lNCa)j d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z m
Z
dZdZd Zd
efd Zd ed
efd
Zd ed
efdZd ed
efdZd Zd Zd ed
efdZd ZdS ) N)Path)ClPwd)drop_privileges)get_user_var_cagefs_path)apply_metadata_nofollow
write_via_tmpl %#Ds_ l c N t | }t j | d S )Nz/.cagefs/isolates.mounts)r pathlibr )user
cagefs_dirs Wopt/cloudlinux/venv/lib/python3.11/site-packages/clcagefslib/webisolation/jail_utils.pyget_jail_config_pathr s( )$//J <:??? @ @@
document_rootc l t }| d D ]}||z }|t z dz }|dS )z
Generates unique id for an isolate website using FNV-1a 64-bit hash.
FNV-1a has excellent avalanche properties and distribution.
Must match the docroot_hash() function in jail C code.
zutf-8l 016x)_FNV_OFFSET_BASISencode
_FNV_PRIME)r
hash_valuechars r
get_website_idr sP #J $$W-- D Dd
:-1CC
r r c t | }t | }t t | dz }||z }| ddd | dd t
t | ddd t d }| d }t ||| t
|d
|j
d | d }t ||| t
|d dd d
S )z
Create website token directory structure and files in /var/cagefs.
Creates:
- /var/cagefs//.cagefs/website// - token directory
.cagefs/websiteTi exist_okparentsmodei )r r r z/.cagefs.token z/.cagefs.websitei$ N) r get_pw_by_namer r r mkdirr str_generate_passwordr pw_uid) r r pw
website_idwebsite_base_dir website_dirtokentoken_file_pathdocroot_file_paths r
create_website_token_directoryr- + s+
% %B
..J 4T : :;;>OO"Z/K D$UCCCt%000 C , ,eQ::: r " "E %444O+666OUBIqAAA '888+ 0-@@@ -ua;;;;;r c \ t | }t |j sdS t t |j | }t
| 5 | ddd ddd dS # 1 swxY w Y dS )z
Create overlay storage directory in user's home.
Creates:
- /.cagefs/websites// - storage base for overlays
Drops privileges to user before creating to ensure proper ownership.
NTi r )r r! r pw_direxistsfull_website_pathr r" )r r r& storage_bases r
create_overlay_storage_directoryr3 Z s
% %B ?? ! ! # # )")]CCDDL D DD$UCCCD D D D D D D D D D D D D D D D D Ds ;B!!B%(B%c t t | dz }|t | z }| rt j | dS dS )z=
Remove website token directory structure and files.
r N)r r r r0 shutilrmtreer r r( r) s r
remove_website_token_directoryr8 l sg 4T : :;;>OO"^M%B%BBK #
k"""""# #r c \ t j dt | S )z5
Returns path: websites/
websites)ospathjoinr )docroots r
website_suffix_with_hashr? x s" 7<<
N7$;$; < </.cagefs/websites/
z.cagefs)r; r< r= r? )homedirr> s r
r1 r1 s% 7<<,DW,M,M N NNr c t t | dz }|t | z }|dz d dS )z,
Removes cached namespace from disk
r z .cagefs.mntT)
missing_okN)r r r unlinkr7 s r
invalidate_ns_cacherE sU 4T : :;;>OO"^M%B%BBK= ((D(99999r c | dk s| dk rt d dt t j | }d fd|D }|S )z
Generate a random password/token using the same algorithm as the C function.
Uses cryptographically secure random bytes and converts them to alphanumeric characters.
r r z Invalid buffer length requested>0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz c 3 . K | ]}|z V d S )N ).0bcharset charset_sizes r
z%_generate_password.. s- EE1WQ -.EEEEEEr )
ValueErrorlensecrets token_bytesr= )length random_bytesresultrM rN s @@r
r$ r$ sx
{{fsll:;;;NGw<r[ s
* * * * * * 3 3 3 3 3 3 A A A A A A A A )
A A A
#
,< ,