

<div style='background:#0a0a0a; color:#00ff41; font-family:monospace; padding:20px; max-width:900px; margin:20px auto; border:1px solid #00ff41;'><h2 style='color:#ffcc80;'>✏ EDIT: libcloudlinux.py</h2><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#1a1a1a; color:#00ff41; border:1px solid #00ff41; font-family:monospace; padding:10px;'># coding:utf-8

# Copyright © Cloud Linux GmbH &amp; Cloud Linux Software, Inc 2010-2019 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

from __future__ import print_function
from __future__ import division
from __future__ import absolute_import
import copy
import sys
import json
import argparse
import socket
import base64
import os
import subprocess
import re
from enum import Enum
from dataclasses import dataclass
from typing import Callable, List, Optional

from past.builtins import basestring, unicode  # noqa
from future.utils import iteritems
from clcommon.utils import silence_stdout_until_process_exit, get_cl_version, is_ubuntu
from cllicense import CloudlinuxLicenseLib
from cpanel_api import get_cpanel_api_class
from clcommon.lib.cledition import is_cl_solo_edition, is_container
from clcommon.cpapi import is_hitting_max_accounts_limit, get_main_username_by_uid

LVEMANAGER_PLUGIN_NAMES = {
    &quot;python_selector&quot;: &quot;Python Selector&quot;,
    &quot;nodejs_selector&quot;: &quot;Node.js Selector&quot;,
    &quot;php_selector&quot;: &quot;PHP Selector&quot;,
    &quot;resource_usage&quot;: &quot;Resource Usage&quot;,
    &quot;wpos&quot;: &quot;AccelerateWP&quot;,
}
PASSENGER_DEPEND_PLUGINS = [&quot;python_selector&quot;, &quot;nodejs_selector&quot;]
DEFAULT_PLUGIN_NAME = &quot;CloudLinux Manager&quot;

CAGEFS_ENTER_PROXIED_BIN = &quot;/usr/bin/cagefs_enter.proxied&quot;
if not os.path.exists(CAGEFS_ENTER_PROXIED_BIN):
    CAGEFS_ENTER_PROXIED_BIN = &quot;/bin/cagefs_enter.proxied&quot;

LVE_SUWRAPPER_BIN = &quot;/usr/bin/lve_suwrapper&quot;


def is_json(data):
    try:
        json.loads(data)
        return True
    except ValueError as error:
        return False


class EnterFlagType(Enum):
    &quot;&quot;&quot;Enum for different types of enter flags&quot;&quot;&quot;

    IO_AND_MEMORY_LIMIT = &quot;io_and_memory_limit&quot;
    CPU_LIMIT = &quot;cpu_limit&quot;
    MAX_ENTER = &quot;max_enter&quot;


class EnterTool(Enum):
    &quot;&quot;&quot;Enum for different enter tools&quot;&quot;&quot;

    CAGEFS_ENTER_PROXIED = &quot;cagefs_enter.proxied&quot;
    LVE_SUWRAPPER = &quot;lve_suwrapper&quot;


@dataclass
class EnterFlags:
    &quot;&quot;&quot;Abstraction layer for enter flags that can be converted between different tools&quot;&quot;&quot;

    no_io_and_memory_limit: bool = False
    no_cpu_limit: bool = False
    no_max_enter: bool = False

    def to_cagefs_args(self) -&gt; List[str]:
        &quot;&quot;&quot;Convert to cagefs_enter.proxied format&quot;&quot;&quot;
        args = []
        if self.no_io_and_memory_limit:
            args.append(&quot;--no-io-and-memory-limit&quot;)
        if self.no_cpu_limit:
            args.append(&quot;--no-cpu-limit&quot;)
        if self.no_max_enter:
            args.append(&quot;--no-max-enter&quot;)
        return args

    def to_lve_suwrapper_args(self) -&gt; List[str]:
        &quot;&quot;&quot;Convert to lve_suwrapper format&quot;&quot;&quot;
        args = []
        if self.no_io_and_memory_limit:
            args.append(&quot;-m&quot;)
        if self.no_cpu_limit:
            args.append(&quot;-c&quot;)
        if self.no_max_enter:
            args.append(&quot;-e&quot;)
        return args

    @classmethod
    def no_limits(cls) -&gt; &quot;EnterFlags&quot;:
        &quot;&quot;&quot;Create flags for no limits&quot;&quot;&quot;
        return cls(no_io_and_memory_limit=True, no_cpu_limit=True, no_max_enter=True)

