~g*SSKrSSKrSSKrSSKrSSKrSSKrSSKrSSKJr SSK J r SSK J r SSK r SSK Jr SSKJr SSKJr SSKJr SS KJr SS KJr SS KJr SS KJr SS KJrJrJ r J!r! SSK"J#r#J$r$ SSK%J&r& SSK'J(r(J)r)J*r*J+r+ "SS\5r,g)N)ThreadPoolExecutor)datetime)getpwuid) __version__) SoSComponent) SoSIPParser) SoSMacParser)SoSHostnameParser)SoSKeywordParser)SoSUsernameParser) SoSIPv6Parser)SoSReportArchiveSoSReportDirectorySoSCollectorArchiveSoSCollectorDirectory)DataDirArchiveTarballArchive)InsightsArchive)get_human_readable import_moduleImporterHelperfile_is_binaryc F^\rSrSrSrSrS///S/SSSSS /S . rS-U4S jjrS.S jrS.S jr S.Sjr S.Sjr \ S5r SrSr\ S5rSrSrSrSrSrSrSrSrSrS/SjrSrSrS rS!rS"rS#r S$r!S%r"S0S&jr#S'r$S(r%S)r&S.S*jr'S+r(S,r)U=r*$)1 SoSCleaner*a This function is designed to obfuscate potentially sensitive information from an sos report archive in a consistent and reproducible manner. It may either be invoked during the creation of a report by using the --clean option in the report command, or may be used on an already existing archive by way of 'sos clean'. The target of obfuscation are items such as IP addresses, MAC addresses, hostnames, usernames, and also keywords provided by users via the --keywords and/or --keyword-file options. For every collection made in a report the collection is parsed for such items, and when items are found SoS will generate an obfuscated replacement for it, and in all places that item is found replace the text with the obfuscated replacement mapped to it. These mappings are saved locally so that future iterations will maintain the same consistent obfuscation pairing. In the case of IP addresses, support is for IPv4 and IPv6 - effort is made to keep network topology intact so that later analysis is as accurate and easily understandable as possible. If an IP address is encountered that we cannot determine the netmask for, a random IP address is used instead. For IPv6, note that IPv4-mapped addresses, e.g. ::ffff:10.11.12.13, are NOT supported currently, and will remain unobfuscated. For hostnames, domains are obfuscated as whole units, leaving the TLD in place. For instance, 'example.com' may be obfuscated to 'obfuscateddomain0.com' and 'foo.example.com' may end up being 'obfuscateddomain1.com'. Users will be notified of a 'mapping' file that records all items and the obfuscated counterpart mapped to them for ease of reference later on. This file should be kept private. z6Obfuscate sensitive networking information in a reportautoN /etc/sos/cleaner/default_mappingF) archive_typedomainsdisable_parsersskip_cleaning_filesjobskeywords keyword_filemap_file no_updatekeep_binary_filestarget usernamesc >U(d[T U]XU5 SUlOUSUlUSUlUSUlUSUlUSUlSUl[URS5(dS URl S URl [R"S 5Ul [R"S 5Ul[R "[R"R%URS 5SS9 UR'5 UR)5Ul[R,"S5 X@lUR R15UlURR4R7S 5UlURR:n[=UR*U5[?UR*U5[AUR*U5[CUR*U5[EUR*U5[GUR*U5/Ul$URRJHnURHHnURLRO5RQSSS9Sn U RS5n URO5RS5U :XdMbURUSU 35 URRWSUS35 URHRYU5 M M [Z[\[^[`[b[d[f/Ul4SUl5URUSUR35 g)NToptionstmpdirsys_tmppolicymanifestFr$rrsossos_uicleanerexist_ok?parser)maxsplitrzDisabling parser: zDisabling the 'zP' parser. Be aware that this may leave sensitive plain-text data in the archive.z#Cleaner initialized. From cmdline: )6super__init__ from_cmdlineoptsr.r/r0r1hasattrr$r logging getLoggersoslogui_logosmakedirspathjoinreview_parser_values load_map_filecleaner_mappingumaskin_placeget_preferred_hash_name hash_name components add_section cleaner_mdr#r rr r r r parsersr"namelowersplitstriplog_infowarningremoverrrrrrr archive_typesnested_archive) selfr8argscmdlinerL hook_commonsr#_parser_loaded_temp _loaded_name __class__s 6/usr/lib/python3/dist-packages/sos/cleaner/__init__.pyr<SoSCleaner.