BYPASS SHELL BY ./RAZORGANZ
Server: nginx/1.20.1
System: Linux iZdzfnv9mwfppeZ 5.10.134-19.2.al8.x86_64 #1 SMP Wed Oct 29 22:47:09 CST 2025 x86_64
User: apache (48)
PHP: 8.2.30
Disabled: NONE
$ pwd: /lib64/python3.6/site-packages/__pycache__/
Upload Files
File: //lib64/python3.6/site-packages/__pycache__/audit.cpython-36.pyc
3

�x1g�@s�ddlmZesdekr&ddlmZnddlZyddlZWne	k
rVddlZYnXdd�Z
dd	�Zd
d�Zdd
�Z
Gdd�de�ZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1ej2Z2ej3Z3ej4Z4ej5Z5ej6Z6ej7Z7ej8Z8ej9Z9ej:Z:ej;Z;ej<Z<ej=Z=ej>Z>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNejOZOejPZPejQZQejRZRejSZSejTZTejUZUejVZVejWZWejXZXejYZYejZZZej[Z[ej\Z\ej]Z]ej^Z^ej_Z_ej`Z`ejaZaejbZbejcZcejdZdejeZeejfZfejgZgejhZhejiZiejjZjejkZkejlZlejmZmejnZnejoZoejpZpejqZqejrZrejsZsejtZtejuZuejvZvejwZwejxZxejyZyejzZzej{Z{ej|Z|ej}Z}ej~Z~ejZej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�ej�Z�e�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j	�Z	e�j
�Z
Gdd�d�e��Ze�j
�e�Gdd�d�e��Ze�j�e�e�j�Ze�j�Ze�j�Ze�j�ZGdd�d�e��Ze�j�e�Gdd�d�e��Ze�j�e�e�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j�Ze�j �Z e�j!�Z!e�j"�Z"e�j#�Z#e�j$�Z$e�j%�Z%e�j&�Z&e�j'�Z'e�j(�Z(e�j)�Z)e�j*�Z*e�j+�Z+e�j,�Z,e�j-�Z-e�j.�Z.e�j/�Z/e�j0�Z0e�j1�Z1e�j2�Z2e�j3�Z3e�j4�Z4e�j5�Z5e�j6�Z6e�j7�Z7e�j8�Z8e�j9�Z9e�j:�Z:e�j;�Z;e�j<�Z<e�j=�Z=e�j>�Z>e�j?�Z?e�j@�Z@e�jA�ZAe�jB�ZBe�jC�ZCe�jD�ZDe�jE�ZEe�jF�ZFe�jG�ZGe�jH�ZHe�jI�ZIe�jJ�ZJe�jK�ZKe�jL�ZLe�jM�ZMe�jN�ZNe�jO�ZOe�jP�ZPe�jQ�ZQe�jR�ZRe�jS�ZSe�jT�ZTe�jU�ZUe�jV�ZVe�jW�ZWe�jX�ZXe�jY�ZYe�jZ�ZZe�j[�Z[e�j\�Z\e�j]�Z]e�j^�Z^e�j_�Z_e�j`�Z`e�ja�Zae�jb�Zbe�jc�Zce�jd�Zde�je�Zee�jf�Zfe�jg�Zge�jh�Zhe�ji�Zie�jj�Zje�jk�Zke�jl�Zle�jm�Zme�jn�Zne�jo�Zoe�jp�Zpe�jq�Zqe�jr�Zre�js�Zse�jt�Zte�ju�Zue�jv�Zve�jw�Zwe�jx�Zxe�jy�Zye�jz�Zze�j{�Z{e�j|�Z|e�j}�Z}e�j~�Z~e�j�Ze�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�Gdd�d�e��Z�e�j��e��e�j��Z�Gdd�d�e��Z�e�j��e��Gdd�d�e��Z�e�j��e��Gdd�d�e��Z�e�j��e��e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�j��Z�e�jZ�e�jÐZ�e�jĐZ�e�jŐZ�e�jƐZ�e�jǐZ�e�jȐZ�e�jɐZ�e�jʐZ�e�jːZ�e�j̐Z�e�j͐Z�e�jΐZ�e�jϐZ�e�jАZ�e�jѐZ�d d!��Z�e�jӐZ�e�jԐZ�d"d#��Z�d$d%��Z�d&d'��Z�d(d)��Z�d*d+��Z�d,d-��Z�d.d/��Z�d0d1��Z�d2d3��Z�d4d5��Z�d6d7��Z�d8d9��Z�d:d;��Z�d<d=��Z�d>d?��Z�d@dA��Z�dBdC��Z�dDdE��Z�dFdG��Z�dHdI��Z�dJdK��Z�dLdM��Z�dNdO��Z�dPdQ��Z�dRdS��Z�dTdU��Z�dVdW��Z�dXdY��Z�dZd[��Z�d\d]��Z�d^d_��Z�d`da��Z�dbdc��Z�ddde��Z�dfdg��Z�dhdi��Z�djdk��Z�dldm��Z�e�j��Z�e�j��Z�dndo��Z�dpdq��Z�drds��Z�dtdu��Zdvdw��Zdxdy��Zdzd{��Zd|d}��Zd~d��Zd�d���Zd�d���Zd�d���Zd�d���Z	d�d���Z
d�d���Zd�d���Zd�d���Z
d�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Zd�d���Z d�d���Z!d�d���Z"dS)��)�version_info�.�)�_auditNcCsDyd|jj�}Wntjk
r,d}YnXd|jj|jj|fS)Nz	proxy of �z<%s.%s; %s >)�this�__repr__�__builtin__�	Exception�	__class__�
__module__�__name__)�selfZstrthis�r�/usr/lib64/python3.6/audit.py�
_swig_reprs

rcs�fdd�}|S)Ncsh|dkr�|||�nN|dkr,|jj|�n8t||�rXttt|�|�t�rX�|||�ntd|��dS)Nr�thisownz(You cannot add instance attributes to %s)r�own�hasattr�
isinstance�getattr�type�property�AttributeError)r�name�value)�setrr�set_instance_attrszE_swig_setattr_nondynamic_instance_variable.<locals>.set_instance_attrr)rrr)rr�*_swig_setattr_nondynamic_instance_variables	rcs�fdd�}|S)Ncs:t||�r*tt||�t�r*�|||�ntd|��dS)Nz%You cannot add class attributes to %s)rrrrr)�clsrr)rrr�set_class_attr)sz?_swig_setattr_nondynamic_class_variable.<locals>.set_class_attrr)rr r)rr�'_swig_setattr_nondynamic_class_variable(sr!cs�fdd�}|S)zlClass decorator for adding a metaclass to a SWIG wrapped class - a slimmed down version of six.add_metaclasscs�|j|j|jj��S)N)r
�	__bases__�__dict__�copy)r)�	metaclassrr�wrapper3sz$_swig_add_metaclass.<locals>.wrapperr)r%r&r)r%r�_swig_add_metaclass1sr'c@seZdZdZeej�ZdS)�_SwigNonDynamicMetazKMeta class to enforce nondynamic attributes (no new attributes) for a classN)r
r�__qualname__�__doc__r!r�__setattr__rrrrr(8sr(c@s�eZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zeejej�Zeejej�Zeejej�Zeejej�Zeejej�Zeej ej!�Z"eej#ej$�Z%eej&ej'�Z(eej)ej*�Z+dd�Z,ej-Z.dS)	�audit_statuscCs
|jj�S)N)rr)�xrrr�<lambda>9szaudit_status.<lambda>cCs|jj|�S)N)rr)r-�vrrrr.9szThe membership flag)�doccCstj|tj��dS)N)rZaudit_status_swiginitZnew_audit_status)rrrr�__init__Hszaudit_status.__init__N)/r
rr)rrrrrZaudit_status_mask_getZaudit_status_mask_set�maskZaudit_status_enabled_getZaudit_status_enabled_set�enabledZaudit_status_failure_getZaudit_status_failure_set�failureZaudit_status_pid_getZaudit_status_pid_set�pidZaudit_status_rate_limit_getZaudit_status_rate_limit_setZ
rate_limitZaudit_status_backlog_limit_getZaudit_status_backlog_limit_setZ
backlog_limitZaudit_status_lost_getZaudit_status_lost_setZlostZaudit_status_backlog_getZaudit_status_backlog_setZbacklogZaudit_status_version_getZaudit_status_version_set�versionZaudit_status_feature_bitmap_getZaudit_status_feature_bitmap_setZfeature_bitmapZ"audit_status_backlog_wait_time_getZ"audit_status_backlog_wait_time_setZbacklog_wait_timeZ)audit_status_backlog_wait_time_actual_getZ)audit_status_backlog_wait_time_actual_setZbacklog_wait_time_actualr1Zdelete_audit_status�__swig_destroy__rrrrr,8s r,c@sleZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zeejej�Zdd�ZejZdS)	�audit_featurescCs
|jj�S)N)rr)r-rrrr.Oszaudit_features.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.OszThe membership flag)r0cCstj|tj��dS)N)rZaudit_features_swiginitZnew_audit_features)rrrrr1Vszaudit_features.__init__N)r
rr)rrrrrZaudit_features_vers_getZaudit_features_vers_setZversZaudit_features_mask_getZaudit_features_mask_setr2Zaudit_features_features_getZaudit_features_features_set�featuresZaudit_features_lock_getZaudit_features_lock_set�lockr1Zdelete_audit_featuresr7rrrrr8Nsr8c@sPeZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
