,Q
d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Z
d dlZd dlZd dlZd dl mZ d dlmZmZ d dlmZmZ d dlmZm Z m Z d dl m Z d dl m!Z! d dl"m#Z#m$Z$m%Z%m&Z& d d lm'Z' d d
lm(Z( d d l)m*Z* d d l+m,Z, d d
l-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5 d dl6Z6d dl7Z7d dl8Z8ddl9m:Z: ddl;m e? Z@dZAdZBdaCdZD e*d ZEdZF e*d ZG e*d ZH e*d ZI eJejK L d d ZM G d d e! ZN ejO d d! ZPe dd" ZQe@ddfd#ZR G d$ d% ZSdejT ejT d&dfd'e4eJeUeUf fd(ZVddd)d*ZW G d+ d,ejX ZYeYfd'eUfd-ZZeYfdd.Z[dd'e\fd0Z]d1 Z^ G d2 d3 Z_d4 Z` G d5 d6ea Zbd7 Zcd8 Zd dd:Zed/ddd/ddd;dZh ejO d d? Zidd'e\fd@Zj G dA dB Zkejl dCfdDe\dEeJd'e\fdFZm ddDe\dEeJd'e4e\eJf fdGZndH ZodI ZpddKZq ddMZrdN Zs ejO dOeJfdP Zt eju e6jv dQd/R ZwdS ZxdDejg dTeUd'dfdUZydV ZzdDejg dWeUd'effdXZ{dY Z| G dZ d[ Z}eBfd\Z~d] Ze d^eJfd_ Zddae\d'e*fdbZdce\dae\d'effddZde ZddgedheJd'efdiZdj Z G dk dle Z ejO d9 dm Zdn Zdd'effdoZ G dp dq ZeZdrdsdtZdu Zdv Z ejO d d'effdw ZdxZdy Zddze\d'e\fd{Zdd|Zdd}d~Zdd}dZdd}dZ G d de j Zd Z ddZd ZeadfdZefdZd ZdZd&ddZeddZd Zd Zdce*d'eUfdZdeUd'e*fdZd Zd ZddZde0de/f fdZd ZdrZdrZd ZdQddze3e\ fdZddrddZddZ G d d ZdWe\d'ee\e\f dz fdZdWe\d'ee\e\f dz fdZ ejO d d'eee\ e0e\gee\e\f dz f f fd Z G d dea Zd Z eh d Zdee\ d'ee\e\dz f fdZde\dee\ de0e\gee\e\f dz f d'ee\e\dz f fdZe@j fd'e\fdZdeJfdZde1e.e.f deJfdZ ejO d d Zde*d'eJfdZde*fdZd ZdS ) N)Future) OrderedDictdeque) GeneratorIterable) ExitStackcontextmanagersuppress) timedelta)Enum)LOCK_EXLOCK_NBLOCK_UNflockwraps)islice)Path)NamedTemporaryFile)Any AwaitableCallableDict FrozenSetListTupleTypeVar )rmtree)atomic_rewrite_fdF)bounduser_id)z
User-AgentzAccept-LanguagezAccept-Encoding
ConnectionDNTz.i360bakz/run/systemd/systemz /etc/cloudlinux-edition-soloz /var/run/imunify-antivirus.pidz /var/run/imunify360-agent.pidz/var/run/imunify360.pid%IMUNIFY360_HTTP_REQUEST_RETRY_TIMEOUT< c e Zd ZdZdZdZdZdS )ScopezAV onlyz AV and IM360z
IM360 onlyzIM360 resident onlyN)__name__
__module__ __qualname__AVAV_IM360IM360IM360_RESIDENT S/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/__init__.pyr* r* G s" B H E*NNNr3 r* )maxsizec t o2t ot S )zReturn True if /run/systemd/system folder exists:
[sd_booted]
(https://www.freedesktop.org/software/systemd/man/sd_booted.html)
)_SYSTEMD_BOOTED_DIRexistsis_dir
is_symlinkr2 r3 r4 is_systemd_bootr; N sC ""$$ 1 & & ( ( 1#..00 0r3 c # K |s|sJ t j } |p|j d| dV t j } |p|j d| ||z
dS )z
:param str: action name to log
:param logging.Logger: logger you want action name and timing
to be logged with
:param func: log function to use (`log` has preference over `logger_`)
z
%s startedNz%s took %.2f second(s))time monotonicdebug)actionlogger_logstartstops r4 timeitrE [ sz c> N ESGM<000 EEE > DSGM3VTE\JJJJJr3 c fd}|S )Nc N t j fd }|S )Nc K t pj 5 | i | d {V cd d d S # 1 swxY w Y d S N)rA rB rE r+ argskwargsr@ funrB rA s r4 wrapperz+timefun..decorator..wrapperm s .#,SIII
2
2 S$ 1& 1 1111111
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2s 8<< functoolsr rN rO r@ rB rA s ` r4 decoratorztimefun..decoratorl sH 2 2 2 2 2 2 2
2 r3 r2 rA r@ rB rS s ``` r4 timefunrU k s0 r3 c 0 e Zd ZdZeeddfd ZdS )synczF
the same timefun decorator variation but without async/await
Nc fd}|S )z
:param logging.Logger: logger you want action name and timing
to be logged with
:param str: action name to log
c N t j fd }|S )Nc z t pj 5 | i |cd d d S # 1 swxY w Y d S rI rJ rK s r4 rO z0sync.timefun..decorator..wrapper s F 2clGMMM 0 0 3///0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0s 044rP rR s ` r4 rS z sync.timefun..decorator sH
_S
!
!
0
0
0
0
0
0
0 "
!
0 Nr3 r2 rT s ``` r4 rU z sync.timefun| s0 r3 )r+ r, r- __doc__ staticmethodloggerrU r2 r3 r4 rW rW w sE t \ r3 rW Freturnc $ K | |t d t j }|r't | t sJ | g} t
j }n*t | t t f sJ t
j } t t dt d | | |||dd| d{V }|
| d{V \ } }
| d{V } t d | ||| | |
f | | |
fS )
zYAsynchronous command executor.
Returns a tuple (exit_code, stdout_data, stderr_data).Nz/stdin and input arguments may not both be used. r )seconds) max_trieson_errorTstdinstdoutstderrstart_new_sessionz run(%s, stdin=%s, shell=%s) = %s)
ValueError _subprocessPIPE
isinstancestrasynciocreate_subprocess_shelllisttuplecreate_subprocess_execretry_onBlockingIOError await_for communicatewaitr] r? ) commandre rf rg shellinputrM create_subprocessprocouterr exit_codes r4 runr s
NOO O ;'3''''') # ;'D%=11111 # : 1y/C/C/C
D %%e,,,,,,,,HCiikk!!!!!!I
LL*
C c3 r3 )looptimeoutc |rt d D ]b} t j }| s n7n# t $ r Y nw xY wt j t j c| t j t | t j
r| nt j | | S )zjRun coroutine from a blocking code (outside the event loop).
Coroutine will be wrapped in Task.
Nr` r ) rangern get_event_loop is_closed RuntimeErrorset_event_loopnew_event_looprun_until_completewait_forrl r Task)coror r _s r4 run_coror s |q = =A
-// ~~'' E
"7#9#;#; < < < < " " tW^44 LDD',t:L:L
s ?
A A c e Zd Zd ZdS )
CheckRunErrorc d}| | j | j | j pd | j pd S )Nz[Command {cmd!r} returned non-zero code {returncode},
Stdout: {output},
Stderr: {error}
)cmd
returncodeoutputerror)formatr r r decoderg )self_MESSAGEs r4 __str__zCheckRunError.__str__ s_
$
;%%''/4+$$&&.$
r3 N)r+ r, r- r r2 r3 r4 r r s#
r3 r c ` K t | fi | d{V \ }}}|dk r ||| || |S )zJ
Asynchronous command executor.
Returns output as bytestring.
Nr )r )rx raise_excrM r r} r~ s r4 check_runr sZ
"%W!7!7!7!7777777JSQi
GS#666 Jr3 c K t | t j t j t j d{V \ }}}|dk r ||| dS )z
Asynchronous command executor. Raises raise_exc if exit code is nonzero.
Stdin, stdout and stderr of command are connected to /dev/null.
)re rf rg Nr )r rj DEVNULL)rx r coder s r4 check_exit_coder sy
!"" JD!Q qyyig&&& yr3 Tc K t | fi | d{V \ }}}n,# t $ r t d| Y dS w xY w|r%|dk r t d| || dS | }n,# t $ r t d| Y dS w xY w|S )zGSafe run command.
Returns stdout as string or empty string on errorNz Command %s failed with OSError r z'Command %s failed with exit code %s: %sz#Command %s returned non-utf8 output)r OSErrorr] warningstripr UnicodeDecodeError)rx check_returncoderM rcr} r~ results r4 safe_runr s 3 3F 3 3333333 C 7AAArr B!GG 5wC
r##%% .wrapper s %+--Kr3 r2 )r rO r s ` @r4 plainold_lazy_initr s. K Nr3 c e Zd ZdZd Zd ZdS )
PeriodicCheckz
Invoke a callback with a certain period
and return cached result in between.
Raising an exception from the callback does not
affect the next check schedule.
c || _ || _ t j |z
| _ d | _ t
t j | _ d S r )
_cb_coro_check_every_n_secondsr= r> _last_check_timestamp_last_check_resultr rn Lock_lock)r cb_corocheck_every_n_secondss r4 __init__zPeriodicCheck.__init__2 sD
&;#%)^%5%58M%M""& ' 55
r3 c K | 4 d {V t j | j z
}|| j k rVt
d| j | j t j | _ | j |i | d {V | _ | j cd d d d {V S # 1 d {V swxY w Y d S )Nz3Timeout %d seconds has expired, doing the check: %s) r r= r> r r r] r? r r )r rL rM deltas r4 __call__zPeriodicCheck.__call__; s\ ::<<
+
+
+
+
+
+
+
+N$$t'AAE333 I/M
.2^-=-=*0=
t0Nv0N0N*N*N*N*N*N*N'*
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+s BB33
B= B=N)r+ r, r- r[ r r r2 r3 r4 r r ) s< 6 6 6 + + + + +r3 r c fd}|S )Nc $ t | S r )r )r nsecs r4 decoratez cache_result..decorateJ s T4(((r3 r2 )r r s ` r4 cache_resultr I s# ) ) ) ) ) Or3 c e Zd ZdZdS )RecurringCheckStopz:
raised by coroutine to stop recurring_check loop
Nr+ r, r- r[ r2 r3 r4 r r P s Dr3 r c K t | r!t j | di | d {V nt j | d {V dS # t j $ r Y dS w xY w)NFTr2 )callablern sleepCancelledError)period
period_kwargss r4 wait_for_periodr X s F (- 7 7 7 788 8 8 8 8 8 8 8 8-'' ' ' ' ' ' ' 'u ! tts A
A A#"A#c 8 K |r| rt |fi | d {V ndS NF)r )checkr r s r4 should_stop_after_period_passedr c sG of66
666666666
r3
c fd}|S )z
run decorated corotine in a loop every :period: seconds.
If more then consecutive_err_limit error occured, exit loop.
:param period:
:param consecutive_err_limit:
:param check_period_first: default false
:return:
c F t fd }|S )Nc K d} t fi d {V rd S | i | d {V d}n# t $ rO d|v rG t |d t r|d n# t
$ r Y nw xY wY d S t j $ r Y d S t $ r}|dz
}|k r t
d Y d }~d S t |t j r3t
d|j
|j |j |j nt
d Y d }~nd }~ww xY wt fi d {V rd S T)Nr T lock_filer z-Error count exceeded limit,exiting check loopz+Failed to run %s (%s). stdout=%s, stderr=%szError executing %s)r r rl r unlinkFileNotFoundErrorrn r Exceptionr] exceptionrj CalledProcessErrorr r r rg ) rL rM consecutive_err_cntexccheck_period_firstconsecutive_err_limitrN r r s r4 wrappedz3recurring_check..decorator..wrappedx sH "# '
8& 2? E , #t.v.........: +,''9 * "f,,! )&*=t D D = &{ 3 : : < < < 0 ! ! ! D!EE - EE D D D'1,'*-BBB (( K !#{'EFF D (( I G N J J (()=sCCC!D& 9**F 6C EO'
sK 0 D?5A54D?5
B?D?BD?D? D?"%D:
A(D::D?r )rN r r r r r s ` r4 rS z"recurring_check..decoratorw sI s) ) ) ) ) ) ) )
) V r3 r2 )r r r r rS s ```` r4 recurring_checkr k s7 - - - - - - - -^ r3 )backupuidgidallow_empty_content permissionsdir_fdr r c t |t r| }|'|rt d t | |||||| S t t 5 t | d 5 }| t | dz } ddd n # 1 swxY w Y | |k r ddd dS ddd n # 1 swxY w Y |s |s t d|| dS |rt |t t j
f r|}
n t j | t z }
t t 5 t! j | |
ddd n # 1 swxY w Y |k t% j t j | j }n># t $ r1 t j d } t j | d | z }Y nw xY wt j | \ } }
t1 | st
d
| t5 5 }t7 d | d |
d
z dd 5 fd}| | | |*|(t j || t j! | t j" ddd n # 1 swxY w Y t j# j$ | |% ddd n # 1 swxY w Y dS )a Atomically rewrites *filename* with given *data*.
If *filename*'s content is *data* already, do nothing.
If both *uid* and *gid* are given then resulting file is chowned
to given user id and group id.
Skip rewrite with empty content if *allow_empty_content* is False.
Chmod to given access *permissions* else preserve *filename* 's
permissions.
Return True if *filename* file was updated, False otherwise
When *dir_fd* is provided it must be an O_NOFOLLOW-opened file
descriptor for the parent directory of *filename*. All file I/O is
then performed relative to that descriptor, closing the TOCTOU
symlink-attack window. *backup* is not supported with *dir_fd*.
Nz/backup is not supported when dir_fd is provided)r r r r r rbr Fz empty content: %r for file: %sr i zParent dir is missing: wbz .i360editr )modedirsuffixprefix bufferingdeletec t t 5 t j j d d d d S # 1 swxY w Y d S r )r
r osremovename)tfs r4 cleanupz atomic_rewrite..cleanup s /00 ' 'Ibg&&&' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 's =AAT)&rl rm encoderi r r
r openreadlenr] r r PathLikefspathBACKUP_EXTENSIONshutilcopystatS_IMODEst_modeumaskpathsplitr r8 r r callbackwriteflushchownfilenochmodfsyncrenamer pop_all)filenamedatar r r r r r file old_contentbackup_filename
current_umaskdirpathbasenamestackr r s @r4 atomic_rewriter s 6 $ {{}}
P NOO O 3#
# $ $
(D
!
! 3T ))CIIM22K 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 $ t 5tXFFFu
3 fsBK 0 1 1 E $OO i 1 14D DO
'
(
( 3 3 K/ 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 1 ,rwx'8'8'@AAKK 1 1 1 HQKKM H] # # # =.0KKK 1
h//GX == ! ! G E' E EFFF
c>
"
'
'
'
'
'
NN7 # # # HHTNNN HHJJJ3?c3/// HRYY[[+ . . . HRYY[[ ! ! !- " " " " " " " " " " " " " " ". "'8$$$
3 8 4s (C9&B+ C+B/ /C2B/ 3
CC CE<<F F
+F6 68G10G1M>0B=L9- M>9L= =M> L= 1M>>NNc t d S # t $ r Y d S w xY w)Nz/etc/system-release)r read_textrstripr r2 r3 r4 os_release_and_versionr sP )**4466==??? tts 25
AAc | p
t }|r-t j d| }|r| d S nt t d|z )z3Return os version, if can't get it raise ValueErrorz\s*(\d+\.\d+\S*)(\s|$)r z!Can't discover os version from %r)r researchgroup cache_clearri )release_and_versionrvmatchs r4
os_versionr) st
8 6 8 8B - 3R88 ";;q>> ! " **,,,
82=
>
>>r3 c e Zd ZdZ ed Z ed Z ed ZdZe d Z
e de e e
f fd Ze dee fd Ze de fd
Ze de fd Ze d Ze d
Ze d Ze d Ze d Ze d Ze d Ze d Ze d ZdS )
OsReleaseInfoz/etc/os-release)debian)rhelfedoracentos)unknownNc t | j 5 }|D ]U} | d \ }}| d ||< F# t
$ r Y Rw xY w d d d n # 1 swxY w Y d|v r,t
|d |d< d S t
| dd f |d< d S )N="ID_LIKEIDlinux)r ETC_OS_RELEASEr r r ri frozensetget)clsdict_flinekvs r4 dict_from_filez OsReleaseInfo.dict_from_file- s3
#$
%
%
;;==..s33DAq wws||E!HH! D
(y)9)?)?)A)A B BE) )%))D'*B*B)D E EE) s5 A;AA A;
A+(A;*A++A;;A?A?r^ c \ | j t }t j | j r| | nt j }|r|d r|d
d }|dk r d|d v rd}||d< d |d |d |d |d < |d
v r | j |d < n.|d v r | j
|d < n | j |d < nd
|d< | j |d < d
|d < || _ | j S )Nr redzRed Hat Enterprise Linuxr- r5 z
{} {} ({})r r` PRETTY_NAME)
cloudlinuxr/ r- r4 )ubuntur, r0 )r; dictr r r8 r7 r@ distrolinux_distributionlowerr r RHEL_FEDORA_CENTOSDEBIANUNKNOWN)r: r; dosids r4 to_dictzOsReleaseInfo.to_dict< sQ 9 $(FFEw~~c 011
5""5)))) -// 51 5 Q4::<<--//2Du}})Cqt)K)K %"&E$K+7+>+>!adAaD, ,E-( ???+.+Ai(( !555+.:i((+.;i(("+E$K'*{E)$+4E-( CIyr3 c 6 | d S )Nr4 rO r: s r4 id_likezOsReleaseInfo.id_like[ s {{}}Y''r3 c 6 | d S )NrC rQ rR s r4 pretty_namezOsReleaseInfo.pretty_name_ s {{}}]++r3 c R | dd S )zi
:return: OS name, like centos, ubuntu, debian, cloudlinux, redhat
in lower case
r5 r0 )rO r9 rR s r4 get_oszOsReleaseInfo.get_osc s" {{}} y111r3 c 2 | dk S )Nr- rW rR s r4 is_rhelzOsReleaseInfo.is_rhelk s zz||v%%r3 c 2 | dk S )Nr/ rY rR s r4 is_centoszOsReleaseInfo.is_centoso zz||x''r3 c 2 | dk S )NrE rY rR s r4 is_ubuntuzOsReleaseInfo.is_ubuntus r] r3 c . | dv S )N)rD cloudlinuxserverrY rR s r4
is_cloudlinuxzOsReleaseInfo.is_cloudlinuxw s zz|| AAAr3 c J t j t S r )r r r8 _CL_SOLO_EDITION_FILErR s r4 is_cloudlinux_soloz OsReleaseInfo.is_cloudlinux_solo{ s w~~ 3444r3 c 2 | dk S )Nr, rY rR s r4 is_debianzOsReleaseInfo.is_debian r] r3 c 2 | dk S )NolrY rR s r4 is_oracle_linuxz OsReleaseInfo.is_oracle_linux s zz||t##r3 c 2 | dk S )N almalinuxrY rR s r4 is_almalinuxzOsReleaseInfo.is_almalinux s zz||{**r3 c 2 | dk S )NrockyrY rR s r4
is_rockylinuxzOsReleaseInfo.is_rockylinux s zz||w&&r3 ) r+ r, r- r7 r8 rK rJ rL r; classmethodr@ r rm r rO r rS rU rW rZ r\ r_ rb re rg rj rm rp r2 r3 r4 r+ r+ % s &N
Y{
#
#F"#?@@i %%G E F F [ F S#X [ < ( # ( ( ( [( ,C , , , [, 2s 2 2 2 [2 & & [& ( ( [( ( ( [( B B [B 5 5 [5 ( ( [( $ $ [$ + + [+ ' ' [' ' 'r3 r+ r chunksizec 0 t | || d S )zReturn hash of the file `filename`, reading it in chunks.
* filename is a path to a file;
* hash_func is a function that returns hash object (one of hashlib.md5
etc);
* chunksize is a size of chunks to read, in bytes.
r )file_hash_and_size)r hash_funcrs s r4 file_hashrw s h 9 = =a @@r3 c | }d}t | d 5 } | | }|sn(| | |t | z
}@ ddd n # 1 swxY w Y | |fS )a Calculate hash and size of the file `filename`, reading it in chunks.
* filename is a path to a file;
* hash_func is a function that returns hash object (one of hashlib.md5
etc);
* chunksize is a size of chunks to read, in bytes.
Return tuple(hash, file size).r r TN)r r updater hexdigest)r rv rs hash_sizer< chunks r4 ru ru s
IKKE D
h FF9%%E
LL CJJ D ?? d ""s AA,,A03A0c | \ }}| |k r&t dj di t |S )z0Given login.defs line, return *varname*'s value.z"Expected {varname!r}, got {name!r}r2 )r ri r vars)varname defs_liner values r4 _parse_name_valuer sJ //##KD%$D=DNNtvvNNOOO Lr3 c H t dk rt \ a } t S )Nr& )_MIN_UID_get_max_min_uid)r s r4 get_min_uidr s 2~~&(( ! Or3 /etc/login.defsc h d\ }} t | 5 }|D ]f}| d r t t d| }| d r t t d| }g ddd n # 1 swxY w Y n# t t
f$ r Y nw xY w||fS )zGet UID_MIN, UID_MAX from the login.defs file specified as *path*.
On error, return default for the current OS values.
)i i` UID_MINUID_MAXN)r
startswithintr r ri )r uid_minuid_maxr r= s r4 r r s( #GW
$ZZ F4
F
F??9-- F !"3It"D"D E EG??9-- F !"3It"D"D E EG
F F F F F F F F F F F F F F F F
Z
G s5 B A*B
B
BB BB B-,B-zimunify360-captchazimunify360-webshieldc l t \ fdt j D S )z~
:param excludes: users to exclude in results
:return: list: list of pwd.struct_passwd objects representing users
c P g | ]"}|j cxk rk n n |j v |#S r2 pw_uidpw_name).0entryexcludesr r s r4
z(get_non_system_users.. sS el - - - -g - - - - -%-x2O2O 2O2O2Or3 r pwdgetpwall)r r r s `@@r4 get_non_system_usersr sR ())GW \^^ r3 c d t \ } fdt j D S )z;
:return: list: list of str with system user names
c 4 g | ]}|j k
|j S r2 r )r r r s r4 r z)get_system_user_names.. s. W 5L5L
5L5L5Lr3 r )r r s @r4 get_system_user_namesr sE "##JGQ #&<>> r3 r c 0 t \ }}| |k S r )r )r r r s r4 is_system_userr s '))GW =r3 d )r5 typedc t | d 5 }| dd }|dk rF| |dz
| d dk r| d | | | d s| d d d d d S # 1 swxY w Y d S )Nzr+r r` r
r seekr r endswithr r r<
last_char_poss r4 append_with_newliner s
h
q!
A
FF=1$ % % %vvayyD
}}T""
GGDMMM
B"C CCr c t | d 5 }| dd }|dk rF| |dz
| d dk r| d | | | d s| d ddd dS # 1 swxY w Y dS )z>Append *data* to *filename* making sure there is
at the end.zr+br r` r
Nr r s r4 append_with_newline_bytesr s
h
! q!
A
FF=1$ % % %vvayyE!!
}}U##
GGENNN
r c d}t | d 5 }t fd|D sd}ddd n # 1 swxY w Y |rt | |S )zAdd *line* to *filename* if it is not present in the file
Returns:
True if the file was changed, False otherwise.
Frc 3 H K | ] }| k V d S r r r _liner= s r4 z&ensure_line_in_file..( 0 88U5;;==D(888888r3 TN)r anyr r r= changedr< s ` r4 ensure_line_in_filer s G
h 8888a88888 G ,Hd+++ N >AAr= c d}t | d 5 }t fd|D sd}ddd n # 1 swxY w Y |rt | |S )zAdd *line* to *filename* if it is not present in the file.
Returns:
True if the file was changed, False otherwise.
Fr c 3 H K | ] }| k V d S r r r s r4 r z,ensure_line_in_file_bytes..7 r r3 TN)r r r r s ` r4 ensure_line_in_file_bytesr / s G
h 8888a88888 G 2!(D111 Nr c t j | }t | d 5 }t d|d 5 }|D ]/}| |k r| | 0t j |j | d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )Nr wF)r r r ) r r dirnamer r r r r r )r r= basedirsfr r s r4 remove_line_from_filer > s5 gooh''G Xs% !???%CE E{{}}$$
"'8$$$% % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % %s6 B4A
B B4 B B4#B $B44B8;B8c , e Zd ZdZdZefdZd Zd ZdS )FileLockz`
Simple context manager to enable
UNIX-specific file locking with flock system call
r c Z || _ d| _ t |d | _ || _ d S )NFr )r lockedr r r )r r r s r4 r zFileLock.__init__R s* sOO r3 c K t j } t | j t t z d| _ | S # t t f$ r}|j t j k r | j
t j |z
k r&t d| j
Y d }~d S t j d d {V Y d }~nd }~ww xY w)NTz)Failed to lock file %s. Timeout exceeded.r )r= r r r
r r r IOErrorerrnoEAGAINr r] r r rn r )r rC exs r4
__aenter__zFileLock.__aenter__X s '
'di7!2333 " W%
'
'
'8u|++ \DIKK%$777NNCTY EEEEE mA&&&&&&&&&&&&&&
' 's *A CAC/CCc K | j rt | j t d| _ | j d S r )r r r r close)r exc_typeexc_valexc_tbs r4 __aexit__zFileLock.__aexit__p sC ; & $)W % % % r3 N)r+ r, r- r[ _TIMEOUTr r r r2 r3 r4 r r J sZ
H%- ' ' '0 r3 r c | g}| fdt | D t j }| d | dd | S # t t f$ r%}t d| Y d }~nd }~ww xY wd S )Nc 3 D K | ]\ }}|v t | V d S r )rm )r fieldr fieldss r4 r z user_identity.. s?
u
JJ
r3 r utf8surrogateescapez9Generation of user identity hash failed, invalid data: %s)
extendsorteditemshashlibsha1ry joinr rz ri UnicodeEncodeErrorr] r ) attackers_ipsourcer uid_datahash_alges ` r4
user_identityr z s
!>
&v||~~ 6 6
<>>))009JKKLLL!!### * +
G
4s B%B) )C :CC c 0 t j dk S )Nr )r getuidr2 r3 r4 is_root_userr s
9;;! r3 maskc # K t j | } d V t j | d S # t j | w xY wr )r r )r current_masks r4 run_with_umaskr sM 8D>>L
s 2 Ar usernamec ~ t | t st d| z t j | v rt d t j | }n0# t $ r# t d | w xY wt j
|j | }t | S )z
Returns user's home dir if `relpath` is not specified.
Otherwise, returns absolute path of `relpath`
build from `username`'s home dir
:raise ValueError: when user home dir is not exists
z#Invalid type for %s, should be str!zInvalid usernamezUser {!r} doesn't exist)
rl rm ri r sepr getpwnamKeyErrorr r r pw_dirr )r relpathpwabs_paths r4 get_abspath_from_user_dirr s h $ $ K>IJJJ v+,,,E
\(
#
# E E E299(CCDDDEw||BIw//H >>s A -Br c d} t | }t | | d}n># t $ r1}t t
| Y d }~nd }~ww xY w|S )NFT)r r relative_tori r] r rm )r r status user_homer s r4 does_path_belong_to_userr s
F -h77 T
y))) s1vv Ms 38
A3'A..A3c t j | st d| z t j | rg t j t j | j j S # t $ r) t t j | j cY S w xY wt j | } )NzPath %s should be absolute!)
r r abspathri r8 r getpwuidr st_uidr r rm r r s r4 get_path_ownerr s
7??4 ?6=>>>%
7>>$ 1
1|BGDMM$899AA
1
1
1274==/00000
1wt$$
%s /B 0B65B6 iterable
chunk_sizec # K t | }t t || }|r%|V t t || }|#dS dS )a
Generator that splits iterable on N-parts by chunk_size items in each chunk
>>> list(split_for_chunk([0, 1, 2, 3, 4, 5, 6, 7, 8, 9], chunk_size=2))
[[0, 1], [2, 3], [4, 5], [6, 7], [8, 9]]
:param iterable:
:param int chunk_size:
:return: generator:
N)iterrp r )r r ipieces r4 split_for_chunkr sp
XA :&& ' 'E
, VAz**++ , , , , ,r3 c t | t r+t d | D S t | t rt d | D S | S )Nc 3 > K | ]\ }}|t | fV d S r freeze)r keyr s r4 r zfreeze.. s1 JJ*#u#ve}}-JJJJJJr3 c 3 4 K | ]}t | V d S r r )r r s r4 r zfreeze.. s( 22uVE]]222222r3 )rl rF r8 r rp rq )rM s r4 r r sm !T 3JJ JJJJJJ At 322222222 Hr3 c & e Zd ZdZi Z fdZ xZS ) Singletonzc
Metaclass for creating only one instance of class, when providing
the same arguments.
c | t | t | f}| j | s( t t | j |i || j |< | j | S r )r
_instancesr9 superr r )r: rL rM r __class__s r4 r zSingleton.__call__ sr F4LL&..1~!!#&& "@% 3"7"7"@# # #CN3 ~c""r3 )r+ r, r- r[ r r
__classcell__)r s @r4 r r sI
J# # # # # # # # #r3 r c t j dd 5 } | cddd S # 1 swxY w Y dS )z3
:return str: server's external IP address
zhttps://api.ipify.orgr` r N)urllibrequesturlopenr r )r s r4 get_external_ipr s
7 C C !qvvxx ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !s &AA Ac < d}| | | }t j | st d|d| t |d 5 }| }ddd n # 1 swxY w Y |S )z
Reads parameter of kernel module
from /sys/module/{module_name}/parameters/{parameter}
:return str: value of the parameter
z(/sys/module/{mod}/parameters/{parameter})mod parameterzCannot find parameter z for module r N)r r r r8 ri r r r ) module_namer#
_MOD_PAR_PATH
param_filepr s r4 get_kernel_module_parameterr( s ?M %%+%KKJ
7>>* % %
j8A ;; O
j# !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! Ls 'BBBc d}| D ][\ }}t |t r%|| vs|s|| |< d}(t | | | }?|| vs|sJ | d| || |< d}\|S )zPerforms deep update of dict dst with values from src.
Does not overwrite subdicts in dst blindly with new dicts in src, but does
a deep update of (sub)dict content recursivelyFTz already exists in )r rl rF dict_deep_update)dstsrcallow_overwriteupdatedr> r? s r4 r* r* s G 1 a ||1|A *3q6155 ---- /CFGG Nr3 c 8 e Zd Zd
dZd Zd Zd ZdedefdZd S )
TimedCacher c t |t sJ || _ || _ t | _ i | _ d S r )rl r
expirationr5 r cache_locks)r r2 r5 s r4 r zTimedCache.__init__) s< *i00000$ ]]
r3 c t }| j D ]J}| j | \ }}t j |z
| j k r||f||< K|| _ dS )z Clear cache from expired valuesN)r r3 r= r2
total_seconds)r tmp_cacher r added_ats r4 _collectzTimedCache._collect0 sh MM : 1 1C "joOE8 h&$/*G*G*I*III!& #
r3 c : t | _ i | _ d S r )r r3 r4 r s r4 r% zTimedCache.cache_clear9 s ]]
r3 c |}|r3t | }|t | z
}t | S )z
Generate key from call arguments
:param args: call positional args
:param kwargs: call keyword args
:return:
)r r rq hash)r rL rM seedkws r4 _make_keyzTimedCache._make_key= sB ''B E"II DDzzr3 funcr^ c t fd }t fd }t j r|n|} j |_ |S )a
Use it to cache calls to decorated function
@TimedCache(expiration=timedelta(minutes=10))
async def func(*args, **kwargs):
pass
:param func: decorated function
:return:
NOTE: is not thread safe.
c h K | | }j | }| t j x}j |< t j | j d {V nP# t j $ r= |j | u r t j x}j |< n
j | }Y nw xY w
j | \ }}ns# t $ rf t j j k rj d | i | d {V }|t! j fj |< Y nw xY w| n# | w xY w|S )NTFlast)r@ r4 r9 rn r r acquirer2 r6 TimeoutErrorr9 r3 r r r5 popitemr= release)rL rM r lockr r rA r s r4
wrapper_asyncz*TimedCache.__call__..wrapper_asyncW s ..v..C;??3''D|*1,..8t{3'
00!* (E(E(G(G + 0 0 0 t{3 ///29,..@t{3 / / #{3 / 0
0
: $
3IFAA : : :4:$,66
***666#'4#8#8#8 8 8 8 8 8 8F&,dikk&9DJsOOO : MsE AB A C&%C&+F D F A-F>F FF F/c Z | | } j | \ }}nm# t $ r` t j j k rj d | i |}|t j fj |< Y nw xY w|S )NFrD )r9 r@ r3 r r r5 rH r= )rL rM r r r rA r s r4 wrapper_syncz)TimedCache.__call__..wrapper_syncz s MMOOO..v..C
6 JsO
6
6
6tz??dl22J&&E&222 t.v.."($)++"5
3
6
Ms > A'B('B()r rn iscoroutinefunctionr% )r rA rK rM rO s `` r4 r zTimedCache.__call__J s
t
D
t
*400
MM
# .r3 N)r ) r+ r, r- r r9 r% r@ r! r r2 r3 r4 r0 r0 ( s CQ C1 C C C C C Cr3 r0 r c K | r<| s& | n# t $ r Y nw xY wdS | t j | h| d{V \ }}|rL| s| nd}|r t d| | dS dS | s t d| | dS dS )u Cancel *task* and wait up to *timeout* seconds for it to finish.
Unlike the common ``task.cancel(); suppress(CancelledError); await task``
pattern, this function **always returns** within *timeout* seconds —
even if the task catches ``CancelledError`` and continues running
(see DEF-40570 / CPython #103486).
Uses ``asyncio.wait`` (not ``wait_for``) because ``wait_for`` also
hangs when the inner task survives cancellation.
Nr z&Task %r raised during cancellation: %sz.Task %r did not finish within %ds after cancel)
done cancelledr r cancelrn rw r r] r )taskr rQ r r s r4 safe_cancel_taskrU s: yy{{ ~~
KKMMML$999999999GD!
&*nn&6&6@dnn D P NNCT3 O O O O O P P
YY[[
=A>)z systemd-runz--quietz--waitz--pipez --collectz --property=NoNewPrivileges=noz--property=ProtectSystem=noc ` | sdS t d | D S )Nr2 c 3 , K | ]\ }}d | d| V dS )z --setenv=r2 Nr2 )r r> r? s r4 r z+_systemd_run_setenv_args.. s7 ==A$Q$$$$======r3 )rq r envs r4 _systemd_run_setenv_argsrr s4 r ===== = ==r3 r c t s| S t t | z dd| fz }d d |D S )zWrap a shell command so it runs as a transient systemd unit
outside the agent's NoNewPrivileges= sandbox. Returns the original
command unchanged when this process is not under NNP.z/bin/shz-c c 3 > K | ]}t j | V d S r )shlexquote)r r' s r4 r z._wrap_outside_sandbox_shell.. s* 22qEKNN222222r3 )rm _SYSTEMD_RUN_BASErr r )r rq partss r4 _wrap_outside_sandbox_shellrz sa
"3
'
' ( dC
!
8822E222 2 22r3 c t st | S t t t | z dz t | z S )z5Argv-form counterpart of _wrap_outside_sandbox_shell.)z--)rm rp rx rr rq )argvrq s r4 _wrap_outside_sandbox_argvr} sY Dzz
"3
'
' (
++ r3 rp c L K t t | | |fi | d{V S )u run_cmd_and_log variant that escapes the agent's systemd sandbox.
Use for shell commands whose RPM/apt scriptlets perform LSM domain
transitions on exec (e.g. kernelcare install, hardened-php
groupinstall) — see the module-level NNP note above.
rp N)rj rz )r re rq rf s r4 run_cmd_and_log_outside_sandboxr ( sZ !#CS111 r3 c J K t t | | fi | d{V S )z7run() variant that escapes the agent's systemd sandbox.rp N)r r} r| rq rM s r4 run_outside_sandboxr 8 s< /#>>>II&II I I I I I IIr3 c J K t t | | fi | d{V S )z=check_run() variant that escapes the agent's systemd sandbox.rp N)r r} r s r4 check_run_outside_sandboxr = s< 5dDDDOOOO O O O O O OOr3 c e Zd Zd ZdS )r c ` | j dk r7| j r0| dd}| j r
| j |d< | j | t j | d S # t $ r t | j dd pt | j dd }t | j dd pt | j dd }t | j d d pt | j d
d }|j
}|r|j p|j }t d || j || Y d S w xY w) NPENDINGz%Task was destroyed but it is pending!)rT messagesource_tracebackr- r+ gi_codecr_codegi_framecr_framez+!> Finalizer error in {}() {} at {} line {})_state_log_destroy_pending_source_traceback_loopcall_exception_handlerr __del__AttributeErrorgetattr_coro co_filenamef_linenoco_firstlinenoprintr )r contextr r framer linenos r4 r z Task.__del__E s{ ;) # #(A # B G %
E.2.D*+ J - -g 6 6 6 N4 4:~t<<
JA AD 4:y$77 7
It< <D DJ
D99 W
J> >E 'H.F43FF =DD$+x
s A CD-,D-N)r+ r, r- r r2 r3 r4 r r D s# r3 r c fd}|S )zReturn async callback which waits for *seconds*.
Usage:
@retry_on(Error, on_error=await_for(seconds=PAUSE_INTERVAL), timeout=T)
async def coro():
'here's something that may raise Error.'
c < K t j d {V S r )rn r )rL ra s r4 pausezawait_for..pauseo s) ]7+++++++++r3 r2 )ra r s ` r4 ru ru e s# , , , , , Lr3 c j t g st d fd}|S )a
Retry the function call on exception (or exceptions,
if given in tuple) at most *max_tries*.
Await *on_error* (if set) for each exception.
If *timeout* is set, stop all attempts in *timeout* seconds.
If *silent* is set to True - don't raise exceptions after max
If *should_retry* is set - await it and on False, stop auto-retry cycle
tries or timeout.
z Set any of max_tries, timeoutc t j fd }t j fd }t j r|S |S )Nc ~ K rt j z }
st j d nt d
dz D ]} rg|t j z
}|dk r$t j | i || d {V c S
s t
j r d n | i | d {V c S }# t
j t
j f$ r $ rX} || d {V }|s
}|
k r
s r d| || d {V Y d }~d }~ww xY wd S )Nr r r Timeout exceeded when calling %s0Max tries exceeded when calling %s with error %s)
r= r> itertoolscountr rn r rG r r rL rM end_timer remaining_timer should_retry_retr rA rB rb rc should_retrysilentr s r4 rK z2retry_on..decorator..wrapper_async s,
6 >++g5 !- """1i!m,,(
/ (
/
#/ ;)1DN4D4D)D)A--)0)9 $d 5f 5 5~* * * $ $ $ $ $ $ $* "&-&: :!$ " # $F!" !" !" &*T4%:6%:%: : : : : : :::: ,g.DE / / /#/1= c11E1E+E+E+E+E+E+E( / * )AI~~ % ! II!, $ # + &hsA . ........#//(
/ (
/s ?C
4C D:"AD55D:c rt j z }
st j d nt d
dz D ]} rH|t j z
}|dk r
| i |c S
st
r d n
| i |c S X# $ rL} || }|s
}|
k r
s r d| || Y d }~d }~ww xY wd S )Nr r r r )r= r> r r r rG r r s r4 rM z1retry_on..decorator..wrapper_sync s
6 >++g5 !- """1i!m,,$
) $
)
) 5)1DN4D4D)D)A--#'4#8#8#8 8 8 8#) "&2 2!$ " # $F!" !" !" $tT 4V 4 4444 ) ) )#/+7<Q+?+?( / * )AI~~ % ! II!, $ # + a(((#)'$
) $
)s %B.)BC, AC''C,rQ r rn rN )
rA rK rM r rB rb rc r r r s
` r4 rS zretry_on..decorator s + / + / + / + / + / + / + / + / + / + / + /
+ /Z
' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' ) ' )
' )R &t , , r3 )r ri )r rc rb r r rB r rS s ``````` r4 rs rs u sz $ 7# $ $ :8999\ \ \ \ \ \ \ \ \ \ \ | r3 c t j fd }t j fd }t j r|n|S )zhIf func throws an exception it is catched, converted to a string and
returned as a result of a call.c r K | i | d {V S # t $ r}t | cY d }~S d }~ww xY wr r reprrL rM r rA s r4 rK z,stub_unexpected_error..wrapper_async sg t.v........ . 77NNNNNN s
6166c b | i |S # t $ r}t | cY d }~S d }~ww xY wr r r s r4 rM z+stub_unexpected_error..wrapper_sync sQ 4((( ( 77NNNNNN s
.)..r )rA rK rM s ` r4 stub_unexpected_errorr s _T _T $ 7 = = O==<Or3 c 2 t j fd}|S )zkA decorator that logs uncaught exceptions ignoring them otherwise.
CancelledError is not handled.
Nc t j fd }t j fd }t j r|S |S )Nc K | i | d {V S # t j $ r $ r'} dt dd | Y d }~d S d }~ww xY wNz Ignoring exception from %s: %sr- r )rn r r rL rM r r r log_handlers r4 rK z>log_error_and_ignore..decorator..wrapper_async s
!T4 26 2 22222222)
4D.&99
s
A A Ac t | i |S # $ r'} dt dd | Y d }~d S d }~ww xY wr )r r s r4 rM z=log_error_and_ignore..decorator..wrapper_sync s
tT,V,,,
4D.&99
s 7 27r )r rK rM r r s ` r4 rS z'log_error_and_ignore..decorator s
&t , , r3 )r] r )r r rS s `` r4 log_error_and_ignorer s9
l < r3 c fd}|S )z'Abort the agent service on *exception*.c L t j fd }|S )Nc K | i | d {V S # $ r/}t | Y d }~d S d }~ww xY wr )r] r )rL rM r abortr r s r4 rO z2abort_agent_on..decorator..wrapper- s
!T4 26 2 22222222
###
s
A$AArP )r rO r r s ` r4 rS z!abort_agent_on..decorator, sC
r3 r2 )r r rS s `` r4 abort_agent_onr ) s* r3 c R t j dd| S )zPascalCase to snake_casez([a-z])([A-Z])z\1_\2)r" subrI )strings r4
snake_caser < s#
6"Hf 5 5 ; ; = ==r3 )exec_expr_with_empty_iterc ' K |s|rdg}nt |t }ddlm} |j 5 |D ]} | |g|R E d{V ddd dS # 1 swxY w Y dS )a]
Get iterator over results of sql expression expr. Given iterable will be
split for chunks and we will return iterator containing results of all
split queries. Useful for sql selects with in_() in order to avoid
too many sql variables error.
If exec_expr_with_empty_iter is True and iterable is None(empty) we will
process expression once, passing here chunk=None expr(None, *args)
:param expr:
:param iterable:
:param exec_expr_with_empty_iter: if iterable is None(empty) process
given expression once, passing here chunk=None expr(None, *args)
:return:
Nr r instance)r CHUNK_SIZE_SQL_QUERYdefence360agent.modelr db transaction)exprr r rL chunksr r} s r4 get_results_iterable_expressionr D s & L1 L 6JKKK...... " " * * * *EtE)D))) ) ) ) ) ) ) ) ) ** * * * * * * * * * * * * * * * * *s A##A'*A'r c d}ddl m} |j 5 t || D ] }| | |g|R z
}! ddd n # 1 swxY w Y |S )z
Get number of results of sql expression expr. Given iterable will be
split for chunks and we will return number of results of all
split queries. Useful for sql delete with in_() in order to avoid
too many sql variables error
r r r N)r r r r r execute)r r r rL r r r} s r4 execute_iterable_expressionr c s G...... " " 4 4$X*EEE 4 4E ttE)D)))1133 3GG 44 4 4 4 4 4 4 4 4 4 4 4 4 4 4 Ns 3A""A&)A&c X t j | dd dz S )Nr \nr )r fsencoder^ r s r4 encode_filenamer v s%
;t||D%00 1 1E 99r3 c b t j | d d dd S )Nr& r r )r fsdecoder^ r s r4 decode_filenamer z s+
;t SbS ! ) )% 6 66r3 c N t j t j | S r )base64 b64encoder r r s r4 base64_encode_filenamer ~ s BK - - . ..r3 b64namec h t t j t j | S r )r r r r b64decode)r s r4 base64_decode_filenamer s% F ,W 5 566 7 77r3 c V t j | }n# t $ r d}Y nw xY w|S )zS
Like pwd.getpwnam(username) but returns None instead of raising KeyError.
N)r r r )r r s r4 r r sA h'' Ms &&c > t t | | | S )zH
Put the specified `value` inside the [`low`, `high`] interval.
)maxmin)r lowhighs r4 clipr s s5$ % %%r3 Background task failedc | t j } | dS # t j $ r Y dS t
$ r} |d|| Y d}~dS d}~ww xY w)a[
Callback for asyncio.Future that logs exceptions and ignores CancelledError.
Use this as a done_callback for asyncio tasks/futures:
future.add_done_callback(log_future_errors)
Or with custom logging:
future.add_done_callback(
lambda f: log_future_errors(f, logger.warning, "Upload failed")
)
Nz%s: %s)r] r r rn r r )futr r r s r4 log_future_errorsr s n *
!
* * * Hgq)))))))))*s & A A
AAr .c r fd} ||i | }| | |S )z
Use this function in plugin initialization instead of
loop.create_task to be able to see the exceptions from the specified
coroutine.
c | sA| / d| | d d S d S d S )Nz1Unhandled exception during plugin initialization!)r r rT )rR r r )rT r s r4 _log_exceptionz6create_task_and_log_exceptions.._log_exception sv ~~ DNN$4$4$@ ' ' L!% !1!1
$@$@r3 ) create_taskadd_done_callback)r r rL rM r new_tasks ` r4 create_task_and_log_exceptionsr sY
d 5f 5 566H ~... Or3 c fd}|S )a5
Create coroutine from regular function
Useful to pass functions to APIs requiring coroutines
Note: coroutine will still block event loop in main thread.
For most blocking functions, run_in_executor should be considered instead
:param function:
:return: coroutine running function
c K | i |S r r2 )rL rM functions r4 r zmake_coro..coro s x((((r3 r2 )r r s ` r4 make_coror s# ) ) ) ) ) Kr3 c K |t k r
t j }n t j } |dt | dd x}rd| dnd| | t j t d {V d S )Nz7Failed to copy data%s to modsec ruleset dir %r, try: %sr z ()r )COPY_TO_MODSEC_MAXTRIESr] r r r rn r _MODSEC_COPY_FAILURE_TIMEOUT)r r rB fns r4 log_failed_to_copy_to_modsecr s ###lnCA $S*d ; ;;rD
R
" -4
5
5555555555r3 ) err_buf_sizec
4 K d }t | }t j | dt j j t j j d| d{V } t j ||j | |j 2 3 d{V }|W V
6 | d{V }|dk r%t || dd
| dS # | d{V }|dk r%t || dd
| w xY w)z
Start *cmd*, yield its stdout line by line [b'
']
If *cmd* return nonzero exit status, raise CheckRunError with the
last *err_buf_size* lines from stderr.
c J K | 2 3 d {V }| | 6 d S r )append)pipebufr= s r4 read_pipe_intoz1readlines_from_cmd_output..read_pipe_into sL $ JJt $$s ")maxlenT)rh rf rg Nr r3 ) r rn rr r_ rk r rg rf rw r r )r r rf r
err_bufr| r= r s r4 readlines_from_cmd_outputr
s <(((G/ !&!&
D I NN4; @ @AAA + $JJJJJ &+ 99;;&&&&&&
??