__init__bs G V7 3 $D  %Y/DI&x0DK' 2DL&x0DK(4DM %D 499f--!" %+DII "!++E2DK!++H5DK KK T[[)--22>>yI"ii;; d224G H ,,.A B $..0C D --/B C T113F G d224G H   yy00G<< **,228a2HK${{} ==?((*l:MM$6|n"EFKK'')'3OOLL''0(1   !      # 1$2C2C1D E Gc*SU(aSU3OSSU3$)Nz[cleaner:rz] r\msgcallers re _fmt_log_msgSoSCleaner._fmt_log_msgs &AfX,b9C5AArgcXURRURX55 gN)rBdebugrnrks re log_debugSoSCleaner.log_debug $++C89rgcXURRURX55 grq)rBinfornrks rerWSoSCleaner.log_infos **378rgcXURRURX55 grq)rBerrorrnrks re log_errorSoSCleaner.log_errorrurgc\URS5 URUR5 g)NzSoS Cleaner Detailed Help) set_titleadd_text__doc__)clssections re display_helpSoSCleaner.display_helps#56%rgc00nSn[RRURR5(a#[ SURRS35e[RR URR5(dEURRU:wa)URSURRS35 U$[URRSSS9n[R"U5nS S S 5 U$![Ra URS 5 N1[ a5nURS URRS U35 S nANjS nAff=f!,(df  U$=f) zVerifies that the map file exists and has usable content. If the provided map file does not exist, or it is empty, we will print a warning and continue on with cleaning building a fresh map rzRequested map file z is a directoryzERROR: map file z6 does not exist, will not load any obfuscation matchesrutf-8encodingzOERROR: Unable to parse map file, json is malformed. Will not load any mappings.zERROR: Could not load '': N) rDrFisdirr>r' Exceptionexistsr{openjsonloadJSONDecodeError)r\_conf default_mapmferrs rerISoSCleaner.load_map_filesh 8 77==++ , ,1$))2D2D1EF(() )ww~~dii0011yy!![0&tyy'9'9&:;<<= dii((#@BE IIbMEA ++MNN$LM ENN$''+yy'9'9&:#cU$DEEE A@ s<<F>D%FF F+E>9F>FF FcURS5nURRS[S35 URRU5 URR (d [ S5 gg![a/ URRS5 URS5 g[anURSU5 SnAgSnAff=f) zWhen we are directly running `sos clean`, rather than hooking into SoSCleaner via report or collect, print a disclaimer banner aThis command will attempt to obfuscate information that is generally considered to be potentially sensitive. Such information includes IP addresses, MAC addresses, domain names, and any user-provided keywords. Note that this utility provides a best-effort approach to data obfuscation, but it does not guarantee that such obfuscation provides complete coverage of all such data in the archive, or that any obfuscation is provided to data that does not fit the description above. Users should review any resulting data and/or archives generated or processed by this utility for remaining sensitive content before being passed to a third party. z sos clean (version z) z- Press ENTER to continue, or CTRL-C to quit. z Exiting on user cancelr9N) _fmt_msgrCrwrr>batchinputKeyboardInterrupt_exitr)r\rles reprint_disclaimerSoSCleaner.print_disclaimersmm   0 SAB yy !GH%    !;< 3 ! 