a >hT@s&ddlmZmZGdddeeZdS))PluginIndependentPluginc@s$eZdZdZdZdZdZddZdS)AuditdzAudit daemon informationZauditd)systemZsecurity)auditc Cs|gd|d|jddd|jdddd}d }zpt|d d d N}|D]0}|sdqZ|d }|ddkrZ|d}qZWdn1s0YWn:ty}z"|d|d|WYd}~n d}~00| ds||n||ddS)N)/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -lZauditctl_rules)tagsz auditctl -sZauditctl_statusrz/var/log/audit/audit.logrzUTF-8)encoding=rlog_filezCould not open conf file z: Zall_logs*) Z add_copy_specZadd_cmd_outputopenread splitlinessplitstripIOErrorZ _log_errorZ get_option)selfZ config_filer cfilelinewordserrorr=/usr/lib/python3.9/site-packages/sos/report/plugins/auditd.pysetups.  0   z Auditd.setupN)__name__ __module__ __qualname__Z short_descZ plugin_nameZprofilesZpackagesrrrrrr s rN)Zsos.report.pluginsrrrrrrr s