Edit File: filesystem.cpython-36.pyc
3 گau � @ s� d Z ddlmZ ddlZddlZddlZddlZddlmZ ddlm Z ddlm Z ddlm Z y<ddl Z ddl Z ddlZddlZddlZddlZddlZW n ek r� dZY nX d ZG d d � d �Ze� Zeedd �d d�Zeed�dd�Zeeeeedd�dd�Z dVeeeedd�dd�Z eeed �dd�Z eed�dd �Z eeed �d d �Z dWeeeed �d!d"�Z!dXeedd �d#d$�Z"dYeedd �d%d&�Z#eedd'�d(d)�Z$eed�d*d+�Z%eed,�d-d.�Z&eed/�d0d1�Z'eed/�d2d3�Z(eeed4�d5d6�Z)eeed7�d8d9�Z*eeed:�d;d<�Z+eed/�d=d>�Z,eedd �d?d@�Z-dZeee e edA�dBdC�Z.ee ee eef f dD�dEdF�Z/eedd'�dGdH�Z0eedd'�dIdJ�Z1e eef edK�dLdM�Z2eeed �dNdO�Z3eeedP�dQdR�Z4edS�dTdU�Z5dS )[z;Compat module to handle files security on Windows and Linux� )�absolute_importN)�Any)�Dict)�List)�OptionalTFc @ s e Zd ZdZdd�dd�ZdS )� _WindowsUmaskz+Store the current umask to apply on WindowsN)�returnc C s d| _ d S )N� )�mask)�self� r � /usr/lib/python3.6/filesystem.py�__init__" s z_WindowsUmask.__init__)�__name__� __module__� __qualname__�__doc__r r r r r r s r )� file_path�moder c C s t rtj| |� n t| |� dS )a[ Apply a POSIX mode on given file_path: - for Linux, the POSIX mode will be directly applied using chmod, - for Windows, the POSIX mode will be translated into a Windows DACL that make sense for Certbot context, and applied to the file using kernel calls. The definition of the Windows DACL that correspond to a POSIX mode, in the context of Certbot, is explained at https://github.com/certbot/certbot/issues/6356 and is implemented by the method `_generate_windows_flags()`. :param str file_path: Path of the file :param int mode: POSIX mode to apply N)� POSIX_MODE�os�chmod�_apply_win_mode)r r r r r r ) s r )r r c C s t rtj| �S tj}| t_|S )a$ Set the current numeric umask and return the previous umask. On Linux, the built-in umask method is used. On Windows, our Certbot-side implementation is used. :param int mask: The user file-creation mode mask to apply. :rtype: int :return: The previous umask value. )r r �umask�_WINDOWS_UMASKr )r Zprevious_umaskr r r r > s r )�src�dstr � copy_user� copy_groupr c C sV t r:tj| �}|r|jnd}|r&|jnd}tj|||� n|rHt| |� t||� dS )a� Copy ownership (user and optionally group on Linux) from the source to the destination, then apply given mode in compatible way for Linux and Windows. This replaces the os.chown command. :param str src: Path of the source file :param str dst: Path of the destination file :param int mode: Permission mode to apply on the destination file :param bool copy_user: Copy user if `True` :param bool copy_group: Copy group if `True` on Linux (has no effect on Windows) � N���r )r r �stat�st_uid�st_gid�chown�_copy_win_ownershipr )r r r r r �stats�user_id�group_idr r r � copy_ownership_and_apply_modeX s r) )r r r r r c C sb t rFtj| �}|r|jnd}|r&|jnd}tj|||� t||j� n|rTt| |� t | |� dS )aU Copy ownership (user and optionally group on Linux) and mode/DACL from the source to the destination. :param str src: Path of the source file :param str dst: Path of the destination file :param bool copy_user: Copy user if `True` :param bool copy_group: Copy group if `True` on Linux (has no effect on Windows) r Nr r ) r r r! r" r# r$ r �st_moder% �_copy_win_mode)r r r r r& r' r( r r r �copy_ownership_and_modey