1a   !s, A996C1 C:CCc SUlURSS5nURSSSS9 URSS /S QS S 9 URS S/SS9 URSS/SSS9 URSSS/SSS9 URSSS[SS9 URSS/SS S9 URS!SS"S#S$9 URS%S&S'S(S)9 URS*S+S,S-S.S/9 URS0S,S-S1S2S39 URS4S5/SS6S/9 g)7Nzsos clean|mask TARGET [options]zCleaner/Masking Optionsz7These options control how data obfuscation is performedr*TARGETz%The directory or archive to obfuscate)metavarhelpz--archive-typer)rreportcollectinsightszdata-dirtarballz8Specify what kind of archive the target was generated as)defaultchoicesrz --domainsextendz!List of domain names to obfuscate)actionrrz--disable-parsersr"zCDisable specific parsers, so that those elements are not obfuscated)rrdestrz--skip-cleaning-filesz--skip-masking-filesr#zBList of files to skip/ignore during cleaning. Globs are supported.z-jz--jobsrz&Number of concurrent archives to clean)rtyperz --keywordsr%zList of keywords to obfuscatez--keyword-filer&z&Provide a file a keywords to obfuscate)rrrz --map-filer'rz;Provide a previously generated mapping file for obfuscation)rrrz --no-updater(F store_truez };&2%=  > 4e&2$7%G  H };&.$D  Frgc$XRlg)zFor use by report and collect to set the TARGET option appropriately so that execute() can be called just as if we were running `sos clean` directly from the cmdline. N)r>r*)r\rFs reset_target_pathSoSCleaner.set_target_path%s  rgcXSnURRS:wasURRRSS5nURH<nURU:XdMU"URR UR 5nM> OfURHVnURURR 5(dM/U"URR UR 5n O U(dgURRU5 UR(aJURRUR55 URRU5 XlUR(a&URRURlgg)zThe target path is not a directory, so inspect it for being an archive or an archive of archives. In the event the target path is not an archive, abort. Nr-_)r>r replacerZ type_namer*r. check_is_type report_pathsappend is_nestedrget_nested_archivesrYr[ descriptionui_name)r\_arc check_typearchivearcs reinspect_target_archive!SoSCleaner.inspect_target_archive,s=  99 ! !V +//77SAJ--$$ 2"499#3#3T[[AD.))$$TYY%5%566tyy//=D*    & >>    $ $T%=%=%? @    $ $T *"&    *.*=*=*I*ID   ' rgc6URRH0n[URS55S:dM#[ SUS35e URR Vs/sHn[ R"U5PM snURlgs snf)zCheck any values passed to the parsers via the commandline: - For the --domains option, ensure that they are valid for the parser in question. - Convert --skip-cleaning-files from globs to regular expressions. .zInvalid value 'z0' given: --domains values must be actual domainsN)r>r!lenrUrr#fnmatch translate)r\_domps rerHSoSCleaner.review_parser_valuesIs II%%D4::c?#a'%dV,%%&*.)F)F)H)FCD):):1)=)F)H %)Hs# Bc URRRS5SRS5SUlUR(aUR 5 /Ul[RRURR5(dCURRSURR35 URS5 UR5 UR (d,URRS5 URS5 /UlURH/nUR S:XdMUR"R%5 M1 UR'5 UR)5 UR+5 UR(d>UR,(ag URR/S 5 URS5 URR/S [1UR5S 35 UR35nUR5U5nUR7U5 UR95 UR,(a(URVs/sHoDR:PM nnX54$S n[1UR5S:aUR=5nOURSnUR:nUR?UR:5n U bURAURS5SS URB35n [E[RRGURHU 5SSS9n U RKU 5 S S S 5 URM5 [RRGURHURAURS5S55n[NRP"Xv5 [RR"U5n URR/SU35 URR/SUS35 URR/S[UU RV535 URR/S[YU RZ5R\S35 URR/S5 UR_5 g s snf!,(df  GNq=f)aSoSCleaner will begin by inspecting the TARGET option to determine if it is a directory, archive, or archive of archives. In the case of a directory, the default behavior will be to edit the data in place. For an archive will we unpack the archive, iterate over the contents, and then repack the archive. In the case of an archive of archives, such as one from SoSCollector, each archive will be unpacked, cleaned, and repacked and the final top-level archive will then be repacked as well. /z.tarrz*Invalid target: no such file or directory r9z'No valid archives or directories found zHostname ParserNz#No reports obfuscated, aborting... z Successfully