Gecko [ tanishkshah.com ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-09-04 11:50
downgrades	[ DIR ]	drwxr-xr-x	2026-09-04 11:42
activate	2.3 KB	-rwxr-xr-x	2026-08-11 11:38
autorestore.py	11.18 KB	-rwxr-xr-x	2026-08-11 11:38
cache_phpdata.py	7.27 KB	-rwxr-xr-x	2026-08-11 11:38
cache_rubygems.py	1.42 KB	-rwxr-xr-x	2026-08-11 11:38
clinfo.php	216 B	-rw-r--r--	2026-08-11 11:38
cloudlinux-awp-installer.py	5.29 KB	-rwxr-xr-x	2026-08-11 11:38
cloudlinux-cli-user.py	491 B	-rwxr-xr-x	2026-08-11 11:38
cloudlinux-cli.py	490 B	-rwxr-xr-x	2026-08-11 11:38
cloudlinux-selector.py	654 B	-rwxr-xr-x	2026-08-11 11:38
cloudlinux-xray.py	807 B	-rwxr-xr-x	2026-08-11 11:38
cloudlinux_cli.py	48.11 KB	-rw-r--r--	2026-08-11 11:38
cloudlinux_cli_user.py	19.98 KB	-rw-r--r--	2026-08-11 11:38
cpanel_api.py	11.39 KB	-rw-r--r--	2026-08-11 11:38
create_translate_template.py	505 B	-rwxr-xr-x	2026-08-11 11:38
delete-isp-plugin.sh	318 B	-rwxr-xr-x	2026-08-11 11:38
dynamicui.py	4.53 KB	-rwxr-xr-x	2026-08-11 11:38
dynamicui_base.py	565 B	-rw-r--r--	2026-08-11 11:38
dynamicui_cpanel.py	3.05 KB	-rw-r--r--	2026-08-11 11:38
dynamicui_da.py	2.44 KB	-rw-r--r--	2026-08-11 11:38
dynamicui_plesk.py	1.25 KB	-rw-r--r--	2026-08-11 11:38
fix-nodejs-environments.py	3.59 KB	-rwxr-xr-x	2026-08-11 11:38
generate_locale_files_for_plesk.py	2.97 KB	-rwxr-xr-x	2026-08-11 11:38
install-cpanel-plugin.sh	1.38 KB	-rwxr-xr-x	2026-08-11 11:38
install-plesk-plugin.sh	1.8 KB	-rwxr-xr-x	2026-08-11 11:38
installsupergrp.sh	991 B	-rwxr-xr-x	2026-08-11 11:38
libcagefs.py	7.61 KB	-rw-r--r--	2026-08-11 11:38
libcloudlinux.py	38.66 KB	-rw-r--r--	2026-08-11 11:38
libsupport.py	2.45 KB	-rw-r--r--	2026-08-11 11:38
node_wrapper	272 B	-rwxr-xr-x	2026-08-11 11:38
npm_wrapper	1.69 KB	-rwxr-xr-x	2026-08-11 11:38
plesk-cgi.sh	3.15 KB	-rwxr-xr-x	2026-08-11 11:38
plesk_nginx_php_sync.py	5.87 KB	-rw-r--r--	2026-08-11 11:38
python_wrapper	572 B	-rwxr-xr-x	2026-08-11 11:38
set_env_vars.py	4.57 KB	-rwxr-xr-x	2026-08-11 11:38
sync_locales.py	2.97 KB	-rwxr-xr-x	2026-08-11 11:38
ui_package_installer.py	4.93 KB	-rw-r--r--	2026-08-11 11:38

Rename

#!/opt/cloudlinux/venv/bin/python3 -sbb
# CLOS-5528 (F-14): -s skips the user-site directory so an accidental root
# invocation of this script (or a compromised user home) cannot inject a
# ~/.local/lib/pythonX.Y/site-packages module that shadows a stdlib name.
# All shipped callers (commons/bin/{python,node,npm}_wrapper) already reject
# EUID==0 and this script is not setuid, not sudoers-aliased, not called
# from RPM scriptlets — the flag is defence-in-depth. -bb (warn-then-error
# on implicit bytes/str mix) is preserved. Combined short flags parse
# correctly under Python (-sbb == -s -b -b).
# -*- coding: utf-8 -*-

# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2019 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

from __future__ import print_function
from __future__ import division
from __future__ import absolute_import
import os
import sys
import getpass

from future.utils import iteritems

from clselect.clselectnodejs.apps_manager import ApplicationsManager as NodeJsAppsManager
from clselect.clselectpython.apps_manager import ApplicationsManager as PythonAppsManager, get_venv_rel_path
from clselect.utils import get_using_realpath_keys

def get_app_name(interpreter):
    """
    Get application name via CL_APP_ROOT variable
    :param interpreter: interpreter name
    :return: str application name
    """
    if os.environ.get('CL_APP_ROOT'):
        return os.environ['CL_APP_ROOT']
    elif interpreter == 'python':
        abs_venv_path = os.environ['VIRTUAL_ENV']
        user_home = os.environ['HOME']
        # /home/<username>/virtualenv/<name>/<version> ->
        # /virtualenv/<name>
        vevn_rel_path = os.path.dirname(abs_venv_path).replace(user_home + '/', '', 1)
        # if VENV_REL_PATH contains _ we cannot
        # clearly define app_root and should guess
        if '_' in vevn_rel_path:
            # scanner-triage: set_env_vars.py hard-rejects root at __main__ via is_root()
            # and is installed 0755 with no setuid, so a spoofed getpass.getuser() only
            # reads files with the attacker's own UID — no elevation. User-side interpreter
            # invocations also run inside CageFS where other users' /home is invisible.
            username = getpass.getuser()
            # in python CL_APP_ROOT is not set, we must guess by env path
            for app_root in PythonAppsManager().get_user_config_data(username):
                _, rel_path = get_venv_rel_path(username, app_root)
                if rel_path == vevn_rel_path:
                    return app_root
            return None
        else:
            return vevn_rel_path.replace('virtualenv/', '', 1)
    else:
        raise NotImplementedError(
            'I don\'t know how to get app_root for %s' % interpreter)

def get_env_vars(_app_name, interpreter):
    """
    Get environment variables from user config for given application name
    :param _app_name: application name
    :param interpreter: interpreter name
    :return: dict {ENV_VAR_NAME: VALUE}
    """
    _env_vars = {}
    username = getpass.getuser()
    try:
        full_app_config = get_app_full_conf(username, _app_name, interpreter)
        if interpreter == 'nodejs':
            _env_vars['NODE_ENV'] = full_app_config['app_mode']
        _env_vars.update(full_app_config['env_vars'])
    except KeyError:
        pass
    return _env_vars

def set_env_vars(dict_env_vars):
    """
    Print to stdout bash strings with environment variables
    :param dict_env_vars: dict with environment variables
    :return: None
    """
    for key, var in iteritems(dict_env_vars):
        print('export {}="{}"'.format(key, var))

def is_root():
    return os.geteuid() == 0

def get_app_full_conf(user, app, interpreter):
    if interpreter == 'nodejs':
        manager = NodeJsAppsManager()
    elif interpreter == 'python':
        manager = PythonAppsManager()
    else:
        raise NotImplementedError()
    full_user_config = manager.get_user_config_data(user)
    if not full_user_config:
        print("User config was not found or empty")
        sys.exit(0)
    return get_using_realpath_keys(user, app, full_user_config)

if __name__ == "__main__":
    if is_root():
        print("This program is not intended to be run as root.")
        sys.exit(1)
    args = sys.argv
    if len(args) < 2:
        print("Interpreter is not passed.")
        sys.exit(1)
    app_name = get_app_name(sys.argv[1])
    if app_name is None:
        print("Unknown application.")
        sys.exit(1)
    env_vars = get_env_vars(app_name, sys.argv[1])
    set_env_vars(env_vars)