Edit File: proactive.cpython-311.pyc
� P 6hc � �� � d dl Z d dlZd dlZd dlmZ d dlZd dlmZmZm Z d dl m Z d dl m Z ej e� � ZdZ ed� � ZdZd Zd Zd Zd Zd � Zd� Zd� Zd� Zd� Z dS )� N)�Path)�atomic_rewrite� check_run� CheckRunError)�files)�ProactiveDefencez'/usr/share/i360-php-opts/autorules.yamlz/usr/share/i360-php-optsz2/usr/share/i360-php-opts/phpimunity.compiled.rulesz /usr/bin/i360-storage-mkcustomz/usr/bin/i360-storage-newz#/usr/bin/i360-storage-replacehdb-v2� c � �L K � t j t j � � } t d� | � � � D � � � � }n+# t $ r t � d� � Y d S w xY w| � |d � � }t dz }t j |dd�� � 5 }t |d� � 5 }t j ||� � d d d � � n # 1 swxY w Y d d d � � n # 1 swxY w Y t j |t � � d S ) Nc 3 �2 K � | ]}|d dk �|V � �dS )�namezautorules_opt.yaml.gzN� )�.0�is �K/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/proactive.py� <genexpr>z,update_php_immunity_files.<locals>.<genexpr> s: � � � � � ���&� �5L�(L�(L�A�(L�(L�(L�(L� � � z)PHP Immunity rules are not found in index�urlz.tmp�rtzutf-8)�encoding�w)r �Index� PHP_IMMUNITY�next�items� StopIteration�logger�warning� localfilepath�PHP_IMMUNITY_FILENAME�gzip�open�shutil� copyfileobj�os�rename)�index�item� local_path�tmp�src�dsts r �update_php_immunity_filesr, s� � � � � �K��*� +� +�E��� � � �{�{�}�}� � � � � ���� � � � ����B�C�C�C�������� �$�$�T�%�[�1�1�J� �&� (�C� ��:�t�g� 6� 6� 6� %�#�t� �S�@� @� %� ���3��$�$�$�%� %� %� %� %� %� %� %� %� %� %���� %� %� %� %� %� %� %� %� %� %� %� %� %� %� %���� %� %� %� %� �I�c�(�)�)�)�)�)sG �+A �$A6�5A6�5C?�C(� C?�(C, �,C?�/C, �0C?�?D�Dc � � K � t t t g� � � d {V �� d S # t $ r&} t � d| � � Y d } ~ d S d } ~ wt $ r&} t � d| � � Y d } ~ d S d } ~ ww xY w)Nz i360-storage is not found: %sz*Failed to apply new php immunity rules: %s)r �I360_STORAGE_BINr �FileNotFoundErrorr �errorr )�errs r �apply_php_immunity_rulesr2 + s� � � � �H��)�+@�A�B�B�B�B�B�B�B�B�B�B�B�� � ;� ;� ;�� � �4�c�:�:�:�:�:�:�:�:�:����� � H� H� H�� � �A�3�G�G�G�G�G�G�G�G�G�����H���s �!' � B�A� B� B � Bc � �~ K � |r6t � � � d {V �� t j rt � � � d {V �� d S d S d S �N)r, r r r2 ��_� is_updateds r � update_hookr8 4 so � � � �� -�'�)�)�)�)�)�)�)�)�)� � (� -�*�,�,� ,� ,� ,� ,� ,� ,� ,� ,� ,�-� -� -� -r c � � K � |r�t j � t � � r t t gd� �� � � d{V �� dS t j t j � � }|� � � D ]^}t |� |d � � � � }t t |j z |� � � dd�� � �]dS dS )a� When we are done with downloading /var/imunify360/files/php-immunity/v2/* files then we need to copy the files as is (no gunzip or byte-compiling) to /usr/share/i360-php-opts/ in a safe way using atomic_rewrite() as far these files are opened by i360.so using mmap() plus ensure that the files have correct permissions for cagefs (/usr/share/i360-php-opts/ directory files are visible for cagefs due to imunify360-php-i360 %post scriptlet) c �4 � t j t � � S r4 �r$ �umask� _RULES_UMASKr r r �<lambda>z)update_hook_immunity_v2.<locals>.<lambda>K s � �2�8�L�#9�#9� r �� preexec_fnNr Fi� )�backup� permissions)r$ �path�exists�I360_STORAGE_REPLACEHDB_BINr r r �PHP_IMMUNITY_V2r r r r �PHP_IMMUNITY_FILESDIRr � read_bytes)r6 r7 r& � wb_db_itemr( s r �update_hook_immunity_v2rJ ; s � � � � � � �7�>�>�5� 6� 6� ��,�-�9�9�� � � � � � � � � � �F�� �E� 1�2�2�� �+�+�-�-� � �J� �e� 1� 1�*�U�2C� D� D�E�E�J� �%� ��7��%�%�'�'� � !� � � � � � � � � r c � �N K � |r t t gd� �� � � d {V �� d S d S )Nc �4 � t j t � � S r4 r; r r r r> z/recreate_signatures_on_update.<locals>.<lambda>d s � �r�x� �7M�7M� r r? )r �I360_STORAGE_NEW_BINr5 s r � recreate_signatures_on_updaterN ^ se � � � �� � � !� "�/M�/M� � � � � � � � � � � � � � r ) r �loggingr$ �pathlibr r" �defence360agent.utilsr r r �im360r �im360.contracts.configr � getLogger�__name__r r rG �PHP_IMMUNITY_COMPILED_RULESr. rM rE r= r, r2 r8 rJ rN r r r �<module>rW s �� � � � � ���� � � � � � � � � � � � � � � J� J� J� J� J� J� J� J� J� J� � � � � � � 3� 3� 3� 3� 3� 3� �� �8� $� $��A� � �� 7�8�8� �8� � 4� �2� � C� �� �*� *� *�&H� H� H�-� -� -� � � �F � � � � r