FM / clcommon

/opt/cloudlinux/venv/lib/python3.11/site-packages/clcommon/

/opt/cloudlinux/venv/lib/python3.11/site-packages/clcommon

Name	Size	Mode	Actions
cpapi/	-	0755	rm
lib/	-	0755	rm
public_hooks/	-	0755	rm
__pycache__/	-	0755	rm
clcagefs.py	13275	0644	edit dl rm
clcaptain.py	2177	0644	edit dl rm
clconfig.py	2001	0644	edit dl rm
clconfpars.py	14376	0644	edit dl rm
clcustomscript.py	1712	0644	edit dl rm
cldebug.py	1062	0644	edit dl rm
clemail.py	1693	0644	edit dl rm
clexception.py	1165	0644	edit dl rm
clfunc.py	6623	0644	edit dl rm
clhook.py	8869	0644	edit dl rm
cllog.py	1488	0644	edit dl rm
cloutput.py	471	0644	edit dl rm
clproc.py	4146	0644	edit dl rm
clpwd.py	7929	0644	edit dl rm
clquota.py	1296	0644	edit dl rm
clsec.py	657	0644	edit dl rm
clwpos_lib.py	18732	0644	edit dl rm
const.py	277	0644	edit dl rm
evr_utils.py	3638	0644	edit dl rm
features.py	5130	0644	edit dl rm
group_info_reader.py	5413	0644	edit dl rm
lock.py	1178	0644	edit dl rm
mail_helper.py	4557	0644	edit dl rm
mysql_lib.py	5984	0644	edit dl rm
php_conf_reader.py	10000	0644	edit dl rm
sysctl.py	9181	0644	edit dl rm
ui_config.py	3198	0644	edit dl rm
utils.py	33392	0644	edit dl rm
utils_cmd.py	2771	0644	edit dl rm
__init__.py	1346	0644	edit dl rm

Edit: /opt/cloudlinux/venv/lib/python3.11/site-packages/clcommon/clcustomscript.py (1712B)

#!/usr/bin/python
# coding=utf-8
import os
import stat

__author__ = "Aleksandr Shyshatsky"

def _is_safe_script(path):
    """Return True only if path is absolute, a regular file, executable,
    owned by root, and not writable by group or other (F-13)."""
    if not (os.path.isabs(path) and os.path.isfile(path)
            and os.access(path, os.X_OK)):
        return False
    try:
        st = os.stat(path)
    except OSError:
        return False
    if st.st_uid != 0 or st.st_gid != 0:
        return False
    if st.st_mode & (stat.S_IWGRP | stat.S_IWOTH):
        return False
    return True

def lvectl_custompanel_script():
    """
    Retrives custom panel script for lvectl from CL config file
    :return: Script full path or None if script filename not find in config
    """
    config_param_name = 'CUSTOM_GETPACKAGE_SCRIPT'
    try:
        # Try to determine custom script name
        if os.path.exists(CLSYSCONFIG):
            with open(CLSYSCONFIG, 'r', encoding='utf-8') as f:
                file_lines = f.readlines()
            for line in file_lines:
                line = line.strip()
                if line.startswith(config_param_name):
                    line_parts = line.split('=')
                    if len(line_parts) == 2 and line_parts[0].strip() == config_param_name:
                        script_name = line_parts[1].strip()
                        if _is_safe_script(script_name):
                            return script_name
    except (OSError, IOError, IndexError):
        # We are ignoring all errors, but script name not found in this case
        pass
    # Script name not found or error
    return None

CLSYSCONFIG = '/etc/sysconfig/cloudlinux'

#!/usr/bin/python # coding=utf-8 import os import stat __author__ = "Aleksandr Shyshatsky" def _is_safe_script(path): """Return True only if path is absolute, a regular file, executable, owned by root, and not writable by group or other (F-13).""" if not (os.path.isabs(path) and os.path.isfile(path) and os.access(path, os.X_OK)): return False try: st = os.stat(path) except OSError: return False if st.st_uid != 0 or st.st_gid != 0: return False if st.st_mode & (stat.S_IWGRP | stat.S_IWOTH): return False return True def lvectl_custompanel_script(): """ Retrives custom panel script for lvectl from CL config file :return: Script full path or None if script filename not find in config """ config_param_name = 'CUSTOM_GETPACKAGE_SCRIPT' try: # Try to determine custom script name if os.path.exists(CLSYSCONFIG): with open(CLSYSCONFIG, 'r', encoding='utf-8') as f: file_lines = f.readlines() for line in file_lines: line = line.strip() if line.startswith(config_param_name): line_parts = line.split('=') if len(line_parts) == 2 and line_parts[0].strip() == config_param_name: script_name = line_parts[1].strip() if _is_safe_script(script_name): return script_name except (OSError, IOError, IndexError): # We are ignoring all errors, but script name not found in this case pass # Script name not found or error return None CLSYSCONFIG = '/etc/sysconfig/cloudlinux'