K6h# B d Z ddlZddlZddlmZ ddlmZmZ ddlm Z ddl
m Z ddl m
Z
mZmZ ddlmZmZmZmZ dd lmZ dd
lmZmZmZ dd lm Z dd l m Z dd
l m Z ddl!m"Z"m#Z# ddl$m%Z% ddl&m'Z'm(Z(m)Z)m*Z* ej+ e, Z-dZ.dZ/de0fdZ1 G d de" Z2dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)PatchmanConfig)PATCHMAN_PACKAGEPATCHMAN_SERVICE_NAME)PatchmanCustomIntegration)
PatchmanError)
FeatureStatusPatchmanFeatureRealtimeFeature)DomainPathUser patchman_db)License)get_current_ipis_ipv4
is_private_ip)REALTIME_SERVICE_NAME)Core) MessageType)
RootEndpointsbind)
hosting_panel) check_runfinally_happened
OsReleaseInfo
os_versionzpatchman-clientz /usr/local/patchman/patchmandreturnc B t j t j z S N)r id_likeDEBIAN P/opt/imunify360/venv/lib/python3.11/site-packages/imav/patchman/rpc/endpoints.py is_debianr% 8 s " "]%9 99r# c e Zd ZdZ edd dd Z edd dd Zed Zed
Z d Z
dd
Z edd dd Z edd d Z
edd d Z edd d Z eddd d Z eddd d ZdS ) PatchmanEndpointsz/etc/patchman/license/keypatchmanusersFNc
j K |rt || }nt j }| d{V }t t
t t gt j d 5 }|D ]}|d }|d pd} |d }
|d pd} |d } |d
}
t j
|| |
| | |
}|d }|D ]C}|d
}t
j
|| }|d }|D ]}t j
|| Dd|j icddd S # 1 swxY w Y dS )as Writes the users and their domains to database.
Patchman go agent executes this endpoint to fill the database. In case
of custom integration it retrieves the user-defined parameters from
Patchman Portal and passes it here.
:param custom_integration: true if custom integration, false by default
:param integration_type: only for custom integration, file or script
:param metadata_path: only for custom integration, path to file or
script that represent metadata (File type 1 or Script 1 from
https://docs.imunify360.com/Patchman_custom_integration.pdf)
Nr) )
target_dirprefixusernameemail languageparentlevel suspended)namer. r0 r1 r2 r3 domainsdomain)r4 userpaths)r4 r6 path) r r HostingPanelpatchman_usersr r
r r r TMPDIRcreatedatabase)selfcustom_integrationintegration_type
metadata_pathhpr; db user_data user_namer. r0 r1 r2 r3 r7 r5 domain_data domain_namer6 r8 path_names r$ r) zPatchmanEndpoints.users? s & .*+;]KKBB +--B ! 0 0 2 2222222
64 T[
)
+
C
C %j 1 !'*0b$Z0"8,2!'* %k 2 {" %! '
$I.#* C CK"-h"7K #] $ G G GF ' 0E%* C C 6BBBBBC C BK(; ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) )s 1B*D((D,/D,registerc K t j | j }|j dd | d 5 }| | ddd dS # 1 swxY w Y dS )z~
Writes a key to Patchman's key file.
Patchman automatically checks for registration every 5 seconds.
T)parentsexist_okwN)pathlibr KEYFILEr1 mkdiropenwrite)r? regkey keyfile_pathfs r$ rJ zPatchmanEndpoints.registerx s |DL11 !!$!>>>
s
#
# q
GGFOOO s
A00A47A4c t S r )r r? s r$ patchman_featurez"PatchmanEndpoints.patchman_feature r# c t S r )r
rX s r$ realtime_featurez"PatchmanEndpoints.realtime_feature rZ r# c K | j d {V d d }|t j t j fv S )Nitemsstatus)rY r_ r
INSTALLING INSTALLEDr? r_ s r$ is_installedz PatchmanEndpoints.is_installed sL -4466666666@J-2M4KLLLr# r c K | d {V r"t dt d S t rdnd}|ddt g}t s8|ddt
t g}t
d s|dgz
}t | d {V | j
t j t d {V d S )
Nz %s package already installedzapt-getyumz-yinstallswap7z--allowerasingservice)rc loggerinfor r% OLD_PATCHMAN_PACKAGEr
startswithr _sinkprocess_messager EnsureServiceStater )r? package_managercmds r$ _migrate_patchmanz#PatchmanEndpoints._migrate_patchman s* ""$$ $ $ $ $ $ $ KK68H I I I F'0{{=)) i1AB{{ * $ C <<**3//
* ())nn j(( *3H I I I
r# rf c K |r t | st d |s,t }t | rt d |rt j dd| | j d{V t | j j t j dd d{V r:| j
t j t d{V dS dS )
z Install imunify-patchman packagez Only ipv4 address is supportedzCan't automatically detect the outbound IP on this machine, since you're using a NAT. Please manually provide the outbound IPv4 address that we should use.networkipN
max_triesdelayri )r
ValueErrorr r r setrY rf r
has_statusr ra ro rp r rq r )r?
