grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026a Uj.@sddlZddlZddlZddlZddlZddlZddlZddlTddlmZdZ dZ dZ dZ dZ dZejeZde_d e_de_d e_d d Zd dZddZddZddZddZedZedejZddZ ddZ!ddZ"dd Z#d!d"Z$dMd#d$Z%dNd%d&Z&d'd(Z'd)d*Z(d+d,Z)d-d.Z*d/d0Z+d1d2Z,d3d4Z-d5d6Z.d7d8Z/d9d:Z0d;d<Z1d=d>Z2d?d@Z3dAdBZ4dCdDZ5dEdFZ6dGdHZ7dIdJZ8dKdLZ9dS)ON)*)PIPEz0.0.5z/usr/local/lswsFcCstjddddS)Nz3%(asctime)s.%(msecs)03d [%(levelname)s] %(message)sz%Y-%m-%d %H:%M:%S)formatZdatefmt)loggingZ basicConfigr r "/usr/local/lsws/lsns/bin/common.py init_loggingsr cCstjSNthis serverRootr r r r server_rootsrcCs |t_dSr r)rootr r r set_server_rootsrcCstd|S)Nz /lsns/conf/rfileonlyr r r get_conf_file!srcCstd|S)Nz /lsns/bin/rrr r r get_bin_file$srcCst|tddS)Nr)r errorsysexit)msgr r r fatal_error's rz\A[A-Za-z0-9 _.\-+]{1,64}\Zz\A-?\d+[KMGT]?\ZcCsDt|trt|s td|d|vs4|dvr@td||S)zAllowlist package names to prevent path traversal in pkg_to_filename(). cPanel/Plesk allow spaces in plan/package names (e.g. 'Default Domain'). Reject anything with path separators, control chars, or other oddities.zInvalid package name: %rz..).) isinstancestr _PKG_NAME_REmatchrstrippkgr r r validate_pkg_name/s   r'c CsHz t|}Wn"ttfy.td|Yn0|dkrDtd||S)zRCoerce uid to int; reject strings starting with '-' that would be parsed as flags.zInvalid UID: %rrzInvalid UID (negative): %r)int TypeError ValueErrorr)uidnr r r validate_uid;s  r-cCs"t|}t|std||S)z\Allow only numeric cgroup values (optionally suffixed K/M/G/T) before passing to subprocess.zInvalid numeric value: %r)r!_NUMERIC_VAL_REr#r)valsr r r validate_numeric_valueEs  r1cCsDtj|}tj|}||kr@||tjs@td||f|S)zNEnsure realpath(path) is contained under realpath(root). Returns the realpath.z+Path escapes expected root: %r not under %r)ospathrealpath startswithsepr)r3rZrpZrrr r r validate_path_underLs   r7cCsgdS)N)cpuioiopsmemtasksr r r r r get_optionsTsr=c Cs|rjztt|}Wqtyf}z4|s>td||ftd||fWYd}~dSd}~00n\zt|}WnLty}z4|std||ftd||fWYd}~dSd}~00|j t kr|std|j t ftd|j t fdS|dfS)NzError getting UID for %s: %s)NFzError getting name for %s: %sz#Specified uid: %d < minimum uid: %dT) isdigitpwdgetpwuidr( Exceptionrr debuggetpwnampw_uid get_min_uid)Zparamno_fatal user_infoerrr r r get_userWs*rIcCs.g}|D] }t||\}}|r||q|Sr )rIappend)uidsrFusersr+rGZgotr r r get_usersos  rMcCstjdrdSdS)Nz/etc/plesk-releaseTF)r2r3existsr r r r get_pleskws rOcCstr dSdS)Ni'i)rOr r r r get_def_min_uid|srPc Cs<tjdkrtjStd}zt|d}WnXty~}z@tjdur\td||tfdt_tt_tjWYd}~Sd}~00z | }WnTty}z}|jtkr&q|j|vr2q|jdkr>q|||j<||q|S)NZnobody)r?getpwallrDrEpw_namerJ)Zuid_dictZ final_usersrLuserr r r rZs     