PK���ȼRY��������€��� �v3.phpUT �øŽg‰gñ“gux �õ��õ��½T]kÛ0}߯pEhìâÙM7X‰çv%”v0֐µ{)Aå:6S$!ÉMJèߕ?R÷!>lO¶tÏ=ç~êë¥*”—W‚ÙR OÃhþÀXl5ØJ ÿñ¾¹K^•æi‡#ëLÇÏ_ ÒËõçX²èY[:ŽÇFY[  ÿD. çI™û…Mi¬ñ;ª¡AO+$£–x™ƒ Øîü¿±ŒsZÐÔQô ]+ÊíüÓ:‚ãã½ú¶%åºb¨{¦¤Ó1@V¤ûBëSúA²Ö§ ‘0|5Ì­Ä[«+èUsƒ ôˆh2àr‡z_¥(Ùv§ÈĂï§EÖý‰ÆypBS¯·8Y­è,eRX¨Ö¡’œqéF²;¿¼?Ø?Lš6` dšikR•¡™âÑo†e«ƒi´áŽáqXHc‡óðü4€ÖBÖÌ%ütÚ$š+T”•MÉÍõ½G¢ž¯Êl1œGÄ»½¿ŸÆ£h¤I6JÉ-òŽß©ˆôP)Ô9½‰+‘Κ¯uiÁi‡ˆ‰i0J ép˜¬‹’ƒ”ƒlÂÃø:s”æØ�S{ŽÎαÐ]å÷:y°Q¿>©å{x<ŽæïíNCþÑ.Mf?¨«2ý}=ûõýî'=£§ÿu•Ü(—¾IIa­"éþ@¶�¿ä9?^-qìÇÞôvŠeÈc ðlacã®xèÄ'®âd¶ çˆSEæódP/ÍÆv{Ô)Ó ?>…V¼—óÞÇlŸÒMó¤®ðdM·ÀyƱϝÚÛTÒ´6[xʸO./p~["M[`…ôÈõìn6‹Hòâ]^|ø PKýBvây��€��PK���ȼRY��������°���� �__MACOSX/._v3.phpUT �øŽg‰gþ“gux �õ��õ��c`cg`b`ðMLVðVˆP€'qƒøˆŽ!!AP&HÇ %PDF-1.7 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R ] /Count 1 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R >> >> /MediaBox [0.000 0.000 595.280 841.890] >> endobj 4 0 obj [/PDF /Text ] endobj 5 0 obj << /Producer (���d�o�m�p�d�f� �2�.�0�.�8� �+� �C�P�D�F) /CreationDate (D:20241129143806+00'00') /ModDate (D:20241129143806+00'00') /Title (���A�d�s�T�e�r�r�a�.�c�o�m� �i�n�v�o�i�c�e) >> endobj 6 0 obj << /Type /Page /MediaBox [0.000 0.000 595.280 841.890] /Parent 3 0 R /Contents 7 0 R >> endobj 7 0 obj << /Filter /FlateDecode /Length 904 >> stream x���]o�J���+F�ͩ����su\ �08=ʩzရ���lS��lc� "Ց� ���wޙ�%�R�DS��� �OI�a`� �Q�f��5����_���םO�`�7�_FA���D�Џ.j�a=�j����>��n���R+�P��l�rH�{0��w��0��=W�2D ����G���I�>�_B3ed�H�yJ�G>/��ywy�fk��%�$�2.��d_�h����&)b0��"[\B��*_.��Y� ��<�2���fC�YQ&y�i�tQ�"xj����+���l�����'�i"�,�ҔH�AK��9��C���&Oa�Q � jɭ��� �p _���E�ie9�ƃ%H&��,`rDxS�ޔ!�(�X!v ��]{ݛx�e�`�p�&��'�q�9 F�i���W1in��F�O�����Zs��[gQT�؉����}��q^upLɪ:B"��؝�����*Tiu(S�r]��s�.��s9n�N!K!L�M�?�*[��N�8��c��ۯ�b�� ��� �YZ���SR3�n�����lPN��P�;��^�]�!'�z-���ӊ���/��껣��4�l(M�E�QL��X ��~���G��M|�����*��~�;/=N4�-|y�`�i�\�e�T�<���L��G}�"В�J^���q��"X�?(V�ߣXۆ{��H[����P�� �c���kc�Z�9v�����? �a��R�h|��^�k�D4W���?Iӊ�]<��4�)$wdat���~�����������|�L��x�p|N�*��E� �/4�Qpi�x.>��d����,M�y|4^�Ż��8S/޾���uQe���D�y� ��ͧH�����j�wX � �&z� endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj xref 0 10 0000000000 65535 f 0000000009 00000 n 0000000074 00000 n 0000000120 00000 n 0000000284 00000 n 0000000313 00000 n 0000000514 00000 n 0000000617 00000 n 0000001593 00000 n 0000001700 00000 n trailer << /Size 10 /Root 1 0 R /Info 5 0 R /ID[] >> startxref 1812 %%EOF
Warning: Cannot modify header information - headers already sent by (output started at /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php:1) in /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php on line 128

