| Dir : /usr/libexec/kcare/python/kcarectl/__pycache__/ |
| Server: Linux red.truehostdns.com 4.18.0-553.150.1.el8_10.x86_64 #1 SMP Fri Jul 31 15:23:31 EDT 2026 x86_64 IP: 51.161.15.103 |
| Dir : //usr/libexec/kcare/python/kcarectl/__pycache__/libcare.cpython-36.pyc |
3
0�j�b � @ s d dl Z d dlZd dlZd dlZd dlZddlmZmZmZm Z m
Z
m Z m Z m
Z
mZmZmZmZmZmZ ddlmZmZmZ dZdOZdZd Zd
Z d d d d �Z d
de dg�fdde dg�fgZ ej dd� �Z!dd� Z"dd� Z#dd� Z$G dd� de%�Z&dd � Z'dPd d �Z(d d � Z)d!d"� Z*d#d$� Z+dQd&d'�Z,d(d)� Z-e$d*d+� �Z.e$d,d-� �Z/e$d.d/� �Z0d0d1� Z1d2d3� Z2d4d5� Z3d6d7� Z4d8d9� Z5dRd:d;�Z6e$e'ej7d<d=� ���Z8d>d?� Z9ej7ej:d@�ej;e$e'e
j<ddfdAdB������Z=e$dCdD� �Z>dEdF� Z?dGdH� Z@dSdIdJ�ZAdKdL� ZBdMdN� ZCdS )T� N� )�auth� capabilities�config�config_handlers� constants�errors�fetch� log_utils�platform_utils�
process_utils�selinux� server_info� update_utils�utils)� HTTPError�json_loads_nstr�urlquotez!/usr/libexec/kcare/libcare-client�/run/libcare/libcare.sock�/var/run/libcare.sockz /var/cache/kcare/libcare_patchesz /var/cache/kcare/libcare_cvelistz&/etc/sysconfig/kcare/libcare.logrotate�db)�mysqld�mariadbd�postgresZubuntuz16.�
libnss_dnsz7.c s� t tj�} t� � y tj� }|d j� }|d }W n0 tk
r` xtD ]\}}}� |O � qFW Y n>X |d }x2tD ]*\}}}|d ks�||krp|j |�rp|� P qpW � fdd�| D �S )Nr r �.c s g | ]}|� kr|�qS � r )�.0�lib)� blacklistedr �-/usr/libexec/kcare/python/kcarectl/libcare.py�
<listcomp>R s z/_get_effective_libcare_libs.<locals>.<listcomp>)
�listr � LIBCARE_LIBS�setr �
get_distro�lower� Exception�LIBCARE_LIBS_BLACKLIST�
startswith) �libsZ distro_info�distro�version�_Zbl_libsZversion_dottedZ bl_distroZ
bl_versionr )r r �_get_effective_libcare_libs; s
r. c C s dddgt � d�S )Nr r r )r r* )r. r r r r �get_userspace_mapU s r/ c G s t jjtjd| f|�� S )N� userspace)�os�path�joinr � PATCH_CACHE)�libname�partsr r r �get_userspace_cache_path\ s r7 c s � fdd�}|S )Nc sV z
� | |�S y t d� W n6 tk
rN } ztjdj|�dd� W Y d d }~X nX X d S )N�
clearcachez$Libcare cache clearing failed: '{0}'F)� print_msg)�libcare_clientr' r
�logerror�format)�args�kwargs�err)�clblr r �wrappera s
z$clear_libcare_cache.<locals>.wrapperr )r@ rA r )r@ r �clear_libcare_cache` s
rB c s0 e Zd Zd� fdd� Zd dd�Zdd� Z� ZS )
�UserspacePatchLevelNc s t | | �j| |�S )N)�super�__new__)�clsr5 �buildid�level�baseurl)� __class__r r rE o s zUserspacePatchLevel.__new__c C s || _ || _|| _|| _d S )N)rH r5 rG rI )�selfr5 rG rH rI r r r �__init__r s z UserspacePatchLevel.__init__c G s t | j| jt| �f|�� S )N)r7 r5 rG �str)rK r6 r r r �
cache_pathx s z UserspacePatchLevel.cache_path)N)N)�__name__�
__module__� __qualname__rE rL rN �
__classcell__r r )rJ r rC n s
rC c s dd� �� �fdd�}|S )Nc S s� d
