Edit File: store_vulnerabilities.cpython-311.pyc
� i �h� � � � d Z ddlZddlZddlZddlmZmZ ddlmZ ddl m Z m Z ddl m Z ddlmZmZ ddlmZ dd lmZmZ G d � d e � � ZdS ) u This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. Copyright © 2019 Cloud Linux Software Inc. This software is also available under ImunifyAV commercial license, see <https://www.imunify360.com/legal/eula> � N)� Generator�Union)� MessageType)� MessageSink�expect)� nice_iterator)�MalwareScanType�VulnerabilityHitStatus)� ProcessOrder)� MalwareScan�VulnerabilityHitc � � e Zd Zej Zd� Ze d dee e f de dz de e ddf fd�� � Z de ddfd�Z eej � � d � � � ZdS ) �StoreVulnerabilitiesc � � K � d S �N� )�self�loops �b/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/plugins/store_vulnerabilities.py� create_sinkz StoreVulnerabilities.create_sink& s � � � � �� N�path_obj� scan_type�returnc # � K � t | t � � r| gn| }|t j k rt |� � E d{V �� dS |D �]y}t j |� � D �]`}t j � |� � }t j � |� � r�t j � � � t j |t j � t" j t" j g� � z k � � � � � r|V � ��t+ j |� � dz }d� t j � � � t j � |� � t j � t" j t" j g� � � � D � � E d{V �� ��b��{dS )z� Return files that may already not be vulnerable, yet we still consider them such. For example, a vulnerable file might have been removed manually. Nz(/.*|\b)c 3 �$ K � | ] }|j V � � d S r )� orig_file)�.0�is r � <genexpr>z<StoreVulnerabilities.get_outdated_entries.<locals>.<genexpr>P s8 � � � � � � � � � � � � � � r )� isinstance�strr �REALTIME�iter�glob�iglob�os�path�realpath�isfiler �select�wherer �status�in_r � VULNERABLE�REVERTED�first�re�escape�regexp)r r �paths� target_pathr( � scanned_dirs r �get_outdated_entriesz)StoreVulnerabilities.get_outdated_entries) s� � � � � )��3� 7� 7�E�� � �X�� ��0� 0� 0��E�{�{� "� "� "� "� "� "� "� �F� � � �K� � �;�/�/� � ���w�'�'��-�-���G�N�N�4�(�(� �(�/�1�1��U�(�2� �*�1�5�5� 6� A� 6� ?� �� � �� � � �U�W�W� � �J�J�J�J�"$�)�D�/�/�K�"?�K� � �!1�!8�!:�!:�!@�!@� ,� 6� =� =�k� J� J� ,� 3� 7� 7�$:�$E�$:�$C�!"� � �"� "� � � � � � � � � � � �) � � r �summaryc � � |� dd � � }|� dd � � }|� d� � �=|�=|�=| � |d |d �� � }t j |� � d S d S d S d S )N� file_patterns�exclude_patterns�errorr( �type)r )�pop�getr8 r � delete_hits)r r9 r; r< �outdated_entriess r �_delete_outdated_entriesz-StoreVulnerabilities._delete_outdated_entries] s� � � � � �O�T�:�:� �"�;�;�'9�4�@�@�� �K�K�� � � (� �%� �(� #� 8� 8����7�6�?� 9� � � � � (�)9� :� :� :� :� :� )� (�%�%�(�(r c � �| K � |d � d� � r|d �d S t j |d d �� � }|d � d� � �| � |d � � d� |d � � � D � � x}r�t |� � � � � 2 3 d {V ��\ }}t j |j |d |d |d |d ||d d d |d d d t j �� � �s6 d S d S )Nr9 �started�results�scanid)rG r( c �f � i | ].\ }}t j |d d d � � �+||��/S )�hitsr �matches)r �match)r �filename�datas r � <dictcomp>z5StoreVulnerabilities.process_hits.<locals>.<dictcomp>v sL � � � � � ��$� �%�d�6�l�1�o�i�&@�A�A� � �d� � � r �owner�user�size�hashrI r rJ � timestamp) rG rO rP rQ rR r r> rS r- ) r@ r rC �itemsr r �createrG r r/ )r �message�scanrF rL rM s r � process_hitsz!StoreVulnerabilities.process_hitsj sv � � � ��y�!�%�%�i�0�0� �G�I�4F�4N� �F���g�i�&8��&B�C�C�C�� �9� � !� !�&� )� )� 5� � )� )�'�)�*<� =� =� =� � �")�)�"4�":�":�"<�"<� � � � �7� � )6�g�m�m�o�o�(F�(F� � � � � � � �n�h�� �'� �;� �w�-� �f� � �f� � �f� � &� �f� �a� ��3� "�6�l�1�o�k� :�1�<� � � � � � )G�(F�(F� � s �D9r )�__name__� __module__� __qualname__r �AFTER_STORE_SCAN�PROCESSING_ORDERr � staticmethodr r" �listr r8 �dictrC r r r rX r r r r r # s� � � � � � �#�4�� � � � � !%�1� 1���T� �"�1���:�1� �3��d�?� #�1� 1� 1� �\�1�f ;�� ;�� ;� ;� ;� ;� �V�K� #�$�$� � � %�$� � � r r )�__doc__r% r' r2 �typingr r �"defence360agent.contracts.messagesr �!defence360agent.contracts.pluginsr r �defence360agent.utilsr �imav.malwarelib.configr r �imav.contracts.pluginsr �imav.malwarelib.modelr r r r r r �<module>ri s ��� �* � � � � � � � � � � � � #� #� #� #� #� #� #� #� :� :� :� :� :� :� A� A� A� A� A� A� A� A� /� /� /� /� /� /� J� J� J� J� J� J� J� J� /� /� /� /� /� /� ?� ?� ?� ?� ?� ?� ?� ?�e� e� e� e� e�;� e� e� e� e� er