a h@sddlmZedkredes(devr6ddlmZnddlZz ddlZ Wne ydddl Z Yn0dd Z d d Z d d Z ddZGdddeZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1ej2Z2ej3Z3ej4Z4ej5Z5ej6Z6ej7Z7ej8Z8ej9Z9ej:Z:ej;Z;ejZ>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNejOZOejPZPejQZQejRZRejSZSejTZTejUZUejVZVejWZWejXZXejYZYejZZZej[Z[ej\Z\ej]Z]ej^Z^ej_Z_ej`Z`ejaZaejbZbejcZcejdZdejeZeejfZfejgZgejhZhejiZiejjZjejkZkejlZlejmZmejnZnejoZoejpZpejqZqejrZrejsZsejtZtejuZuejvZvejwZwejxZxejyZyejzZzej{Z{ej|Z|ej}Z}ej~Z~ejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZej Z ej Z ej Z ej Z ej Z ejZejZejZGdddeZeeGdddeZeeejZejZejZejZGdddeZeeGdddeZeeejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1ej2Z2ej3Z3ej4Z4ej5Z5ej6Z6ej7Z7ej8Z8ej9Z9ej:Z:ej;Z;ej<ZZ>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNejOZOejPZPejQZQejRZRejSZSejTZTejUZUejVZVejWZWejXZXejYZYejZZZej[Z[ej\Z\ej]Z]ej^Z^ej_Z_ej`Z`ejaZaejbZbejcZcejdZdejeZeejfZfejgZgejhZhejiZiejjZjejkZkejlZlejmZmejnZnejoZoejpZpejqZqejrZrejsZsejtZtejuZuejvZvejwZwejxZxejyZyejzZzej{Z{ej|Z|ej}Z}ej~Z~ejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZGdddeZeeejZGdddeZeeGdddeZeeGd d!d!eZeeejZejZejZejZejZejZejZejÐZejĐZejŐZejƐZejǐZejȐZejɐZejʐZejːZej̐Zej͐ZejΐZejϐZejАZejѐZd"d#d$d%d&d'ZejӐZejԐZd(d)d*d+Zd(d$d,d-d.Zd(dd/d(d(d0d1d2Zd3d)d4d5Zd3d(d6d7d8Zd9d)d:d;Zd(d)dd(d?d@dAZdBd(dBddBdBdCdDdEZd>d(dFdGdHZd(d>dFdIdJZd>d(d(dKdLdMZd(d(d>dKdNdOZd(d>dPdQdRZd>d(dPdSdTZd>d(dUdVdWZd(d>dUdXdYZd>d(dZd[d\Zd(d>dZd]d^Zd>d(d_d`daZd(d>d_dbdcZd>d(dddedfZd(d>dddgdhZd(didddjdkZdid(dldmdnZd(d>dodpdqZd>d(drdsdtZd(d>drdudvZd>d(dwdxdyZd(d>dzd{d|Zd>d(dwd}d~Zd(d>dddZd(d>d$dddZd(d(d,ddZd(d(d,ddZdd(dddZd(d(d,ddZd9d)ddZejZejZd(d9dd(dddZd(d9d(dddZd(d9d(dddZd(d9d(dddZd(d9d(dddZd(d9d(dddZd(d(d,ddZd(d(d,ddZd(dididid(dddZd(d(d,ddZd(d(d,ddZd(d(d,ddZdd(d(dddZ dd>d(dddZ d(dd>d(dddZ d(d(d,ddZ d(d>d>d(dddZ d(dd(d(d(dddZd(dd(d(d(dddÄZd>did(dĜddƄZdBd>didBdǜddɄZd>d>didBdʜdd̄Zd(d(d>d>d>d>d(d(d͜ddτZd(d(d>d>d>d>d>d(d(dМ dd҄Zd(d(d>d>d>did>d>d>d(d(dӜ ddՄZd(d(d>d>d>d>d3d(d֜dd؄Zd(d(d>d>d>did>d>d>d>d>d>d>d>d>d(d(dٜddۄZd(d(d>d>d(d(dܜddބZdd)ddZdd$dddZdd>d(dddZdd>d(dddZdd>d(d(dddZdd>d(d(dddZdd$dddZd(d)ddZ d(d)ddZ!d(d)ddZ"dS)) version_info)rzPython 2.7 or later required.)_auditNcCsBzd|j}Wntjy*d}Yn0d|jj|jj|fS)Nz proxy of z <%s.%s; %s >)this__repr__ __builtin__ Exception __class__ __module____name__)selfZstrthisr+/usr/lib64/python3.9/site-packages/audit.py _swig_reprs  rcsfdd}|S)Ncsh|dkr|j|nN|dkr,|||n8t||rXttt||trX|||n td|dS)Nthisownr z(You cannot add instance attributes to %s)r ownhasattr isinstancegetattrtypepropertyAttributeError)rnamevaluesetrrset_instance_attrszE_swig_setattr_nondynamic_instance_variable..set_instance_attrr)rr rrr*_swig_setattr_nondynamic_instance_variables r!csfdd}|S)Ncs8t||r(tt||ts(|||n td|dS)Nz%You cannot add class attributes to %s)rrrrr)clsrrrrrset_class_attr,sz?_swig_setattr_nondynamic_class_variable..set_class_attrr)rr#rrr'_swig_setattr_nondynamic_class_variable+s r$csfdd}|S)zlClass decorator for adding a metaclass to a SWIG wrapped class - a slimmed down version of six.add_metaclasscs|j|j|jSN)r __bases____dict__copy)r" metaclassrrwrapper6sz$_swig_add_metaclass..wrapperr)r*r+rr)r_swig_add_metaclass4s r,c@seZdZdZeejZdS)_SwigNonDynamicMetazKMeta class to enforce nondynamic attributes (no new attributes) for a classN)rr __qualname____doc__r$r __setattr__rrrrr-;sr-c@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZeej ej!Z"eej#ej$Z%eej&ej'Z(eej)ej*Z+ddZ,ej-Z.dS) audit_statuscCs |jSr%r rxrrrAzaudit_status.cCs |j|Sr%r2r4vrrrr5Ar6The membership flagdoccCst|tdSr%)rZaudit_status_swiginitZnew_audit_statusrrrr__init__Pszaudit_status.__init__N)/rrr.rrrr rZaudit_status_mask_getZaudit_status_mask_setmaskZaudit_status_enabled_getZaudit_status_enabled_setenabledZaudit_status_failure_getZaudit_status_failure_setfailureZaudit_status_pid_getZaudit_status_pid_setpidZaudit_status_rate_limit_getZaudit_status_rate_limit_setZ rate_limitZaudit_status_backlog_limit_getZaudit_status_backlog_limit_setZ backlog_limitZaudit_status_lost_getZaudit_status_lost_setZlostZaudit_status_backlog_getZaudit_status_backlog_setZbacklogZaudit_status_version_getZaudit_status_version_setversionZaudit_status_feature_bitmap_getZaudit_status_feature_bitmap_setZfeature_bitmapZ"audit_status_backlog_wait_time_getZ"audit_status_backlog_wait_time_setZbacklog_wait_timeZ)audit_status_backlog_wait_time_actual_getZ)audit_status_backlog_wait_time_actual_setZbacklog_wait_time_actualr=Zdelete_audit_status__swig_destroy__rrrrr1@s r1c@sleZdZeddddddZeZeejej Z eej ej Z eejejZeejejZddZejZdS) audit_featurescCs |jSr%r2r3rrrr5Xr6zaudit_features.cCs |j|Sr%r2r7rrrr5Xr6r9r:cCst|tdSr%)rZaudit_features_swiginitZnew_audit_featuresr<rrrr=_szaudit_features.__init__N)rrr.rrrr rZaudit_features_vers_getZaudit_features_vers_setZversZaudit_features_mask_getZaudit_features_mask_setr>Zaudit_features_features_getZaudit_features_features_setfeaturesZaudit_features_lock_getZaudit_features_lock_setlockr=Zdelete_audit_featuresrCrrrrrDWsrDc@sPeZdZeddddddZeZeejej Z eej ej Z ddZejZdS) audit_tty_statuscCs |jSr%r2r3rrrr5kr6zaudit_tty_status.cCs |j|Sr%r2r7rrrr5kr6r9r:cCst|tdSr%)rZaudit_tty_status_swiginitZnew_audit_tty_statusr<rrrr=pszaudit_tty_status.__init__N)rrr.rrrr rZaudit_tty_status_enabled_getZaudit_tty_status_enabled_setr?Zaudit_tty_status_log_passwd_getZaudit_tty_status_log_passwd_setZ log_passwdr=Zdelete_audit_tty_statusrCrrrrrGjs rGc@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZddZ ej!Z"dS) audit_rule_datacCs |jSr%r2r3rrrr5xr6zaudit_rule_data.cCs |j|Sr%r2r7rrrr5xr6r9r:cCst|tdSr%)rZaudit_rule_data_swiginitZnew_audit_rule_datar<rrrr=szaudit_rule_data.