File: //opt/alt/python37/lib/python3.7/site-packages/clcommon/__pycache__/clcagefs.cpython-37.pyc
B
��+����� @ s� d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZdZdZ G dd� de
�Z G d d
� d
e
�Z G d d � d �Z
d
d� Zd$dd�Zd%dd�Zd&dd�Zdd� Zdd� Zd d � Zd'd d �Zd d!� Zd"d#� ZdS )(� )�print_function)�absolute_import)�divisionNz/etc/cagefs/cagefs.mpz/usr/sbin/cagefsctlc @ s e Zd Zdd� Zdd� ZdS )�CagefsMpConflictc C s d|t |f | _d S )NzUConflict in adding '%s' to %s because of pre-existing alternative specification: '%s')�CAGEFS_MP_FILENAME�_msg)�self�new_itemZ
existing_item� r
��/builddir/build/BUILDROOT/alt-python27-cllib-3.4.1-1.el9.cloudlinux.x86_64/opt/alt/python37/lib/python3.7/site-packages/clcommon/clcagefs.py�__init__ s zCagefsMpConflict.__init__c C s | j S )N)r )r r
r
r �__str__ s zCagefsMpConflict.__str__N)�__name__�
__module__� __qualname__r r
r
r
r
r r s r c @ s e Zd ZdZdd� ZdS )�CagefsNotSupportedErrorz Cagefs Not Supported Exceptionc C s t �| |� d S )N)� Exceptionr )r �messager
r
r r ! s z CagefsNotSupportedError.__init__N)r r r �__doc__r r
r
r
r r s r c @ s� e Zd ZdZdZdZdd� Zdd� Zdd � Ze d
d � �Z
d d
� Z dd� Z dd� Z
e dd� �Ze dd� �Ze dd� �Zdd� Zdd� Zd S ) � CagefsMpItemz@!%*� �!c C s6 |dd� dkrd| _ n|�� dkr,d| _ n|| _ dS )z�Constructor
:param arg: Is either path to add to cagefs.mp or a raw line is read from cagefs.mp
:param prefix: The same as adding prefix '!' to arg before passing it to ctorN� �#r )�
_path_spec�strip)r �argr
r
r r + s
zCagefsMpItem.__init__c C s( | � � dkr$|dk r$d| j|f | _| S )z%Specify mode as in fluent constructor�@Nz%s,%03o)�prefixr )r �moder
r
r r 8 s zCagefsMpItem.modec C s | j S )N)r )r r
r
r r
@ s zCagefsMpItem.__str__c C s$ | dkr dS | d dkr | d S | S )Nr �/���r
)�pathr
r
r �
_add_slashC s
zCagefsMpItem._add_slashc C sD t �|�}| �� s|�� r dS t �| �� �}t �|�� �}|�|�S )NF)r �_adopt�is_dummyr# r" �
startswith)r Zanother�adoptedZ this_pathZtest_preexist_in_pathr
r
r � pre_exist_inK s
zCagefsMpItem.pre_exist_inc C s\ t �|�}| �� s|�� r dS | �� |�� kr2dS t jt jgi}g }| �� |�|�� |�kS )NFT)r r$ r% r �_PREFIX_MOUNT_RW�_PREFIX_MOUNT_RO�get)r Zexistingr' Zprefix_compatibility_mapZ null_optionsr
r
r � is_compatible_by_prefix_withW s
z)CagefsMpItem.is_compatible_by_prefix_withc C s
| j d kS )N)r )r r
r
r r% g s zCagefsMpItem.is_dummyc C s t | t�r| S t| �S d S )N)�
isinstancer )�xr
r
r r$ j s
zCagefsMpItem._adoptc C s | � d�d S )zjCut off mode from path spec like @/var/run/screen,777
Only one comma per path spec is allowed ;-)�,r )�split)� path_specr
r
r �
_cut_off_modeq s zCagefsMpItem._cut_off_modec C s | � tj�S )N)�lstripr � PREFIX_LIST)r1 r
r
r �_cut_off_prefixy s z CagefsMpItem._cut_off_prefixc C s t �t �| j��S )N)r r5 r2 r )r r
r
r r" } s zCagefsMpItem.pathc C s | j | �� kr| j d S dS d S )Nr r )r r" )r r
r
r r � s
zCagefsMpItem.prefixN)r r r r4 r) r* r r r
� staticmethodr# r( r, r% r$ r2 r5 r" r r
r
r
r r % s
r c C s t j�t�S )N)�osr" �exists�CAGEFSCTL_TOOLr
r
r
r �is_cagefs_present� s r: �� c C sT |d kr d}|d krd}t j�| �s.t �| � |d k rBt �| |� t �| ||� d S )Nr! )r7 r" �isdir�mkdir�chmod�chown)r" r �owner_id�group_idr
r
r �_mk_mount_dir_setup_perm� s
rB Fc C sZ t � s
d S | d kr tddg}n
td| g}|rBtj|tjtjd� ntj|tjtjd� d S )Nz --wait-lockz
--remount-allz --remount)�stdout�stderr)r: r9 �
subprocess�Popen�DEVNULL�run)�user�remount_in_backgroundZcommandr
r
r �_remount_cagefs� s
rK r c s t | |||� t� sdS tj�t�s<tjtdgtj tj d� t
� t td�}z�t || ��
|�� dd� |D �} � fdd�| D �}
|
s�|�d d
� |dk r�|�� }td ||d � t� |d � |�� |r�t|d
� n � �|
d �s�t� |
d ��W d|�� X dS )a�
Add mount point to /etc/cagefs/cagefs.mp
:param path: Directory path to be added in cagefs.mp and mounted
from within setup_mount_dir_cagefs().
