�
v�{gc @ s d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m
Z
d d l m Z d d l m Z d d
l m
Z
d d l m Z d d l m Z d d
l m Z d d l m Z d d l m Z m Z m Z e r=d d l m Z m Z m Z n d Z d= Z d Z d Z d Z i d d 6d d 6d d 6d d 6d d 6Z i d d d g d 6d d g d 6d d g d 6Z! d! � Z" d" � Z# d# e$ f d$ � � YZ% d% � Z& d d& � Z( d' � Z) d( � Z* d) � Z+ e, d d* � Z- d+ � Z. d, � Z/ e# d- � � Z0 e# d. � � Z1 d/ � Z2 d0 � Z3 d1 � Z4 d2 � Z5 d3 � Z6 d4 � Z7 e# e& d5 � � � Z8 e j9 e# e& e j: d d6 � � � � Z; e# d7 � � Z< d8 � Z= d9 � Z> d d: � Z? d; � Z@ d< � ZA d S(> i����Ni ( t constants( t config( t config_handlers( t log_utils( t
process_utils( t utils( t auth( t errors( t selinux( t fetch( t update_utils( t server_info( t json_loads_nstrt urlquotet HTTPError( t Dictt Listt Tuples! /usr/libexec/kcare/libcare-clients /run/libcare/libcare.socks /var/run/libcare.socks /var/cache/kcare/libcare_patchess /var/cache/kcare/libcare_cvelists& /etc/sysconfig/kcare/libcare.logrotatet dbt mysqldt mariadbdt postgrest qemus qemu-kvms qemu-system-x86_64t libct libsslt libsc G s t j j t j d | | � S( Nt userspace( t ost patht joinR t PATCH_CACHE( t libnamet parts( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt get_userspace_cache_path. s c s � f d � } | S( Nc sY z � | | � SWd y t d � Wn/ t k
rS } t j d j | � d t �n XXd S( Nt
clearcaches$ Libcare cache clearing failed: '{0}'t print_msg( t libcare_clientt ExceptionR t logerrort formatt False( t argst kwargst err( t clbl( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt wrapper3 s ( ( R, R- ( ( R, s- /usr/libexec/kcare/python/kcarectl/libcare.pyt clear_libcare_cache2 s
t UserspacePatchLevelc B s) e Z d d � Z d d � Z d � Z RS( c C s t | | � j | | � S( N( t supert __new__( t clsR t buildidt levelt baseurl( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR1 A s c C s( | | _ | | _ | | _ | | _ d S( N( R4 R R3 R5 ( t selfR R3 R4 R5 ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt __init__D s c G s t | j | j t | � | � S( N( R! R R3 t str( R6 R ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt
cache_pathJ s N( t __name__t
__module__t NoneR1 R7 R9 ( ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR/ @ s c s d � � � � f d � } | S( Nc S s d
\ } } z� | d k r' t � } n i } g } xf t | � D]X } | j d d � | | j d � <x0 | j d g � D] } | j | j d � � qx Wq@ Wd j g | j � D] } d j | � ^ q� � } d j | � } Wd t j t | d t
�t j t | d t
�Xd S( s( KPT-1543 Save info about applyed patchest s latest-versiont packaget patchest cves
t Nt
ensure_dir( R= R= ( R< t
_libcare_infot _get_patches_infot gett appendR t itemsR t atomic_writet LIBCARE_PATCHESt Truet LIBCARE_CVE_LIST( t infot versionst cvest packagest cves_listt rect patch( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt save_current_stateO s 1c s/ d } z � | | � } | SWd � | � Xd S( N( R< ( R) R* RL ( R, RS ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR- a s
( ( R, R- ( ( R, RS s- /usr/libexec/kcare/python/kcarectl/libcare.pyt refresh_applied_patches_listN s c
C s� t j p d } t | � } t | j � � } t j t j | d � | | | d � } | d t j t j
d | � � 7} t j | d � } y" t j t
j � | d t �} Wn3 t j k
r� t j t | | � d t �� n Xt j | j � t t j | j � � � } t | | | d | j d
� � } t | d � } t | | | d � }
t j j |
� s~t j j! |
� d k r�t j | d
� } y, t j" | |
d t j# d t j$ | � �Wq�t% k
r�} | j& d k r�t j' d � � n � q�Xn t | | | � } d d |
d | d g }
t( j) |
d t d t �\ } } } | rot j* d j+ | | | � � � n t | | d � } t j j, | � r�t j j- | � r�t j | � n t j. | | d � t j/ | d | � d S( Nt maint us latest.v1s ?info=t updateR t
check_licenset
ignore_errorsR4 R5 s patch.tar.gzi t patch_urlt check_signaturet hash_checkeri� i� s KC+ licence is requiredt tart xfs -Cs --no-same-ownert catch_stdoutt catch_stderrs( Patches unpacking error: '{0}' '{1}' {2}t latests .tmp( i� i� (0 R t PREFIXR
t stripR t get_patch_server_urlt LIBNAME_MAPRE R t encode_server_lib_infot server_lib_infoR t wrap_with_cache_keyR t urlopen_authR( R t NotFoundt shutilt rmtreeR! RJ R t set_config_from_patchservert headersR t nstrt readR/ R8 R R t existst getsizet fetch_urlt
USE_SIGNATUREt get_hash_checkerR t codet NoLibcareLicenseExceptionR t run_commandt
KcareErrorR' t islinkt isdirt symlinkt rename( R t build_idt patch_levelt prefixt urlt cache_dstt responset metaR4 t plevelt
patch_patht ext dstt cmdRv t stdoutt stderrt link_name( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt fetch_userspace_patchl sD '#" "+,
$!%c C sj | t _ | s t � n t j d | r/ d n d � | rF t � n t j j d | r^ d n d � d S( Nt LIBCARE_DISABLEDt FALSEt YESs libcare service is t enabledt disabled( R R� t libcare_server_stopR t
update_configt libcare_server_startR t kcarelogRL ( R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt set_libcare_status� s
c C sE y t j d d � d d g } Wn t k
r3 d SXt j | � d S( Nt services
/usr/sbin/s /sbin/t libcaret stop( s
/usr/sbin/s /sbin/( R t find_cmdR% Rx ( R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR� � s
c C s� t j s t j j t j � rS t j t j d d g � t j t j d d g � nA y t j d d � d d g } Wn t k
r� d SXt j | � d S(
Ns reset-failedR� t restarts libcare.socketR� s
/usr/sbin/s /sbin/t start( s
/usr/sbin/s /sbin/(
R t SKIP_SYSTEMCTL_CHECKR R Rq t SYSTEMCTLR Rx R� R% ( R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR� � s
c sa d j d � t | p g � D� � } d d g } � sM | d d | g 7} n y t | � } Wn+ t k
r� } t j d j | � � � n Xg } xN | j d � D]= } | r� y | j t j
| � � Wq� t k
r� q� Xq� q� Wg | D]3 } i | j d � d 6| j d
� d
6| d 6^ q� } x8 | D]0 } t
� f d � | d j � D� � | d <q)W| S(
Nt |c s s | ] } d j | � Vq d S( s ({0})N( R' ( t .0t proc( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>� s RL s -js -ls -rs/ Gathering userspace libraries info error: '{0}'s
t commt pidR c 3 s4 | ]* \ } } d | k s" � r | | f Vq d S( t patchlvlN( ( R� t kt v( t patched( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>� s ( R t sortedR$ R% R Ry R' t splitRF t jsont loadst
ValueErrort popt dictRG ( R� t limitt regexpR� t linesR+ t resultt line( ( R� s- /usr/libexec/kcare/python/kcarectl/libcare.pyRC � s& %
@
.c C s� t � } xJ | D]B } x9 | d j � D]' \ } } | j | d | d f � q' Wq Wg } x� t D]{ } xr | D]j \ } } t | | t | � d � } t j j | � rp t | d � � }
| j
t j |
� � Wd QXqp qp Wqc W| S( NR R3 R� s info.jsont r(
t setRG t addt
