File: //lib/python3/dist-packages/uaclient/cli/__pycache__/fix.cpython-310.pyc
o
nHJeYq �
@ s d dl Z d dlZd dlmZmZmZmZmZmZm Z d dl
m Z m Z m
Z
mZmZmZ d dlmZmZ d dlmZ d dlmZmZ d dlmZmZ d dl m Z m Z m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/ d d l0m1Z1 d d
l2m3Z3 d d l2m4Z5 d d l6m7Z7 d d l6m4Z8 d d
l9m:Z: d dl;m<Z<m=Z= d dl>m?Z?m@Z@mAZA d dlBmCZC d dlDmEZEmFZF d dlGmHZH d dlImJZJ d dlKmLZLmMZMmNZN d dlOmPZP d dlQmRZR d dlSmTZT d dlUmVZV d dlWmXZX G dd� d�ZYd d � ZZd d � Z[d e'fd!d"�Z\d#e)fd$d%�Z]d&e^d'e_d(eCfd)d*�Z`d&e^d'e_d+e_d(eCfd,d-�Za did.ee^ d/e^d0ebd1ebd2ee^ d3e^f d4d5�Zcd(eCd6e^d3e_fd7d8�Zddjd9d:�Zed(eCfd;d<�Zfd(eCd3e_fd=d>�Zgd?ee^ d3e^fd@dA�Zhd(eCd'e_d3e_fdBdC�Zid(eCd3e_fdDdE�Zjd(eCdFe^d3e_fdGdH�ZkdFe^d(eCd'e_d3e_fdIdJ�Zl Kdkd/eVdLe^dMe^fdNdO�ZmdPe^fdQdR�ZndSeYdTe+fdUdV�ZodSeYdTe,fdWdX�ZpdSeYdTe fdYdZ�ZqdSeYdTe!fd[d\�ZrdSeYdTe"fd]d^�ZsdSeYdTe&fd_d`�ZtdSeYdTe$fdadb�ZudSeYdTe#fdcdd�Zvd#e'd'e_d(eCd3eeVeejw f fdedf�Zxdgdh� ZydS )l� N)�Dict�List�
NamedTuple�Optional�Set�Tuple�Union)�apt�
exceptions�messages�security�system�util)�attach_with_token�enable_entitlement_by_name)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)�ESM_APPS_POCKET�ESM_INFRA_POCKET�STANDARD_UPDATES_POCKET�FixPlanAptUpgradeStep�FixPlanAttachStep�FixPlanEnableStep�FixPlanNoOpAlreadyFixedStep�FixPlanNoOpLivepatchFixStep�FixPlanNoOpStatus�FixPlanNoOpStep�
FixPlanResult� FixPlanStep�FixPlanUSNResult�FixPlanWarning�&FixPlanWarningPackageCannotBeInstalled�#FixPlanWarningSecurityIssueNotFixed�NoOpAlreadyFixedData�NoOpLivepatchFixData�USNAdditionalData)�status_message)�CVEFixPlanOptions)�_plan)�USNFixPlanOptions)� _is_attached)�NAME�
USAGE_TMPL)�CLOUD_TYPE_TO_TITLE�PRO_CLOUD_URLS�get_cloud_type)�UAConfig)�ContractExpiryStatus�get_contract_expiry_status)�PRINT_WRAP_WIDTH)�entitlement_factory)�ApplicabilityStatus�CanEnableFailure�UserFacingStatus)�notices)�Notice)�
PRO_HOME_PAGE)� FixStatus)�colorize_commandsc @ sj e Zd Zdededee defdd�Zdd� Z dd
ee d ed e e fd
d�Z
dee defdd�Z d S )�
FixContext�title�dry_run�
affected_pkgs�cfgc C sD d| _ g | _t� | _tj| _|| _|| _|| _ || _
d| _ d| _ d S )Nr TF)
� pkg_index� unfixed_pkgs�set�installed_pkgsr> �SYSTEM_NON_VULNERABLE�
fix_statusrA rC rB rD �should_print_pkg_header� warn_package_cannot_be_installed)�selfrA rB rC rD � rN �2/usr/lib/python3/dist-packages/uaclient/cli/fix.py�__init__J s
zFixContext.__init__c C sR | j r'tj�t| j ��jt| j �d�t| j ��d�}tt j
|t ddd�� d S d S )N�, )�count�pkgs� F)�width�subsequent_indent�replace_whitespace) rC r �SECURITY_AFFECTED_PKGS� pluralize�len�format�join�sorted�print�textwrap�fillr6 )rM �msgrN rN rO �print_fix_header\ s" �����zFixContext.print_fix_headerN� source_pkgs�status�pocketc C s8 | j rtt||| jt| j�|rt|�nd d�� d S d S )N)�pkg_listrd rE �num_pkgs�
pocket_source)rK r^ �_format_packages_messagerE rZ rC �get_pocket_description)rM rc rd re rN rN rO �print_pkg_headerm s
����zFixContext.print_pkg_headerrS �unfixed_reasonc C s$ |D ]
}| j �tj||d�� qd S )N)�pkgrl )rF �appendr �UnfixedPackage)rM rS rl rm rN rN rO �add_unfixed_packages� s
��z FixContext.add_unfixed_packages�N) �__name__�
__module__� __qualname__�str�boolr r3 rP rb r rk rp rN rN rN rO r@ I s( ���
����
�r@ c C s( | j dtjd�}|jtd� t|� d S )N�fix��help)�action)�
add_parserr � CLI_ROOT_FIX� set_defaults�
action_fix�
fix_parser)�
subparsers�
parser_fixrN rN rO �set_fix_parser� s r� c C s` t jtdd�| _d| _tj| _tj| j _
| j dtj d� | j ddtj
d� | j d dtjd� | S )
z1Build or extend an arg parser for fix subcommand.z"fix <CVE-yyyy-nnnn+>|<USN-nnnn-d+>)�name�commandrw �security_issuerx z --dry-run�
store_true)rz ry z --no-related)r/ r[ r. �usage�progr � CLI_FIX_DESC� description� CLI_FLAGS�
_optionalsrA � add_argument�
CLI_FIX_ISSUE�CLI_FIX_DRY_RUN�CLI_FIX_NO_RELATED)�parserrN rN rO r � s �
��r �cvec C s8 dj | j�� | jd�d� | j�� �g}td�|�� d S )N�{issue}: {description}��issuer� z! - https://ubuntu.com/security/{}�
)r[ rA �upperr� r^ r\ )r� �linesrN rN rO �print_cve_header� s ��r� �fix_planc C s� | j }dj|j�� |jd�g}|j}t|t�rK|jr5|� t
j � |jD ]}|� d�t
j j
j|d��� q#n|jrK|� t
j� |jD ] }|� d| � qAtd�|�� d S )Nr� r� z - {})r� z - r� )�target_usn_planr[ rA r� r� �additional_data�
isinstancer( �associated_cvesrn r �SECURITY_FOUND_CVES�urls�SECURITY_CVE_PAGE�associated_launchpad_bugs� SECURITY_FOUND_LAUNCHPAD_BUGSr^ r\ )r� �
target_usnr� r� r� �lp_bugrN rN rO �print_usn_header� s* ��
���
r� r� rB rD c C sz t t| gd�|d�}|jjd j}|r$|jr$tjt� |j
p d|j�d��t |jjd � t � t
|jjd ||�\}}|S )N)�cves��optionsrD r �unexpected-error�� named_msg)�cve_planr* � cves_datar� �errorra r
�AnonymousUbuntuProErrorr � NamedMessage�coder� r^ �execute_fix_plan)r� rB rD r� r� rd �_rN rN rO �fix_cve� s �
��r� �
no_relatedc C s� t t| gd�|d�}|jjd jj}|r%|jr%tjt �
|j p d|j�d��t |jjd � t
dt jj| d� � t|jjd j||�\}}|tjtjfvrO|S |jjd j}|rZ|r\|S t
dt jjd�d d