rZcCs tdS)Nz/lsns/conf/lscntr.txtrr r r r container_filesr]cCs tdS)Nz/conf/httpd_config.confrr r r r ols_conf_filesr^cCs tdS)Nz/conf/httpd_config.xmlrr r r r lsws_conf_filesr_cCs tdS)Nz /lsns/conf/ns_disabled_uids.confrr r r r get_disabled_uid_filesr`cCs tdS)Nz/lsns/conf/packagesrr r r r get_pkg_dirsracCsR|dkrt|tjtsDtjts4tdtjtddtd|S)Nrz3Missing LiteSpeed high level installation directoryimodez/%s.conf)r'r2r3isdirrarrmkdirr%r r r pkg_to_filenamesrfcCs tdS)Nz"/lsns/conf/redis_package_size.confrr r r r get_package_size_filesrgcCstttjstddS)Nz5You must configure LiteSpeed for LiteSpeed Containers)r2accessr]F_OKrr r r r ls_oksrjcCs"tdtjrdt_dStdS)Nz/etc/cagefs/cagefs.mpT)r2rhrirclrjr r r r ls_cl_oksrlcCstjSr )rrkr r r r is_clsrmc Cstd||fz t|tjtjBtjBd}Wn4tyf}ztd||fWYd}~n d}~00zt |dWt |n t |0dS)zCreate or update mtime of `file` WITHOUT following symlinks. Defends against unprivileged users planting a symlink at file (e.g. in $HOME) that would let root touch an arbitrary path.z restart_external %s by touch: %sizError touching %s: %sN) r rBr2rSO_WRONLYO_CREAT O_NOFOLLOWOSErrorrutimerW)fileZdescfdrHr r r touch_restart_externals &ruc Csi}ztjtdkrttd}t|}||dD]V}tj|}|D]}|j |krR|||j <qpqRtj |stj |ddt |dq>|rt ddn&|D] }|j |vrqt |j d d qWn0ty}ztd |WYd}~n d}~00dS) NrrQZ reset_listirbz in lscntr.txtz,/usr/local/lsws/admin/tmp/.lsphp_restart.txtzfor allz/.lsphp_restart.txtzfor homezError managing restart: %s)r2r3getsizer]rSjsonloadrWdirnamepw_dirr[rNrerurAr) rLallZ users_usedrYdatarsZdironlyr\rHr r r restart_externals.          r}c Csi}i}td}g}|D]}t|dkr:|dddkst|dkrV|dddkst|dkr|dddks|dddkrqd |}t|}t|jd krtd |d t|| ||||<q|D]\}d }|rd}|D]D} || krqt|t| kr|| dt|kr| | d }qqqq|D]D}t ||j } t ||j } | |vrni|| <||| | <q8tdt|dt|||fS)Nz/devrZloopZcdromrZdmsrz/dev/rz filename: z statinfo: TFzFinal devices: z Block Devices: )r2listdirlenstatS_ISBLKst_moder rBr!rJremovemajorst_rdevminor) Z block_devicesZ statinfo_devfilesZdevicesrsfilenameZstatinfoZdeviceZretryinnerrrr r r get_devicess@ d   $   rcCs|dkr dSt|}|dkr&d}d}n:|dkr8d}d}n(|dkrJd}d}n|dkr\d}d }n|St||d krd ||tt||d d |f}nd |||f}tt||kr|Std tt|||f|S)NrT@GMK z%d.%d%sz%d%sz%s != %s use %s)floatroundr(r!int_num_valuesr rB)valstrr/ZdivisorZ qualifierZstr_numr r r str_num_values#s.(rc Cs"|dks|dkrdS|r$t|St|dkrr(rrupperisalpharrAr rB)rsuffixprefixZprefZ multiplierZflr r r r>s:     r)F)F):rwr r2r?re subprocessrrrVERSIONZ OPTION_CPUZ OPTION_IOZ OPTION_IOPSZ OPTION_MEMZ OPTION_TASKSmodules__name__rrTrrRrkr rrrrrcompiler" IGNORECASEr.r'r-r1r7r=rIrMrOrPrErZr]r^r_r`rarfrgrjrlrmrur}rrrr r r r s^8        "