ÿØÿà JFIF    ÿÛ „ !.%+&8&+/1555$;@;4?.451 4,$,44444444444414444444444444444444444444444444444444ÿÀ  á á" ÿÄ     ÿÄ ?    !1AQaq"2‘¡±ÁðBRbrÑá#‚’¢²3S CñÿÄ   ÿÄ !    !1QAa‘2ÿÚ   ? 5˜Z¯V¦cø)›t/? z¨±>Õ5€¶‹Á¤·¼z¼Ü¬+ñ®v¤¨_ˆR­BFn©—˜ý®ç̝P8gýt·ÉSTŦˆìät?þé¼íìN/Þa)ì–í6ô… Ï¿øÃj´¿KÇü]ÿ ªô¹-eKànëÕHTx}ýSÜ›ÿ ”7Ø×&µ<¦  ¥ÑO¶[Ù¯ä¨ÞÃÿ PZ-¬;#õ|•oaÿ ©CìÞz3˜öː/¤­ñTûIØ}š^ mÓ%ªxˆ¥ÉŸu=Z+ISe¿45™¼u;ú&WØ÷€æßQ™®{|íx*TC“#ZŠìZ§²‹ 6pv…³¿¡äª*áZÐ%ÒOáˆo"x«OHk w±æ+¬V(kMúŸ5Vö«$ ÁrÏbàb57/luR ¸ÑÛj Òµì`Ðœq­û žICÀÊ•©4€Âcà¨Ï€O´<èÐ:›ù(Ë^L8þ‘ÍÌ#¸Ð_Ì©ÙK(Öz 4¬û+¸;ü’V’84‘¬ÃŽ:[â‡ÔÌáõp¢~§ªlæ£ö{®G>J¼"°‡7¯ÆÉèßû ‹É‹§ÁòÃýâßî ^ƾÙõ‹×óH#«LP½ïX=xÑÍ$|W?•~• îëÔ©ª‹ {ÝT…Kÿ ”hûâá)J*ö˜–ÔU;iÇ€/ ÆþjóZ\ýwØ=Ìm ºèËL9 ýèÆð/¨’¥öo=nË.%Îì ŽÕ¯È|{Oj²ƒE6e/ßdÄõ²Ìâ1O®ò×TsəԸhOMýíMˆ¿¼H˜l²,7Â¥#MF/Úf°Ö½± ¸–dr‹NýÊ íjqx{œÉ ä-È ¦ øÄër¨q°ð †nцýÑÄÆ’mä…n<0È™;ÁÝá¯ÁZƒ7FÀmì­ É&9ˆîéi¶ùN§Y• ÃZãAâ?•‡©‰ , ó¾IŸŠc1 4â&y­&pŠ­6;M À 0¹qç»p.á …ŸÅáK@%6·y6ƒ‰3?”úºŽ‰éX5ªPT §µ!=Mž«Ú½‹ÅgÂSâÉaþÓoö–¯ÁÔìR>5éÿ üs¶ÆUcÌ kÇR ]ÿ ù¬¼«VŽ;Â|‡~¢¦”ÏÅ°æ {L™Õ°Óv¹ò¸írŽ¡×¢CÃ!íVÕ {¶»sŒNPg/ "uÕbkm²“$ďå¿é¹§°½æz¯6 †s¿!s–wÚÝ“™Œ °.ûj>·+™Òa…©Œ&rÝÎtÛë긪Ît’LAVp%c Úý[ÄzJ¾ÇàXXç@˜ó<êL]·T˜¾¥1Ó©V‡g´æ½¦Ý@¹óø!_@´ÞâSÁ —S3™•& ]@JHÚý©ZŽ €×æÔr»Áf!‡yÞ4Mv*èÓã_{‘åóUuљØ«Oïé*®EvÑ Œ÷‡U \"㪒ÍK+À 4“M¡ï:0¥5í!'<@î´”>Ç»&Z–ïCCV˜Ì5Šo&îhè.žû |ÓK©h$s6KìŒëã)¹hI¦GïOåóI;ììü#É$Š0…Ææ¥TØ.5­¾gn´ “ÂÖ\:hœ89G)J@„}œ:’Ò{/Š"¦_Æ×7Æ3VÇŠÊa]ÚŒÙ€Ä–=®uÁßâACZƒ§§£ Qnâ:«,×{tyø¬iÛcœÜÄ€H½ÄÍCk´÷šß .W'b¤Íåh]÷€=,Žv×cÚEÚHXJX¶îo¨FÒtèöŸ>ªª6[J®Fµ£sGÁeqõfe\íjÒÐïÄÐGˆe1Ø‹.Ø”‘Ëuø Y­ˆÜ ŽG|zùªüMpDnQWÄ”%JŠ™)â*p@Örš«ÕT2Ð%ˆG#ª„ ·¤!°ŸOTÂT¸aÚ%4&h™LµšØüÐ.F¿²ÐÞ_Ç‚¾ÅÃaÜ÷09Æ q€öy˜v‡85õN÷]¬äѼóS{°_MŽ¬úÔ#°Ç¸0åÞè2ëôPcvÆw9®ií1Ä8F™˜à‰´+‰Ik1òÝ7“Ñ×ÒsÝ\x‚h`ÞÑ`ó"|µEcý£n˜h`}GÞ !±ù²Ápü²ß6 0ïi󜵩SÈÇ7˜-ÕURO˜¦´f$ªž-Í6(œ}<„ éc øs]ŽŽ„*—¾ ìdŽ„)méª\¿êÎIg¾ØÞ~I#C/¼¼´EÁÈŽi8“©õådô·>euä ƒ'Ê×लR1ÉJE1ÐAát`t;ÇР%Ý<‡¥„ÍÆ`×Oyó)õiI€ñQaŸ4Ûù\áàaÃÔ¹HÃu¹*k€¦<„e S‡&õÏ B!ŽhüÞ`yj}mªf×\¿ Ç~æ­9‡û\՞Ǖg²1Žû5V7 !àöšm° c`ܬøÇìµÒ'P"?…´Ö,"§^•õŽ¨sÔ)6˜sæéÍR¼ ò|Sl”‹7 nPW Gòú÷½§O¯‡„l¡kSÞŒr½PÊ@æ¢pŽ-mÿ #Ÿ˜Àº¶Áä¦;ïÔæ$1££`“Õ>„—·ž)ßð³ñ#Ï Ô$¶œ‰ÊE‹À;÷º ¯«P:Ñ”8–IÊtpÞ3ª“>ê“þës4ò2OÏÕ­±zô†Õ§‰.÷ä¸;¿˜“'œ›žª}«Œ{ª±Ì 9ÔóÞÕ‡0 $íWV3Üì¬ —@kÝ4@¿r¼±½¬™›?øØæ´'Áé®CË3-g$˜ö‡×auÚi´Žp/êÛ æF›Ú2v‹ã¿¿,nB1̨ƃqÞa5͝@&Æû“él÷ \C²½UÍc ¯k×¢U ÖéQå™—-r wô ÞÏ<Ò=&=ÿ Ôê Òêˈt,i—;LîÜ á¸*ÚÃ1$êL•LÍ <É)ýÐà’ ;F™{ƒ™˜€&'}‚ãÄK`¡ÞT@I;®žZóè‚s’7®°›+§O­Åq©é»²9<Ô J ¼9O’HL»Ùïì¸rk¼Ž_ý‘TŸu[²ßÚŒ·ü÷B%¯E ŸÔX5êO´ Ç•€’I0 ÉJX` ñ¹õ%;µŸD‘«´€àwÒ™U ûئžÖö\×®×´8 ½‡ºÐÆÓ§?