⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.133
Server IP:
185.119.109.197
Server:
Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
8.1.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
share
/
jailkit
/
__pycache__
/
View File Name :
jk_lib.cpython-310.pyc
o IYa @ s d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dl Z dZ i Z dd Z dGddZ dGdd Zd d Zd d Zdd Zdd Zdd Zdd ZdHddZdHddZdIdd Zd d ZdJd d!Zd"d# Zd$d% Zd&d' Z dJd(d)Z dGd*d+Z dGd,d-Z dJd.d/Z dKd0d1Z!d d d d d d g fd2d3Z"d d d d d d d g fd4d5Z#d6d7 Z$dLd9d:Z%d;d< Z&d=d> Z'd?d@ Z(dGdAdBZ)dCdD Z*dEdF Z+dS )M )print_functionNi c C s* t | d }|d u rt| t | < }|S )N) statcachegetoslstat)pathret r /usr/share/jailkit/jk_lib.py cachedlstat0 s r c C s zt | }W n ty |dkrtjd| d Y dS w tjdd dkrG|tj dks:|tj t dj krFtjd| d dS n|tj dksU|tj dkratjd| d dS |tj tj @ sq|tj tj@ rt|tj stjd| d d S t|tj st|tj rt| }tt|t| |d d dkrtjd| d dS dS tjd| d dS dS )Nr zERROR: cannot lstat() bsdwheelzERROR: z is not owned by root:wheel! z is not owned by root:root! z is writable by group or others! zusr/z2 is a symlink, please point to the real directory z is not a directory! )r OSErrorsysstderrwriteplatformstatST_UIDST_GIDgrpgetgrnamgr_gidST_MODES_IWOTHS_IWGRPS_ISLNKS_ISDIRr readlinkprintstr)r failquietstatbuftargetr r r path_is_safeB s: $ 0 r+ c C s t j| } t| |}|dk r|S dD ]}t| d | d}|dk r&| S qt j| }|dkrFt|d}|dkr<|S t j|}|dks1dS )z]tests if path is a safe jail, not writable, no writable /etc/ and /lib, return 1 if all is OKr )etcusrvarbindevprocsbinr /r r )r r abspathr+ dirname)r r( retvalsubdnpathr r r chroot_is_safeb s" r9 c C s& t | }|tj tjtjB @ rdS dS )zAreturns 1 if the file is setuid or setgid, returns 0 if it is notr r )r r r S_ISUIDS_ISGID)r r) r r r test_suid_sgidv s r< c C s< t jd d dkr t| dddddd td| d S d S )N linuxz/etcr copy_permissions allow_suidcopy_ownershipz ldconfig -r )r r create_parent_pathr system)jailr r r gen_library_cache} s rF c C s g }t jd| dt jt jt jdd}|j }tjdkr't|tr'| dd}t |dkr| }t |dkr|d dkrE|d d krE|S |d d krY|d d krY|d dkrY|S |d dkse|d dkrfnrt |dkry|d d kry|d dkryn_t |dkrt j |d r||d g7 }nItd|d d | n<t |d kr|d d dkrt j |d r||d g7 }n td|d ntd|dd n td|dd |j }tjdkrt|tr| dd}t |dks-|S );returns a list of libraries that the executable depends on ldd Tshellstdinstdoutr close_fds r utf-8replacer staticallyr linkednot dynamicrO executablezlinux-gate.so.1zlinux-vdso.so.1r found!ldd returns non existing library z for r3 $WARNING: failed to parse ldd output Nr subprocessPopenPIPErL readliner version_info isinstancebytesdecodelensplitr r existsr& rW r6 plinesublr r r lddlist_libraries_linux s> $$ rk c C s g }d}t jd| dt jt jt jdd}|j }tjdkr)t|tr)| dd}t |dkr| }t |dkr|d | d krBno|d d krWt |d krV|d d krVd}nZt |dkr|dkrzt j |d rq||d g7 }n@td|d n7|dkrt j |d r||d g7 }n#td|d ntd ntd|dd n td|dd |j }tjdkrt|tr| dd}t |dks/|S )rG rO rH TrI rN rP rQ r :Start Namer r= rY z1unknown mode, please report this bug in jk_lib.pyrZ Nr r[ )rW r6 moderh ri rj r r r lddlist_libraries_openbsd s@ rr c C s g }t jd| dt jt jt jdd}|j }tjdkr't|tr'| dd}t |dkr| }t |dkrt |dkrN|d d t | d | d krNn[t |d krb|d d krb|d dkrb|S t |dkrt j |d rx||d g7 }n1td|d n(td|d d d