Viewing file:  ausearch (145.47 KB) -rwxr-xr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
ELF 4 @ 4 ( 4 44 4 44 H1 H1 H1 HH 2 H HH Ptd( (( Qtd /lib/ld-linux.so.2 GNU a +"a b ) K8 gUa 8 ! N z K D F f X 8 d ` n 5 - g J < + I z W v q C E n 9 I z # < Q t = T T < \ < M 5 < ' 2 q 9 - O % ~ ; b N o _ . 8 C D w - E 7 < E 3 E ^ 9 n E ; w N v - { % W H } j @ h D MS s M: Mq5. ^ ^ ^ ^ ^ ^ p _ 4_ H8_ <_ L_ @_ _ D_ _ _ ̿ п 0 Կ ؿ ܿ ٳ s p ii
ii
ii
ii
ti ii
ii
p tc @c Dd Ha
! " # $ % & ' ( ) $* (+ ,, 0- 4. 8/ <0 @1 D2 H3 L4 P5 T6 X7 \8 `9 d: h; l< p= t> x? |@ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` U9 5|% %h %h %h %h %h %h( %h0 %h8 p%h@ `%hH P%hP @%hX 0%h` %hh %hp %hx %h %h %h %h %h %h %h %h p%h `%h P%h @%h 0%h %h %h % h %h %h % h %h %h %h( % h0 % h8 p%$h@ `%(hH P%,hP @%0hX 0%4h` %8hh %<hp %@hx %Dh %Hh %Lh %Ph %Th %Xh %\h %`h p%dh `%hh P%lh @%ph 0%th %xh %|h %h %h %h %h %h %h %h( %h0 %h8 p%h@ `%hH P%hP @%hX 0%h` %hh %hp %hx %h %h %h %h %h %h %h %h p%h `%h P%h @%h 0%h %h %h 1^PTRhhQVh US [ø, tbX[ÐUS=P u?T-PXL9v & LPL9wP[]Ít& ' UXt t $XÐU]Ít& ' UWVS Yt& K $` t- $A_ T y $3 $$`11 u ( \ $ XD$
# 4$D$$ stz& t$$`@ t$`萬 v4$&KX$ 1[^_]áXD$
# 4$D$Åu4$X$@t
8tX$t$`譫 $` gof$
# lfWH$u $i2 $I) USÃD$6$ Xt D$ $v[]t& $\$ D$D$ D$@$ []ÐUWVS \D$ $> a p$pP$_d p1D$YD$ P4$D$@t& \$pD$D$ D$ D$P4$D$
D$ 4$
t~a\$pD$D$ D$ D$P4$D$kuMt Tu; u1pD$YD$ P4$D$ t4$H\$b [^_]ËpD$ċD$ D$ @$Fs@ D$
D$ $D$ \$ [^_]Ít& L$qU Mu1]YD$$ \$4$2 t M؋]u]aÍt& ]EE\$$ g\$$ WD$ $ $? $$` t $`舭 |$軏 |$t$$违 芝 T4@D$
D$ $D$ xu3ED$D$ $ uE% = tt& K D\ XD$p$ $t%D$ $ [t y$`Q |$脎 |$t$r$e舜 S v UE]pÍv UMt 1҅u 9 t u]UE@D$$ D$ E D$ $ D$ 1Í ' UE@D$H$ D$ E D$ $ D$ 1Í ' UE@D$p$ D$\ E D$ $ D$A 1Í ' USE]@t$C81[]C8 1[]Ív ' US]C$C$C0$C8$CP$CL$C\$Cd$vCl$k $] E[]JfUuu]$ D$ D$ 4$x ؋u]] $t$D$$ D$ ؋u]]Ít& UWVS }tu<$~f$1ɋ9Cu@t.t-t _u<& 9uD$@ <$Qt4D$. <$t9v
[^_]ÍC${t
1[^_]httɃ tِ& UVS]uCD$$ D$ C$dø t $uFPt$^P1[^]É $ [^]Í UVS]CD$$ D$j t;s1݈t)D$4$uEP|1[^]ËsE t$D$!$ D$ [^]Ð& UVS]CD$?$ D$ t;s1݀t)D$4$uE݄P$1[^]ËsE t$D$!$ D$ d [^]Ð& UVS]CD$$ D$* t;s1 t)D$4$xuEP1[^]ËsE t$D$!$ D$ [^]Ð& UVS]CD$$ D$ t;s1t)D$4$uEP@1[^]ËsE t$D$!$ D$ $ [^]Ð& UVS@Ut@r1t& @t)D$4$NuEDP41[^]ËrE t$D$!$ D$ [^]Í& ' UVS]CD$\$ D$Z t;s1t)D$4$uEP1[^]ËsE t$D$!$ D$ [^]Ð& UWVS }wD$0$ t$ tV& Zt9DAuU T$ GD$\$ D$i [^_] D$ D$
D$ G$uxGE 1[^_]É$U D$$ T$ D$ [^_]ËE D$ GD$$ D$ I ' UVSÃĀ 8/uRED$\$$ U% = uEE 1 uM[^]ÉD$T$ D$$ ։t$ \$D$d$ 볉t$ \$D$$ 됉t$ \$D$$ jT$D$$ HG $mt$\$D$@$ D$ U t& ' UWVS }GD$Ԏ$ D$ tJw1ݠt8D$4$gu<ݤtLtmE1@h [^_]ËwU t$D$!$ T$ [^_]ËE t$D$ $ D$ v ЋU G uG$UBlit& UWVS }GD$4$ D$ tHw1ݠt6D$4$gu ݤtHtiE1҉X` [^_]ËwU t$D$!$ T$ [^_]ËE t$D$\$ D$ x ЋU G uG$UBdm& UWVS }GD$$ D$ tHw1ݠt6D$4$gu4ݤtHt{E1҉pX [^_]ËwU t$D$!$ T$ [^_]áD$ $tD$$ D$a 녋U G uG$UB\[t& UWVS }GD$$ D$ tHw1ݠt6D$4$Wu ݤtHt{E1҉XH [^_]ËwU t$D$!$ T$ [^_]áD$ $ztD$$ D$Q 녋U G uG$UBL[t& U }}]uGD$ $ D$ Gti$1gt$t
$wLE t$D$@$ D$ $ ]u}]Ðt& E@0 1 $RUZ =l D$ G$$ ED$\$$ $U% = t^GD$$ D$߿ C8lUB0$G$7UB0
M tGD$֖$ D$h ! $GD$ GD$w$ D$0 $D$ GD$$ D$ $ TGD$$ D$˾ /UX ]]e E1u}C4tjv6 1Ue3 ]u}]Ðt& uD$ 4$Mx 4$C81묍D$ 4$ K Dž" Dž D$ T$D$ 4$V @$=C8$1s8D$$ ~ t& D$ 4$b Dž! Dž D$ T$D$ 4$uePt1@D$ . t$D$$$@D$$ 豼 %$ t$D$p$ D$ hUWVS }e E1G G G G =x D$ $ GG G G G$ G( G, G0 G4 G8 G< G@ GD GH GL =і D$ $ GPE =pGT GX lG\ % G` Gd Gh Gl Gp Gt Gx G| LJ LJ LJ LJ LJ LJ D$$), D$)D$ؐ$ 軺 D$\$$ $ + % = 0 D$)D$@$ Q $ Ue3 [^_]$ /var@/log@/aud@ it/a@udit@.log@ $ < root@ -D$)D$ Nn t*$D$$ D$ 1D$)D$$ Y 1D$)D$@D$6 $ Dž t& pD$ $T$4 pD$
$t pDžd Džh Džl D$$ 8# dD$$ ts:@ :B0 D$$ kt$R t!D$ @D$ѮD$ $蕽 b uL fM봋}܅ M܉ $t E܅ E9E M \9 ;- ED$: $蹽
U܉ $T$
^ E1EE6E܅A UD$^$F U^:% _:B `:B a:B EE E܅
E9Eu M \9f ;-] ED$: $輼
U܉ $T$_ EE=4 4 E܅UЋD$D$ AE܅ E܉$E܅ U܉$M܉ $ Er EE ]܅ E܉$pYoE ID$ D$$ K$ /E܅, M DP> 7 ËED$ D$
D$ $ ($%UD$T$D$ ]܅ mM DP 赹 ËED$ D$
D$ $芾 yU܅C v M DP K ËED$ D$
D$ $ $;E܅ 蜻M DP ËED$ D$
D$ $蹽
E¡ $(]܅Q U܉$.-E܅) M DP 4 ËED$ D$
D$ $詹 }܅ { M܉ $葽E E EED$$T% ME]E܅h +M DPQ s ËED$ D$
D$ $H$aUD$T$D$ E܅ U܉$ü D$ 谼E܅ pM DPn 踶 ËED$ D$
D$ $荻 4@}܅F E܉$# "=4 4 E܅@D$# D$ $D$ EE܅ E܉$註M܅ v cM DP> 諵 ËED$ D$
D$ $耺 8 U¡ E E܅t M܉ $t$ D$GEE E܉$S UD$ $NV 1EC@t$ D$dD$ $E.@D$ D$ $D$ NE(E܉$R UD$$X fEM܉ $ Z @EEM܉ $萹 @ 1UD$pT$ @$
D$UEc$p 2 M܉D$ $= ,ED$D$ `UD$4T$ LM܉ $4 @E EUD$XT$ bEM܉ $蓸 @(M܉ $s M؋@E£ tUD$<T$ M܉ $3 @E$E4M܉ $W @ MD$, $Om E܉$ D$$肶E u$D$$ at `Et܉ $5t$ D$`@t$ D$GD$ $EEE花U É$D$ D$ D$ MD$רL$ 9M9MU D:EUBDA=M D$ D$ D$ $wED$רD$ ED$D$ $ȰUD$D$ T$D$ @$а1E@D$ D$ $D$ EJMD$b $@D$ D$ $D$ ѳEMD$: $ U$ T$/Q {MD$: $觰] U$ T$S ;1E$ fc$& ]$aUD$D$ T$D$ @$i1E@D$ D$ $4D$ 趲EE:E UD$T$ M܉\$ $P M܉\$ $R MD$L$ WMD$L$ CUD$T$ /ED$$R IED$D$ ED$ $cO ED$D$ UD$T$ UWVS x|xe E1U< t|<(tx x t}xr 18u
+tjDx$|$迲uۃ<@wC@$xx< l拵x h|, t=D$ D$p$ |$mEe3 5
Ĭ [^_]ø 뼋$mD8:u 9"t $T r<"1 <0tK<$T Åۉ D$D$Ѯ$ ɬ $O$ D$֍CD$D$$ Ԥ빃 D$&$ 赤 $; D$$ 苤 $å CD$ CD$$ D$U7CD$ CD$ CD$CD$CD$CD$ CD$$ D$CD$$ D$ NӃD$" $D \$D$Ѯ$ 薣$|$D$$ sD$$ T$PD$S$ T$-st$D$Y$ $ o4$7T$D$$ ڢ8$D$謆 R ::C:C:C$I D$ \$D$$ 5˃D$" $Kbt& Éljƃ1jD$N$ ءfD$[$ 迡 XD$b$ 衡 _D$h$ 胡fD$$ jÉljƃD$}$ =D$w$ $؉$et$D$F$ D$ D$0$ L$֠d$ H fD$$ 諠DI\ 8<& \$D$q$ mD$$ |$JCD$D$$ * uЍD$ D$ t$D$ |$D$ $ܣu^t$ |$D$Į$ ̟uЍD$ D$ t$D$ |$D$ $~tD$ծ$ vX' UWVS\EUe E12>n 1D$( 4$a MQ EtM $ twt|$D$Ѯ$ \$D$$ ˞uD$[ 4$t,;Es'ED$] $ɞE: t|$D$Ѯ$ lt$D$$ TMD$. $qt9 S ƋED$ D$
D$ $(tMe3
Z \[^_]f{ED$: <$t D$ D$
D$ <$ɡEuD$) $轝t D$ D$
D$ $脡EUẺ$]9D$D$ $D$ 蝡\$D$Y$ UMD$$ T$ L$Ex 3 ! D$= $ 8 9؉ > t9r x\$D$$ s:u&»:Fuû:FuĻ:Ft~1>'<', <"$ D$, <$ED$ <$3
0 9 UB$Gp$tE t'_pCP
} $}E uٸ iUE @ @ ]Ít& UMufB uQ]fU1MQtB A]É' UWVS }7t&^ $蹔F$讔4$褔u G G [^_]Í U$ ]] uuJB CBCBtFP FV]u]É됍& UVSu~v?F H u
A uNt S tC;BrىӋS u퍶 [^]9 t(ɍv tQ \$4$/ $蟓 t1뭉ԉ' UWVS }u u %[ t 4$D$uC [^_]É4$E E EED$<$ [^_]ÐUSÃSP1t[]$ Ԕ
҉CPt$B 1fUWVSL8EUD$ <$w pD$ 4$|t ^ D$ D$
D$ 4$6UB =0tzD$4<$tfpD$ 4$ Ϗ D$ D$
D$ 4$觔UB( uQ D$<$ftmpD$ 4$ot Ef t
L[^_]Ív ]ȉ $%B 4$Eȉ\$UBP$B ' D$<$ؒ E@Du'$ ؒUBD p${"C* D$" $蝏 9 EpDt. $)E E EED$UBD$"Uz = D$<$t~xD$ <$ t D$ D$
