관리-도구
편집 파일: auditd.cpython-39.pyc
a -�_gT � @ s& d dl mZmZ G dd� dee�ZdS )� )�Plugin�IndependentPluginc @ s$ e Zd ZdZdZdZdZdd� ZdS )�AuditdzAudit daemon informationZauditd)�systemZsecurity)�auditc C s | � g d�� | �d� | jddd� | jddd� d}d }zpt|d d d ��N}|�� �� D ]0}|sdqZ|�d �}|d �� dkrZ|d �� }qZW d � n1 s�0 Y W n: ty� } z"| �d|� d|� �� W Y d }~n d }~0 0 | � d�s�| � |� n| � |d � d S )N)�/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z /etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayz auditctl -lZauditctl_rules)�tagsz auditctl -sZauditctl_statusr z/var/log/audit/audit.log�rzUTF-8)�encoding�=r �log_file� zCould not open conf file z: Zall_logs�*) Z add_copy_specZadd_cmd_output�open�read� splitlines�split�strip�IOErrorZ _log_errorZ get_option)�selfZ config_filer �cfile�line�words�error� r �=/usr/lib/python3.9/site-packages/sos/report/plugins/auditd.py�setup s. � 0 � z Auditd.setupN)�__name__� __module__� __qualname__Z short_descZ plugin_nameZprofilesZpackagesr r r r r r s r N)Zsos.report.pluginsr r r r r r r �<module> s