One Hat Cyber Team
Your IP :
10.30.1.1
Server IP :
103.148.201.5
Server :
Linux web-olt 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64
Server Software :
Apache/2.4.52 (Ubuntu)
PHP Version :
8.1.29
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
samba
/
__pycache__
/
View File Name :
ntacls.cpython-310.pyc
o �/a�] � @ st d Z ddlZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z mZmZ ddlmZmZ ddl mZ ddl mZ ddlmZ dd lmZ dd lmZ ejej B ej B ej B Z e j e j!B e j"B e j#B Z$G d d � d e%�Z&d d� Z'dd� Z( d)dd�Z) d*dd�Z*dd� Z+d+dd�Z,G dd � d �Z-G d d � d �Z.d d � Z/d!d"� Z0d#d$� Z1d%d&� Z2d'd(� Z3dS ),zNT Acls.� N)�param)�security�xattr�idmap)�ndr_pack� ndr_unpack)�smbd)�libsmb_samba_internal)�get_samba_logger)� NTSTATUSError)�system_session_unixc @ s e Zd ZdZdS )�XattrBackendErrorz A generic xattr backend error.N)�__name__� __module__� __qualname__�__doc__� r r �./usr/lib/python3/dist-packages/samba/ntacls.pyr 2 s r c C s� |du r(| � d�}|durtj| � d�fS | � d�}|dur&tj| � d�fS dS |dkr.dS |dkrL|dur;tj|fS tjtj�tj�| � d�d��fS |d krn|durYtj|fS | � d �}tj�tj�|d ��}tj|fS td | ��) z$return the path to the eadb, or NoneNzxattr_tdb:filez posix:eadb�NN�native�eadbz private dirzeadb.tdb�tdbzstate directoryz xattr.tdbz Invalid xattr backend choice %s) �get�samba� xattr_tdb� posix_eadb�os�path�abspath�joinr )�lp�backend�eadbfiler r � state_dir�db_pathr r r �checkset_backend6 s* " r% c C s6 z t j�|tj�}W n ty Y d S w ttj|�S �N)r � xattr_native� wrap_getxattrr �XATTR_DOSATTRIB_NAME_S3� Exceptionr � DOSATTRIB)r �file� attributer r r � getdosinfoR s � � r. Tc C s� |rct | ||�\}}|d ur0z |�||tj�} W n ty/ td| � tj�|tj�} Y n w tj�|tj�} ttj | �} | j dkrF| j S | j dkrO| j j S | j dkrX| j j S | j dkra| j j S d S t j|t||d�S )N�Fail to open %s� � � � ��service)r% r( r �XATTR_NTACL_NAMEr* �printr r' r �NTACL�version�info�sdr � get_nt_acl�SECURITY_SECINFO_FLAGS) r r, � session_infor! r" �direct_db_accessr5 � backend_obj�dbnamer- �ntaclr r r �getntacl\ s> � ��� ��rC Fc C s0 t |t�s t |tj�s J �t |t�rt�|�} n t |tj�r$|} t| �}t |t�s1t |tj�s1J �t |t�r>tj�|| �} n t |tj�rK|} | �| �}|s�|r�| �| j�\} }|t j kr�|t j kr�| jt�d|tj f �kr�t�d|tj f �}| �|�\}}|t j ks�|t j kr�| }||_tj|t||| d� d}n!td|||f ��t�|dd� tj|tjtjB tjB | || d� |�r t| ||�\}}t�� }d|_| |_|dur�z|� ||tj t |�� W dS t y� t d| � t!j"� |tj t |�� Y dS w t!j"� |tj t |�� dS tj|t| | |d � dS ) a� A wrapper for smbd set_nt_acl api. Args: lp (LoadParam): load param from conf file (str): a path to file or dir sddl (str): ntacl sddl string service (str): name of share service, e.g.: sysvol session_info (auth_session_info): session info for authentication Note: Get `session_info` with `samba.auth.user_session`, do not use the `admin_session` api. Returns: None z%s-%dr4 TzDUnable to find UID for domain administrator %s, got id %d of type %dr r0 Nr/ )r5 r> )#� isinstance�strr �dom_sid� descriptor� from_sddl�as_sddl� sid_to_id� owner_sidr � ID_TYPE_UID� ID_TYPE_BOTH�DOMAIN_RID_ADMINS�DOMAIN_RID_ADMINISTRATORr � set_nt_aclr= r r �chown� SECINFO_GROUP� SECINFO_DACL� SECINFO_SACLr% r r8 r9 r: � wrap_setxattrr6 r r* r7 r r' )r r, �sddl�domsidr> r! r" � use_ntvfs�skip_invalid_chown�passdbr5 �sidr; �owner_id� owner_type� administrator�admin_id� admin_type�sd2r@ rA rB r r r �setntacl� s~ ���� � �� � �rb c C s� d}d}d}d}d}d}d}d}d } d} d} d} d} d}d}d}d}d}d}d}d}d}d }d }d }d }d }d} d} | | @ } | |@ rT| |@ rT| | | B |B |B | B |B B } | |@ rh| | | B |B |B |B | B |B B } | |@ rr| || B B } | |@ rz| |B } | S )zMTakes the access mask of a DS ACE and transform them in a File ACE mask. r0 r1 r3 � � � �@ � � i i i i i i r ) �ldm�RIGHT_DS_CREATE_CHILD�RIGHT_DS_DELETE_CHILD�RIGHT_DS_LIST_CONTENTS� ACTRL_DS_SELF�RIGHT_DS_READ_PROPERTY�RIGHT_DS_WRITE_PROPERTY�RIGHT_DS_DELETE_TREE�RIGHT_DS_LIST_OBJECT�RIGHT_DS_CONTROL_ACCESS�FILE_READ_DATA�FILE_LIST_DIRECTORY�FILE_WRITE_DATA� FILE_ADD_FILE�FILE_APPEND_DATA�FILE_ADD_SUBDIRECTORY�FILE_CREATE_PIPE_INSTANCE� FILE_READ_EA� FILE_WRITE_EA� FILE_EXECUTE� FILE_TRAVERSE�FILE_DELETE_CHILD�FILE_READ_ATTRIBUTES�FILE_WRITE_ATTRIBUTES�DELETE� READ_CONTROL� WRITE_DAC� WRITE_OWNER� SYNCHRONIZE�STANDARD_RIGHTS_ALL�filemaskr r r �ldapmask2filemask� sr ��������� r� c C s� t j�| |�}t �� }|j|_|j|_|j|_|j|_|jj}t dt |��D ]8}|| }|jt j @ s^t |j �t jkr^|jt jB t jB |_t |j �t jkrS|jt jB |_t|j�|_|�|� q&|sc|S |�|�S )z� This function takes an the SDDL representation of a DS ACL and return the SDDL representation of this ACL adapted for files. It's used for Policy object provision r )r rG rH rK � group_sid�type�revision�dacl�aces�range�len�"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECTrE �trustee�SID_BUILTIN_PREW2K�flags�SEC_ACE_FLAG_OBJECT_INHERIT� SEC_ACE_FLAG_CONTAINER_INHERIT�SID_CREATOR_OWNER�SEC_ACE_FLAG_INHERIT_ONLYr� � access_mask�dacl_addrI )�dssddlr[ rI �ref�fdescrr� �i�acer r r � dsacl2fsacl s& � r� c @ sz e Zd ZdZdd� Z ddd�Z d dd �Zd d d �Zd d� Zdd� Z dd� Z d dd�Z d dd�Z d dd�Z dd� ZdS ) � SMBHelperzb A wrapper class for SMB connection smb_path: path with separator "\" other than "/" c C s || _ || _d S r& )�smb_connrF )�selfr� rF r r r �__init__F s zSMBHelper.