FM / bin

/opt/cloudlinux/venv/bin

Name	Size	Mode	Actions
activate	1691	0644	edit dl rm
activate.csh	915	0644	edit dl rm
activate.fish	2191	0644	edit dl rm
Activate.ps1	9033	0644	edit dl rm
alembic	229	0755	edit dl rm
cagefsctl_user.py	15925	0755	edit dl rm
cagefs_enter_site.py	1877	0755	edit dl rm
chardetect	237	0755	edit dl rm
clcpapi	5409	0755	edit dl rm
cl_sysctl	4620	0755	edit dl rm
coverage	231	0755	edit dl rm
coverage-3.11	231	0755	edit dl rm
coverage3	231	0755	edit dl rm
cpanel-dbmapping	3929	0755	edit dl rm
crontab-user-wrapper.py	4401	0755	edit dl rm
da_suid_caller.py	686	0644	edit dl rm
detect-requirements	238	0755	edit dl rm
dodgy	224	0755	edit dl rm
epylint	235	0755	edit dl rm
f2py	232	0755	edit dl rm
f2py3	232	0755	edit dl rm
f2py3.11	232	0755	edit dl rm
flake8	230	0755	edit dl rm
futurize	231	0755	edit dl rm
get_gprof	1885	0755	edit dl rm
get_objgraph	1667	0755	edit dl rm
isort	225	0755	edit dl rm
isort-identify-imports	259	0755	edit dl rm
jsonschema	229	0755	edit dl rm
lvestats_config_reader.py	1145	0644	edit dl rm
mako-render	229	0755	edit dl rm
normalizer	260	0755	edit dl rm
pasteurize	233	0755	edit dl rm
pip	237	0755	edit dl rm
pip3	237	0755	edit dl rm
pip3.11	237	0755	edit dl rm
plesk_suid_caller.py	905	0644	edit dl rm
prospector	229	0755	edit dl rm
py.test	237	0755	edit dl rm
pycodestyle	228	0755	edit dl rm
pydocstyle	229	0755	edit dl rm
pyflakes	227	0755	edit dl rm
pylint	233	0755	edit dl rm
pylint-config	249	0755	edit dl rm
pyreverse	239	0755	edit dl rm
pysemver	225	0755	edit dl rm
pytest	237	0755	edit dl rm
python	15368	0755	edit dl rm
python3	15368	0755	edit dl rm
python3.11	15368	0755	edit dl rm
raven	235	0755	edit dl rm
symilar	235	0755	edit dl rm
tap	223	0755	edit dl rm
tappy	223	0755	edit dl rm
undill	603	0755	edit dl rm
virtualenv	254	0755	edit dl rm

Edit: /opt/cloudlinux/venv/bin/clcpapi (5409B)

#!/opt/cloudlinux/venv/bin/python3 -bb
# -*- coding: utf-8 -*-

# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2018 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

"""
CloudLinux control panel API command line interface
"""

import argparse
import os
import pwd
from clcommon import cpapi
from clcommon.cloutput import prepare_data_json, prepare_attention_json
from clcommon.cpapi import cpapiexceptions

def cpapi_parser():

parser = argparse.ArgumentParser(description="%(prog)s - CloudLinux control panel API command line interface")
    parser.add_argument('-j', '--json', action='store_true', default=False, help='Output in json format')
    subparsers = parser.add_subparsers(dest='command')

docroot_parser = subparsers.add_parser('docroot')
    docroot_parser.add_argument('domain', help='Return document root for domain')

userdomains_parser = subparsers.add_parser('userdomains')
    userdomains_parser.add_argument('userdomains', help='Return domain and document root pairs for control panel user')

dblogin_cplogin_pairs_parser = subparsers.add_parser("dblogin_cplogin_pairs")
    dblogin_cplogin_pairs_parser.add_argument("--cplogin_lst", nargs="*",
                                  help="Return mapping for this system users")
    dblogin_cplogin_pairs_parser.add_argument("--with_system_users", action="store_true", default=False,
                                  help="Show system users in output")
    reseller_users = subparsers.add_parser("reseller-users",
                                  help="Show reseller users")
    reseller_users.add_argument(
        'resellername', type=str, nargs='?',
        help='Reseller name')
    return parser

def flat_plain(data, sep=' '):
    return '\n'.join([sep.join(tuple_) for tuple_ in data])

def _enforce_authorization(namespace):
    """
    clcpapi is world-executable (mode 755, not setuid) so it runs with the
    invoking user's privileges. root and panel admins keep unrestricted
    access; any other local caller may only read metadata it owns. Rejections
    raise CPAPIException (clear error, non-zero exit, no data leaked); the
    db->cp-user mapping is narrowed to the caller instead.
    """
    if os.getuid() == 0:
        return
    try:
        caller = pwd.getpwuid(os.getuid()).pw_name
    except KeyError as exc:
        # UID has no passwd entry (LDAP gap / orphaned UID): fail closed
        raise cpapiexceptions.NoPanelUser(
            f"Caller UID {os.getuid()} has no passwd entry; access denied") from exc
    if cpapi.is_admin(caller):
        return

if namespace.command == 'docroot':
        if cpapi.domain_owner(namespace.domain) != caller:
            raise cpapiexceptions.NoDomain(
                f"Can't obtain document root for domain '{namespace.domain}'")
    elif namespace.command == 'userdomains':
        if namespace.userdomains != caller:
            raise cpapiexceptions.NoPanelUser(
                f"Not authorized to list domains of user '{namespace.userdomains}'")
    elif namespace.command == 'reseller-users':
        if namespace.resellername != caller:
            raise cpapiexceptions.NoPanelUser(
                f"Not authorized to list users of reseller '{namespace.resellername}'")
    elif namespace.command == 'dblogin_cplogin_pairs':
        # restrict the mapping dump to the caller's own login
        namespace.cplogin_lst = [caller]

def main():
    parser = cpapi_parser()
    namespace = parser.parse_args()
    output_ = None
    exit_code = 0
    try:
        _enforce_authorization(namespace)
        if namespace.command == 'docroot':
            domain, user = cpapi.docroot(namespace.domain)
            if namespace.json:
                output_ = prepare_data_json({'domain': domain, 'user': user})
            else:
                output_ = domain + ' ' + user
        elif namespace.command == 'userdomains':
            domain_docroot_pairs = cpapi.userdomains(namespace.userdomains)
            if namespace.json:
                data = [{'domain': domain_docroot[0],
                         'docroot': domain_docroot[1]}
                        for domain_docroot in domain_docroot_pairs]
                output_ = prepare_data_json(data)
            else:
                output_ = flat_plain(domain_docroot_pairs)
        elif namespace.command == 'dblogin_cplogin_pairs':
            db_mapping = cpapi.dblogin_cplogin_pairs(namespace.cplogin_lst,
                                                     namespace.with_system_users)
            if namespace.json:
                output_ = prepare_data_json(db_mapping)
            else:
                output_ = flat_plain(db_mapping)
        elif namespace.command == 'reseller-users':
            users = cpapi.reseller_users(namespace.resellername)
            if namespace.json:
                output_ = prepare_data_json(users)
            else:
                output_ = '\n'.join(users)

except cpapiexceptions.CPAPIException as e_:
        exit_code = 1
        if namespace.json:
            output_ = prepare_attention_json(str(e_))
        else:
            output_ = 'ERROR: ' + str(e_)
    return output_, exit_code

if __name__ == '__main__':
    import sys
    output_, exit_code = main()
    if output_:
        print(output_)
    if exit_code:
        sys.exit(exit_code)

cmd: