j d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl
m Z ej e
Zd
dZej d Zd Zd Zdd
Zd Zd ZdS ) N) clcaptain)ExternalProgramFailedTc $ t | d 5 }| cddd S # 1 swxY w Y dS # t t f$ r> t j d| z t j d |s t j d Y dS w xY w)z
Helper for read file, process errors and make backup before read
:param: filename `str` name of file for read
:param: exit_on_error `bool` use sys.exit on error or raise exception
rNzError: failed to read ) open readlinesOSErrorIOErrorsecureiologging SILENT_FLAGsysexit)filename
exit_on_error_files Bopt/cloudlinux/venv/lib/python3.11/site-packages/clcagefslib/io.py read_filer s
(C
%E??$$ % % % % % % % % % % % % % % % % % %
W 1HRTUVVV s- A 3 A 7A 7A A BBc t | S N)r )paths r read_file_cachedr & s T?? c z t j | ||||t j }t j | |d u S )N)logger)r create_dir_securer
closefd)r permuidgid parent_pathfds r make_userdirr$ , sF # dCk(2B
B
R
:r c B t j | j }n# t $ r Y dS w xY w||k rdS t j | }n# t $ r Y dS w xY wt j |j t j | k S )a
CLOS-4545 guard against stealing a shared home's ``.cagefs``.
Return ``True`` when ``home_path`` is owned by a user *other than*
``target_uid`` and that owner is a real ``/etc/passwd`` user whose home
directory is ``home_path`` itself.
On every panel CageFS supports, the home directory is owned by the real
subscription/account user, so its owner is the authoritative answer to
"who does this home belong to". When several ``/etc/passwd`` entries share
one home -- e.g. an orphan ``sys_user`` left behind by a reverted Plesk
migration, which merely has the home as its ``pw_dir`` but does not own it
-- an operation aimed at a uid that is *not* the home owner must not chown
``/.cagefs`` to it: that would strip the real owner of its own
``.cagefs`` and break the subscription (the next HTTP request fails with
503). Callers must skip the chown when this returns ``True``.
Keying on the home owner (rather than the current ``.cagefs`` owner) means
the legitimate owner -- and automated repair such as
``update_status(fix_owner=True)`` -- can always (re)claim ``.cagefs``, even
after it was previously flipped to an orphan. ``False`` is also returned
when ``target_uid`` owns the home, when the home cannot be stat'd, or when
it is owned by an unrelated uid (e.g. root) that does not live in this home,
so normal provisioning, brand-new subscriptions and ownership repair keep
working.
F)
osstatst_uidr
pwdgetpwuidKeyErrorr realpathpw_dir) home_path
target_uidhome_uid
home_owners r home_owned_by_other_userr2 5 s 679%%, uu: u\(++
uu 7 J - . ."'2B2B92M2M MMs
**A
AAFc
|s t j | s2 t j | nj# t $ r]}|j t
j k r t d| d n t d| | Y d }~nd }~ww xY w t j | | n# t t f$ r}d| d| dt | dd }t || |rt j ||d
nt# |t$ j Y d }~d
S d }~ww xY wd S )
NzSymlink z does not existz Error: Unable to remove symlink )exc_infoz Error: failed to create symlink z to z : ErrnozErr codeT)fileF)r& r islinkunlinkr
errnoENOENTr infoerrorr symlinkr strreplacer r
printr stderr) dest_path link_name write_logforcesilentemsgs r switch_symlinkrI a s BGNN9-- Y Ii Y Y Yw%,&& Ay A A ABBBB K K KVW XXX Y
i 3 3 3 3./ wYwwIwwRUVWRXRXR`R`ahjtRuRuwwC LLqL ) ) )
, fd3333c
++++44444 5s/ 9
B ABB $B: :E A2 C+ >BC+ BC+ C
C$#C$+"D5D#"D5#
D0-D5/D00D5c * t j | t j t j z t j z } t j || t j ||| t j | d S # t j | w xY wr )r& r O_RDONLY
O_NOFOLLOW O_CLOEXECfchmodfchownclose)r moder r! r# s r apply_metadata_nofollowrd ss
r{R]2R\A B BB
"d
"c3
s +A< <B)T)TTF)r9 functoolsr
r& r) r rN r clcommonr clcommon.utilsr getLogger__name__r r cacher r$ r2 rI r[ rd r r rl s
0 0 0 0 0 0
8 $ $ "
)N )N )NX , " r