Gecko [ re-designstudio.net ]

Name	Size	Permission	Date
.build-id	[ DIR ]	drwxr-xr-x	2026-07-17 11:16
NetworkManager	[ DIR ]	drwxr-xr-x	2025-08-26 10:14
audit	[ DIR ]	drwxr-xr-x	2026-07-23 11:30
binfmt.d	[ DIR ]	drwxr-xr-x	2026-06-16 17:17
cloud-init	[ DIR ]	drwxr-xr-x	2024-02-24 08:51
debug	[ DIR ]	drwxr-xr-x	2024-02-24 08:38
dracut	[ DIR ]	drwxr-xr-x	2026-06-20 08:14
eclipse	[ DIR ]	drwxr-xr-x	2024-02-24 08:38
engines-1.1	[ DIR ]	drwxr-xr-x	2026-07-15 11:31
environment.d	[ DIR ]	drwxr-xr-x	2026-06-18 11:30
exim	[ DIR ]	drwxr-xr-x	2017-06-28 14:58
firewalld	[ DIR ]	drwxr-xr-x	2017-06-12 12:04
firmware	[ DIR ]	drwxr-xr-x	2026-08-06 13:55
fontconfig	[ DIR ]	drwxr-xr-x	2018-12-05 11:49
games	[ DIR ]	dr-xr-xr-x	2021-10-09 08:49
gcc	[ DIR ]	drwxr-xr-x	2025-08-26 09:44
gconv	[ DIR ]	drwxr-xr-x	2026-07-23 11:30
grub	[ DIR ]	drwxr-xr-x	2026-05-23 12:26
java	[ DIR ]	drwxr-xr-x	2022-10-20 20:00
jvm	[ DIR ]	drwxr-xr-x	2026-07-25 08:14
jvm-commmon	[ DIR ]	drwxr-xr-x	2022-10-20 20:00
jvm-private	[ DIR ]	drwxr-xr-x	2024-02-24 08:51
kbd	[ DIR ]	drwxr-xr-x	2023-10-14 21:06
kdump	[ DIR ]	drwxr-xr-x	2026-02-12 12:31
kernel	[ DIR ]	drwxr-xr-x	2026-06-16 17:17
krb5	[ DIR ]	drwxr-xr-x	2026-05-13 06:34
locale	[ DIR ]	drwxr-xr-x	2026-07-23 11:30
modprobe.d	[ DIR ]	drwxr-xr-x	2026-06-18 11:34
modules	[ DIR ]	drwxr-xr-x	2026-08-06 13:54
modules-load.d	[ DIR ]	drwxr-xr-x	2026-06-16 17:17
motd.d	[ DIR ]	drwxr-xr-x	2025-12-17 18:54
oracle	[ DIR ]	drwxr-xr-x	2020-07-31 11:25
polkit-1	[ DIR ]	drwxr-xr-x	2024-05-31 11:33
python2.7	[ DIR ]	drwxr-xr-x	2024-04-10 04:58
python3.12	[ DIR ]	drwxr-xr-x	2026-07-30 11:03
python3.6	[ DIR ]	drwxr-xr-x	2026-07-14 16:22
rpm	[ DIR ]	drwxr-xr-x	2024-12-19 12:31
sasl2	[ DIR ]	drwxr-xr-x	2024-05-31 11:36
security	[ DIR ]	drwxr-xr-x	2026-05-05 11:30
sse2	[ DIR ]	dr-xr-xr-x	2021-10-09 08:49
sysctl.d	[ DIR ]	drwxr-xr-x	2026-06-18 11:30
sysimage	[ DIR ]	drwxr-xr-x	2021-10-09 08:49
systemd	[ DIR ]	drwxr-xr-x	2026-06-18 11:34
sysusers.d	[ DIR ]	drwxr-xr-x	2026-06-18 11:30
tmpfiles.d	[ DIR ]	drwxr-xr-x	2026-08-06 11:31
tuned	[ DIR ]	drwxr-xr-x	2026-04-04 08:13
udev	[ DIR ]	drwxr-xr-x	2026-06-18 11:34
yum-plugins	[ DIR ]	drwxr-xr-x	2024-02-24 08:52
.libcrypt.so.1.1.0.hmac	65 B	-rw-r--r--	2021-10-08 21:41
.libcrypt.so.1.hmac	65 B	-rw-r--r--	2021-10-08 21:41
.libcrypto.so.1.1.1k.hmac	65 B	-rw-r--r--	2026-07-13 14:12
.libcrypto.so.1.1.hmac	65 B	-rw-r--r--	2026-07-13 14:12
.libgcrypt.so.20.hmac	65 B	-rw-r--r--	2026-07-29 02:15
.libssl.so.1.1.1k.hmac	65 B	-rw-r--r--	2026-07-13 14:12
.libssl.so.1.1.hmac	65 B	-rw-r--r--	2026-07-13 14:12
cpp	1.21 MB	-rwxr-xr-x	2025-08-26 09:47
ld-2.28.so	891.94 KB	-rwxr-xr-x	2026-07-21 14:51
ld-linux.so.2	891.94 KB	-rwxr-xr-x	2026-07-21 14:51
libBrokenLocale-2.28.so	7.37 KB	-rwxr-xr-x	2026-07-21 14:51
libBrokenLocale.so.1	7.37 KB	-rwxr-xr-x	2026-07-21 14:51
