Zf&%e d Z ddlZddlZddlmZmZ ddlmZ ddlm Z ddl
m Z ddl Z ddl
mZ ddlmZ dd lmZ dd
lmZ d Z G d d
Z G d de Z G d de Z G d dee ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)ABCabstractmethod)gather)Path)Type)Message)logger)MalwareScanComplete)MalwareScanResourceTypei, c " e Zd ZdZdZdZdZdZdS )
DetachedStatefinishedabortedrunningno_dir
no_processN)__name__
__module__ __qualname__FINISHEDABORTEDRUNNINGNO_DIR
NO_PROCESS R/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/detached.pyr
r
' s' HGG
F JJJr r
c z e Zd ZU eed< eed< eed< eed< eed< eed< dddddd Zd
Zd Zd Z d
Z
d Z dS ) DetachedDir DETACHED_DIR done_fileerr_filelog_filepid_file
progress_filedonepid)r! r" r# r$ r% c t | j | | _ | j D ] \ }}t | || j |z dS )zB
NOTE: Initialization should not create any files
N)r r pathFILESitemssetattr)self detached_idattr file_names r __init__zDetachedDir.__init__@ s_ *K88 #z / / 1 1 7 7OD) D$ I 5 6 6 6 6 7 7r c | j dd | j | j | S )NT)parentsexist_ok)r) mkdirr# touchr" r- s r __enter__zDetachedDir.__enter__H sG t444
r c d S Nr )r- exc_typeexc_valexc_tbs r __exit__zDetachedDir.__exit__N s r c * t | j S r: )strr) r7 s r __str__zDetachedDir.__str__Q s 49~~ r c , t | j | S r: )getattrr) )r- names r __getattr__zDetachedDir.__getattr__T s ty$'''r N) r r r r@ __annotations__r r* r1 r8 r> rA rE r r r r r / s OOONNNNNNNNN (
E7 7 7
( ( ( ( (r r c e Zd ZU dZee ed< ed Zd Z d Z
d Z e dd Z
efdefd Zd
Zee defd Zd Zee defd
Ze defd ZdS )DetachedOperationNDETACHED_DIR_CLSc z K | j j }g }t j | r|t j | 5 }|D ]L}| r6| | |j | M d d d n # 1 swxY w Y t | d {V d S r: ) rI r osr) existsscandiris_dirappendrD check_detached_operationr )clssink restore_dir check_corositentrys r check_detached_operation_dirz.DetachedOperation.check_detached_operation_dir] s *7
7>>+ & & K((
B E ||~~ #** C
OO D DT J J
k""""""""""s AB!!B%(B%c R || _ | | j | _ d S r: )r. rI detached_dir)r- r. s r r1 zDetachedOperation.__init__l s) & 1 1$2B C Cr c " | j |j k S r: )r. )r- others r __eq__zDetachedOperation.__eq__p s 5#444r c * t | j S r: )hashr. r7 s r __hash__zDetachedOperation.__hash__s s D$%%%r returnc
K d S r: r )r- ___s r handle_aborted_processz(DetachedOperation.handle_aborted_processx r c H | j s&t j d| j t j S | j j r t j S | }n# t t f$ r}| j j
}t j |z
|k r1t j d| j j | t j cY d }~S t j cY d }~S d }~ww xY w t' j | }| | r t j S t j d| n9# t t& j f$ r }t j d|| Y d }~nd }~ww xY wt j S )NzNo such scan directory: %sz;Pid file wasn't created or pid file is empty: %s, error: %szBThe running process (pid=%s) does not match the detached operationz=Can't get the process for the detached operation (pid=%s): %s)rY rN r debugr
r r! is_filer get_pidFileNotFoundError
ValueErrorstatst_mtimetimewarningr$ r r psutilProcessprocess_is_suitabler Error)r-
start_timer' errdetached_dir_mtimeprocs r get_detached_process_statez,DetachedOperation.get_detached_process_state| s '')) ( L5t7H I I I ' ' & . . 0 0 * ) ) ,,,..CC!:.
,
,
,!%!2!7!7!9!9!B y{{ //*<<!%. %,,,,,,, + + + + + + +
, >#&&D''--
$,,-
"6<0 N
$$sI +B DA#D 4D: D D D4E E F5FFc X t | j j S r: )intrY r$ read_textr7 s r ri zDetachedOperation.get_pid s" 4$-7799:::r c d S r: r r7 s r on_complete_messagez%DetachedOperation.on_complete_message
r c K | }|t j k r"| | j d{V dS |t j k r | | d{V dS dS )ah Updates operation to a consistent state.
Algorithm:
1) If scan_dir doesn't exist:
- scan_dir doesn't already create
- scan ended and MalwareScanComplete is in process
2) pid file doesn't exist:
- since scan_dir mtime has passed more than 5 minutes
-> something went wrong & handle_aborted_process
- ... less than 5 minutes -> waiting for ai-bolit
3) done file exists -> scan completed
4) done file doesn't exist:
- process executes -> scan running
- process dead -> scan aborted
N)rR )rx r
r process_messager} r rd )r- rR operation_states r rP z*DetachedOperation.check_detached_operation s 99;; m 4 4 4&&t'?@@ @ @ @ @ @ @ @ @ @
5
5
5--4-88 8 8 8 8 8 8 8 8 8 6
5r c d S r: r )rQ rw s r rr z%DetachedOperation.process_is_suitable r~ r c
K d S r: r r7 s r completezDetachedOperation.complete re r )r` N)r r r NAMEr r rF classmethodrW r1 r\ r_ r rd PROCESS_START_TIMEr@ rx ri propertyr r} rP boolrr r r r r rH rH Y sc D;'''' # # [ # D D D5 5 5& & &
^
5G (% (%3 (% (% (% (%T; ; ;
W
^ X
9 9 9,
$
^ [
^
r rH c e Zd ZdZeedefd Zeedefd Z eede
fd Z eedefd Z ede
fd ZdS ) DetachedScanscanr` c d S r: r r7 s r
RESOURCE_TYPEzDetachedScan.RESOURCE_TYPE r~ r c d S r: r r7 s r progresszDetachedScan.progress r~ r c d S r: r r7 s r phasezDetachedScan.phase r~ r c d S r: r r7 s r total_resourcesz DetachedScan.total_resources r~ r c 8 t | j | j S )N)scan_id
resource_type)r
r. r r7 s r r} z DetachedScan.on_complete_message s$ "$D4F
r N)r r r r r r r r rz r r@ r r r r} r r r r r s D
6
^ X
#
^ X
s
^ X
^ X
W
X
r r )__doc__rK rn abcr r asyncior pathlibr typingr rp "defence360agent.contracts.messagesr defence360agent.defence360r imav.contracts.messagesr
imav.malwarelib.configr r r
r rH r r r r r s *
# # # # # # # #
6 6 6 6 6 6 - - - - - - 7 7 7 7 7 7 : : : : : : '( '( '( '( '(# '( '( '(Tr
r
r
r
r
r
r
r
j
$c
r