File: //usr/lib/python3/dist-packages/uaclient/__pycache__/security_status.cpython-38.pyc
U
��Jh�h � @ s� d dl mZ d dlmZmZ d dlmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
mZmZ d dlZd dlmZmZmZmZ d d lmZ d d
lmZ d d lmZm Z m Z m Z m Z d d l m!Z! d d
l"m#Z#m$Z$ d dl%m&Z&m'Z'm(Z( d dl)m*Z*m+Z+m,Z,m-Z-m.Z. dZ/G dd� de�Z0dd� Z1edd�dd� �Z2e deej3 f d�dd�Z4ej3ej5e6d �d d �Z7edd�e6e6e8d �d d!��Z9e6e
e6e f ej:e6d"�d#d$�Z;eej3 e e6eeej:e6f f d%�d&d'�Z<e!e
e6e f d(�d)d*�Z=ee
e6e f d�d+d,�Z>e e6eeej:e6f f e
e6e f ee
e6e f d-�d.d/�Z?e!e
e6e f d(�d0d1�Z@dKe e6eej3 f e6e8dd4�d5d6�ZAd7d8� ZBd9d:� ZCe6e6e'e&eDeDe8d;�d<d=�ZEd>d?� ZFe!d@�dAdB�ZGdCdD� ZHdEdF� ZIdGdH� ZJdIdJ� ZKdS )L� )� defaultdict)�datetime�timezone)�Enum)� lru_cache)�choice)�Any� DefaultDict�Dict�List�TupleN)�
exceptions� livepatch�messages�util)�_reboot_required)� _is_attached)�PreserveAptCfg�get_apt_cache_datetime�get_apt_pkg_cache�get_esm_apt_pkg_cache�get_pkg_candidate_version)�UAConfig)�ESMAppsEntitlement�ESMInfraEntitlement)�ApplicabilityStatus�ApplicationStatus�ContractStatus)�get_distro_info�get_kernel_info�get_release_info�is_current_series_lts� is_supported)� esm-infra�esm-appsc @ s$ e Zd ZdZdZdZdZdZdZdS )� UpdateStatusz2Represents the availability of a security package.Zupgrade_availableZ upgrade_available_not_preferredZpending_attachZpending_enableZupgrade_unavailableN) �__name__�
__module__� __qualname__�__doc__� AVAILABLE�AVAILABLE_NOT_PREFERRED�
UNATTACHED� NOT_ENABLED� UNAVAILABLE� r/ r/ �:/usr/lib/python3/dist-packages/uaclient/security_status.pyr% ( s r% c C s t t�| �� d S )N)�printr Zcreate_package_list_str)�packagesr/ r/ r0 �print_package_list1 s r3 )�maxsizec C sR t � j} dd�| �fddd�| �fddd�| �fd dd
�| �fddd �| �fd iS ) N�Ubuntuz {}-security�standard-securityZ
UbuntuESMAppsz{}-apps-securityr$ Z UbuntuESMz{}-infra-securityr# z{}-apps-updatesz{}-infra-updates)r �series�format)r7 r/ r/ r0 �%get_origin_information_to_service_map5 s �r9 �str)�returnc C s` t t�} tt��F}dd� |jD �}|| d< t�|�}|D ]}| t||� �|� q8W 5 Q R X | S )Nc S s g | ]}|j r|�qS r/ )� current_ver��.0�packager/ r/ r0 �
<listcomp>G s z4get_installed_packages_by_origin.<locals>.<listcomp>�all) r �listr r r2 �apt_pkg�DepCache� get_origin_for_installed_package�append)�result�cache�installed_packages� dep_cacher? r/ r/ r0 � get_installed_packages_by_originA s
�
��rK )r? rJ r; c C s� | j s
dS | j j}t|�dkr@|�| �}|r6| j |kr:dS |j}|D ]B\}}t� �|j|jfd�}|tkrr| S |jdkrD|j S qDdS )a
Returns the origin for a package installed in the system.
Technically speaking, packages don't have origins - their versions do.
We check the available versions (installed, candidate) to determine the
most reasonable origin for the package.
� � �unknownr5 � third-party)
r< � file_list�lenZget_candidate_verr9 �get�origin�archive� ESM_SERVICESZ component)r? rJ Zavailable_origins� candidaterS �_�servicer/ r/ r0 rE V s$
�
rE )�pkg�versionr; c C s t | dd�}|r||kS dS )z;Returns True if the package version is a candidate version.F)Zcheck_esm_cache)r )rY rZ Zcandidate_versionr/ r/ r0 �_is_candidate_version{ s r[ )� service_name�ua_inforZ r; c C sl | dks |d r@| |d kr@t |jj|j�}|r8tjjS tjjS |d sPtjjS | |d krdtj jS tj
jS )z�Defines the update status for a package based on the service name.
