wpʗ $ d dl Z d dlZd dlZd dlZd dlmZmZ d dlmZ d dl m
Z
d dl m Z m
Z
d dlmZ d dlmZ d dlmZ d d lmZmZ d d
lmZmZ d d lmZ d d lm Z d d
lm Z d dl m Z d dl!m"Z" ej# e$ Z% G d de
j& Z'dS ) N) DoesNotExistIntegrityError) MessageType)run_in_executor)ValidationErrorlookup)run_in_executor_decorator)
web_server)Scope)Modsec Permissions) DisabledRuleDisabledRuleDomain)modsec_app_version_detector)shared_disabled_rules)waf_rules_configurator)
hosting_panel)GenericPanelModSecExceptionc e Zd Zej Z fdZ ej dd dd Z d Z
ej dd d Z ej dd e dd
Z
ej dd d Z ej dd
d Ze d ZdefdZed Z xZS )DisabledRulesEndpointsc z t | t j | _ d S N)super__init__r HostingPanelhp)selfsink __class__s T/opt/imunify360/venv/lib/python3.11/site-packages/im360/simple_rpc/disabled_rules.pyr z DisabledRulesEndpoints.__init__ s/
,.. rulesdisableNc
K | |pg }|r|dk rt d t | j d {V }t | | s2t d t | |z
| |||| d {V }|dk r+| t | |z d {V | j
t j ||||pd t j
d {V d S )Nmodsecz&Domains only allowed for plugin=modsecz-Some of the provided domains do not exist: {}) plugin_idrulenamedomains timestamp)._DisabledRulesEndpoints__check_edit_is_enabledr setr get_user_domainsissubsetformat_store_disabled_rule_sync_modsec_configs_sinkprocess_messager RuleDisabledtime)r pluginidr( r)
panel_domains sync_domainss r disable_rulez#DisabledRulesEndpoints.disable_rule" s $$&&&-R Lv))!"JKK K $'":":"<"< < < < < < <==
7||$$]33 !?FFLL=0
" 6 6 Bg
X ++C ,=,=
,MNN N N N N N N Nj(( $ D )++
r! c h K t j }t |fd d {V d S )Nc t j t j k t j k S r )r deletewherer6 rule_idexecuter7 r6 s r z>DisabledRulesEndpoints._delete_disabled_rule..L s; L'))
U<&&0,2F"2L
M
M
WYY r! )asyncioget_event_loopr )r r6 r7 loops `` r _delete_disabled_rulez,DisabledRulesEndpoints._delete_disabled_ruleH sl %''
r! enablec K | t j } t |fd d {V n# t $ r Y d S w xY wdk rd t |fd d {V D }| d {V t
| j d {V }| t
| |z d {V n | d {V | j
t j
t j d {V d S )Nc 0 t j S )Nr6 r? )r getrA s r rB z4DisabledRulesEndpoints.enable_rule..X s l .fb I I I r! r% c g | ]
}|d S )r ).0ds r
z6DisabledRulesEndpoints.enable_rule..^ s,
!
r! c t j t j t j j k S r )r selectdomainr> disabled_rule_id_idr7 tuples)drs r rB z4DisabledRulesEndpoints.enable_rule..b sA . 5*1 U-ARUJKKVXX r! )r& r' r* )r+ rC rD r r rF r, r r- r1 r2 r3 r RuleEnabledr5 )r r6 r7 rE r) r8 rV s `` @r enable_rulez"DisabledRulesEndpoints.enable_ruleQ s $$&&&%'' &IIIII BB FF X
.
