ruạṛ
a �u:j]+ � @ s� U d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZ d dl m Z d dl m Z d dl mZ d dlmZmZmZ daeed< eed�d d �ZG d d � d �Zd d� Zedkr�e� dS )� N)�List�Dict�Optional)� ErrorCode)� BartError)�JobActivityLogger)�run_sudo_as_user� read_homedir�does_path_exists�activity_logger)�p�returnc C s t j�t j�| ��S �N)�os�path�normpath�abspath�r � r �S/opt/bart/bart_venv/lib/python3.9/site-packages/app/utils/immutable_path_scanner.py�_abs s r c @ s$ e Zd ZdZeed�dd�Zeed�dd�Zeee d�d d �Ze ee ee d �d d ��Z e ee ee ee d�dd��Z d"ee ee ee eef d�dd�Zd#ee e ee ee eef d�dd�Zeed�dd�Zeeeed�d d �Zed$eee eee ee e d �d d!��ZdS )%�ImmutableScannerz� Scan destination paths for immutable (chattr +i) files/dirs. - One pass: { lsattr -d -- DEST; lsattr -aR -- DEST; } - Emits homedir-relative paths (e.g., 'public_html/...'). - Excludes can be absolute or dest-relative. ��username�homedirc C s || _ t|�| _d S r )r r � homedir_abs)�selfr r r r r �__init__ s zImmutableScanner.__init__)� shell_cmdr c C s� z&t | jdd|g�}|d u r"W dS |W S ty� } zNt|��� }d|v sRd|v r`W Y d }~dS td|� dt|�� ���W Y d }~n d }~0 0 d S )Nz/bin/shz-c� zoperation not supportedz not foundzcommand failed: z stderr: )r r � Exception�str�lower� RuntimeError)r r �output�eZ error_strr r r � _run_as_user" s z ImmutableScanner._run_as_user)�dest_absr c C s: dt �|� d t �|� d }| �|�}|r6|�� S g S )Nz{ lsattr -d -- z; lsattr -aR -- z; })�shlex�quoter& � splitlines)r r' �cmd�outr r r � _lsattr_all/ s z ImmutableScanner._lsattr_all)� lsattr_linesr c C sj g }| D ]T}|� � }|r|�d�r$q|�dd�}t|�dkr>q|\}}d|v r|�t|�� qtt|��S )z Keep entries where first field contains lowercase 'i'. Skip '/path:' headers. Returns absolute paths. �:N� � �i)�strip�endswith�split�len�appendr �sorted�set)r. Zimm�ln�parts�attrsr r r r �_parse_immutable5 s z!ImmutableScanner._parse_immutable)� paths_abs� excludes_absr c sJ |s| S dd� |D �}g }| D ]&� t � fdd�|D ��r:q |�� � q |S )Nc S s g | ] }t |��qS r )r ��.0r% r r r � <listcomp>L � z4ImmutableScanner._apply_excludes.<locals>.<listcomp>c 3 s& | ] }� |kp � � |tj �V qd S r )� startswithr �sepr@ r r r � <genexpr>O rC z3ImmutableScanner._apply_excludes.<locals>.<genexpr>)�anyr7 )r> r? ZexclZkeptr r r �_apply_excludesH s z ImmutableScanner._apply_excludesN)r' �excludesr c C s� t |�}t|�sg S g }|p g D ]�}d}|�tj�r>t |�}n||�d�}|�| jd �rn|t| j�d d� }tj� || j �}|dkr�|�|d �r�|t|�d d� }t tj� ||��}||ks�|�|tj �r |� |� q | � |�}| �| �|�|�} g } | D ]|} | �| j tj ��r6| t| j �d� �tj�} n | | j k�rRtj�| j �} n| } tj�| ��rhdnd} | � | | d�� �q| jdd � d � | S ) z� Scan a single DEST (absolute) and return: [{"path": "public_html/...", "type": "file|directory"}, ...] N�/r0 �.� directory�file)r �typec S s | d | d fS �Nr rN r ��xr r r �<lambda>� rC z,ImmutableScanner.scan_dest.<locals>.<lambda>��key)r r rD r rE r3 r r6 r �relpathr �joinr7 r- rH r= �lstrip�basename�isdir�sort)r r' rI r? r% Z exclude_abs�baseZ dest_relative�linesZimm_absr, �full�rel�ptyper r r � scan_destU s< zImmutableScanner.scan_dest)� dests_absrI r c C sv g }|D ]}|� | �||�� qt� }g }|D ]2}|d |d f}||v rLq.|�|� |�|� q.