jy d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl
mZmZmZmZmZ d dlmZ d dlmZ d dlZd d
lmZ d d lmZ d d l m Z m Z d d
l m Z d dl!m"Z" d dl m#Z# d dl$m%Z% d dl&m'Z'm(Z(m)Z) d dl*m+Z+m,Z,m-Z- d dl.m/Z/ d dl0m1Z1 d dl2m3Z3m4Z4m5Z5 d dl6m7Z7 n# e8$ r d Z3Y nw xY w d dl2m9Z9 n# e8$ r d Z9Y nw xY w d dl:m;Z; d dldS ) )print_function)absolute_import)divisionN) configparser)S_IRUSRS_IWUSRS_IRGRPS_IROTHS_ISREG) iteritems)Path )ClSelect)ClSelectExcept)ClPwd clcaptain)clprint)utils)clcagefs)ExternalProgramFailed)docroot domain_owner userdomains)NoDomain NoPanelUser NotSupported)BASEDIR)get_user_prefix)is_ea4_enabledread_cpanel_ea4_php_confconfigure_alt_php)da_change_user_php_inic dS NF argskwargss L/opt/cloudlinux/venv/lib64/python3.11/site-packages/clselect/cluserselect.pyr r + s u )native_website_targetsc i S Nr% r& s r) r+ r+ 7 s r* )get_website_id)load_user_configc d S r- r% )_s r) r2 > s t r* c e Zd ZdZdZ ej rendZdZdZ d4dZ
d5d Z d
Z d6d Z
d7dZd8dZd8dZd Zd Zd Zd Zd Zd Z d9dZd9dZdedefdZd8d Zd Z d Z d Z d Z d! Z d:d"Z!d;d#Z" e#e" Z"d$ Z$d% Z%d& Z&d' Z'd( Z(d) Z)d4d*Z*d+ Z+d, Z, e#e, Z,d- Z-d. Z. e#e. Z.d>$''
B%)%5%5d%;%;"B OD)))) !67 C C C(9$BBBC * !--.@AAAAL--.@AAAA
B
B
Bs* -CD C-C((C--D D(Tc t j t s;t j s(t
d |rt j d ndS |rut rgt }|rW |d }| d s(t
d |rt j d ndS n# t $ r Y nw xY wt |||dt j dk | }|r|rt j d |st t! t |j j } t' |j }
n# t( t* f$ r g }
Y nw xY w|
D ]O\ } } | | vr
t || |j | p|| dt j dk | P|S )
z
Switch symlink for alt php.
Create .cagefs directory if not created
Rerurn True if error has occured
ERROR: CageFS not installed.r Tdefaultzea-phpzlERROR: system default PHP version is alt-php. PHP Selector is disabled. Use cPanel MultiPHP manager instead.Fr ) write_log drop_permconfigure_multiphp)r8 r9 isdirr r r7 printsysexitr r
startswithKeyErrorr! geteuidr/ setpw_nameenabled_websitesr r r _website_selected_version)
rD versionrG
document_root
exit_on_errorrP conf default_phperrorisolated_domainstarget_domainsdomaindomain_docroots
r) switch_symlink_for_alt_phpz'ClUserSelect.switch_symlink_for_alt_phpa s1 w}}W%% h.@.B.B 0 1 1 1
t ."2"2 +--D
"&y/K&11(;; ( ] ) ( HQKKKK#'4 D " z||q( 1
] HQKKK & !1!= "#3BJ#?#?#P Q Q
$!,RZ!8!8 .
