|
Server : LiteSpeed System : Linux host 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : idnco5810 ( 1093) PHP Version : 8.2.29 Disable Function : NONE Directory : /usr/local/CyberCP/plogical/__pycache__/ |
Upload File : |
o
�k�f�� � @ s d dl Z d dlZd dlZd dlZd dlmZ d dlmZ ddlm Z ej
� d� d dl Z e j
�dd� e �� d d lmZmZ d d
lmZ d d lmZ d d lmZmZmZmZ d dl Z d d
l m Z m Z d dl m!Z! ddl"m"Z# d dl$m%Z% d dl&m'Z' G dd� d�Z(dS )� N)� ApacheVhost)�
PDNSStatus� )�ProcessUtilities�/usr/local/CyberCP�DJANGO_SETTINGS_MODULEzCyberCP.settings)�
Administrator�ACL�� HttpResponse)�Package)�Websites� ChildDomains� aliasDomains� DockerSites)�call�CalledProcessError)�split)�CyberCPLogFileWriter)�
Containers)�compilec @ s� e Zd ZdZdZdZedd� �Zedd� �Zedd � �Z ed
d � �Z
ed d
� �Z edd� �Z edd� �Z
ed|dd��Zedd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed}d!d"��Zed#d$� �Zed%d&� �Zed'd(� �Zed)d*� �Zed+d,� �Zed-d.� �Zed/d0� �Z ed1d2� �Z ed|d3d4��Z ed5d6� �Z ed7d8� �Z ed~d:d;��Z!ed<d=� �Z"ed>d?� �Z#ed@dA� �Z$edBdC� �Z%edDdE� �Z&edFdG� �Z'edHdI� �Z(edJdK� �Z)edLdM� �Z*edNdO� �Z+edPdQ� �Z,edRdS� �Z-edTdU� �Z.edVdW� �Z/edXdY� �Z0edZd[� �Z1ed|d\d]��Z2ed^d_� �Z3ed`da� �Z4edbdc� �Z5eddde� �Z6edfdg� �Z7edhdi� �Z8edjdk� �Z9edldm� �Z:edndo� �Z;edpdq� �Z<edrds� �Z=edtdu� �Z>edvdw� �Z?edxdy� �Z@edzd{� �ZAdS )�
ACLManagera0 {"adminStatus":1, "versionManagement": 1, "createNewUser": 1, "listUsers": 1, "deleteUser":1 , "resellerCenter": 1, "changeUserACL": 1, "createWebsite": 1, "modifyWebsite": 1, "suspendWebsite": 1, "deleteWebsite": 1, "createPackage": 1, "listPackages": 1, "deletePackage": 1, "modifyPackage": 1, "createDatabase": 1, "deleteDatabase": 1, "listDatabases": 1, "createNameServer": 1, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, "createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, "dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1, "restoreBackup": 1, "addDeleteDestinations": 1, "scheduleBackups": 1, "remoteBackups": 1, "googleDriveBackups": 1, "manageSSL": 1, "hostnameSSL": 1, "mailServerSSL": 1 }a1 {"adminStatus":0, "versionManagement": 1, "createNewUser": 1, "listUsers": 1, "deleteUser": 1 , "resellerCenter": 1, "changeUserACL": 0, "createWebsite": 1, "modifyWebsite": 1, "suspendWebsite": 1, "deleteWebsite": 1, "createPackage": 1, "listPackages": 1, "deletePackage": 1, "modifyPackage": 1, "createDatabase": 1, "deleteDatabase": 1, "listDatabases": 1, "createNameServer": 1, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, "createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, "dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1, "restoreBackup": 1, "addDeleteDestinations": 0, "scheduleBackups": 0, "remoteBackups": 0, "googleDriveBackups": 1, "manageSSL": 1, "hostnameSSL": 0, "mailServerSSL": 0 }a1 {"adminStatus":0, "versionManagement": 