J d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z e j
e Z G d de
Z G d de
Z G d de
Z G d d
e
Zd Zg d Zd
gZg dZdZdZdZ G d d ZdS ) N)S_IRUSRS_IRGRPc e Zd Zd ZdS )
NoSuchUserc D t | d| d d S )NzNo such user () Exception__init__)selfusers /builddir/build/BUILDROOT/alt-python27-cllib-3.4.40-1.el9.cloudlinux.x86_64/opt/cloudlinux/venv/lib/python3.11/site-packages/clsudo.pyr zNoSuchUser.__init__ s* 4!9$!9!9!9::::: N__name__
__module__ __qualname__r r r r r s# ; ; ; ; ;r r c e Zd Zd ZdS ) NoSuchGroupc D t | d| d d S )NzNo such group (r r )r groups r r zNoSuchGroup.__init__ s* 4!;5!;!;!;<<<<>>>>r Nr r r r r r # s# ? ? ? ? ?r r z /etc/sudoers)z/bin/psz /bin/grepz
/sbin/servicez%/usr/bin/getcontrolpaneluserspackagesz/usr/sbin/lvectlz>/usr/local/directadmin/plugins/new_lvemanager/admin/GetDomainsz0/usr/share/l.v.e-manager/utils/cloudlinux-cli.pyz5/usr/share/l.v.e-manager/utils/cloudlinux-cli-user.py)/usr/bin/cl-selectorz/usr/bin/pinisetz/usr/sbin/lvepsz/usr/bin/selectorctlzDefaults:%s !requirettyz-%%%s ALL=NOPASSWD: LVECTL_CMDS, SELECTOR_CMDSzDefaults:%%%s !requirettyc x e Zd ZdZdZg ZdZdZdZdZ dZ
dZ dZ dZ
dZdZeefd Zeefd Zeefd Zeefd Zeefd Zeefd Zed
Zed Zed Zed
Zed Z ed Z ed Z dS )Clsudoz/
Adds CloudLinux users to sudoers file
NFc t d| |t j t j t
| t
| t
| t
j s:t
j
dd t z t
j s:t
j
dd t z t
j s:t
j
dd t" z t
j s"t
j
| d t
j s"t
j
| d t
j s"t
j
| d t
j s(t
j
t, | fz t
t d | | d
S ) z@
Adds username to sudoers file (for lvemanager)
z@add_user: adding user '%s' to sudoers file '%s' (uid=%d, pid=%d)Cmnd_Alias LVECTL_CMDS = , z Cmnd_Alias LVECTL_USER_CMDS = Cmnd_Alias SELECTOR_CMDS = ALL=NOPASSWD: LVECTL_CMDS% ALL=(ALL) NOPASSWD: LVECTL_USER_CMDS ALL=NOPASSWD: SELECTOR_CMDSz.add_user: successfully added user '%s' to '%s'N)loggerinfoosgetuidgetpidr# update_commands_list _check_user
_get_contents has_alias sudoers_listappendjoinALIAS_LVECTL_CMDShas_user_aliasALIAS_LVECTL_USER_CMDShas_selector_aliasALIAS_SELECTOR_CMDS
has_rightshas_user_rightshas_selector_rights
has_actionDEFAULTS_REQUIRETTY_write_contentsr
sudoers_files r add_userzClsudo.add_userH s
()-|Y[[")++ / / / ##L1114 T""" c & &'BTYYO`EaEa'a b b b$ m & &'G$))TjJkJk'k l l l( g & &'DtyyQdGeGe'e f f f L & &$'J'J'J K K K% W & &$'U'U'U V V V) N & &$'L'L'L M M M F & &':dW'D E E E D< ) ) ) ) )r c t d| |t j t j |t
_ t
| t
| t
j s t
j
d t
j s"t
j
| d t
j
s(t
j
t | fz t
t d| | dS )z<
Adds username to sudoers file (for cagefs)
zGadd_cagefs_user: adding user '%s' to sudoers file '%s' (uid=%d, pid=%d)zOCmnd_Alias CAGEFS_CMDS = /usr/sbin/cagefsctl, /bin/ps, /bin/grep, /sbin/service ALL=NOPASSWD: CAGEFS_CMDSz5add_cagefs_user: successfully added user '%s' to '%s'N)r+ r, r- r. r/ r# filepathr1 r2 has_cagefs_aliasr4 r5 has_cagefs_rightsr? r@ rA rB s r add_cagefs_userzClsudo.add_cagefs_userg s'
()-|Y[[")++ / / / '4 T"""& L & & (K
L
L
L' L & &$'J'J'J K K K F & &':dW'D E E E K< ) ) ) ) )r c t t d| |t j t j t
| t
| t
| t
j s:t
j
dd t z t
j s:t
j
dd t z t
j s(t
j
t" | fz t
j s(t
j
t& | fz t
t d| | dS )zJ
Adds group to sudoers file, grants access to LVE Manager
zMadd_lvemanager_group: adding group '%s' to sudoers file '%s' (uid=%d, pid=%d)r% r& r' z;add_lvemanager_group: successfully added group '%s' to '%s'N)r+ r, r- r. r/ r# r0 _check_group_get_contents_groupr3 r4 r5 r6 r7 r: r; r? GROUP_LVECTL_SELECTORhas_group_actionGROUP_DEFAULTS_REQUIRETTYrA )
group_namerC s r add_lvemanager_groupzClsudo.add_lvemanager_group} so
