Edit File: waf_rules_configurator.cpython-311.pyc
� P 6h� � � � d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m Z m Z m Z d dl mZmZ d dlmZ d dlmZ d d lmZ d d lmZ d d lmZ d d lmZm Z d dl m Z ej e � � Z!dZ"dZ# G d� de$� � Z%de&fd�Z'd� Z(d� Z)d� Z*dS )� N)�CancelledError)�Version)�Path)�BACKUP_EXTENSION� CheckRunError�atomic_rewrite)�MODSEC�Index)� web_server)�APACHE)� GenericPanel� )� map_components_versions_to_tags)� HostingPanel)�safe_update_config�graceful_restart)�is_apache2nginx_enabledzD/var/lib/cloudlinux-app-version-detector/components_versions.sqlite3ztags_matching.jsonc � � e Zd ZdS )�NotSupportedWebserverErrorN)�__name__� __module__� __qualname__� � �X/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/waf_rules_configurator.pyr r " s � � � � � ��Dr r �returnc � �� K � t � � } t � � rdS | � � � � d{V ��}t | t � � r |t k S |t k rdS t j � � � d{V ��}t j � � � d{V ��}n=# t $ r � t $ r&}t � d|� � Y d}~dS d}~ww xY w|t d� � k od|v S )z�Apache >= 2.4 is supported and security2_module installed. - litespeed is not supported - nginx is not supported Apache is expected to be running, otherwise False is returned In case of any error, False is returned also TNFz-Error occurs while getting Apache version: %sz2.4s security2_module)r r �get_web_server� isinstancer r r �apache_version�apache_modulesr � Exception�logger�errorr )�hp� webserver�version�modules�excs r �is_webserver_supportedr* & s1 � � � � � � �B� � � � ��t��'�'�)�)�)�)�)�)�)�)�I��"�l�#�#� #� �F�"�"��F����u��"�1�3�3�3�3�3�3�3�3��"�1�3�3�3�3�3�3�3�3���� � � � � � � � � �� � �D�c�J�J�J��u�u�u�u�u��������� �g�e�n�n� $� G�)<��)G�Gs �)2B � C�0C�Cc � �: K � t � � � d{V ��st d� � �t t � � � � � � � } t � � }| � � � o| � � � |k }|srt � � r0t | |d�� � r t � d� � dS dS t | |� � � d{V ��r t � d� � dS dS t � d� � dS )zO Update modsec config file with enabled tags for specific directories. NzkWAF rules configurator supports only apache webserver with version >= 2.4 or apache2nginx and ModSecurity 2F)�backupz2App specific rules config was successfully updatedz-WAF Rules Set Config was successfully updatedz*WAF Rules Set Config is already up to date) r* r r r �get_app_specific_waf_config� _rules_config�exists� read_textr r r# �infor )� config_path� new_config� is_uptodates r �update_waf_rules_configr5 F sZ � � � � (�)�)� )� )� )� )� )� )� �(� ?� � � � �|�~�~�A�A�C�C�D�D�K� � � �J� ��� � �F��!6�!6�!8�!8�J�!F� � � B� "� $� $� M� �k�:�e�D�D�D� �� � �H�� � � � � � � (� �Z�@�@�@�@�@�@�@�@� M�� � � K�L�L�L�L�L� M� M� � � �@�A�A�A�A�Ar c � � t j � t j t � � t � � } t | d�� � 5 }t j |� � }d d d � � n # 1 swxY w Y t t |� � S )Nzutf-8)�encoding) �os�path�joinr � files_pathr � MAPPING_FILE�open�json�loadr �COMPONENTS_VERSION_DB)� mapping_path�f�tagss r r. r. f s� � ��7�<�<�� 0�� 8� 8�,�G�G�L� �l�W� -� -� -� ���y��|�|�� � � � � � � � � � � ���� � � � � *�+@�$� G� G�Gs �A/�/A3�6A3c � �| K � t � � � � � } n# t $ r Y dS w xY wt j � | t z � � r_t j | t z | � � t � � � d{V �� dS # t $ r t � d� � Y dS w xY wdS )uI In case if Agent starts and config backup is present — then it is required to restore it: original .conf files must be replaced by the backup file and then WS restart command must be applied. In this case we assume that backed up configuration file is correct and none config checks are performed. Nz2Web server failed to start with a backed up config) r r- �NotImplementedErrorr8 r9 �isfiler �renamer r r# � exception)r2 s r � try_restore_config_from_backuprI m s� � � � ��"�n�n�@�@�B�B� � �� � � � �������� �w�~�~�k�$4�4�5�5� � � �+� 0�0�+�>�>�>� �"�$�$� $� $� $� $� $� $� $� $� $�� � � � � � � �D� � � � � � � ���� � s � % � 3�3�;B �$B9�8B9)+r> �loggingr8 �asyncior �packaging.versionr �pathlibr �defence360agent.utilsr r r � im360.filesr r �defence360agent.subsysr �im360.subsys.panels.baser �!im360.subsys.panels.generic.panelr �modsec_app_version_detectorr �panels.hosting_panelr �!defence360agent.subsys.web_serverr r � im360.utilsr � getLoggerr r# r@ r< r" r �boolr* r5 r. rI r r r �<module>rY s� �� � � � � ���� � � � � "� "� "� "� "� "� %� %� %� %� %� %� � � � � � �� � � � � � � � � � &� %� %� %� %� %� %� %� -� -� -� -� -� -� +� +� +� +� +� +� :� :� :� :� :� :� H� H� H� H� H� H� .� .� .� .� .� .�� � � � � � � � 0� /� /� /� /� /� �� �8� $� $�� K� � $� � � � � � �� � � � H�d� H� H� H� H�@ B� B� B�@H� H� H�� � � � r