/usr/lib/python3/dist-packages/certbot/compat/__pycache__
Edit: /usr/lib/python3/dist-packages/certbot/compat/__pycache__/filesystem.cpython-310.pyc (16974B)
o
6aês ã @ s” d Z ddlmZ ddlZddlZddlZddlZddlmZ z ddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlZW n eyG dZY nw dZG dd„ dƒZeƒ Zd ed
ed dfd d
„Zded efdd„Zdeded
ededed df dd„Z dRdedededed df
dd„Zd ed
ed efdd„Zd ed efdd „Z d ed
ed efd d „Z dSd ed ed
ed efd!d"„Z dSd ed
ed dfd#d$„Z dSd ed
ed dfd%d&„Z deded dfd'd(„Z!d ed efd)d*„Z"d+ed efd,d-„Z#d.ed efd/d0„Z$d.ed efd1d2„Z%d3ed4ed efd5d6„Z&d7ed8ed efd9d:„Z'd.ed;ed efd
d?„ Z)d@dA„ Z*dTdBdC„Z+dDdE„ Z,dFdG„ Z-dHdI„ Z.dJdK„ Z/dLdM„ Z0dNdO„ Z1dPdQ„ Z2dS )Uz;Compat module to handle files security on Windows and Linuxé )Úabsolute_importN)ÚListTFc @ s e Zd ZdZdd„ ZdS )Ú
_WindowsUmaskz+Store the current umask to apply on Windowsc C s
d| _ d S )Né )Úmask)Úself© r ú;/usr/lib/python3/dist-packages/certbot/compat/filesystem.pyÚ__init__ s
z_WindowsUmask.__init__N)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r
r r r r r s r Ú file_pathÚmodeÚreturnc C s" t r
t | |¡ dS t| |ƒ dS )a[
Apply a POSIX mode on given file_path:
- for Linux, the POSIX mode will be directly applied using chmod,
- for Windows, the POSIX mode will be translated into a Windows DACL that make sense for
Certbot context, and applied to the file using kernel calls.
The definition of the Windows DACL that correspond to a POSIX mode, in the context of Certbot,
is explained at https://github.com/certbot/certbot/issues/6356 and is implemented by the
method `_generate_windows_flags()`.
:param str file_path: Path of the file
:param int mode: POSIX mode to apply
N)Ú
POSIX_MODEÚosÚchmodÚ_apply_win_mode©r r r r r r & s r r c C s t rt | ¡S tj}| t_|S )a$
Set the current numeric umask and return the previous umask. On Linux, the built-in umask
method is used. On Windows, our Certbot-side implementation is used.
:param int mask: The user file-creation mode mask to apply.
:rtype: int
:return: The previous umask value.
)r r ÚumaskÚ_WINDOWS_UMASKr )r Úprevious_umaskr r r r ; s
r ÚsrcÚdstÚ copy_userÚ
copy_groupc C sV t r t | ¡}|r |jnd}|r|jnd}t |||¡ n|r$t| |ƒ t||ƒ dS )aô
Copy ownership (user and optionally group on Linux) from the source to the
destination, then apply given mode in compatible way for Linux and Windows.
This replaces the os.chown command.
:param str src: Path of the source file
:param str dst: Path of the destination file
:param int mode: Permission mode to apply on the destination file
:param bool copy_user: Copy user if `True`
:param bool copy_group: Copy group if `True` on Linux (has no effect on Windows)
éÿÿÿÿN)r r ÚstatÚst_uidÚst_gidÚchownÚ_copy_win_ownershipr )r r r r r ÚstatsÚuser_idÚgroup_idr r r Ú copy_ownership_and_apply_modeU s
r' c C sd t r$t | ¡}|r |jnd}|r|jnd}t |||¡ t||jƒ dS |r+t| |ƒ t | |ƒ dS )aU
Copy ownership (user and optionally group on Linux) and mode/DACL
from the source to the destination.
:param str src: Path of the source file
:param str dst: Path of the destination file
:param bool copy_user: Copy user if `True`
:param bool copy_group: Copy group if `True` on Linux (has no effect on Windows)
r N)
r r r r r! r" r Úst_moder# Ú_copy_win_mode)r r r r r$ r% r& r r r Úcopy_ownership_and_modev s
r* c C s$ t r
t t | ¡j¡|kS t| |ƒS )aa
Check if the given mode matches the permissions of the given file.
On Linux, will make a direct comparison, on Windows, mode will be compared against
the security model.