D$ <$ƒ UɉB lt L0[^_]Í {L1[^_]ËE@ FUZD(E u$>6 Et$D$?$蟏tJ]$E E E\$UBD$t$D$?$ UuE$E x v }t& UH]Ӊu}E@8u'$ 衐U B8 $^;" E1ɋP8toE E N 3ѹ DPt4<0t= $ 5 EE8. UED$B8$1ɋ]ȋu}]À{0uC$4 E븐t& D$" $Ō t My8t7 $UE E E8. MED$A8$1"jt& @.<@UB<2$ ? .EMD$AuZEӈ5{ D$ $荋tgxD$ <$薈 t E t
L[^_]Í]܉ $J: <$
E܉\$UċBP$: = D$M̉ $trE裉}}EEDBuM
9Ml}$ uUMB 1҈L[^_]1. ' UWVSL0=U D$:4$M t_pD$ 4$Q tA . lj4$D$ D$
D$ Mĺ A7t
L[^_]Ív D$ $ʼn9 XD$ $ʆ t D$ D$
D$ $膊UĉB u =0tiD$44$ItUXD$ $R D$ D$
D$ $MĉA(uS D$4$ӈtlED$ $مf EtL [^_]Í]܉ $7 EЉ$KE܉\$UċBP$.8 D$:4$StxEuȋt& DBu;uȺ 5 D$ D$
D$ Mȉ $UĉB
~D$+<$ćtaXx" F P1ɋfDBu u <$~8MĉAT D$1<$B p D$, 4$G 3 4$݈UĉB4,M;Q4:ug<:Bu[CD$U$ԆtDpD$, 4$݃ UċB4$̈́4$eMĉA4,t`D$=<$stLp D$ 4$|u D$) 4$f R 4$UĉBH t]D$G<$
tIHMX" pD$" 4$ 4$薇UĉB@"= D$<$蠅 XD$' $襂 E $UĉMB 1'cD$4$8 FxD$ <$8 $ É<$D$ D$
D$ UĉB; _1x"Pt
f;"u {$bMĉAT"% $D$&t X z<$~L) UĉBT
Z tHfu1ɋDBu ut M̉ $ЅUĉB@ 5M̉ $( UĉB@ D$L<$̃pD$) 4$р D$x4$OUąB 1)
UH
}e U1҉]ɉu D$T $(x X $5 $( ÉG4 ftWf
f $1G4 Ue3 ]u}]Ðpf1 tD$ D$ D$ D$ t$D$ $6` G4$s4$ G41[{ C$< @D$ D$ $D$ ߁ A@D$ D$ $sD$ 袁 @D$ D$ $[D$ s C$莀Muw8u-$ i
҉G8 a$'O8t:C$Dž Dž D$G8$G4$1G4 & UWVS<0E܉Ủ$/ D$4$蟀 X D${ $}h = t/ D$ $Yl UE B {~ ^u; tD$} $7}u t& ƀ~ Ft $E =tD$4$tk ED$ $| f {U É$D$ D$
D$ 胀ỦBuZ tE̋@L~ tDD$ 4$4t0PE}t & E܉$E. <[^_]Ã=tCD$4$~t/X D$ ${t $艀E tGD$4$~t3X D$ ${[ $8E D$˷ 4$M~-pD$ 4$R{ 4$E E̿
2U̍Ef1D$BP$- EE @ D$4$}t/{"@t0$s " ỦBLM4$bEs h D$" $zF $#ỦBL" ' UWVS1ہ UE2 Er F= J= t& = t& = t& Z =L |mUC_= ={ =' t& =x =z t& u U$UÍt& E$5t.Č [^_]= = t& % = t& uUd= |= t& D$ ${6 XD$ $xt w ED$ D$
D$ $|UBE D$9<$P{t_XD$ $Yx- U D$ D$
D$ $|UBE
D$<$zt_XD$ $w
U D$ D$
D$ ${UBE , D$<$]z pD$ 4$bw: EU v = t& U-4 = Ue~=6_ D$4$yG xD$ <$v 0=4> D$ӷ<$iytӃED$ $ov Mu ËED$ D$ D$ $"zUB = t& = z\ D$$$x? x"P E@<$ $1{ UB< =6txD$4$]xxD$ <$bu @t É<$D$ D$
D$ yUB; D$:4$w
pD$ 4$t
s lj4$D$ D$
D$ xUB7 ]ȉ $i& 4$)yU\$EȋBP$ ' =tsD$<$(wt_XD$ $1tI
E D$ D$
D$ $wUBE V
5tRD$<$vt>x"P
pD$" 4$s 4$BxUBL"1
D$ٷ<$OvP xD$ <$Tsr 2r ED$ D$
D$ <$ wUB$Ef = D$ $utsPUD$ $r ^:G U_:B `:B a:B E@ t~D$ $3uxD$ <$8rP E D$ D$ D$ <$uUB,E ] B0 D$ $t
ED$ $q0 U
E D$ D$ D$ $uV UF =t|D$<$(tthED$ $,q EU $D$ D$
D$ tUE g = D$ <$s:ED$ $p UE D$ D$
D$ $OtUBE D$ <$s1
EU D$ $p EU $D$ D$
D$ sUBE M D$:<$r0ED$ $o UE D$ D$
D$ $EsUBE D$<$
rED$ $
o UE D$ D$
D$ $rUBEG D$<$q* ED$ $n U E D$ D$
D$ $?rUB E D$<$q ED$ $n U!E D$ D$
D$ $qUBE A tMD$
<$}pt9"ED$ $m U$rUBH =0 D$4<$#ptl# ED$ $$m E$U $D$ D$
D$ pUB(E ^ tSD$& <$oE2UBLt$mEUz" $U UBLt:D$G( $7ox"P
$ UB@tvD$<$ntbp) D$ 4$k} E*h]ȉ $ 4$}pU\$EȋBP$` 5 D$<$wnEXD ~"F URDE u$* t$D$?É$ltJ}$oU|$E E EBD$t$D$?$ Blu $1kg& V v i D$ D$
D$ <$nUB D$94$Xm xD$ <$]j1 ;i D$ D$
D$ <$nUB t, UU
s D$ 4$lpD$ 4$it h D$ D$
D$ 4$wmUBt =0tmD$4 $7ltYpD$ 4$@i D$ D$
D$ 4$lUB( dD$ $kLx"P $1 UBL;>, D$ $ykp U D$ 4$~ht D$ D$
D$ 4$?lUBt = tqD$4$j pD$ 4$ht D$ D$
D$ 4$kUB t =0(D$0 $jpD$ 4$gt D$ D$
D$ 4$GkUB(uT 1D$" $ jp
pD$" 4$gZ uUB n [pD$" 4$f E@<4$MkUB<
E@ % UD$" $^f E$jUBL"p'D$" 4$#f 4$jUB@"D$& <$hk E~, D$" <$e> EHDt.<$}NjU|$E E EBD$1"$ + `hUBD$"UE @ @ ]Ít& U1MQtB A]É' UVSut+tX $eۉu F F [^]
US]$ gE B EBEBtCCP S[]Í& CS[]ÐUVSu~v?F H u
A uNt S tC;BrىӋS u퍶 [^]9 t8ɍv tQ CD$ CD$4$D$ $d t1띉ĉ' UWVS }M 7t)9tK 9t;9v ~BڋZ uWE<$D$ L$D$ [^_]ÃC [1^_]9t1WE<$D$ L$D$ jGX [^_]É ȐU] @ @ @ @ @ @ Ít& ' U
]JRHPÍt& ' UJ ]H JHJR HP Ív UVS1ۃuv ݄t$$ftu[^]Ë݀[^]Í& USÃb$ dEE$a@ C []Í U($ ]udEE$paÉډ]u]Ív ' UVS $x1҃v [^]Ðt& $`r1$ *d-X EE$`Étډ1$ cEE$` F F P 1[^]$ c-Q $ ]cE $`` F F i@Q )E $:` 1[^]$ ]GcE $ `m: F F $ cEE$_ F F p1F $ bEE$_ F F +1F F 8 UWVS ]E e U1҅ۉE| Uz $ E E$+a U]D$D$ D$ T$D$ $cut$D$ $^ 8 EEȃg U$`1ң Me3
n Č [^_]fM]E D$ D$ L$ $"c]EmUtu tED$D$ @D$ $M] \Ev ML$D$ $] 8 z\$ D$ø뛐t& Mu 4$ u_`EE$!]ÉpCECEEC Et}D$Թ|$ \$ D$2`l D$ @D$D$ $<\K@D$ D$ $D$ _ t& ' UWVS ue E1] 3 U. 4$O i $P^ u\$D$D$ D$ D$ 4$8`}|$D$4$\ 8 u|EẼg% E$]1ң: ЋUe3 Č [^_]ÍuE D$ D$ \$4$S`f \$ D$@D$ $Z 덍EpUT$D$4$<[tY8 t$ D$T륅+ }\$ D$tct$ D$R]l D$ @D$D$ $Y@D$ D$ $5D$ 4]UE @ @ ]Ít& U1MQtBA]É' UMU u @t9Pt& uA ]]1
UWVS }7t^$Z4$Zu G G [^_]Í& UVS] u$ n\A CAt,FPuBuVЃFHN[^]ÃFN[^]ÐUE]ÐUbUt
t]Ðt& ]^É' U1U9`t u]0Ëd]Ív ' U1U9 t u]0Ë]Ív ' UVSu t,Y ZtDAu[1^][ ^]Í UWVS }?( YDBu <$\E ?( $YE Xu1 Et& U1U$D$Wt ú(UDU$D$iWt (ЃÈ 9} E [^_]D$) <$.WE p!ыE$ XE 뽍& ' Uu$ Í& Uu$ Í U8=4]]uu }}
\$$4t2 t5D$ D$Y|$4$uZ]u}]É $YuYf\$D$ݺD$ D$ |$4$ Z빍 $t$ U $WZ]$EED$AD$|$4$YJ& \$D$<[
U8=4]]uu }} \$$t2 t6D$ D$Y|$4$&Y]u}]É $VuZv \$D$ݺD$ D$ |$4$X븍 $$$ T $Y]$EED$@D$|$4$tXI& \$D$<[
U(=4]u} UB@$9 UD$BD$g7 :uT:CuH:Cu<:Cu0ED$ $6tUB@$w ؋u]}]ËUBDU D$<D$ D$ED$ $D$W] 븐ED$ $轋tUB@$tD$U E\$D$D$ D$ D$$V] Qv ' UWVS,] $u \$D$Y$ R,[^_]É $E $%TE E EԉEEԋUE9U t& U+UUU< v< w\ED$ E$U+]9]Eru9ۉً}1 D$ E$^UPUx uE܅u'E> H$" D$UE EC<^wi\tM"tHHD$É$YUEU9UE E܅= EԉE,[^_]RH$\ D$U롡H$\ D$THD$0$THD$0$THD$0$TJ]]E܅uyEu[\$D$$ PE
H$, D$MT\$D$S$ OH$, D$T뎡H$" D$SmH$" D$SUE @ @ ]Ít& U1MQtBA]É' UUu f@ttB ]]1Ðt& UMQu]ÉBttA]ÉQ1]Í& ' UUu f@tHtB ]]1Ít& UMQu]ÉBtPtA]ÉQ1]Í ' UUu f@tHtB ]]1Ít& UMQu]ÉBtPtA]ÉQ1]Í ' UE @ @ @ @ ]Í US]$NC$NC $NCE[]N UWVS }7t^4$4$Nۉu G G [^_]É' UVS] u$ >PB CɉBCBC B CBtFFPV[^]Í& FV[^]UESPx8
9t|uD 9u
[]Í& U t$5 $E|$u1 $t$|$]Ëxx{t S1
BӃt 9~ÍFC fUWVSÃ,e E1B D$x $iOP )ԍT$ $D$\$MD$$&O: 8n $< D$$ FN x (X tD$( $rK CED$) $RKt 6J ǍC D$: $+K @D$ D$
D$ $NF uJED$. $Jtv@D$ D$
D$ $NF tNfED$D$ D$ @$IEe3 uwe[^_]F qF ED$ D$
D$ $)Nt뇍& $ND$$ F fML Mt& UWVS\] D$
$Jt ؍Ut;E~E$J1\[^_]át;E|݉ $BNEȋEE̋E@E U1ۋME:MUMEUM;]n|u4ߋUF 9PuM9HuۋU9V uӋ@ UtM$L$MuU$
JEȉD$4$Ä 1$x KƉ$蓀EFEF EFEFEF EȉD$4$vEX9 UE :G WE v Bу E9]u݀ D$<$GtCMAD$ D$ $HMUD 4EAPAU }Z-51ɋE9H|9zuC 9C - = vыEB 9H}lj5\ [^_]ËEA 1M9HlHd8E E4UVSu^x>19^|2 Ht $($ H9^}эv $G F[^]fUS]CCP $ ID$ D$ $
G[]ÐU1}o]D@Í& ' UMW} VQt3Q119s ju 9r1t^_]Ã>wA1DŽ j DŽ @ ͍v UM Vu >) D 1^]Í& U1҉WVSv! [w uM썻1ɍ} t90uttxt@ [^_]Ë}D$E D$ UD$ T$$RD [^_]ËUD$ D$ pD$$ D [^_]Ë} |$U싻D$ MD$ L$$C [^_]Í USj Ov e E1r$*Euv$6 ЋUe3 u Ĕ []= ' US u E$ E[]Í ' UWVS íu E$ D$
D$ tA1
Ft*D$E$'Fu 1[^_]ËE D$ E$ D$D$p [^_]Ív UWVS t u } :uK:Fu?:Fu3:Fu' fD@u 1[^_]Ít& u61x D$4$L1 x"D$<$ [^_]É$h( ō D DPuD$ D$ D$ 4$ByfUWVS s Le E1AUU E̋E$D$ D$ D$D$D$ ED$ ƍ$@E ~[1v )ƅ~LEȉt$D$EЉ$Ay܋Ũ:t؍D$$ EЉ$D
UЉ$D1Ue3 u%L[^_]Í
