관리-도구
편집 파일: cl_proc_hidepid.cpython-311.pyc
� �EBg � �z � d dl Z d dlZd dlmZmZ d dlmZmZ d dlm Z m Z ddddd�Z d� Z d � Z dd �Zd � Zd efd�ZdS )� N)�Feature�is_panel_feature_supported)� SysCtlConf�SYSCTL_CL_CONF_FILE)�grep�)proc_can_see_other_uid_and_hidepid_synced� � )�noaccess� invisible�1�2c � � d} t | dd�� � 5 }|D ]g}|� � � }|rO|� d� � s:|� � � }|r$|d dk rd|d v r d d d � � d S �h d d d � � n # 1 swxY w Y n=# t t f$ r)}t d | d t |� � � � Y d }~nd }~ww xY wdS )z� Search for line like "proc /proc proc defaults,hidepid=2,gid=clsupergid 0 0" in /etc/fstab Return True if /proc is mounted with hidepid option in /etc/fstab z /etc/fstab�r�utf-8)�encoding�#r �proczhidepid=� NTzError: failed to parse�:F)�open�strip� startswith�split�IOError� IndexError�print�str)�fstab�f�line� splitted_line�es �py/cl_proc_hidepid.py� hidepid_foundr% sh � � �E� <� �%��w� /� /� /� $�1�� $� $���z�z�|�|��� $����� 4� 4� $�$(�J�J�L�L�M�$� $� �q�)9�V�)C�)C� �Vc�de�Vf�Hf�Hf� #� $� $� $� $� $� $� $� $�� $� $� $� $� $� $� $� $� $� $� $� $���� $� $� $� $��� �Z� � <� <� <� �&��s�C��F�F�;�;�;�;�;�;�;�;�����<���� �5sG �B �A B�3 B � B� B �B�B �B�B �C�+ C�Cc �t � |r#t dd� | � � � � t j | � � S )N� executing� )r �join� subprocess�call)�cmd�verboses r$ �executer. - s4 � �� *� �k�3�8�8�C�=�=�)�)�)� �?�3� � � � Fc � � t � � rdS t t j � � s| rt d� � dS t t �� � }| rt d� � t � � r#| rt d� � t g d�| � � S |� d� � }|� d� � }|d k r#| rt d � � t g d �| � � S | rt d � � t d dd|z dg| � � S )z9 Remount /proc with hidepid=2 option when needed Nz>environment without LVE detected - remounting /proc is skipped)� config_filezapply sysctl settingszUhidepid option is found in /etc/fstab - remounting /proc with options from /etc/fstab)� /bin/mount�-o�remount�/proczfs.proc_can_see_other_uidzfs.proc_super_gid�0zJvirtualized procfs feature is not enabled in sysctl conf - disable hidepid)r2 r3 zremount,hidepid=0,gid=0r5 zenable hidepid for /procr2 r3 zremount,hidepid=2,gid=r5 ) r r r �LVEr r r r% r. �get)r- �sysctl�proc_can_see_other_uid� super_gids r$ � remount_procr< 3 sA � � 1�2�2� ��� %�g�k� 2� 2� � � T� �R� S� S� S��� �$7� 8� 8� 8�F�� '� �%�&�&�&���� J� � k� �i� j� j� j��?�?�?��I�I�I� #�Z�Z�(C� D� D��� � �.�/�/�I� ��$�$� � `� �^� _� _� _��O�O�O�QX�Y�Y�Y�� *� �(�)�)�)� �L�$�(@�9�(L�g�V�X_� `� `�`r/ c � � t dd� � } d} | D ]�}|� � � }||vr�|� |� � }|dk r�7|dz }||d� }|� d� � }|dk r |d|� }n)|� d� � }|dk r |d|� }n dS t |� � c S n # t t t f$ r Y nw xY wdS ) zN Retrieve hidepid gid from /proc/mounts :return: gid, 0 if absent z ,hidepid=� /proc/mountsz,gid=���� N�,r( )r r �find�intr r � ValueError)� lines_gen� gid_prefixr! �poss r$ �get_gid_from_mountsrH S s � � �[�.�1�1�I��J� � � � �D��:�:�<�<�D���%�%���)�)�J�'�'�C��b�y�y�� �1�H�C�����:�D��)�)�C�.�.�C��b�y�y��D�S�D�z����i�i��n�n���"�9�9� ����:�D�D� �2�2��t�9�9� � � �) ��* �Z�� ,� � � � �� ���� �2s �BB= �+B= �=C�C�returnc � � d} d} t | dd�� � 5 }|D ]~}t j d|� � }|� � � � d� � s�?|r=t � t |� d� � � � d� � } n�d d d � � n # 1 swxY w Y n## t t t t f$ r Y nw xY w|S ) zT Retrieve hidepid value from /proc/mounts :return: hidepid, 0 if absent r> r r r )�moder zhidepid=(\d|\w+)z proc /procr N) r �re�searchr r �HidepidValuesDictr8 r �group�OSErrorr r rD )� mounts_path�res�filer! �ms r$ � get_hidepid_typing_from_mountsrU v s& � � !�K� �C� � �+�C�'� :� :� :� �d� � � ���I� 1�4�8�8���z�z�|�|�.�.�|�<�<� � �� �+�/�/��A�G�G�A�J�J����C�C�C��E�� � � � � � � � � � � ���� � � � ��� �W�j�*� 5� � � � �� ���� �Js5 �B2 �BB&� B2 �&B*�*B2 �-B*�.B2 �2 C�C)F)r* rL �clcommon.cpapir r �clcommon.sysctlr r �clcommon.utilsr r rN r% r. r< rH rC rU � r/ r$ �<module>rZ s� �� � � � � � � � � >� >� >� >� >� >� >� >� ;� ;� ;� ;� ;� ;� ;� ;� J� J� J� J� J� J� J� J� �� � � � � �� � �& � � � a� a� a� a�@ � � �F�� � � � � � r/