USERSPACE_MAPR! R8 R R t isfilet openRF R� t load( RL R? RQ t _t dataR� R� R~ R� t patch_info_filenamet fd( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyRD � s
#
'c C s
t t � � S( N( RD RC ( ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_patch_info_basic� s c C s3 t � } | s t j d � n t j i | d 6� S( Ns No patched processes.R� ( R� R R& R� t dumps( R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_patch_info� s c C s3 t � } | s t j d � n t j i | d 6� S( Ns No patched processes.R� ( RC R R& R� R� ( R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_info� s c C s= i } x0 t � D]% } | j d d � | | j d � <q W| S( Ns latest-versionR= R> ( R� RE ( R� RQ ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt _libcare_version� s #c C s7 x0 t � j � D] \ } } | j | � r | Sq Wd S( NR= ( R� RG t
startswith( R R> t version( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_version s c C s d j d � | D� � d S( NR= c s s" | ] } t j | � d Vq d S( t N( R t bstr( R� t p( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>
s R� ( R ( t params( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_client_format s c C s: x$ t D] } t j j | � r | Sq Wt j d � � d S( Ns Libcare socket is not found.( t LIBCARE_SOCKETR R Rq R Ry ( t libcare_socket( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt get_available_libcare_socket
s
c G s t j r t j d � � n t j t j t j d � } | j d � d } z� | j t � � | j t j
� t | � } t j
d j d | � � | j | � x- t r� | j d � } | s� Pn | | 7} q� W| j d d � } t j
d
j d | � � | SWd | j � Xd S( Ns Libcare is disabled.i i
R= s Libcare socket send: {cmd}R� i s utf-8t replaces! Libcare socket recieved: {result}R� ( R R� R Ry t sockett AF_UNIXt SOCK_STREAMt
settimeoutt connectR� t LIBCARE_SOCKET_TIMEOUTR� R t logdebugR' t sendallRJ t recvt decodet close( R� t sockt resR� R� R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR$ s(
c C s� x� | D]� } y t d t | � � Wn+ t k
rQ } t j d j | � � � n Xy t d � Wq t k
r� } t j d j | � � � q Xq Wd S( Nt storages( Userspace storage switching error: '{0}'RW s% Userspace patch applying error: '{0}'( R$ R! R% R Ry R' ( R� R� R+ ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_patch_apply, s
c C s@ y t d � Wn+ t k
r; } t j d j | � � � n Xd S( Nt unloads& Userspace patch unloading error: '{0}'( R$ R% R Ry R' ( R+ ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_unload9 s c C s� t j � t � | t j k r. t j r. d S| d k rO t t j
� � } n g } x' | D] } | j t j | g � � q\ W| s� t
j d j | � � d St d | � \ } } } } | r� t j d � � n | s� t
j d � d St j t j j t j d � � t � y t | � Wn8 t j k
rW} t
j t | � � t j d � � n Xt � } t | � }
t t d � | D� � � s�d St
j d j d | � � t
j d
j d |
� � t d � |
j! � D� � } t d
� | j! � D� � } | | }
t" d � |
j! � D� � } t
j d j d t# |
� d | � � x9 |
j$ � D]+ \ } } t
j d j | t# | � � � qOW| S( s0 Patch userspace processes to the latest version.s No such userspace patches: {0}R� s: There was an errors while patches downloading (unpacking).s No patches were found.R s+ There was an errors while patches applying.c s s | ] } | d Vq d S( R N( ( R� t item( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>t s s Patched before: {before}t befores Patched after: {after}t afterc s s" | ] } | D] } | Vq
