�
%��ic@s�dd
lZdd
l
Z
dd
lZdd
lZdd
lZddlmZmZmZm	Z	m
Z
mZmZm
Z
mZmZmZmZmZmZ
ddlmZmZmZ
er�ddlmZmZmZmZmZ
ndZd4Z d	Z!d
Z"dZ#idd
6dd6dd6Z$dde%dg
�
fd
de%dg
�
fgZ'ej(d��
Z)d�Z*d�Z+d�Z,de-f
d��YZ.d�Z/d
d�
Z0d�Z1d�Z2d�Z3e4d
d�Z5d �Z6e,d!��
Z7e,d"��
Z8e,d#��
Z9d$�Z:d%�Z;d&�Z<d'�Z=d(�Z>d)�Z?e,e/ej@d*��
�
�
ZAd+�ZBej@ejCd,�
ejDe,e/e
jEd
d-��
�
�
�
�
ZFe,d.��
ZGd/�ZHd0�ZId
d1�
ZJd2�ZKd3�ZLd
S(5i����Ni
(tauthtcapabilitiestconfigtconfig_handlerst	constantsterrorstfetcht	log_utilstplatform_utilst
process_utilstselinuxtserver_infotupdate_utilstutils(t	HTTPErrortjson_loads_nstrturlquote(tDicttListtOptionaltSettTuples!/usr/libexec/kcare/libcare-clients/run/libcare/libcare.socks/var/run/libcare.socks /var/cache/kcare/libcare_patchess /var/cache/kcare/libcare_cvelists&/etc/sysconfig/kcare/libcare.logrotatetdbtmysqldtmariadbdtpostgrestubuntus16.t
libnss_dnss7.cCs�tt
j�
}t�}
y*tj�}|d
j�}|d}Wn5tk
ry


xztD]\}}}|
|O}
qYWnVX|d}xHtD]@\}}	}|dks�||kr�|j
|	�
r�|}
Pq�q�Wg|D]}
|
|
kr�|
^q�S(Nii
t
.(tlistRtLIBCARE_LIBStsetRt
get_distrotlowert	ExceptiontLIBCARE_LIBS_BLACKLISTtNonet
startswith(tlibstblacklistedtdistro_infotdistrotversiont
_tbl_libstversion_dottedt	bl_distrot
bl_versiontlib((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt_get_effective_libcare_libs;s
	








'

cCsid
ddgd6t�d6S(NRRRRR&(
R1(((s-/usr/libexec/kcare/python/kcarectl/libcare.pytget_userspace_mapUs


c
Gstj
jtjd
||
�S(Nt	userspace(tostpathtjoinRtPATCH_CACHE(tlibnametparts((s-/usr/libexec/kcare/python/kcarectl/libcare.pytget_userspace_cache_path\s
c
s�f
d
�}
|
S(NcsYz�||
�SWdytd
�

Wn/t
k
rS
}
tjdj|�
dt�


n
XXdS(Nt
clearcaches$Libcare cache clearing failed: '{0}'t	print_msg(tlibcare_clientR"RtlogerrortformattFalse(targstkwargsterr(
tclbl(s-/usr/libexec/kcare/python/kcarectl/libcare.pytwrapperas



((RDRE((
RDs-/usr/libexec/kcare/python/kcarectl/libcare.pytclear_libcare_cache`s

tUserspacePatchLevelcBs)eZ
dd�
Zdd
�
Zd�ZRS(cCst||�j
||�S(
N(tsupert__new__(tclsR8tbuildidtleveltbaseurl((s-/usr/libexec/kcare/python/kcarectl/libcare.pyRIos
cCs(||_|
|_
||_||_dS(
N(RLR8RKRM(tselfR8RKRLRM((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt__init__rs
	