__init__N)#rrr.rrrr rZaudit_rule_data_flags_getZaudit_rule_data_flags_setflagsZaudit_rule_data_action_getZaudit_rule_data_action_setactionZaudit_rule_data_field_count_getZaudit_rule_data_field_count_setZ field_countZaudit_rule_data_mask_getZaudit_rule_data_mask_setr>Zaudit_rule_data_fields_getZaudit_rule_data_fields_setfieldsZaudit_rule_data_values_getZaudit_rule_data_values_setvaluesZaudit_rule_data_fieldflags_getZaudit_rule_data_fieldflags_setZ fieldflagsZaudit_rule_data_buflen_getZaudit_rule_data_buflen_setbuflenr=Zdelete_audit_rule_datarCrrrrrHwsrHc@s^eZdZeddddddZeZeejej Z eej ej Z eejejZddZejZdS) audit_sig_infocCs |jSr%r2r3rrrr5 r6zaudit_sig_info.cCs |j|Sr%r2r7rrrr5 r6r9r:cCst|tdSr%)rZaudit_sig_info_swiginitZnew_audit_sig_infor<rrrr=&szaudit_sig_info.__init__N)rrr.rrrr rZaudit_sig_info_uid_getZaudit_sig_info_uid_setuidZaudit_sig_info_pid_getZaudit_sig_info_pid_setrAZaudit_sig_info_ctx_getZaudit_sig_info_ctx_setctxr=Zdelete_audit_sig_inforCrrrrrNsrNc@sPeZdZeddddddZeZeejej Z eej ej Z ddZejZdS) audit_messagecCs |jSr%r2r3rrrr5/r6zaudit_message.cCs |j|Sr%r2r7rrrr5/r6r9r:cCst|tdSr%)rZaudit_message_swiginitZnew_audit_messager<rrrr=4szaudit_message.__init__N)rrr.rrrr rZaudit_message_nlh_getZaudit_message_nlh_setnlhZaudit_message_data_getZaudit_message_data_setdatar=Zdelete_audit_messagerCrrrrrQ.s rQc@seZdZeddddddZeZeejej Z eej ej Z eejejZeejejZeejejZeejejZeejejZeejejZeej ej!Z"eej#ej$Z%eej&ej'Z(eej)ej*Z+ddZ,ej-Z.dS) audit_replycCs |jSr%r2r3rrrr5<r6zaudit_reply.cCs |j|Sr%r2r7rrrr5<r6r9r:cCst|tdSr%)rZaudit_reply_swiginitZnew_audit_replyr<rrrr=Kszaudit_reply.__init__N)/rrr.rrrr rZaudit_reply_type_getZaudit_reply_type_setrZaudit_reply_len_getZaudit_reply_len_setlenZaudit_reply_nlh_getZaudit_reply_nlh_setrRZaudit_reply_msg_getZaudit_reply_msg_setmsgZaudit_reply_status_getZaudit_reply_status_setstatusZaudit_reply_ruledata_getZaudit_reply_ruledata_setZruledataZaudit_reply_login_getZaudit_reply_login_setZloginZaudit_reply_message_getZaudit_reply_message_setmessageZaudit_reply_error_getZaudit_reply_error_seterrorZaudit_reply_signal_info_getZaudit_reply_signal_info_setZ signal_infoZaudit_reply_conf_getZaudit_reply_conf_setZconfZaudit_reply_features_getZaudit_reply_features_setrEr=Zdelete_audit_replyrCrrrrrT;s rTc@sleZdZeddddddZeZeejej Z eej ej Z eejejZeejejZddZejZdS) audit_dispatcher_headercCs |jSr%r2r3rrrr5Sr6z audit_dispatcher_header.cCs |j|Sr%r2r7rrrr5Sr6r9r:cCst|tdSr%)rZ audit_dispatcher_header_swiginitZnew_audit_dispatcher_headerr<rrrr=Zsz audit_dispatcher_header.