Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/__pycache__/ntacls.cpython-36.pyc
Ðазад
3 �I�d ^ � @ sj d Z ddlZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z mZ ddlmZmZ ddlmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ ej ej B ej B ej B Z e j!e j"B e j#B e j$B Z%G d d � d e&�Z'dd� Z(dd� Z)d*dd�Z*d+dd�Z+dd� Z,d,dd�Z-G d d � d �Z.G d d � d �Z/d d!� Z0d"d#� Z1d$d%� Z2d&d'� Z3d(d)� Z4dS )-zNT Acls.� N)�param)�security�xattr�idmap)�ndr_pack� ndr_unpack)�smbd)�libsmb_samba_internal)�get_samba_logger)� NTSTATUSError)�system_session_unix)� safe_tarfilec @ s e Zd ZdZdS )�XattrBackendErrorz A generic xattr backend error.N)�__name__� __module__� __qualname__�__doc__� r r � /usr/lib64/python3.6/ntacls.pyr 3 s r c C s� |dkrP| j d�}|dk r*tj| j d�fS | j d�}|dk rLtj| j d�fS d S |dkr\d S |dkr�|dk rvtj|fS tjtjjtjj| j d�d��fS nR|dkr�|dk r�tj|fS | j d �}tjjtjj|d ��}tj|fS n td | ��dS )z$return the path to the eadb, or NoneNzxattr_tdb:filez posix:eadbZnativeZeadbz private dirzeadb.tdbZtdbzstate directoryz xattr.tdbz Invalid xattr backend choice %s)NN)NN) �get�samba� xattr_tdb� posix_eadb�os�path�abspath�joinr )�lp�backend�eadbfiler r Z state_dirZdb_pathr r r �checkset_backend7 s* $ r c C s6 yt jj|tj�}W n tk r( d S X ttj|�S )N)r � xattr_native� wrap_getxattrr ZXATTR_DOSATTRIB_NAME_S3� Exceptionr Z DOSATTRIB)r �file� attributer r r � getdosinfoS s r& Tc C s� |r�t | ||�\}}|d k rdy|j||tj�} W qt tk r` td| � tjj|tj�} Y qtX ntjj|tj�} ttj | �} | j dkr�| j S | j dkr�| j j S | j dkr�| j j S | j dkr�| j j S nt j|t||d�S d S )NzFail to open %s� � � � )�service)r r" r �XATTR_NTACL_NAMEr# �printr r! r �NTACL�version�info�sdr Z get_nt_acl�SECURITY_SECINFO_FLAGS) r r$ � session_infor r �direct_db_accessr+ � backend_obj�dbnamer% �ntaclr r r �getntacl] s2 r8 Fc C s@ t |t�st |tj�st�t |t�r0tj|�} nt |tj�rH|} t| �}t |t�sbt |tj�sbt�t |t�r|tjj|| �} nt |tj�r�|} | j| �}| o�|�r�| j| j �\} }|t j ko�|t j k�r�| j tjd|tj f �k�rVtjd|tjf �}| j|�\}}|t j k�s |t j k�rB| }||_ tj|t||| d� d}ntd|||f ��n0tj|dd� tj|tjtjB tjB | || d� |�r(t| ||�\}}tj� }d|_| |_ |dk �ry|j ||tj t |�� W n8 t k �r t!d| � t"j#j |tj t |�� Y nX nt"j#j |tj t |�� ntj|t| | |d � dS ) a� A wrapper for smbd set_nt_acl api. Args: lp (LoadParam): load param from conf file (str): a path to file or dir sddl (str): ntacl sddl string service (str): name of share service, e.g.: sysvol session_info (auth_session_info): session info for authentication Note: Get `session_info` with `samba.auth.user_session`, do not use the `admin_session` api. Returns: None z%s-%d)r+ TzDUnable to find UID for domain administrator %s, got id %d of type %dr r' NzFail to open %s)r+ r3 )$� isinstance�strr �dom_sid�AssertionError� descriptor� from_sddl�as_sddlZ sid_to_id� owner_sidr Z ID_TYPE_UIDZ ID_TYPE_BOTHZDOMAIN_RID_ADMINSZDOMAIN_RID_ADMINISTRATORr Z set_nt_aclr2 r r �chown� SECINFO_GROUP� SECINFO_DACL� SECINFO_SACLr r r. r/ r0 Z wrap_setxattrr, r r# r- r r! )r r$ ZsddlZdomsidr3 r r � use_ntvfsZskip_invalid_chownZpassdbr+ �sidr1 Zowner_idZ owner_typeZ administratorZadmin_idZ admin_typeZsd2r5 r6 r7 r r r �setntacl� sj rG c C s� d}d}d}d}d}d}d}d}d } d} d} d} d} d}d}d}d}d}d}d}d}d}d }d }d }d }d }d} d} | | @ } | |@ r�| |@ r�| | | B |B |B | B |B B } | |@ r�| | | B |B |B |B | B |B B } | |@ r�| || B B } | |@ r�| |B } | S )zMTakes the access mask of a DS ACE and transform them in a File ACE mask. r' r( r* � � � �@ � � i i i i i i r ) ZldmZRIGHT_DS_CREATE_CHILDZRIGHT_DS_DELETE_CHILDZRIGHT_DS_LIST_CONTENTSZ ACTRL_DS_SELFZRIGHT_DS_READ_PROPERTYZRIGHT_DS_WRITE_PROPERTYZRIGHT_DS_DELETE_TREEZRIGHT_DS_LIST_OBJECTZRIGHT_DS_CONTROL_ACCESSZFILE_READ_DATAZFILE_LIST_DIRECTORYZFILE_WRITE_DATAZ FILE_ADD_FILEZFILE_APPEND_DATAZFILE_ADD_SUBDIRECTORYZFILE_CREATE_PIPE_INSTANCEZ FILE_READ_EAZ FILE_WRITE_EAZ FILE_EXECUTEZ FILE_TRAVERSEZFILE_DELETE_CHILDZFILE_READ_ATTRIBUTESZFILE_WRITE_ATTRIBUTESZDELETEZ READ_CONTROLZ WRITE_DACZ WRITE_OWNERZ SYNCHRONIZEZSTANDARD_RIGHTS_ALLZfilemaskr r r �ldapmask2filemask� sT rN c C s� t jj| |�}t j� }|j|_|j|_|j|_|j|_|jj}x�t dt |��D ]v}|| }|jt j t j fkrNt |j�t jkrN|jt jB t jB |_t |j�t jkr�|jt jB |_t|j�|_|j|� qNW |s�|S |j|�S )z� This function takes an the SDDL representation of a DS ACL and return the SDDL representation of this ACL adapted for files. It's used for Policy object provision r )r r= r> r@ Z group_sid�typeZrevisionZdacl�aces�range�lenZ"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECTZSEC_ACE_TYPE_ACCESS_ALLOWEDr: ZtrusteeZSID_BUILTIN_PREW2K�flagsZSEC_ACE_FLAG_OBJECT_INHERITZ SEC_ACE_FLAG_CONTAINER_INHERITZSID_CREATOR_OWNERZSEC_ACE_FLAG_INHERIT_ONLYrN � access_maskZdacl_addr? )ZdssddlrF r? �refZfdescrrP �iZacer r r � dsacl2fsacl! s& rW c @ st e Zd ZdZdd� Zddd�Zd dd �Zd d d �Zd d� Zdd� Z dd� Z d dd�Z d dd�Z d dd�Z dd� ZdS )!� SMBHelperzb A wrapper class for SMB connection smb_path: path with separator "\" other than "/" c C s || _ || _d S )N)�smb_connr; )�selfrY r; r r r �__init__H s zSMBHelper.__init__FNc C s2 d|ks t �| jj|||d�}|r.