Server : Apache/2.4.52 (Ubuntu) System : Linux webserver 6.8.0-49-generic #49~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Nov 6 17:42:15 UTC 2 x86_64 User : www-data ( 33) PHP Version : 8.1.2-1ubuntu2.21 Disable Function : NONE Directory : /lib/python3/dist-packages/uaclient/cli/__pycache__/ |
o
���f�r �
@ s
d dl Z d dlZd dlmZmZmZmZmZmZm Z d dl
m Z m Z m
Z
mZmZ d dlmZmZ d dlmZ d dlmZmZ d dlmZmZ d dlm Z m Z m Z m Z d d l m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4 d d
l5m6Z6 d d l5m7Z8 d d l9m:Z: d d l9m7Z; d d
l<m=Z=m>Z> d dl?m@Z@mAZA d dlBmCZCmDZDmEZE d dlFmGZG d dlHmIZI d dlJmKZK d dlLmMZMmNZNmOZO d dlPmQZQ d dlRmSZS d dlTmUZU d dlVmWZW G dd� d�ZXdd� ZYd d � ZZd e+fd d �Z[d!e-fd"d#�Z\d$e]d%e^d&eGfd'd(�Z_d$e]d%e^d)e^d&eGfd*d+�Z` did,ee] d-e]d.ead/ead0ee] d1e]f d2d3�Zbd&eGd4e]d1e^fd5d6�Zcdjd7d8�Zdd&eGfd9d:�Zed&eGd1e^fd;d<�Zfd=ee] d1e]fd>d?�Zgd&eGd%e^d1e^fd@dA�Zhd&eGd1e^fdBdC�Zid&eGdDe]d1e^fdEdF�ZjdDe]d&eGd%e^d1e^fdGdH�Zk Idkd-e dJe]dKe]fdLdM�ZldNe]fdOdP�ZmdQeXdRe0fdSdT�ZndQeXdRe1fdUdV�ZodQeXdRe/fdWdX�ZpdQeXdRe$fdYdZ�ZqdQeXdRe%fd[d\�ZrdQeXdRe&fd]d^�ZsdQeXdRe*fd_d`�ZtdQeXdRe(fdadb�ZudQeXdRe'fdcdd�Zvd!e+d%e^d&eGd1ee ee f fdedf�Zwdgdh� ZxdS )l� N)�Dict�List�
NamedTuple�Optional�Set�Tuple�Union)�apt�
exceptions�messages�system�util)�attach_with_token�enable_entitlement_by_name)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)�CVE_OR_USN_REGEX� FixStatus�UnfixedPackage�status_message)�ESM_APPS_POCKET�ESM_INFRA_POCKET�STANDARD_UPDATES_POCKET�FixPlanAptUpgradeStep�FixPlanAttachStep�FixPlanEnableStep�FixPlanNoOpAlreadyFixedStep�FixPlanNoOpLivepatchFixStep�FixPlanNoOpStatus�FixPlanNoOpStep�
FixPlanResult� FixPlanStep�FixPlanUSNResult�FixPlanWarning�"FixPlanWarningFailUpdatingESMCache�&FixPlanWarningPackageCannotBeInstalled�#FixPlanWarningSecurityIssueNotFixed�NoOpAlreadyFixedData�NoOpLivepatchFixData�USNAdditionalData)�CVEFixPlanOptions)�_plan)�USNFixPlanOptions)�ContractExpiryStatus� _is_attached)�NAME�
USAGE_TMPL)�CLOUD_TYPE_TO_TITLE�PRO_CLOUD_URLS�get_cloud_type)�UAConfig)�PRINT_WRAP_WIDTH)�entitlement_factory)�ApplicabilityStatus�CanEnableFailure�UserFacingStatus)�notices)�Notice)�
PRO_HOME_PAGE)�colorize_commandsc @ sj e Zd Zdededee defdd�Zdd� Z dd
ee d ed e e fd
d�Z
dee defdd�Z d S )�
FixContext�title�dry_run�
affected_pkgs�cfgc C sJ d| _ g | _t� | _tj| _|| _|| _|| _ || _
d| _ d| _ d| _
d S )Nr TF)� pkg_index� unfixed_pkgs�set�installed_pkgsr �SYSTEM_NON_VULNERABLE�
