X7ROOT File Manager
Current Path:
/usr/local/cpanel/scripts
usr
/
local
/
cpanel
/
scripts
/
π
..
π
MirrorSearch_pingtest
(2.38 KB)
π
activesync-invite-reply
(1.69 KB)
π
add_dns
(2.36 KB)
π
adddns
(2.36 KB)
π
addpop
(6.08 KB)
π
addsystemuser
(3.27 KB)
π
adduser
(92 B)
π
apachelimits
(4.31 KB)
π
archive_sync_zones
(3.02 KB)
π
auto-adjust-mysql-limits
(1.81 KB)
π
autorepair
(1.24 KB)
π
backups_clean_metadata_for_missing_backups
(1.57 KB)
π
backups_create_metadata
(15.75 KB)
π
backups_list_user_files
(4.56 KB)
π
balance_linked_node_quotas
(2.58 KB)
π
biglogcheck
(1.69 KB)
π
build_bandwidthdb_root_cache_in_background
(1.52 KB)
π
build_cpnat
(3.41 KB)
π
build_mail_sni
(3.87 KB)
π
build_maxemails_config
(1.14 KB)
π
builddovecotconf
(6.76 KB)
π
buildeximconf
(7 KB)
π
buildhttpdconf
(2.6 KB)
π
buildnsdconf
(1.01 KB)
π
buildpureftproot
(539 B)
π
ccs-check
(4.91 KB)
π
check_cpanel_pkgs
(10.75 KB)
π
check_cpanel_rpms
(218 B)
π
check_domain_tls_service_domains.pl
(6.68 KB)
π
check_immutable_files
(5.49 KB)
π
check_mail_spamassassin_compiledregexps_body_0
(187 B)
π
check_maxmem_against_domains_count
(3.57 KB)
π
check_mount_procfs
(2.02 KB)
π
check_mysql
(5.55 KB)
π
check_security_advice_changes
(8.28 KB)
π
check_unmonitored_enabled_services
(4.56 KB)
π
check_unreliable_resolvers
(3.59 KB)
π
check_users_my_cnf
(6.05 KB)
π
check_valid_server_hostname
(7.66 KB)
π
checkalldomainsmxs
(2.4 KB)
π
checkbashshell
(1.18 KB)
π
checkccompiler
(1.22 KB)
π
checkexim.pl
(3.1 KB)
π
checklink
(1.29 KB)
π
checknsddirs
(1014 B)
π
checkusers
(856 B)
π
chkmydns
(561 B)
π
chkpaths
(141 B)
π
chpass
(416 B)
π
ckillall
(1.11 KB)
π
clean_dead_mailman_locks
(2.09 KB)
π
clean_up_temp_wheel_users
(2.44 KB)
π
clean_user_php_sessions
(4.76 KB)
π
cleandns
(13.09 KB)
π
cleandns8
(417 B)
π
cleanmsglog
(735 B)
π
cleanphpsessions
(932 B)
π
cleanphpsessions.php
(658 B)
π
cleanquotas
(1.61 KB)
π
cleansessions
(5.91 KB)
π
cleanupinterchange
(2.64 KB)
π
cleanupmysqlprivs
(533 B)
π
clear_cpaddon_ui_caches
(1.27 KB)
π
clear_orphaned_virtfs_mounts
(3.56 KB)
π
comparecdb
(1.52 KB)
π
compilers
(2.86 KB)
π
compilerscheck
(999 B)
π
configure_firewall_for_cpanel
(520 B)
π
configure_rh_firewall_for_cpanel
(520 B)
π
configure_rh_ipv6_firewall_for_cpanel
(520 B)
π
convert2dovecot
(682 B)
π
convert_accesshash_to_token
(4.07 KB)
π
convert_and_migrate_from_legacy_backup
(1.97 KB)
π
convert_maildir_to_mdbox
(1.66 KB)
π
convert_mdbox_to_maildir
(1.66 KB)
π
convert_roundcube_mysql2sqlite
(25.28 KB)
π
convert_to_dovecot_delivery
(4.33 KB)
π
convert_whmxfer_to_sqlite
(1.46 KB)
π
copy_user_mail_as_root
(1.25 KB)
π
copy_user_mail_as_user
(1.34 KB)
π
cpaddonsup
(3.25 KB)
π
cpan_config
(2.8 KB)
π
cpan_sandbox
π
cpanel_initial_install
(67.36 KB)
π
cpanelsync
(28.31 KB)
π
cpanelsync_postprocessor
(1.62 KB)
π
cpanpingtest
(965 B)
π
cpbackup
(44.77 KB)
π
cpbackup_transport_file
(5.65 KB)
π
cpdig
(1.81 KB)
π
cpfetch
(1.23 KB)
π
cphulkdblacklist
(433 B)
π
cphulkdwhitelist
(1.3 KB)
π
cpservice
(2.87 KB)
π
cpuser_port_authority
(19.29 KB)
π
cpuser_service_manager
(10.85 KB)
π
createacct
(24.57 MB)
π
custom_backup_destination.pl.sample
(5.06 KB)
π
custom_backup_destination.pl.skeleton
(2.84 KB)
π
dav_change_hostname
(3.57 KB)
π
dcpumon-wrapper
(850 B)
π
delpop
(6.2 KB)
π
detect_env_capabilities
(508 B)
π
disable_prelink
(2.77 KB)
π
disable_sqloptimizer
(1.49 KB)
π
disablefileprotect
(2.09 KB)
π
distro_changed_hook
(1.16 KB)
π
dnscluster
(4.44 KB)
π
dnsqueuecron
(1.29 KB)
π
dnssec-cluster-keys
(3.75 KB)
π
dovecot_maintenance
(7.93 KB)
π
dovecot_set_defaults.pl
(984 B)
π
dumpcdb
(866 B)
π
dumpinodes
(687 B)
π
dumpquotas
(616 B)
π
dumpstor
(913 B)
π
ea4_fresh_install
(2.64 KB)
π