Àkmœ=;d5*@-ì0F Rªýš[Ü6âö̃ڸr*KA9· u*µæ£?U¸Âêí†8@¦X4 e-ò„0s{ HâUpU?¼mñRa°®a%Ð'tÉ×’\¾ÊÉ]t›h>·(Ë@R¼¡Ãt h}’O÷au<+nT…Ö…MӐ??Óe95 q>í/;&JSû °¯ÊéÞ øƒ*Ã2½Ài&:nôUl=¾¿5eˆ3”ñc|Ú2V”>„»&eE;«ÚäC p¢Û úy 9š[ŒÌx¼擼A&DåÒ¯ˆ¤ÀÌ;"˜ ÏQä¸åhÊ}Ûq«Û0WžÒ|»€ø®öCm5•\ÇÀ§Pe3£]0ÃàLDÉ‰1øªxjgwT‚÷¿LΨK‹›ùs—xˆÜ±µ kæ¸f‰‰ÜGk/LÛØ6d9ò¶ùA{ƒA3š/¬D¬khÓk‰`˜"㯒r¿±Óã jx‡°e}<Ñø\3y:'À•/h½Í€Ç4~g ?Û(¼]v‘ªlKÎâ~?O‚W%{Ì:“'©úNq¾›úo(X’¥¯ˆ nFê{Ç€ü?º'ë ø‹ì Þ09ŒÌç9Æ —ËC`j@ÓÄ(+a‹un¸#ÂꟋ{K`‘ÑÍÍ'à´»/Û,KW;Þ4²þð ï Nm|~fGÏ(…³Ã)«1ö­Õ ¥‡¨©ƒÃ™ü-s=à=U66Ï«Ýc蓦W¹íž®›nÔ%êÇìŒ<#Ü×84ån®Ð ÒåOC` ñânÑs‡¢ç 1õ%Îhì½Ã½® e:ݼUZo™`  ÅZŸŒÊ«ê1ÏÄo$q¹Þ€©ˆhÐÉä¯ñ[!…Ú˜àJ:x2$Íß&PåT£6ç— ‡Í*4Ýšçjÿ ‰É nófÐ ó(L5C•åÆ\rMÒ@ò }y-W}™üýVù—ú¢=Ù”c®‘< M ž ´Phr ¦©TD ‘ù.$´÷O‡‘V2Æò.=IUŒ=ž‡â¬i™aþÓåÙ?òUø'ØÖ•.~* šTŒ!•-×áºTâ®ä#õü'´ eýlYÅÓeÕKÂrT"CÚ@u!Óxƒ{š3€}1¿(r}%«nËamjÑ%ÑNEò v ˜à  σöK³,*º.àzù¨™Ó ÚçâU¦*¿ 9{%Ö¹ njûdaXöb) kÛƱûÓ\°M7ˆÂ=û›ç¿Ã‚­V»Cg–8ÙêE- j)k$º`Ã-ùEýeBÆÇ]c¡°ñty&Òd0nõ'¡W+ƒ*|–øµFa\GQªEAÔp5\Ǽ·¼Ç8·õ -â§Ú[ ‡ uZeÖ 3}×d'+¹:ð+K†Û®s!Ï$úe€<Û”x)1»a­¡LC]¸µík…ÚàA»AYº{†ªS[¦5HÒ7ù --,ísòDØ€èk ÞÀîÜ ò@â( ËNˆë›4ô½•/¦o‡€Û7 ê•ÆêòðÜy'Án½µ á˜ݦ ndeo…[ì¶Ê,¥R³Ä=À±—–ß;£™´ñSâ*g§”ïaið‘Jå~™ÓÞ ß³Õ¢»8x埒²52>AÊb&-÷\7´éÄù€T˜,w;3{ï˜k…à¹ÄqÀ«œ{€\ ˆ¾[´¨јr &Úé„Ívˆ±8†¿]|¬ņ4I×pÞS1ÈÖz‰#Ìv‡G!YNògñ:màTz¢Ý1ô©^O=~ë|5Bã™ç•¼µõ•bÆ@úÕS¬ÈŒ#¬zünrŸ û” Z²•ï›èðV"ÁHÚý©wÝ €7¼Ìu1hÑa3Éä û f$o¿É ™Ú›ÝçnpÒ3äÌ3†Í§,Äï]$‰/pê †«À¼¸e9­Æê_C]žƒ·ý·frÁN«, E=›Çq -‰öŒ:aÏ¿±í&£Í:-} 84‘ÿ eƒQÑeëSsuiA ³g㟥ú£?ÿ ʼn*”“÷aühe:ÊWa@ÒÞk±eØ] F Ô—r.åä˜ @ö¥ªZoÐýYL·¥S²G/‡ñ <~*ZÆ´è>JlòàÛƽÿ 窘ìGN¢:I®KšJp/`íIÁÀõ#Ä-€ö­šµŒoF4|ÆQØÆ@Ì|£Ô…¢À{9˜è½Üó›€ôYÒÎYsið;ís¤€à²ˆ‚4qÉVŒI$ ‰"° æµ8cXGjœˏ¡Aâý•ËÜ¢ûï e·çLx']á"oÅÎê3¯Ç—¹”ó0nå‚âg{Œñ> S´˜îè°g238‚ãköÝfÚd´6Ò€;ò÷±¢™¼›º ¢Æ'¥Ðx'e¬ç ]bÈÆV¢ó‹kýBO ðÊâ$Ÿ!×T 3Mýמ žìٍàÌü‘8÷€àæØ8æ©6‰©L´«…oãpð„~Çk‰!ñ;‹”ÛžÍ àž±z Ÿôû øŸÝužÏ;ÿ #|u6™Þ¬ÚˆÐõA4¶â|ôl|Ê2ŽÇ¤ÝÅÇY.<#Aí.k§hóF‚”Y; M½Ö4hŸ4&›­¿tès´%FìL¥£Ãk‰ÇT¤haÁ¤ÚxfÉ`ÑìË›>i 3t‚:,–+^÷´–{Û–Nxi"x‘Ûg î¨>¥Õ܁ùZH,2Û“:8xÊ¢Çí9.É-Ìâã-=çjwµS˜dütžçwýGòú®®ûº_ˆýx$–¡ãøO EÚÛÏ÷R„×w+3£Á£öUMyR²¹âŒ°š›¸Ñãò9§Ó_Dl+Ùßc›úšGÅÌc†Ž!Ko=¶.‘Îÿ c²(2®V mª.ÿ ¹B›¹å ù„öŸSV>™ü¯$y:G¢Z×àøúdî¹û­·ýÇ´:•c LÍõi_‹ö+ÎæGÊè>OŠ•äž´§Þ{X}¨1ÚTc›»Qþ•êô°t¿OP?eæ~É{5]•ÙR£r5†nZ\ã@ &îJõ ¾àC°þV>fé¥/ü5ñÊIº_é5 ;e­h<@ Ä&æÃëE%;X,ÒãÆÞ`Oò¦kŸm#˜!