$
$
$!#
$ +9
&!111 $ "222:~NNYRY" # !z||q 0'9
s% AC
CC E E43E4c | j r#t d t j d t j dk r#t d t j d | }t | D ]H\ }}t d| | j | }|
||dd Id S )NzPERROR: this option does not work in "single user" mode (when CageFS is disabled)r r z ERROR: root privileges requiredzProcessing userF)r^ rP ) without_cagefsrR rS rT r8 rW get_user_version_mapr r; r< rf )rD users_vers_dictrF r\ rG s r) apply_symlinks_rulesz!ClUserSelect.apply_symlinks_rules s d e e e HQKKK
:<<1 3 4 4 4 HQKKK 3355 & 7 7 h hMD' #T * * *++D11B + +GRuaf + g g g g h hr* phpc t j | | t | _ t | _ |r || _ d S g | _ d S r- )r __init__r r; rX _user_excludesexclude_pid_list)rD itemrp s r) rn zClUserSelect.__init__ sP $%%%gg !ee '$4D ! ! !$&D ! ! !r* Fc F | | | | }|r`| || rJ| |t | d }t j | r|}| || S )zl
Returns alternative version for a user
@param user: string
@return: string
r )_check_user_in_cagefs_compose_user_alt_pathwebsite_isolation_enabledr r8 r9 rQ _version_at_alt_path)rD rF rd show_native_versionalt_path website_paths r) get_versionzClUserSelect.get_version s
""4(((..t44 (d44T6BB ( 66tWV__Q=OPPLw}}\**
('((3FGGGr* c l t j | s| | S t j || j }t j | s| | S | t j | | S )ax Resolves the alternative a selector directory currently points at.
Split out of ``get_version`` so the per-website scope can be read from
a document root the caller already has, without re-resolving a domain
through the panel API. ``alt_path`` is an account-level
``etc/cl.selector`` or a per-website ``etc/cl.selector/``.
) r8 r9 rQ _compose_native_infor= _itemislink_version_for_link_targetreadlink)rD rx rw full_paths r) rv z!ClUserSelect._version_at_alt_path s w}}X&& B,,-@AA AGLL4:66 w~~i(( B,,-@AA A,,R[-C-CEXYYYr* c @ | } j r9 j s j j j k r|S t
j j k r|S t t fdt d }|| d | d j fS # t t f$ r |cY S w xY w)a, Resolves the alternative a primary ``- `` link target names.
Split off from ``_version_at_alt_path`` so a caller holding a target it
has already read can resolve *that* target instead of re-reading the
link. The re-read is not equivalent: CageFS rewrites these links
unlink-then-symlink, so a second look can find the link gone and answer
``native`` -- the reading for a selector directory that holds no
selection -- where the target in hand still names the alternative the
website ran.
c > | d j k S )Ndata)r} )i alternativeslink_dstrD s r) r2 z7ClUserSelect._version_for_link_target.. s ,q/&"9$*"E"Q r* r r\ r )r| rh _native_contents_load_native_contentsr} r8 r9 dirname
SELECTOR_PATHget_all_alternatives_datalistfilterkeys
IndexErrorrV )rD r rw nativer\ r s `` @r) r z%ClUserSelect._version_for_link_target s8 **+>?? (
7**4:66640<<<
7??8 $ $(: : :M5577 QQQQQQTXYeYjYjYlYlTmTmnn G \' 29 =|G?TU[?\]a]g?hi iH% MMM s A.D D D c | || }t j || j }t j | sdS t j | }n# t $ r Y dS w xY wt j | | j k rdS |
| d S )a PHP version a website has selected for itself, or None to follow the
account-level one.
Reads the website's own selector directory -- the very tree
``configure_alt_php`` is about to write ``link/conf`` into -- so the
answer is what the website *runs*, which is what those symlinks have to
agree with. The primary ``
- `` link is the evidence of a per-domain
selection: ``_set_version`` creates it for a per-domain set, and CageFS
re-creates it on its own sweep. Its absence (no directory at all, or a
directory holding only the cPanel-MultiPHP ``ea-*`` aliases that an
account-level save writes there) means the website has made no
selection, so the account-level version is the right input. So does a
primary link routed through ``/usr/selector`` -- see below: that
encoding resolves to the account's own selection rather than pinning
anything, so such a website follows the account too.
CLOS-3932 made per-domain PHP Selector default-on for every isolated
website, so isolation alone no longer implies a selection -- which is
why this has to be asked per website rather than inferred.
Nr ) rt r8 r9 r= r} r~ r rA r r r )rD rF r] rx linkr s r) r[ z&ClUserSelect._website_selected_version
s * ..t]CCw||Hdj11w~~d## 4 {4((HH 44 7??8 $ $(: : :* 4 ,,X66q99s A3 3
B Bc n t j | s| | } t j | n.# t t f$ r}t j || d }~ww xY w t | d S # t | w xY wd S r- ) r8 r9 rQ r? r mkdirrA r r rB r4 rC )rD r9 rF rH rI s r)
create_dirzClUserSelect.create_dirZ s w}}T"" >!%!1!1$!7!7
>%%%% 23
?
?
?$5dA>>>
? & ))*<===== ))*<==== > >s) A
B A6 A11A66B B2c p | j | }t j || j }| | }| || | d|dz d | d|dz d | | dS )z\
Creates additional directory and symlinks for use in "without CageFS" mode
z
../php-cliz/phpT)check_existencez../phpz/php-cgiN)
r; get_homedirr8 r9 r=
SELECTOR2_DIRr? r _create_symlinkrC )rD rF homedir path_in_homecur_users r) create_selector_symlinksz%ClUserSelect.create_selector_symlinksd s +))$//w||GT-?@@ ##D)) d+++ \<&+@RV WWW X|j'@RV WWW (#####r* c t j t j rD | j d| j S # t j t t f$ r Y dS w xY wdS )Nversionsr ) r8 r9 r: r
DEFAULTS_PATH_dhgetr} ConfigParserErrorIOErrorrV )rD s r) get_default_versionz ClUserSelect.get_default_versionp si
7>>(0 1 1
x||J
;;; &:
xx
xs A A+*A+c t j | j | dd } t j | }n# t $ r d }Y nw xY w|t |j s*| ||
d S | | }| || d| j
d S # t j t t" f$ r<}t% dt' | t) j d Y d }~d S d }~ww xY w)N .cl.selector defaults.cfgr z*Error while restoring settings from backupr )r8 r9 r= r; r lstatrA r st_mode set_versionr _get_default_config_handlerr r} r r r rV rR strrS rT )rD rF user_backup_pathstdhrI s r) set_version_from_backupz$ClUserSelect.set_version_from_backupx s? 7<< (?(?(E(E~Weff *++BB BBB
:WRZ 0 0: T4#;#;#=#= > > > > >
556FGG rvvj$*'E'EFFFFF &:
BCFFKKK
s* A A A #AC) ) E1D<<Ec R | j | j |d sdS dS )aL "
Checks if version is enabled,
a version is considered "enabled" if there is no "state" option in the config.
The presence of the "state" option always means it is disabled, regardless of its value.
@param version: string
@return: bool - True if version is enabled, False otherwise
stateTF)r
has_optionr} )rD r\ s r) _version_enabledz ClUserSelect._version_enabled s3 x""TZZ#A7KK 45r* c
T t j dk r+| | x}rt j | | | st j d|z |rY t
| }n# t $ r d}Y nw xY w||k rt j d|d| | || t j | j | j
| j
| t j ||||| } |r| S dS )zz
Sets alternative version for a users with the same uid
@param user: string
@return: None
r z'Version %s is disabled by administratorNzDomain z does not belong to user )r8 rW "get_version_selection_disabled_msgr VersionModificationBlockedr r r SelectorException_require_website_isolationr apply_for_at_least_one_user _set_versionr; get_namesget_uidNoUserSelector)
rD rF r\ rd return_summaryrw r^ messageownerr s
r) r zClUserSelect.set_version s\ :<<1 T-T-TUY-Z-Z"Z' ;GDD D $$W-- q ;+> 9'BB B ''111
[
'
'
-
- h " (
B, ;..tz:::)243H)I)I \ \%D+((hnt6KTSZ[[[[\ >D!K!7!9!9!9 "' !w||8H8H8H,JC P P 7>>,// +n,, ,S 1 gll8d6H+H# N N ',,x55C((c4AAA&*O "
4+; < <
B
BHz11 ((00 !_ ! ',,x::C >11 ,X 6 gll4+=x H H((c4AAAA
B ( W(=f(E F F
X
X
d$$T27<<$+G+GwWWWW 3 % %&8 9 9 9 9 + +GR:G:G
,
I
I
I
# #D' 2 2 2 t$$$ d-2G4PV WWW ?##D*=>> > ? ?r* usernamereturnc n | j | }t d| d }| sdS | d 5 }t j | }| dd cddd S # 1 swxY w Y dS # t t f$ r Y dS w xY w)a
Returns a message indicating that the selection of the PHP version
is disabled for the user, based on the configuration file.
Args:
username (str): The username for which to check the configuration.
Returns:
str: The message indicating that version selection is disabled,
or an empty string if the configuration file does not exist
or does not contain the message.
z!/var/cloudlinux/cl.selector/uids/z /version_selection_conf.jsonr zutf-8)encoding version_selection_disabled_msgN)
r; r r
r openjsonloadr rA
ValueError)rD r uid config_filef config_datas r) r z/ClUserSelect.get_version_selection_disabled_msg s# k!!(++`s```aa !!## 2 !!7!33
Mq "ill "'GLL
M
M
M
M
M
M
M
M
M
M
M
M
M
M
M
M
M
M $ 22 s6 B *B B BB BB B43B4c | | | }| | }dddddi}t | }| d | | d }|D ]?}||vri ||< | | || d< d|| d< d|| d< @ | j d | j
} n## t j t j
f$ r d} Y nw xY w d|| d< d|| d< n"# t $ r t j | w xY w| d ||d < | d | |d g }
t' | D ]z\ } } t) || d || d || d f s<|
| || d || d || d ff {t+ |
S )
a'
Returns a summary of available alternative versions for the given user.
Only versions that are enabled, default, or selected are included.
The label for the "native" version is replaced if show_native_version is True.
@param user: str - Username inside CageFS.
@param show_native_version: bool - Whether to replace the 'native' version label.
@return: tuple of (str, (bool, bool, bool)) - Each entry contains the version name and a tuple with flags:
(enabled, default, selected).
r TF)enabledrM selectedr r rM r r )rs r r| sortedr appendrz r r r r} r NoSectionError
NoOptionErrorrV r r popremove enumerateanytuple)
rD rF rw r native_infosummary alt_versionsselected_versionr\ default_versionresultidxvs
r) r zClUserSelect.get_summary0 s
""4(((5577 //0CDD %U S ST l / / 1 122 H%%% ++D11!4# 1 1Gg%%#% *.*?*?*H*HGG Y '*/GG Y '+0GG Z ( ( ' "hll:tz B BOO +\-GH ' ' ' &OOO ' K26GO $Y /48G$ %j 1 1 K K K 9/JJ J K")++h"7"7 A H%%%KN+++ -- g gFC
9-wqz)/DgajQ[F\]^^
MM1wqz) 4gaj6KWUVZXbMc de f f f fV}} s C< < D D D7 7 Ec | | }|D ]W} | ||d # t $ r/}t j ddt | d Y d}~Pd}~ww xY w| | dS )z
Changes users of a supplied version to specified_version
@param version: string
@param current_version: string
F)r^ textERROR)statusr N)
list_usersr Exceptionr
print_diagr rJ )rD new_versioncurrent_versionrE rF rI s r) change_to_versionz ClUserSelect.change_to_versiona s 00 D
{% HHHH
"6g#a&&+Q+QRRR
u%%%%%s 4
A-%A((A-c F | }||v r|| S g S )z8
Returns users of a certain alternative
)get_version_user_map)rD r\ r s r) r zClUserSelect.list_usersp s- ((** d??= r* c | j rddlm} | gS t | | S )zF
Returns all valid system users
@return: list
r )get_cpanel_user)rh clselectctlphpr
r _get_system_users
difference_get_user_excludes)rD r
s r) list_all_userszClUserSelect.list_all_usersy sf
' 7 7 7 7 7 7#O%%& &D**,,778O8O8Q8QRRSSSr* c t }d|d< d|d< d|d< d}t j | dd l}n3# t
$ r& t
d t j d Y nw xY wt j t t | |d }t j |d z r"t j |d
z s|
|| d S d S ) Nr initreinitverbose/usr/share/cagefsrL r etcz /cl.selectorz /cl.php.d)dictrS r9 r cagefsctl ImportErrorrR rT r8 r= r r r cpetc_for_user)rD rF configLIBDIRr cagefs_etc_paths r) cagefs_copy_etcz ClUserSelect.cagefs_copy_etc s v x y$ 0 1 1 1 HQKKKKK ',,w0E0EtUSSw~~o >?? 3rw~~VehsVsGtGt 3 $ $T6 2 2 2 2 2 3 3s A -A54A5c | }i }|D ]7} | |d d ||< ## t j $ r Y 4w xY w|S )zH
