//lib UP
#!/bin/bash
##CageFS proxyexec wrapper - ver 17
if [[ $EUID -eq 0 ]]; then
echo 'Cannot be run as root'
exit 1
fi
USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`
ctrl_c_handler() {
if [[ -f "$PIDFILE" ]]; then
pid=`/bin/cat $PIDFILE`
/bin/rm -f $PIDFILE > /dev/null 2>&1
/bin/kill -s SIGINT "$pid" > /dev/null 2>&1
fi
exit $USER_INTERRUPT
}
if [[ -e /var/.cagefs/origin ]]; then
ORIGIN=`/bin/cat /var/.cagefs/origin`
REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
$REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
RETVAL=$?
else
trap 'ctrl_c_handler' 2
CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
RETVAL=$?
/bin/rm -f $PIDFILE > /dev/null 2>&1
fi
exit $RETVAL
| bats-core | - | |
| binfmt.d | - | |
| cpp | 1266552 | V |
| debug | - | |
| dracut | - | |
| environment.d | - | |
| firewalld | - | |
| firmware | - | |
| fontconfig | - | |
| frr | - | |
| games | - | |
| gcc | - | |
| gems | - | |
| grub | - | |
| kbd | - | |
| kcare | - | |
| kdump | - | |
| kernel | - | |
| locale | - | |
| luarocks | - | |
| mdadm | - | |
| modprobe.d | - | |
| modules | - | |
| modules-load.d | - | |
| motd.d | - | |
| oracle | - | |
| os-release | 381 | V |
| polkit-1 | - | |
| python2.7 | - | |
| python3.11 | - | |
| python3.6 | - | |
| python3.8 | - | |
| rpm | - | |
| sendmail | 1280 | V |
| sendmail.exim | 1280 | V |
| sse2 | - | |
| sysctl.d | - | |
| sysimage | - | |
| systemd | - | |
| sysusers.d | - | |
| tmpfiles.d | - | |
| tuned | - | |
| udev | - | |
| x86_64-linux-gnu | - |