Ë
    i©¹d;  ã                   ó,   — d dl mZmZ  G d„ dee«      Zy)é    )ÚPluginÚIndependentPluginc                   ó"   — e Zd ZdZdZdZdZd„ Zy)ÚAuditdzAudit daemon informationÚauditd)ÚsystemÚsecurity)Úauditc                 óp  — | j                  g d¢«       | j                  d«       | j                  dd¬«       | j                  dd¬«       d}d	}	 t        |d
«      5 }|j                  «       j	                  «       D ]@  }|sŒ|j                  d«      }|d   j                  «       dk(  sŒ.|d   j                  «       }ŒB 	 d d d «       | j                  d«      s| j                  |«       y | j                  |dz   «       y # 1 sw Y   ŒAxY w# t        $ r!}| j                  d|›d|›�«       Y d }~Œid }~ww xY w)N)ú/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z8ausearch --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lÚauditctl_rules)Útagszauditctl -sÚauditctl_statusr   z/var/log/audit/audit.logÚrú=r   Úlog_fileé   zCould not open conf file z: Úall_logsÚ*)
Úadd_copy_specÚadd_cmd_outputÚopenÚreadÚ
splitlinesÚsplitÚstripÚIOErrorÚ
_log_errorÚ
get_option)ÚselfÚconfig_filer   ÚcfÚlineÚwordsÚerrors          ú;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.pyÚsetupzAuditd.setup   s0  € Ø×Ñò 
ô 	ð 	×ÑØFô	
ð 	×Ñ˜MÐ0@ÐÔAØ×Ñ˜MÐ0AÐÔBà.ˆØ-ˆð
	2Ü�k 3Ó'ð 4¨2ØŸG™G›I×0Ñ0Ó2ò 4�DÙØ Ø ŸJ™J s›O�EØ˜Q‘x—~‘~Ó'¨:Ó5Ø#(¨¡8§>¡>Ó#3™ñ4÷4ð �‰˜zÔ*Ø×Ñ˜xÕ(à×Ñ˜x¨™|Õ,÷4ð 4ûô ò 	2Ø�OŠOÚ(©%ð1÷ 2ñ 2ûð	2ús7   ÁD ÁAC?Â)C?Â?D Ã?DÄD Ä	D5ÄD0Ä0D5N)Ú__name__Ú
__module__Ú__qualname__Ú
short_descÚplugin_nameÚprofilesÚpackagesr'   © ó    r&   r   r      s   „ à+€Jà€KØ%€Hà€Hó!-r0   r   N)Úsos.report.pluginsr   r   r   r/   r0   r&   ú<module>r2      s   ð÷ 9ô*-ˆVÐ&õ *-r0   