File: //lib/python3/dist-packages/uaclient/cli/__pycache__/fix.cpython-38.pyc
U
��Jh�r � @ s& d dl Z d dlmZmZmZmZmZmZmZ d dl m
Z
m Z m Z m
Z
mZ d dlmZmZ d dlmZ d dlmZmZ d dlmZmZ d dlmZm Z m Z d d l m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2 d d
l3m4Z4 d d l3m5Z6 d d l7m8Z8 d d l7m5Z9 d d
l:m;Z;m<Z< d dl=m>Z> d dl?m@Z@mAZAmBZB d dlCmDZD d dlEmFZF d dlGmHZHmIZImJZJ d dlKmLZL d dlMmNZN d dlOmPZP d dlQmRZRmSZSmTZT d dlUmVZV d dlWmXZX d dlYmZZZ d dl[m\Z\ G dd � d �Z]e)d �d d �Z^e+d �d!d"�Z_e`eaeLd#�d$d%�Zbe`eaeaeLd&�d'd(�Zcdpee` e`ededee` e`d)�d*d+�ZeeLe`ead,�d-d.�Zfdd/�d0d1�ZgeLd2�d3d4�ZheLead5�d6d7�Ziee` e`d8�d9d:�ZjeLeaead;�d<d=�ZkeLead5�d>d?�ZleLe`ead@�dAdB�Zme`eLeaeadC�dDdE�Zndqee`e`dG�dHdI�Zoe`dJ�dKdL�Zpe]e.dM�dNdO�Zqe]e/dM�dPdQ�Zre]e-dM�dRdS�Zse]e"dM�dTdU�Zte]e#dM�dVdW�Zue]e$dM�dXdY�Zve]e(dM�dZd[�Zwe]e&dM�d\d]�Zxe]e%dM�d^d_�Zye)eaeLeeee f d`�dadb�Zze>j{dcdd�dedf� �Z|eBdce j}e j~e|eFjdgeAe@dhe j�di�e@dje j�dkdl�e@dme j�dkdl�gdn�gdo�Z�dS )r� N)�Dict�List�
NamedTuple�Optional�Set�Tuple�Union)�apt�
exceptions�messages�system�util)�attach_with_token�enable_entitlement_by_name)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)� FixStatus�UnfixedPackage�status_message)�ESM_APPS_POCKET�ESM_INFRA_POCKET�STANDARD_UPDATES_POCKET�FixPlanAptUpgradeStep�FixPlanAttachStep�FixPlanEnableStep�FixPlanNoOpAlreadyFixedStep�FixPlanNoOpLivepatchFixStep�FixPlanNoOpStatus�FixPlanNoOpStep�
FixPlanResult� FixPlanStep�FixPlanUSNResult�FixPlanWarning�"FixPlanWarningFailUpdatingESMCache�&FixPlanWarningPackageCannotBeInstalled�#FixPlanWarningSecurityIssueNotFixed�NoOpAlreadyFixedData�NoOpLivepatchFixData�USNAdditionalData)�CVEFixPlanOptions)�_plan)�USNFixPlanOptions)�ContractExpiryStatus� _is_attached)�cli_util)� ProArgument�ProArgumentGroup�
ProCommand)�
action_detach)� HelpCategory)�CLOUD_TYPE_TO_TITLE�PRO_CLOUD_URLS�get_cloud_type)�UAConfig)�PRINT_WRAP_WIDTH)�entitlement_factory)�ApplicabilityStatus�CanEnableFailure�UserFacingStatus)�notices)�Notice)�
PRO_HOME_PAGE)�colorize_commandsc @ s\ e Zd Zeeee ed�dd�Zdd� Zd
ee ee e d�dd �Z
ee ed
�d d �Z dS )�
FixContext��title�dry_run�
affected_pkgs�cfgc C sJ d| _ g | _t� | _tj| _|| _|| _|| _ || _
d| _ d| _ d| _
d S )Nr TF)� pkg_index� unfixed_pkgs�set�installed_pkgsr �SYSTEM_NON_VULNERABLE�
fix_statusrF rH rG rI �should_print_pkg_header� warn_package_cannot_be_installed�fixed_by_livepatch)�selfrF rG rH rI � rT �2/usr/lib/python3/dist-packages/uaclient/cli/fix.py�__init__R s zFixContext.__init__c C sN | j rJtj�t| j ��jt| j �d�t| j ��d�}tt j
|t ddd�� d S )N�, )�count�pkgs� F)�width�subsequent_indentZreplace_whitespace) rH r ZSECURITY_AFFECTED_PKGS� pluralize�len�format�join�sorted�print�textwrap�fillr; )rS �msgrT rT rU �print_fix_headere s ����zFixContext.print_fix_headerN�� source_pkgs�status�pocketc C s4 | j r0tt||| jt| j�|r&t|�nd d�� d S )N)�pkg_listri rJ �num_pkgs�
pocket_source)rP rb �_format_packages_messagerJ r^ rH �get_pocket_description)rS rh ri rj rT rT rU �print_pkg_headerv s ��zFixContext.print_pkg_header�rY �unfixed_reasonc C s" |D ]}| j �t||d�� qd S )N)�pkgrr )rK �appendr )rS rY rr rs rT rT rU �add_unfixed_packages� s
�z FixContext.add_unfixed_packages)N) �__name__�
__module__� __qualname__�str�boolr r: rV rf r rp ru rT rT rT rU rD Q s � �� rD ��cvec C s8 dj | j�� | jd�d� | j�� �g}td�|�� d S )N�{issue}: {description}��issue� descriptionz! - https://ubuntu.com/security/{}�
)r_ rF �upperr� rb r` )r| �linesrT rT rU �print_cve_header� s ��r� )�fix_planc C s� | j }dj|j�� |jd�g}|j}t|t�r�|jrj|� t
j � |jD ] }|� d�t
j j
j|d��� qFn,|jr�|� t
j� |jD ]}|� d| � q�td�|�� d S )Nr} r~ z - {}r{ z - r� )�target_usn_planr_ rF r� r� �additional_data�
isinstancer+ Zassociated_cvesrt r ZSECURITY_FOUND_CVESZurlsZSECURITY_CVE_PAGEZassociated_launchpad_bugsZ SECURITY_FOUND_LAUNCHPAD_BUGSrb r` )r� Z
target_usnr� r� r| Zlp_bugrT rT rU �print_usn_header� s* ��
��
r� )�security_issuerG rI c C sz t t| gd�|d�}|jjd j}|rH|jrHtjt� |j
p<d|j�d��t |jjd � t � t
|jjd ||�\}}|S )N)�cves�ZoptionsrI r �unexpected-error�Z named_msg)�cve_planr, Z cves_datar� �errorre r
�AnonymousUbuntuProErrorr � NamedMessage�coder� rb �execute_fix_plan)r� rG rI r� r� ri �_rT rT rU �fix_cve� s
�
��r� )r� rG �
no_relatedrI c C s� t t| gd�|d�}|jjd jj}|rJ|jrJtjt �
|j p>d|j�d��t |jjd � t
dt jj| d� � t|jjd j||�\}}|tjtjfkr�|S |jjd j}|r�|r�|S t
dt jjd�d d
� |D ��d � � t
dt j � i } |D ],}
t
d �|
j�� t|
||�| |
j< t
� q�t
t j� t|| t jd
� d} |D ]�}
| |
j \} }
t| |
jt j d
� | tj k�r�t
dt j jdd� � d} | tj k�rD|
D ]"}|j �r�t
d�|j!|j �� �q�d} �qD| �r�t
dt j"j| d� � |S )N)�usnsr� r r� r� r� )�issue_idz
- c s s | ] }|j V qd S �N)rF )�.0ZusnrT rT rU � <genexpr>� s zfix_usn.<locals>.<genexpr>)Z related_usnsz- {})�contextF�- �
fix operation�Z operationTz
- {}: {})#�usn_planr. Z usns_datar� r� r� re r
r� r r� r� r� rb Z SECURITY_FIXING_REQUESTED_USNr_ r� r rN �SYSTEM_NOT_AFFECTED�related_usns_planZSECURITY_RELATED_USNSr` Z SECURITY_FIXING_RELATED_USNSrF ZSECURITY_USN_SUMMARY�_handle_fix_status_messageZFIX_ISSUE_CONTEXT_REQUESTEDZFIX_ISSUE_CONTEXT_RELATED� SYSTEM_VULNERABLE_UNTIL_REBOOT�ENABLE_REBOOT_REQUIRED_TMPL�SYSTEM_STILL_VULNERABLErr rs ZSECURITY_RELATED_USN_ERROR)r� rG r� rI r� r� Ztarget_usn_statusr� r� Zrelated_usn_statusZrelated_usn_planZfailure_on_related_usnri rK � unfixed_pkgrT rT rU �fix_usn� s�
�
����� �������
�� ��� �����r� )rk ri rJ rl rm �returnc C s� | sdS g }g }| D ](}|d7 }|� d�||�� |� |� qtjd�dd�|� d d�t|���tdd �}d
�|t||��S ) z;Format the packages and status to an user friendly message.� � z{}/{}z{} {}:�(rW �)rZ �r[ r\ z{}
{})rt r_ rc rd r` ra r; r ) rk ri rJ rl rm Z msg_indexZsrc_pkgsZsrc_pkgZ
msg_headerrT rT rU rn / s" ��rn )rI �tokenr� c
C sb t tdd|gg�� zt| |dd� W dS tjk
r\ } zt |j� W Y �dS d}~X Y nX dS )ztAttach to an Ubuntu Pro subscription with a given token.
:return: True if attach performed without errors.
�proZattachT)r� Z allow_enableFN)rb rC r r
ZUbuntuProErrorre )rI r� �errrT rT rU �_run_ua_attachK s
r� )r� c C s: t � \} }| t�� kr6ttjjt�| �t�| �d�� dS )z:Alert the user when running Pro on cloud with PRO support.)rF Zcloud_specific_urlN) r9 r8 �keysrb r ZSECURITY_USE_PRO_TMPLr_ r7 �get)Z
cloud_typer� rT rT rU �*_inform_ubuntu_pro_existence_if_applicableY s
��r� �rI c
C s� t tj� t| d�}t dtjj|jd� � t|jd�}zt || d�}W nJ t
j k
r� } z*t tj � t
|jd�}t|| d� |�W 5 d }~X Y nX t dtj � t| |j�S )Nr� r� )� user_code)Z magic_tokenr� )rb r ZCLI_MAGIC_ATTACH_INITr ZCLI_MAGIC_ATTACH_SIGN_INr_ r� r r� r r
ZMagicAttachTokenErrorZCLI_MAGIC_ATTACH_FAILEDr r ZCLI_MAGIC_ATTACH_PROCESSINGr� Zcontract_token)rI Z
initiate_respZ wait_optionsZ wait_resp�eZrevoke_optionsrT rT rU �_perform_magic_attache s*
���
� r� )rI r� c C sj t � ttj� tjtjdddgd�}|dkr2dS |dkrBt| �S |dkrfttj� t d�}t
| |�S dS )zZPrompt for attach to a subscription or token.
:return: True if attach performed.
�s�a�c�Z
valid_choicesF�> T) r� rb r Z*SECURITY_UPDATE_NOT_INSTALLED_SUBSCRIPTIONr
�prompt_choicesZSECURITY_FIX_ATTACH_PROMPTr� ZPROMPT_ENTER_TOKEN�inputr� )rI �choicer� rT rT rU �_prompt_for_attach� s
�
r� )rK r� c C s4 t | �}tjtj�|�j|d�t| ��d�t dd�S )z�Format the list of unfixed packages into an message.
