dbfdg 3 d"vh"@shddlmZedkr&ddZeZ[n"edkr@ddZeZ[nddlZ[yeZWnek rfYnXy ddlZ Wne k rddl Z YnXdd d Z d d Z ddZ ddZddZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1ej2Z2ej3Z3ej4Z4ej5Z5ej6Z6ej7Z7ej8Z8ej9Z9ej:Z:ej;Z;ejZ>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNejOZOejPZPejQZQejRZRejSZSejTZTejUZUejVZVejWZWejXZXejYZYejZZZej[Z[ej\Z\ej]Z]ej^Z^ej_Z_ej`Z`ejaZaejbZbejcZcejdZdejeZeejfZfejgZgejhZhejiZiejjZjejkZkejlZlejmZmejnZnejoZoejpZpejqZqejrZrejsZsejtZtejuZuejvZvejwZwejxZxejyZyejzZzej{Z{ej|Z|ej}Z}ej~Z~ejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZej Z ej Z ej Z Gddde Z ejZee Gddde ZejZeeejZejZejZejZGddde ZejZeeGddde ZejZeeejZejZejZejZejZejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1ej2Z2ej3Z3ej4Z4ej5Z5ej6Z6ej7Z7ej8Z8ej9Z9ej:Z:ej;Z;ej<ZZ>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNejOZOejPZPejQZQejRZRejSZSejTZTejUZUejVZVejWZWejXZXejYZYejZZZej[Z[ej\Z\ej]Z]ej^Z^ej_Z_ej`Z`ejaZaejbZbejcZcejdZdejeZeejfZfejgZgejhZhejiZiejjZjejkZkejlZlejmZmejnZnejoZoejpZpejqZqejrZrejsZsejtZtejuZuejvZvejwZwejxZxejyZyejzZzej{Z{ej|Z|ej}Z}ej~Z~ejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZGddde ZejZeeejZGddde ZejZeeGd d!d!e ZejZeeGd"d#d#e ZejZeeejZejZejZejZejZejZejZejZejÐZejĐZejŐZejƐZejǐZejȐZejɐZejʐZejːZej̐Zej͐ZejΐZejϐZejАZd$d%d&d'd(d)ZejѐZejҐZejӐZd*d+d,d-ZejԐZd*d&d.d/d0ZejՐZd*d!d1d*d*d2d3d4Zej֐Zd5d+d6d7ZejאZd5d*d8d9d:ZejؐZd;d+dd?ZejڐZd@d*dAdBdCZejېZdDd*dDd!dDdDdEdFdGZejܐZd@d*dHdIdJZejݐZd*d@dHdKdLZejސZd@d*d*dMdNdOZejߐZd*d*d@dMdPdQZejZd*d@dRdSdTZejZd@d*dRdUdVZejZd@d*dWdXdYZejZd*d@dWdZd[ZejZd@d*d\d]d^ZejZd*d@d\d_d`ZejZd@d*dadbdcZejZd*d@dadddeZejZd@d*dfdgdhZejZd*d@dfdidjZejZd*dkdfdldmZejZdkd*dndodpZejZd*d@dqdrdsZejZd@d*dtdudvZejZd*d@dtdwdxZejZd@d*dydzd{ZejZd*d@d|d}d~ZejZd@d*dyddZejZd*d@dddZejZd*d@d&dddZejZd*d*d.ddZejZd*d*d.ddZejZdd*dddZejZd*d*d.ddZejZd;d+ddZejZejZejZd*d;dd*dddZejZd*d;d*dddZejZd*d;d*dddZejZd*d;d*dddZejZd*d;d*dddZejZd*d;d*dddZejZd*d*d.ddZejZd*d*d.ddZejZd*dkdkdkd*dddZejZd*d*d.ddZejZd*d*d.ddZejZd*d*d.ddZejZdd*d*dddZejZdd@d*dddZ ej Z d*dd@d*dddZ ej Z d*d*d.ddZ ej Z d*d@d@d*dddZ ej Z d*dd*d*d*dddÄZ ej Z d*dd*d*d*dddńZejZd@dkd*dƜddȄZejZdDd@dkdDdɜdd˄ZejZd@d@dkdDd̜dd΄ZejZd*d*d@d@d@d@d*d*dϜddфZejZd*d*d@d@d@d@d@d*d*dҜ ddԄZejZd*d*d@d@d@dkd@d@d@d*d*d՜ ddׄZejZd*d*d@d@d@d@d5d*d؜ddڄZejZd*d*d@d@d@dkd@d@d@d@d@d@d@d@d@d*d*dۜdd݄ZejZd*d*d@d@d*d*dޜddZejZdd+ddZejZdd&dddZejZdd@d*dddZejZdd@d*dddZejZdd@d*d*dddZejZdd@d*d*dddZejZdd&dddZejZd*d+ddZejZd*d+ddZ ej Z d*d+ddZ!ej!Z!dS)) version_infoc CsTddl}tjdd}dj|dfjd}y |j|Stk rN|jdSXdS)Nr._audit) importlib__name__ rpartitionjoinlstrip import_module ImportError)rZpkgZmnamer/usr/lib64/python3.6/audit.pyswig_import_helper s rcCs~ddlm}ddl}d}y|jd|tg\}}}Wntk rPddl}|SXz|jd|||}Wd|dk rx|jX|S)Nr)dirnamer) Zos.pathrimp find_module__file__r r load_moduleclose)rrfppathname descriptionrZ_modrrrrs  NcCsx|dkr|jj|S|dkr8t|jdkr8||j|<dS|jj|d}|rT|||S|shtj|||n t d|dS)NthisownthisZ SwigPyObjectzYou cannot add attributes to %s) rowntyper__dict__Z__swig_setmethods__getobject __setattr__AttributeError)self class_typenamevalueZstaticmethodrrr_swig_setattr_nondynamic3s   r*cCst||||dS)Nr)r*)r%r&r'r(rrr _swig_setattrCsr+cCsB|dkr|jjS|jj|d}|r,||Std|j|fdS)Nrz!'%s' object has no attribute '%s')rrZ__swig_getmethods__r!r$r)r%r&r'r)rrr _swig_getattrGs  r,c CsDyd|jj}Wntjk r,d}YnXd|jj|jj|fS)Nz proxy of z <%s.%s; %s >)r__repr__ __builtin__ Exception __class__ __module__r)r%Zstrthisrrr _swig_reprPs  r3csfdd}|S)NcsD|dkr|jj|St||s&|dkr4|||n td|dS)NrrzYou cannot add attributes to %s)rrhasattrr$)r%r'r()setrrset_attrYs  z1_swig_setattr_nondynamic_method..set_attrr)r5r6r)r5r_swig_setattr_nondynamic_methodXs r7c@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZeej ej!Z"eej#ej$Z%eej&ej'Z(eej)ej*Z+ddZ,ej-Z.ddZ/d S) audit_statuscCs |jjS)N)rr)xrrr`szaudit_status.cCs |jj|S)N)rr)r9vrrrr:`szThe membership flag)docc Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_statusrappendr/r0)r%rrrr__init__os zaudit_status.__init__cCsdS)Nr)r%rrrr:vsN)0rr2 __qualname___swig_propertyrr3r.rZaudit_status_mask_getZaudit_status_mask_setmaskZaudit_status_enabled_getZaudit_status_enabled_setenabledZaudit_status_failure_getZaudit_status_failure_setfailureZaudit_status_pid_getZaudit_status_pid_setpidZaudit_status_rate_limit_getZaudit_status_rate_limit_setZ rate_limitZaudit_status_backlog_limit_getZaudit_status_backlog_limit_setZ backlog_limitZaudit_status_lost_getZaudit_status_lost_setZlostZaudit_status_backlog_getZaudit_status_backlog_setZbacklogZaudit_status_version_getZaudit_status_version_setversionZaudit_status_feature_bitmap_getZaudit_status_feature_bitmap_setZfeature_bitmapZ"audit_status_backlog_wait_time_getZ"audit_status_backlog_wait_time_setZbacklog_wait_timeZ)audit_status_backlog_wait_time_actual_getZ)audit_status_backlog_wait_time_actual_setZbacklog_wait_time_actualr>Zdelete_audit_status__swig_destroy____del__rrrrr8_s"r8c@steZdZeddddddZeZeejej Z eej ej Z eejejZeejejZddZejZddZd S) audit_featurescCs |jjS)N)rr)r9rrrr:{szaudit_features.cCs |jj|S)N)rr)r9r;rrrr:{szThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_featuresrr=r/r0)r%rrrrr>s zaudit_features.__init__cCsdS)Nr)r%rrrr:sN)rr2r?r@rr3r.rZaudit_features_vers_getZaudit_features_vers_setZversZaudit_features_mask_getZaudit_features_mask_setrAZaudit_features_features_getZaudit_features_features_setfeaturesZaudit_features_lock_getZaudit_features_lock_setlockr>Zdelete_audit_featuresrFrGrrrrrHzsrHc@sXeZdZeddddddZeZeejej Z eej ej Z ddZejZddZd S) audit_tty_statuscCs |jjS)N)rr)r9rrrr:szaudit_tty_status.cCs |jj|S)N)rr)r9r;rrrr:szThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_tty_statusrr=r/r0)r%rrrrr>s zaudit_tty_status.__init__cCsdS)Nr)r%rrrr:sN)rr2r?r@rr3r.rZaudit_tty_status_enabled_getZaudit_tty_status_enabled_setrBZaudit_tty_status_log_passwd_getZaudit_tty_status_log_passwd_setZ log_passwdr>Zdelete_audit_tty_statusrFrGrrrrrKsrKc@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZddZ ej!Z"ddZ#d S) audit_rule_datacCs |jjS)N)rr)r9rrrr:szaudit_rule_data.cCs |jj|S)N)rr)r9r;rrrr:szThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_rule_datarr=r/r0)r%rrrrr>s zaudit_rule_data.__init__cCsdS)Nr)r%rrrr:sN)$rr2r?r@rr3r.rZaudit_rule_data_flags_getZaudit_rule_data_flags_setflagsZaudit_rule_data_action_getZaudit_rule_data_action_setactionZaudit_rule_data_field_count_getZaudit_rule_data_field_count_setZ field_countZaudit_rule_data_mask_getZaudit_rule_data_mask_setrAZaudit_rule_data_fields_getZaudit_rule_data_fields_setZfieldsZaudit_rule_data_values_getZaudit_rule_data_values_setvaluesZaudit_rule_data_fieldflags_getZaudit_rule_data_fieldflags_setZ fieldflagsZaudit_rule_data_buflen_getZaudit_rule_data_buflen_setZbuflenr>Zdelete_audit_rule_datarFrGrrrrrLsrLc@sfeZdZeddddddZeZeejej Z eej ej Z eejejZddZejZddZd S) audit_sig_infocCs |jjS)N)rr)r9rrrr:Sszaudit_sig_info.cCs |jj|S)N)rr)r9r;rrrr:SszThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_sig_inforr=r/r0)r%rrrrr>Ys zaudit_sig_info.__init__cCsdS)Nr)r%rrrr:`sN)rr2r?r@rr3r.rZaudit_sig_info_uid_getZaudit_sig_info_uid_setuidZaudit_sig_info_pid_getZaudit_sig_info_pid_setrDZaudit_sig_info_ctx_getZaudit_sig_info_ctx_setZctxr>Zdelete_audit_sig_inforFrGrrrrrPRsrPc@sXeZdZeddddddZeZeejej Z eej ej Z ddZejZddZd S) audit_messagecCs |jjS)N)rr)r9rrrr:fszaudit_message.cCs |jj|S)N)rr)r9r;rrrr:fszThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_messagerr=r/r0)r%rrrrr>ks zaudit_message.__init__cCsdS)Nr)r%rrrr:rsN)rr2r?r@rr3r.rZaudit_message_nlh_getZaudit_message_nlh_setnlhZaudit_message_data_getZaudit_message_data_setdatar>Zdelete_audit_messagerFrGrrrrrResrRc@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZeej ej!Z"eej#ej$Z%eej&ej'Z(eej)ej*Z+ddZ,ej-Z.ddZ/d S) audit_replycCs |jjS)N)rr)r9rrrr:wszaudit_reply.cCs |jj|S)N)rr)r9r;rrrr:wszThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_replyrr=r/r0)r%rrrrr>s zaudit_reply.__init__cCsdS)Nr)r%rrrr:sN)0rr2r?r@rr3r.rZaudit_reply_type_getZaudit_reply_type_setrZaudit_reply_len_getZaudit_reply_len_setlenZaudit_reply_nlh_getZaudit_reply_nlh_setrSZaudit_reply_msg_getZaudit_reply_msg_setmsgZaudit_reply_status_getZaudit_reply_status_setZstatusZaudit_reply_ruledata_getZaudit_reply_ruledata_setZruledataZaudit_reply_login_getZaudit_reply_login_setZloginZaudit_reply_message_getZaudit_reply_message_setmessageZaudit_reply_error_getZaudit_reply_error_seterrorZaudit_reply_signal_info_getZaudit_reply_signal_info_setZ signal_infoZaudit_reply_conf_getZaudit_reply_conf_setZconfZaudit_reply_features_getZaudit_reply_features_setrIr>Zdelete_audit_replyrFrGrrrrrUvs"rUc@steZdZeddddddZeZeejej Z eej ej Z eejejZeejejZddZejZddZd S) audit_dispatcher_headercCs |jjS)N)rr)r9rrrr:sz audit_dispatcher_header.cCs |jj|S)N)rr)r9r;rrrr:szThe membership flag)r<c Cs:tj}y|jj|Wntjk r4||_YnXdS)N)rZnew_audit_dispatcher_headerrr=r/r0)r%rrrrr>s z audit_dispatcher_header.__init__cCsdS)Nr)r%rrrr:sN)rr2r?r@rr3r.rZaudit_dispatcher_header_ver_getZaudit_dispatcher_header_ver_setZverZ audit_dispatcher_header_hlen_getZ audit_dispatcher_header_hlen_setZhlenZ audit_dispatcher_header_type_getZ audit_dispatcher_header_type_setrZ audit_dispatcher_header_size_getZ audit_dispatcher_header_size_setsizer>Zdelete_audit_dispatcher_headerrFrGrrrrrZsrZZ message_tZdebug_message_tvoid)modedebugreturncCs tj||S)N)rset_aumessage_mode)r]r^rrrr`sr`int)r_cCstjS)N)r audit_openrrrrrbsrb)fdr_cCs tj|S)N)r audit_close)rcrrrrdsrdZreply_t)rcrepblockpeekr_cCstj||||S)N)raudit_get_reply)rcrerfrgrrrrhsrhZuid_tcCstjS)N)raudit_getloginuidrrrrrisri)rQr_cCs tj|S)N)raudit_setloginuid)rQrrrrjsrjZuint32_tcCstjS)N)raudit_get_sessionrrrrrksrkcCstjS)N)raudit_detect_machinerrrrrlsrlz char const *)archr_cCs tj|S)N)raudit_determine_machine)rmrrrrnsrnzchar *)bufrVopreresr_cCstj|||||S)N)raudit_format_signal_info)rorVrprerqrrrrrsrr)fieldr_cCs tj|S)N)raudit_name_to_field)rsrrrrtsrtcCs tj|S)N)raudit_field_to_name)rsrrrrusru)scmachiner_cCs tj||S)N)raudit_name_to_syscall)rvrwrrrrxsrxcCs tj||S)N)raudit_syscall_to_name)rvrwrrrrysry)uringopr_cCs tj|S)N)raudit_uringop_to_name)rzrrrr{sr{cCs tj|S)N)raudit_name_to_uringop)rzrrrr|sr|)flagr_cCs tj|S)N)raudit_name_to_flag)r}rrrr~sr~cCs tj|S)N)raudit_flag_to_name)r}rrrrsr)rNr_cCs tj|S)N)raudit_name_to_action)rNrrrrsrcCs tj|S)N)raudit_action_to_name)rNrrrr sr)msg_typer_cCs tj|S)N)raudit_name_to_msg_type)rrrrr srcCs tj|S)N)raudit_msg_type_to_name)rrrrrsr)rwr_cCs tj|S)N)raudit_name_to_machine)rwrrrrsrcCs tj|S)N)raudit_machine_to_name)rwrrrrsrz unsigned intcCs tj|S)N)raudit_machine_to_elf)rwrrrrsr)elfr_cCs tj|S)N)raudit_elf_to_machine)rrrrr!sr)rpr_cCs tj|S)N)raudit_operator_to_symbol)rprrrr%sr)rYr_cCs tj|S)N)raudit_name_to_errno)rYrrrr)srcCs tj|S)N)raudit_errno_to_name)rYrrrr-sr)r'r_cCs tj|S)N)raudit_name_to_ftype)r'rrrr1sr)ftyper_cCs tj|S)N)raudit_ftype_to_name)rrrrr5srcCs tj|S)N)raudit_name_to_fstype)r'rrrr9sr)fstyper_cCs tj|S)N)raudit_fstype_to_name)rrrrr=sr) errnumberoptr_cCs tj||S)N)raudit_number_to_errmsg)rrrrrrAsrcCs tj|S)N)raudit_request_status)rcrrrrEsrcCs tj|S)N)raudit_is_enabled)rcrrrrIsrz auditfail_t *)failmoder_cCs tj|S)N)rget_auditfail_action)rrrrrMsrcCs tj|S)N)raudit_request_features)rcrrrrQsrcCstjS)N)raudit_get_featuresrrrrrUsrZ rep_wait_t)rcrDwmoder_cCstj|||S)N)r audit_set_pid)rcrDrrrrr[sr)rcrBr_cCs tj||S)N)raudit_set_enabled)rcrBrrrr_sr)rcrCr_cCs tj||S)N)raudit_set_failure)rcrCrrrrcsr)rclimitr_cCs tj||S)N)raudit_set_rate_limit)rcrrrrrgsrcCs tj||S)N)raudit_set_backlog_limit)rcrrrrrksr)rcbwtr_cCs tj||S)N)raudit_set_backlog_wait_time)rcrrrrrosrcCs tj|S)N)raudit_reset_lost)rcrrrrssrcCs tj|S)N)r$audit_reset_backlog_wait_time_actual)rcrrrrwsr)rcfeaturer(rJr_cCstj||||S)N)raudit_set_feature)rcrr(rJrrrr{srcCs tj|S)N)raudit_set_loginuid_immutable)rcrrrrsrcCs tj|S)N)raudit_request_rules_list_data)rcrrrrsrcCs tj|S)N)raudit_request_signal_info)rcrrrrsr)rulepermsr_cCs tj||S)N)raudit_update_watch_perms)rrrrrrsrzstruct audit_rule_data **)ruleppathr_cCs tj||S)N)raudit_add_watch)rrrrrrsr)rrrr_cCstj|||S)N)raudit_add_watch_dir)rrrrrrrsrcCs tj|S)N)raudit_trim_subtrees)rcrrrrsr)rc mount_pointsubtreer_cCstj|||S)N)raudit_make_equivalent)rcrrrrrrsr)rcrrMrNr_cCstj||||S)N)raudit_add_rule_data)rcrrMrNrrrrsrcCstj||||S)N)raudit_delete_rule_data)rcrrMrNrrrrsr)strr[r_cCs tj||S)N)raudit_value_needs_encoding)rr[rrrrsr)finalror[r_cCstj|||S)N)raudit_encode_value)rror[rrrrsr)r'r(vlenr_cCstj|||S)N)raudit_encode_nv_string)r'r(rrrrrsr)audit_fdrrXhostnameaddrttyresultr_cCstj|||||||S)N)raudit_log_user_message)rrrXrrrrrrrrsr) rrrXcommrrrrr_c Cstj||||||||S)N)raudit_log_user_comm_message)rrrXrrrrrrrrrsr) rrpgnamerpr'idhostrrrr_c Cstj|||||||||| S)N)raudit_log_acct_message) rrrrpr'rrrrrrrrrsr)rrrXrrrauidr_cCstj|||||||S)N)raudit_log_user_avc_message)rrrXrrrrrrrrsr)rrrrpr'r new_seusernew_role new_range old_seuserold_role old_rangerrrrr_cCs(tj|||||||||| | | | | ||S)N)raudit_log_semanage_message)rrrrpr'rrrrrrrrrrrrrrrsr)rrcommandrrr_cCstj|||||S)N)raudit_log_user_command)rrrrrrrrrsrzstruct audit_rule_data *cCstjS)N)raudit_rule_create_datarrrrrsr)rr_cCs tj|S)N)raudit_rule_init_data)rrrrrsr)rscallr_cCs tj||S)N)raudit_rule_syscallbyname_data)rrrrrrsrcCs tj||S)N)raudit_rule_io_uringbyname_data)rrrrrrsr)rpairrMr_cCstj|||S)N)raudit_rule_fieldpair_data)rrrMrrrrsrcCstj|||S)N)raudit_rule_interfield_comp_data)rrrMrrrrsrcCs tj|S)N)raudit_rule_free_data)rrrrrsrcCstjS)N)raudit_can_controlrrrrrsrcCstjS)N)raudit_can_writerrrrrsrcCstjS)N)raudit_can_readrrrrrsr)rrr)rrr)r("sysrZ_swig_python_version_inforrpropertyr@ NameErrorbuiltinsr/r r*r+r,r3r7Z AUDIT_GETZ AUDIT_SETZ AUDIT_LISTZ AUDIT_ADDZ AUDIT_DELZ AUDIT_USERZ AUDIT_LOGINZAUDIT_WATCH_INSZAUDIT_WATCH_REMZAUDIT_WATCH_LISTZAUDIT_SIGNAL_INFOZAUDIT_ADD_RULEZAUDIT_DEL_RULEZAUDIT_LIST_RULESZ AUDIT_TRIMZAUDIT_MAKE_EQUIVZ AUDIT_TTY_GETZ AUDIT_TTY_SETZAUDIT_SET_FEATUREZAUDIT_GET_FEATUREZAUDIT_FIRST_USER_MSGZAUDIT_USER_AVCZAUDIT_USER_TTYZAUDIT_LAST_USER_MSGZAUDIT_FIRST_USER_MSG2ZAUDIT_LAST_USER_MSG2ZAUDIT_DAEMON_STARTZAUDIT_DAEMON_ENDZAUDIT_DAEMON_ABORTZAUDIT_DAEMON_CONFIGZ AUDIT_SYSCALLZ AUDIT_PATHZ AUDIT_IPCZAUDIT_SOCKETCALLZAUDIT_CONFIG_CHANGEZAUDIT_SOCKADDRZ AUDIT_CWDZ AUDIT_EXECVEZAUDIT_IPC_SET_PERMZ AUDIT_MQ_OPENZAUDIT_MQ_SENDRECVZAUDIT_MQ_NOTIFYZAUDIT_MQ_GETSETATTRZAUDIT_KERNEL_OTHERZ AUDIT_FD_PAIRZ AUDIT_OBJ_PIDZ AUDIT_TTYZ AUDIT_EOEZAUDIT_BPRM_FCAPSZ AUDIT_CAPSETZ AUDIT_MMAPZAUDIT_NETFILTER_PKTZAUDIT_NETFILTER_CFGZ AUDIT_SECCOMPZAUDIT_PROCTITLEZAUDIT_FEATURE_CHANGEZ AUDIT_REPLACEZAUDIT_KERN_MODULEZAUDIT_FANOTIFYZAUDIT_TIME_INJOFFSETZAUDIT_TIME_ADJNTPVALZ AUDIT_BPFZAUDIT_EVENT_LISTENERZ AUDIT_OPENAT2Z AUDIT_AVCZAUDIT_SELINUX_ERRZAUDIT_AVC_PATHZAUDIT_MAC_POLICY_LOADZAUDIT_MAC_STATUSZAUDIT_MAC_CONFIG_CHANGEZAUDIT_MAC_UNLBL_ALLOWZAUDIT_MAC_CIPSOV4_ADDZAUDIT_MAC_CIPSOV4_DELZAUDIT_MAC_MAP_ADDZAUDIT_MAC_MAP_DELZAUDIT_MAC_IPSEC_ADDSAZAUDIT_MAC_IPSEC_DELSAZAUDIT_MAC_IPSEC_ADDSPDZAUDIT_MAC_IPSEC_DELSPDZAUDIT_MAC_IPSEC_EVENTZAUDIT_MAC_UNLBL_STCADDZAUDIT_MAC_UNLBL_STCDELZAUDIT_MAC_CALIPSO_ADDZAUDIT_MAC_CALIPSO_DELZAUDIT_FIRST_KERN_ANOM_MSGZAUDIT_LAST_KERN_ANOM_MSGZAUDIT_ANOM_PROMISCUOUSZAUDIT_ANOM_ABENDZAUDIT_ANOM_LINKZAUDIT_ANOM_CREATZAUDIT_INTEGRITY_DATAZAUDIT_INTEGRITY_METADATAZAUDIT_INTEGRITY_STATUSZAUDIT_INTEGRITY_HASHZAUDIT_INTEGRITY_PCRZAUDIT_INTEGRITY_RULEZAUDIT_INTEGRITY_EVM_XATTRZAUDIT_INTEGRITY_POLICY_RULEZ AUDIT_KERNELZAUDIT_FILTER_USERZAUDIT_FILTER_TASKZAUDIT_FILTER_ENTRYZAUDIT_FILTER_WATCHZAUDIT_FILTER_EXITZAUDIT_FILTER_EXCLUDEZAUDIT_FILTER_TYPEZAUDIT_FILTER_FSZAUDIT_NR_FILTERSZAUDIT_FILTER_PREPENDZ AUDIT_NEVERZAUDIT_POSSIBLEZ AUDIT_ALWAYSZAUDIT_MAX_FIELDSZAUDIT_MAX_KEY_LENZAUDIT_BITMASK_SIZEZAUDIT_SYSCALL_CLASSESZAUDIT_CLASS_DIR_WRITEZAUDIT_CLASS_DIR_WRITE_32ZAUDIT_CLASS_CHATTRZAUDIT_CLASS_CHATTR_32ZAUDIT_CLASS_READZAUDIT_CLASS_READ_32ZAUDIT_CLASS_WRITEZAUDIT_CLASS_WRITE_32ZAUDIT_CLASS_SIGNALZAUDIT_CLASS_SIGNAL_32ZAUDIT_UNUSED_BITSZAUDIT_COMPARE_UID_TO_OBJ_UIDZAUDIT_COMPARE_GID_TO_OBJ_GIDZAUDIT_COMPARE_EUID_TO_OBJ_UIDZAUDIT_COMPARE_EGID_TO_OBJ_GIDZAUDIT_COMPARE_AUID_TO_OBJ_UIDZAUDIT_COMPARE_SUID_TO_OBJ_UIDZAUDIT_COMPARE_SGID_TO_OBJ_GIDZAUDIT_COMPARE_FSUID_TO_OBJ_UIDZAUDIT_COMPARE_FSGID_TO_OBJ_GIDZAUDIT_COMPARE_UID_TO_AUIDZAUDIT_COMPARE_UID_TO_EUIDZAUDIT_COMPARE_UID_TO_FSUIDZAUDIT_COMPARE_UID_TO_SUIDZAUDIT_COMPARE_AUID_TO_FSUIDZAUDIT_COMPARE_AUID_TO_SUIDZAUDIT_COMPARE_AUID_TO_EUIDZAUDIT_COMPARE_EUID_TO_SUIDZAUDIT_COMPARE_EUID_TO_FSUIDZAUDIT_COMPARE_SUID_TO_FSUIDZAUDIT_COMPARE_GID_TO_EGIDZAUDIT_COMPARE_GID_TO_FSGIDZAUDIT_COMPARE_GID_TO_SGIDZAUDIT_COMPARE_EGID_TO_FSGIDZAUDIT_COMPARE_EGID_TO_SGIDZAUDIT_COMPARE_SGID_TO_FSGIDZAUDIT_MAX_FIELD_COMPAREZ AUDIT_PIDZ AUDIT_UIDZ AUDIT_EUIDZ AUDIT_SUIDZ AUDIT_FSUIDZ AUDIT_GIDZ AUDIT_EGIDZ AUDIT_SGIDZ AUDIT_FSGIDZAUDIT_LOGINUIDZ AUDIT_PERSZ AUDIT_ARCHZ AUDIT_MSGTYPEZAUDIT_SUBJ_USERZAUDIT_SUBJ_ROLEZAUDIT_SUBJ_TYPEZAUDIT_SUBJ_SENZAUDIT_SUBJ_CLRZ AUDIT_PPIDZAUDIT_OBJ_USERZAUDIT_OBJ_ROLEZAUDIT_OBJ_TYPEZAUDIT_OBJ_LEV_LOWZAUDIT_OBJ_LEV_HIGHZAUDIT_LOGINUID_SETZAUDIT_SESSIONIDZ AUDIT_FSTYPEZAUDIT_DEVMAJORZAUDIT_DEVMINORZ AUDIT_INODEZ AUDIT_EXITZ AUDIT_SUCCESSZ AUDIT_WATCHZ AUDIT_PERMZ AUDIT_DIRZAUDIT_FILETYPEZ AUDIT_OBJ_UIDZ AUDIT_OBJ_GIDZAUDIT_FIELD_COMPAREZ AUDIT_EXEZAUDIT_SADDR_FAMZ AUDIT_ARG0Z AUDIT_ARG1Z AUDIT_ARG2Z AUDIT_ARG3ZAUDIT_FILTERKEYZ AUDIT_NEGATEZAUDIT_BIT_MASKZAUDIT_LESS_THANZAUDIT_GREATER_THANZAUDIT_NOT_EQUALZ AUDIT_EQUALZAUDIT_BIT_TESTZAUDIT_LESS_THAN_OR_EQUALZAUDIT_GREATER_THAN_OR_EQUALZAUDIT_OPERATORSZ Audit_equalZAudit_not_equalZ Audit_bitmaskZ Audit_bittestZAudit_ltZAudit_gtZAudit_leZAudit_geZ Audit_badZAUDIT_STATUS_ENABLEDZAUDIT_STATUS_FAILUREZAUDIT_STATUS_PIDZAUDIT_STATUS_RATE_LIMITZAUDIT_STATUS_BACKLOG_LIMITZAUDIT_STATUS_BACKLOG_WAIT_TIMEZAUDIT_STATUS_LOSTZ%AUDIT_STATUS_BACKLOG_WAIT_TIME_ACTUALZ"AUDIT_FEATURE_BITMAP_BACKLOG_LIMITZ&AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIMEZ$AUDIT_FEATURE_BITMAP_EXECUTABLE_PATHZ#AUDIT_FEATURE_BITMAP_EXCLUDE_EXTENDZ%AUDIT_FEATURE_BITMAP_SESSIONID_FILTERZAUDIT_FEATURE_BITMAP_LOST_RESETZAUDIT_FEATURE_BITMAP_FILTER_FSZAUDIT_FEATURE_BITMAP_ALLZAUDIT_VERSION_LATESTZAUDIT_VERSION_BACKLOG_LIMITZAUDIT_VERSION_BACKLOG_WAIT_TIMEZAUDIT_FAIL_SILENTZAUDIT_FAIL_PRINTKZAUDIT_FAIL_PANICZ__AUDIT_ARCH_CONVENTION_MASKZ"__AUDIT_ARCH_CONVENTION_MIPS64_N32Z__AUDIT_ARCH_64BITZ__AUDIT_ARCH_LEZAUDIT_PERM_EXECZAUDIT_PERM_WRITEZAUDIT_PERM_READZAUDIT_PERM_ATTRZAUDIT_MESSAGE_TEXT_MAXZAUDIT_NLGRP_NONEZAUDIT_NLGRP_READLOGZ__AUDIT_NLGRP_MAXr"r8Zaudit_status_swigregisterrHZaudit_features_swigregisterZAUDIT_FEATURE_VERSIONZ!AUDIT_FEATURE_ONLY_UNSET_LOGINUIDZ AUDIT_FEATURE_LOGINUID_IMMUTABLEZAUDIT_LAST_FEATURErKZaudit_tty_status_swigregisterrLZaudit_rule_data_swigregisterZAUDIT_USER_AUTHZAUDIT_USER_ACCTZAUDIT_USER_MGMTZAUDIT_CRED_ACQZAUDIT_CRED_DISPZAUDIT_USER_STARTZAUDIT_USER_ENDZAUDIT_USER_CHAUTHTOKZAUDIT_USER_ERRZAUDIT_CRED_REFRZAUDIT_USYS_CONFIGZAUDIT_USER_LOGINZAUDIT_USER_LOGOUTZAUDIT_ADD_USERZAUDIT_DEL_USERZAUDIT_ADD_GROUPZAUDIT_DEL_GROUPZAUDIT_DAC_CHECKZAUDIT_CHGRP_IDZ AUDIT_TESTZAUDIT_TRUSTED_APPZAUDIT_USER_SELINUX_ERRZAUDIT_USER_CMDZAUDIT_CHUSER_IDZAUDIT_GRP_AUTHZAUDIT_SYSTEM_BOOTZAUDIT_SYSTEM_SHUTDOWNZAUDIT_SYSTEM_RUNLEVELZAUDIT_SERVICE_STARTZAUDIT_SERVICE_STOPZAUDIT_GRP_MGMTZAUDIT_GRP_CHAUTHTOKZAUDIT_MAC_CHECKZAUDIT_ACCT_LOCKZAUDIT_ACCT_UNLOCKZAUDIT_USER_DEVICEZAUDIT_SOFTWARE_UPDATEZAUDIT_FIRST_DAEMONZAUDIT_LAST_DAEMONZAUDIT_DAEMON_RECONFIGZAUDIT_DAEMON_ROTATEZAUDIT_DAEMON_RESUMEZAUDIT_DAEMON_ACCEPTZAUDIT_DAEMON_CLOSEZAUDIT_DAEMON_ERRZAUDIT_FIRST_EVENTZAUDIT_LAST_EVENTZAUDIT_FIRST_SELINUXZAUDIT_LAST_SELINUXZAUDIT_FIRST_APPARMORZAUDIT_LAST_APPARMORZAUDIT_AAZAUDIT_APPARMOR_AUDITZAUDIT_APPARMOR_ALLOWEDZAUDIT_APPARMOR_DENIEDZAUDIT_APPARMOR_HINTZAUDIT_APPARMOR_STATUSZAUDIT_APPARMOR_ERRORZAUDIT_APPARMOR_KILLZAUDIT_FIRST_KERN_CRYPTO_MSGZAUDIT_LAST_KERN_CRYPTO_MSGZAUDIT_INTEGRITY_FIRST_MSGZAUDIT_INTEGRITY_LAST_MSGZAUDIT_FIRST_ANOM_