V J
d Z ddlZddlZddlZddlmZ ddlmZmZ ddl m
Z
ddl m Z m Z ddl
mZ ddlmZ dd lmZmZmZmZmZmZmZmZmZmZm Z dd
l m Z dd l m Z m!Z!m"Z"m#Z#m$Z$ dd l%m&Z' dd
l(m)Z* ddl+m,Z,m-Z-m.Z. e.j/ ddd Z0 ej1 e2 Z3 e.j4 d Z5dZ6dZ7 e.j/ dde0 Z8dZ9 eej: / dd Z;d\ ZZ?Z@ZAdZBdZCd ZDd ZEdZFdZGd ZHd ZId ZJd ZKd!ZLd!ZMd"ZNd#ZOd$ZPd%ZQd&\ ZRZSZTd'\ ZUZVZWd(ZXd)\ ZYZZd*Z[ej: fd+e\d,e]d-ed.e]fd/Z^ej: fd+e\d,e_d-ed.e_fd0Z`d1 Zad2 Zbd3 Zc dd4e\dz d.eee\dz f fd5Zdd6 Ze G d7 d8 Zf G d9 d: Zgd;d<d=Zh eji d!> d? Zj eji d!> d@ ZkdAdBdCdd;dDdCdd;dDdEd;dFdEd;dFdGi dHiZl G dI dJem Zn G dK dL Zo G dM dNe Zp G dO dPepe Zq G dQ dRe e, Zr G dS dT Zs G dU dVeperW Zt G dX dYet Zu G dZ d[eperW Zv dd4eee\e]f d\ee\ d.epfd]Zwd.e_fd^Zx ejy et e$eojz ePeoj{ _ ` Z| ejy et e$eoj} ePeoj~ _ ` Z G da dbet Z G dc dd Z G de dfe Z G dg dhe Z G di dje Z G dk dle Z G dm dne Z G do dp Z G dq dr Z G ds dt Z G du dv Z G dw dx Z G dy dz Z G d{ d| Z G d} d~ Z G d d Z G d d Z G d d Z G d d Zd Z G d d Z G d d Z G d d Z G d d Z G d d Z G d det Z G d d Z G d d Z G d d Z G d d Zd Z G d d Z G d dem Z G d d ZewZ G d d Z G d de\e ZddBdEddFdCdd;eReSeVeUeYeTeZeWeXg ddi dHiZ G d det Z G d d Zd Z G d d Zd4e\d.e_fdZd4e\d.e fdZd4e\d.e_fdZ G d d Z G d d ZdS )z5
All the config settings for defence360 in one place
N)abstractmethod) bisect_left bisect_right)deepcopy)datetime timedelta)Enum)Path) AnyCallableDictListMappingOptionalProtocolSequenceTupleUnion
_ProtocolMeta) Validator)CachedConfigReader ConfigError ConfigReaderUserConfigReaderWriteOnlyConfigReader)config_cleanup) __version__) Singletondict_deep_updateimporterz
imav._versionr )modulenamedefaultim360z'/var/imunify360/myimunify-freemium.flag
MY_IMUNIFYzim360._versionz../.IM360_CONFIG_SCHEMA_PATHz4/opt/imunify360/venv/share/imunify360/config_schema/)notifycleanup)nonedayweekmonth i i FULLMINIMAL DENYALLOWa4 ############################################################################
# DO NOT MODIFY THIS FILE!!! #
# USE /etc/sysconfig/imunify360/imunify360.config.d/ TO OVERRIDE DEFAULTS #
############################################################################
a ############################################################################
# DO NOT MODIFY THIS FILE!!! #
# USE /etc/sysconfig/imunify360/imunify360.config.d/ TO OVERRIDE DEFAULTS #
# This is an example of default values only #
# Changing this file will have no effect #
############################################################################
)cpanelplesk directadmin)acronisr1soft
clusterlogicssample)
cloudlinuxcloudlinux_on_premisez./var/run/defence360agent/generic_sensor.sock.2varr# envreturnc t || S # t $ r |cY S t $ r(}t d | |d }~ww xY w)Nz{}: integer required)intKeyError
ValueErrorformat)r= r# r> es U/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/contracts/config.pyint_from_envvarrG p su D3s8}} D D D/66s;;< TRUE_VALS
FALSE_VALSvals rF bool_from_envvarrW y s /I/J
#h iikk ) 4 * 5 % , ,S)j2H I I
s A A#"A#c t j t j t | S N)ospathjoindirname__file__relpaths rF
_self_rel2absra s&
7<<117 ; ;; c t j t j t t
| S rY )rZ r[ r\ r] ra
AGENT_CONFr_ s rF conf_rel2absre s.