edit_cpanelsync_exclude_list
(2.58 KB)
π
editquota
(3.44 KB)
π
elevate-cpanel
(377.87 KB)
π
email_archive_maintenance
(6.15 KB)
π
email_hold_maintenance
(1.46 KB)
π
enable_spf_dkim_globally
(8.83 KB)
π
enable_sqloptimizer
(1.57 KB)
π
enablefileprotect
(2.1 KB)
π
ensure_autoenabled_features
(2.5 MB)
π
ensure_conf_dir_crt_key
(4.82 KB)
π
ensure_cpuser_file_ip
(2.55 KB)
π
ensure_crontab_permissions
(1.08 KB)
π
ensure_dovecot_memory_limits_meet_minimum
(3.13 KB)
π
ensure_hostname_resolves
(2.57 KB)
π
ensure_includes
(601 B)
π
ensure_vhost_includes
(13.53 KB)
π
exim_tidydb
(2.96 KB)
π
eximconfgen
(1.32 KB)
π
eximstats_spam_check
(867 B)
π
export_horde_calendars_to_ics
(15.07 KB)
π
export_horde_contacts_to_vcf
(13.94 KB)
π
exportmydnsdb
(3.47 KB)
π
expunge_expired_certificates_from_sslstorage
(3.56 KB)
π
expunge_expired_pkgacct_sessions
(852 B)
π
expunge_expired_transfer_sessions
(1.06 KB)
π
fastmail
(5.16 KB)
π
featuremod
(1.92 KB)
π
fetchfile
(422 B)
π
find_and_fix_rpm_issues
(6.99 KB)
π
find_outdated_services
(5.41 KB)
π
find_pids_with_inotify_watch_on_path
(3.66 KB)
π
fix-cpanel-perl
(28.82 KB)
π
fix-listen-on-localhost
(3.52 KB)
π
fix-web-vhost-configuration
(6.15 KB)
π
fix_addon_permissions
(7.68 KB)
π
fix_dns_zone_ttls
(1.34 KB)
π
fix_innodb_tables
(4.05 KB)
π
fix_pear_registry
(4.07 KB)
π
fix_reseller_acls
(10.88 KB)
π
fixetchosts
(4.32 KB)
π
fixheaders
(572 B)
π
fixmailinglistperms
(1008 B)
π
fixmailman
(2.09 KB)
π
fixnamedviews
(1.22 KB)
π
fixndc
(413 B)
π
fixquotas
(17.45 KB)
π
fixrelayd
(1.74 KB)
π
fixrndc
(16.48 KB)
π
fixtar
(503 B)
π
fixtlsversions
(4.7 KB)
π
fixvaliases
(2 KB)
π
fixwebalizer
(966 B)
π
forcelocaldomain
(895 B)
π
ftpfetch
(2.2 KB)
π
ftpquotacheck
(8.31 KB)
π
ftpsfetch
(2.36 KB)
π
ftpupdate
(261 B)
π
gather_update_log_stats
(4.25 KB)
π
gather_update_logs_setupcrontab
(5.45 KB)
π
gemwrapper
(1.74 KB)
π
gencrt
(6.26 KB)
π
generate_account_suspension_include
(5.7 KB)
π
generate_google_drive_credentials
(1.11 KB)
π
generate_google_drive_oauth_uri
(984 B)
π
generate_maildirsize
(13.94 KB)
π
gensysinfo
(1.16 KB)
π
get_locale_from_legacy_name_info
(1.99 KB)
π
getremotecpmove
(12.67 KB)
π
grpck
(1.19 KB)
π
hackcheck
(3.02 KB)
π
hook
(1.45 KB)
π
httpspamdetect
(2.66 KB)
π
hulk-unban-ip
(3.93 MB)
π
import_exim_data
(8.39 KB)
π
importmydnsdb
(11.34 KB)
π
increase_filesystem_limits
(891 B)
π
initacls
(4.99 KB)
π
initfpsuexec
(444 B)
π
initquotas
(19.47 KB)
π
initsuexec
(4.03 KB)
π
install_cpanel_analytics
(1.93 KB)
π
install_dovecot_fts
(1.57 KB)
π
install_plugin
(2.8 KB)
π
installpkg
(575 B)
π
installpostgres
(6.56 KB)
π
installsqlite3
(1.82 KB)
π
ipcheck
(3.93 KB)
π
ipusage
(7.45 KB)
π
isdedicatedip
(602 B)
π
jetbackup-check
(3.69 KB)
π
killdns
(422 B)
π
killdns-dnsadmin
(1.15 KB)
π
killmysqluserprivs
(433 B)
π
killmysqlwildcard
(1.15 KB)
π
killpvhost
(853 B)
π
killspamkeys
(937 B)
π
link_3rdparty_binaries
(1.24 KB)
π
linksubemailtomainacct
(3.17 KB)
π
listcheck
(538 B)
π
listsubdomains
(1.05 KB)
π
litespeed-check
(3.86 KB)
π
locale_export
(4.82 KB)
π
locale_import
(4.35 KB)
π
locale_info
(3.99 KB)
π
logo.dat
(205 B)
π
magicloader
(1.94 KB)
π
maildir_converter
(6.08 KB)
π
mailperm
(16.58 KB)
π
mailscannerupdate
(2.42 KB)
π
mainipcheck
(10 KB)
π
maintenance
(46.62 KB)
π
make_config
(407 B)
π
make_hostname_unowned
(1.16 KB)
π
manage_extra_marketing
(12.41 KB)
π
manage_greylisting
(16.19 KB)
π
manage_mysql_profiles
(20.02 KB)
π
migrate-pdns-conf
(9.83 KB)
π
migrate_local_ini_to_php_ini
(7.41 KB)
π
migrate_whmtheme_file_to_userdata
(2.95 KB)
π
mkwwwacctconf
(2.33 KB)
π
modify_accounts
(4.09 KB)
π
modify_featurelist
(9.2 KB)
π
modify_packages
(3.65 KB)
π
modsec_vendor
(15.63 KB)
π
mysqlconnectioncheck
(6.55 KB)
π
mysqlpasswd
(4.09 KB)
π
named.ca
(1.57 KB)
π
named.rfc1912.zones
(774 B)
π
nixstatsagent.sh
(58.67 KB)
π
notify_expiring_certificates
(9.37 KB)
π
notify_expiring_certificates_on_linked_nodes
(1.33 KB)
π
oopscheck
(1.12 KB)
π
optimize_eximstats
(3.88 KB)
π
patch_mail_spamassassin_compiledregexps_body_0
(2.39 KB)
π
patchfdsetsize
(2.72 KB)
π
pedquota
(2.26 KB)
π
perform_sqlite_auto_rebuild_db_maintenance
(2.2 KB)
π
perlinstaller
(528 B)
π
perlmods
(1.18 KB)
π
php_fpm_config
(9.73 KB)
π
php_sandbox
π
phpini_tidy
(687 B)
π
pkgacct
(87.82 KB)
π
post_snapshot
(3.16 KB)
π
post_sync_cleanup
(6.09 KB)
π
primary_virtual_host_migration
(2.44 KB)
π
process_pending_cpanel_php_pear_registration
(3.49 KB)
π
process_site_templates
(7.27 KB)
π
proxydomains
(9.34 KB)
π
ptycheck
(724 B)
π
purge_modsec_log
(1.53 KB)
π
purge_old_config_caches
(2.08 KB)
π
pwck
(708 B)
π
quickdnslookup
(1.13 KB)
π
quickwhoisips
(2.29 KB)
π
quota_auto_fix
(1.41 KB)
π
quotacheck
(22.36 KB)
π
rawchpass
(460 B)
π
rdate
(4.8 KB)
π
realadduser
(5.61 KB)
π
realchpass
(3.26 KB)
π
realperlinstaller
(5.67 KB)
π
realrawchpass
(425 B)
π
rebuild_available_addons_packages_cache
(1.27 KB)
π
rebuild_available_rpm_addons_cache
(1.27 KB)
π
rebuild_bandwidthdb_root_cache
(1.45 KB)
π
rebuild_dbmap
(5.8 KB)
π
rebuild_provider_openid_connect_links_db
(1.01 KB)
π
rebuild_whm_chrome
(2.22 KB)
π
rebuilddnsconfig
(26.21 KB)
π
rebuildhttpdconf
(2.6 KB)
π
rebuildinstalledssldb
(2.85 KB)
π
rebuildippool
(509 B)
π
rebuildnsdzones
(1.14 KB)
π
rebuilduserssldb
(948 B)
π
refresh-dkim-validity-cache
(5.97 KB)
π
regenerate_tokens
(2.18 KB)
π
reloadnsd
(821 B)
π
remote_log_transfer
(11.6 KB)
π
remove_dovecot_index_files
(5.89 KB)
π
removeacct
(20.91 MB)
π
rescan_user_dovecot_fts
(2.98 KB)
π
reset_mail_quotas_to_sane_values
(6.82 KB)
π
resetmailmanurls
(2.03 KB)
π
resetquotas
(4.68 KB)
π
restartsrv
(3.23 KB)
π
restartsrv_apache
(422 B)
π
restartsrv_apache_php_fpm
(9.9 MB)
π
restartsrv_base
(9.9 MB)
π
restartsrv_bind
(9.9 MB)
π
restartsrv_chkservd
(427 B)
π
restartsrv_clamd
(9.9 MB)
π
restartsrv_cpanalyticsd
(9.9 MB)
π
restartsrv_cpanel_php_fpm
(9.9 MB)
π
restartsrv_cpanellogd
(9.9 MB)
π
restartsrv_cpdavd
(9.9 MB)
π
restartsrv_cpgreylistd
(9.9 MB)
π
restartsrv_cphulkd
(9.9 MB)
π
restartsrv_cpipv6
(9.9 MB)
π
restartsrv_cpsrvd
(9.9 MB)
π
restartsrv_crond
(9.9 MB)
π
restartsrv_dnsadmin
(9.9 MB)
π
restartsrv_dovecot
(9.9 MB)
π
restartsrv_exim
(9.9 MB)
π
restartsrv_eximstats
(504 B)
π
restartsrv_ftpd
(426 B)
π
restartsrv_ftpserver
(911 B)
π
restartsrv_httpd
(9.9 MB)
π
restartsrv_imap
(437 B)
π
restartsrv_inetd
(2.47 KB)
π
restartsrv_ipaliases
(9.9 MB)
π
restartsrv_lmtp
(437 B)
π
restartsrv_mailman
(9.9 MB)
π
restartsrv_mydns
(9.9 MB)
π
restartsrv_mysql
(9.9 MB)
π
restartsrv_named
(777 B)
π
restartsrv_nscd
(9.9 MB)
π
restartsrv_nsd
(9.9 MB)
π
restartsrv_p0f
(9.9 MB)
π
restartsrv_pdns
(9.9 MB)
π
restartsrv_pop3
(437 B)
π
restartsrv_postgres
(427 B)
π
restartsrv_postgresql
(9.9 MB)
π
restartsrv_powerdns
(442 B)
π
restartsrv_proftpd
(9.9 MB)
π
restartsrv_pureftpd
(9.9 MB)
π
restartsrv_queueprocd
(9.9 MB)
π
restartsrv_rsyslog
(9.9 MB)
π
restartsrv_rsyslogd
(437 B)
π
restartsrv_spamd
(9.9 MB)
π
restartsrv_sshd
(9.9 MB)
π
restartsrv_syslogd
(2.4 KB)
π
restartsrv_tailwatchd
(9.9 MB)
π
restartsrv_unknown
(9.9 MB)
π
restartsrv_xinetd
(422 B)
π
restorecpuserfromcache
(1.96 KB)
π
restorepkg
(36.49 MB)
π
rfc1912_zones.tar
(10 KB)
π
rpmup
(4.77 KB)
π
rsync-user-homedir.pl
(5.76 KB)
π
run_if_exists
(512 B)
π
run_plugin_lifecycle
(3.53 KB)
π
runstatsonce
(440 B)
π
runweblogs
(1.02 KB)
π
sa-update_wrapper
(3.34 KB)
π
safetybits.pl
(844 B)
π
secureit
(4.72 KB)
π
securemysql
(4.54 KB)
π
securerailsapps
