SHELL BYPASS 403 |
Modern UI.
Responsive.
Powerful.
�
oB�]c @ s d d l Z d d l Z d d l m Z d d l m Z e j e � Z d Z d) Z
d Z d e f d � � YZ
d e f d � � YZ d � Z d � Z d � Z d � Z e d � Z d d! � Z d" e f d# � � YZ d$ � Z d% � Z d& � Z e d' � Z d( � Z d S(* i����N( t log( t utils /etc/ssh/sshd_configt dsat ecdsas ecdsa-sha2-nistp256s( ecdsa-sha2-nistp256-cert-v01@openssh.coms ecdsa-sha2-nistp384s( ecdsa-sha2-nistp384-cert-v01@openssh.coms ecdsa-sha2-nistp521s( ecdsa-sha2-nistp521-cert-v01@openssh.comt ed25519t rsas rsa-sha2-256s rsa-sha2-512s ssh-dsss ssh-dss-cert-v01@openssh.coms ssh-ed25519s ssh-ed25519-cert-v01@openssh.coms ssh-rsas ssh-rsa-cert-v01@openssh.coms� no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"$USER\" rather than the user \"$DISABLE_USER\".';echo;sleep 10"t AuthKeyLinec B s/ e Z d d d d d � Z d � Z d � Z RS( c C s1 | | _ | | _ | | _ | | _ | | _ d S( N( t base64t commentt optionst keytypet source( t selfR R
R R R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt __init__3 s
c C s | j o | j S( N( R R
( R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt valid; s c C s� g } | j r" | j | j � n | j r> | j | j � n | j rZ | j | j � n | j rv | j | j � n | s� | j Sd j | � Sd S( Nt ( R t appendR
R R R t join( R t toks( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt __str__> s N( t __name__t
__module__t NoneR
R R ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR 2 s t AuthKeyLineParserc B s# e Z d Z d � Z d d � Z RS( s�
AUTHORIZED_KEYS FILE FORMAT
AuthorizedKeysFile specifies the file containing public keys for public
key authentication; if none is specified, the default is
~/.ssh/authorized_keys. Each line of the file contains one key (empty
(because of the size of the public key encoding) up to a limit of 8 kilo-
bytes, which permits DSA keys up to 8 kilobits and RSA keys up to 16
kilobits. You don't want to type them in; instead, copy the
identity.pub, id_dsa.pub, or the id_rsa.pub file and edit it.
sshd enforces a minimum RSA key modulus size for protocol 1 and protocol
2 keys of 768 bits.
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes. The fol-
lowing option specifications are supported (note that option keywords are
case-insensitive):
c C s� t } d } x� | t | � k r� | s7 | | d k r� | | } | d t | � k re | d } Pn | | d } | d k r� | d k r� | d } n | d k r� | } n | d } q W| d | !} | | j � } | | f S( s�
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes.
Note that option keywords are case-insensitive.
i R s i s \t "( R s ( t Falset lent lstrip( R t entt quotedt it curct nextcR t remain( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt _extract_optionsb s"
c C s� | j d � } | j d � s0 | j � d k r: t | � Sd � } | j � } y | | � \ } } } Wno t k
r� | j | � \ } }
| d k r� | } n y | |
� \ } } } Wq� t k
r� t | � SXn Xt | d | d | d | d | �S( Ns
t #t c S s� | j d d � } t | � d k r= t d t | � � � n | d t k rd t d | d � � n t | � d k r� | j d � n | S( Ni s To few fields: %si s Invalid keytype %sR$ ( t splitR R t TypeErrort VALID_KEY_TYPESR ( R R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt
parse_ssh_key� s R
R R R ( t rstript
startswitht stripR R& R" R ( R t src_lineR t lineR( R R
R R t keyoptsR! ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse} s" !
