
    -_gT                     ,    d dl mZmZ  G d dee      Zy)    )PluginIndependentPluginc                   "    e Zd ZdZdZdZdZd Zy)AuditdzAudit daemon informationauditd)systemsecurity)auditc                 t   | j                  g d       | j                  d       | j                  dd       | j                  dd       d}d	}	 t        |d
d      5 }|j                         j	                         D ]@  }|s|j                  d      }|d   j                         dk(  s.|d   j                         }B 	 d d d        | j                  d      s| j                  |       y | j                  |dz          y # 1 sw Y   AxY w# t        $ r!}| j                  d| d|        Y d }~id }~ww xY w)N)/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lauditctl_rules)tagszauditctl -sauditctl_statusr   z/var/log/audit/audit.logrzUTF-8)encoding=r   log_file   zCould not open conf file z: all_logs*)
add_copy_specadd_cmd_outputopenread
splitlinessplitstripIOError
_log_error
get_option)selfconfig_filer   cfilelinewordserrors          ;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.pysetupzAuditd.setup   s;    
 	 	I	
 	M0@AM0AB.-
	(k39 4U!JJL335 4D  JJsOEQx~~':5#(8>>#344 z*x(x|,4 4  	(OO7}B$g' ( (	(s7   D AD+DD D
D 	D7D22D7N)__name__
__module____qualname__
short_descplugin_nameprofilespackagesr(        r'   r   r      s    +JK%HH!-r1   r   N)sos.report.pluginsr   r   r   r0   r1   r'   <module>r3      s    9*-V& *-r1   