OwlCyberSecurity - MANAGER
Edit File: system.cpython-38.pyc
U ��gyp � @ sl d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl m Z d dl mZ d dlmZmZmZmZmZmZmZ d dlmZmZmZ dZdZ dZ d Z d Z e� e�!e"��Z#d Z$d Z%ed de j&fde j&fde'fde'fde'fg�Z(edde'fde'fdee j fdee' fdee) fdee) fdee) fdee' fd ee' fg �Z*ed d e'fde'fde'fd e'fg�Z+ed d!ee' fd"ee' fd#ee' fd$ee' fd%ee' fd&ee' fd'ee' fd(ee' fd)ee' fd*ee' fd+ee' fd,ee' fd-ee' fd.ee' fg�Z,ed/d0eee' fd1eee' fg�Z-d2Z.ej/ee j d3�d4d5�Z0ej/ee j d3�d6d7�Z1e dd8�e*d9�d:d;��Z2d<d=� Z3e dd8�e'd9�d>d?��Z4e dd8�e'd9�d@dA��Z5e dd8�e,d9�dBdC��Z6e dd8�e'd9�dDdE��Z7e dd8�e+d9�dFdG��Z8e dd8�e'e9dH�dIdJ��Z:e dd8�e9d9�dKdL��Z;e dd8�e'e9dH�dMdN��Z<e dd8�e'e9dH�dOdP��Z=e dd8�e9d9�dQdR��Z>e dd8�d�e'e9dT�dUdV��Z?e dd8�e9d9�dWdX��Z@e dd8�ee'e'f d9�dYdZ��ZAe dd8�e'e(dH�d[d\��ZBe'ee' d]�d^d_�ZCd�eee' eee' e9d`�dadb�ZDe'e9dc�ddde�ZEe'e'df�dgdh�ZFd�e'e)ddj�dkdl�ZGd�e'e'ee) ddm�dndo�ZHe'ddp�dqdr�ZId�ee' eee) e9eeJ eee'e'f e9ee'e'f du�dvdw�ZKd�ee' eee) e9eeJ eeeJ eee'e'f e9ee'e'f dx�dydz�ZLe'dd{�d|d}�ZMe'e9d~�dd��ZNe'ee' d~�d�d��ZOe'd9�d�d��ZPee- d9�d�d��ZQdS )�� N)� lru_cache)�rmtree)�Dict�List� NamedTuple�Optional�Sequence�Set�Tuple)�defaults� exceptions�utilz/var/run/reboot-requiredz /var/run/reboot-required.pkgsz/etc/machine-idz/var/lib/dbus/machine-idz!/usr/share/distro-info/ubuntu.csvz5(?P<release>\d+\.\d+) (LTS\s*)?(\((?P<series>\w+))?.*zd^(?P<major>[\d]+)[.-](?P<minor>[\d]+)[.-](?P<patch>[\d]+)-(?P<abi>[\d]+)-(?P<flavor>[A-Za-z0-9_-]+)$� DistroInfo�eol�eol_esm�series�release�series_codename� KernelInfo�uname_machine_arch� uname_release� build_date� proc_version_signature_version�major�minor�patch�abi�flavor� ReleaseInfo� distribution�pretty_version�CpuInfo� cpuinfo_cpu�cpuinfo_cpu_architecture�cpuinfo_cpu_family�cpuinfo_cpu_implementer�cpuinfo_cpu_part�cpuinfo_cpu_revision�cpuinfo_cpu_variant� cpuinfo_model�cpuinfo_model_name�cpuinfo_stepping�cpuinfo_vendor_id�"sys_firmware_devicetree_base_model� sysinfo_model� sysinfo_type�RebootRequiredPkgs�standard_packages�kernel_packagesz (Mon|Tue|Wed|Thu|Fri|Sat|Sun).*)�uname�returnc C sl t � rt�d� d S t�d� z(t�d�| j��}tj�|j tj j �W S t k rf t�d� Y d S X d S )NzPNot attempting to use timestamp of kernel changelog because we're in a containerz3Falling back to using timestamp of kernel changelogz1/usr/share/doc/linux-image-{}/changelog.Debian.gzz Unable to stat kernel changelog) � is_container�LOG�warning�os�stat�formatr �datetimeZ fromtimestamp�st_mtime�timezone�utc� Exception)r3 � stat_result� rA �1/usr/lib/python3/dist-packages/uaclient/system.py� _get_kernel_changelog_timestampq s& � �� � rC c C s� t �t| j�}|d kr(t�d� t| �S |�d�}ztj� |d�}W n& t k rj t�d� t| � Y S X |j d kr�|j tj jd�}|S )Nz*Unable to find build date in uname versionr z%a %b %d %H:%M:%S %Z %Yz-Unable to parse build date from uname version)�tzinfo)�re�search� RE_KERNEL_EXTRACT_BUILD_DATE�versionr6 r7 rC �groupr; �strptime� ValueErrorrD �replacer= r> )r3 Z date_matchZdate_strZdtrA rA rB �_get_kernel_build_date� s rM )�maxsize)r4 c C s� d } zt d�}|�� d } W n tk r: t�d� Y nX t�� }|j�� }t |�}|j �� }t � t |�}|d kr�t�d|� t|||| d d d d d d� S t|||| t|�d��t|�d��t|�d��|�d �|�d �d� S d S ) Nz/proc/version_signature� z*failed to process /proc/version_signature.zFailed to parse kernel: %s) r r r r r r r r r r r r r r )� load_file�splitr? r6 r7 r8 r3 �machine�striprM r rE �match�RE_KERNEL_UNAMEr �intrI )r Zproc_version_signature_fullr3 r r r Z uname_matchrA rA rB �get_kernel_info� sF � �rW c sn ddl m} t�� s td��dd� | � D �}dd� t�d�D �}dd� |D �� d d� |D �}� fd d�|D �S ) Nr )� get_installed_packages_namesz9get_installed_ubuntu_kernels needs to be executed as rootc S s g | ]}d |kr|�qS )� linux-image-rA )�.0�packagerA rA rB � <listcomp>� s �z0get_installed_ubuntu_kernels.<locals>.<listcomp>c S s$ g | ] }d t d|g�d kr|�qS )z Linux kernel�filer ��subp)rZ r] rA rA rB r\ � s �z/boot/vmlinu[x|z]-*c S s g | ]}|t d �d� �qS )rY N��len)rZ Z package_namerA rA rB r\ � s c S s g | ]}|t d �d� �qS )z/boot/vmlinu?-Nr` )rZ � file_namerA rA rB r\ � s �c s g | ]}|� kr|�qS rA rA )rZ rH �Zlinux_image_versionsrA rB r\ � s �)Z uaclient.aptrX r �we_are_currently_root� RuntimeError�glob)rX Z linux_imageZvmlinux_kernel_filesZvmlinuz_versionsrA rc rB � get_installed_ubuntu_kernels� s( ����� �rg c C s t ddg�\} }| �� S )NZdpkgz--print-architecture)r_ rS )�out�_errrA rA rB � get_dpkg_arch� s rj c C s� zt dg�\} }| �� W S tjk r� z<td�}d|ksDd|krLW Y dS d|kr\W Y dS W Y dS W n tk r~ Y Y dS X Y nX d S )N�systemd-detect-virtz/proc/1/cgroupZdockerZbuildkitZbuildahZpodman� )r_ rS r �ProcessExecutionErrorrP r? )rh �_Z proc_1_cgrouprA rA rB � get_virt_type� s ro c C s� d} d}d}i }i }d }z t | �}W n$ tk rH t�d�| �� Y nXX |�d�}tdd� |D �d�}|�d �D ],} d | krr| �d d �\} } | �� || �� < qrz t |�} W n$ tk r� t�d�|�� Y n:X | �d �D ],} d | kr�| �d d �\} } | �� || �� < q�z t |�}W n& tk �r< t�d�|�� Y nX t|� d �|� d �|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�||� d�|� d�d�S )Nz /proc/cpuinfoz /proc/sysinfoz#/sys/firmware/devicetree/base/modelzcould not open {}z c s s | ]}|� d �r|V qdS )Z processorN)� startswith)rZ �srA rA rB � <genexpr> s z get_cpu_info.<locals>.