\}}z�| dkrt � } i }g }x8t| �D ],}|jdd�||jd�< |j|jdg �� q*W tj|dd�}djd d
� |j� D ��}djt|��}W dtj t
|d d � tj t |d d � X dS )z(KPT-1543 Save info about applied patches� Nzlatest-version�package�patches�cve)� cve_field�
c S s g | ]}d j |��qS )� )r3 )r �recr r r r! � s zLrefresh_applied_patches_list.<locals>.save_current_state.<locals>.<listcomp>T)�
ensure_dir)rS rS ) �
_libcare_info�_get_patches_info�get�extendr �extract_unique_cvesr3 �items�sorted� atomic_write�LIBCARE_PATCHES�LIBCARE_CVE_LIST)�infoZversionsZcvesZpackagesZ all_patchesrZ Zcves_setr r r �save_current_state} s z8refresh_applied_patches_list.<locals>.save_current_statec s" d }z� | |�}|S �|� X d S )Nr )r= r> rf )r@ rg r r rA � s
z-refresh_applied_patches_list.<locals>.wrapperr )r@ rA r )r@ rg r � refresh_applied_patches_list| s rh c " C s� t jpd}t| �} t|j� �}tjtj| d�|| |d�}|dtj d|� 7 }tj| d�}|rlt
j j d||�}i }|r�d|i|d < y t
jtj�|fd
d i|��}W n� tjk
r� |r�tjd j| |�d d
� d S tjt||�dd� � Y nL tk
�r4 } z.| jdk�r"|�r"tjdj|�dd��� W Y d d } ~ X nX t j |j � t tj |j!� ��}
|
jdg �} t"j#| ��s|tj$dj| ���t%|||
d |
jd��} t&|
d �}
t|||
d�}t
j j'|� �s�t
j j(|�dk�r:tj|
d �}y t
j)||t j*t
j+| �d� W n< tk
�r8 } z | jd(k�r&tj,d ��� W Y d d } ~ X nX t|||
�}d d |d!|d"g}t-j.|ddd#�\}}}|�r�tjd$j|||�d%d��t||d&�}t
j j/|� �r�t
j j0|��r�tj|� t
j1|
|d' � t
j2|d' |� | S ))N�main�uz latest.v1z?info=�updater* �tagsZSticky�headers�
check_licenseFz;No libcare patchset available for {0} at tag {1}, skipping.)r9 T)�
ignore_errorsi� z8Invalid sticky patch tag {0}: server rejected the value.zinvalid lib sticky patch)�statusr zkLatest LibCare patchset for {0} is incompatible with the current kernecare package version, please upgrade.rH rI z patch.tar.gzr Z patch_url)�check_signature� hash_checker� � zKC+ licence is required�tarZxfz-Cz--no-same-owner)� catch_stdout� catch_stderrz(Patches unpacking error: '{0}' '{1}' {2}zpatches unpacking error�latestz.tmp)rs rt )3r �PREFIXr �stripr �get_patch_server_url� LIBNAME_MAPr^ r Zencoded_server_lib_infor1 r2 r3 r �wrap_with_cache_keyr � urlopen_authr �NotFoundr
�loginfor< �shutil�rmtreer7 r �code�
KcareErrorr � set_feature_flags_from_headersrm r �nstr�readr �has_lc_capabilities�CapabilitiesMismatchrC rM �exists�getsize� fetch_url�
USE_SIGNATURE�get_hash_checker�NoLibcareLicenseExceptionr � run_command�islink�isdir�symlink�rename)r5 �build_id� patch_level�tag�prefix�url� cache_dstZ extra_kwargs�response�ex�meta�required_capabilitiesrH �plevelZ
patch_path�dst�cmdr� �stdout�stderrZ link_namer r r �fetch_userspace_patch� sr
"
r� c C sL | t _| st� tj| r dndd� | r0t� tjjd| r@dnd � d S )N�FALSE�YES)�LIBCARE_DISABLEDzlibcare service is �enabled�disabled) r r� �libcare_server_stopr �
update_config�libcare_server_startr
�kcarelogrf )r� r r r �set_libcare_status� s r� c C s� t jstjjt j�r^tjt jddg� tjt jddg� tjt jddg� tjt jddg� n6ytjdd �ddg} W n t k
r� d S X tj| � d S )
N�stopzlibcare.socketzlibcare.servicez reset-failed�libcare�service�
/usr/sbin/�/sbin/)r� r� )
r �SKIP_SYSTEMCTL_CHECKr1 r2 r� � SYSTEMCTLr r� �find_cmdr' )r� r r r r� � s r� c C s� t jstjjt j�r�tjt jdddgddd�\} }}| dkr@d S tjt jddg� tjt jddg� tjt jd d
g� tjt jd dg� tjt jd dg� n@t� r�d S ytj d d�d
d g}W n t
k
r� d S X tj|� d S )Nz is-activez--quietzlibcare.serviceT)rv rw r r� zlibcare.socketz reset-failedr� �startr� �
/usr/sbin/�/sbin/)r� r� ) r r� r1 r2 r� r� r r� �libcare_server_startedr� r' )r� r- r� r r r r� s& r� Tc s dj dd� t|pg �D ��}ddg}� s6|dd|g7 }y t|� }W n6 tk
rx } ztjdj|�d d
��W Y d d }~X nX g }x@|jd �D ]2}|r�y|jt j
|�� W q� t k
r� Y q�X q�W d d
� |D �}x.|D ]&}t � fdd�|d j
� D ��|d< q�W |S )N�|c s s | ]}d j tj|��V qdS )z({0})N)r< �re�escape)r �procr r r � <genexpr>$ s z _libcare_info.<locals>.<genexpr>rf z-jz-lz-rz/Gathering userspace libraries info error: '{0}'zuserspace libs info error)rp rX c S s$ g | ] }|j d �|j d�|d��qS )�comm�pid)r� r� r* )�pop)r �liner r r r! : s z!_libcare_info.<locals>.<listcomp>c 3 s( | ] \}}d |ks� r||fV qdS )�patchlvlNr )r �k�v)�patchedr r r� = s r* )r3 rb r: r' r r� r< �split�append�json�loads�
ValueError�dictra )r� �limitZregexpr� �linesr? �resultr� r )r� r r\ s& &
&r\ c C s� t � }x<| D ]4}x.|d j� D ] \}}|j|d |d f� q W q W g }t� }xb|D ]Z}xT|D ]L\}} t||t| �d�}
tjj|
�r^t |
d��} |j
t j | �� W d Q R X q^W qTW |S )Nr* rG r� z info.json�r)
r$ ra �addr/ r7 rM r1 r2 �isfile�openr� r� �load) rf rU rZ r- �datar� �umapr� r� r� Zpatch_info_filename�fdr r r r] B s
"r] c C s
t t� �S )N)r] r\ r r r r �libcare_patch_info_basicR s r� c C s" t � } | stjd� tjd| i�S )NzNo patched processes.r� )r� r
r; r� �dumps)r� r r r �libcare_patch_infoW s
r� c C s" t � } | stjd� tjd| i�S )NzNo patched processes.r� )r\ r
r; r� r� )r� r r r � libcare_info_ s
r� c C s. i } x$t � D ]}|jdd�| |jd�< q W | S )Nzlatest-versionrS rT )r� r^ )r� rZ r r r �_libcare_versiong s r� c C s* x$t � j� D ]\}}| j|�r |S q W dS )NrS )r� ra r) )r5 rT r, r r r �libcare_versionn s
r� c C s dj dd� | D ��d S )N� c s s | ]}t j|�d V qdS )� N)r �bstr)r �pr r r r� v s z(libcare_client_format.<locals>.<genexpr>r� )r3 )�paramsr r r �libcare_client_formatu s r� c C s, x t D ]} tjj| �r| S qW tjd��d S )Nz Libcare socket is not found.)�LIBCARE_SOCKETr1 r2 r� r r� )Zlibcare_socketr r r � get_available_libcare_sockety s
r� c
G s� t jrtjd��tjtjtjd�}|jd� d}z||jt � � |jt j
� t | �}t j
dj| d�� |j|� x |jd�}|s�P ||7 }qpW |jdd �}t j
d
j|d �� |S |j� X d S ) NzLibcare is disabled.r �
r� zLibcare socket send: {cmd})r� i zutf-8�replacez!Libcare socket recieved: {result})r� )r r� r r� �socket�AF_UNIX� SOCK_STREAM�
settimeout�connectr� �LIBCARE_SOCKET_TIMEOUTr� r
�logdebugr< �sendall�recv�decode�close)r� �sock�resr� r� r� r r r r: � s(
r: c C s |rzxp| D ]h}t d||�}tjj|�s(q
ytdd|� W q
tk
rp } z tjdj||�dd��W Y d d }~X q
X q
W d S x�| D ]�}ytdt |�� W n6 tk
r� } ztjdj|�d d��W Y d d }~X nX y td� W q� tk
�r } ztjd
j|�dd��W Y d d }~X q�X q�W d S ) Nrl rk z --storagez3Userspace patch applying error (storage={0}): '{1}'zuserspace patch apply error)rp Zstoragez(Userspace storage switching error: '{0}'z userspace storage switch errorz%Userspace patch applying error: '{0}') r7 r1 r2 r� r: r' r r� r< )r� r� r� Z storage_pathr? r r r �libcare_patch_apply� s*
& r� c C sH y t d� W n6 tk
rB } ztjdj| �dd��W Y d d } ~ X nX d S )N�unloadz&Userspace patch unloading error: '{0}'z userspace patch unload error)rp )r: r' r r� r< )r? r r r �libcare_unload� s r� c C sD y t d� W n2 tk
r> } ztjdj| ���W Y dd} ~ X nX dS )z;Reload libcare-server plugin without restarting the server.Zrepluginz Userspace replugin error: '{0}'N)r: r' r r� r< )r? r r r �libcare_replugin� s r� r� c C s� t � | tjkr tj r dS t� }|dkr6t|j� �}g }x |D ]}|j|j |g �� q@W |srt
j dj |�� dS t
||d�\}}}} |r�tjd��|s�t
j d� dS tjtjjtjd�� t � yt||d� W n> tjk
�r }
z t
jt|
�� tjd��W Y dd}
~
X nX t� } t| �} ttd d
� | D ����s<dS t
j d j | d �� t
j d
j | d�� t dd
� | j � D ��}
t dd
� | j � D ��}|
| }t dd
� | j � D ��}t
j dj t |�|d�� x,| j!� D ] \}}t
j dj |t |��� �q�W | S )z0Patch userspace processes to the latest version.Nz No such userspace patches: {0})r� r� z8There were errors while patches downloading (unpacking).zNo patches were found.r0 )r� z)There were errors while patches applying.c s s | ]}|d V qdS )r* Nr )r �itemr r r r� s z&do_userspace_update.<locals>.<genexpr>zPatched before: {before})�beforezPatched after: {after})�afterc s s | ]}|D ]
}|V q
qd S )Nr )r ra r� r r r r� s c s s | ]}|D ]
}|V q
qd S )Nr )r ra r� r r r r� s c s s | ]}t |�V qd S )N)�len)r r� r r r r� s z�The patches have been successfully applied to {count} newly discovered processes. The overall amount of applied patches is {overall}.)�count�overallz*Object `{0}` is patched for {1} processes.)"�rotate_libcare_logsr �UPDATE_MODE_AUTOr �LIB_AUTO_UPDATEr/ r" �keysr_ r^ r
r� r< �check_userspace_updatesr r� r
�restore_selinux_contextr1 r2 r3 r4 r� r; rM r\ �_get_userspace_procs�anyr� r$ �values�sumr� ra )�moder� r� r� Zprocess_filterZuserspace_patch�failed�something_foundr- r� r� Z
