Viewing File: /opt/imunify360/venv/lib/python3.11/site-packages/imav/__pycache__/server.cpython-311.pyc
sjY d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z ddl m
Z
mZ ddlmZ ddlmZ ddlmZmZ ddlmZ ddlZdd lmZ ddlZddl Z ddl Z dd
l m Z dd l m!Z!m"Z" dd l#m$Z$m%Z%m&Z&m'Z'm(Z( dd
l)m*Z* ddl+m,Z, ddl-m.Z.m/Z/ ddl0m1Z1 ddl2m3Z3 ddl4m5Z5 ddl6m7Z7m8Z8m9Z9 ddl:m;Z;m<Z<m=Z=m>Z>m?Z? ddl@mAZAmBZB ddlCmDZDmEZEmFZFmGZG ddlHmIZI ddlJmKZK ddlLmMZM ddlNmOZOmPZP ddlQmRZR dd lSmTZTmUZUmVZV dd lWmXZXmYZY ddlZZZd Z[ ed e'j\ z Z]d Z^ ej_ e` Za ePeO! eajb Zc G d" d# Zde
d$ Ze efh d% Zgd&Zhd=d(Zid=d)Zjd*Zkd+ Zld, Zmd- Znd. Zod/ Zpd0 Zqd'ee5ererf fd1Zsd2e5fd3Ztd4 Zud5 Zvd6erd'dfd7Zwd8 Zxd9 Zyd: Zzd; Z{d< Z|dS )>u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see <https://www.imunify360.com/legal/eula>
N)ThreadPoolExecutor)contextmanagersuppress)partial)Path)CalledProcessError check_output)Tuple)
AlreadyLocked)files)health
inactivity)ConfigsValidatorCoreMergerModel SimpleRpc) HookEvent)
LicenseCLN) MessageSink
MessageSource)g)IndependentAgentIDAPI)TheSink)instancesimplification tls_check)NonRootRpcServerNonRootRpcServerAV RpcServer RpcServerAV
is_running)persistent_statesystemd_notifier)Task create_task_and_log_exceptions is_root_useris_systemd_boot)shutdown_process_pools)is_db_corrupted)EXITCODE_GENERAL_ERROR)DAY
rate_limit) flush_sentry)MalwareHitStatusMalwareScanResourceTypeVulnerabilityHitStatus)
MalwareHitVulnerabilityHiti4 z%s.is_corruptedzImunify360 database is corrupt. Application cannot run with corrupt database. Please, contact Imunify360 support team at https://cloudlinux.zendesk.com)periodc e Zd Zd Zd ZdS ) TaskFactoryc , t | _ d S N)setpool)selfs @/opt/imunify360/venv/lib/python3.11/site-packages/imav/server.py__init__zTaskFactory.__init__g s EE c t || }| j | | | j j |S )Nloop)r% r: addadd_done_callbackdiscard)r; rA corotasks r< __call__zTaskFactory.__call__j sF Dt$$$
d ty 0111 r> N)__name__
__module__ __qualname__r= rG r> r< r6 r6 f s2 r> r6 c # K dV dS # t $ r;}t d|| t j | Y d}~dS d}~ww xY w)z)Log *message* on any error & suppress it.Nzcaught error %r on %s) Exceptionloggererror
sentry_sdkcapture_exception)messagees r< log_and_suppress_errorrT q sq (
( ( ( ,a999$Q'''''''''(s
A0A
A> dnfrpmyumrpm2cpio# returnc t t j } | d D ]} | }n!# t j t j f$ r Y 5w xY w|t v rzt d||j |
t # t j $ r* t
d||j t Y w xY wdS # t j t j f$ r Y dS t $ r&}t
d| Y d}~dS d}~ww xY w)zWait for child rpm/yum/dnf processes to finish before exiting.
Exiting while a child package-manager process holds the Berkeley DB
lock corrupts rpmdb (BDB1507). See DEF-39911.