(3.58 KB)
π
securetmp
(15.99 KB)
π
sendicq
(474 B)
π
servicedomains
(9.34 KB)
π
set_mailman_archive_perms
(1.75 KB)
π
set_php_memory_limits
(3.67 KB)
π
setpostgresconfig
(6.04 KB)
π
setup_greylist_db
(16.19 KB)
π
setup_modsec_db
(1.3 KB)
π
setup_systemd_timer_for_plugins
(3.92 KB)
π
setupftpserver
(10.47 KB)
π
setupmailserver
(9.55 KB)
π
setupnameserver
(13.75 KB)
π
shrink_modsec_ip_database
(12.97 KB)
π
simpleps
(3.05 KB)
π
slurp_exim_mainlog
(5.78 KB)
π
smartcheck
(15.13 KB)
π
smtpmailgidonly
(8.15 KB)
π
snapshot_prep
(5.88 KB)
π
spamassassin_dbm_cleaner
(5.85 KB)
π
spamassassindisable
(3.74 KB)
π
spamboxdisable
(2.27 KB)
π
sshcontrol
(14.38 KB)
π
ssl_crt_status
(3.84 KB)
π
suspendacct
(18.01 KB)
π
suspendmysqlusers
(4.42 KB)
π
swapip
(3.82 KB)
π
sync-mysql-users-from-grants
(1.2 KB)
π
sync_child_accounts
(1.77 KB)
π
sync_contact_emails_to_cpanel_users_files
(1.14 KB)
π
synccpaddonswithsqlhost
(6.59 KB)
π
synctransfers
(1.92 KB)
π
syslog_check
(1.36 KB)
π
sysup
(645 B)
π
test_sa_compiled
(1.07 KB)
π
transfer_account_as_user
(2.34 KB)
π
transfer_accounts_as_root
(4.76 KB)
π
transfer_in_progress
(3.08 KB)
π
transfer_in_progress.pod
(312 B)
π
transfermysqlusers
(9.53 MB)
π
try-later
(7.95 KB)
π
unblockip
(667 B)
π
uninstall_cpanel_analytics
(1.2 KB)
π
uninstall_dovecot_fts
(562 B)
π
uninstall_plugin
(2.84 KB)
π
unlink_service_account
(2.62 KB)
π
unpkgacct
(4.6 KB)
π
unslavenamedconf
(863 B)
π
unsuspendacct
(17.8 KB)
π
unsuspendmysqlusers
(6.71 KB)
π
upcp
(31.56 KB)
π
upcp-running
(2.7 KB)
π
upcp.static
(708.6 KB)
π
update-packages
(4.77 KB)
π
update_apachectl
(480 B)
π
update_db_cache
(430 B)
π
update_dkim_keys
(1.45 KB)
π
update_exim_rejects
(1.21 KB)
π
update_existing_mail_quotas_for_account
(4.78 KB)
π
update_known_proxy_ips
(1002 B)
π
update_local_rpm_versions
(4.56 KB)
π
update_mailman_cache
(8.34 KB)
π
update_mysql_systemd_config
(1.25 KB)
π
update_neighbor_netblocks
(487 B)
π
update_sa_config
(2.14 KB)
π
update_spamassassin_config
(10.73 KB)
π
update_users_jail
(691 B)
π
update_users_vhosts
(801 B)
π
updatedomainips
(605 B)
π
updatenameserverips
(1.66 KB)
π
updatenow
(5.18 KB)
π
updatenow.static
(1.91 MB)
π
updatesigningkey
(1.95 KB)
π
updatessldomains
(1.81 KB)
π
updatesupportauthorizations
(2.49 KB)
π
updateuserdatacache
(2.47 KB)
π
updateuserdomains
(774 B)
π
upgrade_bandwidth_dbs
(2.22 KB)
π
upgrade_subaccount_databases
(2.73 KB)
π
userdata_wildcard_cleanup
(5.74 KB)
π
userdirctl
(5.01 KB)
π
validate_sshkey_passphrase
(1.21 KB)
π
verify_api_spec_files
(757 B)
π
verify_pidfile
(1.96 KB)
π
verify_vhost_includes
(7.34 KB)
π
vps_optimizer
(7.82 KB)
π
vzzo-fixer
(725 B)
π
whmlogin
(2.33 KB)
π
whoowns
(1.13 KB)
π
wpt_license
(6.27 MB)
π
wwwacct
(24.57 MB)
π
wwwacct2
(88 B)
π
xfer_rcube_schema_migrate.pl
(2.4 KB)
π
xfer_rcube_uid_resolver.pl
(1.8 KB)
π
xferpoint
(3.13 KB)
π
xfertool
(16.14 KB)
π
zoneexists
(800 B)
Editing: cpuser_port_authority
#!/usr/local/cpanel/3rdparty/bin/perl # cpanel - scripts/cpuser_port_authority Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited use strict; use warnings; package scripts::cpuser_port_authority; use Cpanel::JSON (); use Cpanel::Transaction::File::JSON (); use Cpanel::Config::LoadUserDomains (); use Cpanel::Debug (); use Cpanel::Validate::Username (); use Cpanel::FileUtils::Write (); use Cpanel::PwCache (); our $port_authority_conf = "/etc/cpanel/cpuser_port_authority.json"; my $cmds = { give => { code => \&give, clue => "give <user> <number of ports> [--service=my_app]", abstract => 'Give a user 1 or more ports.', help => "Give a user 1 or more ports, that only they can run a service on.