:param str file_path: Path of the file
:param int mode: POSIX mode to test
:rtype: bool
:return: True if the POSIX mode matches the file permissions
)r r ÚS_IMODEr r( Ú_check_win_moder r r r Ú
check_mode s
r- c C s8 t r t | ¡jt ¡ kS t | tj¡}| ¡ }t ƒ |kS )zÁ
Check if given file is owned by current user.
:param str file_path: File path to check
:rtype: bool
:return: True if given file is owned by current user, False otherwise.
)
r r r r ÚgetuidÚ
win32securityÚGetFileSecurityÚOWNER_SECURITY_INFORMATIONÚGetSecurityDescriptorOwnerÚ_get_current_user)r ÚsecurityÚuserr r r Ú check_owner s
r6 c C s t | ƒot| |ƒS )zý
Check if given file has the given mode and is owned by current user.
:param str file_path: File path to check
:param int mode: POSIX mode to check
:rtype: bool
:return: True if file has correct mode and owner, False otherwise.
)r6 r- r r r r Úcheck_permissions³ s r7 éÿ Úflagsc
C s> t r t | ||¡S |tj@ r’|tj@ rtjntj}t ¡ }|j
}t ƒ }t ||t
jƒ}| |d¡ | d|d¡ d}zDzt | tjtjtj@ ||dd¡}W n) tjyu } z | jtjkrbttj | j ƒ‚| jtj krottj | j ƒ‚| ‚d} ~ ww W |r}| ¡ n|r…| ¡ w w t | |tjA tjA ¡S t | |¡}t!| |ƒ |S )aw
Wrapper of original os.open function, that will ensure on Windows that given mode
is correctly applied.
:param str file_path: The file path to open
:param int flags: Flags to apply on file while opened
:param int mode: POSIX mode to apply on file when opened,
Python defaults will be applied if ``None``
:returns: the file descriptor to the opened file
:rtype: int
:raise: OSError(errno.EEXIST) if the file already exists and os.O_CREAT & os.O_EXCL are set,
OSError(errno.EACCES) on Windows if the file already exists and is a directory, and
os.O_CREAT is set.
r é N)"r r ÚopenÚO_CREATÚO_EXCLÚwin32conÚ
CREATE_NEWÚ
CREATE_ALWAYSr/ ÚSECURITY_ATTRIBUTESÚSECURITY_DESCRIPTORr3 Ú_generate_daclr r ÚSetSecurityDescriptorOwnerÚSetSecurityDescriptorDaclÚ win32fileÚ
CreateFileÚ GENERIC_READÚFILE_SHARE_READÚFILE_SHARE_WRITEÚ
pywintypesÚerrorÚwinerrorÚERROR_FILE_EXISTSÚOSErrorÚerrnoÚEEXISTÚstrerrorÚERROR_SHARING_VIOLATIONÚEACCESÚCloser )
r r9 r Ú dispositionÚ
attributesr4 r5 ÚdaclÚhandleÚerrr r r r; ¿ sF
þ €ùý €ÿ
ÿ
r; c C sr t dƒ}z/t |d|A B ƒ trt | |¡W t |ƒ S tj}ztt_t | |¡W |t_W t |ƒ S |t_w t |ƒ w )a4
Rewrite of original os.makedirs function, that will ensure on Windows that given mode
is correctly applied.
:param str file_path: The file path to open
:param int mode: POSIX mode to apply on leaf directory when created, Python defaults
will be applied if ``None``
r r8 )r r r ÚmakedirsÚmkdir)r r Ú
current_umaskÚ
orig_mkdir_fnr r r r[ s
÷
þ
r[ c
C sž t rt | |¡S t ¡ }|j}tƒ }t||tj ƒ}|
|d¡ | d|d¡ z t
| |¡ W dS tjyN } z|jtjkrHttj|j| |jƒ‚|‚d}~ww )a,
Rewrite of original os.mkdir function, that will ensure on Windows that given mode
is correctly applied.
:param str file_path: The file path to open
:param int mode: POSIX mode to apply on directory when created, Python defaults
will be applied if ``None``
Fr: r N)r r r\ r/ rA rB r3 rC r r rD rE rF ÚCreateDirectoryrK rL rM ÚERROR_ALREADY_EXISTSrO rP rQ rR )r r rW r4 r5 rX rZ r r r r\ $ s" ù €ûr\ c C s. t tdƒrttdƒ| |ƒ dS t | |¡ dS )zµ
Rename a file to a destination path and handles situations where the destination exists.
:param str src: The current file path.
