ELF>+@@8 @@@@hh      DDStd PtdxxxQtdRtd  /lib64/ld-linux-x86-64.so.2GNUGNUGNUqxi{Qo.KTZ "PA @Z^cBEC`|*qX.l 92 YHKQ)gJ 4-k]><j$zru[UOF6@+ d0R)Kdzp_rSp: *5)= "C>l    T s  "     v libaudit.so.1_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable_audit_elfaudit_sendaudit_openaudit_set_loginuid_immutableaudit_set_enabledaudit_rule_create_dataaudit_number_to_errmsgaudit_detect_machine_audit_exeaddedaudit_rule_syscallbyname_dataaudit_msgaudit_machine_to_elfaudit_msg_type_to_nameaudit_can_controlaudit_elf_to_machineaudit_syscall_to_nameaudit_is_enabledaudit_set_rate_limitaudit_set_backlog_limit_audit_syscalladdedaudit_add_watch_diraudit_make_equivalentaudit_rule_fieldpair_dataaudit_closeaudit_errno_to_nameaudit_add_rule_dataaudit_request_rules_list_dataaudit_log_user_message_audit_permaddedaudit_field_to_nameaudit_update_watch_permsaudit_fstype_to_nameaudit_request_status_audit_filterfsaddedaudit_reset_backlog_wait_time_actualaudit_action_to_nameaudit_reset_lostaudit_rule_free_dataaudit_set_failure_audit_archaddedaudit_request_featuresaudit_set_backlog_wait_timeaudit_rule_interfield_comp_dataaudit_machine_to_nameaudit_trim_subtreesaudit_get_replyaudit_operator_to_symbolaudit_flag_to_nameset_aumessage_modeaudit_delete_rule_datalibauparse.so.0auparse_do_interpretationauparse_interp_adjust_typelibcap-ng.so.0libc.so.6__xpg_basename__printf_chkexitoptind__fdelt_chkputs__stack_chk_failputcharfgets_unlockedselectkillstrdupstrlenstrstr__errno_locationstrtok_rmemcpyfclosestrtoulmallocstrcasecmp__ctype_b_locoptargstderr__snprintf_chkgetopt_long__strncat_chk__fxstatfwritegeteuidstrchrfdopen__ctype_tolower_loc__cxa_finalize__xstatopterr__strcat_chkstrcmpstrerror__asprintf_chk__libc_start_mainfree_edata__bss_start_endGLIBC_2.3GLIBC_2.14GLIBC_2.8GLIBC_2.15GLIBC_2.4GLIBC_2.2.5GLIBC_2.3.4ii ii ii ui ti  , ,  v@ v` v  r؟  ' , L S [ c \ d e ^ ` f a b0 8 @ H P X ` h p  x          ȝ Н ؝           ( !0 "8 #@ $H %P &X (` )h *p +x - . / 0 1 2 3 4 5 6Ȟ 7О 8؞ 9 : ; < = > ? @ A B( C0 D8 E@ FH GP HX I` Jh Kp Mx N O P Q R S T U V Wȟ XП YHHa HtH5z} %{} hhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShT%%x D%x D%x D% x D%x D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%w D%}w D%uw D%mw D%ew D%]w D%Uw D%Mw D%Ew D%=w D%5w D%-w D%%w D%w D%w D% w D%w D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%v D%}v D%uv D%mv D%ev D%]v D%Uv D%Mv D%Ev D%=v D%5v D%-v D%%v D%v D%v D% v D%v D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u D%u DATI1U1SRuhI\$H5LHtsH5LHt`H5KHuu@H5 _1yOtڃuI|$H5Kut{\Åu]L1Ńt7=t u =t tvt Åt H=u []A\H=u 1%t z ÅtI|$(H=u uu H=Lf.1I^HHPTLFH FH=8s H=t Ht H9tHs Ht H=t H5t H)HHH?HHtHus HtfD=t u+UH=Rs Ht H=>n )det ]wAUATUSHH $HH $HdH%(H$#1H\$HHHc=r E1HL$Mr  2?)HH T1DH$HD$D8uxr 11IHލxfxڋ=\r 1ɺL~9$uH$#t5+r L0tAt@AA'bH$#dH3%(uH#[]A\A]ff.H=q 1҅ H@r qHDAVAUATUSHH $HH $HdH%(H$#1H\$IHHHc=;q -0q H5CLL?)ѺHH TcH5CLLAgŃ E1HL$fDH$HD$D 8up 11IHލx~xڋ=tp 1ɺL~)$t=AA(rH5G1RH$#dH3%(_H#[]A\A]A^H5BL:H5uBL#H5cBL AfH$#FAAH$#x tJD28H5EH1_A 1H5A17A LH5A1f+8oH5{A1DHIH=AHu ADH=\AHu AH=9AHt3H=!AHuA!o @Aù H=@Hu AfHH=n n an _n un gn In On Qm Cm 5m kn ]n h#HDn m x 1Hl y1H5D&ff.@AWAAVAUATUSHHD-m dH%(H$81AA>xA[HIHvHl$H5?HHH\$ kHH1HHt+L%T?HLH13HHuH5,m HSH HD$,H3VH3F H uZHCHSH3FH3V$H uEHC HS(H3F,H3V4H u0HC0HS8H3F;/tA1H5:H$dH3 %(HĠ[]A\fDHHHH=HI2I5H5X:HHtH5I1*H!HH5I1HHv|/HPHHiuD$1%=@@Ǎ|?iHH5ug x1H5H]?HcHBPDHs@D|/HHu?1H5OHRff.HH=8HuZe DH=8Hu-e  H=8Hff.AUI,ATUHSHFHtL`,HL-HtH[]A\A]HtP,A}t3LuA}t1=hd tH[]A\A]LLLHt,vfAWL=e AVAUIATE1USHNHXt$Lt$D=zc  =fc  H=Id HJc 8c  d AC D="c -D=c =d td W8oAH\$HdH3%(DrHX[]A\A]A^A_fH=c H9H|$H|$HHDPH|$H|$11HD$LHL$=Gb Z=*b ZL%c H55LH b  H5Fa H5b H=b Hb P jcb fDuCHc6b H=E5It|b IuL= a Aą&;a b `  La H=5L ILa fDH5DW/aa 5a H91H5oC}=a -?H= a HH|$.H|$HHDPuH|$]H|$11HD$HL$ =_ 8H` Ht]H=N3H€ H=2H€ H=KH€ HH5BhH=i7=_ =` !`  AHD$@^ \ Ӄ1H|$@H Q` HK Ht$@H=_ % H|$@A@_ 4_ G9=_ G A_^ ^ _ ^  =^  L^ MpLLD$LD$H i_ 1H! tE€DHqHDΉ@HL)H1EHHP LǾDL$LD$LD$DL$Ht!LH521EL ^ r^ E LƹLwH^ H!%tDHJHDщDH) ^ ] H=] ] H5\ zSA] ,] ] 0H!] Ht]H=/H€eH=.H€FH=HH€'HH5M?D1H=\ H H|$H|$HHDP H|$H|$11HD$LHL$ S =G[ 0U="[ L%\ M. L8 1tMD$DD$11HI HNjr  w x8 HA9wH=[ f[ A5J[  H5B1-[ @9E3S H5@fD="Z H/H5/1Z f =Z u6u1IuH=<- Z =Y O=yY tG4Z 8U >9C1H5A@1mH=Z H: X X Y MAE*@L%Y H5+LHiY [H5=fX |Y D$kX %#  qY  D\$Eu*f ljD$T$ X HX ,HHT$HHT$HHbHHD$HAHD$@H5*HHD$HDd$ Ld$l$$HLl$($LH5*1HHH=X HAŅtHDd$ l$$Ll$(EH|$L$SL$]9W DT$E!=V H5W |$fDAW 9 AA@=V ] HcL$1f.H5=I@11H=U W_f.11Hd=nU /|f.zV qV H5-U L)pH591A5V V 8H5T L  T (fH5*1HD$@jT ƒ=EH5!'1Abf.H5 *\@LH=>U H*U P jWpT @H591H5Q8k@H58[@8o#H T H= '3T ABS ` T T$9L$}NL T H5'LLD$Ht.HcL$H='LD$T$It H5O91 fDR ЃE=R pH5Q:f1BS U9ZH=>R >H59@H5 >LL$LD$L$LD$H=#S H1LH5E'R bfau;DHt$@TH|$@D@1H5&7R EDH5X&Q 9=R =R ADDd$ l$$Ll$(HcQ H=:$ItuQ H54NHaQ H5$WQ H5$1?HcQ ItHtH=!$uaQ IuH=Q g91H5c$H|$P pH5$DHH5u3H5151AHH581WHH5U3H5Y51AbH551AaDH|$BH5O H5"1'H56H5#H5;71AH55gH541AH5#=H5E"1AH9O ,HHxHhq,H}H[=N HHfDH5A1H N t!<!H Hu1H|$@H`"[W=M E1E1jHT$P1ɾAXAYH|$@JH5#1AbHN H5!_H521AN1HM H5$!.H511AHM H5 1H5 5tH531AH5h!LH5 AH5 1AwuAbH5 1AcFH5=M ="M uSHsHtVHtHt#t.HSuH[@C HfDC\HfD[fDAWAVAUATUSHH $H1H|$IdH%(H$1yeD ADALH5!H1DH$dH3%(DH[]A\A]A^A_HT$ ƿ5|$<D$8*%=8H5 (HD$H,AH$@HT$HHu HHt$HC@ u@HP tH݋EH!ကtDHEHDHH11H)@u'DOHH1@@\u݄GƄ1HT$H521ZHT$H521A0@@ uGƄ1eDHIH$8#H1ҽHxAHAH5AL`L`HD$H0DA9v#LIM|$1IHuI$AąL|$DL.LtWhŃuI8oHL$1DH51X=MI =/H1H$#H|$ HH|$*1a>fDLf.@AVAUATUSHdH%(HD$1GH1E1I,@H |tw HI9] %=uË 1LN-H5/xrL4$H5C LHu_LR뉁izpqH9]{1Ht$dH34%(u*H[]A\A]A^fE1L=5C t fDfH=B B vfDAWAVAUATUSHdH%(H$1,B H~~FHEڿH5015B 1H$dH34%(Hĸ[]A\A]A^A_tȃuH0#1ۋ8DH0#H5/H1#A )A H=,Wf.=A H0#fH0# @ BR H +t H {+tH {+Hz+HEH+t Hk+tHm+HN+HEH5#.1H0#HH5.DHD@HP @P1zXZH0#H5.P$1[}<H0#H5-P(14H=? H? H@L8AwA?FFI E1M"t %iuVHI9tjuHAI9uD$E^ fDAAHIHٿH5*H1@AGDl$<1L%#*@HA9_A % uE A DD5&> x+AŅD59> E-= H5)H1pDl$<D$AAƃt$8QD$8:IG IDHH9 8t111AL-=fLH5)1ރDAT tދ== u7ExDHtYHtLH5(1@AfDH5{(1eH*TfHD$H5N(18HL$HtH*Dt$8l$D$AwH$11HD$ HD$HD$PHD$0HD$(cDADDT$M/DT$MLHH5'1EA HfHA9_"A AƉD$AA tE DfAxIHE A AAF DAizAkApA Aj7Af%AoA8DA AHED$ HD$ |$w=:  DDT$DT$LH5(H1EV H=: H)H=: 1fDE DA H5C(HE1bfDȾHA 貾DIǿMLHH5%1fDD\$I/DEu+H5%1hA HH5{%1=DDT$I/EuH5d%1fDED$8D$D$DݺH5"H1跼2D躺H5"H1蔼D藺H5y"H1qDtH5H"H1NDQH5"H1+D.H5!H1D H5!H1`DH5!H1»=DŹH5M!H1蟻D袹H5!H1|DH5 H1YD\H5 H16D9H5 H1DH5S H1kDH5" H1ͺHDиH5H1誺%D譸H5H1臺D芸H5H1dDgH5PH1ADDH5H1D!H5H1vDH5H1عSD۷H5|H1赹0D踷H5HH1蒹 D蕷H5H1of.1H|$HDѾM/Hwݷ5H|$HA HT$(H5TH脷Ht_Dd$Ll$(,H5[11LH5LHt'HEuH511輸f.H|$H&!HD$0fDH51}D$?D$8PDD1)E DHHD$`EW7LD$LH5MH1 @HD$H1DHA  XUHSHHtfH>HfDH9u;HH] H6HuHE;t4HH[]f.HEHH[]HHu1HH[]@SHtfH=/ Hf.H9u;HH/ H裴HuH/ ;t*H[fH/ H[ÐH/ Hu1H[f.AWIAVIAUAATL%( UH-( SL)H'Ht1LLDAHH9uH[]A\A]A^A_ff.HHTERMHUPUSR1USR2CONT%s is an unsupported signalThe audit system is disabledAuditd is not runningexittaskuserexcludefilesystem,Rule existsError - no list specifiedThe path must start with '/'..alwaysneverpossible-iOnly -i option is allowedThe audit system is disabled 0Error converting rateError converting backlog-kAppend rule - bad keyword %sAdd rule - bad keyword %sDelete rule - bad keyword %sError detecting machine typeError looking up elf type %dSyscall name unknown: %sElf type unknown: 0x%xarch=-tkey=text=%sCan't create user eventOnly the -k option is allowedwatch option needs a pathkey option needs a valuekey option exceeds size limitkey %s has illegal characterpermission %s is too longPermission %c isn't supported3.0.7auditctl version %s lost: %ubacklog_wait_time_actual: %uOption %s is invalidOut of memory adding keyError opening %s (%s)Error fstat'ing %s (%s)Error - %s is world writablermError - fdopen failed (%s)auditctl--help-h-l-Rloginuid-immutablebacklog_wait_timereset-lostFailed sending signal to auditd (%s)Failed sending signal to auditd (timeout)Cannot open netlink audit socketWARNING - 32/64 bit syscall mismatch in line %d, you should specify an archWARNING - 32/64 bit syscall mismatch, you should specify an archError sending add rule data request (%s)Error sending delete rule data request (%s)usage: auditctl [options] -a Append rule to end of ist with ction -A Add rule at beginning of ist with ction -b Set max number of outstanding audit buffers allowed Default=64 -c Continue through errors in rules -C f=f Compare collected fields if available: Field name, operator(=,!