D$$ C w: & U(]E r }u$BU :Et O }it.}kt(D$$ ]u}]ËE<$ ED$!@U Ɖ ED$ 4$D$@ F D$4$UEF dž @ U $T$UT$A1dž j dž @dž ǃ #D$$ <$@D$$ & UE $k D$ED$PÍ& ' UE $i D$ED$ Í& ' U(]E p }uD$ D$ D$ $s x]u}]؉$== $3 t$T$$ 뾍t& ' U(U E]}uET 9p B T$D$ D$ E$ x]u}]Ãt8؉$6=< $t t$T$$ 빐t& @ D$$ 뜐& U(U E]u}E yo B T$D$ D$ E$ x]u}]P<ǃ? Et؉$d tҀ? tˉ4$ $ x}E׀} t uU Er / fh D$4$V0tx @ E P>k D$4$*0tx @ E HD$= 4$ -| x E @. DP <$,! @M䉄 u1҃F } 0 } @ z}k . DPt/D$ D$ D$ <$,U䉄 l<$ Mq<$u U䉄 :- DP * D$ D$ D$ <$/ 6J <$-3-DAua~ - MI<$M0E p4$_-4$D$ D$+uUMF _UrD$ D$ D$ <$.M䉄 *GDAiEpun |$D$$ |$D$$ D$> 4$* x E T$R M䋃 Q ǃ l |$$,uU ɺt L T T |$$c,u12듄 $I ,<$1< _}tPX}uf f } -* DPum<$ +*DA~-tfMq<$e UM䉄 B D$ D$ D$ <$4)M䉄 GDAtMq}#}L} 0f } @v }} @v <$*E 1҅r +11ҋ E9u܋rv ] a3 & }Bi kt& t& u `<$m)= E } ~
;MuA E؉E؉ D$ $&UƉt5EU؉|$D$ $#'u<$(ExM $'D$$ ǃ ;MMA wtxσfȃÃ}t& t
}<$+ UM䉄 B K<$('DA EpD$ D$ D$ <$)U䉄 D$< 4$%t-x E mD$& 4$r%Px E : 0뵃f-GDAft& ' UWVS V E $&U$&ED8E$'UD$ T$E$@%EU8ƉPE |$4$D$&UE4$T$D$u&EUD$ D$ET$ $ xU$c% [^_]Ð؉$^#'# $
t$T$$? 뷋 $ÐU U E E ] Í& ' U(]U×U M u tFtK EEtUD$ L$D$ $$$
D$&]u]Ë t샻 EEuD$ L$D$ $A&]u]Ë $ÐUWVS1 UEL x~]1҉ËT141t]É' UEL x~]1҉Ë10t]É' UEf]L x~]1҉Ë@ t]É' U1҉SM5L 9tu[1]Í []U1҉SMK 9tu[]Í []Í ' UEK }
1]Ít& ~= 틄$ufU WV1S}^CK
v H9|% ;Tt|ۍp9}[1^_]Í(p[^_]Ít& ' UWVS,J e E1U؉<$ƍ@ )1T$Ut 19B<w EԈ9uU CE E* EuE9E|EUU܉ 4UEЍ< H$D$ t&}Eu9E}1Ue3 ue[^_]Ë U؉ z v ' U1ɉWV% S}I
v p9% ;(t|ۍH9~[1^_]Í[^_]Ít& ' UWVS}uZI uA @1 H9|% ; t|ۍp9}[1^_]}¿ 0뻍t [^_]Ít& ' U WV1S}H
v H9|% ;(t|ۍp9}[1^_]Í H*[^_]Ít& ' UWVS,hH e E1U؉<$|ƍ@ )1T$Ut 19B<w EԈ9uU 1E EM EuE9E|EUU܉ 4UEЍ< ȓ$D$ t&}Eu9E}1Ue3 ue[^_]Ë U؉
v ' UWVS,sXG e E1U؉<$lƍ@ )1T$Ut 19B<w EԈ9uU sE E EuE9E|EUU܉ 4UEЍ< $D$u t&}Eu9E}1Ue3 ue[^_]Ë HU؉
v ' UWVS,cHF e E1U؉<$\ƍ@ )1T$Ut 19B<w EԈ9uU (E E- EuE9E|EUU܉ 4UEЍ< $D$e t&}Eu9E}1Ue3 ue[^_]Ë HU؉ v ' UWVS,S8E e E1U؉<$Lƍ@ )1T$Ut 19B<w EԈ9uU (cE E: EuE9E|EUU܉ 4UEЍ< $D$U t&}Eu9E}1Ue3 ue[^_]Ë U؉ v ' UWVS,C(D e E1U؉<$<ƍ@ )1T$Ut 19B<w EԈ9uU SE E# EuE9E|EUU܉ 4UEЍ< ȧ$D$E t&}Eu9E}1Ue3 ue[^_]Ë hU؉
v ' USE 4C w []ËEUut& tE[]ËEUxEU[ًEUn̋EUq뾋EUv 뮍& ' UWVS,xB e E1U؉<$ƍ@ )1T$Ut 19B<w EԈ9uU E E܋ EuE9E|EUU܉ 4UEЍ< ,$D$ t&}Eu9E}1Ue3 ue[^_]Ë .U؉ v ' U8]EgA e U1ҍUu}Et EUe3 ]u}]Ëu uD$] 4$#t{)}E E D$ ~ D$t$<$*
D$ D$
D$ <$OMfCM DPu
-
ED$ D$
D$ $ v ' UWVS,3@ e E1U؉<$,ƍ@ )1T$Ut 19B<w EԈ9uU E E EuE9E|EUU܉ 4UEЍ< h $D$5 t&}Eu9E}1Ue3 ue[^_]Ë U؉ v ' UEU EÐt& UWVS,> e E1U؉<$ƍ@ )1T$Ut 19B<w EԈ9uU (E E EuE9E|EUU܉ 4UEЍ< $D$ t&}Eu9E}1Ue3 ue[^_]Ë U؉ v ' UEU EÐt& UWVS,ø= e E1U؉<$
ƍ@ )1T$Ut 19B<w EԈ9uU 41E E EuE9E|EUU܉ 4UEЍ< l1$D$ t&}Eu9E}1Ue3 ue[^_]Ë 1U؉ Z v ' UEU EÐt& UWVS,È< e E1U؉<$ ƍ@ )1T$Ut 19B<w EԈ9uU E E& EuE9E|EUU܉ 4UEЍ< h$D$ t&}Eu9E}1Ue3 ue[^_]Ë U؉ * v ' UEU EÐt& UWVS,sX; e E1U؉<$l ƍ@ )1T$Ut 19B<w EԈ9uU E E܂ EuE9E|EUU܉ 4UEЍ< H$D$u
t&}Eu9E}1Ue3 ue[^_]Ë h U؉ v ' UV E8-t UuE u^]Ãv UWVS,#: e E1U؉<$
ƍ@ )1T$Ut 19B<w EԈ9uU 0E E EuE9E|EUU܉ 4UEЍ< 1$D$% t&}Eu9E}1Ue3 ue[^_]Ë (1U؉ v ' UEU EÐU]Ít& ' UWVS8 E)E}Ut+1ƍ ED$E D$E$9}u߃ [^_]ÐUSz_8 USHHt Ћu[]US [8 p Y[ Error opening %s (%s)
No memory
%s.%d
NOTE - using built-in logs: %s
krb5_key_file_parser called with: %s GSSAPI support is not enabled, ignoring value at line %d krb5_principal_parser called with: %s enable_krb5_parser called with: %s action_mail_acct_parser called with: %s use_libwrap_parser called with: %s log_format_parser called with: %s max_log_size_action_parser called with: %s tcp_client_max_idle_parser called with: %s Value %s should only be numbers - line %d Error converting string to a number (%s) - line %d Error - converted number (%s) is too large - line %d Executable path needed for line %d Absolute path needed for %s - line %d Unable to stat %s (%s) - line %d %s is not a regular file - line %d %s is not owned by root - line %d %s permissions should be 0750 - line %d disk_error_action_parser called with: %s Illegal option %s for disk_error_action - line %d disk_full_action_parser called with: %s Illegal option %s for disk_full_action - line %d admin_space_left_action_parser called with: %s Email option is specified but %s doesn't seem executable. space_action_parser called with: %s dispatch_parser called with: %s The directory name: %s is too short - line %d Cannot resolve hostname %s (%s) Error opening config file (%s) Config file %s doesn't exist, skipping Config file %s opened for parsing Error fstat'ing config file (%s) Error - %s isn't owned by root Error - %s is not a regular file Unknown keyword "%s" in line %d of %s Keyword "%s" has invalid option "%s" in line %d of %s Error - space_left(%lu) must be larger than admin_space_left(%lu) Error - incremental flushing chosen, but 0 selected for freq Warning - freq is non-zero and incremental flushing not selected. Missing equal sign for line %d in %s Wrong number of arguments for line %d in %s log_file_parser called with: %s %s permissions should be 0600 or 0640 audit log is not writable by owner num_logs_parser called with: %s max_log_size_parser called with: %s log_group_parser called with: %s Numeric group ID conversion error (%s) for %s - line %d
Group ID is non-numeric and unknown (%s) - line %d
space_left_parser called with: %s admin_space_left_parser called with: %s priority_boost_parser called with: %s tcp_listen_port_parser called with: %s Error - converted number (%s) is too small - line %d tcp_listen_queue_parser called with: %s tcp_max_per_addr_parser called with: %s Value %s should only be numbers, or two numbers separated by a dash - line %d Error - converted number (%ld) is too large - line %d Error - converted range (%ld-%ld) is reversed - line %d Unable to create %s (%s) Option %s not found - line %d flush_parser called with: %s qos_parser called with: %s Unable to open %s (%s) Unable to stat %s (%s) %s is not a regular file %s is not owned by root %s permissions should be 0750 Unable to get machine name User defined name missing /etc/audit/auditd.conf Error - %s is world writable Error - fdopen failed (%s) /var/log/audit/audit.log Could not open dir %s (%s) num_logs must be 99 or less freq_parser called with: %s /usr/lib/sendmail nolog log_format log_group flush freq num_logs dispatcher name_format disp_qos max_log_file max_log_file_action action_mail_acct admin_space_left admin_space_left_action disk_full_action disk_error_action priority_boost tcp_listen_port tcp_listen_queue tcp_max_per_addr use_libwrap tcp_client_ports tcp_client_max_idle enable_krb5 krb5_principal krb5_key_file yes no ignore syslog email suspend single halt rotate keep_logs lossy lossless none hostname fqd numeric user incremental data sync : I ` % 0
