File: //opt/alt/python37/lib/python3.7/site-packages/clselect/__pycache__/cluserselect.cpython-37.pyc
B
���^rb � @ s� d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl m
Z d dl m
Z
mZmZmZ d dlmZ dd lmZ dd
lmZ d d lmZmZ dd lmZ dd
l m Z d dl m Z G dd� de�Z dS )� )�print_function)�absolute_import)�divisionN)� configparser)�S_IRUSR�S_IWUSR�S_IRGRP�S_IROTH)� iteritems� )�ClSelect)�ClSelectExcept)�ClPwd� clcaptain)�clprint)�utils)�ExternalProgramFailedc @ sL e Zd ZdZdZdZdZdZdHdd�Ze dId
d ��Z
d d
� Z dJdd�Z dKdd�Z
dd� Zdd� Zdd� Zdd� ZdLd d �ZdMd d �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� ZdNd,d-�Ze e�Zd.d/� Zd0d1� Z d2d3� Z d4d5� Z d6d7� Z d8d9� Z e e �Z d:d;� Z!d<d=� Z"e e"�Z"dOd>d?�Z#d@dA� Z$dBdC� Z%e e%�Z%dDdE� Z&dFdG� Z'dS )P� ClUserSelectz /var/cagefsz'/usr/share/cagefs-skeleton/usr/selectorz
/usr/selectorz/etc/cagefs/excludez.cl.selector/selector.pathNc C s� t j�d�sdS x�|D ]�}| j�|�}t j�|jd�}t j�|�s| �|�}zFyt� |� W n2 t
t fk
r� } zt �
||��W dd}~X Y nX W dt�|� X qW dS )z�
Creates flags mod_lsapi_reset_me in users' home directories in order
to recreate CRIU images when php version/extensions/options have changed
For details see LVEMAN-1210
:param users: list of usernames (strings)
z /var/run/mod_lsapi/criu.enabledNZmod_lsapi_reset_me)�os�path�isfile�_clpwd�get_pw_by_name�join�pw_dir� _change_uidr �write�OSErrorr r
�UnableToSaveDatar � _restore_uid)�self�users�user�pwr �previous_user_data�e� r& �F/opt/alt/python37/lib/python3.7/site-packages/clselect/cluserselect.py�clean_crui_images$ s
"z ClUserSelect.clean_crui_imagesTc
C s� y.dt jkrt j�d� ddlm}m}m} W n0 tk
r^ td� |rVt � d� ndS Y nX |r�|� r�|� }|r�y2|d }|�
d�s�td � |r�t � d� ndS W n t k
r� Y nX ||| d
t �
� dk|d �} | r�|r�t � d� | S ) z�
Switch symlink for alt php.
Create .cagefs directory if not created
Rerurn True if error has occured
z/usr/share/cagefsr )�configure_alt_php�is_ea4_enabled�read_cpanel_ea4_php_confz ERROR: CageFS not installed.r T�defaultzea-phpzlERROR: system default PHP version is alt-php. PHP Selector is disabled. Use cPanel MultiPHP manager instead.F)� write_log� drop_perm�configure_multiphp)�sysr �append� cagefsctlr) r* r+ � ImportError�print�exit�
startswith�KeyErrorr �geteuid)
�versionr# �
exit_on_errorr/ r) r* r+ �confZ default_php�errorr& r& r' �switch_symlink_for_alt_php: s2
z'ClUserSelect.switch_symlink_for_alt_phpc C s� | j rtd� t�d� t�� dkr6td� t�d� | �� }x<t|�D ]0\}}td|� | j� |�}t
j ||ddd� qHW d S )NzPERROR: this option does not work in "single user" mode (when CageFS is disabled)r r z ERROR: root privileges requiredzProcessing userF)r: r/ ) �without_cagefsr4 r0 r5 r r8 �get_user_version_mapr