=), field name -d Delete rule from ist with ction l=task,exit,user,exclude,filesystem a=never,always -D Delete all rules and watches -e [0..2] Set enabled flag -f [0..2] Set failure flag 0=silent 1=printk 2=panic -F f=v Build rule: field name, operator(=,!=,<,>,<=, >=,&,&=) value -h Help -i Ignore errors when reading rules from file -k Set filter key on audit rule -l List rules -m text Send a user-space message -p [r|w|x|a] Set permissions filter on watch r=read, w=write, x=execute, a=attribute -q make subtree part of mount point's dir watches -r Set limit in messages/sec (0=none) -R read rules from file -s Report status -S syscall Build rule: syscall name or number --signal Send the specified signal to the daemon -t Trim directory watches -v Version -w Insert watch at -W Remove watch at --loginuid-immutable Make loginuids unchangeable once set --backlog_wait_time Set the kernel backlog_wait_time --reset-lost Reset the lost record counter --reset_backlog_wait_time_actual Reset the actual backlog wait time counterThe audit system is in immutable mode, no rule changes allowedThe path passed for the watch is too bigThe base name of the path is too bigWarning - relative path notation is not supportedWarning - wildcard notation is not supportedparameter passed without an option givenToo many options for status commandEnable must be 0, 1, or 2 was %sFailure must be 0, 1, or 2 was %sRate must be a numeric value was %sBacklog must be a numeric value was %sWrong number of options for list requestOnly -k or -i options are allowedSyscall auditing requested for task listMultiple rule insert/delete operations are not allowed Append rule - possible is deprecatedError: syscall auditing requested for task listMultiple rule insert/delete operations are not allowedDelete rule - possible is deprecatedError: syscall auditing being added to task listError: syscall auditing being added to user listError: syscall auditing being added to filesystem listError: syscall auditing cannot be put on exclude listList must be given before fieldThe -m option must be only the only option and takes 1 parameterIllegal character in audit eventError - nested rule files not supportedWrong number of options for Delete all requestwatch option can't be given with a syscallkey option needs a watch or syscall given prior to itpermission option needs a watch given prior to itpermission option needs a filterSyscall auditing requested for make equivalentError parsing equivalent partsError converting backlog_wait_timeBacklog_wait_time must be a numeric value was %sOption %s on line %d is invalidhicslDvtC:e:f:r:b:a:A:d:S:F:m:R:w:W:k:p:q:audit rules file %s doesn't existError - %s isn't owned by rootError - %s is not a regular fileThere was an error in line %d of %sYou must be root to run this program.reset_backlog_wait_time_actualвеpؿسx`ؼ H8PȶȷXȺxHлpError receiving rules list (%s)Error deleting rule (%s)silentprintkpanicunknowndisableenabledenabled+immutableunlockedNo rules-a %s,%s -F arch%s0x%X -F arch%sb64 -F arch%sb32 -F arch%s%s -S -F %s%s%d -F %s%s%s -F %s%s%.