7<<
j(A(ABBG L LLrb c t | d 5 }| cddd S # 1 swxY w Y dS # t $ r Y dS w xY w)z1Returns content for existing file, otherwise NonerN)openreadstripOSError)r[ rO s rF _slurp_filerl s
$__ $6688>>## $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ tts3 A &A A A A A
A
A A usernamec V t | }| | }|| | }|||fS t d| | t }|| | t
j fS )z
Choose action for config option by checking EndUser's Imunify360
config and Admin config. Admins config applies only if EndUser
didn't set the default action
rm Nz"Cannot read %s:%s from user config)
ConfigFileconfig_to_dictgetloggerdebugUserTypeROOT)sectionoptionrm user_config user_section
user_value root_configs rF choose_value_from_configr} s h///>>@@K ??7++L !%%f--
! x' '
LL5wGGG ,,--//K w ' 66rb c J t j t S )zG
Just checks if this is server with MyImunify Freemium license
)rZ r[ existsFREEMIUM_FEATURE_FLAG rb rF is_mi_freemium_licenser s 7>>/ 0 00rb c e Zd ZddZd ZdS )
FromConfigNc > || _ || _ || _ d | _ d S rY )rw rx _config_cls_config_instance)selfrw rx
config_clss rF __init__zFromConfig.__init__ s& % $ rb c | j 4| j t | _ n| | _ | j | j }| j
|| j S |S rY )r r rp rq rw rx )r instanceowner
section_values rF __get__zFromConfig.__get__ sm ( '(2 %%(,(8(8(:(:% -<<>>t|L
; " - - rb NN)__name__
__module__ __qualname__r r r rb rF r r s7 % % % %
rb r c 8 e Zd Z ed ZedddZd ZdS ) FromFlagFile/var/imunify360.)coercer# c 0 || _ || _ || _ d S rY )r" r r# )r r" r r# s rF r zFromFlagFile.__init__ s rb c | j | j z }| r.| | p| j S d S rY )LOCATIONr" r r read_textr# )r r r r[ s rF r zFromFlagFile.__get__ sP }ty( ;;== A;;t~~ / / ?4<@@ @ A Arb N)r r r r
r boolr r r rb rF r r sV t%&&H'+S
A A A A Arb r Trootc | rdnd}i }t j t g D ]0}t ||d } | }t ||d 1|S )Nget_root_configget_non_root_configc i S rY r r rb rF z1_get_combined_validation_schema.. s rb F)allow_overwrite)r iter_modulesCONFIG_VALIDATORS_DIR_PATHgetattrr )r func_namecombined_schemar!
get_schemaschemas rF _get_combined_validation_schemar st %)D!!/DIO')C(DEE I I VY
;;
&%HHHHH rb )maxsizec t S rY r r rb rF config_schema_rootr s * , ,,rb c " t d S )NFr r r rb rF config_schema_non_rootr s * 6 6 66rb CUSTOM_BILLINGdictstring)typer# nullableboolean)r r# ) upgrade_urlupgrade_url_360billing_notifications
ip_license)r r r# c e Zd ZdS )ConfigValidationErrorN)r r r r rb rF r r s Drb r c e Zd ZdZesdez ndZeZeZ e
Z e j
dd ZdZdZdZd Zd
Zd Zd Zd Zd
Ze j ed ZdZ e j e e Z e j e e Z dZ dZ e j e d Z!dZ"dZ#dZ$dZ%dZ&esdndZ'dZ( e)d Z*dZ+dS ) Core
imunify360z%s agentzimunify antivirusIMUNIFY360_API_URLzhttps://im.cdn.mycache.org
z.el9 z/var/imunify360/tmpzimunify360-merged.configz&imunify360-merged-nonprivileged.configzimunify360.configz/etc/imunify360ry /etc/sysconfig/imunify360i zimunify360.config.dz.imunify360.backup_configz
hooks.yamlzcustom_billing.configz/var/imunify360/hookszimunify360-agentzimunify-antiviruszunified-access-logger.confz#/etc/sysconfig/imunify360/.go_agent< N),r r r PRODUCTANTIVIRUS_MODENAME
av_version
AV_VERSION core_version CORE_VERSION_versionVERSIONrZ environrr API_BASE_URLDEFAULT_SOCKET_TIMEOUTDIST
FILE_UMASKTMPDIRMERGED_CONFIG_FILE_NAME%MERGED_NONPRIVILEGED_CONFIG_FILE_NAMEUSER_CONFIG_FILE_NAMELOCAL_CONFIG_FILE_NAME
CONFIG_DIRr[ r\ USER_CONFDIRGLOBAL_CONFDIRMERGED_CONFIG_FILE_PATH%MERGED_NONPRIVILEGED_CONFIG_FILE_PATH MERGED_CONFIG_FILE_PERMISSION+MERGED_NONPRIVILEGED_CONFIG_FILE_PERMISSIONLOCAL_CONFIG_FILE_PATH
CONFIG_D_NAMEBACKUP_CONFIGFILENAMEHOOKS_CONFIGFILENAME CUSTOM_BILLING_CONFIGFILENAMEINBOX_HOOKS_DIRSVC_NAME$UNIFIED_ACCESS_LOGGER_CONFIGFILENAMEr
GO_FLAG_FILE%SIGNAL_HANDLER_MIGRATION_TIMEOUT_SECSr rb rF r r sV G'5 N: ;NDJ LG:>> : L DJ
"F 80 * 0 0"J7<<
M::L0N gll/ -/GLL=- -) %*!27/ W\\.:M N N)M 7'$;!-O #1I6I
,H(4=>>L,.)))rb r c e Zd Ze ddededefd Ze ddededed ed
edd f d Zedd
Z e dded
edefd Z
ede e defd Z
dede e defdZdede e dedd fdZd S )IConfigTF normalize