obfuscated z report(s) rwrrz2A mapping of obfuscated elements is available at z) The obfuscated archive is available at  z Size z Owner zcPlease send the obfuscated archive to your support representative and keep the mapping file private)0r>r*rUarc_namer=rrrDrFrrCrzrrcompleted_reportsrRrSmappingset_initial_countspreload_all_archives_into_mapsgenerate_parser_item_regexesobfuscate_report_pathsrLrwrcompile_mapping_dictwrite_map_for_archivewrite_map_for_configwrite_stats_to_manifestfinal_archive_pathrebuild_nested_archiveget_new_checksumobfuscate_stringrNrrGr/writewrite_cleaner_logshutilmovestatrst_sizerst_uidpw_namecleanup) r\r8_mapmap_patha arc_paths final_patharc_pathrchecksum chksum_namecfarcstats reexecuteSoSCleaner.executeXs ((..s3B7==fEaH     ! ! #ww~~dii..// KK  J!%!1!1 24 5 JJqM ##%  KK  H I JJqM"$llF{{//113# ++- ))+ ##%%%}} KK  C D JJqM 5 6 678 F G((*--d3 !!$' $$& ==7;7M7MN7M!--7MIN& & t%% & *224H((+C--H,,S-C-CDH#"33~~c*2./q0@A "'',,t||[A3#*,/1HHX&,  " " $WW\\ LL  ! !(.."5b"9 :   H)''*% B8* M  ::,b I  8$6w$G#HIJ 9Xgnn%=%E%E$FbIJ L M UO,,sS#,S(( S7c:URS-nURUS9 URHlnURR S5SnUR UR5nUcMASUSUR 3nURRXES9 Mn [R"URR5HupgnUHn [RRXi5n U R URR5SnURS5nURR!XS9 [R""U 5 M M UR%SS 9 URR'UR(R*5$) zxHandles repacking the nested tarball, now containing only obfuscated copies of the reports, log files, manifest, etc... z -obfuscated)rSrrz checksums/rrT)r)r setup_archiverrrUrrNr add_stringrDwalkr[extracted_pathrFrGlstripadd_filerYrfinalizer>compression_type) r\rrarc_destrdnamedirnrfilesfilenamefnames rer!SoSCleaner.rebuild_nested_archivesX ===0 )--G1177 U$)zBuild a dict that contains each parser's map as a key, with the contents as that key's value. This will then be written to disk in the same directory as the obfuscated report so that sysadmins have a way to 'decode' the obfuscation locally )rR map_file_keyupdateget_map_contents)r\rr8s rerSoSCleaner.compile_mapping_dictsL llF(*D$$ % $$ % , ,V-D-D-F G# rgc[USSS9nUR[R"USS95 SSS5 U$!,(df  U$=f)zZWrite the mapping to a file on disk that is in the same location as the final archive(s). rrrr)indentN)rrrdumps)r\rrFrs rewrite_map_to_fileSoSCleaner.write_map_to_filesA$g ." HHTZZQ/ 0/ / . s %; A c[RRURUR UR S355nUR X5$![anURSU35 SnAgSnAff=f)Nz -private_mapz"Could not write private map file: ) rDrFrGr/rrrrr{)r\rrrs rer SoSCleaner.write_map_for_archivess ww|| %%|&DEH))$9 9  NN?uE F sAA B#A<<BcURR(aURR(d[RR URR5n[R "USS9 URXRR5 URSURR35 ggg![anURSU35 SnAgSnAff=f)zmWrite the mapping to the config file so that subsequent runs are able to provide the same consistent mapping Tr5zWrote mapping to z&Could not update mapping config file: N) r>r'r(rDrFdirnamerErrsrr{)r\r cleaner_dirrs rerSoSCleaner.write_map_for_configs 99  dii&9&9''//$))*<*<=K O K$7&&tYY-?-?@!24993E3E2FGH':  O!GuMNN Os+A"C C8C33C8c[RRURURS35n[ USSS9nUR RS5 UR R5HnURU5 M SSS5 U(a,URU5 URRUSS9 gg!,(df  NB=f) zWhen invoked via the command line, the logging from SoSCleaner will not be added to the archive(s) it processes, so we need to write it separately to disk z-obfuscation.logrrrrNzsos_logs/cleaner.logr) rDrFrGr/rr sos_log_fileseek readlinesrobfuscate_filerr)r\rlog_namelogfilelines rerSoSCleaner.write_cleaner_logs 77<< LLT]]O+;< (C' 2g    " "1 %))335 d#63     ) LL ! !