9Vje& d Z ddlZddlmZ ddlmZ ddlmZ ddlm Z ddl
m Z d d
l m
Z
mZ d d lmZmZ d d lmZ d d
lmZ d dlmZmZ d dlmZ G d d Zde de
j dz ddfdZ dS )z
Builder for website isolation jail mount configurations.
Collects user docroots and isolation settings, then generates
the complete jail mount configuration.
N)Path)ClPwd) userdomains) NoPanelUser )
write_via_tmp )config
jail_utils)validate_docroot validate_docroot_no_symlinks) MountConfig)IsolatedRootConfig)build_docroot_treeprocess_ordered_mounts) MountTypec Z e Zd ZdZdefdZdeddfdZdeddfdZdeddfd Zdefd
Z dS ) JailMountsConfigBuilderz
Builder for generating jail mount configuration files.
Collects docroots and isolation settings, then generates
the mount configuration string for the jail.c implementation.
userc || _ t | _ t | _ t | _ d S )N)r set
_all_docroots_isolated_docroots_phpselector_docroots)selfr s `opt/cloudlinux/venv/lib/python3.11/site-packages/clcagefslib/webisolation/jail_config_builder.py__init__z JailMountsConfigBuilder.__init__' s3 '*uu,/EE /2uu""" docrootreturnNc : | j | dS )z%Register a docroot path for the user.N)r addr r s r add_docrootz#JailMountsConfigBuilder.add_docroot- s w'''''r c : | j | dS )z&Mark a docroot as requiring isolation.N)r r" r# s r enable_isolationz(JailMountsConfigBuilder.enable_isolation1 s ##G,,,,,r c : | j | dS )z-Enable per-domain PHP selector for a docroot.N)r r" r# s r enable_phpselectorz*JailMountsConfigBuilder.enable_phpselector5 s "&&w/////r c t | j }|j }|j |j }}t
| j }| d} t || d}n4# t $ r'}t j d| j | d}Y d}~nd}~ww xY wg } t | j
t D ]
}
t j ||
} t# | d|d } t% |
||| }
t' ||
}| | |r"| t, j ||d |
D ].}| |j |j |j |j /| | | t, j d |
| j v r| t, j d
d | t, j d
d | t, j dt j |
d
| t, j dt j |
d | t, j dt j |
d | ! |" |
d# | S )z
Generate the complete mount configuration.
Returns:
Configuration string in jail.c mount syntax.
z/.clwposTz+Skipping .clwpos bind mount for user %s: %sFN)keyz/home) root_pathtarget
persistent)active_docroottreeuidgid)r0 r1 )mkdir/z/etc/cl.selectorz
/usr/selector)sourcer, z/usr/selector.etcz/etc/cl.selector/z/etc/cl.php.d/z
/etc/cl.php.dz/var/.cagefs/website/z /var/.cagefs
)$r get_pw_by_namer pw_dirpw_uidpw_gidr r r
ValueErrorloggingwarningsortedr lenr full_website_pathr r r add_overlaymountr BINDtyper4 r, options
close_overlayr" USER_MOUNTSr get_website_idappendrenderjoin)r pwhomedirr0 r1 r/ awp_path
awp_path_safeexcgenerated_configsr split_storage_base home_overlaydocroot_mounts jail_configrA s r buildz JailMountsConfigBuilder.build9 sC WW
#
#DI
.
.)9biS "$"455 ''' " (7 ; ; ; MM " " " O=ty#
"MMMMMM " d 53??? D B D BG!+!=gw!O!O - /666wSW L
4 &Ts N 777K
# #L 1 1 1
S ""9>8XzRRR (
Z
Z ""5:u|U\5=YYYY
% %l 3 3 3
OOI 13 7 7 7 $444 N+=* N+=. N+cz?XY`?a?a+c+c- N+`J 4 000%d++G $[%6%6 7 7 QSWXXX &&t,,3I 5 ; ; = =>> . . . W % % % () < < < < . . . OIc
&f------ . )//11 % %G$$$$ . * * +F3GG O =v F F F H )))) . , , +F3GG O =v F F F H ""7++++
]]__F!!4e!<<<#&-..4D0E0EvNNNNNsN A0 0 BB# D
D1
D,,D1*E33 FF8G G#"G#) rY r; pathlibr clcommonr clcommon.cpapir clcommon.cpapi.cpapiexceptionsr ior r
r docroot_validationr r
rT r mount_configr mount_orderingr r mount_typesr r rZ
UserConfigrp r[ r r r| sq & & & & & & 6 6 6 6 6 6 N N N N N N N N $ $ $ $ $ $ , , , , , , F F F F F F F F " " " " " "D, D, D, D, D, D, D, D,NMO3 MOV5F5M MORV MO MO MO MO MO MOr