Av+ d Z ddlZddlZddlZddlZddlmZmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZmZmZmZ dd lmZ dd
lmZ dd lmZm Z dd l m Z dd
l m Z ddl!m"Z"m#Z# ddl$m%Z%m&Z& ddl'm(Z(m)Z) ddl*m+Z+m,Z,m-Z- ddl.m/Z/ ddl0m1Z1m2Z2 ddl3m4Z4 ddl5m6Z6 ddl7m8Z8 ddl9m:Z: ej; e< Z= e&e%e=j> e=j? Z@ddddd d d dd d d dd ZA G d! d"e ZB G d# d$eB ZC G d% d&eB ZDe-ZEeCZF e(ejG d'( ZHe+jI jJ eCe+jK jJ eDiZL G d) d* ZMd+ ZNdS ),u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)ABCabstractmethod)cached_property)iglobfsencodePath)ClassVarDequeListOptional)uuid4)
inactivity)MalwareMalwareScanIntensity)g) HostingPanel)antivirus_mode create_task_and_log_exceptions)HOUR
rate_limit)serialize_attr unserialize)MalwareScanResourceTypeMalwareScanTypeQueuedScanState)AiBolitDetachedScan)AVDExecutionErrorAppVersionDetector) DetachedScan)MDSDetachedScan)MalwareDatabaseScanner) panel_users)periodon_drop i
intensity_cpu intensity_io
intensity_ram i i )lowmoderatehighc e Zd ZU ee ed< eed< dZdej dddddddddd de
de de e
de e
fd Zed
Zeed Zd Zd
Zd Zd Zd Zd ZdZd Zed Z dS )QueuedScanBase
resource_type
detached_scanN scanid scan_typecreatedstarted intensity home_dirsr) r* r+ initiatorstater7 r8 r9 r= c || _ |rt | }n$t j t j t j d}|p|d | p|d |
p|d | d| _ |pg }|t j k r t | |v r t j
}|pt j | _
|| _ |p t t! j | _ | t$ j nt% | | _ || _ d | _ d S )Nr( r) r* r+ )r) r* r+ r< )pathINTENSITY_FALLBACKr CPUIORAMargsr ON_DEMANDr
USERr hexr6 r7 inttimer8 r queuedr= r9 scanner_task)selfr? r6 r7 r8 r9 r: r; r) r* r+ r< r= _intensity_fallbacks O/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/queue.py__init__zQueuedScanBase.__init__] s " !3I!> "6!9 4 7!5!9" " + 3!/2 ( N,>~,N * 3!/2"
O 1 1 1d4jjI6M6M',I + " 2#dikk"2"2 &+mO " " 9O9O
c
K d S N rL s rO startzQueuedScanBase.start s rQ c d S rS rT rU s rO total_resourcesz QueuedScanBase.total_resources s
rQ c J | j r| j d S d S rS rK cancelrU s rO stopzQueuedScanBase.stop 2 ' $ $ & & & & & ' 'rQ c | j j | j | j | j | j | j | j j d| j }| j t j
k r | j j |d< | j j
|d< |S )N)statusr? r6 r9 r8 r7 r3 phaseprogress)r= valuer? r6 r9 r8 r7 r3 rD r runningr4 r` ra )rL results rO r_ zQueuedScanBase.status sz j&Ik|| ! / 5
i
: 0 0 0 " 0 6F7O!%!3!)format __class__ __qualname__r? r6 rU s rO __repr__zQueuedScanBase.__repr__ s* &-- N 'DK
rQ c | | j | j | j | j | j | j | j j | j j dS )N)r? r6 r7 r8 r9 rD r3 r= ) r? r6 r7 r8 r9 rD r3 rb r= rU s rO to_dictzQueuedScanBase.to_dict s@ Ik ||I ! / 5Z%
rQ c x | di D ]
\ }}|||< | di |S )NrD rT )popitems)clskwargsargrb s rO from_dictzQueuedScanBase.from_dict sL **VR006688 JC F3KKs}}V}} rQ ) __name__
__module__rs r r __annotations__r! r= r rE strrH r floatrP r rV propertyrX r\ r_ ri rl ro rt __hash__rv classmethodr} rT rQ rO r2 r2 X sy 34444 E (2#' # 0! 0! 0!
0!
0! % 0! } 0! 0! 0! 0!d
^
^ X
' ' ' ! ! !
H
[ rQ r2 c e Zd Zej Zdej dddddddddddddddede de
e f fdZ fdZ
d Zd Zed
Z xZS ) QueuedFileScanN)r6 r7 r8 r9 r: r; r) r* r+
file_patternsexclude_patternsfollow_symlinks
detect_elfr< r= r7 r8 r9 c t ||||||||| |
|| | j | pd | pd |
pd| t | j | _ d S )Nr5 F)r r r r )superrP rD rk r r6 r4 )rL r? r6 r7 r8 r9 r: r; r) r* r+ r r r r r< r= rM rr s rO rP zQueuedFileScan.__init__ s * '%'
'/4 - 5 + 4u!
1 = =rQ c | t | t | j | _ d S rS )r rl r r6 r4 rL r= rr s rO rl zQueuedFileScan.__setstate__ s5 U### 0 = =rQ c K t j | _ ddlm} |t j d } |j | j f| j | j | j d| j
| _ | d {V }|2t d| j t j | _ n?t j | _ | j
d pt) | dd |d< |S ) Nr )MalwareScannerT)sinkhooks)scan_idr7 r9 zScan cancelled for %sr< undefined)rI r9 imav.malwarelib.scan.scannerr r r rV r? r6 r7 rD rK
async_waitloggerinfor stoppedr= rc getgetattr)rL r scanner scan_datas rO rV zQueuedFileScan.start s y{{ ?????? .afD999 )GM I
KnL
i
",,........ KK/ ; ; ;(0DJJ(0DJ
k** ;4k::
k " rQ c J | j r| j d S d S rS rZ rU s rO r\ zQueuedFileScan.stop( r] rQ c | j j S rS r4 rX rU s rO rX z QueuedFileScan.total_resources, !11rQ )r~ r rs r FILEr3 r rE r rH r r rP rl rV r\ r rX
__classcell__rr s @rO r r s +0M (2#' %)> )> )>
)>
)> % )> )> )> )> )> )>V> > > > > :' ' ' 2 2 X2 2 2 2 2rQ r c e Zd Zej Zdej ddddddddf
dede e dede
de e de e f fd
Z fd Z
ed
e
fd Zd Zdd
Z xZS ) QueuedDbScanNr? r6 r7 r8 r9 r: c
t ||||||||| |
| t | j | _ d S )N) r? r6 r7 r8 r9 r: r; r) r* r+ r= )r rP r" r6 r4 )rL r? r6 r7 r8 r9 r: r; r) r* r+ r= rM rr s rO rP zQueuedDbScan.__init__4 sa '%'
-T[ 9 9rQ c | t | t | j | _ d S rS )r rl r" r6 r4 r s rO rl zQueuedDbScan.__setstate__S s3
U### ,T[ 9 9rQ returnc | j j S rS r rU s rO rX z QueuedDbScan.total_resourcesW r rQ c
K | j d r| j d n| j }i } t d {V }n2# t
$ r%}t d| Y d }~nd }~ww xY wd t | D } t j
d 5 t
|| d {V d d d n # 1 swxY w Y t | j | j gfi | j | j | j d | j d {V d S # t( $ rZ}| j t. j | j | j | j |j |j |j d {V Y d }~d S d }~ww xY w)Nz/**z-Can't get docroots, run AVD anyway. Error: %sc , g | ]}t | S rT r ).0ds rO
z&QueuedDbScan._scan..i s AAA18A;;AAArQ AVD_scan)r7 r )r scan_pathr7 scan_startedcmdouterr) r? endswithrstripr
list_docroots Exceptionr errorr r tracktaskr rV r# rD r7 r6 scanr9 r r4 handle_aborted_processr r commandr r )rL apps_path doc_rootsexcunglobbed_pathss rO _scanzQueuedDbScan._scan[ s &*Y%7%7%=%= LDI S ! ! !49 O *nn : : < <<<<<<: : : : : 2 2 2 2 X2#! #! #!J
rQ r _scans_info)r? attrc e Zd Zed Zedee fd Zed Z e
dde fd Z e
dd Z
d
Zd Zdee fd Zdd
Zd ZddZed Zd Zd Zd ZdS ) ScanQueuec H t j d | j D S )Nc 3 > K | ]}| V d S rS )rv )r items rO z(ScanQueue._scans_info.. s* H HD H H H H H HrQ ) collectionsdeque_scansrU s rO r zScanQueue._scans_info s$ H HDK H H HHHHrQ r c D t j }t t j t j D ]f} t
|d }| | | ?# t $ r}t d|| Y d }~_d }~ww xY w|S )N)r? fallbackr3 z%Can't get scan class for %s due to %s)
r r r Config
SCANS_PATHSCAN_TYPE_CLASSESappendr} r throttled_log_error)rL scans scan_inforz r s rO r zScanQueue._scans s !##$"[->
I
' /(BC S]]9 5 56666
#;Y
s ;A88
B BB c , | d S Nr )peekrU s rO current_scanzScanQueue.current_scan s yy||rQ Fr3 c ( K d t d {V D |t j k rfd|D }nPt j r"|t j k rt
| }n"t d | |rc| j r\| j
}| j t | | j
| d S | j | d S )Nc 8 g | ]}t |d S )homer )r users rO r z!ScanQueue.put.. s$ HHHDT$v,''HHHrQ c . g | ]}t |fd iS r; )r r r? r; scan_argss rO r z!ScanQueue.put.. s> 2 2 2 tFFyFIFF2 2 2rQ zUnknown resource_type: {})r$ r r r disabledr db_scans
ValueErrorrq r popleft
extendleftreversed
appendleftextend)rL pathsr3
prioritizer scans_to_addrc r; s ` @rO putz
ScanQueue.put s9 IH+--4G4G4G4G4G4GHHH 3 8 8 82 2 2 2 2 !2 2 2LL
# P !8!;;;#E9i@@LL 8 ? ?
N NOO O -$+ -k))++G K " "8L#9#9 : : : K " "7 + + + + + K | , , , , ,rQ Nc t | dk rd S |p| j }| j | | t
dt | d S )Nr zScans pending: %d)lenr r remover\ r r rL r s rO r zScanQueue.remove sg t99>> F(t( 4 'T33333rQ c \ d|cxk rt | k rn d S | j | S d S )Nr r )rL prioritys rO r zScanQueue.peek sB
$ $ $ $3t99 $ $ $ $ $ $;x( ( % $rQ c * fd| j D S )Nc & g | ]
}|j v |S rT )r6 )r r scan_idss rO r z&ScanQueue.find_all.. s% HHH x0G0G0G0G0GrQ r )rL r s `rO find_allzScanQueue.find_all s HHHHHHHHrQ c ~ | j D ]3t fd| D rc S 4d S )Nc > g | ]\ }}t | |k S rT )r )r kvr s rO r z"ScanQueue.find.. s, EEEdaGD!$$)EEErQ )r allry )rL r{ r s @rO findzScanQueue.find sT K DEEEEfllnnEEEFF
trQ c : | j D ]}|j |v r||_ d S rS )r r6 r= )rL r r_ r s rO rk zScanQueue.update s2 K $ $D{h&& #
$ $rQ c # P K | j D ]}|j |v r||j j fV d S rS )r r? r= rb )rL r r s rO get_scans_from_pathsz ScanQueue.get_scans_from_paths sE J - -DyE!!DJ ,,,,, - -rQ c P |p| j }t j d |D S )Nc 3 K | ]D}|j |j |j j |j |j |j d |j d|j j d fV Ed S )Nr ) r? scan_statusr7 r9 r8 r rX total_maliciousr3 ) r6 r? r= rb r7 r9 r8 rX r3 )r r s rO r z+ScanQueue.scan_summaries.. sz '
'
I#':#3!% #| #| !'+';'(%)%7%=
'
'
'
'
'
'
rQ )r r OrderedDict)rL r s rO scan_summarieszScanQueue.scan_summaries sA $& '
'
'
'
'
rQ c * t | j S rS )listr rU s rO r zScanQueue.scans s DK rQ c 2 t | j dk S r r rU s rO __bool__zScanQueue.__bool__ s 4; !##rQ c || j v S rS r r s rO __contains__zScanQueue.__contains__ s t{""rQ c * t | j S rS r rU s rO __len__zScanQueue.__len__ s 4; rQ )FrS r )r~ r rs r r r r r2 r r serialize_scansr r r r r r r
rk r
r r r r r rT rQ rO r r s
I I XI n- _ X
- - /- - - _-: 4 4 4 _4) ) )I I I 8 $ $ $ $
- - -
( ! ! X!$ $ $# # # rQ r c $ fd| D S )Nc . g | ]}t |fd iS r )r r s rO r z db_scans.. s; AE T<r: s * # # # # # # # # % % % % % % 2 2 2 2 2 2 2 2 2 2 2 2 * * * * * * 5 4 4 4 4 4 D D D D D D : 9 9 9 9 9 9 9 K K K K K K K K
7 6 6 6 6 6 = = = = = = C C C C C C 7 7 7 7 7 7 8 $ $EjjfnEEE
L
&| | | | | S | | | ~W2 W2 W2 W2 W2^ W2 W2 W2tS
S
S
S
S
> S
S
S
n
.f&7mLLL & $l x x x x x x x x v rQ