:returns: A string containing the message output for the unfixed
packages.
rW )rl rY rZ r� )
r^ rc rd r ZSECURITY_PKG_STILL_AFFECTEDr] r_ r` ra r; )rK Znum_pkgs_unfixedrT rT rU � _format_unfixed_packages_msg� s � ��r� )rI rG r� c C s4 t | �j}|r0|tjjkr0|r,ttj� dS dS dS )zuCheck if the Ubuntu Pro subscription is expired.
:returns: True if subscription is expired and not renewed.
FT)r0 Zcontract_statusr/ ZEXPIRED�valuerb r �(SECURITY_DRY_RUN_UA_EXPIRED_SUBSCRIPTION)rI rG Zcontract_expiry_statusrT rT rU � _check_subscription_is_expired� s
�
�
r� c C s� ddl }t� ttj� tjtjjt d�ddgd�}|dkr~ttj
� t d�}tt dd gg�� t
|jd
d d �| � t| |�S d
S )zdPrompt for attach a new subscription token to the user.
:return: True if attach performed.
r N)Zurl�rr� r� r� r� �detachTZcli)Z
assume_yesr_ F)�argparser� rb r Z%SECURITY_UPDATE_NOT_INSTALLED_EXPIREDr
r� ZSECURITY_FIX_RENEW_PROMPTr_ rB ZPROMPT_EXPIRED_ENTER_TOKENr� rC r5 Z Namespacer� )rI r� r� r� rT rT rU �_prompt_for_new_token� s
�
r� )rI �servicer� c C s� t tjj|d�� tjtjj|d�ddgd�}|dkr�t tdd|gg�� t| |d�\}}|s�|dk r�t |t
�r�|j dk r�t |j j � |S d S )
zMPrompt for enable a pro service.
:return: True if enable performed.
�r� r� r� r� r� �enable�rI �nameNF)
rb r ZSECURITY_SERVICE_DISABLEDr_ r
r� ZSECURITY_FIX_ENABLE_PROMPTrC r r� r> �messagere )rI r� r� Zret�reasonrT rT rU �_prompt_for_enable� s$ ����
r� )r� rI rG r� c C s� t || d�}|r�|�� \}}|tjkr*dS |�� \}}|tjkr�|r`tdtj j
|j d� � dS t ||j �rpdS ttj
j
|j d�� nttjj
|j d�� dS )zQ
Verify if the Ubuntu Pro subscription has the required service enabled.
r� Tr� r� F)r< Zuser_facing_statusr? ZACTIVE�applicability_statusr= Z
APPLICABLErb r Z'SECURITY_DRY_RUN_UA_SERVICE_NOT_ENABLEDr_ r� r� Z SECURITY_UA_SERVICE_NOT_ENABLEDZ SECURITY_UA_SERVICE_NOT_ENTITLED)r� rI rG ZentZ
ent_statusr� r� rT rT rU �)_handle_subscription_for_required_service� s:
��� ����r� r� )ri r� r� c C s� | t jkr>|r tjj||d�}ntjj|d�}tt�|�� n�| t j kr||r^tj
j||d�}ntj j|d�}tt�|�� np| t j kr�|r�tj
j||d�}ntjj|d�}tt�|�� n2|r�tj
j||d�}ntjj|d�}tt�|�� d S )N)r r� )r )r rN r Z%SECURITY_ISSUE_RESOLVED_ISSUE_CONTEXTr_ ZSECURITY_ISSUE_RESOLVEDrb r
Zhandle_unicode_charactersr� Z'SECURITY_ISSUE_UNAFFECTED_ISSUE_CONTEXTZSECURITY_ISSUE_UNAFFECTEDr� Z)SECURITY_ISSUE_NOT_RESOLVED_ISSUE_CONTEXTZSECURITY_ISSUE_NOT_RESOLVED)ri r� r� re rT rT rU r� s>
�
�
� �r� �rj c C s2 | t krtjS | tkr tjS | tkr*tjS | S d S r� )r r Z'SECURITY_UBUNTU_STANDARD_UPDATES_POCKETr ZSECURITY_UA_INFRA_POCKETr ZSECURITY_UA_APPS_POCKETr� rT rT rU ro ? s ro �� fix_context�stepc C sh | j |jjd|jjd� d| _tjj|jj|jj d�}t
d| � | j |jj g|d� d| _
tj| _d S )N�releasedrg F)�package�versionr� rq T)rp �dataZrelated_source_packagesrj rP r ZFIX_CANNOT_INSTALL_PACKAGEr_ Zbinary_packageZbinary_package_versionrb ru Zsource_packagerQ r r� rO )r� r� Zwarn_msgrT rT rU �)_execute_package_cannot_be_installed_stepJ s" �� �r� c C sR | j |jj|jjd� | jt|jj�7 _| j|jjt|jj�d� tj | _
d S )N)rh ri rq ) rp r� �source_packagesri rJ r^ ru r r r� rO r� rT rT rU �&_execute_security_issue_not_fixed_stepc s �
�r� c C s* t �� rttj� ntdtj d � d S )Nr� )r
�we_are_currently_rootrb r Z CLI_FIX_FAIL_UPDATING_ESM_CACHEZ(CLI_FIX_FAIL_UPDATING_ESM_CACHE_NON_ROOTr� rT rT rU �%_execute_fail_updating_esm_cache_steps s r� c
C sv | j |jjd|jjd� | jt|jj�7 _|jjsR| jsFtt j
� t j | _
d S t�� s�| js�tt j� t j| _
| j|jjt jd� d S ttdddgdddd g t|jj� g�� | jr�t j | _
d S z.t�� tjd
ddd g|jj d d id
� W n\ tk
�rR } z<t|dt|��}t|� t j| _
| j|jj|d� W Y �d S d }~X Y nX t j | _
d| _ | j � |jj� d S )Nr� rg rq r �updatez&&�installz--only-upgradez-yzapt-getZDEBIAN_FRONTENDZnoninteractive)�cmdZoverride_env_varsre T) rp r� r� rj rJ r^ Zbinary_packagesrQ rb r �SECURITY_UPDATE_INSTALLEDr rN rO r
r� rG ZSECURITY_APT_NON_ROOTr� ru rC ra r Zrun_apt_update_commandZrun_apt_command� Exception�getattrry rP rM r� )r� r� r� re rT rT rU �_execute_apt_upgrade_step| sh �
�
�
����
��
�r� c C s� |j jdkrtnt}| j|j jd|d� d| _t| j�j s�| j
rPt dt j
� q�t| j�s�tj| _| j|j jt jj|j jd�d� d S nXt| j| j
d�r�| j
r�t t j� n6t| j�s�tj| _| j|j jt jj|j jd�d� d S tj| _d S ) N� esm-infrar� rg Fr� r� rq )rI rG )r� Zrequired_servicer r rp r� rP r0 rI Z is_attachedrG rb r Z SECURITY_DRY_RUN_UA_NOT_ATTACHEDr� r r� rO ru Z SECURITY_UA_SERVICE_REQUIREDr_ r� r� r� Z$SECURITY_UA_SERVICE_WITH_EXPIRED_SUBrN �r� r� rj rT rT rU �_execute_attach_step� sL
���
�� �
��r� c C st |j jdkrtnt}| j|j jd|d� d| _t|j j| j| j �sn| j
|j jt j j
|j jd�d� tj| _d S tjS )Nr� r� rg Fr� rq )r� r� r r rp r� rP r� rI rG ru r Z%SECURITY_UA_SERVICE_NOT_ENABLED_SHORTr_ r r� rO rN r� rT rT rU �_execute_enable_step� s0
������r� c C s& |j jtjjkr"ttj� tj | _
d S r� ) r� ri r Z NOT_AFFECTEDr� rb r ZSECURITY_NO_AFFECTED_PKGSr r� rO r� rT rT rU � _execute_noop_not_affected_step
s
r� c C s0 t |jt�r,ttjj| j|jjd�� d| _ d S )N)r r� T)
r� r� r* rb r ZCVE_FIXED_BY_LIVEPATCHr_ rF Z
