File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/user.cpython-310.pyc
o
�N�gZ/ � @ sb d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl
m Z ddl m
Z
zddlZdZW n eyA dZY nw zddlZdZW n eyU dZY nw zddlZdZW n eyi dZY nw e�e�Zdd� Ze
d �d!d
d ��Zd d � Zd
d� Zdd� Z d!dd�Z d!dd�Z dd� Z d"dd�Z d#dd�Z!d"dd �Z"d!d d �Z#d!d d �Z$dS )$zY
Functions for querying and modifying a user account and the groups to which it
belongs.
� N)�CommandExecutionError)� jinja_filterTFc C sH t r t�t�� �j} ntrtjj j
rtjj � � } nt d��tjj
�| �S )z
Get the current user
z9Required external library (pwd or win32api) not installed)�HAS_PWD�pwd�getpwuid�os�geteuid�pw_name�HAS_WIN_FUNCTIONS�salt�utilsZ
win_functionsZ HAS_WIN32Zget_current_userr � stringutils�
to_unicode)�ret� r �C/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/user.py�get_user+ s �r �get_uidc C �T t sdS | du rzt�� W S ty Y dS w zt�| �jW S ty) Y dS w )z�
Get the uid for a given user name. If no user given, the current euid will
be returned. If the user does not exist, None will be returned. On systems
which do not support pwd or os.geteuid, None will be returned.
N)r r r �AttributeErrorr �getpwnam�pw_uid�KeyError��userr r r r : s
� �c C s� G dd� dt j�}|� }d|_d}d}t �� }t jj�t �|�d||ddddddt �|�� dkr4td��z$t j �
� }t jj� | |t �|��dkrLtd ��|j dkW t jj�
|� S t jj�
|� w )
z�
Using the win32 api, determine if the user with token 'user_token' has
administrator rights.
See MSDN entry here:
http://msdn.microsoft.com/en-us/library/aa376389(VS.85).aspx
c @ s@ e Zd ZdejfdejfdejfdejfdejfdejfgZdS )z:_win_user_token_is_admin.<locals>.SID_IDENTIFIER_AUTHORITYZbyte0Zbyte1Zbyte2Zbyte3Zbyte4�byte5N)�__name__�
__module__� __qualname__�ctypes�c_byte�_fields_r r r r �SID_IDENTIFIER_AUTHORITYX s �r" � � i � r z AllocateAndInitializeSid failedzCheckTokenMembership failed)r � Structurer �c_void_pZwindllZadvapi32ZAllocateAndInitializeSid�byref� ExceptionZwintypesZBOOLZCheckTokenMembership�valueZFreeSid)Z
user_tokenr" Z nt_authorityZSECURITY_BUILTIN_DOMAIN_RIDZDOMAIN_ALIAS_RID_ADMINSZadministrators_groupZis_adminr r r �_win_user_token_is_adminO s@
�
�
��
r+ c C s t d�S )zs
ctypes.windll.shell32.IsUserAnAdmin() is intentionally avoided due to this
function being deprecated.
r )r+ r r r r �_win_current_user_is_admin� s r, c C s^ t � } tjj�� rt� rd| � �S | S d}| dkr-|D ]}|tjv r,dtj| � � S q| S )zh
Get a user name for publishing. If you find the user is "root" attempt to be
more specific
Zsudo_)Z SUDO_USER�root)r r r �platformZ
is_windowsr, r �environ)r Zenv_varsZevarr r r �get_specific_user� s
�
�r0 c
C s� t �| �}g }t� }|r+zt�|�j}W n ty* } z
td|� d|� ���d}~ww |j}t | dd�}t
j dkrBdd� |� � D �}|D ]}|| } | |vrX|�
| �sX|�| � qDt�� |kr~zt�|� W n ty} } z td �t�� ||���d}~ww tt�� �t|�kr�zt�|� W n ty� } ztd
�||���d}~ww t�� |jkr�z t�|j� W dS ty� } z td �t�� |j|���d}~ww dS ) zm
Change the current process to belong to the specified user (and the groups
to which it belongs)
z Failed to fetch the GID for z . Error: NT��include_default�darwinc S s i | ] \}}|� d �s||�qS )�_)�
startswith)�.0�k�vr r r �
<dictcomp>� s zchugid.<locals>.<dictcomp>z-Failed to change from gid {} to {}. Error: {}z2Failed to set supplemental groups to {}. Error: {}z-Failed to change from uid {} to {}. Error: {})r r �set�grp�getgrnam�gr_gidr r �pw_gid�get_group_dict�sysr. �items�add�appendr �getgid�setgid�OSError�format�sorted� getgroups� setgroups�getuidr �setuid)
�runas�groupZuinfoZ supgroupsZsupgroups_seenZ
target_pw_gid�errZ
group_listZ
group_name�gidr r r �chugid� sn
���
�
�������� �����rQ c C s� d}d}t �� }t�t�t �� �j�j}| r | |kr d}| }n|}|r,|}||kr+d}n| r?| |kr?t�t�|�j�j}d}n|}|sE|rJt||� |durUt �
|� dS dS )zi
Helper method for for subprocess.Popen to initialise uid/gid and umask
for the new process.
