a

^��c;�@s&dd
lm
Z
mZ
Gdd�de
e�ZdS)�)�Plugin�IndependentPluginc@s$eZ
dZd
ZdZdZdZdd�ZdS)�AuditdzAudit daemon informationZauditd)�systemZsecurity)
�auditc

Cs
|�gd
�
�

|�
d�

|j
ddd�
|j
ddd�
d}
d	}zlt|
d
��N}|����D]0}|s`qV|�d�
}|d��d
krV|d��}qVWd�
n1s�0


Y
Wn6ty�
}
z|�d|
|f�

WYd}~n
d}~00|�	d�
s�|�|�

n|�|d�

dS)N)�/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z8ausearch --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lZauditctl_rules)
�tagszauditctl -sZauditctl_statusrz/var/log/audit/audit.log�
r�
=r
�log_file�
zCould not open conf file %s: %sZall_logs�
*)
Z
add_copy_specZadd_cmd_output�open�read�
splitlines�split�strip�IOErrorZ
_log_errorZ
get_option)�selfZconfig_filer�cf�line�words�error�r�=/usr/lib/python3.9/site-packages/sos/report/plugins/auditd.py�setups.
	
�










0


�

zAuditd.setupN)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesZpackagesrrrrrrs

rN)Zsos.report.pluginsrrrrrrr�<module>	s