)!@ \ d Z ddlZddlZddlmZ ddlmZmZmZ ddl m
Z
ddl m Z m
Z
mZ ddlmZ ddlmZ dd lmZ dd
lmZmZ dd lmZ dd lm Z m Z dd
l m Z ddl m!Z! ddl"m#Z# ddl$m%Z% ddl&m'Z' ddl(m)Z) ee* Z+ G d de e
Z, G d d Z- G d de, Z.dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) getLogger)AnyOptionalUnion) MessageType) MessageSink
MessageSourceexpect)TheSink)Scope)MalwareDatabaseScan)MalwareScanResourceTypeMalwareScanType) MalwareScan)ScanAlreadyCompleteError
ScanInfoErrorAiBolitDetachedScan) DetachedScan)MDSDetachedScan)QueueSupervisorSync)aggregate_result)fill_results_ownerc j e Zd ZU ej j Zej Z dZ
e e d< i Z
eeeeef f e d< d Zd Z eej d d Zd Zd
Zed efd Zed
e e ee f ded e fd Z eej! d Z"e#d Z$d Z%dS )DetachedScanPluginNsink
results_cachec & K || _ || _ d S N)loopr )selfr r s Z/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/plugins/detached_scan.py
create_sourcez DetachedScanPlugin.create_source@ s c
K d S r )r! r s r" create_sinkz DetachedScanPlugin.create_sinkD s r$ T)
async_lockc K t | }|j s(| | d {V }||d d< |S |j r| | d {V S | | d {V S )Nsummarytotal_malicious)MalwareScanMessageInfo is_detached_count_total_malicious
is_summary_handle_summary_handle_results)r! message message_typer+ s r"
complete_scanz DetachedScanPlugin.complete_scanG s -g66 ' 7$($?$?$H$H H H H H H HO4CGI 0 1N
$ 7 --g66666666 6 ))'222222222r$ c K |d d }|| j v rt j |d d< | j | |d< | | d {V }||d d< t j |d d }|r/|j |d d< t j | |S )Nr* scanid completedresultsr+ r6 scan_args) r timepopr. r queuefindargsremove)r! r2 scan_idr+ queued_scans r" r0 z"DetachedScanPlugin._handle_summaryU s )$X. d( ( (.2ikkGI { +!%!3!7!7!@!@GI $($?$?$H$H H H H H H HO4CGI 0 1-388 y)(3 9 K
>2=2B ";/#)00===r$ c K | | d {V }t | }|d }t d t j |d }|j |rI|j d |d< |j d |d< |j |d< t j | |
d s|
d r!d
|d < | d {V |S |d d }|d | j |< t | j }|d
k rt d| d S |j }|j |d< |j |d< |j |d< t% j |d< |
d
|j |d< |j |d< |
d d |d < ||d< | | d {V }||d d < |rI|j d |d< |j d |d< |j |d< t j | | d {V |S )Nr* z Scan stoppedr6 r9
file_patternsexclude_patternsr: patherrorr r+ r8 z MalwareScan cache size is %dstartedr7 total_filestype)r r, loggerinfor r= r> summary_from_dbr? r@ get_recheck_scan_queuer lenrG r6 rF rI r; total_resourcesrK r. ) r! r2 r3 r* rB rA
cache_sizescanr+ s r" r1 z"DetachedScanPlugin._handle_resultse s --g66666666-g66 )$ N###)/44GH+6+;O+L(.9.>&/*+ (3'7 $#)00==={{6""
gkk'&:&:
-.)*..000000000 i(2G*1)*z=DetachedScanPlugin._count_total_malicious.. s>
AqV9Q< -66 666r$ r8 )rQ itemsr2 s r" r. z)DetachedScanPlugin._count_total_malicious sE
#I . 4 4 6 6
r$
resource_typerA c t | S r r r` rA s r" _get_detached_scanz%DetachedScanPlugin._get_detached_scan s
#7+++r$ c , K | d }| d }| || } | d {V }n# t $ rO}t d|| Y d }~t
j t |j d d S d }~wt $ rZ}t d|j j
|| Y d }~t
j t |j d d S d }~ww xY w t
j t |j d n-# t
j t |j d w xY w| j | d {V d S )NrA r` z??q
;(7(:%$$r$ N) ry rz r{ __doc__r propertyr- r/ rN r& r$ r" r, r, s~ 9 9 9
X
/ / X/ % % X % % %r$ r, c e Zd Zej Zedeee e
f de de fd Z e
ej defd ZdS )DetachedScanPluginIm360r` rA rU c x | *t | t j u rt | S t | S r )r DBr r rb s r" rc z*DetachedScanPluginIm360._get_detached_scan sC
$ #M 2 2&)
*
* #7++ +"7+++r$ r2 c K t j |d }|r;t j | | d {V d S d S )NrA r9 )r r= r> r@ rP )r! r2 rB s r" complete_scan_dbz(DetachedScanPluginIm360.complete_scan_db sw )/44GIr sX *
' ' ' ' ' ' ' ' ' ' : : : : : :
7 6 6 6 6 6 ' ' ' ' ' ' 7 7 7 7 7 7 B A A A A A 7 6 6 6 6 6 = = = = = = J J J J J J = = = = = = > > > > > > 8 VO VO VO VO VOm VO VO VOr"% "% "% "% "% "% "% "%J- - - - - 0 - - - - -r$