� |D ��d � � t
dt j � i } |D ]}
t
d �|
j�� t|
||�| |
j< t
� qzt
t j� t|| t jd
� d} |D ]=}
| |
j \} }
t| |
jt j d
� | tj kr�t
dt j jdd� � d} | tj kr�|
D ]}|j r�t
d�|j!|j �� q�d} q�| r�t
dt j"j| d� � |S )N)�usnsr� r r� r� r� )�issue_idz
- c s s � | ]}|j V qd S rq )rA )�.0�usnrN rN rO � <genexpr> s � zfix_usn.<locals>.<genexpr>)� related_usnsz- {})�contextF�- �
fix operation�� operationTz
- {}: {})#�usn_planr, � usns_datar� r� r� ra r
r� r r� r� r� r^ � SECURITY_FIXING_REQUESTED_USNr[ r� r> rI �SYSTEM_NOT_AFFECTED�related_usns_plan�SECURITY_RELATED_USNSr\ � SECURITY_FIXING_RELATED_USNSrA �SECURITY_USN_SUMMARY�_handle_fix_status_message�FIX_ISSUE_CONTEXT_REQUESTED�FIX_ISSUE_CONTEXT_RELATED� SYSTEM_VULNERABLE_UNTIL_REBOOT�ENABLE_REBOOT_REQUIRED_TMPL�SYSTEM_STILL_VULNERABLErl rm �SECURITY_RELATED_USN_ERROR)r� rB r� rD r� r� �target_usn_statusr� r� �related_usn_status�related_usn_plan�failure_on_related_usnrd rF � unfixed_pkgrN rN rO �fix_usn� s� �
����� ������
�
��
���
�������r� rf rd rE rg rh �returnc C s� | sdS g }g }| D ]}|d7 }|� d�||�� |� |� q
tjd�dd�|� d d�t|���tdd �}d
�|t||��S ) z;Format the packages and status to an user friendly message.� � z{}/{}z{} {}:�(rQ �)rT �rU rV z{}
{})rn r[ r_ r` r\ r] r6 r) ) rf rd rE rg rh � msg_index�src_pkgs�src_pkg�
msg_headerrN rN rO ri ? s ��ri �tokenc
C s\ t tdd|gg�� z
t| |dd� W dS tjy- } z t |j� W Y d}~dS d}~ww )ztAttach to an Ubuntu Pro subscription with a given token.
:return: True if attach performed without errors.
�pro�attachT)r� � allow_enableNF)r^ r? r r
�UbuntuProErrorra )rD r� �errrN rN rO �_run_ua_attach[ s
��r� c C s> t � \} }| t�� v r ttjjt�| �t�| �d�� dS dS )z:Alert the user when running Pro on cloud with PRO support.)rA �cloud_specific_urlN) r2 r1 �keysr^ r �SECURITY_USE_PRO_TMPLr[ r0 �get)�
cloud_typer� rN rN rO �*_inform_ubuntu_pro_existence_if_applicablei s
���r� c
C s� t tj� t| d�}t dtjj|jd� � t|jd�}zt || d�}W n t
j yD } zt tj � t
|jd�}t|| d� |�d }~ww t dtj � t| |j�S )N)rD r� )� user_code)� magic_tokenr� )r^ r �CLI_MAGIC_ATTACH_INITr �CLI_MAGIC_ATTACH_SIGN_INr[ r� r r� r r
�MagicAttachTokenError�CLI_MAGIC_ATTACH_FAILEDr r �CLI_MAGIC_ATTACH_PROCESSINGr� �contract_token)rD �
initiate_resp� wait_options� wait_resp�e�revoke_optionsrN rN rO �_perform_magic_attachu s.
���
� �� r� c C sh t � ttj� tjtjg d�d�}|dkrdS |dkr t| �S |dkr2ttj� t d�}t
| |�S dS ) zZPrompt for attach to a subscription or token.
