Wj3 * d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z m
Z
mZmZ d dlmZ d dlmZmZ d dlmZ dd lmZmZ dd
lm Z m Z m Z dd l m Z dd l!m"Z" ej# d
Z$dZ%dede&fdZ'de&defdZ(de&de&fdZ)dej de&fdZ*dej deeeef fdZ+d(de,de-fdZ.de
e/ fdZ0de/de/fd Z1de
e- fd Z2d)d Z3d e de fd Z4d!e/d"e/ddfd#Z5d e de fd$Z6d e de fd%Z7d e de fd&Z8d e de fd'Z9dS )* Nwraps)
HTTPStatus)CallableOptionalTupleAny)get_main_username_by_uid)is_cl_solo_editionis_cl_shared_pro_edition)gettext )user_tasks_countfpm_reload_timeout) XRayAPIError XRayErrorXRayMissingDomain)FPMReloadController)NginxUserCacheuser_plugin_utilsz>I_inputreturnc t j | }t j t
t
| |z S )z;
Pack input for sending with length-prefix framing
)jsondumpsencodestructpack_formatlen)r datas V/opt/cloudlinux/venv/lib64/python3.11/site-packages/xray/internal/user_plugin_utils.py pack_requestr# % s< :f $ $ & &D ;wD * *T 11 byte_commandc t j | }t d| d |S )z!
Unpack incoming command
zCommand requested => %scommand)r loadsdecodeloggerinfoget)r% parseds r" unpack_requestr. - sE Z ++--
.
.F
KK)6::i+@+@AAA Mr$ msgc t dt | t j t
t | | z S )z-
Prefix message with a 4-byte length
z Packing message of %i length)r* debugr r r r r/ s r"
pack_responser3 6 s< LL/S::: ;wC ) )C //r$ sock_objectc d}d}t }| d }|s| | S t j t | d }||k rt d|z t
| |k r>| | }|st d ||z
}t
| |k >|S )z9
Read length-prefixed amount of data from socket
i i r z$Response message too large: %d bytesz.Connection closed before full message received)bytesrecvr unpackr ConnectionErrorr )r4 chunk
max_msglenr/
raw_msglenmsglenparts r" unpack_responser@ > s
E!J
''C !!!$$J ' &&&
]7J
/
/
2F
Dv MNNN
c((V
&& T!"RSS S t c((V
Jr$ c d}| t j t j t j | }t j || \ }}} t j | j t j | j }}t d||||| n-# t $ r t d||| Y nw xY w|||fS )z6
Retrieve credentials from SO_PEERCRED option
3iz%Connected by proc %i of %i:%i (%s:%s)z Connected by proc %i of %i:%i)
getsockoptsocket
SOL_SOCKET SO_PEERCREDr calcsizer9 pwdgetpwuidpw_namegrpgetgrgidgr_namer* r+ KeyError)r4 r creds_pid_uid_gidusergroups r"
extract_credsrU V s G " "6#4f6H&/ZaJbJb c cE }We44D$\l4((0#,t2D2D2Le ;T4tUZ[[[[ G G G 3T4FFFFFG t s 2B, ,'CCrQ c 8 | t j } | dk S )z9
Check for execution as root | command from root
Nr )osgeteuid)rQ s r" check_for_rootrY f s |z|| 19r$ c t j d } | :t t | }t d| | |S dS )zK
Retrieve the value of XRAYEXEC_UID env and resolve it to username
XRAYEXEC_UIDNz/Got XRAYEXEC_UID: %s (%s), working in USER_MODE)rW getenvr
intr* r+ )proxyuid
_proxyusers r" get_xray_exec_userr` o sR y ((H-c(mm<<
ExQ[\\\ r$ c 2 t j d| id S )zF
Construct an appropriate formatted response in case of error
resultF) ensure_ascii)r r r2 s r" error_responserd z s :xoE : : ::r$ c N t } | t | j S dS )z3
Check nginx cache status for current user
N)r` r
is_enabled) proxyusers r" nginx_user_cacherh s. #$$I i((33 r$ c t t s)t t t d dS )zL
Check if utility is executed as root and throw error in case if no
z,Only root is allowed to execute this utilityN)rY