n|d t | d | d krn td|d d d |j }tjdkrt|tr| dd}t |dks-|S )rG rH TrI rN rP rQ r r Nrl ro rU rT r rV rY z%WARNING: failed to parse ldd output "r "r[ rg r r r lddlist_libraries_freebsd s2 ,$ rt c C s t jd d dkr t| S t jd d dkrt| S t jd d dkr't| S t jd d dkr;t| }|dg7 }|S t| }|g d7 }|S ) Nr= r> rn openbsdfreebsdsunosz /lib/ld.so.1)z/usr/libexec/ld.soz/usr/libexec/ld-elf.so.1z/libexec/ld-elf.so.1)r r rk rr rt )rW r6 r r r lddlist_libraries s rx c C s | dkrdS t | }d}|s|d }|d d }d}d}|D ]Z}tj||}t|}t|jrx|d7 }t|} | d dkrItj || }q tj tjtj || } t |dkrv| d t | |krvt j d| d td| }q tj||S ) Nr3 ry r r r ERROR: symlink points outside jail, ABORT Symlink points outside jail) split_pathr r joinr r r# st_moder% normpathr5 rd r r r Exception) r chroot include_filespathbasenamer doscounterentrysbrealpathtmpr r r resolve_realpath s0 r c C s. t |}|r d}| }n tj| }tj| }d}|dkr|dkrt|}t|jry|d7 }t |}|d dkrM|| }|dd dkrL|dd }n<tj tj tj||} |dkrv| d| |krvt j d| d td | }ntj|d | }tj|}d}|dkr|dks!d| S ) zNwill return the same path that contains not a single symlink directory elementry r r3 d r r Nrz r{ r| )rd r r r r5 r r r# r r% r r~ r r r r ) r r r chrootlendonepathtodopathr r r r r r r OLDresolve_realpath& s6 r c C s t | }t|tj }|s'|tjtjB @ r'td| |tj @ tj @ }t ||tj |tj f |rDt ||tj |tj t || d S )Nz,removing setuid and setgid permissions from )r r S_IMODEr r: r; r& utimeST_ATIMEST_MTIMEchownr r chmod)srcdst be_verboserA rB sbufrq r r r copy_time_and_permissionsF s r c C sL | }t j|s$|dks$|dks$t j|}t j|s$|dks$|dkr|S )zsThis function tests if a directory exists, if not tries the parent etc. etc. until it finds a directory that existsr3 ry )r r rf r5 )r r r r r !OLDreturn_existing_base_directory[ s r r c C s8 |}|dd dkr|dd }zt | | | }tj|r!W dS W n ty+ Y nw t| | }t|t| } |d| d } | dkrJt|} | dkr| d | krY| } n z t|d| } W n* ty } z | j \} }t j d|d| d | d W Y d} ~ dS d} ~ ww t | jrt|d| }t | |d| | }|rtd| d | zt|| W n, ty } z | j \}} |d krnt j d | |d| d W Y d} ~ nd} ~ ww |d dkrt| ||||| n}t|d| d}t| |d|d | |||| nat | jrwt | |d| | }|r1td | t|t |rwzt|d| |||| W n. tyv } z!| j \} }t j d|d| d | d | d W Y d} ~ nd} ~ ww | } | t|krd} n|d| d } | dkrt|} | dksOdS dS )zucreates the directory and all its parents id needed. copy_ownership can only be used if copy permissions is also usedr Nr3 r ERROR: failed to lstat():r Creating symlink to z ERROR: failed to create symlink r zCreating directory 2ERROR: failed to copy time/permissions/owner from : )r r r rf r return_existing_base_directoryrd findr argsr r r r r# r r% r& symlinkrC stringrfindr$ mkdirdir_moder )r r r r@ rA rB directorychrootdirectoryr oldindxindxr e_strerrorrealfile chrootnameerrnoindx2r r r OLD_create_parent_pathb s $ $ 8 r c C s@ d}d}| D ]}|dks|dkr||7 }|dkrd}qd}q|S )Nry r r3 r r )instring outstringslashir r r fix_double_slashes s r c C sH g }t tj| }|dkr"|dtj| tj|}|dks|S )Nr3 r )r r r r insertr r5 )r r nextr r r r} s r} c C s. t | dkrdS d}| D ]}|d| 7 }q |S )Nr r3 ry )rd )r r r r r r join_path s r c C s t |}| }d}|t|k r7tj||| } tj| s nt| | d} tj| s+n | }|d7 }|t|k s|t|k rGt|d|d } tj||| } zt| } W n& t y} } z|j \}}t j d| d | d W Y d }~d S d }~ww t| jr|rtd| t| t |rz t| | ||| W n t y } z!