:return: True if attach performed.
)�s�a�c��
valid_choicesr� Fr� r� �> T) r� r^ r �*SECURITY_UPDATE_NOT_INSTALLED_SUBSCRIPTIONr �prompt_choices�SECURITY_FIX_ATTACH_PROMPTr� �PROMPT_ENTER_TOKEN�inputr� )rD �choicer� rN rN rO �_prompt_for_attach� s
�
r rF c C s4 t | �}tjtj�|�j|d�t| ��d�t dd�S )z�Format the list of unfixed packages into an message.
:returns: A string containing the message output for the unfixed
packages.
rQ )rg rS rT r� )
rZ r_ r` r �SECURITY_PKG_STILL_AFFECTEDrY r[ r\ r] r6 )rF �num_pkgs_unfixedrN rN rO � _format_unfixed_packages_msg� s � ��r c C s0 t | �}|d tjkr|rttj� dS dS dS )zuCheck if the Ubuntu Pro subscription is expired.
:returns: True if subscription is expired and not renewed.
r FT)r5 r4 �EXPIREDr^ r �(SECURITY_DRY_RUN_UA_EXPIRED_SUBSCRIPTION)rD rB �contract_expiry_statusrN rN rO � _check_subscription_is_expired� s
r c C s� ddl }ddlm} t� ttj� tjtj j
t d�ddgd�}|dkrFttj � t
d�}ttd d
gg�� |�|jd d d
�| � t| |�S dS )zdPrompt for attach a new subscription token to the user.
:return: True if attach performed.
r N)�cli)�url�rr� r� r r� �detachTr )�
assume_yesr[ F)�argparse�uaclientr r� r^ r �%SECURITY_UPDATE_NOT_INSTALLED_EXPIREDr r �SECURITY_FIX_RENEW_PROMPTr[ r= �PROMPT_EXPIRED_ENTER_TOKENr r? �
action_detach� Namespacer� )rD r r r r� rN rN rO �_prompt_for_new_token� s"
�
�
r �servicec C s� t tjj|d�� tjtjj|d�ddgd�}|dkrFt tdd|gg�� t| |dd�\}}|sD|d urDt |t
�rD|j d urDt |j j � |S d
S ) zMPrompt for enable a pro service.
:return: True if enable performed.
�r r� r� r� r� �enableT)rD r� r NF)
r^ r �SECURITY_SERVICE_DISABLEDr[ r r �SECURITY_FIX_ENABLE_PROMPTr? r r� r9 �messagera )rD r r �ret�reasonrN rN rO �_prompt_for_enable� s& �
���
r% c C s� t || d�}||�}|rR|�� \}}|tjkrdS |�� \}}|tjkrH|r4tdtj j
|j d� � dS t ||j �r<dS ttj
j
|j d�� dS ttjj
|j d�� dS )zQ
Verify if the Ubuntu Pro subscription has the required service enabled.
)rD r� Tr� r F)r7 �user_facing_statusr: �ACTIVE�applicability_statusr8 �
APPLICABLEr^ r �'SECURITY_DRY_RUN_UA_SERVICE_NOT_ENABLEDr[ r� r% � SECURITY_UA_SERVICE_NOT_ENABLED� SECURITY_UA_SERVICE_NOT_ENTITLED)r rD rB �ent_cls�ent�
ent_statusr� r( rN rN rO �)_handle_subscription_for_required_service s>
��� ��
���r0 r� r� r� c C s� | t jkr |rtjj||d�}ntjj|d�}tt�|�� d S | t j kr@|r0tj
j||d�}ntj j|d�}tt�|�� d S | t j kr`|rPtj
j||d�}ntjj|d�}tt�|�� d S |rktj
j||d�}ntjj|d�}tt�|�� d S )N)r� r� �r� )r> rI r �%SECURITY_ISSUE_RESOLVED_ISSUE_CONTEXTr[ �SECURITY_ISSUE_RESOLVEDr^ r �handle_unicode_charactersr� �'SECURITY_ISSUE_UNAFFECTED_ISSUE_CONTEXT�SECURITY_ISSUE_UNAFFECTEDr� �)SECURITY_ISSUE_NOT_RESOLVED_ISSUE_CONTEXT�SECURITY_ISSUE_NOT_RESOLVED)rd r� r� ra rN rN rO r� . s6
�
�
��r� re c C s. | t krtjS | tkrtjS | tkrtjS | S rq )r r �'SECURITY_UBUNTU_STANDARD_UPDATES_POCKETr �SECURITY_UA_INFRA_POCKETr �SECURITY_UA_APPS_POCKET)re rN rN rO rj S s rj � fix_context�stepc C sh | j |jjd|jjd� d| _tjj|jj|jj d�}t
d| � | j |jj g|d� d| _
tj| _d S )N�released�rc rd re F)�package�versionr� �rS rl T)rk �data�related_source_packagesre rK r �FIX_CANNOT_INSTALL_PACKAGEr[ �binary_package�binary_package_versionr^ rp �source_packagerL r> r� rJ )r< r= �warn_msgrN rN rO �)_execute_package_cannot_be_installed_step^ s ��
� rJ c C sR | j |jj|jjd� | jt|jj�7 _| j|jjt|jj�d� tj | _
d S )N)rc rd rB ) rk rC �source_packagesrd rE rZ rp r) r> r� rJ �r< r= rN rN rO �&_execute_security_issue_not_fixed_stepw s �
� rM c
C sh | j |jjd|jjd� | jt|jj�7 _|jjs)| js#tt j
� t j | _
d S t�� sE| jsEtt j� t j| _
| j|jjt jd� d S ttg d�g d� t|jj� g�� | jrat j | _
d S zt�� tjg d�|jj ddid � W n, ty� } z t|d
t|��}t|� t j| _
| j|jj|d� W Y d }~d S d }~ww t j | _
d | _ | j � |jj� d S ) Nr> r? rB )r �updatez&&)r �install�--only-upgrade�-y)zapt-getrO rP rQ �DEBIAN_FRONTEND�noninteractive)�cmd�override_env_varsra T) rk rC rK re rE rZ �binary_packagesrL r^ r �SECURITY_UPDATE_INSTALLEDr> rI rJ r �we_are_currently_rootrB �SECURITY_APT_NON_ROOTr� rp r? r] r �run_apt_update_command�run_apt_command� Exception�getattrru rK rH rN )r< r= r� ra rN rN rO �_execute_apt_upgrade_step� sl �
��
����
�
����
r^ c C s� |j jdkrtnt}| j|j jd|d� d| _t| j�j sD| j
r(t dt j
� nHt| j�sCtj| _| j|j jt jj|j jd�d� d S n,t| j| j
d�rp| j
rUt t j� nt| j�sptj| _| j|j jt jj|j jd�d� d S tj| _d S ) N� esm-infrar> r? Fr� r rB )rD rB )rC �required_servicer r rk rK rK r- rD � is_attachedrB r^ r � SECURITY_DRY_RUN_UA_NOT_ATTACHEDr r> r� rJ rp � SECURITY_UA_SERVICE_REQUIREDr[ r r
r �$SECURITY_UA_SERVICE_WITH_EXPIRED_SUBrI �r< r= re rN rN rO �_execute_attach_step� sL ���
��� �
�� rf c C s� |j jdkrtnt}| j|j jd|d� d| _t|j j| j| j �sBt
t j j
