YȈNx' @ U d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
d dlmZ d dlmZmZmZ d dlmZ ej Zej ej z ej z Z ej e Z e Z ee
e!d< de j" fd Z#d)d Z$ ej% e$ d Z& G d
de' Z(de)d
dfdZ*d Z+d*dZ,de)fdZ-de)de)fdZ.de)de)fdZ/de)fdZ0 e,ej1 Z1 e,ej2 Z2e d+d Z3e d Z4e d e)fd Z5e d,d ee)e6f fd Z7e d e)d!e6d"e6d#e8fd$ Z9d%eee)e6f ee6df f d&eee)e6f ee6df f fd'Z: d-d%e)d&e)fd(Z;dS ). N)ProcessPoolExecutor)contextmanagersuppress)chain)SetTupleUnion)utils
_active_poolsloopc K t d }t | | j |g|R d {V | d t | S # t | w xY w# | d t | w # t | w xY wxY w)N ) max_workersF)wait)r r addrun_in_executorshutdowndiscard)r argspools W/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/safe_fileops.py_run_in_fresh_executorr s 1 - - -Dd()T)$66666666666 ( MMuM % % % ! !$ ' ' ' 'M ! !$ ' ' ' ' ( MMuM % % % ! !$ ' ' ' 'M ! !$ ' ' ' 's/ B A44 BC%C+C% C""C%returnc t t D ]L} | dd # t $ r%}t d| Y d}~Ed}~ww xY wt dS )zShutdown all tracked ProcessPoolExecutors.
Should be called during agent shutdown to ensure clean process termination.
FT)r cancel_futuresz+Error shutting down ProcessPoolExecutor: %sN)listr r Exceptionloggerwarningclear)r es r shutdown_process_poolsr" ) s
]## M M M MMuTM : : : : M M M NNH! L L L L L L L L Ms 0
A AA c t j g t j | t j | | | S N)os setgroupssetgidsetuid)funuidgidr s r dropr, : s8 LIcNNNIcNNN 3: c e Zd ZdS )UnsafeFileOperationN)__name__
__module__ __qualname__ r- r r/ r/ A s Dr- r/ pathc t j | }t j |j sYt
d| t j |j t j | t d| dS )zVerify path is a regular file; remove and raise FileNotFoundError if not.
Uses os.lstat() to avoid following symlinks. If the file is a FIFO,
symlink, socket, device, etc., it is deleted so the caller can
recreate it as a regular file.
z:Identity file %s is not a regular file (mode=%s), removingz#Removed non-regular identity file: N)
r% lstatstatS_ISREGst_moder r filemodeunlinkFileNotFoundError)r4 sts r ensure_regular_filer> E s
$ B <
# # N H M"* % %
$ Ld L LMMMN Nr- c t j t | }|j t j k r t
dt | z dS )Nz The file belongs to admin user: T)r% r7 strst_uidr
get_min_uidr/ )filer= s r check_non_admin_filerD W sT T B y5$&&&&! .T :
4r- Fc fd}|S )Nc P t j d d fd
}|S )N)r c B K t j | s
st d| z t j | }t
t |j |g }
rt |j }|D ]I}t j t | }|j dk r|j dk r|j |j }} n Jt dt | z |pt j }t! |t" ||| g|R d {V S )NzNo such file or directory: r z"Unsafe file operation under root: )r% r4 existsr< pathlibPathr reversedparentsr7 r@ rA st_gidr/ asyncioget_event_loopr r, ) filenamer r r4 pathspr= r* r+ r)
missing_oks r wrapperz$safe.._safe..wrapperb sQ 7>>(++
J
'1H< <))D(4<004&99E
/ ..
WSVV__9>>bi1nn !y")CE)83t99D 37133D/
r- ) functoolswraps)r) rT rS s ` r _safezsafe.._safea sK 04
> r- r3 )rS rW s ` r saferX ` s$ ! ! ! ! !F Lr- rP c R t j | d S r$ )rI rJ touchrP s r _touchr\ s$ L """""r- datac T t j | | d S r$ )rI rJ
write_textrP r] s r _write_textra s& L%%d+++++r- c b K t d t | | d {V S NT)rS )rX ra r` s r r_ r_ s@ 3&&&&{33HdCC C C C C C CCr- c ` K t d t | d {V S rc )rX r\ r[ s r rZ rZ s> .&&&&v..x88 8 8 8 8 8 88r- Tc # L K d|v rt d t | | 5 }t j | }t j | }t j d| }t | }||k s|j |j
k rt d| |rEt j |j
t j | j vrt d| d |V d d d d S # 1 swxY w Y d S )Nwz'w' mode is not permittedz/proc/self/fd/zUnable to safely read z . File is not in user homedir)r/ openr% fstatfilenopwdgetpwnamreadlinkr@ rA pw_uidrI rJ pw_dirrL ) rP modeuserrespect_homedirfr= passwd real_path filename_strs r safe_open_filerv sz
d{{!"=>>>
h
Xahhjj
!
! d##K = = =>> 8}}
I % %29
+E+E%&M|&M&MNN N
V]++< --56 6 &. . . .
- s C&DD D c / B K t j | i |} |V t t 5 t j | ddd dS # 1 swxY w Y dS # t t 5 t j | ddd w # 1 swxY w Y w xY w)z
Context manager which wraps os.open and close file descriptor at the end
:param args: positional arguments for os.open
:param kwargs: keyword arguments for os.open
N)r% rg r OSErrorclose)r kwargsfds r open_fdr| s!
$ !& ! !B
g
HRLLL Xg
HRLLL s@ A AAA B 1B B B B B B namec / K t | g|R dt j i|5 }t j d | }| |k rt d |V ddd dS # 1 swxY w Y dS )a
Context manager to get a directory file descriptor
It also checks if a directory doesn't contain a symlink in the path
:param name: full directory name
:param args: positional arguments for os.open
:param kwargs: keyword arguments for os.open
flagsz/proc/self/fd/{}z%Operations on symlinks are prohibitedN)r| r% O_DIRECTORYrl formatr/ )r} r rz dir_fdreals r
opendir_fdr s
= = = =BN =f = = {-44V<<== 4<<%&MNN N s AA--A14A1rr c # K d}t | t rt t 5 t j | | }t j | |j t
j z t
j z | ddd n # 1 swxY w Y t j
| || } t | | 5 }|pt j | |_ |V |rGt t 5 t j | |j ddd n # 1 swxY w Y nO# |rHt t 5 t j | |j ddd w # 1 swxY w Y w w xY wddd dS # 1 swxY w Y dS )a
Context manager to open file object from file name or from file descriptor
File object extended with 'st' attribute that contains os.stat_result of
the opened file
:param f: file name or file descriptor to open
:param dir_fd: directory descriptor, ignored if 'f' is a file descriptor
:param flags: flags for os.open, ignored if 'f' is a file descriptor
:param mode: mode for built-in open
Nr )ro r )r r ro )
isinstancer@ r rx r% r7 chmodr9 S_IRUSRS_IWUSRrg r= )rr r r ro r= fos r open_fobjr s
B!S 3
g
6***B H
T\1DL@
GAU6 2 2 2
ad 1r bgajj 1HHH
1 g&& 1 1HQRZ00001 1 1 1 1 1 1 1 1 1 1 1 1 1 1
1 g&& 1 1HQRZ00001 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1s A
BB B : FD%F1 D
FD F D !F%E1< E$ E1$E(
(E1+E(
,E11FFFr r is_safec # K |r3t | || 5 }|dfV ddd dS # 1 swxY w Y dS | |fV dS )z
If is_safe flag is True, open file descriptor using name and dir_fd
If is_safe is False, return name and dir_fd as is
)r r N)r| )r} r r r r{ s r
safe_tupler s
T&
6
6
6 "d(NNN Fls +//srcdstc \ | \ }}|\ }}t |rdn t j z } t ||t d 5 }
t ||| d 5 } |r |d t j |
| t |t r2t j |
|
j j d d d n # 1 swxY w Y |r=t |t r(|r |d t j
|| d d d d S # 1 swxY w Y d S )Nr rb)r r ro wbr r r )W_FLAGSr% O_EXCLr R_FLAGSshutil copyfileobjr r@ r ri r= r9 r; ) r r
src_unlink
dst_overwriteracecallsrc_f
src_dir_fddst_f
dst_dir_fdw_flagssrc_fodst_fos r _mover
s E:E:m:;G
jd
0
*G$
B
vv . . .%%%
B vy/@AAAA B B B B B B B B B B B B B B B 0*UC00 0
IeJ / / / /%0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0s7 D!A/C
> D!
C D!C AD!!D%(D%c z K t j | \ }}t j | \ } }
t | 5 } t | 5 } t || t
| 5 }
t |
| t | 5 }t j || }t j }t |t t |j
|j |
||||
d {V |r*|r(|r |d t j || |r>t j |
|j
|j | t j |
|j | d d d n # 1 swxY w Y d d d n # 1 swxY w Y d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )Nr r )r% r4 splitr r r r r7 rN rO r r, r rA rM r; chownr r9 )r r safe_srcsafe_dstr r r src_dirsrc_namedst_dirdst_namer r src_tuple dst_tuplesrc_str s r safe_mover . s
c**GX
c**GX G B
J- - B Z*gx B
J*gx B
*555%''$ M M
3( 3
Ihz 2 2 2 2 B HXv}fmJ O O O O HXv~j A A A A= B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B Bs F0&F>FCE* F*E.
.F1E.
2F5 FF FF F F0F F0 F F00F47F4)r N)F)T)Nr N)FFTFN) rD rX r\ ra r_ rZ r r; rv r| r intr boolr r r r3 r- r r s
2 2 2 2 2 2 / / / / / / / / $ $ $ $ $ $ $ $ $ $ ! ! ! ! ! !
+
*rz
!BK
/ 8 $ $ +.#%%
s&' / / / (w'@ ( ( ( (
& ' ' ' ) Nc Nd N N N N$ $ $ $ $N#S # # # #,# ,S , , , ,Ds D# D D D D9# 9 9 9 9
RX
bi 8
S
1 1sCx 1 1 1 1F S # c D 0 uS#Xc4i 00 1 0 uS#Xc4i 00 1 0 0 0 0H
*B *B *B *B *B *B *B *B *Br-