/
usr
/
share
/
lve
/
modlscapi
/
user
/
__pycache__
/
Upload File
HOME
3 �irj, � @ s� d dl Z d dlZd dlZd dlZd dlmZmZ dd� dd� dd� dd� dd� d �Zd d d d dd �Zddd d�Z d a dd� Z G dd� d�Z G dd� d�Z dd� Zdd� Zd ekr�eejdd� � dS ) � N)�Popen�PIPEc C s | |kS )N� )�x�yr r �/lsphpchecker.py�<lambda> s r c C s | |kS )Nr )r r r r r r s c C s | |k S )Nr )r r r r r r s c C s | |kS )Nr )r r r r r r s c C s | |kS )Nr )r r r r r r s )�gt�gte�ltZlte�eqZmorez more or equalZlessz less or equalZequal� i )�M�G�Tc C s t | tjd� dS )zC Wrapper for logging errors. Simple logging to stderr. )�fileN)�print�sys�stderr)�msgr r r � log_error' s r c @ s4 e Zd ZdZedd� �Zedd� �Zedd� �ZdS ) �Castz3 Class with functions for cast to any type c C s ddd�j | tj| ��S )Nr r )ZOffZOn)�getr � to_number)�_vr r r �to_bool3 s z Cast.to_boolc C sV t | �s d S | d j� r d| } tj| d d� �}|d kr>d S |tj| d j� d� S )Nr z%sM���r r )�len�isdigitr r �BYTES_CONVERSION_TABLEr �upper)r Z_numr r r �to_mb7 s z Cast.to_mbc C s& yt | �S ttfk r d S X d S )N)�int� ValueError� TypeError)r r r r r E s zCast.to_numberN)�__name__� __module__� __qualname__�__doc__� staticmethodr r! r r r r r r / s r c sd e Zd ZdZdZdZdZ� fdd�Zdd� Zdd � Z d d � Z d d � Z dd� Z dd� Z dd� Z� ZS )� PhpCheckerz" docstring for PhpChecker z./usr/share/lve/modlscapi/user/lsphpchecker.iniNc sj t t| �j� tjd�}tdkrX|jtjd�� |jtjd�� |jtjd�� t|�}|| _| j� dS )z. Initialize php versions list z/usr/local/bin/lsphpr z/opt/alt/php*/usr/bin/lsphpz&/opt/cpanel/ea-php*/root/usr/bin/lsphpz/usr/bin/lsphpN) �superr* �__init__�glob�quick�extend�sorted�_PhpChecker__php_binary�_load_sample_options)�selfZphp_list)� __class__r r r, U s zPhpChecker.__init__c C sP xJ| j D ]@}tjj|�r| j||�}|rx |D ]}td|||f � q.W qW dS )z/ Check configurations for user z %s: %s: %sN)r1 �os�path�exists�_check_php_optionsr )r3 �user�php_pathZ check_result�messager r r � check_usere s zPhpChecker.check_userc C s@ g }| j ||�}| j||�}|| j|d�7 }|| j|d�7 }|S )z� Load and check specified php version options @param `php_path` str: path to php binary @param `user` str: username ZapcZsuhosin)�_load_php_options�_detect_danger_modules�_check_options)r3 r: r9 �warnings�options�modulesr r r r8 p s z PhpChecker._check_php_optionsc C s� |dkr t |dgttd�}n t d|dd||f gttd�}|j� \}}i }d}x�|j� jd�D ]�}d |krpd }q^|r^|s~d}q^|jd �} t| �d k r�td | � q^d| d kr�d} | d } n| d jdd�\} } | |kr�i || < | d || | d < q^W |S )z: Load php options from CLI phpinfo output � z-i)�stdoutr z/bin/suz-cz[ ! -f %s ] || %s -iF� z(Directive => Local Value => Master ValueTz => � zInvalid option line - %s�.r Z __common__r )r r � communicate�decode�splitr r ) r3 r: r9 �p�out�errrA Z option_value�line�values�module�keyr r r r= � s8 z PhpChecker._load_php_optionsc C s� |dkr t |dgttd�}n t d|dd||f gttd�}|j� \}}i }xD|j� jd�D ]2}|j� }|jd�rzd |d < qZ|jd �rZd |d < qZW |S ) zZ Detect unstable and potential danger php modules from php version output rC z-i)rD r z/bin/suz-cz[ ! -f %s ] || %s -irE zwith the ionCube PHP LoaderTZioncube_loaderzwith Zend Guard LoaderZzend_guard_loader)r r rH rI rJ �strip� startswith)r3 r: r9 rK rL rM rB rN r r r r> � s z!PhpChecker._detect_danger_modulesc C s� | s0t |t� s0t |t� s0t |j|�t� r4g S || jkrBg S g }|| }x^| j| j� D ]L\}}||kr^| j|| |� r^|jd|tj|d d�|d || f � q^W t |�r�|j dd| � |j dd| � |S )z: Check php options based on sample config z9%s must be %s %s (current value: %s) (no value means Off)�checkrC �valuer z[%s]z change %s options to default) � isinstance�dict�strr �_PhpChecker__sample�items�_validate_value�append� CHECK_KEYSr �insert)r3 �configrP �resultrA rQ Z check_infor r r r? � s" zPhpChecker._check_optionsc C s i | _ y�t| jd�}x�|D ]�}|j� }d}d}yH|jdd�\}}d|krd|jd�\}}|jd�\}}|jdd�d }W n& ttfk r� td | � wY nX || j kr�i | j |< |j� ||d �| j | |j� < qW |j� W n( t t fk �r t d | j � Y nX d S )z% Load sample options �r�numberr �=r �,�:rG r zInvalid sample string %s)rU �typerT z Error read %sN) rY �open�SAMPLE_CONFIG_PATHrR rJ r# � IndexErrorr �close�OSError�IOErrorr ) r3 �frN � value_type� check_typerQ rU Z type_inforP r r r r2 � s. z PhpChecker._load_sample_optionsc C sv t |t�sdS |jdd�}|jdd�}|d }d| }tt|�r\tt|�|�}tt|�|�}|tkrhdS t| ||�S )z� Validate option value. @param value_type `str`|default:"number" : value type @param value1 `str|int`: value1 for compare @param value2 `str|int`: value2 for compare @return int : -1, 0, 1 Frf rb rT r rU zto_%s)rV rW r �hasattrr �getattr�CHECK)r3 rU Zrulern ro Z check_valueZ cast_funcr r r r[ s zPhpChecker._validate_value)r% r& r' r( rh r1 rY r, r< r8 r= r> r? r2 r[ � __classcell__r r )r4 r r* M s . r* c C s� d } }y�t dd�}x�|D ]�}|jd� r8|jd� r8q|j� }|sFqy6|d dkrbt|d �} n|d dkrzt|d �}W q ttfk r� td� P Y qX qW |j� W n& tt fk r� t d t j d � Y nX | |fS ) z: Load min and max UID from /etc/login.defs config Nz/etc/login.defsra �UID_MIN�UID_MAXr r z Invalid UID_MIN/UID_MAX valuesz8Can`t read UID_MIN and UID_MAX from /etc/login.defs file)r ) rg rS rJ r" r# ri r rj rl rk r r r )Zmin_uidZmax_uidrm rN �datar r r �load_min_max_uid s* rw c C sB t | �dkrN| d dkrNtdtjd � td� td� td� td� dS t | �dkr�| d d ksr| d d kr�| d d kr�d and a| d d� } t� }td kr�|jd � n�| r�x�| D ]>}ytj|�}|j|� W q� t k r� t d| � Y q�X q�W nBt � \}}x6tj � D ]*}|j |k�r|j |k�r|j|j� �qW dS )z Run check r �helpz!%s [help] [quick] [users list...]z help - show this helpz9 fast - check all lsphp without switching to userzD medium - check all users but only /usr/local/bin/lsphp configz_ users list - list of needed users or empty. i this case users list will be taken from passwdNZfastZmedium� r rC zUser %s doesn`t exists)r r r �argvr. r* r< �pwd�getpwnam�KeyErrorr rw ZgetpwallZpw_uidZpw_name)Z users_listZcheckerZusernamer9 rt ru r r r �main< s4 $ r~ �__main__i )r- r5 r{ r � subprocessr r rr r] r r. r r r* rw r~ r% rz r r r r �<module> s* Q &