add bubblewrap default command

This commit is contained in:
Usman Nasir
2021-06-24 20:08:51 +05:00
parent 51b4b10a24
commit ec4602bf75
4 changed files with 3 additions and 4 deletions

View File

@@ -1061,7 +1061,7 @@ class CloudManager:
if currentACL['admin'] == 0: if currentACL['admin'] == 0:
return self.ajaxPre(0, 'Only administrators can see MySQL status.') return self.ajaxPre(0, 'Only administrators can see MySQL status.')
finalData = mysqlUtilities.showStatus() finalData = mysqlUtilities.shfetchRamowStatus()
finalData = json.dumps(finalData) finalData = json.dumps(finalData)
return HttpResponse(finalData) return HttpResponse(finalData)

View File

@@ -139,6 +139,8 @@ SecFilterSelective ARGS "or.+1[[:space:]]*=[[:space:]]1|or 1=1--'|'.+--&quo
SecFilterSelective ARGS &quot;into[[:space:]]+outfile|load[[:space:]]+data|/\*.+\*/&quot;</ruleSet> SecFilterSelective ARGS &quot;into[[:space:]]+outfile|load[[:space:]]+data|/\*.+\*/&quot;</ruleSet>
</censorshipRuleSet> </censorshipRuleSet>
<bubbleWrap>1</bubbleWrap>
<bubbleWrapCmd>/bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --ro-bind-try /var/www /var/www --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /usr/local/bin/msmtp /etc/alternatives/mta --ro-bind-try /usr/local/bin/msmtp /usr/sbin/exim --bind-try $HOMEDIR $HOMEDIR --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --bind-try /run/mysqld/mysqld.sock /run/mysqld/mysqld.sock --bind-try /var/run/mysqld/mysqld.sock /var/run/mysqld/mysqld.sock '$COPY-TRY /etc/exim.jail/$USER.conf $HOMEDIR/.msmtprc' --unshare-all --share-net --die-with-parent --dir /run/user/$UID $PASSWD 65534 $GROUP 65534</bubbleWrapCmd>
<accessDenyDir> <accessDenyDir>
<dir>/</dir> <dir>/</dir>
<dir>/etc/*</dir> <dir>/etc/*</dir>

View File

@@ -238,6 +238,5 @@ def main():
if __name__ == "__main__": if __name__ == "__main__":
main() main()

View File

@@ -33,7 +33,6 @@ def serverStatusHome(request):
None, 'admin') None, 'admin')
return proc.render() return proc.render()
def litespeedStatus(request): def litespeedStatus(request):
try: try:
userID = request.session['userID'] userID = request.session['userID']
@@ -152,7 +151,6 @@ def getFurtherDataFromLogFile(request):
logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[getFurtherDataFromLogFile]") logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[getFurtherDataFromLogFile]")
return HttpResponse("Not Logged in as admin") return HttpResponse("Not Logged in as admin")
def services(request): def services(request):
data = {} data = {}