G ,,VR88 8 8 8 8 8 8 8 dg&>&>&@&@ @ @ @ @ @ @ A AM++CLL=,HII I I I I I I I I,,VR88 8 8 8 8 8 8 8j(( # rTY[[
s A
AAz
list-disabledc . t j ||| S r )r fetch)r limitoffsetorder_bys r list_disabled_rulesz*DisabledRulesEndpoints.list_disabled_rulesu s !%:::r! zupdate-app-specific-rulesc K t j st d t j d {V d S # t j t j t f$ r!}t t | d }~ww xY w)Nz)App specific ruleset setting is disabled.)
r APP_SPECIFIC_RULESETr r update_waf_rules_configNotSupportedWebserverErrorr DatabaseNotFoundErrorNotImplementedErrorstr)r es r update_app_based_rulesz-DisabledRulesEndpoints.update_app_based_rulesz s * O!"MNN N *(@BB B B B B B B B B B " = ' =
* * *
"#a&&)) ) *s : !A< A77A<z update-shared-disabled-rulesc K t j }t t j d }t d | | D }t d|rd | nd | j
| d {V }|rt j
d {V d S d S )Nr% c , g | ]}t | S rM )re )rN r' s r rP zLDisabledRulesEndpoints.list_update_shared_disabled_rules.. s GGGDc$iiGGGr! z!Syncing shared disabled rules: %s z(empty))disabled_rules$get_shared_disabled_modsec_rules_idsr, r get_global_disabledlistunionloggerinfojoinr sync_global_disabled_rulesr
graceful_restart)r
rules_filerules_dbr" changeds r !list_update_shared_disabled_rulesz8DisabledRulesEndpoints.list_update_shared_disabled_rules s #HJJ
|7AABBGGHNN:,F,FGGGHH / $ 3CHHUOOO)
::5AAAAAAAA 0 -// / / / / / / / / / 0 0r! c t | } t j ||| }|D ]}t j || n# t $ r t j || }t j t j
|j k D ] }| |j
t j t j
|j k |D ] }t j |j | Y nw xY wt! | S )N)r6 r? r( )rT rS rJ )r, r insertr@ r creater rK rR r> rT r7 addrS r=
create_or_getrn ) r r6 r7 r( r) r9 inserted_idrO rV s r r0 z+DisabledRulesEndpoints._store_disabled_rule s{ 7|| &- r gii
$
")(3A
!<<z>DisabledRulesEndpoints._sync_modsec_configs.. s`
%$8(A r! c * t j d S )Nr% )r rm rM r! r rB z=DisabledRulesEndpoints._sync_modsec_configs.. s ,:8DD r! )rC rD rn gatherr sync_disabled_rules_for_domainsdictzipr r re r rs r
rt )r r) domain_list
rules_listrf r" rw rE s @r r1 z+DisabledRulesEndpoints._sync_modsec_configs s %''7mm "> %
1
g==[*5566 + 1 1 1 "#a&&))q 0 1
& DD
::5AAAAAAAA 0 -// / / / / / / / / / 0 0s =B
B1 B,,B1c < t j st d d S )Nz"Local rule management is disabled.)r
ALLOW_LOCAL_RULES_MANAGEMENTr rM r! r __check_edit_is_enabledz.DisabledRulesEndpoints.__check_edit_is_enabled s) 7 H!"FGG G H Hr! r )__name__
__module__ __qualname__r IM360SCOPEr r bindr: rF rX r r^ rg rx r0 r, r1 staticmethodr+
__classcell__)r s @r r r s KE/ / / / / V[)$$#
#
#
%$#
J
V[(##!
!
$#!
F V[/** ; ; ; +*; V[566
*
* 76
* V[899
0
0 :9
0 " " "6 0# 0 0 0 0> H H \H H H H Hr! r )(rC r loggingr5 peeweer r "defence360agent.contracts.messagesr $defence360agent.model.simplificationr defence360agent.rpc_toolsr r defence360agent.rpc_tools.utilsr defence360agent.subsysr
defence360agent.utilsr im360.contracts.configr r
im360.model.incidentr r im360.subsysr r rk r im360.subsys.panelsr (im360.subsys.panels.generic.mod_securityr getLoggerr rp
RootEndpointsr rM r! r r s / / / / / / / / : : : : : : @ @ @ @ @ @ = = = = = = = = E E E E E E - - - - - - ' ' ' ' ' ' 6 6 6 6 6 6 6 6 A A A A A A A A 4 4 4 4 4 4 @ @ @ @ @ @ / / / / / / - - - - - -
8 $ $wH wH wH wH wHV 1 wH wH wH wH wHr!