(1G ! H  3 2s AC  CclSn[US5n[R"UR5nUR U5nU(dOUR U5 M,UR 5S-sSSS5 $!,(df  g=f![anURSU35 SnAgSnAff=f)zfCalculate a new checksum for the obfuscated archive, as the previous checksum will no longer be valid irbrNz!Could not generate new checksum: ) rhashlibnewrNreadr hexdigestrrs)r\ archive_path hash_size archive_fpdigesthashdatars rerSoSCleaner.get_new_checksums FIlD)Z T^^4)y9H#MM(+  '')D0*)) F NN>seD E E Fs5B A A:0 B : BB B B3B..B3cS[UR5SURRS3nURR U5 URR (aURRS5 [URR5nURURURSS9 URSS9 UR(a,UR5 URUR5 g g ![a4 URR S 5 [R "S 5 g f=f) zPerform the obfuscation for each archive or sos directory discovered during setup. Each archive is handled in a separate thread, up to self.opts.jobs will be obfuscated concurrently. zFound z. total reports to obfuscate, processing up to z concurrently zpWARNING: binary files that potentially contain sensitive information will NOT be removed from the final archive r9) chunksizeT)waitzExiting on user cancelrN)rrr>r$rCrwr)rXrmapobfuscate_reportshutdownr[_replace_obfuscated_archivesrrDr)r\rlpools rer!SoSCleaner.obfuscate_report_paths"s T../01$$(IINN#3?D  KK  S !yy** ##O&diinn5D HHT**D,=,=H K MMtM $""113%%d&9&9:#!  KK  5 6 HHSM sDD;EEc^URHn[R"UR5 URR nUR RS5Sn[RRX#5n[R"UR U5 XAlM g)zWhen we have a nested archive, we need to rebuild the original archive, which entails replacing the existing archives with their obfuscated counterparts rrN) rrDrYr.r[rrrUrFrGrr)r\rrr dest_names rer:'SoSCleaner._replace_obfuscated_archives?s~ --G IIg** +&&55D0066s;B?G T3I KK22D 9)2 & .rgcJURHnUR5 M g)zFor the parsers that use prebuilt lists of items, generate those regexes now since all the parsers should be preloaded by the archive(s) as well as being handed cmdline options and mapping file configuration. N)rRgenerate_item_regexes)r\r8s rer'SoSCleaner.generate_parser_item_regexesLs llF  ( ( *#rgc URGHJnURR5R5SR 5nUR XA5HjnUR U5nU(dMURSUSUSUR35 UR5HnURU5 M Ml URXA5n U (aEURSUS UR35 U Hn URRU 5 M URUHn URR!U 5 M GMM g![a%nURSUSUSU35 SnAMSnAff=f) a For each archive we've determined we need to operate on, pass it to each prepper so that we can extract necessary files and/or items for direct regex replacement. Preppers define these methods per parser, so it is possible that a single prepper will read the same file for different parsers/mappings. This is preferable to the alternative of building up monolithic lists of file paths, as we'd still need to manipulate these on a per-archive basis. :param archive: The archive we are currently using to prepare our mappings with :type archive: ``SoSObfuscationArchive`` subclass :param prepper: The individual prepper we're using to source items :type prepper: ``SoSPrepper`` subclass rz Prepping z parser with file z from zFailed to prep z map from : Nz mapping with items from )rRrSrTrUrVget_parser_file_listget_file_contentrsr splitlines parse_linerget_items_for_mapradd regex_itemsadd_regex_item) r\rprepperr`pname_filecontentr&r map_itemsitemritems re_prepare_archive_with_prepper(SoSCleaner._prepare_archive_with_prepperTsr"||GLL&&(..0399;E 55eE!22595'1CE7K''.