force_readr? c t rY NotImplementedErrorr r r s rF rq zIConfig.config_to_dict6
"!rb datavalidate overwritewithout_defaultsNc t rY r r r r r r r s rF dict_to_configzIConfig.dict_to_config< s
"!rb c t rY r r s rF r zIConfig.validateG !!rb configc t rY r r r r s rF r zIConfig.normalizeK r rb timestampc t rY r r r s rF modified_sincezIConfig.modified_sinceQ r rb rw rx c |r;| |i | S d S rY )rq rr )r rw rx s rF rr z IConfig.getU s@ F&&((,,Wb99==fEE Etrb valuec @ |r| |||ii d S d S rY )r )r rw rx r s rF setz IConfig.setZ s7 < 65/ : ; ; ; ; ; < " " "26"
" " " ^"
!&
" "" " "
"
"
" " " ^" " " " ^" 8=" " "15"
" " " ^"
" "D " " " ^"3
#
<3 <
z;Normalizer._get_schema_without_defaults..w s]
U777
%&&11%888777rb items)r' r s ` rF r z'Normalizer._get_schema_without_defaultsu s8
$kkmm
rb r c i }| D ]W\ }}t |t r6| D ] \ }}||| |i |< !P|r|||< X|S rY )r* r$ r
setdefault)r
new_configrw optionsrx r s rF remove_nullzNormalizer.remove_null s :<
& . . GW'4((
.%,]]__ K KMFE (EJ
--gr::6BK
. '.
7#rb c t | }| | }|j rt |j |t d| |S )NzCerberus returned None for )ConfigValidator
normalizederrorsr )r r validatorr2 s rF _normalize_with_schemaz!Normalizer._normalize_with_schema sa #F++ %.%9%9&%A%A
:' (899 9 '(Nf(N(NOO Orb r c |r| j n| j }|r+| | }| || S || j k r| j S | || }|| _ || _ | j S rY )r r r/ r5 r r )r r r r r2 s rF r zNormalizer.normalize s -= OD ) )4< ?%%f--F..vv>> > T\ ! !* *00@@
", &&rb N)
r r r r classmethodr r r staticmethodr/ r5 r r r rb rF r r j s
T
[
G \ w 4 \
'
'4
'D
'
'
'
'
'
'rb r c
e Zd ZdZddddddddededeeeg ef f ded e d
e
f fd Z d Z d dede
fdZd de de
fdZ d dede de de de ddf dZd Zd Zd Zd ee de fd Z xZS )!Config NT)r[
config_readerr
disclaimercached permissionsr[ r< r r= r> r? c t |s|sJ |rt nt }|p |||p| j | | _ | j j | _ |pt | _ t | j | _
d S )N)r= r? ) superr r r
DISCLAIMER_config_readerr[ r r r _normalizer) r r[ r< r r= r> r? config_reader_cls __class__s rF r zConfig.__init__ s $}$$$28 J . .l +
/@/@ !4T_#0
0
0
', !2!H6H %d&<==rb c Z d | j j | j | j S )NzW<{classname}(config_reader={config_reader!r}, validation_schema={validation_schema!r})>) classnamer< r )rD rF r rC r r s rF __repr__zConfig.__repr__ s6
&n1 - " 4
rb Fr r? c 8 | j || S rY )rD r r s rF r zConfig.normalize s ))&2BCCCrb r c | j | }|r| | }t | S )zr
Converts config file to dict
:return dict: dictionary (key (section) / value (options))
)r )rC read_config_filer r )r r r r s rF rq zConfig.config_to_dict sD $555LL ,^^F++F rb r r r r r c r |r| |||| dS | |||| dS )a
Converts dict to config file
New options will be mixed in with old ones
unless overwrite is specified
:param dict data: dictionary (key (section) / value (options))
:param bool validate: indicates if we need validation
:param bool normalize: normalize config
:param overwrite: overwrite existing conf
:param without_defaults: do not fill defaults
:return: None
)r r r r N)_dict_to_config_overwrite_dict_to_configr s rF r zConfig.dict_to_config st (
* *!#!1
+
!#!1
!
rb c |r t || j |r| || }| j | d S Nr )r r r r rC write_config_file)r r r r r s rF rN z Config._dict_to_config_overwrite sb D % %dD,B C C C K>>$9I>JJD --d33333rb c t | j }t || rW|r t || j |r| || }| j | d S d S rQ ) r rC rL r r r r r rS )r r r r r r s rF rO zConfig._dict_to_config s $->>@@AA FD ) ) :
J ))&$2HIII
-= (
1 1& 9 9 9 9 9 : :rb c | j d }nB# t $ r5}d}t d|| t | |i |d}~ww xY w t || j dS # t $ r5}d}t d|| t | |i |d}~ww xY w)z/
:raises ConfigsValidatorError
F)
ignore_errorsz Error during config validationz%s: %sNz+Imunify360 config does not match the scheme)
rC rL r rs errorConfigsValidatorErrorr r r r )r config_dictrE messages rF r zConfig.validate s @ ->> # ? KK @ @ @6G LL7A . . .'w88a ? @
@ % %k43I J J J J J$ @ @ @CG LL7A . . .'w88a ? @s,
A 0AA ! B
C
0B==Cr c 6 | j | S rY )rC r r s rF r zConfig.modified_since' "11)<< > > >
$ > !(2w;*?!?@
> > > > > > > > >.
