*6j d Z ddlZddlZddlZddlZddlmZmZ ddlm Z ej
e Z ddZ
defdZeej fddd Zed
Zd ed edefd
ZdS )a[ fd-based file operations for symlink-attack mitigation.
All helpers in this module use O_NOFOLLOW and dir_fd-relative syscalls
so that no path-based resolution can be redirected by a concurrent
symlink swap.
This module is intentionally kept separate from utils/__init__.py to
avoid loading these OS-specific helpers into every agent component.
N)contextmanagersuppress)Pathreturnc | dfg} |r$|d \ }}d}t j | 5 }|D ]}| d r`t j |j t j t j z t j z | }| ||j f d} n t j |j | ddd n # 1 swxY w Y |sN|
\ }} | 5t j | |d \ }
}t j | |
|"dS dS # t $ r |D ]\ }} | t j | w xY w)u Remove all contents of a directory using fd-relative operations.
Every entry is opened with ``O_NOFOLLOW`` so symlinks inside the tree
are unlinked rather than followed. The directory referenced by
*dir_fd* itself is **not** removed — the caller should ``os.rmdir()``
the parent entry after this call returns.
Uses an iterative approach with an explicit stack to avoid hitting
Python's recursion limit on adversarial deeply-nested trees.
*dir_fd* must be an open ``O_RDONLY | O_DIRECTORY`` descriptor.
NF)follow_symlinksdir_fdT)osscandiris_diropennameO_RDONLY O_DIRECTORY
O_NOFOLLOWappendunlinkpopclosermdir
BaseException) r stack
current_fd_pushedentriesentrychild_fdfdr parent_fds Q/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/fd_ops.py rmtree_fdr$ s " d^ E 5 !"IMJFJ''
A7 $ A AE ||E|::
A#%7 !J K". 82= H#-$ $ $
h
%;<<# t $ r1 t j d }t j | d | z }Y nw xY wd}d
}t+ d D ]}| d t j d
d} t j |t j t j z t j z t j z d| } n # t6 $ r Y w xY wt7 d t9 | }d}|t | k r3|t j |||d z
}|t | k 3||t j ||| t j || t j | t j! | d
}t j" |||| d}|dk rt j! | |BtG t 5 t j$ || ddd n # 1 swxY w Y nd# |dk rt j! | |CtG t 5 t j$ || ddd w # 1 swxY w Y w w xY wdS )a dir_fd-relative implementation of atomic_rewrite.
The caller opens the directory with O_NOFOLLOW before any file I/O
begins. All file operations use dir_fd so that a concurrent rename
of the directory to a symlink cannot redirect writes to a privileged
path.
r
rbr& NFz empty content: %r for file: %s)r r r i r d r z .i360editi z.Could not create temporary file (100 attempts))
src_dir_fd
dst_dir_fdT)%r r' splitr r r fdopenreadlenFileNotFoundErrorOSErrorerrnoELOOPloggererrorstatS_ISLNKst_modestrerrorS_IMODEumaskrangeurandomhexO_WRONLYO_CREATO_EXCLFileExistsError
memoryviewwritechownchmodfsyncr renamer r )filenamer5 uidgidallow_empty_content permissionsr r basename
content_fdf old_contentexcst
current_umask tmp_basenametmp_fdviewwrittens r# atomic_rewrite_fdri s " '--))KAxW bkBM1&
Yz4
(
( 0A&&TQ //K 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 $ 5
9 # #
DDDD t 5tXFFFu 1&%HHHB|BJ''
O ek2;u{+C+CXNNN ,rz22KK 1 1 1 HQKKM H] # # # =.0KKK 1 L
F
3ZZ
P
P"CCRZ]]%6%6%8%8CCC W bj(294r}D F
E H NOOO7$ D !! rxWXX77 7G D !! ?s HVS# & & &
%%%
,VOOOO Q;; HV #+,,
7
7 ,v6666
7
7
7
7
7
7
7
7
7
7
7
7
7
7
7 Q;; HV #+,,
7
7 ,v6666
7
7
7
7
7
7
7
7
7
7
7
7
7
7
7
7 $ 4s AB- '&B
B- B B- B ! B- -
C#9 C#C C# B F 8GG A I
I$#I$7C
N 1NNN 1PO4( P4O8 8P;O8 <P)r N)__doc__rB loggingr rF
contextlibr r pathlibr getLogger__name__rD r$ intr- r r2 r4 bytesboolri r# ru s0
/ / / / / / / / 8 $ $0 0 0 0f# : k T "
[
[
[
[ [ [ [ [ [rt