ÀyÄ¢| óLšò¥Ä` ¶R=|ÈCâh5ò3DˆïF†ðÒ#ÅìÛœ?¸yhBãœí ZxßÎÄhºRK„`Þödvײ™ÀÈÑÒgŒuY w³%†ƒÓzõ ÖÏp‚dH®¦A´ù§»ÓÇMæ~)ˆð‡û:ù&Ä •vGD´À n ݇¼Ö8Fö óáà£~Ë¥x`oK|Ä?fxiØü%pìR>éò+Û±éÎ>núlFŤ'tq8LZÏvÃ?„¡ß±È⽆¯³íü@x|PöUäèØã¡ð‚ŒAìÏ"vÍwóŸÍ{ ý0.z È•Ö{,N¡£¡ŸKÕÙž>Ýœþ ÍÀ°<×EA!Å‚D™IúOÍ¡>ôG}Â` ÍßkÜL™Ž Þð™ {IøF²¹òQ3&!ÃÂÞz.d&Ï-sH¸,Ôõ˜ŽP€ 77ˆÝ¼ÊëÜw =cÕ Ú,ØÐ5ÎYÐ)ì´öœgŒ[¤ßv㙑8心>h]§µháYš£²ºÑ.{Ï7Sð•?´~×SÃKýJÛ˜ ™Íäiúu<µX¶1õ^kâçIÑ£sZ4h>j*ÔšD:4­¿_ ÷¸ Õxæÿ ¸?Mù _•­ÊÐ ä ÷ý ÑwL œ­ïnTkÛUÍN©ë:¦fV ¶ÜÔÜMªÅâA½–¿R×TXš-%iTÊT•‡Ù‚JôϐZxWÑè‰f‰òG º ×Õû2aZ7OU3[“×AT–ÞŒ…-‘¤”Ì ì&(ˆ¿­•ƒkï’:ðY¦W‘ Å)“†‘˜³Åtcø˜ñTÂwÚÇ4|üLÇªí–v- qˆèU qPE.†â‘˜µ Æ,ÐÅs]8¾„oúÑ i>ÜxxÈó)ƒ ´æÁâØ$À‰vžŸf$Ž |ãw;ÀÁIJ»b` {¦Ó¤Ú$©YÀ‘n@Óïž«9J¼êG m¤ ܯ¹ÌW4€ÐÒÅÛ‡#褕Ÿn-?í|с¥÷Ú¹¬'´ÞÜ9ÓK `hê£SÄSà?7—Wí_´…óB›»:=Ãïq`<8ñÓŒÑlú2d¬ê³£hÖ[l|$vÝro~'R®‰§°ñmY ͧäP |PUª¹·:3Œ[Û{Xÿ ºâ@‚W–Äé u‚ ¯´*=íή.pûÒdt @G‰¬ s¸ ëÉücr ÞæѨÊ@>¤¢Ö±. Þ'¯°ÌME[YéïĵÂCå½ Ué©Áû'Ê9%eÔðNU”ë‘ÌsD3/®+UI˜9h.WC”빓$#:pz:YÓ ¿xž* ³$Í +$kñAŠ‹†¢ Uê>¸)_š¬÷©ßAÂÔb9ÇU ¯¾á•9¯ÏÏ÷O÷¼¼Fähal1‰3Ì[Ïr•´UCksNÐ] R‘¸¥H+§Šé†c©vÖÞ0iÓ76s†î!§=ß ¼~Ô'°Ãmäoäš³ªøi1úÉ)³yV8 CLÄØÁ‘WYïi€H6ÖÑiámø^ÈY´°Ñ7¥Û*—Ñ©L«Qƒï—Ùrÿ ›£Ð*š¸ˆL©ˆ$ˆ ÷¾D§9È®«qbqC)–ˆïv´çñsÑVT­Ø, <àïºÀO«Jý·õ àfPìð .wFšir´þ’2_Y *Æ€x\« ì€9š@ Ž|F⇥ˆkZ@hÖÄ0t¿-<“‹qµ¾*ZL¤Ú)&BJpÓF5=$„at*Zš$’ÑtdûÝRI1 2Ž‰$€$I$#‰SÞ’Hë¬ï;Á$¡t$’`<(ñÇt)$‡Ð.Êf¢X’Kt=Éé$‚ˆªè¢oÝëòI%Rgcª÷ŠyI%¡‰ÿ !ñ)´õ $¤ Ô’IIGÿÙfrom datetime import datetime import agent_util import platform import os import sys import logging import socket try: # Python 2.x import httplib except: import http.client as httplib try: import psutil except: psutil = None try: import distro except: distro = None try: import json except ImportError: try: import simplejson as json # it's possible that we may not need json for the action that we're taking. # for example, for the rpm post install script, on a python version that # doesn't have json, we'll get this far in the code. but the post # install doesn't use json, so we're fine except ImportError: json = None def mac_address_octets(n): if sys.version_info[0] == 2: rng = xrange else: # python 3x uses range rng = range for i in rng(6): yield n & 0xFF n >>= 8 def int_to_mac_address(n): """ Expresses a decimal integer