d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl
m Z d dl m
Z
d dlmZ d dlmZmZ dZ ej e ZdZd ez Zed
z Z e d Z e d e d
fZde e fdZ de de ddfdZ d Z de ddfdZ de de!ddfdZ"de de ddfdZ#de e fdZ$de fdZ%de fdZ&d Z'dS ) N)Path)Optional) Packaging)
save_state)
CheckRunError check_run zimunify-doctor.shz2https://repo.imunify360.cloudlinux.com/defence360/.sigz/var/imunify360/tmpz//etc/pki/rpm-gpg/RPM-GPG-KEY-CloudLinux-Imunifyz1/etc/apt/trusted.gpg.d/RPM-GPG-KEY-CloudLinux.gpgreturnc t D ]F} | r0t j t | t j r| c S Gd S N)
_PUBKEY_PATHSis_fileosaccessstrR_OKps Q/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/doctor.py _find_pubkeyr sK
99;; 29SVVRW55 HHH 4 urldstc F t j | }t j |t 5 }| d 5 }t
j || d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )N)timeoutwb)urllibrequestRequesturlopen
_HTTP_TIMEOUTopenshutil copyfileobj)r r reqrespfps r _blocking_downloadr) & s
.
%
%C ] ; ; %tSXX F F % 4$$$% % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % %s6 B A>2 B>B BB BB Bc ` t } | t j d sdS t ddd t t
j dt t }n9# t $ r,}t dt | Y d}~dS d}~ww xY w | }t j |j s5t j |j r |j t% j k r%t j t | d dS |d
z d nV# t $ rI}t d | t j t | d Y d}~dS d}~ww xY w| |fS )
zLocate the pubkey + gpg binary and create a validated 0700 workdir.
Returns (pubkey_path, workdir_path) on success or None on failure;
any partial state is removed before returning.
Ngpg T)modeparentsexist_okzimunify-doctor.)prefixdirz#cannot prepare workdir under %s: %s
ignore_errorsgnupg)r- zworkdir setup failed: %s)r r$ which_TMPDIRmkdirr tempfilemkdtempr OSErrorloggerinfolstatstatS_ISLNKst_modeS_ISDIRst_uidr geteuidrmtree)pubkeyworkdirexcsts r _blocking_setup_workdirrI . s ^^F
~V\% 0 0~t
5$
>>> $53w<< H H H
97CHHHttttt
]]__ L $ $ <
++ yBJLL(( M#g,,d ; ; ; ;4 7 !!u!---- .444
c'll$7777ttttt 7?s7 AA; ;
B1!B,,B15BE <E
F) >F$$F)r c L t j t | d d S )NTr2 )r$ rD r r s r _blocking_rmtreerK T s#
M#a&&------r r- c 0 | | d S r
)chmod)r r- s r _blocking_chmodrN X s GGDMMMMMr c v K t j }| dt | | d{V dS )zFetch *url* to *dst* without blocking the event loop.
Raises urllib.error.URLError (subclass of OSError) on any HTTP/transport
error, which the caller's `except OSError` already handles.
N)asyncioget_event_looprun_in_executorr) )r r loops r _downloadrT \ sI ! # #D
t%7c
B
BBBBBBBBBBr c
K t j } | dt d{V }|dS |\ }}|t z }|t dz z }|dz }d} t t | d{V t t | d{V t t j
t | }t dddd t | g|
d{V t dddd t | t | g|
d{V | dt |d d{V d
}||s#| dt | d{V S S # t t f$ rL} t" d| Y d} ~ |s$| dt | d{V dS dS d} ~ ww xY w# |s#| dt | d{V w w xY w)a#
Download imunify-doctor.sh + .sig into /var/imunify360/tmp and verify the
detached signature against an ephemeral keyring seeded with the
CloudLinux pubkey. Returns the verified script on success or None on
any failure (so the caller can fall back to the package copy).
Nr
r4 F) GNUPGHOMEr+ z--batchz--quietz--import)envz--verifyr, Tz%signed remote doctor fetch failed: %s)rP rQ rR rI _SCRIPT_NAMErT _SCRIPT_URL_SIG_URLdictr environr r rN rK r r: r; r< )
rS setuprE rF scriptsiggpghomesuccessrW rG s
r _verified_remote_scriptrb f s ! # #D&&t-DEE E E E E E EE }tOFG
|
#F
\F*
+C GGH V,,,,,,,,,#&&&&&&&&&2:W 666
Iy*c&kk B
Iy*c#hhF L
""4 &%HHHHHHHHH
H&&t-=wGG G G G G G G G G H
7 # ;SAAAttt H&&t-=wGG G G G G G G G G G H H H&&t-=wGG G G G G G G G G Hs+ C$E) )G:GG GG 'G0c K t d {V } | t d t j } t t | g d {V }| d t | j d {V n,# | d t | j d {V w xY w|
}|st d |S )Nz)Signed remote doctor script not availablezDoctor key is empty) rb
ValueErrorrP rQ r r rR rK parentdecodestrip)r^ rS outkeys r _repo_get_doctor_keyrj s
*,,
,
,
,
,
,
,F
~DEEE ! # #DJ s6{{m,,,,,,,,""4)96=IIIIIIIIIId""4)96=IIIIIIIIII
**,,
C 0./// Js #B )B0c K t j } t | sd} t t | dt
g d {V }| }|S )Nz%/opt/imunify360/venv/share/imunify360scripts)r DATADIRr is_dirr rX rf rg )dir_rh ri s r _package_get_doctor_keyrp sy D :: 764i >>?@@
@
@
@
@
@
@C
**,,
C Jr c K t d {V } n1# t t t f$ r t d {V } Y nw xY wt dd| i | S )N
doctor_key)rj r rd r: rp r )ri s r get_doctor_keyrs s .(******** :w / . . .+--------.|lC 0111 Js +AA)(rP loggingr r$ r> r8 urllib.requestr pathlibr typingr defence360agent.contracts.configr 'defence360agent.subsys.persistent_stater defence360agent.utilsr r r" getLogger__name__r; rX rY rZ r6 r r r r) rI rK intrN rT rb rj rp rs r r r sV
6 6 6 6 6 6 > > > > > > : : : : : : : :
8 $ $" 8<G
$$
%
%D :;;D <==
htn %C %d %t % % % %# # #L. . . . . .t 3 4 C C4 CD C C C C&Hx~ &H &H &H &HR C s r