← Back
Editing: audit_data.cpython-312.opt-1.pyc
� %ch� � �� � d dl mZ d dlZd dlmZ d dlZg d�Zd dlZd dlZd dlZd dl Z d dl Z d dlZd dlZd dl Z d dl� d dlmZ d dl� d dl� d dl� d dl� dZd� Zd� Zd � Z ej2 d � Zd� Z ej2 d� Zd � Zd dlZd� Z G d� de � Z! G d� de � Z" G d� de � Z# G d� d� Z$ G d� de � Z% G d� de&� Z' G d� d� Z(d� Z)y)� )�absolute_importN)�range) �derive_record_format�parse_audit_record_text� AvcContext�AVC�AuditEventID� AuditEvent�AuditRecord�AuditRecordReader�compute_avcs)�*� c � � | |kD | |k z S �N� )�x�ys �>/usr/lib/python3.12/site-packages/setroubleshoot/audit_data.py�<lambda>r 7 s � �A��E�a�!�e�$� c �@ � t | � \ }}}}t |||� }|S r )r r )�text�parse_succeeded�record_type�event_id� body_text�audit_records r �audit_record_from_textr = s* � �8O�PT�8U�5�O�[�(�I��{�H�i�@�L��r c � � t j d| � rt j S t j d| � rt j S t j S )Nz/audispd_events$z/audit_events$)�re�searchr �TEXT_FORMAT� BINARY_FORMAT)�socket_paths r r r E sD � � �y�y�#�[�1� �,�,�,� �y�y�!�;�/� �.�.�.��(�(�(r zL(node=(\S+)\s+)?(type=(\S+)\s+)?(msg=)?audit\(((\d+)\.(\d+):(\d+))\):\s*(.*)c �� � d}d }d }d }d }t j | � }|��d}|j d� r|j d� }|j d� r|j d� }|j d� r\t |j d� � }t |j d� � }t |j d� � } t ||| |� }|j d � }||||fS ) NFT� � � � � � � )�audit_input_rer"