o

-�_gT�@s&dd
lm
Z
mZ
Gdd�de
e�ZdS)�)�Plugin�IndependentPluginc@s$eZ
dZd
ZdZdZdZdd�ZdS)�AuditdzAudit daemon information�auditd)�system�security)
�auditc

Cs
|�gd
�
�

|�
d�

|j
ddd�
|j
ddd�
d}
d	}z8t|
d
dd��'}|����D]}|s2q-|�d
�
}|d��dkrE|d��}q-Wd�
n1sPw



Y
Wntys
}
z|�d|
�d|���

WYd}~nd}~w
w|�	d�
s�|�|�

dS|�|d�

dS)N)�/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -l�auditctl_rules)
�tagszauditctl -s�auditctl_statusr	z/var/log/audit/audit.log�
rzUTF-8)
�encoding�
=r
�log_file�
zCould not open conf file z: �all_logs�
*)
�
add_copy_spec�add_cmd_output�open�read�
splitlines�split�strip�IOError�
_log_error�
get_option)�self�config_filer�cfile�line�words�error�r$�;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.py�setups:
	
�










����

���

zAuditd.setupN)�__name__�
__module__�__qualname__�
short_desc�plugin_name�profiles�packagesr&r$r$r$r%rs
rN)�sos.report.pluginsrrrr$r$r$r%�<module>
s