FM / migrations

/opt/imunify360/venv/lib/python3.11/site-packages/imav/migrations/

/opt/imunify360/venv/lib/python3.11/site-packages/imav/migrations

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
000_noop_migration.py	947	0644	edit dl rm
001_fix_scan_unserialization.py	2923	0644	edit dl rm
002_convert_serialized_scans.py	2544	0644	edit dl rm
003_add_new_fields_to_malware_history.py	1323	0644	edit dl rm
003_whmapi1_set_importance_imav.py	1681	0644	edit dl rm
004_add_malwarehit_owner.py	1127	0644	edit dl rm
004_patchman_client.py	1747	0644	edit dl rm
004_plesk_configs.py	6451	0644	edit dl rm
004_plesk_eula.py	2386	0644	edit dl rm
005_plesk_cleanup_storage.py	4111	0644	edit dl rm
005_populate_malwarehit_owner.py	1142	0644	edit dl rm
006_add_malwarehit_snippet.py	1137	0644	edit dl rm
007_add_malwarehistory_fileuser.py	1157	0644	edit dl rm
007_revisium_ignore_list.py	2660	0644	edit dl rm
008_populate_malwarehistory_foleuser.py	1185	0644	edit dl rm
008_subscription_permissions.py	3371	0644	edit dl rm
009_revisium_scan_history.py	9208	0644	edit dl rm
010_add_malwarehistory_scan_id.py	1159	0644	edit dl rm
011_add_malwarehistory_index.py	1527	0644	edit dl rm
012_add_rescan_outdated_scan_type.py	1432	0644	edit dl rm
013_add_malware_ctime.py	1224	0644	edit dl rm
014_add_imunify_security.py	986	0644	edit dl rm
015_manually_deleted_at_field_added.py	989	0644	edit dl rm
016_add_vulnerability_hit_table.py	2539	0644	edit dl rm
017_add_imunify_patch_subscriptions_table.py	1325	0644	edit dl rm
017_add_version_field.py	988	0644	edit dl rm
018_delete_suspicious_hits.py	977	0644	edit dl rm
019_add_malware_history_signature_id_field.py	1169	0644	edit dl rm
020_add_default_plesk_settings_av.py	1784	0644	edit dl rm
021_remove_cron_scan_file.py	1091	0644	edit dl rm
022_scan_queue_to_json.py	1612	0644	edit dl rm
023_create_mrs_upload_queue.py	1832	0644	edit dl rm
024_create_mrs_queue_counters_and_meta.py	1332	0644	edit dl rm
__init__.py	0	0644	edit dl rm

Edit: /opt/imunify360/venv/lib/python3.11/site-packages/imav/migrations/022_scan_queue_to_json.py (1612B)

"""
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 
See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.

This software is also available under ImunifyAV commercial license,
see <https://www.imunify360.com/legal/eula>

One-shot upgrade migration: drop any legacy non-JSON scan queue file.

The runtime reads JSON only; migration 002 already normalized the
on-disk objects to plain dicts.
"""

import logging
from pathlib import Path

logger = logging.getLogger(__name__)

SCANS_PATH = Path("/var/imunify360/aibolit/scans.pickle")

def _looks_like_json(raw: bytes) -> bool:
    head = raw.lstrip()[:1]
    return head in (b"[", b"{")

def migrate(migrator, *_, fake=False, **__):
    if fake or not SCANS_PATH.exists():
        return

if _looks_like_json(SCANS_PATH.read_bytes()):
        return

# Drop, don't pickle-load: deserializing this file is the RCE we remove.
    logger.warning("Removing legacy non-JSON scans file %s", SCANS_PATH)
    SCANS_PATH.unlink(missing_ok=True)

def rollback(migrator, *_, fake=False, **__):
    pass

cmd: