/opt/cloudlinux/venv/lib/python3.11/site-packages/__pycache__
Edit: /opt/cloudlinux/venv/lib/python3.11/site-packages/__pycache__/clsudo.cpython-311.pyc (27011B)
FxK0b~ d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z e j
e Z G d de
Z G d de
Z G d de
Z G d d
e
Zd Zg d Zd
gZg dZ ej d Z ej d Z ej d Zg dZdZdZ dZ G d d Z dS ) N)S_IRUSRS_IRGRPc e Zd Zd ZdS )
NoSuchUserc D t | d| d d S )NzNo such user () Exception__init__)selfusers /builddir/build/BUILDROOT/alt-python27-cllib-3.4.42-1.el9.cloudlinux.x86_64/opt/cloudlinux/venv/lib/python3.11/site-packages/clsudo.pyr zNoSuchUser.__init__ s* 4!9$!9!9!9::::: N__name__
__module__ __qualname__r r r r r s# ; ; ; ; ;r r c e Zd Zd ZdS ) NoSuchGroupc D t | d| d d S )NzNo such group (r r )r groups r r zNoSuchGroup.__init__ s* 4!;5!;!;!;<<<<
>>>>r Nr r r r r r # s# ? ? ? ? ?r r z /etc/sudoers)
/bin/ps "" /bin/grep ""/sbin/service ""z%/usr/bin/getcontrolpaneluserspackagesz /usr/sbin/lvectl lve-versionz>/usr/local/directadmin/plugins/new_lvemanager/admin/GetDomainsz0/usr/share/l.v.e-manager/utils/cloudlinux-cli.pyz5/usr/share/l.v.e-manager/utils/cloudlinux-cli-user.py)z/usr/sbin/cagefsctl ""r! r" r# z ^\s*Cmnd_Alias\s+CAGEFS_CMDS\s*=z"^\s*Cmnd_Alias\s+SELECTOR_CMDS\s*=z ^\s*Cmnd_Alias\s+LVECTL_CMDS\s*=)z/usr/bin/cl-selector ""z/usr/bin/piniset ""z/usr/sbin/lveps ""z/usr/bin/selectorctl ""zDefaults:%s !requirettyz-%%%s ALL=NOPASSWD: LVECTL_CMDS, SELECTOR_CMDSzDefaults:%%%s !requirettyc e Zd ZdZefZdZg ZdZdZ dZ
dZ dZ dZ
dZdZdZdZeefd Zeefd Zeefd Zeefd Zeefd Zeefd Zed
Zed Zed Zed
Z ed Z ed Z ed Z ed Z dS )Clsudoz/
Adds CloudLinux users to sudoers file
NFc t d| |t j t j t
| t
| t
| t
j s:t
j
dd t z t
j s:t
j
dd t z t
j s:t
j
dd t" z t
j s"t
j
| d t
j s"t
j
| d t
j s"t
j
| d t
j s(t
j
t, | fz t
t d | | d
S ) z@
Adds username to sudoers file (for lvemanager)
z@add_user: adding user '%s' to sudoers file '%s' (uid=%d, pid=%d)Cmnd_Alias LVECTL_CMDS = , z Cmnd_Alias LVECTL_USER_CMDS = Cmnd_Alias SELECTOR_CMDS = ALL=NOPASSWD: LVECTL_CMDS% ALL=(ALL) NOPASSWD: LVECTL_USER_CMDS ALL=NOPASSWD: SELECTOR_CMDSz.add_user: successfully added user '%s' to '%s'N)loggerinfoosgetuidgetpidr% update_commands_list _check_user
_get_contents has_alias sudoers_listappendjoinALIAS_LVECTL_CMDShas_user_aliasALIAS_LVECTL_USER_CMDShas_selector_aliasALIAS_SELECTOR_CMDS
has_rightshas_user_rightshas_selector_rights
has_actionDEFAULTS_REQUIRETTY_write_contentsr
sudoers_files r add_userzClsudo.add_userf s
()-|Y[[")++ / / / ##L1114 T""" c & &'BTYYO`EaEa'a b b b$ m & &'G$))TjJkJk'k l l l( g & &'DtyyQdGeGe'e f f f L & &$'J'J'J K K K% W & &$'U'U'U V V V) N & &$'L'L'L M M M F & &':dW'D E E E D< ) ) ) ) )r c t d| |t j t j |t
_ t
| t
| t
j s:t
j
dd t z t
j s"t
j
| d t
j s(t
j
t | fz t
t d| | dS )z<
Adds username to sudoers file (for cagefs)