<genexpr>rl � �:rO ZcpuzCPU architecturez cpu familyzCPU implementerzCPU partz CPU revisionz CPU variantZmodelz model nameZsteppingZ vendor_idZModelZType)r" r# r$ r% r& r' r( r) r* r+ r, r- r. r/ ) rP �FileNotFoundErrorr6 �infor: rQ �nextrS r! �get) Z CPUINFO_FILEZ SYSINFO_FILEZDEVICETREE_FILEZcpuinfo_valuesZsysinfo_valuesZdevicetree_base_modelZcpuinfo_contentZcpuinfo_sectionsZfirst_cpu_content�line�key�valueZsysinfo_contentrA rA rB � get_cpu_info s^ � �r| c C s� ddl m} ddlm} |�� }|jrB|j�di ��d�}|rB|S |�� }ttfD ]*}t j � |�rRt |�� d�}|rR| S qR|r�|S tt�� �}|�|� |S )z� Get system's unique machine-id or create our own in data_dir. We first check for the machine-id in machine-token.json before looking at the system file. r )� machine_token)�machine_id_fileZmachineTokenInfoZ machineIdrs )Zuaclient.filesr} Zuaclient.files.state_filesr~ Zget_machine_token_filerx �read�ETC_MACHINE_ID�DBUS_MACHINE_IDr8 �path�existsrP �rstrip�str�uuidZuuid4�write)Zcfgr} r~ Zmachine_token_fileZ machine_idZfallback_machine_idr� �contentrA rA rB �get_machine_idF s. �� r� c C s� t � } | �dd�}t�dd| �dd��}| �dd�}| �dd�}|rH|s�t�t|�}|sntj| �dd�|d ��|�� }|p�|�d d�}|s�tj |d ��|p�|�d d�}t |||� � |d �S )N�NAMEZUNKNOWNz\.\d LTSz LTSZVERSIONrl ZVERSION_CODENAMEZ VERSION_ID)Zorig_verZmod_verr )rH r )r r r r ) �_parse_os_releaserx rE �subrT �REGEX_OS_RELEASE_VERSIONr ZParsingErrorOnOSReleaseFile� groupdictZ MissingSeriesOnOSReleaseFiler �lower)Z os_releaser r r r rT Z match_dictrA rA rB �get_release_infoh s2 ���r� )r r4 c C s t ddg�\}}| |kS )N�/usr/bin/ubuntu-distro-infoz--supported-esmr^ �r rh ri rA rA rB �is_lts� s r� c C s t t� j�S �N)r� r� r rA rA rA rB �is_current_series_lts� s r� c C s t ddg�\}}| |kS )Nr� z --supportedr^ r� rA rA rB � is_supported� s r� c C s, t | �s dS tdd| dg�\}}t|�dkS )zCReturn True when Ubuntu series supports ESM and is actively in ESM.Fr� z--seriesz-yeolr )r� r_ rV r� rA rA rB � is_active_esm� s �r� c C s t t� j�S r� )r� r� r rA rA rA rB � is_current_series_active_esm� s r� �/run)�run_pathr4 c C s� zt dg� W dS tjk r& Y nX zt dddg� W dS ttfk rT Y nX dD ]$}tj�| |�}tj�|�rZ dS qZdS )z>Checks to see if this code running in a container of some sortZischrootFrk �--quietz --containerT)Zcontainer_typezsystemd/container) r_ r rm �IOError�OSErrorr8 r� �joinr� )r� �filenamer� rA rA rB r5 � s r5 c C s. ddl m} | �� D ]}d|jkr dS qdS )z�Returns True if any package installed has "ubuntu-desktop" in the name. This includes ubuntu-desktop, ubuntu-desktop-minimal, kubuntu-desktop, etc. r )�aptzubuntu-desktopTF)�uaclientr� Zget_installed_packages�name)r� r[ rA rA rB � is_desktop� s r� c C sf z t d�} W n tk r( t d�} Y nX i }| �� D ]*}|�dd�\}}|r6|�� �d�||< q6|S )Nz/etc/os-releasez/usr/lib/os-release�=rO �")rP ru � splitlinesrQ rS )Z file_contents�datary rz r{ rA rA rB r� � s r� c C s� zt t��� }W n tk r, t�� �Y nX |D ]�}|�d�}|d | kr2| dkrZd}n d|d krn|d n|d }t|d |d |d tj� |d d �� � tj� |d �� � d � S q2tj | d ��d S ) N�,� Zxenialz 2026-04-23ZLTSr � � rO z%Y-%m-%d)r r r r r )r ) rP �DISTRO_INFO_CSVr� ru r ZMissingDistroInfoFilerQ r r; rJ �dateZ MissingSeriesInDistroInfoFile)r �linesry �valuesr rA rA rB �get_distro_info� s$ � r� )�programr4 c C sr t jj| krt| �r| S dd� t j�dd��t j�D �}dd� |D �}|D ]"}t j�|| �}t|�rJ| S qJdS )z;Find whether the provided program is executable in our PATHc S s g | ]}|� d ��qS )r� )rS �rZ �prA rA rB r\ � s zwhich.