U
    -_gT                     @   s&   d dl mZmZ G dd deeZdS )    )PluginIndependentPluginc                   @   s$   e Zd ZdZdZdZdZdd ZdS )AuditdzAudit daemon informationZauditd)systemZsecurity)auditc              
   C   s  |  ddddddg | d | jdd	d
 | jddd
 d}d}z\t|dddD}|  D ]0}|slqb|d}|d  dkrb|d  }qbW 5 Q R X W n8 tk
r } z| d| d|  W 5 d }~X Y nX | 	ds|  | n|  |d  d S )Nz/etc/audit/auditd.confz/etc/audit/audit.rulesz/etc/audit/audit-stop.rulesz/etc/audit/rules.d/z/etc/audit/plugins.d/z/etc/audisp/z;ausearch -i --input-logs -m avc,user_avc,fanotify -ts todayzauditctl -lZauditctl_rules)Ztagszauditctl -sZauditctl_statusz/var/log/audit/audit.logrzUTF-8)encoding=r   log_file   zCould not open conf file z: Zall_logs*)
Zadd_copy_specZadd_cmd_outputopenread
splitlinessplitstripIOErrorZ
_log_errorZ
get_option)selfZconfig_filer
   cfilelineZwordserror r   ;/usr/lib/python3/dist-packages/sos/report/plugins/auditd.pysetup   s8    	
(
zAuditd.setupN)__name__
__module____qualname__Z
short_descZplugin_nameZprofilesZpackagesr   r   r   r   r   r      s
   r   N)Zsos.report.pluginsr   r   r   r   r   r   r   <module>	   s   