Server : LiteSpeed System : Linux barito.iixcp.rumahweb.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : elvh3918 ( 1528) PHP Version : 8.2.31 Disable Function : mail Directory : /opt/cloudlinux/venv/lib64/python3.11/site-packages/xray/ |
# -*- coding: utf-8 -*-
# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2025 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT
import os
from clcommon.cpapi import cpusers
from clcommon.clpwd import ClPwd
def create_user_uid_dirs():
"""
Create /usr/share/alt-php-xray-tasks/{uid} directories for all users.
The {uid} directory itself stays root-owned (0755) because it holds
root-written task files the C extension reads. A {uid}/log/ subdirectory
is created owned by the user (mode 0700) so the PHP worker, which runs as
that uid, can write xray.to_file trace dumps there while no other local
user can read or pre-create them.
:return: None
"""
for username in cpusers():
try:
uid = ClPwd().get_uid(username)
base_dir = f"/usr/share/alt-php-xray-tasks/{uid}"
os.makedirs(base_dir, 0o755, exist_ok=True)
_create_user_log_dir(base_dir, uid)
except ClPwd.NoSuchUserException:
print(f"ERROR: No such user {username}")
except Exception as e:
print(f"Error processing user {username}: {e}")
def _create_user_log_dir(base_dir, uid):
"""
Create base_dir/log owned by uid with mode 0700 (idempotent).
makedirs' mode is masked by umask and is not applied to an already
existing directory, so chmod/chown are issued explicitly to enforce the
intended ownership and permissions on every run. The group is left
unchanged (root) -- mode 0700 makes the group irrelevant.
"""
log_dir = os.path.join(base_dir, "log")
os.makedirs(log_dir, 0o700, exist_ok=True)
os.chown(log_dir, uid, -1)
os.chmod(log_dir, 0o700)