D D DD D D D D
$
!&
! !! ! !
!
!
! ! ! !F4 4 4 : : :@ @ @(= =D = = = = = = = =rb r: ) metaclassc e Zd Z fdZ xZS )
UserConfigc || _ t j t j |t j }t |t || t d S )N)r[ r< r ) rm rZ r[ r\ r r r rA r r r )r rm r[ rF s rF r zUserConfig.__init__, sl
w|| x)C
*4:: 4
rb r r r r r] r^ s @rF ra ra + s8
rb ra c
e Zd Zdddddededef fdZ dd ed
ed efd Z dd
eded ededed df dZ ddZ
ddeded efdZ de e
d efdZ xZS ) SystemConfigN) local_config
merged_confignonpriv_merged_configrf rg rh c t |p
t | _ |p
t | _ |p
t
| _ d S rY )rA r LocalConfig
_local_config MergedConfig_merged_configMergedNonPrivilegedConfig_nonpriv_merged_config)r rf rg rh rF s rF r zSystemConfig.__init__9 sZ ) :[]] + =|~~ ! @%>%@%@
###rb TFr r r? c : | j || S )Nr r )rm rq r s rF rq zSystemConfig.config_to_dictG s) "11 J 2
rb r r r r c D | j ||||| d S N)r r r r )rk r r s rF r zSystemConfig.dict_to_configN s=
)) - *
rb c j | j | j d S rY )rm r ro r s rF r zSystemConfig.validate^ s2 $$&&& #,,.....rb r c : | j || S )N)r r )rm r r s rF r zSystemConfig.normalizeb s* ",,,< -
rb r c 6 | j | S rY )rm r r s rF r zSystemConfig.modified_sincei r\ rb r TTFTr r )r r r r: r r r rq r r r r r r
r r] r^ s @rF re re 8 sw $ $(,
&
:?
26
!%
/ / / /
9>
15
= =D = = = = = = = =rb re r[ c | r%t | t st | S |rt | S t S )Nro r[ )r$ rA ra r: re )rm r[ s rF config_file_factoryrz m sQ
8S11 8,,,,
4 ~~ rb c t t }|j D ]}| | r dS dS )NTF)Mergerget_layer_nameslayersr )r mergerlayers rF any_layer_modified_sincer y sS
F**,,
-
-F * * 44 5rb )r[ r= r? )r< c
e Zd ZdZej ddddddedeee g ef f de
f fdZ dd
ed e d e d
e de ddf fd
Z
xZS )rj zt
Config (/etc/sysconfig/imunify360/imunify360.config) should contain
options changed by a customer only
NFr[ r< r r= r> r< r r= c T t ||||| d S )Nr rA r )r r[ r< r r= r> rF s rF r zLocalConfig.__init__ s? ' /!
rb Tr r r r r r? c P t ||||| S rs )rA r )r r r r r r rF s rF r zLocalConfig.dict_to_config s5 ww%% - &
rb rw )r r r r r r r r r r r r r r r] r^ s @rF rj rj s
(&*CG
$
!(2w;*?!?@
( !%
rb rj c e Zd Zej ej ej Z dZ
d dZ e d Z
d dZe defd ZdS )
BaseMergerz90-local.configFc < | _ fd|D _ d S )Nc v g | ]5}t t j j | 6S )ry )r: rZ r[ r\ DIR)r% r" r s rF
z'BaseMerger.__init__.. sC
:>F TXt44 5 5 5
rb )_include_defaultsr~ )r namesinclude_defaultss ` rF r zBaseMerger.__init__ s9 !1
BG
rb c t j | j r&t t j | j ng S rY )rZ r[ isdirr sortedlistdirr' s rF r} zBaseMerger.get_layer_names s6 .0gmmCG.D.DLvbj))***"Lrb c g }| j r>t t i d }| | |fd| j D z
}| | S )NFrR c > g | ]}| d S )Frq )rq )r% r r s rF r z.BaseMerger.configs_to_dict.. s<
5Z H H
rb )r r r r appendr~ _build_effective_config)r r layer_dict_listdefaultss ` rF configs_to_dictzBaseMerger.configs_to_dict s ! -!"455??U @ H
" "8 , , ,
++O<<
?
