Ӌ9~o
d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Z
d dlZd dlZd dlZd dl mZ d dlmZmZ d dlmZmZ d dlmZm Z m Z d dl m Z d dl m!Z! d dl"m#Z#m$Z$m%Z%m&Z& d d lm'Z' d d
lm(Z( d d l)m*Z* d d l+m,Z, d d
l-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5 d dl6Z6d dl7Z7d dl8Z8ddl9m:Z:m;Z; ddl ej? e@ ZAdZBdZCdaDdZE e*d ZFdZG e*d ZH e*d ZI e*d ZJ eKejL M d d ZN G d d e! ZO ejP d d! ZQe dd" ZReAddfd#ZS G d$ d% ZTdejU ejU d&dfd'e4eKeVeVf fd(ZWddd)d*ZX G d+ d,ejY ZZeZfd'eVfd-Z[eZfdd.Z\dd'e]fd0Z^d1 Z_ G d2 d3 Z`d4 Za G d5 d6eb Zcd7 Zdd8 Ze dd:Zfd/ddd/ddd;dZi ejP d d? Zjdd'e]fd@Zk G dA dB Zlejm dCfdDe]dEeKd'e]fdFZn ddDe]dEeKd'e4e]eKf fdGZodH ZpdI ZqddKZr ddMZsdN Zt ejP dOeKfdP Zu ejv e6jw dQd/R ZxdS ZydDejh dTeVd'dfdUZzdV Z{dDejh dWeVd'egfdXZ|dY Z} G dZ d[ Z~eCfd\Zd] Ze d^eKfd_ Zddae]d'e*fdbZdce]dae]d'egfddZde ZddgedheKd'efdiZdj Z G dk dle Z ejP d9 dm Zdn Zdd'egfdoZ G dp dq ZeZdrdsdtZdu Zdv Z ejP d d'egfdw ZdxZdy Zddze]d'e]fd{Zdd|Zdd}d~Zdd}dZdd}dZ G d de j Zd Z ddZd ZebdfdZefdZd ZdZd&ddZeddZd Zd Zdce*d'eVfdZdeVd'e*fdZd Zd ZddZde0de/f fdZd ZdrZdrZd ZdQddze3e] fdZddrddZddZ G d d ZdWe]d'ee]e]f dz fdZdWe]d'ee]e]f dz fdZ ejP d d'eee] e0e]gee]e]f dz f f fd Z G d deb Zd Z eh d Zdee] d'ee]e]dz f fdZde]dee] de0e]gee]e]f dz f d'ee]e]dz f fdZeAj fd'e]fdZdeKfdZde1e.e.f deKfdZ ejP d d Zde*d'eKfdZde*fdZd ZdS ) N)Future) OrderedDictdeque) GeneratorIterable) ExitStackcontextmanagersuppress) timedelta)Enum)LOCK_EXLOCK_NBLOCK_UNflockwraps)islice)Path)NamedTemporaryFile)Any AwaitableCallableDict FrozenSetListTupleTypeVar )is_safe_subdir_namermtree)atomic_rewrite_fdF)bounduser_id)z
User-AgentzAccept-LanguagezAccept-Encoding
ConnectionDNTz.i360bakz/run/systemd/systemz /etc/cloudlinux-edition-soloz /var/run/imunify-antivirus.pidz /var/run/imunify360-agent.pidz/var/run/imunify360.pid%IMUNIFY360_HTTP_REQUEST_RETRY_TIMEOUT< c e Zd ZdZdZdZdZdS )ScopezAV onlyz AV and IM360z
IM360 onlyzIM360 resident onlyN)__name__
__module__ __qualname__AVAV_IM360IM360IM360_RESIDENT S/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/__init__.pyr+ r+ G s" B H E*NNNr4 r+ )maxsizec t o2t ot S )zReturn True if /run/systemd/system folder exists:
[sd_booted]
(https://www.freedesktop.org/software/systemd/man/sd_booted.html)
)_SYSTEMD_BOOTED_DIRexistsis_dir
is_symlinkr3 r4 r5 is_systemd_bootr< N sC ""$$ 1 & & ( ( 1#..00 0r4 c # K |s|sJ t j } |p|j d| dV t j } |p|j d| ||z
dS )z
:param str: action name to log
:param logging.Logger: logger you want action name and timing
to be logged with
:param func: log function to use (`log` has preference over `logger_`)
z
%s startedNz%s took %.2f second(s))time monotonicdebug)actionlogger_logstartstops r5 timeitrF [ sz c> N ESGM<000 EEE > DSGM3VTE\JJJJJr4 c fd}|S )Nc N t j fd }|S )Nc K t pj 5 | i | d {V cd d d S # 1 swxY w Y d S N)rB rC rF r, argskwargsrA funrC rB s r5 wrapperz+timefun..decorator..wrapperm s .#,SIII
2
2 S$ 1& 1 1111111
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2s 8<< functoolsr rO rP rA rC rB s ` r5 decoratorztimefun..decoratorl sH 2 2 2 2 2 2 2
2 r4 r3 rB rA rC rT s ``` r5 timefunrV k s0 r4 c 0 e Zd ZdZeeddfd ZdS )synczF
the same timefun decorator variation but without async/await
Nc fd}|S )z
:param logging.Logger: logger you want action name and timing
to be logged with
:param str: action name to log
c N t j fd }|S )Nc z t pj 5 | i |cd d d S # 1 swxY w Y d S rJ rK rL s r5 rP z0sync.timefun..decorator..wrapper s F 2clGMMM 0 0 3///0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0s 044rQ rS s ` r5 rT z sync.timefun..decorator sH
_S
!
!
0
0
0
0
0
0
0 "
!
0 Nr4 r3 rU s ``` r5 rV z sync.timefun| s0 r4 )r, r- r. __doc__ staticmethodloggerrV r3 r4 r5 rX rX w sE t \ r4 rX Freturnc $ K | |t d t j }|r't | t sJ | g} t
j }n*t | t t f sJ t
j } t t dt d | | |||dd| d{V }|
| d{V \ } }
| d{V } t d | ||| | |
f | | |
fS )
zYAsynchronous command executor.
Returns a tuple (exit_code, stdout_data, stderr_data).Nz/stdin and input arguments may not both be used. r )seconds) max_trieson_errorTstdinstdoutstderrstart_new_sessionz run(%s, stdin=%s, shell=%s) = %s)
ValueError _subprocessPIPE
isinstancestrasynciocreate_subprocess_shelllisttuplecreate_subprocess_execretry_onBlockingIOError await_for communicatewaitr^ r@ ) commandrf rg rh shellinputrN create_subprocessprocouterr exit_codes r5 runr s
NOO O ;'3''''') # ;'D%=11111 # : 1y/C/C/C
D %%e,,,,,,,,HCiikk!!!!!!I
LL*
C c3 r4 )looptimeoutc |rt d D ]b} t j }| s n7n# t $ r Y nw xY wt j t j c| t j t | t j
r| nt j | | S )zjRun coroutine from a blocking code (outside the event loop).
Coroutine will be wrapped in Task.