data_afterr� Zuniq_procs_afterZuniq_procs_beforeZdiffr� r� r� r r r �do_userspace_update� sR
r
c C s\ z.yt � \} }}}W n tjk
r* dS X W d t� X | r@dS |rHdS tjdd�rXdS dS )N� r z.libcarestatus)�filename� r )r r r� r r �status_gap_passed)r r- �libs_not_patchedr r r �get_userspace_update_status s
r c C sd i }xZ| D ]R}xL|d j � D ]<\}}|jd�r ||kr>g ||< || j|d |d f� q W q
W |S )Nr* r� r� r� )ra r^ r� )rf r� r� r5 rZ r r r r . s
"r c C sN t � }xB| D ]:}x4|d j� D ]$\}}|j||d |jdd�f� q W q W |S )Nr* rG r� r )r$ ra r� r^ )rf r� r� r5 rZ r r r �_get_userspace_libs9 s
$r c s\ � s$t � }g � � fdd�|j� D � td� d�}t|�}d }}d}x�t|�D ]�}|\} }
} y2t| |
| |d�} |r|| d kr|wNd}| dkr�d}W qN tjk
r� }
zd}tj t
|
�� W Y d d }
~
X qN tj tj fk
r� Y qN tj
k
r� � Y qN tjk
�r> } z,t|dd �d k�r � d}tjt
|�� W Y d d }~X qNX qNW tjd
d � ||||fS ) Nc s g | ]}� j |��qS r )r_ )r r* )r� r r r! E s z+check_userspace_updates.<locals>.<listcomp>F)r� r� T)r� r rp zinvalid lib sticky patchz.libcarestatus)r )r/ r r\ r r r� r r� r
�logwarnrM r r� �AlreadyTrialedExceptionr� �getattrr; r �touch_status_gap_file)r� r� r� Z data_beforer� r r r rZ r5 r� r� r� �er� r )r� r r A s>
$ r c sf d} d}t jddd�}|r�y t j|tgdd�\} }}W n. tk
rd } zd} t|�}W Y d d }~X nX | r�tjd j|�dd
� ntj d dd
� d � t
j j � �s�d S t
jd }y�t
j� �}tjd��� �fdd�|D �}dd� |D �}|jdd� d} xD|D ]<\}}
| t
j j|
�7 } | |k� r�t
j|
� tjjd|
� � q�W W n$ tk
�r` tjddd
� Y nX d S )Nr rS Z logrotateF)� raise_excT)rw r z5failed to run logrotate for libcare logs, stderr: {0})r9 z logrotate utility wasn't foundz/var/log/libcare/i r z ^\d+\.log.*c s$ g | ] }�j |�rtjj� |��qS r )�matchr1 r2 r3 )r �fn)�libcare_log_directory� pidlog_rer r r! � s z'rotate_libcare_logs.<locals>.<listcomp>c S s g | ]}t jj|�|f�qS r )r1 r2 �getctime)r �fpr r r r! � s )�reversez%Removed %s because of logs size limitz)Failed to cleanup libcare server logfilesi )r r� r� �LIBCARE_LOGROTATE_CONFIGr' rM r
r; r< r r1 r2 r� r �!LIBCARE_PIDLOGS_MAX_TOTAL_SIZE_MB�listdirr� �compile�sortr� �remover� rf �logexc) �rcr� Zlogrotate_pathr- r Zmax_total_sizeZ log_filesZ pidlog_filesZpidlog_files_with_ctZ
total_size�filepathr )r r r r r s<
r c
C sJ yt jdd
�ddg} W n tk
r* dS X t j| ddd�\}}}|d kS ) zKAssume that whenever the service is not running, we did not patch anything.r� �
/usr/sbin/�/sbin/r� rp FT)rv rw r )r+ r, )r r� r' r� )r� r� r- r r r r� � s r� )r r )NN)TN)N)NN)Dr� r1 r� r� r� rS r r r r r r r r
r r r
r r r �py23r r r ZLIBCARE_CLIENTr� rd re r" r| r$ r( �cachedr. r/ r7 rB �intrC rh r� r� r� r� r\ r] r� r� r� r� r� r� r� r: r� �log_all_parent_processesr� r� �track_update_status�skip_if_no_selinux_module�UPDATE_MODE_MANUALr
r r r r r r� r r r r �<module> sh @
L
"
$ H
1*