//sbin UP
#!/bin/bash
##CageFS proxyexec wrapper - ver 17
if [[ $EUID -eq 0 ]]; then
echo 'Cannot be run as root'
exit 1
fi
USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`
ctrl_c_handler() {
if [[ -f "$PIDFILE" ]]; then
pid=`/bin/cat $PIDFILE`
/bin/rm -f $PIDFILE > /dev/null 2>&1
/bin/kill -s SIGINT "$pid" > /dev/null 2>&1
fi
exit $USER_INTERRUPT
}
if [[ -e /var/.cagefs/origin ]]; then
ORIGIN=`/bin/cat /var/.cagefs/origin`
REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
$REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
RETVAL=$?
else
trap 'ctrl_c_handler' 2
CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
RETVAL=$?
/bin/rm -f $PIDFILE > /dev/null 2>&1
fi
exit $RETVAL
| cagefs_enter_site | 1877 | V |
| cagefsctl-user | 13203 | V |
| chroot | 42448 | V |
| consoletype | 12160 | V |
| cracklib-check | 13360 | V |
| cracklib-format | 251 | V |
| cracklib-packer | 13368 | V |
| cracklib-unpacker | 9248 | V |
| create-cracklib-dict | 990 | V |
| ddns-confgen | 20944 | V |
| dnssec-checkds | 936 | V |
| dnssec-coverage | 938 | V |
| dnssec-dsfromkey | 62304 | V |
| dnssec-importkey | 62304 | V |
| dnssec-keyfromlabel | 66312 | V |
| dnssec-keygen | 74592 | V |
| dnssec-keymgr | 934 | V |
| dnssec-revoke | 58104 | V |
| dnssec-settime | 62296 | V |
| dnssec-signzone | 120016 | V |
| dnssec-verify | 54112 | V |
| exim | 1280 | V |
| faillock | 21016 | V |
| genrandom | 12672 | V |
| hsendmail | 7510347 | V |
| ip | 709944 | V |
| isc-hmac-fixup | 12136 | V |
| ldconfig | 1009752 | V |
| lvdctl | 5555 | V |
| mkhomedir_helper | 25024 | V |
| named-checkzone | 37512 | V |
| named-compilezone | 37512 | V |
| nsec3hash | 12584 | V |
| pam_console_apply | 46280 | V |
| pam_timestamp_check | 12152 | V |
| pluginviewer | 21064 | V |
| proxyexec | 21680 | V |
| pwhistory_helper | 20928 | V |
| saslauthd | 96688 | V |
| sasldblistusers2 | 21264 | V |
| saslpasswd2 | 16816 | V |
| sendmail | 7510347 | V |
| sendmail.bak | 1048 | V |
| sendmail.exim | 1280 | V |
| testsaslauthd | 17056 | V |
| tmpwatch | 36320 | V |
| tsig-keygen | 20944 | V |
| unix_chkpwd | 37744 | V |
| unix_update | 37744 | V |