Linux srv1.sbit.com.bd 3.10.0-1160.6.1.el7.x86_64 #1 SMP Tue Nov 17 13:59:11 UTC 2020 x86_64
Apache
: 144.76.42.188 | : 3.135.206.166
248 Domain
8.1.30
pmthsedu
shells.trxsecurity.org
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
Backdoor Scanner
Backdoor Create
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
local /
cpanel /
scripts /
[ HOME SHELL ]
Name
Size
Permission
Action
Cpanel
[ DIR ]
drwxr-xr-x
cpan_sandbox
[ DIR ]
drwxr-xr-x
php_sandbox
[ DIR ]
drwxr-xr-x
MirrorSearch_pingtest
2.38
KB
-rwxr-xr-x
activesync-invite-reply
1.69
KB
-rwxr-xr-x
add_dns
2.36
KB
-rwxr-xr-x
adddns
2.36
KB
-rwxr-xr-x
addpop
6.08
KB
-rwxr-xr-x
addsystemuser
3.27
KB
-rwxr-xr-x
adduser
92
B
-rwxr-xr-x
analyze_config
3.84
KB
-rwxr-xr-x
apachelimits
4.31
KB
-rwxr-xr-x
archive_sync_zones
3.02
KB
-rwxr-xr-x
auto-adjust-mysql-limits
1.81
KB
-rwxr-xr-x
autorepair
1.24
KB
-rwxr-xr-x
backups_clean_metadata_for_mis...
1.57
KB
-rwxr-xr-x
backups_create_metadata
15.75
KB
-rwxr-xr-x
backups_list_user_files
4.56
KB
-rwxr-xr-x
balance_linked_node_quotas
2.58
KB
-rwxr-xr-x
biglogcheck
1.69
KB
-rwxr-xr-x
build_bandwidthdb_root_cache_i...
1.52
KB
-rwxr-xr-x
build_cpnat
3.41
KB
-rwxr-xr-x
build_mail_sni
3.87
KB
-rwxr-xr-x
build_maxemails_config
1.14
KB
-rwxr-xr-x
builddovecotconf
6.76
KB
-rwxr-xr-x
buildeximconf
7
KB
-rwxr-xr-x
buildhttpdconf
2.6
KB
-rwxr-xr-x
buildnsdconf
1.01
KB
-rwxr-xr-x
buildpureftproot
539
B
-rwxr-xr-x
ccs-check
4.91
KB
-rwxr-xr-x
check_cpanel_pkgs
10.75
KB
-rwxr-xr-x
check_cpanel_rpms
218
B
-rwxr-xr-x
check_domain_tls_service_domai...
6.68
KB
-rwxr-xr-x
check_immutable_files
5.49
KB
-rwxr-xr-x
check_mail_spamassassin_compil...
187
B
-rwxr-xr-x
check_maxmem_against_domains_c...
3.57
KB
-rwxr-xr-x
check_mount_procfs
2.02
KB
-rwxr-xr-x
check_mysql
5.55
KB
-rwxr-xr-x
check_security_advice_changes
8.28
KB
-rwxr-xr-x
check_unmonitored_enabled_serv...
4.56
KB
-rwxr-xr-x
check_unreliable_resolvers
3.59
KB
-rwxr-xr-x
check_users_my_cnf
6.05
KB
-rwxr-xr-x
check_valid_server_hostname
7.66
KB
-rwxr-xr-x
checkalldomainsmxs
2.4
KB
-rwxr-xr-x
checkbashshell
1.18
KB
-rwxr-xr-x
checkccompiler
1.22
KB
-rwxr-xr-x
checkexim.pl
3.1
KB
-rwxr-xr-x
checklink
1.29
KB
-rwxr-xr-x
checknsddirs
1014
B
-rwxr-xr-x
checkusers
856
B
-rwxr-xr-x
chkmydns
561
B
-rwxr-xr-x
chkpaths
141
B
-rwxr-xr-x
chpass
416
B
-rwxr-xr-x
ckillall
1.11
KB
-rwxr-xr-x
clean_dead_mailman_locks
2.09
KB
-rwxr-xr-x
clean_up_temp_wheel_users
2.44
KB
-rwxr-xr-x
clean_user_php_sessions
4.76
KB
-rwxr-xr-x
cleandns
13.09
KB
-rwxr-xr-x
cleandns8
417
B
-rwxr-xr-x
cleanmsglog
735
B
-rwxr-xr-x
cleanphpsessions
932
B
-rwxr-xr-x
cleanphpsessions.php
658
B
-rw-r--r--
cleanquotas
1.61
KB
-rwxr-xr-x
cleansessions
5.91
KB
-rwxr-xr-x
cleanupinterchange
2.64
KB
-rwxr-xr-x
cleanupmysqlprivs
533
B
-rwxr-xr-x
clear_cpaddon_ui_caches
1.27
KB
-rwxr-xr-x
clear_orphaned_virtfs_mounts
3.56
KB
-rwxr-xr-x
comparecdb
1.52
KB
-rwxr-xr-x
compilers
2.86
KB
-rwxr-xr-x
compilerscheck
999
B
-rwxr-xr-x
configure_firewall_for_cpanel
520
B
-rwxr-xr-x
configure_rh_firewall_for_cpan...
520
B
-rwxr-xr-x
configure_rh_ipv6_firewall_for...
520
B
-rwxr-xr-x
convert2dovecot
682
B
-rwxr-xr-x
convert_accesshash_to_token
4.07
KB
-rwxr-xr-x
convert_and_migrate_from_legac...
1.97
KB
-rwxr-xr-x
convert_maildir_to_mdbox
1.66
KB
-rwxr-xr-x
convert_mdbox_to_maildir
1.66
KB
-rwxr-xr-x
convert_roundcube_mysql2sqlite
25.28
KB
-rwxr-xr-x
convert_to_dovecot_delivery
4.33
KB
-rwxr-xr-x
convert_whmxfer_to_sqlite
1.46
KB
-rwxr-xr-x
copy_user_mail_as_root
1.25
KB
-rwxr-xr-x
copy_user_mail_as_user
1.34
KB
-rwxr-xr-x
cpaddonsup
3.25
KB
-rwxr-xr-x
cpan_config
2.8
KB
-rwxr-xr-x
cpanel_initial_install
67.36
KB
-rwxr-xr-x
cpanelsync
28.31
KB
-rwxr-xr-x
cpanelsync_postprocessor
1.62
KB
-rwxr-xr-x
cpanpingtest
965
B
-rwxr-xr-x
cpbackup
44.77
KB
-rwxr-xr-x
cpbackup_transport_file
5.65
KB
-rwxr-xr-x
cpdig
1.81
KB
-rwxr-xr-x
cpfetch
1.23
KB
-rwxr-xr-x
cphulkdblacklist
433
B
-rwxr-xr-x
cphulkdwhitelist
1.3
KB
-rwxr-xr-x
cpservice
2.87
KB
-rwxr-xr-x
cpuser_port_authority
19.29
KB
-rwxr-xr-x
cpuser_service_manager
10.85
KB
-rwxr-xr-x
createacct
24.57
MB
-rwx------
custom_backup_destination.pl.s...
5.06
KB
-rwxr-xr-x
custom_backup_destination.pl.s...