?C)
M M [M = = = = d [ rb r c $ e Zd Zdef fd Z xZS )
MutableMergerr c t || j }|d | }t |d d S NTr )r r rA r r r idxrF s rF r zMutableMerger.__init__ sE %!788dsd
66666rb r r r r r r] r^ s @rF r r sD 7h 7 7 7 7 7 7 7 7 7 7rb r c $ e Zd Zdef fd Z xZS )ImmutableMergerr c t || j }||d }t |d d S NFr )r r rA r r s rF r zImmutableMerger.__init__ sE 5$"899cdd
77777rb r r^ s @rF r r sD 8h 8 8 8 8 8 8 8 8 8 8rb r c $ e Zd Zdef fd Z xZS )
NonBaseMergerr c N t |d d S r r r r rF s rF r zNonBaseMerger.__init__ s&
77777rb r r^ s @rF r r sD 8h 8 8 8 8 8 8 8 8 8 8rb r c j e Zd ZddgddgdgdZ fdZed Zed ed
efd Z xZ
S ) r| N user_override_proactive_defensenum_dayslimitenable)PROACTIVE_DEFENCE PERMISSIONSINCIDENT_LOGGINGERROR_REPORTINGc N t |d d S r r r s rF r zMerger.__init__ s&
66666rb c | | }| }|j D ]I}t j |j s#t d|j d S J t | t t }| |d }|
| \ }}t |d t! |dd d S # t" t$ f$ r&}t d| Y d }~d S d }~ww xY w)NzGAborting merged config update: Config layer %s disappeared during mergeFrR )r )r r zConfig file is invalid! %s)r} r r~ rZ r[ lexistsrs warningr r r r r _split_settingsrl r rn rX r )r' r rY r
normalizer priv_dict nonpriv_dictrE s rF update_merged_configzMerger.update_merged_config s S((**++ ,,.. ] E7??5:..
?J
% %k 2 2 2 $$677J$..e / K '*&9&9+&F&F #I| NN ) ))e ) D D D % ' ' 6 6 u
7
&'<= < < < NN7 ; ; ; ; ; ; ; ; ; /var/imunify360/files/geo/v1/GeoLite2-Country-Locations-en.csvc , d | S )Nz2/var/imunify360/files/geo/v1/CountrySubnets-{}.txt)rD ) country_codes rF country_subnets_filez CountryInfo.country_subnets_file s CJJ
rb N)r r r DB LOCATIONS_DBr8 r r rb rF r r s? =B I
\
rb r c j e Zd Z ej d edej z Z e dd Z
dS )SentryIMUNITY360_SENTRY_DSNz %s/sentryr r N) r r r rZ getenvrl r r DSNr ENABLEr rb rF r r sL
") [9;L-L!M!M C Z)8
4
4FFFrb r c e Zd ZdZdZdZdZdZ edd Z edd Z
edd Z edd Z edd
Z
edd Zd Zd
ZdZ edd Z edd Z edd Z edd Z edd Z edd Z edd Z edd Z edd Z edd Z e d Z edd Z d S ) Malwarei, r r r MALWARE_SCANNINGenable_scan_inotifyenable_scan_pure_ftpdsends_file_for_analysiscloud_assisted_scan
rapid_scancrontabsz$/var/imunify360/aibolit/scans.picklei z /var/imunify360/cleanup_storageMALWARE_CLEANUP trim_file_instead_of_removalrw rx keep_original_files_daysscan_modified_filesmax_signature_size_to_scanmax_cloudscan_size_to_scanmax_mrs_upload_file,rapid_scan_rescan_unchanging_files_frequency hyperscanMALWARE_DATABASE_SCANr enable_scan_cpaneldisable_cloudav
db_timeoutN) r r r SCAN_CHECK_PERIODCONSECUTIVE_ERROR_LIMITINOTIFY_SCAN_PERIODCONFIG_CHECK_PERIODCONFLICTS_CHECK_PERIODr INOTIFY_ENABLED PURE_SCAN
SEND_FILESCLOUD_ASSISTED_SCAN
RAPID_SCANCRONTABS_SCAN_ENABLED
SCANS_PATHFILE_PREVIEW_BYTES_NUMCLEANUP_STORAGE CLEANUP_TRIM CLEANUP_KEEPSCAN_MODIFIED_FILESMAX_SIGNATURE_SIZE_TO_SCANMAX_CLOUDSCAN_SIZE_TO_SCANMAX_MRS_UPLOAD_FILE,RAPID_SCAN_RESCAN_UNCHANGING_FILES_FREQUENCY HYPERSCANDATABASE_SCAN_ENABLEDCPANEL_SCAN_ENABLEDr CLEANUP_DISABLE_CLOUDAVMDS_DB_TIMEOUTr rb rF r r s j!35JKKO
-/FGGI .0IJJJ$*%79NOO . ==J &J'9: F F7J '7O :!- L :!) L %*"$
", 8" " ", 8" " %*%79NOO3=: J4 40
-{;;I &J'> I I$*%79MNN *l+< = = Z 7 FFNNNrb r c e Zd ZeZeZeZeZdS )MalwareScanScheduleIntervalN)r r r NONEDAYWEEKMONTHr rb rF r2 r2 s" D
C D EEErb r2 c e Zd ZdZdZdZ edd Z edd Z edd Z edd Z
d
S ) MalwareScanSchedulez8/usr/bin/imunify360-agent malware user scan --backgroundz!/etc/cron.d/imunify_scan_schedulezS# DO NOT EDIT. AUTOMATICALLY GENERATED.
