ok
Mini Shell
�
g� � �� � d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
mZ ddlmZmZ ddlmZ d Zd
Z ej e� � Z G d � d e
� � ZdS )
a
Goal: Invoke
/usr/sbin/cagefsctl --update-etc
/usr/sbin/cagefsctl --force-update-etc
asynchronously. As far production scale `cagefsctl --force-update-etc`
tends last for too long, e.g. -
# time cagefsctl --force-update-etc
Updating users ...
Updating user user523 ...
Updating user user804 ...
...
Updating user user269 ...
Updating user user116 ...
Updating user user121 ...
Updating user user117 ...
real 2m44.454s
user 0m26.233s
sys 0m19.972s
� N)�Optional)�
inactivity)� MessageType)� MessageSink�expect)�
load_state�
save_state)�timefunz/usr/sbin/cagefsctlz --wait-lockc � � e Zd Zd� Zd� Z eej � � d� � � Zd� Z e
e j �� � de
e fd�� � Zed� � � Zd S )
�CageFSc � � K � || _ t j � � | _ t d� � � dd� � | _ | j � | � � � � � | _ d S )Nr �last_force_update_tsr )
�_loop�asyncio�Queue�_queuer �get�_last_force_update_ts� create_task� _consumer�_consumer_task)�self�loops �I/opt/imunify360/venv/lib/python3.11/site-packages/im360/plugins/cagefs.py� create_sinkzCageFS.create_sink, si � � � ���
� �m�o�o�� �%/��%9�%9�%=�%=� "�A�&
� &
��"� #�j� 4� 4�T�^�^�5E�5E� F� F����� c � � K � | j � � � | j � d {V �� | j � � � r2t � d| j � � � � � t
dd| j i� � d S )Nz %d item(s) were not consumedr r )r �cancelr �qsize�logger�warningr r )r s r �shutdownzCageFS.shutdown4 s� � � � � ��"�"�$�$�$��!�!�!�!�!�!�!�!� �;� � � � � P� �N�N�9�4�;�;L�;L�;N�;N� O� O� O�� �-�t�/I�J�
�
�
�
�
r c � � K � |d }t |dd � � }|�|� | j � � r | j � |� � d S d S )N�conf�username)�getattr�modified_sincer r �
put_nowait)r �message�configr% s r � put_to_queuezCageFS.put_to_queue? si � � � ��� ���6�:�t�4�4�� � �6�#8�#8� � &�$
� $
� �
�K� "� "�8� ,� ,� ,� ,� ,� � r c � �N K � | j � � � � d{V ��}t j � t
� � s�F|h} |� | j � � � � � �-# t j $ r Y nw xY wt j � d� � 5 |D ] }| �
|� � � d{V �� � ddd� � n # 1 swxY w Y n<# t j $ r Y dS t $ r t � d� � Y �� w xY w��#)z
:raise never:
TN�cagefszSomething went wrong)r r �os�path�exists�_CAGEFSCTL_TOOL�add�
get_nowaitr �
QueueEmptyr �track�task�
_commitconfig�CancelledError� Exceptionr � exception)r �commitconfig_username�uniqr% s r r zCageFS._consumerM s� � � � � �
�.2�k�o�o�.?�.?�(?�(?�(?�(?�(?�(?�%� �w�~�~�o�6�6� � � .�.���;� �����!7�!7�!9�!9�:�:�:�;�� �)� � � ��D����� �%�*�*�8�4�4� ;� ;�$(� ;� ;�� "� 0� 0�� :� :�:�:�:�:�:�:�:�:�;�;� ;� ;� ;� ;� ;� ;� ;� ;� ;� ;���� ;� ;� ;� ;��� �)�
�
�
���� �
�
�
�� � �!7�8�8�8� ��
����/ s` �AC) � C) �
.A; �;B
�
C) � B
�
"C) �/!C � C) � C!�!C) �$C!�%C) �)D"�;#D"�!D")�logr% c � �J K � |rt t d|g}nt t dg} t j |t j t j t j dd��� d{V ��}| � |t j |j
� � }| � |t j |j � � }t j
||� � � d{V �� |� � � � d{V ��\ }}|� � � � d{V ��}|� t � d� � dS |r t � d||||� � dS t � d||� � |�t' j � � | _ dS dS # t j $ r t � d |� � � w xY w)
zJ
:raise asyncio.CancelledError:
:raise Exception:
z --update-etcz--force-update-etcF)�stdin�stdout�stderr�start_new_sessionNz+logic error: process has not terminated yetz,%r failed with rc [%s], stdout=%s, stderr=%sz%r succeeded with rc [%s]z"%r is terminated by CancelledError)r1 �
_WAIT_LOCKr �create_subprocess_exec�
subprocess�DEVNULL�PIPE�
_passthru_log�logging�DEBUGr@ �WARNrA �gather� communicate�waitr �error�info�timer r8 r! ) r r% �cmd�proc�future1�future2�out�err�rcs r r7 zCageFS._commitconfign s� � � � � � F�"�J���I�C�C�"�J�0D�E�C�" =� �7�� �(�!��!�� #(�� � � � � � � � �D� �(�(��g�m�T�[�I�I�G��(�(��g�l�D�K�H�H�G��.��'�2�2� 2� 2� 2� 2� 2� 2� 2� !� -� -� /� /�/�/�/�/�/�/�H�C���y�y�{�{�"�"�"�"�"�"�B�
�z�� � � J�K�K�K�K�K��
=�� � �B����� � � � � � � � � 7��b�A�A�A��#�15����D�.�.�.� $�#��! �%� � � � �N�N�?�� E� E� E� � ���s �CE6 �6,F"c � � K � |� � � � d {V ��}|sd S t � |d| |� � �<)NTz%r: %r)�readliner r= )rR �loglevel� streamreader�lines r rH zCageFS._passthru_log� sX � � � � 6�%�.�.�0�0�0�0�0�0�0�0�D��
��� �J�J�x��3�� 5� 5� 5� 6r N)�__name__�
__module__� __qualname__r r" r r � ConfigUpdater+ r r
r rP r �strr7 � staticmethodrH � r r r r + s� � � � � � �G� G� G�
�
�
� �V�K� $�%�%� -� -� &�%� -� � � �B
�W��� � � �,=�H�S�M� ,=� ,=� ,=� � �,=�\ �6� 6� �\�6� 6� 6r r )�__doc__r rI r. rE rQ �typingr �defence360agent.apir �"defence360agent.contracts.messagesr �!defence360agent.contracts.pluginsr r �'defence360agent.subsys.persistent_stater r �defence360agent.utilsr
r1 rC � getLoggerr^ r r rd r r �<module>rm s ��� �. ���� ���� � � � � � � � � � � � � � � � � � � *� *� *� *� *� *� :� :� :� :� :� :� A� A� A� A� A� A� A� A� J� J� J� J� J� J� J� J� )� )� )� )� )� )�'��
�
� �� �8� $� $��x6� x6� x6� x6� x6�[� x6� x6� x6� x6� x6r
Zerion Mini Shell 1.0