h > d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZmZmZ dd lmZmZmZ dd
lmZ dd lmZ dd l m Z m Z dd
l m Z ej! e" Z# G d d Z$ G d dee Z% G d de Z&dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) defaultdict)Hashable)suppress)
inactivity) MessageType) MessageSink
MessageSourceexpect)batched
nice_iteratorrecurring_check)VulnerabilityHitStatus)VulnerabilityHit) PatchResultVulnerabilityPatcher) PatchStoragec L e Zd Zd ZdedefdZdeeef fdZde fdZ
dS )
PatchQueuec 8 t t | _ d S N)r set_queueselfs b/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/plugins/patch_vulnerabilities.py__init__zPatchQueue.__init__3 s !#&& keyvaluesc 0 | j |xx |z cc< d S r )r )r r r s r putzPatchQueue.put6 s& CF"r returnc | j S # t $ r}t j |d }~ww xY wr )r popitemKeyErrorqueueEmpty)r excs r getzPatchQueue.get9 sH );&&(( ( ) ) )+--S ( )s
>9>c , t | j S r )boolr r s r emptyzPatchQueue.empty? s $$$$r N) __name__
__module__ __qualname__r r r r! tupler) r+ r, r r r r 2 s ' ' '#x # # # # #)U8S=) ) ) ) ) %t % % % % % %r r c e Zd Z fdZd Zd Zd Z eej de
fd Z d Z e
d d Z xZS )
Patchc t j |i | t | _ d | _ d | _ d | _ d | _ d S r )superr r r _loop_sink_patcher _patch_task)r argskwargs __class__s r r zPatch.__init__D sM $)&))) ll
r c
K d S r r1 r loops r create_sinkzPatch.create_sinkL r c K || _ || _ t || | _ | | | _ d S )N)r? sink)r6 r7 r r8 create_taskrecurring_patchr9 )r r? rC s r
create_sourcezPatch.create_sourceO sP
,$TBBB
++D,@,@,B,BCCr c K | j rZ| j t t j 5 | j d {V d d d d S # 1 swxY w Y d S d S r )r9 cancelr asyncioCancelledErrorr s r shutdownzPatch.shutdownU s ' # # % % %'011
'
'&&&&&&&&
'
'
'
'
'
'
'
'
'
'
'
'
'
'
'
'
'
' ' 's AA Amessagec K | d | d | dd f}| dg }| j |t | d S )Ncause initiatormanualFfilelist)r) r r! r )r rL sourcefiles_to_patchs r process_patch_taskzPatch.process_patch_task[ sw
KK KK $ $ KK% ( (
!Z44 N 3 344444r c K | j s| j \ \ }}}}t |d D ]g}t j d 5 t j g}|r | t j
t j
t j | t j | }t# j | d {V \ }} }
| rz| D ]w} | j t+ j d | j t" j t3 t5 j d {V x|
r t j d |
D t j |d } | D ]\ }
}t5 j }d |D }t j |t j | j ! |
| d {V \ }}}| j t+ j" ||tG j$ j% |||||
d {V d d d n # 1 swxY w Y i| j d S d S ) Ni' )npatch_vulnerabilitiesz*Failed to store the original from {} to {})rL timestampc g | ] }|j
S r1 orig_file.0hits r
z0Patch._patch_vulnerabilities.. s @ @ @sS] @ @ @r owner) attributec g | ] }|j
S r1 rZ r\ s r r_ z0Patch._patch_vulnerabilities.. s ? ? ?3 ? ? ?r )hitsresult
cleanup_idstartederrorrN rO r: )&r r, r) r r tracktaskr
VULNERABLEappendREVERTEDr selectwherer[ in_statusr store_allr7 process_messager VulnerabilityPatchFailedformatpathinttime delete_hitsgroup_by_attributeitems
set_statusPATCH_IN_PROGRESSr8 startVulnerabilityPatchuuiduuid4hex)r rN rO rP rS files_batchvulnerable_statusesrc succeededfailed not_existr^ user_hitsuserrf filesrd rg cmds r _patch_vulnerabilitiesz Patch._patch_vulnerabilitiese s +##%% < 9= 9J9J 6 &UIv &~ @ @ @ :
:
%**+BCC 9 9+A+L*M' +22 2 ; ,244::(266{CC(/334GHH D + 4T : ::::::: ! ! #) C"&*"<"< + D)117,/M<;L2* 2* /2$)++.>.>!" !" !"
