o
    id;                     @   s&   d dl mZmZ G dd deeZdS )    )PluginIndependentPluginc                   @   s$   e Zd ZdZdZdZdZdd ZdS )AuditdzAudit daemon informationauditd)systemsecurity)auditc              
   C   s
  |  g d | d | jddd | jddd d}d	}z6t|d
'}|  D ]}|s0q+|d}|d  dkrC|d  }q+W d    n1 sNw   Y  W n tyo } z| d||f  W Y d }~nd }~ww | 	ds||  | d S |  |d  d S )N)/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z8ausearch --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lauditctl_rules)tagszauditctl -sauditctl_statusr	   z/var/log/audit/audit.logr=r   log_file   zCould not open conf file %s: %sall_logs*)
add_copy_specadd_cmd_outputopenread
splitlinessplitstripIOError
_log_error
get_option)selfconfig_filer   cflinewordserror r#   ;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.pysetup   s:   	

zAuditd.setupN)__name__
__module____qualname__
short_descplugin_nameprofilespackagesr%   r#   r#   r#   r$   r      s    r   N)sos.report.pluginsr   r   r   r#   r#   r#   r$   <module>   s   