<P E R }п f w Ø Ҙ p @ P ! 5P A P ^ b e l s b y e l y Ǚ ̙ ؙ ݙ usage: ausearch [options]
-a,--event search based on audit event id
-c,--comm search based on command line name
-e,--exit search based on syscall exit code
-f,--file search based on file name
-ga,--gid-all search based on All group ids
-ge,--gid-effective search based on Effective
group id
-gi,--gid search based on group id
-h,--help help
-hn,--host search based on remote host name
-i,--interpret Interpret results to be human readable
-if,--input use this file instead of current logs
--input-logs Use the logs even if stdin is a pipe
--just-one Emit just one event
-k,--key search based on key field
-l, --line-buffered Flush output on every line
-m,--message search based on message type
-n,--node search based on machine's name
-o,--object search based on context of object
-p,--pid search based on process id
-pp,--ppid search based on parent process id
-r,--raw output is completely unformatted
-sc,--syscall search based on syscall name or number
-se,--context search based on either subject or
object
--session search based on login session id
-su,--subject search based on context of the Subject
-sv,--success search based on syscall or event
success value
-te,--end [end date] [end time] ending date & time for search
-ts,--start [start date] [start time] starting data & time for search
-tm,--terminal search based on terminal
-ua,--uid-all search based on All user id's
-ue,--uid-effective search based on Effective
user id
-ui,--uid search based on user id
-ul,--loginuid search based on the User's Login id
-v,--version version
-w,--word string matches are whole word
-x,--executable search based on excutable name Numeric message type conversion error (%s) for %s
Illegal value for audit event ID Audit event id must be a numeric value, was %s
Numeric group ID conversion error (%s) for %s
Group ID is non-numeric and unknown (%s)
Effective group ID is non-numeric and unknown (%s)
Argument is NOT required for %s
Parent process id must be a numeric value, was %s
Process id must be a numeric value, was %s
Conflicting output format --raw
Argument is NOT required for --raw
Syscall numeric conversion error (%s) for %s
Success must be 'yes' or 'no'.
Session id must be a numeric value, was %s
%s requires either date and/or time
Numeric user ID conversion error (%s) for %s
Effective user ID is non-numeric and unknown (%s)
User ID is non-numeric and unknown (%s)
Login user ID is non-numeric and unknown (%s)
Argument is required for %s
Conflicting output format %s
ALL Valid message types are: ALL Error detecting machine type Syscall %s not found
Error converting %s
Unknown errno, was %s
00:00:00 1.7.17 ausearch version %s
%s is an unsupported option
-a --event -c --comm -e --exit -f --file -ga --gid-all -ge --gid-effective -gi --gid -h --help -hn --host -i --interpret -if --input --input-logs --just-one -k --key -l --line-buffered -m --message -n --node -o --object -p --pid -pp --ppid -r --raw -sc --syscall -se --context --session -su --subject -sv --success -te --end -ts --start -tm --terminal -ua --uid-all -ue --uid-effective -ui --uid -ul --loginuid -v --version -w --word -x --executable L T m$"9|<Gu y E H P S" Z" ] d g n r | © ʩ ש # #
! $ * . 5 8 > B L P! Z d h
r
v Ǫ ˪ Ѫ ժ saddr conversion error(%s) socketcall ipc %s(%s) unknown syscall(%s) unknown elf type(%s) %d(%s) (null) read ,write ,exec ,attr %s, %03o, suid, sgid, sticky, %03o unknown family(%d) %.108s sockaddr len too short host:%s serv:%s (error resolving addr) call:%c%c%c%c%c%c%c port:%d net:%u int:%d addr:%.15s sockaddr6 len too short pid:%u ,%s no yes conversion error(%s) key=%s %s%c can't find time stamp
type=%s msg=audit( %s( %x %T .%03d:%lu) %s= ----
time->%s ---- Report format error euid fsuid ouid oauid iuid inode_uid sauid egid fsgid ogid igid inode_gid new_gid path exe watch cwd cmd dir perm perm_mask mode flags old_prom capability sig list local inet ax25 ipx appletalk netrom bridge atmpvc inet6 rose decnet netbeui security netlink packet ash econet atmsvc sna irda pppox wanpipe bluetooth follow directory continue parent noalt atomic open create access chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control Nqh 9Z_:( ___y_____l ͪ * D { _ 2 U 7
; A E I ؙ
M R \ a
k
g p {
°
ɰ Ѱ ڰ
# - 6 =@ C J O V ] c p
ʱ ر
( 2 < E N [ d s y Error - no elements in record. subj= key= res= %s/%s name= obj= path= failed acct= hostname= ? terminal= exe= result= saddr= sockaddr len too short
sockaddr6 len too short
sun_path len too short
avc: denied comm= scontext= tcontext= tclass= arch= syscall= success= exit= a0= ppid= pid= euid= egid= tty= cwd= new auid= new loginuid= new ses= uid= W0b0000B1y11 R V ] c m w %x Error parsing end date (%s)
%s:00 %X Error parsing end time (%s)
Error - year is %d
Error converting end time
Error converting start time
now recent today yesterday this-week week-ago this-month this-year Invalid end date (%s). Month, Day, and Year are required.
Invalid end time (%s). Hour, Minute, and Second are required.
Invalid start date (%s). Month, Day, and Year are required.
Error parsing start date (%s)
Invalid start time (%s). Hour, Minute, and Second are required.