s r, c C s$ t rtjtj| �j�|kS t| |�S )aa Check if the given mode matches the permissions of the given file. On Linux, will make a direct comparison, on Windows, mode will be compared against the security model. :param str file_path: Path of the file :param int mode: POSIX mode to test :rtype: bool :return: True if the POSIX mode matches the file permissions )r r! �S_IMODEr r* �_check_win_mode)r r r r r � check_mode� s r/ )r r c C s8 t rtj| �jtj� kS tj| tj�}|j� }t � |kS )z� Check if given file is owned by current user. :param str file_path: File path to check :rtype: bool :return: True if given file is owned by current user, False otherwise. ) r r r! r" �getuid� win32security�GetFileSecurity�OWNER_SECURITY_INFORMATION�GetSecurityDescriptorOwner�_get_current_user)r �security�userr r r � check_owner� s r8 c C s t | �ot| |�S )z� Check if given file has the given mode and is owned by current user. :param str file_path: File path to check :param int mode: POSIX mode to check :rtype: bool :return: True if file has correct mode and owner, False otherwise. )r8 r/ )r r r r r �check_permissions� s r9 � )r �flagsr r c C s> t rtj| ||�S |tj@ �r$|tj@ r.tjntj}tj � }|j }t � }t ||t j�}|j|d� |jd|d� d}z�y$tj| tjtjtj@ ||dd�}W n\ tjk r� } z>| jtjkr�ttj | j ��| jtj kr�ttj | j ��| �W Y dd} ~ X nX W d|�r |j � X tj| |tjA tjA �S tj| |�}t!| |� |S )aw Wrapper of original os.open function, that will ensure on Windows that given mode is correctly applied. :param str file_path: The file path to open :param int flags: Flags to apply on file while opened :param int mode: POSIX mode to apply on file when opened, Python defaults will be applied if ``None`` :returns: the file descriptor to the opened file :rtype: int :raise: OSError(errno.EEXIST) if the file already exists and os.O_CREAT & os.O_EXCL are set, OSError(errno.EACCES) on Windows if the file already exists and is a directory, and os.O_CREAT is set. r r N)"r r �open�O_CREAT�O_EXCL�win32conZ CREATE_NEWZ CREATE_ALWAYSr1 �SECURITY_ATTRIBUTES�SECURITY_DESCRIPTORr5 �_generate_daclr r �SetSecurityDescriptorOwner�SetSecurityDescriptorDacl� win32fileZ CreateFileZ GENERIC_READZFILE_SHARE_READZFILE_SHARE_WRITE� pywintypes�error�winerrorZERROR_FILE_EXISTS�OSError�errno�EEXIST�strerrorZERROR_SHARING_VIOLATIONZEACCESZCloser ) r r; r Z disposition� attributesr6 r7 �daclZhandle�errr r r r< � s6 r< c C s^ t d�}zFt |d|A B � tr*tj| |�S tj}ztt_tj| |�S |t_X W dt |� X dS )a4 Rewrite of original os.makedirs function, that will ensure on Windows that given mode is correctly applied. :param str file_path: The file path to open :param int mode: POSIX mode to apply on leaf directory when created, Python defaults will be applied if ``None`` r i� N)r r r �makedirs�mkdir)r r Z current_umaskZ orig_mkdir_fnr r r rP s rP c C s� t rtj| |�S tj� }|j}t� }t||tj �}|j |d� |j d|d� yt j | |� W nH tjk r� } z*|jtjkr�ttj|j| |j��|�W Y dd}~X nX dS )a, Rewrite of original os.mkdir function, that will ensure on Windows that given mode is correctly applied. :param str file_path: The file path to open :param int mode: POSIX mode to apply on directory when created, Python defaults will be applied