g
d Z ddlmZ ddlmZ ddlmZ ddlmZ ddl m
Z
m Z m Z ddl
mZ ddlmZ dd lmZ dd
lmZ dd lmZ eej d
Z G d de
e ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
)partial)Dict)
inactivity) MessageType) MessageSink
MessageSourceexpect)MalwareHitStatus)
MalwareHit)
MalwareAction)Scope)MalwareActionIm360status) attributec j e Zd ZdZej Zd Zd Zd Z e
e j de
fd ZdS )RestoreFromBackupPluginz5A plugin that handles RestoreFromBackupTask messages.c $ d\ | _ | _ d S )N)NN)_loop_sink)selfs U/opt/imunify360/venv/lib/python3.11/site-packages/imav/plugins/restore_from_backup.py__init__z RestoreFromBackupPlugin.__init__. s !+
DJJJ c K || _ d S N)r )r loops r create_sinkz#RestoreFromBackupPlugin.create_sink1
r c K || _ d S r )r )r r sinks r
create_sourcez%RestoreFromBackupPlugin.create_source4 r r messagec T K | d }|sdS | d }t j |t j t
j d 5 i }| |g | g g }}|
D ]\ }}t j ||| j
d{V }| d |
D | d |
D t j | t | } |
D ]\ }
} t j | |
ddd dS # 1 swxY w Y dS )a Restores hits in RestoreFromBackupTask message from backup.
- sets restore_from_backup_started status for received hits in
the database.
- successfully restored files are removed from the database.
- statuses in the database are reverted from
restore_from_backup_started to its original value for files that
failed to restore.
hitsN initiatorrestore_from_backup)r$ r% r c & g | ]\ }}|j |S
successful.0hitevents r
z?RestoreFromBackupPlugin.restore_from_backup..Y s$ OOOZS%e>NOSOOOr c & g | ]\ }}|j |S r( r) r+ s r r/ z?RestoreFromBackupPlugin.restore_from_backup..] s5 &C $ / r )getr
set_statusr
RESTORE_FROM_BACKUP_STARTEDr tracktask
setdefaultextenditemsr r& r delete_instances_group_by_status) r r" r$ r%
to_restorerestoredfailed init_hitsresultsoriginal_statusr failed_hitss r r& z+RestoreFromBackupPlugin.restore_from_backup7 s2 {{6"" FKK ,, ">
"
"#8
9
9 ; ;J ! !)R 0 0 7 7 = = = !2fH(2(8(8(:(:
$ 9 - A" ' ! ! ! OO7==??OOO
*1--//
' 1 1 1 .v 6 6O'6'<'<'>'>
;
;# %k6::::
;7 ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;s /D F F!$F!N)__name__
__module__ __qualname____doc__r
IM360SCOPEr r r! r r RestoreFromBackupTaskr r& r( r r r r ) s ?? KE, , , VK -..0; 0; 0; 0; /.0; 0; 0;r r N)rE functoolsr typingr defence360agent.apir "defence360agent.contracts.messagesr !defence360agent.contracts.pluginsr r r imav.malwarelib.configr
imav.malwarelib.modelr imav.malwarelib.subsys.malwarer defence360agent.utilsr
r group_by_attributer: r r( r r rS s5 * * * * * * * : : : : : :
4 3 3 3 3 3 , , , , , , 8 8 8 8 8 8 ' ' ' ' ' ' = = = = = =7:8HMMM ?; ?; ?; ?; ?;k= ?; ?; ?; ?; ?;r