V4| B d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
m Z m Z d dl
mZmZ d dlmZ d dlmZ d d lmZ d
d lmZ d
d lmZ d
d
lmZ d dl m Z m Z d dl m Z m!Z! d
dl"m#Z# ej$ e% Z&dZ'dZ( G d de) Z*de+fdZ,d Z-de+fdZ.d Z/dS ) N)CancelledError)Version)Path)BACKUP_EXTENSION
CheckRunErroratomic_rewrite)MODSECIndex)
web_server)APACHE) GenericPanel ) map_components_versions_to_tags) HostingPanel)CorazaModSecurity)safe_update_configgraceful_restart)is_apache2nginx_enableduse_coraza4cpanel)is_force_use_corazazD/var/lib/cloudlinux-app-version-detector/components_versions.sqlite3ztags_matching.jsonc e Zd ZdS )NotSupportedWebserverErrorN)__name__
__module__ __qualname__ X/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/waf_rules_configurator.pyr r $ s Dr r returnc K t } t s t st rdS | d{V }t | t r |t k S |t k rdS t j d{V }t j
d{V }n=# t $ r t $ r&}t d| Y d}~dS d}~ww xY w|t d k od|v S )zApache >= 2.4 is supported and security2_module installed.
- litespeed is not supported
- nginx is not supported
Apache is expected to be running, otherwise False is returned
In case of any error, False is returned also
TNFz-Error occurs while getting Apache version: %sz2.4s security2_module)r r r r get_web_server
isinstancer
r r apache_versionapache_modulesr Exceptionloggererrorr )hp webserverversionmodulesexcs r is_webserver_supportedr- ( sS
B " $ $
t''))))))))I"l## # F""Fu"133333333"133333333
DcJJJuuuuu genn $ G)<)GGs 2B8 8C2 C--C2c R K t d{V st d t } t | }t | t }t | }| o| |k }|sf|r0t ||d r t d dS dS t || d{V r t d dS dS t d dS )zO
Update modsec config file with enabled tags for specific directories.
NzkWAF rules configurator supports only apache webserver with version >= 2.4 or apache2nginx and ModSecurity 2F)backupz2App specific rules config was successfully updatedz-WAF Rules Set Config was successfully updatedz*WAF Rules Set Config is already up to date)r- r r r get_app_specific_waf_configr" r
_rules_configexists read_textr r& infor )panel config_path is_coraza
new_config is_uptodates r update_waf_rules_configr: L so ()) ) ) ) ) ) )
(
?
NNEu88::;;K
5"344I y))J F!6!6!8!8J!F B M k:eDDD
H
( Z@@@@@@@@
M KLLLLL
M
M @AAAAAr r7 c t j t j t
t }t |d 5 }t j | }d d d n # 1 swxY w Y t t || S )Nzutf-8)encoding) ospathjoinr
files_pathr MAPPING_FILEopenjsonloadr COMPONENTS_VERSION_DB)r7 mapping_pathftagss r r1 r1 r s 7<< 0 8 8,GGL
lW - - - y|| * tY s A//A36A3c | K t } n# t $ r Y dS w xY wt j | t z r_t j | t z | t d{V dS # t $ r t d Y dS w xY wdS )uI
In case if Agent starts and config backup is present — then
it is required to restore it: original .conf files must be replaced by
the backup file and then WS restart command must be applied.
In this case we assume that backed up configuration file is correct
and none config checks are performed.
Nz2Web server failed to start with a backed up config) r r0 NotImplementedErrorr= r> isfiler renamer r r& exception)r6 s r try_restore_config_from_backuprN { s "nn@@BB
w~~k$4455
+ 00+>>> "$$ $ $ $ $ $ $ $ $ $ D
s %
33;B $B98B9)0rC loggingr= asyncior packaging.versionr pathlibr defence360agent.utilsr r r im360.filesr r
defence360agent.subsysr im360.subsys.panels.baser !im360.subsys.panels.generic.panelr
modsec_app_version_detectorr panels.hosting_panelr panels.coraza_modsecurityr !defence360agent.subsys.web_serverr r im360.utilsr r
int_configr getLoggerr r& rE rA r% r boolr- r: r1 rN r r r r` s " " " " " " % % % % % %
& % % % % % % % - - - - - - + + + + + + : : : : : : H H H H H H . . . . . . 8 8 8 8 8 8 C B B B B B B B + + + + + + 8 $ $ K $ !Hd !H !H !H !HH#B #B #BLT r