q d S( N( ( R� RG R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>{ s c s s" | ] } | D] } | Vq
q d S( N( ( R� RG R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr>| s c s s | ] } t | � Vq d S( N( t len( R� R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pys <genexpr> s s� The patches have been successfully applied to {count} newly discovered processes. The overall amount of applied patches is {overall}.t countt overalls* Object `{0}` is patched for {1} processes.N(% R t log_all_parent_processest rotate_libcare_logsR t UPDATE_MODE_AUTOR t LIB_AUTO_UPDATER< t listR� t keyst extendRE R t loginfoR' t check_userspace_updatesR Ry R t restore_selinux_contextR R R R R� R& R8 RC t _get_userspace_procst anyR� R� t valuest sumR� RG ( t modeR� t process_filtert userspace_patcht failedt something_foundR� R� R� t
data_afterR� t uniq_procs_aftert uniq_procs_beforet diffR� R� R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt do_userspace_updateB sR
#c C s_ y t � \ } } } } Wn t j k
r0 d SX| r; d S| rE d St j d d � r[ d Sd S( Ni i t filenames .libcarestatusi i ( R� R Ry R
t status_gap_passed( R� R� t libs_not_patched( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt get_userspace_update_status� s c C s� i } xy | D]q } xh | d j � D]V \ } } | j d � r$ | | k rX g | | <n | | j | d | d f � q$ q$ Wq
W| S( NR R� R� R� ( RG RE RF ( RL R� R� R RQ ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR� � s
*c C se t � } xU | D]M } xD | d j � D]2 \ } } | j | | d | j d d � f � q' Wq W| S( NR R3 R� i ( R� RG R� RE ( RL R� R� R RQ ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt _get_userspace_libs� s
.c C s? | s5 g } g t j � D] } | j | � ^ q n t d t d | � } t | � } t } } t } x� t | � D]� } | \ } } }
y/ t | | |
� t } |
d k r� t } n Wqs t j
t j f k
r� qs t j k
r� � qs t j
k
r} t } t j t | � � qs Xqs Wt j d d � | | | | f S( NR� R� i R s .libcarestatus( R� R� R� RC R( R� RJ R R� R Rj Rw t AlreadyTrialedExceptionRy R R& R8 R
t touch_status_gap_file( R� R t data_beforeR� R� R� R RQ R R~ R� R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR� � s. )
c C s� d } d } t j d d t �} | r� y( t j | t g d t �\ } } } Wn% t k
rv } d } t | � } n X| r� t j d j
| � d t �q� n t j d d t �d
} t j
j | � s� d St j d } y� t j | � } t j d
� } g | D]* } | j | � rt j
j | | � ^ q}
g |
D] } t j
j | � | f ^ q:} | j d t � d }
xY | D]Q \ } } |
t j
j | � 7}
|
| k r{t j | � t j j d | � q{q{WWn$ t k
r�t j d d t �n Xd S( Ni R= t logrotatet raise_excR` i s5 failed to run logrotate for libcare logs, stderr: {0}R# s logrotate utility wasn't founds /var/log/libcare/i i s ^\d+\.log.*t reverses% Removed %s because of logs size limits) Failed to cleanup libcare server logfilesi ( R R� R( Rx t LIBCARE_LOGROTATE_CONFIGRJ R% R8 R R& R' t logwarnR R R{ R t! LIBCARE_PIDLOGS_MAX_TOTAL_SIZE_MBt listdirt ret compilet matchR t getctimet sortRr t removeR� RL t logexc( t rcR� t logrotate_pathR� t et libcare_log_directoryt max_total_sizet log_filest pidlog_ret fnt pidlog_filest fpt pidlog_files_with_ctt
total_sizet filepath( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyR� � s< ("
7+
c C sb y t j d d � d d g } Wn t k
