mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2025-11-06 13:25:51 +01:00
ca30929d6f
Added smart fall back detection to find the linux user from domain if domain is provided vs username for Cyberpanel user. Also ran it through shellcheck andupdated and optimized the code and added multi control panel detection code.
455 lines
12 KiB
Bash
455 lines
12 KiB
Bash
#!/usr/bin/env bash
|
|
## Author: Michael Ramsey
|
|
## Objective Fix permissions issues on CyberPanel/cPanel/Plesk for a linux user or users
|
|
# https://gitlab.com/wizardassistantscripts/fixperms
|
|
#
|
|
# Forked from https://github.com/PeachFlame/cPanel-fixperms
|
|
#
|
|
# Plesk portion credits too
|
|
# https://www.orware.com/blog/tips-and-how-tos/plesk/correct-httpdocs-permissions
|
|
# https://support.plesk.com/hc/en-us/articles/115001969889--BUG-plesk-repair-fs-doesn-t-set-correct-owner-inside-httpdocs
|
|
|
|
## How to use.
|
|
# wget https://gitlab.com/wizardassistantscripts/fixperms/-/raw/master/fixperms.sh ; bash fixperms.sh username
|
|
#
|
|
# wget https://gitlab.com/wizardassistantscripts/fixperms/-/raw/master/fixperms.sh ; bash fixperms.sh exampleuserbob
|
|
#
|
|
# Or once of
|
|
## bash <(curl -s https://gitlab.com/wizardassistantscripts/fixperms/-/raw/master/fixperms.sh || wget -qO - https://gitlab.com/wizardassistantscripts/fixperms/-/raw/master/fixperms.sh) exampleuserbob;
|
|
#
|
|
# Permanent Install for reuse via the below
|
|
# wget -O /usr/bin/fixperms https://gitlab.com/wizardassistantscripts/fixperms/-/raw/master/fixperms.sh; chmod +x /usr/bin/fixperms;
|
|
#
|
|
# Then
|
|
# fixperms -v -a Username
|
|
# fixperms -v -all
|
|
# Username=$1
|
|
|
|
|
|
#Detect Control panel
|
|
if [ -f /usr/local/cpanel/cpanel ]; then
|
|
# Cpanel check for /usr/local/cpanel/cpanel -V
|
|
ControlPanel="cpanel"
|
|
#user_homedir="/home/${Username}"
|
|
|
|
|
|
elif [ -f /usr/bin/cyberpanel ]; then
|
|
# CyberPanel check /usr/bin/cyberpanel
|
|
ControlPanel="cyberpanel"
|
|
#Get users homedir path
|
|
#user_homedir=$(grep -E "^${Username}:" /etc/passwd | cut -d: -f6)
|
|
|
|
elif [ -f /usr/local/psa/core.version ]; then
|
|
# Plesk check /usr/local/psa/core.version
|
|
ControlPanel="plesk"
|
|
|
|
#Get users homedir path
|
|
#user_homedir=$(grep -E "^${Username}:" /etc/passwd | cut -d: -f6)
|
|
|
|
|
|
else
|
|
echo "Not able to detect Control panel. Unsupported Control Panel exiting now"
|
|
exit 1;
|
|
fi
|
|
echo "=============================================================";
|
|
echo "$ControlPanel Control Panel Detected"
|
|
echo "=============================================================";
|
|
echo "";
|
|
|
|
|
|
|
|
# Set verbose to null
|
|
verbose=""
|
|
|
|
|
|
#Print the help text
|
|
helptext () {
|
|
tput bold
|
|
tput setaf 2
|
|
echo "Fix perms script help:"
|
|
echo "Sets file/directory permissions to match suPHP and FastCGI schemes"
|
|
echo "USAGE: fixperms [options] -a account_name"
|
|
echo "-------"
|
|
echo "Options:"
|
|
echo "-h or --help: print this screen and exit"
|
|
echo "-v: verbose output"
|
|
echo "-all: run on all Cyberpanel accounts"
|
|
echo "--account or -a: specify a Cyberpanel/cPanel/Plesk account"
|
|
# echo "--domain or -d: specify a Cyberpanel domain"
|
|
tput sgr0
|
|
exit 0
|
|
}
|
|
|
|
#Detect OS
|
|
if [ -f /etc/os-release ]; then
|
|
# freedesktop.org and systemd
|
|
. /etc/os-release
|
|
OS=$NAME
|
|
VER=$VERSION_ID
|
|
elif type lsb_release >/dev/null 2>&1; then
|
|
# linuxbase.org
|
|
OS=$(lsb_release -si)
|
|
VER=$(lsb_release -sr)
|
|
elif [ -f /etc/lsb-release ]; then
|
|
# For some versions of Debian/Ubuntu without lsb_release command
|
|
. /etc/lsb-release
|
|
OS=$DISTRIB_ID
|
|
VER=$DISTRIB_RELEASE
|
|
elif [ -f /etc/debian_version ]; then
|
|
# Older Debian/Ubuntu/etc.
|
|
OS=Debian
|
|
VER=$(cat /etc/debian_version)
|
|
elif [ -f /etc/SuSe-release ]; then
|
|
# Older SuSE/etc.
|
|
...
