Na}{

Path: ~//opt/cloudlinux/venv/lib/python3.11/site-packages/

File Content: `cl_proc_hidepid.py`

# -*- coding: utf-8 -*-

# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2019 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT
# Module contains functions for remounting /proc with hidepid=2 option
# see CAG-796 for details

import subprocess
import re

from clcommon.cpapi import Feature, is_panel_feature_supported
from clcommon.sysctl import SysCtlConf, SYSCTL_CL_CONF_FILE
from clcommon.utils import grep, proc_can_see_other_uid_and_hidepid_synced

# on some systems hidepid value is str
HidepidValuesDict = {
    'noaccess': 1,
    'invisible': 2,
    '1': 1,
    '2': 2,
}


def hidepid_found():
    """
    Search for line like "proc /proc proc defaults,hidepid=2,gid=clsupergid 0 0" in /etc/fstab
    Return True if /proc is mounted with hidepid option in /etc/fstab
    """
    fstab = '/etc/fstab'
    try:
        with open(fstab, 'r', encoding='utf-8') as f:
            for line in f:
                line = line.strip()
                if line and not line.startswith('#'):
                    splitted_line = line.split()
                    if splitted_line and splitted_line[0] == 'proc' and 'hidepid=' in splitted_line[3]:
                        return True
    except (IOError, IndexError) as e:
        print('Error: failed to parse', fstab, ':', str(e))
    return False


def execute(cmd, verbose):
    if verbose:
        print('executing', ' '.join(cmd))
    return subprocess.call(cmd)


def remount_proc(verbose=False):
    """
    Remount /proc with hidepid=2 option when needed
    """
    # In latest versions of the kernel on CL8
    # no need to remount /proc with hidepid option
    # because it is synchronized with fs.proc_can_see_other_uid option
    if proc_can_see_other_uid_and_hidepid_synced():
        return
    if not is_panel_feature_supported(Feature.LVE):
        if verbose:
            print('environment without LVE detected - remounting /proc is skipped')
        return
    sysctl = SysCtlConf(config_file=SYSCTL_CL_CONF_FILE)
    if verbose:
        print('apply sysctl settings')
    if hidepid_found():
        # admin can override hidepid option via /etc/fstab
        if verbose:
            print('hidepid option is found in /etc/fstab - remounting /proc with options from /etc/fstab')
        return execute(['/bin/mount', '-o', 'remount', '/proc'], verbose)
    proc_can_see_other_uid = sysctl.get('fs.proc_can_see_other_uid')
    super_gid = sysctl.get('fs.proc_super_gid')
    if proc_can_see_other_uid != '0':
        if verbose:
            print('virtualized procfs feature is not enabled in sysctl conf - disable hidepid')
        return execute(['/bin/mount', '-o', 'remount,hidepid=0,gid=0', '/proc'], verbose)
    if verbose:
        print('enable hidepid for /proc')
    return execute(['/bin/mount', '-o', 'remount,hidepid=2,gid=' + super_gid, '/proc'], verbose)


def get_gid_from_mounts():
    """
    Retrieve hidepid gid from /proc/mounts
    :return: gid, 0 if absent
    """
    lines_gen = grep(',hidepid=', '/proc/mounts')
    gid_prefix = ',gid='
    try:
        for line in lines_gen:
            line = line.strip()
            if gid_prefix not in line:
                continue
            # Search gid=xxxx in line
            pos = line.find(gid_prefix)
            if pos == -1:
                continue
            pos += 5
            line = line[pos:]
            pos = line.find(',')
            if pos != -1:
                line = line[:pos]
            else:
                pos = line.find(' ')
                if pos != -1:
                    line = line[:pos]
                else:
                    # Invalid or unsupported proc format
                    return -1
            return int(line)
    except (IOError, IndexError, ValueError):
        pass
    # hidepid not found in /proc/mounts
    return -1


def get_hidepid_typing_from_mounts() -> int:
    """
    Retrieve hidepid value from /proc/mounts
    :return: hidepid, 0 if absent
    """
    mounts_path = '/proc/mounts'
    res = 0
    try:
        # Parse mounts file output for proc lines and get the hidepid
        with open(mounts_path, mode='r', encoding='utf-8') as file:
            for line in file:
                m = re.search(r'hidepid=(\d|\w+)', line)
                if not line.strip().startswith('proc /proc'):
                    continue
                if m:
                    res = HidepidValuesDict.get(str(m.group(1)), 0)
                    break
    except (OSError, IOError, IndexError, ValueError):
        pass
    # hidepid not found in /proc/mounts
    return res

