File: //usr/lib/python3/dist-packages/uaclient/__pycache__/security_status.cpython-310.pyc
o
nHJe�d � @ s� d dl mZ d dlmZmZ d dlmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
mZmZ d dlZd dlmZmZ d d lmZ d d
lmZ d d lmZmZmZm Z d d l m Z d d
l m Z m!Z! d dl"m#Z#m$Z$m%Z% d dl&m'Z'm(Z(m)Z)m*Z*m+Z+ d dl,m-Z- dZ.G dd� de�Z/edd�dd� �Z0de deej1 f fdd�Z2dej1d ej3de4fd d �Z5d e4d e
e4e f de4fd!d"�Z6d#eej1 de e4eeej7e4f f fd$d%�Z8d&e de
e4e f fd'd(�Z9dee
e4e f fd)d*�Z:d+e e4eeej7e4f f d e
e4e f dee
e4e f fd,d-�Z;d&e de
e4e f fd.d/�Z< 0 1dPd2e e4eej1 f d3e4d4e=ddfd5d6�Z>d7d8� Z?d9d:� Z@d;e4d<e4d=e$d>e#d?eAd@eAdAe=fdBdC�ZBdDdE� ZCd&e fdFdG�ZDdHdI� ZEdJdK� ZFdLdM� ZGdNdO� ZHdS )Q� )� defaultdict)�datetime�timezone)�Enum)� lru_cache)�choice)�Any� DefaultDict�Dict�List�TupleN)� livepatch�messages)�_reboot_required)� _is_attached)�PreserveAptCfg�get_apt_cache_datetime�get_apt_pkg_cache�get_esm_apt_pkg_cache)�UAConfig)�ESMAppsEntitlement�ESMInfraEntitlement)�ApplicabilityStatus�ApplicationStatus�ContractStatus)�get_distro_info�get_kernel_info�get_release_info�is_current_series_lts� is_supported)�print_package_list)� esm-infra�esm-appsc @ s e Zd ZdZdZdZdZdZdS )� UpdateStatusz2Represents the availability of a security package.�upgrade_available�pending_attach�pending_enable�upgrade_unavailableN)�__name__�
__module__� __qualname__�__doc__� AVAILABLE�
UNATTACHED� NOT_ENABLED� UNAVAILABLE� r0 r0 �:/usr/lib/python3/dist-packages/uaclient/security_status.pyr# ( s r# )�maxsizec C sR t � j} dd�| �fddd�| �fddd�| �fd dd
�| �fddd �| �fd iS ) N�Ubuntuz {}-security�standard-security�
UbuntuESMAppsz{}-apps-securityr" � UbuntuESMz{}-infra-securityr! z{}-apps-updatesz{}-infra-updates)r �series�format)r7 r0 r0 r1 �%get_origin_information_to_service_map0 s �r9 �return�strc C sv t t�} tt��)}dd� |jD �}|| d< t�|�}|D ] }| t||� �|� q W d � | S 1 s4w Y | S )Nc S s g | ]}|j r|�qS r0 )� current_ver��.0�packager0 r0 r1 �
<listcomp>B s
��z4get_installed_packages_by_origin.<locals>.<listcomp>�all) r �listr r �packages�apt_pkg�DepCache� get_origin_for_installed_package�append)�result�cache�installed_packages� dep_cacher? r0 r0 r1 � get_installed_packages_by_origin< s"
�
�
�
�
�
rL r? rK c C s� | j sdS | j j}t|�dkr |�| �}|r| j |kr dS |j}|D ]!\}}t� �|j|jfd�}|tv r9| S |jdkrC|j S q"dS )a
Returns the origin for a package installed in the system.
Technically speaking, packages don't have origins - their versions do.
We check the available versions (installed, candidate) to determine the
most reasonable origin for the package.
� � �unknownr3 � third-party)
r< � file_list�len�get_candidate_verr9 �get�origin�archive� ESM_SERVICES� component)r? rK �available_origins� candidaterU �_�servicer0 r0 r1 rF Q s$
�
�rF � service_name�ua_infoc C sP | dv s|d r| |d v rt jjS |d st jjS | |d v r$t jjS t jjS )z�Defines the update status for a package based on the service name.
For ESM-[Infra|Apps] packages, first checks if Pro is attached. If this is
the case, also check for availability of the service.
)r4 �standard-updates�attached�enabled_services�entitled_services)r# r, �valuer- r. r/ )r] r^ r0 r0 r1 �get_update_statusv s � rd rC c C s> t t�}tt���}| D ]�}|jr�|jD ]C}||jkrVd}|jD ] \}}t� �|j |j
f�}|r=|| � ||j f� d} nq |jd d } |sVd| j
vrV|d � || j f� q|j
|v r�||j
}
|
jD ]'}||jkr�|jD ] \}}t� �|j |j
f�}|r�|| � ||j f� nqnqdq W d � |S 1 s�w Y |S )z�Filters a list of packages looking for available updates.
All versions greater than the installed one are reported, based on where
it is provided, including ESM pockets, excluding backports.
FTr � backportsr_ N)r rB r r r< � version_listrQ r9 rT rU rV rG �site�name) rC rH � esm_cacher? �version�counted_as_securityrU r[ r\ �expected_origin� esm_packager0 r0 r1 �filter_updates� sZ
����
��
�����
�.�.rn �cfgc C s� t | �j}|g g d�}|rQt| �}t| �}|�� tjkr#|d �d� |�� d t j
kr3|d �d� |�� tjkrA|d �d� |�� d t j
krQ|d �d� |S )z7Returns the Pro information based on the config object.)r` ra rb rb r" r ra r! ) r � is_attachedr r �contract_statusr �ENTITLEDrG �application_statusr �ENABLED)ro rp r^ �infra_entitlement�apps_entitlementr0 r0 r1 � get_ua_info� s*
�
�
�rw c C sr t �� } t� j}| d ur7|d ur7|| jkr7| j d ur7| j jdkr7| j jd ur7t| j j�dkr7dd� | j jD �S g S )N�appliedr c S s" g | ]
}|j pd |jp dd��qS )rM F�rh �patchedry )r> �fixr0 r0 r1 r@ � s ��z,get_livepatch_fixed_cves.<locals>.<listcomp>)r
�statusr � proc_version_signature_version�kernel�state�fixesrR )� lp_status�our_kernel_versionr0 r0 r1 �get_livepatch_fixed_cves� s
�r� �upgradable_versionsc C sR g }| � � D ] \}}t||�}|D ]\}}|�|jj|j||||jd�� qq|S )N)r? rj r] r| rU �
download_size)�itemsrd rG �
parent_pkgrh �ver_str�size)r� r^ �updatesr\ rf r| rj rU r0 r0 r1 �create_updates_list� s
��� r� c C s t | �}d|i}t� }|d }t|�|d< t|�}g |d< t||�}t|d �|d< t|d �|d< t|d �|d
< t|d �|d < t|d
�|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t| �j|d< d||dt� id �S ) ag Returns the status of security updates on a system.
The returned dict has a 'packages' key with a list of all installed
packages which can receive security updates, with or without ESM,
reflecting the availability of the update based on the Pro status.
There is also a summary with the Ubuntu Pro information and the package
counts.
�uarA �num_installed_packagesr_ �main�num_main_packages�
restricted�num_restricted_packages�universe�num_universe_packages�
multiverse�num_multiverse_packagesrP �num_third_party_packagesrO �num_unknown_packagesr! �num_esm_infra_packagesr" �num_esm_apps_packages�num_esm_infra_updates�num_esm_apps_updatesr4 � num_standard_security_updates�reboot_requiredz0.1�
fixed_cves)�_schema_version�summaryrC r
)rw rL rR rn r� r r� r� )ro r^ r� �packages_by_originrJ r� r� r0 r0 r1 �security_status_dict s:
���r� rA F�
package_lists�
show_items� always_showc C sB t | d �}ttjj|d�� dt t|��d }|dv r=t | d �t | d � t | d � }ttj�|�j||d d
�� |d v ret | d �t | d
� t | d � }|sW|rettj�|�j||dd
�� |dv r�t | d �}|ss|r�ttj�|�j||d�� |dv r�t | d �}|s�|r�ttj �|�j||d�� td� d S )NrA )�count� rN )rA r! r� r� r! �Main/Restricted)�offsetr� �
repository)rA r" r� r� r" �Universe/Multiverse)rA rP rP )r� r� )rA rO rO rM )
rR �printr �SS_SUMMARY_TOTALr8 r; �SS_SUMMARY_ARCHIVE� pluralize�SS_SUMMARY_THIRD_PARTY�SS_SUMMARY_UNAVAILABLE) r� r� r� �total_packagesr� � packages_mr� packages_um�packages_thirdparty�packages_unknownr0 r0 r1 �_print_package_summaryD sn
�
�� ��
�
�� �� ��� ��� r� c C sH t � j} t| �j}d�t|j�t|j��}tt j
j|d�� td� d S )Nz{}/{}��daterM ) r r7 r �eolr8 r; �month�yearr� r �SS_INTERIM_SUPPORT)r7 �eol_dater� r0 r0 r1 � _print_interim_release_support� s
r� c C sD t � j} t| �rt| �j}ttjjt |j
�d�� d S ttj � d S )Nr� ) r r7 r r r� r� r �SS_LTS_SUPPORTr8 r; r� �SS_NO_SECURITY_COVERAGE)r7 r� r0 r0 r1 �_print_lts_support� s
r� r\ r� �service_status�service_applicability�installed_updates�available_updatesrp c
C s� t � j}t|�j}|tjkrtjj|| t |j
�d�} n tj j| |t |j
�d�} |r7| dtj �
|�j|d� 7 } |rG| dtj�
|�j|d� 7 } t| � |rd|tjkrd|tjkrdtd� ttjj| d�� td� d S )N)r� r\ r� )r\ r� r� r� )r� rM �r\ )r r7 r �eol_esmr rt r �SS_SERVICE_ENABLEDr8 r; r� �SS_SERVICE_ADVERTISE�SS_SERVICE_ENABLED_COUNTSr� �SS_SERVICE_ADVERTISE_COUNTSr� �DISABLEDr �
APPLICABLE�SS_SERVICE_COMMAND)
r\ r� r� r� r� r� rp r7 � eol_date_esm�messager0 r0 r1 �_print_service_support� sF
��
�
�
�
��
r� c C sf t � } | d u rttj� td� d S t�tj�}|| }|jdkr1ttj j
|jd�� td� d S d S )NrM r )�days) r r� r �SS_UPDATE_UNKNOWNr �nowr �utcr� �SS_UPDATE_DAYSr8 )�last_apt_updater� �time_since_updater0 r0 r1 �_print_apt_update_call� s
�r� c C s� t | ��� d }t | ��� d }t| ��� d }t| ��� d }t� j}t� }t| �d }t� }t |d |d |d �d } t |d |d |d �d }
t
|� t t j
� t d � t� |spt|�rit� t t j� d S |tjkrxt� |r�t t j� nt t j� t d � tdd
||t|d �t| �|d � |d s�|d s�|d r�tdd ||t|d �t|
�|d � |s�t t j� d S d S )
Nr r` r� r� r! r� r� r" rM r� �r\ r� r� r� r� r� rp r� )r rs �applicability_statusr r r7 r rw rL rn r� r� r � SS_HELP_CALLr� r r� �SS_NO_INTERIM_PRO_SUPPORTr r� r� �SS_IS_ATTACHED�SS_IS_NOT_ATTACHEDr� rR �
SS_LEARN_MORE) ro �esm_infra_status�esm_infra_applicability�esm_apps_status�esm_apps_applicabilityr7 �is_ltsrp r� �"security_upgradable_versions_infra�!security_upgradable_versions_appsr0 r0 r1 �security_status� s�
� ��������
� ���
�
�r� c C �z t � } | d }dd� |D �}t| ddd� |r6ttj� td� ttj� t|� ttjjt |�d�� d S ttj
� d S )NrP c S � g | ]}|j �qS r0 �rh r= r0 r0 r1 r@ # � z-list_third_party_packages.<locals>.<listcomp>T�r� r� rM �r? ) rL r� r� r �SS_THIRD_PARTY�SS_PACKAGES_HEADERr � SS_SHOW_HINTr8 r �SS_NO_THIRD_PARTY)r� �third_party_packages�
package_namesr0 r0 r1 �list_third_party_packages s �
r� c C r� )NrO c S r� r0 r� r= r0 r0 r1 r@ 7 r� z-list_unavailable_packages.<locals>.<listcomp>Tr� rM r� ) rL r� r� r �SS_UNAVAILABLEr� r r� r8 r �SS_NO_UNAVAILABLE)r� �unknown_packagesr� r0 r0 r1 �list_unavailable_packages4 s �
r� c s� t � }|d }|d |d }|| }t� }t|�d }|D ]
\}}|�|j� q t� j} t� }
t| �� � d } t| ��
� d } t dd� |D ���t dd� |D ��� t � �fdd�|D ��}
t |dd d
� |
sut
| �rnt� ttj� d S | tjkr�t� td � tdd | | t|�t|�d
d� ttjjdd�� td � t
| �s� r�ttjjdd�� t� � �r�ttjjdd�� t�� � p}|
r�|r�tj jdd�}ntj jdd�}t|� t|
� |r�ttj jt |�d�� d S d S d S )Nr! r� r� r c S r� r0 r� r= r0 r0 r1 r@ ` r� z+list_esm_infra_packages.<locals>.<listcomp>c S r� r0 r� r= r0 r0 r1 r@ c r� c �& g | ]}|j �vr|j � vr|j �qS r0 r� r= ��available_package_names�installed_package_namesr0 r1 r@ f �
�Tr� rM r� Fr� r� r� ) rL �setrn �addr� r r7 r r rs r� �sortedr� r r� r� r r� r r� r� r� rR �SS_SERVICE_HELPr8 �SS_UPDATES_AVAILABLEr �SS_UPDATES_INSTALLED�SS_FURTHER_OTHER_PACKAGES�SS_OTHER_PACKAGESr� r )ro r� �infra_packages� mr_packages�all_infra_packages�
infra_updates� security_upgradable_versions�updater[ r7 r� r� r� �remaining_package_names� hint_list�msgr0 r� r1 �list_esm_infra_packagesI s� �
� � � �� �
� ��r c s� t � }|d }|d |d }|| }t� }t|�d }|D ]
\}}|�|j� q t� } t| ��� d }
t| ��� d } t dd� |D ���t dd� |D ��� t � �fdd�|D ��} t
|dd d
� | sjt t j
� d S tdd |
| t|�t|�d d
� t t jjdd�� t d� |rԈ r�t t jjdd�� t� � �r�t t jjdd�� t�� � p��}
| r�|
r�t jjdd�}nt jjdd�}t |� t| � |
r�t t jjt|
�d�� d S d S d S )Nr" r� r� r c S r� r0 r� r= r0 r0 r1 r@ � r� z*list_esm_apps_packages.<locals>.<listcomp>c S r� r0 r� r= r0 r0 r1 r@ � r� c r� r0 r� r= r� r0 r1 r@ � r� Tr� r� Fr� r� rM r� )rL r rn r r� r r rs r� r r� r� r r� r� rR r r8 r r r r r r� r )ro r� �
apps_packages� um_packages�all_apps_packages� apps_updatesr r
r[ r� r� r� r r r r0 r� r1 �list_esm_apps_packages� s| �� � � �� �
� ��r )rA F)I� collectionsr r r �enumr � functoolsr �randomr �typingr r r
r r rD �uaclientr
r �5uaclient.api.u.pro.security.status.reboot_required.v1r �(uaclient.api.u.pro.status.is_attached.v1r � uaclient.aptr r r r �uaclient.configr �uaclient.entitlementsr r �(uaclient.entitlements.entitlement_statusr r r �uaclient.systemr r r r r �
uaclient.utilr rW r# r9 �PackagerL rE r; rF rd �Versionrn rw r� r� r� �boolr� r� r� �intr� r� r� r� r� r r r0 r0 r0 r1 �<module> s�
���
� %�
�@!�
�
�4����
�? ������
�2L X