__init__N)rrr.rrrr rZaudit_dispatcher_header_ver_getZaudit_dispatcher_header_ver_setZverZ audit_dispatcher_header_hlen_getZ audit_dispatcher_header_hlen_setZhlenZ audit_dispatcher_header_type_getZ audit_dispatcher_header_type_setrZ audit_dispatcher_header_size_getZ audit_dispatcher_header_size_setsizer=Zdelete_audit_dispatcher_headerrCrrrrrZRsrZZ message_tZdebug_message_tZvoid)modedebugreturncCs t||Sr%)rset_aumessage_mode)r\r]rrrr_xsr_int)r^cCstSr%)r audit_openrrrrra}sra)fdr^cCs t|Sr%)r audit_closerbrrrrcsrcZreply_t)rbrepblockpeekr^cCst||||Sr%)raudit_get_reply)rbrerfrgrrrrhsrhZuid_tcCstSr%)raudit_getloginuidrrrrrisri)rOr^cCs t|Sr%)raudit_setloginuid)rOrrrrjsrjZuint32_tcCstSr%)raudit_get_sessionrrrrrksrkcCstSr%)raudit_detect_machinerrrrrlsrlz char const *)archr^cCs t|Sr%)raudit_determine_machine)rmrrrrnsrnzchar *)bufrUopreresr^cCst|||||Sr%)raudit_format_signal_info)rorUrprerqrrrrrsrr)fieldr^cCs t|Sr%)raudit_name_to_fieldrsrrrrtsrtcCs t|Sr%)raudit_field_to_namerurrrrvsrv)scmachiner^cCs t||Sr%)raudit_name_to_syscallrwrxrrrrysrycCs t||Sr%)raudit_syscall_to_namerzrrrr{sr{)uringopr^cCs t|Sr%)raudit_uringop_to_namer|rrrr}sr}cCs t|Sr%)raudit_name_to_uringopr~rrrrsr)flagr^cCs t|Sr%)raudit_name_to_flagrrrrrsrcCs t|Sr%)raudit_flag_to_namerrrrrsr)rJr^cCs t|Sr%)raudit_name_to_actionrJrrrrsrcCs t|Sr%)raudit_action_to_namerrrrrsr)msg_typer^cCs t|Sr%)raudit_name_to_msg_typerrrrrsrcCs t|Sr%)raudit_msg_type_to_namerrrrrsr)rxr^cCs t|Sr%)raudit_name_to_machinerxrrrrsrcCs t|Sr%)raudit_machine_to_namerrrrrsrz unsigned intcCs t|Sr%)raudit_machine_to_elfrrrrrsr)elfr^cCs t|Sr%)raudit_elf_to_machine)rrrrrsr)rpr^cCs t|Sr%)raudit_operator_to_symbol)rprrrrsr)rYr^cCs t|Sr%)raudit_name_to_errnorYrrrrsrcCs t|Sr%)raudit_errno_to_namerrrrrsr)rr^cCs t|Sr%)raudit_name_to_ftyperrrrrsr)ftyper^cCs t|Sr%)raudit_ftype_to_name)rrrrrsrcCs t|Sr%)raudit_name_to_fstyperrrrrsr)fstyper^cCs t|Sr%)raudit_fstype_to_name)rrrrrsr) errnumberoptr^cCs t||Sr%)raudit_number_to_errmsg)rrrrrrsrcCs t|Sr%)raudit_request_statusrdrrrrsrcCs t|Sr%)raudit_is_enabledrdrrrrsrz auditfail_t *)failmoder^cCs t|Sr%)rget_auditfail_action)rrrrrsrcCs t|Sr%)raudit_request_featuresrdrrrrsrcCstSr%)raudit_get_featuresrrrrrsrZ rep_wait_t)rbrAwmoder^cCst|||Sr%)r audit_set_pid)rbrArrrrrsr)rbr?r^cCs t||Sr%)raudit_set_enabled)rbr?rrrrsr)rbr@r^cCs t||Sr%)raudit_set_failure)rbr@rrrrsr)rblimitr^cCs t||Sr%)raudit_set_rate_limitrbrrrrrsrcCs t||Sr%)raudit_set_backlog_limitrrrrrsr)rbbwtr^cCs t||Sr%)raudit_set_backlog_wait_time)rbrrrrrsrcCs t|Sr%)raudit_reset_lostrdrrrrsrcCs t|Sr%)r$audit_reset_backlog_wait_time_actualrdrrrrsr)rbfeaturerrFr^cCst||||Sr%)raudit_set_feature)rbrrrFrrrr srcCs