|j| j�S |S )N�/)�sinforT )r< rY �get_aclr? r; )rZ �smb_pathr? r] rT �ntacl_sdr r r r^ L s zSMBHelper.get_aclc C sj d|ks t �t|t�s&t|tj�s&t �t|t�rBtjj|| j�}nt|tj�rR|}| jj||||d� d S )Nr\ )r] rT ) r< r9 r: r r= r> Z domain_sidrY �set_acl)rZ r_ r` r] rT Ztmp_descr r r ra V s zSMBHelper.set_acl� c C s d|ks t �| jj|td�S )zM List file and dir base names in smb_path without recursive. r\ )Zattribs)r< rY �list�SMB_FILE_ATTRIBUTE_FLAGS)rZ r_ r r r rc d s zSMBHelper.listc C s t |tj@ �S )ze Check whether the attrib value is a directory. attrib is from list method. )�bool�libsmb�FILE_ATTRIBUTE_DIRECTORY)rZ �attribr r r �is_dirk s zSMBHelper.is_dirc C s |r|d | S |S )z$ Join path with '\' �\r )rZ �root�namer r r r s s zSMBHelper.joinc C s d|ks t �| jj|�S )Nr\ )r< rY �loadfile)rZ r_ r r r rm y s zSMBHelper.loadfilec C sf x`|j � D ]T\}}| j||�}t|t�rP| jj|�s@| jj|� | j||d� q | jj||� q W dS )z1 Create files as defined in tree )r_ N) �itemsr r9 �dictrY Zchkpath�mkdir� create_treeZsavefile)rZ �treer_ rl Zcontent�fullnamer r r rq } s zSMBHelper.create_treec C s^ i }xT| j |�D ]F}|d }| j||�}| j|d �rH| j|d�||< q| j|�||< qW |S )a� Get the tree structure via smb conn self.smb_conn.list example: [ { 'attrib': 16, 'mtime': 1528848309, 'name': 'dir1', 'short_name': 'dir1', 'size': 0L }, { 'attrib': 32, 'mtime': 1528848309, 'name': 'file0.txt', 'short_name': 'file0.txt', 'size': 10L } ] rl rh )r_ )rc r ri �get_treerm )rZ r_ rr �itemrl rs r r r rt � s zSMBHelper.get_treec C sl i }xb| j |�D ]T}|d }| j||�}| j|d �rJ|j| j|d�� q| j|�}|j| j�||< qW |S )z> Get ntacl for each file and dir via smb conn rl rh )r_ )rc r ri �update� get_ntaclsr^ r? r; )rZ r_ Zntaclsru rl rs r` r r r rw � s zSMBHelper.get_ntaclsc C sF x@| j � D ]4}|d }| j|d �r2| jj|� q | jj|� q W d S )Nrl rh )rc ri rY Zdeltree�unlink)rZ ru rl r r r � delete_tree� s zSMBHelper.delete_tree)FNN)NN)rb )rb )rb )rb )r r r r r[ r^ ra rc ri r rm rq rt rw ry r r r r rX A s rX c @ s& e Zd Zdd� Zd dd�Zdd� ZdS ) � NtaclsHelperc C s8 || _ || _tj� | _| jj|� d| jjd�k| _d S )NZsmbzserver services)r+ r; �s3paramZ get_contextr �loadr rE )rZ r+ � smb_conf_pathr; r r r r[ � s zNtaclsHelper.__init__FNc C s8 |d kr| j }t| j|||| jd�}|r4|j| j�S |S )N)r4 r+ )rE r8 r r+ r? r; )rZ r r3 r? r4 r` r r r r8 � s zNtaclsHelper.getntaclc C s t | j||| j|| jd�S )N)rE )rG r r; rE )rZ r r` r3 r r r rG � s zNtaclsHelper.setntacl)FN)r r r r[ r8 rG r r r r rz � s rz c C s( t | d d��}|j|� W d Q R X d S )Nz.NTACL�w)�open�write)�dst�ntacl_sddl_str�fr r r �_create_ntacl_file� s r� c C s6 | d }t jj|�sd S t|d�� }|j� S Q R X d S )Nz.NTACL�r)r r �existsr �read)�srcZ ntacl_filer� r r r �_read_ntacl_file� s r� c C s� t � }t|t�rtj|�}t| |�}d}tj� }|g}|g}�x|�rT|j� } |j� } x�|j | d�D ]�} |j | | d �} t j j | | d �} |j | d �r�|j| � |j| � t j| � n*|j| �}t| d��}|j|� W dQ R X y |j| dd�}t| |� W qd tk �rL } z0|jd | | jd f � |jd | d � W Y dd} ~ X qdX qdW q@W tj|d d��8}x0t j|�D ]"}t j j ||�}|j||d� �qrW W dQ R X t j |� dS )aa Backup all files and dirs with ntacl for