Error parsing start time (%s)
unset unknown(%d) %s(%s) <%s> semop semget semctl msgsnd msgrcv msgget msgctl shmat shmdt shmget shmctl socket bind connect listen accept getsockname getpeername socketpair send recv sendto recvfrom shutdown setsockopt getsockopt sendmsg recvmsg granted ^A ^B ^C ^D ^E ^F ^G backspace tab
nl ^K ^L
ret ^N ^O ^P ^Q ^R ^S ^T ^U ^V ^W ^X ^Y ^Z backspace [11;2~ F13 [11;3~ F49 [11;4~ F61 [11;5~ F25 [11;6~ F37 [12;2~ F14 [12;3~ F50 [12;4~ F62 [12;5~ F26 [12;6~ F38 [13;2~ F15 [13;3~ F51 [13;4~ F63 [13;5~ F27 [13;6~ F39 [14;2~ F16 [14;3~ F52 [14;5~ F28 [14;6~ F40 [15;2~ F17 [15;3~ F53 [15;5~ F29 [15;6~ F41 [17;2~ F18 [17;3~ F54 [17;5~ F30 [17;6~ F42 [18;2~ F19 [18;3~ F55 [18;5~ F31 [18;6~ F43 [19;2~ F20 [19;3~ F56 [19;5~ F32 [19;6~ F44 [20;2~ F21 [20;3~ F57 [20;5~ F33 [20;6~ F45 [21;2~ F22 [21;3~ F58 [21;5~ F34 [21;6~ F46 [23;2~ F23 [23;3~ F59 [23;5~ F35 [23;6~ F47 [24;2~ F24 [24;3~ F60 [24;5~ F36 [24;6~ F48 O1;2A scroll-backward O1;2B scroll-forward O1;2C shift-right O1;2D shift-left [192z F11 [193z resume [194z options [195z undo [196z help [197z copy [198z F17 [199z F18 [1;2A scroll-backward [1;2B scroll-forward [1;2C shift-right [1;2D shift-left [1;2F shift-end [1;2H shift-home [200z find [201z F20 [208z F31 [209z F32 [210z F33 [211z F34 [212z F35 [213z F36 [214z home [215z F38 [216z page-up [217z F40 [218z B2 [219z F42 [220z end [221z F44 [222z page-down [224z F1 [225z F2 [226z F3 [227z F4 [228z F5 [229z F6 [230z F7 [231z F8 [232z F9 [233z F10 [234z F11 [235z F12 [2;2~ shift-insert [2;5~ shift-insert [3;2~ shift-del [3;5~ shift-del [5;2~ shift-previous [5;5~ shift-previous [6;2~ shift-next [6;5~ shift-next [11^ F23 [11~ F1 [12^ F24 [12~ F2 [13^ F25 [13~ F3 [14^ F26 [14~ F4 [15^ F27 [15~ F5 [17^ F28 [17~ F6 [18^ F29 [18~ F7 [19^ F30 [19~ F8 [20^ F31 [20~ F9 [21^ F32 [21~ F10 [23$ F21 [23@ F43 [23^ F33 [23~ F11 [24$ F22 [24@ F44 [24^ F34 [24~ F12 [25^ F35 [25~ F13 [26^ F36 [26~ F14 [28^ F37 [28~ F15 [29^ F38 [29~ F16 [30~ insert-line [31^ F39 [31~ F17 [32^ F40 [32~ F18 [33^ F41 [33~ F19 [34^ F42 [34~ F20 O2A scroll-backward O2B scroll-forward O2C shift-right O2D shift-left O2P F13 O2Q F14 O2R F15 O2S F16 O3P F49 O3Q F50 O3R F51 O3S F52 O4P F61 O4Q F62 O4R F63 O5C shift-right O5D shift-left O5F shift-end O5H shift-home O5P F25 O5Q F26 O5R F27 O5S F28 O6P F37 O6Q F38 O6R F39 O6S F40 [1~ home [2$ shift-insert [2z insert [2~ insert [3$ shift-del [3z delete [3~ delete [4~ end [5$ shift-previous [5~ page-up [6$ shift-next [6~ page-down [7$ shift-home [7~ home [8$ shift-end [8^ delete-eol [8~ end [>M mouse [[A F1 [[B F2 [[C F3 [[D F4 [[E F5 11~ F1 12~ F2 13~ F3 14~ F4 15~ F5 17~ F6 18~ F7 19~ F8 20~ F9 21~ F10 23~ F11 24~ F12 25~ F13 26~ F14 28~ F15 29~ F16 31~ F17 32~ F18 33~ F19 34~ F20 2$ shift-insert OA up OB down OC right OD left OE B2 OF end OH home OM send OP F1 OQ F2 OR F3 OS F4 OT F5 OU F6 OV F7 OW F8 OX F9 OY F10 OZ F11 O[ F12 Ol F8 On C3 Op C1 Oq C1 Or B2 Os C3 Ot F5 Ou B2 Ov F7 Ow A1 Ox F10 Oy A3 [9 delete [@ F41 [A up [B down [C right [D left [E B2 [F end [G B2 [H home [I page-up [L insert [M mouse [N F2 [O F3 [P F4 [Q F5 [R F6 [S F7 [T F8 [U F9 [V F10 [W F11 [X F12 [Y F13 [Z back-tab [[ F42 [\ F43 [] F44 [^ F45 [_ F46 [` F47 [a F15 [b F16 [c shift-right [d shift-left [e F19 [f F20 [g F21 [h F22 [i F23 [j F24 [k F25 [l F26 [m F27 [n F28 [o F29 [p F30 [q F31 [r F32 [s F33 [t F34 [u F35 [v F36 [w F37 [x F38 [y F39 [z F40 [{ F48 1~ home 2~ insert 3~ delete 4~ end 5~ page-up 6~ page-down A up B down C right D left F end J clear P delete Q insert S page-down T page-up h home p F1 q F2 r F3 s F4 t F5 u F6 v F7 w F8 back-tab A up B down C right D left E begin M send q C1 s C3 u A3 w A1 y B2 M mouse Z back-tab esc 0123456789ABCDEF
% + 1 8 ? F K S Z a m y
Ż;ͻError extracting time stamp (%s)
%s %s
%u /proc/self/loginuid Error writing loginuid Rule is not empty
Invalid type used
Cannot realloc memory!
Rule exists /etc/libaudit.conf Error opening %s (%s) Error fstat'ing %s (%s) != >= <= &= Unknown user: %s Unknown group: %s b64 b32 -F missing operation for -F unknown field: must be before -S machine type not found elf mapping not found -F unknown message type - Failed upgrading rule String value too long only takes = or != operators -F unknown errno - -F unknown file type - -F value should be number for failure_action terminate audit_failure_parser called with: %s Error opening /proc/self/loginuid Error sending trim subtrees command (%s) Error sending delete rule request (No rule matches) Error sending delete rule data request (%s) Error sending add rule data request (%s) Error sending signal_info request (%s) Error sending rule list data request (%s) Error sending status request (%s) Error sending backlog limit request (%s) Error sending rate limit request (%s) Error sending failure mode request (%s) Error sending enable request (%s) Error setting audit daemon pid (%s) Error sending make_equivalent command (%s) requested bit level not supported by machine can only be used with exit filter list msgtype field can only be used with exclude filter list Only msgtype field can be used with exclude filter Permission can only contain 'rwxa' can only be used with exit and entry filter list can not be used with exclude filter list Key field needs a watch or syscall given prior to it -F missing value after operation for -F missing field name before operator for ʤ~~~~****~ʤjʤmmmmmʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤäääämmϧʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤʤError receiving audit netlink packet (%s) Bad address size reading audit netlink socket Spoofed packet received on audit netlink socket Netlink event from kernel is too big Netlink message from kernel was not OK Error - audit support not in kernel Error opening audit netlink socket (%s) Error setting audit netlink socket CLOEXEC flag (%s) ooH"ZL??2% block character dir fifo file link socket @ ` # # ` @ E2BIG EACCES EADDRINUSE EADDRNOTAVAIL EADV EAFNOSUPPORT EAGAIN EALREADY EBADE EBADF EBADFD EBADMSG EBADR EBADRQC EBADSLT EBFONT EBUSY ECANCELED ECHILD ECHRNG ECOMM ECONNABORTED ECONNREFUSED ECONNRESET EDEADLK EDEADLOCK EDESTADDRREQ EDOM EDOTDOT EDQUOT EEXIST EFAULT EFBIG EHOSTDOWN EHOSTUNREACH EIDRM EILSEQ EINPROGRESS EINTR EINVAL EIO EISCONN EISDIR EISNAM EKEYEXPIRED EKEYREJECTED EKEYREVOKED EL2HLT EL2NSYNC EL3HLT EL3RST ELIBACC ELIBBAD ELIBEXEC ELIBMAX ELIBSCN ELNRNG ELOOP EMEDIUMTYPE EMFILE EMLINK EMSGSIZE EMULTIHOP ENAMETOOLONG ENAVAIL ENETDOWN ENETRESET ENETUNREACH ENFILE ENOANO ENOBUFS ENOCSI ENODATA ENODEV ENOENT ENOEXEC ENOKEY ENOLCK ENOLINK ENOMEDIUM ENOMEM ENOMSG ENONET ENOPKG ENOPROTOOPT ENOSPC ENOSR ENOSTR ENOSYS ENOTBLK ENOTCONN ENOTDIR ENOTEMPTY ENOTNAM ENOTRECOVERABLE ENOTSOCK ENOTTY ENOTUNIQ ENXIO EOPNOTSUPP EOVERFLOW EOWNERDEAD EPERM EPFNOSUPPORT EPIPE EPROTO EPROTONOSUPPORT EPROTOTYPE ERANGE EREMCHG EREMOTE EREMOTEIO ERESTART EROFS ESHUTDOWN ESOCKTNOSUPPORT ESPIPE ESRCH ESRMNT ESTALE ESTRPIPE ETIME ETIMEDOUT ETOOMANYREFS ETXTBSY EUCLEAN EUNATCH EUSERS EWOULDBLOCK EXDEV EXFULL Y m @ M 3 t N 8 J f Y F A #
l
' / W H c P H i q y ^ & r [ D * T - 7 y 9 _ +
" 5 + O Q ? 4 ' ` | g s N
& + 8 ? H N T [ c i q y
' - 4 @ F M Q Y ` g s
" + 5 A H O W ^ f m t |
# * 3 9 D N Y _ l r y ' / 7 > J P
b c D a r 4 M J 5 8 9 ; }
, F g o h # # Y ! I z p q + T s j x 3 - . / O P S R Q 0 ( | Z H $ w d f e 7 i 2 = ~ % C { * @ A \ ? < & k ' v X L _ K ` G ] [ " N B y U l ^ E t V > n m u 1 W 6 != & &= < <= = > >= 0 @ H P `
@ > 2 i386 i486 i586 i686 ia64 ppc ppc64 s390 s390x x86_64 . ( #
# ( . ADD_GROUP ADD_USER ANOM_ABEND ANOM_ACCESS_FS ANOM_ADD_ACCT ANOM_AMTU_FAIL ANOM_CRYPTO_FAIL ANOM_DEL_ACCT ANOM_EXEC ANOM_LOGIN_ACCT ANOM_LOGIN_FAILURES ANOM_LOGIN_LOCATION ANOM_LOGIN_SESSIONS ANOM_LOGIN_TIME ANOM_MAX_DAC ANOM_MAX_MAC ANOM_MK_EXEC ANOM_MOD_ACCT ANOM_PROMISCUOUS ANOM_RBAC_FAIL ANOM_RBAC_INTEGRITY_FAIL ANOM_ROOT_TRANS AVC AVC_PATH BPRM_FCAPS CAPSET CHGRP_ID CHUSER_ID CONFIG_CHANGE CRED_ACQ CRED_DISP CRED_REFR CRYPTO_FAILURE_USER CRYPTO_KEY_USER CRYPTO_LOGIN CRYPTO_LOGOUT CRYPTO_PARAM_CHANGE_USER CRYPTO_REPLAY_USER CRYPTO_TEST_USER CWD DAC_CHECK DAEMON_ABORT DAEMON_ACCEPT DAEMON_CLOSE DAEMON_CONFIG DAEMON_END DAEMON_RESUME DAEMON_ROTATE DAEMON_START DEL_GROUP DEL_USER DEV_ALLOC DEV_DEALLOC EOE EXECVE FD_PAIR FS_RELABEL GRP_AUTH INTEGRITY_DATA INTEGRITY_HASH INTEGRITY_METADATA INTEGRITY_PCR INTEGRITY_RULE INTEGRITY_STATUS IPC IPC_SET_PERM KERNEL KERNEL_OTHER LABEL_LEVEL_CHANGE LABEL_OVERRIDE LIST LIST_RULES LOGIN MAC_CIPSOV4_ADD MAC_CIPSOV4_DEL MAC_CONFIG_CHANGE MAC_IPSEC_ADDSA MAC_IPSEC_ADDSPD MAC_IPSEC_DELSA MAC_IPSEC_DELSPD MAC_IPSEC_EVENT MAC_MAP_ADD MAC_MAP_DEL MAC_POLICY_LOAD MAC_STATUS MAC_UNLBL_ALLOW MAC_UNLBL_STCADD MAC_UNLBL_STCDEL MQ_GETSETATTR MQ_NOTIFY MQ_OPEN MQ_SENDRECV OBJ_PID PATH RESP_ACCT_LOCK RESP_ACCT_LOCK_TIMED RESP_ACCT_REMOTE RESP_ACCT_UNLOCK_TIMED RESP_ALERT RESP_ANOMALY RESP_EXEC RESP_HALT RESP_KILL_PROC RESP_SEBOOL RESP_SINGLE RESP_TERM_ACCESS RESP_TERM_LOCK ROLE_ASSIGN ROLE_REMOVE SELINUX_ERR SOCKADDR SOCKETCALL SYSCALL SYSTEM_BOOT SYSTEM_RUNLEVEL SYSTEM_SHUTDOWN TEST TRUSTED_APP TTY TTY_GET TTY_SET USER USER_ACCT USER_AUTH USER_AVC USER_CHAUTHTOK USER_CMD USER_END USER_ERR USER_LABELED_EXPORT USER_LOGIN USER_LOGOUT USER_MAC_POLICY_LOAD USER_MGMT USER_ROLE_CHANGE USER_SELINUX_ERR USER_START USER_TTY USER_UNLABELED_EXPORT USYS_CONFIG L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i ! " # $ % & ' ( ) * x y z { | } ~
4 5 6 7 8 9 : ; < = > ? @ A B C D E ` a b c d e f + ! V 5 > _ |