	
	
c
Gst|j
|jt|�
|
�S(
N(R:R8RKtstr(RNR9((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt
cache_pathxs
N(t__name__t
__module__R$RIRORQ(((s-/usr/libexec/kcare/python/kcarectl/libcare.pyRGns
c
sd
��
��
fd�}
|
S(Nc
Ss
d\}
}z�|d	kr't
�}ni}g}xLt|�
D]>}|jdd
�||jd�
<|j|jdg��

q@Wtj|dd�

}djg|j�D]}dj|�
^q��
}
djt	|�
�
}Wd	tj
t|
d
t�

tj
t
|d
t�

Xd	S(s(KPT-1543 Save info about applied patchestslatest-versiontpackagetpatchest	cve_fieldtcves

t
 Nt
ensure_dir(RTRT(R$t
_libcare_infot_get_patches_infotgettextendR
textract_unique_cvesR6titemstsortedtatomic_writetLIBCARE_PATCHEStTruetLIBCARE_CVE_LIST(tinfotversionstcvestpackagestall_patchestrectcves_set((s-/usr/libexec/kcare/python/kcarectl/libcare.pytsave_current_state}s









1

cs/d}z�||
�}|SWd�
|�

XdS(
N(
R$(RARBRf(RDRm(s-/usr/libexec/kcare/python/kcarectl/libcare.pyRE�s




((RDRE((RDRms-/usr/libexec/kcare/python/kcarectl/libcare.pytrefresh_applied_patches_list|s
	c
Cstj
pd
}t|�
}t|
j��
}
tjtj|d�|||
d�}|dtj	d|�7}tj|d�}y"t
jtj
�
|dt�

}Wn3tjk
r�


tjt||
�dt�


�n
Xtj|j�

ttj|j��
�
}|jd	g�}tj|�
s?
tjd
j|�
�
�
nt||
|d|jd�
�}	t |d�
}
t||
|
d
�}t!j"j#|�
s�
t!j"j$|�
dkr-tj|d�
}y,t
j%||dtj&dt
j'|	�
�
Wq-t(k
r)
}
|j)d kr#tj*d�
�
n�q-Xnt||
|
�}
dd|d|
dg}t+j,|dtdt�
\}}}|r�tj-dj|||�dd�

�
nt||
d�}t!j"j.|�
r�t!j"j/|�
r�tj|�

nt!j0|
|d�
t!j1|d|�
dS(!Ntmaint
us	latest.v1s?info=tupdateR&t
check_licenset
ignore_errorsR
skLatest LibCare patchset for {0} is incompatible with the current kernecare package version, please upgrade.RLRMspatch.tar.gzit	patch_urltcheck_signaturethash_checkeri�
i�
sKC+ licence is requiredttartxfs-Cs--no-same-ownertcatch_stdouttcatch_stderrs(Patches unpacking error: '{0}' '{1}' {2}tstatusspatches unpacking errortlatests.tmp(i�
i�
(2RtPREFIXRtstripR
tget_patch_server_urltLIBNAME_MAPR]Rtencoded_server_lib_infoRtwrap_with_cache_keyRturlopen_authR@RtNotFoundtshutiltrmtreeR:RdRtset_feature_flags_from_headerstheadersRtnstrtreadR
thas_lc_capabilitiestCapabilitiesMismatchR?RGRPR4R5texiststgetsizet	fetch_urlt
USE_SIGNATUREtget_hash_checkerRtcodetNoLibcareLicenseExceptionR	trun_commandt
KcareErrortislinktisdirtsymlinktrename(R8tbuild_idtpatch_leveltprefixturlt	cache_dsttresponsetmetatrequired_capabilitiesRLtplevelt
patch_pathtextdsttcmdR�tstdouttstderrt	link_name((s-/usr/libexec/kcare/python/kcarectl/libcare.pytfetch_userspace_patch�sP



'



"







"