|
|
elif [ -f /etc/redhat-release ]; then
|
|
# Older Red Hat, CentOS, etc.
|
|
...
|
|
else
|
|
# Fall back to uname, e.g. "Linux <version>", also works for BSD, etc.
|
|
OS=$(uname -s)
|
|
VER=$(uname -r)
|
|
fi
|
|
|
|
|
|
|
|
#### Cyberpanel Section
|
|
|
|
# fix mailperms
|
|
fixmailperms_cyberpanel () {
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing mailperms...."
|
|
tput sgr0
|
|
#Fix perms of /home/vmail
|
|
chown -R vmail:vmail /home/vmail
|
|
chmod 755 /home/vmail
|
|
find /home/vmail -type d -exec chmod 0755 {} \;
|
|
find /home/vmail -type f -exec chmod 0640 {} \;
|
|
echo "Finished fixing mailperms...."
|
|
|
|
}
|
|
|
|
# Main workhorse, fix perms per account passed to it
|
|
fixperms_cyberpanel () {
|
|
|
|
#Get account from what is passed to the function
|
|
account=$1
|
|
|
|
#Make sure account isn't blank
|
|
if [ -z "$account" ]
|
|
then
|
|
tput bold
|
|
tput setaf 1
|
|
echo "Need an account name!"
|
|
tput sgr0
|
|
helptext
|
|
#Else, start doing work
|
|
else
|
|
|
|
# Get linux user from Domain
|
|
domain_username=$(grep -E "/${1}:" /etc/passwd | cut -d: -f1)
|
|
if id "$1" >/dev/null 2>&1; then
|
|
echo "$1 exists"
|
|
elif id "$domain_username" >/dev/null 2>&1; then
|
|
echo "Found user: $domain_username from domain: $1"
|
|
echo "$domain_username exists"
|
|
account=$domain_username
|
|
else
|
|
echo "user does not exist"
|
|
fi
|
|
|
|
|
|
#Get the account's homedir
|
|
HOMEDIR=$(grep -E "^${account}:" /etc/passwd | cut -d: -f6)
|
|
echo "User Homedirectory: ${HOMEDIR}"
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing perms for $account:"
|
|
tput setaf 3
|
|
if [ -d "$HOMEDIR/.cagefs" ]; then
|
|
chmod 775 "$HOMEDIR"/.cagefs
|
|
chmod 700 "$HOMEDIR"/.cagefs/tmp
|
|
chmod 700 "$HOMEDIR"/.cagefs/var
|
|
chmod 777 "$HOMEDIR"/.cagefs/cache
|
|
chmod 777 "$HOMEDIR"/.cagefs/run
|
|
fi
|
|
echo "------------------------"
|
|
tput setaf 4
|
|
echo "Fixing website files...."
|
|
tput sgr0
|
|
|
|
|
|
#Fix individual files in public_html
|
|
find "$HOMEDIR"/public_html -type d -exec chmod "$verbose" 755 {} \;
|
|
find "$HOMEDIR"/public_html -type f -print0 | xargs -d$'\n' -r chmod "$verbose" 644
|
|
find "$HOMEDIR"/public_html -name '*.cgi' -print0 -o -name '*.pl' | xargs -0 -r chmod "$verbose" 755
|
|
#chown $verbose -R "$account":"$account" "$HOMEDIR"/public_html/*
|
|
# Hidden files test support: https://serverfault.com/a/156481
|
|
chown "$verbose" -R "$account":"$account" "$HOMEDIR"/public_html/.[^.]*
|
|
find "$HOMEDIR"/* -name .htaccess -exec chown "$verbose" "$account"."$account" {} \;
|
|
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing public_html...."
|
|
tput sgr0
|
|
#Fix perms of public_html itself
|
|
chown "$verbose" "$account":"$account" "$HOMEDIR"/public_html
|
|
chmod "$verbose" 755 "$HOMEDIR"/public_html
|
|
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing logs...."