SystemExitrd _ r$ r" root_execution_only_checkrm s> \ *X(Y(YZZ[[[\ \r$ funcc < t fd }|S )zq
Decorator aimed to verify domain owner in X-Ray Manager user mode
Applies to get_domain_info method
c x t }| | i |S | i |}nC# t $ r6}t t d d|j z }d|_ |dd}~ww xY w|j |k rHt d|| t t d t | z |S )
Wraps func
N%s cannot be foundDomain Tz %s does not belong to user %s)
r` r r rk domain_name_internal_missing_domainrS r* warningstr)argskwargsrg r+ eerrrn s r" wrapperz'user_mode_verification..wrapper s
'(( 4((( ( 4(((DD " A 2 3 36O
6O6O OPPC+/C (4 ' ( 9 ! ! NN:D) L L L A 2 3 3c$ii ?@@ @ s $
A$1A A$r )rn r| s ` r" user_mode_verificationr} s6 4[[" " " " ["H Nr$ rt domain_ownerc t }|D||k r@t d| | t t d d| z dS dS )uZ
Enforce caller-owns-domain BEFORE the phpinfo probe's side effects (the
temp PHP file-write into the target docroot + HTTP fetch) run. It is called
from phpinfo_utils.get_php_configuration — the single sink every panel
manager funnels into — so one guard covers Plesk, cPanel, DirectAdmin and
custom panels. user_mode_verification only compares ownership AFTER the
decorated get_domain_info body has returned, so without this pre-check a
user-mode tenant can drive a cross-tenant side effect against another
user's domain.
Uses the SAME ownership primitive as user_mode_verification
(get_xray_exec_user) and raises the SAME uniform error so a foreign domain
is indistinguishable from a missing one. For root / non-user-mode callers
(proxyuser is None) this is a no-op, preserving existing behaviour.
Nz$Domain %s does not belong to user %srr rs )r` r* rv r rk )rt r~ rg s r" verify_user_owns_domainr si #$$I !:!:={IVVV.//2IK2I2IIJJJ !:!:r$ c F d t fd }|S )z
Decorator aimed to check if user is not hitting limit of running tasks,
set in X-Ray Manager user mode.
Applies to start and continue methods.
Limiting of user's running tasks is applied to Shared PRO only.
c
t d sdS t }|| d j }| }| d }|zt d |D }|t k rXt t d t t t t dS dS dS )zf
If XRAYEXEC_UID exists, check if user does not exceed
limit of running tasks
Tskip_jwt_checkNr rb c D g | ] }| d dk | S )statusrunning)r, ).0items r"
z7user_mode_restricted..check.. s0 $g$g$gdtxxPXGYGY]fGfGfTGfGfGfr$ z>Limit of running tasks is {}. You already have {} running task) r r`
ui_api_client
get_task_listr, r r r rk formatrw )rx rg ui_api_cli_instanseresp
list_of_tasks
running_counts r" checkz#user_mode_restricted..check s (t<<< F&(( "&q'"7 &4466D HHX . .M ( #$g$gm$g$g$g h h
$444# \ c c #$4 5 5s;K7L7L ! )(44r$ c | | i |S )rq rl )rx ry r rn s r" r| z%user_mode_restricted..wrapper s%
t tT$V$$$r$ r rn r| r s ` @r" user_mode_restrictedr sJ 4 4[[% % % % % [% Nr$ c F d t fd }|S )a
Decorator aimed to restrict frequent reloads of FPM service
Applies to get_domain_info method.
Decorator ordering invariant: this decorator MUST sit OUTSIDE
user_mode_verification (i.e. ``@with_fpm_reload_restricted`` above
``@user_mode_verification``) on every get_domain_info implementation.