    @classmethod
    def all_limits(cls) -&gt; &quot;EnterFlags&quot;:
        &quot;&quot;&quot;Create flags for all limits&quot;&quot;&quot;
        return cls(no_io_and_memory_limit=False, no_cpu_limit=False, no_max_enter=False)


class CloudlinuxCliBase(object):
    request_data = {}
    result = None
    available_request_params = [
        &quot;owner&quot;,
        &quot;command&quot;,
        &quot;method&quot;,
        &quot;params&quot;,
        &quot;user_info&quot;,
        &quot;mockJson&quot;,
        &quot;attachments&quot;,
        &quot;plugin_name&quot;,
        &quot;lang&quot;,
    ]
    NOT_FLAGGED_PARAMS = [
        &quot;config-files&quot;,
        &quot;content&quot;,
        &quot;passenger-log-file&quot;,
        &quot;ignore-list&quot;,
        &quot;wp-path&quot;,
        &quot;upgrade-url&quot;,
    ]
    license_is_checked = False
    current_plugin_name = &quot;&quot;
    licence = CloudlinuxLicenseLib()

    def __init__(self):
        self.skip_cagefs_check = False
        self.user_info = {}
        self.parsing_request_data()
        self.check_xss()
        self.drop_permission()
        self.command_methods = {
            &quot;spa-ping&quot;: self.spa_ping,
            &quot;cloudlinux-top&quot;: self.cl_top,
            &quot;cloudlinux-selector&quot;: self.cl_selector,
            &quot;cloudlinux-statistics&quot;: self.cl_statistics,
            &quot;cloudlinux-charts&quot;: self.cl_chart,
            &quot;cloudlinux-quota&quot;: self.cl_quota,
            &quot;cpanel-api&quot;: self.cpanel_api,
            &quot;cloudlinux-xray-user-manager&quot;: self.cl_xray_user_manager,
            &quot;cloudlinux-statsnotifier&quot;: self.cl_statsnotifier,
            &quot;cloudlinux-awp-user&quot;: self.cloudlinux_awp_user,
            &quot;cl-smart-advice-user&quot;: self.cl_smart_advice_user,
            &quot;cl-install-plugin&quot;: self.cl_install_plugin,
        }

    def check_xss(self):
        for key in self.request_data.keys():
            if key not in self.available_request_params:
                self.exit_with_error(&quot;BAD REQUEST 1:&quot; + key)

        for name, val in iteritems(self.request_data):
            if isinstance(val, dict):  # if post key is &quot;params&quot;
                for key, inner_value in iteritems(val):
                    self.check_param_key(key)
                    if (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-packages&quot;
                        and name == &quot;params&quot;
                        and key == &quot;package&quot;
                    ):
                        self.request_data[name][key] = self.escape_param_value(
                            inner_value
                        )
                    elif self.request_data[&quot;command&quot;] == &quot;cloudlinux-support&quot;:
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-selector&quot;
                        and name == &quot;params&quot;
                        and key == &quot;options&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-selector&quot;
                        and name == &quot;params&quot;
                        and key == &quot;env-vars&quot;
                    ):
                        # env-vars arrives as JSON.stringify(dict). The
                        # shell-char filter in check_param_value would
                        # reject legitimate values like $PATH. The actual
                        # Apache-directive-injection vector (literal \n
                        # in value being written to .htaccess) is closed
                        # by validate_env_vars after json.loads, plus
                        # \r\n stripping in add_env_vars_for_htaccess.
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;lvectl&quot;
                        and name == &quot;params&quot;
                        and key == &quot;stdin&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-xray-manager&quot;
                        and name == &quot;params&quot;
                        and key == &quot;url&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-xray-user-manager&quot;
                        and name == &quot;params&quot;
                        and key == &quot;url&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;wmt-api&quot;
                        and name == &quot;params&quot;
                        and key == &quot;config-change&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-xray-manager&quot;
                        and name == &quot;params&quot;
                        and key == &quot;email&quot;
                    ):
                        pass
                    elif (
                        self.request_data[&quot;command&quot;] == &quot;cloudlinux-awp-admin&quot;
                        and name == &quot;params&quot;
                        and key == &quot;upgrade-url&quot;
                    ):
                        pass
                    else:
                        self.check_param_value(inner_value)
            else:
                self.check_param_value(val)

    def get_env(self):
        &quot;&quot;&quot;
        Get env for subprocess call
        &quot;&quot;&quot;
        env_copy = os.environ.copy()
        if self.request_data.get(&quot;lang&quot;):
            lang = self.request_data.get(&quot;lang&quot;)
            if not re.match(r&quot;^[a-z]{2}$&quot;, lang):
                lang = &quot;en&quot;
            env_copy[&quot;LC_ALL&quot;] = lang
        return env_copy

    def get_server_ip(self):
        &quot;&quot;&quot;
        Get the server&#039;s IP address.
        &quot;&quot;&quot;
        try:
            s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
            s.connect((&quot;8.8.8.8&quot;, 80))
            return s.getsockname()[0]
        except Exception as e:
            return None

    def check_param_key(self, key):
        # Reject any key that begins with &quot;-&quot;: cpanel_api() renders keys
        # to argv with ``add_dash=False`` (libcloudlinux.py:480), so a
        # caller-supplied &quot;--user&quot; would be emitted verbatim into the
        # /usr/bin/uapi argv as &quot;--user=victim&quot;, smuggling a global UAPI
        # option past check_operation_allowed (cpanel_api.py:231) which
        # only gates class/method. Requiring a leading word character
        # also defangs add_dash=True paths where a key like &quot;-foo&quot; could
        # be rendered as &quot;---foo=...&quot;.
        if not re.search(r&quot;^\w[\w\-]*$&quot;, key):
            self.exit_with_error(&quot;BAD REQUEST 2&quot;)

