XylotrechusZ
�
iAh � �z � d dl Z d dlZd dlmZmZ d dlmZmZ d dlm Z m
Z
ddddd�Z d� Z d � Z
dd �Zd � Zd
efd�ZdS )� N)�Feature�is_panel_feature_supported)�
SysCtlConf�SYSCTL_CL_CONF_FILE)�grep�)proc_can_see_other_uid_and_hidepid_synced� � )�noaccess� invisible�1�2c � � d} t | dd�� � 5 }|D ]g}|� � � }|rO|� d� � s:|� � � }|r$|d dk rd|d v r d
d
d
� � d S �h d
d
d
� � n # 1 swxY w Y n=# t t
f$ r)}t
d | d
t |� � � � Y d
}~nd
}~ww xY wdS )z�
Search for line like "proc /proc proc defaults,hidepid=2,gid=clsupergid 0 0" in /etc/fstab
Return True if /proc is mounted with hidepid option in /etc/fstab
z
/etc/fstab�r�utf-8)�encoding�#r �proczhidepid=� NTzError: failed to parse�:F)�open�strip�
startswith�split�IOError�
IndexError�print�str)�fstab�f�line�
splitted_line�es �py/cl_proc_hidepid.py�
hidepid_foundr% sh � �
�E� <�
�%��w�
/�
/�
/� $�1��
$�
$���z�z�|�|��� $����� 4� 4� $�$(�J�J�L�L�M�$� $� �q�)9�V�)C�)C�
�Vc�de�Vf�Hf�Hf� #�
$� $� $� $� $� $� $� $��
$� $� $� $� $� $� $� $� $� $� $� $���� $� $� $� $���
�Z� � <� <� <�
�&��s�C��F�F�;�;�;�;�;�;�;�;�����<���� �5sG �B �A B�3 B � B� B �B�B �B�B �C�+ C�Cc �t � |r#t dd� | � � � � t j | � � S )N� executing� )r �join�
subprocess�call)�cmd�verboses r$ �executer. - s4 � �� *�
�k�3�8�8�C�=�=�)�)�)� �?�3� � � � Fc � � t � � rdS t t j � � s| rt d� � dS t t �� � }| rt d� � t � � r#| rt d� � t g d�| � � S |� d� � }|� d� � }|d k r#| rt d
� � t g d �| � � S | rt d � � t d
dd|z dg| � � S )z9
Remount /proc with hidepid=2 option when needed
Nz>environment without LVE detected - remounting /proc is skipped)� config_filezapply sysctl settingszUhidepid option is found in /etc/fstab - remounting /proc with options from /etc/fstab)�
/bin/mount�-o�remount�/proczfs.proc_can_see_other_uidzfs.proc_super_gid�0zJvirtualized procfs feature is not enabled in sysctl conf - disable hidepid)r2 r3 zremount,hidepid=0,gid=0r5 zenable hidepid for /procr2 r3 zremount,hidepid=2,gid=r5 )
r r r �LVEr r r r% r. �get)r- �sysctl�proc_can_see_other_uid� super_gids r$ � remount_procr< 3 sA � � 1�2�2� ��� %�g�k� 2� 2� � � T� �R� S� S� S���
�$7�
8�
8�
8�F�� '�
�%�&�&�&���� J� � k� �i� j� j� j��?�?�?��I�I�I� #�Z�Z�(C� D� D���
�
�.�/�/�I� ��$�$� � `� �^� _� _� _��O�O�O�QX�Y�Y�Y�� *�
�(�)�)�)� �L�$�(@�9�(L�g�V�X_� `� `�`r/ c � � t dd� � } d} | D ]�}|� � � }||vr�|� |� � }|dk r�7|dz
}||d� }|� d� � }|dk r |d|� }n)|� d� � }|dk r |d|� }n dS t |� � c S n # t t
t f$ r Y nw xY wdS ) zN
Retrieve hidepid gid from /proc/mounts
:return: gid, 0 if absent
z ,hidepid=� /proc/mountsz,gid=���� N�,r( )r r �find�intr r �
ValueError)� lines_gen�
gid_prefixr! �poss r$ �get_gid_from_mountsrH S s � �
�[�.�1�1�I��J�
� � � �D��:�:�<�<�D���%�%���)�)�J�'�'�C��b�y�y�� �1�H�C�����:�D��)�)�C�.�.�C��b�y�y��D�S�D�z����i�i��n�n���"�9�9� ����:�D�D� �2�2��t�9�9� � � �) ��*
�Z�� ,�
�
�
� ��
���� �2s �BB= �+B= �=C�C�returnc � � d} d} t | dd�� � 5 }|D ]~}t j d|� � }|� � � � d� � s�?|r=t
� t |� d� � � � d� � } n�d d d � � n # 1 swxY w Y n## t t t t f$ r Y nw xY w|S )
zT
Retrieve hidepid value from /proc/mounts
:return: hidepid, 0 if absent
r> r r r )�moder zhidepid=(\d|\w+)z
proc /procr N)
r �re�searchr r �HidepidValuesDictr8 r �group�OSErrorr r rD )� mounts_path�res�filer! �ms r$ � get_hidepid_typing_from_mountsrU v s& � �
!�K�
�C�
�
�+�C�'�
:�
:�
:� �d� �
�
���I� 1�4�8�8���z�z�|�|�.�.�|�<�<� � �� �+�/�/��A�G�G�A�J�J����C�C�C��E�� � � � � � � � � � � ���� � � � ���
�W�j�*� 5�
�
�
� ��
���� �Js5 �B2 �BB&� B2 �&B*�*B2 �-B*�.B2 �2 C�C)F)r* rL �clcommon.cpapir r �clcommon.sysctlr r �clcommon.utilsr r rN r% r. r< rH rC rU � r/ r$ �<module>rZ s� �� � � � � � � � � >� >� >� >� >� >� >� >� ;� ;� ;� ;� ;� ;� ;� ;� J� J� J� J� J� J� J� J� ��
�
� � � �� � �& � � � a� a� a� a�@ � � �F�� � � � � � r/