}g> d Z ddlZddlZddlZddlZddlmZmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZ dd lmZmZmZmZ dd
lmZ dd lmZ dd lm Z m Z dd
l m Z ddl!m"Z"m#Z# ddl$m%Z%m&Z& ddl'm(Z(m)Z) ddl*m+Z+m,Z,m-Z- ddl.m/Z/ ddl0m1Z1m2Z2 ddl3m4Z4 ddl5m6Z6 ddl7m8Z8 ddl9m:Z: ej; e< Z= e&e%e=j> e=j? Z@ddddd d d dd d d dd ZA G d! d"e ZB G d# d$eB ZC G d% d&eB ZDe-ZEeCZF e(e jG d'( ZHe+jI jJ eCe+jK jJ eDiZL G d) d* ZMd+ ZNdS ),u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)ABCabstractmethod) b64encode)cached_property)iglob)fsencodePath)ClassVarDequeListOptional)uuid4)
inactivity)MalwareMalwareScanIntensity)g)antivirus_mode create_task_and_log_exceptions)HOUR
rate_limit)serialize_attr unserialize)MalwareScanResourceTypeMalwareScanTypeQueuedScanState)AiBolitDetachedScan)AVDExecutionErrorAppVersionDetector) DetachedScan)MDSDetachedScan)MalwareDatabaseScanner) panel_users)periodon_drop i
intensity_cpu intensity_io
intensity_ram i i )lowmoderatehighc e Zd ZU ee ed< eed< dZdej dddddddddd de
de de e
de e
fd Zed
Zeed Zd Zd
Zd Zd Zd Zd ZdZd Zed Z dS )QueuedScanBase
resource_type
detached_scanN scanid scan_typecreatedstarted intensity home_dirsr( r) r* initiatorstater6 r7 r8 r< c || _ |rt | }n$t j t j t j d}|p|d | p|d |
p|d | d| _ |pg }|t j k r t | |v r t j
}|pt j | _
|| _ |p t t! j | _ | t$ j nt% | | _ || _ d | _ d S )Nr' r( r) r* )r( r) r* r; )pathINTENSITY_FALLBACKr CPUIORAMargsr ON_DEMANDr
USERr hexr5 r6 inttimer7 r queuedr< r8 scanner_task)selfr> r5 r6 r7 r8 r9 r: r( r) r* r; r< _intensity_fallbacks O/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/queue.py__init__zQueuedScanBase.__init__] s " !3I!> "6!9 4 7!5!9" " + 3!/2 ( N,>~,N * 3!/2"
O 1 1 1d4jjI6M6M',I + " 2#dikk"2"2 &+mO " " 9O9O
c
K d S N rK s rN startzQueuedScanBase.start s rP c d S rR rS rT s rN total_resourcesz QueuedScanBase.total_resources s
rP c J | j r| j d S d S rR rJ cancelrT s rN stopzQueuedScanBase.stop 2 ' $ $ & & & & & ' 'rP c | j j | j | j | j | j | j | j j d| j }| j t j
k r | j j |d< | j j
|d< |S )N)statusr> r5 r8 r7 r6 r2 phaseprogress)r< valuer> r5 r8 r7 r6 r2 rC r runningr3 r_ r` )rK results rN r^ zQueuedScanBase.status sz j&Ik|| ! / 5
i
: 0 0 0 " 0 6F7O!%!3! )rK others rN __eq__zQueuedScanBase.__eq__ s& %"5 5
( UZ'
rP c X d | j j | j | j S )Nz<{}({!r}, scanid={})>)format __class__ __qualname__r> r5 rT s rN __repr__zQueuedScanBase.__repr__ s* &-- N 'DK
rP c | | j | j | j | j | j | j | j j | j j dS )N)r> r5 r6 r7 r8 rC r2 r< ) r> r5 r6 r7 r8 rC r2 ra r< rT s rN to_dictzQueuedScanBase.to_dict s@ Ik ||I ! / 5Z%
rP c x | di D ]
\ }}|||< | di |S )NrC rS )popitems)clskwargsargra s rN from_dictzQueuedScanBase.from_dict sL **VR006688 JC F3KKs}}V}} rP ) __name__
__module__rr r r __annotations__r r< r rD strrG r floatrO r rU propertyrW r[ r^ rh rk rn rs __hash__ru classmethodr| rS rP rN r1 r1 X sy 34444 E (2#' # 0! 0! 0!
0!
0! % 0! } 0! 0! 0! 0!d
^
^ X
' ' ' ! ! !
H
[ rP r1 c e Zd Zej Zdej dddddddddddddddede de
e f fdZ fdZ
d Zd Zed
Z xZS ) QueuedFileScanN)r5 r6 r7 r8 r9 r: r( r) r*
file_patternsexclude_patternsfollow_symlinks
detect_elfr; r< r6 r7 r8 c t ||||||||| |
|| | j | pd | pd |
pd| t | j | _ d S )Nr4 F)r r r r )superrO rC rj r r5 r3 )rK r> r5 r6 r7 r8 r9 r: r( r) r* r r r r r; r< rL rq s rN rO zQueuedFileScan.__init__ s * '%'
'/4 - 5 + 4u!
1 = =rP c | t | t | j | _ d S rR )r rk r r5 r3 rK r< rq s rN rk zQueuedFileScan.__setstate__ s5 U### 0 = =rP c K t j | _ ddlm} |t j d } |j | j f| j | j | j d| j
| _ | d {V }|2t d| j t j | _ n?t j | _ | j
d pt) | dd |d< |S ) Nr )MalwareScannerT)sinkhooks)scan_idr6 r8 zScan cancelled for %sr; undefined)rH r8 imav.malwarelib.scan.scannerr r r rU r> r5 r6 rC rJ
async_waitloggerinfor stoppedr< rb getgetattr)rK r scanner scan_datas rN rU zQueuedFileScan.start s y{{ ?????? .afD999 )GM I
KnL
i
",,........ KK/ ; ; ;(0DJJ(0DJ
k** ;4k::
k " rP c J | j r| j d S d S rR rY rT s rN r[ zQueuedFileScan.stop( r\ rP c | j j S rR r3 rW rT s rN rW z QueuedFileScan.total_resources, !11rP )r} r~ rr r FILEr2 r rD r rG r r rO rk rU r[ r rW
__classcell__rq s @rN r r s +0M (2#' %)> )> )>
)>
)> % )> )> )> )> )> )>V> > > > > :' ' ' 2 2 X2 2 2 2 2rP r c e Zd Zej Zdej ddddddddf
dede e dede
de e de e f fd
Z fd Z
ed
e
fd Zd Zdd
Z xZS ) QueuedDbScanNr> r5 r6 r7 r8 r9 c
t ||||||||| |
| t | j | _ d S )N) r> r5 r6 r7 r8 r9 r: r( r) r* r< )r rO r! r5 r3 )rK r> r5 r6 r7 r8 r9 r: r( r) r* r< rL rq s rN rO zQueuedDbScan.__init__4 sa '%'
-T[ 9 9rP c | t | t | j | _ d S rR )r rk r! r5 r3 r s rN rk zQueuedDbScan.__setstate__S s3
U### ,T[ 9 9rP returnc | j j S rR r rT s rN rW z QueuedDbScan.total_resourcesW r rP c
K | j d r| j d n| j }d t | D } t j d 5 t | d {V d d d n # 1 swxY w Y t | j | j gfi | j
| j | j d
| j d {V d S # t $ rZ}| j t$ j | j | j | j |j |j |j d {V Y d }~d S d }~ww xY w)Nz/**c F g | ] }t t | S rS )r r ).0ds rN
z&QueuedDbScan._scan..c s& LLLa9Xa[[11LLLrP AVD_scan)r6 r )r scan_pathr6 scan_startedcmdouterr)r> endswithrstripr r tracktaskr rU r" rC r6 r5 scanr8 r r3 handle_aborted_processr r commandr r )rK apps_pathunglobbed_pathsexcs rN _scanzQueuedDbScan._scan[ s- &*Y%7%7%=%= LDI S ! ! !49 ML5;K;KLLL !!&&z22
B
B(**00 AAAAAAAAA
B
B
B
B
B
B
B
B
B
B
B
B
B
B
B ) ) . d4<
!
!
!
!
!
!
!
!
! ! $;;V ) . !\KGG <
s= D 7(B+ D +B//D 2B/3D
E'
AE""E'c K t j | _ t t j | j | _ d S rR )rH r8 r asyncioget_event_loopr rJ rT s rN rU zQueuedDbScan.startz s; y{{ : " $ $dj
rP r N)r} r~ rr r DBr2 r rD r r rG r rO rk r rW r rU r r s @rN r r 1 s +.M
!%(2#'#' : : :
:
:
: % : C= : : : : : :>: : : : : 2 2 2 2 X2 ! ! !>
rP r _scans_info)r> attrc e Zd Zed Zedee fd Zed Z e
dde fd Z e
dd Z
d
Zd Zdee fd Zdd
Zd ZddZed Zd Zd Zd ZdS ) ScanQueuec H t j d | j D S )Nc 3 > K | ]}| V d S rR )ru )r items rN z(ScanQueue._scans_info.. s* H HD H H H H H HrP ) collectionsdeque_scansrT s rN r zScanQueue._scans_info s$ H HDK H H HHHHrP r c D t j }t t j t j D ]f} t
|d }| | | ?# t $ r}t d|| Y d }~_d }~ww xY w|S )N)r> fallbackr2 z%Can't get scan class for %s due to %s)
r r r Config
SCANS_PATHSCAN_TYPE_CLASSESappendr| Exceptionthrottled_log_error)rK scans scan_infory r s rN r zScanQueue._scans s !##$"[->
I
' /(BC S]]9 5 56666
#;Y
s ;A88
B BB c , | d S Nr )peekrT s rN current_scanzScanQueue.current_scan s yy||rP Fr2 c ( K d t d {V D |t j k rfd|D }nPt j r"|t j k rt
| }n"t d | |rc| j r\| j
}| j t | | j
| d S | j | d S )Nc 8 g | ]}t |d S )homer )r users rN r z!ScanQueue.put.. s$ HHHDT$v,''HHHrP c . g | ]}t |fd iS r: )r r r> r: scan_argss rN r z!ScanQueue.put.. s> 2 2 2 tFFyFIFF2 2 2rP zUnknown resource_type: {})r# r r r disabledr db_scans
ValueErrorrp r popleft
extendleftreversed
appendleftextend)rK pathsr2
prioritizer scans_to_addrb r: s ` @rN putz
ScanQueue.put s9 IH+--4G4G4G4G4G4GHHH 3 8 8 82 2 2 2 2 !2 2 2LL
# P !8!;;;#E9i@@LL 8 ? ?
N NOO O -$+ -k))++G K " "8L#9#9 : : : K " "7 + + + + + K | , , , , ,rP Nc t | dk rd S |p| j }| j | | t
dt | d S )Nr zScans pending: %d)lenr r remover[ r r rK r s rN r zScanQueue.remove sg t99>> F(t( 4 'T33333rP c \ d|cxk rt | k rn d S | j | S d S )Nr r )rK prioritys rN r zScanQueue.peek sB
$ $ $ $3t99 $ $ $ $ $ $;x( ( % $rP c * fd| j D S )Nc & g | ]
}|j v |S rS )r5 )r r scan_idss rN r z&ScanQueue.find_all.. s% HHH x0G0G0G0G0GrP r )rK r s `rN find_allzScanQueue.find_all s HHHHHHHHrP c ~ | j D ]3t fd| D rc S 4d S )Nc > g | ]\ }}t | |k S rS )r )r kvr s rN r z"ScanQueue.find.. s, EEEdaGD!$$)EEErP )r allrx )rK rz r s @rN findzScanQueue.find sT K DEEEEfllnnEEEFF
trP c : | j D ]}|j |v r||_ d S rR )r r5 r< )rK r r^ r s rN rj zScanQueue.update s2 K $ $D{h&& #
$ $rP c # P K | j D ]}|j |v r||j j fV d S rR )r r> r< ra )rK r r s rN get_scans_from_pathsz ScanQueue.get_scans_from_paths sE J - -DyE!!DJ ,,,,, - -rP c P |p| j }t j d |D S )Nc 3 K | ]D}|j |j |j j |j |j |j d |j d|j j d fV Ed S )Nr ) r> scan_statusr6 r8 r7 errorrW total_maliciousr2 ) r5 r> r< ra r6 r8 r7 rW r2 )r r s rN r z+ScanQueue.scan_summaries.. sz '
'
I#':#3!% #| #| !'+';'(%)%7%=
'
'
'
'
'
'
rP )r r OrderedDict)rK r s rN scan_summarieszScanQueue.scan_summaries sA $& '
'
'
'
'
rP c * t | j S rR )listr rT s rN r zScanQueue.scans s DK rP c 2 t | j dk S r r rT s rN __bool__zScanQueue.__bool__ s 4; !##rP c || j v S rR r r s rN __contains__zScanQueue.__contains__ s t{""rP c * t | j S rR r rT s rN __len__zScanQueue.__len__ s 4; rP )FrR r )r} r~ rr r r r r r1 r r serialize_scansr r r r r r r rj r r r r r r rS rP rN r r s
I I XI n- _ X
- - /- - - _-: 4 4 4 _4) ) )I I I 8 $ $ $ $
- - -
( ! ! X!$ $ $# # # rP r c $ fd| D S )Nc . g | ]}t |fd iS r )r r s rN r z db_scans.. s; AE T<r7 s * # # # # # # # # % % % % % % 2 2 2 2 2 2 2 2 2 2 2 2 * * * * * * 5 4 4 4 4 4 : 9 9 9 9 9 9 9 K K K K K K K K
7 6 6 6 6 6 = = = = = = C C C C C C 7 7 7 7 7 7 8 $ $EjjfnEEE
L
&| | | | | S | | | ~W2 W2 W2 W2 W2^ W2 W2 W2tM
M
M
M
M
> M
M
M
b
.f&7mLLL & $l x x x x x x x x v rP