Edit: /opt/dedrads/__pycache__/modsec_disable.cpython-313.pyc (15838B)
}j, D S r SSKrSSKrSSKrSSKJr SSKrSSKrSSKJ r J
r
J r \" S5 r S\
4S jrS\S \\ S
\S \S \\ 4
S
jrS\S\S\4S jrS\S\S\4S jrS\S\4S jrS\S\4S jrS rS rS\
4S jrS rS rS\4S jr S r S r \ S :X a \ " 5 gg) z?Disable modsec rules for Cpanel or PlatformI users and domains. N)Path)redgreenyellowz!/etc/ansible/wordpress-ultrastackreturnc ( [ R " SS/SSSS9n SW R ; aE U R R S 5 S
nUR 5 S nUR S 5 S $ [ [ S
5 5 [
R " S5 g! [ a- [ [ S5 5 [
R " S5 N[ R a- [ [ S5 5 [
R " S5 Nf = f)zGet Apache version apachectlz-vT)capture_outputtextcheckz7apachectl not found. Please ensure Apache is installed. z Failed to get Apache version.zServer version
r /z Unable to parse Apache version.N)
subprocessrunFileNotFoundErrorprintr sysexitCalledProcessErrorstdoutsplit)result version_lineversions /opt/dedrads/modsec_disable.pyget_apache_versionr s
$ 4t
6==( }}**403 $$&q)}}S!!$$ #/
01HHQK
cKLM ( (
c123 s B 4D=DD modsec_filerule_ids disable_allresetremove_rule_idsc 2 U R R SSS9 U R 5 ( a U( a U R SSS9 U( a U R S5 gU( a U H n[ X5 M gU( a U H n[ X5 M gg)z3Update modsec.conf file based on provided argumentsTparentsexist_ok utf-8encodingSecRuleEngine Off
N)parentmkdirexists
write_text disable_rule remove_rule)r r r! r" r# rule_ids r update_modsec_configurationr4 $ s TD 9 5 rG 4 45 G . &G - '
r3 c SU 3n[ R " [ R " U5 S35 n U R SSS9 nU Hy nUR S5 ( a% [ [
SU SU S 35 5 S
S
S
5 g UR U5 ( d MV [ [
S U S
U S 35 5 S
S
S
5 g S
S
S
5 U R SSS9 nUR U S35 S
S
S
5 [ [ S U SU 35 5 g! , ( d f NV= f! [ a Nef = f! , ( d f NJ= f)zKAdd rules to modsec.conf, checks if the rule exists and skips it if
it doesSecRuleRemoveById \br+r) r* SecRuleEngine Offz3Modsec is disabled for all rules, so not disabling z in .NFRule z! already disabled, not adding to ar z added to file: T) recompileescapeopen
startswithr r matchr writer )r r3 rule_textmatcherfilelines r r1 r1 < sQ %WI.IjjRYYy 1 2"56G
dW
5 ??#677 ))0 k]! E ! 6
5 ==&& #G9 -))4
Q 8 !# 6
5 6(
# 0D
i[#$
1 %%y 0
>
?@ / 6
5$
0 0sY D% 8D<D% D D9D% DD% D5
D" D% "D% %
D21D25
Ec ( SnSU 3n[ R " [ R " U5 S35 n U R SSS9 nUR 5 nUR S5 UR
5 U H. nUR U5 ( a SnM UR U5 M0 S S S 5 U( a [ [ S
U S U 35 5 U$ [ [ S
U S U 35 5 U$ ! , ( d f NM= f! [ a N\f = f)
z"Remove a rule from the modsec fileFr7 r8 r9 r) r* r TNr< z removed from file: z was not in file: )
r> r? r@ rA readlinesseektruncaterC rD r r r r )r r3 changedrE rF rG contentsrH s r r2 r2 \ s G$WI.IjjRYYy 1 2"56G
dW
5~~'H IIaL MMO ==&& "GJJt$ ! 6
eeG9$8
FGH N fuWI%7 }EFG N 6
5
s0 D A&C3,D 3
D=D D
DDc V SnU R SSS9 nUR 5 nUR S5 UR 5 U HD nUR S5 ( d UR S5 ( a SnM3 UR U5 MF S S S 5 U$ ! , ( d f U$ = f) NFr9 r) r* r SecRuleRemoveByIdr: T)rA rJ rK rL rB rD )r rM rG rN rH s r _resetrQ t s G $ 1T>># !