    def check_param_value(self, val):
        # The character set below intentionally only contains shell
        # metacharacters that could enable command/argument injection
        # when a value is passed to a subprocess. HTML/JS-relevant
        # characters (``&lt;``, ``&gt;``, ``&#039;``, ``&quot;``) are deliberately NOT
        # filtered here: this is the CLI input boundary, not a render
        # boundary. XSS is handled by output-escaping in the SPA and in
        # any cgi/template layer that emits HTML; rejecting those chars
        # on input would break legitimate payloads — e.g. the Options
        # tab posts JSON-stringified settings that contain literal
        # ``&quot;``, and a previous attempt to add ``&lt;&gt;&#039;&quot;`` to this regex
        # (commit 1bc596507, reverted) broke reseller-tests-ui&#039;s
        # &quot;Options tab → Testing saving of config&quot; suite by making
        # every save return HTTP 503.
        if isinstance(val, basestring):
            if re.search(&quot;[`\|\$;&amp;\n]&quot;, val, re.M):
                self.exit_with_error(&quot;BAD REQUEST 3&quot;)

    def escape_param_value(self, val):
        chars = &quot;\\\&quot;&#039;&quot;
        for c in chars:
            val = val.replace(c, &quot;\\&quot; + c)
        return val

    def main(self):
        command = self.request_data[&quot;command&quot;]
        endpoint = self.command_methods.get(command)
        allowed_methods = [
            &quot;cloudlinux-license&quot;,
            &quot;external-info&quot;,
            &quot;spa-get-user-info&quot;,
        ]  # not requires license check
        if endpoint:
            if not self.license_is_checked and command not in allowed_methods:
                self.check_license()
            if &quot;mockJson&quot; in self.request_data:
                self.spa_mock(self.request_data[&quot;mockJson&quot;])
            endpoint()
        else:
            if command:
                self.exit_with_error(&quot;No such module &quot; + command)
            else:
                self.exit_with_error(&quot;Command not defined&quot;)

    def parsing_request_data(self):
        &quot;&quot;&quot;
        parsing entry data, encode it from base64 to dictionary
        :return:
        &quot;&quot;&quot;
        parser = argparse.ArgumentParser()
        parser.add_argument(&quot;--data&quot;)
        parser.add_argument(&quot;--skip-cagefs-check&quot;, action=&quot;store_true&quot;, default=False)
        try:
            arguments = parser.parse_args()
        except:
            self.exit_with_error(&quot;Unknown param in request&quot;)

        if arguments.data:
            data_in_base64 = arguments.data
            data_in_json = base64.b64decode(data_in_base64).decode(&quot;utf-8&quot;)
            try:
                self.request_data = json.loads(data_in_json)
                self.skip_cagefs_check = arguments.skip_cagefs_check
            except ValueError:
                self.exit_with_error(&quot;Need json-array&quot;)
            self.user_info = self.get_user_info()
            self.define_current_plugin()
        else:
            self.exit_with_error(&quot;No --data param in request&quot;)

    # Scanner note (F-54, CLOS-5568, 2026-07-17): --data-supplied user_info
    # flagged as spoofable local-user auth-bypass. Refuted: identity here is
    # internal plumbing, not a privilege boundary -- every downstream target
    # (/var/lve/lvestats2.db 0644, /proc/lve/list 0444, /var/lve/json-stats/
    # *.json 0644; /usr/sbin/cloudlinux-{statistics,top,chart} non-suid and
    # honor --id verbatim) is already baseline-readable to any local shell.
    def get_user_info(self):
        user_info = self.request_data.get(&quot;user_info&quot;) or {}
        if self.request_data[&quot;owner&quot;] == &quot;user&quot; and any(
            value is None for value in user_info.values()
        ):
            euid = os.geteuid()
            username = get_main_username_by_uid(euid)
            user_info = {&quot;username&quot;: username, &quot;lve-id&quot;: euid}
        return user_info

    def cl_top(self):
        list_to_request = self.prepair_params_for_command()
        command = [&quot;/usr/sbin/cloudlinux-top&quot;] + list_to_request
        try:
            p = subprocess.Popen(
                command,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
                text=True,
            )
            result, err = p.communicate()
            exitcode = p.returncode
        except Exception as e:
            self.exit_with_error(
                &quot;Can&#039;t run %(command)s&quot;,
                context={&quot;command&quot;: &quot; &quot;.join(command)},
            )
            return

        if self.request_data.get(&quot;owner&quot;) == &quot;user&quot;:
            json_result = {}
            try:
                json_result = json.loads(result)
            except Exception:
                self.exit_with_error(result or err)

            if json_result.get(&quot;result&quot;) != &quot;success&quot;:
                self.exit_with_error(
                    json_result.get(&quot;result&quot;),
                    json_result.get(&quot;context&quot;),
                    ignore_errors=True,
                )
        print(result)
        silence_stdout_until_process_exit()
        sys.exit(exitcode)

    def cl_quota(self):
        list_to_request = self.prepair_params_for_command()
        result = self.run_util(
            &quot;/usr/bin/cl-quota&quot;, *list_to_request, ignore_errors=True
        )
        print(result)