in standard MAC address format ex: 7267271067680 -> '06:9c:0b:1c:48:20' """ values = ["%02x" % a for a in mac_address_octets(n)] return ":".join(reversed(values)) def get_fqdn(): hostname = socket.getfqdn() if "darwin" == sys.platform: """ Mac is odd around ipv4/6 addresses - see: https://stackoverflow.com/questions/8625029/why-does-pythons-socket-getfqdn-return-a-long-string-that-looks-like-an-ipv6 """ if hostname.lower().endswith(".arpa"): hostname = socket.gethostname() return hostname def get_server_name(): if "darwin" != sys.platform: return None try: """ For Fortisase integration, get the value we want to specify for server_name, which is sent up in handshake and also for config changes. This allows us to match the name provided by Forticlient. """ sc_util = agent_util.which("scutil", exc=True) _, output = agent_util.execute_command("{} --get ComputerName".format(sc_util)) return output.strip() except: return None def get_platform_uuids(): log = logging.getLogger("Inspector") my_platform = sys.platform.lower() # # The keys in the rv dictionary should match the textkeys # in the table ServerIdentifierType rv = {"platform": sys.platform.lower()} if "darwin" == my_platform: try: ioreg_bin = agent_util.which("ioreg") rc, output = agent_util.execute_command( "{} -d2 -c IOPlatformExpertDevice | grep IOPlatformUUID".format( ioreg_bin ) ) if 0 == rc: rv["uuid"] = output.strip().split("=")[1].strip().strip('"') else: log.error("ioreg error: {}".format(rc)) except Exception as e: log.info("Gather UUID failure: {}".format(str(e))) pass return rv def mac_address_iter(): if psutil: for iface, addrs in psutil.net_if_addrs().items(): for addr in addrs: if addr.family != psutil.AF_LINK: continue if addr.address == "00:00:00:00:00:00": continue yield addr.address def get_mac_addresses(): facts = {} try: import uuid facts["uuid_getnode"] = int_to_mac_address(uuid.getnode()) except Exception as err: logging.warning(err) logging.info( "Unable to import uuid module. Skipping MAC address fact collection." ) try: addrs = [] for i, mac_addr in enumerate(mac_address_iter()): addrs.append(mac_addr) except ImportError: logging.info("Unable