\n --service=<NAME> this will tie a service name, as appropriate for scripts/cpuser_service_manager, to the ports for reference", }, take => { code => \&take, clue => "take <user> <port-number> [<port-number> <port-number> β¦]", abstract => "Take 1 or more ports from a user.", help => "Take 1 or more ports from a user. Errors out completely if any of the given ports do not belong to them.", }, list => { code => \&list, clue => "list [<user>]", abstract => "List port assignment information.", help => "List port assignment information. If given a user it lists only that userβs information. The output is in human friendly JSON format.", }, fw => { code => \&fw, clue => "fw", abstract => "Setup Firewall", help => "Setup the firewall rules to match the configured port assignments", }, user => { code => \&user, clue => "user (remove|change) <user> [<new_user>]", abstract => "Operate on a given userβs port assignments", help => "Remove all ports owned by the given user. Change port ownership from <user> to <new_user>.", }, }; my $hint_blurb = "Usage: `$0 {command} β¦`.\n\tThis tool supports the following commands:"; my $opts = { 'help:pre_hint' => $hint_blurb, 'help:pre_help' => "Various user-assigned-port related admin utilities\n\n$hint_blurb", default_commands => "help", alias => { free => "take", firewall => "fw" }, }; run(@ARGV) if !caller; sub run { my (@argv) = @_; die "This script should only be called as root\n" if $> != 0; local $ENV{TERM} = $ENV{TERM} || "xterm-256color"; # non-CLI modulino avoid needless: Cannot find termcap: TERM not set at β¦/Term/ReadLine.pm line 373. require App::CmdDispatch; import App::CmdDispatch; # need to have App::CmdDispatch do this automatically see CPANEL-22328 if ( @argv && grep { defined && m/\A\-\-help\z/ } @argv ) { App::CmdDispatch->new( $cmds, $opts )->help(); exit(0); } my $orig_command_hint = \&App::CmdDispatch::command_hint; no warnings "redefine"; local *App::CmdDispatch::command_hint = sub { $orig_command_hint->(@_); exit(1); }; no warnings 'once'; require App::CmdDispatch::IO; local *App::CmdDispatch::IO::print = sub { shift; if ( ref($@) && $@ =~ m/^App::CmdDispatch::Exception/ ) { CORE::print STDERR @_; return; } CORE::print(@_); return; }; local *App::CmdDispatch::MinimalIO::print = \&App::CmdDispatch::IO::print; use warnings 'once'; # ^^^ /need to have App::CmdDispatch do this automatically see CPANEL-22328 if ( $ARGV[0] && $ARGV[0] eq 'help' ) { require Cpanel::Services::Firewall; if ( Cpanel::Services::Firewall::is_firewalld() ) { $opts->{'help:post_help'} = _get_firewalld_caveat(); } } my $app = App::CmdDispatch->new( $cmds, $opts ); if ( ref( $app->{io} ) eq "1" ) { # To work around https://rt.cpan.org/Ticket/Display.html?id=132309 $app->{io} = bless {}, "App::CmdDispatch::MinimalIO"; } return $app->run(@argv); } ################ #### commands ## ################ sub give { my ( $app, $user, $count, @flags ) = @_; _validate_user_arg( $app, $user ); if ( !defined $count || $count !~ m/^[1-9][0-9]*$/ ) { _bail( $app, "The number of ports you want assigned must be a whole number greater than 0." ); } my @ports = _get_next_n_ports($count); # dies if it can't get $count ports _add_conf( $app, $user => \@ports, @flags ); # dies if port is already assigned (i.e. raced from _get_next_n_ports()), dies if it canβt save for my $port (@ports) { print "$port\n"; } _setup_firewall(); return; } sub take { my ( $app, $user, @ports ) = @_; _validate_user_arg( $app, $user ); die "No ports given.\n" if !@ports; my $transaction = Cpanel::Transaction::File::JSON->new( path => $port_authority_conf, permissions => 0640, ); my $data = $transaction->get_data(); my $hr = ref($data) eq 'HASH' ? $data : {}; for my $port (@ports) { if ( !defined $port || $port !~ m/^[1-9][0-9]*$/ ) { die "Invalid port.\n"; } elsif ( !exists $hr->{$port} ) { die "β$portβ is not assigned.\n"; } elsif ( $hr->{$port}{owner} ne $user ) { die "β$portβ is not owned by β$userβ.\n"; } else { delete $hr->{$port}; } } $transaction->set_data($hr); _write_transaction($transaction); _setup_firewall(); return; } sub user { my ( $app, $action, $user, $new_user ) = @_; die "invalid action for `user` subcommand\n" if !defined $action || ( $action ne "remove" && $action ne "change" ); # This function is used in 2 ways, from the command line where multiple actions are # allowed. And from the Task processor, where it is in reaction to a modify account. # In the latter case, the action will be "change", and the original user will have # already been changed to new_user, and is no longer valid. if ( $action eq "change" && defined $user && defined $new_user && Cpanel::Validate::Username::user_exists($new_user) && !Cpanel::Validate::Username::user_exists($user) ) { _validate_user_arg( $app, $new_user ); } else { _validate_user_arg( $app, $user ); } if ( $action eq "change" ) { die "New username is not valid.\n" if !defined $new_user || !Cpanel::Validate::Username::is_strictly_valid($new_user); die "Too many arguments.\n" if @_ > 4; } else { die "Too many arguments.\n" if @_ > 3; } my $transaction = Cpanel::Transaction::File::JSON->new( path => $port_authority_conf, permissions => 0640, ); my $data = $transaction->get_data(); my $hr = ref($data) eq 'HASH' ? $data : {}; my $count = 0; for my $port ( sort keys %{$hr} ) { if ( $hr->{$port}{owner} eq $user ) { $count++; if ( $action eq "change" ) { $hr->{$port}{owner} = $new_user; } else { delete $hr->{$port}; } } } if ($count) { $transaction->set_data($hr); _write_transaction($transaction); _setup_firewall(); } else { eval { $transaction->close_or_die; }; warn $@ if $@; } print "", ( $action eq "change" ? "Updated" : "Removed" ), ": $count\n"; return; } sub list { my ( $app, $user ) = @_; my $hr = eval { Cpanel::JSON::LoadFile($port_authority_conf) } || {}; if ( $user || @_ == 2 ) { _validate_user_arg( $app, $user ); for my $port ( keys %{$hr} ) { delete $hr->{$port} if $hr->{$port}{owner} ne $user; } } print Cpanel::JSON::pretty_canonical_dump($hr); return; } sub fw { _setup_firewall(); return; } ############################## #### used by task processor ## ############################## sub call_ubic { my ( $user, @args ) = @_; my $curhome = Cpanel::PwCache::gethomedir($user); if ( -s "$curhome/.ubic.cfg" ) { require Cpanel::AccessIds; Cpanel::AccessIds::do_as_user_with_exception( $user, sub { local $ENV{HOME} = $curhome; # would be cool if Cpanel::FindBin (or whatever) did this for us: CPANEL-22345 and CPANEL-23118 my $real_perl = readlink("/usr/local/cpanel/3rdparty/bin/perl"); my $cp_bin_dir = $real_perl; $cp_bin_dir =~ s{/perl$}{}; local $ENV{PATH} = "$cp_bin_dir:$ENV{PATH}"; # not only does this allow it to find our ubic-admin, it allows its env-shebang to pick up our perl system( "ubic", @args ); } ); } return; } sub update_ubic_conf { my ( $user, $orig_user ) = @_; my $newhome = Cpanel::PwCache::gethomedir($user); die "Invalid new username\n" if ( !$newhome || !-d $newhome ); my $ubic_note = "IMPORTANT = Do not edit this cPanel User Service Manager generated file!"; # from scripts/cpuser_service_manager, DO NOT prepend a '#' my $ubic_cnf_path = "$newhome/.ubic.cfg"; if ( -s $ubic_cnf_path ) { require Cpanel::LoadFile; require Cpanel::AccessIds; Cpanel::AccessIds::do_as_user_with_exception( $user, sub { my $had_ubic_note = 0; my $new_ubic = ""; for my $line ( split( /\n/, Cpanel::LoadFile::load($ubic_cnf_path) ) ) { if ( $line =~ m/^\s*data_dir\s*=/ ) { $new_ubic .