dd�ZejZdS)	�audit_tty_statuscCs
|jj�S)N)rr)r-rrrr.bszaudit_tty_status.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.bszThe membership flag)r0cCstj|tj��dS)N)rZaudit_tty_status_swiginitZnew_audit_tty_status)rrrrr1gszaudit_tty_status.__init__N)r
rr)rrrrrZaudit_tty_status_enabled_getZaudit_tty_status_enabled_setr3Zaudit_tty_status_log_passwd_getZaudit_tty_status_log_passwd_setZ
log_passwdr1Zdelete_audit_tty_statusr7rrrrr;asr;c@s�eZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zeejej�Zeejej�Zeejej�Zeejej�Zeejej�Zdd�Z ej!Z"dS)	�audit_rule_datacCs
|jj�S)N)rr)r-rrrr.nszaudit_rule_data.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.nszThe membership flag)r0cCstj|tj��dS)N)rZaudit_rule_data_swiginitZnew_audit_rule_data)rrrrr1yszaudit_rule_data.__init__N)#r
rr)rrrrrZaudit_rule_data_flags_getZaudit_rule_data_flags_set�flagsZaudit_rule_data_action_getZaudit_rule_data_action_set�actionZaudit_rule_data_field_count_getZaudit_rule_data_field_count_setZfield_countZaudit_rule_data_mask_getZaudit_rule_data_mask_setr2Zaudit_rule_data_fields_getZaudit_rule_data_fields_setZfieldsZaudit_rule_data_values_getZaudit_rule_data_values_set�valuesZaudit_rule_data_fieldflags_getZaudit_rule_data_fieldflags_setZ
fieldflagsZaudit_rule_data_buflen_getZaudit_rule_data_buflen_setZbuflenr1Zdelete_audit_rule_datar7rrrrr<msr<c@s^eZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zdd�ZejZdS)	�audit_sig_infocCs
|jj�S)N)rr)r-rrrr.szaudit_sig_info.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.szThe membership flag)r0cCstj|tj��dS)N)rZaudit_sig_info_swiginitZnew_audit_sig_info)rrrrr1 szaudit_sig_info.__init__N)r
rr)rrrrrZaudit_sig_info_uid_getZaudit_sig_info_uid_set�uidZaudit_sig_info_pid_getZaudit_sig_info_pid_setr5Zaudit_sig_info_ctx_getZaudit_sig_info_ctx_setZctxr1Zdelete_audit_sig_infor7rrrrr@sr@c@sPeZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
dd�ZejZdS)	�
audit_messagecCs
|jj�S)N)rr)r-rrrr.(szaudit_message.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.(szThe membership flag)r0cCstj|tj��dS)N)rZaudit_message_swiginitZnew_audit_message)rrrrr1-szaudit_message.__init__N)r
rr)rrrrrZaudit_message_nlh_getZaudit_message_nlh_set�nlhZaudit_message_data_getZaudit_message_data_set�datar1Zdelete_audit_messager7rrrrrB'srBc@s�eZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zeejej�Zeejej�Zeejej�Zeejej�Zeejej�Zeej ej!�Z"eej#ej$�Z%eej&ej'�Z(eej)ej*�Z+dd�Z,ej-Z.dS)	�audit_replycCs
|jj�S)N)rr)r-rrrr.4szaudit_reply.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.4szThe membership flag)r0cCstj|tj��dS)N)rZaudit_reply_swiginitZnew_audit_reply)rrrrr1Cszaudit_reply.__init__N)/r
rr)rrrrrZaudit_reply_type_getZaudit_reply_type_setrZaudit_reply_len_getZaudit_reply_len_set�lenZaudit_reply_nlh_getZaudit_reply_nlh_setrCZaudit_reply_msg_getZaudit_reply_msg_set�msgZaudit_reply_status_getZaudit_reply_status_setZstatusZaudit_reply_ruledata_getZaudit_reply_ruledata_setZruledataZaudit_reply_login_getZaudit_reply_login_setZloginZaudit_reply_message_getZaudit_reply_message_set�messageZaudit_reply_error_getZaudit_reply_error_set�errorZaudit_reply_signal_info_getZaudit_reply_signal_info_setZsignal_infoZaudit_reply_conf_getZaudit_reply_conf_setZconfZaudit_reply_features_getZaudit_reply_features_setr9r1Zdelete_audit_replyr7rrrrrE3s rEc@sleZdZedd�dd�dd�ZeZeejej	�Z
eejej�Z
eejej�Zeejej�Zdd�ZejZdS)	�audit_dispatcher_headercCs
|jj�S)N)rr)r-rrrr.Jsz audit_dispatcher_header.<lambda>cCs|jj|�S)N)rr)r-r/rrrr.JszThe membership flag)r0cCstj|tj��dS)N)rZ audit_dispatcher_header_swiginitZnew_audit_dispatcher_header)rrrrr1Qsz audit_dispatcher_header.__init__N)r
rr)rrrrrZaudit_dispatcher_header_ver_getZaudit_dispatcher_header_ver_setZverZ audit_dispatcher_header_hlen_getZ audit_dispatcher_header_hlen_setZhlenZ audit_dispatcher_header_type_getZ audit_dispatcher_header_type_setrZ audit_dispatcher_header_size_getZ audit_dispatcher_header_size_set�sizer1Zdelete_audit_dispatcher_headerr7rrrrrJIsrJcCstj||�S)N)r�set_aumessage_mode)�mode�debugrrrrLosrLcCstj�S)N)r�
audit_openrrrrrOtsrOcCs
tj|�S)N)r�audit_close)�fdrrrrPwsrPcCstj||||�S)N)r�audit_get_reply)rQ�rep�block�peekrrrrRzsrRcCstj�S)N)r�audit_getloginuidrrrrrV}srVcCs
tj|�S)N)r�audit_setloginuid)rArrrrW�srWcCstj�S)N)r�audit_get_sessionrrrrrX�srXcCstj�S)N)r�audit_detect_machinerrrrrY�srYcCs
tj|�S)N)r�audit_determine_machine)ZarchrrrrZ�srZcCstj|||||�S)N)r�audit_format_signal_info)�bufrF�oprS�resrrrr[�sr[cCs
tj|�S)N)r�audit_name_to_field)�fieldrrrr_�sr_cCs
tj|�S)N)r�audit_field_to_name)r`rrrra�sracCstj||�S)N)r�audit_name_to_syscall)�sc�machinerrrrb�srbcCstj||�S)N)r�audit_syscall_to_name)rcrdrrrre�srecCs
tj|�S)N)r�audit_uringop_to_name)�uringoprrrrf�srfcCs
tj|�S)N)r�audit_name_to_uringop)rgrrrrh�srhcCs
tj|�S)N)r�audit_name_to_flag)�flagrrrri�sricCs
tj|�S)N)r�audit_flag_to_name)rjrrrrk�srkcCs
tj|�S)N)r�audit_name_to_action)r>rrrrl�srlcCs
tj|�S)N)r�audit_action_to_name)r>rrrrm�srmcCs
tj|�S)N)r�audit_name_to_msg_type)�msg_typerrrrn�srncCs
tj|�S)N)r�audit_msg_type_to_name)rorrrrp�srpcCs
tj|�S)N)r�audit_name_to_machine)rdrrrrq�srqcCs
tj|�S)N)r�audit_machine_to_name)rdrrrrr�srrcCs
tj|�S)N)r�audit_machine_to_elf)rdrrrrs�srscCs
tj|�S)N)r�audit_elf_to_machine)Zelfrrrrt�srtcCs
tj|�S)N)r�audit_operator_to_symbol)r]rrrru�srucCs
tj|�S)N)r�audit_name_to_errno)rIrrrrv�srvcCs
tj|�S)N)r�audit_errno_to_name)rIrrrrw�srwcCs
tj|�S)N)r�audit_name_to_ftype)rrrrrx�srxcCs
tj|�S)N)r�audit_ftype_to_name)Zftyperrrry�srycCs
tj|�S)N)r�audit_name_to_fstype)rrrrrz�srzcCs
tj|�S)N)r�audit_fstype_to_name)Zfstyperrrr{�sr{cCstj||�S)N)r�audit_number_to_errmsg)Z	errnumber�optrrrr|�sr|cCs
tj|�S)N)r�audit_request_status)rQrrrr~�sr~cCs
tj|�S)N)r�audit_is_enabled)rQrrrr�srcCs
tj|�S)N)r�get_auditfail_action)Zfailmoderrrr��sr�cCs