Cchhw6G6GHH H ? 99;;&&&&&&
??
Cchhw6G6GHH H H H H Hs *C :B C ADr` )rb delayc K t d|dz D ]3} | | d{V }|s!||k rt j | d{V 0|c S dS )z
Retry *predicate_coro(*args)* until it becomes true,
but no more than *max_tries* attempts.
Sleep for *delay* seconds before the next *predicate_coro()* call.
Return whether the predicate became true.
r N)r rn r )predicate_cororb r rL attemptr s r4 finally_happenedr
s IM** %~t,,,,,,, 'I---&& & & & & & & &
r3 ' c K t | d D ]-\ }}|W V ||z dk rt j d d{V .dS )z6Yield to the event loop every *chunk_size* iterations.r )rC r N) enumeratern r )r r r items r4
nice_iteratorr so XQ/// # #4
Nq -"" " " " " " " "# #r3 c e Zd ZdZd Zd ZdS )LazyLocka
Descriptor object to share async Lock between client objects.
Used in order to achieve lazy evaluation of the lock and share state
between it's clients.
Using asyncio.Lock in client code directly:
>>> class Foo:
>>> lock = asyncio.Lock()
leads to an unclear error ([Errno 9] Bad file descriptor),
when trying to move this Lock during demonization process.
c d | _ d S r )r r; s r4 r zLazyLock.__init__6 s
r3 c N | j st j | _ | j S r )r rn r )r r owners r4 __get__zLazyLock.__get__9 s! z ( DJzr3 N)r+ r, r- r[ r r r2 r3 r4 r r ' s< r3 r c | } | rd| v sd| vrdS | dd \ }}||fS )zOParse RPM output line, return (package_name, version) or None if not installed.z
not installed: Nr )r rI r )r= pkg_nameversions r4 _parse_rpm_liner" ? s[ ::<.wrapperv s\
7>>= > > +4
T4*6*********r3 r )rA rO s ` r4 check_disabled_firewallr- u s3
4[[+ + + + [+ Nr3 >
imunify-ui imunify-coreimunify-antivirusimunify360-firewallpackagesc K t \ }}t | }t ||z dd d{V }t ||| S )a
Retrieves the version of the specified system packages using
a command and regex specific to the current system.
Parameters:
packages (Iterable[str]): A set of package names to retrieve version for.
Returns:
A dictionary mapping package names
to their corresponding version strings, or None
if the package is not installed or version information
cannot be retrieved.
F)r r N)r( rp safe_run_with_timeout_parse_package_info_output)r2 r
parse_line
packages_listr s r4 system_packages_infor9 st -..OCNNM( mR% F &fmZ H HHr3 r r7 c n fd| D fd|D S )Nc X i | ]&} | xd xd x#'S )r r r2 )r r= r7 pkgr vers r4
z._parse_package_info_output.. sf j&& &F 1I
S
1I
S S r3 c < i | ]}| | S r2 )r9 )r r< parseds r4 r> z._parse_package_info_output.. s% 5 5 5SCC 5 5 5r3 )
splitlines)r r2 r7 r@ r< r r= s `@@@@r4 r6 r6 sf
%%'' F 6 5 5 5H 5 5 55r3 c K t j t | fi || d {V S # t j $ r |d| Y dS w xY w)Nr z#Command %s failed: Timeout occurredr )rn r r rG )rx r rB rM s r4 r5 r5 s % W ' ' ' '
17;;;rrs &+ A
A
nc # K |dk rt d t | }t t || x}r%|V t t || x}#d S d S )Nr zn must be at least one)ri r rp r )r rC itbatchs r4 batchedrG s
1uu1222
h Br1
&&
&% r1
&&
&% r3 rM c # R K t | D ]} fd|D V d S )Nc " i | ] }|| S r2 r2 )r r> rM s r4 r> z batched_dict.. s &&&1q!A$&&&r3 )rG )rM rC rF s ` r4 batched_dictrJ sK A ' '&&&&&&&&&&&' 'r3 c n t j ddgd } | d }|s?t d r t j ddgd }d|v rd}|S # t $ r&}t d | Y d }~d
S d }~ww xY w) Nhostnamez-fT)text)z.cloudwaysapps.comz.cloudwaysstagingapps.comz/usr/local/sbin/apminfo Cloudwaysz$Error while checking environment: %sF) rj check_outputr r r r8 r r] r )rL
_is_cloudwaysr r s r4 is_cloudwaysrR s +
T
%'' !)) ?
%&;!r{ s
* * * * * * * * / / / / / / / / : : : : : : : : : : 2 2 2 2 2 2 2 2 2 2 2 2 ' ' ' ' ' '
% % % % % % GCx 8 $ $ d011 6 d344 "d#B C C $ 899 SJNN:B??
+ + + + +D + + + Q K K K K 4T 4
0 0 3u 0 0 0 0 f 0
K2
(5
5
.;
'
'
'
'
' ,
+ + + + + + + +@ :?; ; ; ;F (, d d d
3J $ d
$Jd
d d d dN Q
?
?C
?
?
?
?h' h' h' h' h' h' h' h'X %[4
A
A
A58
A
A
A
A
A # ## # 38_ # # # #2 . <
$)#
5 T 5 T % % %- - - - - - - -` 0E 6 D &3 # $ % % %
,
,h
,C
,)
,
,
,
,
# # # # # # # #" R ! ! ! ! " 2e e e e e e e eP -.
>) ) ) Z Q 4 $ > > > 3 3S 3s 3 3 3 3 $
,0 J J J J J
26 P P P P P 7< B
$ s s s slP P P* $-$ & & & &R %7 &> > >
6; * * * * *@ '; &: : :7 7 7/ /% / / / /8E 8d 8 8 8 8 & & &* * * *.i ( 4
6 6 6 %( I I I
c I I I ID =>Q
# # # # 0 # %S/D"8 3 5c?T#9 " Q $s)XseU38_t%; ;<
<= .F F F F F F F F " IsmI #sTz/I I I I, 6 63i 6 #c3h$ 667 6
#sTz/ 6 6 6 6 !, 'DcN 's ' ' ' '
Q ( T c
t
& & & & &r3