Gecko [ cxecomgroup.com ]

Name	Size	Permission	Date
addpart	24.86 KB	-rwxr-xr-x	2026-02-04 21:18
agetty	62.39 KB	-rwxr-xr-x	2026-02-04 21:18
blkdiscard	29.05 KB	-rwxr-xr-x	2026-02-04 21:18
blkid	98.66 KB	-rwxr-xr-x	2026-02-04 21:18
blkzone	49.75 KB	-rwxr-xr-x	2026-02-04 21:18
blockdev	41.3 KB	-rwxr-xr-x	2026-02-04 21:18
cagefs_enter_site	1.83 KB	-rwxr-xr-x	2026-07-14 15:30
cagefsctl-user	15.55 KB	-rwxr-xr-x	2026-07-14 15:30
cfdisk	98.41 KB	-rwxr-xr-x	2026-02-04 21:18
chcpu	28.83 KB	-rwxr-xr-x	2026-02-04 21:18
chroot	41.45 KB	-rwxr-xr-x	2026-03-24 14:05
clock	65.22 KB	-rwxr-xr-x	2026-02-04 21:18
cloudlinux-selector	654 B	-rwxr-xr-x	2026-07-01 11:06
consoletype	11.88 KB	-rwxr-xr-x	2025-11-10 11:42
cracklib-check	13.05 KB	-rwxr-xr-x	2019-10-12 02:47
cracklib-format	251 B	-rwxr-xr-x	2019-10-12 02:47
cracklib-packer	13.05 KB	-rwxr-xr-x	2019-10-12 02:47
cracklib-unpacker	9.03 KB	-rwxr-xr-x	2019-10-12 02:47
create-cracklib-dict	990 B	-rwxr-xr-x	2019-10-12 02:47
ctrlaltdel	24.79 KB	-rwxr-xr-x	2026-02-04 21:18
ddns-confgen	20.46 KB	-rwxr-xr-x	2026-06-08 05:38
delpart	24.86 KB	-rwxr-xr-x	2026-02-04 21:18
dnssec-checkds	936 B	-rwxr-xr-x	2026-06-08 05:38
dnssec-coverage	938 B	-rwxr-xr-x	2026-06-08 05:38
dnssec-dsfromkey	60.84 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-importkey	60.84 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-keyfromlabel	64.75 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-keygen	72.84 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-keymgr	934 B	-rwxr-xr-x	2026-06-08 05:38
dnssec-revoke	56.74 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-settime	60.84 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-signzone	117.2 KB	-rwxr-xr-x	2026-06-08 05:38
dnssec-verify	52.84 KB	-rwxr-xr-x	2026-06-08 05:38
exim	4.41 KB	-rwxr-xr-x	2026-05-29 21:00
faillock	20.52 KB	-rwxr-xr-x	2025-12-17 19:54
fdformat	33.17 KB	-rwxr-xr-x	2026-02-04 21:18
fdisk	130.91 KB	-rwxr-xr-x	2026-02-04 21:18
findfs	12.38 KB	-rwxr-xr-x	2026-02-04 21:18
fsck	53.47 KB	-rwxr-xr-x	2026-02-04 21:18
fsck.cramfs	41.41 KB	-rwxr-xr-x	2026-02-04 21:18
fsck.minix	98.75 KB	-rwxr-xr-x	2026-02-04 21:18
fsfreeze	16.38 KB	-rwxr-xr-x	2026-02-04 21:18
fstrim	49.6 KB	-rwxr-xr-x	2026-02-04 21:18
genrandom	12.38 KB	-rwxr-xr-x	2026-06-08 05:38
hwclock	65.22 KB	-rwxr-xr-x	2026-02-04 21:18
ip	693.3 KB	-rwxr-xr-x	2024-05-23 10:36
isc-hmac-fixup	11.85 KB	-rwxr-xr-x	2026-06-08 05:38
isolatectl	9.06 KB	-rwxr-xr-x	2026-06-09 10:42
ldattach	32.99 KB	-rwxr-xr-x	2026-02-04 21:18
ldconfig	986.1 KB	-rwxr-xr-x	2026-07-21 16:52
losetup	90.59 KB	-rwxr-xr-x	2026-02-04 21:18
lvdctl	683 B	-rwxr-xr-x	2026-06-09 10:42
mkfs	16.48 KB	-rwxr-xr-x	2026-02-04 21:18
mkfs.cramfs	41.27 KB	-rwxr-xr-x	2026-02-04 21:18
mkfs.minix	86.56 KB	-rwxr-xr-x	2026-02-04 21:18
mkhomedir_helper	24.44 KB	-rwxr-xr-x	2025-12-17 19:54
mkswap	86.48 KB	-rwxr-xr-x	2026-02-04 21:18
named-checkzone	36.63 KB	-rwxr-xr-x	2026-06-08 05:38
named-compilezone	36.63 KB	-rwxr-xr-x	2026-06-08 05:38
nologin	11.87 KB	-rwxr-xr-x	2026-02-04 21:18
nsec3hash	12.29 KB	-rwxr-xr-x	2026-06-08 05:38
pam_console_apply	45.2 KB	-rwxr-xr-x	2025-12-17 19:54
pam_timestamp_check	11.87 KB	-rwxr-xr-x	2025-12-17 19:54
partx	94.5 KB	-rwxr-xr-x	2026-02-04 21:18
pivot_root	12.38 KB	-rwxr-xr-x	2026-02-04 21:18
pluginviewer	20.57 KB	-rwxr-xr-x	2022-02-23 21:13
proxyexec	21.17 KB	-r-xr-xr-x	2020-09-02 09:49
pwhistory_helper	20.44 KB	-rwxr-xr-x	2025-12-17 19:54
readprofile	20.55 KB	-rwxr-xr-x	2026-02-04 21:18
resizepart	41.57 KB	-rwxr-xr-x	2026-02-04 21:18
rfkill	53.46 KB	-rwxr-xr-x	2026-02-04 21:18
rtcwake	49.3 KB	-rwxr-xr-x	2026-02-04 21:18
runuser	48.99 KB	-rwxr-xr-x	2026-02-04 21:18
saslauthd	94.42 KB	-rwxr-xr-x	2022-02-23 21:13
sasldblistusers2	20.77 KB	-rwxr-xr-x	2022-02-23 21:13
saslpasswd2	16.42 KB	-rwxr-xr-x	2022-02-23 21:13
sendmail	4.41 KB	-rwxr-xr-x	2026-05-29 21:00
sfdisk	118.51 KB	-rwxr-xr-x	2026-02-04 21:18
sulogin	49.24 KB	-rwxr-xr-x	2026-02-04 21:18
swaplabel	16.5 KB	-rwxr-xr-x	2026-02-04 21:18
swapoff	20.75 KB	-rwxr-xr-x	2026-02-04 21:18
swapon	49.41 KB	-rwxr-xr-x	2026-02-04 21:18
switch_root	16.49 KB	-rwxr-xr-x	2026-02-04 21:18
testsaslauthd	16.66 KB	-rwxr-xr-x	2022-02-23 21:13
tmpwatch	35.47 KB	-rwxr-xr-x	2019-10-12 13:32
tsig-keygen	20.46 KB	-rwxr-xr-x	2026-06-08 05:38
unix_chkpwd	36.86 KB	-rwxr-xr-x	2025-12-17 19:54
unix_update	36.86 KB	-rwx------	2025-12-17 19:54
wipefs	41.12 KB	-rwxr-xr-x	2026-02-04 21:18
zramctl	99.13 KB	-rwxr-xr-x	2026-02-04 21:18

