shell bypass 403
3
c8h�* � @ sD d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ yd dlm Z W n e
k
rd e Z Y nX d dl m
Z
d dlmZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lmZ dad Zd d
� Zdd� Zdd� Zdd� Zdd� Zdd� Zd)dd�Z d*dd �Z d+d d �Z G d d � d e �Z d!d"� Z!d#d$� Z"d%d&� Z#d'd(� Z$dS ),� N)� rpcServer)�DictType)�rpclib)�
clientCaps)�config)� rhnserver)�
up2dateErrors)�
up2dateLog)� up2dateUtilsz /var/spool/up2date/loginAuth.pklc C s@ t j� } | d }tj|tj�s"d S t|d�}|j� }|j� |S )N� systemIdPath�r)r �initUp2dateConfig�os�access�R_OK�open�read�close)�cfg�path�f�ret� r �!/usr/lib/python3.6/up2dateAuth.py� getSystemId s
r c C s� t j� } t� }d}|dkr |S yDtjj|�d d }|jdd�}|dkrN|}n| jd||f � |S tk
r� | jd� | j t
j � � Y nX |S ) z�
Extract the preferred_interface parameter from system_id XML
Returns 'IPv4' or 'IPv6' if specified, otherwise 'IPv4' as default
�IPv4Nr �preferred_interface�IPv6zGInvalid preferred_interface value '%s' in system_id, defaulting to '%s'zGFailed to parse system_id XML, preferred_interface defaulting to 'IPv4')r r ) r �initLogr r � xmlrpclib�loads�get�log_me� Exception�
log_exception�sys�exc_info)�log�systemIdr ZparamsZ
cfg_interfacer r r �getPreferredInterface( s$
r) c C sB t jjd�rd S tj� } y tjjt� �d d d }W n
dS t j
� }| d oZ||k�r>t j � }|j
jt� |�}| d }|d |jd�� }t j|t j�s�yt j|� W n
dS t j|t j�s�dS t j|t j�� r�|d }yt j||� W n
dS t|d�}|j|� |j� yt j|td d
�� W n Y nX d S ) NZLEAPP_IPU_IN_PROGRESSr Z
os_releaseZchannelOverrider �/z.save�w�0600� )r �environr! r r
r r r r r
Z
getVersionr ZRegistrationRhnServerZ registrationZupgrade_version�rfindr �W_OK�mkdir�F_OK�renamer �writer �chmod�int) r �idVerZ systemVer�sZ newSystemIdr �dirZsavePathr r r r �maybeUpdateVersionL sB
r: c C s� t j� } | jd� ts$| jd� dS tj� td�}tjjt�}tj |tj
�s�y tj |� tj |t
dd�� W n | jd| � dS ttd�}tj tt
d d�� tj||� |j� |d
ttd � }| jd |d
d
|d� dS )z�
Pickle loginInfo to a file
Returns:
True -- wrote loginInfo to a pickle file
False -- did _not_ write loginInfo to a pickle file
zwriteCachedLogin() invokedz1writeCachedLogin() loginInfo is None, so bailing.F)�time� loginInfoZ0700r- z'Unable to write pickled loginInfo to %s�wbr, r; zX-RHN-Auth-Expire-OffsetzWrote pickled loginInfo at z with expiration of z seconds.T)r r � log_debugr< r; r r �dirname�pcklAuthFileNamer r0 r1 r5 r6 r" r �pickle�dumpr �float)r' �dataZpcklDir�pcklAuth�
expireTimer r r �writeCachedLoginz s.
rG c C sT t j� } | jd� tjttj�s2| jdt � dS ttd�}ytj |�}W n* t
t fk
rt | jd� |j � dS X |j � yLt
jjt� �d d d }d|d d
}||kr�| jd ||f � dS W n Y nX |d }|d }tj� }|t|d
� }| jd|d|dt|d
�� ||k�r<| jd||f � dS t|� | jd|� dS )zb
Read pickle info from a file
Caches authorization info for connecting to the server.