t|Sr%)raudit_set_loginuid_immutablerdrrrr srcCs t|Sr%)raudit_request_rules_list_datardrrrrsrcCs t|Sr%)raudit_request_signal_infordrrrrsr)rulepermsr^cCs t||Sr%)raudit_update_watch_perms)rrrrrrsrzstruct audit_rule_data **)ruleppathr^cCs t||Sr%)raudit_add_watch)rrrrrrsr)rrrr^cCst|||Sr%)raudit_add_watch_dir)rrrrrrrsrcCs t|Sr%)raudit_trim_subtreesrdrrrrsr)rb mount_pointsubtreer^cCst|||Sr%)raudit_make_equivalent)rbrrrrrr!sr)rbrrIrJr^cCst||||Sr%)raudit_add_rule_datarbrrIrJrrrr$srcCst||||Sr%)raudit_delete_rule_datarrrrr'sr)strr[r^cCs t||Sr%)raudit_value_needs_encoding)rr[rrrr*sr)finalror[r^cCst|||Sr%)raudit_encode_value)rror[rrrr-sr)rrvlenr^cCst|||Sr%)raudit_encode_nv_string)rrrrrrr0sr)audit_fdrrXhostnameaddrttyresultr^c Cst|||||||Sr%)raudit_log_user_message)rrrXrrrrrrrr3sr) rrrXcommrrrrr^c Cst||||||||Sr%)raudit_log_user_comm_message)rrrXrrrrrrrrr6sr) rrpgnamerpridhostrrrr^c Cst|||||||||| Sr%)raudit_log_acct_message) rrrrprrrrrrrrrr9sr)rrrXrrrauidr^c Cst|||||||Sr%)raudit_log_user_avc_message)rrrXrrrrrrrr<sr)rrrrprr new_seusernew_role new_range old_seuserold_role old_rangerrrrr^cCs(t|||||||||| | | | | ||Sr%)raudit_log_semanage_message)rrrrprrrrrrrrrrrrrrrr?sr)rrcommandrrr^cCst|||||Sr%)raudit_log_user_command)rrrrrrrrrBsrzstruct audit_rule_data *cCstSr%)raudit_rule_create_datarrrrrEsr)rr^cCs t|Sr%)raudit_rule_init_datarrrrrHsr)rscallr^cCs t||Sr%)raudit_rule_syscallbyname_datarrrrrrKsrcCs t||Sr%)raudit_rule_io_uringbyname_datarrrrrNsr)rpairrIr^cCst|||Sr%)raudit_rule_fieldpair_datarrrIrrrrQsrcCst|||Sr%)raudit_rule_interfield_comp_datarrrrrTsrcCs t|Sr%)raudit_rule_free_datarrrrrWsrcCstSr%)raudit_can_controlrrrrrZsrcCstSr%)raudit_can_writerrrrr]srcCstSr%)raudit_can_readrrrrr`sr(#sysrZ_swig_python_version_info RuntimeError __package__rrrbuiltinsr ImportErrorrr!r$r,rr-Z AUDIT_GETZ AUDIT_SETZ AUDIT_LISTZ AUDIT_ADDZ AUDIT_DELZ AUDIT_USERZ AUDIT_LOGINZAUDIT_WATCH_INSZAUDIT_WATCH_REMZAUDIT_WATCH_LISTZAUDIT_SIGNAL_INFOZAUDIT_ADD_RULEZAUDIT_DEL_RULEZAUDIT_LIST_RULESZ AUDIT_TRIMZAUDIT_MAKE_EQUIVZ AUDIT_TTY_GETZ AUDIT_TTY_SETZAUDIT_SET_FEATUREZAUDIT_GET_FEATUREZAUDIT_FIRST_USER_MSGZAUDIT_USER_AVCZAUDIT_USER_TTYZAUDIT_LAST_USER_MSGZAUDIT_FIRST_USER_MSG2ZAUDIT_LAST_USER_MSG2ZAUDIT_DAEMON_STARTZAUDIT_DAEMON_ENDZAUDIT_DAEMON_ABORTZAUDIT_DAEMON_CONFIGZ AUDIT_SYSCALLZ AUDIT_PATHZ AUDIT_IPCZAUDIT_SOCKETCALLZAUDIT_CONFIG_CHANGEZAUDIT_SOCKADDRZ AUDIT_CWDZ AUDIT_EXECVEZAUDIT_IPC_SET_PERMZ AUDIT_MQ_OPENZAUDIT_MQ_SENDRECVZAUDIT_MQ_NOTIFYZAUDIT_MQ_GETSETATTRZAUDIT_KERNEL_OTHERZ AUDIT_FD_PAIRZ AUDIT_OBJ_PIDZ AUDIT_TTYZ AUDIT_EOEZAUDIT_BPRM_FCAPSZ AUDIT_CAPSETZ AUDIT_MMAPZAUDIT_NETFILTER_PKTZAUDIT_NETFILTER_CFGZ AUDIT_SECCOMPZAUDIT_PROCTITLEZAUDIT_FEATURE_CHANGEZ AUDIT_REPLACEZAUDIT_KERN_MODULEZAUDIT_FANOTIFYZAUDIT_TIME_INJOFFSETZAUDIT_TIME_ADJNTPVALZ AUDIT_BPFZAUDIT_EVENT_LISTENERZ AUDIT_URINGOPZ AUDIT_OPENAT2Z AUDIT_DM_CTRLZAUDIT_DM_EVENTZ AUDIT_AVCZAUDIT_SELINUX_ERRZAUDIT_AVC_PATHZAUDIT_MAC_POLICY_LOADZAUDIT_MAC_STATUSZAUDIT_MAC_CONFIG_CHANGEZAUDIT_MAC_UNLBL_ALLOWZAUDIT_MAC_CIPSOV4_ADDZAUDIT_MAC_CIPSOV4_DELZAUDIT_MAC_MAP_ADDZAUDIT_MAC_MAP_DELZAUDIT_MAC_IPSEC_ADDSAZAUDIT_MAC_IPSEC_DELSAZAUDIT_MAC_IPSEC_ADDSPDZAUDIT_MAC_IPSEC_DELSPDZAUDIT_MAC_IPSEC_EVENTZAUDIT_MAC_UNLBL_STCADDZAUDIT_MAC_UNLBL_STCDELZAUDIT_MAC_CALIPSO_ADDZAUDIT_MAC_CALIPSO_DELZAUDIT_FIRST_KERN_ANOM_MSGZAUDIT_LAST_KERN_ANOM_MSGZAUDIT_ANOM_PROMISCUOUSZAUDIT_ANOM_ABENDZAUDIT_ANOM_LINKZAUDIT_ANOM_CREATZAUDIT_INTEGRITY_DATAZAUDIT_INTEGRITY_METADATAZAUDIT_INTEGRITY_STATUSZAUDIT_INTEGRITY_HASHZAUDIT_INTEGRITY_PCRZAUDIT_INTEGRITY_RULEZAUDIT_INTEGRITY_EVM_XATTRZAUDIT_INTEGRITY_POLICY_RULEZ AUDIT_KERNELZAUDIT_FILTER_USERZAUDIT_FILTER_TASKZAUDIT_FILTER_ENTRYZAUDIT_FILTER_WATCHZAUDIT_FILTER_EXITZAUDIT_FILTER_EXCLUDEZAUDIT_FILTER_TYPEZAUDIT_FILTER_FSZAUDIT_FILTER_URING_EXITZAUDIT_NR_FILTERSZAUDIT_FILTER_PREPENDZ AUDIT_NEVERZAUDIT_POSSIBLEZ AUDIT_ALWAYSZAUDIT_MAX_FIELDSZAUDIT_MAX_KEY_LENZAUDIT_BITMASK_SIZEZAUDIT_SYSCALL_CLASSESZAUDIT_CLASS_DIR_WRITEZAUDIT_CLASS_DIR_WRITE_32ZAUDIT_CLASS_CHATTRZAUDIT_CLASS_CHATTR_32ZAUDIT_CLASS_READZAUDIT_CLASS_READ_32ZAUDIT_CLASS_WRITEZAUDIT_CLASS_WRITE_32ZAUDIT_CLASS_SIGNALZAUDIT_CLASS_SIGNAL_32ZAUDIT_UNUSED_BITSZAUDIT_COMPARE_UID_TO_OBJ_UIDZAUDIT_COMPARE_GID_TO_OBJ_GIDZAUDIT_COMPARE_EUID_TO_OBJ_UIDZAUDIT_COMPARE_EGID_TO_OBJ_GIDZAUDIT_COMPARE_AUID_TO_OBJ_UIDZAUDIT_COMPARE_SUID_TO_OBJ_UIDZAUDIT_COMPARE_SGID_TO_OBJ_GIDZAUDIT_COMPARE_FSUID_TO_OBJ_UIDZAUDIT_COMPARE_FSGID_TO_OBJ_GIDZAUDIT_COMPARE_UID_TO_AUIDZAUDIT_COMPARE_UID_TO_EUIDZAUDIT_COMPARE_UID_TO_FSUIDZAUDIT_COMPARE_UID_TO_SUIDZAUDIT_COMPARE_AUID_TO_FSUIDZAUDIT_COMPARE_AUID_TO_SUIDZAUDIT_COMPARE_AUID_TO_EUIDZAUDIT_COMPARE_EUID_TO_SUIDZAUDIT_COMPARE_EUID_TO_FSUIDZAUDIT_COMPARE_SUID_TO_FSUIDZAUDIT_COMPARE_GID_TO_EGIDZAUDIT_COMPARE_GID_TO_FSGIDZAUDIT_COMPARE_GID_TO_SGIDZAUDIT_COMPARE_EGID_TO_FSGIDZAUDIT_COMPARE_EGID_TO_SGIDZAUDIT_COMPARE_SGID_TO_FSGIDZAUDIT_MAX_FIELD_COMPAREZ AUDIT_PIDZ AUDIT_UIDZ AUDIT_EUIDZ AUDIT_SUIDZ AUDIT_FSUIDZ AUDIT_GIDZ AUDIT_EGIDZ AUDIT_SGIDZ AUDIT_FSGIDZAUDIT_LOGINUIDZ AUDIT_PERSZ AUDIT_ARCHZ AUDIT_MSGTYPEZAUDIT_SUBJ_USERZAUDIT_SUBJ_ROLEZAUDIT_SUBJ_TYPEZAUDIT_SUBJ_SENZAUDIT_SUBJ_CLRZ AUDIT_PPIDZAUDIT_OBJ_USERZAUDIT_OBJ_ROLEZAUDIT_OBJ_TYPEZAUDIT_OBJ_LEV_LOWZAUDIT_OBJ_LEV_HIGHZAUDIT_LOGINUID_SETZAUDIT_SESSIONIDZ AUDIT_FSTYPEZAUDIT_DEVMAJORZAUDIT_DEVMINORZ AUDIT_INODEZ AUDIT_EXITZ AUDIT_SUCCESSZ AUDIT_WATCHZ AUDIT_PERMZ AUDIT_DIRZAUDIT_FILETYPEZ AUDIT_OBJ_UIDZ AUDIT_OBJ_GIDZAUDIT_FIELD_COMPAREZ AUDIT_EXEZAUDIT_SADDR_FAMZ AUDIT_ARG0Z AUDIT_ARG1Z AUDIT_ARG2Z AUDIT_ARG3ZAUDIT_FILTERKEYZ AUDIT_NEGATEZAUDIT_BIT_MASKZAUDIT_LESS_THANZAUDIT_GREATER_THANZAUDIT_NOT_EQUALZ AUDIT_EQUALZAUDIT_BIT_TESTZAUDIT_LESS_THAN_OR_EQUALZAUDIT_GREATER_THAN_OR_EQUALZAUDIT_OPERATORSZ Audit_equalZAudit_not_equalZ Audit_bitmaskZ Audit_bittestZAudit_ltZAudit_gtZAudit_leZAudit_geZ Audit_badZAUDIT_STATUS_ENABLEDZAUDIT_STATUS_FAILUREZAUDIT_STATUS_PIDZAUDIT_STATUS_RATE_LIMITZAUDIT_STATUS_BACKLOG_LIMITZAUDIT_STATUS_BACKLOG_WAIT_TIMEZAUDIT_STATUS_LOSTZ%AUDIT_STATUS_BACKLOG_WAIT_TIME_ACTUALZ"AUDIT_FEATURE_BITMAP_BACKLOG_LIMITZ&AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIMEZ$AUDIT_FEATURE_BITMAP_EXECUTABLE_PATHZ#AUDIT_FEATURE_BITMAP_EXCLUDE_EXTENDZ%AUDIT_FEATURE_BITMAP_SESSIONID_FILTERZAUDIT_FEATURE_BITMAP_LOST_RESETZAUDIT_FEATURE_BITMAP_FILTER_FSZAUDIT_FEATURE_BITMAP_ALLZAUDIT_VERSION_LATESTZAUDIT_VERSION_BACKLOG_LIMITZAUDIT_VERSION_BACKLOG_WAIT_TIMEZAUDIT_FAIL_SILENTZAUDIT_FAIL_PRINTKZAUDIT_FAIL_PANICZ__AUDIT_ARCH_CONVENTION_MASKZ"__AUDIT_ARCH_CONVENTION_MIPS64_N32Z__AUDIT_ARCH_64BITZ__AUDIT_ARCH_LEZAUDIT_PERM_EXECZAUDIT_PERM_WRITEZAUDIT_PERM_READZAUDIT_PERM_ATTRZAUDIT_MESSAGE_TEXT_MAXZAUDIT_NLGRP_NONEZAUDIT_NLGRP_READLOGZ__AUDIT_NLGRP_MAXobjectr1Zaudit_status_swigregisterrDZaudit_features_swigregisterZAUDIT_FEATURE_VERSIONZ!AUDIT_FEATURE_ONLY_UNSET_LOGINUIDZ AUDIT_FEATURE_LOGINUID_IMMUTABLEZAUDIT_LAST_FEATURErGZaudit_tty_status_swigregisterrHZaudit_rule_data_swigregisterZAUDIT_USER_AUTHZAUDIT_USER_ACCTZAUDIT_USER_MGMTZAUDIT_CRED_ACQZAUDIT_CRED_DISPZAUDIT_USER_STARTZAUDIT_USER_ENDZAUDIT_USER_CHAUTHTOKZAUDIT_USER_ERRZAUDIT_CRED_REFRZAUDIT_USYS_CONFIGZAUDIT_USER_LOGINZAUDIT_USER_LOGOUTZAUDIT_ADD_USERZAUDIT_DEL_USERZAUDIT_ADD_GROUPZAUDIT_DEL_GROUPZAUDIT_DAC_CHECKZAUDIT_CHGRP_IDZ AUDIT_TESTZAUDIT_TRUSTED_APPZAUDIT_USER_SELINUX_ERRZAUDIT_USER_CMDZAUDIT_CHUSER_IDZAUDIT_GRP_AUTHZAUDIT_SYSTEM_BOOTZAUDIT_SYSTEM_SHUTDOWNZAUDIT_SYSTEM_RUNLEVELZAUDIT_SERVICE_STARTZAUDIT_SERVICE_STOPZAUDIT_GRP_MGMTZAUDIT_GRP_CHAUTHTOKZAUDIT_MAC_CHECKZAUDIT_ACCT_LOCKZAUDIT_ACCT_UNLOCKZAUDIT_USER_DEVICEZAUDIT_SOFTWARE_UPDATEZAUDIT_FIRST_DAEMONZAUDIT_LAST_DAEMONZAUDIT_DAEMON_RECONFIGZAUDIT_DAEMON_ROTATEZAUDIT_DAEMON_RESUMEZAUDIT_DAEMON_ACCEPTZAUDIT_DAEMON_CLOSEZAUDIT_DAEMON_ERRZAUDIT_FIRST_EVENTZAUDIT_LAST_EVENTZAUDIT_FIRST_SELINUXZAUDIT_LAST_SELINUXZAUDIT_FIRST_APPARMORZAUDIT_LAST_APPARMORZAUDIT_AAZAUDIT_APPARMOR_AUDITZAUDIT_APPARMOR_ALLOWEDZAUDIT_APPARMOR_DENIEDZAUDIT_APPARMOR_HINTZAUDIT_APPARMOR_STATUSZAUDIT_APPARMOR_ERRORZAUDIT_APPARMOR_KILLZAUDIT_FIRST_KERN_CRYPTO_MSGZAUDIT_LAST_KERN_CRYPTO_MSGZAUDIT_INTEGRITY_FIRST_MSGZAUDIT_INTEGRITY_LAST_MSGZAUDIT_FIRST_ANOM_MSGZAUDIT_LAST_ANOM_MSGZAUDIT_ANOM_LOGIN_FAILURESZAUDIT_ANOM_LOGIN_TIMEZAUDIT_ANOM_LOGIN_SESSIONSZAUDIT_ANOM_LOGIN_ACCTZAUDIT_ANOM_LOGIN_LOCATIONZAUDIT_ANOM_MAX_DACZAUDIT_ANOM_MAX_MACZAUDIT_ANOM_AMTU_FAILZAUDIT_ANOM_RBAC_FAILZAUDIT_ANOM_RBAC_INTEGRITY_FAILZAUDIT_ANOM_CRYPTO_FAILZAUDIT_ANOM_ACCESS_FSZAUDIT_ANOM_EXECZAUDIT_ANOM_MK_EXECZAUDIT_ANOM_ADD_ACCTZAUDIT_ANOM_DEL_ACCTZAUDIT_ANOM_MOD_ACCTZAUDIT_ANOM_ROOT_TRANSZAUDIT_ANOM_LOGIN_SERVICEZAUDIT_ANOM_LOGIN_ROOTZAUDIT_ANOM_ORIGIN_FAILURESZAUDIT_ANOM_SESSIONZAUDIT_FIRST_ANOM_RESPZAUDIT_LAST_ANOM_RESPZAUDIT_RESP_ANOMALYZAUDIT_RESP_ALERTZAUDIT_RESP_KILL_PROCZAUDIT_RESP_TERM_ACCESSZAUDIT_RESP_ACCT_REMOTEZAUDIT_RESP_ACCT_LOCK_TIMEDZAUDIT_RESP_ACCT_UNLOCK_TIMEDZAUDIT_RESP_ACCT_LOCKZAUDIT_RESP_TERM_LOCKZAUDIT_RESP_SEBOOLZAUDIT_RESP_EXECZAUDIT_RESP_SINGLEZAUDIT_RESP_HALTZAUDIT_RESP_ORIGIN_BLOCKZAUDIT_RESP_ORIGIN_BLOCK_TIMEDZAUDIT_RESP_ORIGIN_UNBLOCK_TIMEDZAUDIT_FIRST_USER_LSPP_MSGZAUDIT_LAST_USER_LSPP_MSGZAUDIT_USER_ROLE_CHANGEZAUDIT_ROLE_ASSIGNZAUDIT_ROLE_REMOVEZAUDIT_LABEL_OVERRIDEZAUDIT_LABEL_LEVEL_CHANGEZAUDIT_USER_LABELED_EXPORTZAUDIT_USER_UNLABELED_EXPORTZAUDIT_DEV_ALLOCZAUDIT_DEV_DEALLOCZAUDIT_FS_RELABELZAUDIT_USER_MAC_POLICY_LOADZAUDIT_ROLE_MODIFYZAUDIT_USER_MAC_CONFIG_CHANGEZAUDIT_USER_MAC_STATUSZAUDIT_FIRST_CRYPTO_MSGZAUDIT_CRYPTO_TEST_USERZAUDIT_CRYPTO_PARAM_CHANGE_USERZAUDIT_CRYPTO_LOGINZAUDIT_CRYPTO_LOGOUTZAUDIT_CRYPTO_KEY_USERZAUDIT_CRYPTO_FAILURE_USERZAUDIT_CRYPTO_REPLAY_USERZAUDIT_CRYPTO_SESSIONZAUDIT_CRYPTO_IKE_SAZAUDIT_CRYPTO_IPSEC_SAZAUDIT_LAST_CRYPTO_MSGZAUDIT_FIRST_VIRT_MSGZAUDIT_VIRT_CONTROLZAUDIT_VIRT_RESOURCEZAUDIT_VIRT_MACHINE_IDZAUDIT_VIRT_INTEGRITY_CHECKZAUDIT_VIRT_CREATEZAUDIT_VIRT_DESTROYZAUDIT_VIRT_MIGRATE_INZAUDIT_VIRT_MIGRATE_OUTZAUDIT_LAST_VIRT_MSGZAUDIT_KEY_SEPARATORZAUDIT_FILTER_MASKZAUDIT_FILTER_UNSETZEM_ARMZ EM_AARCH64ZAUDIT_INTERP_SEPARATORrNZaudit_sig_info_swigregisterZMAX_AUDIT_MESSAGE_LENGTHrQZaudit_message_swigregisterrTZaudit_reply_swigregisterrZZ$audit_dispatcher_header_swigregisterZAUDISP_PROTOCOL_VERZAUDISP_PROTOCOL_VER2ZMACH_X86Z MACH_86_64Z MACH_IA64Z MACH_PPC64ZMACH_PPCZ MACH_S390XZ MACH_S390Z MACH_ALPHAZMACH_ARMZ MACH_AARCH64Z MACH_PPC64LEZ MACH_IO_URINGZ FAIL_IGNOREZFAIL_LOGZFAIL_TERMINATEZ MSG_STDERRZ MSG_SYSLOGZ MSG_QUIETZDBG_NOZDBG_YESr_ZGET_REPLY_BLOCKINGZGET_REPLY_NONBLOCKINGrarcrhrirjrkrlrnrrrtrvryr{r}rrrrrrrrrrrrrrrrrrrrrrrrZWAIT_NOZWAIT_YESrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrs>                                                                                                                                                                                                                 $0