2.84
KB
-rwxr-xr-x
dav_change_hostname
3.57
KB
-rwxr-xr-x
dcpumon-wrapper
850
B
-rwxr-xr-x
delpop
6.2
KB
-rwxr-xr-x
detect_env_capabilities
508
B
-rwxr-xr-x
disable_prelink
2.77
KB
-rwxr-xr-x
disable_sqloptimizer
1.49
KB
-rwxr-xr-x
disablefileprotect
2.09
KB
-rwxr-xr-x
distro_changed_hook
1.16
KB
-rwxr-xr-x
dnscluster
4.44
KB
-rwxr-xr-x
dnsqueuecron
1.29
KB
-rwxr-xr-x
dnssec-cluster-keys
3.75
KB
-rwxr-xr-x
dovecot_maintenance
7.93
KB
-rwxr-xr-x
dovecot_set_defaults.pl
984
B
-rwxr-xr-x
dump_databases_and_users
2.3
KB
-rwxr-xr-x
dumpcdb
866
B
-rwxr-xr-x
dumpinodes
687
B
-rwxr-xr-x
dumpquotas
616
B
-rwxr-xr-x
dumpstor
913
B
-rwxr-xr-x
ea4_fresh_install
2.64
KB
-rwxr-xr-x
edit_cpanelsync_exclude_list
2.58
KB
-rwxr-xr-x
editquota
3.44
KB
-rwxr-xr-x
elevate-cpanel
314.53
KB
-rwx------
email_archive_maintenance
6.15
KB
-rwxr-xr-x
email_hold_maintenance
1.46
KB
-rwxr-xr-x
enable_spf_dkim_globally
8.83
KB
-rwxr-xr-x
enable_sqloptimizer
1.57
KB
-rwxr-xr-x
enablefileprotect
2.1
KB
-rwxr-xr-x
ensure_autoenabled_features
2.5
MB
-rwx------
ensure_conf_dir_crt_key
4.82
KB
-rwxr-xr-x
ensure_cpuser_file_ip
2.55
KB
-rwxr-xr-x
ensure_crontab_permissions
1.08
KB
-rwxr-xr-x
ensure_dovecot_memory_limits_m...
3.13
KB
-rwxr-xr-x
ensure_hostname_resolves
2.57
KB
-rwxr-xr-x
ensure_includes
601
B
-rwxr-xr-x
ensure_vhost_includes
13.53
KB
-rwxr-xr-x
exim_tidydb
2.96
KB
-rwxr-xr-x
eximconfgen
1.32
KB
-rwxr-xr-x
eximstats_spam_check
867
B
-rwxr-xr-x
export_horde_calendars_to_ics
15.07
KB
-rwxr-xr-x
export_horde_contacts_to_vcf
13.94
KB
-rwxr-xr-x
exportmydnsdb
3.47
KB
-rwxr-xr-x
expunge_expired_certificates_f...
3.56
KB
-rwxr-xr-x
expunge_expired_pkgacct_sessio...
852
B
-rwxr-xr-x
expunge_expired_transfer_sessi...
1.06
KB
-rwxr-xr-x
fastmail
5.16
KB
-rwxr-xr-x
featuremod
1.92
KB
-rwxr-xr-x
fetchfile
422
B
-rwxr-xr-x
find_and_fix_rpm_issues
6.99
KB
-rwxr-xr-x
find_outdated_services
5.41
KB
-rwxr-xr-x
find_pids_with_inotify_watch_o...
3.66
KB
-rwxr-xr-x
fix-cpanel-perl
28.82
KB
-rwxr-xr-x
fix-listen-on-localhost
3.52
KB
-rwxr-xr-x
fix-web-vhost-configuration
6.15
KB
-rwxr-xr-x
fix_addon_permissions
7.68
KB
-rwxr-xr-x
fix_dns_zone_ttls
1.34
KB
-rwxr-xr-x
fix_innodb_tables
4.05
KB
-rwxr-xr-x
fix_pear_registry
4.07
KB
-rwxr-xr-x
fix_reseller_acls
10.88
KB
-rwxr-xr-x
fixetchosts
4.32
KB
-rwxr-xr-x
fixheaders
572
B
-rwxr-xr-x
fixmailinglistperms
1008
B
-rwxr-xr-x
fixmailman
2.09
KB
-rwxr-xr-x
fixnamedviews
1.22
KB
-rwxr-xr-x
fixndc
413
B
-rwxr-xr-x
fixquotas
17.45
KB
-rwxr-xr-x
fixrelayd
1.74
KB
-rwxr-xr-x
fixrndc
16.48
KB
-rwxr-xr-x
fixtar
503
B
-rwxr-xr-x
fixtlsversions
4.7
KB
-rwxr-xr-x
fixvaliases
2
KB
-rwxr-xr-x
fixwebalizer
966
B
-rwxr-xr-x
forcelocaldomain
895
B
-rwxr-xr-x
ftpfetch
2.2
KB
-rwxr-xr-x
ftpquotacheck
8.31
KB
-rwxr-xr-x
ftpsfetch
2.36
KB
-rwxr-xr-x
ftpupdate
261
B
-rwxr-xr-x
gather_update_log_stats
4.25
KB
-rwx------
gather_update_logs_setupcronta...
5.45
KB
-rwx------
gemwrapper
1.74
KB
-rwxr-xr-x
gencrt
6.26
KB
-rwxr-xr-x
generate_account_suspension_in...
5.7
KB
-rwxr-xr-x
generate_google_drive_credenti...
1.11
KB
-rwxr-xr-x
generate_google_drive_oauth_ur...
984
B
-rwxr-xr-x
generate_maildirsize
13.94
KB
-rwxr-xr-x
generate_mod_evasive_local_ips...
1.81
KB
-rwxr-xr-x
gensysinfo
1.16
KB
-rwxr-xr-x
get_locale_from_legacy_name_in...
1.99
KB
-rwxr-xr-x
getremotecpmove
12.67
KB
-rwxr-xr-x
grpck
1.19
KB
-rwxr-xr-x
hackcheck
3.02
KB
-rwxr-xr-x
hook
1.45
KB
-rwxr-xr-x
httpspamdetect
2.66
KB
-rwxr-xr-x
hulk-unban-ip
3.93
MB
-rwx------
import_exim_data
8.39
KB
-rwxr-xr-x
importmydnsdb
11.34
KB
-rwxr-xr-x
increase_filesystem_limits
891
B
-rwxr-xr-x
initacls
4.99
KB
-rwxr-xr-x
initfpsuexec
444
B
-rwxr-xr-x
initquotas
19.47
KB
-rwxr-xr-x
initsuexec
4.03
KB
-rwxr-xr-x
install_cpanel_analytics
1.93
KB
-rwxr-xr-x
install_dovecot_fts
1.57
KB
-rwxr-xr-x
install_plugin
2.8
KB
-rwxr-xr-x
installpkg
575
B
-rwxr-xr-x
installpostgres
6.56
KB
-rwxr-xr-x
installsqlite3
1.82
KB
-rwxr-xr-x
ipcheck
3.93
KB
-rwxr-xr-x
ipusage
7.45
KB
-rwxr-xr-x
isdedicatedip
602
B
-rwxr-xr-x
jetbackup-check
3.69
KB
-rwxr-xr-x
killdns
422
B
-rwxr-xr-x
killdns-dnsadmin
1.15
KB
-rwxr-xr-x
killmysqluserprivs
433
B
-rwxr-xr-x
killmysqlwildcard
1.15
KB
-rwxr-xr-x
killpvhost
853
B
-rwxr-xr-x
killspamkeys
937
B
-rwxr-xr-x
link_3rdparty_binaries
1.24
KB
-rwxr-xr-x
linksubemailtomainacct
3.17
KB
-rwxr-xr-x
listcheck
538
B
-rwxr-xr-x
listsubdomains
1.05
KB
-rwxr-xr-x
litespeed-check
3.86
KB
-rwxr-xr-x
locale_export
4.82
KB
-rwxr-xr-x
locale_import
4.35
KB
-rwxr-xr-x
locale_info
3.99
KB
-rwxr-xr-x
logo.dat
205
B
-rw-r--r--
magicloader
1.94
KB
-rwxr-xr-x
maildir_converter
6.08
KB
-rwxr-xr-x
mailperm
16.58
KB
-rwxr-xr-x
mailscannerupdate
2.42
KB
-rwxr-xr-x
mainipcheck
10
KB
-rwxr-xr-x
maintenance
46.62
KB
-rwxr-xr-x
make_config
407
B
-rw-r--r--
make_hostname_unowned
1.16
KB
-rwxr-xr-x
manage_extra_marketing
12.41
KB
-rwx------
manage_greylisting
16.19
KB
-rwxr-xr-x
manage_mysql_profiles
20.02
KB
-rwxr-xr-x
migrate-pdns-conf
9.83
KB
-rwxr-xr-x
migrate_local_ini_to_php_ini
7.41
KB
-rwxr-xr-x
migrate_whmtheme_file_to_userd...
2.95
KB
-rwxr-xr-x
mkwwwacctconf
2.33
KB
-rwxr-xr-x
modify_accounts
4.09
KB
-rwxr-xr-x
modify_default_featurelist_ent...
3.93
KB
-rwx------
modify_packages
3.65
KB
-rwxr-xr-x
modsec_vendor
15.63
KB
-rwxr-xr-x
mysqlconnectioncheck
6.55
KB
-rwxr-xr-x
mysqlpasswd
4.09
KB
-rwxr-xr-x
named.ca
1.57
KB
-rw-r--r--
named.rfc1912.zones
774
B
-rw-r--r--
nixstatsagent.sh
58.67
KB
-rwx------
notify_expiring_certificates
9.37
KB
-rwxr-xr-x
notify_expiring_certificates_o...
1.33
KB
-rwxr-xr-x
oopscheck
1.12
KB
-rwxr-xr-x
optimize_eximstats
3.88
KB
-rwxr-xr-x
patch_mail_spamassassin_compil...
2.39
KB
-rwxr-xr-x
patchfdsetsize
2.72
KB
-rwxr-xr-x
pedquota
2.26
KB
-rwxr-xr-x
perform_sqlite_auto_rebuild_db...
2.2
KB
-rwxr-xr-x
perlinstaller
528
B
-rwxr-xr-x
perlmods
1.18
KB
-rwxr-xr-x
php_fpm_config
9.73
KB
-rwxr-xr-x
phpini_tidy
687
B
-rwxr-xr-x
pkgacct
87.82
KB
-rwxr-xr-x
pkgacct-wrapper
3.71
KB
-rwxr-xr-x
post_snapshot
3.16
KB
-rwxr-xr-x
post_sync_cleanup
6.09
KB
-rwxr-xr-x
primary_virtual_host_migration
2.44
KB
-rwxr-xr-x
process_pending_cpanel_php_pea...
3.49
KB
-rwxr-xr-x
process_site_templates
7.27
KB
-rwxr-xr-x
proxydomains
9.34
KB
-rwxr-xr-x
ptycheck
724
B
-rwxr-xr-x
purge_modsec_log
1.53
KB
-rwxr-xr-x
purge_old_config_caches
2.08
KB
-rwxr-xr-x
pwck
708
B
-rwxr-xr-x
quickdnslookup
1.13
KB
-rwxr-xr-x
quickwhoisips
2.29
KB
-rwxr-xr-x
quota_auto_fix
1.41
KB
-rwxr-xr-x
quotacheck
22.36
KB
-rwxr-xr-x
rawchpass
460
B
-rwxr-xr-x
rdate
4.8
KB
-rwxr-xr-x
realadduser
5.61
KB
-rwxr-xr-x
realchpass
3.26
KB
-rwxr-xr-x
realperlinstaller
5.67
KB
-rwxr-xr-x
realrawchpass
425
B
-rwxr-xr-x
rebuild_available_addons_packa...
1.27
KB
-rwxr-xr-x
rebuild_available_rpm_addons_c...
1.27
KB
-rwxr-xr-x
rebuild_bandwidthdb_root_cache
1.45
KB
-rwxr-xr-x
rebuild_dbmap
5.8
KB
-rwxr-xr-x
rebuild_provider_openid_connec...
1.01
KB
-rwxr-xr-x
rebuild_whm_chrome
2.22
KB
-rwxr-xr-x
rebuilddnsconfig
26.21
KB
-rwxr-xr-x
rebuildhttpdconf
2.6
KB
-rwxr-xr-x
rebuildinstalledssldb
2.85
KB
-rwxr-xr-x
rebuildippool
509
B
-rwxr-xr-x
rebuildnsdzones
1.14
KB
-rwxr-xr-x
rebuilduserssldb
948
B
-rwxr-xr-x
refresh-dkim-validity-cache
5.97
KB
-rwxr-xr-x
regenerate_tokens
2.18
KB
-rwxr-xr-x
reloadnsd
821
B
-rwxr-xr-x
remote_log_transfer
11.6
KB
-rwxr-xr-x
remove_dovecot_index_files
5.89
KB
-rwxr-xr-x
removeacct
20.91
MB
-rwx------
rescan_user_dovecot_fts
2.98
KB
-rwxr-xr-x
reset_mail_quotas_to_sane_valu...
6.82
KB
-rwxr-xr-x
resetmailmanurls
2.03
KB
-rwxr-xr-x
resetquotas
4.68
KB
-rwxr-xr-x
restartsrv
3.23
KB
-rwxr-xr-x
restartsrv_apache
422
B
-rwxr-xr-x
restartsrv_apache_php_fpm
9.9
MB
-rwxr-xr-x
restartsrv_base
9.9
MB
-rwxr-xr-x
restartsrv_bind
9.9
MB
-rwxr-xr-x
restartsrv_chkservd
427
B
-rwxr-xr-x
restartsrv_clamd
9.9
MB
-rwxr-xr-x
restartsrv_cpanalyticsd
9.9
MB
-rwxr-xr-x
restartsrv_cpanel_php_fpm
9.9
MB
-rwxr-xr-x
restartsrv_cpanellogd
9.9
MB
-rwxr-xr-x
restartsrv_cpdavd
9.9
MB
-rwxr-xr-x
restartsrv_cpgreylistd
9.9
MB
-rwxr-xr-x
restartsrv_cphulkd
9.9
MB
-rwxr-xr-x
restartsrv_cpipv6
9.9
MB
-rwxr-xr-x
restartsrv_cpsrvd
9.9
MB
-rwxr-xr-x
restartsrv_crond
9.9
MB
-rwxr-xr-x
restartsrv_dnsadmin
9.9
MB
-rwxr-xr-x
restartsrv_dovecot
9.9
MB
-rwxr-xr-x
restartsrv_exim
9.9
MB
-rwxr-xr-x
restartsrv_eximstats
504
B
-rwxr-xr-x
restartsrv_ftpd
426
B
-rwxr-xr-x
restartsrv_ftpserver
911
B
-rwxr-xr-x
restartsrv_httpd
9.9
MB
-rwxr-xr-x
restartsrv_imap
437
B
-rwxr-xr-x
restartsrv_inetd
2.47
KB
-rwxr-xr-x
restartsrv_ipaliases
9.9
MB
-rwxr-xr-x
restartsrv_lmtp
437
B
-rwxr-xr-x
restartsrv_mailman
9.9
MB
-rwxr-xr-x
restartsrv_mydns
9.9
MB
-rwxr-xr-x
restartsrv_mysql
9.9
MB
-rwxr-xr-x
restartsrv_named
777
B
-rwxr-xr-x
restartsrv_nscd
9.9
MB
-rwxr-xr-x
restartsrv_nsd
9.9
MB
-rwxr-xr-x
restartsrv_p0f
9.9
MB
-rwxr-xr-x
restartsrv_pdns
9.9
MB
-rwxr-xr-x
restartsrv_pop3
437
B
-rwxr-xr-x
restartsrv_postgres
427
B
-rwxr-xr-x
restartsrv_postgresql
9.9
MB
-rwxr-xr-x
restartsrv_powerdns
442
B
-rwxr-xr-x
restartsrv_proftpd
9.9
MB
-rwxr-xr-x
restartsrv_pureftpd
9.9
MB
-rwxr-xr-x
restartsrv_queueprocd
9.9
MB
-rwxr-xr-x
restartsrv_rsyslog
9.9
MB
-rwxr-xr-x
restartsrv_rsyslogd
437
B
-rwxr-xr-x
restartsrv_spamd
9.9
MB
-rwxr-xr-x
restartsrv_sshd
9.9
MB
-rwxr-xr-x
restartsrv_syslogd
2.4
KB
-rwxr-xr-x
restartsrv_tailwatchd
9.9
MB
-rwxr-xr-x
restartsrv_unknown
9.9
MB
-rwxr-xr-x
restartsrv_xinetd
422
B
-rwxr-xr-x
restorecpuserfromcache
1.96
KB
-rwxr-xr-x
restorepkg
36.49
MB
-rwx------
rfc1912_zones.tar
10
KB
-rw-r--r--
rpmup
4.77
KB
-rwxr-xr-x
rsync-user-homedir.pl
5.76
KB
-rwxr-xr-x
run_if_exists
512
B
-rwxr-xr-x
runstatsonce
440
B
-rwxr-xr-x
runweblogs
1.02
KB
-rwxr-xr-x
sa-update_wrapper
3.34
KB
-rwxr-xr-x
safetybits.pl
844
B
-rwxr-xr-x
secureit
4.72
KB
-rwxr-xr-x
securemysql
4.54
KB
-rwxr-xr-x
securerailsapps
3.58
KB
-rwxr-xr-x
securetmp
15.99
KB
-rwxr-xr-x
sendicq
474
B
-rwxr-xr-x
servicedomains
9.34
KB
-rwxr-xr-x
set_mailman_archive_perms
1.75
KB
-rwxr-xr-x
set_php_memory_limits
3.67
KB
-rwxr-xr-x
setpostgresconfig
6.04
KB
-rwxr-xr-x
setup_greylist_db
16.19
KB
-rwxr-xr-x
setup_modsec_db
1.3
KB
-rwxr-xr-x
setupftpserver
10.47
KB
-rwxr-xr-x
setupmailserver
9.55
KB
-rwxr-xr-x
setupnameserver
13.75
KB
-rwxr-xr-x
shrink_modsec_ip_database
12.97
KB
-rwxr-xr-x
simpleps
3.05
KB
-rwxr-xr-x
slurp_exim_mainlog
5.78
KB
-rwxr-xr-x
smartcheck
15.13
KB
-rwxr-xr-x
smtpmailgidonly
8.15
KB
-rwxr-xr-x
snapshot_prep
5.88
KB
-rwxr-xr-x
spamassassin_dbm_cleaner
5.85
KB
-rwxr-xr-x
spamassassindisable
3.74
KB
-rwxr-xr-x
spamboxdisable
2.27
KB
-rwxr-xr-x
sshcontrol
14.38
KB
-rwxr-xr-x
ssl_crt_status
3.84
KB
-rwxr-xr-x
suspendacct
18.01
KB
-rwxr-xr-x
suspendmysqlusers
4.42
KB
-rwxr-xr-x
swapip
3.82
KB
-rwxr-xr-x
sync-mysql-users-from-grants
1.2
KB
-rwxr-xr-x
sync_child_accounts
1.77
KB
-rwxr-xr-x
sync_contact_emails_to_cpanel_...
1.14
KB
-rwxr-xr-x
synccpaddonswithsqlhost
6.59
KB
-rwxr-xr-x
synctransfers
1.92
KB
-rwxr-xr-x
syslog_check
1.36
KB
-rwxr-xr-x
sysup
645
B
-rwxr-xr-x
test_sa_compiled
1.07
KB
-rwxr-xr-x
transfer_account_as_user
2.34
KB
-rwxr-xr-x
transfer_accounts_as_root
4.76
KB
-rwxr-xr-x
transfer_in_progress
3.08
KB
-rwxr-xr-x
transfer_in_progress.pod
312
B
-rw-r--r--
transfermysqlusers
9.53
MB
-rwx------
try-later
7.95
KB
-rwxr-xr-x
unblockip
667
B
-rwxr-xr-x
uninstall_cpanel_analytics
1.2
KB
-rwxr-xr-x
uninstall_dovecot_fts
562
B
-rwxr-xr-x
uninstall_plugin
2.84
KB
-rwxr-xr-x
unlink_service_account
2.62
KB
-rwxr-xr-x
unpkgacct
4.6
KB
-rwxr-xr-x
unslavenamedconf
863
B
-rwxr-xr-x
unsuspendacct
17.8
KB
-rwxr-xr-x
unsuspendmysqlusers
6.71
KB
-rwxr-xr-x
upcp
31.56
KB
-rwxr-xr-x
upcp-running
2.7
KB
-rwxr-xr-x
upcp.static
708.6
KB
-rwxr-xr-x
update-packages
4.77
KB
-rwxr-xr-x
update_apachectl
480
B
-rwxr-xr-x
update_db_cache
430
B
-rwxr-xr-x
update_dkim_keys
1.45
KB
-rwxr-xr-x
update_exim_rejects
1.21
KB
-rwxr-xr-x
update_existing_mail_quotas_fo...
4.78
KB
-rwxr-xr-x
update_known_proxy_ips
1002
B
-rwxr-xr-x
update_local_rpm_versions
4.56
KB
-rwxr-xr-x
update_mailman_cache
8.34
KB
-rwxr-xr-x
update_mysql_systemd_config
1.25
KB
-rwxr-xr-x
update_neighbor_netblocks
487
B
-rwxr-xr-x
update_sa_config
2.14
KB
-rwxr-xr-x
update_spamassassin_config
10.73
KB
-rwxr-xr-x
update_users_jail
691
B
-rwxr-xr-x
update_users_vhosts
801
B
-rwxr-xr-x
updatedomainips
605
B
-rwxr-xr-x
updatenameserverips
1.66
KB
-rwxr-xr-x
updatenow
5.18
KB
-rwxr-xr-x
updatenow.static
1.91
MB
-rwxr-xr-x
updatenow.static-cpanelsync
1.97
MB
-rwx------
updatesigningkey
1.95
KB
-rwxr-xr-x
updatessldomains
1.81
KB
-rwxr-xr-x
updatesupportauthorizations
2.49
KB
-rwxr-xr-x
updateuserdatacache
2.47
KB
-rwxr-xr-x
updateuserdomains
774
B
-rwxr-xr-x
upgrade_bandwidth_dbs
2.22
KB
-rwxr-xr-x
upgrade_subaccount_databases
2.73
KB
-rwxr-xr-x
userdata_wildcard_cleanup
5.74
KB
-rwxr-xr-x
userdirctl
5.01
KB
-rwxr-xr-x
validate_sshkey_passphrase
1.21
KB
-rwxr-xr-x
verify_api_spec_files
757
B
-rwxr-xr-x
verify_pidfile
1.96
KB
-rwxr-xr-x
verify_vhost_includes
7.34
KB
-rwxr-xr-x
vps_optimizer
7.82
KB
-rwxr-xr-x
vzzo-fixer
725
B
-rwxr-xr-x
whmlogin
2.33
KB
-rwxr-xr-x
whoowns
1.13
KB
-rwxr-xr-x
wpt_license
6.27
MB
-rwx------
wwwacct
24.57
MB
-rwx------
wwwacct2
88
B
-rwxr-xr-x
xfer_rcube_schema_migrate.pl
2.4
KB
-rwxr-xr-x
xfer_rcube_uid_resolver.pl
1.8
KB
-rwxr-xr-x
xferpoint
3.13
KB
-rwxr-xr-x
xfertool
16.14
KB
-rwxr-xr-x
zoneexists
800
B
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : fix-cpanel-perl
#!/usr/bin/perl # cpanel - scripts/fix-cpanel-perl Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited package scripts::fixcpanelperl; use strict; use warnings; ### Do not add any extra use/require statements here without talking to BC. ### ### This code is used by the installer for fresh install ### its main goal is to bootstrap & repair cPanel Perl ### ### Thus no dependencies should be added to this special script. ### Because this script uses only system perl code, ### the rest of the cPanel code base gets to have nice things! ### and rely on cPanel Perl stack. use IPC::Open3 (); use POSIX (); use constant COLOR_RED => 31; use constant COLOR_GREEN => 32; use constant COLOR_YELLOW => 33; use constant COLOR_GRAY => 37; use constant UPDATE_SOURCE_DEFAULT => 'httpupdate.cpanel.net'; use constant PKG_VERSION_SOURCE => '11.108'; use constant PKG_DOWNLOADS_DIR => '/usr/local/cpanel/tmp/rpm_downloads'; =pod =head1 NAME scripts::fixcpanelperl =head1 SYNOPSIS # restore cpanel-perl package when missing /scripts/fix-cpanel-perl =head1 DESCRIPTION This script is used during fresh installation to bootstrap cPanel Perl and install a few core dependencies packages to run the installation process using cPanel Perl version as early as possible. The script can also be used to recover from a catastrophic loss or coruption of the cpanel-perl packages blocking check_cpanel_pkgs or upcp to recover the system. This script is automatically invoked if needed when check_cpanel_pkgs cannot run. =head1 NOTE The list of Perl packages install by this script should be short. This script should only use default perl packages install with the system, no Cpanel packages can be use as part of this script. =cut my %shared_install_env = ( LANG => 'C', LANGUAGE => 'C', LC_ALL => 'C', LC_MESSAGES => 'C', LC_CTYPE => 'C', ); our %DISTRO_SETUP = ( 'centos' => { name => 'centos', install_env => { %shared_install_env, }, install_cmd => [ '/bin/rpm', '-Uvh', '--force', '--nodeps' ], template => { base_url => 'http://%httpupdate%/RPM/%cpanel_major%/%distro_name%/%distro_major%/x86_64', file_name => '%package%-%version%~el%distro_major%.%arch%.rpm' }, package_sha512 => 'rpm.sha512', # could use later once pushed to prod sha512 }, 'ubuntu' => { name => 'ubuntu', install_env => { %shared_install_env, DEBIAN_FRONTEND => q[noninteractive], DEBIAN_PRIORITY => q[critical], }, install_cmd => [ '/bin/dpkg', '-i', '--force-confnew' ], template => { base_url => 'http://%httpupdate%/ubuntu/pool', base_file_uri => '%package%', file_name => '%package%_%version%~u%distro_major%_%arch%.deb', }, package_sha512 => 'sha512', }, ); our $CPANEL_CONFIG_FILE = '/var/cpanel/cpanel.config'; our $SIG_VALIDATION_CPCONF_KEY = 'signature_validation'; sub colorize_bold { my ( $color, $msg ) = @_; return $msg if !defined $color || -e '/var/cpanel/disable_cpanel_terminal_colors'; $msg ||= ''; return chr(27) . '[1;' . $color . 'm' . $msg . chr(27) . '[0;m'; } sub DEBUG($) { return _MSG( 'DEBUG', " " . shift ) } sub ERROR($) { return _MSG( colorize_bold( COLOR_RED, 'ERROR' ), colorize_bold( COLOR_GRAY, shift ) ); } sub WARN($) { return _MSG( colorize_bold( COLOR_YELLOW, 'WARN' ), colorize_bold( COLOR_YELLOW, shift ) ); } sub OK($) { return _MSG( colorize_bold( COLOR_GREEN, 'OK' ), colorize_bold( COLOR_GRAY, shift ) ); } sub INFO($) { return _MSG( 'INFO', shift ) } sub FATAL($) { _MSG( colorize_bold( COLOR_RED, 'FATAL' ), colorize_bold( COLOR_RED, shift ) ); die "\n"; } # Cached and used all over the place. our ( $wget_bin, $wget_args, $GPG_BIN ); our ( $DISTRO_TYPE, $DISTRO_MAJOR ); our $_distro_instance; my %sha; exit script(@ARGV) unless caller(); # return the instance of the current distro sub current_distro { return $_distro_instance if $_distro_instance; $DISTRO_TYPE or FATAL("DISTRO_TYPE is not set"); $_distro_instance = $DISTRO_SETUP{$DISTRO_TYPE} or FATAL("Unknown distro type $DISTRO_TYPE. Cannot bootstrap cpanel-perl"); return $_distro_instance; } # init all our global for the scripts sub _init { ( $wget_bin, $wget_args ) = get_download_tool_binary(); $GPG_BIN = gpg_bin(); ( $DISTRO_TYPE, $DISTRO_MAJOR ) = os_info(); # order matters current_distro() or FATAL("Cannot guess current distro"); return; } sub script { my (@args) = @_; return 0 if cpanel_perl_is_stable(); loop_protection(); ERROR("Core cpanel-perl modules have been found to be corrupt. Attempting to correct this.") unless $ENV{CPANEL_BASE_INSTALL}; # init globals first, or things will break in a hard to debug way since output is stifled on install _init(); fetch_and_install_gpg_keys() unless $ENV{CPANEL_BASE_INSTALL_GPG_KEYS_IMPORTED}; download_pkg_sha512(); chdir(PKG_DOWNLOADS_DIR) or FATAL( "Fail to chdir to " . PKG_DOWNLOADS_DIR ); my $core_perl_pid; if ( $core_perl_pid = fork() ) { # handle just after... } elsif ( defined $core_perl_pid ) { wget_and_validate_file( core_perl_pkg() ); install_packages( core_perl_pkg() ) and exit 1; exit(0); } else { die "The system failed to fork because of an error: $!"; } # download package while doing the first transaction my $pkgs = pkgs_to_download(); foreach my $package_name ( sort keys %$pkgs ) { wget_and_validate_file( $package_name, $pkgs->{$package_name} ); } { waitpid( $core_perl_pid, 0 ); FATAL "Core perl package transaction failed" unless $? == 0; } install_packages(%$pkgs); FATAL "package transaction failed" unless $? == 0; OK("cpanel-perl is now restored, checking all cpanel packages."); my @to_cleanup = ( current_distro()->{package_sha512}, current_distro()->{package_sha512} . '.asc', @{ get_packages_filename( core_perl_pkg() ) }, @{ get_packages_filename(%$pkgs) }, ); cleanup_files(@to_cleanup); # updatenow.static will do the needful during an install. return 0 if $ENV{CPANEL_BASE_INSTALL}; # This should be changed to check_cpanel_pkgs at some point if ( !