/opt/cloudlinux/venv/lib/python3.11/site-packages/xray/manager/__pycache__/
/opt/cloudlinux/venv/lib/python3.11/site-packages/xray/manager/__pycache__
NameSizeModeActions
base.cpython-311.pyc477470644editdlrm
cpanel.cpython-311.pyc88670644editdlrm
custom.cpython-311.pyc108470644editdlrm
directadmin.cpython-311.pyc183710644editdlrm
plesk.cpython-311.pyc93350644editdlrm
__init__.cpython-311.pyc17920644editdlrm
Edit: /opt/cloudlinux/venv/lib/python3.11/site-packages/xray/manager/__pycache__/custom.cpython-311.pyc (10847B)
j"'dZddlZddlmZddlmZddlmZddlm Z ddl m Z dd l mZdd lmZmZdd lmZdd lmZmZd dlmZGddeZdS)zZ This module contains classes implementing X-Ray Manager behaviour for custom integration N)ChainMap)ClassVar) PublicApi)gettext) phpinfo_utils)is_allowed_ini_path)XRayManagerErrorXRayMissingDomain) DomainInfo)user_mode_verificationwith_fpm_reload_restricted) BaseManagerceZdZUdZdddddddddddddddZeeed<fdZde fdZ e dZ defd Z eed edefd Zd edefd ZdededzfdZdededefdZd edefdZd edeffd ZxZS) CustomManagerz0 Manager supporting integration scripts N)5455567071727374808182838485VERSIONS_CUSTOMctj|i|t|_|jr||_dSttd)Nz.X-Ray is not supported by control panel vendor) super__init__rapiis_xray_integratedget_all_domains all_domainsr _)selfargskwargs __class__s J/opt/cloudlinux/venv/lib64/python3.11/site-packages/xray/manager/custom.pyr$zCustomManager.__init__1sg$)&)));;  " X#3355D   "1%U#V#VWW Wreturnc6t|j|jS)za Get supported PHP versions :return: dict with custom supported versions )rVERSIONSr!r*s r.supported_versionsz CustomManager.supported_versions:s  t';<< ##%%.  4||FE***r/c8|jdS)z9 Collect domains from integration script T)with_php)r%domainsr3s r.r'zCustomManager.get_all_domainsMsx...r/ domain_namecj |j|}n;#t$r.|jdd|it |wxYw|jr]t j|j||j j }t|| d|j d|j|jS||j j|j}t||j|j j |j j|j j|}|jd ||j|j|S) z< Retrieve PHP setting for given domain_name z#Domain does not exist on the serverr?)extra)domaintrusted_php_versionT)namepanel_php_versionphp_ini_scan_diris_selector_applieduser panel_fpm)rErIrFrJ is_nativeini_pathz@Retrieved domain info: domain %s owned by %s uses php version %s)r(KeyErrorloggerwarningr phpinfo_moderget_php_configurationownerphpversionr get_full_php_versionabsolute_ini_scan_dir is_php_fpm_validate_ini_pathrLfpmrKinforIrF)r*r? domain_confconfigrL domain_infos r.get_domain_infozCustomManager.get_domain_infoSsi  1*;7KK 1 1 1 K   Em]hMi  j j j#K00 0 1  ! "8!"%0O$;   F "("="=b"A"A!'!=%) & +    ..{/GIZ[[H$  &"-/"9%/-%/3! K  N     )    s 8Ar]c |jo|j S)z Check if selector is enabled specifically for custom panels Required to be implemented by child classes :param domain_info: a DomainInfo object :return: True if yes, False otherwise )rKrJr*r]s r.panel_specific_selector_enabledz-CustomManager.panel_specific_selector_enableds$B[-B)BBr/dom_infoc|jS)z+ Retrieve FPM service name )rJ)r*rbs r.fpm_service_namezCustomManager.fpm_service_names !!r/rLrRc|s|Stj|}t|s:|jd|t td|ztj ||stj ||r|Stj tj |stj |r:|jd|t td|z tj|j}n#t $r|cYSwxYw|dkr|S|jd||t td|z)uOwner-bind the vendor-supplied ini_path before it steers a root write. In non-phpinfo mode the custom integration reports ini_path verbatim and the only downstream guard is the broad is_allowed_ini_path prefix allowlist, which admits serverwide (/etc/php.d) and per-tenant (/var/cagefs/..., the per-domain ini roots) trees. Without owner-binding an allowlisted-but-foreign path would let the root xray.ini write land in another tenant's jail. Accept the path only when it is the owner's own subtree or an operator-controlled root-owned INI directory; reject a path that resolves outside the allowlist, into a foreign tenant's per-user tree, or onto a dir owned by a different unprivileged user. Returns the CANONICAL (realpath'd) directory, not the raw vendor string. The write-time owner binding (Task._ini_dir_validator / unified_write) classifies ini_location as per-tenant vs global from this value and then re-checks the PINNED inode against it, so it must be canonical here — a raw symlink path would misclassify and either over-reject a legitimate own-subtree symlink or fail to bind a per-tenant location. z.Rejected custom ini_path outside allowlist: %sz&ini_location outside allowed paths: %sz6Rejected custom ini_path bound to a foreign tenant: %srz7Rejected custom ini_path owned by uid %s (not root): %s)ospathrealpathr rNrOr r)r_is_own_cagefs_subtree_is_own_per_domain_ini_dir _is_within _CAGEFS_ROOT_is_under_per_domain_ini_rootstatst_uidOSError)r*rLrRresolvedros r.rXz CustomManager._validate_ini_paths( O7##H--"8,, [ K   PRZ [ [ ["1%M#N#NQY#YZZ Z  /x @ @ MDl 8E E  O  #  &   [  8 B B [ K   XZb c c c"1%M#N#NQY#YZZ Z  WX&&-FF   OOO  Q;;O UW]_ghhhq!IJJXUVVVsD!! D0/D0c|jS)zL Path to additional .ini files specific custom panel getter )rLr`s r. _ini_pathzCustomManager._ini_paths ##r/cj|jr|jSt|}|drm|jdsS|j}d|j|_ |jp|}n#t $rYnwxYw||_|jd||S)a Resolve a path to directory for additional ini file. It depends on version set for domain and on selector NOTE: This method is overrided to manage php.d.location=selector resolving. In custom integration we do not know if PHP version is alt or not, it is set as just two digits. Thus, we only could rely on resolved path -- if it is '/opt/alt'. :param domain_info: a DomainInfo object :return: path to directory for ini files z/opt/altzalt-phpzIni path re-resolved as %s) rGr# get_ini_path startswithrFphpd_location_ini_path ValueErrorrNrZ)r*r]rLsaved_panel_phpr-s r.ruzCustomManager.get_ini_paths  ' 0/ /77'' 44   z * * E;3P3[3[\e3f3f E);O,Uk6S,U,UK ) &=I    -rs   444444''''''444444EEEEEEEE''''''[[[[[[[[VVVVVKVVVVVr/