zGadd_cagefs_user: adding user '%s' to sudoers file '%s' (uid=%d, pid=%d)zCmnd_Alias CAGEFS_CMDS = r( ALL=NOPASSWD: CAGEFS_CMDSz5add_cagefs_user: successfully added user '%s' to '%s'N)r- r. r/ r0 r1 r% filepathr3 r4 has_cagefs_aliasr6 r7 r8 ALIAS_CAGEFS_CMDShas_cagefs_rightsrA rB rC rD s r add_cagefs_userzClsudo.add_cagefs_user s-
()-|Y[[")++ / / / '4 T"""& c & &'BTYYO`EaEa'a b b b' L & &$'J'J'J K K K F & &':dW'D E E E K< ) ) ) ) )r c t t d| |t j t j t
| t
| t
| t
j s:t
j
dd t z t
j s:t
j
dd t z t
j s(t
j
t" | fz t
j s(t
j
t& | fz t
t d| | dS )zJ
Adds group to sudoers file, grants access to LVE Manager
zMadd_lvemanager_group: adding group '%s' to sudoers file '%s' (uid=%d, pid=%d)r' r( r) z;add_lvemanager_group: successfully added group '%s' to '%s'N)r- r. r/ r0 r1 r% r2 _check_group_get_contents_groupr5 r6 r7 r8 r9 r< r= rA GROUP_LVECTL_SELECTORhas_group_actionGROUP_DEFAULTS_REQUIRETTYrC )
group_namerE s r add_lvemanager_groupzClsudo.add_lvemanager_group so
()3\Y[[")++ / / / ##L111J'''"":... c & &'BTYYO`EaEa'a b b b( g & &'DtyyQdGeGe'e f f f N & &'<
}'L M M M& R & &'@J='P Q Q Q Q / / / / /r c " t d| |t j t j |t
_ t t
j d 5 }| t
_
ddd n # 1 swxY w Y d}d}|t t
j
k rt
j
| }| | d s6| | d s | t | fz r>t d | | t
j
| d
}|d z
}|t t
j
k |r7t
t d | | dS t d
| | dS # t t" f$ r}t% |d}~ww xY w)z5
Removes username from sudoers file
zGremove_user: removing user '%s' from sudoers file '%s' (uid=%d, pid=%d)utf-8encodingNr Fz ALL=NOPASSWD:z ALL=(ALL) NOPASSWD:z4remove_user: removing sudoers rule for user '%s': %sT z5remove_user: successfully removed user '%s' from '%s'z1remove_user: no rules found for user '%s' in '%s')r- r. r/ r0 r1 r% rI openread
splitlinesr6 len
startswithrB removerC IOErrorOSErrorr )r
rE fidxremovedlinees r remove_userzClsudo.remove_user sK
()-|Y[[")++ / / / ' ,fo888
$+HII KK V $d, , ,'..t444 "G q! F /0000"
1&&((( S !<1 1 1 1 1 O !<1 1 1 1 1! , , ,"$$! + ,sC G) )1B& G) &B**G) -B*.DG) G) )H:H Hc " t d| |t j t j t
| t
| t
| dS )z
updates username in sudoers file
:param user: username for caching
:param sudoers_file: path to /etc/sudoers (only for tests)
:return: None
zEupdate_user: updating user '%s' in sudoers file '%s' (uid=%d, pid=%d)N) r- r. r/ r0 r1 r% r2 r3 r4 rD s r update_userzClsudo.update_user s{ ()-|Y[[")++ / / / ##L111 4 T"""""r c | t _ t j t j t _ t t dt ft dt ff}d}t t j D ]k\ }}|D ]c\ }}}|
| rHt j | }t ||| t j | |k rd} ndl|rZt d| t j t j t dS dS )z
Update command lists for lvemanager plugin
If any required command absent in file, add it
:param sudoers_file: path to /etc/sudoers
:return: None
LVECTL_CMDS
SELECTOR_CMDSFTzGupdate_commands_list: updating command aliases in '%s' (uid=%d, pid=%d)N)r% rI r/ pathdirnametemp_dir
_read_sudoersLVECTL_ALIAS_REr9 SELECTOR_ALIAS_REr= enumerater6 match_rewrite_aliasr- r. r0 r1 rC ) rE alias_specsis_sudoer_changerd command_stringalias_re
alias_name
alias_listbefores r r2 zClsudo.update_commands_list sI ' '//&/:: ( 8IJ)?>.11 # 0 5F))#z:FFF *3/699+/(E % KK ,-9bikk