N( R R t __doc__R" R R/ ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR N s c C s� g } t � } g } x� | D]� } yU t j j | � rv t j | � j � } x' | D] } | j | j | � � qS Wn Wq t t
f k
r� t j t d | � q Xq W| S( Ns Error reading lines from %s(
R t ost patht isfileR t load_filet
splitlinesR R/ t IOErrort OSErrort logexct LOG( t fnamest linest parsert contentst fnameR- ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse_authorized_keys� s
!c C s t g | D] } | j � r
| ^ q
� } x� t d t | � � D]t } | | } | j � sc qA n xE | D]= } | j | j k rj | } | | k r� | j | � q� qj qj W| | | <qA Wx | D] } | j | � q� Wg | D] } t | � ^ q� } | j d � d j | � S( Ni R$ s
( t listR t rangeR R t removeR t strR ( t old_entriest keyst kt to_addR R t keyt bR; ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt update_authorized_keys� s +
c C sO t j | � } | s | j r3 t d | � � n t j j | j d � | f S( Ns" Unable to get ssh info for user %rs .ssh( t pwdt getpwnamt pw_dirt RuntimeErrorR1 R2 R ( t usernamet pw_ent( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt users_ssh_info� s c C s� d | f d | f d f } | s* d } n | j � } g } xk | D]c } x& | D] \ } } | j | | � } qP W| j d � s� t j j | | � } n | j | � qC W| S( Ns %hs %us %%t %s %h/.ssh/authorized_keyst /( s %%RR ( R% t replaceR* R1 R2 R R ( t valuet homedirRO t macrost pathst renderedR2 t macrot field( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt render_authorizedkeysfile_paths� s
c
C s� t | � \ } } t j j | d � } g } t j | d t ��t y1 t | � } t | j d d � | j
| � } Wn; t t f k
r� | | d <t j
t d t | d � n XWd QX| t | � f S( Nt authorized_keyst recursivet authorizedkeysfiles %h/.ssh/authorized_keysi sh Failed extracting 'AuthorizedKeysFile' in ssh config from %r, using 'AuthorizedKeysFile' file %r instead( RQ R1 R2 R R t SeLinuxGuardt Truet parse_ssh_config_mapR\ t getRM R6 R7 R8 R9 t DEF_SSHD_CFGR? ( RO t
sshd_cfg_filet ssh_dirRP t default_authorizedkeys_filet auth_key_fnst ssh_cfg( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt extract_authorized_keys� s
c C s$ t | � \ } } t j j | � sS t j | d d �t j | | j | j � n t � } g } x0 | D]( } | j
| j t | � d | �� qi Wt
| � \ } } t j | d t ��b t | | � }
t j t j j | � d d �t j | |
d d �t j | | j | j � Wd QXd S( Nt modei� R R^ i� ( RQ R1 R2 t isdirR t
ensure_dirt chownbyidt pw_uidt pw_gidR R R/ RC Rj R` Ra RJ t dirnamet
write_file( RE RO R Rf t pwentR< t key_entriesRF t auth_key_fnt auth_key_entriest content( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt setup_user_keys s
& t SshdConfigLinec B s/ e Z d d d � Z e d � � Z d � Z RS( c C s | | _ | | _ | | _ d S( N( R- t _keyRU ( R R- RF t v( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR
s c C s | j d k r d S| j j � S( N( Rz R t lower( R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRH s c C sV | j d k r t | j � St | j � } | j rN | d t | j � 7} n | Sd S( NR ( Rz R RC R- RU ( R R{ ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR # s
N( R R R R
t propertyRH R ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRy s c C s/ t j j | � s g St t j | � j � � S( N( R1 R2 R3 t parse_ssh_config_linesR R4 R5 ( R> ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse_ssh_config- s c C s� g } x� | D]� } | j � } | s5 | j d � rN | j t | � � q
n y | j d d � \ } } Wn) t k
r� | j d d � \ } } n X| j t | | | � � q
W| S( NR# i t =( R+ R* R Ry R% R t
ValueError( R; t retR- RH t val( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR~ 3 s
c C sP t | � } | s i Si } x- | D]% } | j s8 q# n | j | | j <q# W| S( N( R RH RU ( R> R; R� R- ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRb F s
c C sv t | � } t d | d | � } | rf t j | d j g | D] } t | � ^ q= � d d t �n t | � d k S( s� Read fname, and update if changes are necessary.
@param updates: dictionary of desired values {Option: value}
@return: boolean indicating if an update was done.R; t updatess
t copy_modei ( R t update_ssh_config_linesR Rr R RC Ra R ( R� R> R; t changedt l( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt update_ssh_configR s 9c
C s� t � } g } t g | j � D] } | j � | f ^ q � } x� t | d d �D]� \ } } | j sn qS n | j | k rS | | j } | | } | j | � | j | k r� t j d | | | � q� | j
| � t j d | | | j | � | | _ qS qS Wt | � t | � k r�xq | j � D]` \ } } | | k rEq'n | j
| � | j
t
d | | � � t j d t | � | | � q'Wn | S( s� Update the ssh config lines per updates.
@param lines: array of SshdConfigLine. This array is updated in place.
@param updates: dictionary of desired values {Option: value}
@return: A list of keys in updates that were changed.t starti s$ line %d: option %s already set to %ss# line %d: option %s updated %s -> %sR$ s line %d: option %s added with %s( t sett dictRE R| t enumerateRH t addRU R9 t debugR R t itemsRy (
R; R� t foundR� RF t casemapR R- RH RU ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR� _ s4 1
( R R s ecdsa-sha2-nistp256s( ecdsa-sha2-nistp256-cert-v01@openssh.coms ecdsa-sha2-nistp384s( ecdsa-sha2-nistp384-cert-v01@openssh.coms ecdsa-sha2-nistp521s( ecdsa-sha2-nistp521-cert-v01@openssh.comR R s rsa-sha2-256s rsa-sha2-512s ssh-dsss ssh-dss-cert-v01@openssh.coms ssh-ed25519s ssh-ed25519-cert-v01@openssh.coms ssh-rsas ssh-rsa-cert-v01@openssh.com( R1 RK t cloudinitR t loggingR t getLoggerR R9 Rd R' t DISABLE_USER_OPTSt objectR R R? RJ RQ R\ Rj R Rx Ry R R~ Rb R� R� ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt <module> sL U