Cw d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z m
Z
ddl m Z ddl
mZ ddlmZmZmZ ddlmZmZmZmZ ddlZdd lmZ dd
lm Z dd l m Z dd l m Z m!Z! dd
l"m#Z# ddl$m%Z% ddl&m'Z' ddl(m)Z) dZ*dZ+dZ, ej- e. Z/ G d d Z0 e0 Z1 G d de2 Z3 G d de2 Z4e5Z6de5de6fd Z7 e de5de6dz fd Z8 e d de5fd Z9de5defd Z:de6fd!Z;d"ede6dz fd#Zd)e5d*e?de5fd+Z@e,fd,e?e5ef d-eAde?e5e?e5eAf f fd.ZBdS )/u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) defaultdict) lru_cachewraps)islice)Path)AnyCallable Coroutine) parse_qsl urlencodeurlparse
urlunparse)IndependentAgentIDAPI)PanelException) HostingPanel)log_error_and_ignore safe_fileops)ImunifyPatchSubscriptionAPI)VulnerabilityAPI)VulnerabilityHitStatus)VulnerabilityHitz.imunify_patch_id
c
2 e Zd ZdZdZdZdZdZdZd Z e
de j fd Z
ed
edefd Zd
eded z fd
Zd
edededd fdZdd
ed z dd fdZefdedeeegeeeed z f f geegeeeed z f f f fdZd S )PurchaseUrlCachea Disk-based cache decorator for async functions.
This class can be used as a decorator to cache results of async functions
on disk with automatic expiration. The underlying diskcache.Cache
is lazily initialized on first access to avoid import-time errors
when the cache directory doesn't exist.
Usage:
@purchase_url_cache(ttl=3600)
async def get_purchase_url(username: str) -> str | None:
...
z#/var/imunify360/.cache/purchase_url purchase_url< i c P d | _ t t j | _ d S N)_cacher asyncioLock_locksselfs T/opt/imunify360/venv/lib/python3.11/site-packages/imav/contracts/imunify_patch_id.py__init__zPurchaseUrlCache.__init__M s .2 6A',6O6O returnc t | j +t j | j | j | j | _ | j S )z:Lazily initialize and return the diskcache.Cache instance.N)timeout
size_limit)r! diskcacheCache CACHE_DIRTIMEOUT
SIZE_LIMITr% s r' cachezPurchaseUrlCache.cacheQ s= ; #/ ? DK
{r) usernamec $ t j d| S )zGenerate a cache key for the given username.
Args:
username: The username to generate a key for.
Returns:
A string with the prefixed username.
:)r
KEY_PREFIXr4 s r' _make_keyzPurchaseUrlCache._make_key\ s #-:::::r) Nc | | }| j | }|t | S dS # t $ r&}t
d| Y d}~dS d}~ww xY w)z*Get a cached value for the given username.Nz*Failed to read from purchase URL cache: %s)r9 r3 getstr Exceptionloggerwarning)r& r4 cache_keyvaluees r' _getzPurchaseUrlCache._geth s x00IJNN9--E 5zz!4 NNG K K K44444 s ?A
A4A//A4rA ttlc | | }| j ||| dS # t $ r&}t d| Y d}~dS d}~ww xY w)zStore a value in the cache.)expirez)Failed to write to purchase URL cache: %sN)r9 r3 setr= r> r? )r& r4 rA rD r@ rB s r' _setzPurchaseUrlCache._sett s K x00I JNN9eCN 8 8 8 8 8 K K K NNF J J J J J J J J J Ks 26
A& A!!A&c || j dS | | }| j | dS # t $ r&}t
d| Y d}~dS d}~ww xY w)zClear the purchase URL cache.
Args:
username: If provided, clear only the cache entry for this user.
If None, clear all cache entries.
Nz&Failed to clear purchase URL cache: %s)r3 clearr9 deleter= r> r? )r& r4 r@ rB s r' rJ zPurchaseUrlCache.clear| s H
""""" NN8 4 4
!!),,,,, H H H NNCQ G G G G G G G G G Hs A /A
B A;;B c
dt t gt t t t dz f f dt t gt t t t dz f f f fd }|S )zCreate a decorator that caches async function results.
Args:
ttl: Time-to-live for cache entries in seconds.
Defaults to DEFAULT_TTL (3600 seconds).
Returns:
A decorator function.
funcNr* c f t dt dt d z f fd }|S )Nr4 r* c K | }| t d| | |S j | 4 d {V | }|0t d| | |cd d d d {V S | d {V }|3t d| | | | |cd d d d {V S # 1 d {V swxY w Y d S )Nz,Cache hit for username: %s, cached value: %sz9Cache hit (after lock) for username: %s, cached value: %sz'Cache miss for username: %s, result: %s)rC r> infor$ rH )r4 cached_valueresultrM r& rD s r' wrapperz=PurchaseUrlCache.__call__..decorator..wrapper s $yy 2 2 +KKF $
(' ;x0 " " " " " " " "#'99X#6#6L#/ ) $ ( ," " " " " " " " " " " " " " $(4>> 1 1 1 1 1 1F ) E $ "
(FC888!-" " " " " " " " " " " " " " " " " " " " " " " " " " " " " "s 5C.AC..