For ESM-[Infra|Apps] packages, first checks if Pro is attached. If this is
the case, also check for availability of the service.
)r6 �standard-updates�attached�enabled_services�entitled_services) r[ �
parent_pkg�name�ver_strr% r* �valuer+ r, r- r. )r\ r] rZ Z is_candidater/ r/ r0 �get_update_status� s$
�
� ��
� rf )r2 r; c C s, t t�}tt���}| D �]}|jr|jD ]�}||jkr*d}|jD ]<\}}t� �|j |j
f�}|rB|| � ||j f� d} q�qB|jd d } |s*d| j
kr*|d � || j f� q*|j
|kr||j
}
|
jD ]N}||jkr�|jD ]8\}}t� �|j |j
f�}|r�|| � ||j f� q�q�q�qW 5 Q R X |S )z�Filters a list of packages looking for available updates.
All versions greater than the installed one are reported, based on where
it is provided, including ESM pockets, excluding backports.
FTr Z backportsr^ )r rB r r r< � version_listrP r9 rR rS rT rF Zsiterc ) r2 rG Z esm_cacher? rZ Zcounted_as_securityrS rW rX Zexpected_originZ esm_packager/ r/ r0 �filter_updates� sL
�����
��rh )�cfgr; c C s� t | �j}|g g d�}|r�t| �}t| �}|�� tjkrF|d �d� |�� d t j
krf|d �d� |�� tjkr�|d �d� |�� d t j
kr�|d �d� |S )z7Returns the Pro information based on the config object.)r_ r` ra ra r$ r r` r# ) r � is_attachedr r Zcontract_statusr ZENTITLEDrF �application_statusr �ENABLED)ri rj r] Zinfra_entitlementZapps_entitlementr/ r/ r0 � get_ua_info� s.
�
��
��rm c C s� z t �� } W n tjk
r& g Y S X t� j}| d k r�|d k r�|| jkr�| j d k r�| j jdkr�| j jd k r�t | j j�dkr�dd� | j jD �S g S )NZappliedr c S s" g | ]}|j pd |jpdd��qS )rL F�rc Zpatchedrn )r> Zfixr/ r/ r0 r@ s �z,get_livepatch_fixed_cves.<locals>.<listcomp>)
r �statusr
ZProcessExecutionErrorr Z proc_version_signature_versionZkernel�state�fixesrQ )Z lp_statusZour_kernel_versionr/ r/ r0 �get_livepatch_fixed_cves s.
����
�
�� �rr )�upgradable_versionsr] r; c C sT g }| � � D ]B\}}|D ]4\}}t|||�}|�|jj|j||||jd�� qq |S )N)r? rZ r\ ro rS Z
download_size)�itemsrf rF rb rc rd �size)rs r] �updatesrX rg rZ rS ro r/ r/ r0 �create_updates_list s �� rw c C s t | �}d|i}t� }|d }t|�|d< t|�}g |d< t||�}t|d �|d< t|d �|d< t|d �|d
< t|d �|d < t|d
�|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t|d �|d< t| �j|d< d||dt� id �S ) ag Returns the status of security updates on a system.
The returned dict has a 'packages' key with a list of all installed
packages which can receive security updates, with or without ESM,
reflecting the availability of the update based on the Pro status.
There is also a summary with the Ubuntu Pro information and the package
counts.