Nra r ) rangero get_event_loop is_closed RuntimeErrorset_event_loopnew_event_looprun_until_completewait_forrm r Task)coror r _s r5 run_coror s |q = =A
-// ~~'' E
"7#9#;#; < < < < " " tW^44 LDD',t:L:L
s ?
A A c e Zd Zd ZdS )
CheckRunErrorc d}| | j | j | j pd | j pd S )Nz[Command {cmd!r} returned non-zero code {returncode},
Stdout: {output},
Stderr: {error}
)cmd
returncodeoutputerror)formatr r r decoderh )self_MESSAGEs r5 __str__zCheckRunError.__str__ s_
$
;%%''/4+$$&&.$
r4 N)r, r- r. r r3 r4 r5 r r s#
r4 r c ` K t | fi | d{V \ }}}|dk r ||| || |S )zJ
Asynchronous command executor.
Returns output as bytestring.
Nr )r )ry raise_excrN r r~ r s r5 check_runr sZ
"%W!7!7!7!7777777JSQi
GS#666 Jr4 c K t | t j t j t j d{V \ }}}|dk r ||| dS )z
Asynchronous command executor. Raises raise_exc if exit code is nonzero.
Stdin, stdout and stderr of command are connected to /dev/null.
)rf rg rh Nr )r rk DEVNULL)ry r coder s r5 check_exit_coder sy
!"" JD!Q qyyig&&& yr4 Tc K t | fi | d{V \ }}}n,# t $ r t d| Y dS w xY w|r%|dk r t d| || dS | }n,# t $ r t d| Y dS w xY w|S )zGSafe run command.
Returns stdout as string or empty string on errorNz Command %s failed with OSError r z'Command %s failed with exit code %s: %sz#Command %s returned non-utf8 output)r OSErrorr^ warningstripr UnicodeDecodeError)ry check_returncoderN rcr~ r results r5 safe_runr s 3 3F 3 3333333 C 7AAArr B!GG 5wC
r##%% .wrapper s %+--Kr4 r3 )r rP r s ` @r5 plainold_lazy_initr s. K Nr4 c e Zd ZdZd Zd ZdS )
PeriodicCheckz
Invoke a callback with a certain period
and return cached result in between.
Raising an exception from the callback does not
affect the next check schedule.
c || _ || _ t j |z
| _ d | _ t
t j | _ d S r )
_cb_coro_check_every_n_secondsr> r? _last_check_timestamp_last_check_resultr ro Lock_lock)r cb_corocheck_every_n_secondss r5 __init__zPeriodicCheck.__init__2 sD
&;#%)^%5%58M%M""& ' 55
r4 c K | 4 d {V t j | j z
}|| j k rVt
d| j | j t j | _ | j |i | d {V | _ | j cd d d d {V S # 1 d {V swxY w Y d S )Nz3Timeout %d seconds has expired, doing the check: %s) r r> r? r r r^ r@ r r )r rM rN deltas r5 __call__zPeriodicCheck.__call__; s\ ::<<
+
+
+
+
+
+
+
+N$$t'AAE333 I/M
.2^-=-=*0=
t0Nv0N0N*N*N*N*N*N*N'*
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+s BB33
B= B=N)r, r- r. r\ r r r3 r4 r5 r r ) s< 6 6 6 + + + + +r4 r c fd}|S )Nc $ t | S r )r )r nsecs r5 decoratez cache_result..decorateJ s T4(((r4 r3 )r r s ` r5 cache_resultr I s# ) ) ) ) ) Or4 c e Zd ZdZdS )RecurringCheckStopz:
raised by coroutine to stop recurring_check loop
Nr, r- r. r\ r3 r4 r5 r r P s Dr4 r c K t | r!t j | di | d {V nt j | d {V dS # t j $ r Y dS w xY w)NFTr3 )callablero sleepCancelledError)period
period_kwargss r5 wait_for_periodr X s F (- 7 7 7 788 8 8 8 8 8 8 8 8-'' ' ' ' ' ' ' 'u ! tts A
A A#"A#c 8 K |r| rt |fi | d {V ndS NF)r )checkr r s r5 should_stop_after_period_passedr c sG of66
666666666
r4
c fd}|S )z
run decorated corotine in a loop every :period: seconds.
If more then consecutive_err_limit error occured, exit loop.
:param period:
:param consecutive_err_limit:
:param check_period_first: default false
:return:
c F t fd }|S )Nc K d} t fi d {V rd S | i | d {V d}n# t $ rO d|v rG t |d t r|d n# t
$ r Y nw xY wY d S t j $ r Y d S t $ r}|dz
}|k r t
d Y d }~d S t |t j r3t
d|j
|j |j |j nt
d Y d }~nd }~ww xY wt fi d {V rd S T)Nr T lock_filer z-Error count exceeded limit,exiting check loopz+Failed to run %s (%s). stdout=%s, stderr=%szError executing %s)r r rm r unlinkFileNotFoundErrorro r Exceptionr^ exceptionrk CalledProcessErrorr r r rh ) rM rN consecutive_err_cntexccheck_period_firstconsecutive_err_limitrO r r s r5 wrappedz3recurring_check..decorator..wrappedx sH "# '
8& 2? E , #t.v.........: +,''9 * "f,,! )&*=t D D = &{ 3 : : < < < 0 ! ! ! D!EE - EE D D D'1,'*-BBB (( K !#{'EFF D (( I G N J J (()=sCCC!D& 9**F 6C EO'
sK 0 D?5A54D?5
B?D?BD?D? D?"%D:
A(D::D?r )rO r r r r r s ` r5 rT z"recurring_check..decoratorw sI s) ) ) ) ) ) ) )
) V r4 r3 )r r r r rT s ```` r5 recurring_checkr k s7 - - - - - - - -^ r4 )backupuidgidallow_empty_content permissionsdir_fdr r c t |t r| }|'|rt d t | |||||| S t t 5 t | d 5 }| t | dz } ddd n # 1 swxY w Y | |k r ddd dS ddd n # 1 swxY w Y |s |s t d|| dS |rt |t t j
f r|}
n t j | t z }
t t 5 t! j | |
ddd n # 1 swxY w Y |k t% j t j | j }n># t $ r1 t j d } t j | d | z }Y nw xY wt j | \ } }
t1 | st
d
| t5 5 }t7 d | d |
d
z dd 5 fd}| | | |*|(t j || t j! | t j" ddd n # 1 swxY w Y t j# j$ | |% ddd n # 1 swxY w Y dS )a Atomically rewrites *filename* with given *data*.
If *filename*'s content is *data* already, do nothing.
If both *uid* and *gid* are given then resulting file is chowned
to given user id and group id.
Skip rewrite with empty content if *allow_empty_content* is False.
Chmod to given access *permissions* else preserve *filename* 's
permissions.
Return True if *filename* file was updated, False otherwise
When *dir_fd* is provided it must be an O_NOFOLLOW-opened file
descriptor for the parent directory of *filename*. All file I/O is
then performed relative to that descriptor, closing the TOCTOU
symlink-attack window. *backup* is not supported with *dir_fd*.