r3 t SXt j | d t d t �\ } } } | d k S(
sK Assume that whenever the service is not running, we did not patch anything.R� s
/usr/sbin/s /sbin/R� t statusR_ R` i ( s
/usr/sbin/s /sbin/( R R� R% R( Rx RJ ( R� Rv R� ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt libcare_server_started� s
$( s /run/libcare/libcare.socks /var/run/libcare.sock(B R R Rk R� R� R= R R R R R R R R R R R
R t py23R R
R R( t typingR R R t LIBCARE_CLIENTR� RI RK R Re R� R! R. t intR/ RT R< R� R� R� R� RJ RC RD R� R� R� R� R� R� R� R$ R� R� t skip_if_no_selinux_modulet UPDATE_MODE_MANUALR� R R� R R� R� R$ ( ( ( s- /usr/libexec/kcare/python/kcarectl/libcare.pyt <module> sz )
-
G *| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| __init__.py | File | 69.58 KB | 0644 |
|
| __init__.pyc | File | 64.25 KB | 0644 |
|
| __init__.pyo | File | 64.25 KB | 0644 |
|
| __main__.py | File | 829 B | 0644 |
|
| __main__.pyc | File | 926 B | 0644 |
|
| __main__.pyo | File | 926 B | 0644 |
|
| auth.py | File | 11.87 KB | 0644 |
|
| auth.pyc | File | 11.82 KB | 0644 |
|
| auth.pyo | File | 11.82 KB | 0644 |
|
| config.py | File | 1.71 KB | 0644 |
|
| config.pyc | File | 2.01 KB | 0644 |
|
| config.pyo | File | 2.01 KB | 0644 |
|
| config_handlers.py | File | 7.26 KB | 0644 |
|
| config_handlers.pyc | File | 8.47 KB | 0644 |
|
| config_handlers.pyo | File | 8.47 KB | 0644 |
|
| constants.py | File | 1.27 KB | 0644 |
|
| constants.pyc | File | 1.34 KB | 0644 |
|
| constants.pyo | File | 1.34 KB | 0644 |
|
| errors.py | File | 1.29 KB | 0644 |
|
| errors.pyc | File | 2.94 KB | 0644 |
|
| errors.pyo | File | 2.94 KB | 0644 |
|
| fetch.py | File | 4.88 KB | 0644 |
|
| fetch.pyc | File | 5.47 KB | 0644 |
|
| fetch.pyo | File | 5.47 KB | 0644 |
|
| http_utils.py | File | 4.06 KB | 0644 |
|
| http_utils.pyc | File | 4.16 KB | 0644 |
|
| http_utils.pyo | File | 4.16 KB | 0644 |
|
| kcare.py | File | 8.56 KB | 0644 |
|
| kcare.pyc | File | 11.09 KB | 0644 |
|
| kcare.pyo | File | 11.09 KB | 0644 |
|
| libcare.py | File | 17.24 KB | 0644 |
|
| libcare.pyc | File | 19.16 KB | 0644 |
|
| libcare.pyo | File | 19.16 KB | 0644 |
|
| log_utils.py | File | 2.82 KB | 0644 |
|
| log_utils.pyc | File | 3.75 KB | 0644 |
|
| log_utils.pyo | File | 3.75 KB | 0644 |
|
| platform_utils.py | File | 3.4 KB | 0644 |
|
| platform_utils.pyc | File | 4.56 KB | 0644 |
|
| platform_utils.pyo | File | 4.56 KB | 0644 |
|
| process_utils.py | File | 3.81 KB | 0644 |
|
| process_utils.pyc | File | 3.67 KB | 0644 |
|
| process_utils.pyo | File | 3.67 KB | 0644 |
|
| py23.py | File | 1.74 KB | 0644 |
|
| py23.pyc | File | 2.15 KB | 0644 |
|
| py23.pyo | File | 2.15 KB | 0644 |
|
| selinux.py | File | 1.68 KB | 0644 |
|
| selinux.pyc | File | 2.43 KB | 0644 |
|
| selinux.pyo | File | 2.43 KB | 0644 |
|
| server_info.py | File | 2.99 KB | 0644 |
|
| server_info.pyc | File | 3.48 KB | 0644 |
|
| server_info.pyo | File | 3.48 KB | 0644 |
|
| update_utils.py | File | 923 B | 0644 |
|
| update_utils.pyc | File | 1.18 KB | 0644 |
|
| update_utils.pyo | File | 1.18 KB | 0644 |
|
| utils.py | File | 7.07 KB | 0644 |
|
| utils.pyc | File | 7.8 KB | 0644 |
|
| utils.pyo | File | 7.8 KB | 0644 |
|