F_ADD_SEALSF_CANCELLKF_DUPFDF_DUPFD_CLOEXECF_GETFDF_GETFLF_GETLEASEF_GETLKF_GETLK64F_GETOWNF_GETOWNER_UIDSF_GETOWN_EXF_GETPIPE_SZF_GETSIGF_GET_FILE_RW_HINTF_GET_RW_HINTF_GET_SEALSF_NOTIFYF_SETFDF_SETFLF_SETLEASEF_SETLKF_SETLK64F_SETLKWF_SETLKW64F_SETOWNF_SETOWN_EXF_SETPIPE_SZF_SETSIGF_SET_FILE_RW_HINTF_SET_RW_HINT�X c�/�]�?��z��F��g��~��������;�%q�l�M6��v����algappletalkashatmpvcatmsvcax25bluetoothbridgecaifcandecneteconetieee802154inetinet6ipxirdaisdniucvkcmkeyllclocalmctpnetbeuinetlinknetromnfcpacketphonetpppoxqipcrtrrdsroserxrpcsecuritysmcsnatipcvsockwanpipex25xdpEPOLL_CTL_ADDEPOLL_CTL_DELEPOLL_CTL_MODVWK �@J��.� �� @<�;�{� �@��r(`CLONE_CHILD_CLEARTIDCLONE_CHILD_SETTIDCLONE_CLEAR_SIGHANDCLONE_DETACHEDCLONE_FILESCLONE_FSCLONE_INTO_CGROUPCLONE_IOCLONE_NEWIPCCLONE_NEWNETCLONE_NEWNSCLONE_NEWPIDCLONE_NEWUSERCLONE_NEWUTSCLONE_PARENTCLONE_PARENT_SETTIDCLONE_PTRACECLONE_SETTLSCLONE_SIGHANDCLONE_STOPPEDCLONE_SYSVSEMCLONE_THREADCLONE_UNTRACEDCLONE_VFORKCLONE_VMJP]mt������{�;d0YO'Fn{��������%�37audit_controlaudit_readaudit_writeblock_suspendbpfcheckpoint_restorechowndac_overridedac_read_searchfownerfsetidipc_lockipc_ownerkillleaselinux_immutablemac_adminmac_overridemknodnet_adminnet_bind_servicenet_broadcastnet_rawperfmonsetfcapsetgidsetpcapsetuidsys_adminsys_bootsys_chrootsys_modulesys_nicesys_pacctsys_ptracesys_rawiosys_resourcesys_timesys_tty_configsyslogwake_alarmmsg=(none)(null)key0123456789ABCDEF"%s"archsyscalluring_opa0a1cwdavcseresultsepermsAUPARSE_DEBUGNo memory %s.%dNo log file exists!=rmfam=lport=laddr=���p�����P�����P������� $�� $�� $���#���#��@!��@!���#�� < <=>=>=The directory name: %s is too short - line %dThe file name: %s is too short - line %dValue %s should only be numbers - line %dError converting string to a number (%s) - line %dlibauparse: Permission denied opening config file, using defaultsError opening config file (%s)Config file %s doesn't exist, skippingMissing equal sign for line %d in %sWrong number of arguments for line %d in %sNot processing any more lines in %sSkipping line %d in %s: too longCould not open dir %s (%s)Unable to open %s (%s)/var/log/audit/audit.loglog_file/etc/audit/auditd.confError - fdopen failed (%s)end_of_event_timeoutPRESERVE_HEAD [%salloc_size=%zu alloc_ptr=%p offset=%zu beg=%p len=%zu max_len=%zu flags=[Out of memoryTerminating delimiter missingDelimited string too longToken too longts:%jd.%u:%uts:%jd.%uts:0123456789.regexpRegexp expected, got `%.*s'Invalid regexp: %stimestamprecord_typetimestamp_exValue expected, got `%.*s'Invalid record type `%.*s'Operator expected, got `%.*s'Unexpected token `%.*s'Empty expressionUnknown escape sequence ``\%c''Invalid timestamp value `%.*s'Right paren expected, got `%.*s'Field name expected after field escapeUnknown escaped field name `%.*s'Field `%s' does not support value comparisonError converting number `%.*s'Unexpected trailing token `%.*s'z8��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;���9���8��4;��4;��4;���9��4;���9��;��4;��4;��4;��4;��4;���8��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;���:���:��:��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��8:��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��4;��Q:��4;��4;��4;��4;��4;��4;��4;��4;���:��4;��4;��4;��4;��4;��4;��4;��4;��4;��W8���<��=��=���<���<���<���<���<���<���<���<���<���<���<���<���G���G��H��TH��TH��lH��lH���H���H���H���H���H���H���G���G���G��dG��zI���I���I��xI��prog-idnl-mcgrpexe/usr/bin/python/usr/bin/sh/usr/bin/bash/usr/bin/perlcommunknown-acctprivileged-acctunset-acctservice-acctuser-acctsesnametypePARENTinodesubjaudit_enabledaudit_pidaudit_backlog_limitaudit_failureactionsunitnew-levelselected-contextterminalcmddataswvmresrcprinterboolenforcinghostnamea2killed-list-of-pidskilled-pidallocated-memoryallocated-memory-inunloaded-bpf-programconnectedconnected-todisconnected-fromtriggered-unknown-audit-ruletriggered-audit-ruleopened-filechanged-file-attributes-ofchanged-file-permissions-ofchanged-file-ownership-ofunloaded-kernel-modulecreated-directoryrenamedchecked-metadata-ofsymlinkedunmounteddeletedchanged-timestamp-ofexecutedaccepted-connection-frombound-socketreceived-fromsent-tocaused-mac-policy-errorloaded-firewall-rule-tochanged-identity-ofchanged-system-timemade-character-devicemade-block-devicemake-devicechanged-system-nameadjusted-scheduling-policy-ofsuccessppidttyfsetxattrfchowntabledevpromLOADconnectadd_ruleadded-audit-ruleremove_ruledeleted-audit-rulefeaturecodesigold-auidsystemscontexttcontextauditdinitsignalunlbl_acceptnlbl_domainrportsw_typeroot_diruuidkey_enforcegpg_resentered-promiscuous-mode-on-deviceleft-promiscuous-mode-on-devicechecked-filesystem-metadata-ofaccessed-policy-controlled-fileaccessed-mac-policy-controlled-objectis-allowing-unlabeled-network-trafficis-disallowing-unlabeled-network-trafficn���i��Ki���h���g��l���g���g��yg��<g��g���f���f��{f��Nf��f��f���e���e���e���e��e��n��Jl��&k��gk���j���j���l���c���c��}m��@c���d��c���b���b��n��m���k��TTYanomalyanomaly-responseaudit-daemonaudit-ruleav-decisionbpf-programconfigurationcryptodac-decisiongroup-changeintegritymacmac-decisionsystem-servicesunknownuser-accountuser-loginuser-spacevirt�W5M(\���m������a�vF�accountadmin-defined-ruleaudit-configblock-devicecharacter-devicedevicedirectoryfifofilefile-systemfirewallkeystrokesmac-configmemoryprinterprocessservicesocketsoftwaresymlinksystemunknownuser-sessionvirtual-machine #