*s-w %.*s -F path=%.*s -F dir=%.*s -F exe=%.*s -k %s -F key=%swa -p %s -F perm=%s -F %s%s%u -C uid%sobj_uid -C gid%sobj_gid -C euid%sobj_uid -C egid%sobj_gid -C auid%sobj_uid -C suid%sobj_uid -C sgid%sobj_gid -C fsuid%sobj_uid -C fsgid%sobj_gid -C uid%sauid -C uid%seuid -C uid%sfsuid -C uid%ssuid -C auid%sfsuid -C auid%ssuid -C auid%seuid -C euid%ssuid -C euid%sfsuid -C suid%sfsuid -C gid%segid -C gid%sfsgid -C gid%ssgid -C egid%sfsgid -C egid%ssgid -C sgid%sfsgid -F %s%s0x%X -F %s%s-%s -F %s%sunset f%d%s%dNLMSG_ERROR %d (%s) enabled %s failure %s enabled %u failure %u backlog_wait_time %u backlog_wait_time_actual %u loginuid_immutable %u %s Unknown: type=%d, len=%d -S allpid %u rate_limit %u backlog_limit %u lost %u backlog %u 0#tQ. \9gD!;!(Hpؙ`x0hȝ@TȢp,@hH( p zRx @/D$4؍`FJ w?:*3$"\PDtؚTBBA A(G L@LH# (A ABBA ;DW E XLBBB A(A0G L@LHw 0A(A BBBA ,@D D L\PBEB B(A0A8G o 8A0A(B BBBC Ar E XDe A 0BAA J_  AABG ԦL,PBJA D(D0l (A ABBI B (A ABBH \|Ч=BIB E(D0C8KO 8A0A(B BBBC NSBjEz I aLtBBB B(A0A8G L2 8A0A(B BBBA ,LpFFE  ABA | )$80FED A(L0X (A ABBF (SFDA jA\T4FBB B(A0A8G L@LH 8A0A(B BBBJ @)BBB A(A0D@ 0A(A BBBJ `XFBB B(A0A8G 8A0A(B BBBI ^HA<\EDD C DAK K DAH NDA$`EQ J N B RDeFEE E(H0H8G@n8A0A(B BBB ,, j x r  o08    X( ooooo   0 @ P ` p !! !0!@!P!`!p!!!!!!!!!"" "0"@"P"`"p"""""""""## #0#@#P#`#p#########$$ $0$@$P$`$p$$$$$$$$$vvvrGA$3a1x, GA$3p1113P*rGA*GA$annobin gcc 8.5.0 20210514GA$plugin name: annobinGA$running gcc 8.5.0 20210514GA*GA! GA*FORTIFYGA+GLIBCXX_ASSERTIONS GA*GOW*GA*cf_protectionGA+omit_frame_pointerGA+stack_clashGA!stack_realignGA*P*"]GA$3a1 ,rGA*YrGA$annobin gcc 8.5.0 20210514GA$running gcc 8.5.0 20210514GA*GA! GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*cf_protectionGA+omit_frame_pointerGA+stack_clashGA!stack_realign GA$3p1113YpGA$plugin name: annobinGA* GA*GOW*GA*qr GA$3p1094 rrGA$plugin name: gcc-annobinGA* GA*GOW* GA*FORTIFY,rGA+GLIBCXX_ASSERTIONS GA*FORTIFYYrGA+GLIBCXX_ASSERTIONSauditctl-3.0.7-5.el8.x86_64.debug8>7zXZִF!t/]?Eh=ڊ2N }՗bԲx"@YLX/mufL3+CKXCKhТրۘj}l gn&&MGXHնEX)k,ɉcM*D+Y]mIG[uNf; 97i(* r;D)A8B 6wss(R#g՛GY :TvX@BZ)WYv-g CepD# 1F2&HvNhޫ]OLO\ Df+Ӌt76bJkp)1dj~uZ"E+BkƱVײ@ZTT;D"像)Gd%-[(le1Z#m.2U[#Bv7;[ 8)gH*.9a?LY;geMGk1 +y#iAM@Sl4$7%tmI[e pD hqۙV[F8vf.-̩H"3} "\[з+,<˖($,~d;l:5)ώvfyDUv2lIZb`QUz)˄ d~H)l,/DVB!Q/DqЀ)6r]]EɕyKH^Vp'9?u3 b[pgЬLCphlGY8|Ө