the serive behind smb_conn. 1. Create a temp dir as container dir 2. Backup all files with dir structure into container dir 3. Generate file.NTACL files for each file and dir in container dir 4. Create a tar file from container dir(without top level folder) 5. Delete container dir rb )r_ rl rh �wbNT)r? z"Failed to get the ntacl for %s: %sr' z!The permissions for %s may not bez restored correctlyzw:gz)rl �mode)�arcname) r r9 r: r r; rX �tempfile�mkdtemp�poprc r r r ri �appendrp rm r r� r^ r� r �error�args�warning�tarfile�listdir�add�shutil�rmtree)rY �dest_tarfile_pathr; �loggerZ smb_helperZ remotedirZlocaldirZr_dirsZl_dirsZr_dirZl_dir�eZr_nameZl_name�datar� r� �tarrl r r r r � backup_online� sD " r� c C s� | j d�jdd�d }tj� }t� }t|||�}�xtj| �D �] \}} } tjj || d�} tjj || �} xP| D ]H} tjj || �}tjj | | �}t j |||� |j ||dd�}t||� qnW x�| D ]�}tjj ||�}tjj | |�}t j|||� |j ||dd�}t||� t|d��.}|j� }t|d��}|j|� W dQ R X W dQ R X q�W q>W tj|d d ��8}x0tj|�D ]"}tjj ||�}|j||d � �qjW W dQ R X tj|� dS ) z< Backup files and ntacls to a tarfile for a service r\ r' )�startT)r? �rbr� Nzw:gz)rl r� )r� ���)�rstrip�rsplitr� r� r rz r �walkr �relpathr r rp r8 r� � create_filer r� r� r� r� r� r� r� )Zsrc_service_pathr� r} r; r+ �tempdirr3 � ntacls_helper�dirpath�dirnames� filenames� rel_dirpath� dst_dirpath�dirnamer� r� r� �filename�src_filer� �dst_filer� rl r r r r �backup_offline* s8 & r� c C s� t � }|jd�jdd�d }tj� }|j� }tj|�}t|||�} t � } t j | ��} | j |d� W dQ R X �x�t j|�D �]p\} } }t jj| |d�}t jjt jj||��}x|| D ]t}|jd�s�t jj| |�}t jj||�}t jj|�s�tj|| |� t|�}|�r| j||| � q�|jd| d � q�W x�|D ]�}|jd��s.t jj| |�}t jj||�}t jj|��svtj|| |� t|�}|�r�| j||| � n|jd | d � t |d ��.}|j � }t |d ��}|j |� W dQ R X W dQ R X �q.W qxW t j |� dS ) z> Restore files and ntacls from a tarfile to a service r\ r' )r N)r� z.NTACLz)Failed to restore ntacl for directory %s.z) Please check the permissions are correctz$Failed to restore ntacl for file %s.r� r� r� ) r r� r� r� r� Zget_domain_sidr r; rz r r� r Z extractallr r� r r� �normpathr �endswith�isdirr rp r� rG r� �isfiler� r� r� r� r� )Zsrc_tarfile_pathZdst_service_pathZ samdb_connr} r� r+ r� Z dom_sid_strr; r� r3 r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r �backup_restoreZ sR (r� )NNTN)NNTFNN)T)5r r r� r� Zsamba.xattr_nativer Zsamba.xattr_tdbZsamba.posix_eadbZ samba.samba3r r{ Z samba.dcerpcr r r Z samba.ndrr r r r rf Z samba.loggerr r Zsamba.auth_utilr r r� �FILE_ATTRIBUTE_SYSTEMrg �FILE_ATTRIBUTE_ARCHIVE�FILE_ATTRIBUTE_HIDDENrd Z SECINFO_OWNERrB rC rD r2 r# r r r& r8 rG rN rW rX rz r� r� r� r� r� r r r r �<module> sN ! d7 <0
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка