File: //lib/python3/dist-packages/uaclient/__pycache__/security_status.cpython-310.pyc
o
S��c$f � @ s. d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl
m Z d dl m
Z
mZmZmZmZ d dlZd dlmZ d dlmZ d d lmZ d d
lmZmZ d d l m Z m Z d d l m Z d d
l!m"Z" d dl#m$Z$ d dl%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/ dZ0G dd� de�Z1G dd� de�Z2e dd�dd� �Z3e dd�dd� �Z4dedeej5j6 f fd d �Z7d ej5j6de8fd d �Z9d!e8d"ee8e
f de8fd#d$�Z:d%eej5j6 dee8eeej5j;e8f f fd&d'�Z<d(edee8e
f fd)d*�Z=deee8e
f fd+d,�Z>d-d.� Z?d/ee8eeej5j;e8f f d"ee8e
f deee8e
f fd0d1�Z@d(edee8e
f fd2d3�ZA 4 5dVd6ee8eej5j6 f d7e8d8eBddfd9d:�ZCd;d<� ZDd=d>� ZEd?e8d@e8dAe dBe dCeFdDeFdEeBfdFdG�ZGg fdHeej5j6 dIeej5j6 fdJdK�ZHd(efdLdM�ZIdNdO� ZJdPdQ� ZKdRdS� ZLdTdU� ZMdS )W� N)� defaultdict)�Enum)� lru_cache)�choice)�Any� DefaultDict�Dict�List�Tuple)�messages)�UAConfig)�ESM_APT_ROOTDIR)�ESMAppsEntitlement�ESMInfraEntitlement)�ApplicabilityStatus�ApplicationStatus)�
LIVEPATCH_CMD)�ProcessExecutionError)�status)
�REBOOT_PKGS_FILE_PATH�get_distro_info�get_kernel_info�get_platform_info�is_current_series_lts� is_supported� load_file�
should_reboot�subp�which)� esm-infra�esm-appsc @ s e Zd ZdZdZdZdZdZdS )� UpdateStatusz2Represents the availability of a security package.�upgrade_available�pending_attach�pending_enable�upgrade_unavailableN)�__name__�
__module__� __qualname__�__doc__� AVAILABLE�
UNATTACHED� NOT_ENABLED� UNAVAILABLE� r. r. �:/usr/lib/python3/dist-packages/uaclient/security_status.pyr! ( s r! c @ s e Zd ZdZdZdZdS )� RebootStatus�yes�noz yes-kernel-livepatches-appliedN)r& r' r( �REBOOT_REQUIRED�REBOOT_NOT_REQUIRED�!REBOOT_REQUIRED_LIVEPATCH_APPLIEDr. r. r. r/ r0 0 s r0 )�maxsizec C sT t � d } dd�| �fddd�| �fddd �| �fd
dd �| �fddd �| �fd
iS )
N�series�Ubuntuz {}-security�standard-security�
UbuntuESMAppsz{}-apps-securityr � UbuntuESMz{}-infra-securityr z{}-apps-updatesz{}-infra-updates)r �format)r7 r. r. r/ �%get_origin_information_to_service_map6 s
�r= c C s, z t jtd�} W | S ty i } Y | S w )N)�rootdir)�apt�Cacher
� Exception)�cacher. r. r/ �
get_esm_cacheB s ��rC �return�strc C sF t t�} t�� }dd� |D �}|| d< |D ] }| t|� �|� q| S )Nc S s g | ]}|j r|�qS r. )� is_installed��.0�packager. r. r/ �
<listcomp>T s z4get_installed_packages_by_origin.<locals>.<listcomp>�all)r �listr? r@ �get_origin_for_package�append)�resultrB �installed_packagesrI r. r. r/ � get_installed_packages_by_originN s rQ rI c C st | j j}t|�dkr| j | jkrdS | jj}|D ] }t� �|j|jfd�}|tv r-| S |jdkr7|j S qdS )a
Returns the origin for a package installed in the system.
Technically speaking, packages don't have origins - their versions do.
We check the available versions (installed, candidate) to determine the
most reasonable origin for the package.
� �unknown� r8 � third-party)
� installed�origins�len� candidater= �get�origin�archive� ESM_SERVICES� component)rI �available_originsr[ �servicer. r. r/ rM ] s �
�rM � service_name�ua_infoc C sP | dv s|d r| |d v rt jjS |d st jjS | |d v r$t jjS t jjS )z�Defines the update status for a package based on the service name.
For ESM-[Infra|Apps] packages, first checks if Pro is attached. If this is
the case, also check for availability of the service.
)r9 �standard-updates�attached�enabled_services�entitled_services)r! r* �valuer+ r, r- )ra rb r. r. r/ �get_update_status| s �
� rh �packagesc
C s t t�}t� }| D ]{}|jr�|jD ]?}||jkrPd}|jD ] }t� �|j |j
f�}|r9|| � ||j f� d} nq |jd }|sPd|j
vrP|d � ||j f� q|j
|v r�||j
} | jD ]%}||jkr�|jD ]}t� �|j |j
f�}|r�|| � ||j f� nqhq^q |S )z�Filters a list of packages looking for available updates.
All versions greater than the installed one are reported, based on where
it is provided, including ESM pockets, excluding backports.
FTr � backportsrc )r rL rC rF �versionsrV rW r= rZ r[ r\ rN �site�name)
ri rO � esm_cacherI �version�counted_as_securityr[ r` �expected_origin� esm_packager. r. r/ �filter_security_updates� sP
��
����
����rs �cfgc C s� dg g d�}t | dd�}|d r?d|d< |d D ]&}|d tv r>|d d kr/|d
�|d � |d d kr>|d
�|d � q|S )z7Returns the Pro information based on the config object.F)rd re rf T)rt �show_allrd �servicesrm �entitledr1 rf r �enabledre )r r] rN )rt rb � status_dictr` r. r. r/ � get_ua_info� s � �rz c C s� z t tdddg�\} }W n ty g Y S w zt�| �}W n tjy5 d�| �}t�|� g Y S w |� d�}|rm|d � d�}t
� j }|d urm||krm|d � di �}|� d d
�d krm|� d g �}d
d� |D �S g S )Nr �--format�json�)Could not parse Livepatch Status JSON: {}�Statusr �Kernel� Livepatch�StaterT �applied�Fixesc S s& g | ]}|� d d�|� dd�d��qS )�NamerT �Patched)rm �patched)rZ )rH �fixr. r. r/ rJ � s
�
��z,get_livepatch_fixed_cves.<locals>.<listcomp>) r r r r| �loads�JSONDecodeErrorr< �logging�debugrZ r � proc_version_signature_version) �out�_err�livepatch_output�msg� status_list�lp_kernel_version�our_kernel_version�livepatch_status�fixesr. r. r/ �get_livepatch_fixed_cves� s6 �
�
�� �r� c C sd t � stjS ztt�} W n ty tj Y S w | �� }t|�}d}d}|D ] }t �
||�r3|d7 }q'||kr;tjS t d�sBtjS z t t
dddg�\}}W n ty_ t�d� tj Y S w zt�|�}W n tjy~ d �|�} t�| � tj Y S w |�d
i g�}
t� } | j} d }
|
D ]}|�d �}|r�|| kr�|�d
i ��dd �}
q�|
dkr�tjS tjS )Nz^(linux-image|linux-base).*r rR zcanonical-livepatchr r{ r| z Could not query Livepatch Statusr} r~ rT r r� r� r� )r r0 r4 r r �FileNotFoundErrorr3 �splitrX �re�matchr r r r r� r� r| r� r� r< rZ r r� r5 )� pkg_list_str�pkg_list�num_pkgs� kernel_regex�num_kernel_pkgs�pkgr� �_�livepatch_status_dictr� �patch_statuses� kernel_info� kernel_name� patch_state� patch_status�livepatch_kernelr. r. r/ �get_reboot_status s`
� �
�
��
�
�r� � security_upgradable_versionsc C sR g }| � � D ] \}}t||�}|D ]\}}|�|jj|j||||jd�� qq|S )N)rI ro ra r r[ �
download_size)�itemsrh rN rI rm ro �size)r� rb �updatesr` � version_listr ro r[ r. r. r/ �create_updates_listH s
��� r� c C s t | �}d|i}t� }|d }t|�|d< t|�}g |d< t||�}t|d �|d< t|d �|d< t|d �|d
< t|d �|d < t|d
�|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t� j|d< d||dt� id �S ) ag Returns the status of security updates on a system.