* l M u j 4 \ u A O M & Q e Z e M Q F V a . :
q < - ^ s ; $ J i - [ = # D k | S 0 _ : r h
- ; J [ i s $ = M Q Z e l u & * 4 A O \ j u - < M Q ^ e r
. : F V a q # 0 : D S _ k | ! + 5 > M V _ h | \ Z ? B ; > C @ 7 4 8 6 5 9 : A D < = E x z ) * _ e O P V e d b c a f ` ^ ] [ ( % f
$ } { | ~ # " ! & y g i h ` a ' M L S T c R U X Y N b Q d W always never possible
entry exclude exit task user _llseek _newselect _sysctl access acct add_key adjtimex afs_syscall alarm bdflush break brk capget capset chdir chmod chown chown32 chroot clock_getres clock_gettime clock_nanosleep clock_settime clone close creat create_module delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_pwait epoll_wait eventfd eventfd2 execve exit exit_group faccessat fadvise64 fadvise64_64 fallocate fchdir fchmod fchmodat fchown fchown32 fchownat fcntl fcntl64 fdatasync fgetxattr flistxattr flock fork fremovexattr fsetxattr fstat fstat64 fstatat64 fstatfs fstatfs64 fsync ftime ftruncate ftruncate64 futex futimesat get_kernel_syms get_mempolicy get_robust_list get_thread_area getcpu getcwd getdents getdents64 getegid getegid32 geteuid geteuid32 getgid getgid32 getgroups getgroups32 getitimer getpgid getpgrp getpid getpmsg getppid getpriority getresgid getresgid32 getresuid getresuid32 getrlimit getrusage getsid gettid gettimeofday getuid getuid32 getxattr gtty idle init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioperm iopl ioprio_get ioprio_set ipc keyctl kill lchown lchown32 lgetxattr link linkat listxattr llistxattr lock lookup_dcookie lremovexattr lseek lsetxattr lstat lstat64 madvise madvise1 mbind migrate_pages mincore mkdir mkdirat mknod mknodat mlock mlockall mmap mmap2 modify_ldt mount move_pages mprotect mpx mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msync munlock munlockall munmap nanosleep nfsservctl nice oldfstat oldlstat oldolduname oldstat olduname open openat pause perf_counter_open personality pipe pipe2 pivot_root poll ppoll prctl pread64 preadv prof profil pselect6 ptrace putpmsg pwrite64 pwritev query_module quotactl read readahead readdir readlink readlinkat readv reboot remap_file_pages removexattr rename renameat request_key restart_syscall rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield select sendfile sendfile64 set_mempolicy set_robust_list set_thread_area set_tid_address setdomainname setfsgid setfsgid32 setfsuid setfsuid32 setgid setgid32 setgroups setgroups32 sethostname setitimer setpgid setpriority setregid setregid32 setresgid setresgid32 setresuid setresuid32 setreuid setreuid32 setrlimit setsid settimeofday setuid setuid32 setxattr sgetmask sigaction sigaltstack signal signalfd signalfd4 sigpending sigprocmask sigreturn sigsuspend socketcall splice ssetmask stat stat64 statfs statfs64 stime stty swapoff swapon symlink symlinkat sync sync_file_range sys_kexec_load sysfs sysinfo syslog tee tgkill time timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_gettime timerfd_settime times tkill truncate truncate64 ugetrlimit ulimit umask umount umount2 uname unlink unlinkat unshare uselib ustat utime utimensat utimes vfork vhangup vm86 vm86old vmsplice vserver wait4 waitid waitpid write writev e T ^ C V M j ; p R 2 . n
D O
>
I - u s X 9 3
" N u & = &
n
M
_ } I
% X D E }
& T y
k
: [ # 0 I
v 8 d
c / X
j J g 8 % d I O | 2 A T g + Q { v \ c '
5 ] N
S q [ |
@ . ~ %
= Z j ; # . D n Y 1 , % ^ P ? 2
. x A z
O ' Y z k ` H 3 A ` P
d
8 t % :
l < t C
D
x U _sysctl accept access acct add_key adjtimex afs_syscall alarm arch_prctl bind brk capget capset chdir chmod chown chroot clock_getres clock_gettime clock_nanosleep clock_settime clone close connect creat create_module delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_ctl_old epoll_pwait epoll_wait epoll_wait_old eventfd eventfd2 execve exit exit_group faccessat fadvise64 fallocate fchdir fchmod fchmodat fchown fchownat fcntl fdatasync fgetxattr flistxattr flock fork fremovexattr fsetxattr fstat fstatfs fsync ftruncate futex futimesat get_kernel_syms get_mempolicy get_robust_list get_thread_area getcwd getdents getdents64 getegid geteuid getgid getgroups getitimer getpeername getpgid getpgrp getpid getpmsg getppid getpriority getresgid getresuid getrlimit getrusage getsid getsockname getsockopt gettid gettimeofday getuid getxattr init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioperm iopl ioprio_get ioprio_set kexec_load keyctl kill lchown lgetxattr link linkat listen listxattr llistxattr lookup_dcookie lremovexattr lseek lsetxattr lstat madvise mbind migrate_pages mincore mkdir mkdirat mknod mknodat mlock mlockall mmap modify_ldt mount move_pages mprotect mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msgctl msgget msgrcv msgsnd msync munlock munlockall munmap nanosleep newfstatat nfsservctl open openat paccept pause perf_counter_open personality pipe pipe2 pivot_root poll ppoll prctl pread preadv pselect6 ptrace putpmsg pwrite pwritev query_module quotactl read readahead readlink readlinkat readv reboot recvfrom recvmsg remap_file_pages removexattr rename renameat request_key restart_syscall rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield security select semctl semget semop semtimedop sendfile sendmsg sendto set_mempolicy set_robust_list set_thread_area set_tid_address setdomainname setfsgid setfsuid setgid setgroups sethostname setitimer setpgid setpriority setregid setresgid setresuid setreuid setrlimit setsid setsockopt settimeofday setuid setxattr shmat shmctl shmdt shmget shutdown sigaltstack signalfd signalfd4 socket socketpair splice stat statfs swapoff swapon symlink symlinkat sync sync_file_range sysfs sysinfo syslog tee tgkill time timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_gettime timerfd_settime times tkill truncate tuxcall umask umount2 uname unlink unlinkat unshare uselib ustat utime utimensat utimes vfork vhangup vmsplice vserver wait4 waitid write writev S q N . v ! G j d Q W 8 A R J k I 9 # ) /
` g
) 0 " ^ U c \ N
v o ` -
b f l
A
N A " R Y 8
* t
Z q p x
> # r 4
| ^ 1 = J & ,
: X H w U # @ J d
! w _ U @ 6
L
>
-
y l 5
Y A = 0 | j '
2 k w
g O
) Z
O r
b
W 5 H _sysctl accept access acct add_key adjtimex afs_syscall bdflush bind brk capget capset chdir chmod chown chroot clock_getres clock_gettime clock_nanosleep clock_settime clone clone2 close connect creat delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_pwait epoll_wait eventfd eventfd2 execve exit exit_group faccessat fadvise64 fallocate fchdir fchmod fchmodat fchown fchownat fcntl fdatasync fgetxattr flistxattr flock fremovexattr fsetxattr fstat fstatfs fstatfs64 fsync ftruncate futex futimesat get_mempolicy get_robust_list getcpu getcwd getdents getdents64 getegid geteuid getgid getgroups getitimer getpeername getpgid getpid getpmsg getppid getpriority getresgid getresuid getrlimit getrusage getsid getsockname getsockopt gettid gettimeofday getuid getunwind getxattr init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioprio_get ioprio_set kexec_load keyctl kill lchown lgetxattr link linkat listen listxattr llistxattr lookup_dcookie lremovexattr lseek lsetxattr lstat madvise mbind migrate_pages mincore mkdir mkdirat mknod mknodat mlock mlockall mmap mmap2 mount mprotect mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msgctl msgget msgrcv msgsnd msync munlock munlockall munmap nanosleep newfstatat nfsservctl ni_syscall open openat pciconfig_read pciconfig_write perfmonctl personality pipe pipe2 pivot_root poll ppoll prctl pread64 preadv pselect ptrace putpmsg pwrite64 pwritev quotactl read readahead readlink readlinkat readv reboot recv recvfrom recvmsg remap_file_pages removexattr rename renameat request_key restart_syscall rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield select semctl semget semop semtimedop send sendfile sendmsg sendto set_mempolicy set_robust_list set_tid_address set_zone_reclaim setdomainname setfsgid setfsuid setgid setgroups sethostname setitimer setpgid setpriority setregid setresgid setresuid setreuid setrlimit setsid setsockopt settimeofday setuid setxattr shmat shmctl shmdt shmget shutdown sigaltstack signalfd signalfd4 socket socketpair splice stat statfs statfs64 swapoff swapon symlink symlinkat sync sync_file_range sysfs sysinfo syslog tee tgkill timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_create timerfd_gettime timerfd_settime times tkill truncate tux umask umount uname unlink unlinkat unshare uselib ustat utimensat utimes vhangup vmsplice vserver wait4 waitid write writev O :
Z s
3 W h
n ] c & f
Q f ` G
E i Y I `
i
` p z
{ s , S
o c j \
I
I m
# 8 , ` W 5 &
( | O ^ & q / D f u & . I P E @ t L 3 8 A X < ^ 6 > , Z M
= ( T ?