to import psutil, skipping MAC address fact collection") except Exception as err: logging.warning(err) logging.info("Unknown error during MAC address collection") return list(facts.values()) + addrs class Inspector(object): SOURCE_LIST_PATHS = ["/etc/apt/sources.list", "/etc/yum.repos.d/panopta.repo"] PANOPTA_REPO = "http://packages.panopta.com/" def __init__(self, agent): self.agent = agent def get_all_facts(self, wifi_info=None): facts = {} log = logging.getLogger("Inspector") try: facts.update(self.get_agent_facts()) facts.update(self.get_python_facts()) facts.update(self.get_process_facts()) facts.update(get_mac_addresses()) facts.update(self.get_hardware_facts()) facts.update(self.get_time_facts()) facts.update(self.get_hostname()) facts.update(self.get_platform_facts()) facts.update(self.get_machine_facts()) facts.update(self.get_wifi_facts(wifi_info)) facts.update(self.get_dem_network_facts()) if sys.version_info >= (2, 6, 0): # Cloud detection, but only if we're on a new enough Python to have timeout facts.update(self.get_cloud_facts()) except Exception as e: log.info("get_all facts: {}".format(e)) return facts def get_platform_facts(self): facts = {} if "darwin" == sys.platform: try: _, output = agent_util.execute_command("sw_vers | grep ProductVersion") pv = output.split(":")[1].strip() facts["MacOSVersion"] = pv except: pass return facts def get_hostname(self): facts = {} facts["hostname"] = get_fqdn() return facts def get_time_facts(self): facts = {} try: retcode, output = agent_util.execute_command("ls -l /etc/localtime") timezone = "/".join(output.strip().split("/")[-2:]) facts["timezone"] = timezone except: log = logging.getLogger(self.__class__.__name__) log.exception("Unable to get Time Zone") return facts def get_hardware_facts(self): """ Gather CPU and memory specs for the machine """ facts = {"hardware": {}} if "darwin" == sys.platform.lower(): try: retcode, output = agent_util.execute_command( "sysctl -a | grep machdep.cpu" ) for line in output.strip().split("\n"): try: key, value = line.strip().split(":", 1) if key in ( "machdep.cpu.brand_string", "machdep.cpu.core_count", ): facts["hardware"][key] = value.strip() except: continue except: log = logging.getLogger(self.__class__.__name__) log.exception("Unable to get CPU hardware facts") try: total_mem = os.sysconf("SC_PHYS_PAGES") * os.sysconf("SC_PAGE_SIZE") facts["hardware"]["mem_total"] = total_mem except: log = logging.getLogger(self.__class__.__name__) log.exception("Unable to get memory hardware facts") else: try: retcode, output = agent_util.execute_command("lscpu") for line in output.strip().split("\n"): try: key, value = line.strip().split(":", 1) except: continue key = key.strip().lower().replace("(s)", "").replace(" ", "_") value = value.strip() facts["hardware"][key] = value except: log = logging.getLogger(self.__class__.__name__) log.exception("Unable to get CPU hardware facts") try: retcode, output = agent_util.execute_command("free -m") for line in output.strip().split("\n"): fields = line.strip().split() if fields[0].lower().startswith("mem"): facts["hardware"]["mem_total"] = int(fields[1]) if fields[0].lower().startswith("swap"): facts["hardware"]["swap_total"] = int(fields[1]) except: log = logging.getLogger(self.__class__.__name__) log.exception("Unable to get memory hardware facts") return facts def get_agent_facts(self): facts = {} # This is a little hokey, but the last time this file's metadata changed # *should* be when this file whas created, ie. when the Agent was # installed. I thought this was better than storing the install time in # the local database, since there is a possibility that it could get # corrupted. facts["installed_time"] = os.path.getctime(os.path.abspath(__file__)) facts["used_manifest"] = os.path.exists(self.agent.manifest_file) facts["installed_from_repo"] = False for source_list_path in self.SOURCE_LIST_PATHS: if os.path.exists(source_list_path): try: source_list = open(source_list_path) facts["installed_from_repo"] = ( self.PANOPTA_REPO in source_list.read() ) source_list.close() if facts["installed_from_repo"]: break except: pass brand = "panopta" if "darwin" == sys.platform or os.path.exists("/etc/fm-agent"): brand = "fortimonitor" # Set the agent brand, default to Panopta unless we have an