1, "createNewUser": 0, "listUsers": 0, "deleteUser": 0 , "resellerCenter": 0, "changeUserACL": 0, "createWebsite": 0, "modifyWebsite": 0, "suspendWebsite": 0, "deleteWebsite": 0, "createPackage": 0, "listPackages": 0, "deletePackage": 0, "modifyPackage": 0, "createDatabase": 1, "deleteDatabase": 1, "listDatabases": 1, "createNameServer": 0, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, "createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, "dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1, "restoreBackup": 0, "addDeleteDestinations": 0, "scheduleBackups": 0, "remoteBackups": 0, "googleDriveBackups": 1, "manageSSL": 1, "hostnameSSL": 0, "mailServerSSL": 0 }c C s | d dkrdS ||krdS dS �N�adminr r � ��
currentACL�owner�userr r �"/usr/local/CyberCP/plogical/acl.py�VerifySMTPHost7 s
zACLManager.VerifySMTPHostc C s$ | d dkrdS |j j|krdS dS r )� domainOwner�name)r �record�domainr r r �VerifyRecordOwner@ s
z ACLManager.VerifyRecordOwnerc C s> t jj|d�}tjj|d�}| d dkrdS |j|kr dS dS )N)� aliasDomain�r$ r r r )r �objects�getr
�master)r r& r* �aliasOBJ� masterOBJr r r �AliasDomainCheckJ s
zACLManager.AliasDomainCheckc C s" |d dkrdS | j |krdS dS r )r )�packager r r r r �CheckPackageOwnershipU �
z ACLManager.CheckPackageOwnershipc C s dd l }|�| |�r dS dS )Nr r )�re�match)�
RegexCheck�valuer1 r r r �
CheckRegEx^ s zACLManager.CheckRegExc C s^ z(d} t | �}|�� }|�dd�d }t�t dd��� �}|d |kr&W dS W dS Y dS )N�/etc/cyberpanel/machineIP�
r r z/home/cyberpanel/cluster�r�failoverServerIP)�open�readr �json�loads)�ipFile�f�ipData� ipAddress�configr r r � FindIfChildh s zACLManager.FindIfChildc C s< zd} t | �}|�� }|�dd�d W S ty Y dS w )Nr6 r7 r r �
192.168.100.1)r: r; r �
BaseException�r> r? r@ r r r �fetchIPy s �zACLManager.fetchIPNc C s( |d kr t d�}n|}|�| �rdS dS )Nz[\sa-zA-Z0-9_-]+r r )r � fullmatch)r4 �regex�verifierr r r �
validateInput� s
zACLManager.validateInputc
C s4 z}| � d�dksx| � d�dksx| � d�dksx| � d�dksx| � d�dksx| � d�dksx| � d�dksx| � d �dksx| � d
�dksx| � d �dksx| � d �dksx| � d
�dksx| � d�dksx| � d�dksx| � d�dksx| � d�dksx| � d�dkr{W dS W dS ty� } zt�dt|� � W Y d }~d S d }~ww )N�;���z&&�|z...�`�$�(�)�'�[�]�{�}�:�<�>�&r r z %s. [32:commandInjectionCheck])�findrE �logging� writeToFile�str)r4 �msgr r r �commandInjectionCheck� s 88.��8 ��z ACLManager.commandInjectionCheckc
C s� t jj| d�}i }|j|d< |j|d< zd}t|�}|�� }|�dd�d }W n ty; } zd}W Y d }~nd }~ww ||d < |j|d
< t �
|j j �}|d rVd|d < |S d|d < |d
|d
< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d< |d |d < |d |d < |d |d < |d |d < |d |d < |d! |d!< |d" |d"< |d# |d#< |d$ |d$< |d% |d%< |d& |d&< |d' |d'< |d( |d(< |d) |d)< |d* |d*< |d+ |d+< |d, |d,< |d- |d-< |d. |d.< |d/ |d/< |d0 |d0< |d1 |d1< |d2 |d2< |d3 |d3< |S )4N��pk� firstName�lastNamer6 r7 r r rD �serverIPAddress� adminName� adminStatusr �versionManagement�
createNewUser� listUsers�
deleteUser�
changeUserACL�resellerCenter�
createWebsite�
modifyWebsite�suspendWebsite�
deleteWebsite�
createPackage� listPackages�
deletePackage�
modifyPackage�createDatabase�deleteDatabase�
listDatabases�createNameServer�
createDNSZone�
deleteZone�addDeleteRecords� createEmail�
listEmails� deleteEmail�emailForwarding�changeEmailPassword� dkimManager�createFTPAccount�deleteFTPAccount�listFTPAccounts� createBackup�googleDriveBackups�
restoreBackup�addDeleteDestinations�scheduleBackups�
remoteBackups� manageSSL� hostnameSSL�
mailServerSSL)
r r( r) rd re r: r; r rE r< r= �aclrB ) �valr �
finalResponser> r? r@ rf r` rB r r r � loadedACL� sx
��
G� zACLManager.loadedACLc C s0 | d dkrdS ||krdS |j |jkrdS dS r )rc r r r r r �checkUserOwnerShip� s z ACLManager.checkUserOwnerShipc C s8 z| d dkr
W dS | | dkrW dS W dS Y d S r r )r �contextr r r �currentContextPermission s z#ACLManager.currentContextPermissionc C sp z1t ddtjd�} | �� t dddddddddddddtjd�} | �� t dtjd�} | �� W d S Y d S )Nr r )r" rh rB �reseller)r" rj rl ro rn rp rq rr rs ru rv rz r� rB r )r" rB )r r �AdminACL�save� ResellerACL�UserACL)�newACLr r r �createDefaultACLs s. �z ACLManager.createDefaultACLsc C s zt d�W S Y d S )N�/You are not authorized to access this resource.r
r r r r � loadError5 s
zACLManager.loadErrorc C sL z | d kr dddd�}n
dddddd| |i}t �|�}t|�W S Y d S )Nr r� )�status� errorMessage�
error_messager� r� r� )r< �dumpsr )�additionalParameter�additionalParameterValue� finalJson� json_datar r r �
loadErrorJson< s ��
zACLManager.loadErrorJsonc C s4 g } t j�� }|D ]}|jdkrq | �|j� q | S )Nr )r r( �all�userName�append)� userNames�allUsers�itemsr r r � findAllUsersN s
zACLManager.findAllUsersc C sH g } t j�� }|D ]}|jdks|jdks|jdkrq | �|j� q | S )Nr r� r )r r( r� r" r� ��aclNames�allACLsr� r r r � findAllACLsX s
zACLManager.findAllACLsc C s( g } t j�� }|D ]}| �|j� q | S �N)r r( r� r� r" r� r r r �unFileteredACLsd s
zACLManager.unFileteredACLsc C s� t jj| d�}g }t�| �}|d dkr,t j�� }|D ]}|j|jkr$q|�|j� qnt jj|j d�}|D ]}|�|j� q6|�|j� |S �Nrb r r �r )
r r( r) r r� r� r� r� �filterrc ��userIDr �
adminNamesr� �adminsr� r r r � loadAllUsersn s
� zACLManager.loadAllUsersc C sd t jj| d�}g }t�| �}|d dkrt j�� S t jj|jd�}|D ] }|�|� |�|� q#|S r� ) r r( r) r r� r� r� rc r� �r� r � adminObjectsr� r� r� r r r �loadUserObjects� s
zACLManager.loadUserObjectsc C sn t jj| d�}g }t�| �}|d dkr t j�� j| d��d�S t jj|j d��d�}|D ]}|�
|� q-|S )Nrb r r r� r� ) r r( r) r r� r� �exclude�order_byr� rc r� r� r r r �fetchTableUserObjects� s
z ACLManager.fetchTableUserObjectsc C sz t jj| d�}g }|d dkr(t j�� }|D ]}|j|jkr q|�|j� q|S t jj|jd�}|D ]}|�|j� q2|S r� )r r( r) r� r� r� r� rc )r� r� r r� r� r� r r r �loadDeletionUsers� s
�z ACLManager.loadDeletionUsersc C s� t jj| d�}g }t�| �}|d dkr2t j�� }|D ]}|jjdkr0|j|jkr*q|� |j� qnt jj