tj|�S)N)r�audit_request_features)rQrrrr��sr�cCstj�S)N)r�audit_get_featuresrrrrr��sr�cCstj|||�S)N)r�
audit_set_pid)rQr5Zwmoderrrr��sr�cCstj||�S)N)r�audit_set_enabled)rQr3rrrr��sr�cCstj||�S)N)r�audit_set_failure)rQr4rrrr��sr�cCstj||�S)N)r�audit_set_rate_limit)rQ�limitrrrr��sr�cCstj||�S)N)r�audit_set_backlog_limit)rQr�rrrr��sr�cCstj||�S)N)r�audit_set_backlog_wait_time)rQZbwtrrrr��sr�cCs
tj|�S)N)r�audit_reset_lost)rQrrrr��sr�cCs
tj|�S)N)r�$audit_reset_backlog_wait_time_actual)rQrrrr��sr�cCstj||||�S)N)r�audit_set_feature)rQZfeaturerr:rrrr�sr�cCs
tj|�S)N)r�audit_set_loginuid_immutable)rQrrrr�sr�cCs
tj|�S)N)r�audit_request_rules_list_data)rQrrrr�sr�cCs
tj|�S)N)r�audit_request_signal_info)rQrrrr�	sr�cCstj||�S)N)r�audit_update_watch_perms)�ruleZpermsrrrr�sr�cCstj||�S)N)r�audit_add_watch)�rulep�pathrrrr�sr�cCstj|||�S)N)r�audit_add_watch_dir)rr�r�rrrr�sr�cCs
tj|�S)N)r�audit_trim_subtrees)rQrrrr�sr�cCstj|||�S)N)r�audit_make_equivalent)rQZmount_pointZsubtreerrrr�sr�cCstj||||�S)N)r�audit_add_rule_data)rQr�r=r>rrrr�sr�cCstj||||�S)N)r�audit_delete_rule_data)rQr�r=r>rrrr�sr�cCstj||�S)N)r�audit_value_needs_encoding)�strrKrrrr�!sr�cCstj|||�S)N)r�audit_encode_value)�finalr\rKrrrr�$sr�cCstj|||�S)N)r�audit_encode_nv_string)rrZvlenrrrr�'sr�cCstj|||||||�S)N)r�audit_log_user_message)�audit_fdrrH�hostname�addr�tty�resultrrrr�*sr�c	Cstj||||||||�S)N)r�audit_log_user_comm_message)r�rrHZcommr�r�r�r�rrrr�-sr�c

Cstj||||||||||	�
S)N)r�audit_log_acct_message)
r�r�pgnamer]r�id�hostr�r�r�rrrr�0sr�cCstj|||||||�S)N)r�audit_log_user_avc_message)r�rrHr�r�r�Zauidrrrr�3sr�cCs(tj||||||||||	|
|||
||�S)N)r�audit_log_semanage_message)r�rr�r]rr�Z
new_seuserZnew_roleZ	new_rangeZ
old_seuserZold_roleZ	old_ranger�r�r�r�rrrr�6sr�cCstj|||||�S)N)r�audit_log_user_command)r�rZcommandr�r�rrrr�9sr�cCstj�S)N)r�audit_rule_create_datarrrrr�<sr�cCs
tj|�S)N)r�audit_rule_init_data)r�rrrr�?sr�cCstj||�S)N)r�audit_rule_syscallbyname_data)r��scallrrrr�Bsr�cCstj||�S)N)r�audit_rule_io_uringbyname_data)r�r�rrrr�Esr�cCstj|||�S)N)r�audit_rule_fieldpair_data)r��pairr=rrrr�Hsr�cCstj|||�S)N)r�audit_rule_interfield_comp_data)r�r�r=rrrr�Ksr�cCs
tj|�S)N)r�audit_rule_free_data)r�rrrr�Nsr�cCstj�S)N)r�audit_can_controlrrrrr�Qsr�cCstj�S)N)r�audit_can_writerrrrr�Tsr�cCstj�S)N)r�audit_can_readrrrrr�Wsr�(#�sysrZ_swig_python_version_info�__package__r
rr�builtinsr	�ImportErrorrrr!r'rr(Z	AUDIT_GETZ	AUDIT_SETZ
AUDIT_LISTZ	AUDIT_ADDZ	AUDIT_DELZ
AUDIT_USERZAUDIT_LOGINZAUDIT_WATCH_INSZAUDIT_WATCH_REMZAUDIT_WATCH_LISTZAUDIT_SIGNAL_INFOZAUDIT_ADD_RULEZAUDIT_DEL_RULEZAUDIT_LIST_RULESZ
AUDIT_TRIMZAUDIT_MAKE_EQUIVZ
AUDIT_TTY_GETZ
AUDIT_TTY_SETZAUDIT_SET_FEATUREZAUDIT_GET_FEATUREZAUDIT_FIRST_USER_MSGZAUDIT_USER_AVCZAUDIT_USER_TTYZAUDIT_LAST_USER_MSGZAUDIT_FIRST_USER_MSG2ZAUDIT_LAST_USER_MSG2ZAUDIT_DAEMON_STARTZAUDIT_DAEMON_ENDZAUDIT_DAEMON_ABORTZAUDIT_DAEMON_CONFIGZ
AUDIT_SYSCALLZ
