Gerenciador & Editor PHP

📍 /opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/migrations

📝 Editando: 112_hardened_php.py

import contextlib
import logging
import os
import os.path

from defence360agent.utils import importer

subtract_flags = importer.get(
    module="imav.malwarelib.utils.chattr", name="subtract_flags", default=None
)
FS_IMMUTABLE_FL = importer.get(
    module="imav.malwarelib.utils.chattr", name="FS_IMMUTABLE_FL", default=None
)

logger = logging.getLogger(__name__)
ALT_PHP = "imunify360-alt-php.repo"
EA_PHP = "imunify360-ea-php-hardened.repo"
REPOS_DIR = "/etc/yum.repos.d/"

def irrelevant_repos(release):
    if "cloudlinux" in release:
        # CloudLinux doesn't need either
        return {ALT_PHP, EA_PHP}
    elif os.path.exists("/usr/local/cpanel/cpanel"):
        # cPanel does not need alt-php
        return set([ALT_PHP])
    else:
        # ea-php is only for cPanel
        return set([EA_PHP])

def fix_permissions():
    # we don't expect that it can be None with in a way how it imported
    if subtract_flags is None:
        return
    for repo_name in [ALT_PHP, EA_PHP]:
        path = REPOS_DIR + repo_name
        if not os.path.exists(path):
            continue
        with open(path) as f:
            subtract_flags(f.fileno(), FS_IMMUTABLE_FL)
            os.chmod(f.fileno(), 0o644)

def do_migrate():
    if not os.path.exists("/etc/redhat-release"):
        # we do not have to do anything on Ubuntu systems
        return
    with open("/etc/redhat-release") as f:
        release = f.read().lower()
    fix_permissions()
    for repo_name in irrelevant_repos(release):
        with contextlib.suppress(FileNotFoundError):
            os.unlink(REPOS_DIR + repo_name)

def migrate(migrator, database, fake=False, **kwargs):
    if fake:
        return
    try:
        do_migrate()
    except Exception:
        logger.exception("Failed to clean up HardenedPHP repositories")

def rollback(migrator, database, fake=False, **kwargs):
    pass

[ Cancelar ]

Nome	Permissões	Ações
[ .. Voltar ]
📄 001_initial.py	0644	[ EDITAR/VER ]
📄 002_infected_domain_list.py	0644	[ EDITAR/VER ]
📄 003_import_from_list.py	0644	[ EDITAR/VER ]
📄 004_add_username_to_infected_domain_list.py	0644	[ EDITAR/VER ]
📄 005_timeout_in_iplist.py	0644	[ EDITAR/VER ]
📄 006_comment_in_plist.py	0644	[ EDITAR/VER ]
📄 007_add_country_code_fields.py	0644	[ EDITAR/VER ]
📄 008_fill_countries.py	0644	[ EDITAR/VER ]
📄 009_drop_blocklist_history.py	0644	[ EDITAR/VER ]
📄 010_drop_country_entities.py	0644	[ EDITAR/VER ]
📄 011_create_new_country_entities.py	0644	[ EDITAR/VER ]
📄 012_fill_countries_and_subnets.py	0644	[ EDITAR/VER ]
📄 013_add_indexes_to_iplist.py	0644	[ EDITAR/VER ]
📄 014_add_malware_hits.py	0644	[ EDITAR/VER ]
📄 015_add_iplist_expiration_index.py	0644	[ EDITAR/VER ]
📄 016_fix_autowhitelist_expiration.py	0644	[ EDITAR/VER ]
📄 017_remove_sensor_prefix.py	0644	[ EDITAR/VER ]
📄 018_license_info.py	0644	[ EDITAR/VER ]
📄 019_purge_old_configs.py	0644	[ EDITAR/VER ]
📄 020_malware_scan_types.py	0644	[ EDITAR/VER ]
📄 021_add_testing_repo.py	0644	[ EDITAR/VER ]
📄 022_mod_security_vendors_migrations.py	0644	[ EDITAR/VER ]
📄 023_add_default_rule_in_modsec_custom_conf.py	0644	[ EDITAR/VER ]
📄 024_ignore_from_graylist.py	0644	[ EDITAR/VER ]
📄 025_malware_config_realtime.py	0644	[ EDITAR/VER ]
📄 026_remove_old_temporary_file.py	0644	[ EDITAR/VER ]
📄 027_disable_comdo_fp_rules.py	0644	[ EDITAR/VER ]
📄 028_set_permanent_ttl_for_blacklist.py	0644	[ EDITAR/VER ]
📄 029_custom_quarantine.py	0644	[ EDITAR/VER ]
📄 030_rename_max_incident_repetition.py	0644	[ EDITAR/VER ]
📄 031_add_mode_field.py	0644	[ EDITAR/VER ]
📄 031_modsec_config_for_plesk_include.py	0644	[ EDITAR/VER ]
📄 032_chmod_quarantine.py	0644	[ EDITAR/VER ]
📄 033_disable_cphulk.py	0644	[ EDITAR/VER ]
📄 034_hits_extras.py	0644	[ EDITAR/VER ]
📄 035_add_dos_expiration_field.py	0644	[ EDITAR/VER ]
📄 036_add_block_port.py	0644	[ EDITAR/VER ]
📄 037_disabled_rules.py	0644	[ EDITAR/VER ]
📄 038_disabled_rules_import.py	0644	[ EDITAR/VER ]
📄 039_fix_malware_hits.py	0644	[ EDITAR/VER ]
📄 040_ignore_mod_sec_rule_214920.py	0644	[ EDITAR/VER ]
📄 041_fix_invalid_ignore_filed.py	0644	[ EDITAR/VER ]
📄 042_rebuildinstalledssldb.py	0644	[ EDITAR/VER ]
📄 043_disable_dos_scan_by_default.py	0644	[ EDITAR/VER ]
📄 044_ignore_virtfs_on_cpanel.py	0644	[ EDITAR/VER ]
📄 045_ignore_vdserver_dir_in_csf.py	0644	[ EDITAR/VER ]
📄 046_foreign_key_fix.py	0644	[ EDITAR/VER ]
📄 047_license_in_file.py	0644	[ EDITAR/VER ]
📄 048_malware_hits_vendor_field.py	0644	[ EDITAR/VER ]
📄 049_add_auto_added_field_to_iplist.py	0644	[ EDITAR/VER ]
📄 050_fill_auto_whitelisted.py	0644	[ EDITAR/VER ]
📄 051_cleanup_vd_license.py	0644	[ EDITAR/VER ]
📄 052_whitelisted_crawlers.py	0644	[ EDITAR/VER ]
📄 053_populate_whitelisted_crawlers.py	0644	[ EDITAR/VER ]
📄 054_add_malicious_and_added_date_fileds.py	0644	[ EDITAR/VER ]
📄 055_migrate_move_to_quar_option.py	0644	[ EDITAR/VER ]
📄 056_populate_malicious_with_quarantined.py	0644	[ EDITAR/VER ]
📄 057_filename_is_blob.py	0644	[ EDITAR/VER ]
📄 058_convert_license_last_attempt.py	0644	[ EDITAR/VER ]
📄 059_scans_error_field.py	0644	[ EDITAR/VER ]
📄 061_migrate_backup_system_conf.py	0644	[ EDITAR/VER ]
📄 062_drop_malware_extra_data.py	0644	[ EDITAR/VER ]
📄 062_fix_null_expiration.py	0644	[ EDITAR/VER ]
📄 063_fix_graylist_doslist_expiration_discrepancy.py	0644	[ EDITAR/VER ]
📄 064_chmod_i360deploy_log.py	0644	[ EDITAR/VER ]
📄 065_remove_capture_csf_lock_from_config.py	0644	[ EDITAR/VER ]
📄 066_eula_table.py	0644	[ EDITAR/VER ]
📄 067_drop_fields_from_modsec_conf.py	0644	[ EDITAR/VER ]
📄 068_remove_rules_check_interval_from_config.py	0644	[ EDITAR/VER ]
📄 069_incidents_domain_field.py	0644	[ EDITAR/VER ]
📄 070_modsec_incident_names.py	0644	[ EDITAR/VER ]
📄 071_malware_hits_hash_size_fields.py	0644	[ EDITAR/VER ]
📄 072_add_malware_history_table.py	0644	[ EDITAR/VER ]
📄 072_captcha_stat.py	0644	[ EDITAR/VER ]
📄 072_extend_last_synclist.py	0644	[ EDITAR/VER ]
📄 073_drop_dos_expiration.py	0644	[ EDITAR/VER ]
📄 074_ip_as_int.py	0644	[ EDITAR/VER ]
📄 075_ips_as_int.py	0644	[ EDITAR/VER ]
📄 076_hash_model.py	0644	[ EDITAR/VER ]
📄 077_alter_malware_scan.py	0644	[ EDITAR/VER ]
📄 078_fix_signatures_permissions.py	0644	[ EDITAR/VER ]
📄 079_add_uid_gid_fields.py	0644	[ EDITAR/VER ]
📄 080_populate_uid_gid_size_hash_fields.py	0644	[ EDITAR/VER ]
📄 081_fix_clamscan_broken_symlink.py	0644	[ EDITAR/VER ]
📄 082_add_cl_on_premise_backup_option.py	0644	[ EDITAR/VER ]
📄 082_add_manual_flag.py	0644	[ EDITAR/VER ]
📄 083_drop_no_captcha_field.py	0644	[ EDITAR/VER ]
📄 084_country_subnets_fields.py	0644	[ EDITAR/VER ]
📄 085_country_subnets_fields.py	0644	[ EDITAR/VER ]
📄 086_ignored_by_port_fields.py	0644	[ EDITAR/VER ]
📄 087_ignored_by_port_fields.py	0644	[ EDITAR/VER ]
📄 088_add_malware_i360_clamd_scan_option.py	0644	[ EDITAR/VER ]
📄 089_proactive_tables.py	0644	[ EDITAR/VER ]
📄 090_safe_user_config.py	0644	[ EDITAR/VER ]
📄 091_compress_old_logs.py	0644	[ EDITAR/VER ]
📄 092_ignore_proc_sys_dirs.py	0644	[ EDITAR/VER ]
📄 092_remove_old_disabled_rules.py	0644	[ EDITAR/VER ]
📄 093_make_quarantined_files_immutable.py	0644	[ EDITAR/VER ]
📄 094_ignore_cagefs_proc.py	0644	[ EDITAR/VER ]
📄 095_add_total_malicious_field.py	0644	[ EDITAR/VER ]
📄 096_populate_total_malicious_field.py	0644	[ EDITAR/VER ]
📄 097_remove_uid_and_gid.py	0644	[ EDITAR/VER ]
📄 098_remote_proxy_tables.py	0644	[ EDITAR/VER ]
📄 099_remove_old_disabled_rules.py	0644	[ EDITAR/VER ]
📄 100_remove_captcha_ports_from_csf.py	0644	[ EDITAR/VER ]
📄 101_remove_unneeded_acronis_ports_from_csf.py	0644	[ EDITAR/VER ]
📄 102_proactive_ignore_list.py	0644	[ EDITAR/VER ]
📄 102_replace_comodo.py	0644	[ EDITAR/VER ]
📄 103_remove_vd_license.py	0644	[ EDITAR/VER ]
📄 104_add_feature_management_permissions.py	0644	[ EDITAR/VER ]
📄 105_populate_default_feature_management_permissions.py	0644	[ EDITAR/VER ]
📄 106_add_malware_cleanup_in_config.py	0644	[ EDITAR/VER ]
📄 106_malware_hit_status_field_add.py	0644	[ EDITAR/VER ]
📄 107_add_bruteforce_rule_33339.py	0644	[ EDITAR/VER ]
📄 107_malware_hit_status_field_populate.py	0644	[ EDITAR/VER ]
📄 108_feature_management_cleanup_add.py	0644	[ EDITAR/VER ]
📄 108_validate_config.py	0644	[ EDITAR/VER ]
📄 109_dos_detector.py	0644	[ EDITAR/VER ]
📄 110_ignore_list_ip_as_int.py	0644	[ EDITAR/VER ]
📄 111_ignore_list_ip_as_int.py	0644	[ EDITAR/VER ]
📄 112_hardened_php.py	0644	[ EDITAR/VER ]
📄 113_move_quarantined_files.py	0644	[ EDITAR/VER ]
📄 114_disable_auto-quarantine.py	0644	[ EDITAR/VER ]
📄 115_feature_management_fields.py	0644	[ EDITAR/VER ]
📄 116_feature_management_fields.py	0644	[ EDITAR/VER ]
📄 117_remove_incorrect_fields.py	0644	[ EDITAR/VER ]
📄 118_add_malware_user_infected.py	0644	[ EDITAR/VER ]
📄 118_remove_country_subnets.py	0644	[ EDITAR/VER ]
📄 119_populate_malware_user_infected.py	0644	[ EDITAR/VER ]
📄 120_scheduled_scan.py	0644	[ EDITAR/VER ]
📄 121_drop_captcha_stat.py	0644	[ EDITAR/VER ]
📄 122_cagefs_unmount.py	0644	[ EDITAR/VER ]
📄 123_add_last_user_scan.py	0644	[ EDITAR/VER ]
📄 123_disable_scheduled_scan.py	0644	[ EDITAR/VER ]
📄 123_rename_plesk_vendor.py	0644	[ EDITAR/VER ]
📄 124_add_hook_management_functionality.py	0644	[ EDITAR/VER ]
📄 124_add_infected_domains_vendor.py	0644	[ EDITAR/VER ]
📄 125_rescan_scan_type.py	0644	[ EDITAR/VER ]
📄 126_add_malware_scan_modified_files_option.py	0644	[ EDITAR/VER ]
📄 126_move_malware_hits_list.py	0644	[ EDITAR/VER ]
📄 127_remove_malware_hit_mode.py	0644	[ EDITAR/VER ]
📄 128_move_cleanup_storage_files.py	0644	[ EDITAR/VER ]
📄 129_fixed_cagefs_unmount.py	0644	[ EDITAR/VER ]
📄 130_add_messages_to_send.py	0644	[ EDITAR/VER ]
📄 131_incident_timestamp_index.py	0644	[ EDITAR/VER ]
📄 132_add_timestamp_field.py	0644	[ EDITAR/VER ]
📄 133_add_scope_field_to_iplist.py	0644	[ EDITAR/VER ]
📄 134_change_default_of_intensity_ram.py	0644	[ EDITAR/VER ]
📄 135_export_proactive.py	0644	[ EDITAR/VER ]
📄 135_make_completed_nullable.py	0644	[ EDITAR/VER ]
📄 136_drop_proactive.py	0644	[ EDITAR/VER ]
📄 137_swap_initiator_and_cause.py	0644	[ EDITAR/VER ]
📄 138_move_rapid_scan_dir.py	0644	[ EDITAR/VER ]
📄 139_generic_modsec_config.py	0644	[ EDITAR/VER ]
📄 140_cast_malware_hit_orig_file_as_blob.py	0644	[ EDITAR/VER ]
📄 141_drop_last_user_scans.py	0644	[ EDITAR/VER ]
📄 143_malware_hit_cascade_delete.py	0644	[ EDITAR/VER ]
📄 144_remove_clamav_config_options.py	0644	[ EDITAR/VER ]
📄 144_remove_hash_table.py	0644	[ EDITAR/VER ]
📄 145_move_quarantine.py	0644	[ EDITAR/VER ]
📄 146_malware_user_infected_cascade_delete.py	0644	[ EDITAR/VER ]
📄 147_remove_vendor_field.py	0644	[ EDITAR/VER ]
📄 147_user_scan_type.py	0644	[ EDITAR/VER ]
