Edit File: clsudo.cpython-37.opt-1.pyc
B � e�: � @ s� d dl mZ d dl mZ d dl mZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl m Z m Z G dd� de �ZG dd � d e �ZG d d � d e �ZG d d � d e �ZdZdddddddgZdgZddddgZdZd Zd ZG d d � d �ZdS ) � )�absolute_import)�division)�print_functionN)�S_IRUSR�S_IRGRPc @ s e Zd Zdd� ZdS )� NoSuchUserc C s t �| d|f � d S )NzNo such user (%s))� Exception�__init__)�self�user� r ��/builddir/build/BUILDROOT/alt-python27-cllib-3.3.5-1.el8.cloudlinux.x86_64/opt/alt/python37/lib/python3.7/site-packages/clsudo.pyr s zNoSuchUser.__init__N)�__name__� __module__� __qualname__r r r r r r s r c @ s e Zd Zdd� ZdS )� NoSuchGroupc C s d| }t �| |� d S )NzNo such group (%s))r r )r �group�messager r r r s zNoSuchGroup.__init__N)r r r r r r r r r s r c @ s e Zd Zdd� ZdS )�UnableToReadFilec C s t �| d� d S )NzCannot read sudoers file)r r )r r r r r ! s zUnableToReadFile.__init__N)r r r r r r r r r s r c @ s e Zd Zdd� ZdS )�UnableToWriteFilec C s t �| d� d S )NzCannot modify sudoers file)r r )r r r r r & s zUnableToWriteFile.__init__N)r r r r r r r r r % s r z /etc/sudoersz/bin/psz /bin/grepz /sbin/servicez%/usr/bin/getcontrolpaneluserspackagesz/usr/sbin/lvectlz>/usr/local/directadmin/plugins/new_lvemanager/admin/GetDomainsz0/usr/share/l.v.e-manager/utils/cloudlinux-cli.pyz5/usr/share/l.v.e-manager/utils/cloudlinux-cli-user.pyz/usr/bin/cl-selectorz/usr/bin/pinisetz/usr/sbin/lvepsz/usr/bin/selectorctlzDefaults:%s !requirettyz-%%%s ALL=NOPASSWD: LVECTL_CMDS, SELECTOR_CMDSzDefaults:%%%s !requirettyc @ s� e Zd ZdZdZg ZdZdZdZdZ dZ dZ dZ dZ dZdZeefdd��Zeefdd��Zeefdd ��Zeefd d ��Zeefd d ��Zeefdd��Zedd� �Zedd� �Zedd� �Zedd� �Zedd� �Z edd� �Z ed d � �Z dS ) �Clsudoz/ Adds CloudLinux users to sudoers file NFc C s� t �|� t �| � t �| � t js:t j�dd�t� � t j sVt j�dd�t � � t j srt j�dd�t � � t j s�t j�d| f � t js�t j�d| f � t js�t j�d| f � t js�t j�t| f � t �� dS ) z@ Adds username to sudoers file (for lvemanager) zCmnd_Alias LVECTL_CMDS = z, z Cmnd_Alias LVECTL_USER_CMDS = zCmnd_Alias SELECTOR_CMDS = z %s ALL=NOPASSWD: LVECTL_CMDSz'%s ALL=(ALL) NOPASSWD: LVECTL_USER_CMDSz %s ALL=NOPASSWD: SELECTOR_CMDSN)r �update_commands_list� _check_user� _get_contents� has_alias� sudoers_list�append�join�ALIAS_LVECTL_CMDS�has_user_alias�ALIAS_LVECTL_USER_CMDS�has_selector_alias�ALIAS_SELECTOR_CMDS� has_rights�has_user_rights�has_selector_rights� has_action�DEFAULTS_REQUIRETTY�_write_contents)r � sudoers_filer r r �add_userJ s$ zClsudo.add_userc C sh |t _t �| � t �| � t js,t j�d� t jsDt j�d| f � t js\t j�t | f � t � � dS )z< Adds username to sudoers file (for cagefs) zOCmnd_Alias CAGEFS_CMDS = /usr/sbin/cagefsctl, /bin/ps, /bin/grep, /sbin/servicez %s ALL=NOPASSWD: CAGEFS_CMDSN) r �filepathr r �has_cagefs_aliasr r �has_cagefs_rightsr& r' r( )r r) r r r �add_cagefs_userd s zClsudo.add_cagefs_userc C s� t �|� t �| � t �| � t js:t j�dd�t� � t j sVt j�dd�t � � t j snt j�t | f � t j s�t j�t| f � t �� dS )zJ Adds group to sudoers file, grants access to LVE Manager zCmnd_Alias LVECTL_CMDS = z, zCmnd_Alias SELECTOR_CMDS = N)r r � _check_group�_get_contents_groupr r r r r r! r" r& �GROUP_LVECTL_SELECTOR�has_group_action�GROUP_DEFAULTS_REQUIRETTYr( )� group_namer) r r r �add_lvemanager_groupu s zClsudo.add_lvemanager_groupc C s� |t _y�tt j�}|�� �� t _|�� d}d}xR|tt j�k r�t j| }d| f |ksft| f |krxt j� |� d}q2|d7 }q2W |r�t � � W n t t fk r� t � �Y nX dS )z5 Removes username from sudoers file r Fz%s ALL=NOPASSWD:T� N)r r+ �open�read� splitlinesr �close�lenr' �remover( �IOError�OSErrorr )r r) �f�idxZremoved�liner r r � remove_user� s$ zClsudo.remove_userc C s" t �|� t �| � t �| � dS )z� updates username in sudoers file :param user: username for caching :param sudoers_file: path to /etc/sudoers (only for tests) :return: None N)r r r r )r r) r r r � update_user� s zClsudo.update_userc C s� | t _tj�t j�t _t �� ttd�}d}x�t t t j ��D ]�}t j | }xj|� � D ]^\}}||krT|� |d��� }|�d�}x2|D ]*}||kr�d}d�|d�|��t j |< P q�W qTW |r<t �� q<W dS ) z� Update command lists for lvemanager plugin If any required command absent in file, add it :param sudoers_file: path to /etc/sudoers :return: None )zCmnd_Alias LVECTL_CMDSzCmnd_Alias SELECTOR_CMDSF� �,Tz {0} = {1}z, N)r r+ �os�path�dirname�temp_dir� _read_sudoersr r" �ranger; r �items�replace�strip�split�formatr r( ) r) Z cmnd_dictZis_sudoer_changer@ Zcommand_stringZ aliase_keyZ aliase_listZ cmnd_listZaliase_cmnd_itemr r r r � s( zClsudo.update_commands_listc C s0 yt �| � W n tk r* t| ��Y nX dS )zZ Checks passwd database for username presence @param user: string N)�pwd�getpwnam�KeyErrorr )r r r r r � s zClsudo._check_userc C s0 yt �| � W n tk r* t| ��Y nX dS )z_ Checks grp database for group_name presence @param group_name: string N)�grpZgetgrnamrS r )r4 r r r r/ � s zClsudo._check_groupc C s$ t tj�} | �� �� t_| �� d S )N)r7 r r+ r8 r9 r r: )�ir r r rJ � s zClsudo._read_sudoersc C s� dt _dt _dt _dt _dt _dt _dt _dt _dt _ dt _ t � d| �}�ypt � � �x`ttt j��D �]L}dt j| kr�dt _qhdt j| kr�dt _qhdt j| kr�dt _ qhd| f t j| kr�dt _qhd| f t j| kr�dt _qhd | f t j| k�rdt _ qhd t j| k�r2|�t j| �}|rhdt _qhd t j| k�r�d t j| k�rjt j| �d d�t j|< dt j| k�r�t j| �dd�t j|< dt _qhd| f t j| krhdt _qhqhW W n ttfk �r� t� �Y nX dS )zM Reads file into list of strings @param user: string Fz Defaults:\s*%s\s*!requirettyzCmnd_Alias LVECTL_CMDSTzCmnd_Alias LVECTL_USER_CMDSzCmnd_Alias CAGEFS_CMDSz %s ALL=NOPASSWD: LVECTL_CMDSz'%s ALL=(ALL) NOPASSWD: LVECTL_USER_CMDSz %s ALL=NOPASSWD: CAGEFS_CMDSZ requirettyzCmnd_Alias SELECTOR_CMDS�pinisetz/usr/bin/cl-selectorz&/usr/bin/cl-selector, /usr/bin/piniset�lvepsz7/usr/bin/cl-selector, /usr/bin/piniset, /usr/sbin/lvepsz %s ALL=NOPASSWD: SELECTOR_CMDSN)r r& r2 r r r# r$ r! r% r, r- �re�compilerJ rK r; r �searchrM r= r> r )r Zrequire_tty_patternr@ � pattern_matchr r r r � sh zClsudo._get_contentsc C sl dt _dt _dt _dt _dt _dt _dt _dt _d| }d| }t � d| f �}y�t � � x�t t t j��D ]�}dt j| kr�dt j| kr�t j| �dd�t j|< d t j| kr�t j| �dd �t j|< d t _qjd t j| kr�d t _qjd t j| kr�d t _qjt j| �|��r*|�t j| �}|�r*d t _t j| �|�rjd t _qjW W n ttfk �rf t� �Y nX dS )zS Reads file into list of strings @param group_name: string Fz%%%sz Defaults:%%%sz1%s\s*ALL=NOPASSWD:\s*LVECTL_CMDS,\s*SELECTOR_CMDSzCmnd_Alias SELECTOR_CMDSrV z/usr/bin/cl-selectorz&/usr/bin/cl-selector, /usr/bin/pinisetrW z7/usr/bin/cl-selector, /usr/bin/piniset, /usr/sbin/lvepsTzCmnd_Alias LVECTL_CMDSzCmnd_Alias CAGEFS_CMDSN)r r& r2 r r# r! r% r, r- rX rY rJ rK r; r rM � startswithrZ r= r> r )r4 Z group_prefixZ group_actionZ group_patternr@ r[ r r r r0 ) sL zClsudo._get_contents_groupc C s� ytt j�tj�} d}tj|| d�\}}t �|d�}|�d� tj �d � |� � t t B }t �||� t�|�srt�W nF ttfk r� yt j�|�r�t �|� W n Y nX t� �Y nX yt �|tj� W n tk r� t� �Y nX dS )zX Writes data to temporary file then checks it and rewrites sudoers file Z lve_sudoers_)�prefix�dir�w� N)rF rG rH r r+ �tempfileZmkstemp�fdopen�writer r r: r r �chmod�_is_file_validr= r> �exists�unlinkr �rename)rI Z temp_prefix�fdZ temp_pathZfo�maskr r r r( Y s, zClsudo._write_contentsc C sB ddd| g}t j|td�t jt jdd�}|�� |jdkr>dS dS ) Nz/usr/sbin/visudoz-cz-fz /dev/nullT)�stdin�stdout�stderrZ close_fdsr F)� subprocess�Popenr7 �PIPEZSTDOUTZ communicate� returncode)�filename�cmd�rvr r r re u s zClsudo._is_file_valid) r r r �__doc__r+ r r& r2 r r r# r$ r! r% r, r- � staticmethod� SUDOERS_FILEr* r. r5 rB rC r r r/ rJ r r0 r( re r r r r r 9 s@ > 0 r )Z __future__r r r rF rQ rT rX rn ra �statr r r r r r r rw r r r" r' r1 r3 r r r r r �<module> s.