libSegFault.so	19.55 KB	-rwxr-xr-x	2026-07-21 14:51
libanl-2.28.so	16.49 KB	-rwxr-xr-x	2026-07-21 14:51
libanl.so.1	16.49 KB	-rwxr-xr-x	2026-07-21 14:51
libasm-0.190.so	36.23 KB	-rwxr-xr-x	2025-08-25 12:57
libasm.so.1	36.23 KB	-rwxr-xr-x	2025-08-25 12:57
libattr.so.1	25.58 KB	-rwxr-xr-x	2019-10-11 17:56
libattr.so.1.1.2448	25.58 KB	-rwxr-xr-x	2019-10-11 17:56
libaudit.so.1	131.98 KB	-rwxr-xr-x	2025-07-15 09:43
libaudit.so.1.0.0	131.98 KB	-rwxr-xr-x	2025-07-15 09:43
libauparse.so	153.39 KB	-rwxr-xr-x	2025-07-15 09:43
libauparse.so.0	153.39 KB	-rwxr-xr-x	2025-07-15 09:43
libauparse.so.0.0.0	153.39 KB	-rwxr-xr-x	2025-07-15 09:43
libblkid.so.1	374.7 KB	-rwxr-xr-x	2026-02-04 20:17
libblkid.so.1.1.0	374.7 KB	-rwxr-xr-x	2026-02-04 20:17
libbrotlicommon.so.1	127.54 KB	-rwxr-xr-x	2026-02-10 14:38
libbrotlicommon.so.1.0.6	127.54 KB	-rwxr-xr-x	2026-02-10 14:38
libbrotlidec.so.1	51.85 KB	-rwxr-xr-x	2026-02-10 14:38
libbrotlidec.so.1.0.6	51.85 KB	-rwxr-xr-x	2026-02-10 14:38
libbrotlienc.so.1	573.36 KB	-rwxr-xr-x	2026-02-10 14:38
libbrotlienc.so.1.0.6	573.36 KB	-rwxr-xr-x	2026-02-10 14:38
libbz2.so.1	70.89 KB	-rwxr-xr-x	2025-01-28 01:39
libbz2.so.1.0.6	70.89 KB	-rwxr-xr-x	2025-01-28 01:39
libc-2.28.so	1.85 MB	-rwxr-xr-x	2026-07-21 14:51
libc.so.6	1.85 MB	-rwxr-xr-x	2026-07-21 14:51
libcap-ng.so.0	23.68 KB	-rwxr-xr-x	2021-10-08 16:59
libcap-ng.so.0.0.0	23.68 KB	-rwxr-xr-x	2021-10-08 16:59
libcap.so.2	36.16 KB	-rwxr-xr-x	2026-05-04 20:33
libcap.so.2.48	36.16 KB	-rwxr-xr-x	2026-05-04 20:33
libcom_err.so.2	15.75 KB	-rwxr-xr-x	2025-10-07 07:12
libcom_err.so.2.1	15.75 KB	-rwxr-xr-x	2025-10-07 07:12
libcrack.so.2	36.7 KB	-rwxr-xr-x	2019-10-11 23:37
libcrack.so.2.9.0	36.7 KB	-rwxr-xr-x	2019-10-11 23:37
libcrypt.so.1	136.24 KB	-rwxr-xr-x	2021-10-08 21:41
libcrypt.so.1.1.0	136.24 KB	-rwxr-xr-x	2021-10-08 21:41
libcrypto.so.1.1	2.84 MB	-rwxr-xr-x	2026-07-13 14:12
libcrypto.so.1.1.1k	2.84 MB	-rwxr-xr-x	2026-07-13 14:12
libcurl.so.4	654.14 KB	-rwxr-xr-x	2026-03-24 13:43
libcurl.so.4.5.0	654.14 KB	-rwxr-xr-x	2026-03-24 13:43
libdb-5.3.so	1.99 MB	-rwxr-xr-x	2021-09-21 15:12
libdb-5.so	1.99 MB	-rwxr-xr-x	2021-09-21 15:12
libdebuginfod-0.190.so	35.09 KB	-rwxr-xr-x	2025-08-25 12:57
libdebuginfod.so.1	35.09 KB	-rwxr-xr-x	2025-08-25 12:57
libdl-2.28.so	17.41 KB	-rwxr-xr-x	2026-07-21 14:51
libdl.so.2	17.41 KB	-rwxr-xr-x	2026-07-21 14:51
libdw-0.190.so	698.13 KB	-rwxr-xr-x	2025-08-25 12:57
libdw.so.1	698.13 KB	-rwxr-xr-x	2025-08-25 12:57
libelf-0.190.so	121.84 KB	-rwxr-xr-x	2025-08-25 12:57
libelf.so.1	121.84 KB	-rwxr-xr-x	2025-08-25 12:57
libfreebl3.chk	84 B	-rw-r--r--	2026-04-14 17:46
libfreebl3.so	11.59 KB	-rwxr-xr-x	2026-04-14 17:46
libfreeblpriv3.chk	84 B	-rw-r--r--	2026-04-14 17:46
libfreeblpriv3.so	1.07 MB	-rwxr-xr-x	2026-04-14 17:46
libgcc_s-8-20210514.so.1	112.42 KB	-rwxr-xr-x	2025-08-26 09:50
