OwlCyberSecurity - MANAGER
Edit File: fix.cpython-38.pyc
U ��g�r � @ s& d dl Z d dlmZmZmZmZmZmZmZ d dl m Z m Z m Z m Z mZ d dlmZmZ d dlmZ d dlmZmZ d dlmZmZ d dlmZm Z m Z d d l m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2 d d l3m4Z4 d d l3m5Z6 d d l7m8Z8 d d l7m5Z9 d d l:m;Z;m<Z< d dl=m>Z> d dl?m@Z@mAZAmBZB d dlCmDZD d dlEmFZF d dlGmHZHmIZImJZJ d dlKmLZL d dlMmNZN d dlOmPZP d dlQmRZRmSZSmTZT d dlUmVZV d dlWmXZX d dlYmZZZ d dl[m\Z\ G dd � d �Z]e)d �d d �Z^e+d �d!d"�Z_e`eaeLd#�d$d%�Zbe`eaeaeLd&�d'd(�Zcdpee` e`ededee` e`d)�d*d+�ZeeLe`ead,�d-d.�Zfdd/�d0d1�ZgeLd2�d3d4�ZheLead5�d6d7�Ziee` e`d8�d9d:�ZjeLeaead;�d<d=�ZkeLead5�d>d?�ZleLe`ead@�dAdB�Zme`eLeaeadC�dDdE�Zndqee`e`dG�dHdI�Zoe`dJ�dKdL�Zpe]e.dM�dNdO�Zqe]e/dM�dPdQ�Zre]e-dM�dRdS�Zse]e"dM�dTdU�Zte]e#dM�dVdW�Zue]e$dM�dXdY�Zve]e(dM�dZd[�Zwe]e&dM�d\d]�Zxe]e%dM�d^d_�Zye)eaeLeeee f d`�dadb�Zze>j{dcdd�dedf� �Z|eBdce j}e j~e|eFjdgeAe@dhe j�di�e@dje j�dkdl�e@dme j�dkdl�gdn�gdo�Z�dS )r� N)�Dict�List� NamedTuple�Optional�Set�Tuple�Union)�apt� exceptions�messages�system�util)�attach_with_token�enable_entitlement_by_name)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)� FixStatus�UnfixedPackage�status_message)�ESM_APPS_POCKET�ESM_INFRA_POCKET�STANDARD_UPDATES_POCKET�FixPlanAptUpgradeStep�FixPlanAttachStep�FixPlanEnableStep�FixPlanNoOpAlreadyFixedStep�FixPlanNoOpLivepatchFixStep�FixPlanNoOpStatus�FixPlanNoOpStep� FixPlanResult� FixPlanStep�FixPlanUSNResult�FixPlanWarning�"FixPlanWarningFailUpdatingESMCache�&FixPlanWarningPackageCannotBeInstalled�#FixPlanWarningSecurityIssueNotFixed�NoOpAlreadyFixedData�NoOpLivepatchFixData�USNAdditionalData)�CVEFixPlanOptions)�_plan)�USNFixPlanOptions)�ContractExpiryStatus� _is_attached)�cli_util)� ProArgument�ProArgumentGroup� ProCommand)� action_detach)� HelpCategory)�CLOUD_TYPE_TO_TITLE�PRO_CLOUD_URLS�get_cloud_type)�UAConfig)�PRINT_WRAP_WIDTH)�entitlement_factory)�ApplicabilityStatus�CanEnableFailure�UserFacingStatus)�notices)�Notice)� PRO_HOME_PAGE)�colorize_commandsc @ s\ e Zd Zeeee ed�dd�Zdd� Zd ee ee e d�dd �Z ee ed �d d �Z dS )� FixContext��title�dry_run� affected_pkgs�cfgc C sJ d| _ g | _t� | _tj| _|| _|| _|| _ || _ d| _ d| _ d| _ d S )Nr TF)� pkg_index� unfixed_pkgs�set�installed_pkgsr �SYSTEM_NON_VULNERABLE� fix_statusrF rH rG rI �should_print_pkg_header� warn_package_cannot_be_installed�fixed_by_livepatch)�selfrF rG rH rI � rT �2/usr/lib/python3/dist-packages/uaclient/cli/fix.py�__init__R s zFixContext.__init__c C sN | j rJtj�t| j ��jt| j �d�t| j ��d�}tt j |t ddd�� d S )N�, )�count�pkgs� F)�width�subsequent_indentZreplace_whitespace) rH r ZSECURITY_AFFECTED_PKGS� pluralize�len�format�join�sorted�print�textwrap�fillr; )rS �msgrT rT rU �print_fix_headere s ����zFixContext.print_fix_headerN�� source_pkgs�status�pocketc C s4 | j r0tt||| jt| j�|r&t|�nd d�� d S )N)�pkg_listri rJ �num_pkgs� pocket_source)rP rb �_format_packages_messagerJ r^ rH �get_pocket_description)rS rh ri rj rT rT rU �print_pkg_headerv s ��zFixContext.print_pkg_header�rY �unfixed_reasonc C s" |D ]}| j �t||d�� qd S )N)�pkgrr )rK �appendr )rS rY rr rs rT rT rU �add_unfixed_packages� s �z FixContext.add_unfixed_packages)N) �__name__� __module__� __qualname__�str�boolr r: rV rf r rp ru rT rT rT rU rD Q s � �� rD ��cvec C s8 dj | j�� | jd�d� | j�� �g}td�|�� d S )N�{issue}: {description}��issue� descriptionz! - https://ubuntu.com/security/{}� )r_ rF �upperr� rb r` )r| �linesrT rT rU �print_cve_header� s ��r� )�fix_planc C s� | j }dj|j�� |jd�g}|j}t|t�r�|jrj|� t j � |jD ] }|� d�t j j j|d��� qFn,|jr�|� t j� |jD ]}|� d| � q�td�|�� d S )Nr} r~ z - {}r{ z - r� )�target_usn_planr_ rF r� r� �additional_data� isinstancer+ Zassociated_cvesrt r ZSECURITY_FOUND_CVESZurlsZSECURITY_CVE_PAGEZassociated_launchpad_bugsZ SECURITY_FOUND_LAUNCHPAD_BUGSrb r` )r� Z target_usnr� r� r| Zlp_bugrT rT rU �print_usn_header� s* �� �� r� )�security_issuerG rI c C sz t t| gd�|d�}|jjd j}|rH|jrHtjt� |j p<d|j�d��t |jjd � t � t |jjd ||�\}}|S )N)�cves�ZoptionsrI r �unexpected-error�Z named_msg)�cve_planr, Z cves_datar� �errorre r �AnonymousUbuntuProErrorr � NamedMessage�coder� rb �execute_fix_plan)r� rG rI r� r� ri �_rT rT rU �fix_cve� s � ��r� )r� rG � no_relatedrI c C s� t t| gd�|d�}|jjd jj}|rJ|jrJtjt � |j p>d|j�d��t |jjd � t dt jj| d� � t|jjd j||�\}}|tjtjfkr�|S |jjd j}|r�|r�|S t dt jjd�d d � |D ��d � � t dt j � i } |D ],} t d �| j�� t| ||�| | j< t � q�t t j� t|| t jd � d} |D ]�} | | j \} } t| | jt j d � | tj k�r�t dt j jdd� � d} | tj k�rD| D ]"}|j �r�t d�|j!|j �� �q�d} �qD| �r�t dt j"j| d� � |S )N)�usnsr� r r� r� r� )�issue_idz - c s s | ] }|j V qd S �N)rF )�.0ZusnrT rT rU � <genexpr>� s zfix_usn.<locals>.