0 {0} {1} * {2} root {cmd} >/dev/null 2>&1
MALWARE_SCAN_SCHEDULEintervalr hour day_of_week day_of_monthN) r r r CMD CRON_PATH CRON_STRINGr INTERVALHOUR DAY_OF_WEEK DAY_OF_MONTHr rb rF r8 r8 s
DC3IK
z' H :' D *' K :' LLLrb r8 c e Zd Z edd Z edd Z edd Z edd Z edd Z edd Z edd Z
d
S ) MalwareScanIntensityMALWARE_SCAN_INTENSITYcpur ioram
user_scan_cpu user_scan_io
user_scan_ram resident_ramN) r r r r CPUIORAMUSER_CPUUSER_IOUSER_RAM RESIDENT_RAMr rb rF rF rF s
*( C
(
B *( C z( H j( G z( H :( LLLrb rF c \ e Zd Z edd Z edd Z edd ZdS )FileBasedResourceLimitsRESOURCE_MANAGEMENT cpu_limitr io_limit ram_limitN)r r r r rO rP rQ r rb rF rW rW ( sf
*% C
%
B *% CCCrb rW c ( e Zd Z edd ZdS )
KernelCare
KERNELCAREedfr N)r r r r EDFr rb rF r] r] 7 s*
* CCCrb r] c t j } | Rt j dt j dt j dt j di}| t j d S | S )Nr1 r- r r )
r r+ r2 r3 r6 r5 r4 rr r8 rA )r freqs rF get_rapid_rescan_frequencyrc > sU @E } ' ,a ' -q ' ,a ' +R
xx+4a888 Lrb c e Zd ZdZej ed Zej ed Zej edd Z ej edd Z
ej edd Z ej edd Z ej edd Z
d
S ) MalwareSignaturesz /var/imunify360/files/sigs/v1/rfxni360aibolitzai-bolit-hoster-full.dbr zmds-ai-bolit-hoster.dbz procu2.dbz
mds-procu2.dbN)r r r _dirrZ r[ r\ RFXNrg AI_BOLIT_HOSTERAI_BOLIT_HYPERSCANMDS_AI_BOLIT_HOSTERPROCU_DB MDS_PROCU_DBr rb rF re re K s +D
7<<f % %D
7<<f % %Dgll44MNNO dI{CC ',, i1 w||D)[99H7<<i AALLLrb re c J e Zd Z edd Z edd ZdZdZdS )LoggerLOGGERmax_log_file_sizer backup_counti i N)r r r r MAX_LOG_FILE_SIZE BACKUP_COUNT LOG_DIR_PERM
LOG_FILE_PERMr rb rF rq rq Y sU "
" : L
LMMMrb rq c e Zd ZdZdZdS )ru r non_rootN)r r r rv NON_ROOTr rb rF ru ru h s DHHHrb ru c e Zd ZdZdZdS )UIRoleclientadminN)r r r CLIENTADMINr rb rF r} r} m s
F EEErb r} c e Zd ZdZdZdS )NoCPz /etc/imunify360/scripts/domainsr1 N)r r r
CLIENT_SCRIPTLATEST_VERSIONr rb rF r r r s 5MNNNrb r c e Zd Z fdZ xZS )CustomBillingConfigc t j dt j }t |t d S )Nr r[ r )rZ r[ r\ r r rA r CONFIG_SCHEMA_CUSTOM_BILLING)r r[ rF s rF r z CustomBillingConfig.__init__z sS w|| ')K
)E
rb rc r^ s @rF r r y s8
rb r c ~ e Zd Z edde Z edde Z edde Z edde ZdS )
CustomBillingr r rw rx r r r r N) r r r r r UPGRADE_URLUPGRADE_URL_360
NOTIFICATIONS
IP_LICENSEr rb rF r r s * & K
!j & O
J && M
& JJJrb r c e Zd Z edd Z edd Z edd Z edd Z edd Z edd Z d S )
PermissionsConfigr user_ignore_listr allow_malware_scan user_override_malware_actionsr *allow_local_malware_ignore_list_managementuse_plesk_service_planN)
r r r r USER_IGNORE_LISTALLOW_MALWARE_SCAN USER_OVERRIDE_MALWARE_ACTIONS USER_OVERRIDE_PROACTIVE_DEFENSE*ALLOW_LOCAL_MALWARE_IGNORE_LIST_MANAGEMENTUSE_PLESK_SERVICE_PLANr rb rF r r s !z ! $ # %/J &E% % %! '1j 0' ' '# 2< ;2 2 2. (Z ' rb r c B e Zd Z edd Z edd ZdS )MyImunifyConfigr% r r purchase_page_urlN)r r r r ENABLEDPURCHASE_PAGE_URLr rb rF r r sK j G #
" rb r c B e Zd Z edd Z edd ZdS )ControlPanelConfig
CONTROL_PANELsmart_advice_allowedr advice_email_notificationN)r r r r SMART_ADVICE_ALLOWEDADVICE_EMAIL_NOTIFICATIONr rb rF r r sL %: % !+
*! ! ! rb r c g d}t j t j t j t j t j t j d| | di dd d< fdfd|D }t ||j S ) N)
BACKUP_RESTOREr r r r r r% r r9 WORDPRESS))r9 r: )r9 r; )r9 r< )r9 r= )r default_action)r moder waf_enabledT)r r c @ t | i }t | i }i }| D ]?\ }}| | }| | |fd r|||< :|||< @|S )NT)r rr r* )
rw
admin_options user_optionsresulting_dictrx admin_valuer{
admin_dict overridable user_dicts
rF normalize_sectionz0effective_user_config..normalize_section s !.