|
|
tput sgr0
|
|
#Fix perms of $HOMEDIR/logs
|
|
chown "$verbose" nobody:"$account" "$HOMEDIR"/logs
|
|
chmod "$verbose" 750 "$HOMEDIR"/logs
|
|
find "$HOMEDIR"/logs/* -name '*.access_log' -exec chown "$verbose" nobody."$account" {} \;
|
|
|
|
|
|
|
|
#Fix subdomains that lie outside of public_html
|
|
#tput setaf 3
|
|
#tput bold
|
|
#echo "------------------------"
|
|
#tput setaf 4
|
|
#echo "Fixing any domains with a document root outside of public_html...."
|
|
#for SUBDOMAIN in $(grep -i documentroot /var/cpanel/userdata/$account/* | grep -v '.cache\|_SSL' | awk '{print $2}' | grep -v public_html)
|
|
#do
|
|
#tput bold
|
|
#tput setaf 4
|
|
#echo "Fixing sub/addon domain document root $SUBDOMAIN...."
|
|
#tput sgr0
|
|
#find $SUBDOMAIN -type d -exec chmod $verbose 755 {} \;
|
|
#find $SUBDOMAIN -type f -print0 | xargs -d$'\n' -r chmod $verbose 644
|
|
#find $SUBDOMAIN -name '*.cgi' -o -name '*.pl' | xargs -r chmod $verbose 755
|
|
#chown $verbose -R $account:$account $SUBDOMAIN
|
|
#find $SUBDOMAIN -name .htaccess -exec chown $verbose $account.$account {} \;
|
|
#done
|
|
|
|
#Finished
|
|
tput bold
|
|
tput setaf 3
|
|
echo "Finished!"
|
|
echo "------------------------"
|
|
printf "\n\n"
|
|
tput sgr0
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
|
|
#########cPanel
|
|
# Main workhorse, fix perms per account passed to it
|
|
fixperms_cpanel () {
|
|
|
|
#Get account from what is passed to the function
|
|
account=$1
|
|
|
|
#Check account against cPanel users file
|
|
if ! grep "$account" /var/cpanel/users/*
|
|
then
|
|
tput bold
|
|
tput setaf 1
|
|
echo "Invalid cPanel account"
|
|
tput sgr0
|
|
exit 0
|
|
fi
|
|
|
|
#Make sure account isn't blank
|
|
if [ -z "$account" ]
|
|
then
|
|
tput bold
|
|
tput setaf 1
|
|
echo "Need an account name!"
|
|
tput sgr0
|
|
helptext
|
|
#Else, start doing work
|
|
else
|
|
|
|
#Get the account's homedir
|
|
HOMEDIR=$(grep -E "^${account}:" /etc/passwd | cut -d: -f6)
|
|
echo "User Homedirectory: ${HOMEDIR}"
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing perms for $account:"
|
|
tput setaf 3
|
|
if [ -d "$HOMEDIR/.cagefs" ]; then
|
|
chmod 775 "$HOMEDIR"/.cagefs
|
|
chmod 700 "$HOMEDIR"/.cagefs/tmp
|
|
chmod 700 "$HOMEDIR"/.cagefs/var
|
|
chmod 777 "$HOMEDIR"/.cagefs/cache
|
|
chmod 777 "$HOMEDIR"/.cagefs/run
|
|
fi
|
|
echo "------------------------"
|
|
tput setaf 4
|
|
echo "Fixing website files...."
|
|
tput sgr0
|
|
|
|
|
|
|
|
#Fix individual files in public_html
|
|
find "$HOMEDIR"/public_html -type d -exec chmod "$verbose" 755 {} \;
|
|
find "$HOMEDIR"/public_html -type f -print0 | xargs -0 -d$'\n' -r chmod "$verbose" 644
|
|
find "$HOMEDIR"/public_html -name '*.cgi' -print0 -o -name '*.pl' | xargs -0 -r chmod "$verbose" 755
|
|
# fix hidden files and folders like .well-known/ with root or other user perms
|
|
chown "$verbose" -R "$account":"$account" "$HOMEDIR"/public_html/.[^.]*
|
|
find "$HOMEDIR"/* -name .htaccess -exec chown "$verbose" "$account"."$account" {} \;
|
|
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing public_html...."
|
|
tput sgr0
|
|
#Fix perms of public_html itself
|
|
chown "$verbose" "$account":nobody "$HOMEDIR"/public_html
|
|
chmod "$verbose" 750 "$HOMEDIR"/public_html
|
|
|
|
#Fix subdomains that lie outside of public_html
|
|
tput setaf 3
|
|
tput bold
|
|
echo "------------------------"
|
|
tput setaf 4
|
|
echo "Fixing any domains with a document root outside of public_html...."
|
|
for SUBDOMAIN in $(grep -i documentroot /var/cpanel/userdata/"$account"/* | grep -v '.cache\|_SSL' | awk '{print $2}' | grep -v public_html)
|
|
do
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing sub/addon domain document root $SUBDOMAIN...."