📄 148_reconstruct_pickled_scan_queue.py	0644	[ EDITAR/VER ]
📄 148_remove_malware_user_infected.py	0644	[ EDITAR/VER ]
📄 149_add_captcha_passed_field_to_iplist.py	0644	[ EDITAR/VER ]
📄 149_make_config_inactive.py	0644	[ EDITAR/VER ]
📄 150_update_captcha_passed_field_for_iplist_entries.py	0644	[ EDITAR/VER ]
📄 151_change_constraint_for_iplist.py	0644	[ EDITAR/VER ]
📄 152_add_listname_to_primary_key.py	0644	[ EDITAR/VER ]
📄 153_migrate_config_default_action.py	0644	[ EDITAR/VER ]
📄 153_update_incident_name.py	0644	[ EDITAR/VER ]
📄 154_migrate_config_user_override_malware_actions.py	0644	[ EDITAR/VER ]
📄 155_migrate_config_user_override_proactive_defense.py	0644	[ EDITAR/VER ]
📄 156_remove_default_values_from_config.py	0644	[ EDITAR/VER ]
📄 157_move_i360_modsec_disable_conf.py	0644	[ EDITAR/VER ]
📄 158_move_i360_modsec_disable_conf_symlink.py	0644	[ EDITAR/VER ]
📄 159_remove_defaults_from_local_config.py	0644	[ EDITAR/VER ]
📄 160_remove_quarantine.py	0644	[ EDITAR/VER ]
📄 160_unmount_sigs_v1.py	0644	[ EDITAR/VER ]
📄 161_remove_ea4_main_local_conf.py	0644	[ EDITAR/VER ]
📄 162_add_resource_type.py	0644	[ EDITAR/VER ]
📄 163_drop_malware_scanned_stat.py	0644	[ EDITAR/VER ]
📄 164_add_resource_type_to_ignore.py	0644	[ EDITAR/VER ]
📄 165_add_db_fields_to_malware_history.py	0644	[ EDITAR/VER ]
📄 166_add_id_field_to_malware_ignore_path.py	0644	[ EDITAR/VER ]
📄 167_remote_iplist.py	0644	[ EDITAR/VER ]
📄 168_add_icontact_throttle.py	0644	[ EDITAR/VER ]
📄 169_add_record_to_throttle_scan_not_schedule_events.py	0644	[ EDITAR/VER ]
📄 170_add_db_fields_to_malware_history.py	0644	[ EDITAR/VER ]
📄 180_move_captcha_configs.py	0644	[ EDITAR/VER ]
📄 182_remove_constraints_from_icontact_throttle.py	0644	[ EDITAR/VER ]
📄 183_add_user_field_to_malware_scans.py	0644	[ EDITAR/VER ]
📄 184_create_a_table_for_secure_site_permissions.py	0644	[ EDITAR/VER ]
📄 185_delete_all_secure_site_id.py	0644	[ EDITAR/VER ]
📄 186_add_user_field_to_icontact_throttle.py	0644	[ EDITAR/VER ]
📄 187_fix_scan_unserialization.py	0644	[ EDITAR/VER ]
📄 188_add_protection_status_field_myimunify.py	0644	[ EDITAR/VER ]
📄 189_add_messages_to_send_nr.py	0644	[ EDITAR/VER ]
📄 190_add_analyst_cleanup_request_table.py	0644	[ EDITAR/VER ]
📄 191_create_wordpress_incident_table.py	0644	[ EDITAR/VER ]
📄 192_add_wordpress_incident_unique_index.py	0644	[ EDITAR/VER ]
📄 193_remove_sent_to_server_from_wordpress_incident.py	0644	[ EDITAR/VER ]
📄 194_add_wp_disabled_rules.py	0644	[ EDITAR/VER ]
📄 194_create_nonprivileged_config.py	0644	[ EDITAR/VER ]
📄 195_create_wordpress_site.py	0644	[ EDITAR/VER ]
📄 196_add_disabled_rules_sync_ts.py	0644	[ EDITAR/VER ]
📄 197_add_wordpress_site_manually_deleted_at.py	0644	[ EDITAR/VER ]
📄 198_add_wordpress_site_version.py	0644	[ EDITAR/VER ]
📄 199_proactive_log_permission.py	0644	[ EDITAR/VER ]
📄 __init__.py	0644	[ EDITAR/VER ]
📁 __pycache__/	0755
📄 conf.py	0644	[ EDITAR/VER ]