s4 07""7++ rb )r r r rq rr fm_config_cleanuprm ) admin_configry allowed_sectionseffective_configr r r r s @@@@rF effective_user_configr s : : : : : <1 K4 ,,..J**,,I 1;R1 1 c- ,- " ;K -{/C D DDrb c : e Zd ZdxZ\ ZZZZZeeeefZ e
re neZ dS )
HookEvents)agentlicensezmalware-scanningzmalware-cleanupzmalware-detectedN) r r r IM360_EVENTSAGENTLICENSEr r MALWARE_DETECTED IMAV_EVENTSr EVENTSr rb rF r r sS
L
K +
<[[ FFFrb r c 0 e Zd Zdeeef fdZd ZdS )rX configs_to_errorsc || _ d S rY )r )r r s rF r z ConfigsValidatorError.__init__) s !2 rb c g }| j D ] \ }}| |d| d | S )Nz:
)r r* r r\ )r r3 r rW s rF rI z ConfigsValidatorError.__repr__, s^ ! 3 9 9 ; ; 2 2MFE MMV0000 1 1 1 1yy rb N)r r r r
r: r r rI r rb rF rX rX ( sG 3$vs{*; 3 3 3 3! ! ! ! !rb rX c e Zd ZdZed Zed Zeefdede ee
f ddfd Z e de e
e
f de
fd ZdS )
r z@A class that has methods to validate configs bypassing the cachec F t dS )zN
Validate merged config
:raises ConfigsValidatorError
N)re r r s rF validate_system_configz'ConfigsValidator.validate_system_config6 s !!!!!rb c i }t t j D ]H} | # t $ r$}| |j Y d}~Ad}~ww xY w|rt | dS )zf
Validate all config layers, collect all errors
:raises ConfigsValidatorError
N)r| r} r~ r rX updater )r' r r rE s rF validate_config_layersz'ConfigsValidator.validate_config_layers> s F 2 2 4 455< > >E
> (
>
>
>!(()<========
> ;'(9:: : ; ;s A
A4A//A4rY r r? Nc | | }t | }| | st |j dS )z
Validate config represented by a dict
:param config_dict: config to validate
:param validation_schema: schema to validate config against
:raises ConfigValidationError
N)r r1 r r r3 )r' rY r r vs rF r zConfigsValidator.validateN sS **+<== F # #zz+&& 2'11 1 2 2rb c 8 t | r
| S | S rY )callable)r s rF r z&ConfigsValidator.get_validation_schema` s* % & & '$$&& & rb )r r r r r7 r r r r r r r r8 r r r rb rF r r 3 s JJ" " ["
;
; [
; 4F2 22 !x 02
2 2 2 [2" ! (!23! ! ! ! \! ! !rb r c ( e Zd Z edd ZdS )
AdminContactsADMIN_CONTACTS enable_icontact_notificationsr N)r r r r ENABLE_ICONTACT_NOTIFICATIONSr rb rF r r l s- $.J .% % %!!!rb r c e Zd ZdZdZdZd ZdS )IContactMessageType MalwareFoundScanNotScheduledGenericc | j S rY )r r s rF __str__zIContactMessageType.__str__x s
zrb N)r r r
MALWARE_FOUNDSCAN_NOT_SCHEDULEDGENERICr r rb rF r r s s3 "M+G rb r
BACKUP_SYSTEMF)r r# r allowed)enabled
backup_systemc f e Zd ZdZej dej e d fd
Z
xZ S ) BackupConfigaW # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# DO NOT EDIT. AUTOMATICALLY GENERATED.