FM-Agent config file facts["agent_brand"] = brand return facts def get_python_facts(self): facts = {"python": {}} facts["python"]["platform"] = platform.platform() facts["python"]["processor"] = platform.processor() facts["python"]["version"] = platform.python_version() facts["python"]["uname"] = platform.uname() try: facts["python"]["dist"] = platform.dist() except AttributeError: # Removed in Python 3.8. # https://docs.python.org/2.7/library/platform.html#platform.linux_distribution if distro: facts["python"]["dist"] = " ".join(distro.linux_distribution()) facts["python"]["sys_platform"] = sys.platform return facts def get_cloud_facts(self): facts = {} # Try Amazon try: h = httplib.HTTPConnection("169.254.169.254", timeout=5) h.request("GET", "/latest/dynamic/instance-identity/document") r = h.getresponse() if r.status == 200: data = json.loads(r.read()) facts["cloud_provider"] = "aws" facts["cloud_instance_id"] = data["instanceId"] facts["cloud_metadata"] = data return facts except: pass # Try Google try: headers = {"Metadata-Flavor": "Google"} h = httplib.HTTPConnection("metadata.google.internal", timeout=5) h.request( "GET", "/computeMetadata/v1/instance/?recursive=true", headers=headers ) r = h.getresponse() if r.status == 200: data = json.loads(r.read()) facts["cloud_provider"] = "gcp" facts["cloud_instance_id"] = data["id"] # Strip out sensitive keys if "serviceAccounts" in data: del data["serviceAccounts"] for key, value in data.get("attributes", {}).items(): if key in [ "/attribute", "/sshkeys", "/vmdnssetting", "/enable-oslogin", ]: data["attributes"].pop(key) facts["cloud_metadata"] = data try: manifest = self.agent.get_manifest() enabled_gcp_attributes = ( manifest.get("agent", "enable_gcp_attributes") == "true" ) facts["cloud_metadata"]["enable_gcp_attributes"] = ( enabled_gcp_attributes ) except Exception: log = logging.getLogger(self.__class__.