o id;@s&ddlmZmZGdddeeZdS))PluginIndependentPluginc@s$eZdZdZdZdZdZddZdS)AuditdzAudit daemon informationauditd)systemsecurity)auditc Cs |gd|d|jddd|jdddd}d }z6t|d '}|D]}|s0q+|d }|d d krC|d}q+Wdn1sNwYWntyo}z|d||fWYd}~nd}~ww| ds|||dS||ddS)N)/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z8ausearch --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -lauditctl_rules)tagsz auditctl -sauditctl_statusr z/var/log/audit/audit.logr=rlog_filezCould not open conf file %s: %sall_logs*) add_copy_specadd_cmd_outputopenread splitlinessplitstripIOError _log_error get_option)self config_filercflinewordserrorr#;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.pysetups:     z Auditd.setupN)__name__ __module__ __qualname__ short_desc plugin_nameprofilespackagesr%r#r#r#r$r s  rN)sos.report.pluginsrrrr#r#r#r$s