ELF>P=@P@8 @@@@ 000eQeQ""к88800hhhDDStd88800PtdQtdRtdк00/lib64/ld-linux-x86-64.so.2 GNUGNU ZxC_c/GNU^ D,^`dCa*.l 92 YHKQA<f^U~a {Y8iA&RMr ?2o >`J/liCYd$&, #z=F"Vg{0@O _ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__cxa_finalize__libc_start_main_audit_syscalladded_audit_permadded_audit_archadded_audit_exeadded_audit_filterfsadded_audit_elfaudit_rule_free_dataaudit_rule_create_dataaudit_openaudit_msgstrdupstrtok_raudit_rule_syscallbyname_datafree__stack_chk_fail__fdelt_chkstrcasecmpaudit_request_status__errno_locationselectaudit_get_replykillstrerrorstrchrstrcmp__asprintf_chkstrstraudit_is_enabledmallocmemcpy__printf_chkaudit_closeaudit_flag_to_nameaudit_action_to_nameaudit_elf_to_machineaudit_operator_to_symbolaudit_detect_machineaudit_field_to_nameputsputcharaudit_errno_to_nameaudit_fstype_to_nameaudit_msg_type_to_nameaudit_machine_to_nameaudit_syscall_to_name__strcat_chk__snprintf_chkauparse_interp_adjust_typeauparse_do_interpretationaudit_uringop_to_nameset_aumessage_modeaudit_add_rule_dataaudit_delete_rule_dataexitaudit_request_rules_list_dataaudit_sendstrlen__xpg_basenameaudit_add_watch_diraudit_name_to_flagoptindopterrgetopt_longaudit_set_loginuid_immutableoptarg__ctype_b_locstrtoulaudit_set_backlog_wait_timeaudit_rule_fieldpair_data__ctype_tolower_locaudit_update_watch_permsaudit_set_rate_limitaudit_request_featuresaudit_trim_subtrees__strncat_chkaudit_set_enabledaudit_set_failureaudit_rule_interfield_comp_datastrncmpaudit_reset_lostaudit_number_to_errmsgaudit_reset_backlog_wait_time_actualaudit_rule_io_uringbyname_dataaudit_set_backlog_limitstderrfwriteaudit_make_equivalentaudit_machine_to_elfaudit_log_user_messagefstatfdopenfgets_unlockedfcloseaudit_can_controlgeteuidlibaudit.so.1libauparse.so.0libc.so.6GLIBC_2.3GLIBC_2.14GLIBC_2.33GLIBC_2.8GLIBC_2.15GLIBC_2.4GLIBC_2.34GLIBC_2.2.5GLIBC_2.3.4   ii  ii ii ui ti 0>= K@^`p  .NW^d_ef`a g0b@c (08@HP X ` hpx !"#$ %(&0'8(@)H*P+X,`-h/p0x123456789:;<=>?@ABCDE F(G0H8I@JHKPLXM`OhPpQxRSTUVWXYZ[\]HHٟHtH5ڜ%ۜhhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXa%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݖD%ՖD%͖D%ŖD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݕD%ՕD%͕D%ŕD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݔD%ՔD%͔D%ŔD%D%D%D%D%D%D%D%DAUI1ATU1uhMeH5oLtwH5oLtdH5oLlUuDH5zg1AX.tكuI}H5RoU8AąL1(Ń=ܓu =̓tI tGŃu!8oH5f1H=AlD]A\A]H=AQ1A6 tI}?H=uD%AH=H=TAsrH5f1H@1I^HHPTE11H=cf.H=YHRH9tHFHt H=)H5"H)HH?HHHtHHtfD=Mu+UH=Ht H=Όd%]wHH=]cewugYhHԓ*x 1Hy1H5Q&ff.