= "data_dir = $newhome/ubic/data\n"; } elsif ( $line =~ m/^\s*default_user\s*=/ ) { $new_ubic .= "default_user = $user\n"; } elsif ( $line =~ m/^\s*service_dir\s*=/ ) { $new_ubic .= "service_dir = $newhome/ubic/service\n"; } elsif ( $line eq $ubic_note ) { $had_ubic_note++; $new_ubic .= "$ubic_note\n"; } else { if ( $line ne "" ) { warn "Custom line in $ubic_cnf_path may be incorrect:\n\t(Line: '$line')\n"; # could modify it but you get into a rats nest: # e.g. change homedir then username: # what happens when old name is foo and the new name if foo1: # /home/foo becomes /home/foo1 # /home/foo1 becomes /home/foo11 # e.g. change username then homedir # what happens when old name is bar and the new homedir is /home2/bart # /home/bar becomes /home/bart # /home/bart becomes /home2/bartt # they really shouldn't be editing this file anyway Β―\_(γ)_/Β― } $new_ubic .= "$line\n"; } } if ( !$had_ubic_note ) { $new_ubic = "$ubic_note\n$new_ubic"; } Cpanel::FileUtils::Write::overwrite( $ubic_cnf_path, $new_ubic ); my $ubic_update_service = $newhome . "/ubic/service/ubic/update"; my $ubic_watchdog_service = $newhome . "/ubic/service/ubic/watchdog"; foreach my $file ( $ubic_update_service, $ubic_watchdog_service ) { if ( -e $file ) { my $new_ubic = ""; my $did_something = 0; for my $line ( split( /\n/, Cpanel::LoadFile::load($file) ) ) { my $working = $line; if ( $working =~ m:'--stdout=/.+?/$orig_user/.*': ) { $working =~ s:(--stdout=/.+?)/$orig_user/:$1/$user/:; } if ( $working =~ m:'--stderr=/.+?/$orig_user/.*': ) { $working =~ s:(--stderr=/.+?)/$orig_user/:$1/$user/:; } $new_ubic .= $working; } Cpanel::FileUtils::Write::overwrite( $file, $new_ubic ); } } } ); } return; } ############### #### helpers ## ############### sub _setup_firewall { require Cpanel::Services::Firewall; if ( Cpanel::Services::Firewall::is_firewalld() ) { warn _get_firewalld_caveat() . "\n"; } print "Setting up firewall β¦\n"; require Capture::Tiny; my ( $out, $rv ) = Capture::Tiny::capture_merged( \&Cpanel::Services::Firewall::setup_firewall ); if ($rv) { # setup_firewall() RV is suitable for exit($rv||0) warn "Firewall setup reported a problem. Please run /usr/local/cpanel/scripts/configure_firewall_for_cpanel to ensure the firewall is OK.\n"; return; } else { print " β¦ done.\n"; } return 1; } sub _validate_user_arg { my ( $app, $user ) = @_; _bail( $app, "The user argument is missing." ) if !$user; if ( $user ne "root" ) { my $user_lookup = Cpanel::Config::LoadUserDomains::loaduserdomains( undef, 0, 1 ); _bail( $app, "The given user is not a cPanel user.\n" ) if !$user_lookup->{$user}; } return 1; } sub _get_next_n_ports { my ($n) = @_; my ( $bottom_min, $bottom_max, $top_min, $top_max ) = _get_port_ranges(); my $port; # buffer my @ports; for $port ( $bottom_min .. $bottom_max ) { push @ports, $port if !_is_port_assigned($port); last if @ports == $n; } return @ports if @ports == $n; if ( defined $top_min ) { for $port ( $top_min .. $top_max ) { push @ports, $port if !_is_port_assigned($port); last if @ports == $n; } } die "Not enough free ports (wanted $n)\n" if @ports != $n; return @ports; } my $lookup_cache; sub _add_conf { my ( $app, $user, $ports, @flags ) = @_; # There is an old unused system (to be deprecated/removed via CPANEL-22447) that uses # /var/cpanel/portassignments.db (YAML) && /etc/portassignments (key: value version of the .db file β¦) # We could import those here if they exist but probably YAGNI. my $service; for my $flag (@flags) { if ( defined $flag && $flag =~ m/^\-\-service/ ) { $service = $flag; $service =~ s/^\-\-service//; $service =~ s/^=//; # do this sperately in case they just pass `--service` or `--service=` if ( $service !