&7 9:#..0D**401 F 11%AI5'1J")//!2 45%DOO''-&!,,U3..u54-$%-eWJugRuMs0E F 'F F c## [[RR5n/nUR 5H nUR [ SU355 M" [USS9HnU"URS9v M g7f)z Discover all locally available preppers so that we can prepare the mappings with obfuscation matches in a controlled manner :returns: All preppers that can be leveraged locally :rtype: A generator of `SoSPrepper` items zsos.cleaner.preppers.cUR$rq)priority)xs re)SoSCleaner.get_preppers..s1::rg)key)r-N) rr2r4preppers get_modulesrrsortedr>)r\helperpreps_preprMs re get_preppersSoSCleaner.get_preppers~sm  4 45'')E LL)>ug'FG H*e)=>G$)), ,?sA?BcURS5 UR5H'nURHnURX!5 M M) g)zBefore doing the actual obfuscation, if we have multiple archives to obfuscate then we need to preload each of them into the mappings to ensure that node1 is obfuscated in node2 as well as node2 being obfuscated in node1's archive. z.Pre-loading all archives into obfuscation mapsN)rWrcrrT)r\rMrs rer)SoSCleaner.preload_all_archives_into_mapssB FG((*G,,227D-+rgc<URRUR5n[R"5nUR SU5 UR (dUR5 URS5 UR5HnURURS-5SnURU5(aM<URR(d)URU5(aURU5 MURR(a([!U5(dURU5(aMUR#XEUR5nU(aUR%XV5 MM UR+U5 UR/U5 UR0(dUR35nU(aMURS 5 UR5UR7UR55 UR9U5 UR:R=U5 [R"5n UR SU 5 UR SX- 5 UR S[?UR@55 UR SURB5 Sn URD(aSn XRD-n URSU 35 g![&a#nUR)SUSU35 SnAGMSnAff=f![&a(nUR-SU3URS 9 SnAGNSnAff=f![&a(nUR-S U3URS 9 SnAGNSnAff=f![&a?nUR)S URS U35 URSU35 SnAgSnAff=f![&a5nURFRISURSU35 SnAgSnAff=f)zIndividually handle each archive or directory we've discovered by running through each file therein. Positional arguments: :param report str: Filepath to the directory or archive start_timezBeginning obfuscation...rr9zUnable to parse file rDNz!Failed to obfuscate directories: rmzFailed to obfuscate symlinks: zRe-compressing...zArchive z failed to compress: zFailed to re-compress archive: end_timerun_timefiles_obfuscatedtotal_substitutionsrz! [removed %s unprocessable files]zObfuscation completedzException while processing )%rQrP archive_namernow add_field is_extractedextract report_msg get_file_listrUshould_skip_filer>r)should_remove_file remove_filerr#update_sub_countrrsobfuscate_directory_namesrWobfuscate_symlinksrget_compressionrename_top_dirrcompressrrr file_sub_listtotal_sub_countremoved_file_countrCrw) r\rarc_mdrhr  short_namecountrmethodrjrmsgs rer8SoSCleaner.obfuscate_reportsM ?__001E1EFF!J   \: 6''!   9 : ..0"[[)=)=)CDQG ++J77 3322:>>'' 3II//'.. 33J??P //070D0DFE00C)12 ;..w7  ;''0 $$ 002&&':; .. 11'2F2FG ((0&&--g6||~H   Z 2   Z)> ?   /W5J5J1K L   2G4K4K LD)):888   !6tf= >U!PNN%::,b#NOOP  ; A#G%,%9%9; ;  ; >seD%,%9%9; ;%'2F2F1GH88;u(>?**=cUCE & ? KK  : ' 4 45Ru> ? ? ?sEO4K6OL&!M29O,;N'CO6 L#LOL##O& M0M OMO N %NON  O O5OOOO P&+PPc ^U(dgSnT(dURS5Sm[RRU5(Gd,URVs/sH+n[ U4SjUR 55(aM)UPM- nnU(dURST=(d US35 gURST=(d U3US 9 [R"S URS 9n[US S SS9nUH,n URX5upXJ- nURU 5 M. SSS5 URS5 U(a![ R""UR$U5 SSS5 UR'TRS5S5n TR)TRS5SU 5n U T:waURT5Sn[RR+X5n[RRU5(d[R,"X5 U$UR'[R."U55n[R0"U5 [R2"UU5 U$s snf![a"n URSTSU 3US 9 Sn A GMSn A ff=f!,(df  GN=f!,(df  GNe=f)aObfuscate and individual file, line by line. Lines processed, even if no substitutions occur, are then written to a temp file without our own tmpdir. Once the file has been completely iterated through, if there have been substitutions then the temp file overwrites the original file. If there are no substitutions, then the original file is left in place. Positional arguments: :param filename str: Filename