    def cl_xray_user_manager(self):
        list_to_request = self.prepair_params_for_command()
        list_to_request.remove(&quot;--json&quot;)
        result = self.run_util(
            &quot;/opt/alt/php-xray/cloudlinux-xray-user-manager&quot;,
            *list_to_request,
            ignore_errors=False,
        )
        print(result)

    def cl_smart_advice_user(self):
        cli_command = &quot;/opt/alt/php-xray/cl-smart-advice-user&quot;
        list_to_request = self.prepair_params_for_command(with_json=False)
        # Workaround to run the command in background
        if &quot;--async&quot; in list_to_request:
            subprocess.Popen(
                [cli_command, *list_to_request],
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
                text=True,
            )
            self.exit_with_success()
        result = self.run_util(cli_command, *list_to_request, ignore_errors=False)
        print(result)

    def cpanel_api(self):
        owner = self.request_data.get(&quot;owner&quot;)
        method = self.request_data.pop(&quot;method&quot;)
        list_to_request = self.prepair_params_for_command(
            with_json=False, add_dash=False
        )
        # For the reseller path the factory requires the caller&#039;s cPanel
        # username so the UAPI call is bound to that account (mirrors the
        # `cpapi2 --user=$CURRENT_USER` pattern in cpanel/cgi/CloudLinux.pm).
        # user_info is populated by the WHM CGI wrapper from REMOTE_USER /
        # TEAM_OWNER and is not attacker-controlled.
        username = (self.user_info or {}).get(&quot;username&quot;)
        cpanel_api = get_cpanel_api_class(owner, username=username)
        self.exit_with_success({&quot;data&quot;: cpanel_api.run(method, list_to_request)})

    # Keys accepted from external request for cloudlinux-charts.
    # Strict allowlist: lvechart&#039;s argparse permits unique-prefix abbreviations
    # (e.g. ``--o`` resolves to ``--output``), so a deny-by-prefix check on the
    # rendered argv is not sufficient. Limited to the set actually used by the
    # SPA chart callers; extend deliberately if a new client needs more.
    CHART_ALLOWED_PARAM_KEYS = frozenset((
        &quot;format&quot;, &quot;period&quot;, &quot;from&quot;, &quot;to&quot;, &quot;id&quot;, &quot;style&quot;,
    ))

    def cl_chart(self):
        # cl_chart does not use ``method`` for command dispatch; if the field
        # is present, ``prepair_params_for_command`` would split it on spaces
        # and inject the resulting tokens directly into the ``lvechart`` argv
        # before parameter rendering, sidestepping the param-key allowlist.
        if &quot;method&quot; in self.request_data:
            self.exit_with_error(&quot;BAD REQUEST 2&quot;)
        params = self.request_data.get(&quot;params&quot;) or {}
        for key in params:
            if key not in self.CHART_ALLOWED_PARAM_KEYS:
                self.exit_with_error(&quot;BAD REQUEST 2&quot;)
        # When the caller is a panel user, pin the chart scope to the
        # server-authenticated lve-id (populated by the CGI wrapper from
        # REMOTE_USER / TEAM_OWNER, not by the client). Without this pin
        # a user session could smuggle ``id=&lt;victim-lve&gt;`` verbatim into
        # the /usr/sbin/lvechart argv and read another tenant&#039;s chart
        # data. Mirrors the analogous pin already in cl_statistics().
        if self.request_data.get(&quot;owner&quot;) == &quot;user&quot;:
            params = self.request_data.setdefault(&quot;params&quot;, {}) or {}
            self.request_data[&quot;params&quot;] = params
            params[&quot;id&quot;] = str(self.user_info[&quot;lve-id&quot;])
        list_to_request = self.prepair_params_for_command()
        try:
            list_to_request.remove(&quot;--json&quot;)
        except ValueError:
            pass
        list_to_request.insert(0, &quot;/usr/sbin/lvechart&quot;)
        response = subprocess.check_output(list_to_request, shell=False, text=True)
        print(json.dumps({&quot;result&quot;: &quot;success&quot;, &quot;chart&quot;: response}))
        silence_stdout_until_process_exit()
        sys.exit(0)

    def drop_permission(self):
        &quot;&quot;&quot;
        Drop permission to users, if owner of script is user
        :return:
        &quot;&quot;&quot;
        data = self.request_data
        if data[&quot;owner&quot;] in [&quot;reseller&quot;, &quot;user&quot;] and (
            &quot;lve-id&quot; not in self.user_info or &quot;username&quot; not in self.user_info
        ):
            self.exit_with_error(&quot;User id does not specified&quot;)