libgcc_s.so.1	112.42 KB	-rwxr-xr-x	2025-08-26 09:50
libgcrypt.so.20	923.41 KB	-rwxr-xr-x	2026-07-29 02:15
libgcrypt.so.20.2.5	923.41 KB	-rwxr-xr-x	2026-07-29 02:15
libgpg-error.so.0	149.79 KB	-rwxr-xr-x	2019-10-12 12:17
libgpg-error.so.0.24.2	149.79 KB	-rwxr-xr-x	2019-10-12 12:17
libgssapi_krb5.so.2	378.01 KB	-rwxr-xr-x	2026-05-13 06:34
libgssapi_krb5.so.2.2	378.01 KB	-rwxr-xr-x	2026-05-13 06:34
libgssrpc.so.4	142.34 KB	-rwxr-xr-x	2026-05-13 06:34
libgssrpc.so.4.2	142.34 KB	-rwxr-xr-x	2026-05-13 06:34
libidn2.so.0	127.58 KB	-rwxr-xr-x	2019-11-14 15:02
libidn2.so.0.3.6	127.58 KB	-rwxr-xr-x	2019-11-14 15:02
libk5crypto.so.3	97.32 KB	-rwxr-xr-x	2026-05-13 06:34
libk5crypto.so.3.1	97.32 KB	-rwxr-xr-x	2026-05-13 06:34
libkdb5.so.10	88.76 KB	-rwxr-xr-x	2026-05-13 06:34
libkdb5.so.10.0	88.76 KB	-rwxr-xr-x	2026-05-13 06:34
libkeyutils.so.1	19.49 KB	-rwxr-xr-x	2021-10-08 13:46
libkeyutils.so.1.6	19.49 KB	-rwxr-xr-x	2021-10-08 13:46
libkrad.so.0	39.91 KB	-rwxr-xr-x	2026-05-13 06:34
libkrad.so.0.0	39.91 KB	-rwxr-xr-x	2026-05-13 06:34
libkrb5.so.3	950.34 KB	-rwxr-xr-x	2026-05-13 06:34
libkrb5.so.3.3	950.34 KB	-rwxr-xr-x	2026-05-13 06:34
libkrb5support.so.0	69.07 KB	-rwxr-xr-x	2026-05-13 06:34
libkrb5support.so.0.1	69.07 KB	-rwxr-xr-x	2026-05-13 06:34
liblber-2.4.so.2	64.9 KB	-rwxr-xr-x	2025-03-11 09:47
liblber-2.4.so.2.10.9	64.9 KB	-rwxr-xr-x	2025-03-11 09:47
libldap-2.4.so.2	352.36 KB	-rwxr-xr-x	2025-03-11 09:47
libldap-2.4.so.2.10.9	352.36 KB	-rwxr-xr-x	2025-03-11 09:47
libldap_r-2.4.so.2	380.47 KB	-rwxr-xr-x	2025-03-11 09:47
libldap_r-2.4.so.2.10.9	380.47 KB	-rwxr-xr-x	2025-03-11 09:47
liblz4.so.1	120.45 KB	-rwxr-xr-x	2025-07-15 09:22
liblz4.so.1.8.3	120.45 KB	-rwxr-xr-x	2025-07-15 09:22
liblzma.so.5	173.69 KB	-rwxr-xr-x	2022-06-14 13:00
liblzma.so.5.2.4	173.69 KB	-rwxr-xr-x	2022-06-14 13:00
libm-2.28.so	848.36 KB	-rwxr-xr-x	2026-07-21 14:51
libm.so.6	848.36 KB	-rwxr-xr-x	2026-07-21 14:51
libmemusage.so	19.8 KB	-rwxr-xr-x	2026-07-21 14:51
libmount.so.1	414.02 KB	-rwxr-xr-x	2026-02-04 20:17
libmount.so.1.1.0	414.02 KB	-rwxr-xr-x	2026-02-04 20:17
libnghttp2.so.14	171.04 KB	-rwxr-xr-x	2026-04-13 03:28
libnghttp2.so.14.17.0	171.04 KB	-rwxr-xr-x	2026-04-13 03:28
libnl-3.so.200	150.77 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-3.so.200.26.0	150.77 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-genl-3.so.200	28.59 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-genl-3.so.200.26.0	28.59 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-idiag-3.so.200	40.53 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-idiag-3.so.200.26.0	40.53 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-nf-3.so.200	115.5 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-nf-3.so.200.26.0	115.5 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-route-3.so.200	636.38 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-route-3.so.200.26.0	636.38 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-xfrm-3.so.200	93.75 KB	-rwxr-xr-x	2022-10-08 10:52