relative to the extracted archive root Nrrrc3D># UHoRT5v M g7frqmatch).0_skiprs re ,SoSCleaner.obfuscate_file.. s9IKK ++9I zSkipping obfuscation of z" due to matching file skip patternz Obfuscating rir)modedirrrr)rerrorszUnable to obfuscate ri)rUrDrFislinkrRany skip_patternsrstempfileNamedTemporaryFiler.robfuscate_linerrr!rcopyfilerSrrrGrenamereadlinkrYsymlink)r\r rrsubs_p_parserstfiler r&rr_ob_short_name _ob_filenamer_ob_path _target_obs ` rer#SoSCleaner.obfuscate_files!,R0Jww~~h''"\\)r9;9I9I\  .z/EX.FG12 NN\**@)AB"*  ,,,#4;;G(C'!*,/4 %F*.*=*=d*MKD MD!KK- !&, 1 OOEJJ9H ..z/?/?/DR/HI!))**:*:3*?*C*8:  : %~~j1!4Hww||H;H77>>(++ (- "222;;x3HI  (# :x0 i. )F NN-A*Q.1U,4# UHoRT5v M g7frqr)rr_syms rer0SoSCleaner.obfuscate_symlinks..PsH7Ge D))7Grz Skipping obfuscation of symlink z due to skip pattern matchzObfuscating symlink zError obfuscating symlink 'rN)rWrn get_symlinksrUrrrRrrrsrDrrFrGrrYrr) r\rrrr_target _ob_sym_name _ob_targetrrs @rerzSoSCleaner.obfuscate_symlinks=s 1':N:N O++-G O}}W%;%;B3E?:E?? F, F''F,cpURSUR35 [UR5SS9Hn[R "U5Hn[R RX#5nURUR5Sn[R RU5(dMfURU5nXc:wdM~URU5n[R RURURS5U5n[R"XG5 M M g)zFor all directories that exist within the archive, obfuscate the directory name if it contains sensitive strings found during execution z'Obfuscating directory names in archive T)reverserrN)rWrnr_get_directory_listrDlistdirrFrGrUrrrrstriprr)r\rdirpath_name_dirname_arc_dir _ob_dirname _ob_arc_dirs rery$SoSCleaner.obfuscate_directory_namesks ? --.0 1g88:DIGG,77<<7#>>'*@*@A"E77==**"&"7"7">K"+&.ooe&< &(ggll#22'..s3''  (8-JrgcURHnURU5nM U$![anURSU35 SnAM?SnAff=f)NzError obfuscating string data: )rRparse_string_for_keysrrW)r\ string_datar8rs rerSoSCleaner.obfuscate_stringsYllF G$::;G #  G ?uEFF Gs( AA  Ac SnUR5(dX4$Uc URnUHnURU5upX5- nM X4$![a*nUR SU3UR 5 SnAMQSnAff=f)aRun a line through each of the obfuscation parsers, keeping a cumulative total of substitutions done on that particular line. Positional arguments: :param line str: The raw line as read from the file being processed :param parsers: A list of parser objects to obfuscate with. If None, use all. Returns the fully obfuscated line and the number of substitutions made rNzfailed to parse line: )rVrRrHrrsrS)r\r&rRrr8_countrs rerSoSCleaner.obfuscate_lineszz||;  ?llGF L%006  { L!7u=v{{KK LsA BA==BcLURRS5nURHynURURR SS5R 55nUR S[URRR555 M{ g)zLWrite some cleaner-level, non-report-specific stats to the manifest rR rentriesN) rQrPrRrSrrTrprrdatasetkeys)r\ parse_secr8_secs rer"SoSCleaner.write_stats_to_manifestsvOO// : llF(()<)rRr0rrBr/r.rC)NNNFNrq)F)NN)+__name__ __module__ __qualname____firstlineno__rdesc arg_defaultsr<rnrsrWr{ classmethodrrIrrrrrHrrrrrrrrrr:rrTrcrr8r#rzryrrr__static_attributes__ __classcell__)rds@rerr*s($L DD!6" LGL"EGNB:9:&&8!:/F/Fb J: H^@A0   OI"$: 3+(6T - EU?nL\,O\9*8JJrgr)-r*rr@rDrrrconcurrent.futuresrrpwdrsos.cleaner.preppersr2r sos.componentrsos.cleaner.parsers.ip_parserrsos.cleaner.parsers.mac_parserr #sos.cleaner.parsers.hostname_parserr "sos.cleaner.parsers.keyword_parserr #sos.cleaner.parsers.username_parserr sos.cleaner.parsers.ipv6_parserr sos.cleaner.archives.sosrrrrsos.cleaner.archives.genericrrsos.cleaner.archives.insightsr sos.utilitiesrrrrrrjrgrersm  1&57A?A9==H9++@J@Jrg