Rename

#!/bin/bash
##CageFS proxyexec wrapper - ver 18

if [[ $EUID -eq 0 ]]; then
    echo 'Cannot be run as root'
    exit 1
fi

USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
# Trust boundary for the website-isolation token path: it must point
# directly at the regular file that create_website_token_directory()
# creates inside its root-owned per-user storage area. That area is
# /var/cagefs/<prefix>/<user>/.cagefs/website/... on the host and is
# bind-mounted into the cage at /var/.cagefs/website/... — both views
# are accepted because libenter.enter_site() picks one or the other
# depending on whether it runs inside or outside the cage. The file
# itself is never a symlink, so we reject symlinks outright rather
# than canonicalizing with realpath. Without this gate the attacker
# controls both the env var WEBSITE_TOKEN_PATH and the file contents
# at that path; the file contents land in $TOKEN, which is embedded
# into the ssh remote command argv below and re-parsed by the remote
# shell — so shell metacharacters in the file would execute on the
# origin host. (Slite #7 / CLOS-4490)
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
    if [[ -L "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not be a symlink" >&2
        exit 1
    fi
    if [[ ! -f "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' is not an existing regular file" >&2
        exit 1
    fi
    # Reject `..` as a path component so the prefix check below cannot
    # be bypassed via traversal (e.g. /var/cagefs/../etc/passwd matches
    # the /var/cagefs/* glob but resolves outside the trusted area).
    case "$WEBSITE_TOKEN_PATH" in
        */../*|*/..)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not contain '..' path components" >&2
            exit 1
            ;;
    esac
    case "$WEBSITE_TOKEN_PATH" in
        /var/cagefs/*|/var/.cagefs/*) ;;
        *)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH must be under /var/cagefs/ or /var/.cagefs/ (got '$WEBSITE_TOKEN_PATH')" >&2
            exit 1
            ;;
    esac
    USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
# The -L/-f/prefix gate above is defense-in-depth, TOCTOU is not exploitable because the
# forwarded $TOKEN must still equal the legit on-disk bytes that the
# origin's cagefs.server reads with open(..., O_NOFOLLOW) from a
# uid-derived path (see find_website_by_token() in
# proxyexec/cagefs.server.c) — a swapped symlink redirects what we
# cat, never what the server reads, so a TOCTOU substitution can only
# replace the forwarded bytes with something that fails the server's
# constant-time comparison.
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# Tokens are generated as fixed-length alphanumerics by
# _generate_password() in py/clcagefslib/webisolation/jail_utils.py and
# by the corresponding C helper. Any non-alphanumeric byte means the
# token file was tampered with — refuse to forward it into the ssh
# remote command, where the remote shell would re-parse metacharacters.
# Use POSIX `case` rather than `[[ =~ ]]` because the wrapper is also
# invoked through `sh` (e.g. jenkins_tests/rpm_tests/p_cagefs/
# 939-environment_var-check.sh), and dash treats `[[` as a missing
# command — the regex form would falsely trip and exit the script.
case "$TOKEN" in
    "" | *[!A-Za-z0-9]*)
        echo "cagefs.proxy: refusing to forward malformed token from $USER_TOKEN_PATH" >&2
        exit 1
        ;;
esac
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f "$PIDFILE" ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE > /dev/null 2>&1
        /bin/kill -s SIGINT "$pid" > /dev/null 2>&1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
    $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
else
    trap 'ctrl_c_handler' 2
    CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
    /bin/rm -f $PIDFILE > /dev/null 2>&1
fi

exit $RETVAL