U

i��d�	�@s.dd
lm
Z
mZmZmZ
Gdd�de
e�ZdS)�)�Plugin�IndependentPlugin�SoSPredicate�	PluginOptc@s@eZ
dZd
ZdZdZedddd�g
ZdZd	Z	d
d�Z
dd
�ZdS)�	LibreswanzLibreswan IPsec�	libreswan)ZnetworkZsecurityZ	openshift�
ipsec-barfFzcollect ipsec barf output)�defaultZdesc)
�/etc/ipsec.conf)rZopenswanc
Cst|�d
ddg�

|�
ddddg�

t|dd	gd
di
d�}
|j
d
dg|
d�
|�d�
r^|�
d�

|�ddddg�

dS)Nr
z/etc/ipsec.dz/proc/net/xfrm_statzipsec verifyzipsec whack --statuszipsec whack --listallzcertutil -L -d sql:/etc/ipsec.dZ	xfrm_userZ	xfrm_algo�kmods�all)rZrequiredzip xfrm policyz
ip xfrm state)
Zpredrz
ipsec barfz/etc/ipsec.secretsz/etc/ipsec.secrets.dz/etc/ipsec.d/*.dbz/etc/ipsec.d/*.secrets)Z
add_copy_specZadd_cmd_outputr�
get_optionZadd_forbidden_path)�selfZ	xfrm_pred�r�>/usr/lib/python3/dist-packages/sos/report/plugins/libreswan.py�setups8



�



�

�

��






�zLibreswan.setupc
Cs.d
}
|�d|
d�
|�
d�
r*|�d|
d�
dS)Nz/(aead|auth|auth-trunc|enc)(\s.*\s)(0x[0-9a-f]+)�statez\1\2********rZbarf)Zdo_cmd_output_subr
)rZxfrm_state_regexprrr�postproc@s
�


�zLibreswan.postprocN)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesrZoption_list�filesZpackagesrrrrrrrs

��
"rN)Zsos.report.pluginsrrrrrrrrr�<module>s