Edit Rename Chmod Delete

FILE FOLDER

Name	Size	Permission
GitPython-3.1.32.dist-info	---	0755
Jinja2-3.0.3.dist-info	---	0755
Mako-1.2.4.dist-info	---	0755
MarkupSafe-2.1.3.dist-info	---	0755
PyJWT-2.8.0.dist-info	---	0755
PyMySQL-1.1.0.dist-info	---	0755
PyVirtualDisplay-3.0.dist-info	---	0755
PyYAML-6.0.1.dist-info	---	0755
__pycache__	---	0755
_distutils_hack	---	0755
_pytest	---	0755
_yaml	---	0755
aiohttp	---	0755
aiohttp-3.9.2.dist-info	---	0755
aiohttp_jinja2	---	0755
aiohttp_jinja2-1.5.dist-info	---	0755
aiohttp_security	---	0755
aiohttp_security-0.4.0.dist-info	---	0755
aiohttp_session	---	0755
aiohttp_session-2.9.0.dist-info	---	0755
aiosignal	---	0755
aiosignal-1.3.1.dist-info	---	0755
alembic	---	0755
alembic-1.11.1.dist-info	---	0755
astroid	---	0755
astroid-2.15.6.dist-info	---	0755
attr	---	0755
attrs	---	0755
attrs-23.1.0.dist-info	---	0755
backports	---	0755
certifi	---	0755
certifi-2023.7.22.dist-info	---	0755
cffi	---	0755
cffi-1.15.1.dist-info	---	0755
chardet	---	0755
chardet-5.2.0.dist-info	---	0755
charset_normalizer	---	0755
charset_normalizer-2.1.1.dist-info	---	0755
cl_dom_collector	---	0755
cl_website_collector	---	0755
clcagefslib	---	0755
clcommon	---	0755
clconfig	---	0755
clconfigure	---	0755
cldashboard	---	0755
clevents	---	0755
clflags	---	0755
cllicense	---	0755
cllimits	---	0755
cllimits_validator	---	0755
cllimitslib_v2	---	0755
cllvectl	---	0755
clpackages	---	0755
clquota	---	0755
clselect	---	0755
clselector	---	0755
clsentry	---	0755
clsummary	---	0755
clveconfig	---	0755
clwizard	---	0755
configparser-5.0.2.dist-info	---	0755
contextlib2	---	0755
contextlib2-21.6.0.dist-info	---	0755
coverage	---	0755
coverage-7.2.7.dist-info	---	0755
cryptography	---	0755
cryptography-41.0.2.dist-info	---	0755
ddt-1.4.4.dist-info	---	0755
dill	---	0755
dill-0.3.7.dist-info	---	0755
distlib	---	0755
distlib-0.3.8.dist-info	---	0755
docopt-0.6.2.dist-info	---	0755
dodgy	---	0755
dodgy-0.2.1.dist-info	---	0755
filelock	---	0755
filelock-3.13.1.dist-info	---	0755
flake8	---	0755
flake8-5.0.4.dist-info	---	0755
flake8_polyfill	---	0755
flake8_polyfill-1.0.2.dist-info	---	0755
frozenlist	---	0755
frozenlist-1.4.0.dist-info	---	0755
future	---	0755
future-0.18.3.dist-info	---	0755
git	---	0755
gitdb	---	0755
gitdb-4.0.10.dist-info	---	0755
guppy	---	0755
guppy3-3.1.3.dist-info	---	0755
idna	---	0755
idna-3.4.dist-info	---	0755
iniconfig	---	0755
iniconfig-2.0.0.dist-info	---	0755
isort	---	0755
isort-5.12.0.dist-info	---	0755
jinja2	---	0755
jsonschema	---	0755
jsonschema-3.2.0.dist-info	---	0755
jwt	---	0755
lazy_object_proxy	---	0755
lazy_object_proxy-1.9.0.dist-info	---	0755
libfuturize	---	0755
libpasteurize	---	0755
lve_stats-2.0.dist-info	---	0755
lve_utils	---	0755
lvemanager	---	0755
lvestats	---	0755
lxml	---	0755
lxml-4.9.2.dist-info	---	0755
mako	---	0755
markupsafe	---	0755
mccabe-0.7.0.dist-info	---	0755
mock	---	0755
mock-5.1.0.dist-info	---	0755
multidict	---	0755
multidict-6.0.4.dist-info	---	0755
numpy	---	0755
numpy-1.25.1.dist-info	---	0755
numpy.libs	---	0755
packaging	---	0755
packaging-23.1.dist-info	---	0755
past	---	0755
pep8_naming-0.10.0.dist-info	---	0755
pip	---	0755
pip-25.3.dist-info	---	0755
pkg_resources	---	0755
platformdirs	---	0755
platformdirs-3.11.0.dist-info	---	0755
pluggy	---	0755
pluggy-1.2.0.dist-info	---	0755
prettytable	---	0755
prettytable-3.8.0.dist-info	---	0755
prometheus_client	---	0755
prometheus_client-0.8.0.dist-info	---	0755
prospector	---	0755
prospector-1.10.2.dist-info	---	0755
psutil	---	0755
psutil-5.9.5.dist-info	---	0755
psycopg2	---	0755
psycopg2_binary-2.9.6.dist-info	---	0755