<genexpr>)Z related_usnsz- {})�contextF�- � fix operation�Z operationTz - {}: {})#�usn_planr. Z usns_datar� r� r� re r r� r r� r� r� rb Z SECURITY_FIXING_REQUESTED_USNr_ r� r rN �SYSTEM_NOT_AFFECTED�related_usns_planZSECURITY_RELATED_USNSr` Z SECURITY_FIXING_RELATED_USNSrF ZSECURITY_USN_SUMMARY�_handle_fix_status_messageZFIX_ISSUE_CONTEXT_REQUESTEDZFIX_ISSUE_CONTEXT_RELATED� SYSTEM_VULNERABLE_UNTIL_REBOOT�ENABLE_REBOOT_REQUIRED_TMPL�SYSTEM_STILL_VULNERABLErr rs ZSECURITY_RELATED_USN_ERROR)r� rG r� rI r� r� Ztarget_usn_statusr� r� Zrelated_usn_statusZrelated_usn_planZfailure_on_related_usnri rK � unfixed_pkgrT rT rU �fix_usn� s� � ����� ������� �� ��� �����r� )rk ri rJ rl rm �returnc C s� | sdS g }g }| D ](}|d7 }|� d�||�� |� |� qtjd�dd�|� d d�t|���tdd �}d �|t||��S ) z;Format the packages and status to an user friendly message.� � z{}/{}z{} {}:�(rW �)rZ �r[ r\ z{} {})rt r_ rc rd r` ra r; r ) rk ri rJ rl rm Z msg_indexZsrc_pkgsZsrc_pkgZ msg_headerrT rT rU rn / s" ��rn )rI �tokenr� c C sb t tdd|gg�� zt| |dd� W dS tjk r\ } zt |j� W Y �dS d}~X Y nX dS )ztAttach to an Ubuntu Pro subscription with a given token. :return: True if attach performed without errors. �proZattachT)r� Z allow_enableFN)rb rC r r ZUbuntuProErrorre )rI r� �errrT rT rU �_run_ua_attachK s r� )r� c C s: t � \} }| t�� kr6ttjjt�| �t�| �d�� dS )z:Alert the user when running Pro on cloud with PRO support.)rF Zcloud_specific_urlN) r9 r8 �keysrb r ZSECURITY_USE_PRO_TMPLr_ r7 �get)Z cloud_typer� rT rT rU �*_inform_ubuntu_pro_existence_if_applicableY s ��r� �rI c C s� t tj� t| d�}t dtjj|jd� � t|jd�}zt || d�}W nJ t j k r� } z*t tj � t |jd�}t|| d� |�W 5 d }~X Y nX t dtj � t| |j�S )Nr� r� )� user_code)Z magic_tokenr� )rb r ZCLI_MAGIC_ATTACH_INITr ZCLI_MAGIC_ATTACH_SIGN_INr_ r� r r� r r ZMagicAttachTokenErrorZCLI_MAGIC_ATTACH_FAILEDr r ZCLI_MAGIC_ATTACH_PROCESSINGr� Zcontract_token)rI Z initiate_respZ wait_optionsZ wait_resp�eZrevoke_optionsrT rT rU �_perform_magic_attache s* ��� � r� )rI r� c C sj t � ttj� tjtjdddgd�}|dkr2dS |dkrBt| �S |dkrfttj� t d�}t | |�S dS )zZPrompt for attach to a subscription or token. :return: True if attach performed. �s�a�c�Z valid_choicesF�> T) r� rb r Z*SECURITY_UPDATE_NOT_INSTALLED_SUBSCRIPTIONr �prompt_choicesZSECURITY_FIX_ATTACH_PROMPTr� ZPROMPT_ENTER_TOKEN�inputr� )rI �choicer� rT rT rU �_prompt_for_attach� s � r� )rK r� c C s4 t | �}tjtj�|�j|d�t| ��d�t dd�S )z�Format the list of unfixed packages into an message. :returns: A string containing the message output for the unfixed packages. rW )rl rY rZ r� ) r^ rc rd r