The returned dict has a 'packages' key with a list of all installed
packages which can receive security updates, with or without ESM,
reflecting the availability of the update based on the Pro status.
There is also a summary with the Ubuntu Pro information and the package
counts.
�uarK �num_installed_packagesrc �main�num_main_packages�
restricted�num_restricted_packages�universe�num_universe_packages�
multiverse�num_multiverse_packagesrU �num_third_party_packagesrS �num_unknown_packagesr �num_esm_infra_packagesr �num_esm_apps_packages�num_esm_infra_updates�num_esm_apps_updatesr9 � num_standard_security_updates�reboot_requiredz0.1�
fixed_cves)�_schema_version�summaryri � livepatch)rz rQ rX rs r� r� rg r� )rt rb r� �packages_by_originrP r� r� r. r. r/ �security_status_dict` sB
���� �r� rK F�
package_lists�
show_items� always_showc
C sZ t | d �}ttjj|d�� dt t|��d }|dv r;t | d �t | d � t | d � }ttjj||d d
d �� |d v rgt | d
�t | d � t | d � }|sU|rgttjj|||dkrad nddd �� |dv r�t | d �}|su|r�tj}|dkrtj}t|j||d�� |dv r�t | d �} | s�|r�ttj j|| | dkr�d ndd�� td� d S )NrK )�count� rR )rK r r� r� r �s�Main/Restricted)�offsetr� �plural�
repository)rK r r� r� r rT �Universe/Multiverse)rK rU rU )r� r� )rK rS rS )r� r� r� )
rX �printr �SS_SUMMARY_TOTALr< rE �SS_SUMMARY_ARCHIVE�SS_SUMMARY_THIRD_PARTY_SN�SS_SUMMARY_THIRD_PARTY_PL�SS_SUMMARY_UNAVAILABLE)
r� r� r� �total_packagesr� � packages_mr� packages_um�packages_thirdpartyr� �packages_unknownr. r. r/ �_print_package_summary� sh
�
����
�
���� �� r� c C sJ t � d } t| �j}d�t|j�t|j��}ttj j|d�� td� d S )Nr7 z{}/{}��daterT )
r r �eolr< rE �month�yearr� r �SS_INTERIM_SUPPORT)r7 �eol_dater� r. r. r/ � _print_interim_release_support� s
r� c C sF t � d } t| �r t| �j}ttjjt|j �d�� d S ttj
� d S )Nr7 r� ) r r r r� r� r �SS_LTS_SUPPORTr< rE r� �SS_NO_SECURITY_COVERAGE)r7 r� r. r. r/ �_print_lts_support� s
r� r` r� �service_status�service_applicability�installed_updates�available_updates� is_attachedc
C s� t � d }t|�j}|tjkr2tjj|| t|j �d�} |r-| tj
j||dkr(dndd�7 } t | � n7tj j| |t|j �d�} |rQ| tj
j||dkrKdndd�7 } n| d7 } t | � |ri|tjkrit tjj| d �� t d� d S )
Nr7 )r� r` r� rR rT r� )r� r� )r` r� r� �.�r` )r r �eol_esmr �ENABLEDr �SS_SERVICE_ENABLEDr< rE r� �SS_SERVICE_ENABLED_COUNTSr� �SS_SERVICE_ADVERTISE�SS_SERVICE_ADVERTISE_COUNTSr �
APPLICABLE�SS_SERVICE_COMMAND)
r` r� r� r� r� r� r� r7 � eol_date_esm�messager. r. r/ �_print_service_support� s@
��
�
��� r� � package_list�reference_listc C s� d}dd� | D �}dd� |D �}|D ] }||v r)|dj tjj|tjjd�d 7 }q||d 7 }qtd�tj|d d
d
d ��� td� |rF|n|}ttj j t
|�d �� d S )
NrT c S � g | ]}|j �qS r. �rm rG r. r. r/ rJ � z'_print_package_list.<locals>.<listcomp>c S r� r. r rG r. r. r/ rJ r z {bold}{package_name}{end_bold})�bold� package_name�end_boldr� �
�P F)�width�break_long_words�break_on_hyphens)rI ) r< r �TxtColor�BOLD�ENDCr� �join�textwrap�wrap�SS_POLICY_HINTr )r� r� �package_string�
package_names�reference_namesr �hint_package_listr. r. r/ �_print_package_list s8 ��� ���
r c C s� t | ��� d }t | ��� d }t| ��� d }t| ��� d }t� d }t� }t| �d }t� }t|d |d |d �d } t|d |d |d �d }
t |� t
t j � t
d
� |snt
|�rgt� t
t j� d S |tjkrvt� d
} |s|d } t
t jj| d �� t
d
� tdd
||t|d �t| �|d� |d s�|d s�|d r�td d||t|d �t|
�|d� |s�t
t j� d S d S )Nr r7 rd r� r� r r� r� r rT z NOT)� not_attachedr� �r` r� r� r� r� r� r� r� )r �application_status�applicability_statusr r r rz rQ rs r� r� r � SS_HELP_CALLr r� �SS_NO_INTERIM_PRO_SUPPORTr �DISABLEDr� �SS_IS_ATTACHEDr< r� rX �
SS_LEARN_MORE) rt �esm_infra_status�esm_infra_applicability�esm_apps_status�esm_apps_applicabilityr7 �is_ltsr� r� �"security_upgradable_versions_infra�!security_upgradable_versions_appsr r. r. r/ �security_status8 s�
�
��������
� ���
�
�r& c C �T t � } | d }t| ddd� |r#ttj� td� td� t|� d S ttj� d S )NrU T�r� r� rT � Packages:)rQ r� r� r �SS_THIRD_PARTYr �SS_NO_THIRD_PARTY)r� �third_party_packagesr. r. r/ �list_third_party_packages� s �
r- c C r' )NrS Tr( rT r) )rQ r� r� r �SS_UNAVAILABLEr �SS_NO_UNAVAILABLE)r� �unknown_packagesr. r. r/ �list_unavailable_packages� s �
r1 c
C s8 t � }|d }|d |d }|| }t� }t|�d }|D ]
\}}|�|j� q t� d } t� }
t| ��� d } t| �� � d } t
|ddd� |
sXt | �rQt � t
tj� d S | tjkrdt� t
d� tdd | | t|�t|�d
d � t
tjjdd �� t
d� t | �s�t
tjjdd �� t
d
� t|t|�� d S d S )Nr r� r� r7 r Tr( rT r� Fr r� r) )rQ �setrs �addrI r r r r r r� r r� r� r r r r r� r� rX �SS_SERVICE_HELPr< �SS_BOLD_PACKAGESr rL )
rt r� �infra_packages� mr_packages�all_infra_packages�
infra_updatesr� �updater� r7 r# r r r. r. r/ �list_esm_infra_packages� sV �
��
� �r; c C s t � }|d }|d |d }|| }t� }t|�d }|D ]
\}}|�|j� q t� } t| ��� d }
t| ��� d } t |ddd� | sLt
t j � d S t
dd|
| t|�t|�dd � t
t jjdd
�� t
d � |r�t
t jjdd
�� t
d � t|t|�� d S d S )
Nr r� r� r Tr( r� Fr r� rT r) )rQ r2 rs r3 rI r r r r r� r� r r r� rX r4 r< r5 r rL ) rt r� �
apps_packages� um_packages�all_apps_packages� apps_updatesr� r: r� r# r! r" r. r. r/ �list_esm_apps_packages� sH �� �
� �r@ )rK F)Nr| r� r� r � collectionsr �enumr � functoolsr �randomr �typingr r r r r
r? �uaclientr �uaclient.configr �uaclient.defaultsr
�uaclient.entitlementsr r �(uaclient.entitlements.entitlement_statusr r � uaclient.entitlements.livepatchr �uaclient.exceptionsr �uaclient.statusr �uaclient.systemr r r r r r r r r r r] r! r0 r= rC rI �PackagerQ rE rM rh �Versionrs rz r� r� r� r� �boolr� r� r� �intr� r r& r- r1 r; r@ r. r. r. r/ �<module> s� 0
�
�
�;$F��
�
�8����
�? ������
�0�
�
�$J 6