T recursivezAWaiting for child %s (pid=%d) to finish to avoid rpmdb corruptiontimeoutz'Child %s (pid=%d) did not finish in %dsz.Error waiting for package manager children: %sN)psutilProcesschildrenname
NoSuchProcess AccessDenied _PACKAGE_MANAGER_PROCESS_NAMESrN infopidwait _PACKAGE_MANAGER_WAIT_TIMEOUTTimeoutExpiredwarningrM )currentchildrc rS s r< "_wait_for_package_manager_childrenro s L."" %%%55 E
zz||(&*=>
555 0I JJ'DJEEEE , NNA 5 6 *
&"5 6
L L LGKKKKKKKKKLsd +C* AC* A! C* A!!-C* B+*C* +6C$!C* #C$$C* *D7 D7D22D7c t j d sdS t j d t j D } fd| D }t
dt | t | | D ].}t
d|j |j |j
/ t j }|
d }|rt
d t | |D ]j} t
d
|j | | J# t j t j f$ r Y gw xY wdS t
d dS # t$ $ r&}t
d | Y d}~dS d}~ww xY w)
zLog debug information about threads and child processes at shutdown.
This helps diagnose why the process might hang during shutdown.
DEBUGNc : g | ]}| |S rK )is_alive.0ts r<
<listcomp>z,_log_shutdown_debug_info.<locals>.<listcomp> s% FFF1 FQFFFr> c . g | ]}|j s|k |S rK )daemon)ru rv current_threads r< rw z,_log_shutdown_debug_info.<locals>.<listcomp> s4 56.5H5H5H5H5Hr> z@Shutdown debug: %d threads alive (%d non-daemon, excluding main)z& Thread: name=%r, daemon=%s, ident=%sTr\ z"Shutdown debug: %d child processesz+ Child process: pid=%d, name=%r, status=%sz"Shutdown debug: no child processesz'Could not enumerate child processes: %s)r get threadingrz enumeraterN rg lenrc ry identr` ra rb rh statusrd re rM rl )
alive_threadsnon_daemon_threadsrv current_processrb rn rS rz s @r< _log_shutdown_debug_infor s
5>> -//NFF 3 5 5FFFM KKJ M
4
F
H
G
E .**"++d+;;
> KK<c(mm L L L!
KKE
,f.AB D
KK< = = = = = E E E@!DDDDDDDDDEsD >AF AE F E;8F :E;;F F
G &GG 2 c | | rdS t d| t n# t $ r Y nw xY wt j d dS )u Daemon thread that force-exits if shutdown exceeds *deadline* seconds.
This is defense-in-depth: if the asyncio event loop or any shutdown
phase hangs (e.g. a task survives CancelledError — see DEF-40570),
the process is killed regardless.
Nz9Shutdown watchdog: deadline of %ds exceeded, forcing exit )ri rN rO r. rM os_exit)deadline
stop_events r< _shutdown_watchdogr sz x
LLC
HQKKKKKs A
AAc K t j }t j t t |fd }| t
d 5 t j t j
d d d n # 1 swxY w Y t dt j t
d 5 t j d 4 d {V dt" v rBt" j t" j d {V d d d d {V n# 1 d {V swxY w Y d d d n # 1 swxY w Y t+ |d D ]}t
d
5 t j d 4 d {V t d |j j |j j |j | d {V d d d d {V n# 1 d {V swxY w Y d d d n # 1 swxY w Y t
d 5 t d
t j d 4 d {V | d {V d d d d {V n# 1 d {V swxY w Y d d d n # 1 swxY w Y t
d 5 t j d 4 d {V t7 j d {V d d d d {V n# 1 d {V swxY w Y d d d n # 1 swxY w Y t# j d x}Ct
d 5 t j |d d {V d d d n # 1 swxY w Y t
d 5 | d d d n # 1 swxY w Y t? | t dt j d S )NT)targetargsry z)marking the start of the shutdown processz shutdown task starting, pid=%szclosing external sources
sensor_serverc | j S r8 )SHUTDOWN_PRIORITY)ps r< <lambda>z _shutdown_task.<locals>.<lambda> s A4G r> )keyzshutting down pluginz$Shutting down %s.%s (priority %d)...zdraining message queuezShutting down TheSink... zshutting down IAID APIweb_server_restart_taskz waiting for web server restart< r^ z
stopping loopz shutdown task finished, pid=%s)!r| EventThreadr _SHUTDOWN_DEADLINEstartrT r
sensor
shutting_downtimerN rg r getpidasyncior_ r r close wait_closedsorted __class__rI rH r shutdownr r{ wait_forstopr. r9 )rA the_sink plugin_list
stop_watchdogwatchdogplugin restart_tasks r< _shutdown_taskr s O%%M ! -
0 H
NN K L L 1 1
##DIKK0001 1 1 1 1 1 1 1 1 1 1 1 1 1 1 KK0")++>>>
: ; ; 4 4?2&& 4 4 4 4 4 4 4 4 !##%%'''o11333333333 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 44 4 4 4 4 4 4 4 4 4 4 4 4 4 4 *G*GHHH ( (
#$:
;
; ( ( r**
(
(
(
(
(
(
(
( :$/$-, oo'''''''''
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
(
( ( ( ( ( ( ( ( ( ( ( ( ( ( ( (
8 9 9 & & .///?2&& & & & & & & & &##%% % % % % % % % & & & & & & & & & & & & & & & & & & & & & & & & & & && & & & & & & & & & & & & & &
8 9 9 3 3?2&& 3 3 3 3 3 3 3 3'022 2 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 33 3 3 3 3 3 3 3 3 3 3 3 3 3 3 7888 E
#$D
E
E = ="<<<< < < < < < < < = = = = = = = = = = = = = = =
0 0 NNN
KK0")++>>>>>s 1BB B E5:A EE5
E" "E5%E" &E55E9<E9#H>>AH!H>!
H+ +H>.H+ /H>>I I 5KJ;)K;
K KK KK K 2M
L9'M9
M MM MM M N//N36N3 O**O.1O.c t d| t j }t j | |_ d|_ t j |_ t rd|_ nd|_ t j
j |_ | nC# t" $ r6 t d t' j t* Y nw xY wt- j t j
j d S )Nz Run as daemon [pidfile = %s]FTz*PID file already locked by another process)rN rg ry
DaemonContextpidfile PIDLockFile prevent_corer
FILE_UMASKumaskr( detach_processdefence360agent internalsget_fdsfiles_preserveopenr rO sysexitr+ gccollect reconfigure) pidfilepathdcs r<
_daemonizer & s
KK. <<< B ++K88BJBOBH ! ! '18@@BBB)
) ) ) ABBB '((((() JLLL $0022222s 1C =DDc < K t j d{V dS )z Perform update files on start.N)r !update_all_no_fail_if_files_existrK r> r< _initial_files_updater ? s-
1
3
3333333333r> c j | t j | t j d S r8 )run_until_completer run_in_executorr resetr@ s r< _tls_check_resetr D s6 &tY_== r> c fd| D S )Nc 4 g | ]}t | |S rK )
isinstance)ru r pclasss r< rw z$plugin_instances.<locals>.<listcomp>P s( 5 5 5!z!V 4 4 5A 5 5 5r> rK )objsr s `r< plugin_instancesr O s 5 5 5 5t 5 5 55r> c d |D }t |t }|D ]E}t d| | | | Ft
|| }t |t }|D ]F}t d| | | | | G| |||fS )Nc " g | ] } |
S rK rK )ru plugin_classs r< rw z"_start_plugins.<locals>.<listcomp>T s AAA,||~~AAAr> zCreating sink %rzCreating source %r)
r r rN rg r create_sinkr r
create_sourcer )rA plugin_classespluginssinkssr sourcess r< _start_pluginsr S s AA.AAAG
Wk 2 2E
5 5 &***
d 3 34444 ud##H w
66G
A A (!,,, h ? ?@@@@ NN UG ##r> r c t d t j rt t
f}nt t f}|D ]+}| | | | ,d S )NzStarting RpcServers...)
rN rg r SOCKET_ACTIVATIONr! r r r r create)rA r rpc_serversrpcs r<
_start_rpcr h sv
KK()))" 4"$67 "23 < <
4 : :;;;;< <r> c t ddgt | z ddit j }n_# t $ r }t |j }Y d }~n<d }~wt $ r t d g cY S t $ r g cY S w xY w| d }d |D }t t | S ) Nlsofz+wtPATHz/usr/sbin:/usr/bin)envz&There is no lsof in /usr/sbin:/usr/bin
c 0 g | ]}|t | S rK )int)ru lines r< rw z"_get_pids_open.<locals>.<listcomp> s# 0 0 0$4 0CII 0 0 0r> )r listr environr bytesoutputFileNotFoundErrorrN rl IOErrorstripsplitr9 )r outrS linespidss r< _get_pids_openr r s
UOd5kk )-<<
AHoo ?@@@ IIKK e $ $E 0 0% 0 0 0D D ??s 14
BA)B BBc F t rt j }|dk rt j | }t
t j t j }g }|D ]} t j | }n# t j
$ r Y )w xY w| }|r| }nd}| || dt | z f t | 5 } | }
d d d n # 1 swxY w Y n# t t" f$ r d }
Y nw xY wt% dt& j d|d|dt | d| d |
d
t+ j t. t1 t2 j rt6 s9t: t> t6 n t: ! t> t+ j t. d S tE tF 5 t6 $ d d d d S # 1 swxY w Y d S ) Nr Nonezparent process = %sz Instance of z% is already running. Parent process "z " with pid "z". Sockets are in use by z. z file contents z pid)db_path)%r" r getppidr` ra rc r r SOCKET_PATHNON_ROOT_SOCKET_PATHrd parentappendstrr readOSErrorr throttled_log_errorr SVC_NAMEr r r+ r* r r _DB_IS_CORRUPTED_FLAGexistsrN rO _DB_IS_CORRUPTED_MSGtouchrl r r unlink) r ppidr pids_used_socketprocess_used_socketrh _pr
_local_parent _parent_namefile written_pids r< _check_able_to_startr s || --z|| 199^D))..00F -%y'E #% '
.--CC + H #
*#0#5#5#7#7LL#)L#**
-L0A0AA
#']] .d"&))++K. . . . . . . . . . . . . . .W%
#
#
# "
# MMMFFDD+,,,,GG KK
H+ , , ,uz*** +$++-- 1 LL- . . . ! ' ' ) ) ) ) NN/ 0 0 0 '(((((
'
(
( + + ! ( ( * * * + + + + + + + + + + + + + + + + + +sZ ;BB"!B"E
D>2 E
>EE
EE
E E /JJ Jr c
. t s3t d t j t
t
}t j j |j
|j s t j
d rHt j j |j p t j
d t j t" t% |j |j r7t+ |j t- j t, j j t4 j t; j t= j s t4 j tC j" }t j# }|$ tK tM d|r|dz nd |' tQ tS | tT j+ , tZ j. t_ | ta j1 |2 | tf th fD ] } |
n]# tj j6 $ rK}t 7 dtq | t j t
Y d}~nd}~ww xY w|2 ts j: st d |2 tw nP# tr j< $ r>}t 7 d
| t j t
Y d}~nd}~ww xY wtz j> ? t jA t || \ }}} t || t d t- j t, j jD t jF t jH d
}
t ||jJ |
t jL n2# t $ r%}t 7 d| Y d}~nd}~ww xY wt |t t |||| z |Q t d t d t d tC jS | D } | rt dt | | D ]} | U t t 5 |2 tC jW | d ddd n # 1 swxY w Y t |dd }
|
r1t d |
Y d d t d t t d t t |\ t d dS # t d t d tC jS | D } | rt dt | | D ]} | U t t 5 |2 tC jW | d ddd n # 1 swxY w Y t |dd }
|
r1t d |
Y d d t d t t d t t |\ t d w xY w) zCommon function for agent service startup.
plugin_classes is a list of classes implementing message processing
plugins. init_actions is a coroutine that will be called prior to starting
RPC and message processing.z5Imunify agent could be started by the root user only! IMUNIFY360_LOGGING_CONFIG_FILE ) max_workersz0Failed to stop pending cleanup/patch. Reason: %sNz=Essential files are missing. Performing initial files update.z*Failed to perform initial files update: %szMessage Bus startedF)versionresidentz!Failed to remove unused locks: %sz loop stoppedzStarting executor cleanupc : g | ]}| |S rK )donert s r< rw zstart.<locals>.<listcomp>% s% FFFQVVXXF1FFFr> zCancelling %d pending tasksg @r^ _default_executorz Shutting down ThreadPoolExecutorT)ri cancel_futuresz"Shutting down ProcessPoolExecutorszExecutor cleanup completezEvent loop closed)]r' rN rg r r r+ parse_clir r setLogLevelverbose
log_configr r r{ update_logging_config_from_filesetrecursionlimit_MAX_RECURSION_DEPTHr r ry r r$ notify
AgentState
DAEMONIZEDr
r startingr r
is_registered unregisteredr get_event_loop cpu_countset_default_executorr minset_task_factoryr6 r r dbinitr r validate_configs_on_startr update_merged_configr _stop_pending_cleanup_stop_pending_patchr PeeweeExceptionrO reprr essential_files_existr UpdateErrorr track set_timeoutr INACTIVITY_TIMEOUTr r READYr AgentStartedr VERSIONr& process_messager# remove_unused_locksrM _setup_signal_handlersr r run_foreverr all_tasksr~ cancelr ri getattrr r) ro r )r init_actionsr rA _cpu_stop_outdatedrS r r r
agent_startedpendingrF executors r< r r sy >> ) KLLL '((( ;;D $00 >>>
"*..)IJJ
!(HH O Orz~~.N O O
./// &&& { H4< 0 ; FGGG
M49;;''' # % % %
""$$$ ! # #D
<>>D s24/FtaxxQ'G'GHHH +--(((a) $$$!$'''#%%% ///
-#8:M"N
!
!
! - - - -
LLBDGG
H+ , , , , , , , , - &&u'B'D'DEE 1 KKO
1''(=(?(?@@@@$
1
1
1 I1MMM/00000000
1 $$Y%ABBB#1$#G#G %4""" )*** 0 ; ABBB!.L5
' (*M
A 0 2 2 2 2 A A A LL<a @ @ @ @ @ @ @ @ A '.$%'/JJ
N### /000 """ GFg / 5 5FFF L KK5s7|| D D D
)$$
L
L'' Wc(J(J(JKKK
L
L
L
L
L
L
L
L
L
L
L
L
L
L
L 4!4d;; ? KK: ; ; ; 5 > > > 8999 /000 """ +,,,
'(((((M /000 """ GFg / 5 5FFF L KK5s7|| D D D
)$$
L
L'' Wc(J(J(JKKK
L
L
L
L
L
L
L
L
L
L
L
L
L
L
L 4!4d;; ? KK: ; ; ; 5 > > > 8999 /000 """ +,,,
'((((s 3A7[$ +K [$ L!AL [$ L!!A[$ %!N [$ O4O
[$ OC[$ R, +[$ ,
S6S[$ SA[$ *XX X $B b*^8, b8^< <b?^< Cbc j t j d S # t $ r}ddlm} t j t | }| || t
t | t j
t Y d }~d S d }~ww xY w)Nr )
execute_hooks)rO )r validate_config_layersrM defence360agent.hooks.executerP r AgentMisconfigr9 r rN rl r r r r+ )rA rS rP agent_misconfigs r< r4 r4 J s )/11111 ) ) )??????#2aAAA
o > >???s1vv '(((((((((
)s
B2BB--B2c dfd}t j t j t j t j fD ]}| ||| | d S )NFc s/dt d| t | d S t d| d S )NTz Caught %sz9Caught %s. Shutdown task is already running, please wait.)rN rg r& )rA sigcalled shutdowntasks r< _sighandlerz+_setup_signal_handlers.<locals>._sighandlerY s] F KK S ) ) )3D,GGFFF KKK
r> )signalSIGINTSIGTERMSIGUSR1SIGUSR2add_signal_handler)rA rY rZ rW rX s ` @r< rD rD V sp
F
v~v~v~N = = [$<<<<= =r> c < t j d } | ddddd | d d
d | d
dd | dd | t j dd S )NzRun imunify agent) descriptionz-vr" countr zLevel of logging. Each value corresponds to:1 - console only log level,2 - previous plus add network log,3 - all previous plus add process message log,4 - all previous plus add debug log)destactiondefaulthelpz--daemon
store_truez
run as daemon)re rg z --pidfilez/var/run/imunify360.pidzuse with --daemon)rf rg z --log-configzlogging config filename)rg r )argparseArgumentParser add_argument
parse_argsr argv)parsers r< r r j s
$1D
E
E
EF
2
<oNNN
)
-FGGG SXabb\ * **r> c t j t j t j k t j t j j k } t j
| t j dS )zP
Get back to FOUND all malware hits which have stuck in CLEANUP_STARTED
N) r2 selectwherer r/ CLEANUP_STARTED
resource_typer0 FILEvalue
set_statusFOUNDhitss r< r6 r6 sb $ $ - == $;$@$FF D $ 0 677777r> c t j t j t j k } t j | t j dS )zZ
Get back to VULNERABLE all vulnerabilities which have stuck in PATCH_IN_PROGRESS
N)r3 rp rq r r1 PATCH_IN_PROGRESSrv
VULNERABLErx s r< r7 r7 sP " $ $ * * #9#KK D &<&GHHHHHr> )rZ N)}__doc__ri r r loggingr r[ r r| r concurrent.futuresr
contextlibr r functoolsr pathlibr
subprocessr r typingr
ry lockfiler daemon.pidfiler` defence360agent.internals.loggerr r defence360agent.apir
r defence360agent.contracts.configr r r r r %defence360agent.contracts.hook_eventsr !defence360agent.contracts.licenser !defence360agent.contracts.pluginsr r &defence360agent.internals.global_scoper defence360agent.internals.iaidr "defence360agent.internals.the_sinkr defence360agent.modelr r r defence360agent.simple_rpcr r r r! r" defence360agent.subsysr# r$ defence360agent.utilsr% r& r' r( "defence360agent.utils.safe_fileopsr) defence360agent.utils.check_dbr* defence360agent.utils.clir+ defence360agent.utils.commonr, r- defence360agent.sentryr. imav.malwarelib.configr/ r0 r1 imav.malwarelib.modelr2 r3 rP r& r r r getLoggerrH rN rO r r6 rT frozensetrf rj ro r r r r r r r r r r r r r r r4 rD r r6 r7 rK r> r< <module>r s *
1 1 1 1 1 1 / / / / / / / / 7 7 7 7 7 7 7 7
" " " " " "
' ' ' ' ! ! ! ! ! ! 2 2 2 2 2 2 2 2 < ; ; ; ; ; 8 8 8 8 8 8 H H H H H H H H 4 4 4 4 4 4 @ @ @ @ @ @ 6 6 6 6 6 6 E E E E E E E E E E F E E E E E E E F E E E E E : : : : : : < < < < < < 8 8 8 8 8 8 8 8 / / / / / /
? > > > > > > > . ;<< %
8 $ $,jj,,,V\:: ( ( ( "++L+L+L!M!M " L L L LF0E 0E 0E 0Ef (7? 7? 7?t3 3 324 4 4
6 6 6$E'42E,F $ $ $ $*<w < < < < $9+ 9+ 9+xG)$ G) G) G) G) G)T ) ) )= = =(+ + +28 8 8I I I I Ir>
Back to Directory
File Manager