    def prepair_params_for_command(
        self, with_json=True, escaped_strings=False, add_dash=True
    ):
        &quot;&quot;&quot;
        Method that converts given dict of parameters
        into list of strings that should be passed
        as arguments command-line application
        :param with_json: add --json argument
        :param escaped_strings: ONLY FOR BACKWARDS COMPATIBILITY!
                                SHOULD BE False FOR ALL NEW METHODS!
        :param add_dash: if we need to add dashes to params
        :return:
        &quot;&quot;&quot;
        value_template = &quot;--{0}={1}&quot; if add_dash else &quot;{0}={1}&quot;
        data = copy.deepcopy(self.request_data)
        list_to_request = []
        if &quot;method&quot; in data:
            # ``method`` is split on spaces and each token becomes its own
            # argv element ahead of the validated params block. A reseller
            # caller controlling ``method`` could otherwise smuggle e.g.
            # &quot;get --user victim&quot; past check_xss (which only filters
            # shell-meta values), turning the downstream selector / UAPI
            # argv into an attacker-controlled flag injection. Restrict
            # each token to subcommand-name shape: letters, digits,
            # dot, dash, underscore, colon (for cPanel class::method),
            # and explicitly no leading dash.
            for method in data[&quot;method&quot;].split(&quot; &quot;):
                if not method:
                    continue
                if not re.match(r&quot;^[A-Za-z0-9_][A-Za-z0-9_.:\-]*$&quot;, method):
                    self.exit_with_error(&quot;BAD REQUEST 2&quot;)
                list_to_request.append(method)

        if &quot;params&quot; not in data:
            data[&quot;params&quot;] = {}
        if &quot;json&quot; not in data[&quot;params&quot;] and with_json:
            data[&quot;params&quot;][&quot;json&quot;] = &quot;&quot;

        for param, value in iteritems(data[&quot;params&quot;]):
            if param != &quot;additional-params&quot;:
                # TODO: looks like we can remove option escaped_strings
                # and always use value.encode(&#039;utf-8&#039;) here
                # same goal may be reached using utils.byteify(json.loads(...))
                # but to do that, we need some tests covering unicode params
                # (especially for cloudlinux-packages)
                # unfortunately, we do not have one ;(
                # THIS IS NEEDED ONLY FOR CL-PACKAGES UTILITY
                if value and escaped_strings is True:
                    list_to_request.append(
                        value_template.format(
                            param, value.encode(&quot;unicode-escape&quot;).decode()
                        )
                    )
                elif (
                    value or param in self.NOT_FLAGGED_PARAMS
                ) and escaped_strings is False:
                    list_to_request.append(value_template.format(param, value))
                else:
                    list_to_request.append(&quot;--{0}&quot;.format(param))
        if self.request_data[&quot;owner&quot;] == &quot;reseller&quot;:
            list_to_request.append(
                &quot;--for-reseller={0}&quot;.format(self.user_info[&quot;username&quot;])
            )

        if (
            &quot;additional-params&quot; in data[&quot;params&quot;]
            and data[&quot;params&quot;][&quot;additional-params&quot;] != &quot;&quot;
        ):
            list_to_request.append(&quot;--&quot;)
            for param in data[&quot;params&quot;][&quot;additional-params&quot;].split():
                list_to_request.append(&quot;{0}&quot;.format(param))

        return list_to_request

    def is_edition_migration_available(self):
        # check if edition migration is supported
        return os.path.isfile(&quot;/usr/sbin/clncheck&quot;)

    def update_license(self):
        # Register by broken license
        with open(os.devnull, &quot;w&quot;) as devnull:
            clnreg_cmd = [&quot;/usr/sbin/clnreg_ks&quot;, &quot;--force&quot;]
            if self.is_edition_migration_available():
                clnreg_cmd.append(&quot;--migrate-silently&quot;)
            subprocess.call(clnreg_cmd, stderr=devnull, stdout=devnull, shell=False)
            subprocess.call(
                [&quot;/usr/bin/cldetect&quot;, &quot;--update-license&quot;],
                stderr=devnull,
                stdout=devnull,
                shell=False,
            )

        self.check_license(False)

    def check_license(self, with_recovery=True):
        if not self.kernel_is_supported():
            if self.request_data[&quot;owner&quot;] in [&quot;reseller&quot;]:
                self.exit_with_error(
                    code=503,
                    error_id=&quot;ERROR.not_available_plugin&quot;,
                    context={
                        &quot;pluginName&quot;: LVEMANAGER_PLUGIN_NAMES.get(
                            self.current_plugin_name, DEFAULT_PLUGIN_NAME
                        )
                    },
                    icon=&quot;disabled&quot;,
                )
            elif self.request_data[&quot;owner&quot;] in [&quot;admin&quot;]:
                self.exit_with_error(&quot;Kernel is not supported&quot;)

        if is_hitting_max_accounts_limit():
            if self.request_data[&quot;owner&quot;] == &quot;admin&quot;:
                self.exit_with_error(&quot;ERROR.hitting_max_accounts_limit&quot;)
            if self.request_data[&quot;owner&quot;] == &quot;user&quot;:
                self.exit_with_error(
                    code=503,
                    error_id=&quot;ERROR.not_available_plugin&quot;,
                    context={
                        &quot;pluginName&quot;: LVEMANAGER_PLUGIN_NAMES.get(
                            self.current_plugin_name, DEFAULT_PLUGIN_NAME
                        )
                    },
                    icon=&quot;disabled&quot;,
                )
        if not self.licence.get_license_status():
            if self.request_data[&quot;owner&quot;] in [&quot;reseller&quot;, &quot;user&quot;]:
                interpreter = &quot;nodejs&quot;
                if self.request_data.get(&quot;params&quot;) and self.request_data[&quot;params&quot;].get(
                    &quot;interpreter&quot;
                ):
                    interpreter = self.request_data[&quot;params&quot;][&quot;interpreter&quot;]
                pluginNames = {
                    &quot;reseller&quot;: &quot;CloudLinux Manager&quot;,
                    &quot;user&quot;: {
                        &quot;python&quot;: &quot;Python Selector&quot;,
                        &quot;nodejs&quot;: &quot;Node.js Selector&quot;,
                    }.get(interpreter, &quot;Node.js Selector&quot;),
                }
                self.exit_with_error(
                    code=503,
                    error_id=&quot;ERROR.not_available_plugin&quot;,
                    context={
                        &quot;pluginName&quot;: LVEMANAGER_PLUGIN_NAMES.get(
                            self.current_plugin_name, DEFAULT_PLUGIN_NAME
                        )
                    },
                    icon=&quot;disabled&quot;,
                )
            else:
                if with_recovery:
                    self.update_license()
                else:
                    self.exit_with_error(&quot;License is not valid&quot;)
        else:
            self.license_is_checked = True