~ m/^[\w-]+(?:\.[\w-]+)*$/ ) { # regexp is $service_name_re from Ubic.pm v1.60 _bail( $app, "Invalid service name" ); } } } my $transaction = Cpanel::Transaction::File::JSON->new( path => $port_authority_conf, permissions => 0640, ); my $data = $transaction->get_data(); my $hr = ref($data) eq 'HASH' ? $data : {}; for my $port ( @{$ports} ) { die "port β$portβ already assigned (is someone else logged in as root and running this script?)\n" if exists $hr->{$port}; $hr->{$port} = { owner => $user }; $hr->{$port}{service} = $service if $service; } $transaction->set_data($hr); _write_transaction($transaction); return; } sub _write_transaction { my ($transaction) = @_; eval { $transaction->save_pretty_canonical_or_die(); $transaction->close_or_die(); }; warn $@ if $@; $lookup_cache = undef; return; } sub _get_cmd { return $cmds; } sub _bail { my ( $app, $msg ) = @_; chomp($msg); # !$app for task processor die "$msg\n" if $ENV{ __PACKAGE__ . "::bail_die" } || !$app; # for API calls, otherwise: warn "$msg\n"; $app->help(); # there is no return()ing from this lol exit(1); ## no critic qw(Cpanel::NoExitsFromSubroutines) the refactor here is risky } sub _is_port_assigned { my ($port) = @_; if ( !$lookup_cache ) { $lookup_cache = eval { Cpanel::JSON::LoadFile($port_authority_conf) } || {}; } return exists $lookup_cache->{$port}; } my ( $bottom_min, $bottom_max, $top_min, $top_max ); sub _get_port_ranges { if ( !defined $bottom_min ) { # even if FTP is disabled ATM, it could be re-enabled (ΒΏTODO/YAGNI? only factor these in if FTP is currently enabled my ( $passive_ftp_start, $passive_ftp_end ) = ( 49_152, 65_534 ); no warnings "redefine"; local *Cpanel::Debug::log_warn = sub { }; # facepalm β¦ require Cpanel::FtpUtils::Config; my $ftp_conf = Cpanel::FtpUtils::Config->new->get_config; my $ftp_passive_range = $ftp_conf->{PassivePortRange} || $ftp_conf->{PassivePorts}; if ($ftp_passive_range) { ( $passive_ftp_start, $passive_ftp_end ) = split( /\s+/, $ftp_passive_range ); } my ( $ephemeral_start, $ephemeral_end ) = ( 49_152, 65_535 ); # IANA defaults require File::stat; if ( File::stat::stat("/proc/sys/net/ipv4/ip_local_port_range") ) { require Path::Tiny; my $ip_local_port_range_raw = Path::Tiny::path("/proc/sys/net/ipv4/ip_local_port_range")->slurp; chomp($ip_local_port_range_raw); ( $ephemeral_start, $ephemeral_end ) = split( /\s+/, $ip_local_port_range_raw ); if ( $ephemeral_start > $passive_ftp_start ) { $ephemeral_start = $passive_ftp_start; } if ( $ephemeral_end < $passive_ftp_end ) { $ephemeral_end = $passive_ftp_end; } } $ephemeral_start = 10_001 if $ephemeral_start < 10_001; $ephemeral_end = $ephemeral_start + 1 if $ephemeral_end < $ephemeral_start; ( $bottom_min, $bottom_max, $top_min, $top_max ) = ( 10_000 => ( $ephemeral_start - 1 ), ( $ephemeral_end + 1 ) => 65535 ); if ( $ephemeral_end >= 65535 ) { ( $top_min, $top_max ) = ( undef, undef ); } } return ( $bottom_min, $bottom_max, $top_min, $top_max ); } sub _silent_sys { my (@sys) = @_; require Capture::Tiny; my ( $out, $exit ) = Capture::Tiny::capture_merged( sub { system(@sys) } ); die "`@sys` exited unclean ($exit)\n" if $exit; #TODO/YAGNI: output $out if --verbose return; } sub _get_firewalld_caveat { my $message = <<"END_FIREWALLD"; βΉοΈ [Caveat] Currently, firewalld does not respect port ownership assignments. To enforce port ownership, you must use iptables tables instead. We will update this system when the functionality is available. END_FIREWALLD require Cpanel::Output::Formatted::Terminal; return Cpanel::Output::Formatted::Terminal->new->format_message( "bold black on_blue" => $message ); } 1;
Upload File
Create Folder