FM / sbin

/usr/sbin

Name	Size	Mode	Actions
cagefsctl-user	13203	0755	edit dl rm
cagefs_enter_site	1877	0755	edit dl rm
chroot	40680	0755	edit dl rm
consoletype	15488	0755	edit dl rm
cracklib-check	16072	0755	edit dl rm
cracklib-format	255	0755	edit dl rm
cracklib-packer	16072	0755	edit dl rm
cracklib-unpacker	16064	0755	edit dl rm
create-cracklib-dict	994	0755	edit dl rm
ddns-confgen	27912	0755	edit dl rm
exim	1284	0755	edit dl rm
faillock	23736	0755	edit dl rm
hsendmail	7510347	0755	edit dl rm
ip	788672	0755	edit dl rm
ldconfig	1176464	0755	edit dl rm
mkhomedir_helper	23768	0755	edit dl rm
named-checkzone	40288	0755	edit dl rm
named-compilezone	40288	0755	edit dl rm
named-nzd2nzf	15480	0755	edit dl rm
nsec3hash	15560	0755	edit dl rm
pam_console_apply	44552	0755	edit dl rm
pam_namespace_helper	471	0755	edit dl rm
pam_timestamp_check	15496	0755	edit dl rm
pluginviewer	19856	0755	edit dl rm
proxyexec	24584	0400	edit dl rm
pwhistory_helper	19656	0755	edit dl rm
saslauthd	90448	0755	edit dl rm
sasldblistusers2	15640	0755	edit dl rm
saslpasswd2	15608	0755	edit dl rm
sendmail	7510347	0755	edit dl rm
sendmail.exim	1284	0755	edit dl rm
testsaslauthd	15528	0755	edit dl rm
tmpwatch	36896	0755	edit dl rm
tsig-keygen	27912	0755	edit dl rm
unix_chkpwd	23840	0755	edit dl rm
unix_update	32072	0700	edit dl rm

Edit: /usr/sbin/exim (1284B)

#!/usr/bin/bash
##CageFS proxyexec wrapper - ver 17

if [[ $EUID -eq 0 ]]; then
    echo 'Cannot be run as root'
    exit 1
fi

USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
    USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f "$PIDFILE" ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE > /dev/null 2>&1
        /bin/kill -s SIGINT "$pid" > /dev/null 2>&1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
    $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
else
    trap 'ctrl_c_handler' 2
    CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
    /bin/rm -f $PIDFILE > /dev/null 2>&1
fi

exit $RETVAL

#!/usr/bin/bash ##CageFS proxyexec wrapper - ver 17 if [[ $EUID -eq 0 ]]; then echo 'Cannot be run as root' exit 1 fi USR=`/usr/bin/whoami` USER_TOKEN_PATH="/var/.cagefs/.cagefs.token" WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag" if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH" fi TOKEN=`/bin/cat ${USER_TOKEN_PATH}` # It's user's tmp directory and write to it is secure procedure # because this script is running only under usual user PIDFILE="/tmp/.cagefs.proxy.$$" USER_INTERRUPT=13 CWD=`pwd` ctrl_c_handler() { if [[ -f "$PIDFILE" ]]; then pid=`/bin/cat $PIDFILE` /bin/rm -f $PIDFILE > /dev/null 2>&1 /bin/kill -s SIGINT "$pid" > /dev/null 2>&1 fi exit $USER_INTERRUPT } if [[ -e /var/.cagefs/origin ]]; then ORIGIN=`/bin/cat /var/.cagefs/origin` REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN" $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@" RETVAL=$? else trap 'ctrl_c_handler' 2 CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@" RETVAL=$? /bin/rm -f $PIDFILE > /dev/null 2>&1 fi exit $RETVAL