C8;C8)r r< )rM rS r& rD s ` r' decoratorz,PurchaseUrlCache.__call__..decorator sX 4[["
" "
"d
"
" "
" "
" "
" "
" "
" "
" ["
"H Nr) )r r< r
r )r& rD rT s `` r' __call__zPurchaseUrlCache.__call__ sx "( C5)CcDj,@"AAB(
seYsCt'; <<
=( ( ( ( ( ( ( T r) r )__name__
__module__ __qualname____doc__r0 DEFAULT_TTLr7 r1 r2 r( propertyr. r/ r3 staticmethodr< r9 rC intrH rJ r r
r rU r) r' r r 9 s 6IK JG!JP P P y X ;C ;C ; ; ; \ ;
S
S4Z
KS K K3 K4 K K K KH HcDj HD H H H H$ ; ;
;
3%3S4Z#788 9:# #sC$J"6778 :
; ; ; ; ; ;r) r c e Zd ZdS )ImunifyPatchIdErrorNrV rW rX r^ r) r' r` r` Dr) r` c e Zd ZdS )DiskQuotaErrorNra r^ r) r' rd rd rb r) rd r4 r* c K t | d{V }t | x}r|S t }t || d{V |S )a Ensure the Imunify Patch ID file exists for the given user.
This function checks if the Imunify Patch ID file exists in the user's
home directory. If it does not exist, it generates a new ID, writes it
to the file, and returns the ID. If the file already exists, it reads
and returns the existing ID.
Args:
username (str): The username for which to ensure the ID file.
Returns:
ImunifyPatchUserId: The Imunify Patch user ID.
N) _get_id_file
_read_id_file _generate_id_write_id_file)r4 id_file_ids r' ensure_id_filerl sq !********GG$$$s
..C
#
&
&&&&&&&& Jr) c 8 K t | 4 d {V t | d {V cd d d d {V S # t $ r&}t d| | Y d }~nd }~ww xY w d d d d {V d S # 1 d {V swxY w Y d S )Nz#Unable to ensure %s user id file %s)get_lockrl rd r> r? )r4 rB s r' get_imunify_patch_idro s !! '11111111 1 NN5
s4 B A
A2 A-(B -A22B
BB)maxsizec ( t j S )zb
Get a lock for the given username.
Username argument used as cache key in lru_cache.
)r" r# r8 s r' rn rn s <>>r) c X K t j | }t |j t z }t t d r4 t
j t | |S # t $ r Y nw xY w|
s|j
s9t
d|j t d|j t
j t | d{V n# t t" f$ rG}dt | v rt$ |t
dt | t |d}~ww xY wnB# t& $ r5}t
d| t d| |d}~ww xY w|S )zEGet a file with Imunify Patch user id and create it if does not existensure_regular_filezNo such user homedir: NzDisk quota exceededz$Unable to put %s in user home dir %szNo such user: z
No such user )pwdgetpwnamr pw_dirIMUNIFY_PATCH_ID_FILEhasattrr rs r< FileNotFoundErrorexistsparentr> errorr` touchPermissionErrorOSErrorrd KeyError)r4 user_pwdrj rB s r' rf rf s 5<))
x''*?? >> %
~~ 5>((**
Fgn F FGGG)=W^==
5"(W 6666666666#W-
5
5
5(CFF22(a/LL>-
.14
5 5 E E E 0h00111!"<("<"<==1DE< NsB E(
!A- -
A:9A:$'D E$ AE E$(
F'20F""F'c 2 t j j S )zGenerate Imunify Patch id)uuiduuid4hexr^ r) r' rh rh * s :<< r) rj c ` | d 5 }t | D ]?}|r;| d s&| x}r|c cddd S @ ddd n # 1 swxY w Y t
d| d dS )zV
Read Imunify Patch ID from `id_file`.
If ID is not found, return `None`.
r#Nz
Cannot parse z , file is corrupted or empty)openreversed readlines
startswithstripr> r? )rj flineimunify_patch_ids r' rg rg / s
c ,a Q[[]]++ , ,D
,DOOC 0 0
,'+zz||3# ,+++ , , , , , , , , ,, , , , , , , , , , , , , , , NNH7HHHIII 4s AB7BB B rk c K d| d} t j t | | d{V dS # t t f$ r.}t
dt | t |d}~ww xY w)z$Write Imunify Patch id to `id_file`.zI# DO NOT EDIT
# This file contains Imunify Patch id unique to this user
Nz'Unable to write %s in user home dir: %s) r
write_textr< r r~ r> r| rw r` )rj rk textrB s r' ri ri ? s )%c'llD99999999999 _ % ) ) ) 57La
"q( )s (4 A3)A..A3r )rD c H
K t j d{V }|j sdS t j }t | d{V }t
}| }| d{V | g t } | d{V }n4# t $ r'}t d| i }Y d}~nd}~ww xY wfd|D
t! j t j | k t j t* j k z }
fd| D }
t/ t1 j t! j d | D d{V } ||pd|pd|| d dt8 |t |
t; j | d d
} t? |j | S ) a Get the Imunify Patch purchase URL for a given user.
This function builds a purchase URL with user-specific parameters.
Results are cached on disk for PurchaseUrlCache.TTL seconds (1 hour).
Imunify Patch purchase URL template:
https://www.cloudlinux.com/purchase-imunify-patch?iaid=
&imunify_patch_user_id=&server_ip=12.23.34.45
&username=johndoe&websites=example.com,anotherexample.com
Defined in Jira ticket: https://cloudlinux.atlassian.net/browse/DEF-32303
Args:
username: The username to generate the purchase URL for.
Returns:
The purchase URL string, or None if not eligible.
Nz Error fetching domain paths: %sc $ i | ] \ }}|v ||
S r^ r^ ).0domainpaths user_domainss r'
z2get_imunify_patch_purchase_url..z s4 FE \ ! ! ! ! !r) c g | ]=} D ]&\ }}|D ] }|j | | '>S r^ )items orig_filer )r hitr doc_rootspathuser_domain_pathss r'
z2get_imunify_patch_purchase_url.. s} !2!8!8!:!:
FI
= # #D ) ) r) c 6 g | ]}| S r^ )as_dict)r r s r' r z2get_imunify_patch_purchase_url.. s ///3 ///r) ,T) sort_keys) iaidimunify_patch_user_idsubscription_target_id server_ipr4 websitestotal_websitesvulnerable_domainsvulnerabilities) r get_purchase_eligibilityr r get_iaidro r
get_server_ipget_domains_per_userr; lenget_domain_pathsr r r> r| r selectwhereuserstatusr
VULNERABLEgroup_by_severityr get_detailsget_vulnerabilities_idsjoinPURCHASE_URL_MAX_WEBSITESjsondumpsbuild_purchase_url)r4 purchase_eligibilityr r
panel_managerr r domain_pathsrB hitsr r url_argsr r s @@r' get_imunify_patch_purchase_urlr P s * *BDDDDDDDD , t ) + +D"6x"@"@ @ @ @ @ @ @ NNM ++--I'<<>>>>>>>>CC" L &&N + < < > >>>>>>>EEGG 6::: ) " $ $ * * ( * "&<&G G I D
( * 4//$///
O !6!<""7"=2 HH\*D+D*D EFF( !"4 5 5 :oFFF
H 2 ? J JJs /,C
D
& DD
base_urlparamsc 0 t | }t t |j d }| d | D | t |d }t | S )NT)keep_blank_valuesc i | ]
\ }}||| S r r^ )r kvs r' r z&build_purchase_url.. s IIIA1=1===r) )doseq)query) r
dictr r updater _replacer r )r r
parsed_url existing_qs
new_parseds r' r r s (##Jy!1TJJJKKKII IIIJJJ$$9[+M+M+M$NNJ j ! !!r) r limitc t d }t | | D ]:}|d }| dd }|dv r|| |xx dz
cc< ;t | S )Nc * t t S r )r r] r^ r) r' z#group_by_severity.. s S!1!1 r) appseverityUNKNOWN)HIGHMEDIUMLOWr )r r valuesr; r )r r rR itemapp_namer s r' r r s 11
2
2F--//77 , ,;88J 22 ; ; ; 8 X & & &! + & & & <<r) )CrY r" r loggingrt r collectionsr functoolsr r itertoolsr pathlibr typingr r r
urllib.parser r r
r r. defence360agent.internals.iaidr "defence360agent.subsys.panels.baser +defence360agent.subsys.panels.hosting_panelr defence360agent.utilsr r .imav.malwarelib.api.imunify_patch_subscriptionr !imav.malwarelib.api.vulnerabilityr imav.malwarelib.configr imav.malwarelib.modelr rw r MAX_SEVERITY_COUNT getLoggerrV r> r purchase_url_cacher= r` rd r< ImunifyPatchUserIdrl ro rn rf rh rg ri r r r r] r r^ r) r' r sJ *
# # # # # # & & & & & & & & + + + + + + + + + + C C C C C C C C C C C C @ @ @ @ @ @ = = = = = = D D D D D D ? > > > > > 9 9 9 9 9 9 2 2 2 2 2 2+ 8 $ $N N N N N N N Nb &%'' ) Y 3 += , 1Cd1J 4s # # # # # #L (
4
$6$=
)$ )-? )D ) ) ) )" OK3 OK3: OK OK OK OKd" "d "s " " " " $
#s(^
#tCH~
r)