-x '/usr/local/cpanel/3rdparty/bin/perl' ) { FATAL "/usr/local/cpanel/3rdparty/bin/perl is missing"; } if ( !-e '/usr/local/cpanel/scripts/check_cpanel_pkgs' ) { FATAL "Unable to run scripts/check_cpanel_pkgs. You will need to run updatenow.static and then re-run /usr/local/cpanel/scripts/check_cpanel_pkgs --fix"; } setup_env_for_distro(); exec(qw{/usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/check_cpanel_pkgs --fix --long-list --no-digest}) or FATAL "Failed to exec /usr/local/cpanel/scripts/check_cpanel_pkgs --fix"; return 255; } sub loop_protection { $ENV{CPANEL_FIX_PERL} = 0 unless defined $ENV{CPANEL_FIX_PERL}; ++$ENV{CPANEL_FIX_PERL}; if ( $ENV{CPANEL_FIX_PERL} > 3 ) { FATAL "$0 was run mulitple times without fixing your system. Aborting. (loop detection)"; return 1; } elsif ( $ENV{CPANEL_FIX_PERL} > 1 ) { WARN( "Running $0 an extra time " . $ENV{CPANEL_FIX_PERL} ); } return; } sub render_filename { my ( $package, $version_arch ) = @_; my $filename = current_distro()->{template}->{file_name} or FATAL("Undefined file_name"); # 3.75-1.cp108.noarch my ( $v, $arch ) = ( $version_arch =~ m{^(.+)\.([^\.]+)$} ); FATAL("Cannot parse version / arch from $package $version_arch") unless defined $v && defined $arch; if ( current_distro()->{name} eq 'ubuntu' ) { $arch = ( $arch =~ m/86/ ) ? 'amd64' : 'all'; } return tt( $filename, { package => $package, version => $v, arch => $arch } ); } sub render_fileuri { my ( $package, $version_arch ) = @_; my $filename = render_filename( $package, $version_arch ); my $uri = ''; # not for all distro if ( my $base_file_uri = current_distro()->{template}->{base_file_uri} ) { $uri = tt( $base_file_uri, { package => $package, version_arch => $version_arch } ); } $uri .= '/' if defined $uri && length $uri; $uri .= $filename; return $uri; } sub get_packages_filename { my @files; while ( scalar @_ ) { my $package = shift @_; my $version_arch = shift @_; push @files, render_filename( $package, $version_arch ); } return \@files; } sub install_packages { my (@packages) = @_; return unless scalar @packages; my $files = get_packages_filename(@packages); my @cmd = ( @{ current_distro()->{install_cmd} }, @$files ); DEBUG( "Installing packages: " . join( ' ', @cmd ) ); local %ENV = %ENV; setup_env_for_distro(); return system(@cmd); } sub setup_env_for_distro { # setup some special environment variables for running the install command my $env = current_distro()->{install_env}; return unless defined $env && ref $env; foreach my $k ( keys %$env ) { $ENV{$k} = $env->{$k}; } return; } sub cleanup_files { my (@files) = @_; foreach my $f (@files) { unlink( PKG_DOWNLOADS_DIR . '/' . $f ); } return; } sub os_info { my ( $distro_type, $distro_major ); # Trust the Cpanel-OS symlink if it is present. This allows Cache locking to function here. my $cpanel_os_cache_file = '/var/cpanel/caches/Cpanel-OS'; if ( -l $cpanel_os_cache_file ) { my @sysinfo = split /\|/, readlink($cpanel_os_cache_file); ( $distro_type, $distro_major ) = @sysinfo[ 1, 2 ]; } if ( $distro_type && $distro_major ) { # Got it from cache! } elsif ( open( my $fh, "<", "/etc/os-release" ) ) { # everything but CL6 has this file. my $line; # buffer while ( $line = <$fh> ) { if ( index( $line, "ID=" ) == 0 ) { $distro_type = _clean_value( $line => length("ID=") ); } elsif ( index( $line, "VERSION_ID=" ) == 0 ) { $distro_major = _clean_value( $line => length("VERSION_ID=") ); $distro_major =~ s/\..+//; # Strip off .04 from 20.04 } last if $distro_type && $distro_major; } } elsif ( -e "/etc/redhat-release" ) { # cloudlinux 6 open( my $cr_fh, "<", "/etc/redhat-release" ) or die "Could not open “/etc/redhat-release” for reading: $!\n"; my $line = <$cr_fh>; ($distro_major) = $line =~ m/(\d+)/; ($distro_type) = $line =~ m/^\s*(\w+)/; $distro_type = lc $distro_type; } else { die("Unable to find /etc/redhat-release or /etc/os-release for system info"); } $distro_type = 'centos' if $distro_type =~ m/cloud|red|alma|rhel|rocky/i; ($distro_major) = $distro_major =~ m/^\s*0*\s*(\d+)/ if $distro_type eq 'centos'; # Strip off the minor version for centos RPMs. Alma linux is a special snowflake! return ( $distro_type, $distro_major ); } sub _clean_value { my ( $str, $strip ) = @_; die "Internal _clean_value() called without a value (did you make changes to this code recently?)\n" if !defined $str; chomp $str; $str = substr( $str, $strip ); if ( substr( $str, 0, 1 ) eq '"' ) { $str = substr( $str, 1, length($str) ); $str = substr( $str, 0, length($str) - 1 ); } return $str; } sub cpanel_perl_is_stable { my ($pkg_info) = @_; my $perl_bin = '/usr/local/cpanel/3rdparty/bin/perl'; my $command = $perl_bin; $command .= " -M$_" foreach minimum_cpanel_perl_modules(); my $got = `$command -E'sub foo (\$bar) { ... }; print q{ok}' 2>&1`; ## no critic qw(Cpanel::ProhibitQxAndBackticks) return 0 unless !$? && $got && $got eq 'ok'; if ( my $v = _perl_version() ) { my $out = `$perl_bin -E 'say \$]'`; return unless $out =~ m{^\Q$v\E}; } return 1; } sub _perl_major { my ($perl_pkg) = core_perl_pkg(); return $1 if $perl_pkg =~ m{-(\d+)$}; return; } sub _perl_version { my $major = _perl_major() or return; if ( $major =~ m{^(\d)(\d+)$} ) { my ( $rev, $version ) = ( $1, $2 ); return sprintf( '%d.