<locals>.<listcomp>�PATHrl c S s g | ]}t j�|��qS rA )r8 r� �abspathr� rA rA rB r\ s N) r8 r� �sep�is_exe�environrx rQ �pathsepr� )r� �pathsZnormalized_pathsr� Z program_pathrA rA rB �which� s � r� )�installed_pkgs�installed_pkgs_regexr4 c C s� t j�t�sdS | dkr$|dkr$dS zttt��d��}W n tk rP Y dS X | dk rpt | � |��dkrpdS |dk r�|D ]"}|D ]}t � ||�r� dS q�q|dS )a� Check if the system needs to be rebooted. :param installed_pkgs: If provided, verify if the any packages in the list are present on /var/run/reboot-required.pkgs. If that param is provided, we will only return true if we have the reboot-required marker file and any package in reboot-required.pkgs file. When both installed_pkgs and installed_pkgs_regex are provided, they act as an OR, so only one of the two lists must have a match to return True. :param installed_pkgs_regex: If provided, verify if the any regex in the list matches any line in /var/run/reboot-required.pkgs. If that param is provided, we will only return true if we have the reboot-required marker file and any match in reboot-required.pkgs file. When both installed_pkgs and installed_pkgs_regex are provided, they act as an OR, so only one of the two lists must have a match to return True. FNTrs r ) r8 r� r� �REBOOT_FILE_CHECK_PATH�setrP �REBOOT_PKGS_FILE_PATHrQ ru ra � intersectionrE rF )r� r� Zreboot_required_pkgs�pkg_nameZ pkg_regexrA rA rB � should_reboot s& � r� )r� r4 c C s t j�| �ot �| t j�S r� )r8 r� �isfile�access�X_OK)r� rA rA rB r� ? s r� )r� r4 c C s^ t | d��}t�d| � |�� }W 5 Q R X z |�d�W S tk rX tj| dd��Y nX dS )z!Read filename and decode content.�rbzReading file: %s�utf-8)rb � file_encodingN)�openr6 �debugr �decode�UnicodeDecodeErrorr ZInvalidFileEncodingError)r� �streamr� rA rA rB rP D s �rP � )r� �moder4 c C s@ t �d| � tjtj�| �dd� t�| ��� t� | |� d S )NzCreating file: %sT��exist_ok) r6 r� r8 �makedirsr� �dirname�pathlib�PathZtouch�chmod)r� r� rA rA rB � create_fileQ s r� )r� r� r� r4 c C s" d}t j�| �}|r<t�| ��� }t�|j�}|dkrH|}n |dkrHd}z�t jt j� | �dd� t j ddt j� | �d�}t � d| |j� |�|�d �� |�� |�� t �|j|� |r�t �|j|j|j� t �|j| � W n> tk �r } z |dk �rt �|j� |�W 5 d}~X Y nX dS ) a_ Write content to the provided filename encoding it if necessary. We preserve the file ownership and permissions if the file is present and no mode argument is provided. @param filename: The full path of the file to write. @param content: The content to write to the file. @param mode: The filesystem mode to set on the file. Nr� Tr� �wbF)r� �delete�dirz*Writing file %s atomically