Nz/backup is not supported when dir_fd is provided)r r r r r rbr Fz empty content: %r for file: %sr i zParent dir is missing: wbz .i360editr )modedirsuffixprefix bufferingdeletec t t 5 t j j d d d d S # 1 swxY w Y d S r )r
r osremovename)tfs r5 cleanupz atomic_rewrite..cleanup s /00 ' 'Ibg&&&' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 's =AAT)&rm rn encoderj r! r
r openreadlenr^ r r PathLikefspathBACKUP_EXTENSIONshutilcopystatS_IMODEst_modeumaskpathsplitr r9 r r callbackwriteflushchownfilenochmodfsyncrenamer pop_all)filenamedatar r r r r r file old_contentbackup_filename
current_umaskdirpathbasenamestackr r s @r5 atomic_rewriter s 6 $ {{}}
P NOO O 3#
# $ $
(D
!
! 3T ))CIIM22K 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 $ t 5tXFFFu
3 fsBK 0 1 1 E $OO i 1 14D DO
'
(
( 3 3 K/ 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 1 ,rwx'8'8'@AAKK 1 1 1 HQKKM H] # # # =.0KKK 1
h//GX == ! ! G E' E EFFF
c>
"
'
'
'
'
'
NN7 # # # HHTNNN HHJJJ3?c3/// HRYY[[+ . . . HRYY[[ ! ! !- " " " " " " " " " " " " " " ". "'8$$$
3 8 4s (C9&B+ C+B/ /C2B/ 3
CC CE<<F F
+F6 68G10G1M>0B=L9- M>9L= =M> L= 1M>>NNc t d S # t $ r Y d S w xY w)Nz/etc/system-release)r read_textrstripr r3 r4 r5 os_release_and_versionr! sP )**4466==??? tts 25
AAc | p
t }|r-t j d| }|r| d S nt t d|z )z3Return os version, if can't get it raise ValueErrorz\s*(\d+\.\d+\S*)(\s|$)r z!Can't discover os version from %r)r! researchgroup cache_clearrj )release_and_versionrvmatchs r5
os_versionr* st
8 6 8 8B - 3R88 ";;q>> ! " **,,,
82=
>
>>r4 c e Zd ZdZ ed Z ed Z ed ZdZe d Z
e de e e
f fd Ze dee fd Ze de fd
Ze de fd Ze d Ze d
Ze d Ze d Ze d Ze d Ze d Ze d Ze d ZdS )
OsReleaseInfoz/etc/os-release)debian)rhelfedoracentos)unknownNc t | j 5 }|D ]U} | d \ }}| d ||< F# t
$ r Y Rw xY w d d d n # 1 swxY w Y d|v r,t
|d |d< d S t
| dd f |d< d S )N="ID_LIKEIDlinux)r ETC_OS_RELEASEr r
r rj frozensetget)clsdict_flinekvs r5 dict_from_filez OsReleaseInfo.dict_from_file- s3
#$
%
%
;;==..s33DAq wws||E!HH! D
(y)9)?)?)A)A B BE) )%))D'*B*B)D E EE) s5 A;AA A;
A+(A;*A++A;;A?A?r_ c \ | j t }t j | j r| | nt j }|r|d r|d
d }|dk r d|d v rd}||d< d |d |d |d |d < |d
v r | j |d < n.|d v r | j
|d < n | j |d < nd
|d< | j |d < d
|d < || _ | j S )Nr redzRed Hat Enterprise Linuxr. r6 z
{} {} ({})r ra PRETTY_NAME)
cloudlinuxr0 r. r5 )ubuntur- r1 )r< dictr r r9 r8 rA distrolinux_distributionlowerr
r RHEL_FEDORA_CENTOSDEBIANUNKNOWN)r; r< dosids r5 to_dictzOsReleaseInfo.to_dict< sQ 9 $(FFEw~~c 011
5""5)))) -// 51 5 Q4::<<--//2Du}})Cqt)K)K %"&E$K+7+>+>!adAaD, ,E-( ???+.+Ai(( !555+.:i((+.;i(("+E$K'*{E)$+4E-( CIyr4 c 6 | d S )Nr5 rP r; s r5 id_likezOsReleaseInfo.id_like[ s {{}}Y''r4 c 6 | d S )NrD rR rS s r5 pretty_namezOsReleaseInfo.pretty_name_ s {{}}]++r4 c R | dd S )zi
:return: OS name, like centos, ubuntu, debian, cloudlinux, redhat
in lower case
r6 r1 )rP r: rS s r5 get_oszOsReleaseInfo.get_osc s" {{}} y111r4 c 2 | dk S )Nr. rX rS s r5 is_rhelzOsReleaseInfo.is_rhelk s zz||v%%r4 c 2 | dk S )Nr0 rZ rS s r5 is_centoszOsReleaseInfo.is_centoso zz||x''r4 c 2 | dk S )NrF rZ rS s r5 is_ubuntuzOsReleaseInfo.is_ubuntus r^ r4 c . | dv S )N)rE cloudlinuxserverrZ rS s r5
is_cloudlinuxzOsReleaseInfo.is_cloudlinuxw s zz|| AAAr4 c J t j t S r )r r r9 _CL_SOLO_EDITION_FILErS s r5 is_cloudlinux_soloz OsReleaseInfo.is_cloudlinux_solo{ s w~~ 3444r4 c 2 | dk S )Nr- rZ rS s r5 is_debianzOsReleaseInfo.is_debian r^ r4 c 2 | dk S )NolrZ rS s r5 is_oracle_linuxz OsReleaseInfo.is_oracle_linux s zz||t##r4 c 2 | dk S )N almalinuxrZ rS s r5 is_almalinuxzOsReleaseInfo.is_almalinux s zz||{**r4 c 2 | dk S )NrockyrZ rS s r5
is_rockylinuxzOsReleaseInfo.is_rockylinux s zz||w&&r4 ) r, r- r. r8 r9 rL rK rM r< classmethodrA r rn r rP r rT rV rX r[ r] r` rc rf rh rk rn rq r3 r4 r5 r, r, % s &N
Y{
#
#F"#?@@i %%G E F F [ F S#X [ < ( # ( ( ( [( ,C , , , [, 2s 2 2 2 [2 & & [& ( ( [( ( ( [( B B [B 5 5 [5 ( ( [( $ $ [$ + + [+ ' ' [' ' 'r4 r, r chunksizec 0 t | || d S )zReturn hash of the file `filename`, reading it in chunks.
* filename is a path to a file;
* hash_func is a function that returns hash object (one of hashlib.md5
etc);
* chunksize is a size of chunks to read, in bytes.
r )file_hash_and_size)r hash_funcrt s r5 file_hashrx s h 9 = =a @@r4 c | }d}t | d 5 } | | }|sn(| | |t | z
}@ ddd n # 1 swxY w Y | |fS )a Calculate hash and size of the file `filename`, reading it in chunks.
* filename is a path to a file;
* hash_func is a function that returns hash object (one of hashlib.md5
etc);
* chunksize is a size of chunks to read, in bytes.