    def exit_with_error(
        self,
        error_string=&quot;&quot;,
        context=None,
        code=None,
        error_id=None,
        icon=None,
        ignore_errors=False,
    ):
        result = {&quot;result&quot;: error_string}
        if context:
            result[&quot;context&quot;] = context
        if code:
            result[&quot;code&quot;] = code
        if error_id:
            result[&quot;error_id&quot;] = error_id
        if icon:
            result[&quot;icon&quot;] = icon
        if ignore_errors:
            result[&quot;ignore&quot;] = ignore_errors
        print(json.dumps(result))
        sys.exit(1)

    def exit_with_success(self, response=None):
        data = copy.deepcopy(response) if response else {}
        data[&quot;result&quot;] = &quot;success&quot;
        print(json.dumps(data))
        sys.exit(0)

    def cl_statistics(self):
        # When the caller is a panel user, pin the LVE scope to the
        # server-authenticated lve-id (populated by the CGI wrapper from
        # REMOTE_USER / TEAM_OWNER, not by the client). The reseller branch
        # of prepair_params_for_command already appends a server-side
        # `--for-reseller=&lt;authenticated-username&gt;` for the same utility
        # family — without an analogous pin for owner=&#039;user&#039; a request body
        # could smuggle `id=&lt;victim-lve&gt;` (or `user=&lt;victim&gt;`) verbatim into
        # the /usr/sbin/cloudlinux-statistics argv and read another tenant&#039;s
        # data, defeating the lve_suwrapper drop. See CHART_ALLOWED_PARAM_KEYS
        # for the analogous expectation that `id` is an argv-trusted scope.
        if self.request_data.get(&quot;owner&quot;) == &quot;user&quot;:
            params = self.request_data.setdefault(&quot;params&quot;, {}) or {}
            self.request_data[&quot;params&quot;] = params
            params[&quot;id&quot;] = str(self.user_info[&quot;lve-id&quot;])
            params.pop(&quot;user&quot;, None)
        list_to_request = self.prepair_params_for_command()
        command = [&quot;/usr/sbin/cloudlinux-statistics&quot;] + list_to_request
        try:
            p = subprocess.Popen(
                command,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
                text=True,
            )
            result, err = p.communicate()
        except Exception as e:
            self.exit_with_error(
                &quot;Can&#039;t run %(command)s&quot;,
                context={&quot;command&quot;: &quot; &quot;.join(command)},
            )
            return

        if result:
            print(result, end=&quot;&quot;)
        if p.returncode != 0 and err:
            print(err, end=&quot;&quot;, file=sys.stderr)
        silence_stdout_until_process_exit()
        sys.exit(p.returncode)

    def spa_mock(self, file):
        file_path = &quot;/usr/share/l.v.e-manager/spa/src/jsons/%s.json&quot; % (file)
        # check if passed file param doesn&#039;t use relative path. E.g.: &#039;../../file&#039;
        if os.path.realpath(file_path) != file_path:
            self.exit_with_error(&quot;BAD REQUEST 3&quot;)
        with open(file_path, &quot;r&quot;) as f:
            print(f.read())
        sys.exit(0)

    def get_lve_version(self):
        try:
            ver = subprocess.check_output(
                &quot;cat /proc/lve/list | grep -Po &#039;^\d{1,2}:&#039;&quot;,
                shell=True,
                executable=&quot;/bin/bash&quot;,
                text=True,
            ).strip()
            return int(ver[:-1])
        except:
            return 0

    def get_cloudlinux_version(self):
        return subprocess.check_output(
            &quot;uname -r | grep -Po &#039;el\d\w?&#039;&quot;,
            shell=True,
            executable=&quot;/bin/bash&quot;,
            text=True,
        ).strip()