:param str dst: The new file path.
ÚreplaceN)Úhasattrr ÚgetattrÚrename)r r r r r ra C s
ra c C s´ | }t s tjdkr tj | ¡}tj |¡r td |¡ƒ‚|S g }tj | ¡rT| }t | ¡} tj
| ¡s>tj tj |¡| ¡} | |v rItd |¡ƒ‚|
| ¡ tj | ¡s&tj | ¡S )a
Find the real path for the given path. This method resolves symlinks, including
recursive symlinks, and is protected against symlinks that creates an infinite loop.
:param str file_path: The path to resolve
:returns: The real path for the given path
:rtype: str
)é é zError, link {0} is a loop!)r ÚsysÚ version_infor ÚpathÚrealpathÚislinkÚ RuntimeErrorÚformatÚreadlinkÚisabsÚjoinÚdirnameÚappendÚabspath)r Ú
original_pathri Úinspected_pathsÚ link_pathr r r rj T s"
ù rj rv c C s< t | ¡}ts | d¡s|S t|ƒdk r|dd… S tdƒ‚)a
Return a string representing the path to which the symbolic link points.
:param str link_path: The symlink path to resolve
:return: The path the symlink points to
:returns: str
:raise: ValueError if a long path (260> characters) is encountered on Windows
z\\?\i é Nz3Long paths are not supported by Certbot on Windows.)r rn r Ú
startswithÚlenÚ
ValueError)rv ri r r r rn v s
rn ri c C s& t rtj | ¡ot | tj¡S t| ƒS )z‰
Is path an executable file?
:param str path: path to test
:return: True if path is an executable file
:rtype: bool
)r r ri ÚisfileÚaccessÚX_OKÚ_win_is_executable)ri r r r Ú
is_executable˜ s r c C sV t rtt t | ¡j¡tj@ ƒS t | tj ¡}|
¡ }t| tj tj
t d¡dœ¡ƒS )zÒ
Check if everybody/world has any right (read/write/execute) on a file given its path.
:param str path: path to test
:return: True if everybody/world has any right to the file
:rtype: bool
úS-1-1-0©Ú TrusteeFormÚ TrusteeTypeÚ
Identifier)r Úboolr r+ r r( ÚS_IRWXOr/ r0 ÚDACL_SECURITY_INFORMATIONÚGetSecurityDescriptorDaclÚGetEffectiveRightsFromAclÚTRUSTEE_IS_SIDÚTRUSTEE_IS_USERÚConvertStringSidToSid)ri r4 rX r r r Úhas_world_permissions¦ s
ýr Úold_keyÚ base_modec C s: t rt t | ¡j¡tjtjB tjB tjB @ }||B S |S )a
Calculate the POSIX mode to apply to a private key given the previous private key.
:param str old_key: path to the previous private key
:param int base_mode: the minimum modes to apply to a private key
:return: the POSIX mode to apply
:rtype: int
) r r r+ r r( ÚS_IRGRPÚS_IWGRPÚS_IXGRPÚS_IROTH)rŽ r Úold_moder r r Úcompute_private_key_mode» s ÿr• Úpath1Úpath2c C sd t rt | ¡}t |¡}|j|jf|j|jfkS t | tj¡}| ¡ }t |tj¡}| ¡ }||kS )as
Return True if the ownership of two files given their respective path is the same.
On Windows, ownership is checked against owner only, since files do not have a group owner.
:param str path1: path to the first file
:param str path2: path to the second file
:return: True if both files have the same ownership, False otherwise
:rtype: bool
) r r r r r! r/ r0 r1 r2 )r– r— Ústats1Ústats2Ú security1Úuser1Ú security2Úuser2r r r Úhas_same_ownershipÐ s
rž Úmin_modec C sª t rt | ¡j}|||B kS t| ƒ} t | tjtjB ¡}| ¡ }|
¡ }t ||ƒ}t |
¡ ƒD ]#}| |¡}|d } |d }| tjtj|dœ¡}
|
|
| B krR dS q/dS )a”
Check if a file given its path has at least the permissions defined by the given minimal mode.
On Windows, group permissions are ignored since files do not have a group owner.
:param str path: path to the file to check
:param int min_mode: the minimal permissions expected
:return: True if the file matches the minimal permissions expectations, False otherwise
:rtype: bool
r: é r FT)r r r r( rj r/ r0 r1 r‡ r2 rˆ rC ÚrangeÚ GetAceCountÚGetAcer‰ rŠ r‹ ) ri rŸ r( r4 r5 rX Úmin_daclÚindexÚmin_acer Úeffective_maskr r r Úhas_min_permissionsé s.
ÿ
ý ÿr¨ c C sN t j | ¡sdS t | tj¡}| ¡ }| tjtj t
ƒ dœ¡}|t j @ t j kS )NFr )
r ri r{ r/ r0 r‡ rˆ r‰ rŠ r‹ r3 Ú
ntsecurityconÚFILE_GENERIC_EXECUTE)ri r4 rX r r r r r~ s ýr~ c C sJ t | ƒ} t | tj¡}| ¡ }t||ƒ}| d|d¡ t | tj|¡ dS )zà
This function converts the given POSIX mode into a Windows ACL list, and applies it to the
file given its path. If the given path is a symbolic link, it will resolved to apply the
mode on the targeted file.
r: r N) rj r/ r0 r1 r2 rC rE ÚSetFileSecurityr‡ )r r r4 r5 rX r r r r & s
r c C s¾ |r|d| @ }t |ƒ}t d¡}t d¡}t d¡}t ¡ }| ||fvr5t|d ƒ}|r5| tj|| ¡ t|d ƒ} | rE| tj| |¡ tddddœƒ}
| tj|
|¡ | tj|
|¡ |S ) Nr8 zS-1-5-18z S-1-5-32-544r€ r5 ÚallT©ÚreadÚwriteÚexecute)Ú
_analyze_moder/ rŒ ÚACLÚ_generate_windows_flagsÚAddAccessAllowedAceÚ ACL_REVISION) Úuser_sidr r ÚanalysisÚsystemÚadminsÚeveryonerX Ú
user_flagsÚeverybody_flagsÚfull_permissionsr r r rC 9 s$
rC c C s> | t j@ | t j@ | t j@ dœ| t j@ | t j@ | t j@ dœdœS )Nr )r5 r¬ )r ÚS_IRUSRÚS_IWUSRÚS_IXUSRr“ ÚS_IWOTHÚS_IXOTH)r r r r r± ] s ýýúr± c C sL t | ƒ} t | tj¡}| ¡ }t |tj¡}| |d¡ t |tj|¡ d S ©NF)rj r/ r0 r1 r2 rD r« )r r Ú security_srcÚuser_srcÚ security_dstr r r r# l s r# c C sN t | ƒ} t | tj¡}| ¡ }t |tj¡}| d|d¡ t |tj|¡ d S )Nr: r )rj r/ r0 r‡ rˆ rE r« )r r rÄ rX rÆ r r r r) { s r) c C sJ d}| d r |t jB }| d r|t jt jA t jA B }| d r#|t jB }|S )Nr r® r¯ r° )r© ÚFILE_GENERIC_READÚFILE_ALL_ACCESSrª )Ú rights_descÚflagr r r r³ ˆ s
ÿþ
r³ c C sH t | ƒ} t | tjtjB ¡}| ¡ }| ¡ }|sdS t||ƒ}t||ƒS rà ) rj r/ r0 r1 r‡ rˆ r2 rC Ú_compare_dacls)r r r4 rX r5 Úref_daclr r r r, § s
ÿ
r, c s4 ‡ fdd„t ˆ ¡ ƒD ƒ‡fdd„t ˆ ¡ ƒD ƒkS )z¥
This method compare the two given DACLs to check if they are identical.
Identical means here that they contains the same set of ACEs in the same order.
c ó g | ]}ˆ |¡‘qS r ©r£ ©Ú.0r¥ )Údacl1r r Ú
 ó z"_compare_dacls..c rÍ r rÎ rÏ )Údacl2r r rÒ Ã rÓ )r¡ r¢ ©rÑ rÔ r rÕ r rË ½ s ÿrË c C s$ d t ¡ t ¡ ¡} t d| ¡d S )z=
Return the pySID corresponding to the current user.
z{0}\{1}Nr )rm Úwin32apiÚ
GetDomainNameÚ GetUserNamer/ ÚLookupAccountName)Ú account_namer r r r3 Æ s r3 )TT)r8 )N)3r Ú
__future__r rP r r rg Útypingr r© r/ r> rÖ rF rK rM Ú ImportErrorr r r ÚstrÚintr r r… r' r* r- r6 r7 r; r[ r\ ra rj rn r r r• rž r¨ r~ r rC r± r# r) r³ r, rË r3 r r r r Ú s| ÿÿÿ
ÿ" ÿÿÿ
ÿ E ""-
$