ruạṛ
a �u:j�4 � @ s� U d dl Z d dlZd dlZd dlZd dlZd dlmZmZ d dlm Z d dl m Z d dl m Z d dlmZmZmZ dae ed< G dd � d �Zd d � Zed kr�e� dS ) � N)�List�Dict)� ErrorCode)� BartError)�JobActivityLogger)� read_homedir�does_path_exists�run_sudo_as_user�activity_loggerc @ s� e Zd ZdZed�dd�Zdeeeeed�dd�Zee eeeee d �d d �Z eee ed �d d�Z deeee eee d�dd�Z dee eee ee eee f d�dd�Zed eee eeee e d�dd��ZdS ) �ImmutablePathCheckerzDSimplified immutable path checker with clean separation of concerns.)r c C s || _ d S )N)�logger)�selfr � r �S/opt/bart/bart_venv/lib/python3.9/site-packages/app/utils/immutable_path_checker.py�__init__ s z ImmutablePathChecker.__init__N)�path� base_path�homedir�username�returnc C s� t j�|�rt j�|�S |�d�}|rH|�|d �rH|t|�d d� }||kr�t j�||�}|dkr�|�|d �r�|t|�d d� }t j�t j�||��S )zENormalize a path to an absolute path, handling various input formats.�/� N�.) �osr �isabs�normpath�strip� startswith�len�relpath�join)r r r r r �baseZ dest_relativer r r �_normalize_path s z$ImmutablePathChecker._normalize_path)� exclude_paths�dest_absr r r c C sX |sg S t j�|�}g }|D ]6}| �||||�}||ksH|�|t j �r |�|� q |S )z$Normalize all exclude paths upfront.)r r �abspathr" r �sep�append) r r# r$ r r � homedir_abs�exclude_paths_absZ exclude_path� exclude_absr r r �_normalize_exclude_paths) s z-ImmutablePathChecker._normalize_exclude_paths)r$ r) r c C s� d|g}|rrdg}t |�D ](\}}|dkr4|�d� |�d|g� q|�d� d�dd � |D ��}|�|d dg� |�d � d�d d � |D ��}|S ) z3Build find command with exclusions in clean format.z /usr/bin/find�\(r z-oz-path�\)� c s s$ | ] }|d v r|nt �|�V qdS ))r, r- N��shlex�quote��.0�pr r r � <genexpr>H s �z;ImmutablePathChecker._build_find_command.<locals>.<genexpr>z-prunez-print0c s s, | ]$}d |v rd|v r|nt �|�V qdS )r, r- Nr/ r2 r r r r5 R s �)� enumerater' �extendr ) r r$ r) Zfind_cmd_partsZexclude_expr_parts�ir* Z exclude_expr�find_cmdr r r �_build_find_command: s" � �z(ImmutablePathChecker._build_find_command)�destr r# r r c C s� g }|p g }t |�s*| j�d|� �� |S tj�|�}|s�|�tj�}tt |�dd�D ]D}tjtjj |d|� � } | � d�rVt |d|� �dkrV| } q�qV|s�d|� �} | j� | � t tj| ��|s�tj�|�}�z| �||||�} | �|| �} d} d | � �}d }| � d |� d |� �}t|d d |g�}t� }|�r�|�� �r�|�� D ]�}|�� }|�s\�qF|�dd�}t |�dk�rz�qF|\}}|�� }tj�|�}||k�s�|� |tj ��rF||v�rF|�|� |�||f� �qF|�� W n� t �y� } z�t |�� � }t |�} d|v �r.| j�d� |W Y d}~S d|v �sBd|v �rjd|� d| � �} | j� | � t tj | ��d|� d| � �} | j� | � t tj | ��W Y d}~n d}~0 0 |S )zECollect immutable paths under destination, excluding specified paths.zPath does not exist: r ���Nz/home� z&Could not determine homedir from path z/usr/bin/lsattr -dz/usr/bin/xargs -0 -n 1 z�awk '$1 ~ /i/ && $NF !~ /:$/ { cmd="test -d \"" $NF "\" && echo DIRECTORY || echo FILE" cmd | getline type close(cmd) print type, $NF }'z | z/bin/shz-cr zoperation not supportedzTFilesystem does not support file attributes, proceeding without immutable path checkzpermission deniedzpassword is requiredz5Permission denied while checking immutable paths for z: z$Failed to check immutable paths for )!r r �warnr r r% �splitr& �ranger r r �errorr r ZVALIDATION_FAILED�basenamer+ r: r �setr � splitlines�upperr �addr' �sort� Exception�str�lowerZPERMISSION_DENIEDZCOMMAND_FAILED)r r; r r# r �immutable_pathsr$ �partsr8 Zpotential_homedir� error_msgr) r9 Z lsattr_cmdZ xargs_cmdZ awk_scriptZpipeline�outputZ seen_paths�line� path_type�path_abs�eZ error_strr r r �collect_immutable_pathsY st "z,ImmutablePathChecker.collect_immutable_paths)�pathsr r# r r c C s� i }t j�|�}|s t j�|�}|D ]�}| �||||�}| �||||�} g } | D ]�\} } | �|t j �r�| t|�d� � t j�} | � | � � | d�� qP| |kr�t j� |�s�|} n| } | � | � � | d�� qP| � | � � | d�� qP| ||< q$|S )z5Check multiple paths for immutable files/directories.N)�typer ) r r r% rB r" rS r r& r �lstripr' rJ r )r rT r r# r �all_immutable_pathsr( r Z restore_destZimmutable_paths_with_typeZimmutable_paths_relativerP �abs_path�rel_pathr r r �check_multiple_paths� s: � � � z)ImmutablePathChecker.check_multiple_pathsF)r rT � cbs_job_id�is_clir# r c C s� t |t�rt|�}t||d�at�d� t|�}|sVd|� d�}t�|� tt j |��| t�}|� ||||�} g } | � � D ]} | � | � qzt| �} t�d| � d�� d|| | d�S ) z.Main entry point for checking immutable paths.)Zecho_to_stdoutz2<======== Starting Immutable Paths Check ========>zUser z does not exist on the server.z'Immutable paths check completed. Found z immutable path(s)z Immutable paths check completed)�messager �total_immutable_pathsrK )� isinstancerI �intr r �infor rA r r ZUSER_NOT_FOUNDrZ �valuesr7 r ) �clsr rT r[ r\ r# r rM �checkerZall_immutable_paths_dictrW � path_listZtotal_immutabler r r �check_immutable_paths� s* �z*ImmutablePathChecker.check_immutable_paths)N)NNN)NN)FN)�__name__� __module__� __qualname__�__doc__r r rI r" r r+ r: �tuplerS r rZ � classmethodr` �boolrf r r r r r s. � � � _ �� ) ��r c C sF t jdt jdd�} | jddd� | jddd� | jd td d � | jd d dd� | jdddd� | �� }dd� |j�d�D �}|s�tdt j d� t � d� d}|j r�dd� |j �d�D �}z�t j|j||jd |d �}|jr�ttj|d d �� n�td � td!� td"� td#|d � �� td$|d% � �� td&� |d' }|�r||D ]6}|�d(d)�}|�d*d+�}td,|�� � d-|� �� �qBntd.� td/� t � |d% d0k�r�d0nd� W n� t�y� } z*td1| � �t j d� t � d� W Y d} ~ n\d} ~ 0 t�y@ } z:td2| � �t j d� d0dl} | �� t � d� W Y d} ~ n d} ~ 0 0 dS )3z4Command-line interface for checking immutable paths.z@Check for immutable paths (chattr +i) for a given user and pathsaC Examples: # Check a single path python -m app.utils.immutable_path_checker_v2 cvlmhste "public_html/wp-content" 1234 # Check multiple paths (comma-separated) python -m app.utils.immutable_path_checker_v2 cvlmhste "public_html/wp-content,public_html/wp-includes" 1234 # Check with absolute paths python -m app.utils.immutable_path_checker_v2 cvlmhste "/home1/cvlmhste/public_html/wp-content" 1234 # Check with exclusions python -m app.utils.immutable_path_checker_v2 cvlmhste "public_html" 1234 --exclude "public_html/wp-includes,public_html/wp-admin" )� description�formatter_class�epilogr z%Username to check immutable paths for)�helprT zHComma-separated list of paths to check (relative to homedir or absolute)r[ zCBS job ID for logging)rU rq z --excluder# z3Comma-separated list of paths to exclude from check)r; rq z--json� store_truezOutput results as JSON)�actionrq c S s g | ]}|� � r|� � �qS r �r r2 r r r � <listcomp>" � zmain.<locals>.<listcomp>�,z Error: No valid paths provided)�filer Nc S s g | ]}|� � r|� � �qS r rt r2 r r r ru ) rv T)r rT r[ r\ r# r= )�indentz= ============================================================z IMMUTABLE PATHS CHECK RESULTSz<============================================================z Username: zTotal Immutable Paths: r^ z Details:rK rU �unknownr � z [z] z (no immutable paths)z============================================================= r zError: zUnexpected error: )�argparse�ArgumentParser�RawDescriptionHelpFormatter� add_argumentr` � parse_argsrT r? �print�sys�stderr�exitr# r rf r r[ �json�dumps�getrE r rH � traceback� print_exc) �parser�argsZ paths_listZexclude_paths_list�resultrK Z imm_path_objrP r rR r� r r r �main sf � � r� �__main__)r| r� r r0 r� �typingr r Zapp.errors.error_codesr Zapp.errors.exceptionsr Z app.utils.job_activity_loggerr Zapp.utils.utility_functionsr r r r �__annotations__r r� rg r r r r �<module> s vN
cải xoăn