|j d�}|D ]}|jjdkrJ|� |j� q<|� |j� |S r� ) r r( r) r r� r� r� rn r� r� r� rc r� r r r �userWithResellerPriv� s&
�� � z ACLManager.userWithResellerPrivc C s� | j jdkr>| jdkr<d}tjj| jd�}|D ]}||j }q|d kr(||j }|| | j�� � � }|| jkr:dS dS dS dS )Nr r r� )
r� rh �initWebsitesLimitr r( r� rc � websites_setr� �count)� currentAdmin�
websitesLimit�userToBeModified� webLimitsr� r� r r r �websitesLimitCheck� s
z ACLManager.websitesLimitCheckc C sf t jj| d�}g }|d dkr!tj�� }|D ]}|�|j� q|S |j�� }|D ]}|�|j� q(|S �Nrb r r )r r( r) r r� r� � packageName� package_set)r� r� r � packNames�packsr� r r r � loadPackages� s
�zACLManager.loadPackagesc C s. t jj| d�}|d dkrtj�� S |j�� S r� )r r( r) r r� r� )r� r� r r r r �loadPackageObjects� s
z ACLManager.loadPackageObjectsr c C s$ g }| d dkr0t j�� �d�}|D ]}|�|j� |r-|j�� �d�D ]}|�|j� q$q|S tjj|d�}|j �� �d�}tjj
|j d�} |D ]}|�|j� |rd|j�� �d�D ]}|�|j� q[qI| D ](}|j �� �d�}
|
D ]} |�| j� |r�| j�� �d�D ]}|�|j� q�qsqg|S �Nr r r$ rb r� � r
r( r� r� r� r$ �childdomains_setr r) r� r� rc ) r r� � fetchChilds� websiteNames� allWebsitesr� �childr �websitesr� �webs�webr r r � findAllSites� s: �� � ��zACLManager.findAllSitesc C s� | dkrd}|S | dkrd}|S | dkrd}|S | dkr d}|S | d kr(d
}|S | d kr0d }|S | d
kr8d}|S | dkr@d}|S | dkrHd}|S | dkrPd}|S | dkrXd}|S | dkr`d}|S | dkrhd}|S | dkrnd }|S ) NzPHP 5.3�53zPHP 5.4�54zPHP 5.5�55zPHP 5.6�56zPHP 7.0�70zPHP 7.1�71zPHP 7.2�72zPHP 7.3�73zPHP 7.4�74zPHP 8.0�80zPHP 8.1�81zPHP 8.2�82zPHP 8.3�83zPHP 8.4�84r )�
phpVersion�phpr r r � getPHPString% sT �������� �
����zACLManager.getPHPStringc
C s� | d dkr
t jj|d�S g }tjj|d�}|jj|d�}|D ]}|�|� q tjj|jd�}|D ]}|jj|d�}|D ]} |�| � q<q1|S )Nr r )�domain__istartswithrb r� )r
r( r� r r) r� r� rc )
r r� �
searchTerm� websiteListr r� r� r� r� r� r r r �searchWebsiteObjectsG s �z ACLManager.searchWebsiteObjectsc C s� | d dkrt j�� �d�S g }tjj|d�}|j�� �d�}|D ]}|�|� q!tjj|j d�}|D ]}|j�� �d�}|D ]}|�|� q?q3|S r� )
r
r( r� r� r r) r� r� r� rc ) r r� r� r r� r� r� r� r� r r r �findWebsiteObjects^ s �z ACLManager.findWebsiteObjectsc C � | d dkr t j�� S g }tjj|d�}|j�� }|D ]}|�|� qtjj|jd�}|D ]}|j�� }|D ]}|�|� q6q-|S �Nr r rb r� ) r r( r� r r) �DockerSites_setr� r� rc ) r r� �DockersiteListr r� r� r� r� r� r r r �findDockersiteObjectsu s
�z ACLManager.findDockersiteObjectsc
C s g }| d dkr+t j�� �d�}|D ]}|�|j� |j�� D ]}|�|j� q q|S tjj|d�}|j �� �d�}|D ]}|�|j� |j�� D ]}|�|j� qIq<tjj
|j d�}|D ]#}|j �� �d�}|D ]} |�| j� | j�� D ]}|�|j� qvqiq]|S r� r� )
r r� � domainsList�domainsr� �childsr r� �doms�domr r r �findAllDomains� s4 �� � ��zACLManager.findAllDomainsc C s� g }| d dkr t j�� �d�}|D ]}|�|j� q|S tjj|d�}|j�� �d�}|D ]}|�|j� q.tjj |j
d�}|D ]}|j�� �d�}|D ]}|�|j� qMqA|S r� ) r