ip_address
current_ips r$ rf zPatchmanEndpoints.install sX ?gj 1 1 ? =>> > '))J Z((
* < y$
; ; ;#++---------! ! , #
*,,.7LMMM
r# migratec * K t j t s t d dS t
j s t d dS | d{V dS )z.Migrate old patchman agent to imunify-patchmanzThere is nothing to migrateNz#Unsupported license type to migrate)
rO r OLD_PATCHMAN_BINexistsrk rl r has_clean_modewarningrt rX s r$ r zPatchmanEndpoints.migrate s | ,--4466 KK5 6 6 6 F%'' NN@ A A A F$$&&&&&&&&&&&r# uninstallc H K | j d{V dS )z"Uninstall imunify-patchman packageN)rY removerX s r$ r zPatchmanEndpoints.uninstall 5 #**,,,,,,,,,,,r# r_ c K | j d{V d d | j d{V d d dS )zGet patchman statusNr^ r_ )r_ realtime)rY r_ r\ rX s r$
get_statusz PatchmanEndpoints.get_status s{ " 2 9 9 ; ;;;;;;;WE $ 4 ; ; = =======wG
r# r c K | j d{V d d }|t j k rt d t j st d | j d{V t | j j
t j dd d{V r:| j t j t d{V dS dS )
z#Install imunify-realtime-av packageNr^ r_ z6Can't install realtime package, install patchman firstz8Realtime is not enabled for the current Patchman licenserx ry rz ri )rY r_ r ra r r has_realtime_enabledr\ rf r r ro rp r rq r rb s r$ install_realtimez"PatchmanEndpoints.install_realtime sV -4466666666@J ], , , H
+-- J
#++---------! ! , #
*,,.7LMMM
r# c H K | j d{V dS )z%Uninstall imunify-realtime-av packageN)r\ r rX s r$ uninstall_realtimez$PatchmanEndpoints.uninstall_realtime r r# )FNNr )r N)__name__
__module__ __qualname__rP r r) rJ propertyrY r\ rc rt rf r r r r r r" r# r$ r' r' < s )G T*g ! 6) 6) 6) 6)p
T*j!! "! ! ! X! ! ! X!M M M
0
T*i ! 4
T*i ' ' ! '
T*k""- - #"-
T*h
T*i,, -,.
T*k:..- - /.- - -r# r' )3__doc__loggingrO imav.patchman.configr imav.patchman.constantsr r imav.patchman.custom_integrationr imav.patchman.exceptionsr imav.patchman.featurer r r
imav.patchman.modelr r r
r imav.patchman.licenser imav.patchman.utilsr r r imav.subsys.realtime_avr defence360agent.contracts.configr "defence360agent.contracts.messagesr defence360agent.rpc_tools.lookupr r defence360agent.subsys.panelsr defence360agent.utilsr r r r getLoggerr rk rm r boolr% r' r" r# r$ r s * / / / / / / K K K K K K K K F F F F F F 2 2 2 2 2 2
@ ? ? ? ? ? ? ? ? ? ? ? ) ) ) ) ) ) F F F F F F F F F F 9 9 9 9 9 9 1 1 1 1 1 1 : : : : : : @ @ @ @ @ @ @ @ 7 7 7 7 7 7
8 $ $( 2 :4 : : : :}- }- }- }- }-
}- }- }- }- }-r#