AUDIT_PATHZ	AUDIT_IPCZAUDIT_SOCKETCALLZAUDIT_CONFIG_CHANGEZAUDIT_SOCKADDRZ	AUDIT_CWDZAUDIT_EXECVEZAUDIT_IPC_SET_PERMZ
AUDIT_MQ_OPENZAUDIT_MQ_SENDRECVZAUDIT_MQ_NOTIFYZAUDIT_MQ_GETSETATTRZAUDIT_KERNEL_OTHERZ
AUDIT_FD_PAIRZ
AUDIT_OBJ_PIDZ	AUDIT_TTYZ	AUDIT_EOEZAUDIT_BPRM_FCAPSZAUDIT_CAPSETZ
AUDIT_MMAPZAUDIT_NETFILTER_PKTZAUDIT_NETFILTER_CFGZ
AUDIT_SECCOMPZAUDIT_PROCTITLEZAUDIT_FEATURE_CHANGEZ
AUDIT_REPLACEZAUDIT_KERN_MODULEZAUDIT_FANOTIFYZAUDIT_TIME_INJOFFSETZAUDIT_TIME_ADJNTPVALZ	AUDIT_BPFZAUDIT_EVENT_LISTENERZ	AUDIT_AVCZAUDIT_SELINUX_ERRZAUDIT_AVC_PATHZAUDIT_MAC_POLICY_LOADZAUDIT_MAC_STATUSZAUDIT_MAC_CONFIG_CHANGEZAUDIT_MAC_UNLBL_ALLOWZAUDIT_MAC_CIPSOV4_ADDZAUDIT_MAC_CIPSOV4_DELZAUDIT_MAC_MAP_ADDZAUDIT_MAC_MAP_DELZAUDIT_MAC_IPSEC_ADDSAZAUDIT_MAC_IPSEC_DELSAZAUDIT_MAC_IPSEC_ADDSPDZAUDIT_MAC_IPSEC_DELSPDZAUDIT_MAC_IPSEC_EVENTZAUDIT_MAC_UNLBL_STCADDZAUDIT_MAC_UNLBL_STCDELZAUDIT_MAC_CALIPSO_ADDZAUDIT_MAC_CALIPSO_DELZAUDIT_FIRST_KERN_ANOM_MSGZAUDIT_LAST_KERN_ANOM_MSGZAUDIT_ANOM_PROMISCUOUSZAUDIT_ANOM_ABENDZAUDIT_ANOM_LINKZAUDIT_ANOM_CREATZAUDIT_INTEGRITY_DATAZAUDIT_INTEGRITY_METADATAZAUDIT_INTEGRITY_STATUSZAUDIT_INTEGRITY_HASHZAUDIT_INTEGRITY_PCRZAUDIT_INTEGRITY_RULEZAUDIT_INTEGRITY_EVM_XATTRZAUDIT_INTEGRITY_POLICY_RULEZAUDIT_KERNELZAUDIT_FILTER_USERZAUDIT_FILTER_TASKZAUDIT_FILTER_ENTRYZAUDIT_FILTER_WATCHZAUDIT_FILTER_EXITZAUDIT_FILTER_EXCLUDEZAUDIT_FILTER_TYPEZAUDIT_FILTER_FSZAUDIT_NR_FILTERSZAUDIT_FILTER_PREPENDZAUDIT_NEVERZAUDIT_POSSIBLEZAUDIT_ALWAYSZAUDIT_MAX_FIELDSZAUDIT_MAX_KEY_LENZAUDIT_BITMASK_SIZEZAUDIT_SYSCALL_CLASSESZAUDIT_CLASS_DIR_WRITEZAUDIT_CLASS_DIR_WRITE_32ZAUDIT_CLASS_CHATTRZAUDIT_CLASS_CHATTR_32ZAUDIT_CLASS_READZAUDIT_CLASS_READ_32ZAUDIT_CLASS_WRITEZAUDIT_CLASS_WRITE_32ZAUDIT_CLASS_SIGNALZAUDIT_CLASS_SIGNAL_32ZAUDIT_UNUSED_BITSZAUDIT_COMPARE_UID_TO_OBJ_UIDZAUDIT_COMPARE_GID_TO_OBJ_GIDZAUDIT_COMPARE_EUID_TO_OBJ_UIDZAUDIT_COMPARE_EGID_TO_OBJ_GIDZAUDIT_COMPARE_AUID_TO_OBJ_UIDZAUDIT_COMPARE_SUID_TO_OBJ_UIDZAUDIT_COMPARE_SGID_TO_OBJ_GIDZAUDIT_COMPARE_FSUID_TO_OBJ_UIDZAUDIT_COMPARE_FSGID_TO_OBJ_GIDZAUDIT_COMPARE_UID_TO_AUIDZAUDIT_COMPARE_UID_TO_EUIDZAUDIT_COMPARE_UID_TO_FSUIDZAUDIT_COMPARE_UID_TO_SUIDZAUDIT_COMPARE_AUID_TO_FSUIDZAUDIT_COMPARE_AUID_TO_SUIDZAUDIT_COMPARE_AUID_TO_EUIDZAUDIT_COMPARE_EUID_TO_SUIDZAUDIT_COMPARE_EUID_TO_FSUIDZAUDIT_COMPARE_SUID_TO_FSUIDZAUDIT_COMPARE_GID_TO_EGIDZAUDIT_COMPARE_GID_TO_FSGIDZAUDIT_COMPARE_GID_TO_SGIDZAUDIT_COMPARE_EGID_TO_FSGIDZAUDIT_COMPARE_EGID_TO_SGIDZAUDIT_COMPARE_SGID_TO_FSGIDZAUDIT_MAX_FIELD_COMPAREZ	AUDIT_PIDZ	AUDIT_UIDZ
AUDIT_EUIDZ
AUDIT_SUIDZAUDIT_FSUIDZ	AUDIT_GIDZ
AUDIT_EGIDZ
AUDIT_SGIDZAUDIT_FSGIDZAUDIT_LOGINUIDZ
AUDIT_PERSZ
AUDIT_ARCHZ
AUDIT_MSGTYPEZAUDIT_SUBJ_USERZAUDIT_SUBJ_ROLEZAUDIT_SUBJ_TYPEZAUDIT_SUBJ_SENZAUDIT_SUBJ_CLRZ
AUDIT_PPIDZAUDIT_OBJ_USERZAUDIT_OBJ_ROLEZAUDIT_OBJ_TYPEZAUDIT_OBJ_LEV_LOWZAUDIT_OBJ_LEV_HIGHZAUDIT_LOGINUID_SETZAUDIT_SESSIONIDZAUDIT_FSTYPEZAUDIT_DEVMAJORZAUDIT_DEVMINORZAUDIT_INODEZ
