ї Pз.ї 'хЦСй≈ddlZddlZddlZddlmZddlZddlmZmZm Z ddl mZddlm Z ejeі╚ZdZedі╚ZdZd Zd ZdZdZd └Zd└Zd└Zd└Zd└ZdS)ИN)зPath)зatomic_rewriteз check_runз CheckRunError)зfiles)зProactiveDefencez'/usr/share/i360-php-opts/autorules.yamlz/usr/share/i360-php-optsz2/usr/share/i360-php-opts/phpimunity.compiled.rulesz/usr/bin/i360-storage-mkcustomz/usr/bin/i360-storage-newz#/usr/bin/i360-storage-replacehdb-v2Иc┐СPK≈tjtjd╛і╚} td└|═і╚Dі╚і╚}n+#t $rt═dі╚YdSwxYw|═|dі╚}tdz}tj|dd╛ і╚5}t|d і╚5}tj ||і╚dddі╚n#1swxYwYdddі╚n#1swxYwYtj|tі╚dS)NF)зintegrity_checkc3С2K≈|]}|ddk╞|V≈▄dS)зnamezautorules_opt.yaml.gzN╘)з.0зis ЗK/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/proactive.pyЗ z,update_php_immunity_files..s:ХХ─П П ь╗╗&╛ п5Lр(Lп(L┬Aп(Lп(Lп(Lп(LП П Сz)PHP Immunity rules are not found in indexзurlz.tmpзrtzutf-8)зencodingзw)rзIndexзPHP_IMMUNITYзnextзitemsз StopIterationзloggerзwarningз localfilepathзPHP_IMMUNITY_FILENAMEзgzipзopenзshutilзcopyfileobjзosзrename)зindexзitemз local_pathзtmpзsrcзdsts rзupdate_php_immunity_filesr-s╠ХХ─щ▄K²т*╦EпBяBтB─EПщП П ь≈{▓{▒}■}П Я Т Я Т ┬┬ЬУПППщ▐┼пBяCтCпCь┬┬ПЬЬЬПв$р$═T╗%є[я1т1─Jщ ═&я (─Cщ ▄░:≤t╗gп 6я 6т 6П%╦#Ґtь┬SЯ@Т@П%Ю щт≤3═я$т$п$П%П%П%Я%Т%П%П%П%П%П%П%ЬЬЬП%П%П%П%П%П%П%Я%Т%П%П%П%П%П%П%ЬЬЬП%П%П%П%У└I┬cу(я)т)п)п)п)sGє+Aа$A8а7A8б7DцC*цDц*C. ц.Dц1C. ц2DдDдDc┐СK≈ tttgі╚┐d{V≈├dS#t$r&}t═d|і╚Yd}~dSd}~wt$r&}t═d|і╚Yd}~dSd}~wwxYw)Nzi360-storage is not found: %sz*Failed to apply new php immunity rules: %s)rзI360_STORAGE_BINr зFileNotFoundErrorrзerrorr)зerrs rзapply_php_immunity_rulesr3+sюХХ─ПHщу)у+@пAяBтBпBпBпBпBпBпBпBпBпBЬщП;П;П;щ▐┼п4╟cя:т:п:п:п:п:п:п:п:ЬЬЬЬщПHПHПHщ▐┼пAю3яGтGпGпGпGпGпGпGпGЬЬЬЬПHЬЬЬs └!'ї B╠Aа BаBбBc┐СнK≈|r\tі╚┐d{V≈├tjr>ttі╚═і╚rt і╚┐d{V≈├dSdSdSdS╘N)r-rrrr зexistsr3╘з_з is_updateds rзupdate_hookr:4s≤ХХ─ьП-щ'я)т)п)п)п)п)п)п)п)Ет)П -Еу*я+т+в2р2я4т4П -У+я,т,п,п,п,п,п,п,п,п,п,П -П-П -П -П -П -rc┐С╦K≈|rсtj═tі╚r t tgd└╛і╚┐d{V≈├dStjt jі╚}|═і╚D]^}t|═ |dі╚і╚}tt|j z|═і╚dd╛і╚▄]dSdS)aщWhen we are done with downloading /var/imunify360/files/php-immunity/v2/* files then we need to copy the files as is (no gunzip or byte-compiling) to /usr/share/i360-php-opts/ in a safe way using atomic_rewrite() as far these files are opened by i360.so using mmap() plus ensure that the files have correct permissions for cagefs (/usr/share/i360-php-opts/ directory files are visible for cagefs due to imunify360-php-i360 %post scriptlet) cС4≈tjtі╚Sr5╘r%зumaskз_RULES_UMASKrrrЗz)update_hook_immunity_v2..Ns─╔2є8ґLя#9т#9─r╘з preexec_fnNrFiє)зbackupзpermissions)r%зpathr6зI360_STORAGE_REPLACEHDB_BINrrrзPHP_IMMUNITY_V2rrrrзPHP_IMMUNITY_FILESDIRr з read_bytes)r8r9r'з wb_db_itemr)s rзupdate_hook_immunity_v2rK>s ХХ─ППщ ▄7▐>┼>у5я6т6П щщ,п-ь9п9ПЯТП П П П П П П П ┬FЕ■²Eт1я2т2┬ь÷+ +≥-°-П П ┬Jщ≤eв1р1╟*╦Uт2CяDтDяEтE┬JУ щ%╗ ╛я7ьв%р%я'т'ьь!П Я Т П П ППП П rc┐СNK≈|r ttgd└╛і╚┐d{V≈├dSdS)NcС4≈tjtі╚Sr5r=rrrr@z/recreate_signatures_on_update..gs─╣rЄxея7Mт7M─rrA)rзI360_STORAGE_NEW_BINr7s rзrecreate_signatures_on_updaterOaseХХ─ьП Ущ !п"п/Mп/MП Я Т П П П П П П П П П П П r)r!зloggingr%зpathlibrr#зdefence360agent.utilsrrrзim360rзim360.contracts.configrз getLoggerз__name__rr rHзPHP_IMMUNITY_COMPILED_RULESr/rNrFr?r-r3r:rKrOrrrЗrXs Пь───ь───ь ─ ─ ─ ьпппппь ─ ─ ─ ЮJпJпJпJпJпJпJпJпJпJьпппппь3п3п3п3п3п3Ю ┬т ≤8я $т $─ЮAпь≤п7я8т8пЮ8ПП4пь2пьCпь─П*П*П*П&HПHПHП-П-П-П П П ПF П П П П r