via tempfile %sr� )r8 r� r� r� r� r9 �S_IMODE�st_moder� r� �tempfileZNamedTemporaryFiler6 r� r� r� �encode�flush�closer� �chown�st_uid�st_gid�renamer? �unlink)r� r� r� ZtmpfZis_file_presentZ file_statZf_mode�erA rA rB � write_fileX s@ � � r� )� file_pathr4 c C s@ zt �| � t�d| � W n tk r: t�d| � Y nX dS )z<Remove a file if it exists, logging a message about removal.zRemoved file: %sz*Tried to remove %s but file does not existN)r8 r� r6 r� ru )r� rA rA rB �ensure_file_absent� s r� FT)�args�rcs�capture�timeout�override_env_vars�pipe_stdouterrr4 c C s� dd� | D �}d}d}i } |r4t j}t j}ddd�} |dkr@i }tj| |�} |dkrZdg}t�d�| ��} z&t j|||| d�} | j|d �\} }W n~ t k �r zD| r�| j d d d �nd }|r�|j d d d �nd }t j | | j ||d��W n" tk �r t j | d��Y nX Y nX | �r$| j d d d �nd }|�r<|j d d d �nd }| j |k�r`t j | | j ||d��|�rxt�d| | j |� ||fS )a� Run a command and return a tuple of decoded stdout, stderr. @param args: A list of arguments to feed to subprocess.Popen @param rcs: A list of allowed return_codes. If returncode not in rcs raise a ProcessExecutionError. @param capture: Boolean set True to log the command and response. @param timeout: Optional float indicating number of seconds to wait for subp to return. @param override_env_vars: Optional dictionary of environment variables. If None, the current os.environ is used for the subprocess. If defined, these env vars get merged with the current process' os.environ for the subprocess, overriding any values that already existed in os.environ. @return: Tuple of utf-8 decoded stdout, stderr @raises ProcessExecutionError on invalid command or returncode not in rcs. @raises subprocess.TimeoutError when timeout specified and the command exceeds that number of seconds. c S s$ g | ] }t |t�r|n|�d ��qS )r� )� isinstance�bytesr� )rZ �xrA rA rB r\ � s z_subp.<locals>.<listcomp>NzC.UTF-8)ZLANG�LC_ALLr � )�stdout�stderr�env)r� r� �ignore)�errorsrl )�cmdZ exit_coder� r� )r� z Ran cmd: %s, rc: %s stderr: %s)� subprocess�PIPEr8 r� r Zredact_sensitive_logsr� �PopenZ communicater� r� r rm � returncode�UnboundLocalErrorr6 r� )r� r� r� r� r� r� Z bytes_argsr� r� Zset_langZ merged_envZ redacted_cmd�procrh �errZ out_resultZ err_resultrA rA rB �_subp� sj � �� ��r )r� r� r� r� � retry_sleepsr� r� r4 c C s� |dk r|� � nd}z t| |||||d�\}}W q�W q tjk r� } z\|rlt�t| �� t�d| j| j � |sr� t�t| �� t�dt |�� t � |� d�� W 5 d} ~ X Y qX q||fS )a� Run a command and return a tuple of decoded stdout, stderr. @param subp: A list of arguments to feed to subprocess.Popen @param rcs: A list of allowed return_codes. If returncode not in rcs raise a ProcessExecutionError. @param capture: Boolean set True to log the command and response. @param timeout: Optional float indicating number of seconds to wait for a subp call to