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
#
# Direct modifications to this file WILL be lost upon subsequent
# regeneration of this configuration file.
#
# To have your modifications retained, you should use CLI command
# imunify360-agent backup-systems
# or activate/deactivate appropriate feature in UI.
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
r r c N t || d S )Nr r )r r[ r rF s rF r zBackupConfig.__init__ s) d6GHHHHHrb ) r r r rB rZ r[ r\ r r CONFIG_SCHEMA_BACKUP_SYSTEMr r] r^ s @rF r r sv J( W\\ ')C
6
I I I I I I I I I I Irb r c e Zd Z edde Z edde Z edd Z edd Ze d Z
d
S )
BackupRestorer r r r r cl_backup_allowedr cl_on_premise_backup_allowedc * t | j S rY )_get_backend_system_BACKUP_SYSTEMr s rF r zBackupRestore.backup_system s "3#5666rb N) r r r r r r r CL_BACKUP_ALLOWED CL_ON_PREMISE_BACKUP_ALLOWEDr7 r r rb rF r r s j l G Z N
#
" $.: -$ $ $
7 7 [7 7 7rb r c t ddl m} | t t fv rt } n| dS | | d S )zo
Get backup module from its name
:param name: backup system name
:return: backup system module
r )backup_backendsNT)async_)restore_infectedr
CLOUDLINUXCLOUDLINUX_ON_PREMISEACRONISbackend)r" r s rF r r sQ 100000
1222
t " "4 " 5 55rb c e Zd ZdZdZdhZdS )
AcronisBackupzacronis-installer.log)i i i )iZ ix N)r r r LOG_NAMEPORTSRANGEr rb rF r r s! 'H E
NEEErb r c F t dd| \ }}t j o|S )zs
Checks is Agent should try restore malware file firts
and returns user that set this action in config
r try_restore_from_backup_first)r} r r )rm try_restore_s rF should_try_autorestore_maliciousr
s/
. ;X NK 0[0rb c v t dd| \ }}t j t | z
}|S )Nr max_days_in_backup)days)r} r nowr )rm max_daysr untils rF "choose_use_backups_start_from_dater s? *. KHa
LNNYH 5 5 5 5E Lrb c 0 t dd| \ }}|S )Nr generic_user_notificationsro )r} )rm should_sendr s rF should_send_user_notificationsr s+ -$ NK
rb c n e Zd Z edd Z edd Z edd Z edd ZdS ) Wordpressr security_plugin_enabledr ai_bot_protectionai_bot_protection_presetN)r r r r SECURITY_PLUGIN_ENABLED WAF_ENABLEDAI_BOT_PROTECTIONAI_BOT_PROTECTION_PRESETr rb rF r r sf (j. *[-88K"
;0CDD )z/ rb r c e Zd ZdZdZdZdZdS )
HackerTrapr zmalware_found_b64.listzmalware_standalone_b64.listz%/opt/imunify360/proactive/dangerlist/N)r r r r r SA_NAMEDIR_PDr rb rF r r s"
C #D+G
4FFFrb r rY r )r functoolsloggingrZ abcr bisectr r copyr r r enumr pathlibr
typingr r r
r r r r r r r r cerberusr )defence360agent.contracts.config_providerr r r r r +defence360agent.feature_management.checkersr r defence360agent._versionr r defence360agent.utilsr r r rr r getLoggerr rs r r r MY_IMUNIFY_KEYr rd r r NOTIFYCLEANUPr3 r4 r5 r6 DEFAULT_INTENSITY_CPUDEFAULT_INTENSITY_IODEFAULT_INTENSITY_RAM DEFAULT_INTENSITY_RESIDENT_RAM%DEFAULT_RESOURCE_MANAGEMENT_CPU_LIMIT$DEFAULT_RESOURCE_MANAGEMENT_IO_LIMIT%DEFAULT_RESOURCE_MANAGEMENT_RAM_LIMITMODSEC_RULESET_FULLMODSEC_RULESET_MINIMAL_DOS_DETECTOR_DEFAULT_LIMIT_DOS_DETECTOR_MIN_LIMIT_DOS_DETECTOR_MIN_INTERVALPORT_BLOCKING_MODE_DENYPORT_BLOCKING_MODE_ALLOWDO_NOT_MODIFY_DISCLAMERDEFAULT_CONFIG_DISCLAMERCPANELPLESK DIRECTADMINr R1SOFT
CLUSTERLOGICSSAMPLE_BACKENDr r GENERIC_SENSOR_SOCKET_PATHr rA rG r rW ra re rl r} r r r r lru_cacher r r Exceptionr r r r r r r: ra re rz r partialr r rl r r rn rj r r r r r| r1 r r r r r r r r2 r8 rF rW r] rc re rq ru r} r r r r r r r r rX r rp r r r r r r r r
r r r r r rb rF rN sW , , , , , , , , ( ( ( ( ( ( ( ( A @ @ @ @ @ G G G G G G G G G G
X\
8 $ $$X_W---A 8< -
!TJNN"> &7 c4 !% () %'( $(+ % " ! " > {!E $I !
! M <>: D D Ds D D# D D D D -/J
")
(< < <M M M -17 7 "Tz7
3d
?7 7 7 7&1 1 1 ( A A A A A A A A -1 Q - - - Q 7 7 7
! !
/8D%I%I#,>>
! , I */ */ */ */ */ */ */ */Z'< '< '< '< 'sm 4 !y
''
)*6 .I -
''
7*D %
%
%
%
%
& %
%
%
P( ( ( ( ( ( ( (V7 7 7 7 7J 7 7 78 8 8 8 8j 8 8 88 8 8 8 8J 8 8 8
W' W' W' W' W'Z W' W' W't i 4= = = = = = = = &L L L L L L L L &
5 5 5 5 5 5 5 51G 1G 1G 1G 1G 1G 1G 1Gh 4 >
B B B B B B B B
&
. 4 DE DE DEN= = = = = = = =.! ! ! ! !I ! ! !3! 3! 3! 3! 3! 3! 3! 3!l !
#t "
! )!"
, 1 <I I I I I6 I I I:7 7 7 7 7 7 7 7.6 6 6" 1s 1t 1 1 1 1 S T 5 5 5 5 5 5 5 5 5 5rb