OwlCyberSecurity - MANAGER
Edit File: security_status.cpython-38.pyc
U ��g�h � @ s� d dl mZ d dlmZmZ d dlmZ d dlmZ d dlm Z d dl m Z m Z m Z mZmZ d dlZd dlmZmZmZmZ d d lmZ d d lmZ d d lmZm Z m Z m Z m Z d d l m!Z! d d l"m#Z#m$Z$ d dl%m&Z&m'Z'm(Z( d dl)m*Z*m+Z+m,Z,m-Z-m.Z. dZ/G dd� de�Z0dd� Z1edd�dd� �Z2e deej3 f d�dd�Z4ej3ej5e6d �d d �Z7edd�e6e6e8d �d d!��Z9e6e e6e f ej:e6d"�d#d$�Z;eej3 e e6eeej:e6f f d%�d&d'�Z<e!e e6e f d(�d)d*�Z=ee e6e f d�d+d,�Z>e e6eeej:e6f f e e6e f ee e6e f d-�d.d/�Z?e!e e6e f d(�d0d1�Z@dKe e6eej3 f e6e8dd4�d5d6�ZAd7d8� ZBd9d:� ZCe6e6e'e&eDeDe8d;�d<d=�ZEd>d?� ZFe!d@�dAdB�ZGdCdD� ZHdEdF� ZIdGdH� ZJdIdJ� ZKdS )L� )� defaultdict)�datetime�timezone)�Enum)� lru_cache)�choice)�Any� DefaultDict�Dict�List�TupleN)� exceptions� livepatch�messages�util)�_reboot_required)� _is_attached)�PreserveAptCfg�get_apt_cache_datetime�get_apt_pkg_cache�get_esm_apt_pkg_cache�get_pkg_candidate_version)�UAConfig)�ESMAppsEntitlement�ESMInfraEntitlement)�ApplicabilityStatus�ApplicationStatus�ContractStatus)�get_distro_info�get_kernel_info�get_release_info�is_current_series_lts� is_supported)� esm-infra�esm-appsc @ s$ e Zd ZdZdZdZdZdZdZdS )� UpdateStatusz2Represents the availability of a security package.Zupgrade_availableZ upgrade_available_not_preferredZpending_attachZpending_enableZupgrade_unavailableN) �__name__� __module__� __qualname__�__doc__� AVAILABLE�AVAILABLE_NOT_PREFERRED� UNATTACHED� NOT_ENABLED� UNAVAILABLE� r/ r/ �:/usr/lib/python3/dist-packages/uaclient/security_status.pyr% ( s r% c C s t t�| �� d S )N)�printr Zcreate_package_list_str)�packagesr/ r/ r0 �print_package_list1 s r3 )�maxsizec C sR t � j} dd�| �fddd�| �fddd�| �fd dd �| �fddd �| �fd iS ) N�Ubuntuz {}-security�standard-securityZ UbuntuESMAppsz{}-apps-securityr$ Z UbuntuESMz{}-infra-securityr# z{}-apps-updatesz{}-infra-updates)r �series�format)r7 r/ r/ r0 �%get_origin_information_to_service_map5 s �r9 �str)�returnc C s` t t�} tt��F}dd� |jD �}|| d< t�|�}|D ]}| t||� �|� q8W 5 Q R X | S )Nc S s g | ]}|j r|�qS r/ )� current_ver��.0�packager/ r/ r0 � <listcomp>G s z4get_installed_packages_by_origin.<locals>.<listcomp>�all) r �listr r r2 �apt_pkg�DepCache� get_origin_for_installed_package�append)�result�cache�installed_packages� dep_cacher? r/ r/ r0 � get_installed_packages_by_originA s � ��rK )r? rJ r; c C s� | j s dS | j j}t|�dkr@|�| �}|r6| j |kr:dS |j}|D ]B\}}t� �|j|jfd�}|tkrr| S |jdkrD|j S qDdS )a Returns the origin for a package installed in the system. Technically speaking, packages don't have origins - their versions do. We check the available versions (installed, candidate) to determine the most reasonable origin for the package. � � �unknownr5 � third-party) r< � file_list�lenZget_candidate_verr9 �get�origin�archive� ESM_SERVICESZ component)r? rJ Zavailable_origins� candidaterS �_�servicer/ r/ r0 rE V s$ � rE )�pkg�versionr; c C s t | dd�}|r||kS dS )z;Returns True if the package version is a candidate version.F)Zcheck_esm_cache)r )rY rZ Zcandidate_versionr/ r/ r0 �_is_candidate_version{ s r[ )� service_name�ua_inforZ r; c C sl | dks |d r@| |d kr@t |jj|j�}|r8tjjS tjjS |d sPtjjS | |d krdtj jS tj jS )z�Defines the update status for a package based on the service name. For ESM-[Infra|Apps] packages, first checks if Pro is attached. If this is the case, also check for availability of the service. )r6 �standard-updates�attached�enabled_services�entitled_services) r[ � parent_pkg�name�ver_strr% r* �valuer+ r, r- r. )r\ r] rZ Z is_candidater/ r/ r0 �get_update_status� s$ � � �� � rf )r2 r; c C s, t t�}tt���}| D �]}|jr|jD ]�}||jkr*d}|jD ]<\}}t� �|j |j f�}|rB|| � ||j f� d} q�qB|jd d } |s*d| j kr*|d � || j f� q*|j |kr||j } | jD ]N}||jkr�|jD ]8\}}t� �|j |j f�}|r�|| � ||j f� q�q�q�qW 5 Q R X |S )z�Filters a list of packages looking for available updates. All versions greater than the installed one are reported, based on where it is provided, including ESM pockets, excluding backports. FTr Z backportsr^ )r rB r r r< � version_listrP r9 rR rS rT rF Zsiterc ) r2 rG Z esm_cacher? rZ Zcounted_as_securityrS rW rX Zexpected_originZ esm_packager/ r/ r0 �filter_updates� sL ����� ��rh )�cfgr; c C s� t | �j}|g g d�}|r�t| �}t| �}|�� tjkrF|d �d� |�� d t j krf|d �d� |�� tjkr�|d �d� |�� d t j kr�|d �d� |S )z7Returns the Pro information based on the config object.)r_ r` ra ra r$ r r` r# ) r � is_attachedr r Zcontract_statusr ZENTITLEDrF �application_statusr �ENABLED)ri rj r] Zinfra_entitlementZapps_entitlementr/ r/ r0 � get_ua_info� s. � �� ��rm c C s� z t �� } W n tjk r& g Y S X t� j}| d k r�|d k r�|| jkr�| j d k r�| j jdkr�| j jd k r�t | j j�dkr�dd� | j jD �S g S )NZappliedr c S s" g | ]}|j pd |jpdd��qS )rL F�rc Zpatchedrn )r> Zfixr/ r/ r0 r@ s �z,get_livepatch_fixed_cves.<locals>.<listcomp>) r �statusr ZProcessExecutionErrorr Z proc_version_signature_versionZkernel�state�fixesrQ )Z lp_statusZour_kernel_versionr/ r/ r0 �get_livepatch_fixed_cves s. ���� � �� �rr )�upgradable_versionsr] r; c C sT g }| � � D ]B\}}|D ]4\}}t|||�}|�|jj|j||||jd�� qq |S )N)r? rZ r\ ro rS Z download_size)�itemsrf rF rb rc rd �size)rs r] �updatesrX rg rZ rS ro r/ r/ r0 �create_updates_list s �� rw c C s t | �}d|i}t� }|d }t|�|d< t|�}g |d< t||�}t|d �|d< t|d �|d< t|d �|d < t|d �|d < t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t| �j|d< d||dt� id �S ) ag Returns the status of security updates on a system. The returned dict has a 'packages' key with a list of all installed packages which can receive security updates, with or without ESM, reflecting the availability of the update based on the Pro status. There is also a summary with the Ubuntu Pro information and the package counts. ZuarA Znum_installed_packagesr^ �mainZnum_main_packages� restrictedZnum_restricted_packages�universeZnum_universe_packages� multiverseZnum_multiverse_packagesrO