r r r r= )r Zusers_vers_dictr" r9 r# r& r& r' �apply_symlinks_rulesc s
z!ClUserSelect.apply_symlinks_rules�phpc C s2 t �| |� t� | _t� | _|r(|| _ng | _d S )N)r �__init__r r �set�_user_excludes�exclude_pid_list)r �itemrE r& r& r' rB p s zClUserSelect.__init__Fc s �� |� ��|�}��|�}tj�|�s.|S ��� � tj�|�j�}tj� |�sV|S t�
|���j r��j sx��
�j� ��j �j kr�|S tj����jkr�|S yFtt� ��fdd�t� �� ���d }|� | d � | d �j fS ttfk
�r |S X dS )zl
Returns alternative version for a user
@param user: string
@return: string
c s � | d �j �kS )N�data)�_item)�i)� alternatives�link_dstr r& r' �<lambda>� s z*ClUserSelect.get_version.<locals>.<lambda>r r9 rG N)�_check_user_in_cagefs�_compose_user_alt_path�_compose_native_infor r �isdir�get_all_alternatives_datar rH �islink�readlinkr> �_native_contents�_load_native_contents�dirname�
SELECTOR_PATH�list�filter�keys�
IndexErrorr7 )r r" �show_native_version�alt_path�native� full_pathr9 r& )rJ rK r r' � get_versiony s4
zClUserSelect.get_versionc
C sn t j�|�sj| �|�}zFyt�|� W n2 ttfk
rX } zt� ||��W d d }~X Y nX W d t
� |� X d S )N) r r rP r r �mkdirr r r
r r r )r r r" r$ r% r& r& r' �
create_dir� s
"zClUserSelect.create_dirc C sh | j �|�}tj�|| j�}| �|�}| �||� | jd|d dd� | jd|d dd� | � |� dS )z\
Creates additional directory and symlinks for use in "without CageFS" mode
z
../php-cliz/phpT)�check_existencez../phpz/php-cgiN)
r � get_homedirr r r �
SELECTOR2_DIRr rb �_create_symlinkr )r r" �homedirZ path_in_homeZcur_userr& r& r' �create_selector_symlinks� s
z%ClUserSelect.create_selector_symlinksc
C s@ t j�tj�r<y| j�d| j�S tj t
t fk
r: dS X dS )N�versionsr^ ) r r r r �
DEFAULTS_PATH�_dh�getrH � ConfigParser�Error�IOErrorr7 )r r& r& r' �get_default_version� s z ClUserSelect.get_default_versionc
C s� t j�| j�|�dd�}t j�|�s6| �|| �� � nhy$| �|�}| �||� d| j
�� W nB t j t
tfk
r� } z tdt|�� t�d� W d d }~X Y nX d S )Nz .cl.selectorz defaults.cfgri z*Error while restoring settings from backupr )r r r r rd r � set_versionrp �_get_default_config_handlerrl rH rm rn ro r7 r4 �strr0 r5 )r r" �user_backup_path�dhr% r& r& r' �set_version_from_backup� s
z$ClUserSelect.set_version_from_backupc C s> | j r| �|�}| �|� | �|�}tj�|�sN| j rD| �||� n
t� |��| �
� }||krp|dkrpt� |��| � |� | j
�|�} |dk�r�| j r�| js�| �| j� x�t| j�D ] \}
} | �| |d |
||� q�W n�d} d}
tj�d| jf | �}tj�|��r<tj�d| j | �}tj�|| �}| �||||� d}
x�t�| j�D ]Z}| j|k�r^�qJ|�d��rt|
�rt�qJtj�||�}tj�| j|�}| �||||� �qJW n:x8t|| d �D ]$\}
}| �|tj�||
�||� �q�W | j �r�t�|� n tj || |d � | � ||� | � |� | � |� |�r:| � ||�S d
S ) zg
Sets alternative version for a user
@param user: string
@return: None
r^ �/zphp.iniFz%s.etcTz.inirG )r: N)!r> r rM rN r r rP rb r
�NoUserSelectorrQ �NoSuchAlternativeVersion�_remove_alternatives_linksr r rT rU rH r
rf r � NATIVE_PATH�existsrW �listdir�endswithr r r= �_switch_php_da_isp�_reload_processes�_backup_settings� get_summary)r r" r9 Zreturn_summaryr\ r: r$ r] rJ r# rF Z native_path�iniZnew_ini_createdZ new_ini_path�src�dst�filenamer r& r& r' rq � sZ
zClUserSelect.set_versionc C s� | � |� | �� }| �|�}ddddd�i}t|�� �}|�d� | �|�d }xV|D ]N}||krji ||< | j�d| j |f d� || d< d|| d < d|| d
< qVW y| j�
d | j �} W n t j t j
fk
r� d} Y nX y d|| d < d|| d
< W n tk
�r t�| ��Y nX |�d�||d < |�d� |�|d � xHtt|��D ]8}
||
} | || d || d || d
ff||
< �qTW t|�S ) zb
Returns state of alternatives
@param user: string
@return: tuple
r^ TF)�enabledr, �selectedr z%s%s�stater� r, r� ri )rM rQ rO �sortedrZ r1 r` rk �
has_optionrH rl rm �NoSectionError�
NoOptionErrorr7 r
ry �pop�remove�range�len�tuple) r r" r\ rJ � native_info�summary� alt_versionsZselected_versionr9 �default_version�idx�vr& r& r' r� sD
zClUserSelect.get_summaryc C st | � |�}xZ|D ]R}y| j||dd� W q tk
r` } zt�ddt|�d�� W dd}~X Y qX qW | �|� dS )z�
Changes users of a supplied version to specified_version
@param version: string
@param current_version: string
F)r: �text�ERROR)�status�messageN)�
list_usersrq � Exceptionr �
print_diagrs r( )r Z new_versionZcurrent_versionr! r" r% r& r& r' �change_to_version/ s
z ClUserSelect.change_to_versionc C s | � � }||kr|| S g S )z8
Returns users of a certain alternative
)�_get_version_user_map)r r9 rG r& r& r' r� > s zClUserSelect.list_usersc C s0 | j rddlm} |� gS t| �� �| �� ��S )zF
Returns all valid system users
@return: list
r )�get_cpanel_user)r> Zclselectctlphpr� rX �_get_system_users�
difference�_get_user_excludes)r r� r& r& r' �list_all_usersG s
zClUserSelect.list_all_usersc C s� t � }d|d< d|d< d|d< d}tj�|� y dd l}W n& tk
r` td� t�d� Y nX tj� |j
|� |�|d�}tj� |d �r�tj� |d
�s�|�
||� d S ) Nr �initZreinit�verbosez/usr/share/cagefsz ERROR: CageFS not installed.r �etcz /cl.selectorz /cl.php.d)�dictr0 r r1 r2 r3 r4 r5 r r ZBASEDIRZget_user_prefixr| Zcpetc_for_user)r r" �config�LIBDIRr2 Zcagefs_etc_pathr& r& r' �cagefs_copy_etcR s z ClUserSelect.cagefs_copy_etcc C sP | � � }i }x>|D ]6}y| �|d�d ||< W q tjk
rF wY qX qW |S )zH
Returns user version map as dict
@return: dict
Fr )r� r` r
�
NotCageFSUser)r � actual_usersrG r" r& r& r' r? e s
z!ClUserSelect.get_user_version_mapc C sj | � � }i }xX|D ]P}y2| �|d�d }||kr8g ||< || �|� W q tjk
r` wY qX qW |S )zH
Returns users grouped by version
@return: dict
Fr )r� r` r1 r
r� )r r� rG r" r9 r& r& r' r� s s
z"ClUserSelect._get_version_user_mapc
C s� yJ|r<t j�|�r2t �|�| kr,t �|� q<dS n
t�|� t�| |� W nT t k