Warning: Cannot modify header information - headers already sent by (output started at /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php:1) in /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php on line 129

Warning: Cannot modify header information - headers already sent by (output started at /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php:1) in /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php on line 130

Warning: Cannot modify header information - headers already sent by (output started at /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php:1) in /home/u697396820/domains/smartriegroup.com/public_html/assets/images/partners/logo_69cec45839613.php on line 131
#!/opt/cloudlinux/venv/bin/python3 -sbb # -*- coding: utf-8 -*- # # Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2021 All Rights Reserved # # Licensed under CLOUD LINUX LICENSE AGREEMENT # http://cloudlinux.com/docs/LICENCE.TXT # """ Module for processing and ordering mount configurations for website isolation. This module handles the logic for ordering mounts with proper parent-child relationships, remounting parents after children, and adding mkdir attributes when paths are inside tmpfs mounts. Optimization: tmpfs mounts that are inside another tmpfs are skipped because the parent tmpfs already makes them inaccessible. """ from __future__ import annotations from dataclasses import dataclass from .mount_config import MountEntry from .mount_types import MountType @dataclass(frozen=True) class DocrootTree: """Pre-computed tree structure for docroots.""" children: dict[str | None, tuple[str, ...]] roots: tuple[str, ...] all_docroots: frozenset[str] def build_docroot_tree(all_docroots: set[str]) -> DocrootTree: """ Build the parent-child tree structure from docroots. Call this once and pass the result to process_ordered_mounts() for each active docroot to avoid rebuilding the tree on every call. Args: all_docroots: Set of all docroot paths Returns: DocrootTree structure to pass to process_ordered_mounts() """ def get_immediate_parent(path: str) -> str | None: """Get the closest parent of path that exists in all_docroots.""" pos = path.rfind("/") while pos > 0: parent = path[:pos] if parent in all_docroots: return parent pos = parent.rfind("/") return None children_lists: dict[str | None, list[str]] = {p: [] for p in all_docroots} children_lists[None] = [] # roots for path in all_docroots: parent = get_immediate_parent(path) children_lists[parent].append(path) # Sort and convert to tuples (immutable) children = {k: tuple(sorted(v)) for k, v in children_lists.items()} roots = children[None] return DocrootTree(children=children, roots=roots, all_docroots=frozenset(all_docroots)) def process_ordered_mounts( active_docroot: str, tree: DocrootTree, uid: int, gid: int ) -> list[MountEntry]: """ Process docroots and return ordered mounts list. Mounts are generated to a fake home directory structure. The active docroot is mounted from its real path to the corresponding path inside the fake home. Other docroots are hidden with tmpfs mounts in the fake home. Rules: 1. Only one record is marked as "docroot" (the active_docroot) 2. Parents must be mounted before children 3. If parent is mounted first, it must be rw mount with remount to ro after all child records mounted 4. If path is inside another path that we marked as tmpfs, we must add mkdir attribute Args: active_docroot: The docroot that should be marked as "docroot" in the output tree: Pre-computed DocrootTree from build_docroot_tree() uid: User ID for tmpfs mounts gid: Group ID for tmpfs mounts Returns: List of MountEntry in the correct order """ children = tree.children tmpfs_paths = tree.all_docroots - {active_docroot} tmpfs_attrs = (f"uid={uid}", f"gid={gid}", "mode=0750") mounts: list[MountEntry] = [] def visit(path: str, inside_tmpfs: bool): """Process a path and its children recursively.""" is_tmpfs = path in tmpfs_paths path_children = children[path] has_children = bool(path_children) # Skip tmpfs mounts that are inside another tmpfs - they're already hidden # Still need to recurse in case there's an active docroot nested within if is_tmpfs and inside_tmpfs: for child in path_children: visit(child, inside_tmpfs=True) return # Generate mount operation # All mounts into fake_home need mkdir since overlay storage starts empty if path == active_docroot: mounts.append(MountEntry(MountType.BIND, path, path, ("mkdir",))) elif is_tmpfs: opts = ("mkdir",) + tmpfs_attrs if has_children else ("mkdir", "ro") + tmpfs_attrs mounts.append(MountEntry(MountType.BIND, "tmpfs", path, opts)) else: opts = ("mkdir",) if has_children else ("mkdir", "ro") mounts.append(MountEntry(MountType.BIND, path, path, opts)) # Process children child_inside_tmpfs = inside_tmpfs or is_tmpfs for child in path_children: visit(child, child_inside_tmpfs) # On leave: remount if this was a tmpfs parent with children if has_children and is_tmpfs: mounts.append(MountEntry(MountType.BIND, path, path, options=("ro", "remount"))) # Start from roots (paths with no parent in all_docroots) for root in tree.roots: visit(root, inside_tmpfs=False) return mounts