Your IP : 3.12.148.140
�
�cgd � � � d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm Z m
Z
G d� d� � Z e
e �� � Z d� Z
d� Zd
d
�Zd � Zd � ZdS )� N)� remount_proc)�SYSCTL_CL_CONF_FILE�
SysCtlConfc �0 � e Zd Zg d�ZdZdZd� Zd� Zd� ZdS )�
KernelVersion)�1r �95� Tc �R � t j ddgt j t j �� � 5 }|� � � \ }}|j dk r#t d� � t
j d� � |� d� � dk r{|� d� � d � d � � d d d� �
� � � d
� � | _ t | j � � nd | _ d d d � � d S # 1 swxY w Y d S ) N�unamez-r)�stdout�stderrr z?error: subprocess call error. Cant't get current kernel version� �lve����el�.F)
�
subprocess�Popen�PIPE� communicate�
returncode�print�sys�exit�find�split�strip�_system_kernel�
_cl_kernel)�self�proc�out�_s �py/clsetuplib.py�__init__zKernelVersion.__init__& sM � �
�
�
�d�O� �?� �?�
�
�
�
(� ��%�%�'�'�F�C����!�#�#��X�Y�Y�Y���� � � ��x�x����"�$�$�&)�i�i��&6�&6�q�&9�&?�&?��&E�&E�a�&H��"��&M�&S�&S�&U�&U�&[�&[�\_�&`�&`��#��d�)�*�*�*�*�"'���
(�
(�
(�
(�
(�
(�
(�
(�
(�
(�
(�
(����
(�
(�
(�
(�
(�
(s �C!D � D �#D c � � | j r/| j | j k o t j � d� � S t
d� � t j d� � d S )Nz/proc/sys/fs/symlinkown_gidz1error: Feature is not supported on non CL kernel.r ) r r �_SECURELINKS_MIN_KERNEL�os�path�isfiler r r �r! s r% � securelinks_kernel_requirementz,KernelVersion.securelinks_kernel_requirement7 sY � � �?� ��#�t�'C�C� B��G�N�N�#@�A�A�
� �A�B�B�B� ��� � � � � � c �< � dd� | j � � z S )Nr r )�joinr( r, s r% �get_securelinks_min_kernelz(KernelVersion.get_securelinks_min_kernelB s � ��s�x�x�� <�=�=�=�=r. N) �__name__�
__module__� __qualname__r( r r r& r- r1 � r. r% r r ! sU � � � � � � ,�n�n���N��J�(� (� (�"� � �>� >� >� >� >r. r )� config_filec �@ � d}t � || � � dS )zn
Change /etc/sysctl.conf for apache gid
:param apache_gid: id of apache's group
:return: None
zfs.symlinkown_gidN)�sysctl�set)�
apache_gid�symlink_commands r% �set_securelinks_gidr< I s# � � *�O�
�J�J��
�+�+�+�+�+r. c �� � d} t t � |� � � � }n# t $ r d}Y nw xY w t j |� � j n# t $ r d}Y nw xY w|dk rQd}t j d|� �ddd�� � t j
|� � j }t � ||� � t j d |� d
| � �ddd�� � d S ) z�
Add user to the group specified by fs.proc_super_gid.
If fs.proc_super_gid is 0 (means undefined) or group doesn't really exists
then create "clsupergid" group, configure it as fs.proc_super_gid and
add user to this group
zfs.proc_super_gidr �
clsupergidz groupadd -f Tz /bin/bashF)�shell�
executable�checkzusermod -a -G � N)
�intr8 �get�
ValueError�grp�getgrgid�gr_name�KeyErrorr �run�getgrnam�gr_gidr9 )�user�sgid_key�proc_super_gid� sgid_names r% �_add_to_super_gidrQ T s< � � #�H�� �V�Z�Z�� 1� 1�2�2���� � � � ���������� � �^�$�$�,�,�,�� � � � ��������� ���� � ���1�i�1�1� !�k�� H� H� H� H� � �i�0�0�7���
�
�8�^�,�,�,� �N�;�N�;�;�T�;�;� �+�U�D� D� D� D� D� Ds �', � ;�;�A � A(�'A(Tc �r � t j � � sdS t d� � | rt � � dS dS )z:
Add nagios to configured fs.proc_super_gid group
N�nagios)� cldetectlib�
get_nagiosrQ r ��do_remount_procs r% � setup_nagiosrX w sI � � � !� #� #� ����h� � � � � �������� r. c � � t j � d� � sdS t j d� � n# t
$ r Y dS w xY wt
d� � dS )z@
Detect "mailman" and add it to fs.proc_super_gid group
z"/usr/local/cpanel/3rdparty/mailmanN�mailman)r) r* �isdir�pwd�getpwnamrI rQ r5 r. r% �
setup_mailmanr^ � sp � � �7�=�=�=� >� >� ���� � �Y� � � � �� � � � �������� �i� � � � � s �8 �
A�Ac �^ � t d�� � t � � t � � dS )z�
Configure "special" users to be in fs.proc_super_gid group, if it's
necessary.
If this GID was undefined(0) then create and setup special clsupergid group
FrV N)rX r^ r r5 r. r% �setup_supergidsr` � s- � � ��'�'�'�'��O�O�O� �N�N�N�N�Nr. )T)rF r) r\ r r rT �cl_proc_hidepidr �clcommon.sysctlr r r r8 r< rQ rX r^ r` r5 r. r% �<module>rc s ��* �
�
�
� � � � �
�
�
�
� � � � �
�
�
�
� � � � � (� (� (� (� (� (� ;� ;� ;� ;� ;� ;� ;� ;�">� ">� ">� ">� ">� ">� ">� ">�J
�� 3� 4� 4� 4��,� ,� ,� D� D� D�F � � � � !� !� !�
�
�
�
�
r.