zreadCachedLogin invokedz'Unable to read pickled loginInfo at: %sF�rbzSUnexpected EOF. Probably an empty file, regenerate auth filer Z system_idzID-%sr< zX-RHN-Server-Idz#system id version changed: %s vs %sr; zX-RHN-Auth-Expire-Offsetz(Checking pickled loginInfo, currentTime=z
, createTime=z, expire-offset=z9Pickled loginInfo has expired, created = %s, expire = %s.z<readCachedLogin(): using pickled loginInfo set to expire at T)r r r> r r r@ r r rA �load�EOFError�
ValueErrorr r r r r r; rC �_updateLoginInfo) r' rE rD r7 ZcidVerZ createdTime�liZ currentTimerF r r r �readCachedLogin� sH
rN c C s2 t | �tkr*t t�tkr$tj| � q.| andadS )z,
Update the global var, "loginInfo"
N)�typer r< �update)rM r r r rL � s
rL Fc C s� t j� }|jd| � | r,t r,t� r,tS tj|d�}tjj � }x |D ]\}}|j
||� qHW | d krnt � } | svd S t � |j
d� |jj| tj� t|��}|jj� t|� t� tr�|j
d� |jdt� tS )Nz login(forceUpdate=%s) invoked)�timeoutzlogging into up2date serverz?successfully retrieved authentication token from up2date serverz
logininfo:)r r r> r< rN r Z RhnServerr ZcapsZ headerFormatZ
add_headerr r: r" Zup2date�login�socketZgetfqdn�_get_panel_nameZ capabilitiesZvalidaterL rG ) r( � forceUpdaterQ r' ZserverZ
headerlistZ
headerName�valuerM r r r rR � s.
rR c C s0 t j� }|jd� td| d� ts,tjd��tS )Nz updateLoginInfo() login infoT)rU rQ zUnable to authenticate)r r r" rR r< r ZAuthenticationError)rQ r' r r r �updateLoginInfo� s
rW c C s8 yt a W n tk
r d a Y nX t r*t S t| d� t S )N)rQ )r< � NameErrorrR )rQ r r r � getLoginInfo s
rY c @ s e Zd ZdS )�_FailedToGetPanelNameN)�__name__�
__module__� __qualname__r r r r rZ s rZ c C sL y
t � }W n8 tk
rB t� s8| jtj� � | jd� t� }Y nX |j� S )Nz?Failed to get panel name via cldetect, using fallback mechanism) � _get_panel_name_via_cldetectrZ �_is_cldeploy_runningr$ r% r& r" �_fallback_get_panel_name�lower)r' Z
panel_namer r r rT s
rT c C st d} d}d }t jj| �r8t| ��}|j� j� }W d Q R X |rpd| }t jj|�rpt|��}d|j� k}W d Q R X |S )Nz/var/lock/cldeploy.lckFz/proc/%s/cmdlineZcldeploy)r r �existsr r �strip)Zlock_file_pathZcldeploy_running�pidr Zpid_cmdline_pathr r r r_ $ s
r_ c C sr ddg \} }}t jj| �s(td| ��tj|tjtjdd�}|j� \}}|jdkrjtddj |�|f ��|j
� S ) Nz/usr/bin/cldetectz--detect-cp-nameonlyz7Failed to obtain panel name because '%s' does not existT)�stdout�stderrZuniversal_newlinesr z:Failed to obtain panel name using '%s' command; stderr: %s� ) r r rb rZ �
subprocess�Popen�PIPEZ communicate�
returncode�joinrc )Zbinary�_�cmdZprocessre rf r r r r^ 5 s
r^ c C sd t jjd�rdS t jjd�r dS t jjd�r0dS t jjd�r@dS t jjd �rPd
S t jjd �r`d S d
S )Nz/usr/local/psa/admin/Zpleskz/usr/local/interworx/Z interworxz#/usr/local/cpanel/whostmgr/docroot/Zcpanelz/usr/local/ispmgr/Zispmgrz/usr/local/directadmin/Z directadminz/usr/local/mgr5/sbin/mgrctlZispmgr5�unknown)r r �isdir�isfiler r r r r` H s r` )NFN)N)N)%r rA r% r; rS rh Zup2date_clientr �typesr � ImportError�dictZrhnr r r r r r r
r< r@ r r) r: rG rN rL rR rW rY r# rZ rT r_ r^ r` r r r r �<module> sB
$. ,
%