r� } z6|dk rz|dk rzt
� |||��t
� d| ||f ��W dd}~X Y nX dS )z�
Creates symlink from src to dst
@param src: string
@param dst: string
@param user: string
@param version: string
@param check_existence: bool
@return: None
Nz(Cannot create symlink from %s to %s (%s))
r r rR rS �unlinkr �remove_file_or_dirr �symlinkr� r
�UnableToSetAlternative�SelectorException)r� r� r" r9 rc r% r& r& r' rf � s
z ClUserSelect._create_symlinkc C sp | j r | j S tj�| j�s t� S xHt�| j�D ]8}tj�| j|�}| j �tt dd� t
� |�� � ��� q.W | j S )zE
Returns list of user excludes
@return: list
c S s | � � S )N)�strip)�xr& r& r' rL � � z1ClUserSelect._get_user_excludes.<locals>.<lambda>)
rD r r rP �CAGEFS_EXCLUDErC r} r �update�mapr �read_file_as_string�
splitlines)r rF Zfull_item_pathr& r& r' r� � s z ClUserSelect._get_user_excludesc C s� | j r
dS d}tj�|� y ddl}W n& tk
rL td� t�d� Y nX y|�|�sdt �
|��W n& t k
r� td� t�d� Y nX dS )z4
Check that cagefs enabled for user
Nz/usr/share/cagefsr z ERROR: CageFS not installed.r z;ERROR: CageFS version is unsupported. Please update CageFS.) r> r0 r r1 r2 r3 r4 r5 Zis_user_enabledr
r� �AttributeError)r r" r� r2 r& r& r' rM � s
z"ClUserSelect._check_user_in_cagefsc C sJ xDt �|�D ]6}| j|kr q t j�||�}t j�|�s8q t �|� q W dS )zg
Removes all symlinks from directory
@param path: string
@return: None
N)r r} rH r r rR r� )r r r� r_ r& r& r' rz � s
z'ClUserSelect._remove_alternatives_linksc C sH | j r| j�|�}|d S t| j�|��}tj�| j|dd� |dd�S )zz
Composes and returns user alternative directory path
@param user: string
@return: string
z
/.cl.selector���Nr� z cl.selector) r> r rd rs �get_uidr r r � CAGEFS_PATH)r r" rg �uidr& r& r' rN � s z#ClUserSelect._compose_user_alt_pathc C s | j �� }t|�� �S )zB
Returns set of system users
@return: set
)r �
get_user_dictrC rZ )r �
users_dictr& r& r' r� � s
z ClUserSelect._get_system_usersc C s@ t j�| �r<yt �| � W n tk
r: t�| d��Y nX dS )z?
Deletes file to be written if it is a symlink
z'Cannot delete symlink while saving dataN)r r rR r� r r
r )� file_pathr& r& r' �_delete_if_symlink� s z ClUserSelect._delete_if_symlinkc
C s� | j �|�}|j}|j}t�� }t�� }||kr8||fS y$t�|� t�|� t �
� ||fS t k
r� } zt �
||��W dd}~X Y nX dS )z�
Changes to another uid and returns tuple of previous euid and egid
@param user: string
@return: tuple
N)r r �pw_uid�pw_gidr r8 �getegid�setegid�seteuid�secureio�set_capabilityr r
�UnableToChangeToAnotherUser)r r" �entryZnew_uidZnew_gidZcur_euidZcur_egidr% r& r& r' r � s
zClUserSelect._change_uidc
C sx | d t �� krttjdd� y t �| d � t �| d � W n6 tk
rr } zt�t | d �|��W dd}~X Y nX dS )zw
Restores changed uid and gid to original ones
@param uid_and_gid: tuple
@return: None
