3
ܓiT @ s& d dl mZmZ G dd deeZdS ) )PluginIndependentPluginc @ s$ e Zd ZdZdZd Zd
Zdd ZdS ) AuditdzAudit daemon informationZauditdsystemsecurityauditc C s | j ddddddg | jd | jdd d
| jd d d
d}d
}y`t|dddH}x@|j j D ]0}|snqd|jd}|d j dkrd|d j }qdW W d Q R X W n8 tk
r } z | jd| d| W Y d d }~X nX | j ds| j | n| j |d d S )Nz/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -lZauditctl_rules)Ztagsz auditctl -sZauditctl_statusz/var/log/audit/audit.logrzUTF-8)encoding=r log_file zCould not open conf file z: Zall_logs*)
Z
add_copy_specZadd_cmd_outputopenread
splitlinessplitstripIOErrorZ
_log_errorZ
get_option)selfZ config_filer cfilelineZwordserror r /usr/lib/python3.6/auditd.pysetup s4
(
z Auditd.setupN)r r )r )__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilesZpackagesr r r r r r s
r N)Zsos.report.pluginsr r r r r r r s