%03d', $rev, $version ); } return; } sub download_pkg_sha512 { # Setup the directory as best we can. unlink PKG_DOWNLOADS_DIR; # Just in case it's a file (that'd be weird) system( '/bin/mkdir', '-p', PKG_DOWNLOADS_DIR ) unless -d PKG_DOWNLOADS_DIR; -d PKG_DOWNLOADS_DIR or FATAL( "Can't make directory " . PKG_DOWNLOADS_DIR ); my $package_sha512 = current_distro()->{package_sha512} or FATAL("no package_sha512 filename set"); my $sha_file = sprintf( "%s/%s", PKG_DOWNLOADS_DIR, $package_sha512 ); my $sig_file = sprintf( "%s/%s.asc", PKG_DOWNLOADS_DIR, $package_sha512 ); # my $sha_url = sprintf( "%s/%s", url_base(), $package_sha512 ); my $sig_url = sprintf( "%s/%s.asc", url_base(), $package_sha512 ); download_file( $sig_url, $sig_file ); download_file( $sha_url, $sha_file ); verify_file_signature( $sha_file, $sig_file, $sha_url ); open( my $fh, '<', $sha_file ) or FATAL("Can't read $sha_file"); while ( my $line = <$fh> ) { chomp $line; my ( $sha, $file ) = split( qr{\s+}, $line ); $sha{$file} = $sha; } close $fh; return; } my $url_base; #cached; sub url_base { return $url_base if defined $url_base; return $url_base = tt( current_distro()->{template}->{base_url} ); } sub tt { my ( $str, $extra ) = @_; return unless defined $str; my $httpupdate = get_update_source(); my $cpanel_major = PKG_VERSION_SOURCE; $extra = {} unless defined $extra; my $tt = { httpupdate => $httpupdate, cpanel_major => $cpanel_major, distro_name => $DISTRO_TYPE, distro_major => $DISTRO_MAJOR, ref $extra ? %$extra : (), }; my $s = sub { my $k = shift or FATAL("Undefined key"); my $v = $tt->{$k}; FATAL("Unexpected template variables '$k' in base URL ") unless defined $v; return $v; }; $str =~ s{\%([a-z_]+)\%}{$s->($1)}eg; return $str; } sub get_download_tool_binary { for my $bin (qw(/bin/wget /usr/bin/wget /usr/local/bin/wget)) { # check if the binary exists next unless -e $bin && -x _ && -s _; # use it if ( `$bin --version 2>/dev/null` =~ m/GNU\s+Wget\s+[0-9]+\.[0-9]+/ims ) { ## no critic qw(ProhibitQxAndBackticks) return ( $bin, ' -nv --no-dns-cache --tries=20 --timeout=60 --dns-timeout=60 --read-timeout=30 --waitretry=1 --retry-connrefused -O' ); } } # If $wget_bin is not set, then wget is not installed and # We do not have a fallback for Cpanel::SecureDownload::fetch_url() FATAL("Can't bootstrap cpanel-perl without a working file download method. Try installing the wget package manually."); return; } sub gpg_bin { for my $bin (qw(/bin/gpg /usr/bin/gpg /usr/local/bin/gpg)) { next unless -e $bin && -x _ && -s _; return $bin; } FATAL "Can't bootstrap cpanel-perl without gpg. Try installing the gnupg2 package manually."; return; } sub _MSG { my $level = shift; my $msg = shift || ''; chomp $msg; my $message_caller_depth = 1; my ( $sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst ) = localtime; my ( $package, $filename, $line ) = caller($message_caller_depth); my $stamp_msg = sprintf( "%04d-%02d-%02d %02d:%02d:%02d %4s (%5s): %s\n", $year + 1900, $mon + 1, $mday, $hour, $min, $sec, $line, $level, $msg ); print $stamp_msg; return; } { my $update_source; sub get_update_source { return $update_source if defined $update_source; my $source_file = '/etc/cpsources.conf'; # pull in from cpsources.conf if it's set. if ( open( my $fh, "<", $source_file ) ) { while (<$fh>) { next if $_ !~ m/^\s*HTTPUPDATE\s*=\s*(\S+)/; $update_source = "$1"; last; } } $update_source = UPDATE_SOURCE_DEFAULT unless $update_source; INFO("Downloading bootstrap packages from $update_source"); return $update_source; } } sub wget_and_validate_file { my ( $package_name, $version_arch ) = @_; my $uri = render_fileuri( $package_name, $version_arch ); my $filename; if ( index( $uri, '/' ) == -1 ) { $filename = $uri; } else { ($filename) = ( $uri =~ m{/([^/]+)$} ); } FATAL("Cannot guess filename for path $uri") unless length $filename; my $url = url_base() . '/' . $uri; my $expected_sha = $sha{$uri}; FATAL("No sha defined for file $uri") unless defined $expected_sha; my $pkg_file_path = download_file( $url, PKG_DOWNLOADS_DIR . '/' . $filename ); my $result = `/usr/bin/sha512sum $pkg_file_path 2>&1`; ## no critic qw(Cpanel::ProhibitQxAndBackticks) my ($sha) = $result =~ m/^([a-fA-F0-9]+)/; if ( $expected_sha ne $sha ) { FATAL("Couldn't verify the expected sha ($sha{$filename}) for $filename. Got $sha"); } return; } ## used by unit tests - this should be the only 'require' statement ## sub _require_securedownload { require Cpanel::SecureDownload; return; } # # Cpanel::SecureDownload is the preferred method as it will # attempt Cpanel::HTTP::Client, curl, then wget. And it will # attempt to use Mozilla::CA if available. # However, depending on the broken state if perl, it might # not work. In that case we can go back to directly invoking # wget via backticks as before. # sub attempt_secure_download_file { my ( $url, $dest_file ) = @_; # Add this so that Cpanel::SecureDownload will pick up the # latest version of Mozilla::CA if we have it installed local @INC = ( '/usr/local/cpanel', '/usr/local/cpanel/3rdparty/perl/536/cpanel-lib', @INC ); my ( $success, $msg ); eval { _require_securedownload(); my %options = ( 'output-file' => $dest_file, 'not-verbose' => 1, 'tries' => 20, 'retry-delay' => 1, 'timeout' => 60, 'dns-timeout' => 60, 'read-timeout' => 30, 'no-dns-cache' => 1, 'retry-connrefused' => 1, ); ( $success, $msg ) = Cpanel::SecureDownload::fetch_url( $url, %options ); }; if ( !$@ && $success && -e $dest_file && !-z $dest_file ) { return 1; } # Warn if an exception had been thrown, that means there was trouble loading # Cpanel::SecureDownload. However, we do not need to warn on errors returned # from fetch_url as it already warns when each method fails if ($@) { WARN "Could not invoke Cpanel::SecureDownload::fetch_url: $@"; } return; } sub minimum_cpanel_perl_modules { return qw{ common::sense B::COW CDB_File IO::SigGuard JSON::XS Compress::Raw::Lzma Proc::FastSpawn Try::Tiny Types::Serialiser YAML::Syck Net::SSLeay IO::Socket::SSL Guard Promise::ES6 Promise::XS Class::XSAccessor Net::Curl::Promiser Net::Curl cPanel::APIClient Call::Context Module::Runtime AnyEvent JSON X::Tiny URI File::Path::Tiny Test::Exception Sub::Uplevel File::Slurper PerlIO::utf8_strict Sereal::Encoder Sereal::Decoder IO::Pty }; } sub core_perl_pkg { return ( 'cpanel-perl-536' => '5.36.0-2.cp108.x86_64' ); } sub pkgs_to_download { my %packages = qw{ cpanel-perl-536-common-sense 3.75-1.cp108.noarch cpanel-perl-536-b-cow 0.004-1.cp108.x86_64 cpanel-perl-536-cdb.file 0.99-1.cp108.x86_64 cpanel-perl-536-io-sigguard 0.15-1.cp108.noarch cpanel-perl-536-json-xs 4.03-1.cp108.x86_64 cpanel-perl-536-compress-raw-lzma 2.201-1.cp108.x86_64 cpanel-perl-536-proc-fastspawn 1.2-1.cp108.x86_64 cpanel-perl-536-try-tiny 0.31-1.cp108.noarch cpanel-perl-536-types-serialiser 1.01-1.cp108.noarch cpanel-perl-536-yaml-syck 1.34-1.cp108.x86_64 cpanel-perl-536-net-ssleay 1.92-1.cp108.x86_64 cpanel-perl-536-io-socket-ssl 2.074-1.cp108.noarch cpanel-perl-536-guard 1.023-1.cp108.x86_64 cpanel-perl-536-promise-es6 0.25-1.cp108.noarch