r( r� r� r� r$ r r) r� r� rc ) r r� r� r� r� r r� r� r� r r r �findAllWebsites� s" ��zACLManager.findAllWebsitesc C s� z't jj| d�}|d dkrW dS |jj|krW dS |jjj|jkr%W dS W d S tjj| d�}|d dkr;Y dS |j|krCY dS |jj|jkrMY dS Y dS �Nr' r r r )r r( r) r* r r rc r
)r$ r r � childDomain�
domainNamer r r �checkOwnership� s$ �
zACLManager.checkOwnershipc C sJ z |d dkr
W dS | j |krW dS | j j |jkr W dS W dS Y dS r �r rc )�gDr r r r r �checkGDriveOwnership� s
z ACLManager.checkGDriveOwnershipc C sd z t jj| d�} W n tjj| d�} | j} Y |d dkr dS | j|kr'dS | jj|jkr0dS dS r )r
r( r) r r* r r rc )r$ r r r r r �checkOwnershipZone� s
z ACLManager.checkOwnershipZonec
C sd zt t| ��}|dkrW dS W dS ty1 } zt�t|�d � dt|�fW Y d }~S d }~ww )Nr )r zSomething bad happened)r �Nonez [ACLManager.executeCall]r )r r r r] r^ r_ )�command�resultr` r r r � executeCall� s ��zACLManager.executeCallc C s\ z't jj| d�}t�|�}tjj|d�}|d dkr W dS |j|kr%W dS W dS Y dS )N)r" rb r r r )r r( r) r r� r r )r" r� � containerr r r r r �checkContainerOwnership s
z"ACLManager.checkContainerOwnershipc
C s� g }| d dkrt j�� }|D ]}|�|j� q|S tjj|d�}|j�� }tjj|j d�}|D ]}|�|j� q0|D ]}|j�� }|D ]} |�| j� qDq;|S r� )
r r( r� r� r" r r) �containers_setr� rc )
r r� �
containerName�
allContainersr� r �
containersr� �cons�conr r r �findAllContainers s"
�
�z ACLManager.findAllContainersc C r� r� ) r r( r� r r) r r� r� rc ) r r� �
containerListr r r� r� r r r r r �findContainersObjects2 s
�z ACLManager.findContainersObjectsc C sB g }| D ]}t jj|d�}|j�� �d�D ]}|�|j� qq|S )Nr' r$ )r
r( r) r� r� r� r� r$ )r� � childDomainsr� �websiter r r r �findChildDomainsJ s �zACLManager.findChildDomainsc C s0 | d dkrdS |j |jkrdS ||krdS dS r r )r r r� r r r �checkOwnerProtectionU s z ACLManager.checkOwnerProtectionc C s� dd l }g |�� �d�d�d�d�d�d�d�d �d
�d �d �d
�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d �d �d �d �d �}| �d!�}|D ]}|d"kr]| |kr\ dS qO| �|�rjt�|� dS qOd"S )#Nr z hotmail.comz gmail.comz
yandex.comz yahoo.com� localhostzaol.comz apple.comzcloudlinux.comz email.comz facebook.comzgmx.dezgmx.comz
google.comz hushmail.comz
icloud.comz inbox.comzimunify360.comzjuno.comzlive.comzlocalhost.localdomainzlocalhost4.localdomain4zlocalhost6.localdomain6zmail.comzmail.ruzme.comz
microsoft.comz mxlogic.netz outlook.comzprotonmail.comz twitter.comz yandex.ru�.r )�socket� gethostnamer� �endswithr] r^ )r$ r � BlackList� DotsCounter�blackr r r �CheckDomainBlackList` sz &������������������������
�
�z ACLManager.CheckDomainBlackListc C s� | � d�dkr| �d�d }n| �d�d }z
t|�}t|� W n |d kr9| �d�d }||� d�kr9Y dS Y dS | d d� d ks\| d d
� d ks\| d d � d
ks\| d d� dkry| dkry| � d�dkry| dkry| dkry| dkry| dkrydS dS )Nzpanel/rM r ztmp/z cyberpanel/�_rustic_backup_logr � z/home/cyberpanel/.� �/home/cyberpanel� z/tmpr z&/usr/local/CyberCP/CyberCP/settings.pyz..z/home/cyberpanel/.my.cnfz/home/cyberpanel/.bashrcz /home/cyberpanel/.bash_logoutz/home/cyberpanel/.profile)r\ r �int�print)�
statusFiler$ � TemFilePathr4 r r r �CheckStatusFilleLocw s2 2�� �� z ACLManager.CheckStatusFilleLocc C s8 z t jj| d�}|jjW S tjj| d�}|j Y S )Nr' )r r( r) r* � externalAppr
)r$ r r r r r �FetchExternalApp� s
zACLManager.FetchExternalAppc C sJ d} t j�| �sd| }t�|� d| }t�|� d| }t�|� d S )Nz/usr/local/CyberCP/tmp/zmkdir %sz chown cyberpanel:cyberpanel %sz chmod 711 %s)�os�path�existsr � executioner)�
UploadPathr r r r �CreateSecureDir� s
zACLManager.CreateSecureDirc C s� t j�d�r d| d< nd| d< t j�d�rd| d< nd| d< ztjjdd�}|j| d< W d S t�� tj ks?t�� tj
krBd }nd
}t j�|�rXtdd �� � d| d< Y d S d| d< Y d S ) Nz/home/cyberpanel/postfixr � emailAsWholer z/home/cyberpanel/pureftpd�
ftpAsWholerb �
dnsAsWholez
/etc/powerdnsz /etc/pdns)� serverStatus) r2 r3 r4 r r( r) r; r � decideDistro�ubuntu�ubuntu20r� )�dic�pdns�pdnsPathr r r �GetServiceStatus� s"
zACLManager.GetServiceStatusc C s> ddl m} |j�� }t�| |�}|D ] }||j�� O }q|S )Nr )�WPSites)�websiteFunctions.modelsrC r( �noner r� � wpsites_setr� )r r� rC �wpsitesr� r r r r �GetALLWPObjects� s
zACLManager.GetALLWPObjectsc C s$ d} t | �}|�� }|�dd�d S )Nr6 r7 r r )r: r; r rF r r r � GetServerIP� s zACLManager.GetServerIPc C s^ z(t �� t jkr W dS d}| t�� d�}dd l}|j|t�|�d�}|�� d W S Y dS )Nr z@https://platform.cyberpersons.com/CyberpanelAdOns/Adonpermission)r" �IPr )�datar� ) r � decideServer�entr rI �requests�postr< r� )�feature�urlrK rN �responser r r �CheckForPremFeature� s �z ACLManager.CheckForPremFeaturec C �" | d dkrdS |j |krdS dS r r� �r � backupobjr r r r �CheckIPBackupObjectOwner� r0 z#ACLManager.CheckIPBackupObjectOwnerc C rT r r� rU r r r �CheckIPPluginObjectOwner� r0 z#ACLManager.CheckIPPluginObjectOwnerc
C s� z,d} t �| ��d�}d} t �| ��d�}t|�dkr't|�dkr'd||fW S dd|fW S tyE } z
dt|�d fW Y d }~S d }~ww )NzHgrep SAVED_CF_Key= /root/.acme.sh/account.conf | cut -d= -f2 | tr -d "'"r7 zJgrep SAVED_CF_Email= /root/.acme.sh/account.conf | cut -d= -f2 | tr -d "'"� r r zKey not defined)r �outputExecutioner�rstrip�lenrE r_ )r � SAVED_CF_Key�SAVED_CF_Emailr` r r r � FetchCloudFlareAPIKeyFromAcme s ��z(ACLManager.FetchCloudFlareAPIKeyFromAcmec C st z3| d kr d|� d�} t �� t jkr#d| }t �|dd��d�}|W S d| }t �|dd��d�}|W S Y d S )N� /usr/local/lsws/conf/vhosts/� /vhost.confzawk '/docRoot/ {print $2}' �rootTr7 �&awk '/DocumentRoot/ {print $2; exit}' )r rL �OLSrZ r[ )� vhostConfr r �docRootr r r �FindDocRootOfSite s z ACLManager.FindDocRootOfSitec C sx z5| d kr d|� d�} t �� t jkr$d|� d�| }t �|dd� W d S d|� d�| }t �|dd� W d S Y d S )Nr` ra z3sed -i 's#docRoot\s\s*.*#docRoot �#g' rb T�6sed -i 's#DocumentRoot\s\s*[^[:space:]]*#DocumentRoot )r rL rd r5 )re r �
NewDocRootr r r r �ReplaceDocRoot% s zACLManager.ReplaceDocRootc C sd z+t j| d }t�� tjkr)tj�|�r&d| }t�|dd�� d�}|W S W d S W d S Y d S )N�.confrc rb Tr7 )
r �configBasePathr rL rd r2 r3 r4 rZ r[ )re r �
finalConfPathr rf r r r �FindDocRootOfSiteApache6 s z"ACLManager.FindDocRootOfSiteApachec C sT z#t j| d }t�� tjkr!d|� d�| }t�|dd� W d S W d S Y d S )Nrl ri rh rb T)r rm r rL rd r5 )re r rj rn r r r r �ReplaceDocRootApacheI s �z ACLManager.ReplaceDocRootApachec C s$ d} t �| �}|�d�dkrdS dS )Nzuname -a�aarch64rM TF)r rZ r\ )r r r r r �ISARMU s
zACLManager.ISARMc
C s� �z`z#dIdd�} d| � }t dd�}|�|� |�� d}t�|dd � W n Y d
}t�|dd � d }t�|dd � d }t�|dd � d
}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d}t�|dd � d }t�|dd � g d �}|D ]
}d | }t�|dd � q�g d �}|D ]
}d | }t�|dd � q�d!}t�|dd � d"}t�|dd � d#}t�|dd � g d$�}d%d l}|D ]}z|�|� W �q" Y �q"d&}t�|dd � d'}t�|dd � d(}t�|dd � d)}t�|dd � d*}t�|dd � d }t�|dd � g d+�} | D ]}d,| }t�|dd � �qod-}t�|dd � d.}t�|dd � d/}t�|dd � t�� tjk�s�t�� tj k�r�d0}t�|dd � d1}t�|dd � nd2}t�|dd � d3}t�|dd � d4}t�|dd � d5}t�|dd � d6}t�|dd � t d7d8�}
|
�d9� |
�� d:}t�|dd � d;} d<} t
j � | ��rt
j � | ��sd=}
nd>}
d?|
}t�|dd � d@}t�|dd � t dAd8�}|�
dB� |�
dC� |�� dD}t�|dd � dEdF }t�|dd � dG}d | }t�|dd � W d S t�y~ } zt�t|�dH � W Y d }~d S d }~ww )JN� c s2 t jt j t j � | }d�� fdd�t|�D ��S )N� c 3 s � | ]}t �� �V qd S r� )�random�choice)�.0�x��charsr r � <genexpr>i s � zCACLManager.fixPermissions.<locals>.generate_pass.<locals>.<genexpr>)�string�ascii_uppercase�ascii_lowercase�digits�join�range)�length�sizer ry r �
generate_passf s z0ACLManager.fixPermissions.<locals>.generate_passz�<?php
$_ENV['snappymail_INCLUDE_AS_API'] = true;
include '/usr/local/CyberCP/public/snappymail/index.php';
$oConfig = \snappymail\Api::Config();
$oConfig->SetPassword('%s');
echo $oConfig->Save() ? 'Done' : 'Error';
?>z(/usr/local/CyberCP/public/snappymail.php�wz?chown -R lscpd:lscpd /usr/local/lscp/cyberpanel/snappymail/datarb Tz#usermod -G lscpd,lsadm,nobody lscpdz$usermod -G lscpd,lsadm,nogroup lscpdz6find /usr/local/CyberCP -type d -exec chmod 0755 {} \;z6find /usr/local/CyberCP -type f -exec chmod 0644 {} \;z#chmod -R 755 /usr/local/CyberCP/binz%chown -R root:root /usr/local/CyberCPz3find /usr/local/lscp -type d -exec chmod 0755 {} \;z3find /usr/local/lscp -type f -exec chmod 0644 {} \;z chmod -R 755 /usr/local/lscp/binz%chmod -R 755 /usr/local/lscp/fcgi-binz=chown -R lscpd:lscpd /usr/local/CyberCP/public/phpmyadmin/tmpz"chown -R root:root /usr/local/lscpz8chown -R lscpd:lscpd /usr/local/lscp/cyberpanel/rainloopz.chmod 700 /usr/local/CyberCP/cli/cyberPanel.pyz8chmod 700 /usr/local/CyberCP/plogical/upgradeCritical.pyz:chmod 755 /usr/local/CyberCP/postfixSenderPolicy/client.pyz0chmod 640 /usr/local/CyberCP/CyberCP/settings.pyz<chown root:cyberpanel /usr/local/CyberCP/CyberCP/settings.pyz3chmod +x /usr/local/CyberCP/CLManager/CLPackages.py) z /etc/yum.repos.d/MariaDB.repo�/etc/pdns/pdns.confz!/etc/systemd/system/lscpd.service� /etc/pure-ftpd/pure-ftpd.conf�"/etc/pure-ftpd/pureftpd-pgsql.conf�"/etc/pure-ftpd/pureftpd-mysql.conf�!/etc/pure-ftpd/pureftpd-ldap.conf�/etc/dovecot/dovecot.confz%/usr/local/lsws/conf/httpd_config.xmlz /usr/local/lsws/conf/modsec.confz /usr/local/lsws/conf/httpd.confz chmod 644 %s)r� r� r� r� r� r� z /etc/pure-ftpd/db/mysql.confz/etc/powerdns/pdns.confz chmod 600 %szchmod 640 /etc/postfix/*.cfz chmod 640 /etc/dovecot/*.confz+chmod 640 /etc/dovecot/dovecot-sql.conf.ext)z /usr/local/lsws/FileManager/z&/usr/local/CyberCP/install/FileManagerz5/usr/local/CyberCP/serverStatus/litespeed/FileManagerz(/usr/local/lsws/Example/html/FileManagerr zchmod 755 /etc/pure-ftpd/z#chmod 644 /etc/dovecot/dovecot.confz chmod 644 /etc/postfix/main.cfz%chmod 644 /etc/postfix/dynamicmaps.cfz-chmod +x /usr/local/CyberCP/plogical/renew.py)z)/usr/local/CyberCP/CLScript/panel_info.pyz1/usr/local/CyberCP/CLScript/CloudLinuxPackages.pyz./usr/local/CyberCP/CLScript/CloudLinuxUsers.pyz0/usr/local/CyberCP/CLScript/CloudLinuxDomains.pyz2/usr/local/CyberCP/CLScript/CloudLinuxResellers.pyz//usr/local/CyberCP/CLScript/CloudLinuxAdmins.pyz+/usr/local/CyberCP/CLScript/CloudLinuxDB.pyz'/usr/local/CyberCP/CLScript/UserInfo.pyz chmod +x %sz2chmod 600 /usr/local/CyberCP/plogical/adminPass.pyz/chmod 600 /etc/cagefs/exclude/cyberpanelexcludez.find /usr/local/CyberCP/ -name '*.pyc' -deletez#chown root:pdns /etc/pdns/pdns.confz chmod 640 /etc/pdns/pdns.confz'chown root:pdns /etc/powerdns/pdns.confz!chmod 640 /etc/powerdns/pdns.confz4chmod 640 /usr/local/lscp/cyberpanel/logs/access.logzH/usr/local/lsws/lsphp72/bin/php /usr/local/CyberCP/public/snappymail.phpz2chmod 600 /usr/local/CyberCP/public/snappymail.phpz
/etc/fstab�az;proc /proc proc defaults,hidepid=2 0 0
z#mount -o remount,rw,hidepid=2 /procz/etc/redhat-releasez/etc/openEuler-release�nobody�nogroupz"chown root:%s /usr/local/lsws/logsz chmod 750 /usr/local/lsws/logsz!/usr/lib/sysctl.d/50-default.confzfs.protected_hardlinks = 1
zfs.protected_symlinks = 1
zsysctl --systemz chmod 700 %sr) z /usr/local/lscp/conf/key.pemz [fixPermissions])rs )r: �write�closer r5 �shutil�rmtreer< �centos�cent8r2 r3 r4 �
writelinesrE r] r^ r_ )r� �contentr^ r �filesr� �impFile�fileMr� � clScripts� WriteToFile�
CentOSPath�
openEulerPath�group� destPrivKeyr` r r r �fixPermissionsa s
�
��zACLManager.fixPermissionsr� )NN)r )B�__name__�
__module__� __qualname__r� r� r� � staticmethodr r% r- r/ r5 rC rG rK ra r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r
r r r r r r% r/ r1 r7 rB rH rI rS rW rX r_ rg rk ro rp rr r� r r r r r s�
^
!
%
!
r ))r2 �sysru r| � ApachController.ApacheVhostsr �manageServices.modelsr �processUtilitiesr r3 r� �django�environ�
setdefault�setup�loginSystem.modelsr r �django.shortcutsr �packages.modelsr rD r
r r r r< �
subprocessr r �shlexr r r] �dockerManager.modelsr r1 r r r r r r �<module> s*