U

i��d;�@s&dd
lm
Z
mZ
Gdd�de
e�ZdS)�)�Plugin�IndependentPluginc@s$eZ
dZd
ZdZdZdZdd�ZdS)�AuditdzAudit daemon informationZauditd)�systemZsecurity)
�auditc

Cs�|�d
dddddg�

|�
d�

|j
dd	d
�
|j
ddd
�
d
}
d
}zXt|
d��D}|����D]0}|shq^|�d�
}|d��dkr^|d��}q^W5QRXWn4tk
r�
}
z|�d|
|f�

W5d}~XYnX|�	d�
s�|�|�

n|�|d�

dS)Nz/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z8ausearch --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lZauditctl_rules)
Ztagszauditctl -sZauditctl_statusz/var/log/audit/audit.log�
r�
=r
�log_file�
zCould not open conf file %s: %sZall_logs�
*)
Z
add_copy_specZadd_cmd_output�open�read�
splitlines�split�strip�IOErrorZ
_log_errorZ
get_option)�selfZconfig_filer	Zcf�lineZwords�error�r�;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.py�setups<






�	
�













�

zAuditd.setupN)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesZpackagesrrrrrrs

rN)Zsos.report.pluginsrrrrrrr�<module>	s