Returns user version map as dict
@return: dict
Fr )r rz r
NotCageFSUser)rD actual_usersr rF s r) ri z!ClUserSelect.get_user_version_map sv
**,, D
! - -dE : :1 =T
!/
s <A
Ac |p| }i }|D ]Y} | ||d d }||vrg ||< || | E# t j $ r Y Vw xY w|S )zH
Returns users grouped by version
@return: dict
Fr )r rz r r r )rD
user_namesrd r r rF r\ s r) r z!ClUserSelect.get_version_user_map s
":T%8%8%:%: D
**4??B $$&DMW
$$T****!/
s AA A21A2c
|rbt j | r/t j | | k rt j | ndS t j | t j | | dS # t $ r=}||t j ||| t j d| d|d|d d}~ww xY w)z
Creates symlink from src to dst
@param src: string
@param dst: string
@param user: string
@param version: string
@param check_existence: bool
@return: None
NzCannot create symlink from z to z ())
r8 r9 r~ r unlinkr remove_file_or_dirr symlinkr r UnableToSetAlternativer )r r rF r\ r rI s r) r z ClUserSelect._create_symlink s
o
27>>#&& 2{3''3.. # ,S111 c3 ' ' ' ' ' o o o G$7$;D'1MMM 22adadadfififiklklkl3mnn n os AA= )A= =
C8B??Cc | j r| j S t j | j st S t j | j D ]}t j | j | }| j t t d t j | | j S )zE
Returns list of user excludes
@return: list
c * | S r- )strip)xs r) r2 z1ClUserSelect._get_user_excludes.. s 17799 r* )
ro r8 r9 rQ CAGEFS_EXCLUDErX r r= updatemapr read_file_as_string
splitlines)rD rq full_item_paths r) r z ClUserSelect._get_user_excludes s
'& &w}}T 011 55LJt 233 D W\\$*=t D DN & &C,,u/H /X/X/c/c/e/effgg
""r* c | j rdS t j rdS d}t j | ddl}n3# t $ r& t d t j d Y nw xY w |
| st j | dS # t $ r' t d t j d Y dS w xY w)z4
Check that cagefs enabled for user
Nr r rL r z;ERROR: CageFS version is unsupported. Please update CageFS.)rh r r7 rS r9 r r r rR rT is_user_enabledr r AttributeError)rD rF r r s r) rs z"ClUserSelect._check_user_in_cagefs s F F$ 0 1 1 1 HQKKKKK ,,T22
9$24888
9
9 O P P P HQKKKKKK s$ A -A65A6:)B% %-CCc N | j st dS |t | j v S )a Is CloudLinux Isolates enabled for ``domain`` of ``user``?
The per-website scope only exists for an isolated website: CageFS
binds that website's ``cl.selector/`` and
``cl.php.d/`` over the account-level ones inside its
namespace, and no other domain ever reads them. So this is the
precondition for both reading and writing a per-domain setting.
Reads ``enabled_websites`` from
``/var/clwebisolate/users//.json`` -- the same source the
admin UI reports ``isolated`` from (`cloudlinux_cli._site_isolation_user`)
and the same one the account-level sync loop in
``switch_symlink_for_alt_php`` already uses. ``cagefs.mp`` mounts that
directory split-by-uid and the file is root: 0640, so the
answer is the same for root and for the user inside the jail.
Fails closed: in single-user mode (CageFS off) and without the cagefs
package there is no isolated website at all.
NF)rh r/ rZ rD rF rd s r) ru z&ClUserSelect.website_isolation_enabled s1 ( "2":5)$//@@@r* c b |r*| || st j | dS dS )a Guard every per-domain WRITE. Raises before anything is touched.
CLOS-7489: without this, a per-domain write on a non-isolated domain
got half-way -- the per-website selector directory was created and
reported back as the domain's version -- and then died on the
``~/.cagefs/websites/`` overlay that only isolate-enable
creates. Refusing up front is what keeps "failed" and "recorded"
from disagreeing.
N)ru r WebsiteIsolationDisabledr7 s r) r z'ClUserSelect._require_website_isolation sN B$88vFF B 9&AA A B B B Br* c D | ||r|j nd dS )z``Website``-object flavour of :meth:`_require_website_isolation`,
for the extension and option writers, which carry the scope as a
``Website`` rather than a domain name. ``None`` is account scope.
N)r rd )rD rF websites r) _require_isolated_websitez&ClUserSelect._require_isolated_website s+
''.QgnnTRRRRRr* c t j | D ]`}| j |vr t j || }t j | sLt j | adS )zg
Removes all symlinks from directory
@param path: string
@return: None
N)r8 r r} r9 r= r~ r% )rD r9 r r s r) r z'ClUserSelect._remove_alternatives_links$ sx
4(( ! !Hz)) T844I7>>),,
Ii
! !r* c | j r | j | }|dz S t | j | }d}|r|rt | nd}t
j s0t j
| j |dd |dd nd}|r t j
|| n|S )zz
Composes and returns user alternative directory path
@param user: string
@return: string
z
/.cl.selectorr Nr z cl.selectorz/etc/cl.selector) rh r; r r r r. r r7 r8 r9 r= CAGEFS_PATH)rD rF r] r r document_root_idbases r) rt z#ClUserSelect._compose_user_alt_path2 s -k--d33G_, ,$+%%d++,, V@M U~m < < >) $ $ l
l )$$$$$
l
l
l$5iAjkkk
l l ls 7 Ac | j | }|j }|j }t j }t j }||k r||fS t j | t j | t j
||fS # t $ r}t j
|| d}~ww xY w)z
Changes to another uid and returns tuple of previous euid and egid
@param user: string
@return: tuple
N)r; r< pw_uidpw_gidr8 rW getegidsetegidseteuidsecureioset_capabilityrA r UnableToChangeToAnotherUser)rD rF entrynew_uidnew_gidcur_euidcur_egidrI s r) r? zClUserSelect._change_uid[ s **400,,:<<:<< w X% % F Jw Jw # % % %X% % F F F B
B=#B88B=c L | d t j k rt j d t j | d t j | d dS # t $ r-}t j t | d | d}~ww xY wdS )zw
Restores changed uid and gid to original ones
@param uid_and_gid: tuple
@return: None
r T)clearr N)
r8 rW rO rP rM rN rA r rQ r ) uid_and_gidrI s r) rC zClUserSelect._restore_uidp s q>RZ\\ ) ) #$ / / / /
Y
;q>***
;q>*****
Y
Y
Y$@[QR^ATATVWXXX
Y * )s 4A* *
B!4(B B!c | | } |s3G21H2G64HHH2 2 Ic 6 t j }t d D ]8}| }| | j |j 8 n# t j $ r Y nw xY w t | }n# t j
f$ r Y dS w xY w t j D ]} || j
| j fvs0| | j dk rh|j }n# t j $ r Y w xY w || j vr t% j |t( j # t, f$ r Y w xY wdS # t, t. f$ r Y dS w xY w)z&
Reloads user process
N)psutilProcessrangeparentrp r pid
NoSuchProcessr r NoSuchUserException process_iteruidsreal effectivenamefindr} r8 killsignalSIGHUPrA r )rD rF next_parentr r procro s r) r z ClUserSelect._reload_processes s .**K1XX
) 0 0 2 2 *)00 AAAA# D ''//$''CC)+ FF +--
499;;#3TYY[[5J"KKKtyy{{O_O_`d`jOkOkoqOqOq (CC + H $"777V]333 z H
! DD s AA A0/A04!B B*)B*.F A$D1(F )D10F 1E F EF (E0/F 0 E>;F =E>>F FFc g } t | }|D ]I}| d r2|d| d }| | J| n# t
t f$ r Y nw xY w|S )zH
Get extension names from user extensions file comments
z;--- z---)r rU rfindr closerA r )r9
extensionsr lineexts r) _skim_over_extensionsz"ClUserSelect._skim_over_extensions s
t**C
+
+??6** + q4::e#4#4 45C %%c*** IIKKKK! D s A/A4 4BBc | | t | o| j }|rt | nd}g }| || }t
j t
j | | d }|r t
j || }| } t
j | j
| d }
|r t
j |
| }
t
j |
s|
| } t j |
nH# t t" f$ r4} t$ | t) j |
| d} ~ ww xY wt$ | t
j |
d }
t
j | r*d| j d| || d d
}n d| j d }| | t3 | D ]}| j r |d z | d
d z dz }n8t
j |d| d
d d }| | }| d| j |dd t3 | d
| |d
| |
dS )a
Scans all user settings and backups'em in homedir as INI file
When ``document_root`` is given (an isolated per-domain config), the
backup is written to the per-website ``~/.cl.selector//``
directory and reflects the per-website ``cl.php.d/`` inis,
so ``cagefsctl`` regenerates the isolated config from it. Otherwise the
account-level backup is written as before. Without this, per-domain
extension changes were lost on ``cagefsctl --force-update`` (CLOS-4702).
@param user: string
@param document_root: str or None - domain docroot for the per-website backup
@param domain: str or None - domain name, used to record its PHP version
r zcl.php.dr Nr z [versions]
z = )rd r r] z
= native
z/alt_php.r zalt-phpz alt_php.ini[z ]
modules = ,) rs boolrh r. rt r8 r9 r= r r r; r rQ r? r r rA r r4 rC r rB r} rz r r r replacer rg )rD rF r] rd per_website
website_idbackup_contents
user_alt_path
user_ext_pathr r rH rI user_backup_filer\ alt
curr_ext_pathr s r) r z ClUserSelect._backup_settings sU
""4(((=))E$2E.E 6AI^M222r
33D-HH
RW__T5P5PQU5V5V%W%WYcdd
D GLL
C CM5577 7<< (?(?(E(E~VV J !w||,NOOOOOs -F G/GGc 8 | j rd S t || d S r- )rh r" )rD rF r\ s r) r z ClUserSelect._switch_php_da_isp s( F tW-----r* r- )NTT)rl Nr$ )F)NFFT)NN)NNF)T)4__name__
__module__ __qualname__r@ r r r7 r r- r rJ rf rk rn rz rv r r[ r r r r r r r r r r r r r r ri r r staticmethodr rs ru r r< r rt r rH r? rC rg r r r r r% r* r) r4 r4 B s K#M#58#5#7#7f--=fK*N0MB B B B0T T T Tl h h h' ' ' 'H H H H*
Z
Z
Z
Z 8K: K: K:Z> > >
$
$
$ 4 ae# # # #JP? P? P? P?d3 3 2/ / / / b
&
&
& T T T3 3 3$ "o o o o2 #l?33O# # # 0A A A0 B B BS S S ! ! ! R R R R*& & &l l l & &899F F F* Y Y Y < --L/: /: /: /:b" " "H )L)> ? ?1P 1P 1P 1Pf. . . . .r* r4 )?
__future__r r r r r8 rS r^ ry rO future.movesr r statr r r r
r future.utilsr pathlibr
rk clselectr clselectexceptr clcommonr r
clselectprintr r r r clcommon.utilsr clcommon.cpapir r r clcommon.cpapi.cpapiexceptionsr r r clcagefslib.constr clcagefslib.fsr clcagefslib.selector.configurer r r! clcagefslib.selector.panel.dar" r r+ #clcagefslib.webisolation.jail_utilsr. clcagefslib.webisolation.configr/ r4 r% r* r) r s & % % % % % & & & & & &
5 5 5 5 5 5 < < < < < < < < < < < < < < " " " " " "
* * * * * * % % % % % % % % " " " " " " 0 0 0 0 0 0 = = = = = = = = = = N N N N N N N N N N ))))))......jjjjjjjjjjDDDDDDD
FEEEEEE BBBBBB@@@@@@@ #^N
[. [. [. [. [.8 [. [. [. [. [.s6 B- -B87B8<C C
C C
C,+C,