g# $ d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZmZmZmZ dd lm Z m Z m Z ej e Z! G d
d Z" e d G d d Z#dede$fdZ% G d d Z& G d de& Z' G d de& Z( G d d e( Z)d e$fd Z*d e$fd Z+d!e,fd"Z-d#e,d$e$fd%Z.d&efd'Z/e d*d( Z0e d*d) Z1dS )+uQ
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
Migrate scan/cleanup/restore history from revisium extension for Plesk N)abstractmethod) defaultdict) dataclass)iglob)Path)uuid4)file_hash_and_size)CleanupStorage)find_revisium_dbget_domain_docrootget_revisium_dbget_vhosts_dir)batched get_ownerskip_for_im360c F e Zd ZdZdZdZed Zed ZdS )dbNc r |j d | _ |j d | _ |j d | _ d S )N
malware_scans malware_hitsmalware_history)orm MalwareScan
MalwareHitMalwareHistory)clsmigrators ^/opt/imunify360/venv/lib/python3.11/site-packages/imav/migrations/009_revisium_scan_history.pyinitzdb.init6 s4 ",7! n5 %\*; < c t |d D ]6}| t | 7d S )Ni )n)r insert_manylistexecute)r modeldatabatchs r r# zdb.insert_many< sQ TT*** 5 5E d5kk * * 2 2 4 4 4 4 5 5r ) __name__
__module__ __qualname__r r r classmethodr r# r r r r 1 sW KJN= = [=
5 5 [5 5 5r r F)eqc L e Zd ZU eed< eed< dZeed< dZeed< d Z d Z
dS )Hitpath signatureNhashsizec * t | j S N)r3 r1 selfs r __hash__z Hit.__hash__I s DI r c " | j |j k S r6 )r1 )r8 others r __eq__z
Hit.__eq__L s yEJ&&r ) r) r* r+ r __annotations__strr3 r4 intr9 r< r- r r r0 r0 B sf
JJJNNND#D# ' ' ' ' 'r r0 report_pathreturnc | 5 }t j | cd d d S # 1 swxY w Y n3# t $ r&}t d| | Y d }~nd }~ww xY wi S )Nz Can't get report %s due to %s)openjsonload Exceptionloggererror)r@ fexcs r
get_reportrK P s H
19Q<< H H H 4k3GGGGGGGGH
Is2 A 7 A ;A ;A
A3
A..A3c V e Zd ZdZdZdededefdZe d Z
e d Z dS )ReportN
report_dirowner timestampc J || j z | _ || _ ddd|d| _ d S )Nfile on-demandroot)
resource_typecause initiatorctime) REPORT_FILEr1
default_ownercommon_history_info)r8 rN rO rP s r __init__zReport.__init__] s: !11 " # $
$
r c * t | j S r6 )rK r1 r7 s r row_datazReport.row_datag s $)$$$r c d S r6 r- r7 s r update_historyzReport.update_historyk s r )
r) r* r+ rY TASKr r> r? r\ propertyr^ r r` r- r r rM rM Y s} K D
4
% % X%
^
r rM c " e Zd ZdZdZdefdZdS )Scanzresult_scan.serscanhitsc
| j d D ]\ }}|dk r |D ]}t t |d |d |d |d }|| t |j dt |j p| j t |j p| j d | j d S )
Nr' vulnersfnsnsha256sz)r1 r2 r3 r4 foundr1 event
file_owner file_user)
r^ itemsr0 r appendr> r1 r rZ r[ )r8 rf section maliciousr' hits r r` zScan.update_historyt s "&-"7"="="?"? GY)##!
d4j)) "4j h d S #CH
!( %ch / / E43E%.sx%8%8%NDzsave_hits.. s
'
r )keyTro r rm )scaniduser orig_filetyperu r3 r4 r )rr r1 existsr
storage_namer r> hashlibrk r3 r4 sortedrs r r r2 r r# r )re rf db_hitsrv historyr last_changes r save_hitsr sQ G
W 8?? &+n.I/ / I !!
%7 NNGN& &"#( x 38#3 .B.BCCCBGK NN "k %ch / /!$SX M!% H H 'w/3EEE ( 1
NN2='*****r domain_idc t }| dt | f }| }|d |d dS )NzDSELECT last_scan_cnt_files, error_code FROM pool WHERE domain_id = ?r r )total_resourcesrH )r
execute_sqlr? fetchone)r r cursordb_datas r get_extra_scan_datar sV B
^^N Y F oo G &qzGAJ ? ??r scan_path scan_resultc |d }t j t j t |d |d z
|d d|d | |d |d d S )
Nstatsend_time exec_timerS r rH cnt_cureablerR ) r started completedr r r1 rH total_maliciousrU )r r creater hexr? )r r
scan_statss r create_malware_scanr sx W%J
> ww{Jz*Z -DDEE Z(
#$56
'"#N3 !
r domain_results_pathc @ | j d \ }}t | }t | }t | dz }t j t j h| k r]|t j d d |t j d d k r |
t j t |i |d t | }t t }t t t fD ]C}|j |v r8 || |||j d d | Dt# | t% || d S )Nz .revisiumz task.resultr r re )r r )rN rO rP )namesplitr r rO rK ry ra r keyspopr r r r$ rd r` r r ) r _r r rO tasksre rf reports r process_domain_scan_resultsr s &+11+>>LAy"9--I OO ! ! # #E *]: ; ;E
49 --
di!*-
7
#J
/ 0 0 $) GuV}G(;I(F(FG D
t Dt$ # # ;% F. ,W5jA
nT"""
dDr c z |st sd S t | t j t
d }t | D ]R} t t | # t $ r&}t d|| Y d }~Kd }~ww xY wd S )Nz&*/.revisium_antivirus_cache/.revisium*z.Can't process revisium reports in %s due to %s)
r r r osr1 joinr r r r rF rG exception)r databasefaker scan_results_dir_patternr rJ s r migrater s #%% GGH !w||0 %%= > > '-@(A(A B B B B @#
s + B
B8 B33B8c d S r6 r- )r r r r s r rollbackr " s Dr )F)2__doc__r rD r loggingr abcr collectionsr dataclassesr globr pathlibr uuidr defence360agent.utilsr imav.malwarelib.cleanup.storager
imav.migration_utils.revisiumr r r
r imav.migration_utils.otherr r r getLoggerr) rG r r0 rw rK rM rd ry r r r r> r r r r r r- r r r sR J J. # # # # # # ! ! ! ! ! ! 4 4 4 4 4 4 : : : : : : J I I I I I I I I I 8 $ $5 5 5 5 5 5 5 5" e
'
'
'
'
'
'
'
'D T
. 6 8 6 8" " " " "4 " " ",t , , , ,
+$ + + + +B@3 @ @ @ @ 3 T T > & r