File: //lib/python3.9/site-packages/sos/report/plugins/__pycache__/auditd.cpython-39.opt-1.pyc
a
\��hT � @ s& d dl mZmZ G dd� dee�ZdS )� )�Plugin�IndependentPluginc @ s$ e Zd ZdZdZdZdZdd� ZdS )�AuditdzAudit daemon informationZauditd)�systemZsecurity)�auditc
C s | � g d�� | �d� | jddd� | jddd� d}d }zpt|d
d d ��N}|�� �� D ]0}|sdqZ|�d
�}|d �� dkrZ|d �� }qZW d � n1 s�0 Y W n: ty� } z"| �d|� d|� �� W Y d }~n
d }~0 0 | � d�s�| � |� n| � |d � d S )N)�/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -lZauditctl_rules)�tagsz auditctl -sZauditctl_statusr z/var/log/audit/audit.log�rzUTF-8)�encoding�=r �log_file� zCould not open conf file z: Zall_logs�*)
Z
add_copy_specZadd_cmd_output�open�read�
splitlines�split�strip�IOErrorZ
_log_errorZ
get_option)�selfZ config_filer �cfile�line�words�error� r �=/usr/lib/python3.9/site-packages/sos/report/plugins/auditd.py�setup s. �
0 �
z Auditd.setupN)�__name__�
__module__� __qualname__Z
short_descZ plugin_nameZprofilesZpackagesr r r r r r s
r N)Zsos.report.pluginsr r r r r r r �<module> s