T wɣ d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dl Z d dl
m Z m Z m
Z
mZ d dlmZ dZ ej e Z G d d Z G d d
Z G d d ee Zej ej ej ej ej ej ej ej iZ G d
de Z G d de Z!dedee ddfdZ"dee ddfdZ#defdZ$d d dZ%d dZ&d Z'dS ) N)Enum)ListDict)
CheckRunErroratomic_rewrite check_runrun)KWConfigzimunify360-pamc e Zd ZdZdZdZdZdS )
PamServicezdovecot-nativez dovecot-pamftpsshdN)__name__
__module__ __qualname__DOVECOT_NATIVE DOVECOT_PAMFTPSSHD E/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/pam.pyr r s" %N K
C DDDr r c e Zd ZdZdZdS )PamServiceStatusValueenableddisabledN)r r r r r r r r r r s GHHHr r c e Zd ZdZdZdZd ZdS )
DovecotStatusr pamnativec | j S N)value)selfs r __str__zDovecotStatus.__str__# s
zr N)r r r DISABLEDPAMNATIVEr% r r r r r s2 H
C
F r r c e Zd ZdS )PAMErrorN)r r r r r r r* r* / s Dr r* c N e Zd ZdZdZdZdZdZdedefdZ e
defd Z d
S ) _Configz^\s*{}\s*=\s*(.*?)\s*$z{}={}z/etc/pam_imunify/i360.iniwhitelisted_ips_pathz /var/i360_pam_imunify/wl/ips.txtdefaultreturnc 6 | }||n|S r" )get)r$ r. vs r get_defaultz_Config.get_default; s HHJJMqqw.r c | | j | j d d S # t $ r
| j cY S w xY w)N,)_IP_WHITELIST_OPTIONr3 _IP_WHITELIST_DEFAULTsplitFileNotFoundError)clss r ip_whitelist_pathz_Config.ip_whitelist_path? sr
-C,--99-
sB
! - - -, , , , -s A A AAN) r r r SEARCH_PATTERN
WRITE_PATTERNDEFAULT_FILENAMEr7 r8 strr3 classmethodr< r r r r, r, 3 sy .NM21 >/3 /3 / / / / -# - - - [ - - -r r, pathvaluesr/ c K t j }d d |D }t j t
| |d }| d | d {V d S )N c g | ]}|d z S )
r ).0r2 s r
z _export_list..P s 000Aq4x000r F)backup)asyncioget_event_loopjoin functoolspartialr run_in_executor)rB rC loopcontentwriters r _export_listrT N s{ ! # #Dgg0000011G
~tWU
K
K
KF
tV
,
,,,,,,,,,,r networksc d K t t | d{V dS )z4Save a list of `networks` into IP address whitelist.N)rT r, r< )rU s r export_ip_whitelistrW U s:
w0022H
=
==========r c K t ddg} t | d {V \ }}}|t j k r$t d||| t S |dk s| dk rt d| d|||f n4# t $ r
t cY S t $ r}t d |d }~ww xY wt | t j
| d S # t t j t" t$ f$ r}t d | |d }~ww xY w)
Nstatus--yamlz:SIGTERM while getting pam status, rc: %s, out: %s, err: %sr r zPAM status failed: run(z) = zPAM status failedzCan't get pam status from )_PAM_EXECUTABLEr signalSIGTERMloggerwarning_DEFAULT_STATUSstripr* r: OSErrorlog_response_warningsyaml safe_loaddecodeUnicodeDecodeError YAMLError TypeErrorKeyError)cmd
returncodeoutputerrexces r
get_statusrq Z s Hh
/C(+C......
FC &. ( (
NNL
# "
1__ # 5 5(33VS113
!6 5 5 5*++45$ &!!!G~fmmoo..x88 8 D G G G>F>>??QFGs5 B C& C/B??C+D "D=%D88D=Fc K t j dgt j ddgt j ddgt j dgi| } t t g||rdgng d d{V }t | dS # t $ r% t
d t | Y dS t $ r}t d
| z |d}~ww xY w) z#Enable PAM module. Raises PAMError.enable set-dovecotr r z
enable-ftpz --dry-runrZ Nz$%s not found, skipping enable for %szfailed to enable PAM for %s
r r r r r r r[ rc r: r^ r_ r r* )moduledry_run pam_commandrm ro s r rs rs y s6 ( 6!M8#<
K H
$+2;--
f%%%%%
2OV
H H H4v=>>CGHs 5A9 9+C' C0CCc K t j dgt j ddgt j ddgt j dgi| } t t g|d d{V }t | dS # t $ r% t
dt | Y dS t $ r}t d| z |d}~ww xY w) z$Disable PAM module. Raises PAMError.disablert r z disable-ftprZ Nz%%s not found, skipping disable for %sz failed to disable PAM for %sru )rv rx rm ro s r rz rz s )
;!M:#>
K I /!JK!J!JKKKKKKKK f%%%%%
3_f
I I I5>??SHIs .A2 2+C C)B<<Cc @ t j | }n?# t j t f$ r& t
dt | d }Y nw xY w|o| d }|r t
d| d S d S )Nz Not yaml response for %s: %swarningszimunify360-pam warnings: %s) rd re rf rh rg r^ r_ r[ r1 )rm responser| s r rc rc s >&--//22 N . / 5OOO 4HLL 4 4H @4h?????@ @s &) 9A%$A%)F)r/ N)(rK rN loggingr\ enumr typingr r rd defence360agent.utilsr r r r defence360agent.utils.kwconfigr
r[ getLoggerr r^ r r r@ r r r r r r r` Exceptionr* r, rT rW rq rs rz rc r r r r s|
O O O O O O O O O O O O 3 3 3 3 3 3 # 8 $ $
C 4 = 1 :N)2O*3 y - - - - -h - - -6-S -$s) - - - - ->S >d > > > >
G$ G G G G>H H H H H4I I I I&@ @ @ @ @r