Znum_third_party_packagesrN Znum_unknown_packagesr# Znum_esm_infra_packagesr$ Znum_esm_apps_packagesZnum_esm_infra_updatesZnum_esm_apps_updatesr6 Z num_standard_security_updates�reboot_requiredz0.1Z fixed_cves)Z_schema_version�summaryr2 r )rm rK rQ rh rw r r| rr )ri r] r} �packages_by_originrI rs rv r/ r/ r0 �security_status_dict/ s: ���r rA F)� package_lists� show_items� always_showr; c C sL t | d �}ttjj|d�� dt t|��d }|dkrzt | d �t | d � t | d � }ttj�|�j||d d �� |d kr�t | d �t | d � t | d � }|s�|r�ttj�|�j||dd �� |dk�rt | d �}|s�|�rttj�|�j||d�� |dk�r@t | d �}|�s&|�r@ttj �|�j||d�� td� d S )NrA )�count� rM )rA r# rx ry r# �Main/Restricted)�offsetr� � repository)rA r$ rz r{ r$ �Universe/Multiverse)rA rO rO )r� r� )rA rN rN rL ) rQ r1 r ZSS_SUMMARY_TOTALr8 r: ZSS_SUMMARY_ARCHIVE� pluralizeZSS_SUMMARY_THIRD_PARTYZSS_SUMMARY_UNAVAILABLE) r� r� r� Ztotal_packagesr� Z packages_mrZ packages_umZpackages_thirdpartyZpackages_unknownr/ r/ r0 �_print_package_summarya sn � �� �� � �� �� � �� ��� r� c C sH t � j} t| �j}d�t|j�t|j��}tt j j|d�� td� d S )Nz{}/{}��daterL ) r r7 r �eolr8 r: Zmonth�yearr1 r ZSS_INTERIM_SUPPORT)r7 �eol_dater� r/ r/ r0 � _print_interim_release_support� s r� c C sB t � j} t| �r4t| �j}ttjjt |j �d�� n ttj � d S )Nr� ) r r7 r" r r� r1 r ZSS_LTS_SUPPORTr8 r: r� ZSS_NO_SECURITY_COVERAGE)r7 r� r/ r/ r0 �_print_lts_support� s r� �rX r� �service_status�service_applicability�installed_updates�available_updatesrj c C s� t � j}t|�j}|tjkr6tjj|| t |j �d�} ntj j| |t |j �d�} |rn| dtj � |�j|d� 7 } |r�| dtj� |�j|d� 7 } t| � |r�|tjkr�|tjkr�td� ttjj| d�� td� d S )N)r� rX r� )rX r� r� r� )rv rL �rX )r r7 r Zeol_esmr rl r ZSS_SERVICE_ENABLEDr8 r: r� ZSS_SERVICE_ADVERTISEZSS_SERVICE_ENABLED_COUNTSr� ZSS_SERVICE_ADVERTISE_COUNTSr1 �DISABLEDr Z APPLICABLEZSS_SERVICE_COMMAND) rX r� r� r� r� r� rj r7 Z eol_date_esm�messager/ r/ r0 �_print_service_support� sF �� �� �� ���r� c C sb t � } | d kr$ttj� td� d S t�tj�}|| }|jdkr^ttj j |jd�� td� d S )NrL r )�days) r r1 r ZSS_UPDATE_UNKNOWNr �nowr Zutcr� ZSS_UPDATE_DAYSr8 )Zlast_apt_updater� Ztime_since_updater/ r/ r0 �_print_apt_update_call� s r� )ri c C s� t | �}t| �}|�� d }|�� d }|�� d }|�� d }t� j}t� }t| �d } t� } t | d | d | d �d } t | d | d | d �d } t | � t t j � t d � t� |s�t|�r�t� t t j� d S |tjkr�t� | �rt t j� n t t j� t d � tdd ||t| d �t| �| d � | d �sT| d �sT| d �rvtdd ||t| d �t| �| d � | �s�t t j� d S ) Nr r_ rx ry r# rz r{ r$ rL r� r� r� )r r rk �applicability_statusr r7 r! rm rK rh r� r1 r Z SS_HELP_CALLr� r" r� �SS_NO_INTERIM_PRO_SUPPORTr r� r� ZSS_IS_ATTACHEDZSS_IS_NOT_ATTACHEDr� rQ Z SS_LEARN_MORE) ri � esm_infra_ent� esm_apps_ent�esm_infra_status�esm_infra_applicability�esm_apps_status�esm_apps_applicabilityr7 �is_ltsrj r~ Z"security_upgradable_versions_infraZ!security_upgradable_versions_appsr/ r/ r0 �security_status� s� �������� � ��� � r� c C sx t � } | d }dd� |D �}t| ddd� |rjttj� td� ttj� t|� ttjjt |�d�� n ttj � d S )NrO c S s g | ] }|j �qS r/ �rc r= r/ r/ r0 r@ A s z-list_third_party_packages.