FTN) �getpassZgetuserr; �getgrgidr r r> �gr_namerQ r �umask) rM rU rN Z set_runasZset_grp� current_userZ current_grpZ
runas_userZ runas_grpr r r �chugid_and_umask� s, �
�rW c C s t rtrt�t�| �j�jS dS )zo
Returns the specified user's default group. If the user doesn't exist, a
KeyError will be raised.
N)�HAS_GRPr r; rS r r r> rT r r r r �get_default_group s ��rY c s� t du stdu r
g S d}t� }t�d�� zVtt��t� ��j
��}t � }tdd� |D ��}d}|| � � dkrD|d8 }|| � � dks8� fd d
�|D ��� fd d
�|D �}�fd d
�|D �} d
d
� |D �}
| |
}W n t yt Y nw |du r�t�d�� �fdd
�t
�� D �}zt��} | |vr�|�| � W n ty� Y nw |dur�|�|� |du r�zt
�t� ��j
�j} |�| � W n ty� Y nw t�d�t|�� t|�S )z\
Returns a list of all of the system group names of which the user
is a member.
FNz Trying os.getgrouplist for '%s'c s s � | ]}|j V qd S �N)r= �r6 Zlgrpr r r � <genexpr>! s � z!get_group_list.<locals>.<genexpr>���i� � c s g | ]}|� kr|�qS r r r[ �� local_maxr r �
<listcomp>' � z"get_group_list.<locals>.<listcomp>c s g | ]}|� kr|�qS r r )r6 Zrgrpr_ r r ra ( rb c s g | ]
}|j � v r|j�qS r )r= rT )r6 �_group)�user_group_list_localr r ra ) s
�c S s g | ]}t �|�j�qS r )r; rS rT )r6 Zgroup_idr r r ra . s �z"Trying generic group list for '%s'c s g | ]
}� |j v r|j�qS r )�gr_memrT )r6 �gr r r ra : s z Group list for user '%s': %s)rX r r: �logZtracerH r � getgrouplistr r r> � _getgrallr) r; �getgrallrY rC r �updaterS rT �remove) r r2 � group_namesZugroupsZuser_group_listZ local_grallZ
local_gidsZmax_idxZuser_group_list_remoteZlocal_group_namesZremote_group_namesZ
default_groupr )r` r rd r �get_group_list sb �
�� �
� �
�rn c C sH t du stdu r
i S i }t| |d�}|D ]
}|�|t�|�ji� q|S )z�
Returns a dict of all of the system groups as keys, and group ids
as values, of which the user is a member.
E.g.: {'staff': 501, 'sudo': 27}
Fr1 )rX r rn rk r; r< r= )r r2 Z
group_dictrm rN r r r r? U s r? c C s4 t du stdu r
g S tt| |d��� �}tt|��S )zZ
Returns a list of all of the system group IDs of which the user
is a member.
Fr1 )rX r �listr? �valuesrH r: )r r2 Zgid_listr r r � get_gid_listd s rq c C r )z�
Get the gid for a given group name. If no group given, the current egid
will be returned. If the group does not exist, None will be returned. On
systems which do not support grp or os.getegid it will return None.
N)rX r �getegidr r; r< r= r )rN r r r �get_gido s
� �rs c C s� g }| sdn| } t j�| d�}tjj�|��C}|D ]7}tjj�|�}|� � �
d�}t |d �|d< |d rDdd� |d �
d�D �|d< ng |d< |� t
�|�� qW d � |S 1 s\w Y |S )
zL
Alternative implemetantion for getgrall, that uses only /etc/group
�/z etc/group�:r% � c S s g | ]}|� � �qS r )�strip)r6 Zmemr r r ra � s z _getgrall.<locals>.<listcomp>�,N)r �path�joinr r �filesZfopenr
r rw �split�intrC r; � struct_group)r- r Z etc_groupZfp_�line�compsr r r ri � s" �
� � ri rZ )T)NT)%�__doc__r rR �loggingr r@ Zsalt.utils.pathr Zsalt.utils.platformZsalt.utils.stringutilsZsalt.exceptionsr Zsalt.utils.decorators.jinjar r r � ImportErrorr; rX Zsalt.utils.win_functionsr
� getLoggerr rg r r r+ r, r0 rQ rW rY rn r? rq rs ri r r r r �<module> sX � � �
:
D"
B