The wrapper below runs ``check`` only AFTER ``func`` returns, so any
ownership-failure XRayError raised by the inner user_mode_verification
wrapper short-circuits the throttle probe. Reversing the order would
let the throttle check inspect another user's FPM service name and
raise a distinguishable XRayError(flag='warning') before the outer
ownership check could uniformise the response, leaking a side channel
on whether the queried domain exists and whose service is currently
throttled (see XRAY-244 / CLPRO-3079 information-oracle defense).
c > t d rdS t }|v| j rq|d | }t | r7t
t d t t z d dS dS dS ) Tr Nr zhThe X-Ray User service is currently busy. Operation is temporarily not permitted. Try again in %s minuterv )flag)
r r` panel_fpmfpm_service_namer restrictr rk rw r )r! rx rg _fpm_services r" r z)with_fpm_reload_restricted..check s T 2 2 2 F&(( T^ 733D99L"<0099;;
1 ,-- .
#
!
r$ c ( | i |} | d|i |S )rq r! rl )rx ry r+ r rn s r" r| z+with_fpm_reload_restricted..wrapper, s3
tT$V$$
t $ r$ r r s ` @r" with_fpm_reload_restrictedr sJ $ ( 4[[ [ Nr$ c V dt fdt fd }|S )Nusernamec n t }|"| |k r t t d dS dS )zI
If exists, check XRAYEXEC_UID against user passed param
NzIncorrect user for request)r` r rk )r rg s r" validatez'username_verification..validate9 sD '(( X%:%:A : ; ;<< < ! %:%:r$ c : |d } | | i |S )Nr rl )rx ry r rn r s r" r| z&username_verification..wrapperA s2 *%tT$V$$$r$ )rw r )rn r| r s ` @r" username_verificationr 8 sV =3 = = = = 4[[% % % % % [%
Nr$ c Z dt ddfdt fd }|S )z
Decorator aimed to verify user in X-Ray Smart Advice user mode
Applies to get_detailed_advice method, which takes part in
advice_details and advice_apply methods
r! r Nc t } | d d }n*# t $ r t t d w xY w|"||k r t t d dS dS )zU
If exists, check XRAYEXEC_UID against user in metadata of an advice
metadatar z#Requested advice cannot be verifiedN Requested advice does not exist)r` rN r rk )r! rg r s r" verifyz-user_mode_advice_verification..verifyQ s '(( FJ'
3HH F F FA C D DEE E F X%:%:A ? @ @AA A ! %:%:s 'Ac | i |\ }}nS# t $ rF}t 2|j t j k r t t
d d d}~ww xY w | ||fS )rq Nr )r r` errnor NOT_FOUNDr rk )rx ry advice_info
advice_objrz rn r s r" r| z.user_mode_advice_verification..wrapper] s
&*dD&;F&;&; #K "##/AGz?S4S4S "C D DEE4O {J&&s
A AAA )dictr )rn r| r s ` @r" user_mode_advice_verificationr J sc
BT
Bd
B
B
B
B 4[[' ' ' ' ' ['& Nr$ )N)r N):rK r loggingrW rH rD r functoolsr httpr typingr r r r clcommon.cpapir
clcommon.lib.cleditionr r xrayr
rk constantsr r
exceptionsr r r fpm_utilsr nginx_utilsr getLoggerr* r r7 r# r. r3 r@ rU r] boolrY rw r` rd rh rm r} r r r r r rl r$ r" r s}
1 1 1 1 1 1 1 1 1 1 1 1 3 3 3 3 3 3 O O O O O O O O ; ; ; ; ; ; ; ; B B B B B B B B B B * * * * * * ' ' ' ' ' '
. / /
2 2 2 2 2 2 3 0u 0 0 0 0 0 5 0
v}
sC}1E
HSM ; ; ; ; ; ;4(4. 4 4 4 4\ \ \ \+ +h + + + +\K KC KD K K K K,*x *H * * * *Z/X /( / / / /d X $' 'X ' ' ' ' ' 'r$