gq" d Z ddlmZmZmZ ddlmZmZmZm Z m
Z
m Z m Z m
Z
mZmZ ddlmZmZ ddlmZmZ G d de
Z G d d e
Z G d
d e
Z G d d
e
Z G d dee
e
Z G d dee
e
e Z G d dee Z G d de
Z G d de
Z G d de Z G d de Z G d d e Z! G d d e Z" G d d!e Z# G d" d#e
e Z$ G d$ d%e
e Z% G d& d'e
e Z& G d( d)e
Z' G d* d+ee
e
Z( G d, d-e Z) G d. d/e
Z* G d0 d1e
Z+ G d2 d3e
Z, G d4 d5e
Z- G d6 d7e
Z. G d8 d9e
Z/ G d: d;e
Z0 G d< d=ee
e
Z1 G d> d?e Z2 G d@ dAe
Z3dB ee3e eeeeee%e ef D Z4dCS )Du
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
)ListOptionalSet)
AccumulatableAck FilesUpdatedLockableMessageNoopReceived
ReportableShortenReprListMixin
Splittable)MalwareScanTypeQueuedScanState)MalwareDatabaseHitInfoMalwareDatabaseScanReportc e Zd ZdZdZdS )MalwareScanTaskz/
Creates task to scan file for malware
MALWARE_SCAN_TASKN__name__
__module__ __qualname____doc__DEFAULT_METHOD L/opt/imunify360/venv/lib/python3.11/site-packages/imav/contracts/messages.pyr r + s )NNNr r c e Zd ZdZdS )MalwareScanCompleteMALWARE_SCAN_COMPLETENr r r r r r r r! r! 3 s ,NNNr r! c e Zd ZdZdS )MalwareCleanCompleteMALWARE_CLEAN_COMPLETENr# r r r r% r% 7 s -NNNr r% c e Zd ZdZdS )MalwareRestoreCompleteMALWARE_RESTORE_COMPLETENr# r r r r( r( ; s /NNNr r( c " e Zd ZdZ fdZ xZS )MalwareScanSummaryMALWARE_SCAN_SUMMARYc V d |D } t j |d|i| d S )Nc " g | ] }d |d i
S )summaryr .0items r
z/MalwareScanSummary.__init__..D s! @@@$)T)_-@@@r itemssuper__init__selfr4 argskwargs __class__s r r7 zMalwareScanSummary.__init__B s= @@%@@@$6e6v66666r )r r r r r7
__classcell__r< s @r r+ r+ ? s= +N7 7 7 7 7 7 7 7 7r r+ c . e Zd ZdZdZdZdZ fdZ xZS )MalwareScanResultMALWARE_SCAN_RESULT i resultsc V d |D } t j |d|i| d S )Nc h g | ]/}d |d D |d d0S )c " i | ] \ }}|d v ||
S )> r: typescanidr )r1 keyvalues r
z9MalwareScanResult.__init__...T s4 "U 888 888r r/ rC )r/ rC )r4 r0 s r r3 z.MalwareScanResult.__init__..Q sd
&*9o&;&;&=&= ?
r r4 r5 r8 s r r7 zMalwareScanResult.__init__P sL
$6e6v66666r ) r r r r LIST_SIZE
BATCH_SIZE BATCH_FIELDr7 r= r> s @r r@ r@ H sL *NIJK7 7 7 7 7 7 7 7 7r r@ c * e Zd ZdZdZeefZdefdZ dS ) MalwareScanz+
Represents results of single scan
MALWARE_SCANreturnc | d }| di d t j k r|d uS t | S )NrC r/ rG )getr
BACKGROUNDbool)r9 rC s r
do_accumulatezMalwareScan.do_accumulatei sT ((9%% 88Ir " " & &v . ./2L L L$& &G}} r N)
r r r r r r+ r@
LIST_CLASSrV rW r r r rP rP a sK $N$&78J t r rP c e Zd ZdZdZdS )MalwareMRSUploadzk
Used to isolate a possibly long running uploading to MRS from the
other MalwareScan handlers.
MALWARE_MRS_UPLOADNr r r r rZ rZ p s
*NNNr rZ c e Zd ZdZdS )MalwareScanQueueMALWARE_SCAN_QUEUENr# r r r r] r] y )NNNr r] c e Zd Z fdZ xZS )MalwareScanQueuePutc N t || d S )N)paths scan_argsr5 )r9 rc rd r< s r r7 z MalwareScanQueuePut.__init__~ s&
u :::::r r r r r7 r= r> s @r ra ra } s8 ; ; ; ; ; ; ; ; ;r ra c e Zd Z fdZ xZS )MalwareScanQueueRemovec L t | d S )N)scan_idsr5 )r9 ri r< s r r7 z MalwareScanQueueRemove.__init__ s$
(+++++r re r> s @r rg rg s8 , , , , , , , , ,r rg c e Zd Z fdZ xZS )MalwareScanQueueRecheckc H t d S Nr5 r9 r< s r r7 z MalwareScanQueueRecheck.__init__
r re r> s @r rk rk 8 r rk c e Zd Z fdZ xZS ) MalwareScanQueueStopBackgroundc H t d S rm r5 rn s r r7 z'MalwareScanQueueStopBackground.__init__ ro r re r> s @r rr rr rp r rr c < e Zd Zddddee def fdZ xZS ) MalwareScanQueueUpdateStatusNri statusri rw c N t || d S )Nrv r5 )r9 ri rw r< s r r7 z%MalwareScanQueueUpdateStatus.__init__ s( (6:::::r )r r r r strr r7 r= r> s @r ru ru s` '+t; ; ; 9;5D; ; ; ; ; ; ; ; ; ;r ru c $ e Zd ZdxZ\ ZZZZdZdS )MalwareResponse)BLACKWHITEKNOWNUNKNOWNMALWARE_RESPONSEN) r r r TYPESr| r} r~ r r r r r r{ r{ s& +OOE (E5%'NNNr r{ c e Zd ZdZdS )MalwareSendFilesMALWARE_SEND_FILESNr# r r r r r r_ r r c e Zd ZdZdS )MalwareRescanFilesMALWARE_RESCAN_FILESNr# r r r r r +NNNr r c 4 e Zd ZdZdZdddddd fd
Z xZS )MalwareCleanupTaskz'
Creates task to cleanup files
MALWARE_CLEANUP_TASKN)
standard_onlycause initiatorscan_id post_actionc V t |||||| d S )N)hitsr r r r r r5 )r9 r r r r r r r< s r r7 zMalwareCleanupTask.__init__ sB ' #
r )r r r r r r7 r= r> s @r r r sd ,N
r r c e Zd ZdZdS )MalwareCleanupListMALWARE_CLEANUP_LISTNr# r r r r r r r r c e Zd ZdZdZeZdS )MalwareCleanupz.
Represents results of single cleanup
MALWARE_CLEANUPN)r r r r r r rX r r r r r s$ 'N#JJJr r c e Zd ZdZdS )MalwareIgnorePathUpdatedzESignal through a message bus that MalwareIgnorePath has been updated.Nr r r r r r r r r s OODr r c t e Zd ZU dZeee ed< eed< eed< eed< ee ed< eed< eed< eed < eed
< e e
ed < ee ed < d
d
d
d
dddddeee dee dedededed ed
ed e e
dee d ee f fdZ de fdZ
d Zd Zd Z xZS )MalwareDatabaseScanz1
Represents results of a single MDS scan
r: pathr rG errorstarted completedtotal_resourcestotal_maliciousr r r N)r r r r r r r c
` t ||||||||| |
| d S )N) r: r r rG r r r r r r r r5 )
r9 r: r r rG r r r r r r r r< s
r r7 z MalwareDatabaseScan.__init__ sQ + +
r reportc l | |j |j |j |j |j d S )N)r r r r r )updater r r r r )r9 r s r update_with_reportz&MalwareDatabaseScan.update_with_report sC N & " 2 " 2
r c . | | S N)r )r )r9 messages r update_with_errorz%MalwareDatabaseScan.update_with_error
s {{{)))r c t rm NotImplementedError)r9 rI rJ s r __setitem__z MalwareDatabaseScan.__setitem__
!!r c t rm r )r9 rI s r __delitem__z MalwareDatabaseScan.__delitem__ r r )r r r r r r ry __annotations__intr r r7 r r r r r r= r> s @r r r s 49
III
LLL
III C=
LLLNNN
$
%%%%} ,0 ##'
tCy!
sm
()
}
C=
:
)B
* * *" " "" " " " " " "r r c e Zd ZdZdS )MalwareDatabaseRestorez4
Represents results of a single MDS restore
Nr r r r r r s r r c B e Zd ZU dZeed< eed< dedef fd Z xZS )MalwareDatabaseRestoreTaskz.
Represents a single MDS restore task
r app_namec N t || d S )N)r r r5 )r9 r r r< s r r7 z#MalwareDatabaseRestoreTask.__init__" s&
dX66666r r r r r ry r r7 r= r> s @r r r sk IIIMMM7S 7C 7 7 7 7 7 7 7 7 7 7r r c r e Zd ZU dZee ed< ee ed< dee dee f fd Z xZS )MalwareDatabaseCleanupz4
Represents results of a single mds cleanup
succeededfailedc N t || d S )N)r r r5 )r9 r r r< s r r7 z MalwareDatabaseCleanup.__init__. s6
r ) r r r r r r r r7 r= r> s @r r r & s )**** & ''''
-.
*+
r r c 4 e Zd ZU dZeed< def fd Z xZS ) MalwareDatabaseCleanupFailedz*
Signifies an MDS cleanup failure
r c L t | d S r r5 r9 r r< s r r7 z%MalwareDatabaseCleanupFailed.__init__@ $
u%%%%%r r r> s @r r r 9 [ JJJ& & & & & & & & & & &r r c 4 e Zd ZU dZeed< def fd Z xZS ) MalwareDatabaseRestoreFailedz*
Signifies an MDS restore failure
r c L t | d S r r5 r s r r7 z%MalwareDatabaseRestoreFailed.__init__K r r r r> s @r r r D r r r c e Zd ZdZdS )MalwareCleanupRevertListMALWARE_CLEANUP_REVERT_LISTNr# r r r r r O s 2NNNr r c e Zd ZeZdS )MalwareCleanupRevertN)r r r r rX r r r r r S s )JJJr r c e Zd ZdZdS )CheckDetachedScans MALWARE_CHECK_DETACHED_SCANSNr# r r r r r W s 3NNNr r c g | ] }|j
S r )r )r1 msgs r r3 r3 [ s+ r N)5r typingr r r "defence360agent.contracts.messagesr r r r r
r r r
r r imav.malwarelib.configr r imav.malwarelib.scan.mds.reportr r r r! r% r( r+ r@ rP rZ r] ra rg rk rr ru r{ r r r r r r r r r r r r r r r MSGS_WITHOUT_IPr r r r sA * ' & & & & & & & & & D C C C C C C C ) ) ) ) )g ) ) )- - - - -' - - -. . . . .7 . . .0 0 0 0 0W 0 0 07 7 7 7 7-w
7 7 77 7 7 7 7,gz: 7 7 72 - * * * * *w * * ** * * * *w * * *; ; ; ; ;* ; ; ;
, , , , , - , , ,
.
%5
; ; ; ; ;#3 ; ; ;( ( ( ( (gx ( ( (
* * * * *w * * *, , , , ,( , , ,
6, , , , ,-w
, , ,$ $ $ $ $] $ $ $ w >" >" >" >" >"' >" >" >"B W 7 7 7 7 7 7 7 7
W
&& & & & &7 & & && & & & &7 & & &3 3 3 3 3 3Wj 3 3 3* * * * *= * * *4 4 4 4 4 4 4 4 r