r~f d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z ddl m
Z
ddlmZ ddlmZ ddlZddlmZ ddlmZ dd lmZmZ dd
lm Z dd l m Z dd l m Z dd
l!m"Z" ddl#m$Z$m%Z% ddl&m'Z' ddl(m)Z) ddl*m+Z+ ddl,m-Z- ddl.m/Z/m0Z0m1Z1 ddl2m3Z3m4Z4 ddl5m6Z6m7Z7 ddl8m9Z9 ddl:m;Z;m Z? G d d Z@d ZAd ZBd eCd eeC fd ZD G d d e ZEd! ZF G d" d# ZG G d$ d% ZH G d& d'eH ZI G d( d)eG ZJ G d* d+ ZK G d, d- ZL G d. d/ ZMdS )0z.
Simple unix socket RPC server implementation
N)suppress) getLogger)Sequence)Process)
inactivity)app)Core SimpleRpc)FeatureManagementError)UnixSocketAuthProtocol) tls_check)run_in_executor) is_root_userrun_coro)
LineBuffer)
hosting_panel)InvalidTokenException)svcctl)
ResponseErrorServiceStateError SocketError) EndpointsUserType)
is_runningrpc_is_running)ValidationError)ERRORSUCCESSWARNINGc e Zd ZdZdZdZdZdS )RpcServiceStaterunningstoppedanydirectN)__name__
__module__ __qualname__RUNNINGSTOPPEDANYDIRECT X/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/simple_rpc/__init__.pyr! r! 3 s* G G C
FFFr. r! c K | d {V }t g |dS # t $ r5}t |j d}| |j |cY d }~S d }~wt t f$ r@}|j ^}}t j
|g|R t |t | z gdcY d }~S d }~wt $ r^}t j | t
d|t! | t t! | dcY d }~S d }~ww xY w)N)resultmessagesdatar1 r2 z-Something went wrong while processing %s (%s))r r r errorsupdate
extra_dataPermissionErrorr argsloggererrorr tuple Exception
sentry_sdkcapture_exceptionstr)coromethodr1 emsgr9 s r/ _execute_requestrE E su C. "r6BBB-
al###
3 4
V
d S 4 uT{{*+
5 5 5$Q''' ;VSVV
SVV44444444
5s?
D *A D D %5B D
D -AD D D c t j }t | t t f rt | }t
j d g }t
j |g }t
j |g }t ||z D ]8\ }}||v r/||vr+t d|j || }9|S )NzApplying middleware %s)
r route_to_endpoint
isinstancelistr< r
MIDDLEWAREgetMIDDLEWARE_EXCLUDEreversedr: debugr& ) rB usercbhashablecommonspecificexcludedmwuserss r/ _apply_middlewarerW a s $B&4-(( == ##D"-->%%h33)--h;;!&8"344 IB
Bh$6$6 5r{CCCRVV
Ir. socket_pathreturnc t dt j t j 5 } fd|D cddd S # 1 swxY w Y dS )z9Find inodes corresponding to the unix domain socket path.z/proc/net/unix)encodingr5 c L g | ] }|v | d !S ))split).0linerX s r/
z$_find_uds_inodes..v s0 IIIT[D5H5H
R 5H5H5Hr. N)opensysgetfilesystemencodinggetfilesystemencodeerrors)rX files ` r/ _find_uds_inodesrg o s
*,,,..
J
IIIITIII J J J J J J J J J J J J J J J J J Js AAAc 8 e Zd Zd ZdefdZd Zd Zd Zd Z dS ) _RpcServerProtocolc d || _ || _ || _ d | _ t | _ d S N)_loop_sinkrO
_transportr _buf)selfloopsinkrO s r/ __init__z_RpcServerProtocol.__init__z s-
LL r. r3 c ~ t j | }t j | | \ }}|| _ |!||d d< d|d v r |g|d d< t
| j }n'# t $ r}t | g}Y d }~nd }~ww xY w||d< |S )NparamsrO rV calling_process) jsonloadsr HostingPanel authenticaterO r _pidcmdliner= r@ )rp r3 decoded user_type user_namerv rC s r/ preprocess_dataz"_RpcServerProtocol.preprocess_data s *T"" , 9 ; ; H H '
9 (1GH f % '(+++.7[!'* ' %di 0 0 8 8 : :OO ' ' ' "1vvhOOOOOO '%4!"s *&B
B5B00B5c 2 | j | | j D ]a} | | }|d }|d }t d| t
|| j }| j |
|| ||| j | j # t $ rN}t
d | t t! | d Y d }~d }~wt" $ rb}t d| | t t! | d Y d }~[d }~ww xY wd S )Ncommandru zData received: %rzIncorrect token providedr4 z)Something went wrong before processing %s)ro appenddecoder r: rN rW rO rl create_task _dispatchrm r warning_write_responser r@ r= exception)rp r3 rD r1 rB ru rP rC s r/
data_receivedz _RpcServerProtocol.data_received s '''9 L LC
L --c22 * ) 0$777&vty99
&&NN 64:ty(I(I )
L
L
L 9:::$$3q66%J%JKKKKKKKK
L
L
L ? $$3q66%J%JKKKKKKKK
L- L Ls& BC
F AD%%
F2AFFc R K t j d | 5 t || d {V }t
d || | | d d d d S # 1 swxY w Y d S )Nzrpc_{}z Response: method - {}, data - {})r tracktaskformatrE r: infor )rp rB ru rA responses r/ r z _RpcServerProtocol._dispatch s
"
"8??6#:#:
;
; + + -dF ; ;;;;;;;H KK299&(KK
* * *
+ + + + + + + + + + + + + + + + + +s AB B #B c d | _ d S rk )rn )rp transports r/ connection_lostz"_RpcServerProtocol.connection_lost s
r. c 4 | j t d d S | j t j | dz d S # t $ r%}t | Y d }~d S d }~ww xY w)Nz*Cannot send RPC response: connection lost.
) rn r: r writerw dumpsencoder= r )rp r3 rC s r/ r z"_RpcServerProtocol._write_response s ? " NNG H H H F
$%%tz$'7'7$'>&F&F&H&HIIIII
$
$
$ #########
$s AA( (
B2BBN)
r& r' r( rs r@ r r r r r r- r. r/ ri ri y s} ! ! !C * L L L>+ + + $ $ $ $ $r. ri c t j | }t j |d t j |d d S )NT)exist_oki )ospathdirnamemakedirschmod)rX dir_names r/ _check_socket_folder_permissionsr sB w{++HK4((((HXu r. c D e Zd Zej Zej ZdZe d Z
dS ) RpcServeri c L K t j t t 5 t j j d d d n # 1 swxY w Y fd j d {V }t j j j |S )Nc 0 t j S rk )ri USERclsrq rr s r/ z"RpcServer.create.. s &tT38<< r. ) r SOCKET_PATHr FileNotFoundErrorr unlinkcreate_unix_serverr SOCKET_MODE)r rq rr servers ``` r/ createzRpcServer.create s ( 999
'
(
( ' ' Ico & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' '.. < < < < < socket:[2866765]
$ cat /proc/net/unix
Num RefCount Protocol Flags Type St Inode Path
ffff880054c0a4c0: 00000002 00000000 00010000 0001 01 2866765 /var/run/defence360agent/simple_rpc.sock # noqa
c t t 5 t j | i |cddd S # 1 swxY w Y dS )zReturn empty path on error.N )r OSErrorr readlink)r9 kwargss r/
safe_readlinkz)RpcServerAV.create..safe_readlink s '""
4
4{D3F33
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
42s 377z/var/runz/varNz
/proc/self/fdz socket:[{}]z"[{}] Socket {!r} for {} not found.inodec < j S rk )PROTOCOL_CLASSr r s r/ r z$RpcServerAV.create.. s C&&tT38<< r. )sock)r r
startswithlenrg r scandirr r intnamer r r socketfromfdAF_UNIX SOCK_STREAM
SOCK_NONBLOCKr )r rq rr r _socket_pathinodes
last_errorr itfd socket_fdrC _socketr s ``` r/ r zRpcServerAV.create s\ ( 666 " ": . . 7'F
6L!,//
E
Z00 B ! !(=11]5I5I !6 6 ),BG I !E !
4;;6z*COSX
- N !5 5
.. < < < < < <7 /
sI !C 5AC9 C C C C C C C
C5)C00C5N) r& r' r( r r r r r ri r r r r- r. r/ r r sA =D$K'N8 8 [8 8 8r. r c * e Zd Zej Zej ZdS )NonRootRpcServerAVN) r& r' r( r NON_ROOTr r NON_ROOT_SOCKET_PATHr r- r. r/ r r $ s D-KKKr. r c . e Zd Zej Zej ZdZ dS )NonRootRpcServeri N)
r& r' r( r r r r r r r r- r. r/ r r ) s# -K DKKKr. r c e Zd Zd Zd Zd ZdS )_RpcClientImplc t j t j t j t j z | _ | j | d S # t t t f$ r t w xY wrk )
r r r r _sockconnectConnectionRefusedErrorr BlockingIOErrorr )rp rX s r/ rs z_RpcClientImpl.__init__0 sy & 2V5I I DJ
J { + + + + +&(9?K & & &#%% % &s AA &A?c | j t j ||d dz n$# t
$ r}t
d| d }~ww xY w | d }n%# t $ r}t d| |d }~ww xY w t j
| }n5# t $ r(}t d
| |d }~ww xY w|S )Nr ru r zcommunication interrupted,
)terminator_bytezConnection reset: z Error parsing RPC response {!r})r sendallrw r r BrokenPipeErrorr _sock_recv_untilConnectionResetErrorr rx r r= r )rp rB ru rC r3 r s r/ dispatchz_RpcClientImpl.dispatch9 sJ A J J6V D DEEL&((
A A A ?A ? ?@@ @ A A(((??DD# A A A 8Q 8 899q @ A z$++--00HH 188>>
sH AA
A(A##A(,B
B%
B B%)&C
D#C==Dc | j rJ g }|r ||d vr| j g}t j |g g t j }|d }| j |vr@t
| r"t d | t d | j t j }t | dk rt d |
| |||d vd | S )Nr z!select() = {!r} resulted in errorzrequest timeoutz!Empty response from socket.recv()r. )r getblockingfilenoselectr CLIENT_TIMEOUTr$ r r recvioDEFAULT_BUFFER_SIZEr r join)rp r chunks fdread_list
rwx_fdlist fdready_listchunks r/ r z _RpcClientImpl._sock_recv_untilP sG :))+++++ !fRj @ @ :,,../K %
J &a=Lz "",66z?? 9%;BB:NN &&7888JOOB$:;;E5zzQ!"EFFF MM% / !fRj @ @2 xx r. N)r& r' r( rs r r r- r. r/ r r / sA & & & . r. r c e Zd ZddZd ZdS )
_NoRpcImplNc || _ t t j 5 t j }| t |t j d d d d S # 1 swxY w Y d S rk ) rm r r
OverridingResetasyncioget_event_looprun_until_completer reset)rp rr rq s r/ rs z_NoRpcImpl.__init__q s
i/
0
0 L L)++D # #OD)/$J$J K K K L L L L L L L L L L L L L L L L L Ls AA//A36A3c ( t j }t d || ||d}t |t j }| t ||| j
| S )NzExecuting {}, params: {}r )rO ) r r r: r r rW r r r rE rm )rp rB ru rq requestrP s r/ r z_NoRpcImpl.dispatch} s %'' .55ffEEFFF $77
vHM
:
:
:&& RR 4 4f = =
r. rk )r& r' r( rs r r- r. r/ r r p s;
L
L
L
L
r. r c D e Zd ZdZej ddddZd Zd Zd Z d Z
dS )
RpcClientaR
One RpcClient instance is suitable to use for multiple ipc calls
:param RpcServiceState require_svc_is_running: whether to provide direct
endpoints binding if the service is stopped.
:param int reconnect_with_timeout: timeout in sec for reconnect retries
:param int num_retries: number of reconnect retries
N )require_svc_is_runningreconnect_with_timeout num_retriesc d | _ t r t j n t j | _ |t j k r't rt t j
|t j
k r+t t j
t j |t j t j
fv r[ |r | || | _ nt% | j | _ d S # t $ r |t j
k r Y nw xY w| j -t s
J d t' | _ d S d S )Nz-_NoRpcImpl is not available for non root user)_implr r r r r r! r* r r r) r r activate_socket_servicer SVC_NAMEr+ _reconnect_with_timeoutr r )rp r r r s r/ rs zRpcClient.__init__ se
~~
-F ,
#o&= = =
> $O$;<< <
#'>
>
> V3DMBB C C C ! #&
) C!%!=!=. " "DJJ "00A!B!BDJ$
)_-DDD ED
:
?
?>
?
? # DJJJ s 7C9 9DDc 6 t j | j | S rk functoolspartialr )rp rB s r/ __getattr__zRpcClient.__getattr__ s 888r. c 6 t j | j | S rk r
)rp r s r/ cmdz
RpcClient.cmd s 999r. c h | j || }t |t t f rI|d t
t fv r|d |d fS |d t k sJ |d |d fS |d t
t fv rt |d |d S )Nr1 r2 r3 ) r r rH rI r< r r r r )rp rB ru r s r/ r zRpcClient._dispatch s :&&vv66 ftUm , ,
$!eW%555 )8J+??? )W4444 )8F+;;;!eW%555#HZ$8999F# #r. c t | j S # t $ r; |r5t d| t j | |dz }n Y nw xY w^)NTz$Waiting %d second(s) before retry...r )r r r r: r timesleep)rp timeoutr s r/ r z!RpcClient._reconnect_with_timeout s
%d&7888$
KK> Jw''' 1$KK K
s AA A ) r& r' r( __doc__r! r) rs r r r r r- r. r/ r r s / 6 # ,& ,& ,& ,& ,&\9 9 9: : :
$
$
$ r. r )Nr r r r rw r r r rc r
contextlibr loggingr typingr psutilr r> defence360agent.apir defence360agent.applicationr defence360agent.contracts.configr r
r -defence360agent.feature_management.exceptionsr 'defence360agent.internals.auth_protocolr defence360agent.modelr
$defence360agent.model.simplificationr defence360agent.utilsr r defence360agent.utils.bufferr defence360agent.subsys.panelsr "defence360agent.subsys.panels.baser defence360agent.subsysr $defence360agent.rpc_tools.exceptionsr r r defence360agent.rpc_tools.lookupr r defence360agent.rpc_tools.utilsr r "defence360agent.rpc_tools.validater defence360agent.rpc_toolsr r r r& r: r! rE rW r@ rg ri r r r r r r r r r- r. r/ r. sN
* * * * * * + + + + + + F F F F F F F F K J J J J J + + + + + + @ @ @ @ @ @ 8 8 8 8 8 8 8 8 3 3 3 3 3 3 7 7 7 7 7 7 D D D D D D ) ) ) ) ) )
A @ @ @ @ @ @ @ ? > > > > > = = = = = = = = = =
8 $C C C8 J# J(3- J J J JP$ P$ P$ P$ P$/ P$ P$ P$f "> > > > > > > >B. . . . . . . .
y > > > > > > > > B
0Z Z Z Z Z Z Z Z Z Zr.