dKjwi d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
mZmZ d dlmZ d dlmZ d dlmZ ej d ZdZd d
d d d
dZe G d d Z G d d ZdS ) N) dataclass)OptionalDictList)drop_user_privileges) socket_utils)run_in_cagefs_if_neededz^[1-9][0-9]*\Zz&/opt/alt/php-xray/cl-smart-advice-user object_cachecdn critical_cssimage_optimizationsite_optimization) OBJECT_CACHECDNCPCSSIMAGE_OPTIMIZATIONSITE_OPTIMIZATIONc e Zd ZU eed< eed< eed< eed< eed< eed< dZe e ed< dZ
e e ed < d
Z eed < dS ) EnableFeatureTaskuiddomainwp_pathfeature
ignore_errorstimeout_timestampN advice_idpidF in_progress) __name__
__module__ __qualname__int__annotations__strlistboolr r r r (py/clwpos/daemon_subscription_handler.pyr r ( s HHH
KKK
LLL MMM $Ix}### C#
K r( r c e Zd ZdZdZdZdZdZdZdZ dZ
dd Z e d
Z
e d Zd Zd
Zd Zd Zd Zd Zd Zddej dej fdZdej dedefdZdej dedefdZ dS ) PendingSubscriptionWatcherzr
Listen to set-suite and user events in order to automatically
enable module when suite is purchased.
g ? Nc t | _ t j | _ |pt j t | _ d S N) dict_pending_enable_tasks threadingRLock _tasks_locklogging getLoggerr _logger)selfloggers r) __init__z#PendingSubscriptionWatcher.__init___ s? JN" %?,, <!28!z=PendingSubscriptionWatcher._known_features..t s$ III!##%%IIIr( )%clwpos.optimization_features.featuresr@ r? s r) _known_featuresz*PendingSubscriptionWatcher._known_featureso s, TSSSSSII/HIIIIr( c \ | sdS t j | d dS # t $ r Y dS w xY w)z;True if a child pid has been assigned and is still running.Fr T)oskillOSError)r s r)
_pid_alivez%PendingSubscriptionWatcher._pid_alivev sL 5 GCOOO4 55 s
++c \ | j 5 t | j D ]\ }}|D ]d}|j t j k r | |j r:|j rd|_ d|_ | | e|s| j
| | j dt d | j D t | j ddd dS # 1 swxY w Y dS )zE
Cleanup list of pending tasks by removing outdated.
FNzCCleanup of pending tasks. Still active: %d task(s) across %d uid(s)c 3 4 K | ]}t | V d S r2 len)rD taskss r) zDPendingSubscriptionWatcher._cleanup_pending_tasks.. s( PP5CJJPPPPPPr( )r7 r% r4 itemsr timerM r r removepopr: infosumvaluesrQ )r; r
pending_tasks pending_tasks r) _cleanup_pending_tasksz1PendingSubscriptionWatcher._cleanup_pending_tasks s
&*4+E+K+K+M+M&N&N
8
8"]$1 7 7L#5DD |'788 ! $/ 038 0+/ (!(( 6666$ 8.223777 L UPPD,F,M,M,O,OPPPPPD.//
/ s D D!!D%(D%c | j dd | t |d| j }| j d| ng# t
j $ r0}| j d|j |j Y d }~n-d }~wt $ r | j d Y nw xY w| j dd | d S ) Nz
Running %s Tchecktimeoutz#Command succeded with output:
`%s`zDUnable to activate feature in background. Stdout is %s. Stderr is %sz(Unable to activate feature in backgroundz Finished %s) r: rX joinr _CHILD_WAIT_TIMEOUT
subprocessCalledProcessError exceptionstdoutstderr Exceptiondebug)r; argsoutputes r) _run_and_log_resultsz/PendingSubscriptionWatcher._run_and_log_results s ,777
O -TtG_```F L Df M M M M, L " "VXYX`bcbj
O O O L " "#M N N N N N O =#((4..99999s 2A# #C2&B 'CCc l t t ddt | gd| j j }t j | }n# t j $ r | j
d| Y dS t j $ r2}| j
d||j |j Y d}~dS d}~wt t f$ r | j
d| Y dS w xY wt |t r| d d
k r | j
d || dS |d d
d }n3# t$ t f$ r | j
d| Y dS w xY wt& | }| | j
d|| |S )a
Resolve advice_id -> the AWP feature it really belongs to via the
read-only `cl-smart-advice-user details` query, run in the (already
privilege-dropped) caller's context so php-xray's owner check applies.
Returns the AWP feature name, or None if the advice cannot be resolved
(owner mismatch / unknown id / unparsable response / unknown type).
The caller MUST treat None as "deny" - fail closed.
details --advice_idTr` zBadvice details query timed out for advice_id=%s; refusing to applyNzHadvice details query failed for advice_id=%s. Stdout is %s. Stderr is %sz@advice details query returned unparsable output for advice_id=%sresultsuccessz ! X 77GGL#|;K'K'K !!wN
% %'A7M[^_c_m[n[n&o p p p p p
[ X\
/
/ !!"NPQRRR) K L % 2JJ 0111))#....
/
/
LV W W W W Wr( c |j rd}nm|j sd}nc| }t t |j |z }t dt
|t | }| j |z | j z S )a
Worst-case wall-clock the forked child may legitimately need.
The child (``_run_enable_command``) runs one bounded CLI invocation per
feature sequentially, each capped at ``_CHILD_WAIT_TIMEOUT`` by its own
subprocess timeout. The advice path runs TWO sequential bounded calls -
the read-only ``cl-smart-advice-user details`` resolve followed by the
``apply`` - so it is budgeted for two per-CLI windows, not one.
For the plain enable path the number of invocations is derived from the
count of DISTINCT KNOWN features, clamped to the size of the known-feature
set. task.feature is attacker-supplied; although the IPC path now dedups
and caps it, deriving the budget from |distinct known features| keeps it
capped by a small server constant (_CHILD_WAIT_TIMEOUT * |known_features|
+ margin) regardless of input.
) r r rH rQ setmaxminrd _CHILD_WAIT_MARGIN)r; r invocationsknown_featuresdistinct_knowns r) _child_runtime_budgetz0PendingSubscriptionWatcher._child_runtime_budget s " > KKK KKK ! 1 1 3 3N T\!2!2^!C D DN a^S 5H5H!I!IJJK'+58OOOr( c T t j |d dS # t $ r Y dS w xY w)z?Reap a child pid that is known to have exited, ignoring ECHILD.r N)rJ waitpidrL )r; r s r) _reap_childz&PendingSubscriptionWatcher._reap_child sA JsA DD s
''c t j |t j \ }}n# t $ r Y dS w xY w|rdS t j |k rnt j | j k| j d| t j |t j n&# t $ r | | Y dS w xY wt j | j
z }t j |k ri t j |t j \ }}n# t $ r Y dS w xY w|rdS t j | j t j |k i| j d| t j |t j n# t $ r Y nw xY w| | dS )a
Wait for a forked child to exit, bounded by ``deadline`` (epoch).
Polls with WNOHANG instead of blocking on os.waitpid(pid, 0): a child
running the user CLI against an attacker-controlled wp_path (e.g. a FIFO
or an unresponsive path) could otherwise hang forever and stall the
sequential pending-task loop for every other user. On deadline the child
is SIGTERM'd, given a short grace, then SIGKILL'd, and reaped to avoid a
zombie.
TNzzEPendingSubscriptionWatcher.suite_allowed_callback.. s$ %[%[%[AJZAZAZaAZAZAZr( zCunable to activate feature in background: feature=%s is not allowedc g | ]}|v | S r' r' r s r) r zEPendingSubscriptionWatcher.suite_allowed_callback.. s$ 'Y'Y'Ya1HXCXCXCXCXCXr( rs rt ) r] r7 r% r4 rT r rM r rJ forkrL r: rg r rX rU r r rV closeclwpos.feature_suitesr r pwdgetpwuidpw_namer r _exitr r (send_dict_to_socket_connection_and_close)r; r r snapshotr rR r fpr r
disallowedrE responser s @r) suite_allowed_callbackz1PendingSubscriptionWatcher.suite_allowed_callbackV s ##%%%
@ @D 6 < < > >??H @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ # W 8 W 8JC
U O
$ O
$ % , ,' !4??48+D+D ! , , , , , , , (,D$, , , , , , , , , , , , , , , BB L**[]a]e ) 1 1#'+0(1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 H 2$3 ))*MrRRR#% $(9;;1K1KD1Q1Q#Q ,,R::: ))*OQSTTT ! - 3 3/4D ,
$u}} % T 2 2 23 3 3 3 3 3 3 3 3 3 3 3 3 3 3T - 3 3/4D ,
$u}} % T 2 2 23 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3$(4 ) / / 1 1 1)//111MMMMMM -S\$(-C-C-K_cmqrrrr+>+>tx+H+H(%[%[%[%[ %[%[%[
!+ x xA L - -.suv w w w w'Y'Y'Y'Y4<'Y'Y'Y
$~ #dl # HQKKK " 007GHHH !
8
8$444T=WX[=\4 237
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8 #I.=>OQYZZZZZs 'AAA<#B>+B>>C C
C 1D8D* D8*D.
.D81D.
2D87D8?A. s( ?_?_1A?_?_?_?_?_?_r( )defaultr r errorzfeature list is too long)rs context,zunknown feature: %sr zinvalid advice_id formatr zwp_path is too longz../z1invalid wp_path: must not contain '..' componentsr z'domain and wp_path must be set togetherc h | ]\ }}|S r' r' )rD dr s r) rF zFPendingSubscriptionWatcher.add_pending_upgrade_task.. s @@@$!QA@@@r( z"domain does not belong to the userc 3 K | ][}|j k oK|j k o@t |j t k o|j k o|j d k V \dS )r N)r r r r r r )rD existingr r requested_featuresr r s r) rS zFPendingSubscriptionWatcher.add_pending_upgrade_task.. s 6) L $/L())S1C-D-DDL &)3L *l?.KK r( rs rt ztoo many pending tasksr )r r r r r r r z7Successfully added pending upgrade subscription task %s) clcommon.cpapir r rH rQ r r r r% r3 fromkeyssplitr r$
_ADVICE_ID_REmatch_MAX_WP_PATH_LENGTHr& r7 r] r4 any_MAX_PENDING_TASKS_PER_UIDr r r" rU _FEATURE_STATUS_CHECK_TIMEOUTr: rX )r; r r r r r r max_feature_string_lengthr rE username user_domainspending duplicater r r r s ` @@@@r) add_pending_upgrade_taskz3PendingSubscriptionWatcher.add_pending_upgrade_task s HHHHHHHH --// %($7$73?_?_P^?_?_?_ij;k;k;kno;o$p! |I& ' '*C C C(/OQYZZZZZs ?C-L88L<?L<r c ( | j 5 | | j |g }t fd|D }d d d n # 1 swxY w Y dt | d}t
j || d S )Nc 3 * K | ]
}|j v V d S r2 )r )rD r\ r s r) rS zEPendingSubscriptionWatcher.get_upgrade_task_status... s+ \\l'\%99\\\\\\r( rt )rs r )r7 r] r4 r r r& r r )r; r r r r[ r r s ` r) get_upgrade_task_statusz2PendingSubscriptionWatcher.get_upgrade_task_status* s
] ] ' ' ) ) ) 6 : :3 C CM\\\\m\\\\\G ] ] ] ] ] ] ] ] ] ] ] ] ] ] ]
%.$w--HH=>OQYZZZZZs A A A$'A$r2 ) r r r! __doc__r r r r r rd r r= staticmethodrH rM r] ro r r r r r socketr r3 r" r r$ r r' r( r) r+ r+ H s %(!!# = = = = J J \J \ B
:
:
: , , ,\"X "X "XHP P P: - - - ^e[ e[
e[V\Vc e[ e[ e[ e[Nk[&- k[W[ k[be k[ k[ k[ k[Z[ [S [[^ [ [ [ [ [ [r( r+ ) ry r8 rJ r rer r re r5 rU dataclassesr typingr r r clcommon.clpwdr clwposr clwpos.utilsr compiler rx r r r+ r' r( r) r s}
! ! ! ! ! ! ' ' ' ' ' ' ' ' ' ' / / / / / / 0 0 0 0 0 0
,--
E #
. - >i[ i[ i[ i[ i[ i[ i[ i[ i[ i[r(