|j \}}t j dtd t d t d | d W Y d }~ntd }~ww nnt| jr;t| }|rtd | d | t|| |d d krt| |||||} n@tj tjtj | |} t| dkr*| d t| | kr*t j d | d t d| t| d }t| |||||} | }|d7 }|t|k s>|S )Nr r r r r zCreate directory r r r r r3 rz r{ r| ) r} rd r r r~ rf r r r r r r r r r r$ r r& r r r r r r r# r% r rC r r5 r )r r r r@ rA rB r existpathr tmp1r origpathjailpathr r r r r r r r rC sl 8 $ &rC c C s z|r t d| t| t| ||ddd W n, ttfyD } z |j\}}tj d| d | d | d W Y d }~dS d }~ww t | D ]\}}}|D ]m} |rgt d | d | d | d | z!t |d | |d | t|d | |d | |ddd W qQ ttfy } z(|j\}}tj d | d | d | d | d | d W Y d }~ dS d }~ww |D ]} t |d | |d | | qqJdS ) NzCreating directoryr r rA rB z)ERROR: copying directory and permissions r r r Copying r3 $ERROR: copying file and permissions )r& r r r IOErrorr r r r r walkshutilcopyfile#move_dir_with_permissions_and_owner) srcdirdstdirr r r r rootdirsfilesnamer r r #copy_dir_with_permissions_and_owner s8 $$ & 4 r c C s t | ||}|dkrE|dkrtd| zt| W d S ttfyD } z|j\}}tj d| d | d W Y d }~d S d }~ww td| d | d S )Nr z!Removing original home directory zERROR: failed to remove r r z Not everything was copied to z , keeping the old directory ) r r& r rmtreer r r r r r )r r r r6 r r r r r r r s *r c C s d}|dkr!z t | | d}W n td| d | d Y |dkrdzt| | t| ||||d W d S ttfyc } z |j\}} t j d| d | d | d W Y d }~d S d }~ww d S ) zXcopies/links the file and the permissions (and possibly ownership and setuid/setgid bitsr r zLinking r z failed, will revert to copyingr r r r N) r linkr& r r r r r r r r r ) r r r try_hardlinkrA retain_ownerdo_normal_copyr r r r r r copy_with_permissions) s$ 2r c C s t | tj||dddd t| | | }tj|r%td| d d S t|}ztj d d dkr?|j d }|j d }n*tj d kr_tj d krT|j d }|j d }n|j d }|j d }n |j d }|j d }t |j rrd }nt|j r{d }n td| d W dS |dkrtd| | ttjdd|t|t|t|} t||d|d W d S td| d td| d td| d td Y d S )Nr r r? zDevice z does exist alreadyr= r> sunos5ii cbz WARNING, z# is not a character or block devicezCreating device mknodr zFailed to create device z(, this is a know problem with python 2.1z use "ls -l z6" to find out the mode, major and minor for the devicez use "mknod z' mode major minor" to create the devicez<use chmod and chown to set the permissions as found by ls -l)rC r r r5 r rf r& r r r st_rdevmaxintS_ISCHRr S_ISBLKspawnlpP_WAITr' r ) r r r r chrootpathr majorminorrq r r r r copy_device; sB $r c C s d} t |D ]W} t j|| } z-t| } t| jr2t| | |d||d t | | ||||||| }n | t j|| f7 } W q t y^ } zt j d| d | j d W Y d} ~ qd} ~ ww t| | ||||||| }|S )zbcopies a directory and the permissions recursively, possibly with ownership and setuid/setgid bitsr r )r r@ rA rB )ERROR: failed to investigate source file r r N)r listdirr r~ r r r$ r rC copy_dir_recursiver r r r r copy_binaries_and_libs)r dirforce_overwriter check_libsr rA r handledfilesfiles2r r r r r r r r c s *r c C s | d dkr | dd } |D ]j} | | v rqzt | } W nY tyu } zM| jdkr\|dkrQt| } t| dkrFt| | |||||d| d } n%|rPtd| d n|r[td | d ntj d | d | j d W Y d} ~ qd} ~ ww t | t j | |d||d tt j | d | | }zt |}d}W n+ ty } z | jdkrd}ntj d| | d | j d W Y d} ~ nd} ~ ww |dkr|rt|js|rtd| d q|rE|r1t|jr!|rtd| d zt | W nJ ty } ztj d| d | j d | d W Y d} ~ n)d} ~ ww t|jr0td| d nt|jr9n |rDtd| d qt | t j | |d||d t| jrt | }|r|rmtd| d zt | W n& ty } ztj d| d | j d | d W Y d} ~ nd} ~ ww ztd| d | t || W n ty Y nw | | |d dkrt j t j t j | |}t| |g||||||| } nbt| jrt| | ||||||| } nNt| jr#|r td | d | n td | d | t | ||||| | | n t | js1t | jr9t | | || n tj d | d t | tj! }|ry| "d dksj| "d!dksj|tj#tj$B tj%B @ ryt&| }t| |||d|| d"} q| S )#z>copies a list of executables and their libraries to the chrootr r3 NrU r r )r r try_glob_matchingr zSource file(s) z do not existz Source file z does not existr r r r? z.ERROR: failed to investigate destination file ry z" already exists, will not touch itzDestination file z$ exists, will delete to force updatezERROR: failed to delete z cannot force update zDestination dir z existszDestination symlink r r zTrying to link r zFailed to find how to copy z= into a chroot jail, please report to the Jailkit developers libz.so)r )'r r r globrd r r& r r r r rC r r r5 r r r r$ r S_ISREGunlinkr# r% r appendr~ r r r r r r r r S_IXUSRS_IXGRPS_IXOTHrx )r binarieslistr r r r rA r r r filer r r chrootrfilechrootsbchrootfile_existsr rq libsr r r r s "2 2 >r c C s> g }| ||r | ||}|dD ] }|| g7 }q|S )zretrieves a comma separated option from the configparser and splits it into a list, returning an empty list if it does not exist,) has_optionr re strip) cfgparser sectionname optionnamer6 inputstrr r r r config_get_option_as_list s r ERRORc C s, t d t |d | | t| d S )Nry r )r& r exit)exitnomessage usagefunctyper r r clean_exit s r c C s zt |d}W n Y dS | }tjdkr"t|tr"|dd}t|dkrY|d}t||kr?|| | kr?| dS | }tjdkrSt|trS|dd}t|dks(dS )Nrr rN rP rQ rl r ) openr_ r r` ra rb rc rd re close)itemnumfilenamefdri pwstructr r r test_numitem_exist s" r c C t | d|S Nr r )user passwdfiler r r test_user_exist r c C r r r )group groupfiler r r test_group_exist r r! c C s4 | d dkr | d d } t | d|dddd tjdd dkrEt| d d t| d d t| d d t| d d n*tj| d sUt| d d}nt| d d}| }tj dkrpt |t rp| dd}t |dkr|d}t |dkr|d |v s|d |v r|rtd|d d | d z ||d W n ty Y nw z ||d W n ty Y nw | }tj dkrt |t r| dd}t |dksv|dd t |dkrktd d}| }tj dkrt |t r| dd}t |dkrg|d}t |dkrJ|d |v s&|d |v rJ|| |r<td|d d | d |d |vrJ||d g7 }| }tj dkr`t |t r`| dd}t |dks | | tj| d st| d d}nt| d d}| }tj dkrt |t r| dd}t |dkr|d}t |dkr|d |v s|d |v r|rtd |d d | d z ||d W n ty Y nw z ||d W n ty Y nw | }tj dkr t |t r | dd}t |dks|dd t |dkrtdd}| }tj dkr<t |t r<| dd}t |dkr|d}t |dkrs|d |v s]|d |v rs|| |rstd |d d | d | }tj dkrt |t r| dd}t |dksC| | d S ) Nr r3 z/etc/r r? r rn r z /etc/passwdaz /etc/spwd.dbz /etc/pwd.dbz/etc/master.passwdwzr+rN rP rQ rl rO rU zuser z exists in r z writing user r z /etc/groupzgroup zwriting group )rC r r r r r r isfiler_ r` ra rb rc rd re r& remove ValueErrorseekr ) r usersgroupsr fd2ri r r groupstructr r r init_passwd_and_group s r, c C sL t d}|d}|D ]}t j|| }t j|r#t j| S q d S )NPATHrl )r getenvre r r~ rf r4 )r search_pathpathsr joinedr r r find_file_in_pathx s r2 c C s@ g }| D ]}|d dkr| | qt|}|r | | q|S )Nr r3 )r r2 )r0 paths2r tmp2r r r find_files_in_path s r5 )r )ry r )r r r )r r r r )r r )r ), __future__r os.pathr r r r r r r\ r r r r+ r9 r< rF rk rr rt rx r r r r r r r} r rC r r r r r r r r r r r! r, r2 r5 r r r r <module> sT **! D > (!h c