s ~ i
} p j D
v 8 = + X J _ f t 9 z
m v J
W
^ '
2
"
7
'
; * J _llseek _newselect _sysctl access acct add_key adjtimex afs_syscall alarm bdflush break brk capget capset chdir chmod chown chroot clock_getres clock_gettime clock_nanosleep clock_settime clone close creat create_module delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_pwait epoll_wait eventfd eventfd2 execve exit exit_group faccessat fadvise64 fadvise64_64 fallocate fchdir fchmod fchmodat fchown fchownat fcntl fcntl64 fdatasync fgetxattr flistxattr flock fork fremovexattr fsetxattr fstat fstat64 fstatat fstatfs fstatfs64 fsync ftime ftruncate ftruncate64 futex futimesat get_kernel_syms get_robust_list getcpu getcwd getdents getdents64 getegid geteuid getgid getgroups getitimer getpgid getpgrp getpid getpmsg getppid getpriority getresgid getresuid getrlimit getrusage getsid gettid gettimeofday getuid getxattr gtty idle init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioperm iopl ioprio_get ioprio_set ipc kexec_load keyctl kill lchown lgetxattr link linkat listxattr llistxattr lock lookup_dcookie lremovexattr lseek lsetxattr lstat lstat64 madvise mincore mkdir mkdirat mknod mknodat mlock mlockall mmap mmap2 modify_ldt mount move_pages mprotect mpx mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msync multiplexer munlock munlockall munmap nanosleep nfsservctl nice oldfstat oldlstat oldolduname oldstat olduname open openat pause pciconfig_iobase pciconfig_read pciconfig_write perf_counter_open personality pipe pipe2 pivot_root poll ppoll prctl pread preadv prof profil pselect6 ptrace putpmsg pwrite pwritev query_module quotactl read readahead readdir readlink readlinkat readv reboot remap_file_pages removexattr rename renameat request_key rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo rtas sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield select sendfile sendfile64 set_robust_list set_tid_address setdomainname setfsgid setfsuid setgid setgroups sethostname setitimer setpgid setpriority setregid setresgid setresuid setreuid setrlimit setsid settimeofday setuid setxattr sgetmask sigaction sigaltstack signal signalfd signalfd4 sigpending sigprocmask sigreturn sigsuspend socketcall splice spu_create spu_run ssetmask stat stat64 statfs statfs64 stime stty subpage_prot swapcontext swapoff swapon symlink symlinkat sync sync_file_range2 sysfs sysinfo syslog tee tgkill time timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_gettime timerfd_settime times tkill truncate truncate64 tuxcall ugetrlimit ulimit umask umount umount2 uname unlink unlinkat unshare uselib ustat utime utimensat utimes vfork vhangup vm86 vmsplice wait4 waitid waitpid write writev L ' E j U
p R i : b D C J +
M X J " H
| = 4 + d - A
6
i
1 R C
y ` O h v ;
% { | / o T W J 5
8 D V ^ " 5 p = / z : G
( b 7 T @ q v ~ \ c > H i Z
; J $ &
" o A 3 = \ G
Q l f Q M ) Z
t
g
N
S p 3 & '
| r ` Y 4 . J
m M % ,
\ g \ w I Q
4 $
}
Z < F x r _sysctl access acct add_key adjtimex afs_syscall alarm bdflush brk capget capset chdir chmod chown chroot clock_getres clock_gettime clock_nanosleep clock_settime clone close creat create_module delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_pwait epoll_wait eventfd eventfd2 execve exit exit_group faccessat fadvise64 fallocate fchdir fchmod fchmodat fchown fchownat fcntl fdatasync fgetxattr flistxattr flock fork fremovexattr fsetxattr fstat fstatfs fstatfs64 fsync ftruncate futex futimesat get_kernel_syms get_robust_list getcpu getcwd getdents getegid geteuid getgid getgroups getitimer getpgid getpgrp getpid getpmsg getppid getpriority getresgid getresuid getrlimit getrusage getsid gettid gettimeofday getuid getxattr idle init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioprio_get ioprio_set ipc kexec_load keyctl kill lchown lgetxattr link linkat listxattr llistxattr lremovexattr lseek lsetxattr lstat madvise mincore mkdir mkdirat mknod mknodat mlock mlockall mmap mount mprotect mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msync munlock munlockall munmap nanosleep newfstatat nfsservctl nice open openat pause perf_counter_open personality pipe pipe2 pivot_root poll ppoll prctl pread preadv pselect6 ptrace putpmsg pwrite pwritev query_module quotactl read readahead readdir readlink readlinkat readv reboot remap_file_pages removexattr rename renameat request_key rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield select sendfile set_robust_list set_tid_address setdomainname setfsgid setfsuid setgid setgroups sethostname setitimer setpgid setpriority setregid setresgid setresuid setreuid setrlimit setsid settimeofday setuid setxattr sigaction sigaltstack signal signalfd signalfd4 sigpending sigprocmask sigreturn sigsuspend socketcall splice stat statfs statfs64 swapoff swapon symlink symlinkat sync sync_file_range sysfs sysinfo syslog tee tgkill timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_create timerfd_gettime timerfd_settime times tkill truncate umask umount umount2 uname unlink unlinkat unshare uselib ustat utime utimensat utimes vfork vhangup vmsplice wait4 waitid write writev 3 , Q W y ? y N 1 ^ ? s s c q X 7 : j h z c _ u N X E B y i a 7 % 5 ( + 1 p l ' 2 3 N # @ 8 ] . C J / U N F > U x ] x o f d ` H S i > 8 H M w j f ~ n \ N y - # o C E , 8 n ' W $ ' / N > - # > d ^ _llseek _newselect _sysctl access acct add_key adjtimex afs_syscall alarm bdflush brk capget capset chdir chmod chown chown32 chroot clock_getres clock_gettime clock_nanosleep clock_settime clone close creat create_module delete_module dup dup2 dup3 epoll_create epoll_create1 epoll_ctl epoll_pwait epoll_wait eventfd eventfd2 execve exit exit_group faccessat fadvise64 fadvise64_64 fallocate fchdir fchmod fchmodat fchown fchown32 fchownat fcntl fcntl64 fdatasync fgetxattr flistxattr flock fork fremovexattr fsetxattr fstat fstat64 fstatat fstatfs fstatfs64 fsync ftruncate ftruncate64 futex futimesat get_kernel_syms get_robust_list getcpu getcwd getdents getdents64 getegid getegid32 geteuid geteuid32 getgid getgid32 getgroups getgroups32 getitimer getpgid getpgrp getpid getpmsg getppid getpriority getresgid getresgid32 getresuid getresuid32 getrlimit getrusage getsid gettid gettimeofday getuid getuid32 getxattr idle init_module inotify_add_watch inotify_init inotify_init1 inotify_rm_watch io_cancel io_destroy io_getevents io_setup io_submit ioctl ioperm ioprio_get ioprio_set ipc kexec_load keyctl kill lchown lchown32 lgetxattr link linkat listxattr llistxattr lremovexattr lseek lsetxattr lstat lstat64 madvise mincore mkdir mkdirat mknod mknodat mlock mlockall mmap mmap2 mount mprotect mq_getsetattr mq_notify mq_open mq_timedreceive mq_timedsend mq_unlink mremap msync munlock munlockall munmap nanosleep nfsservctl nice open openat pause perf_counter_open personality pipe pipe2 pivot_root poll ppoll prctl pread preadv pselect6 ptrace putpmsg pwrite pwritev query_module quotactl read readahead readdir readlink readlinkat readv reboot remap_file_pages removexattr rename renameat request_key rmdir rt_sigaction rt_sigpending rt_sigprocmask rt_sigqueueinfo rt_sigreturn rt_sigsuspend rt_sigtimedwait rt_tgsigqueueinfo sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield sendfile sendfile64 set_robust_list set_tid_address setdomainname setfsgid setfsgid32 setfsuid setfsuid32 setgid setgid32 setgroups setgroups32 sethostname setitimer setpgid setpriority setregid setregid32 setresgid setresgid32 setresuid setresuid32 setreuid setreuid32 setrlimit setsid settimeofday setuid setuid32 setxattr sigaction sigaltstack signal signalfd signalfd4 sigpending sigprocmask sigreturn sigsuspend socketcall splice stat stat64 statfs statfs64 stime swapoff swapon symlink symlinkat sync sync_file_range sysfs sysinfo syslog tee tgkill time timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd timerfd_create timerfd_gettime timerfd_settime times tkill truncate truncate64 ugetrlimit umask umount umount2 uname unlink unlinkat unshare uselib ustat utime utimensat utimes vfork vhangup vmsplice wait4 waitid write writev N ? 9 u
