. d Z ddlZddlZddlZddlZddlmZ ddlmZ ddl m
Z
ddl m Z ddl
mZmZmZ ddlmZmZmZmZ dd lmZ dd
lmZ dd lmZm Z dd l m Z ej e Z! G d
d Z" G d dee Z# G d de Z$dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) defaultdict)Hashable)
inactivity) MessageType) MessageSink
MessageSourceexpect)batched
nice_iteratorrecurring_checksafe_cancel_task)VulnerabilityHitStatus)VulnerabilityHit) PatchResultVulnerabilityPatcher) PatchStoragec L e Zd Zd ZdedefdZdeeef fdZde fdZ
dS )
PatchQueuec 8 t t | _ d S N)r set_queueselfs b/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/plugins/patch_vulnerabilities.py__init__zPatchQueue.__init__5 s !#&& keyvaluesc 0 | j |xx |z cc< d S r )r )r r r s r putzPatchQueue.put8 s& CF"r returnc | j S # t $ r}t j |d }~ww xY wr )r popitemKeyErrorqueueEmpty)r excs r getzPatchQueue.get; sH );&&(( ( ) ) )+--S ( )s
>9>c , t | j S r )boolr r s r emptyzPatchQueue.emptyA s $$$$r N) __name__
__module__ __qualname__r r r r! tupler) r+ r, r r r r 4 s ' ' '#x # # # # #)U8S=) ) ) ) ) %t % % % % % %r r c e Zd Z fdZd Zd Zd Z eej de
fd Z d Z e
d d Z xZS )
Patchc t j |i | t | _ d | _ d | _ d | _ d | _ d S r )superr r r _loop_sink_patcher _patch_task)r argskwargs __class__s r r zPatch.__init__F sM $)&))) ll
r c
K d S r r1 r loops r create_sinkzPatch.create_sinkN r c K || _ || _ t || | _ | | | _ d S )N)r? sink)r6 r7 r r8 create_taskrecurring_patchr9 )r r? rC s r
create_sourcezPatch.create_sourceQ sP
,$TBBB
++D,@,@,B,BCCr c P K | j r t | j d {V d S d S r )r9 r
r s r shutdownzPatch.shutdownW sD 5"4#344 4 4 4 4 4 4 4 4 4 5 5r messagec K | d | d | dd f}| dg }| j |t | d S )Ncause initiatormanualFfilelist)r) r r! r )r rI sourcefiles_to_patchs r process_patch_taskzPatch.process_patch_task[ sw
KK KK $ $ KK% ( (
!Z44 N 3 344444r c K | j s| j \ \ }}}}t |d D ]g}t j d 5 t j g}|r | t j
t j
t j | t j | }t# j | d {V \ }} }
| rz| D ]w} | j t+ j d | j t" j t3 t5 j d {V x|
r t j d |
D t j |d } | D ]\ }
}t5 j }d |D }t j |t j | j ! |
| d {V \ }}}| j t+ j" ||tG j$ j% |||||
d {V d d d n # 1 swxY w Y i| j d S d S ) Ni' )npatch_vulnerabilitiesz*Failed to store the original from {} to {})rI timestampc g | ] }|j
S r1 orig_file.0hits r
z0Patch._patch_vulnerabilities.. s @ @ @sS] @ @ @r owner) attributec g | ] }|j
S r1 rW rY s r r\ z0Patch._patch_vulnerabilities.. s ? ? ?3 ? ? ?r )hitsresult
cleanup_idstartederrorrK rL r: )&r r, r) r
r tracktaskr
VULNERABLEappendREVERTEDr selectwhererX in_statusr store_allr7 process_messager VulnerabilityPatchFailedformatpathinttime delete_hitsgroup_by_attributeitems
set_statusPATCH_IN_PROGRESSr8 startVulnerabilityPatchuuiduuid4hex)r rK rL rM rP files_batchvulnerable_statusesr` succeededfailed not_existr[ user_hitsuserrc filesra rd cmds r _patch_vulnerabilitiesz Patch._patch_vulnerabilitiese s +##%% < 9= 9J9J 6 &UIv &~ @ @ @ :
:
%**+BCC 9 9+A+L*M' +22 2 ; ,244::(266{CC(/334GHH D + 4T : ::::::: ! ! #) C"&*"<"< + D)117,/M<;L2* 2* /2$)++.>.>!" !" !"
#
#
! (4 @ @i @ @ @ !1 C!")! ! !I '0oo&7&7
d"&)++ ? ?$ ? ? ?(3 "8"J 48=3F3F %4 4 . . . . . .*s #j 8 8 ' :%)'-+/:<<+;(/&+&+*3%( I9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 +##%% < < < < < s 0H-J**J. 1J. c t K | j s | d {V d S d S r )r r, r r s r rE zPatch.recurring_patch sP { "" 0--// / / / / / / / / / 0 0r )r- r. r/ r r@ rF rH r r VulnerabilityPatchTaskdictrQ r r rE
__classcell__)r< s @r r3 r3 E s
D D D 5 5 5 VK .//5 5 5 5 0/5= = =~ _Q0 0 0 0 0 0 0r r3 c | e Zd Zd Ze ddee defd Z e e
j de fd Z
dS ) PatchResultProcessorc
K d S r r1 r> s r r@ z PatchResultProcessor.create_sink rA r Nr` rm c X t j | || | D ]}||_ ||_ d S r )r rx rm
patched_at)r` rm r r[ s r _set_hit_statusz$PatchResultProcessor._set_hit_status sB #D&*=== ( (C CJ 'CNN ( (r rI c K |d }|d t j } fd|D } fd|D }g }t |d 2 3 d {V } | rD|j r| | P| | f6 |r t
j d |D g g } }|D ]G} | r| | 2| | H| |t j | || z x}
r"| |
t j d S d S )Nr` ra c g | ]}|v | S r1 r1 rZ r[ ra s r r\ z=PatchResultProcessor.process_patch_result.. s :::SC6MMSMMMr c g | ]}|v| S r1 r1 r s r r\ z=PatchResultProcessor.process_patch_result.. s# @@@sc.?.?s.?.?.?r d )
chunk_sizec g | ] }|j
S r1 rW rY s r r\ z=PatchResultProcessor.process_patch_result.. s )M)M)MC#-)M)M)Mr )
rt r r orig_file_pathexistsrh r ru
is_patchedr r PATCHEDrg ) r rI r` now processed unprocessedr r[ patchedr unable_to_pathra s @r process_patch_resultz)PatchResultProcessor.process_patch_result s '.v %h /ikk::::D::: @@@@d@@@ &ySAAA * * * * * * *# c{$$&&
*%,,.. * &&s++++ $$S))) B O ()M)M9)M)M)M N N N b # #Cc{%%''
#s####
c"""" W&<&DcJJJ (6 1 1> 6 A
s B<r )r- r. r/ r@ staticmethodlistr strr r r r{ r r r1 r r r r s
>B( (#$(.1( ( ( \( VK *++ $ ,+ r r )%__doc__loggingrt r& r| collectionsr collections.abcr defence360agent.apir "defence360agent.contracts.messagesr !defence360agent.contracts.pluginsr r r defence360agent.utilsr
r r r
imav.malwarelib.configr imav.malwarelib.modelr 'imav.malwarelib.vulnerabilities.patcherr r 'imav.malwarelib.vulnerabilities.storager getLoggerr- loggerr r3 r r1 r r r s * # # # # # # $ $ $ $ $ $ * * * * * * : : : : : :
: 9 9 9 9 9 2 2 2 2 2 2 A @ @ @ @ @ 8 $ $% % % % % % % %"b0 b0 b0 b0 b0K b0 b0 b0J- - - - -; - - - - -r