if ``None`` Fr r N)r r rQ r1 r@ rA r5 rB r r rC rD rE ZCreateDirectoryrF rG rH ZERROR_ALREADY_EXISTSrI rJ rK rL )r r rM r6 r7 rN rO r r r rQ ' s rQ )r r r c C s, t td�r ttd�| |� n tj| |� dS )z� Rename a file to a destination path and handles situations where the destination exists. :param str src: The current file path. :param str dst: The new file path. �replaceN)�hasattrr �getattr�rename)r r r r r rR F s rR c C s� | }t stjdkr<tjj| �}tjj|�r8tdj|���|S g }x`tjj| �r�| }tj | �} tjj | �s~tjj tjj |�| �} | |kr�tdj|���|j | � qBW tjj| �S )a Find the real path for the given path. This method resolves symlinks, including recursive symlinks, and is protected against symlinks that creates an infinite loop. :param str file_path: The path to resolve :returns: The real path for the given path :rtype: str � � zError, link {0} is a loop!)rV rW )r �sys� version_infor �path�realpath�islink� RuntimeError�format�readlink�isabs�join�dirname�append�abspath)r Z original_pathrZ Zinspected_paths� link_pathr r r r[ W s r[ )re r c C sB t j| �}ts|jd� r |S t|�dk r6|dd� S td��dS )a Return a string representing the path to which the symbolic link points. :param str link_path: The symlink path to resolve :return: The path the symlink points to :returns: str :raise: ValueError if a long path (260> characters) is encountered on Windows z\\?\i � Nz3Long paths are not supported by Certbot on Windows.)r r_ r � startswith�len� ValueError)re rZ r r r r_ y s r_ )rZ r c C s& t r tjj| �o tj| tj�S t| �S )z� Is path an executable file? :param str path: path to test :return: True if path is an executable file :rtype: bool )r r rZ �isfile�access�X_OK�_win_is_executable)rZ r r r � is_executable� s rn c C sV t r ttjtj| �j�tj@ �S tj| tj �}|j � }t|j tj tj tjd�d���S )z� Check if everybody/world has any right (read/write/execute) on a file given its path. :param str path: path to test :return: True if everybody/world has any right to the file :rtype: bool zS-1-1-0)� TrusteeForm� TrusteeType� Identifier)r �boolr! r- r r* �S_IRWXOr1 r2 �DACL_SECURITY_INFORMATION�GetSecurityDescriptorDacl�GetEffectiveRightsFromAcl�TRUSTEE_IS_SID�TRUSTEE_IS_USER�ConvertStringSidToSid)rZ r6 rN r r r �has_world_permissions� s rz )�old_key� base_moder c C s: t r6tjtj| �j�tjtjB tjB tjB @ }||B S |S )a Calculate the POSIX mode to apply to a private key given the previous private key. :param str old_key: path to the previous private key :param int base_mode: the minimum modes to apply to a private key :return: the POSIX mode to apply :rtype: int ) r r! r- r r* �S_IRGRP�S_IWGRP�S_IXGRP�S_IROTH)r{ r| Zold_moder r r �compute_private_key_mode� s r� )�path1�path2r c C sd t r0tj| �}tj|�}|j|jf|j|jfkS tj| tj�}|j� }tj|tj�}|j� }||kS )as Return True if the ownership of two files given their respective path is the same. On Windows, ownership is checked against owner only, since files do not have a group owner. :param str path1: path to the first file :param str path2: path to the second file :return: True if both files have the same ownership, False otherwise :rtype: bool ) r r r! r" r# r1 r2 r3 r4 )r� r� Zstats1Zstats2Z security1Zuser1Z security2Zuser2r r r �has_same_ownership� s r� )rZ �min_moder c C s� t r tj| �j}|||B kS t| �} tj| tjtjB �}|j � }|j � }t ||�}xTt |j � �D ]D}|j|�}|d } |d }|jtjtj|d��} | | | B kr`dS q`W dS )a� Check if a file given its path has at least the permissions defined by the given minimal mode. On Windows, group permissions are ignored since files do not have a group owner. :param str path: path to the file to check :param int min_mode: the minimal permissions expected :return: True if the file matches the minimal permissions expectations, False otherwise :rtype: bool r � )ro rp rq FT)r r r! r* r[ r1 r2 r3 rt r4 ru rB �range� GetAceCount�GetAcerv rw rx ) rZ r� r* r6 r7 rN Zmin_dacl�indexZmin_acer Zeffective_maskr r r �has_min_permissions� s( r� c C sN t jj| �sdS tj| tj�}|j� }|jtjtj t � d��}|t j @ t j kS )NF)ro rp rq ) r rZ rj r1 r2 rt ru rv rw rx r5 � ntsecuritycon�FILE_GENERIC_EXECUTE)rZ r6 rN r r r r rm s rm c C sJ t | �} tj| tj�}|j� }t||�}|jd|d� tj| tj|� dS )z� This function converts the given POSIX mode into a Windows ACL list, and applies it to the file given its path. If the given path is a symbolic link, it will resolved to apply the mode on the targeted file. r r N) r[ r1 r2 r3 r4 rB rD �SetFileSecurityrt )r r r6 r7 rN r r r r ) s r )�user_sidr r r c C s� |r|d| @ }t |�}tjd�}tjd�}tjd�}tj� }| ||gkrjt|d �}|rj|jtj|| � t|d �} | r�|jtj| |� tdddd��} |jtj| |� |jtj| |� |S ) Ni� zS-1-5-18z S-1-5-32-544zS-1-1-0r7 �allT)�read�write�execute)� _analyze_moder1 ry ZACL�_generate_windows_flagsZAddAccessAllowedAceZ ACL_REVISION) r� r r Zanalysis�systemZadminsZeveryonerN Z user_flagsZeverybody_flagsZfull_permissionsr r r rB < s$ rB )r r c C s> | t j@ | t j@ | t j@ d�| t j@ | t j@ | t j@ d�d�S )N)r� r� r� )r7 r� )r! �S_IRUSR�S_IWUSR�S_IXUSRr� �S_IWOTH�S_IXOTH)r r r r r� ` s r� c C sL t | �} tj| tj�}|j� }tj|tj�}|j|d� tj|tj|� d S )NF)r[ r1 r2 r3 r4 rC r� )r r � security_srcZuser_src� security_dstr r r r% o s r% c C sN t | �} tj| tj�}|j� }tj|tj�}|jd|d� tj|tj|� d S )Nr r )r[ r1 r2 rt ru rD r� )r r r� rN r� r r r r+ ~ s r+ )� rights_descr c C sJ d}| d r|t jB }| d r4|t jt jA t jA B }| d rF|t jB }|S )Nr r� r� r� )r� ZFILE_GENERIC_READZFILE_ALL_ACCESSr� )r� �flagr r r r� � s r� c C sH t | �} tj| tjtjB �}|j� }|j� }|s4dS t||�}t||�S )NF) r[ r1 r2 r3 rt ru r4 rB �_compare_dacls)r r r6 rN r7 Zref_daclr r r r. � s r. )�dacl1�dacl2r c s4 � fdd�t � j� �D ��fdd�t �j� �D �kS )z� This method compare the two given DACLs to check if they are identical. Identical means here that they contains the same set of ACEs in the same order. c s g | ]}� j |��qS r )r� )�.0r� )r� r r � <listcomp>� s z"_compare_dacls.<locals>.<listcomp>c s g | ]}� j |��qS r )r� )r� r� )r� r r r� � s )r� r� )r� r� r )r� r� r r� � s r� )r c C s$ dj tj� tj� �} tjd| �d S )z= Return the pySID corresponding to the current user. z{0}\{1}Nr )r^ �win32apiZ GetDomainNameZ GetUserNamer1 ZLookupAccountName)Z account_namer r r r5 � s r5 )TT)r: )r: )r: )N)6r Z __future__r rJ r r! rX Ztypingr r r r r� rF r� r? rE r1 rH � ImportErrorr r r �str�intr r rr r) r, r/ r8 r9 r< rP rQ rR r[ r_ rn rz r� r� r� rm r rB r� r% r+ r� r. r� r5 r r r r �<module> sf ! E ""-$
Back to File Manager