h 8 d Z ddlZddlZddlZddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ dd
lm Z ddl m Z ej e Z!e G d d Z" G d d Z#dde
e$ fdZ%dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)suppress)asdict dataclass)Path)ListOptional)UserType) MessageType)g) safe_fileops)Malware)VulnerabilityHitStatus)VulnerabilityHit hash_pathc e Zd ZU eed< eed< eed< ej Zeed< dZe ed< dZ
e ed< dZ eed < dZ eed
< dZ
e ed < dZe ed < dZe ed
< dZe ed< eZdS )
RestoreReportfilescan_idowner initiator
patched_at reverted_at hash_before_reverthash_after_revertmtime_before_revertmtime_after_revertsize_before_revertsize_after_revertN)__name__
__module__ __qualname__str__annotations__r ROOTr r floatr r r r r r r! r to_dict \/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/vulnerabilities/storage.pyr r * s
III
LLL JJJ ]Is"""JK s !#### """" """" !u!!!GGGr+ r c b e Zd ZU dZ eej Zeed< e ddedefd Z
e de de fd Z
e d
Ze d Ze d Ze d
edefd Ze ddee dee fd Ze dededefd Ze dedefd ZdS ) PatchStoragez>
Store files before patch and restore them by request
pathFsrcdstc ~ K t j t | t | dd|| d {V d S )NFT)
src_unlink
dst_overwritesafe_srcsafe_dst)r safe_mover% )r0 r1 r5 r6 s r, _copyzPatchStorage._copyC sf $ HH HH
r+ filenamereturnc t | S )zV
Get file name for vulnerabilities storage
:return: file name
r )clsr9 s r, storage_namezPatchStorage.storage_nameN s """r+ c F | j | |j z S N)r/ r= orig_file)r< hits r, get_hit_store_pathz PatchStorage.get_hit_store_pathV s x#**3=9999r+ c K |j }| | }| ||dd d {V d S )NFTr5 r6 )orig_file_pathrB r8 )r< rA r0 r1 s r, storezPatchStorage.storeZ sS $$S))iiS54i@@@@@@@@@@@r+ c 8 K | j s| j d t t t }}}|D ]} | | d {V | | 4# t $ r | | Y Ut t j f$ rH}t dt | | | | Y d }~d }~ww xY w|||fS )N z+Failed to store file before patch: %r -- %s)
r/ existsmkdirsetrF addFileNotFoundErrorOSErrorr UnsafeFileOperationloggerwarningr% )r< hits succeeded not_existfailedrA es r, store_allzPatchStorage.store_all` s2 x " HNN5 ! ! !'*uuceeSUUf9 C
iinn$$$$$$$
c""""$
#
#
#
c"""""\ =>
AHH
3
&)++s %0B D7D >DDrA c K t |j |j |j }| | }|j }t
t 5 | j |_
d d d n # 1 swxY w Y t
t 5 | }|j |_ |j |_
t j | }||_ d d d n # 1 swxY w Y | ||dd d {V t) j |_ t
t 5 | }|j |_ |j |_ t j | }||_ d d d n # 1 swxY w Y |S )NTFrD )r r@ scanid_iduserrB rE r rM statst_mtimer r st_sizer hashlibsha256
read_bytes hexdigestr r8 timer r r! r ) r< rA reportr0 r1 st_before hash_beforest_after
hash_afters r, restorezPatchStorage.restoreu s\ s}cmSXFF$$S))
'
(
( 4 4 #
3F 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 '
(
( 4 4
I)2);F &(1(9F %!. )9)9::DDFFK(3F % 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 iiS4%i@@@@@@@@@ !Y[[
'
(
( 2 2xxzzH(0(9F %'/'7F $ (8(899CCEEJ'1F $ 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
s8 A>>BB A,DD D+A,G##G'*G'NrR r c @ K t t }}|D ]} | | d {V }|rdt j d rP||_ t j t j | d {V |
| # t t j
f$ rH}t dt! | | |
| Y d }~d }~ww xY w||fS )Nsinkz Failed to restore file: %r -- %s)rK rh r getr rj process_messager
VulnerabilityPatchRevertr) rL rN r rO rP rQ r% )r< rR r rS rU rA rc rV s r, restore_allzPatchStorage.restore_all s@ EE3556 C
"{{3 / /////// aeFmm '0F$&00#
A3s88QOOO
3
& s BB;;D>DDkeepc t K | }|j |k r| dS dS )NTF)r[ r\ unlink)r< r/ ro sts r, _clearzPatchStorage._clear s7
YY[[
; KKMMM4ur+ c K | j dd d}| j D ]#}| || d{V r|dz
}$|S )zj
Clear storage
:param keep: keep files after specified timestamp
:return:
rH T)exist_okr N )r/ rJ iterdirrs )r< ro clearedr/ s r, clearzPatchStorage.clear sy ut,,,H$$&& DZZd++++++++
1 r+ )FFr? ) r" r# r$ __doc__r Config
PATCH_STORAGEr/ r& staticmethodr8 classmethodr% r= rB rF rW r r rh r r rn r( boolrs intry r* r+ r, r. r. < s f*++D$+++
D
\
#C #C # # # [# : : [: A A [A
, , [,( 0 ] [: FJ! !()!6>sm! ! ! [!( E d [ u [ r+ r. r c K t | | d {V \ }}t j |t j ||fS r? )r. rn r
set_statusr REVERTED)rR r rS rU s r, restore_hitsr sT * 6 6tY G GGGGGGGIv +A+JKKK f r+ r? )&rz r^ loggingrb
contextlibr dataclassesr r pathlibr typingr r defence360agent.contracts.configr "defence360agent.contracts.messagesr
&defence360agent.internals.global_scoper defence360agent.utilsr imav.contracts.configr
r{ imav.malwarelib.configr imav.malwarelib.modelr imav.malwarelib.utilsr getLoggerr" rP r r. r% r r* r+ r, r s * ) ) ) ) ) ) ) ) ! ! ! ! ! ! ! ! 5 5 5 5 5 5 : : : : : : 4 4 4 4 4 4 . . . . . . 3 3 3 3 3 3 9 9 9 9 9 9 2 2 2 2 2 2 + + + + + + 8 $ $ "A A A A A A A AH
r+