Gecko [ tanishkshah.com ]

Name	Size	Permission	Date
.cagefs.empty	[ DIR ]	drwxr-xr-x	2026-09-04 11:35
__pycache__	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
conf.d	[ DIR ]	drwx------	2026-09-04 11:35
configs	[ DIR ]	drwxr-xr-x	2026-09-04 11:34
cpanel	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
exclude	[ DIR ]	drwxr-x---	2026-09-25 08:35
exclude.d	[ DIR ]	drwxr-x---	2026-09-04 11:35
safeprograms	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
scriptlets	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
service	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
.lock	0 B	-rw-r--r--	2026-09-04 12:12
065-passenger-cagefs	395 B	-rwxr-xr-x	2026-07-31 12:29
cagefs_da_lib.py	6.13 KB	-rw-r--r--	2026-07-31 12:29
cagefs_docroots_monitor	2.67 MB	-rwxr-xr-x	2026-07-31 12:29
cagefs_universal_hook_lib.py	3.72 KB	-rw-r--r--	2026-07-31 12:29
cagefs_without_lve_lib.py	22.6 KB	-rw-r--r--	2026-07-31 12:29
cagefsctl.py	252.76 KB	-rw-r--r--	2026-07-31 12:29
cagefshooks.py	11.23 KB	-rw-r--r--	2026-07-31 12:29
cagefslib.py	141.13 KB	-rw-r--r--	2026-07-31 12:29
cagefsreconfigure.py	29 KB	-rw-r--r--	2026-07-31 12:29
check_params.py	20.63 KB	-rwxr-xr-x	2026-07-31 12:29
clean_user_alt_php_sessions_plesk	4.71 KB	-rwxr-xr-x	2026-07-31 12:29
clean_user_php_sessions	3.62 KB	-rwxr-xr-x	2026-07-31 12:29
exclude_users_cleaner.py	3.77 KB	-rwxr-xr-x	2026-07-31 12:29
feature_manager.py	14.03 KB	-rwxr-xr-x	2026-07-31 12:29
fix_fpm_services_in_container	414 B	-rwxr-xr-x	2026-07-31 12:29
generic_hook_lib.py	17.07 KB	-rw-r--r--	2026-07-31 12:29
logs.py	655 B	-rw-r--r--	2026-07-31 12:29
migrate.sh	3 KB	-rwxr-xr-x	2026-07-31 12:29
phpinivalidator.py	6.46 KB	-rw-r--r--	2026-07-31 12:29
repair_homes.log	60 B	-rw-r--r--	2026-09-04 11:35
repair_homes.py	34.46 KB	-rwxr-xr-x	2026-07-31 12:29
sanity_check.py	9.62 KB	-rw-r--r--	2026-07-31 12:29
setup_multiphp_integration	408 B	-rwxr-xr-x	2026-07-31 12:29
signals_handlers.py	857 B	-rw-r--r--	2026-07-31 12:29
virtmp_mount.py	8.88 KB	-rw-r--r--	2026-07-31 12:29

Rename

#!/opt/cloudlinux/venv/bin/python3 -sbb

from __future__ import absolute_import
from __future__ import division
from __future__ import print_function
from __future__ import unicode_literals
import os
import sys
import glob
import secureio
from clcommon import login_defs
sys.path.append('/usr/share/cagefs')
from cagefslib import (
    clean_dir_from_old_session_files,
    get_opts_from_php_ini, get_alt_dirs,
    is_clean_user_php_sessions_enabled
)
from clcagefslib.domain import (
    get_docroots_of_isolated_websites,
    is_website_isolation_allowed_server_wide
)
from clcagefslib.webisolation.jail_utils import website_suffix_with_hash

VERSIONS = {}
EA_PATH = "/opt/cpanel/%s/root/etc/"
ALT_PATH = "/opt/alt/%s/etc/php.ini"

# default period 1440 sec = 24 min
_DEFAULT_TIMEOUT = 1440

def init_versions():
    global VERSIONS
    versions = lambda l: [os.path.basename(p) for p in l]
    if len(VERSIONS) == 0:
        VERSIONS["EA"] = versions(glob.glob("/etc/scl/prefixes/ea-php[0-9]*"))
        VERSIONS["ALT"] = get_alt_dirs()
    return VERSIONS

def get_ea_versions():
    versions = init_versions()
    return versions["EA"]

def get_alt_versions():
    versions = init_versions()
    return versions["ALT"]

def clean_user(pwnam, paths):
    """
    Drop permissions to given user and clean all session files given with paths dict
    :param object pwnam: pwnam object for some system user
    :param dict paths: looks like {"path": maxlifetime} where path is str and maxlifetime is int
    """
    # Drop permissions
    res = secureio.set_user_perm(pwnam.pw_uid, pwnam.pw_gid, exit=False)
    if res == -1:
        return

for path, mlt in paths.items():
        dir_path = os.path.join(pwnam.pw_dir, ".cagefs", path.lstrip("/"))
        clean_dir_from_old_session_files(dir_path, mlt)

# get back root permissions
    secureio.set_root_perm()

def main():
    if not is_clean_user_php_sessions_enabled():
        sys.exit(0)
    paths = {}

def patch_paths(ini_path, default_path="/tmp", version_key=None):
        (path, mlt) = get_opts_from_php_ini(ini_path, _DEFAULT_TIMEOUT, default_path)
        if path is None or mlt is None:
            return
        if path in paths and paths[path] > mlt:
            paths[path] = mlt
        elif paths.get(path) is None:
            paths[path] = mlt

# cleanup sessions for isolated websites
        if is_website_isolation_allowed_server_wide():
            isolated_websites_pairs = get_docroots_of_isolated_websites()
        else:
            isolated_websites_pairs = dict()
        for isolated_docroots in isolated_websites_pairs.values():
            # websites/<document_root_hash>/<version_path>
            for dr in isolated_docroots:
                website_isolation_path_rel = website_suffix_with_hash(dr)
                paths[f"{website_isolation_path_rel}/home/.cagefs/{path}"] = mlt

for ea_php in get_ea_versions():
        _path = EA_PATH % ea_php
        # Since cPanel 65.9999, etc/php.d/local.ini is located now in etc/php.ini
        old_cpanel_path = os.path.join(_path, "php.d/local.ini")
        new_cpanel_path = os.path.join(_path, "php.ini")
        if os.path.exists(old_cpanel_path):
            ea_path = old_cpanel_path
        else:
            ea_path = new_cpanel_path
        patch_paths(ea_path, version_key=ea_php)

for alt_php in get_alt_versions():
        alt_ini = ALT_PATH % alt_php
        patch_paths(alt_ini, version_key='alt-' + alt_php)

min_uid = int(login_defs('UID_MIN', 500))
    for pwnam in secureio.clpwd.get_user_dict().values():
        if pwnam.pw_uid >= min_uid:
            clean_user(pwnam, paths)

if __name__ == "__main__":
    main()