fix_statusrB rD rC rE �should_print_pkg_header� warn_package_cannot_be_installed�fixed_by_livepatch)�selfrB rC rD rE � rP �2/usr/lib/python3/dist-packages/uaclient/cli/fix.py�__init__Q s
zFixContext.__init__c C sR | j r'tj�t| j ��jt| j �d�t| j ��d�}tt j
|t ddd�� d S d S )N�, )�count�pkgs� F)�width�subsequent_indent�replace_whitespace) rD r �SECURITY_AFFECTED_PKGS� pluralize�len�format�join�sorted�print�textwrap�fillr8 )rO �msgrP rP rQ �print_fix_headerd s" �����zFixContext.print_fix_headerN� source_pkgs�status�pocketc C s8 | j rtt||| jt| j�|rt|�nd d�� d S d S )N)�pkg_listrf rF �num_pkgs�
pocket_source)rL r` �_format_packages_messagerF r\ rD �get_pocket_description)rO re rf rg rP rP rQ �print_pkg_headeru s ���zFixContext.print_pkg_headerrU �unfixed_reasonc C s" |D ] }| j �t||d�� qd S )N)�pkgrn )rG �appendr )rO rU rn ro rP rP rQ �add_unfixed_packages� s
��z FixContext.add_unfixed_packages�N) �__name__�
__module__� __qualname__�str�boolr r7 rR rd r rm rq rP rP rP rQ rA P s( ���
����
�rA c C s( | j dtjd�}|jtd� t|� d S )N�fix��help)�action)�
add_parserr � CLI_ROOT_FIX� set_defaults�
action_fix�
fix_parser)�
subparsers�
parser_fixrP rP rQ r| � s r| c C s` t jtdd�| _d| _tj| _tj| j _
| j dtj d� | j ddtj
d� | j d dtjd� | S )
z1Build or extend an arg parser for fix subcommand.z"fix <CVE-yyyy-nnnn+>|<USN-nnnn-d+>)�name�commandrx �security_issuery z --dry-run�
store_true)r{ rz z --no-related)r3 r] r2 �usage�progr � CLI_FIX_DESC� description� CLI_FLAGS�
_optionalsrB � add_argument�
CLI_FIX_ISSUE�CLI_FIX_DRY_RUN�CLI_FIX_NO_RELATED)�parserrP rP rQ r� � s �
��r� �cvec C s8 dj | j�� | jd�d� | j�� �g}td�|�� d S )N�{issue}: {description}��issuer� z! - https://ubuntu.com/security/{}�
)r] rB �upperr� r` r^ )r� �linesrP rP rQ �print_cve_header� s ��r� �fix_planc C s� | j }dj|j�� |jd�g}|j}t|t�rK|jr5|� t
j � |jD ]}|� d�t
j j
j|d��� q#n|jrK|� t
j� |jD ] }|� d| � qAtd�|�� d S )Nr� r� z - {})r� z - r� )�target_usn_planr] rB r� r� �additional_data�
isinstancer, �associated_cvesrp r �SECURITY_FOUND_CVES�urls�SECURITY_CVE_PAGE�associated_launchpad_bugs� SECURITY_FOUND_LAUNCHPAD_BUGSr` r^ )r� �
target_usnr� r� r� �lp_bugrP rP rQ �print_usn_header� s* ��
���
r� r� rC rE c C sz t t| gd�|d�}|jjd j}|r$|jr$tjt� |j
p d|j�d��t |jjd � t � t
|jjd ||�\}}|S )N)�cves��optionsrE r �unexpected-error�� named_msg)�cve_planr- � cves_datar� �errorrc r
�AnonymousUbuntuProErrorr � NamedMessage�coder� r` �execute_fix_plan)r� rC rE r� r� rf �_rP rP rQ �fix_cve� s �
��r� �
no_relatedc C s� t t| gd�|d�}|jjd jj}|r%|jr%tjt �
|j p d|j�d��t |jjd � t
dt jj| d� � t|jjd j||�\}}|tjtjfvrO|S |jjd j}|rZ|r\|S t
dt jjd�d d
� |D ��d � � t
dt j � i } |D ]}
t
d �|
j�� t|
||�| |
j< t
� qzt
t j� t|| t jd
� d} |D ]=}
| |
j \} }
t| |
jt j d
� | tj kr�t
dt j jdd� � d} | tj kr�|
D ]}|j r�t
d�|j!|j �� q�d} q�| r�t
dt j"j| d� � |S )N)�usnsr� r r� r� r� )�issue_idz
- c s s � | ]}|j V qd S rr )rB )�.0�usnrP rP rQ � <genexpr> s � zfix_usn.<locals>.<genexpr>)� related_usnsz- {})�contextF�- �
fix operation�� operationTz
- {}: {})#�usn_planr/ � usns_datar� r� r� rc r
r� r r� r� r� r` � SECURITY_FIXING_REQUESTED_USNr] r� r rJ �SYSTEM_NOT_AFFECTED�related_usns_plan�SECURITY_RELATED_USNSr^ � SECURITY_FIXING_RELATED_USNSrB �SECURITY_USN_SUMMARY�_handle_fix_status_message�FIX_ISSUE_CONTEXT_REQUESTED�FIX_ISSUE_CONTEXT_RELATED� SYSTEM_VULNERABLE_UNTIL_REBOOT�ENABLE_REBOOT_REQUIRED_TMPL�SYSTEM_STILL_VULNERABLErn ro �SECURITY_RELATED_USN_ERROR)r� rC r� rE r� r� �target_usn_statusr� r� �related_usn_status�related_usn_plan�failure_on_related_usnrf rG � unfixed_pkgrP rP rQ �fix_usn� s� �
����� ������
�
��
���
�������r� rh rf rF ri rj �returnc C s� | sdS g }g }| D ]}|d7 }|� d�||�� |� |� q
tjd�dd�|� d d�t|���tdd �}d
�|t||��S ) z;Format the packages and status to an user friendly message.� � z{}/{}z{} {}:�(rS �)rV �rW rX z{}
{})rp r] ra rb r^ r_ r8 r ) rh rf rF ri rj � msg_index�src_pkgs�src_pkg�
msg_headerrP rP rQ rk G s ��rk �tokenc
C s\ t tdd|gg�� z
t| |dd� W dS tjy- } z t |j� W Y d}~dS d}~ww )ztAttach to an Ubuntu Pro subscription with a given token.
:return: True if attach performed without errors.
�pro�attachT)r� � allow_enableNF)r` r@ r r
�UbuntuProErrorrc )rE r� �errrP rP rQ �_run_ua_attachc s
��r� c C s> t � \} }| t�� v r ttjjt�| �t�| �d�� dS dS )z:Alert the user when running Pro on cloud with PRO support.)rB �cloud_specific_urlN) r6 r5 �keysr` r �SECURITY_USE_PRO_TMPLr] r4 �get)�
cloud_typer� rP rP rQ �*_inform_ubuntu_pro_existence_if_applicableq s
���r� c
C s� t tj� t| d�}t dtjj|jd� � t|jd�}zt || d�}W n t
j yD } zt tj � t
|jd�}t|| d� |�d }~ww t dtj � t| |j�S )N)rE r� )� user_code)� magic_tokenr� )r` r �CLI_MAGIC_ATTACH_INITr �CLI_MAGIC_ATTACH_SIGN_INr] r� r r� r r
�MagicAttachTokenError�CLI_MAGIC_ATTACH_FAILEDr r �CLI_MAGIC_ATTACH_PROCESSINGr� �contract_token)rE �
initiate_resp� wait_options� wait_resp�e�revoke_optionsrP rP rQ �_perform_magic_attach} s.
���
� �� r� c C sh t � ttj� tjtjg d�d�}|dkrdS |dkr t| �S |dkr2ttj� t d�}t
| |�S dS ) zZPrompt for attach to a subscription or token.
:return: True if attach performed.
)�s�a�c��
valid_choicesr� Fr� r� �> T) r� r` r �*SECURITY_UPDATE_NOT_INSTALLED_SUBSCRIPTIONr
�prompt_choices�SECURITY_FIX_ATTACH_PROMPTr� �PROMPT_ENTER_TOKEN�inputr� )rE �choicer� rP rP rQ �_prompt_for_attach� s
�
r rG c C s4 t | �}tjtj�|�j|d�t| ��d�t dd�S )z�Format the list of unfixed packages into an message.
:returns: A string containing the message output for the unfixed
packages.
rS )ri rU rV r� )
r\ ra rb r �SECURITY_PKG_STILL_AFFECTEDr[ r] r^ r_ r8 )rG �num_pkgs_unfixedrP rP rQ � _format_unfixed_packages_msg� s � ��r c C s4 t | �j}|r|tjjkr|rttj� dS dS dS )zuCheck if the Ubuntu Pro subscription is expired.
:returns: True if subscription is expired and not renewed.
FT)r1 �contract_statusr0 �EXPIRED�valuer` r �(SECURITY_DRY_RUN_UA_EXPIRED_SUBSCRIPTION)rE rC �contract_expiry_statusrP rP rQ � _check_subscription_is_expired� s
�
r c C s� ddl }ddlm} t� ttj� tjtj j
t d�ddgd�}|dkrFttj � t
d�}ttd d
gg�� |�|jd d d
�| � t| |�S dS )zdPrompt for attach a new subscription token to the user.
:return: True if attach performed.
r N)�cli)�url�rr� r� r r� �detachTr )�
assume_yesr] F)�argparse�uaclientr r� r` r �%SECURITY_UPDATE_NOT_INSTALLED_EXPIREDr
r �SECURITY_FIX_RENEW_PROMPTr] r? �PROMPT_EXPIRED_ENTER_TOKENr r@ �
action_detach� Namespacer� )rE r r r r� rP rP rQ �_prompt_for_new_token� s"
�
�
r �servicec C s� t tjj|d�� tjtjj|d�ddgd�}|dkrEt tdd|gg�� t| |d�\}}|sC|durCt |t
�rC|j durCt |j j � |S d S )
zMPrompt for enable a pro service.
:return: True if enable performed.
�r r� r� r� r� �enable�rE r� NF)
r` r �SECURITY_SERVICE_DISABLEDr] r
r �SECURITY_FIX_ENABLE_PROMPTr@ r r� r; �messagerc )rE r r �ret�reasonrP rP rQ �_prompt_for_enable� s" ���
r( c C s� t || d�}|rN|�� \}}|tjkrdS |�� \}}|tjkrD|r0tdtj j
|j d� � dS t ||j �r8dS ttj
j
|j d�� dS ttjj
|j d�� dS )zQ
Verify if the Ubuntu Pro subscription has the required service enabled.
r" Tr� r F)r9 �user_facing_statusr< �ACTIVE�applicability_statusr: �
APPLICABLEr` r �'SECURITY_DRY_RUN_UA_SERVICE_NOT_ENABLEDr] r� r( � SECURITY_UA_SERVICE_NOT_ENABLED� SECURITY_UA_SERVICE_NOT_ENTITLED)r rE rC �ent�
ent_statusr� r+ rP rP rQ �)_handle_subscription_for_required_service s<
��� ��
���r2 r� r� r� c C s� | t jkr |rtjj||d�}ntjj|d�}tt�|�� d S | t j kr@|r0tj
j||d�}ntj j|d�}tt�|�� d S | t j kr`|rPtj
j||d�}ntjj|d�}tt�|�� d S |rktj
j||d�}ntjj|d�}tt�|�� d S )N)r� r� �r� )r rJ r �%SECURITY_ISSUE_RESOLVED_ISSUE_CONTEXTr] �SECURITY_ISSUE_RESOLVEDr` r
�handle_unicode_charactersr� �'SECURITY_ISSUE_UNAFFECTED_ISSUE_CONTEXT�SECURITY_ISSUE_UNAFFECTEDr� �)SECURITY_ISSUE_NOT_RESOLVED_ISSUE_CONTEXT�SECURITY_ISSUE_NOT_RESOLVED)rf r� r� rc rP rP rQ r� 6 s6
�
�
��r� rg c C s. | t krtjS | tkrtjS | tkrtjS | S rr )r r �'SECURITY_UBUNTU_STANDARD_UPDATES_POCKETr �SECURITY_UA_INFRA_POCKETr �SECURITY_UA_APPS_POCKET)rg rP rP rQ rl [ s rl � fix_context�stepc C sh | j |jjd|jjd� d| _tjj|jj|jj d�}t
d| � | j |jj g|d� d| _
tj| _d S )N�released�re rf rg F)�package�versionr� �rU rn T)rm �data�related_source_packagesrg rL r �FIX_CANNOT_INSTALL_PACKAGEr] �binary_package�binary_package_versionr` rq �source_packagerM r r� rK )r> r? �warn_msgrP rP rQ �)_execute_package_cannot_be_installed_stepf s ��
� rL c C sR | j |jj|jjd� | jt|jj�7 _| j|jjt|jj�d� tj | _
d S )N)re rf rD ) rm rE �source_packagesrf rF r\ rq r r r� rK �r> r? rP rP rQ �&_execute_security_issue_not_fixed_step s �
� rO c C s, t �� r ttj� d S tdtj d � d S )Nr� )r
�we_are_currently_rootr` r � CLI_FIX_FAIL_UPDATING_ESM_CACHE�(CLI_FIX_FAIL_UPDATING_ESM_CACHE_NON_ROOTrN rP rP rQ �%_execute_fail_updating_esm_cache_step� s rS c
C sh | j |jjd|jjd� | jt|jj�7 _|jjs)| js#tt j
� t j | _
d S t�� sE| jsEtt j� t j| _
| j|jjt jd� d S ttg d�g d� t|jj� g�� | jrat j | _
d S zt�� tjg d�|jj ddid � W n, ty� } z t|d
t|��}t|� t j| _
| j|jj|d� W Y d }~d S d }~ww t j | _
d | _ | j � |jj� d S ) Nr@ rA rD )r �updatez&&)r �install�--only-upgrade�-y)zapt-getrU rV rW �DEBIAN_FRONTEND�noninteractive)�cmd�override_env_varsrc T) rm rE rM rg rF r\ �binary_packagesrM r` r �SECURITY_UPDATE_INSTALLEDr rJ rK r
rP rC �SECURITY_APT_NON_ROOTr� rq r@ r_ r �run_apt_update_command�run_apt_command� Exception�getattrrv rL rI rT )r> r? r� rc rP rP rQ �_execute_apt_upgrade_step� sl �
��
����
�
����
rc c C s� |j jdkrtnt}| j|j jd|d� d| _t| j�j sD| j
r(t dt j
� nHt| j�sCtj| _| j|j jt jj|j jd�d� d S n,t| j| j
d�rp| j
rUt t j� nt| j�sptj| _| j|j jt jj|j jd�d� d S tj| _d S ) N� esm-infrar@ rA Fr� r rD )rE rC )rE �required_servicer r rm rM rL r1 rE � is_attachedrC r` r � SECURITY_DRY_RUN_UA_NOT_ATTACHEDr r r� rK rq � SECURITY_UA_SERVICE_REQUIREDr] r r r �$SECURITY_UA_SERVICE_WITH_EXPIRED_SUBrJ �r> r? rg rP rP rQ �_execute_attach_step� sL ���
��� �
�� rk c C st |j jdkrtnt}| j|j jd|d� d| _t|j j| j| j �s7| j
|j jt j j
|j jd�d� tj| _d S tjS )Nrd r@ rA Fr rD )rE r r r rm rM rL r2 rE rC rq r �%SECURITY_UA_SERVICE_NOT_ENABLED_SHORTr] r r� rK rJ rj rP rP rQ �_execute_enable_step s0 ������rm c C s* |j jtjjkrttj� tj | _
d S d S rr ) rE rf r! � NOT_AFFECTEDr r` r �SECURITY_NO_AFFECTED_PKGSr r� rK rN rP rP rQ � _execute_noop_not_affected_step& s
�rp c C s4 t |jt�rttjj| j|jjd�� d| _ d S d S )N)r� rC T)
r� rE r+ r` r �CVE_FIXED_BY_LIVEPATCHr] rB �
patch_versionrN rN rP rP rQ �%_execute_noop_fixed_by_livepatch_step. s ��
�rs c C sL t |jt�r$| j|jjd|jjd� ttj� | j t
|jj�7 _ d S d S )Nr@ rA ) r� rE r* rm rM rg r` r r] rF r\ rN rP rP rQ � _execute_noop_already_fixed_step; s �
�rt c C s� g | j �| j�}t| j|| jpg |d�}|�� t|dd� d�D ]t}t|t�r,t ||� t|t
�r6t ||� t|t �r@t
||� t|t�rRt||� |jtjkrR nCt|t�rdt||� |jtjkrd n1t|t�rvt||� |jtjkrv n t|t�r�t||� t|t�r�t||� t|t�r�t ||� q t � |j r�t t t t!dd� |j D ����� tj"|_|jtjkr�t#j$|j%d�r�tj&|_t'j(j)dd �}t |� t*j+t,j-dd � |j.s�t/|j| j� |j|j fS )
N)rB rC rD rE c S s | j S rr )�order)�xrP rP rQ �<lambda>X s z"execute_fix_plan.<locals>.<lambda>)�keyc S s g | ]}|j �qS rP )ro )r� r� rP rP rQ �
<listcomp>| s ��z$execute_fix_plan.<locals>.<listcomp>)rI r� r� )0�plan�warningsrA rB �affected_packagesrd r_ r� r( rL r) rO r' rS r rc rK r rJ r rk r rm r" rp r rs r rt r` rG r �listrH r� r �
should_rebootrI r� r r� r] r= �addr> �ENABLE_REBOOT_REQUIREDrN r� )r� rC rE � full_planr> r? �
reboot_msgrP rP rQ r� H s� ���
������ ��� r� c K sj t �t| j�stj| jd��| jrttj � d| j�
� v r(t | j| j|�}|jS t | j| j| j
|�}|jS )Nr3 r� )�re�matchr r� r
� InvalidSecurityIssueIdFormatrC r` r �SECURITY_DRY_RUN_WARNING�lowerr� r� r� � exit_code)�argsrE �kwargsrf rP rP rQ r � s �
��r rr )r� N)r� )yr� ra �typingr r r r r r r r r r
r r r
�uaclient.actionsr r �+uaclient.api.u.pro.attach.magic.initiate.v1r �)uaclient.api.u.pro.attach.magic.revoke.v1r r �'uaclient.api.u.pro.attach.magic.wait.v1r r �'uaclient.api.u.pro.security.fix._commonr r r r �/uaclient.api.u.pro.security.fix._common.plan.v1r r r r r r r r r! r" r# r$ r% r& r' r( r) r* r+ r, �+uaclient.api.u.pro.security.fix.cve.plan.v1r- r. r� �+uaclient.api.u.pro.security.fix.usn.plan.v1r/ r� �(uaclient.api.u.pro.status.is_attached.v1r0 r1 �uaclient.cli.constantsr2 r3 �uaclient.clouds.identityr4 r5 r6 �uaclient.configr7 �uaclient.defaultsr8 �uaclient.entitlementsr9 �(uaclient.entitlements.entitlement_statusr: r; r< �uaclient.filesr= �uaclient.files.noticesr> �uaclient.messages.urlsr? �uaclient.statusr@ rA r| r� r� r� rv rw r� r� �intrk r� r� r� r r r r r( r2 r� rl rL rO rS rc rk rm rp rs rt r� r rP rP rP rQ �<module> s $
X ? ���
�l������
�
���
�,���
�% �
��
��
� �
�>�
�/�
�!�
��
�
�
�
���
� R