libnl-xfrm-3.so.200.26.0	93.75 KB	-rwxr-xr-x	2022-10-08 10:52
libnsl.so.2	120.07 KB	-rwxr-xr-x	2019-10-14 16:28
libnsl.so.2.0.0	120.07 KB	-rwxr-xr-x	2019-10-14 16:28
libnss_compat-2.28.so	36.43 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_compat.so.2	36.43 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_db-2.28.so	32 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_db.so.2	32 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_dns-2.28.so	23.75 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_dns.so.2	23.75 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_files-2.28.so	52.2 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_files.so.2	52.2 KB	-rwxr-xr-x	2026-07-21 14:51
libnss_myhostname.so.2	771.95 KB	-rwxr-xr-x	2026-06-16 17:16
libnss_resolve.so.2	1 MB	-rwxr-xr-x	2026-06-16 17:16
libnss_systemd.so.2	1.01 MB	-rwxr-xr-x	2026-06-16 17:16
libp11.so.3	74.17 KB	-rwxr-xr-x	2023-04-03 08:42
libp11.so.3.4.2	74.17 KB	-rwxr-xr-x	2023-04-03 08:42
libpam.so.0	68.3 KB	-rwxr-xr-x	2025-12-17 18:55
libpam.so.0.84.2	68.3 KB	-rwxr-xr-x	2025-12-17 18:55
libpam_misc.so.0	15.54 KB	-rwxr-xr-x	2025-12-17 18:55
libpam_misc.so.0.82.1	15.54 KB	-rwxr-xr-x	2025-12-17 18:55
libpamc.so.0	15.51 KB	-rwxr-xr-x	2025-12-17 18:55
libpamc.so.0.82.1	15.51 KB	-rwxr-xr-x	2025-12-17 18:55
libpcprofile.so	7.39 KB	-rwxr-xr-x	2026-07-21 14:51
libpcre.so.1	473.36 KB	-rwxr-xr-x	2021-10-08 18:57
libpcre.so.1.2.10	473.36 KB	-rwxr-xr-x	2021-10-08 18:57
libpcre2-8.so.0	549.91 KB	-rwxr-xr-x	2022-08-02 16:03
libpcre2-8.so.0.7.1	549.91 KB	-rwxr-xr-x	2022-08-02 16:03
libpcre2-posix.so.2	11.28 KB	-rwxr-xr-x	2022-08-02 16:03
libpcre2-posix.so.2.0.1	11.28 KB	-rwxr-xr-x	2022-08-02 16:03
libpcreposix.so.0	11.19 KB	-rwxr-xr-x	2021-10-08 18:57
libpcreposix.so.0.0.6	11.19 KB	-rwxr-xr-x	2021-10-08 18:57
libpsl.so.5	67.48 KB	-rwxr-xr-x	2020-08-18 08:45
libpsl.so.5.3.1	67.48 KB	-rwxr-xr-x	2020-08-18 08:45
libpsx.so.2	15.45 KB	-rwxr-xr-x	2026-05-04 20:33
libpsx.so.2.48	15.45 KB	-rwxr-xr-x	2026-05-04 20:33
libpthread-2.28.so	144.13 KB	-rwxr-xr-x	2026-07-21 14:51
libpthread.so.0	144.13 KB	-rwxr-xr-x	2026-07-21 14:51
libresolv-2.28.so	89.79 KB	-rwxr-xr-x	2026-07-21 14:51
libresolv.so.2	89.79 KB	-rwxr-xr-x	2026-07-21 14:51
librt-2.28.so	42.38 KB	-rwxr-xr-x	2026-07-21 14:51
librt.so.1	42.38 KB	-rwxr-xr-x	2026-07-21 14:51
libsasl2.so.3	129.74 KB	-rwxr-xr-x	2022-02-23 20:08
libsasl2.so.3.0.0	129.74 KB	-rwxr-xr-x	2022-02-23 20:08
libselinux.so.1	183.61 KB	-rwxr-xr-x	2026-02-10 14:25
libsepol.so.1	829.62 KB	-rwxr-xr-x	2021-10-08 20:20
libslapi-2.4.so.2	145.42 KB	-rwxr-xr-x	2025-03-11 09:47
