}g' d Z ddlZddlZddlmZmZ ddlmZ ddlm Z ddl
m Z ddl Z ddl
mZ ddlmZmZ dd lmZ d
Z G d d Z G d
de Z G d de Z G d de ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)ABCabstractmethod)gather)Path)Type)MalwareScanResourceType)Message MessageType)loggeri, c " e Zd ZdZdZdZdZdZdS )
DetachedStatefinishedabortedrunningno_dir
no_processN)__name__
__module__ __qualname__FINISHEDABORTEDRUNNINGNO_DIR
NO_PROCESS R/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/detached.pyr
r
& s' HGG
F JJJr r
c z e Zd ZU eed< eed< eed< eed< eed< eed< dddddd Zd
Zd Zd Z d
Z
d Z dS ) DetachedDir DETACHED_DIR done_fileerr_filelog_filepid_file
progress_filedonepid)r! r" r# r$ r% c t | j | | _ | j D ] \ }}t | || j |z dS )zB
NOTE: Initialization should not create any files
N)r r pathFILESitemssetattr)self detached_idattr file_names r __init__zDetachedDir.__init__? s_ *K88 #z / / 1 1 7 7OD) D$ I 5 6 6 6 6 7 7r c | j dd | j | j | S )NT)parentsexist_ok)r) mkdirr# touchr" r- s r __enter__zDetachedDir.__enter__G sG t444
r c d S Nr )r- exc_typeexc_valexc_tbs r __exit__zDetachedDir.__exit__M s r c * t | j S r: )strr) r7 s r __str__zDetachedDir.__str__P s 49~~ r c , t | j | S r: )getattrr) )r- names r __getattr__zDetachedDir.__getattr__S s ty$'''r N) r r r r@ __annotations__r r* r1 r8 r> rA rE r r r r r . s OOONNNNNNNNN (
E7 7 7
( ( ( ( (r r c e Zd ZdZeedee fd Ze d Z
d Z d Z d Z
edd Zefdefd Zd
Zeed Zd Ze edefd
Zedefd ZdS )DetachedOperationNreturnc d S r: r r7 s r DETACHED_DIR_CLSz"DetachedOperation.DETACHED_DIR_CLS[
r c z K | j j }g }t j | r|t j | 5 }|D ]L}| r6| | |j | M d d d n # 1 swxY w Y t | d {V d S r: ) rK r osr) existsscandiris_dirappendrD check_detached_operationr )clssink restore_dir check_corositentrys r check_detached_operation_dirz.DetachedOperation.check_detached_operation_dir` s *7
7>>+ & & K((
B E ||~~ #** C
OO D DT J J
k""""""""""s AB!!B%(B%c R || _ | | j | _ d S r: )r. rK detached_dir)r- r. s r r1 zDetachedOperation.__init__o s) & 1 1$2B C Cr c " | j |j k S r: )r. )r- others r __eq__zDetachedOperation.__eq__s s 5#444r c * t | j S r: )hashr. r7 s r __hash__zDetachedOperation.__hash__v s D$%%%r c
K d S r: r )r- ___s r handle_aborted_processz(DetachedOperation.handle_aborted_process{ r c H | j s&t j d| j t j S | j j r t j S | }n# t t f$ r}| j j
}t j |z
|k r1t j d| j j | t j cY d }~S t j cY d }~S d }~ww xY w t' j | }| | r t j S t j d| n9# t t& j f$ r }t j d|| Y d }~nd }~ww xY wt j S )NzNo such scan directory: %sz;Pid file wasn't created or pid file is empty: %s, error: %szBThe running process (pid=%s) does not match the detached operationz=Can't get the process for the detached operation (pid=%s): %s)r\ rQ r debugr
r r! is_filer get_pidFileNotFoundError
ValueErrorstatst_mtimetimewarningr$ r r psutilProcessprocess_is_suitabler Error)r-
start_timer' errdetached_dir_mtimeprocs r get_detached_process_statez,DetachedOperation.get_detached_process_state s '')) ( L5t7H I I I ' ' & . . 0 0 * ) ) ,,,..CC!:.
,
,
,!%!2!7!7!9!9!B y{{ //*<<!%. %,,,,,,, + + + + + + +
, >#&&D''--
$,,-
"6<0 N
$$sI +B DA#D 4D: D D D4E E F5FFc X t | j j S r: )intr\ r$ read_textr7 s r rk zDetachedOperation.get_pid s" 4$-7799:::r c d S r: r r7 s r on_complete_messagez%DetachedOperation.on_complete_message rL r c K | }|t j k r"| | j d{V dS |t j k r | | d{V dS dS )ah Updates operation to a consistent state.
Algorithm:
1) If scan_dir doesn't exist:
- scan_dir doesn't already create
- scan ended and MalwareScanComplete is in process
2) pid file doesn't exist:
- since scan_dir mtime has passed more than 5 minutes
-> something went wrong & handle_aborted_process
- ... less than 5 minutes -> waiting for ai-bolit
3) done file exists -> scan completed
4) done file doesn't exist:
- process executes -> scan running
- process dead -> scan aborted
N)rU )rz r
r process_messager r rf )r- rU operation_states r rS z*DetachedOperation.check_detached_operation s 99;; m 4 4 4&&t'?@@ @ @ @ @ @ @ @ @ @
5
5
5--4-88 8 8 8 8 8 8 8 8 8 6
5r c d S r: r )rT ry s r rt z%DetachedOperation.process_is_suitable rL r c
K d S r: r r7 s r completezDetachedOperation.complete rg r )rI N)r r r NAMEpropertyr r r rK classmethodrZ r1 r_ rb rf PROCESS_START_TIMEr@ rz rk r rS boolrt r r r r r rH rH X sz D
${"3
^ X
# # [ # D D D5 5 5& & &
^
5G (% (%3 (% (% (% (%T; ; ;
^ X
9 9 9,
$
^ [
^
r rH c e Zd ZdZeedefd Zeedefd Z eede
fd Z eedefd Z ede
fd ZdS ) DetachedScanscanrI c d S r: r r7 s r
RESOURCE_TYPEzDetachedScan.RESOURCE_TYPE rL r c d S r: r r7 s r progresszDetachedScan.progress rL r c d S r: r r7 s r phasezDetachedScan.phase rL r c d S r: r r7 s r total_resourcesz DetachedScan.total_resources rL r c B t j | j | j S )N)scan_id
resource_type)r
MalwareScanCompleter. r r7 s r r z DetachedScan.on_complete_message s' .$D4F
r N)r r r r r r r r r| r r@ r r r r r r r r r s D
6
^ X
#
^ X
s
^ X
^ X
W
X
r r )__doc__rN rp abcr r asyncior pathlibr typingr rr imav.malwarelib.configr "defence360agent.contracts.messagesr r
defence360agent.defence360r r r
r rH r r r r r sw *
# # # # # # # #
: : : : : : C C C C C C C C - - - - - - '( '( '( '( '(# '( '( '(Tv
v
v
v
v
v
v
v
r
$
r