege: (ret_code, stdout, stderr) z /dev/nullT)r r r � preexec_fnr �cwdr r N) r r r r r" r# r$ r r% r& r' )r* r+ r3 r4 �processr- r. r/ r0 r0 r1 �run_command_full? s &r6 c C s> d}y t | �}|�� }|�� W n ttfk r8 Y nX |S )z8 Reads file contents and returns it as a string � )r �read�closer# r$ )�filename�defaults_contents�fr0 r0 r1 �read_file_as_stringZ s r= c O s t | |� d S )N)� check_output)�args�kwargsr0 r0 r1 � check_callh s rA c O s� |� dd�}|�d�}|� dd�}|� dd�}|r@| |7 } |d= y"tjf | tjtjdd�|��}W n: ttfk r� } zt�| d t |���W dd}~X Y nX |� � \}} |r�|� |� |� � |dk r�|� � |jr�t�|p�| p�|��|S ) av check_output(val1, val2, val3, arg4=val4) equivalent check_output(args=(val1, val2, val3), arg4=val4) or equivalent check_output(val1, args=(val2, val3), arg4=val4) DON'T USE check_output((val1, val2, val3), arg4=val4) :param tuple *args: arguments for command line :param dict **kwargs: parameters for subprocess.Popen :return str: �errorNr? r, �waitT)r? r r r r )�pop�getr r r r# r$ r r% r& r" �writer9 rC r' r( ) r? r@ rB Zargs_from_kwargsr, rC �pr/ r r r0 r0 r1 r> l s* & r> c s � fdd�t �� �D �S )Nc s& g | ] }t j�t j�� |��r|�qS r0 )�os�path�isdirr) )�.0�d)rI r0 r1 � <listcomp>� s z list_dirs.<locals>.<listcomp>)rH �listdir)rI r0 )rI r1 � list_dirs� s rO c c sR | V xF|D ]>\}}| t |� V x&|D ] }| d�tt ||f�� V q(W q W d S )N�.)r& r) �map)rI �versions�majorZminors�minorr0 r0 r1 � versioning� s rU c C sR yt �| � W n> tk rL } z |jtjkr:t j�| �r:n� W d d }~X Y nX d S )N)rH �makedirsr# �errno�EEXISTrI rJ )rI �excr0 r0 r1 �mkdir_p� s rZ c C sf t j�t�| �j�}t j�t j�||��}t||�d �t j �}t ||f�s^t � d||f ��||fS )z� Returns absolute and relative to user's home directories paths, after eliminating all symlinks :param user: Unix user whose home contains the directory :param directory: The directory to obtain absolute and relative paths for � z&Directory '%s' not in user home ('%s')) rH rI �realpath�pwd�getpwnam�pw_dirr) � s_partition�lstrip�sep�allr � WrongData)�user� directoryZuser_dirZabs_dirZrel_dirr0 r0 r1 � get_abs_rel� s rg c C s t j�d�S )Nz /var/.cagefs)rH rI rJ r0 r0 r0 r1 � in_cagefs� s rh �rc C s. d}t | ||d�}z |�� }W d|�� X |S )zg read file and close :param path: file path :param mode: reading mode :return str: N)�mode�errors)r r8 r9 )rI rj rk �data�streamr0 r0 r1 � file_read� s rn c C s, g }t | |d�}z |�� }W d|�� X |S )zE read litle file and close :param path: :return str: )rk N)r � readlinesr9 )rI rk rl rm r0 r0 r1 �file_readlines� s rp �wc C s, t | ||d�}z|�|� W d|�� X dS )zN write litle data to file and close :param path: :return str: )rk N)r rF r9 )rI �linerj rk rm r0 r0 r1 � file_write� s rs c C s, t | ||d�}z|�|� W d|�� X dS )zN write litle data to file and close :param path: :return str: )rk N)r � writelinesr9 )rI �linesrj rk rm r0 r0 r1 �file_writelines� s rv c C sd t jd dkr&t jd dkr&| �|�S | �|d�}t|�dkrR|d ||d f}n|d ddf}|S )z� str.partition for all python versions :param s: string to parse :param sep: separator to split by :return: cortege - see str.partition function for python 2.5+ r r[ r � r7 )�sys� version_info� partition�split�len)�srb Zs_partsZ ret_corteger0 r0 r1 r` � s r` c C s^ yt |d�}W n tk r" dS X d}t�| �}x |D ]}|�|�r8|d7 }q8W |�� |S )z" find regex count in file ri Nr r )r r$ �re�compile�searchr9 )�patternrI r< ZcounterZregexrr r0 r0 r1 �grep s r� c C s ddl m} || �S )z� Determines is user should be skipped in selectorctl work :param username: user name to check :return: True - user should be skipped, False - not r )�is_admin)�clcommon.cpapir� )�usernamer� r0 r0 r1 �user_should_be_skipped s r� c C sb t j�| �s^yt| d� W nB ttfk r\ } z td| dt|�� t� d� W d d }~X Y nX d S )Ni� zError: failed to create�:r ) rH rI rJ r r$ r# �printr& rx �exit)Zdest_dirr/ r0 r0 r1 �make_dir' s r� c C s@ yt �| � W n tk r" Y nX t j�| �r<t�| d� d S )NT)rH �unlinkr# rI rJ �shutil�rmtree)rI r0 r0 r1 �remove_file_or_dir0 s r� c C s� yJt j�|�r4t �|�| krHt �|� t �| |� nt|� t �| |� W nB tk r� } z$td|d| dt |�� t � d� W d d }~X Y nX d S )Nz Error: failed to create symlinkz->r� r ) rH rI �islink�readlinkr� �symlinkr� r# r� r& rx r� )�src�dstr/ r0 r0 r1 � make_symlink9 s r� c C s t j| dddd�S )N� )�,z: T)�indent� separators� sort_keys)�json�dumps)rl r0 r0 r1 � pretty_jsonG s r� r Fc C s� | }d}yt | |d�\}}W n� tk rT t�|dd�| |�d�� t�d� Y np tk r� |rhn t�|ddt d�� t�d� Y n8 t k r� t�|dd|| f d�� t�d� Y nX ||fS ) a� Safely resolve username and doc_root by domain, or resolve document root by username, or resolve document root and username by effective uid :param pass_not_supported_panel: pass not supported panel for php selector :param msg_format: error messages' format (json or text) :param user: str -> name of unix user :param domain: str -> domain of panel user :return: tuple -> user, doc_root N)re �domain�ERRORz(No domain found for user: {}, domain: {})�status�messager z6NodeJs/Ruby/Python selector not supported for %s panelz%Domain %s is not owned by the user %s) r r r � print_diag�formatrx r� r r r )re r� Z msg_formatZpass_not_supported_panel� result_user�result_doc_rootr0 r0 r1 �$safely_resolve_username_and_doc_rootL s6 r� c C sL t | |�d }x*|D ]"}t | |�d }||kr|| S qW td�|���dS )a Transform all directories to realpath, compare and return config value :param user: str -> unix user - owner of the config :param directory: str -> wanted directory key :param config: dict -> config to get value from, should have directories as keys r z%Config does not contain directory: {}N)rg �KeyErrorr� )re rf �config� abs_directory�conf_dir� abs_conf_dirr0 r0 r1 �get_using_realpath_keys� s r� c C sb t | |�d }d}t|�� �}x,|D ]$}t | |�d }||kr$||= d}q$W |s^td�|���dS )a Transform all directories to realpath, compare and remove directory key :param user: str -> unix user - owner of the config :param directory: str -> wanted directory key :param config: dict -> config to remove key from, should have directories as keys r FTz%Config does not contain directory: {}N)rg �list�keysr� r� )re rf r� r� Zremoved_at_least_oneZ config_keysr� r� r0 r0 r1 �delete_using_realpath_keys� s r� c C s t | |�d t | |�d kS )a# Checks that two paths in user home directory are the same after stripping symlinks :param user: Unix user whose home directory contains both paths :type path1: str :type path2: str :return: True if paths are canonically the same otherwise False :rtype: bool r )rg )re �path1�path2r0 r0 r1 �realpaths_are_equal� s r� c C s� i }|s i }t | |g| }tj||tjtjdd�}|�� \}}|j} |sf| dkrfd�|�dt� d�}n|�� }||d< | |d< | r�dnd |d < |S ) z= Run any process using the utility cagefs_enter_user T)r r r r � z�User's process "{}" failed and didn't return anything. It could mean that user has too small limit of PMEM for running of cloudlinux-selector. Please, increase the limit to user and try run process againrB )�details�result� timestampr, r' FZfailed) �CAGEFS_ENTER_USER_BINr r r r" r' r� r �strip) re Zpath_to_utilityZargs_for_utilityZenv_varsr� r* r5 r �_�retcoder0 r0 r1 �run_process_in_cagefs� s( r� )�version�returnc C s� t dtd�tdd�}d| �dd�� �}td�}|�� s:dS yDd}t|��}|�� }W dQ R X |�d �rt||kr|d S nt d ��W n |� � Y nX dS ) zC Check if python version is dependency of imunify packages Z lvemanagerF)�releaseZdsn�handlez/opt/alt/pythonrP r7 z/usr/bin/imunify-serviceNz#!Tz-ERROR: Imunify service doesn't have a shebang) r r � LVEMANDSN�replacer �is_filer �readline� startswith� ExceptionZcaptureException)r� Z sentry_client�alt_pathZimunify_serviceZimunify_shebangr< r0 r0 r1 �imunify_python_dependency� s( r� )re c s t �� ��� �fdd�}|S )z Drops to user c s2 t ��j� t ��j� � t jd< �jt jd< d S )N�USER�HOME)rH �setgid�pw_gid�setuid�pw_uid�environr_ r0 )re �user_pwdr0 r1 �func� s zdemote.<locals>.func)r] r^ )re r� r0 )re r� r1 �demote� s r� c O sf d }d}xP|D ]H}y| |f|�|�}W n& |k rL } z| }W d d } ~ X Y qX |dO }qW |sb|�|S )NFTr0 ) r� �usersZexception_typer? r@ Zcaught_exceptionZ is_handledZ user_aliasr� r/ r0 r0 r1 �apply_for_at_least_one_user s r� )N)NNN)ri N)N)rq N)rq N)NNr F)N)G� __future__r r r rW rH r] r~ r rx r� r� r �typingr r r r Zpathlibr �clcommon.clpwdr r� r Z clcommon.cpapi.cpapiexceptionsr r r �clcommon.utilsr Zclsentryr Zclsentry.utilsr � clselectprintr �clselectexceptr r� r� r2 r6 r= rA r> rO rU rZ rg rh rn rp rs rv r` r� r� r� r� r� r� r� r� r� r� r� r& �boolr� r� r� r0 r0 r0 r1 �<module> sh # 5 &