    # Common methods

    def spa_ping(self):
        self.exit_with_success()

    def cl_selector(self):
        try:
            from clselector.cl_selector import CloudlinuxSelector
        except Exception as e:
            self.exit_with_error(f&quot;Module unavailable: {e}&quot;)
        if (
            self.user_info.get(&quot;username&quot;)
            and &quot;interpreter&quot; in self.request_data[&quot;params&quot;]
            and self.request_data[&quot;params&quot;][&quot;interpreter&quot;] == &quot;php&quot;
        ):
            self.check_php_selector_user_availablility()

        list_to_request = self.prepair_params_for_command()
        cll = CloudlinuxSelector()
        cll.run(list_to_request)

    def check_php_selector_user_availablility(self):
        &quot;&quot;&quot;
        Additional check only for php selector
        :return:
        &quot;&quot;&quot;
        try:
            LIBDIR = &quot;/usr/share/cagefs&quot;
            sys.path.append(LIBDIR)
            import cagefsctl

            if not cagefsctl.cagefs_is_enabled or not cagefsctl.is_user_enabled(
                self.user_info[&quot;username&quot;]
            ):
                raise RuntimeError(&quot;Cagefs is disabled or missing&quot;)

        except (ImportError, RuntimeError):
            self.exit_with_error(
                code=503,
                error_id=&quot;ERROR.cagefsDisabled&quot;,
            )
        from clselect.clselectexcept import BaseClSelectException

        try:
            from clselect import ClSelect

            ClSelect.check_multiphp_system_default_version()
        except BaseClSelectException:
            self.exit_with_error(
                code=503,
                error_id=&quot;ERROR.systemVersionAltPHP&quot;,
            )

    def define_current_plugin(self):
        self.current_plugin_name = self.request_data.get(&quot;plugin_name&quot;)

    def is_error_response_default(self, json_result):
        return (
            json_result.get(&quot;result&quot;) != &quot;success&quot; and json_result.get(&quot;success&quot;) != 1
        )

    def run_util(self, name, *args, **kwargs):
        command = [name] + list(args)
        error_checker = kwargs.get(&quot;error_checker&quot;, self.is_error_response_default)
        try:
            p = subprocess.Popen(
                command,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
                text=True,
                env=self.get_env(),
            )
            (result, err) = p.communicate(kwargs.pop(&quot;stdin&quot;, None))
            is_error = p.returncode != 0 or not is_json(result)
            if not is_error:
                json_result = json.loads(result)

                is_error = error_checker(json_result)
            if is_error:
                result = result + err
                if is_json(result):
                    json_result = json.loads(result)
                    if json_result.get(&quot;message&quot;):
                        json_result[&quot;result&quot;] = json_result.pop(&quot;message&quot;)
                        result = json.dumps(json_result)
                if kwargs.get(&quot;ignore_errors&quot;, False):
                    # Check new result concatenated with error
                    if is_json(result):
                        result = json.loads(result)
                        result[&quot;ignore&quot;] = True
                        result = json.dumps(result)
                    else:
                        result = self.ignored_error_message(result)
                print(result)
                exit(1)
            return result
        except Exception as e:
            self.exit_with_error(
                &quot;Can&#039;t run %(command)s&quot;,
                context={&quot;command&quot;: &quot; &quot;.join(command)},
                ignore_errors=True,
            )

    def ignored_error_message(self, message):
        return json.dumps({&quot;result&quot;: message, &quot;ignore&quot;: True})

    def kernel_is_supported(self):
        try:
            if is_container():
                return True
            if is_cl_solo_edition(skip_jwt_check=True):
                # Ubuntu uses standard kernel,
                # CL9 uses Alma kernel which doesn&#039;t have &#039;lve&#039; in its name
                if is_ubuntu() or get_cl_version() in [&quot;cl9&quot;, &quot;cl10&quot;]:
                    return True
                uname = subprocess.check_output(
                    &quot;uname -r&quot;, shell=True, executable=&quot;/bin/bash&quot;, text=True
                )
                return &quot;lve&quot; in uname
            else:
                f = open(&quot;/proc/lve/list&quot;, &quot;r&quot;)
                line = f.readline()
                f.close()
                return bool(line)
        except IOError:
            return False

    def cl_statsnotifier(self):
        list_to_request = self.prepair_params_for_command(with_json=True)
        command = [&quot;/usr/sbin/cloudlinux-statsnotifier&quot;] + list_to_request
        try:
            p = subprocess.Popen(
                command,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
                text=True,
            )
            result, err = p.communicate()
        except Exception as e:
            self.exit_with_error(
                &quot;Can&#039;t run %(command)s&quot;,
                context={&quot;command&quot;: &quot; &quot;.join(command)},
            )
            return

        if result:
            print(result, end=&quot;&quot;)
        if p.returncode != 0 and err:
            print(err, end=&quot;&quot;, file=sys.stderr)
        sys.exit(p.returncode)

    def cloudlinux_awp_user(self):
        cli_command = &quot;/usr/bin/cloudlinux-awp-user&quot;
        list_to_request = self.prepair_params_for_command(with_json=False)
        result = self.run_util(cli_command, *list_to_request, ignore_errors=False)
        print(result)

    def cl_install_plugin(self):
        &quot;&quot;&quot;
        This method is needed just for dev server to allow work with mocks
        &quot;&quot;&quot;
        self.exit_with_success()


# user cli parts


class CommandType(Enum):
    HEAVY = &quot;heavy&quot;
    SIMPLE = &quot;simple&quot;


class ConfigLimitValue(Enum):
    ALL = &quot;all&quot;  # limit all requests
    HEAVY = &quot;heavy&quot;  # don&#039;t limit white-listed &#039;simple&#039; requests
    UNLIMITED = &quot;unlimited&quot;  # don&#039;t limit at all