()3\Y[[")++ / / / ##L111J'''"":... c & &'BTYYO`EaEa'a b b b( g & &'DtyyQdGeGe'e f f f N & &'<
}'L M M M& R & &'@J='P Q Q Q Q / / / / /r c t d| |t j t j |t
_ t t
j d 5 }| t
_
ddd n # 1 swxY w Y d}d}|t t
j
k rt
j
| }| d|v s
t | fz |v r>t d| | t
j
| d }|d
z
}|t t
j
k |r7t
t d | | dS t d | | dS # t t f$ r}t# |d}~ww xY w)
z5
Removes username from sudoers file
zGremove_user: removing user '%s' from sudoers file '%s' (uid=%d, pid=%d)utf-8encodingNr Fz ALL=NOPASSWD:z4remove_user: removing sudoers rule for user '%s': %sT z5remove_user: successfully removed user '%s' from '%s'z1remove_user: no rules found for user '%s' in '%s')r+ r, r- r. r/ r# rG openread
splitlinesr4 lenr@ removerA IOErrorOSErrorr )r
rC fidxremovedlinees r remove_userzClsudo.remove_user s
()-|Y[[")++ / / / ' ,fo888
rH rI recompilero rp r4 searchrr r] r^ r )r
require_tty_patternr` rw
pattern_matchrc s r r2 zClsudo._get_contents sQ ""' % !!& $)!%*""' #( j)M)M)M)M N N, , " " "'01D'E'E '
'
#^+~=='+F$ 0NBB,0F) +~==.2F+ 666.HH(,F% AAA^SS-1F* 666.HH/3F, >11$7$>$>~$N$NM$ 1,0) - ?? 663A3I3I 2 D4 4+C0 n443A3I3I D U4 4+C0 15F- 888NJJ15F. KK'
'
P ! , , ,"$$! + ,s EG G>*G99G>c ~ dt _ dt _ dt _ dt _ dt _ dt _ dt _ dt _ d| }d| }t j
| d } t t t j
D ]\ }}d|v r[d|vr#| dd t j
|< d |vr#| dd
t j
|< d t _ dd |v r
d t _ ud
|v r
d t _ | | r#| | }|r d t _ | | r d t _ dS # t" t$ f$ r}t' |d}~ww xY w)zS
Reads file into list of strings
@param group_name: string
F%z
Defaults:%z/\s*ALL=NOPASSWD:\s*LVECTL_CMDS,\s*SELECTOR_CMDSri r r! r r r Trh r N)r# r? rO r3 r< r: r> rH rI r r ro rp r4 rr
startswithr r] r^ r )rQ group_prefix group_action
group_patternr` rw r rc s r rM zClsudo._get_contents_groupD s ""' !$)!%*""' #( ':'' 0J00
z#b#b#bcc
, " " "'01D'E'E
3
3#^- ?? 663A3I3I 2 D4 4+C0 n443A3I3I D U4 4+C0 15F- +~=='+F$ +~==.2F+ !,,\:: 1$1$8$8 $H$HM$ 1,0)!,,\:: 3.2F+3
3
34 ! , , ,"$$! + ,s DF F<(F77F<c X t j t j } d}t j || \ }}t j |d }| d t j
dz | t t z }t j || t | st n# t t" f$ r}t$ dt j t j t j t j | rt j | n# t0 $ r Y nw xY wt3 |d}~ww xY w t j |t j dS # t" $ r]}t$ dt j t j t j t3 |d}~ww xY w)zX
Writes data to temporary file then checks it and rewrites sudoers file
lve_sudoers_)prefixdirw
zC_write_contents: failed to write sudoers file '%s' (uid=%d, pid=%d)NzD_write_contents: failed to rename temp file to '%s' (uid=%d, pid=%d))r- rl rm r# rG tempfilemkstempfdopenwriter6 r4 closer r chmod_is_file_validr] r^ r+ warningr. r/ existsunlinkr
r rename)rn temp_prefixfd temp_pathfomaskrc s r rA zClsudo._write_contentsw s
-wv77H(K $ ,KX N N NMB 2s##B HHTYYv 233d: ; ; ; HHJJJW$D HY % % %((33
! - - - NN ./5 9;;
5
5
5
7>>),, )Ii(((
#%%1 , - - Ii 1 1 1 1 1 - - - NN ./5 9;;
5
5
5 $%%1 , -sV C'C* *F ;A F3E98F9
FFFFF ! G
H) AH$$H)c
ddd| g}t j |t j t j t j 5 }| |j dk r d d d dS d d d n # 1 swxY w Y dS )Nz/usr/sbin/visudoz-cz-f)stdinstdoutstderrr FT)
subprocessPopenDEVNULLPIPESTDOUT communicate
returncode)filenamecmdprocs r r zClsudo._is_file_valid s
(
$ ? $
!## $ ts !A88A<?A<) r r r __doc__rG r4 r? rO r3 r8 r< r= r: r> rH rI staticmethod SUDOERS_FILErD rJ rR rd rf r0 r1 rL ro r2 rM rA r r r r r# r# 7 s HLJ INJO $0 ) ) ) \ )< +7 ) ) ) \)* 6B / / / \/0 '3 , , , \ ,@ '3 # # # \#" *6 ) ) ) \ )< * * \* 1 1 \1 8 8 \8 >, >, \>,@ 0, 0, \0,d - - \ -B \ r r# )loggingr- r} r r r r statr r getLoggerr r+ r
r r r r r r7 r9 r; r@ rN rP r# r r r r s
! ! ! ! ! ! ! ! 8 $ $; ; ; ; ; ; ; ;
= = = = =) = = =
= = = = =y = = =
? ? ? ? ? ? ? ?
I I I RR mmm / G 7 r r r r r r r r r rr