← Back
Editing: auditd.cpython-312.pyc
� ܓ�iT � �, � d dl mZmZ G d� dee� Zy)� )�Plugin�IndependentPluginc �" � e Zd ZdZdZdZdZd� Zy)�AuditdzAudit daemon information�auditd)�system�security)�auditc �t � | j g d�� | j d� | j dd�� | j dd�� d}d } t |d d � � 5 }|j � j � D ]@ }|s�|j d � }|d j � dk( s�.|d j � }�B d d d � | j d� s| j |� y | j |dz � y # 1 sw Y �AxY w# t $ r!}| j d|� d|� �� Y d }~�id }~ww xY w)N)�/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -l�auditctl_rules)�tagsz auditctl -s�auditctl_statusr z/var/log/audit/audit.log�rzUTF-8)�encoding�=r �log_file� zCould not open conf file z: �all_logs�*) � add_copy_spec�add_cmd_output�open�read� splitlines�split�strip�IOError� _log_error� get_option)�self� config_filer �cfile�line�words�errors �>/usr/lib/python3.12/site-packages/sos/report/plugins/auditd.py�setupz Auditd.setup s/ � � ��� � � ��� I� � ���M�0@��A� ���M�0A��B�.� �-�� (��k�3��9�U� !�J�J�L� 3� 3� 5�D� � � �J�J�s�O�E� �Q�x�~�~�'�:�5�#(��8�>�>�#3�� 6� :� ���z�*� � � �x� (� � � �x��|� ,� :�9�� � (� �O�O� 7� �}�B� $�g� '� (� (�� (�s7 �D � A D�+D�D �D �D � D7�D2�2D7N)�__name__� __module__� __qualname__� short_desc� plugin_name�profiles�packagesr( � � r' r r s � �+�J��K�%�H��H�!-r1 r N)�sos.report.pluginsr r r r0 r1 r' �<module>r3 s �� 9�*-�V�&� *-r1
Save File
Cancel