/usr/lib/fixperms/__pycache__
Edit: /usr/lib/fixperms/__pycache__/fixperms_cpanel.cpython-313.pyc (11620B)
6gib! S r SSKrSSKrSSKJrJr SSKJrJ r SSK
J r J r J
r
SSKrSSKJr SSKJr SSKJr " S S
\5 rg) Fixperms class for cPanel N)quotejoin)CalledProcessError
check_call)S_ISLNKS_ISREGS_ISDIR)PermMap)Args)IDCachec ^ \ rS rSrSrS\S\S\4U 4S jjrS\S\ 4S jr
S
r S r SU 4S jjr
S
\R S\4U 4S jjrS\S\4S jrS rSrU =r$ )
CpanelPermMap r idsargsuserc > [ TU ] UUU[ R " U5 R SUS4S9 [ R
S:H U l U R R [ R R U R S5 5 U R R [ R R U R S5 5 / U l
U R U R pTU R! SSXE45 U R! S S
XE45 U R! S S S
5 U R! SSXE45 U R! SSXE45 U R! SSXE45 U R! SSXE45 U R! SSXE45 U R! SSXE45 U R! SS XE45 [ R R U R S5 [ R R U R S5 1U l S U R$ S 3S /n[& R( " S R U5 5 U l U R [ R R S U R, 5 [ R R S!U R, 5 [ R R S"U R, 5 S#S$S%S&S'1 U l g )(Ni nobody)r r r all_docroots
docroot_chmod
docroot_chownsharedmailetcz"\/\.(?:accesshash|pgpass|my\.cnf)$) Nz\/\.imh\/nginx(?:$|\/))i i z\/\.imh(?:$|\/))i )r r z\/\.ssh(?:$|\/))r i z\/\.pki(?:$|\/))Ni z
.*\/\.env$z\/.*\.(?:pl|cgi)$)r N$)Ni zx\/.+\/(?:(?:wp-config|conf|[cC]onfig|[cC]onfiguration|LocalSettings|settings)(?:\.inc)?\.php|local\.xml|mt-config\.cgi)$) Nz\/z.cphorde/meta/latestwwwz(?:z\/(?:etc|mail|logs)\/)z (?:.*\/\.ea-php-cli\.cache$)|z/usr/local/apache/domlogsz/etc/apache2/logs/domlogsz/var/log/apache2/domlogsz /home/shrusr/SharedHtDocsDirz/var/lib/mysql/mysql.sockz /var/run/postgres/.s.PGSQL.5432z/run/postgres/.s.PGSQL.5432z:/usr/local/cpanel/base/frontend/paper_lantern/styled/retro)super__init__radsUserData all_rootsIMH_ROLE is_sharedskipaddospathr homedir bad_linksuidgidadd_rule
safe_link_srchome_rerecompilesafe_link_src_rer safe_link_dest)selfr r r r/ r0 r6 __class__s $/usr/lib/fixperms/fixperms_cpanel.pyr# CpanelPermMap.__init__ sO
t,66 *
(2
bggll4<<89
bggll4<<78 88TXXS
1=3*
/ #L
(.&A
(.3*E
(-#D
m]SJ?