return. @param retry_sleeps: Optional list of sleep lengths to apply between retries. Specifying a list of [0.5, 1] instructs subp to retry twice on failure; sleeping half a second before the first retry and 1 second before the next retry. @param override_env_vars: Optional dictionary of environment variables. If None, the current os.environ is used for the subprocess. If defined, these env vars get merged with the current process' os.environ for the subprocess, overriding any values that already existed in os.environ. @return: Tuple of utf-8 decoded stdout, stderr @raises ProcessExecutionError on invalid command or returncode not in rcs. @raises subprocess.TimeoutError when timeout specified and the command exceeds that number of seconds. N)r� r� zStderr: %s Stdout: %szRetrying %d more times.r )�copyr r rm r6 r� r� r7 r� r� ra �time�sleep�pop) r� r� r� r� r r� r� rh r r� rA rA rB r_ � s* � $r_ )� folder_pathr4 c C s> zt | � t�d| � W n tk r8 t�d| � Y nX d S )NzRemoved folder: %sz,Tried to remove %s but folder does not exist)r r6 r� ru )r rA rA rB �ensure_folder_absent s r )� service_namer4 c C s2 zt ddd| g� W n tjk r, Y dS X dS )a^ Get if the systemd job is active in the system. Note that any status different from "active" will make this function return False. Additionally, if the system doesn't exist we will also return False here. @param service_name: Name of the systemd job to look at @return: A Boolean specifying if the job is active or not � systemctlz is-activer� FT)r_ r rm )r rA rA rB �is_systemd_unit_active$ s r c C s� zHt dddd| g�\}}|r:|�d�r:|�d�d �� W S t�d| � W n4 tjk r| } ztjd | |d � W 5 d }~X Y nX d S ) Nr Zshowz--property=ActiveStatez --no-pagerz ActiveState=r� rO z9Couldn't find ActiveState in systemctl show output for %sz-Failed to get ActiveState for systemd unit %s)�exc_info)r_ rp rQ rS r6 r7 r rm )r rh rn r� rA rA rB � get_systemd_unit_active_state6 s, �� ��r c C sH t �� rtjS tj�d�} | r.tj�| tj �S tj�tj� d�dtj �S )NZXDG_CACHE_HOME�~z.cache) r rd r Z UAC_RUN_PATHr8 r� rx r� r� ZUSER_CACHE_SUBDIR� expanduser)Zxdg_cache_homerA rA rB �get_user_cache_dirQ s �r c C st z t t�} W n tk r" Y d S X g }g }d}| �� D ]&}t�||�rT|�|� q8|�|� q8tt|�t|�d�S )Nz^(linux-image|linux-base).*)r1 r2 ) rP r� ru rQ rE rT �appendr0 �sorted)Z pkg_list_strr1 r2 Z kernel_regex�pkgrA rA rB �get_reboot_required_pkgs^ s �r )r� )NN)r� )N)NFNNT)NFNNNT)Rr; rf Zloggingr8 r� rE r9 r� r� r r� � functoolsr Zshutilr �typingr r r r r r r r� r r r r� r� r� r� r� Z getLoggerZ replace_top_level_logger_name�__name__r6 r� rU r� r� r rV r r r! r0 rG � uname_resultrC rM rW rg rj ro r| r� r� �boolr� r� r� r� r� r5 r� r� r� r� r� r� rP r� r� r� �floatr r_ r r r r r rA rA rA rB �<module> sT $���� ���� ���� � � +#<! � � 6 � � + � � Z � � 8