h R d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZmZmZ dd lmZ dd
l m Z ddl m Z ddl m!Z! dZ"dZ#dZ$ ej% e& Z' G d de( Z)e*Z+de*de+fdZ, e de*de+fd Z- e d de*fd Z.de*de
fdZ/de+fd Z0d e
de+dz fd Z1d e
d e+ddfd Z2 ed!d"# de*fd$ Z3e$fd%e4e*ef d&e5de4e*e4e*e5f f fd'Z6dS )(u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) defaultdict) lru_cache)islice)Path)Any) urlencode)IndependentAgentIDAPI) HostingPanel)async_lru_cachelog_error_and_ignore safe_fileops)IMUNIFY_PATCH_PURCHASE_URL)VulnerabilityAPI)VulnerabilityHitStatus)VulnerabilityHitz.imunify_patch_id
c e Zd ZdS )ImunifyPatchIdErrorN)__name__
__module__ __qualname__ T/opt/imunify360/venv/lib/python3.11/site-packages/imav/contracts/imunify_patch_id.pyr r 5 s Dr r usernamereturnc K t | d{V }t | x}r|S t }t || d{V |S )a Ensure the Imunify.Patch ID file exists for the given user.
This function checks if the Imunify.Patch ID file exists in the user's
home directory. If it does not exist, it generates a new ID, writes it
to the file, and returns the ID. If the file already exists, it reads
and returns the existing ID.
Args:
username (str): The username for which to ensure the ID file.
Returns:
ImunifyPatchUserId: The Imunify.Patch user ID.
N) _get_id_file
_read_id_file _generate_id_write_id_file)r id_file_ids r ensure_id_filer% < sq !********GG$$$s
..C
#
&
&&&&&&&& Jr c K t | 4 d {V t | d {V cd d d d {V S # 1 d {V swxY w Y d S N)get_lockr% r s r get_imunify_patch_idr* R s !! . . . . . . . .#H--------. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .s A
A
A
)maxsizec ( t j S r' )asyncioLockr) s r r( r( X s <>>r c K t j | }t |j t z }| s|j s9t d|j t d|j t j t | d{V n# t t f$ r.}t dt | t |d}~ww xY wnB# t $ r5}t d| t d| |d}~ww xY w|S )zEGet a file with Imunify.Patch user id and create it if does not existzNo such user homedir: Nz$Unable to put %s in user home dir %szNo such user: z
No such user )pwdgetpwnamr pw_dirIMUNIFY_PATCH_ID_FILEexistsparentloggererrorr r
touchstrPermissionErrorOSErrorKeyError)r user_pwdr# es r r r ] sx 1<))
x''*??~~ 1>((**
Fgn F FGGG)=W^==
1"(W 6666666666#W-
1
1
1 :)
*q0
1 1 E E E 0h00111!"<("<"<==1DE( Ns/ D 'C D)C==D
E0E Ec 2 t j j S )zGenerate Imunify.Patch id)uuiduuid4hexr r r r! r! y s :<< r r# c ` | d 5 }t | D ]?}|r;| d s&| x}r|c cddd S @ ddd n # 1 swxY w Y t
d| d dS )zQRead Imunify.Patch id from `id_file`.
If id is not found, return `None`.
r#Nz
Cannot parse z , file is corrupted or empty)openreversed readlines
startswithstripr6 warning)r# flineimunify_patch_ids r r r ~ s
c ,a Q[[]]++ , ,D
,DOOC 0 0
,'+zz||3# ,+++ , , , , , , , , ,, , , , , , , , , , , , , , , NNH7HHHIII 4s AB7BB B r$ c K d| d} t j t | | d{V dS # t t f$ r.}t
dt | t |d}~ww xY w)z$Write Imunify.Patch id to `id_file`.zI# DO NOT EDIT
# This file contains Imunify.Patch id unique to this user
Nz'Unable to write %s in user home dir: %s) r
write_textr9 r; r: r6 r7 r3 r )r# r$ textr> s r r" r" s )%c'llD99999999999 _ % ) ) ) 57La
"q( )s (4 A3)A..A3d < )r+ ttlc
K t j }t | d {V }t }| }| d {V | g t } fd| d {V D
t j t j
| k t j t j k z }
fd|D }t# t% j t j d |D d {V }t+ ||pd|| d d t. |t | t1 j |d d } t4 d | S )
Nc $ i | ] \ }}|v ||
S r r ).0domainpaths user_domainss r
z2get_imunify_patch_purchase_url.. s4 FE \ ! ! ! ! !r c g | ]=} D ]&\ }}|D ] }|j | | '>S r )items orig_filerI )rX hitrY doc_rootspathuser_domain_pathss r
z2get_imunify_patch_purchase_url.. s} !2!8!8!:!:
FI
= # #D ) ) r c 6 g | ]}| S r )as_dict)rX r` s r rd z2get_imunify_patch_purchase_url.. s ///3 ///r ,T) sort_keys)iaidimunify_patch_user_id server_ipr websitestotal_websitesvulnerable_domainsvulnerabilities?)r get_iaidr* r
get_server_ipget_domains_per_usergetlenget_domain_pathsr^ r selectwhereuserstatusr
VULNERABLEgroup_by_severityr get_detailsget_vulnerabilities_idsr joinPURCHASE_URL_MAX_WEBSITESjsondumpsr ) r rj rk
panel_managerrl rn hitsro rp url_argsrc r[ s @@r get_imunify_patch_purchase_urlr s3 ! ) + +D"6x"@"@ @ @ @ @ @ @ NNM ++--I'<<>>>>>>>>CC" L &&N $1$B$B$D$D D D D D D D K K M M " $ $ * * ( * "&<&G G I D
( * 4//$///
O %:%@b" .H/H.H!IJJ ,"%&8"9"9 #z/T J J J
H ) 5 58 5 55r rp limitc t d }t | | D ]:}|d }| dd }|dv r|| |xx dz
cc< ;t | S )Nc * t t S r' )r intr r r z#group_by_severity.. s S!1!1 r appseverityUNKNOWN)HIGHMEDIUMLOWr )r r valuesru dict)rp r resultitemapp_namer s r r} r} s 11
2
2F--//77 , ,;88J 22 ; ; ; 8 X & & &! + & & & <<r )7__doc__r- r loggingr0 r@ collectionsr functoolsr itertoolsr pathlibr typingr urllib.parser defence360agent.internals.iaidr +defence360agent.subsys.panels.hosting_panelr
defence360agent.utilsr r r
imav.contracts.configr !imav.malwarelib.api.vulnerabilityr imav.malwarelib.configr imav.malwarelib.modelr r3 r MAX_SEVERITY_COUNT getLoggerr r6 Exceptionr r9 ImunifyPatchUserIdr% r* r( r r! r r" r r r r} r r r r sU *
# # # # # # " " " " " " @ @ @ @ @ @ D D D D D D
= < < < < < > > > > > > 9 9 9 9 9 9 2 2 2 2 2 2+ 8 $ $ ) 3 += , . .1C . . . .
4s 8 (
4 $6$= )$ )-? )D ) ) ) )" "%%%76c 76 76 76 &%76x $
#s(^
#tCH~
r