patch_versionrR r� rT rT rU �%_execute_noop_fixed_by_livepatch_step s ��r� c C sH t |jt�rD| j|jjd|jjd� ttj� | j t
|jj�7 _ d S )Nr� rg ) r� r� r) rp r� rj rb r r� rJ r^ r� rT rT rU � _execute_noop_already_fixed_step s �
r� )r� rG rI r� c C s� | j | j�}t| j|| jp g |d�}|�� t|dd� d�D ]�}t|t�rTt ||� t|t
�rht ||� t|t �r|t
||� t|t�r�t||� |jtjkr� �q0t|t�r�t||� |jtjkr� �q0t|t�r�t||� |jtjkr� �q0t|t��rt||� t|t��rt||� t|t�r<t ||� q<t � |j �rft t t t!dd� |j D ����� tj"|_|jtjk�r�t#j$|j%d��r�tj&|_t'j(j)dd �}t |� t*j+t,j-dd � |j.�s�t/|j| j� |j|j fS )
NrE c S s | j S r� )�order)�xrT rT rU �<lambda>< � z"execute_fix_plan.<locals>.<lambda>)�keyc S s g | ]
}|j �qS rT )rs )r� r� rT rT rU �
<listcomp>` s �z$execute_fix_plan.<locals>.<listcomp>)rM r� r� )0Zplan�warningsrD rF Zaffected_packagesrf ra r� r' r� r( r� r& r� r r� rO r rN r r� r r� r! r� r r� r r� rb rK r� �listrL r� r Z
should_rebootrM r� r r� r_ r@ �addrA ZENABLE_REBOOT_REQUIREDrR r� )r� rG rI Z full_planr� r� Z
reboot_msgrT rT rU r� , s� ��
�����
� ���r� Zfix)r� c K sJ | j rttj� d| j�� kr0t| j| j |�}nt| j| j | j|�}|j S )Nr| )
rG rb r ZSECURITY_DRY_RUN_WARNINGr� �lowerr� r� r� Z exit_code)�argsrI �kwargsri rT rT rU �
action_fix~ s
�r� Tr� )�helpz --dry-run�
store_true)r� �actionz --no-related)Z arguments)r� r� r Z
help_categoryZpreserve_descriptionZargument_groups)N)r� )�rc �typingr r r r r r r Zuaclientr r
r r r
Zuaclient.actionsr r Z+uaclient.api.u.pro.attach.magic.initiate.v1r Z)uaclient.api.u.pro.attach.magic.revoke.v1r r Z'uaclient.api.u.pro.attach.magic.wait.v1r r Z'uaclient.api.u.pro.security.fix._commonr r r Z/uaclient.api.u.pro.security.fix._common.plan.v1r r r r r r r r r r! r" r# r$ r% r& r' r( r) r* r+ Z+uaclient.api.u.pro.security.fix.cve.plan.v1r, r- r� Z+uaclient.api.u.pro.security.fix.usn.plan.v1r. r� Z(uaclient.api.u.pro.status.is_attached.v1r/ r0 Z uaclient.clir1 Zuaclient.cli.commandsr2 r3 r4 Zuaclient.cli.detachr5 Zuaclient.cli.parserr6 Zuaclient.clouds.identityr7 r8 r9 Zuaclient.configr: Zuaclient.defaultsr; Zuaclient.entitlementsr< Z(uaclient.entitlements.entitlement_statusr= r> r? Zuaclient.filesr@ Zuaclient.files.noticesrA Zuaclient.messages.urlsrB Zuaclient.statusrC rD r� r� ry rz r� r� �intrn r� r� r� r� r� r� r� r� r� r� ro r� r� r� r� r� r� r� r� r� r� Z assert_vulnerability_issue_validr� Z CLI_ROOT_FIXZ CLI_FIX_DESCZSECURITYZ
CLI_FIX_ISSUEZCLI_FIX_DRY_RUNZCLI_FIX_NO_RELATEDZ fix_commandrT rT rT rU �<module> s� $
X ? � l �� � , � � % � � �
� ?� 0� " � � � � R
������