*MC:F
c=3*5
+
J
e^cZ8
GGLL '= > GGLL u -
4<<. 6 7 +
!#
3884D+E F
LL GGLL4dii @ GGLL4dii @ GGLL3TYY ? * ' - ) H
r, returnc U R ( d gXR ; a g[ R R U5 U R
; a gU R R U5 ( a g[ U5 S[ [ R " U5 5 3nU R R U5 U R R SU5 [ R " U5 g)z6Determine if a symlink is "unsafe" for a shared serverFz -> z*Potentially malicious symlink detected: %sT)r( r2 r+ r, realpathr7 r6 matchr readlinkr. appendlogwarningunlink)r8 r, bad_links r: link_unsafeCpanelPermMap.link_unsafeW s ~~ %% %
77 D !T%8%8 8 & &t , ,Dk]$uR[[->'?&@A h' ExP
$r< c U R R ( a gU R SU R 5 U R SU R R S5 R 5 SSSU R /nU R R S[ U5 5 U R R ( a g [ U5 g! [ [ 4 a' U R R S[ U5 5 e f = f) zRun /scripts/mailpermNr r z"/usr/local/cpanel/scripts/mailpermz--skiplocaldomainsz
--skipmxcheckz Running: %szError running: %s)r skip_mail mailperm_fixr0 r getgrnamgr_gidr rC debugcmd_joinnoopr r OSErrorerror)r8 cmd_argss r: mailpermsCpanelPermMap.mailpermsg s 99 &$((+ %!2!26!:!A!AB 0 II
}hx&89 99>> x "G, HHNN.0B C s C 7Dc SnU R S3SU R S4SU R S3SSS4SU R S3SSS4/nU H` u p4pV[ R R X5 n [ R
" U5 nU R XxXE5 U R XxU5 Mb g
! [ a U R R S U5 M [ a& n U R R U 5 S
n A M S
n A ff = f) z9Fix ownership/permissions on /var/cpanel/databases/ filesz/var/cpanel/databasesz.jsonr r grants_z.yamlr z.cachez%s does not exist, skippingN)
r r0 r+ r, r lstatFileNotFoundErrorrC rN rQ rR lchownlchmod)
r8 db_dirtargetsfilenamer/ r0 moder, statexcs
r: fix_cpanel_db_files!CpanelPermMap.fix_cpanel_db_files| s ( {%
!TXXu 5tyyk
'Au 5tyyk
(!Q 6
)0 $H377<<1D
xx~
KKC - KKD ) )0 %
[ TU ] 5 U R 5 U R 5 U R 5 g N)r" fixpermssend_strrT rb )r8 r9 s r: rf CpanelPermMap.fixperms s-
"r< r` c > [ UR 5 ( a U R U5 ( a g [ TU ] X5 g re )r st_moderG r"
check_path)r8 r` r, r9 s r: rk CpanelPermMap.check_path s2 4<< T%5%5d%;%;
4&r< subdirdir_gidc , [ R R U R U5 nU R R S5 R nU R U1nU R USS9 GH u pg[ UR 5 ( a UR U R U4; a SnO U R nU R UR :w a; UR S: a+ U R R! XvU R U4S5 M U R# XvU R U5 M [% UR 5 ( aP UR U; a U R# XvU R S5 GM U R# XvU R U5 GM) [' UR 5 ( aC U R) U5 ( a GM\ U R# XvU R U R 5 GM U R* R- SU5 GM g)z6Fix permissions not caught by cPanel's mailperm scriptr T) ignore_skips Nz#Skipping unexpected path type at %s)r+ r, r r- r rL rM r0 walkr rj st_gidr/ st_uidst_nlink
hard_linksr* rZ r
r rG rC rD ) r8 rm rn top_dirmail_giddir_gidsr` r, r0 s r: rK CpanelPermMap.mailperm_fix sv '',,t||V488$$V,33HHg& ))G$)?JDt||$$;;488X"66 C ((C88t{{*t}}q/@OO''TXXsOTJ D#6 && ;;(*KKDHHb9KKDHHg> &&##D)) D$((; !FM/ @r< c U R ( d gSR U R 5 nSnU R R S5 U R R
( a g [ R " SSU R 3U SU 3SS 9 g! [ aK nU R R [ U5 5 U R R S
S U5 SnAgSnAff = f) zASend an email to str@imhadmin.net if malicious symlinks are foundN
zFixperms detected and removed the following symlinks. While these symlinks have been removed from the account in question the account requires further investigationz/An STR will now be sent for review by T2S staffzstr@imhadmin.netzAUTO STR: bad symlinks on z
T)to_addrsubjectbodyerrsz4Failed to send STR. An escalation must be sent to anz2available T2S. Include the following information
) r. r rC infor rP r$
send_emailr rQ rR str)r8 r. topra s r: rg CpanelPermMap.send_str s ~~ IIdnn-
5
GH 99>>
OO*4TYYK@uD ,
HHNN3s8 $ HHMMFF
s ()B
C' AC""C')r. r( r7 r2 r6 )r= N)__name__
__module__ __qualname____firstlineno____doc__r
r r r# boolrG rT rb rf r+ stat_resultrk intrK rg __static_attributes__
__classcell__)r9 s @r: r r s{ #D
G D
4 D
s D
L **,# 'r~~ 'S '
3 < r< r )r r+ r4 shlexr r rO
subprocessr r r` r r r
r$
fixperms_baser fixperms_clir fixperms_idsr
r r< r: r s4 ) 5 * * ! GG Gr<