|j jd�� | j|j jt jj
|j jd�d� tj| _d S tjS )Nr_ r> r? Fr rB )rC r r r rk rK rK r0 rD rB r^ r r+ r[ rp �%SECURITY_UA_SERVICE_NOT_ENABLED_SHORTr> r� rJ rI re rN rN rO �_execute_enable_step� s: ��������rh c C s* |j jtjjkrttj� tj | _
d S d S rq ) rC rd r � NOT_AFFECTED�valuer^ r �SECURITY_NO_AFFECTED_PKGSr> r� rJ rL rN rN rO � _execute_noop_not_affected_step s
�rl c C s. t |jt�rttjj| j|jjd�� d S d S )N)r� rA ) r� rC r' r^ r �CVE_FIXED_BY_LIVEPATCHr[ rA �
patch_versionrL rN rN rO �%_execute_noop_fixed_by_livepatch_step" s ���ro c C sL t |jt�r$| j|jjd|jjd� ttj� | j t
|jj�7 _ d S d S )Nr> r? ) r� rC r& rk rK re r^ r rW rE rZ rL rN rN rO � _execute_noop_already_fixed_step. s �
�rp c C s� g | j �| j�}t| j|| jpg |d�}|�� t|dd� d�D ]j}t|t�r,t ||� t|t
�r6t ||� t|t �rHt
||� |jtjkrH nCt|t�rZt||� |jtjkrZ n1t|t�rlt||� |jtjkrl n t|t�rvt||� t|t�r�t||� t|t�r�t||� q t� |j r�tt t t dd� |j D ����� tj |_|jtjkr�t!j"|j#d�r�tj$|_t%j&j'dd �}t|� t(j)t*j+dd � t,|j| j� |j|j fS )
N)rA rB rC rD c S s | j S rq )�order)�xrN rN rO �<lambda>K s z"execute_fix_plan.<locals>.<lambda>)�keyc S s g | ]}|j �qS rN )rm )r� r� rN rN rO �
<listcomp>m s ��z$execute_fix_plan.<locals>.<listcomp>)rH r� r� )-�plan�warningsr@ rA �affected_packagesrb r] r� r$ rJ r% rM r r^ rJ r> rI r rf r rh r rl r ro r rp r^ rF r �listrG r� r
�
should_rebootrH r� r r� r[ r; �addr< �ENABLE_REBOOT_REQUIREDr� )r� rB rD � full_planr< r= �
reboot_msgrN rN rO r� ; s� ���
������ ��� r� c K sl t �tj| j�stj| jd��| jrtt j
� d| j� � v r)t | j| j|�}|jS t
| j| j| j|�}|jS )Nr1 r� )�re�matchr �CVE_OR_USN_REGEXr� r
� InvalidSecurityIssueIdFormatrB r^ r �SECURITY_DRY_RUN_WARNING�lowerr� r� r� � exit_code)�argsrD �kwargsrd rN rN rO r~ � s �
��r~ rq )r� N)r� )zr r_ �typingr r r r r r r r r r
r r r
r �uaclient.actionsr r �+uaclient.api.u.pro.attach.magic.initiate.v1r �)uaclient.api.u.pro.attach.magic.revoke.v1r r �'uaclient.api.u.pro.attach.magic.wait.v1r r � uaclient.api.u.pro.security.fixr r r r r r r r r r r r! r" r# r$ r% r& r' r( �'uaclient.api.u.pro.security.fix._commonr) �+uaclient.api.u.pro.security.fix.cve.plan.v1r* r+ r� �+uaclient.api.u.pro.security.fix.usn.plan.v1r, r� �(uaclient.api.u.pro.status.is_attached.v1r- �uaclient.cli.constantsr. r/ �uaclient.clouds.identityr0 r1 r2 �uaclient.configr3 �uaclient.contractr4 r5 �uaclient.defaultsr6 �uaclient.entitlementsr7 �(uaclient.entitlements.entitlement_statusr8 r9 r: �uaclient.filesr; �uaclient.files.noticesr< �uaclient.messages.urlsr= �uaclient.securityr> �uaclient.statusr? r@ r� r r� r� ru rv r� r� �intri r� r� r� r r r r r% r0 r� rj rJ rM r^ rf rh rl ro rp ro r� r~ rN rN rN rO �<module> s $
T > ���
�l������
�
���
�-���
�% �
��
��
�>�
�/�
�&�
��
� �
�
���
� N