\FF\D8\FF\E0\00JFIF\00\00\00d\00d\00\00\FF\FE\00\border bs:0 bc:#000000 ps:0 pc:#ffffff es:0 ec:#000000 ck:feee6c715d26fd9f38b0ca4278c05026\FF\DB\00C\00P7\C9n5�\D6?\BD�\9Ds\EBp\9F[`8m\B7)o\B5\E8\E6I\99\FE3]]A2\BA\8Cw\D6E\93\\DEv\C8\009\F2\F1NI?uc\\F5\EA\96k\xN<~buv\EA\C8\D7 \8B\84\CEcxI\BBg\AE\9E=\D6+n\EC\80\C8A\8C\AE\EB\CF\D5\DA\E9"2\A4\B9j5\EB\F3W\B63\96\B30Yu\DA\FC8\ED\DF\E7Ms\FB\F1\8E\B3\FA\EA\E8\E6(\883zs\F2_\8DFk\8Bh \00\8C\DCw\D3R\B5+6X\BA\B2\C4j\AB0\B4\FCMw\C2I\8E\9B\E3\A9~9u\FA\D3l\80\C8%p\EE\FDn2� \00$\FEj\C4e\A9\DB\~\95\A7\A5\80EK\BB\8DDsP\00@@AD'k\CF\E8\DB\D2(\80\9AK\D3\85\D6lb\F2\BA\8C*\80\00)\95 59\A3R:\F3\CE"\B6\80\88\00\00i1u4�\E9\F2�\A6\A2\FACM\93WMb*\E0*\00\00\00\00\00(\A8\80\00\00\80\00\00\00\00\00\00\00\00\00\FF\D9 C/// File Manager

File Manager

Path: /proc/self/root/proc/self/root/opt/imunify360/venv/share/imunify360/scripts/migrate_csf/

Viewing File: country.py

import subprocess
from typing import Literal
from csf_conf import get_csf_config_value
from logger_config import get_logger, capture_exception


def migrate_country_codes() -> None:
    logger = get_logger()
    try:
        warn_cc_allow_fitler_is_set()

        allowed = get_csf_config_value("CC_ALLOW")
        denied = get_csf_config_value("CC_DENY")

        allowed = allowed.split(",") if allowed else []
        denied = denied.split(",") if denied else []
        logger.info(f"detected {allowed} allowed country codes")
        logger.info(f"detected {denied} denied country codes")

        if "US" in denied:
            logger.warning("""
Detect US in denied list, if this was unintentional, please remove it by running
imunify360-agent blacklist country delete US
""")

        apply_to_imunify_lists(allowed=allowed, denied=denied)

        logger.info(
            "country codes migrated to imunify lists, please verify them below"
        )
        print_country_codes_in_imunify_lists()
    except Exception as e:
        logger.error(f"Error during country codes migration: {e}")
        capture_exception(e, {"migration_type": "country_codes"})


def warn_cc_allow_fitler_is_set() -> None:
    logger = get_logger()
    value = get_csf_config_value("CC_ALLOW_FILTER")
    if value and value != "":
        logger.warning(
            f"CC_ALLOW_FILTER is set to {value}, this will be ignored. We don't support it yet. "
            "If you need it, please contact support."
        )


def apply_to_imunify_lists(*, allowed: list[str], denied: list[str]) -> None:
    logger = get_logger()
    logger.info("applying to imunify lists")
    add_country_code_to_imunify_list(
        list_name="whitelist", country_codes=allowed
    )

    add_country_code_to_imunify_list(
        list_name="blacklist", country_codes=denied
    )


def add_country_code_to_imunify_list(
    *, list_name: Literal["whitelist", "blacklist"], country_codes: list[str]
) -> None:
    logger = get_logger()
    if not country_codes:
        logger.info(f"No country codes to add to {list_name}")
        return

    cmd = [
        "imunify360-agent",
        list_name,
        "country",
        "add",
        "--comment",
        '"migrated from csf"',
        *country_codes,
    ]
    logger.debug(f"Executing command: {' '.join(cmd)}")
    res = subprocess.run(cmd, capture_output=True, text=True)

    # Parse stderr for warnings about countries already in list
    already_in_list_warnings = []
    if res.stderr:
        for line in res.stderr.strip().split("\n"):
            if "is already in" in line and "list" in line:
                already_in_list_warnings.append(line.strip())

        # Log non-critical warnings as debug info
        for warning in already_in_list_warnings:
            logger.debug(f"Imunify agent warning: {warning}")

    # Only log error if return code is non-zero AND there are no "already in list" warnings
    # or if there are other types of errors
    if res.returncode != 0:
        if already_in_list_warnings:
            # If all errors are about countries already being in the list, just log as info
            logger.info(
                f"Some countries from {country_codes} are already in {list_name}"
            )
        else:
            # Log actual errors
            logger.error(
                f"Error adding {country_codes} to {list_name}: {res.stderr}"
            )


def print_country_codes_in_imunify_lists() -> None:
    print_country_codes_in_imunify_list(list_name="whitelist")
    print_country_codes_in_imunify_list(list_name="blacklist")


def print_country_codes_in_imunify_list(
    *, list_name: Literal["whitelist", "blacklist"]
) -> None:
    logger = get_logger()
    logger.info(f"\nlisting {list_name} countries:")
    res = subprocess.run(
        [
            "imunify360-agent",
            list_name,
            "country",
            "list",
        ],
        capture_output=True,
        text=True,
    )
    if res.returncode != 0:
        logger.error(f"Error listing {list_name} countries: {res.stderr}")
        return

    logger.info(res.stdout)