Return tuple(hash, file size).r r TN)r r updater hexdigest)r rw rt hash_sizer= chunks r5 rv rv s
IKKE D
h FF9%%E
LL CJJ D ?? d ""s AA,,A03A0c | \ }}| |k r&t dj di t |S )z0Given login.defs line, return *varname*'s value.z"Expected {varname!r}, got {name!r}r3 )r
rj r vars)varname defs_liner values r5 _parse_name_valuer sJ //##KD%$D=DNNtvvNNOOO Lr4 c H t dk rt \ a } t S )Nr' )_MIN_UID_get_max_min_uid)r s r5 get_min_uidr s 2~~&(( ! Or4 /etc/login.defsc h d\ }} t | 5 }|D ]f}| d r t t d| }| d r t t d| }g ddd n # 1 swxY w Y n# t t
f$ r Y nw xY w||fS )zGet UID_MIN, UID_MAX from the login.defs file specified as *path*.
On error, return default for the current OS values.
)i i` UID_MINUID_MAXN)r
startswithintr r rj )r uid_minuid_maxr r> s r5 r r s( #GW
$ZZ F4
F
F??9-- F !"3It"D"D E EG??9-- F !"3It"D"D E EG
F F F F F F F F F F F F F F F F
Z
G s5 B A*B
B
BB BB B-,B-zimunify360-captchazimunify360-webshieldc l t \ fdt j D S )z~
:param excludes: users to exclude in results
:return: list: list of pwd.struct_passwd objects representing users
c P g | ]"}|j cxk rk n n |j v |#S r3 pw_uidpw_name).0entryexcludesr r s r5
z(get_non_system_users.. sS el - - - -g - - - - -%-x2O2O 2O2O2Or4 r pwdgetpwall)r r r s `@@r5 get_non_system_usersr sR ())GW \^^ r4 c d t \ } fdt j D S )z;
:return: list: list of str with system user names
c 4 g | ]}|j k
|j S r3 r )r r r s r5 r z)get_system_user_names.. s. W 5L5L
5L5L5Lr4 r )r r s @r5 get_system_user_namesr sE "##JGQ #&<>> r4 r c 0 t \ }}| |k S r )r )r r r s r5 is_system_userr s '))GW =r4 d )r6 typedc t | d 5 }| dd }|dk rF| |dz
| d dk r| d | | | d s| d d d d d S # 1 swxY w Y d S )Nzr+r ra r
r seekr r endswithr r r=
last_char_poss r5 append_with_newliner s
h
q!
A
FF=1$ % % %vvayyD
}}T""
GGDMMM
B"C CCr c t | d 5 }| dd }|dk rF| |dz
| d dk r| d | | | d s| d ddd dS # 1 swxY w Y dS )z>Append *data* to *filename* making sure there is
at the end.zr+br ra r
Nr r s r5 append_with_newline_bytesr s
h
! q!
A
FF=1$ % % %vvayyE!!
}}U##
GGENNN
r c d}t | d 5 }t fd|D sd}ddd n # 1 swxY w Y |rt | |S )zAdd *line* to *filename* if it is not present in the file
Returns:
True if the file was changed, False otherwise.
Frc 3 H K | ] }| k V d S r r r _liner> s r5 z&ensure_line_in_file..( 0 88U5;;==D(888888r4 TN)r anyr r r> changedr= s ` r5 ensure_line_in_filer s G
h 8888a88888 G ,Hd+++ N >AAr> c d}t | d 5 }t fd|D sd}ddd n # 1 swxY w Y |rt | |S )zAdd *line* to *filename* if it is not present in the file.
Returns:
True if the file was changed, False otherwise.
Fr c 3 H K | ] }| k V d S r r r s r5 r z,ensure_line_in_file_bytes..7 r r4 TN)r r r r s ` r5 ensure_line_in_file_bytesr / s G
h 8888a88888 G 2!(D111 Nr c t j | }t | d 5 }t d|d 5 }|D ]/}| |k r| | 0t j |j | d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )Nr wF)r r r ) r r dirnamer r r r r r )r r> basedirsfr r s r5 remove_line_from_filer > s5 gooh''G Xs% !???%CE E{{}}$$
"'8$$$% % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % %s6 B4A
B B4 B B4#B $B44B8;B8c , e Zd ZdZdZefdZd Zd ZdS )FileLockz`
Simple context manager to enable
UNIX-specific file locking with flock system call
r c Z || _ d| _ t |d | _ || _ d S )NFr )r lockedr r r )r r r s r5 r zFileLock.__init__R s* sOO r4 c K t j } t | j t t z d| _ | S # t t f$ r}|j t j k r | j
t j |z
k r&t d| j
Y d }~d S t j d d {V Y d }~nd }~ww xY w)NTz)Failed to lock file %s. Timeout exceeded.r )r> r r r
r r r IOErrorerrnoEAGAINr r^ r r ro r )r rD exs r5
__aenter__zFileLock.__aenter__X s '
'di7!2333 " W%
'
'
'8u|++ \DIKK%$777NNCTY EEEEE mA&&&&&&&&&&&&&&
' 's *A CAC/CCc K | j rt | j t d| _ | j d S r )r r r r close)r exc_typeexc_valexc_tbs r5 __aexit__zFileLock.__aexit__p sC ; & $)W % % % r4 N)r, r- r. r\ _TIMEOUTr r r r3 r4 r5 r r J sZ
H%- ' ' '0 r4 r c | g}| fdt | D t j }| d | dd | S # t t f$ r%}t d| Y d }~nd }~ww xY wd S )Nc 3 D K | ]\ }}|v t | V d S r )rn )r fieldr fieldss r5 r z user_identity.. s?
u
JJ
r4 r utf8surrogateescapez9Generation of user identity hash failed, invalid data: %s)
extendsorteditemshashlibsha1rz joinr r{ rj UnicodeEncodeErrorr^ r ) attackers_ipsourcer uid_datahash_alges ` r5
user_identityr z s
!>
&v||~~ 6 6
<>>))009JKKLLL!!### * +
G
4s B%B) )C :CC c 0 t j dk S )Nr )r getuidr3 r4 r5 is_root_userr s
9;;! r4 maskc # K t j | } d V t j | d S # t j | w xY wr )r r )r current_masks r5 run_with_umaskr sM 8D>>L
s 2 Ar usernamec ~ t | t st d| z t j | v rt d t j | }n0# t $ r# t d | w xY wt j
|j | }t | S )z
Returns user's home dir if `relpath` is not specified.
Otherwise, returns absolute path of `relpath`
build from `username`'s home dir
:raise ValueError: when user home dir is not exists
z#Invalid type for %s, should be str!zInvalid usernamezUser {!r} doesn't exist)
rm rn rj r sepr getpwnamKeyErrorr r r pw_dirr )r relpathpwabs_paths r5 get_abspath_from_user_dirr s h $ $ K>IJJJ v+,,,E
\(
#
# E E E299(CCDDDEw||BIw//H >>s A -Br c d} t | }t | | d}n># t $ r1}t t
| Y d }~nd }~ww xY w|S )NFT)r r relative_torj r^ r rn )r r status user_homer s r5 does_path_belong_to_userr s
F -h77 T
y))) s1vv Ms 38
A3'A..A3c t j | st d| z t j | rg t j t j | j j S # t $ r) t t j | j cY S w xY wt j | } )NzPath %s should be absolute!)
r r abspathrj r9 r getpwuidr st_uidr r rn r r s r5 get_path_ownerr s
7??4 ?6=>>>%
7>>$ 1
1|BGDMM$899AA
1
1
1274==/00000
1wt$$
%s /B 0B65B6 iterable
chunk_sizec # K t | }t t || }|r%|V t t || }|#dS dS )a
Generator that splits iterable on N-parts by chunk_size items in each chunk
>>> list(split_for_chunk([0, 1, 2, 3, 4, 5, 6, 7, 8, 9], chunk_size=2))
[[0, 1], [2, 3], [4, 5], [6, 7], [8, 9]]
:param iterable:
:param int chunk_size:
:return: generator:
N)iterrq r )r r
ipieces r5 split_for_chunkr sp
XA :&& ' 'E
, VAz**++ , , , , ,r4 c t | t r+t d | D S t | t rt d | D S | S )Nc 3 > K | ]\ }}|t | fV d S r freeze)r keyr s r5 r zfreeze.. s1 JJ*#u#ve}}-JJJJJJr4 c 3 4 K | ]}t | V d S r r )r r s r5 r zfreeze.. s( 22uVE]]222222r4 )rm rG r9 r rq rr )rN s r5 r r sm !T 3JJ JJJJJJ At 322222222 Hr4 c & e Zd ZdZi Z fdZ xZS ) Singletonzc
Metaclass for creating only one instance of class, when providing
the same arguments.
c | t | t | f}| j | s( t t | j |i || j |< | j | S r )r
_instancesr: superr r )r; rM rN r __class__s r5 r zSingleton.__call__ sr F4LL&..1~!!#&& "@% 3"7"7"@# # #CN3 ~c""r4 )r, r- r. r\ r r
__classcell__)r s @r5 r r sI
J# # # # # # # # #r4 r c t j dd 5 } | cddd S # 1 swxY w Y dS )z3
:return str: server's external IP address
zhttps://api.ipify.orgra r N)urllibrequesturlopenr r )r s r5 get_external_ipr! s
7 C C !qvvxx ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !s &AA Ac < d}| | | }t j | st d|d| t |d 5 }| }ddd n # 1 swxY w Y |S )z
Reads parameter of kernel module
from /sys/module/{module_name}/parameters/{parameter}
:return str: value of the parameter
z(/sys/module/{mod}/parameters/{parameter})mod parameterzCannot find parameter z for module r N)r r r r9 rj r r r ) module_namer$
_MOD_PAR_PATH
param_filepr s r5 get_kernel_module_parameterr) s ?M %%+%KKJ
7>>* % %
j8A ;; O
j# !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! Ls 'BBBc d}| D ][\ }}t |t r%|| vs|s|| |< d}(t | | | }?|| vs|sJ | d| || |< d}\|S )zPerforms deep update of dict dst with values from src.
Does not overwrite subdicts in dst blindly with new dicts in src, but does
a deep update of (sub)dict content recursivelyFTz already exists in )r rm rG dict_deep_update)dstsrcallow_overwriteupdatedr? r@ s r5 r+ r+ s G 1 a ||1|A *3q6155 ---- /CFGG Nr4 c 8 e Zd Zd
dZd Zd Zd ZdedefdZd S )
TimedCacher c t |t sJ || _ || _ t | _ i | _ d S r )rm r
expirationr6 r cache_locks)r r3 r6 s r5 r zTimedCache.__init__) s< *i00000$ ]]
r4 c t }| j D ]J}| j | \ }}t j |z
| j k r||f||< K|| _ dS )z Clear cache from expired valuesN)r r4 r> r3
total_seconds)r tmp_cacher r added_ats r5 _collectzTimedCache._collect0 sh MM : 1 1C "joOE8 h&$/*G*G*I*III!& #
r4 c : t | _ i | _ d S r )r r4 r5 r s r5 r& zTimedCache.cache_clear9 s ]]
r4 c |}|r3t | }|t | z
}t | S )z
Generate key from call arguments
:param args: call positional args
:param kwargs: call keyword args
:return:
)r r rr hash)r rM rN seedkws r5 _make_keyzTimedCache._make_key= sB ''B E"II DDzzr4 funcr_ c t fd }t fd }t j r|n|} j |_ |S )a
Use it to cache calls to decorated function
@TimedCache(expiration=timedelta(minutes=10))
async def func(*args, **kwargs):
pass
:param func: decorated function
:return:
NOTE: is not thread safe.
c h K | | }j | }| t j x}j |< t j | j d {V nP# t j $ r= |j | u r t j x}j |< n
j | }Y nw xY w
j | \ }}ns# t $ rf t j j k rj d | i | d {V }|t! j fj |< Y nw xY w| n# | w xY w|S )NTFlast)rA r5 r: ro r r acquirer3 r7 TimeoutErrorr: r4 r r r6 popitemr> release)rM rN r lockr r rB r s r5
wrapper_asyncz*TimedCache.__call__..wrapper_asyncW s ..v..C;??3''D|*1,..8t{3'
00!* (E(E(G(G + 0 0 0 t{3 ///29,..@t{3 / / #{3 / 0
0
: $
3IFAA : : :4:$,66
***666#'4#8#8#8 8 8 8 8 8 8F&,dikk&9DJsOOO : MsE AB A C&%C&+F D F A-F>F FF F/c Z | | } j | \ }}nm# t $ r` t j j k rj d | i |}|t j fj |< Y nw xY w|S )NFrE )r: rA r4 r r r6 rI r> )rM rN r r r rB r s r5 wrapper_syncz)TimedCache.__call__..wrapper_syncz s MMOOO..v..C
6 JsO
6
6
6tz??dl22J&&E&222 t.v.."($)++"5
3
6
Ms > A'B('B()r ro iscoroutinefunctionr& )r rB rL rN rP s `` r5 r zTimedCache.__call__J s
t
D
t
*400
MM
# .r4 N)r ) r, r- r. r r: r& rA r" r r3 r4 r5 r1 r1 ( s CQ C1 C C C C C Cr4 r1 r c K | r<| s& | n# t $ r Y nw xY wdS | t j | h| d{V \ }}|rL| s| nd}|r t d| | dS dS | s t d| | dS dS )u Cancel *task* and wait up to *timeout* seconds for it to finish.
Unlike the common ``task.cancel(); suppress(CancelledError); await task``
pattern, this function **always returns** within *timeout* seconds —
even if the task catches ``CancelledError`` and continues running
(see DEF-40570 / CPython #103486).
Uses ``asyncio.wait`` (not ``wait_for``) because ``wait_for`` also
hangs when the inner task survives cancellation.
Nr z&Task %r raised during cancellation: %sz.Task %r did not finish within %ds after cancel)
done cancelledr r cancelro rx r r^ r )taskr rR r r s r5 safe_cancel_taskrV s: yy{{ ~~
KKMMML$999999999GD!
&*nn&6&6@dnn D P NNCT3 O O O O O P P
YY[[
s r5 _has_no_new_privsrn s
%
&
& 2!