|
|
tput sgr0
|
|
find "$SUBDOMAIN" -type d -exec chmod "$verbose" 755 {} \;
|
|
find "$SUBDOMAIN" -type f -print0 | xargs -0 -d$'\n' -r chmod "$verbose" 644
|
|
find "$SUBDOMAIN" -name '*.cgi' -print0 -o -name '*.pl' | xargs -0 -r chmod "$verbose" 755
|
|
chown "$verbose" -R "$account":"$account" "$SUBDOMAIN"
|
|
chmod "$verbose" 755 "$SUBDOMAIN"
|
|
find "$SUBDOMAIN" -name .htaccess -exec chown "$verbose" "$account"."$account" {} \;
|
|
done
|
|
|
|
#Finished
|
|
tput bold
|
|
tput setaf 3
|
|
echo "Finished!"
|
|
echo "------------------------"
|
|
printf "\n\n"
|
|
tput sgr0
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
###################################
|
|
|
|
|
|
|
|
|
|
|
|
##################################
|
|
|
|
fixperms () {
|
|
Username=$1
|
|
if [ "${ControlPanel}" == "cpanel" ] ; then
|
|
|
|
fixperms_cpanel "${Username}"
|
|
# Fix users mailperms
|
|
tput bold
|
|
tput setaf 4
|
|
echo "Fixing Mailperms...."
|
|
tput sgr0
|
|
/scripts/mailperm --verbose "${Username}"
|
|
#Finished
|
|
tput bold
|
|
tput setaf 3
|
|
echo "Finished!"
|
|
echo "------------------------"
|
|
printf "\n\n"
|
|
tput sgr0
|
|
|
|
elif [ "${ControlPanel}" == "cyberpanel" ] ; then
|
|
|
|
fixperms_cyberpanel "${Username}"
|
|
fixmailperms_cyberpanel
|
|
|
|
|
|
elif [ "${ControlPanel}" == "plesk" ] ; then
|
|
#Get users homedir path
|
|
user_homedir=$(grep -E "^${Username}:" /etc/passwd | cut -d: -f6)
|
|
echo "User Homedirectory: ${user_homedir}"
|
|
echo "Resetting perms/ownership for ${user_homedir}/httpdocs"
|
|
sudo chown -R "${Username}":psacln "${user_homedir}"/httpdocs
|
|
sudo chown "${Username}":psaserv "${user_homedir}"/httpdocs
|
|
|
|
fi
|
|
}
|
|
|
|
all () {
|
|
|
|
if [ "${ControlPanel}" == "cpanel" ] ; then
|
|
|
|
for user in $(cut -d: -f1 /etc/domainusers)
|
|
do
|
|
fixperms_cpanel "$user"
|
|
done
|
|
# Fix all users mailperms
|
|
/scripts/mailperm --verbose
|
|
|
|
elif [ "${ControlPanel}" == "cyberpanel" ] ; then
|
|
|
|
if [[ $OS = 'CentOS Linux' ]] ; then
|
|
for user in $(getent passwd | awk -F: '5001<$3 && $3<6000 {print $1}' |grep -v spamd)
|
|
do
|
|
fixperms_cyberpanel "$user"
|
|
done
|
|
fixmailperms_cyberpanel
|
|
fi
|
|
|
|
if [[ $OS = 'Ubuntu' ]] ; then
|
|
for user in $(getent passwd | awk -F: '1001<$3 && $3<2000 {print $1}')
|
|
do
|
|
fixperms_cyberpanel "$user"
|
|
done
|
|
fixmailperms_cyberpanel
|
|
fi
|
|
fi
|
|
}
|
|
|
|
|
|
|
|
#Main function, switches options passed to it
|
|
case "$1" in
|
|
|
|
-h) helptext
|
|
;;
|
|
--help) helptext
|
|
;;
|
|
-v) verbose="-v"
|
|
|
|
case "$2" in
|
|
|
|
-all) all
|
|
;;
|
|
--account) fixperms "$3"
|
|
;;
|
|
-a) fixperms "$3"
|
|
;;
|
|
*) tput bold
|
|
tput setaf 1
|
|
echo "Invalid Option!"
|
|
helptext
|
|
;;
|
|
esac
|
|
;;
|
|
|
|
-all) all
|
|
;;
|
|
--account) fixperms "$2"
|
|
;;
|
|
-a) fixperms "$2"
|
|
;;
|
|
*)
|
|
tput bold
|
|
tput setaf 1
|
|
echo "Invalid Option!"
|
|
helptext
|
|
;;
|
|
esac
|