MSGZAUDIT_LAST_ANOM_MSGZAUDIT_ANOM_LOGIN_FAILURESZAUDIT_ANOM_LOGIN_TIMEZAUDIT_ANOM_LOGIN_SESSIONSZAUDIT_ANOM_LOGIN_ACCTZAUDIT_ANOM_LOGIN_LOCATIONZAUDIT_ANOM_MAX_DACZAUDIT_ANOM_MAX_MACZAUDIT_ANOM_AMTU_FAILZAUDIT_ANOM_RBAC_FAILZAUDIT_ANOM_RBAC_INTEGRITY_FAILZAUDIT_ANOM_CRYPTO_FAILZAUDIT_ANOM_ACCESS_FSZAUDIT_ANOM_EXECZAUDIT_ANOM_MK_EXECZAUDIT_ANOM_ADD_ACCTZAUDIT_ANOM_DEL_ACCTZAUDIT_ANOM_MOD_ACCTZAUDIT_ANOM_ROOT_TRANSZAUDIT_ANOM_LOGIN_SERVICEZAUDIT_ANOM_LOGIN_ROOTZAUDIT_ANOM_ORIGIN_FAILURESZAUDIT_ANOM_SESSIONZAUDIT_FIRST_ANOM_RESPZAUDIT_LAST_ANOM_RESPZAUDIT_RESP_ANOMALYZAUDIT_RESP_ALERTZAUDIT_RESP_KILL_PROCZAUDIT_RESP_TERM_ACCESSZAUDIT_RESP_ACCT_REMOTEZAUDIT_RESP_ACCT_LOCK_TIMEDZAUDIT_RESP_ACCT_UNLOCK_TIMEDZAUDIT_RESP_ACCT_LOCKZAUDIT_RESP_TERM_LOCKZAUDIT_RESP_SEBOOLZAUDIT_RESP_EXECZAUDIT_RESP_SINGLEZAUDIT_RESP_HALTZAUDIT_RESP_ORIGIN_BLOCKZAUDIT_RESP_ORIGIN_BLOCK_TIMEDZAUDIT_RESP_ORIGIN_UNBLOCK_TIMEDZAUDIT_FIRST_USER_LSPP_MSGZAUDIT_LAST_USER_LSPP_MSGZAUDIT_USER_ROLE_CHANGEZAUDIT_ROLE_ASSIGNZAUDIT_ROLE_REMOVEZAUDIT_LABEL_OVERRIDEZAUDIT_LABEL_LEVEL_CHANGEZAUDIT_USER_LABELED_EXPORTZAUDIT_USER_UNLABELED_EXPORTZAUDIT_DEV_ALLOCZAUDIT_DEV_DEALLOCZAUDIT_FS_RELABELZAUDIT_USER_MAC_POLICY_LOADZAUDIT_ROLE_MODIFYZAUDIT_USER_MAC_CONFIG_CHANGEZAUDIT_USER_MAC_STATUSZAUDIT_FIRST_CRYPTO_MSGZAUDIT_CRYPTO_TEST_USERZAUDIT_CRYPTO_PARAM_CHANGE_USERZAUDIT_CRYPTO_LOGINZAUDIT_CRYPTO_LOGOUTZAUDIT_CRYPTO_KEY_USERZAUDIT_CRYPTO_FAILURE_USERZAUDIT_CRYPTO_REPLAY_USERZAUDIT_CRYPTO_SESSIONZAUDIT_CRYPTO_IKE_SAZAUDIT_CRYPTO_IPSEC_SAZAUDIT_LAST_CRYPTO_MSGZAUDIT_FIRST_VIRT_MSGZAUDIT_VIRT_CONTROLZAUDIT_VIRT_RESOURCEZAUDIT_VIRT_MACHINE_IDZAUDIT_VIRT_INTEGRITY_CHECKZAUDIT_VIRT_CREATEZAUDIT_VIRT_DESTROYZAUDIT_VIRT_MIGRATE_INZAUDIT_VIRT_MIGRATE_OUTZAUDIT_LAST_VIRT_MSGZ AUDIT_URINGOPZ AUDIT_DM_CTRLZAUDIT_DM_EVENTZAUDIT_KEY_SEPARATORZAUDIT_FILTER_URING_EXITZAUDIT_FILTER_MASKZAUDIT_FILTER_UNSETZEM_ARMZ EM_AARCH64ZAUDIT_INTERP_SEPARATORrPZaudit_sig_info_swigregisterZMAX_AUDIT_MESSAGE_LENGTHrRZaudit_message_swigregisterrUZaudit_reply_swigregisterrZZ$audit_dispatcher_header_swigregisterZAUDISP_PROTOCOL_VERZAUDISP_PROTOCOL_VER2ZMACH_X86Z MACH_86_64Z MACH_IA64Z MACH_PPC64ZMACH_PPCZ MACH_S390XZ MACH_S390Z MACH_ALPHAZMACH_ARMZ MACH_AARCH64Z MACH_PPC64LEZ MACH_IO_URINGZ FAIL_IGNOREZFAIL_LOGZFAIL_TERMINATEZ MSG_STDERRZ MSG_SYSLOGZ MSG_QUIETZDBG_NOZDBG_YESr`ZGET_REPLY_BLOCKINGZGET_REPLY_NONBLOCKINGrbrdrhrirjrkrlrnrrrtrurxryr{r|r~rrrrrrrrrrrrrrrrrrrrrrZWAIT_NOZWAIT_YESrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrs                                                                                                                                                                                                                                                                                         $  0