@AWAVAHAUATUSHHD-ʑdH%(H$81AA>uAXIHvHl$H"dHHHL|$ hLH1HHt LHH1;HHuH ĒHD$4HT$,H3AH3Q H ueHD$DHT$A$HD$I;]A$ tE$׉$AxIH$E$ B Lpef w"H \HcH>H=UDEHLH5U1Ie;]<@ HHtH@HHFHHtfHH[H}HxHuHȁHŁÁ&Lt$D1H5jUJ5A$ILt$vAlH[JcH>HD$DT$DHEH5T1ZA$HD$Ƅ$L$AA_A9ADD$LE|H5T1DAHE$IEHDMLHH5!V1cHD$D\$DHEH5S1bDuELHH5T19@DFH$A$0DIMLHH5GS1@p,DHED$HD$|$w=DELHH5T1c.fDHD$H|$8DHRL1H|$8Lt$PL-k[A$HD$LLL=RlHH;H,$l$.fDL1LL14HHuH5SR1΃ DA5k~LH5SH1ME$DPA$H5SHE1fDDHtA$E$DHEL~D$,D$D$(H,$H|$8 fH5Q1$A,Dȃ1HE HD8HH9uD$D$,D$(D$UD)DH޿H1DD$D$HU|$(DH$H $H5OH1H5OH1H5HP1p;11L%NE1L-OuA@LDH5P1'DAADD#D tً=l{u0ExDD@HtILHtL1 AfDH5O1HQTH$H5N1yH $HtHQ떉t$,\$D$,D$D$(D$DDH5P1vHD$81HD$ aLߺH5NILߺH5RILߺH5wNIArfD$gD$(8D$,EL$LgR Lߺ D$TD$(L$D$PHD$ Lt$pHD$XHD$HD$hHD$`1L$LLL\$x~Ht$PMDIMLHH5DM1L>L-KL5ML%MfAA%;DD#D tDHt"LHuADL1cDH$H5L1DH $HOHtL1%D;H5LH1DH5LH1DH5LH1DH5LH1gDH5LH1yDDH5LH1V!DiH5LH13DFH5~LH1D#H5nLH1DH5^LH1DH5ILH1rDH54LH1ODH5 LH1a,DtH5 LH1> DQH5KH1D.H5KH1D H5KH1DH5KH1}DH5KH1ZDH5KH1l7DH5KH1ID\H5mKH1&D9H5XKH1DH5EKH1DH51KH1CATu:D%tE)UvsDA\s=t =t1H5>v=s ss11AEEvAEA܅WfD=Fs AE1#ADs=t=stH=uH5J[1/H5pu=r rr11AE2HlJH5E41AYfDtLH,JuPH531AWfH=tH5I_H5t kt{DHH5I1ADVH2H5Ot kudž i qq=qmA dž i mqoq=]qAH=E3=>q;ff.AWAVAUATUSHH $HH $HdH%(H$#1AD$PH\$@1E1HEfHl$HIcL$DD$0HD$ IHD$(HJ D@HD$ HD$HD$HD$@8u11IHD4x1ɺLD~bH$t$9puA$tS=u%=qH$#AUDAA(BH\$ H\$(Ht`HfDH@HD$(Ht*HHD?HD$(HuDHH[H}HH@Hu1H$#dH+%(H$[]A\A]A^A_H$#6؉H5:H1H$# HH|$Hv؉HH5FH1O=fDATIUSHdH%(H$1ZH=6A<$/t?1H5TFTH$dH+%(HĠ[]A\@LpHHHHHH-H5FLHtH5 :1*LHH5:1L}HvA|/HPLHiuD$1%=@@Ǎ|?iLH5o<@1H59%?LHJXDIt$DA|/HHuGfD1H58\fDoAVAUPATAUoSu4H,H~IHtLp,LeHtA[D]A\A]A^fDAEHAătcAE,;Lt3Aąu=t=ktE1[]DA\A]A^fDuNnHtuAE,XfnnAWL=wkAVL5=AUATE1USHXt$ Ll$HckH?~ITD$  H5=E1=ujlBk09(=ktl,q8oh AHD$HdH+%( HXD[]A\A]A^A_L%jMFI$HDP.1L1HD$HL$Ƌ9=il@=ikTjjt<9)=jARH5i91U=jkAHD$@i= A1H|$@H vjH> Ht$@DH=Vk9) H|$@AkRH=yiH5~hbD$a=Kh L%.iMHjLHD$! 1tMD$DD$11H8I H‹w  ar rq HA9wH|$PhD$@DahEH599;L%ehM I$HDP 11LHD$HL$Ƌ]=gt)=gu^uYIE8-t0H5?1g[xiuʀxuhD=f =mft1 4g8"9fD1H52M=g= fH`@H5_@1fff=euN=euBH=fH ee\fD$fDH5a6+H=U'.fffe e f e=eLeM LL%vfLD$LHD$HD$LD$NfHH=LǾT$LD$LD$T$Ht$LH5>1eLRe eLƹLL:ID)e)H51O2 =cf dxf9^f.H=dH 0111H=fcA+d9 AH=dHq01SI11=b CfDbH5cH=MexH9eP j[cumHc4cID8-t0H5;1ccxkuʀxuċcIuH=c:=aD$ L$Dd$ia=LbALǺLD$H5;LD$zILgbH521-b=9a0Dž HcD$R=-Rt!RDAfDHQIH8#tHHHzAHtHHD$HW+HHQLgHLgA~|$DHHmQHIH9l$LJHHv[HLt+HQAHuH DH\DLE1-D!艵A8ܹHT$H5'*H1QH|$ALϵ58莹H5)H)LA螵H5"1L~HHCannot open netlink audit socketWARNING - 32/64 bit syscall mismatch in line %d, you should specify an archWARNING - 32/64 bit syscall mismatch, you should specify an archFailed sending signal to auditd (%s)Failed sending signal to auditd (timeout)The audit system is in immutable mode, no rule changes allowedpid %u rate_limit %u backlog_limit %u lost %u backlog %u Error sending add rule data request (%s)Error sending delete rule data request (%s)usage: auditctl [options] -a Append rule to end of ist with ction -A Add rule at beginning of ist with ction -b Set max number of outstanding audit buffers allowed Default=64 -c Continue through errors in rules -C f=f Compare collected fields if available: Field name, operator(=,!=), field name -d Delete rule from ist with ction l=task,exit,user,exclude,filesystem a=never,always -D Delete all rules and watches -e [0..2] Set enabled flag -f [0..2] Set failure flag 0=silent 1=printk 2=panic -F f=v Build rule: field name, operator(=,!