AUDIT_EXITZ
AUDIT_SUCCESSZAUDIT_WATCHZ
AUDIT_PERMZ	AUDIT_DIRZAUDIT_FILETYPEZ
AUDIT_OBJ_UIDZ
AUDIT_OBJ_GIDZAUDIT_FIELD_COMPAREZ	AUDIT_EXEZAUDIT_SADDR_FAMZ
AUDIT_ARG0Z
AUDIT_ARG1Z
AUDIT_ARG2Z
AUDIT_ARG3ZAUDIT_FILTERKEYZAUDIT_NEGATEZAUDIT_BIT_MASKZAUDIT_LESS_THANZAUDIT_GREATER_THANZAUDIT_NOT_EQUALZAUDIT_EQUALZAUDIT_BIT_TESTZAUDIT_LESS_THAN_OR_EQUALZAUDIT_GREATER_THAN_OR_EQUALZAUDIT_OPERATORSZAudit_equalZAudit_not_equalZ
Audit_bitmaskZ
Audit_bittestZAudit_ltZAudit_gtZAudit_leZAudit_geZ	Audit_badZAUDIT_STATUS_ENABLEDZAUDIT_STATUS_FAILUREZAUDIT_STATUS_PIDZAUDIT_STATUS_RATE_LIMITZAUDIT_STATUS_BACKLOG_LIMITZAUDIT_STATUS_BACKLOG_WAIT_TIMEZAUDIT_STATUS_LOSTZ%AUDIT_STATUS_BACKLOG_WAIT_TIME_ACTUALZ"AUDIT_FEATURE_BITMAP_BACKLOG_LIMITZ&AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIMEZ$AUDIT_FEATURE_BITMAP_EXECUTABLE_PATHZ#AUDIT_FEATURE_BITMAP_EXCLUDE_EXTENDZ%AUDIT_FEATURE_BITMAP_SESSIONID_FILTERZAUDIT_FEATURE_BITMAP_LOST_RESETZAUDIT_FEATURE_BITMAP_FILTER_FSZAUDIT_FEATURE_BITMAP_ALLZAUDIT_VERSION_LATESTZAUDIT_VERSION_BACKLOG_LIMITZAUDIT_VERSION_BACKLOG_WAIT_TIMEZAUDIT_FAIL_SILENTZAUDIT_FAIL_PRINTKZAUDIT_FAIL_PANICZ__AUDIT_ARCH_CONVENTION_MASKZ"__AUDIT_ARCH_CONVENTION_MIPS64_N32Z__AUDIT_ARCH_64BITZ__AUDIT_ARCH_LEZAUDIT_PERM_EXECZAUDIT_PERM_WRITEZAUDIT_PERM_READZAUDIT_PERM_ATTRZAUDIT_MESSAGE_TEXT_MAXZAUDIT_NLGRP_NONEZAUDIT_NLGRP_READLOGZ__AUDIT_NLGRP_MAX�objectr,Zaudit_status_swigregisterr8Zaudit_features_swigregisterZAUDIT_FEATURE_VERSIONZ!AUDIT_FEATURE_ONLY_UNSET_LOGINUIDZ AUDIT_FEATURE_LOGINUID_IMMUTABLEZAUDIT_LAST_FEATUREr;Zaudit_tty_status_swigregisterr<Zaudit_rule_data_swigregisterZAUDIT_USER_AUTHZAUDIT_USER_ACCTZAUDIT_USER_MGMTZAUDIT_CRED_ACQZAUDIT_CRED_DISPZAUDIT_USER_STARTZAUDIT_USER_ENDZAUDIT_USER_CHAUTHTOKZAUDIT_USER_ERRZAUDIT_CRED_REFRZAUDIT_USYS_CONFIGZAUDIT_USER_LOGINZAUDIT_USER_LOGOUTZAUDIT_ADD_USERZAUDIT_DEL_USERZAUDIT_ADD_GROUPZAUDIT_DEL_GROUPZAUDIT_DAC_CHECKZAUDIT_CHGRP_IDZ
AUDIT_TESTZAUDIT_TRUSTED_APPZAUDIT_USER_SELINUX_ERRZAUDIT_USER_CMDZAUDIT_CHUSER_IDZAUDIT_GRP_AUTHZAUDIT_SYSTEM_BOOTZAUDIT_SYSTEM_SHUTDOWNZAUDIT_SYSTEM_RUNLEVELZAUDIT_SERVICE_STARTZAUDIT_SERVICE_STOPZAUDIT_GRP_MGMTZAUDIT_GRP_CHAUTHTOKZAUDIT_MAC_CHECKZAUDIT_ACCT_LOCKZAUDIT_ACCT_UNLOCKZAUDIT_USER_DEVICEZAUDIT_SOFTWARE_UPDATEZAUDIT_FIRST_DAEMONZAUDIT_LAST_DAEMONZAUDIT_DAEMON_RECONFIGZAUDIT_DAEMON_ROTATEZAUDIT_DAEMON_RESUMEZAUDIT_DAEMON_ACCEPTZAUDIT_DAEMON_CLOSEZAUDIT_DAEMON_ERRZAUDIT_FIRST_EVENTZAUDIT_LAST_EVENTZAUDIT_FIRST_SELINUXZAUDIT_LAST_SELINUXZAUDIT_FIRST_APPARMORZAUDIT_LAST_APPARMORZAUDIT_AAZAUDIT_APPARMOR_AUDITZAUDIT_APPARMOR_ALLOWEDZAUDIT_APPARMOR_DENIEDZAUDIT_APPARMOR_HINTZAUDIT_APPARMOR_STATUSZAUDIT_APPARMOR_ERRORZAUDIT_APPARMOR_KILLZAUDIT_FIRST_KERN_CRYPTO_MSGZAUDIT_LAST_KERN_CRYPTO_MSGZAUDIT_INTEGRITY_FIRST_MSGZAUDIT_INTEGRITY_LAST_MSGZAUDIT_FIRST_ANOM_MSGZAUDIT_LAST_ANOM_MSGZAUDIT_ANOM_LOGIN_FAILURESZAUDIT_ANOM_LOGIN_TIMEZAUDIT_ANOM_LOGIN_SESSIONSZAUDIT_ANOM_LOGIN_ACCTZAUDIT_ANOM_LOGIN_LOCATIONZAUDIT_ANOM_MAX_DACZAUDIT_ANOM_MAX_MACZAUDIT_ANOM_AMTU_FAILZAUDIT_ANOM_RBAC_FAILZAUDIT_ANOM_RBAC_INTEGRITY_FAILZAUDIT_ANOM_CRYPTO_FAILZAUDIT_ANOM_ACCESS_FSZAUDIT_ANOM_EXECZAUDIT_ANOM_MK_EXECZAUDIT_ANOM_ADD_ACCTZAUDIT_ANOM_DEL_ACCTZAUDIT_ANOM_MOD_ACCTZAUDIT_ANOM_ROOT_TRANSZAUDIT_ANOM_LOGIN_SERVICEZAUDIT_ANOM_LOGIN_ROOTZAUDIT_ANOM_ORIGIN_FAILURESZAUDIT_ANOM_SESSIONZAUDIT_FIRST_ANOM_RESPZAUDIT_LAST_ANOM_RESPZAUDIT_RESP_ANOMALYZAUDIT_RESP_ALERTZAUDIT_RESP_KILL_PROCZAUDIT_RESP_TERM_ACCESSZAUDIT_RESP_ACCT_REMOTEZAUDIT_RESP_ACCT_LOCK_TIMEDZAUDIT_RESP_ACCT_UNLOCK_TIMEDZAUDIT_RESP_ACCT_LOCKZAUDIT_RESP_TERM_LOCKZAUDIT_RESP_SEBOOLZAUDIT_RESP_EXECZAUDIT_RESP_SINGLEZAUDIT_RESP_HALTZAUDIT_RESP_ORIGIN_BLOCKZAUDIT_RESP_ORIGIN_BLOCK_TIMEDZAUDIT_RESP_ORIGIN_UNBLOCK_TIMEDZAUDIT_FIRST_USER_LSPP_MSGZAUDIT_LAST_USER_LSPP_MSGZAUDIT_USER_ROLE_CHANGEZAUDIT_ROLE_ASSIGNZAUDIT_ROLE_REMOVEZAUDIT_LABEL_OVERRIDEZAUDIT_LABEL_LEVEL_CHANGEZAUDIT_USER_LABELED_EXPORTZAUDIT_USER_UNLABELED_EXPORTZAUDIT_DEV_ALLOCZAUDIT_DEV_DEALLOCZAUDIT_FS_RELABELZAUDIT_USER_MAC_POLICY_LOADZAUDIT_ROLE_MODIFYZAUDIT_USER_MAC_CONFIG_CHANGEZAUDIT_USER_MAC_STATUSZAUDIT_FIRST_CRYPTO_MSGZAUDIT_CRYPTO_TEST_USERZAUDIT_CRYPTO_PARAM_CHANGE_USERZAUDIT_CRYPTO_LOGINZAUDIT_CRYPTO_LOGOUTZAUDIT_CRYPTO_KEY_USERZAUDIT_CRYPTO_FAILURE_USERZAUDIT_CRYPTO_REPLAY_USERZAUDIT_CRYPTO_SESSIONZAUDIT_CRYPTO_IKE_SAZAUDIT_CRYPTO_IPSEC_SAZAUDIT_LAST_CRYPTO_MSGZAUDIT_FIRST_VIRT_MSGZAUDIT_VIRT_CONTROLZAUDIT_VIRT_RESOURCEZAUDIT_VIRT_MACHINE_IDZAUDIT_VIRT_INTEGRITY_CHECKZAUDIT_VIRT_CREATEZAUDIT_VIRT_DESTROYZAUDIT_VIRT_MIGRATE_INZAUDIT_VIRT_MIGRATE_OUTZAUDIT_LAST_VIRT_MSGZ
AUDIT_URINGOPZ
AUDIT_OPENAT2Z
AUDIT_DM_CTRLZAUDIT_DM_EVENTZAUDIT_KEY_SEPARATORZAUDIT_FILTER_URING_EXITZAUDIT_FILTER_MASKZAUDIT_FILTER_UNSETZEM_ARMZ
EM_AARCH64ZAUDIT_INTERP_SEPARATORr@Zaudit_sig_info_swigregisterZMAX_AUDIT_MESSAGE_LENGTHrBZaudit_message_swigregisterrEZaudit_reply_swigregisterrJZ$audit_dispatcher_header_swigregisterZAUDISP_PROTOCOL_VERZAUDISP_PROTOCOL_VER2ZMACH_X86Z
MACH_86_64Z	MACH_IA64Z
MACH_PPC64ZMACH_PPCZ
MACH_S390XZ	MACH_S390Z
MACH_ALPHAZ
MACH_SW_64ZMACH_ARMZMACH_AARCH64ZMACH_PPC64LEZ
MACH_IO_URINGZFAIL_IGNOREZFAIL_LOGZFAIL_TERMINATEZ
MSG_STDERRZ
MSG_SYSLOGZ	MSG_QUIETZDBG_NOZDBG_YESrLZGET_REPLY_BLOCKINGZGET_REPLY_NONBLOCKINGrOrPrRrVrWrXrYrZr[r_rarbrerfrhrirkrlrmrnrprqrrrsrtrurvrwrxryrzr{r|r~rr�r�r�ZWAIT_NOZWAIT_YESr�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�rrrr�<module>s<
	



















































































































































































































































































@ Telegram