<locals>.<listcomp>T�r� r� rL �r? ) rK r� r1 r ZSS_THIRD_PARTY�SS_PACKAGES_HEADERr3 � SS_SHOW_HINTr8 r ZSS_NO_THIRD_PARTY)r~ Zthird_party_packages� package_namesr/ r/ r0 �list_third_party_packages> s � r� c C sx t � } | d }dd� |D �}t| ddd� |rjttj� td� ttj� t|� ttjjt |�d�� n ttj � d S )NrN c S s g | ] }|j �qS r/ r� r= r/ r/ r0 r@ U s z-list_unavailable_packages.<locals>.<listcomp>Tr� rL r� ) rK r� r1 r ZSS_UNAVAILABLEr� r3 r� r8 r ZSS_NO_UNAVAILABLE)r~ Zunknown_packagesr� r/ r/ r0 �list_unavailable_packagesR s � r� c s� t � }|d }|d |d }|| }t� }t|�d }|D ]\}}|�|j� q<t� j} t� } t| �} t | �} | � � d } | � � d }t dd� |D ���t dd� |D ��� t � �fdd�|D ��}t |dd d � | s�t| �r�t� ttj� d S | tjk�r t� td � tdd | |t|�t|�d d� ttjjdd�� td � t| ��s� �rnttjjdd�� t� � ��r�ttj jdd�� t�� � �p��}|�r�|�r�tj jdd�}ntj jdd�}t|� t|� |�r�ttj jt |�d�� d S )Nr# rx ry r c S s g | ] }|j �qS r/ r� r= r/ r/ r0 r@ s z+list_esm_infra_packages.<locals>.<listcomp>c S s g | ] }|j �qS r/ r� r= r/ r/ r0 r@ � s c s& g | ] }|j �kr|j � kr|j �qS r/ r� r= �Zavailable_package_namesZinstalled_package_namesr/ r0 r@ � s �Tr� rL r� Fr� r� r� )!rK �setrh �addrb r r7 r! r r rk r� �sortedr� r" r� r1 r r� r r� r� r� rQ �SS_SERVICE_HELPr8 �SS_UPDATES_AVAILABLEr3 �SS_UPDATES_INSTALLED�SS_FURTHER_OTHER_PACKAGES�SS_OTHER_PACKAGESr� r )ri r~ Zinfra_packagesZ mr_packagesZall_infra_packagesZ infra_updates� security_upgradable_versions�updaterW r7 r� r� r� r� r� �remaining_package_names� hint_list�msgr/ r� r0 �list_esm_infra_packagesg s� � � � �� � � �r� c s� t � }|d }|d |d }|| }t� }t|�d }|D ]\}}|�|j� q<t� } t| �} | �� d } | �� d } t dd� |D ���t dd� |D ��� t � �fdd�|D ��} t |dd d � | s�t t j � d S tdd | | t|�t|�d d � t t jjdd�� t d� |�r�� �r2t t jjdd�� t� � ��rRt t jjdd�� t�� � �pZ�}| �r�|�rxt jjdd�}nt jjdd�}t |� t| � |�r�t t jjt|�d�� d S )Nr$ rz r{ r c S s g | ] }|j �qS r/ r� r= r/ r/ r0 r@ � s z*list_esm_apps_packages.<locals>.<listcomp>c S s g | ] }|j �qS r/ r� r= r/ r/ r0 r@ � s c s& g | ] }|j �kr|j � kr|j �qS r/ r� r= r� r/ r0 r@ � s �Tr� r� Fr� r� rL r� )rK r� rh r� rb r! r rk r� r� r� r1 r r� r� rQ r� r8 r� r3 r� r� r� r� r )ri r~ Z apps_packagesZ um_packagesZall_apps_packagesZ apps_updatesr� r� rW r� r� r� r� r� r� r� r/ r� r0 �list_esm_apps_packages� s~ �� � � �� � � �r� )rA F)L� collectionsr r r �enumr � functoolsr Zrandomr �typingr r r r r rC Zuaclientr r r r Z5uaclient.api.u.pro.security.status.reboot_required.v1r Z(uaclient.api.u.pro.status.is_attached.v1r Z uaclient.aptr r r r r Zuaclient.configr Zuaclient.entitlementsr r Z(uaclient.entitlements.entitlement_statusr r r Zuaclient.systemr r r r! r" rU r% r3 r9 ZPackagerK rD r: rE �boolr[ ZVersionrf rh rm rr rw r r� r� r� �intr� r� r� r� r� r� r� r/ r/ r/ r0 �<module> s� � � % � � @! � 4 �� ? � 2MY