| Current File : //proc/self/root/opt/alt/python37/lib/python3.7/site-packages/__pycache__/clsudo.cpython-37.pyc |
B
^Se�: � @ s� d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z m Z G dd� de
�ZG dd � d e
�ZG d
d � d e
�ZG d d
� d
e
�ZdZdddddddgZdgZddddgZdZd Zd ZG d d � d �ZdS ) � )�absolute_import)�division)�print_functionN)�S_IRUSR�S_IRGRPc @ s e Zd Zdd� ZdS )�
NoSuchUserc C s t �| d|f � d S )NzNo such user (%s))� Exception�__init__)�self�user� r ��/builddir/build/BUILDROOT/alt-python27-cllib-3.3.8-1.el8.cloudlinux.x86_64/opt/alt/python37/lib/python3.7/site-packages/clsudo.pyr s zNoSuchUser.__init__N)�__name__�
__module__� __qualname__r r r r r
r s r c @ s e Zd Zdd� ZdS )� NoSuchGroupc C s d| }t �| |� d S )NzNo such group (%s))r r )r
�group�messager r r
r s zNoSuchGroup.__init__N)r r r r r r r r
r s r c @ s e Zd Zdd� ZdS )�UnableToReadFilec C s t �| d� d S )NzCannot read sudoers file)r r )r
r r r
r ! s zUnableToReadFile.__init__N)r r r r r r r r
r s r c @ s e Zd Zdd� ZdS )�UnableToWriteFilec C s t �| d� d S )NzCannot modify sudoers file)r r )r
r r r
r & s zUnableToWriteFile.__init__N)r r r r r r r r
r % s r z /etc/sudoersz/bin/psz /bin/grepz
/sbin/servicez%/usr/bin/getcontrolpaneluserspackagesz/usr/sbin/lvectlz>/usr/local/directadmin/plugins/new_lvemanager/admin/GetDomainsz0/usr/share/l.v.e-manager/utils/cloudlinux-cli.pyz5/usr/share/l.v.e-manager/utils/cloudlinux-cli-user.pyz/usr/bin/cl-selectorz/usr/bin/pinisetz/usr/sbin/lvepsz/usr/bin/selectorctlzDefaults:%s !requirettyz-%%%s ALL=NOPASSWD: LVECTL_CMDS, SELECTOR_CMDSzDefaults:%%%s !requirettyc @ s� e Zd ZdZdZg ZdZdZdZdZ dZ
dZ dZ dZ
dZdZeefdd��Zeefdd��Zeefdd ��Zeefd
d ��Zeefd d
��Zeefdd��Zedd� �Zedd� �Zedd� �Zedd� �Zedd� �Z edd� �Z ed d � �Z dS ) �Clsudoz/
Adds CloudLinux users to sudoers file
NFc C s� t �|� t �| � t �| � t js:t j�dd�t� � t j sVt j�dd�t
� � t j srt j�dd�t � � t j
s�t j�d| f � t js�t j�d| f � t js�t j�d| f � t js�t j�t| f � t �� dS ) z@
Adds username to sudoers file (for lvemanager)
zCmnd_Alias LVECTL_CMDS = z, z Cmnd_Alias LVECTL_USER_CMDS = zCmnd_Alias SELECTOR_CMDS = z %s ALL=NOPASSWD: LVECTL_CMDSz'%s ALL=(ALL) NOPASSWD: LVECTL_USER_CMDSz %s ALL=NOPASSWD: SELECTOR_CMDSN)r �update_commands_list� _check_user�
_get_contents� has_alias� sudoers_list�append�join�ALIAS_LVECTL_CMDS�has_user_alias�ALIAS_LVECTL_USER_CMDS�has_selector_alias�ALIAS_SELECTOR_CMDS�
has_rights�has_user_rights�has_selector_rights�
has_action�DEFAULTS_REQUIRETTY�_write_contents)r � sudoers_filer r r
�add_userJ s$