3
3
3
" " $ $ $ $ $ % %r c t t j | dS # t $ r}t | |d}~ww xY w)zZ
Checks passwd database for username presence
@param user: string
N)pwdgetpwnamKeyErrorr )r
rg s r r3 zClsudo._check_user sL * L * * * T"" ) *
727c t t j | dS # t $ r}t | |d}~ww xY w)z_
Checks grp database for group_name presence
@param group_name: string
N)grpgetgrnamr r )rT rg s r rO zClsudo._check_group sL 1 L $ $ $ $ $ 1 1 1 j))q 0 1r c t t j d 5 } | t _ d d d d S # 1 swxY w Y d S )NrW rX )r[ r% rI r\ r] r6 )rc s r rq zClsudo._read_sudoers( s
&/G
4
4
4 8"#&&(("5"5"7"7F 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8s 1AA !A c b t j }| }|| d r8|dz t | k rdS |dz
}|| d 8d| dd | z }|| k r || |k rdS |g|| |dz < dS )a Rewrite the existing `alias_name` Cmnd_Alias definition at
sudoers_list[idx] to the single canonical argv-restricted line, in place.
Shared by the CAGEFS_CMDS and SELECTOR_CMDS upgrade rewrites - both are
lax bare-command aliases whose pre-fix on-disk form must be tightened to
the argv-restricted `alias_cmds` join without duplicating or corrupting
the definition.
The definition may span several physical lines via visudo-legal
backslash line-continuation (_read_sudoers splits on physical lines, so
each continuation line is its own list element). Consume the whole span
- the matched line plus every following line the preceding line
continued onto - and replace it with one restricted line.
Never-corrupt invariant: if the definition cannot be confidently and
safely collapsed (a continuation whose trailing backslash runs off the
end of the file - i.e. the file is already malformed), leave it exactly
as-is. The worst case of the upgrade rewrite is a safe no-op (the file
stays as valid as it was), never a corrupted sudoers file. The caller
still sets the has_*_alias flag, so no duplicate definition is appended.
\rZ Nz Cmnd_Alias z = r( )r% r6 endswithr^ r8 strip)rd r{
alias_cmdslinesend
restricteds r rv zClsudo._rewrite_alias- s . #
Cj!!$'' Qw#e**$$ 1HC Cj!!$'' 3:222TYYz5J5JJ
#::%***,,
:: F )\c#'kr c ` dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _
t j d| d } t
t t j D ]\ }}d|v r
dt _ d|v r
dt _ (t | r.t |dt& dt _ p| | d r
dt _ | | d r
dt _ | | d
rdt _
d |v r%| | }|r dt _ ?t. | r/t |d t0 dt _ | | d
rdt _ dS # t2 t4 f$ r}t7 |d}~ww xY w)zM
Reads file into list of strings
@param user: string
Fz Defaults:\s*z\s*!requirettyCmnd_Alias LVECTL_CMDSTzCmnd_Alias LVECTL_USER_CMDS CAGEFS_CMDSr* r+ rH
requirettyrm r, N) r% rA rR r5 r: r> r? r< r@ rJ rL recompilerq rt r6 CAGEFS_ALIAS_REru rv rK lstripr_ searchrs r= ra rb r )r
require_tty_patternrd ry
pattern_matchrg s r r4 zClsudo._get_contentsV s ""' % !!& $)!%*""' #( j)M)M)M)M N N3 , " " "'01D'E'E .
.
#^+~=='+F$ 0NBB,0F) "(( 88 ))#}>OPPP.2F+ "((**556Y6Y6YZZ (,F% !((**556d6d6dee -1F* !((**556Y6Y6YZZ /3F, >11$7$>$>~$N$NM$ 1,0) $**>::
))#@STTT04F- !((**556[6[6[\\ 15F. Y.
.