+


,





$


!
%


c

Csj|t_
|st�
ntjd
|r/dnd�

|rFt�
ntjjd|r^dnd�

dS(NtLIBCARE_DISABLEDtFALSEtYESslibcare service is tenabledtdisabled(	RR�tlibcare_server_stopRt
update_configtlibcare_server_startRtkcarelogRf(
R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pytset_libcare_status�s









c
Cs�tj
stjjtj�
r�tjtjd
dg�

tjtjd
dg�

tjtjddg�

tjtjddg�

nAytjdd	�dd
g}Wnt	k
r�


dSXtj|�

dS(
Ntstopslibcare.socketslibcare.servicesreset-failedtlibcaretservices
/usr/sbin/s/sbin/(s
/usr/sbin/s/sbin/(
RtSKIP_SYSTEMCTL_CHECKR4R5R�t	SYSTEMCTLR	R�tfind_cmdR"(
R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR��s








cCs3
tj
stjjtj�
r�tjtjd
ddgdtdt�
\}}
}
|dkradStjtjddg�

tjtjddg�

tjtjd	d
g�

tjtjd	dg�

tjtjddg�

nNt	�r�dSytj
dd�d
dg}Wntk
r!



dSXtj|�

dS(Ns	is-actives--quietslibcare.serviceRyRziR�slibcare.socketsreset-failedR�tstartR�s
/usr/sbin/s/sbin/(s
/usr/sbin/s/sbin/(RR�R4R5R�R�R	R�Rdtlibcare_server_startedR�R"(R�R+R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR��s&








	





csg
d
jd�t
|
pg�
D�
�
}ddg}�sM|dd|g7}nyt|�}Wn1tk
r�
}
tjdj|�
dd	�

�
n
Xg}xN|jd
�
D]=}|r�y|jt	j
|�
�

Wq�tk
r�


q�Xq�q�Wg|D]3}i|jd�
d6|jd�
d6|d
6^q�}x8|D]0}t
�f
d�|d
j�D�
�
|d
<q/
W|S(Nt
|c
ss|]}
dj|
�
V
qd
S(s({0})N(
R?(t.0tproc((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>

sRfs-js-ls-rs/Gathering userspace libraries info error: '{0}'R{suserspace libs info errors

tcommtpidR&c
3s4|]*\}
}d|ks"�r|
|fV
qd
S(tpatchlvlN((R�t
kt
v(
tpatched(s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>#
s(R6RaR=R"RR�R?tsplittappendtjsontloadst
ValueErrortpoptdictR`(R�tlimittregexpR�tlinesRCtresulttline((
R�s-/usr/libexec/kcare/python/kcarectl/libcare.pyR[	
s&
%





"





@

.c
	Cs�t�}
xJ|D]B}x9|d
j
�D]'\}}|
j|d|df�

q'WqWg}t�}x�|D]{}xr|
D]j\}}	t||t|	�
d�}
tjj|
�
ryt	|
d��}|j
tj|�
�

WdQXqyqyWqlW|S(NR&RKR�s	info.jsont
r(
RR`taddR2R:RPR4R5tisfiletopenR�R�tload(RfRVRkR+tdataR�tumapR�R�R�tpatch_info_filenametfd((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR\(
s
	



#

	






'
cCs
tt
��
S(
N(R\R[(((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_patch_info_basic8
sc
Cs3t�}|st
jd
�

ntji
|d6�
S(NsNo patched processes.R�(R�RR>R�tdumps(
R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_patch_info=
s	


c
Cs3t�}|st
jd
�

ntji
|d6�
S(NsNo patched processes.R�(R[RR>R�R�(
R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_infoE
s	


cCs=i}x0t�D]%}
|
j
d
d�||
j
d�
<qW|S(Nslatest-versionRTRU(R�R](R�Rk((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt_libcare_versionM
s


#
c
Cs7x0t�j
�D]\}
}|j|
�
r|SqWd
S(NRT(R�R`R%(R8RUR*((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_versionT
s



c

Csd
jd�|D�
�
dS(NRTc
ss"|]}
tj
|
�
dV
qd
S(t
N(R
tbstr(R�t
p((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>\
sR�(
R6(
tparams((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_client_format[
s
c
Cs:x$tD]}t
jj|�
r|SqWtjd
�
�
dS(NsLibcare socket is not found.(tLIBCARE_SOCKETR4R5R�RR�(
tlibcare_socket((s-/usr/libexec/kcare/python/kcarectl/libcare.pytget_available_libcare_socket_
s