D 233t#8 8
4
2 N
2 1 Ns A
BB
>C
C userc [ R " SSU S/SS9 g! [ a g[ R a [ [ SU S35 5 gf = f) zRun ngxconf if it existsz/usr/bin/ngxconf-uz-rdTrX z/usr/bin/ngxconf -u z -rd failedN)r r OSErrorr r r )ra s r cpanel_run_ngxconfre sV =*D$>dK
( ( =
c(k:;<=s
A+AAc [ S5 n[ UU R U R U R U R
S9 U R ( a [
U5 [ 5 g)z?Function to handle platformI check and set the modsec file pathz8/etc/httpd/modsecurity.d/activated_rules/z-mycustom.conf)r r r! r" r# N)r r4 ruleoffr" droprS r` )argsmodsec_file_paths r platform_i_modsecrl sM VW $HHjj zz"#34 r5 c [ 5 nUR S5 ( a [ S5 n[ S5 nO[UR S5 ( a [ S5 n[ S5 nO.[ [ SU S35 5 [
R " S 5 U R ( a? WU R - U R - S
- nWU R - U R - S
- nO$WU R - S
- nWU R - S
- nUR R S S S 9 UR R S S S 9 UR S S
9 UR S S
9 SnU R H+ n[ XG5 =( d Un[ XW5 =( d UnM- U R H+ n[ XG5 =( d Un[ XW5 =( d UnM- U R ( a U R ( a) [# U5 =( d Un[# U5 =( d UnOF[# X R - S
- 5 =( d Un[# X0R - S
- 5 =( d UnU R$ ( a S n[' U5 [' U5 U( a [) U R 5 [+ 5 g[ [- S5 5 g! W( a [) U R 5 [+ 5 f [ [- S5 5 f = f)z[Cpanel function that sets the modsec.conf file based on the flags/args
passed to the scriptz2.4z'/usr/local/apache/conf/userdata/std/2_4z'/usr/local/apache/conf/userdata/ssl/2_4z2.z%/usr/local/apache/conf/userdata/std/2z%/usr/local/apache/conf/userdata/ssl/2zUnsupported Apache version r; r
z modsec.confTr% )r' Fz Skipping reload; nothing changedN)r rB r r r r r domainra r- r. touchrg r1 ri r2 r" rS rh disable_all_rulesre r[ r )rj apache_versionstd_dirssl_dirstd_confssl_confrM r3 s r
cpanel_modsecrv sl 5>+- $ $U + +DEGDEG
&
&t
,
,BCGBCG #3N3C1EF G HHQK ;; $tyy 04;; > NH $tyy 04;; > NH $tyy 0= @H $tyy 0= @H dT : dT :%%yyG"85@G"85@G ! yyG!(4?G!(4?G ! ::{{4X>I'4X>I' /w/B]/RS
/w/B]/RS 88G h ' h ' tyy ) ! # &;< = tyy ) ! # &;< =s J
K =Lc [ U 5 U R SSS9 nUR S5 SSS5 [ [ SU 35 5 g! , ( d f N&= f! [
a gf = f)z,Function to disable all rules in modsec.confr= r) r* r, Nz All rules disabled in file: )rQ rA rD r r r )r rG s r rp rp sg
{
cG
4 JJ, - 5
e2;-@AB 5
4
s' A A A
A A
A-,A-c [ R " [ S9n [ R 5 ( d? U R SS[ SSS9 U R SS[ S S
9 U R S S S
SS9 U R SSS
SS9 U R SS[ S/ SS9 U R SSS
SS9 U R SS S[ / S S 9 U R 5 $ ) zParse sys.argv) descriptionrc z--userTzCPanel user this is for)typerequiredhelpz-dz--domainz The domain to modify rules for)rz r| z-az--all
store_truez)Apply changes to all domains for the user)actionr| z-oz--offzDisable all rulesz-rz--rule+z Specific rule IDs to disable)rz nargsdefaultr| z-Rz--resetz Reset the modsec configurationz-Dz--dropz>
cQRS s/ E< EE+"E< +
E95E< 9E< <>F=<F=__main__) r r> r r pathlibr r r
rads.colorr r r r r r listr boolr4 r1 r2 rQ rS r[ r` re rl rv rp r r __name__rZ r5 r r s E
) )
5
6
C (..3i. . .
#Y .0 d S T @T C D 0
D T "
D =S = 8>v
4
! H8 zF r5