#
#
! (4 @ @i @ @ @ !1 C!")! ! !I '0oo&7&7
d"&)++ ? ?$ ? ? ?(3 "8"J 48=3F3F %4 4 . . . . . .*s #j 8 8 ' :%)'-+/:<<+;(/&+&+*3%( I9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 +##%% < < < < < s 0H-J**J. 1J. c t K | j s | d {V d S d S r )r r, r r s r rE zPatch.recurring_patch sP { "" 0--// / / / / / / / / / 0 0r )r- r. r/ r r@ rF rK r
r VulnerabilityPatchTaskdictrT r r
rE
__classcell__)r< s @r r3 r3 C s
D D D ' ' ' VK .//5 5 5 5 0/5= = =~ _Q0 0 0 0 0 0 0r r3 c | e Zd Zd Ze ddee defd Z e e
j de fd Z
dS ) PatchResultProcessorc
K d S r r1 r> s r r@ z PatchResultProcessor.create_sink rA r Nrc rp c X t j | || | D ]}||_ ||_ d S r )r r{ rp
patched_at)rc rp r r^ s r _set_hit_statusz$PatchResultProcessor._set_hit_status sB #D&*=== ( (C CJ 'CNN ( (r rL c K |d }|d t j } fd|D } fd|D }g }t |d 2 3 d {V } | rD|j r| | P| | f6 |r t
j d |D g g } }|D ]G} | r| | 2| | H| |t j | || z x}
r"| |
t j d S d S )Nrc rd c g | ]}|v | S r1 r1 r] r^ rd s r r_ z=PatchResultProcessor.process_patch_result.. s :::SC6MMSMMMr c g | ]}|v| S r1 r1 r s r r_ z=PatchResultProcessor.process_patch_result.. s# @@@sc.?.?s.?.?.?r d )
chunk_sizec g | ] }|j
S r1 rZ r\ s r r_ z=PatchResultProcessor.process_patch_result.. s )M)M)MC#-)M)M)Mr )
rw r r orig_file_pathexistsrk r rx
is_patchedr r PATCHEDrj ) r rL rc now processed unprocessedr r^ patchedr unable_to_pathrd s @r process_patch_resultz)PatchResultProcessor.process_patch_result s '.v %h /ikk::::D::: @@@@d@@@ &ySAAA * * * * * * *# c{$$&&
*%,,.. * &&s++++ $$S))) B O ()M)M9)M)M)M N N N b # #Cc{%%''
#s####
c"""" W&<&DcJJJ (6 1 1> 6 A
s B<r )r- r. r/ r@ staticmethodlistr strr r
r r~ r r r1 r r r r s
>B( (#$(.1( ( ( \( VK *++ $ ,+ r r )'__doc__rI loggingrw r& r collectionsr collections.abcr
contextlibr defence360agent.apir "defence360agent.contracts.messagesr !defence360agent.contracts.pluginsr r r
defence360agent.utilsr r r
imav.malwarelib.configr imav.malwarelib.modelr 'imav.malwarelib.vulnerabilities.patcherr r 'imav.malwarelib.vulnerabilities.storager getLoggerr- loggerr r3 r r1 r r r s * # # # # # # $ $ $ $ $ $ * * * * * * : : : : : :
J I I I I I I I I I 9 9 9 9 9 9 2 2 2 2 2 2 A @ @ @ @ @ 8 $ $% % % % % % % %"d0 d0 d0 d0 d0K d0 d0 d0N- - - - -; - - - - -r