ZSECURITY_PKG_STILL_AFFECTEDr] r_ r` ra r; )rK Znum_pkgs_unfixedrT rT rU � _format_unfixed_packages_msg� s � ��r� )rI rG r� c C s4 t | �j}|r0|tjjkr0|r,ttj� dS dS dS )zuCheck if the Ubuntu Pro subscription is expired. :returns: True if subscription is expired and not renewed. FT)r0 Zcontract_statusr/ ZEXPIRED�valuerb r �(SECURITY_DRY_RUN_UA_EXPIRED_SUBSCRIPTION)rI rG Zcontract_expiry_statusrT rT rU � _check_subscription_is_expired� s � � r� c C s� ddl }t� ttj� tjtjjt d�ddgd�}|dkr~ttj � t d�}tt dd gg�� t |jd d d �| � t| |�S d S )zdPrompt for attach a new subscription token to the user. :return: True if attach performed. r N)Zurl�rr� r� r� r� �detachTZcli)Z assume_yesr_ F)�argparser� rb r Z%SECURITY_UPDATE_NOT_INSTALLED_EXPIREDr r� ZSECURITY_FIX_RENEW_PROMPTr_ rB ZPROMPT_EXPIRED_ENTER_TOKENr� rC r5 Z Namespacer� )rI r� r� r� rT rT rU �_prompt_for_new_token� s � r� )rI �servicer� c C s� t tjj|d�� tjtjj|d�ddgd�}|dkr�t tdd|gg�� t| |d�\}}|s�|dk r�t |t �r�|j dk r�t |j j � |S d S ) zMPrompt for enable a pro service. :return: True if enable performed. �r� r� r� r� r� �enable�rI �nameNF) rb r ZSECURITY_SERVICE_DISABLEDr_ r r� ZSECURITY_FIX_ENABLE_PROMPTrC r r� r> �messagere )rI r� r� Zret�reasonrT rT rU �_prompt_for_enable� s$ ���� r� )r� rI rG r� c C s� t || d�}|r�|�� \}}|tjkr*dS |�� \}}|tjkr�|r`tdtj j |j d� � dS t ||j �rpdS ttj j |j d�� nttjj |j d�� dS )zQ Verify if the Ubuntu Pro subscription has the required service enabled. r� Tr� r� F)r< Zuser_facing_statusr? ZACTIVE�applicability_statusr= Z APPLICABLErb r Z'SECURITY_DRY_RUN_UA_SERVICE_NOT_ENABLEDr_ r� r� Z SECURITY_UA_SERVICE_NOT_ENABLEDZ SECURITY_UA_SERVICE_NOT_ENTITLED)r� rI rG ZentZ ent_statusr� r� rT rT rU �)_handle_subscription_for_required_service� s: ��� ����r� r� )ri r� r� c C s� | t jkr>|r tjj||d�}ntjj|d�}tt�|�� n�| t j kr||r^tj j||d�}ntj j|d�}tt�|�� np| t j kr�|r�tj j||d�}ntjj|d�}tt�|�� n2|r�tj j||d�}ntjj|d�}tt�|�� d S )N)r r� )r )r rN r Z%SECURITY_ISSUE_RESOLVED_ISSUE_CONTEXTr_ ZSECURITY_ISSUE_RESOLVEDrb r Zhandle_unicode_charactersr� Z'SECURITY_ISSUE_UNAFFECTED_ISSUE_CONTEXTZSECURITY_ISSUE_UNAFFECTEDr� Z)SECURITY_ISSUE_NOT_RESOLVED_ISSUE_CONTEXTZSECURITY_ISSUE_NOT_RESOLVED)ri r� r� re rT rT rU r� s> � � � �r� �rj c C s2 | t krtjS | tkr tjS | tkr*tjS | S d S r� )r r Z'SECURITY_UBUNTU_STANDARD_UPDATES_POCKETr ZSECURITY_UA_INFRA_POCKETr ZSECURITY_UA_APPS_POCKETr� rT rT rU ro ? s ro �� fix_context�stepc