2
2??=11 2 ::<<?c111 2 2 2 2 2 2 2 22
2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
5s@ A1 9A%
A1 A% A1 %A))A1 ,A)-A1 1
A>=A>)z systemd-runz--quietz--waitz--pipez --collectz --property=NoNewPrivileges=noz--property=ProtectSystem=noc ` | sdS t d | D S )Nr3 c 3 , K | ]\ }}d | d| V dS )z --setenv=r3 Nr3 )r r? r@ s r5 r z+_systemd_run_setenv_args.. s7 ==A$Q$$$$======r4 )rr r envs r5 _systemd_run_setenv_argsrs s4 r ===== = ==r4 r c t s| S t t | z dd| fz }d d |D S )zWrap a shell command so it runs as a transient systemd unit
outside the agent's NoNewPrivileges= sandbox. Returns the original
command unchanged when this process is not under NNP.z/bin/shz-c c 3 > K | ]}t j | V d S r )shlexquote)r r( s r5 r z._wrap_outside_sandbox_shell.. s* 22qEKNN222222r4 )rn _SYSTEMD_RUN_BASErs r )r rr partss r5 _wrap_outside_sandbox_shellr{ sa
"3
'
' ( dC
!
8822E222 2 22r4 c t st | S t t t | z dz t | z S )z5Argv-form counterpart of _wrap_outside_sandbox_shell.)z--)rn rq ry rs rr )argvrr s r5 _wrap_outside_sandbox_argvr~ sY Dzz
"3
'
' (
++ r4 rq c L K t t | | |fi | d{V S )u run_cmd_and_log variant that escapes the agent's systemd sandbox.
Use for shell commands whose RPM/apt scriptlets perform LSM domain
transitions on exec (e.g. kernelcare install, hardened-php
groupinstall) — see the module-level NNP note above.
rq N)rk r{ )r rf rr rg s r5 run_cmd_and_log_outside_sandboxr ( sZ !#CS111 r4 c J K t t | | fi | d{V S )z7run() variant that escapes the agent's systemd sandbox.rq N)r r~ r} rr rN s r5 run_outside_sandboxr 8 s< /#>>>II&II I I I I I IIr4 c J K t t | | fi | d{V S )z=check_run() variant that escapes the agent's systemd sandbox.rq N)r r~ r s r5 check_run_outside_sandboxr = s< 5dDDDOOOO O O O O O OOr4 c e Zd Zd ZdS )r c ` | j dk r7| j r0| dd}| j r
| j |d< | j | t j | d S # t $ r t | j dd pt | j dd }t | j dd pt | j dd }t | j d d pt | j d
d }|j
}|r|j p|j }t d || j || Y d S w xY w) NPENDINGz%Task was destroyed but it is pending!)rU messagesource_tracebackr. r, gi_codecr_codegi_framecr_framez+!> Finalizer error in {}() {} at {} line {})_state_log_destroy_pending_source_traceback_loopcall_exception_handlerr __del__AttributeErrorgetattr_coro co_filenamef_linenoco_firstlinenoprintr )r contextr r framer linenos r5 r z Task.__del__E s{ ;) # #(A # B G %
E.2.D*+ J - -g 6 6 6 N4 4:~t<<
JA AD 4:y$77 7
It< <D DJ
D99 W
J> >E 'H.F43FF =DD$+x
s A CD-,D-N)r, r- r. r r3 r4 r5 r r D s# r4 r c fd}|S )zReturn async callback which waits for *seconds*.
Usage:
@retry_on(Error, on_error=await_for(seconds=PAUSE_INTERVAL), timeout=T)
async def coro():
'here's something that may raise Error.'
c < K t j d {V S r )ro r )rM rb s r5 pausezawait_for..pauseo s) ]7+++++++++r4 r3 )rb r s ` r5 rv rv e s# , , , , , Lr4 c j t g st d fd}|S )a
Retry the function call on exception (or exceptions,
if given in tuple) at most *max_tries*.
Await *on_error* (if set) for each exception.
If *timeout* is set, stop all attempts in *timeout* seconds.
If *silent* is set to True - don't raise exceptions after max
If *should_retry* is set - await it and on False, stop auto-retry cycle
tries or timeout.
z Set any of max_tries, timeoutc t j fd }t j fd }t j r|S |S )Nc ~ K rt j z }
st j d nt d
dz D ]} rg|t j z
}|dk r$t j | i || d {V c S
s t
j r d n | i | d {V c S }# t
j t
j f$ r $ rX} || d {V }|s
}|
k r
s r d| || d {V Y d }~d }~ww xY wd S )Nr r r Timeout exceeded when calling %s0Max tries exceeded when calling %s with error %s)
r> r? itertoolscountr ro r rH r r rM rN end_timer
remaining_timer should_retry_retr rB rC rc rd should_retrysilentr s r5 rL z2retry_on..decorator..wrapper_async s,
6 >++g5 !- """1i!m,,(
/ (
/
#/ ;)1DN4D4D)D)A--)0)9 $d 5f 5 5~* * * $ $ $ $ $ $ $* "&-&: :!$ " # $F!" !" !" &*T4%:6%:%: : : : : : :::: ,g.DE / / /#/1= c11E1E+E+E+E+E+E+E( / * )AI~~ % ! II!, $ # + &hsA . ........#//(
/ (
/s ?C
4C D:"AD55D:c rt j z }
st j d nt d
dz D ]} rH|t j z
}|dk r
| i |c S
st
r d n
| i |c S X# $ rL} || }|s
}|
k r
s r d| || Y d }~d }~ww xY wd S )Nr r r r )r> r? r r r rH r r s r5 rN z1retry_on..decorator..wrapper_sync s
6 >++g5 !- """1i!m,,$
) $
)
) 5)1DN4D4D)D)A--#'4#8#8#8 8 8 8#) "&2 2!$ " # $F!" !" !" $tT 4V 4 4444 ) ) )#/+7<Q+?+?( / * )AI~~ % ! II!, $ # + a(((#)'$
) $
)s %B.)BC, AC''C,rR r ro rO )
rB rL rN r rC rc rd r r r s
` r5 rT zretry_on..decorator s + / + / + / + / + / + / + / + / + / + / + /
+ /Z
' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' )
' )R &t , , r4 )r rj )r rd rc r r rC r rT s ``````` r5 rt rt u sz $ 7# $ $ :8999\ \ \ \ \ \ \ \ \ \ \ | r4 c t j fd }t j fd }t j r|n|S )zhIf func throws an exception it is catched, converted to a string and
returned as a result of a call.c r K | i | d {V S # t $ r}t | cY d }~S d }~ww xY wr r reprrM rN r rB s r5 rL z,stub_unexpected_error..wrapper_async sg t.v........ . 77NNNNNN s
6166c b | i |S # t $ r}t | cY d }~S d }~ww xY wr r r s r5 rN z+stub_unexpected_error..wrapper_sync sQ 4((( ( 77NNNNNN s
.)..r )rB rL rN s ` r5 stub_unexpected_errorr s _T _T $ 7 = = O==<Or4 c 2 t j fd}|S )zkA decorator that logs uncaught exceptions ignoring them otherwise.
CancelledError is not handled.
Nc t j fd }t j fd }t j r|S |S )Nc K | i | d {V S # t j $ r $ r'} dt dd | Y d }~d S d }~ww xY wNz Ignoring exception from %s: %sr. r )ro r r rM rN r r r log_handlers r5 rL z>log_error_and_ignore..decorator..wrapper_async s
!T4 26 2 22222222)
4D.&99
s
A A Ac t | i |S # $ r'} dt dd | Y d }~d S d }~ww xY wr )r r s r5 rN z=log_error_and_ignore..decorator..wrapper_sync s
tT,V,,,
4D.&99
s 7 27r )r rL rN r r s ` r5 rT z'log_error_and_ignore..decorator s
&t , , r4 )r^ r )r r rT s `` r5 log_error_and_ignorer s9
l < r4 c fd}|S )z'Abort the agent service on *exception*.c L t j fd }|S )Nc K | i | d {V S # $ r/}t | Y d }~d S d }~ww xY wr )r^ r )rM rN r abortr r s r5 rP z2abort_agent_on..decorator..wrapper- s
!T4 26 2 22222222
###
s
A$AArQ )r rP r r s ` r5 rT z!abort_agent_on..decorator, sC
r4 r3 )r r rT s `` r5 abort_agent_onr ) s* r4 c R t j dd| S )zPascalCase to snake_casez([a-z])([A-Z])z\1_\2)r# subrJ )strings r5
snake_caser < s#
6"Hf 5 5 ; ; = ==r4 )exec_expr_with_empty_iterc ' K |s|rdg}nt |t }ddlm} |j 5 |D ]} | |g|R E d{V ddd dS # 1 swxY w Y dS )a]
Get iterator over results of sql expression expr. Given iterable will be
split for chunks and we will return iterator containing results of all
split queries. Useful for sql selects with in_() in order to avoid
too many sql variables error.
If exec_expr_with_empty_iter is True and iterable is None(empty) we will
process expression once, passing here chunk=None expr(None, *args)
:param expr:
:param iterable:
:param exec_expr_with_empty_iter: if iterable is None(empty) process
given expression once, passing here chunk=None expr(None, *args)
:return:
Nr
r instance)r CHUNK_SIZE_SQL_QUERYdefence360agent.modelr db transaction)exprr r rM chunksr r~ s r5 get_results_iterable_expressionr D s & L1 L 6JKKK...... " " * * * *EtE)D))) ) ) ) ) ) ) ) ) ** * * * * * * * * * * * * * * * * *s A##A'*A'r c d}ddl m} |j 5 t || D ] }| | |g|R z
}! ddd n # 1 swxY w Y |S )z
Get number of results of sql expression expr. Given iterable will be
split for chunks and we will return number of results of all
split queries. Useful for sql delete with in_() in order to avoid
too many sql variables error
r r r N)r r r r r execute)r r r
rM r r r~ s r5 execute_iterable_expressionr c s G...... " " 4 4$X*EEE 4 4E ttE)D)))1133 3GG 44 4 4 4 4 4 4 4 4 4 4 4 4 4 4 Ns 3A""A&)A&c X t j | dd dz S )Nr \nr )r fsencoder_ r s r5 encode_filenamer v s%
;t||D%00 1 1E 99r4 c b t j | d d dd S )Nr' r r )r fsdecoder_ r s r5 decode_filenamer z s+
;t SbS ! ) )% 6 66r4 c N t j t j | S r )base64 b64encoder r r s r5 base64_encode_filenamer ~ s BK - - . ..r4 b64namec h t t j t j | S r )r r r r b64decode)r s r5 base64_decode_filenamer s% F ,W 5 566 7 77r4 c V t j | }n# t $ r d}Y nw xY w|S )zS
Like pwd.getpwnam(username) but returns None instead of raising KeyError.
N)r r r )r r s r5 r r sA h'' Ms &&c > t t | | | S )zH
Put the specified `value` inside the [`low`, `high`] interval.
)maxmin)r lowhighs r5 clipr s s5$ % %%r4 Background task failedc | t j } | dS # t j $ r Y dS t
$ r} |d|| Y d}~dS d}~ww xY w)a[
Callback for asyncio.Future that logs exceptions and ignores CancelledError.
Use this as a done_callback for asyncio tasks/futures:
future.add_done_callback(log_future_errors)
Or with custom logging:
future.add_done_callback(
lambda f: log_future_errors(f, logger.warning, "Upload failed")
)
Nz%s: %s)r^ r r ro r r )futr r r s r5 log_future_errorsr s n *
!
* * * Hgq)))))))))*s & A A
AAr .c r fd} ||i | }| | |S )z
Use this function in plugin initialization instead of
loop.create_task to be able to see the exceptions from the specified
coroutine.
c | sA| / d| | d d S d S d S )Nz1Unhandled exception during plugin initialization!)r r rU )rS r r )rU r s r5 _log_exceptionz6create_task_and_log_exceptions.._log_exception sv ~~ DNN$4$4$@ ' ' L!% !1!1
$@$@r4 ) create_taskadd_done_callback)r r rM rN r new_tasks ` r5 create_task_and_log_exceptionsr sY
d 5f 5 566H ~... Or4 c fd}|S )a5
Create coroutine from regular function
Useful to pass functions to APIs requiring coroutines
Note: coroutine will still block event loop in main thread.
For most blocking functions, run_in_executor should be considered instead
:param function:
:return: coroutine running function
c K | i |S r r3 )rM rN functions r5 r zmake_coro..coro s x((((r4 r3 )r r s ` r5 make_coror s# ) ) ) ) ) Kr4 c K |t k r
t j }n t j } |dt | dd x}rd| dnd| | t j t d {V d S )Nz7Failed to copy data%s to modsec ruleset dir %r, try: %sr z ()r )COPY_TO_MODSEC_MAXTRIESr^ r r r ro r _MODSEC_COPY_FAILURE_TIMEOUT)r r
rC fns r5 log_failed_to_copy_to_modsecr s ###lnCA $S*d ; ;;rD
R
" -4
5
5555555555r4 ) err_buf_sizec
4 K d }t | }t j | dt j j t j j d| d{V } t j ||j | |j 2 3 d{V }|W V
6 | d{V }|dk r%t || dd
| dS # | d{V }|dk r%t || dd
| w xY w)z
Start *cmd*, yield its stdout line by line [b'
']
If *cmd* return nonzero exit status, raise CheckRunError with the
last *err_buf_size* lines from stderr.
c J K | 2 3 d {V }| | 6 d S r )append)pipebufr> s r5 read_pipe_intoz1readlines_from_cmd_output..read_pipe_into sL $ JJt $$s ")maxlenT)ri rg rh Nr r4 ) r ro rs r` rl r rh rg rx r r )r r rg r err_bufr} r> r s r5 readlines_from_cmd_outputr s <(((G/ !&!&
D I NN4; @ @AAA + $JJJJJ &+ 99;;&&&&&&
??
Cchhw6G6GHH H ? 99;;&&&&&&
??
Cchhw6G6GHH H H H H Hs *C :B C ADra )rc delayc K t d|dz D ]3} | | d{V }|s!||k rt j | d{V 0|c S dS )z
Retry *predicate_coro(*args)* until it becomes true,
but no more than *max_tries* attempts.
Sleep for *delay* seconds before the next *predicate_coro()* call.
Return whether the predicate became true.
r N)r ro r )predicate_cororc r rM attemptr s r5 finally_happenedr
s IM** %~t,,,,,,, 'I---&& & & & & & & &
r4 ' c K t | d D ]-\ }}|W V ||z dk rt j d d{V .dS )z6Yield to the event loop every *chunk_size* iterations.r )rD r N) enumeratero r )r r
r
items r5
nice_iteratorr so XQ/// # #4
Nq -"" " " " " " " "# #r4 c e Zd ZdZd Zd ZdS )LazyLocka
Descriptor object to share async Lock between client objects.
Used in order to achieve lazy evaluation of the lock and share state
between it's clients.
Using asyncio.Lock in client code directly:
>>> class Foo:
>>> lock = asyncio.Lock()
leads to an unclear error ([Errno 9] Bad file descriptor),
when trying to move this Lock during demonization process.
c d | _ d S r )r r< s r5 r zLazyLock.__init__6 s
r4 c N | j st j | _ | j S r )r ro r )r r owners r5 __get__zLazyLock.__get__9 s! z ( DJzr4 N)r, r- r. r\ r r r3 r4 r5 r r ' s< r4 r c | } | rd| v sd| vrdS | dd \ }}||fS )zOParse RPM output line, return (package_name, version) or None if not installed.z
not installed: Nr )r rJ r
)r> pkg_nameversions r5 _parse_rpm_liner# ? s[ ::< r! restr" s r5 _parse_dpkg_liner& H s ::<.wrapperv s\
7>>= > > +4
T4*6*********r4 r )rB rP s ` r5 check_disabled_firewallr. u s3
4[[+ + + + [+ Nr4 >
imunify-ui imunify-coreimunify-antivirusimunify360-firewallpackagesc K t \ }}t | }t ||z dd d{V }t ||| S )a
Retrieves the version of the specified system packages using
a command and regex specific to the current system.
Parameters:
packages (Iterable[str]): A set of package names to retrieve version for.
Returns:
A dictionary mapping package names
to their corresponding version strings, or None
if the package is not installed or version information
cannot be retrieved.
F)r r N)r) rq safe_run_with_timeout_parse_package_info_output)r3 r
parse_line
packages_listr s r5 system_packages_infor: st -..OCNNM( mR% F &fmZ H HHr4 r r8 c n fd| D fd|D S )Nc X i | ]&} | xd xd x#'S )r r r3 )r r> r8 pkgr vers r5
z._parse_package_info_output.. sf j&& &F 1I
S
1I
S S r4 c < i | ]}| | S r3 )r: )r r= parseds r5 r? z._parse_package_info_output.. s% 5 5 5SCC 5 5 5r4 )
splitlines)r r3 r8 rA r= r r> s `@@@@r5 r7 r7 sf
%%'' F 6 5 5 5H 5 5 55r4 c K t j t | fi || d {V S # t j $ r |d| Y dS w xY w)Nr z#Command %s failed: Timeout occurredr )ro r r rH )ry r rC rN s r5 r6 r6 s % W ' ' ' '
17;;;rrs &+ A
A
nc # K |dk rt d t | }t t || x}r%|V t t || x}#d S d S )Nr zn must be at least one)rj r rq r )r rD itbatchs r5 batchedrH s
1uu1222
h Br1
&&
&% r1
&&
&% r4 rN c # R K t | D ]} fd|D V d S )Nc " i | ] }|| S r3 r3 )r r? rN s r5 r? z batched_dict.. s &&&1q!A$&&&r4 )rH )rN rD rG s ` r5 batched_dictrK sK A ' '&&&&&&&&&&&' 'r4 c n t j ddgd } | d }|s?t d r t j ddgd }d|v rd}|S # t $ r&}t d | Y d }~d
S d }~ww xY w) Nhostnamez-fT)text)z.cloudwaysapps.comz.cloudwaysstagingapps.comz/usr/local/sbin/apminfo Cloudwaysz$Error while checking environment: %sF) rk check_outputr r r r9 r r^ r )rM
_is_cloudwaysr r s r5 is_cloudwaysrS s +
T
%'' !)) ?
%&;! urllib.requestr r collectionsr r collections.abcr r
contextlibr r r
datetimer enumr fcntlr
r r r r r pathlibr tempfiler typingr r r r r r r r async_lrurH rb _shutilr r fd_opsr! r" getLoggerr, r^ USER_IDENTITY_FIELDUSER_IDENTITY_HEADERSr r r8 re AV_PID_PATHIM360_NON_RESIDENT_PID_PATHIM360_RESIDENT_PID_PATHr environr: HTTP_REQUEST_RETRY_TIMEOUTr+ lru_cacher< rF rV rX rl bytesr r r r r r rn r r r r r r r r r boolr r r! r* r, md5rx rv r r r r r r partial
alru_cacheasync_lru_cacher r r r r r r r r r r r r r typer r! r) r+ r1 timed_cacherV r\ rk rn ry rs r{ r~ r r r r rv rt r r r r r r r r r r r r r r r r r r r r r r r rr r# r& rq r) r+ r. r9 IMUNIFY_PACKAGE_NAMESrG r: r7 r r6 rH rK rS rW rY r[ r3 r4 r5 r| s
* * * * * * * * / / / / / / / / : : : : : : : : : : 2 2 2 2 2 2 2 2 2 2 2 2 ' ' ' ' ' '
0 0 0 0 0 0 0 0 % % % % % % GCx 8 $ $ d011 6 d344 "d#B C C $ 899 SJNN:B??
+ + + + +D + + + Q K K K K 4T 4
0 0 3u 0 0 0 0 f 0
K2
(5
5
.;
'
'
'
'
' ,
+ + + + + + + +@ :?; ; ; ;F (, d d d
3J $ d
$Jd
d d d dN Q
?
?C
?
?
?
?h' h' h' h' h' h' h' h'X %[4
A
A
A58
A
A
A
A
A # ## # 38_ # # # #2 . <
$)#
5 T 5 T % % %- - - - - - - -` 0E 6 D &3 # $ % % %
,
,h
,C
,)
,
,
,
,
# # # # # # # #" R ! ! ! ! " 2e e e e e e e eP -.
>) ) ) Z Q 4 $ > > > 3 3S 3s 3 3 3 3 $
,0 J J J J J
26 P P P P P 7< B
$ s s s slP P P* $-$ & & & &R %7 &> > >
6; * * * * *@ '; &: : :7 7 7/ /% / / / /8E 8d 8 8 8 8 & & &* * * *.i ( 4
6 6 6 %( I I I
c I I I ID =>Q
# # # # 0 # %S/D"8 3 5c?T#9 " Q $s)XseU38_t%; ;<
<= .F F F F F F F F " IsmI #sTz/I I I I, 6 63i 6 #c3h$ 667 6
#sTz/ 6 6 6 6 !, 'DcN 's ' ' ' '
Q ( T c
t
& & & & &r4