OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/17/2025 09:32:20 AM	rwxr-xr-x
📄 __init__.py	14.49 KB	08/15/2022 08:07:50 PM	rw-r--r--
📁 __pycache__	-	03/17/2025 09:32:20 AM	rwxr-xr-x
📄 generic.py	1.43 KB	08/15/2022 08:07:50 PM	rw-r--r--
📄 insights.py	1.25 KB	08/15/2022 08:07:50 PM	rw-r--r--
📄 sos.py	3.47 KB	08/15/2022 08:07:50 PM	rw-r--r--

Editing: sos.py

# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.

from sos.cleaner.archives import SoSObfuscationArchive

import os
import tarfile

class SoSReportArchive(SoSObfuscationArchive):
    """This is the class representing an sos report, or in other words the
    type the archive the SoS project natively generates
    """

type_name = 'report'
    description = 'sos report archive'
    prep_files = {
        'hostname': [
            'sos_commands/host/hostname',
            'etc/hosts'
        ],
        'ip': 'sos_commands/networking/ip_-o_addr',
        'mac': 'sos_commands/networking/ip_-d_address',
        'username': [
            'sos_commands/login/lastlog_-u_1000-60000',
            'sos_commands/login/lastlog_-u_60001-65536',
            'sos_commands/login/lastlog_-u_65537-4294967295',
            # AD users will be reported here, but favor the lastlog files since
            # those will include local users who have not logged in
            'sos_commands/login/last',
            'etc/cron.allow',
            'etc/cron.deny'
        ]
    }

@classmethod
    def check_is_type(cls, arc_path):
        try:
            return tarfile.is_tarfile(arc_path) and 'sosreport-' in arc_path
        except Exception:
            return False

class SoSReportDirectory(SoSReportArchive):
    """This is the archive class representing a build directory, or in other
    words what `sos report --clean` will end up using for in-line obfuscation
    """

type_name = 'report_dir'
    description = 'sos report directory'

@classmethod
    def check_is_type(cls, arc_path):
        if os.path.isdir(arc_path):
            return 'sos_logs' in os.listdir(arc_path)
        return False

class SoSCollectorArchive(SoSObfuscationArchive):
    """Archive class representing the tarball created by ``sos collect``. It
    will not provide prep files on its own, however it will provide a list
    of SoSReportArchive's which will then be used to prep the parsers
    """

type_name = 'collect'
    description = 'sos collect tarball'
    is_nested = True

@classmethod
    def check_is_type(cls, arc_path):
        try:
            return (tarfile.is_tarfile(arc_path) and 'sos-collect' in arc_path)
        except Exception:
            return False

def get_nested_archives(self):
        self.extract(quiet=True)
        _path = self.extracted_path
        archives = []
        for fname in os.listdir(_path):
            arc_name = os.path.join(_path, fname)
            if 'sosreport-' in fname and tarfile.is_tarfile(arc_name):
                archives.append(SoSReportArchive(arc_name, self.tmpdir))
        return archives

class SoSCollectorDirectory(SoSCollectorArchive):
    """The archive class representing the temp directory used by ``sos
    collect`` when ``--clean`` is used during runtime.
    """

type_name = 'collect_dir'
    description = 'sos collect directory'

@classmethod
    def check_is_type(cls, arc_path):
        if os.path.isdir(arc_path):
            for fname in os.listdir(arc_path):
                if 'sos-collector-' in fname:
                    return True
        return False

# vim: set et ts=4 sw=4 :