Edit File: update_hooks.cpython-311.opt-1.pyc
� ��\h� � �J � d dl Z d dlZd dlmZ d dlmZmZ d dlmZm Z d dl m Z m Z m Z d dlmZ d dlmZ d dlmZmZ d d lmZ d d lmZ d d lmZ e j e � � Z d Z dZ ed� � � Z ed� � � Z!d� Z"defd�Z#ed� � � Z$ e � � d� � � Z%d� Z&dS )� N)�Path)� web_server�svcctl)�ModsecVendorsError�PanelException)�atomic_rewrite� file_hash�log_error_and_ignore)�files)�Modsec)�modsec_app_version_detector�waf_rules_configurator)�use_modsec_lock)�HackerTrapHitsSaver� )� HostingPanelz*_Disable_WP_Redirect.confz SecRuleRemoveById 33355 33357c � �< K � |r�t � � }|� � � ru|� � � � d {V �� t | |� � � d {V �� t j � � � d {V �� t � � � d {V �� t � � � d {V �� d S d S d S �N)r � is_installed�apply_modsec_files_update�_update_iprecordr �init�0_update_account_compromise_prevention_rule_state�_update_app_based_rules)�_� is_updated�hps �U/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/panels/update_hooks.py�update_vendorsr s� � � � �� ,� �^�^�� �?�?� � � ,��.�.�0�0� 0� 0� 0� 0� 0� 0� 0� #�1�j�1�1� 1� 1� 1� 1� 1� 1� 1�%�*�,�,� ,� ,� ,� ,� ,� ,� ,�B�D�D� D� D� D� D� D� D� D�)�+�+� +� +� +� +� +� +� +� +� +� ,� ,� ,� ,� c � �2 K � t | |� � � d {V ��S r )r )r r s r �update_iprecordr" + s( � � � �!�!�Z�0�0� 0� 0� 0� 0� 0� 0�0r c � �X K � |sd S d� }t � � } |� � � � d {V ��}|� |d� � � d {V ��}n0# t t t f$ r} ||� � Y d }~d S d }~ww xY wt t j � t j � � � � dz dz }|� � � r� t |� � t |� � k r�t j ||� � t j � � � d {V �� |j j dk rKt& � d� � t+ j � � }|� � � � d {V �� d S d S d S # t0 $ r} ||� � Y d }~d S d }~ww xY w |d� � d S )Nc �Z � t � dt | � � z � � d S )Nz%Can't update ip-record.db, reason: %s)�logger�warning�str��es r �_warnz _update_iprecord.<locals>._warn4 s& � ����>��Q���G�H�H�H�H�Hr z ip-record.dbz ip-record� cPanelCoraza�:Reloading 'imunify360-wafd' as coraza ruleset is in actionzsource file is missing)r �get_i360_vendor_name�build_vendor_file_pathr r � ValueErrorr r �Index� files_path� IP_RECORD�existsr �shutil�copyr �graceful_restart� __class__�__name__r% �infor �imunify360_wafd_service�reload� Exception) r r r* r �vendor� ip_recordr) �src�unitctls r r r 0 s � � � � � ���I� I� I� � � �B���.�.�0�0�0�0�0�0�0�0�� �3�3�F�N�K�K�K�K�K�K�K�K� � �� �� � ;� � � � ��a������������������ �U�[� #� #�E�O� 4� 4�5�5� � � � � � �z�z�|�|� � ���~�~��9�!5�!5�5�5�� �C��+�+�+� �1�3�3�3�3�3�3�3�3�3� �<�(�N�:�:��K�K�"�� � � %� <� >� >�G�!�.�.�*�*�*�*�*�*�*�*�*�*�*� 6�5� ;�:�� � � � � �E�!�H�H�H� �F�F�F�F�F����� ���� ��&�'�'�'��s0 �6A �A=�' A8�8A=�B%E< �< F � F�F �pathc � � | � � � � � � }|sdS |t k rdS t � d| |� � d S )NTFzInvalid content in %s: %s)� read_text�strip� DISABLED_REDIRECT_CONF_CONTENTr% r& )rA �contents r � _get_account_prevention_staterG Y sW � ��n�n� � �$�$�&�&�G� � ��t� �2� 2� 2��u����2�D�'�B�B�B��tr c � �. K � t � � � d {V ��S r )r � r r �/update_account_compromise_prevention_rule_staterJ d s$ � � � �A�C�C� C� C� C� C� C� C�Cr c � � K � t j } t � � } |� � � � d {V ��}nF# t t f$ r2}t � t |� � � � Y d }~d S d }~ww xY w |� |d� � � d {V ��}t |� t � � � � }n8# t t f$ r$ t � dt � � Y d S w xY wt |� � }|| k r�| rdnt }t# t |� � |d�� � t% j � � � d {V �� |j j dk rwt � d� � t/ j � � } |� � � � d {V �� d S # t4 $ r t � d� � Y d S w xY wd S d S )N� zCan't get %s fileF)�backupr+ r, z"Failed to reload 'imunify360-wafd')r �!CMS_ACCOUNT_COMPROMISE_PREVENTIONr r- r r r% r& r' r. �next�glob�WP_REDIRECT_CONF_PATTERN� StopIteration� exceptionrG rE r r r6 r7 r8 r9 r r: r; r< ) �is_prevention_enabledr r= r) � vendor_path�wp_redirect_conf_path� current_staterF r@ s r r r i s@ � � � � "� D�� � � �B���.�.�0�0�0�0�0�0�0�0���� �� /� � � ����s�1�v�v� � � ���������������� � 5� 5�f�b� A� A�A�A�A�A�A�A� � $� � � � 5� 6� 6�! � ! � � �� � � .� � � ����,�.F�G�G�G�������� 2�2G�H�H�M��-�-�-�'� K�B�B�-K� � �s�0�1�1�7�5�I�I�I�I��)�+�+�+�+�+�+�+�+�+� �<� �N� 2� 2� �K�K�L� � � � �4�6�6�G� E� �n�n�&�&�&�&�&�&�&�&�&�&�&�� � E� E� E���� C�D�D�D�D�D�D� E����! .�-� 3� 2s: �9 �A<� 'A7�7A<� AC �1C9�8C9�F. �.$G�Gc � �� K � t j r` t j � � � d {V �� d S # t j t j f$ r&} t � d| � � Y d } ~ d S d } ~ ww xY wd S )Nz App based rules not updated: %s) r �APP_SPECIFIC_RULESETr �update_waf_rules_config�NotSupportedWebserverErrorr �DatabaseNotFoundErrorr% r& r( s r r r � s� � � � � �"� A� A�(�@�B�B� B� B� B� B� B� B� B� B� B�� "� =� '� =� � A� A� A� �N�N�<�a� @� @� @� @� @� @� @� @� @����� A����A� As �+ �A,�A'�'A,)'�loggingr4 �pathlibr �defence360agent.subsysr r �"defence360agent.subsys.panels.baser r �defence360agent.utilsr r r �im360r �im360.contracts.configr � im360.subsysr r �im360.subsys.panels.baser � imav.malwarelib.subsys.malwarer � hosting_panelr � getLoggerr8 r% rQ rE r r" r rG rJ r r rI r r �<module>ri s� �� ���� � � � � � � � � � � 5� 5� 5� 5� 5� 5� 5� 5�� � � � � � � �� � � � � � � � � � � � � � � � )� )� )� )� )� )� L� L� L� L� L� L� L� L� 4� 4� 4� 4� 4� 4� >� >� >� >� >� >� '� '� '� '� '� '� �� �8� $� $��7� �!@� � � ,� ,� � � ,� �1� 1� � �1�&� &� &�R�� � � � � �D� D� � �D� ����"E� "E� ��"E�JA� A� A� A� Ar