libslapi-2.4.so.2.10.9	145.42 KB	-rwxr-xr-x	2025-03-11 09:47
libssh.so.4	519.86 KB	-rwxr-xr-x	2025-11-24 19:54
libssh.so.4.8.7	519.86 KB	-rwxr-xr-x	2025-11-24 19:54
libssh_threads.so.4	519.86 KB	-rwxr-xr-x	2025-11-24 19:54
libssh_threads.so.4.8.7	519.86 KB	-rwxr-xr-x	2025-11-24 19:54
libssl.so.1.1	629.82 KB	-rwxr-xr-x	2026-07-13 14:12
libssl.so.1.1.1k	629.82 KB	-rwxr-xr-x	2026-07-13 14:12
libstdc++.so.6	1.58 MB	-rwxr-xr-x	2025-08-26 09:50
libstdc++.so.6.0.25	1.58 MB	-rwxr-xr-x	2025-08-26 09:50
libsystemd.so.0	1.47 MB	-rwxr-xr-x	2026-06-16 17:16
libsystemd.so.0.23.0	1.47 MB	-rwxr-xr-x	2026-06-16 17:16
libthread_db-1.0.so	36.64 KB	-rwxr-xr-x	2026-07-21 14:51
libthread_db.so.1	36.64 KB	-rwxr-xr-x	2026-07-21 14:51
libtirpc.so.3	231.89 KB	-rwxr-xr-x	2024-07-02 20:29
libtirpc.so.3.0.0	231.89 KB	-rwxr-xr-x	2024-07-02 20:29
libudev.so.1	706.8 KB	-rwxr-xr-x	2026-06-16 17:16
libudev.so.1.6.11	706.8 KB	-rwxr-xr-x	2026-06-16 17:16
libunistring.so.2	1.71 MB	-rwxr-xr-x	2019-10-12 10:41
libunistring.so.2.1.0	1.71 MB	-rwxr-xr-x	2019-10-12 10:41
libutil-2.28.so	15.77 KB	-rwxr-xr-x	2026-07-21 14:51
libutil.so.1	15.77 KB	-rwxr-xr-x	2026-07-21 14:51
libuuid.so.1	32.04 KB	-rwxr-xr-x	2026-02-04 20:17
libuuid.so.1.3.0	32.04 KB	-rwxr-xr-x	2026-02-04 20:17
libverto.so.1	23.76 KB	-rwxr-xr-x	2022-10-08 07:36
libverto.so.1.0.0	23.76 KB	-rwxr-xr-x	2022-10-08 07:36
libz.so.1	100.77 KB	-rwxr-xr-x	2023-10-11 21:48
libz.so.1.2.11	100.77 KB	-rwxr-xr-x	2023-10-11 21:48
libzstd.so.1	658.15 KB	-rwxr-xr-x	2020-08-18 20:54
libzstd.so.1.4.4	658.15 KB	-rwxr-xr-x	2020-08-18 20:54
os-release	381 B	-rw-r--r--	2026-05-14 16:37
sendmail	4.41 KB	-rwxr-xr-x	2026-07-24 13:17

Rename

#!/bin/bash
##CageFS proxyexec wrapper - ver 18

if [[ $EUID -eq 0 ]]; then
    echo 'Cannot be run as root'
    exit 1
fi

USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
# Trust boundary for the website-isolation token path: it must point
# directly at the regular file that create_website_token_directory()
# creates inside its root-owned per-user storage area. That area is
# /var/cagefs/<prefix>/<user>/.cagefs/website/... on the host and is
# bind-mounted into the cage at /var/.cagefs/website/... — both views
# are accepted because libenter.enter_site() picks one or the other
# depending on whether it runs inside or outside the cage. The file
# itself is never a symlink, so we reject symlinks outright rather
# than canonicalizing with realpath. Without this gate the attacker
# controls both the env var WEBSITE_TOKEN_PATH and the file contents
# at that path; the file contents land in $TOKEN, which is embedded
# into the ssh remote command argv below and re-parsed by the remote
# shell — so shell metacharacters in the file would execute on the
# origin host. (Slite #7 / CLOS-4490)
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