cGs
tj
rtjd
�
�
ntjtjtjd�}
|
jd�

d}z�|
jt	��

|
jtj
�

t|�
}tj
djd|�
�

|
j|�

x-tr�|
jd�
}|s�Pn||7}q�W|jdd	�}tj
d
jd|�
�

|SWd|
j�
XdS(NsLibcare is disabled.ii
RTsLibcare socket send: {cmd}R�isutf-8treplaces!Libcare socket recieved: {result}R�(RR�RR�tsockettAF_UNIXtSOCK_STREAMt
settimeouttconnectR�tLIBCARE_SOCKET_TIMEOUTR�RtlogdebugR?tsendallRdtrecvtdecodetclose(R�tsocktresR�R�R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR=f
s(
	












	






c
Cs�x�|D]�}
ytd
t
|
�
�
Wn1tk
rW
}
tjdj|�
dd�

�
n
Xytd�

Wqtk
r�
}
tjdj|�
dd�

�
qXqWdS(Ntstorages(Userspace storage switching error: '{0}'R{suserspace storage switch errorRqs%Userspace patch applying error: '{0}'suserspace patch apply error(R=R:R"RR�R?(R�R�RC((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_patch_apply~
s





"


c
CsFytd
�

Wn1t
k
rA
}
tjdj|�
dd�

�
n
XdS(Ntunloads&Userspace patch unloading error: '{0}'R{suserspace patch unload error(R=R"RR�R?(
RC((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_unload�
s


c
Cs@ytd
�

Wn+t
k
r;
}
tjdj|�
�
�
n
XdS(s;Reload libcare-server plugin without restarting the server.trepluginsUserspace replugin error: '{0}'N(R=R"RR�R?(
RC((s-/usr/libexec/kcare/python/kcarectl/libcare.pytlibcare_replugin�
s


R�cCs�t�
|t
jkr$tjr$dSt�}|
dkrNt|j��
}
ng}x'|
D]}|j	|j
|g��

q[W|s�tjd
j
|
�
�

dStd|�
\}}}}|r�tjd�
�
n|s�tjd�

dStjtjjt
jd��

t�
yt|
�

Wn8tjk
rV

}	
tjt|	�
�

tjd�
�
n
Xt�}
t|
�
}ttd�|
D�
�
�
s�
dStjdj
d	|�
�

tjd
j
d|�
�

td�|j�D�
�
}td
�|j�D�
�
}
||
}t d�|j�D�
�
}tjdj
dt!|�
d|��

x9|j"�D]+\}}tjdj
|t!|�
��

qNW|
S(s0Patch userspace processes to the latest version.sNo such userspace patches: {0}R�s8There were errors while patches downloading (unpacking).sNo patches were found.R3s)There were errors while patches applying.c
ss|]}
|
dV
qd
S(R&N((R�titem((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>�
ssPatched before: {before}tbeforesPatched after: {after}tafterc
ss"|]}
|
D]}|V
q
qdS(
N((R�R`R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>�
sc
ss"|]}
|
D]}|V
q
qdS(
N((R�R`R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>�
sc
ss|]}
t|
�
V
qdS(
N(
tlen(R�R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pys	<genexpr>�
ss�The patches have been successfully applied to {count} newly discovered processes. The overall amount of applied patches is {overall}.tcounttoveralls*Object `{0}` is patched for {1} processes.N(#trotate_libcare_logsRtUPDATE_MODE_AUTORtLIB_AUTO_UPDATER$R2RtkeysR^R]RtloginfoR?tcheck_userspace_updatesRR�R
trestore_selinux_contextR4R5R6R7R�R>RPR[t_get_userspace_procstanyR�RtvaluestsumR
R`(tmodeR�R�tprocess_filtertuserspace_patchtfailedtsomething_foundR+R�R�t
data_afterR�tuniq_procs_aftertuniq_procs_beforetdiffR
R�R�((s-/usr/libexec/kcare/python/kcarectl/libcare.pytdo_userspace_update�
sR
	











	







	
#cCsnz5yt�\}}
}}
Wnt
jk
r3


d
SXWdt�
X|rJd
S|rTdStjdd�
rjdSdS(Nii
tfilenames.libcarestatusii(R
RR�R
Rtstatus_gap_passed(R
R+tlibs_not_patched((s-/usr/libexec/kcare/python/kcarectl/libcare.pytget_userspace_update_status�
s