r T)�clearr N)
r r8 r� r� r� r� r r
r� rs )Z uid_and_gidr% r& r& r' r
s zClUserSelect._restore_uidc
C s" |st j�|�sdS | �|� | �|�}t j�|�}y4dtt�� � }t j� ||�}t
� |d|f � W nf t t
tfk
r� } zByt j�|�r�t �|� W n Y nX t�|� t�|| ��W dd} ~ X Y nFX y,ttB tB tB }
t �||� t �||
� W n t
k
�r Y nX t�|� dS )z�
Saves data to file
@param user: string
@param file_contents: string
@param file_path: string
@return: None
Nz clseltmp_%sz%s
)r r r| r� r rV rs �uuidZuuid4r r r ro r r r� r r r
r r r r r �rename�chmod) r r" �
file_contentsr� Zcreater$ Zfile_directoryrV � temp_pathr% �maskr& r& r' �_write_to_file s0
zClUserSelect._write_to_filec
C s� dd|d|g}y�t �|�}xp|�� D ]d}|�� �� }y8|d �| j� t|d �}|| jkrjt �
|t j � W q$ t
tfk
r� w$Y q$X q$W W n0 tjk
r� } z|dkr�dS W dd}~X Y nX dS )z&
Reloads user process
z/bin/psz-Uz-u���r N)r � run_commandr� �rstrip�split�indexrH �intrE r �kill�signal�SIGHUPr[ �
ValueErrorr
r )r r" �cmdrG �row�parts�pidr% r& r& r' r� < s
z ClUserSelect._reload_processesc C sj g }yHt | �}x2|D ]*}|�d�r|d|�d�� }|�|� qW |�� W n ttfk
rd Y nX |S )zH
Get extension names from user extensions file comments
z;---� z---)�openr6 �rfindr1 �closer ro )r �
extensionsr� �line�extr& r& r' �_skim_over_extensionsP s
z"ClUserSelect._skim_over_extensionsc
C s� | � |� g }| �|�}tj�tj�|�d�}| �� }tj�| j�|�d�}tj� |�s�| �
|�}yt � |� W n< t
tfk
r� } zt�|� t�||��W dd}~X Y nX t�|� tj�|d�} tj� |�r�d| j| �|�d f }
n d| jf }
|�|
� x�t|�� �D ]p} | j�r6|d | �d d
� d } n tj�|d | �d d
�f d
�} | �| �}
|�d| j| d�t|
��f � �qW | �|d�|�| � dS )zk
Scans all user settings and backups'em in homedir as INI file
@param user: string
zcl.php.dz .cl.selectorNz defaults.cfgz[versions]
%s = %s
r z[versions]
%s = native
z/alt_php�.� z.iniz alt-php%sz alt_php.iniz[%s%s]
modules = %s
�,�
) rM rN r r r rV rQ r rd rP r r ra r r r r r
r rH r` r1 r� rZ r> �replacer� r� )r r" Zbackup_contentsZ
user_alt_pathZ
user_ext_pathrJ rt r$ r% Zuser_backup_filer9 �altZ
curr_ext_pathr� r& r& r' r� a sD
z ClUserSelect._backup_settingsc C sF | j r
d S tj�d� ddlm} ddlm} |||� |||� d S )Nz/usr/share/cagefsr )�da_change_user_php_ini)� ispmanager_create_user_wrapper)r> r0 r r1 Z
cagefs_da_libr� Zcagefs_ispmanager_libr� )r r" r9 r� r� r& r& r' r � s
z ClUserSelect._switch_php_da_isp)N)TT)rA N)F)FFT)F)NNF)T)(�__name__�
__module__� __qualname__r� r{ rW r� re r( � staticmethodr= r@ rB r` rb rh rp rv rq r� r� r� r� r� r? r� rf r� rM rz rN r� r� r r r� r� r� r� r r& r& r& r' r sR
(
#
;
*
#*r )!�
__future__r r r r r0 r� r� r� � future.movesr rm �statr r r r � future.utilsr
�clselectr �clselectexceptr
Zclcommonr r �
clselectprintr r� r �clcommon.utilsr r r& r& r& r' �<module> s"