|jdd� d� |S )zGScan multiple absolute dests and return a combined, de-duplicated list.r rN c S s | d | d fS rO r rP r r r rR � rC z,ImmutableScanner.scan_many.<locals>.<lambda>rS )�extendr` r9 �addr7 rZ ) r ra rI Z all_items�d�seenZuniq�itemrT r r r � scan_many� s zImmutableScanner.scan_many)r r c C s2 t |�}|s.d|� d�}t�|� ttj|��|S )N�User � does not exist on the server.)r r �errorr r �USER_NOT_FOUND)r r r � error_msgr r r � _read_homedir� s z ImmutableScanner._read_homedir)r r r r c C sV |� � }|s|S |�d�r"t|�S |�|d �rD|t|�d d� }ttj�||��S )a Accepts absolute, homedir-relative, or username-prefixed paths. - '/home1/u/public_html' -> absolute kept - 'public_html' -> homedir/public_html - 'u/public_html' (matches user) -> homedir/public_html rJ r0 N)r3 rD r r6 r r rV )r r r r r r r �_normalize_dest� s z ImmutableScanner._normalize_destF)r �paths� cbs_job_id�is_cli� exclude_pathsr c s� t ||d�at�d� t��}|sDd�� d�}t�|� ttj|��t|�� | �� d��� ��fdd�|D �}| �� d�} | j ||d�} t | �} t�d | � d �� d �| | d �S ) N)Zecho_to_stdoutz2<======== Starting Immutable Paths Check ========>rh ri r c s g | ]}�� �� |��qS r �rn �rA r �r Z scanner_tempr r r rB � rC z:ImmutableScanner.check_immutable_paths.<locals>.<listcomp>�ra rI z'Immutable paths check completed. Found z immutable path(s)z Immutable paths check completed)�messager �total_immutable_paths�immutable_paths) r r �infor rj r r rk r rg r6 ) �clsr ro rp rq rr r rl ra �scannerry Ztotal_immutabler ru r �check_immutable_paths� s& �z&ImmutableScanner.check_immutable_paths)N)N)FN)�__name__� __module__� __qualname__�__doc__r! r r& r r- � staticmethodr= rH r r r` rg rm rn � classmethod�int�boolr} r r r r r sB � � H � � � �r c s� t jdd�} | jddd� | jddd� | jdd d d � | jd d dd� | �� }|j�t��}|s�td�� d�tjd� t� d� t |�� dd� |j � d�D �}|s�tdtjd� t� d� t �� d��� ��fdd�|D �}|jr�dd� |j� d�D �ng }t �� d�}z|j||d�}W nD t�y` } z*td |� �tjd� t� d� W Y d }~n d }~0 0 �t|�|d �} |j�r�ttj| d d �� nHtd �� �� |D ]"} td!| d" � d#| d$ � �� �q�td%t|�� �� t� t|�d&k�r�d&nd � d S )'Nz;List immutable (chattr +i) entries under destination paths.)� descriptionr z'Run lsattr as this user (sudo -u USER).)�helpro zPComma-separated destinations (absolute, homedir-relative, or username-prefixed).z --excluder zKComma-separated excludes (absolute or dest-relative), applied to each dest.)�defaultr� z--json� store_truez Emit JSON)�actionr� z ERROR: User ri )rM r0 c S s g | ]}|� � r|� � �qS r �r3 rt r r r rB rC zmain.<locals>.<listcomp>�,z$ERROR: no destination paths providedr c s g | ]}�� �� |��qS r rs rt ru r r rB rC c S s g | ]}|� � r|� � �qS r r� r@ r r r rB rC rv zERROR: )r rx ry r1 )�indentzImmutable paths for user=�[rN z] r z TOTAL: r )�argparse�ArgumentParser� add_argument� parse_argsr r �print�sys�stderr�exitr ro r5 r �excluderg r r6 �json�dumps) Zap�argsr Z raw_destsZdestsrI r| ry r% �payloadrf r ru r �main� sZ ��� � r� �__main__)r� r� r r( r� �typingr r r Zapp.errors.error_codesr Zapp.errors.exceptionsr Z app.utils.job_activity_loggerr Zapp.utils.utility_functionsr r r r �__annotations__r! r r r� r~ r r r r �<module> s b=
cải xoăn