G d
j [
D
V
R O @ "
~
* { Z u Q [ s _ V
p N }
6 # , @ 0 q
/
e \ 6 J 8 ; ' d j ? e j r m | - D ] ; ) % p V ] 4
@ b i E / v V D 0 D ! k l
L [
S + h
N
@
/
"
r & w . S F 6 $ D ' O 2 5 * R
z _ ^
l
# | G \
6 d
s
P > ! " ' / 8 D J R X \ c j p v |
% 1 < D M T Y d n x & . 8 > D N Z ` j z & . 5 = E Q [ g q } # . ; D N T [ ` k v z % - 3 ; A I O X ] c n t & 2 : C H O U g s x ~ % , = I P Y e u { 2 A T j | % . 9 @ I S _ k u }
'
3
:
C
M
X
d
n
y
% 2 ? P ^ l t # + 0 8 A I O V ^ d ! 3 | - =
x ) ? J I ? C H 3 D ^ 2 _ * 7 l , d
v # ] + 8 > 2 1 / P i A @ ` L M N p $ # L % 6 e n " ! u % / 5 k & ' ( ) Z { = } 8 [ " T ; m ' P * K 5 M , b 4 N Y U 1 X & . ( O R 7 y . Q J h 9 a G F K B O D C 0 A G I ~ w H f 9 E j c s W S 0 $ : t g ;
B F E + \ : < 4 z
- 6 V > @ o q < r # , 8 > I N R Y ` f l r y ) 5 @ O W ` g l w ! ' 1 A O _ o v # / : A N U ^ j | # - 2 9 @ J U d q w 0 = G N U \ c j p x & . 5 = J S X b k v |
* 8 H Z q " ) 0 6 A J R Y g w " ) 4 A H Q W ^ d k t
-
>
L
Z
b
r
! + % 1 } ~ P Z \ 8 * U ! $ # " ; <
Q [ ] H K I 9 J M O N l k h s $ 4 y o ' n x v a b | 3 7 ` f & > ^ V 2 S
G D F E # " * % ' e ( Y - / R T
) B @ A ( . , { z j t & m r w u q p 6 i C 0 ! ) 5 X
c g d L _ ? W : = # , 8 @ E I P W ] c i p } " * 3 : ? J T ^ h o v ' . 5 > I Q Y ` j t + = J X i s ~
& , 6 < D J X ` f n t | ( / 9 D O Z _ f u & , 3 8 A I Z f m v & = O ^ q
( 8 I W ` i p z & 2 ; E L W ^ c j s {
'
7
G
M
S
\
`
f
m
s
z
~ ( k u r $
, h n ! . $ # "
K L * y P J x ' & 5 _ 7 M 3 1 = > : Q ? m & ) d
X U W V t " % B | ' } ( q D z H e ) A T R S i w v % 6 ; ^ 8 N 0 4 2 / < 9 @ Z \ [ Y ! O G F C
s g ] # I ` + j E - c f { " ' / 8 D J R X \ c j p v | ) 4 < E L Q \ f p } % + 1 ; G M W g w ~ & - : A J O T ` r
' , 3 = H M \ i o y & 3 = D J V ^ i p z
$ / 4 : @ F M R Y b i q x
( 7 G T b r " 5 A H Q \ l | " + 4 > J Q Z d o {
$
5
;
C
J
N
U
Z
g
t
% . 6 = C I S Z ` h m v | ! 3
| - = x ) ? < ; / 3 : * 5 ^ ) _ ! 7 l # d v # ] " + . 2 1 / P i A @ ` L M N p > 6 e n u % & 5 k ' Z { - } 8
[ " T ; m ? * = @ , b A Y U ( X & % ( B R , y . Q J h 9 a G F K B O D C 0 1 9 I ~ w H f E j c 6 s W S ' $ 4 t g
2 8 7 + \ : < 4 z
$ V > 0 o q r % 1 7 ? C J Q W ] c j w # , 3 8 C M W a h o x ' . 5 > F N U _ i q y - > H S ` i s y # + 1 : ? E N \ f n ~ ' , 2 8 > E N U ] d l y # 3 @ N ^ p ( / 8 H X f o x $ - 7 B N X c n u z ' / > N ^ d j s y ! 3 | - = x ) ? F G 8 > C , : ^ + # 7 l d
v ] $ 1 7 i A @ ` M N p D 6 u % ( k ' ! " Z } [ % " K * E . H - I Y U * X & ' ( J 0 y J h 9 a K B O C 0 < B I ~ w H f 2 j c s W S ) $ 3 t g 4 = ? A @ + \ < 4 z
& / V > ; 9 o 5 r " ' / 8 D J R V ] d j p v ~ + 6 > G N S ^ h r & 0 6 @ L R \ l | % / ; E Q [ e l s
# * 5 @ D O V [ b k u z
$ . 6 F S ] d j r } ! ) 6 ? D N V _ j p w - D [ m | ' 0 ; D O V _ i u ! * 4 @ G P Z e q {
"
/
@
N
\
d
s
# , 2 9 ? ! 3 | - = x ) ? F G 8 > C , : ^ + _ # 7 l % d
v ] $ 1 7 2 1 / P i A @ ` L M N p D 6 e u % ( k ' ! " Z } [ " K * E . H - I Y U * X & ' ( J 0 y . Q J h 9 a G F K B O C 0 < B I ~ w H f 2 j c s W S ) $ 3 t g 4
= ? A @ + \ < 4 z
& / V > ; 9 o 5 r a0 a1 a2 a3 arch auid devmajor devminor dir egid euid exit filetype fsgid fsuid gid inode key loginuid msgtype obj_lev_high obj_lev_low obj_role obj_type obj_user path perm pers pid ppid sgid subj_clr subj_role subj_sen subj_type subj_user success suid uid
d e f g h i j k l 1 J P , D g | o T 6 ( ; Z ( , 1 6 ; D J P T Z ^ g o | d e k g l f i j
h UNKNOWN[ ; H( X@ X` | H
X
( ( x @ \ H x
X 8 X (x h h h x8 X x 8 X$ 8' h( h)
x*8
+X
,x
-
.
H0
1
(3 H58 (6P H6h h6 6 6 (7 X7 7 X9$ 9D 9\ :| N ] b 8d xd
Xi4
xiL
id
i|
j
xj
k
k
k o8 8rX sx hs u | ( H4 hL d ؘ 8 ؙ ؚ ( hH d ؠ ( H h , L hl x ؤ X $ < 8` ح H $ < T (l h د ( X4 T Ht ( @ h\ x H H x 8 h4 X x h x $ hH l 8 h4 xT p h ( 8 h, H d ( h h x @ h` (8 T x ( 8 X h @ \ 8 H | p AB
0 AB
F P AB
A l AB
I ( e D F AB
LE p
AB
0 FB
C AB
C AB
PC AB
0 6 AB
D L AB
D h p| AB
FF AB
F z AB
E @ AB
E AB
E AB
E ( AB
E H AB
E h P AB
E 3 AB
F 0U AB
AC AB
F AB
F AB
F ( AB
F H _ AB
II h P AB
IT ` AB
I AB
OE `& AB
F AB
F AB
FI ( 0 AB
F H п AB
F h AB
F 0 AB
F g AB
F pg AB
F d AB
F P AB
F ( p AB
@ P AB
X p AD
p 7 AB
? AB
D 4 AB
P' AB
G AD
FJ AB
F d AB
MF 4 AB
L AB
AF l AB
F AB
I AB
F j AB
E `< AB
AB
KI $ AB
< AB
T AD
l T AB
F @X AB
MF AB
E 0q AB
F > AB
A AB
F ( x AB
FH H ` AB
FH h @H AB
A s AB
F
AB
F AB
OV AB
F P AB
C $ p, AB
< , AD
T ,A AB
E t -_ AB
D `- AB
E . AB
F .5 AB
/ AD
/ AE
@/I AB
B 8
/4 AB
A T
/F AB
P t
0 AB
AF
2 AB
I
5N AB
I
P7 AB
p7 AD
71 AB
7I AB
F < 8o AB
E \ 8 AB
t 8' AG
8& AD
9& AD
09D AB
B 9" AB
F :) AB
:* AB
, ;A AB
MFF P `<A AB
MFF t =v AB
S 0? AB
F B AB
B AD
@B+ AB
pB2 AB
B, AB
,
B3 AB
D
C, AB
\
PC3 AB
t
C* AB
C: AB
D
DG AB
F
PDp AB
E
DI AB
D En AB
GP $ E, AB
BC D G AB
F d pJn AB
E JD AB
D zR | 8 AD
8 <} AG
DD X 9 AB
D t
AD
C c AB
A # AB
A AB
C AB
C ) AB
C , AB
FT P " AB
l " AB
, AB
FT AB
R 8 AB
R ȩ AB
FN ( AB
FT 0 AB
FT T AD
OH x AD
OH AD
OH AD
OH 03 AG
I P( AB
I $ ` AB
C D AB
C d e AB
II , AB
C " AM
0 AB
FT AG
F ` AB
I $ ' AB
D @ 4 AB
FQ d $ AB
47 AB
X7 AB
|7 AB
@ AD
A C AD
A > AB
( e AG
BC L h AB
AG p Te AD
BF u AB
C e AG
BC L AB
AG 8 AB
AG $ AB
AG D AB
AG h AB
AG AB
D l AB
AG XF AB
Fc AB
AG p AB
0 t AB
AG T ` AB
p d AB
AG P AB
T AB
AG @ AB
D AB
AG 0= AB
A 0 T AB
AG T @ AB
* < N e { < p , T'M e 6 s p
Xoh
x x P ( oo ooo< o$o @ ` `0 0 ? P ̯ S 0P د e 01 U : Л D 0z P ò S 0 X @E PT z 0k ٳ [ j M ` p pk PH ϸ `_ ` pp X A pƲ PW F 5 P 2 d h V 0{ в K p 0 ٹ p4 L PB / j D a | T К P= ǵ Ż P~ 3 E @< > 0 `e d d libpthread.so.0 _Jv_RegisterClasses __h_errno_location __errno_location read recvfrom sendto fcntl __gmon_start__ libc.so.6 _IO_stdin_used socket fflush __rawmemchr __printf_chk exit _IO_putc setlocale fopen gai_strerror strsignal strrchr __strdup getpwuid closedir siginterrupt getgrgid inet_ntop strncpy puts __stack_chk_fail putchar fgets_unlocked realloc stdin strftime strtok feof fgets getpwnam calloc strlen getaddrinfo dirname memset strstr getnameinfo strptime poll __fprintf_chk ctime getgrnam stdout fputc strnlen memcpy fclose __strtol_internal malloc umask strcasecmp __strncpy_chk opendir __ctype_b_loc stderr alarm gethostbyname __snprintf_chk getuid setrlimit __strncat_chk __fxstat gethostname fwrite __memcpy_chk localtime strchr __vfprintf_chk mktime __strtok_r fdopen __vsyslog_chk __ctype_toupper_loc __ctype_tolower_loc freeaddrinfo __fsetlocking __xstat uname access strcmp __strtoull_internal __libc_start_main ferror snprintf __strtoul_internal free GLIBC_2.4 GLIBC_2.3 GLIBC_2.1 GLIBC_2.2 GLIBC_2.3.4 GLIBC_2.0 /lib/ld-linux.so.2 ausearch.debug AELF 4 @6 4 ( 4 44 4 44 H1 H1 H1 HH 2 H HH Ptd( (( Qtd 44 HH ! o hh 0 + P 3 ; o H o W PP
( ` xx
i pp d o u XX { (( << HH1 PP1 XX1 ``1 @ 2 pp3 xx3 5 @ @@5 @5 T5 .shstrtab .interp .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink .dynbss .gnu.liblist .gnu.conflict .gnu.prelink_undo 44 HH ! o hh 0 + P o < $$ ; o H o W PP
( ` xx
i pp d o u XX { (( << HH1 PP1 XX1 ``1 @ 2 pp3 xx3 5 @ @@5 LL5 3 6 ! @: T: l ? ! |