If this directory does not exist, then it is created.
:param added_by: package or component, mount dir relates to, or whatever will
stay in cagefs.mp with "# added by..." comment
:param mode: If is not None: Regardless of whether directory exists or not prior this call,
it's permissions will be set to mode.
:param owner_id: Regardless of whether directory exists or not prior this call,
it's owner id will be set to.
If None, the owner won't be changed.
:param group_id: Regardless of whether directory exists or not prior this call,
it's group id will be set to.
If None, the group won't be changed.
:param prefix: Mount point prefix. Default is mount as RW.
Pass '!' to add read-only mount point.
Refer CageFS section at http://docs.cloudlinux.com/ for more options.
:param remount_cagefs: If True, cagefs skeleton will be automatically
remounted to apply changes.
:param remount_in_background: If True, cagefs remount will be done in separate
background process, without waiting for completion
:returns: None
Propagates native EnvironmentError if no CageFS installed or something else goes wrong.
Raises CagefsMpConflict if path is already specified in cagefs.mp, but in a way which is opposite
to mount_as_readonly param.
Nz --create-mp)rC rD zr+c s s | ]}|� � V qd S )N)�rstrip)�.0Z file_liner
r
r � <genexpr>� s z)setup_mount_dir_cagefs.<locals>.<genexpr>c s g | ]}� � |�r|�qS r
)r( )rM r. )r r
r �
<listcomp>� s z*setup_mount_dir_cagefs.<locals>.<listcomp>r � z# next line is added by )�file)rJ r! )rB r: r7 r" r8 r rE rH r9 rG �add_new_line_to_cagefs_mp�openr r �seekr �print�closerK r, r ) r" Zadded_byr r@ rA r �remount_cagefsrJ Z cagefs_mpZ trim_nl_iterZpre_exist_optionr
)r r �setup_mount_dir_cagefs� s. )
rX c C s t td��
} | �� S Q R X d S )N�r)rS r � readlines)�fr
r
r �_get_cagefs_mp_lines� s r\ c C s t td�� }|�| �S Q R X d S )N�w)rS r �
writelines)�linesr[ r
r
r �_write_cagefs_mp_lines s r` c C sB t � } | r>| d dkr>| d d dkr>| d d7 < t| � dS )zR
Add new line to the end of /etc/cagefs/cagefs.mp file if it is not there
r r r! �
N)r\ r` )r_ r
r
r rR s rR c sb t � }t�djtjt�| �d��� � fdd�|D �}t|�t|�krHdS t|� |r^t |d� dS )af
Remove mount points matching given path from cagefs.mp file
:param str path: Path that should be removed from file.
:param bool remount_cagefs: Remount cagefs skeleton or not
:param remount_in_background: If True, cagefs remount will be done in separate
background process, without waiting for completion
:return: Nothing
z^[{prefix}]?{path}(,\d+)?$)r r" c s g | ]}� � |�s|�qS r
)�match)rM �line)rY r
r rO s z+remove_mount_dir_cagefs.<locals>.<listcomp>N)rJ )
r\ �re�compile�formatr r4 �escape�lenr` rK )r" rW rJ r_ Zlines_with_excluded_pathr
)rY r �remove_mount_dir_cagefs s ri c C s t j�d�S )zEIf this folder /var/.cagefs exists, it means process is inside cagefsz /var/.cagefs)r7 r" r< r
r
r
r � in_cagefs+ s rj c C sp y&d}|t jkr t j�|� ddl}W n tk
r: dS X y|�| �sLdS W n tk
rj td��Y nX dS )z,
Check that cagefs enabled for user
z/usr/share/cagefs/r NFz;ERROR: CageFS version is unsupported. Please update CageFS.T)�sysr" �append� cagefsctl� ImportErrorZis_user_enabled�AttributeErrorr )rI Zcagefs_lib_dirrm r
r
r �_is_cagefs_enabled0 s
rp )r; NN)NF)Nr; NNr FF)FF)Z
__future__r r r r7 rd rE rk r r9 r r r r r: rB rK rX r\ r` rR ri rj rp r
r
r
r �<module> s,
b
R