hf T d Z ddlZddlZddlZddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZmZ ddlmZ dd lmZmZ dd
lmZmZ dd lmZ dd l m Z dd
l m Z ddl!m"Z" ddl#m$Z$ ej% e& Z'e G d d Z( G d d Z)ddede
e* fdZ+dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)suppress)asdict dataclass)Path)ListOptional)MalwareUserType)TheSink)antivirus_mode safe_fileops)MalwareHitStatusMalwareScanResourceType)
MalwareHit)
is_crontab)restore)
MalwareAction hash_pathc e Zd ZU eed< eed< eed< ej Zeed< dZe ed< dZ
e ed< dZ eed < dZ eed
< dZ
e ed < dZe ed < dZe ed
< dZe ed< eZdS )
RestoreReportfilescan_idowner initiator
cleaned_at reverted_at hash_before_reverthash_after_revertmtime_before_revertmtime_after_revertsize_before_revertsize_after_revertN)__name__
__module__ __qualname__str__annotations__r
ROOTr r floatr r r! r" r# r$ r% r to_dict T/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/cleanup/storage.pyr r . s
III
LLL JJJ ]Is"""JK s !#### """" """" !u!!!GGGr/ r c b e Zd ZU dZ eej Zeed< e ddedefd Z
e de de fd Z
e d
Ze d Ze d Ze d
edefd Ze ddee dee fd Ze dededefd Ze dedefd ZdS )CleanupStoragez@
Store files before cleanup and restore them by request
pathFsrcdstc ~ K t j t | t | dd|| d {V d S )NFT)
src_unlink
dst_overwritesafe_srcsafe_dst)r
safe_mover) )r4 r5 r9 r: s r0 _copyzCleanupStorage._copyG sf $ HH HH
r/ filenamereturnc t | S )zN
Get file name for cleanup storage
:return: file name
r )clsr= s r0 storage_namezCleanupStorage.storage_nameR s """r/ c F | j | |j z S N)r3 rA orig_file)r@ hits r0 get_hit_store_pathz!CleanupStorage.get_hit_store_pathZ s x#**3=9999r/ c K |j }| | }t | }| |||d d {V d S NT)r9 r: )orig_file_pathrF r r< )r@ rE r4 r5 r9 s r0 storezCleanupStorage.store^ s^ $$S)) c??iiS8diCCCCCCCCCCCr/ c K | j s| j d t t t }}}|D ]} | | d {V | | 4# t $ r | | Y Ut t j f$ rt}t dt | | | | t j |j |j |j d {V Y d }~d }~ww xY w|||fS )N z-Failed to store file before cleanup: %r -- %sr3
file_owner file_user)r3 existsmkdirsetrJ addFileNotFoundErrorOSErrorr
UnsafeFileOperationloggerwarningr) r cleanup_failed_storerD r user)r@ hits succeeded not_existfailedrE es r0 store_allzCleanupStorage.store_alle s x " HNN5 ! ! !'*uuceeSUUf9 C
iinn$$$$$$$
c""""$
#
#
#
c"""""\ =>
CHH
3#8 "y !h
&)++s %0B E 7E A*D;;E rE c K t |j |j |j }| | }|j }t
| }t t 5 | j
|_ d d d n # 1 swxY w Y t t 5 | }|j
|_ |j
|_ t j | }||_ d d d n # 1 swxY w Y | ||d| d {V t+ j |_ t t 5 | }|j
|_ |j
|_ t j | } | |_ d d d n # 1 swxY w Y |S rH )r rD scanid_idrZ rF rI r r rT statst_mtimer r" st_sizer$ hashlibsha256
read_bytes hexdigestr r< timer r# r% r! )
r@ rE reportr4 r5 r: st_before hash_beforest_after
hash_afters
r0 r zCleanupStorage.restore sg s}cmSXFF$$S)) c??
'
(
( 4 4 #
3F 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 '
(
( 4 4
I)2);F &(1(9F %!. )9)9::DDFFK(3F % 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 iiS4(iCCCCCCCCC !Y[[
'
(
( 2 2xxzzH(0(9F %'/'7F $ (8(899CCEEJ'1F $ 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
s8 " B
BB,A,D$$D(+D(:A,G22G69G6Nr[ r c ( K t t }}|D ]} | | d {V }t j |j |j |j || d {V | | b# t t j
f$ rt}t j |j |j |j d {V t
dt | | | | Y d }~d }~ww xY w||fS )N)r3 rN rO r rk rM z Failed to restore file: %r -- %s)rR r r cleanup_restored_originalrD r rZ rS rU r
rV cleanup_failed_restorerW rX r) )r@ r[ r r\ r^ rE rk r_ s r0 restore_allzCleanupStorage.restore_all sg EE3556 C
"{{3 / ///////#= "y !h '!
c""""\ =>
#: "y !h
A3s88QOOO
3
& s A BD
A*DD
keepc t K | }|j |k r| dS dS )NTF)rc rd unlink)r@ r3 rt sts r0 _clearzCleanupStorage._clear s7
YY[[
; KKMMM4ur/ c K | j dd d}| j D ]#}| || d{V r|dz
}$|S )zj
Clear storage
:param keep: keep files after specified timestamp
:return:
rL T)exist_okr N )r3 rQ iterdirrx )r@ rt clearedr3 s r0 clearzCleanupStorage.clear sy ut,,,H$$&& DZZd++++++++
1 r/ )FFrC ) r& r' r( __doc__r ConfigCLEANUP_STORAGEr3 r* staticmethodr< classmethodr) rA rF rJ r` r r r r r rs r, boolrx intr~ r. r/ r0 r2 r2 @ s f,--D$---
D
\
#C #C # # # [# : : [: D D [D , , [,6
} [ < @D! !
#!08
! ! ! [!6 E d [ u [ r/ r2 sinkr c K d | D }t || d {V \ }}t j |t j t j rt j | | d {V ||fS )Nc F g | ] }|j t j j k | S r. )
resource_typer FILEvalue).0rE s r0
z restore_hits.. s7 7 < B B B B B Br/ )
r2 rs r
set_statusr FOUNDr disabled mds_restore restore_hits)r[ r r file_hitsr\ r^ s r0 r r s I
- 8 8I N NNNNNNNIv)%5%;<<< 3&tT222222222 f r/ rC ),r rf loggingrj
contextlibr dataclassesr r pathlibr typingr r defence360agent.contracts.configr r r
"defence360agent.internals.the_sinkr defence360agent.utilsr r
imav.malwarelib.configr r imav.malwarelib.modelr imav.malwarelib.scan.crontabr imav.malwarelib.scan.mdsr r imav.malwarelib.subsys.malwarer imav.malwarelib.utilsr getLoggerr& rW r r2 r) r r. r/ r0 r s * ) ) ) ) ) ) ) ) ! ! ! ! ! ! ! ! H H H H H H H H 6 6 6 6 6 6 > > > > > > > > - , , , , , 3 3 3 3 3 3 ; ; ; ; ; ; 8 8 8 8 8 8 + + + + + + 8 $ $ "Q Q Q Q Q Q Q Qh
7
x}
r/