psycopg2_binary.libs	---	0755
pycodestyle-2.9.1.dist-info	---	0755
pycparser	---	0755
pycparser-2.21.dist-info	---	0755
pydocstyle	---	0755
pydocstyle-6.3.0.dist-info	---	0755
pyfakefs	---	0755
pyfakefs-5.10.2.dist-info	---	0755
pyflakes	---	0755
pyflakes-2.5.0.dist-info	---	0755
pylint	---	0755
pylint-2.17.4.dist-info	---	0755
pylint_celery	---	0755
pylint_celery-0.3.dist-info	---	0755
pylint_django	---	0755
pylint_django-2.5.3.dist-info	---	0755
pylint_flask	---	0755
pylint_flask-0.6.dist-info	---	0755
pylint_plugin_utils	---	0755
pylint_plugin_utils-0.7.dist-info	---	0755
pylve-2.1-py3.11.egg-info	---	0755
pymysql	---	0755
pyparsing	---	0755
pyparsing-3.0.9.dist-info	---	0755
pyrsistent	---	0755
pyrsistent-0.19.3.dist-info	---	0755
pytest	---	0755
pytest-7.4.0.dist-info	---	0755
pytest_check	---	0755
pytest_check-2.5.3.dist-info	---	0755
pytest_snapshot	---	0755
pytest_snapshot-0.9.0.dist-info	---	0755
pytest_subprocess	---	0755
pytest_subprocess-1.5.3.dist-info	---	0755
pytest_tap	---	0755
pytest_tap-3.5.dist-info	---	0755
python_pam-1.8.4.dist-info	---	0755
pyvirtualdisplay	---	0755
raven	---	0755
raven-6.10.0.dist-info	---	0755
requests	---	0755
requests-2.31.0.dist-info	---	0755
requirements_detector	---	0755
requirements_detector-1.2.2.dist-info	---	0755
schema-0.7.5.dist-info	---	0755
semver	---	0755
semver-3.0.1.dist-info	---	0755
sentry_sdk	---	0755
sentry_sdk-1.29.2.dist-info	---	0755
setoptconf	---	0755
setoptconf_tmp-0.3.1.dist-info	---	0755
setuptools	---	0755
setuptools-80.9.0.dist-info	---	0755
simplejson	---	0755
simplejson-3.19.1.dist-info	---	0755
six-1.16.0.dist-info	---	0755
smmap	---	0755
smmap-5.0.0.dist-info	---	0755
snowballstemmer	---	0755
snowballstemmer-2.2.0.dist-info	---	0755
sqlalchemy	---	0755
sqlalchemy-1.3.24.dist-info	---	0755
ssa	---	0755
svgwrite	---	0755
svgwrite-1.4.3.dist-info	---	0755
tap	---	0755
tap_py-3.2.1.dist-info	---	0755
testfixtures	---	0755
testfixtures-7.1.0.dist-info	---	0755
toml	---	0755
toml-0.10.2.dist-info	---	0755
tomlkit	---	0755
tomlkit-0.11.8.dist-info	---	0755
typing_extensions-4.7.1.dist-info	---	0755
unshare-0.22.dist-info	---	0755
urllib3	---	0755
urllib3-2.0.4.dist-info	---	0755
vendors_api	---	0755
virtualenv	---	0755
virtualenv-20.21.1.dist-info	---	0755
wcwidth	---	0755
wcwidth-0.2.6.dist-info	---	0755
websiteisolation	---	0755
wmt	---	0755
wrapt	---	0755
wrapt-1.15.0.dist-info	---	0755
yaml	---	0755
yarl	---	0755
yarl-1.9.2.dist-info	---	0755
_cffi_backend.cpython-311-x86_64-linux-gnu.so	274048 bytes	0755
_lvdmap.cpython-311-x86_64-linux-gnu.so	18520 bytes	0755
_pyrsistent_version.py	23 bytes	0644
cl_proc_hidepid.py	4638 bytes	0644
clcontrollib.py	52970 bytes	0644
cldetectlib.py	18843 bytes	0644
cldiaglib.py	49234 bytes	0644
clhooklib.py	1296 bytes	0644
cli_utils.py	1698 bytes	0644
cllicenselib.py	9322 bytes	0644
clsetuplib.py	4452 bytes	0644
clsudo.py	14761 bytes	0644
configparser.py	1546 bytes	0644
ddt.py	12733 bytes	0644
distutils-precedence.pth	151 bytes	0644
docopt.py	19946 bytes	0644
lveapi.py	17431 bytes	0644
lvectllib.py	115559 bytes	0644
lvestat.py	6997 bytes	0644
mccabe.py	10654 bytes	0644
pam.py	7556 bytes	0644
pep8ext_naming.py	19052 bytes	0644
py.py	263 bytes	0644
pycodestyle.py	103501 bytes	0644
pylve.cpython-311-x86_64-linux-gnu.so	26144 bytes	0755
remove_ubc.py	5864 bytes	0755
schema.py	30221 bytes	0644
secureio.py	19551 bytes	0644
simple_rpm.so	11560 bytes	0755
six.py	34549 bytes	0644
typing_extensions.py	111082 bytes	0644
unshare.cpython-311-x86_64-linux-gnu.so	8368 bytes	0755

File Content: cl_proc_hidepid.py

File Content: `cl_proc_hidepid.py`