    if [[ -L "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not be a symlink" >&2
        exit 1
    fi
    if [[ ! -f "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' is not an existing regular file" >&2
        exit 1
    fi
    # Reject `..` as a path component so the prefix check below cannot
    # be bypassed via traversal (e.g. /var/cagefs/../etc/passwd matches
    # the /var/cagefs/* glob but resolves outside the trusted area).
    case "$WEBSITE_TOKEN_PATH" in
        */../*|*/..)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not contain '..' path components" >&2
            exit 1
            ;;
    esac
    case "$WEBSITE_TOKEN_PATH" in
        /var/cagefs/*|/var/.cagefs/*) ;;
        *)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH must be under /var/cagefs/ or /var/.cagefs/ (got '$WEBSITE_TOKEN_PATH')" >&2
            exit 1
            ;;
    esac
    USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
# The -L/-f/prefix gate above is defense-in-depth, TOCTOU is not exploitable because the
# forwarded $TOKEN must still equal the legit on-disk bytes that the
# origin's cagefs.server reads with open(..., O_NOFOLLOW) from a
# uid-derived path (see find_website_by_token() in
# proxyexec/cagefs.server.c) — a swapped symlink redirects what we
# cat, never what the server reads, so a TOCTOU substitution can only
# replace the forwarded bytes with something that fails the server's
# constant-time comparison.
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# Tokens are generated as fixed-length alphanumerics by
# _generate_password() in py/clcagefslib/webisolation/jail_utils.py and
# by the corresponding C helper. Any non-alphanumeric byte means the
# token file was tampered with — refuse to forward it into the ssh
# remote command, where the remote shell would re-parse metacharacters.
# Use POSIX `case` rather than `[[ =~ ]]` because the wrapper is also
# invoked through `sh` (e.g. jenkins_tests/rpm_tests/p_cagefs/
# 939-environment_var-check.sh), and dash treats `[[` as a missing
# command — the regex form would falsely trip and exit the script.
case "$TOKEN" in
    "" | *[!A-Za-z0-9]*)
        echo "cagefs.proxy: refusing to forward malformed token from $USER_TOKEN_PATH" >&2
        exit 1
        ;;
esac
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f "$PIDFILE" ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE > /dev/null 2>&1
        /bin/kill -s SIGINT "$pid" > /dev/null 2>&1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
    $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" SENDMAIL $$ "$@"
    RETVAL=$?
else
    trap 'ctrl_c_handler' 2
    CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" SENDMAIL $$ "$@"
    RETVAL=$?
    /bin/rm -f $PIDFILE > /dev/null 2>&1
fi

exit $RETVAL