__name__) log.exception( "Unable to parse manifest file to determine gcp attributes actions." ) return facts except: pass # Try Azure try: headers = {"Metadata": "true"} h = httplib.HTTPConnection("169.254.169.254", timeout=5) h.request( "GET", "/metadata/instance?api-version=2017-04-02", headers=headers ) r = h.getresponse() if r.status == 200: data = json.loads(r.read()) facts["cloud_provider"] = "azure" facts["cloud_instance_id"] = data["compute"]["vmId"] facts["cloud_metadata"] = data return facts except: pass # No cloud detected return {} def get_process_facts(self): facts = {} if psutil is None: return facts processes = set() for proc in psutil.process_iter(): processes.add(proc.name()) facts["processes"] = list(processes) return facts def get_machine_facts(self): md = {} if "darwin" != sys.platform: return md facts = {"machine_description": md} try: tk = "SPHardwareDataType" data = self.query_system_profiler(tk) if data: info = data[tk][0] md["serial"] = info.get("serial_number", "") md["model"] = info.get("machine_model", "") except: facts.clear() return facts def get_wifi_facts(self, wifi_info=None): md = {} facts = {"DEMWifiInfo": md} try: md["ssid"] = wifi_info.get("SSID", "") md["bssid"] = wifi_info.get("BSSID", "") md["channel"] = wifi_info.get("channel", "") md["security_algorithm"] = wifi_info.get("link auth", "") md["nss"] = wifi_info.get("NSS", "") except: md.clear() md["timestamp"] = datetime.utcnow().timestamp() return facts def get_dem_network_facts(self): if "darwin" != sys.platform: return {} md = [] facts = {"DEMNetworkInterfaceConfigurations": md} try: tk = "SPNetworkDataType" info = self.query_system_profiler(tk) if info: network_infos = info.get(tk, []) for ni in network_infos: router = ni.get("IPv4", {}).get("Router", None) if not router: continue item = { "name": ni.get("_name"), "description": ni.get("hardware"), "dns_servers": [], "gateways": [router], } md.append(item) dns_info = ni.get("DNS", None) if dns_info: for sa in dns_info.get("ServerAddresses", []): item["dns_servers"].append(sa) except: logging.exception("get_dem_network_facts") facts.clear() return facts def query_system_profiler(self, info_type): try: sp = agent_util.which("system_profiler") from subprocess import Popen, PIPE d = Popen([sp, "-json", info_type], stdout=PIPE) data = json.loads(d.stdout.read()) return data except: logging.exception("query_system_profiler") return None