__init__FNc C s2 d|vsJ �| j j|||d�}|r|�| j�S |S �N�/)�sinfor� )r� �get_aclrI rF )r� �smb_pathrI r� r� �ntacl_sdr r r r� J s �zSMBHelper.get_aclc C sj d|vsJ �t |t�st |tj�sJ �t |t�r!tj�|| j�}nt |tj�r)|}| jj||||d� d S r� )rD rE r rG rH � domain_sidr� �set_acl)r� r� r� r� r� �tmp_descr r r r� T s �zSMBHelper.set_acl� c C s d|vsJ �| j j|td�S )zM List file and dir base names in smb_path without recursive. r� )�attribs)r� �list�SMB_FILE_ATTRIBUTE_FLAGS�r� r� r r r r� b s zSMBHelper.listc C s t |tj@ �S )ze Check whether the attrib value is a directory. attrib is from list method. )�bool�libsmb�FILE_ATTRIBUTE_DIRECTORY)r� �attribr r r �is_diri s zSMBHelper.is_dirc C s |r|d | S |S )z$ Join path with '\' �\r )r� �root�namer r r r q s zSMBHelper.joinc C s d|vsJ �| j �|�S )Nr� )r� �loadfiler� r r r r� w s zSMBHelper.loadfilec C sb |� � D ]*\}}| �||�}t|t�r'| j�|�s | j�|� | j||d� q| j�||� qdS )z1 Create files as defined in tree �r� N) �itemsr rD �dictr� �chkpath�mkdir� create_tree�savefile)r� �treer� r� �content�fullnamer r r r� { s �zSMBHelper.create_treec C sZ i }| � |�D ]#}|d }| �||�}| �|d �r#| j|d�||< q| �|�||< q|S )a� Get the tree structure via smb conn self.smb_conn.list example: [ { 'attrib': 16, 'mtime': 1528848309, 'name': 'dir1', 'short_name': 'dir1', 'size': 0L }, { 'attrib': 32, 'mtime': 1528848309, 'name': 'file0.txt', 'short_name': 'file0.txt', 'size': 10L } ] r� r� r� )r� r r� �get_treer� )r� r� r� �itemr� r� r r r r� � s zSMBHelper.get_treec C sh i }| � |�D ]*}|d }| �||�}| �|d �r$|�| j|d�� q| �|�}|�| j�||< q|S )z> Get ntacl for each file and dir via smb conn r� r� r� )r� r r� �update� get_ntaclsr� rI rF )r� r� �ntaclsr� r� r� r� r r r r� � s zSMBHelper.get_ntaclsc C sB | � � D ]}|d }| �|d �r| j�|� q| j�|� qd S )Nr� r� )r� r� r� �deltree�unlink)r� r� r� r r r � delete_tree� s �zSMBHelper.delete_tree)FNNr )r� )r r r r r� r� r� r� r� r r� r� r� r� r� r r r r r� ? s � � r� c @ s& e Zd Zdd� Zd dd�Zdd� ZdS ) � NtaclsHelperc C s8 || _ || _t�� | _| j�|� d| j�d�v | _d S )N�smbzserver services)r5 rF �s3param� get_contextr �loadr rX )r� r5 � smb_conf_pathrF r r r r� � s zNtaclsHelper.__init__FNc C s8 |d u r| j }t| j|||| jd�}|r|�| j�S |S )N)r? r5 )rX rC r r5 rI rF )r� r r> rI r? r� r r r rC � s �zNtaclsHelper.getntaclc C s t | j||| j|| jd�S )N)rX )rb r rF rX )r� r r� r> r r r rb � s �zNtaclsHelper.setntacl)FN)r r r r� rC rb r r r r r� � s r� c C s> t | d d��}|�|� W d � d S 1 sw Y d S )N�.NTACL�w)�open�write)�dst�ntacl_sddl_str�fr r r �_create_ntacl_file� s "�r� c C sN | d }t j�|�s d S t|d�� }|�� W d � S 1 s w Y d S )Nr� �r)r r �existsr� �read)�src� ntacl_filer� r r r �_read_ntacl_file� s $�r� c C s� t � }t|t�r t�|�}t| |�}d}t�� }|g}|g}|r�|�� } |�� } |j | d�D ]~} |� | | d �} t j � | | d �} |� | d �rX|�| � |�| � t �| � n |�| �}t| d�� }|�|� W d � n1 srw Y z|j| dd�}t| |� W q. ty� } z|�d | | jd f � |�d | d � W Y d} ~ q.d} ~ ww |s tj|d d�� }t �|�D ]}t j � ||�}|j||d� q�W d � n1 s�w Y t � |� dS )aa Backup all files and dirs with ntacl for the serive behind smb_conn. 1. Create a temp dir as container dir 2. Backup all files with dir structure into container dir 3. Generate file.NTACL files for each file and dir in contianer dir 4. Create a tar file from container dir(without top level folder) 5. Delete contianer dir r� r� r� r� �wbNT�rI z"Failed to get the ntacl for %s: %sr0 z!The permissions for %s may not bez restored correctly�w:gz�r� �mode��arcname) r rD rE r rF r� �tempfile�mkdtemp�popr� r r r r� �appendr� r� r� r� r� r� r �error�args�warning�tarfile�listdir�add�shutil�rmtree)r� �dest_tarfile_pathrF �logger� smb_helper� remotedir�localdir�r_dirs�l_dirs�r_dir�l_dir�e�r_name�l_name�datar� r� �tarr� r r r r � backup_online� sT � � ����� �r c C s� | � d��dd�d }t�� }t� }t|||�}t�| �D ]�\}} } tjj || d�} tj� || �} | D ]$} tj� || �}tj� | | �}t � |||� |j ||dd�}t||� q3| D ]W}tj� ||�}tj� | |�}t �|||� |j ||dd�}t||� t|d��&}|�� }t|d�� }|�|� W d � n1 s�w Y W d � n1 s�w Y qZq tj|d d �� }t�|�D ]}tj� ||�}|j||d � q�W d � n1 s�w Y t�|� d S ) z< Backup files and ntacls to a tarfile for a service r� r0 �����startTr� �rbr� Nr� r� r� )�rstrip�rsplitr� r� r r� r �walkr �relpathr r r� rC r� � create_filer� r� r� r� r� r� r� r� )�src_service_pathr� r� rF r5 �tempdirr> � ntacls_helper�dirpath�dirnames� filenames� rel_dirpath� dst_dirpath�dirnamer� r� r� �filename�src_filer �dst_filer r� r r r r �backup_offline( sF �� ���� �r c C s" t � }|�d��dd�d }t�� }|�� }t�|�}t|||�} t � } t � | ��} | j |d� W d � n1 s:w Y t �|�D ]�\} } }t jj| |d�}t j�t j�||��}| D ]9}|�d�s�t j�| |�}t j�||�}t j�|�s�t�|| |� t|�}|r�| �||| � q^|�d| d � q^|D ]n}|�d��st j�| |�}t j�||�}t j�|�s�t�|| |� t|�}|r�| �||| � n |�d | d � t |d ��&}|� � }t |d �� }|� |� W d � n1 s�w Y W d � n 1 �sw Y q�qDt � |� dS ) z> Restore files and ntacls from a tarfile to a service r� r0 r )r Nr r� z)Failed to restore ntacl for directory %s.z) Please check the permissions are correctz$Failed to restore ntacl for file %s.r r� ) r r r r� r� �get_domain_sidr rF r� r r� r� � extractallr r r r �normpathr �endswith�isdirr r� r� rb r� �isfiler r� r� r� r� )�src_tarfile_path�dst_service_path� samdb_connr� r� r5 r � dom_sid_strrF r r> r� r r r r r r r� r� r� r r r r r r r �backup_restoreX sh � � ��� � �� ���r# )NNTN)NNTFNN)T)4r r r� r� r� �samba.xattr_nativer �samba.xattr_tdb�samba.posix_eadb� samba.samba3r r� � samba.dcerpcr r r � samba.ndrr r r r r� � samba.loggerr r �samba.auth_utilr �FILE_ATTRIBUTE_SYSTEMr� �FILE_ATTRIBUTE_ARCHIVE�FILE_ATTRIBUTE_HIDDENr� � SECINFO_OWNERrR rS rT r= r* r r% r. rC rb r� r� r� r� r� r� r r r# r r r r �<module> sh ������ �' �g 7 < 0