ZuarA Znum_installed_packagesr^ �mainZnum_main_packages�
restrictedZnum_restricted_packages�universeZnum_universe_packages�
multiverseZnum_multiverse_packagesrO Znum_third_party_packagesrN Znum_unknown_packagesr# Znum_esm_infra_packagesr$ Znum_esm_apps_packagesZnum_esm_infra_updatesZnum_esm_apps_updatesr6 Z num_standard_security_updates�reboot_requiredz0.1Z
fixed_cves)Z_schema_version�summaryr2 r )rm rK rQ rh rw r r| rr )ri r] r} �packages_by_originrI rs rv r/ r/ r0 �security_status_dict/ s:
���r rA F)�
package_lists�
show_items� always_showr; c C sL t | d �}ttjj|d�� dt t|��d }|dkrzt | d �t | d � t | d � }ttj�|�j||d d
�� |d kr�t | d �t | d
� t | d � }|s�|r�ttj�|�j||dd
�� |dk�rt | d �}|s�|�rttj�|�j||d�� |dk�r@t | d �}|�s&|�r@ttj �|�j||d�� td� d S )NrA )�count� rM )rA r# rx ry r# �Main/Restricted)�offsetr� �
repository)rA r$ rz r{ r$ �Universe/Multiverse)rA rO rO )r� r� )rA rN rN rL )
rQ r1 r ZSS_SUMMARY_TOTALr8 r: ZSS_SUMMARY_ARCHIVE� pluralizeZSS_SUMMARY_THIRD_PARTYZSS_SUMMARY_UNAVAILABLE) r� r� r� Ztotal_packagesr� Z packages_mrZ packages_umZpackages_thirdpartyZpackages_unknownr/ r/ r0 �_print_package_summarya sn
�
�� ��
�
�� ��
� ��
��� r� c C sH t � j} t| �j}d�t|j�t|j��}tt j
j|d�� td� d S )Nz{}/{}��daterL ) r r7 r �eolr8 r: Zmonth�yearr1 r ZSS_INTERIM_SUPPORT)r7 �eol_dater� r/ r/ r0 � _print_interim_release_support� s
r� c C sB t � j} t| �r4t| �j}ttjjt |j
�d�� n
ttj � d S )Nr� ) r r7 r" r r� r1 r ZSS_LTS_SUPPORTr8 r: r� ZSS_NO_SECURITY_COVERAGE)r7 r� r/ r/ r0 �_print_lts_support� s
r� �rX r� �service_status�service_applicability�installed_updates�available_updatesrj c
C s� t � j}t|�j}|tjkr6tjj|| t |j
�d�} ntj j| |t |j
�d�} |rn| dtj �
|�j|d� 7 } |r�| dtj�
|�j|d� 7 } t| � |r�|tjkr�|tjkr�td� ttjj| d�� td� d S )N)r� rX r� )rX r� r� r� )rv rL �rX )r r7 r Zeol_esmr rl r ZSS_SERVICE_ENABLEDr8 r: r� ZSS_SERVICE_ADVERTISEZSS_SERVICE_ENABLED_COUNTSr� ZSS_SERVICE_ADVERTISE_COUNTSr1 �DISABLEDr Z
APPLICABLEZSS_SERVICE_COMMAND)
rX r� r� r� r� r� rj r7 Z eol_date_esm�messager/ r/ r0 �_print_service_support� sF
��
��
��
���r� c C sb t � } | d kr$ttj� td� d S t�tj�}|| }|jdkr^ttj j
|jd�� td� d S )NrL r )�days) r r1 r ZSS_UPDATE_UNKNOWNr �nowr Zutcr� ZSS_UPDATE_DAYSr8 )Zlast_apt_updater� Ztime_since_updater/ r/ r0 �_print_apt_update_call� s
r� )ri c
C s� t | �}t| �}|�� d }|�� d }|�� d }|�� d }t� j}t� }t| �d } t� }
t |
d |
d |
d �d } t |
d |
d |
d �d } t
|
� t t j
� t d � t� |s�t|�r�t� t t j� d S |tjkr�t� | �rt t j� n
t t j� t d � tdd
||t|
d �t| �| d � |
d �sT|
d �sT|
d �rvtdd ||t|
d �t| �| d � | �s�t t j� d S )
Nr r_ rx ry r# rz r{ r$ rL r� r� r� )r r rk �applicability_statusr r7 r! rm rK rh r� r1 r Z SS_HELP_CALLr� r" r� �SS_NO_INTERIM_PRO_SUPPORTr r� r� ZSS_IS_ATTACHEDZSS_IS_NOT_ATTACHEDr� rQ Z
SS_LEARN_MORE)
ri �
esm_infra_ent� esm_apps_ent�esm_infra_status�esm_infra_applicability�esm_apps_status�esm_apps_applicabilityr7 �is_ltsrj r~ Z"security_upgradable_versions_infraZ!security_upgradable_versions_appsr/ r/ r0 �security_status� s� ��������
� ���
�
r� c C sx t � } | d }dd� |D �}t| ddd� |rjttj� td� ttj� t|� ttjjt |�d�� n
ttj
� d S )NrO c S s g | ]
}|j �qS r/ �rc r= r/ r/ r0 r@ A s z-list_third_party_packages.<locals>.<listcomp>T�r� r� rL �r? ) rK r� r1 r ZSS_THIRD_PARTY�SS_PACKAGES_HEADERr3 � SS_SHOW_HINTr8 r ZSS_NO_THIRD_PARTY)r~ Zthird_party_packages�
package_namesr/ r/ r0 �list_third_party_packages> s �
r� c C sx t � } | d }dd� |D �}t| ddd� |rjttj� td� ttj� t|� ttjjt |�d�� n
ttj
� d S )NrN c S s g | ]
}|j �qS r/ r� r= r/ r/ r0 r@ U s z-list_unavailable_packages.<locals>.<listcomp>Tr� rL r� ) rK r� r1 r ZSS_UNAVAILABLEr� r3 r� r8 r ZSS_NO_UNAVAILABLE)r~ Zunknown_packagesr� r/ r/ r0 �list_unavailable_packagesR s �
r� c s� t � }|d }|d |d }|| }t� }t|�d }|D ]\}}|�|j� q<t� j} t� }
t| �} t | �} | �
� d }
| � � d }t dd� |D ���t dd� |D ��� t � �fdd�|D ��}t
|dd d
� |
s�t| �r�t� ttj� d S |
tjk�r t� td � tdd |
|t|�t|�d
d� ttjjdd�� td � t| ��s� �rnttjjdd�� t� � ��r�ttj jdd�� t�� � �p��}|�r�|�r�tj jdd�}ntj jdd�}t|� t|� |�r�ttj jt |�d�� d S )Nr# rx ry r c S s g | ]
}|j �qS r/ r� r= r/ r/ r0 r@ s z+list_esm_infra_packages.<locals>.<listcomp>c S s g | ]
}|j �qS r/ r� r= r/ r/ r0 r@ � s c s& g | ] }|j �kr|j � kr|j �qS r/ r� r= �Zavailable_package_namesZinstalled_package_namesr/ r0 r@ � s
�Tr� rL r� Fr� r� r� )!rK �setrh �addrb r r7 r! r r rk r� �sortedr� r" r� r1 r r� r r� r� r� rQ �SS_SERVICE_HELPr8 �SS_UPDATES_AVAILABLEr3 �SS_UPDATES_INSTALLED�SS_FURTHER_OTHER_PACKAGES�SS_OTHER_PACKAGESr� r )ri r~ Zinfra_packagesZ mr_packagesZall_infra_packagesZ
infra_updates� security_upgradable_versions�updaterW r7 r� r� r� r� r� �remaining_package_names� hint_list�msgr/ r� r0 �list_esm_infra_packagesg s� � � � �� �
�
�r� c s� t � }|d }|d |d }|| }t� }t|�d }|D ]\}}|�|j� q<t� } t| �}
|
�� d } |
�� d } t dd� |D ���t dd� |D ��� t � �fdd�|D ��}
t
|dd d
� | s�t t j
� d S tdd | | t|�t|�d d
� t t jjdd�� t d� |�r�� �r2t t jjdd�� t� � ��rRt t jjdd�� t�� � �pZ�}|
�r�|�rxt jjdd�}nt jjdd�}t |� t|
� |�r�t t jjt|�d�� d S )Nr$ rz r{ r c S s g | ]
}|j �qS r/ r� r= r/ r/ r0 r@ � s z*list_esm_apps_packages.<locals>.<listcomp>c S s g | ]
}|j �qS r/ r� r= r/ r/ r0 r@ � s c s& g | ] }|j �kr|j � kr|j �qS r/ r� r= r� r/ r0 r@ � s
�Tr� r� Fr� r� rL r� )rK r� rh r� rb r! r rk r� r� r� r1 r r� r� rQ r� r8 r� r3 r� r� r� r� r )ri r~ Z
apps_packagesZ um_packagesZall_apps_packagesZ apps_updatesr� r� rW r� r� r� r� r� r� r� r/ r� r0 �list_esm_apps_packages� s~ �� � � �� �
�
�r� )rA F)L� collectionsr r r �enumr � functoolsr Zrandomr �typingr r r
r r rC Zuaclientr
r r r Z5uaclient.api.u.pro.security.status.reboot_required.v1r Z(uaclient.api.u.pro.status.is_attached.v1r Z uaclient.aptr r r r r Zuaclient.configr Zuaclient.entitlementsr r Z(uaclient.entitlements.entitlement_statusr r r Zuaclient.systemr r r r! r" rU r% r3 r9 ZPackagerK rD r: rE �boolr[ ZVersionrf rh rm rr rw r r� r� r� �intr� r� r� r� r� r� r� r/ r/ r/ r0 �<module> s�
� � %
� � @!
� 4 �� ?
� 2MY