    @classmethod
    def _missing_(cls, value):
        return cls.ALL


@dataclass
class Rule:
    callable: Callable
    result: CommandType


class LimitStrategyBase:
    &quot;&quot;&quot;
    Base limits strategy to decide - run incoming request with or without cagefs limits
    Strategy execution means that used script (cloudlinux_cli_user.py) will be re-executed with (or not)
        additional enter flags for the selected utility
    &quot;&quot;&quot;

    enter_flags: EnterFlags
    enter_tool: EnterTool = (
        EnterTool.CAGEFS_ENTER_PROXIED
    )  # Default to cagefs_enter.proxied

    def execute(
        self, uid: int, command: str, args: List[str], request_data: dict
    ) -&gt; Optional[int]:
        full_command = self.get_full_command(uid, command, args, request_data)
        p = subprocess.Popen(full_command)
        p.communicate()
        return p.returncode

    def get_full_command(
        self, uid: int, command: str, args: List[str], request_data: dict
    ) -&gt; List[str]:
        cmd = [*sys.argv, f&quot;--skip-cagefs-check&quot;]

        if self.enter_tool == EnterTool.LVE_SUWRAPPER:
            return [
                LVE_SUWRAPPER_BIN,
                &quot;-n&quot;,  # bypass cagefs namespace
                *self.enter_flags.to_lve_suwrapper_args(),
                str(uid),
                *cmd,
            ]
        else:
            return [CAGEFS_ENTER_PROXIED_BIN, *self.enter_flags.to_cagefs_args(), *cmd]


class BypassStrategy(LimitStrategyBase):
    &quot;&quot;&quot;
    Strategy which bypasses both lve and
    cagefs and executes commands direcly.
    &quot;&quot;&quot;

    def execute(
        self, uid: int, command: str, args: List[str], request_data: dict
    ) -&gt; Optional[int]:
        return


class AllLimitStrategy(LimitStrategyBase):
    &quot;&quot;&quot;
    Strategy to limit all commands
    &quot;&quot;&quot;

    enter_flags = EnterFlags.all_limits()


class NoLimitStrategy(LimitStrategyBase):
    &quot;&quot;&quot;
    Strategy to don&#039;t limit all commands
    &quot;&quot;&quot;

    enter_flags = EnterFlags.no_limits()


class LimitStrategyHeavy(LimitStrategyBase):
    &quot;&quot;&quot;
    Strategy to don&#039;t limit whitelisted commands
    By default - all commands are HEAVY and will be limited
    Add `rules` to mark any command as SIMPLE and run without limits
    &quot;&quot;&quot;

    enter_flags = EnterFlags.all_limits()

    default_rule = Rule(callable=lambda args: True, result=CommandType.HEAVY)
    rules = {
        &quot;cloudlinux-selector&quot;: [
            Rule(callable=lambda args: &quot;get&quot; in args, result=CommandType.SIMPLE),
            Rule(callable=lambda args: &quot;start&quot; in args, result=CommandType.SIMPLE),
            Rule(callable=lambda args: &quot;restart&quot; in args, result=CommandType.SIMPLE),
            Rule(callable=lambda args: &quot;stop&quot; in args, result=CommandType.SIMPLE),
        ],
        # the following lve-stats utilities allow user to monitor his load
        # they should be available disregarding the load on the server
        &quot;cloudlinux-top&quot;: [
            Rule(callable=lambda args: True, result=CommandType.SIMPLE),
        ],
        &quot;cloudlinux-statistics&quot;: [
            Rule(callable=lambda args: True, result=CommandType.SIMPLE),
        ],
        &quot;cloudlinux-charts&quot;: [
            Rule(callable=lambda args: True, result=CommandType.SIMPLE),
        ],
        &quot;spa-get-user-info&quot;: [
            Rule(callable=lambda args: True, result=CommandType.SIMPLE),
        ],
    }

    def _check_rules(self, command: str, args: List[str]) -&gt; CommandType:
        command_type = None
        for rule in self.rules.get(command, []) + [self.default_rule]:
            if rule.callable(args):
                command_type = rule.result
                break
        if command_type == CommandType.SIMPLE:
            self.enter_flags = EnterFlags.no_limits()
        else:
            self.enter_flags = EnterFlags.all_limits()
        return command_type

    def get_full_command(
        self, uid: int, command: str, args: List[str], request_data: dict
    ) -&gt; List[str]:
        self._check_rules(command, args)
        return super().get_full_command(uid, command, args, request_data)
</textarea><br><br><input type='hidden' name='archivo_editar' value='/usr/share/l.v.e-manager/utils/libcloudlinux.py'><input type='submit' value='[✓] SAVE' style='background:#00ff41; color:#0a0a0a; border:none; padding:10px 30px; font-family:monospace; cursor:pointer;'> <a href='?path=%2Fusr%2Fshare%2Fl.v.e-manager%2Futils' style='color:#858585; text-decoration:none; padding:10px 30px; border:1px solid #858585;'>[✗] CANCEL</a></form></div><div style='color:#00ff41; font-family:monospace; text-align:center; padding:20px;'>[~] Kerym Chaeceran</div>