Gecko [ tanishkshah.com ]

Name	Size	Permission	Date
.cagefs.empty	[ DIR ]	drwxr-xr-x	2026-09-04 11:35
__pycache__	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
conf.d	[ DIR ]	drwx------	2026-09-04 11:35
configs	[ DIR ]	drwxr-xr-x	2026-09-04 11:34
cpanel	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
exclude	[ DIR ]	drwxr-x---	2026-09-25 05:25
exclude.d	[ DIR ]	drwxr-x---	2026-09-04 11:35
safeprograms	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
scriptlets	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
service	[ DIR ]	drwxr-xr-x	2026-09-04 11:37
.lock	0 B	-rw-r--r--	2026-09-04 12:12
065-passenger-cagefs	395 B	-rwxr-xr-x	2026-07-31 12:29
cagefs_da_lib.py	6.13 KB	-rw-r--r--	2026-07-31 12:29
cagefs_docroots_monitor	2.67 MB	-rwxr-xr-x	2026-07-31 12:29
cagefs_universal_hook_lib.py	3.72 KB	-rw-r--r--	2026-07-31 12:29
cagefs_without_lve_lib.py	22.6 KB	-rw-r--r--	2026-07-31 12:29
cagefsctl.py	252.76 KB	-rw-r--r--	2026-07-31 12:29
cagefshooks.py	11.23 KB	-rw-r--r--	2026-07-31 12:29
cagefslib.py	141.13 KB	-rw-r--r--	2026-07-31 12:29
cagefsreconfigure.py	29 KB	-rw-r--r--	2026-07-31 12:29
check_params.py	20.63 KB	-rwxr-xr-x	2026-07-31 12:29
clean_user_alt_php_sessions_plesk	4.71 KB	-rwxr-xr-x	2026-07-31 12:29
clean_user_php_sessions	3.62 KB	-rwxr-xr-x	2026-07-31 12:29
exclude_users_cleaner.py	3.77 KB	-rwxr-xr-x	2026-07-31 12:29
feature_manager.py	14.03 KB	-rwxr-xr-x	2026-07-31 12:29
fix_fpm_services_in_container	414 B	-rwxr-xr-x	2026-07-31 12:29
generic_hook_lib.py	17.07 KB	-rw-r--r--	2026-07-31 12:29
logs.py	655 B	-rw-r--r--	2026-07-31 12:29
migrate.sh	3 KB	-rwxr-xr-x	2026-07-31 12:29
phpinivalidator.py	6.46 KB	-rw-r--r--	2026-07-31 12:29
repair_homes.log	60 B	-rw-r--r--	2026-09-04 11:35
repair_homes.py	34.46 KB	-rwxr-xr-x	2026-07-31 12:29
sanity_check.py	9.62 KB	-rw-r--r--	2026-07-31 12:29
setup_multiphp_integration	408 B	-rwxr-xr-x	2026-07-31 12:29
signals_handlers.py	857 B	-rw-r--r--	2026-07-31 12:29
virtmp_mount.py	8.88 KB	-rw-r--r--	2026-07-31 12:29

Rename

#!/opt/cloudlinux/venv/bin/python3 -bb
# -*- coding: utf-8 -*-

# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2019 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

from __future__ import print_function
from __future__ import absolute_import
from __future__ import division
from __future__ import unicode_literals
from future import standard_library
standard_library.install_aliases()
from builtins import *
import glob
import os
import sys
from pwd import getpwnam

from clcommon.utils import get_file_lines, write_file_lines
from clcommon.cpapi import cpusers, NotSupported
from clcommon.utils import mod_makedirs

# cagefs imports
LIBDIR = '/usr/share/cagefs'
# prepend so the trusted root-owned dir wins over any inherited
# PYTHONPATH entry when this root-run cleaner is executed.
sys.path.insert(0, LIBDIR)
from cagefsctl import EXCLUDE_PATH

NEW_EXCLUDE_PATH = '/usr/share/cagefs/exclude.d'

def _is_user_present_in_system(username):
    try:
        getpwnam(username)
        return True
    except KeyError:
        return False

def _is_exclude_user(cp_users, username):
    """
    Determines whether the user should be excluded from CageFS
    :param cp_users: Panel users lst
    :param username: username to check
    :return: True - user should be excluded from CageFs, False - else
    """
    if username in cp_users:
        # Panel user should not be excluded from CageFS
        return False
    if _is_user_present_in_system(username):
        # User present in system, but absent in panel - exclude from CageFS
        return True
    return False

def _process_file(cp_users, source_filename, dest_filename):
    """
    Copies usernames from source file to destination file and excudes absent and panel users
    :param source_filename: Source filename (/usr/share/cagefs/exclude.d/..)
    :param dest_filename: Destination filename (/etc/cagefs/exclude/..)
    :return: None
    """
    source_lines = get_file_lines(source_filename)
    if os.path.isfile(dest_filename):
        dest_lines = get_file_lines(dest_filename)
    else:
        dest_lines = []
    # Determine manually added users to destination file and put them to output line list
    source_users = [x.strip() for x in source_lines]
    dest_users = [x.strip() for x in dest_lines]
    manually_added_users_list = list(set(dest_users) - set(source_users))
    lines_for_write = [line+'\n' for line in manually_added_users_list if line]
    for username in source_users:
        if _is_exclude_user(cp_users, username):
            lines_for_write.append(username + '\n')
    # Write new file if need
    if not lines_for_write:
        # Nothing to write
        try:
            os.remove(dest_filename)
        except (OSError, IOError):
            pass
    else:
        if sorted(dest_lines) != sorted(lines_for_write):
            write_file_lines(dest_filename, lines_for_write, 'w')
            os.chmod(dest_filename, 0o0600)

def main():
    # Create /etc/cagefs/exclude directory
    try:
        if not os.path.isdir(EXCLUDE_PATH):
            mod_makedirs(EXCLUDE_PATH, 0o0751)
    except (OSError, IOError) as e:
        print("Error:", str(e))
        sys.exit(1)
    try:
        # Get panel users list
        cp_users = cpusers()
    except NotSupported:
        cp_users = ()
    exclude_file_list = glob.glob(os.path.join(NEW_EXCLUDE_PATH, '*'))
    is_error = False
    for exclude_file in exclude_file_list:
        exclude_file_to_write = os.path.join(EXCLUDE_PATH, os.path.basename(exclude_file))
        try:
            _process_file(cp_users, exclude_file, exclude_file_to_write)
        except (OSError, IOError) as e:
            print("Error:", str(e))
            is_error = True
    sys.exit(1 if is_error else 0)

if "__main__" == __name__:
    main()