ok
Mini Shell
from logging import getLogger
from defence360agent.rpc_tools.lookup import bind
from defence360agent.utils import Scope
from imav.simple_rpc.conflicts import (
ConflictsEndpoints as ConflictsEndpointsAV,
)
from im360.internals.core.firewall import is_nat_available
from im360.subsys import csf
from im360.subsys.panels.generic import GenericPanel
from im360.subsys.panels.hosting_panel import HostingPanel
from im360.subsys.panels import hosting_panel
from im360.subsys.running_ids import RunningIds
from im360.subsys.webshield import is_ssl_cache_configured
from im360.subsys.pam import enable, PAMError, PamService
from im360.subsys.smtp_blocking import is_SMTP_blocking_supported
from im360.subsys.waf_rules_configurator import is_webserver_supported
from im360.utils.validate import IP
logger = getLogger(__name__)
class ConflictsEndpoints(ConflictsEndpointsAV):
"""Imunify360 3rdparty endpoints
Endpoints:
- 3rdparty conflicts (defined in the base class)
- 3rdparty list
"""
SCOPE = Scope.IM360
@bind("3rdparty", "list")
async def list_3rdparty_cmd(self):
return {"items": (await RunningIds()).ids_list}
@property
def _funcs(self):
"""List of functions for "3rdparty conflicts" endpoint"""
return super()._funcs + [
self._malware_scan_conflicts,
self._csf_conflicts,
self._smtp_blocking_conflicts,
self._waf_conflicts,
self._webshield_ssl_conflicts,
self._pam_ftp_conflicts,
]
@staticmethod
async def _malware_scan_conflicts(results_dict):
if not await HostingPanel().installed_modsec():
results_dict["scan_modsec"] = True
return results_dict
@staticmethod
async def _csf_conflicts(results_dict):
if await csf.is_running():
results_dict["csf_dos_protector"] = True
return results_dict
@staticmethod
async def _smtp_blocking_conflicts(results_dict):
if not await is_SMTP_blocking_supported():
results_dict["smtp_blocking_kernel_support"] = True
if await csf.is_SMTP_block_enabled():
results_dict["smtp_blocking_CSF_block"] = True
is_hp_has_SMTP_conflict = HostingPanel().get_SMTP_conflict_status()
if is_hp_has_SMTP_conflict:
results_dict["smtp_blocking_enable"] = True
if not is_nat_available(IP.V6):
results_dict["smtp_blocking_ip6table_nat"] = True
return results_dict
@staticmethod
async def _waf_conflicts(results_dict):
if not await is_webserver_supported():
results_dict["mod_sec_app_specific_ruleset_apache_v24"] = True
return results_dict
@staticmethod
async def _webshield_ssl_conflicts(results_dict):
panel = hosting_panel.HostingPanel()
if (
isinstance(panel, GenericPanel)
and not await is_ssl_cache_configured()
):
results_dict["webshield_ssl_cache_not_configured"] = True
return results_dict
@staticmethod
async def _pam_ftp_conflicts(results_dict):
try:
await enable(PamService.FTP, True)
except PAMError:
results_dict["pam_ftp_not_available"] = True
Zerion Mini Shell 1.0