^ ! , , ,"$$! + ,s G4J J-J((J-c dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _ d| }d| }t j
| d } t t t j
D ] \ }}t | r.t |dt" dt _ Nd|v r
dt _ _t$ | r.t |dt& dt _ | | r#| | }|r dt _ | | r dt _ d S # t, t. f$ r}t1 |d }~ww xY w)
zS
Reads file into list of strings
@param group_name: string
F%z
Defaults:%z/\s*ALL=NOPASSWD:\s*LVECTL_CMDS,\s*SELECTOR_CMDSrm Tr r N)r% rA rR r5 r> r< r@ rJ rL r r rq rt r6 rs ru rv r= r rK r_ r ra rb r )rT group_prefix group_action
group_patternrd ry r rg s r rP zClsudo._get_contents_group s ""' !$)!%*""' #( ':'' 0J00
z#b#b#bcc
, " " "'01D'E'E
3
3#^$**>:: ))#@STTT04F- +~=='+F$ "(( 88 ))#}>OPPP.2F+ !,,\:: 1$1$8$8 $H$HM$ 1,0)!,,\:: 3.2F++
3
3, ! , , ,"$$! + ,s D4F9 9G
GG c d t j D } t j t j | vrWt dt j t j t j t t j t j }d}t j
|| \ }}t j |d }| d t j dz | t& t( z }t j || t | st. n# t. t0 f$ r}t dt j t j t j t j | rt j | n# t6 $ r Y nw xY wt |d}~ww xY w t j |t j dS # t0 $ r]}t d t j t j t j t |d}~ww xY w)
zX
Writes data to temporary file then checks it and rewrites sudoers file
c L h | ]!}t j | "S r )r/ rn realpath).0ps r z)Clsudo._write_contents.. s( NNN127##A&&NNNr zZ_write_contents: refusing to write sudoers to disallowed destination '%s' (uid=%d, pid=%d) lve_sudoers_)prefixdirw
zC_write_contents: failed to write sudoers file '%s' (uid=%d, pid=%d)NzD_write_contents: failed to rename temp file to '%s' (uid=%d, pid=%d)) r% _ALLOWED_SUDOERS_PATHSr/ rn r rI r- warningr0 r1 r ro tempfilemkstempfdopenwriter8 r6 closer r chmod_is_file_validra rb existsunlinkr
rename)allowedrp temp_prefixfd temp_pathfomaskrg s r rC zClsudo._write_contents s` ON0MNNN
7 FO , ,G ; ; NN J!?BIKK
F
F
F $%% % -wv77H(K $ ,KX N N NMB 2s##B HHTYYv 233d: ; ; ; HHJJJW$D HY % % %((33
! - - - NN ./5 9;;
5
5
5
7>>),, )Ii(((
#%%1 , - - Ii 1 1 1 1 1 - - - NN ./5 9;;
5
5
5 $%%1 , -sW C'F H5A H0 3HH0
H H0 H H00H59 I
K$AJ<<Kc
ddd| g}t j |t j t j t j 5 }| |j dk r d d d dS d d d n # 1 swxY w Y dS )Nz/usr/sbin/visudoz-cz-f)stdinstdoutstderrr FT)
subprocessPopenDEVNULLPIPESTDOUT communicate
returncode)filenamecmdprocs r r zClsudo._is_file_valid s
(
$ ? $
!## $ ts !A88A<?A<)!r r r __doc__ SUDOERS_FILEr rI r6 rA rR r5 r: r> r? r< r@ rJ rL staticmethodrF rM rU rh rj r2 r3 rO rq rv r4 rP rC r r r r r% r% O s +_HLJ INJO $0 ) ) ) \ )< +7 ) ) ) \)( 6B / / / \/0 '3 &, &, &, \&,P '3 # # # \#" *6 !% !% !% \!%F * * \* 1 1 \1 8 8 \8 &* &* \&*P E, E, \E,N ,, ,, \,,\ )- )- \)-V \ r r% ) loggingr/ r r r r r statr r getLoggerr r- r
r r r r r r9 r; rK r r rs rr r= rB rQ rS r% r r r r s
! ! ! ! ! ! ! ! 8 $ $; ; ; ; ; ; ; ;
= = = = =) = = =
= = = = =y = = =
? ? ? ? ? ? ? ?
I I I
RR a`` "* @AA BJ DEE "* @AAH H H 0 G 7 z z z z z z z z z zr