k1j)/
d Z ddlZddlmZmZ ddlmZ ddlmZ ddlm Z ddl
m Z m Z m
Z
mZmZmZ ddl
mZ dd lmZ dd
lmZmZ dd lmZ dd lmZ dd
l m Z ddl m Z ddl m!Z! ddl"m#Z#m$Z$ ddl%m&Z& ddl'm(Z(m)Z) ddl*m+Z+ ee, Z-ej. ej/ ej0 ej1 gZ2ej. ej1 gZ3dZ4 e d Z5e dz Z6dZ7 e d Z8ed Z9d Z:de;d ed edS )!u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)datetime timedelta)cache) getLogger)Path)ANTIVIRUS_MODEMalwareMalwareScanSchedule SystemConfig
UserConfigeffective_user_config)MalwareScanScheduleInterval)
LicenseCLN) MessageSink
MessageSource)register_lock_file)recurring_check)
check_lock)HOUR)MalwareScanQueuePut)MalwareScanResourceTypeMalwareScanType) get_crontab)reset_malware_schedule user_list)CronTabz
0 0 31 2 0z$/var/imunify360/last_check_dttm.json schedule_watcherz-/var/imunify360/premium_revisium_license.flagc V t j j S )zGet the local timezone.)r now
astimezonetzinfo ]/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/plugins/schedule_watcher.py_get_local_timezoner& S s <>> $ $ & & --r$ c t j } t }t p| p|}|rt
nt S N)r is_valid_av_plusREVISIUM_PREMIUM_MARKERexistsr AVAILABLE_INTERVALS
AVP_INTERVALS) valid_avprevisium_license_exists conditions r% allowed_schedule_intervalr1 Y sF +--I 5 < < > >##L L5LI"+ > >r$ user admin_configreturnc v t |t | }| di }| dt j }| dt j }| dt j }| dt j }||||fS )a
Get schedule configuration for a given user.
Returns a tuple of (interval, hour, day_of_month, day_of_week).
Falls back to system defaults if user config is incomplete or missing.
Args:
user: Username to get schedule configuration for
admin_config: System configuration object
Returns:
Tuple of (interval, hour, day_of_month, day_of_week)
)usernameMALWARE_SCAN_SCHEDULEintervalhour day_of_month day_of_week)r
r getr
INTERVALr DAY_OF_MONTH DAY_OF_WEEK)r2 r3 eff schedule_cfgr8 r9 r: r; s r% get_user_schedule_configrB ` s j$.G.G.G
H
HC772B77L
,?,HIIH F$7$< = =D ##+8 L ""*6 K T< 44r$ c e Zd Zedefdeez dedefdZd Z d Z
d Z d d
ed ed z d ed z d
ed z def
dZ de
fdZde
dd fdZedede
de
defd Zd dZde
de
defdZ d dee dee d z dd fdZd S ) ScheduleWatcherr
check_filecheck_interval lock_filec ~ t | | _ |pt | _ t || j | _ d S r( )r _check_file!_DEFAULT_RECURRING_CHECK_INTERVAL_check_intervalr SCOPE
_lock_file)selfrE rF rG s r% __init__zScheduleWatcher.__init__ s>
++ ? ?
-Y
CCr$ c
K d S r( r# )rN loops r% create_sinkzScheduleWatcher.create_sink s r$ c
K || _ || _ | t t d| j | j | j | _ d S )NT)check_period_firstcheck_lock_periodrG ) _loop_sink create_taskr r rK rM
schedule_scan_task)rN rQ sinks r%
create_sourcez ScheduleWatcher.create_source sw
%%
"
O#'"&"6 /
"
"
$
$
r$ c V K | j | j d {V d S r( )rZ cancel)rN s r% shutdownzScheduleWatcher.shutdown s:
jr$ Nr8 r9 r: r; r4 c ~ |t j k rt S |t vr"t d| t S |t
x}vr#t d|| t S |pd}|pd}|pd}|t j k r|ddf}n|t j k r|d|f}n||df} dj
| S )Nz Unsupported interval value: %szEMalware schedule is not in allowed intervals: schedule=%s, allowed=%s01*z 0 {} {} * {}) IntervalNONENEVER_SCHEDULEr, loggererrorr1 infoDAYWEEKformat)rN r8 r9 r: r; intervals cron_argss r% create_schedulez ScheduleWatcher.create_schedule s x} $ $! !
0
0
0 LL98 D D D! !
+D+F+F Fi
G
G KK
" !{s#*s !(S x| # # c3II
&
& c;.II lC/I$~$i00r$ c ` t j t j | j }|j "| t }|S # t $ r9 t j
t t | j z
cY S w xY w)zARead last check datetime from file, ensuring it's timezone-aware.Nr" )seconds)
r
fromisoformatjsonloadsrI read_textr" replacer& FileNotFoundErrorr r rK rN dttms r% _read_last_check_dttmz%ScheduleWatcher._read_last_check_dttm s
)
4+557788 D {"||+>+@+@|AAK < 3 5 566 ,: : :
s A'A* *A B-,B-rz c |j "| t }| j t j | dS )z@Write last check datetime to file, ensuring it's timezone-aware.Nrq )r" rw r& rI
write_textrt dumps isoformatry s r% _write_last_check_dttmz&ScheduleWatcher._write_last_check_dttm sU ; <<':'<'<<==D ##DJt~~/?/?$@$@AAAAAr$ scheduler
last_checkc | t k rdS |j r| d n|}|j r| d n|}t | |dd }|d uo||k S )NFrq T)return_datetime default_utc)rf r" rw r next)r r r last_check_naive now_naive
next_run_dttms r% _is_it_timezScheduleWatcher._is_it_time s ~ % %5
J d + + +
14
CCKKtK,,, )0):):)?)? d *@ *
*
D(F]Y-FFr$ c K | }t j t }| || d {V }|r| | d S d S r( )r{ r r r& _schedule_scanr )rN r r scheduleds r% rY z ScheduleWatcher.schedule_scan s //11
l.0011 --c:>>>>>>>> - ' ' , , , , , - -r$ c K t j t vr(t d t t
j d {V }t }g }g }|D ]}t |d | \ }} }
} |
|| |
| } | | || rt| |d t j rMt |d x}
r6t! |
r| |
|r(| |t& j g d {V |rgt+ t- | }t dd | | | d {V dS t d d S )
Nz4Malware schedule interval is being reset to defaultsr2 home)modesz7Trigger scheduled background malware scan for paths: %sz, Tz6No paths to scan in scheduled background malware scan.F)r
r= r1 rg ri r r panel_usersr rB ro r appendr CRONTABS_SCAN_ENABLEDr r r+ trigger_malware_scanr FILElistsetjoin)rN r r usersr3 to_scan
crontabs_scanur8 r9 r: r; r paths r% r z ScheduleWatcher._schedule_scan s. '/H/J/J J J KKN O O O " $ $ $ +--------#~~ #%
/ /A )6LAA
++$ k H #z::
/qy)))1/!,QvY!7!77/ T
))++/
"((... ++ &=&B%C ,
3w<<((G KKI '""
++G44 4 4 4 4 4 4 44 KKH
5r$ pathsr c K |sd S |t j t j g}t s`t j rTt j |v rF| j t |t j t j
d d {V t j |v rH| j t |t j t j
d d {V d S d S )N)
resource_type scan_type)r scan_args) r DBr r r DATABASE_SCAN_ENABLEDrW process_messager r
BACKGROUND)rN r r s r% r z$ScheduleWatcher.trigger_malware_scan* s8
F =,/1H1MNE
-
(*e33*,,# )@)C%4%?
# '5 0 0*,,# )@)E%4%?
1 0r$ )NNN)r4 Nr( )__name__
__module__ __qualname___DEFAULT_LAST_CHECK_FILE_DEFAULT_LOCK_FILE_NAMEstrr floatrO rR r\ r_ ro r r{ r staticmethodboolr rY r r r r r# r$ r% rD rD s ": !0
D
D$J
D
D
D
D
D
D
#'"& 1 1 1 Dj 1 Dj 1
4Z 1
1 1 1 1B x B8 B B B B B GG $G2:G
G G G \G(- - - -55)15
5 5 5 5t 7;# #Cy# +,t3#
# # # # # #r$ rD )?__doc__rt r r functoolsr loggingr pathlibr defence360agent.contracts.configr r r
r r r
r rd !defence360agent.contracts.licenser !defence360agent.contracts.pluginsr r 'defence360agent.subsys.persistent_stater defence360agent.utilsr defence360agent.utils.check_lockr defence360agent.utils.commonr imav.contracts.messagesr imav.malwarelib.configr r imav.malwarelib.scan.crontabr imav.malwarelib.utilsr r imav.malwarelib.utils.crontabr __file__rg re rj rk MONTHr, r- rf r rJ r r* r& r1 r tuplerB rD r# r$ r% r s * ( ( ( ( ( ( ( ( 9 8 8 8 8 8 G F F F F F 1 1 1 1 1 1 7 7 7 7 7 7 - - - - - - 7 7 7 7 7 7 5 4 4 4 4 4 C C C C C C C C 1 1 1 1 1 1 8
M L M N
M N
4 FGG $(1H !,
$ NOO . . .
? ? ? 5
5 ) 5
3S# 5 5 5 5>N N N N Nk= N N N N Nr$