C sh | j |jjd|jjd� d| _tjj|jj|jj d�}t d| � | j |jj g|d� d| _ tj| _d S )N�releasedrg F)�package�versionr� rq T)rp �dataZrelated_source_packagesrj rP r ZFIX_CANNOT_INSTALL_PACKAGEr_ Zbinary_packageZbinary_package_versionrb ru Zsource_packagerQ r r� rO )r� r� Zwarn_msgrT rT rU �)_execute_package_cannot_be_installed_stepJ s" �� �r� c C sR | j |jj|jjd� | jt|jj�7 _| j|jjt|jj�d� tj | _ d S )N)rh ri rq ) rp r� �source_packagesri rJ r^ ru r r r� rO r� rT rT rU �&_execute_security_issue_not_fixed_stepc s � �r� c C s* t �� rttj� ntdtj d � d S )Nr� )r �we_are_currently_rootrb r Z CLI_FIX_FAIL_UPDATING_ESM_CACHEZ(CLI_FIX_FAIL_UPDATING_ESM_CACHE_NON_ROOTr� rT rT rU �%_execute_fail_updating_esm_cache_steps s r� c C sv | j |jjd|jjd� | jt|jj�7 _|jjsR| jsFtt j � t j | _ d S t�� s�| js�tt j� t j| _ | j|jjt jd� d S ttdddgdddd g t|jj� g�� | jr�t j | _ d S z.t�� tjd ddd g|jj d d id � W n\ tk �rR } z<t|dt|��}t|� t j| _ | j|jj|d� W Y �d S d }~X Y nX t j | _ d| _ | j � |jj� d S )Nr� rg rq r �updatez&&Zinstallz--only-upgradez-yzapt-getZDEBIAN_FRONTENDZnoninteractive)�cmdZoverride_env_varsre T) rp r� r� rj rJ r^ Zbinary_packagesrQ rb r �SECURITY_UPDATE_INSTALLEDr rN rO r r� rG ZSECURITY_APT_NON_ROOTr� ru rC ra r Zrun_apt_update_commandZrun_apt_command� Exception�getattrry rP rM r� )r� r� r� re rT rT rU �_execute_apt_upgrade_step| sh � � � ���� �� �r� c C s� |j jdkrtnt}| j|j jd|d� d| _t| j�j s�| j rPt dt j � q�t| j�s�tj| _| j|j jt jj|j jd�d� d S nXt| j| j d�r�| j r�t t j� n6t| j�s�tj| _| j|j jt jj|j jd�d� d S tj| _d S ) N� esm-infrar� rg Fr� r� rq )rI rG )r� Zrequired_servicer r rp r� rP r0 rI Z is_attachedrG rb r Z SECURITY_DRY_RUN_UA_NOT_ATTACHEDr� r r� rO ru Z SECURITY_UA_SERVICE_REQUIREDr_ r� r� r� Z$SECURITY_UA_SERVICE_WITH_EXPIRED_SUBrN �r� r� rj rT rT rU �_execute_attach_step� sL ��� �� � ��r� c C st |j jdkrtnt}| j|j jd|d� d| _t|j j| j| j �sn| j |j jt j j |j jd�d� tj| _d S tjS )Nr� r� rg Fr� rq )r� r� r r rp r� rP r� rI rG ru r Z%SECURITY_UA_SERVICE_NOT_ENABLED_SHORTr_ r r� rO rN r� rT rT rU �_execute_enable_step� s0 ������r� c C s& |j jtjjkr"ttj� tj | _ d S r� ) r� ri r Z NOT_AFFECTEDr� rb r ZSECURITY_NO_AFFECTED_PKGSr r� rO r� rT rT rU � _execute_noop_not_affected_step s r� c C s0 t |jt�r,ttjj| j|jjd�� d| _ d S )N)r r� T) r� r� r* rb r ZCVE_FIXED_BY_LIVEPATCHr_ rF Z patch_versionrR r� rT rT rU �%_execute_noop_fixed_by_livepatch_step s ��r� c C sH t |jt�rD| j|jjd|jjd� ttj� | j t |jj�7 _ d S )Nr� rg ) r� r� r) rp r� rj rb r r� rJ r^ r� rT rT rU � _execute_noop_already_fixed_step s � r� )r� rG rI r� c C s� | j | j�}t| j|| jp g |d�}|�� t|dd� d�D ]�}t|t�rTt ||� t|t �rht ||� t|t �r|t ||� t|t�r�t||� |jtjkr� �q0t|t�r�t||� |jtjkr� �q0t|t�r�t||� |jtjkr� �q0t|t��rt||� t|t��rt||� t|t�r<t ||� q<t � |j �rft t t t!dd� |j D ����� tj"|_|jtjk�r�t#j$|j%d��r�tj&|_t'j(j)dd �}t |� t*j+t,j-dd � |j.�s�t/|j| j� |j|j fS ) NrE c S s | j S r� )�order)�xrT rT rU �<lambda>< � z"execute_fix_plan.<locals>.<lambda>)�keyc S s g | ] }|j �qS rT )rs )r� r� rT rT rU � <listcomp>` s �z$execute_fix_plan.<locals>.<listcomp>)rM r� r� )0Zplan�warningsrD rF Zaffected_packagesrf ra r� r' r� r( r� r& r� r r� rO r rN r r� r r� r! r� r r� r r� rb rK r� �listrL r� r Z should_rebootrM r� r r� r_ r@ �addrA ZENABLE_REBOOT_REQUIREDrR r� )r� rG rI Z full_planr� r� Z reboot_msgrT rT rU r� , s� �� ����� � ���r� Zfix)r� c K sJ | j rttj� d| j�� kr0t| j| j |�}nt| j| j | j|�}|j S )Nr| ) rG rb r ZSECURITY_DRY_RUN_WARNINGr� �lowerr� r� r� Z exit_code)�argsrI �kwargsri rT rT rU � action_fix~ s �r� Tr� )�helpz --dry-run� store_true)r� �actionz --no-related)Z arguments)r� r� r� Z help_categoryZpreserve_descriptionZargument_groups)N)r� )�rc �typingr r r r r r r Zuaclientr r r r r Zuaclient.actionsr r Z+uaclient.api.u.pro.attach.magic.initiate.v1r Z)uaclient.api.u.pro.attach.magic.revoke.v1r r Z'uaclient.api.u.pro.attach.magic.wait.v1r r Z'uaclient.api.u.pro.security.fix._commonr r r Z/uaclient.api.u.pro.security.fix._common.plan.v1r r r r r r r r r r! r" r# r$ r% r& r' r( r) r* r+ Z+uaclient.api.u.pro.security.fix.cve.plan.v1r, r- r� Z+uaclient.api.u.pro.security.fix.usn.plan.v1r. r� Z(uaclient.api.u.pro.status.is_attached.v1r/ r0 Z uaclient.clir1 Zuaclient.cli.commandsr2 r3 r4 Zuaclient.cli.detachr5 Zuaclient.cli.parserr6 Zuaclient.clouds.identityr7 r8 r9 Zuaclient.configr: Zuaclient.defaultsr; Zuaclient.entitlementsr< Z(uaclient.entitlements.entitlement_statusr= r> r? Zuaclient.filesr@ Zuaclient.files.noticesrA Zuaclient.messages.urlsrB Zuaclient.statusrC rD r� r� ry rz r� r� �intrn r� r� r� r� r� r� r� r� r� r� ro r� r� r� r� r� r� r� r� r� r� Z assert_vulnerability_issue_validr� Z CLI_ROOT_FIXZ CLI_FIX_DESCZSECURITYZ CLI_FIX_ISSUEZCLI_FIX_DRY_RUNZCLI_FIX_NO_RELATEDZ fix_commandrT rT rT rU �<module> s� $ X ? � l �� � , � � % � � � � ?� 0� " � � � � R ������