	

c
Cs�i}
xy|D]q}xh|d
j�D]V\}}|j
d�
r$||
krXg|
|<n|
|j|d|df�

q$q$Wq
W|
S(NR&R�R�R�(R`R]R�(RfR�R�R8Rk((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR

�
s








*
c
Cset�}
xU|D]M}xD|d
j
�D]2\}}|
j||d|jdd�f�

q'WqW|
S(NR&RKR�i(RR`R�R](RfR�R�R8Rk((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt_get_userspace_libss

	



.
c
Csv
|s>t�}
g}g|
j
�D]}|j|�
^q"
ntd
td|�}t|�
}t}}t}x�t|�
D]�}|\}	}
}y/t|	|
|�
t}|dkr�t}nWq|t	j
k
r�
}
t}tjt
|�
�

q|t	jt	jfk
r




q|t	jk
r#



�q|t	jk
rQ

}

t}tjt
|
�
�

q|Xq|Wtjdd�

||||fS(NR�R�iR
s.libcarestatus(R2R
R^R[R@R

RdR
R�RR�RtlogwarnRPR�R�tAlreadyTrialedExceptionR�R>Rttouch_status_gap_file(R�R�R&tdata_beforeR�R
R
R
RkR8R�R�t
eR�((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR
s6

	

)



















cCs�
d
}d}
tj
ddt�

}|r�y(tj|tgdt�

\}}}
Wn%tk
rv
}
d}t|�
}
n
X|r�tj	dj
|
�
dt�


q�ntjd	dt�


d
}tj
j|�
s�dStjd}y�tj|�
}tjd
�
}g|D]*}	|j|	�
r
tj
j||	�^q
}
g|
D]}tj
j|�
|f^q:
}|jdt�

d
}
xY|D]Q\}}|
tj
j|�
7}
|
|kr{
tj|�

tjjd|�
q{
q{
WWn$tk
r�



tjddt�


n
XdS(NiRTt	logrotatet	raise_excRzi
s5failed to run logrotate for libcare logs, stderr: {0}R<slogrotate utility wasn't founds/var/log/libcare/iis^\d+\.log.*treverses%Removed %s because of logs size limits)Failed to cleanup libcare server logfilesi(R	R�R@R�tLIBCARE_LOGROTATE_CONFIGRdR"RPRR>R?R
R4R5R�Rt!LIBCARE_PIDLOGS_MAX_TOTAL_SIZE_MBtlistdirtretcompiletmatchR6tgetctimetsortR�tremoveR�Rftlogexc(trcR�tlogrotate_pathR+R!
tlibcare_log_directorytmax_total_sizet	log_filest	pidlog_retfntpidlog_filestfptpidlog_files_with_ctt
total_sizetfilepath((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR
3s<




(



"






7+








cCsbytj
d
d	�ddg}Wntk
r3


tSXtj|dtdt�
\}
}}|
dkS(
sKAssume that whenever the service is not running, we did not patch anything.R�s
/usr/sbin/s/sbin/R�R{RyRzi(s
/usr/sbin/s/sbin/(R	R�R"R@R�Rd(R�R�R+((s-/usr/libexec/kcare/python/kcarectl/libcare.pyR�]s



$
(s/run/libcare/libcare.socks/var/run/libcare.sock(MR�R4R(
R�R�RTRR
RRRRRRRR	R
RRR
tpy23RRRR@ttypingRRRRRtLIBCARE_CLIENTR�RcReR%
R�RR$R#tcachedR1R2R:RFtintRGRnR�R�R�R�RdR[R\R�R�R�R�R�R�R�R=R�tlog_all_parent_processesR�R�ttrack_update_statustskip_if_no_selinux_moduletUPDATE_MODE_MANUALR
R
R

R
R
R
R�(((s-/usr/libexec/kcare/python/kcarectl/libcare.pyt<module>sl



^
+




				5	
									


		




!H		#	*