cpanel-perl-536-promise-xs 0.16-1.cp108.x86_64 cpanel-perl-536-class-xsaccessor 1.19-1.cp108.x86_64 cpanel-perl-536-net-curl-promiser 0.18-1.cp108.noarch cpanel-perl-536-net-curl 0.50-1.cp108.x86_64 cpanel-perl-536-cpanel-apiclient 0.08-1.cp108.noarch cpanel-perl-536-call-context 0.03-1.cp108.noarch cpanel-perl-536-module-runtime 0.016-1.cp108.noarch cpanel-perl-536-anyevent 7.17-1.cp108.noarch cpanel-perl-536-json 4.07-1.cp108.noarch cpanel-perl-536-x-tiny 0.22-1.cp108.noarch cpanel-perl-536-uri 5.10-1.cp108.noarch cpanel-perl-536-sub-uplevel 0.2800-1.cp108.noarch cpanel-perl-536-test-exception 0.43-1.cp108.noarch cpanel-perl-536-file-path-tiny 1.0-1.cp108.noarch cpanel-perl-536-file-slurper 0.013-1.cp108.noarch cpanel-perl-536-perlio-utf8.strict 0.009-1.cp108.x86_64 cpanel-perl-536-sereal-encoder 4.023-1.cp108.x86_64 cpanel-perl-536-sereal-decoder 4.023-1.cp108.x86_64 cpanel-perl-536-io-tty 1.16-1.cp108.x86_64 cpanel-3rdparty-bin 108.1-1.cp108.noarch }; return \%packages; } sub download_file { my ( $url, $dest_file ) = @_; DEBUG "Retrieving $url"; # Don't call attempt_secure_download_file on new installs, as Cpanel::SecureDownload will # not be present on the system at the point where fix-cpanel-perl is called. if ( !$ENV{'CPANEL_BASE_INSTALL'} && attempt_secure_download_file( $url, $dest_file ) ) { return $dest_file; } my $output = `$wget_bin $wget_args '$dest_file' $url 2>&1`; ## no critic qw(Cpanel::ProhibitQxAndBackticks) if ( !-e $dest_file || -z $dest_file ) { unlink $dest_file; FATAL "The system could not fetch $url to file $dest_file: $output"; } return $dest_file; } sub signature_validation_enabled { my $config = read_config(); return 1 unless defined $config->{$SIG_VALIDATION_CPCONF_KEY}; return 0 if $config->{$SIG_VALIDATION_CPCONF_KEY} eq '0' || lc( $config->{$SIG_VALIDATION_CPCONF_KEY} ) eq 'off'; return 1; } sub verify_file_signature { my ( $file, $sig, $url ) = @_; if ( !signature_validation_enabled() ) { INFO "Skipping signature validation [currently disabled in cpanel.config]"; return; } INFO "FILE - $file"; INFO "SIG - $sig"; INFO "URL - $url"; my @gpg_args = ( '--logger-fd', '1', '--status-fd', '1', '--homedir', gpg_homedir(), '--verify', $sig, $file, ); # Verify the validity of the GPG signature. # Information on these return values can be found in 'doc/DETAILS' in the GnuPG source. my ( %notes, $curnote ); my ( $gpg_out, $success, $status ); my $gpg_pid = IPC::Open3::open3( undef, $gpg_out, undef, $GPG_BIN, @gpg_args ); while ( my $line = readline($gpg_out) ) { if ( $line =~ /^\[GNUPG:\] VALIDSIG ([A-F0-9]+) (\d+-\d+-\d+) (\d+) ([A-F0-9]+) ([A-F0-9]+) ([A-F0-9]+) ([A-F0-9]+) ([A-F0-9]+) ([A-F0-9]+) ([A-F0-9]+)$/ ) { $status = "Valid signature for $file"; $success = 1; } elsif ( $line =~ /^\[GNUPG:\] NOTATION_NAME (.+)$/ ) { $curnote = $1; $notes{$curnote} = ''; } elsif ( $line =~ /^\[GNUPG:\] NOTATION_DATA (.+)$/ ) { $notes{$curnote} .= $1; } elsif ( $line =~ /^\[GNUPG:\] BADSIG ([A-F0-9]+) (.+)$/ ) { $status = "Invalid signature for $file."; } elsif ( $line =~ /^\[GNUPG:\] NO_PUBKEY ([A-F0-9]+)$/ ) { $status = "Could not find public key in keychain."; } elsif ( $line =~ /^\[GNUPG:\] NODATA ([A-F0-9]+)$/ ) { $status = "Could not find a GnuPG signature in the signature file."; } } waitpid( $gpg_pid, 0 ); $status ||= "Unknown error from gpg."; $status .= " ($file)"; if ($success) { INFO $status; } else { FATAL $status; } # At this point, the signature should be valid. # We now need to check to see if the filename signature notation is correct. my ($url_path) = $url =~ m{^https?://[-.a-zA-Z0-9]+(/.+)}; $url_path or FATAL("Can't parse $url"); if ( defined( $notes{'filename@gpg.notations.cpanel.net'} ) ) { my $file_note = $notes{'filename@gpg.notations.cpanel.net'}; if ( $file_note ne $url_path ) { FATAL "Filename notation ($file_note) does not match URL ($url_path)."; } } else { FATAL "Signature does not contain a filename notation."; } return; } sub fetch_and_install_gpg_keys { my $pub_keys = public_keys(); _create_gpg_homedir(); INFO("fetch and install gpg keys"); FATAL("gpg bin unset") unless defined $GPG_BIN; foreach my $key ( @{ keys_to_download() } ) { INFO("Downloading GPG public key, $pub_keys->{$key}"); my $target = secure_downloads() . $pub_keys->{$key}; my $dest = gpg_homedir() . "/" . $pub_keys->{$key}; my $wget_out = download_file( $target, $dest, 1, 1 ); if ( !-e $dest ) { WARN("Could not download GPG public key at $target : $wget_out"); return; } my $gpg_cmd = $GPG_BIN . " -q --homedir " . gpg_homedir() . " --import " . $dest; DEBUG($gpg_cmd); my $out = `$gpg_cmd`; ## no critic qw(ProhibitQxAndBackticks) ERROR($out) if $? && length $out; } return; } sub _create_gpg_homedir { mkdir( gpg_homedir(), 0700 ) if !-e gpg_homedir(); return; } our $CACHE_CONFIG; sub read_config { my $file = $CPANEL_CONFIG_FILE; return $CACHE_CONFIG if $CACHE_CONFIG; my $config = {}; open( my $fh, "<", $file ) or return $config; while ( my $line = readline $fh ) { chomp $line; if ( $line =~ m/^\s*([^=]+?)\s*$/ ) { my $key = $1 or next; # Skip loading the key if it's undef or 0 $config->{$key} = undef; } elsif ( $line =~ m/^\s*([^=]+?)\s*=\s*(.*?)\s*$/ ) { my $key = $1 or next; # Skip loading the key if it's undef or 0 $config->{$key} = $2; } } $CACHE_CONFIG = $config; return $config; } sub keys_to_download { my $config = read_config(); my $keyrings = gpg_keyrings(); my $use_key = 'release'; # default key if ( defined $config->{'signature_validation'} && $config->{'signature_validation'} =~ /^Release and (?:Development|Test) Keyrings$/ ) { $use_key = 'development'; } my $mirror = get_update_source(); if ( $mirror =~ /^(?:.*\.dev|qa-build|next)\.cpanel\.net$/ ) { if ( !defined $config->{'signature_validation'} ) { $use_key = 'development'; } elsif ( $use_key ne 'development' ) { WARN("Using cPanel GPG '$use_key' key for mirror $mirror (consider using 'development')"); } } FATAL("Unknown key for $use_key") unless defined $keyrings->{$use_key}; WARN("Using cPanel GPG key '$use_key'") if $use_key ne 'release'; return $keyrings->{$use_key}; } # The installer may set $ENV{'CPANEL_BASE_INSTALL_GPG_KEYS_IMPORTED'} # to true in which case the keys will be in /var/cpanel/.gpgtmpdir sub gpg_homedir { return '/var/cpanel/.gpgtmpdir'; } sub public_keys { return { 'release' => 'cPanelPublicKey.asc', 'development' => 'cPanelDevelopmentKey.asc', }; } sub secure_downloads { return 'https://securedownloads.cpanel.net/'; } sub gpg_keyrings { return { 'release' => ['release'], 'development' => [ 'release', 'development' ], }; } 1;
Close