zClsudo.add_userc C sh |t _t �| � t �| � t js,t j�d� t jsDt j�d| f � t js\t j�t | f � t �
� dS )z<
Adds username to sudoers file (for cagefs)
zOCmnd_Alias CAGEFS_CMDS = /usr/sbin/cagefsctl, /bin/ps, /bin/grep, /sbin/servicez %s ALL=NOPASSWD: CAGEFS_CMDSN) r �filepathr r �has_cagefs_aliasr r �has_cagefs_rightsr& r' r( )r r) r r r
�add_cagefs_userd s
zClsudo.add_cagefs_userc C s� t �|� t �| � t �| � t js:t j�dd�t� � t j sVt j�dd�t
� � t j snt j�t | f � t j
s�t j�t| f � t �� dS )zJ
Adds group to sudoers file, grants access to LVE Manager
zCmnd_Alias LVECTL_CMDS = z, zCmnd_Alias SELECTOR_CMDS = N)r r � _check_group�_get_contents_groupr r r r r r! r" r& �GROUP_LVECTL_SELECTOR�has_group_action�GROUP_DEFAULTS_REQUIRETTYr( )�
group_namer) r r r
�add_lvemanager_groupu s
zClsudo.add_lvemanager_groupc C s� |t _y�tt j�}|�� �� t _|�� d}d}xR|tt j�k r�t j| }d| f |ksft| f |krxt j� |� d}q2|d7 }q2W |r�t �
� W n t t fk
r� t
� �Y nX dS )z5
Removes username from sudoers file
r Fz%s ALL=NOPASSWD:T� N)r r+ �open�read�
splitlinesr �close�lenr' �remover( �IOError�OSErrorr )r r) �f�idxZremoved�liner r r
� remove_user� s$
zClsudo.remove_userc C s" t �|� t �| � t �| � dS )z�
updates username in sudoers file
:param user: username for caching
:param sudoers_file: path to /etc/sudoers (only for tests)
:return: None
N)r r r r )r r) r r r
� update_user� s
zClsudo.update_userc C s� | t _tj�t j�t _t �� ttd�}d}x�t t
t j ��D ]�}t j | }xj|� � D ]^\}}||krT|�
|d��� }|�d�}x2|D ]*}||kr�d}d�|d�|��t j |< P q�W qTW |r<t �� q<W dS ) z�
Update command lists for lvemanager plugin
If any required command absent in file, add it
:param sudoers_file: path to /etc/sudoers
:return: None
)zCmnd_Alias LVECTL_CMDSzCmnd_Alias SELECTOR_CMDSF� �,Tz {0} = {1}z, N)r r+ �os�path�dirname�temp_dir�
_read_sudoersr r" �ranger; r �items�replace�strip�split�formatr r( ) r) Z cmnd_dictZis_sudoer_changer@ Zcommand_stringZ
aliase_keyZ aliase_listZ cmnd_listZaliase_cmnd_itemr r r
r � s(
zClsudo.update_commands_listc C s0 yt �| � W n tk
r* t| ��Y nX dS )zZ
Checks passwd database for username presence
@param user: string
N)�pwd�getpwnam�KeyErrorr )r r r r
r � s zClsudo._check_userc C s0 yt �| � W n tk
r* t| ��Y nX dS )z_
Checks grp database for group_name presence
@param group_name: string
N)�grpZgetgrnamrS r )r4 r r r
r/ � s zClsudo._check_groupc C s$ t tj�} | �� �� t_| �� d S )N)r7 r r+ r8 r9 r r: )�ir r r
rJ � s
zClsudo._read_sudoersc C s� dt _dt _dt _dt _dt _dt _dt _dt _dt _ dt _
t � d| �}�ypt �
� �x`ttt j��D �]L}dt j| kr�dt _qhdt j| kr�dt _qhdt j| kr�dt _ qhd| f t j| kr�dt _qhd| f t j| kr�dt _qhd | f t j| k�rdt _
qhd
t j| k�r2|�t j| �}|rhdt _qhd t j| k�r�d t j| k�rjt j| �d
d�t j|< dt j| k�r�t j| �dd�t j|< dt _qhd| f t j| krhdt _qhqhW W n ttfk
�r� t� �Y nX dS )zM
Reads file into list of strings
@param user: string
Fz Defaults:\s*%s\s*!requirettyzCmnd_Alias LVECTL_CMDSTzCmnd_Alias LVECTL_USER_CMDSzCmnd_Alias CAGEFS_CMDSz %s ALL=NOPASSWD: LVECTL_CMDSz'%s ALL=(ALL) NOPASSWD: LVECTL_USER_CMDSz %s ALL=NOPASSWD: CAGEFS_CMDSZ
requirettyzCmnd_Alias SELECTOR_CMDS�pinisetz/usr/bin/cl-selectorz&/usr/bin/cl-selector, /usr/bin/piniset�lvepsz7/usr/bin/cl-selector, /usr/bin/piniset, /usr/sbin/lvepsz %s ALL=NOPASSWD: SELECTOR_CMDSN)r r& r2 r r r# r$ r! r% r, r- �re�compilerJ rK r; r �searchrM r= r> r )r Zrequire_tty_patternr@ �
pattern_matchr r r
r � sh
zClsudo._get_contentsc C sl dt _dt _dt _dt _dt _dt _dt _dt _d| }d| }t �
d| f �}y�t � � x�t t
t j��D ]�}dt j| kr�dt j| kr�t j| �dd�t j|< d t j| kr�t j| �dd
�t j|< d t _qjd t j| kr�d t _qjd
t j| kr�d t _qjt j| �|��r*|�t j| �}|�r*d t _t j| �|�rjd t _qjW W n ttfk
�rf t� �Y nX dS )zS
Reads file into list of strings
@param group_name: string
Fz%%%sz
Defaults:%%%sz1%s\s*ALL=NOPASSWD:\s*LVECTL_CMDS,\s*SELECTOR_CMDSzCmnd_Alias SELECTOR_CMDSrV z/usr/bin/cl-selectorz&/usr/bin/cl-selector, /usr/bin/pinisetrW z7/usr/bin/cl-selector, /usr/bin/piniset, /usr/sbin/lvepsTzCmnd_Alias LVECTL_CMDSzCmnd_Alias CAGEFS_CMDSN)r r& r2 r r# r! r% r, r- rX rY rJ rK r; r rM �
startswithrZ r= r> r )r4 Z group_prefixZ group_actionZ
group_patternr@ r[ r r r
r0 ) sL
zClsudo._get_contents_groupc C s� ytt j�tj�} d}tj|| d�\}}t �|d�}|�d� tj
�d � |� � t t
B }t �||� t�|�srt�W nF ttfk
r� yt j�|�r�t �|� W n Y nX t� �Y nX yt �|tj� W n tk
r� t� �Y nX dS )zX
Writes data to temporary file then checks it and rewrites sudoers file
Z lve_sudoers_)�prefix�dir�w�
N)rF rG rH r r+ �tempfileZmkstemp�fdopen�writer r r: r r �chmod�_is_file_validr= r> �exists�unlinkr �rename)rI Z temp_prefix�fdZ temp_pathZfo�maskr r r
r( Y s,
zClsudo._write_contentsc C sB ddd| g}t j|td�t jt jdd�}|�� |jdkr>dS dS ) Nz/usr/sbin/visudoz-cz-fz /dev/nullT)�stdin�stdout�stderrZ close_fdsr F)�
subprocess�Popenr7 �PIPEZSTDOUTZ communicate�
returncode)�filename�cmd�rvr r r
re u s
zClsudo._is_file_valid) r r r �__doc__r+ r r& r2 r r r# r$ r! r% r, r- � staticmethod� SUDOERS_FILEr* r. r5 rB rC r r r/ rJ r r0 r( re r r r r
r 9 s@ > 0 r )Z
__future__r r r rF rQ rT rX rn ra �statr r r r r r r rw r r r" r' r1 r3 r r r r r
�<module> s.