h/ L d Z ddlZddlZddlZddlmZmZ ddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZmZ dd
lmZmZm Z ddl m Z m Z m Z ddl!m"Z" ddl#m$Z$ ee% Z& G d de Z' G d de Z( G d de Z)dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)datetime timedelta) getLogger)Path)
inactivity) MessageType)Scope)g) BaseCleaner)persistent_state)
nice_iteratorsplit_for_chunk)MalwareHitStatusMalwareScanResourceTypeMalwareScanType)MalwareHistory
MalwareHit MalwareScan)
MalwareAction) realtime_avc e Zd Z ed Z ed Z ej de j
Z e dd Z
dS ) OutdatedScansCleaner days zmalware-scans-cleanerreturnNc @ K t t j | j z
}t j t
j |k }t d| d S )NzCleaned %s outdated scans) intr nowCLEANUP_LIMIT_DELTA timestampr deletewherestartedexecuteloggerinfo)clscleanup_time_limitdeleteds a/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/cleaners/outdated_scans.pycleanupz OutdatedScansCleaner.cleanup7 s
\^^c 5
5 @ @ B B
U;&);;
<
<
WYY
/99999 r N__name__
__module__ __qualname__r
total_secondsPERIODr! r register_lock_filer AV_IM360 LOCK_FILE classmethodr- r. r, r r 0 s
YA
,
,
.
.F#),,,3 3 I : : : [ : : :r. r c e Zd Z ed Z ed Z ej de j
Z e dd Z
dS ) OutdatedHistoryCleanerr r r zmalware-history-cleanerr Nc @ K t t j | j z
}t j t
j |k }t d| d S )Nz#Cleaned %s outdated malware history) r r r r! r" r r# r$ ctimer& r' r( )r) keep_time_thresholdr+ s r, r- z OutdatedHistoryCleaner.cleanupK s !
\^^c 5
5 @ @ B B
! # #
U>'*==
>
>
WYY
97CCCCCr. r/ r0 r: r. r, r< r< D s
YA
,
,
.
.F#),,,3 3!5> I D D D [ D D Dr. r< c 6 e Zd Z e ej d ed Z ej dd Z e
j e e j
Z ed ZdZed
d Zed Zd
S )OutdatedHitsCleaner'IMUNIFY360_OUTDATED_HITS_CHECK_INTERVALr r MALWARE_HITS_CLEANER_LOCK_FILEzmalware-hits-cleaner
)minutesi r Nc K g }g }t j t j t j k t j t j j k t j
dk t j
}t || j 2 3 d{V }t! |j } | j }|j |k rNt) j | j z
}t- j r||k r| |j # t2 $ r | |j Y t6 $ r%}t8 d| Y d}~d}~ww xY w6 |rt= || j D ]m} t8 dtA | tB j" # tI j% | tL j' d{V nt= || j D ]O}
tQ t j t j ) |
t j t j k t j
dk }t j* t j ) | + } tY j- |tL j' d{V t8 d| t] j/ d d{V QdS )
z Rescan irrelevant malware hitsT)
chunk_sizeNzCan't check file due to %sz Rescan %s outdated malware files)filestype)causez!Deleted %s not exist malware hitsr )0r selectr$ statusr FOUND
resource_typer FILEvalue maliciousorder_byr" ascr
CHUNK_SIZEr orig_filestatst_ctimetimeREALTIME_SCAN_THRESHOLDr should_be_runningappendFileNotFoundErroridOSErrorr' warningr r( lenr
sinkprocess_messager MalwareRescanFilesr RESCAN_OUTDATEDlistin_r# r& r not_existasynciosleep) r) to_rescannot_exist_hitshitshitorig_file_path
file_ctimerealtime_thresholdexcrH hits_to_deleter+ s r, _cleanupz OutdatedHitsCleaner._cleanupf s
U!%5%;;(,C,H,NN$,
Xj*..00
1
1
'tGGG B B B B B B B# !#- 0 0N
B + 0 0 2 2 ;
=:-- c&AA ' ( 9 ; ;8%(:::!(( 777$
.
.
. %%cf-----
B
B
B ;SAAAAAAAA
B# H& (s~NNN
>E
KKKf,, 2 #/*I . s~
# #N !##z}(( 8899z(,<,BBCCz+t344 D !##))*-*;*;D*A*ABBJJLL
)O ;
KK;W E E E -"" " " " " " " " "% # #s% 7F A2E$F, F5FFc K t j d 5 | d {V d d d d S # 1 swxY w Y d S )Nz malware hits relevance check)r tracktaskrs )r) s r, r- zOutdatedHitsCleaner.cleanup s
"
"#A
B
B ! !,,.. ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !s A
AAr/ )r1 r2 r3 r osgetenvr r4 r5 FILE_NAMEr r6 r r7 r8 rY rT r9 rs r- r: r. r, rA rA X s
S 5 I1 + + - -
F (*@ I 4 3Iu~NNI 'i 3 3 3 A A C CJ<# <# <# [<#| ! ! [! ! !r. rA )*__doc__rh rw rX r r loggingr pathlibr defence360agent.apir "defence360agent.contracts.messagesr !defence360agent.contracts.pluginsr &defence360agent.internals.global_scoper
defence360agent.mr_properr defence360agent.subsysr defence360agent.utilsr
r imav.malwarelib.configr r r imav.malwarelib.modelr r r imav.malwarelib.subsys.malwarer imav.subsysr r1 r' r r< rA r: r. r, r s * ( ( ( ( ( ( ( ( * * * * * * : : : : : : 3 3 3 3 3 3 4 4 4 4 4 4 1 1 1 1 1 1 3 3 3 3 3 3 @ @ @ @ @ @ @ @
J I I I I I I I I I 8 8 8 8 8 8 # # # # # # 8 : : : : :; : : :(D D D D D[ D D D(P! P! P! P! P!+ P! P! P! P! P!r.