=,<,>,<=, >=,&,&=) value -h Help -i Ignore errors when reading rules from file -k Set filter key on audit rule -l List rules -m text Send a user-space message -p [r|w|x|a] Set permissions filter on watch r=read, w=write, x=execute, a=attribute -q make subtree part of mount point's dir watches -r Set limit in messages/sec (0=none) -R read rules from file -s Report status -S syscall Build rule: syscall name or number --signal Send the specified signal to the daemon -t Trim directory watches -v Version -w Insert watch at -W Remove watch at --loginuid-immutable Make loginuids unchangeable once set --backlog_wait_time Set the kernel backlog_wait_time --reset-lost Reset the lost record counter --reset_backlog_wait_time_actual Reset the actual backlog wait time counterError receiving rules list (%s)The path passed for the watch is too bigThe base name of the path is too bigWarning - relative path notation is not supportedWarning - wildcard notation is not supportedparameter passed without an option givenToo many options for status commandEnable must be 0, 1, or 2 was %sFailure must be 0, 1, or 2 was %sRate must be a numeric value was %sBacklog must be a numeric value was %sWrong number of options for list requestOnly -k or -i options are allowedSyscall auditing requested for task listMultiple rule insert/delete operations are not allowed Append rule - possible is deprecatedError: syscall auditing requested for task listMultiple rule insert/delete operations are not allowedDelete rule - possible is deprecatedError: syscall auditing being added to task listError: syscall auditing being added to user listError: syscall auditing being added to filesystem listError: syscall auditing cannot be put on exclude listList must be given before fieldThe -m option must be only the only option and takes 1 parameterIllegal character in audit eventError - nested rule files not supportedWrong number of options for Delete all requestwatch option can't be given with a syscallkey option needs a watch or syscall given prior to itpermission option needs a watch given prior to itpermission option needs a filterSyscall auditing requested for make equivalentError parsing equivalent partsError converting backlog_wait_timeBacklog_wait_time must be a numeric value was %sOption %s on line %d is invalidhicslDvtC:e:f:r:b:a:A:d:S:F:m:R:w:W:k:p:q:audit rules file %s doesn't existError - %s is not a regular fileThere was an error in line %d of %sYou must be root to run this program.There was an error while processing parametersreset_backlog_wait_time_actual,TERMstopHUPreloadUSR1rotateUSR2resumeCONTstate%s is an unsupported signalThe audit system is disabledAuditd is not runningalwaysneverpossiblesilentprintkpanicunknowndisableenabledenabled+immutableunlockedNo rules-a %s,%s -F arch%s0x%X -F arch%sb64 -F arch%sb32 -F arch%s%s -S -F %s%s%d -F %s%s%s -F %s%s%.*s-w %.*s -F path=%.*s -F dir=%.*s -F exe=%.*s -k %s -F key=%swa -p %s -F perm=%s -F %s%s%u -C uid%sobj_uid -C gid%sobj_gid -C euid%sobj_uid -C egid%sobj_gid -C auid%sobj_uid -C suid%sobj_uid -C sgid%sobj_gid -C fsuid%sobj_uid -C fsgid%sobj_gid -C uid%sauid -C uid%seuid -C uid%sfsuid -C uid%ssuid -C auid%sfsuid -C auid%ssuid -C auid%seuid -C euid%ssuid -C euid%sfsuid -C suid%sfsuid -C gid%segid -C gid%sfsgid -C gid%ssgid -C egid%sfsgid -C egid%ssgid -C sgid%sfsgid -F %s%s0x%X -F %s%s-%s -F %s%sunset f%d%s%denabled %s failure %s enabled %u failure %u backlog_wait_time %u backlog_wait_time_actual %u loginuid_immutable %u %s Unknown: type=%d, len=%d -S allNLMSG_ERROR %d (%s) Rule existsError - no list specifiedError deleting rule (%s)The path must start with '/'..Only -i option is allowedThe audit system is disabled Error converting rateError converting backlogtaskAppend rule - bad keyword %sAdd rule - bad keyword %sDelete rule - bad keyword %sio_uring op unknown: %sError detecting machine typeError looking up elf type %dSyscall name unknown: %sElf type unknown: 0x%xarch=key=text=%sCan't create user eventOnly the -k option is allowedwatch option needs a pathkey option needs a valuekey option exceeds size limitkey %s has illegal characterpermission %s is too longPermission %c isn't supported3.1.2auditctl version %s lost: %ubacklog_wait_time_actual: %uOption %s is invalidOut of memory adding keyError opening %s (%s)Error fstat'ing %s (%s)rmError - fdopen failed (%s)auditctl--help-h-l-Rloginuid-immutablebacklog_wait_timereset-lost-̤n6Ŭ .Qtݭ#FiҮ;^ǯ @y(@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@=@(@:@@@@@@@@@@@@@@@@@@@@@@@XppP@@Ҿܿ@@h@.;,̇\\L,0l̖,ld̘\$@||zRx &D$4PFJ w?:*3$"\Ȇt0D D LBBH B(A0A8G l 8A0A(B BBBC LNBBB A(A0G L@LH^ 0D(A BBBH 0XBB D O$PԔ\A^ A ^ B PHx =BBB B(A0A8D` 8A0A(B BBBH ZDg A 8DBED A(L0[ (A ABBG dBBB B(A0A8G L@LI} 8A0A(B BBBH IfIHIAIBv H TBBB B(A0A8G L@LH 8A0A(B BBBA 0BDA Ga  AABE L,ȱHBE G(G0z (D BBBG G (A EBBG \|BII B(D0A8F5 8D0A(B BBBA NSBLBBB B(A0A8G L2} 8D0A(B BBBA ,,FGA : BBA 0>=z 0 Xo   X`8( ooooo00@0P0`0p00000000011 101@1P1`1p11111111122 202@2P2`2p22222222233 303@3P3`3p33333333344 404@4P4`4p44444444455 505@5P5`5p55555K^pauditctl-3.1.2-2.el9.x86_64.debugvV7zXZִF!t/7]?Eh=ڊ2NaSJem)& NL )y.i|EPR#v>Z|/ni}~ڬY;s}lHDsvv~4RxVZ`쵸_/jRf,o,!5Xglj,[e2{;jX2O\Š4fЬ!Z3uer.Bl h*}ZVM"/ A$<ۀ̭WvuL]nSHD}\LOmO^ =[KNf` mqh&&hCL$wfoPѵ21 Xqj?#t*څ+O];n8&\k"fW݉%H995?XR#yP>+>+ qQMھTPHFaiVұxL' % |pķ4 kO_QEhvz FDVBw}Z溔ʍUen1PfbVਢ,<ThgnRLQbzZqt4DLmM|J~ET7`gaXvF,=xZ Al>NT.H|L6Pυxڙ2:B"#VkQA6 &ZtnOmP3Đ4f m}=F+YiXBۓdF÷`ov{}]CQBB9gFXFKS4SHK/bBrV4,w1NSi`Uu[5z0_/1i6b =P|z nec3T|H ,Dnָ_QN7ooSr8?ïf$Sߴͤb2LKk]"E^ 4jо|y{ڼٝǠl:@\e | .pƒ#r7*F2kN\UL2JME 9kT&˽= &QUgYZ.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata 880&hh$9 GoLQ  Y aono}88(B``X00 0 055P;P;FXX \кغ  ( ((