ELF>u%@@8 @@@@888||  `   TTTDDPtdPPPQtdRtd xx/lib64/ld-linux-x86-64.so.2GNU GNUn%Rb%nqRb A@ bdgBE| qXb,& 9BY0`lqc.n tu" GT ) $M?2`iK X7Z$} Q" F[1 D I 8  `flibauparse.so.0audit_detect_machine_ITM_deregisterTMCloneTableaudit_msg_type_to_nameaudit_flag_to_nameaudit_elf_to_machineaudit_syscall_to_name__gmon_start___Jv_RegisterClasses_ITM_registerTMCloneTableaudit_machine_to_nameaudit_errno_to_name_finiauparse_do_interpretation_initauparse_interp_adjust_typelibaudit.so.1_audit_elfaudit_sendaudit_openaudit_set_loginuid_immutableaudit_set_enabledaudit_number_to_errmsg_audit_exeaddedaudit_rule_syscallbyname_dataaudit_msgaudit_machine_to_elfaudit_can_controlaudit_is_enabledaudit_set_rate_limitaudit_set_backlog_limitaudit_strsplit_audit_syscalladdedaudit_add_watch_diraudit_make_equivalentaudit_rule_fieldpair_dataaudit_closeaudit_add_rule_dataaudit_request_rules_list_dataaudit_log_user_message_audit_permaddedaudit_field_to_nameaudit_update_watch_permsaudit_fstype_to_nameaudit_request_status_audit_filterfsaddedaudit_action_to_nameaudit_reset_lostaudit_set_failure_audit_archaddedaudit_request_featuresaudit_rule_interfield_comp_dataaudit_trim_subtreesaudit_get_replyaudit_operator_to_symbolset_aumessage_modeaudit_delete_rule_datalibcap-ng.so.0libc.so.6__xpg_basename__printf_chkexitoptind__strdup__fdelt_chkstrncpyputs__stack_chk_failputcharfgets_unlockedselectstrlenstrstr__errno_locationmemcmpmemcpyfclosestrtoulmalloc__ctype_b_locoptargstderr__snprintf_chkgetopt_long__strncat_chk__fxstatfwritegeteuidstrchr__strtok_rfdopen__ctype_tolower_loc__cxa_finalize__xstatopterr__strcat_chkstrcmpstrerror__asprintf_chk__libc_start_mainfree_edata__bss_start_endkeyGLIBC_2.3GLIBC_2.14GLIBC_2.8GLIBC_2.15GLIBC_2.4GLIBC_2.2.5GLIBC_2.3.4ii MWii blii wui ti  P& &   ^j@ qj    ( + 0 1 ;ȏ EЏ H؏ L S Z \ a          (  0  8  @ H P X ` h p x           ȍ !Ѝ "؍ # $ % & ' ) * , - .( /0 18 2@ 3H 4P 5X 6` 7h 8p 9x : < = > ? @ A B C DȎ FЎ G؎ I J K M N O P Q R T( U0 V8 W@ XH YP ZX [` ]h ^p _x `HHMq HtH5Jn %Ln @%Jn h%Bn h%:n h%2n h%*n h%"n h%n h%n hp% n h`%n h P%m h @%m h 0%m h %m h %m h%m h%m h%m h%m h%m h%m h%m h%m h%m hp%m h`%m hP%zm h@%rm h0%jm h %bm h%Zm h%Rm h%Jm h %Bm h!%:m h"%2m h#%*m h$%"m h%%m h&%m h'p% m h(`%m h)P%l h*@%l h+0%l h, %l h-%l h.%l h/%l h0%l h1%l h2%l h3%l h4%l h5%l h6%l h7p%l h8`%l h9P%zl h:@%rl h;0%jl h< %bl h=%Zl h>%Rl h?%Jl h@%Bl hA%:l hB%2l hC%*l hD%"l hE%l hF%l hGp% l hH`%l hIP%k hJ@%k hK0%k hL %k hM%k hN%k hO%k hP%k hQ%k hR%k hSATI1U1S>w!ID$8-xRx1ljk VI|$'H=)l N(l I\$H5EH|t!;-u{CIHtoH=>HtLH=>HtiH=> HtFH=>HƸ8tF@A1fDA1fDA1fDA1fDAh 0@HHf H=g g Fg 8g *g Hf g g Hf Hf Hf Hf HHBg 1HHf x 1H@f yH5@1NHgt-=8otHH5+=1 1H5@11@f.Su9Hze sif e [_e =tHe 8tH=f H5U1 ie ke H5e =be 11bۋe ۅMf=*e ;1&fe =tHhd 8tH=de H5jT1 d d H59e =d >11QvH;H5|?18cfD+tDH=;uHH5 ?1H5(;1[fDH5yd ktW'H몉HVH5Jd kuߋ c c =c dž i0O c c =c dž i('H=>=_c ATUSHHdH%(H$1H=^;/tAH5;:1H$dH3 %(HĠ[]A\fDHHHHmHIbI%H59HHtH5:E1N*HQHH5IE1%HHv-HH:/tHtH</HtHHiuD$1%=@@Ǎ|?iH5bb Hf.H5D1}?HsH"0DH5D1=b#HH=8HtJH=8 Hָ@@8tH=y8Hְ8tf` 1` 0AUI,ATUHSHHHtL`,LHtH[]A\A]LHBt=,A}t#LuA}t=G` t1LLHt,Df.Hw1҅~` HfDAUAATUSH(L%_ dH%(H$1A,$>1HHHH` H|$ @Hp Ot#EA,$uBH5B1 DA,$H$dH3%(u^H([]A\A]H51BD1A$UA$@EA$5@f.USHtL' tH[][1ۃ8H[];8ouH5^ H=5HfAUATUHSH,HHH HHIM<,u@IAE<,tI]D<,HSHuMt}LHt I@H,ttXHKf,HAtgHuHt8IHHLgtu H541L1LD$ D$ H[]A\A]HHKHHH[]A\A]ÐAWAVAUIATE1USHFHXN] dH%(H$H1H\ Lt$4t$$D$4H^\ HA] HD$@HD$@H i\ H:EMLt(ww HcHH=a7ANfDH[ (fD9~$AtH5E1ADH\ 8t|B\ ur[ HD$8ӃH k\ H|$8HH1s8Ht$8H=[ QH|$8fDAD#H$HdH3%(pHX[]A\A]A^A_f.Hq4H5p41A0HiZ A=Z EAf/ H Z 8 =Z A@HZ L8Mt IHDP H5{>L1A!fHY  HY ,HHHXxL`G,LH1=Y LHWrD5Y  H;Y L ML7A1H81AHʋ r  w x HA9wH=Y "]HX Af HX Ht*<~ Hfg Hu=X E1E11$}s @=kX A@@X A.fDHW DEMHW DE:HW DE'HW 8H5?1AZX A=W hH5Y?1A_rf.HW H8H011=HW ! =3W NfHV H8H011n=V !H5)>1AfHIV L8MtQfL=U H5-M'LHtHU F V V  H5;1AHU H8H U HLU U oAESfDHQU E1U A%tU me  DU EEt-ljD$ T$H5T HT H=zU H0o  rHCT E\=T LHET |$$H04@U L%#T I<$T H591A$7T T AfL=S H5*M'LwHtHsS $ sT gT lH5S LT d S =S 5 HcL$4HS AHH4 OH5 <1A*f=:S pi@9=R A/=R AHS R L=LR H=%S I7-uHS P jHR VR =YL=Q MH=*LιIMLLL$LR LL$AI!сကtH5R DIPLDIL+NQ 1I>IIcH=*LιLϾLL$bHLL$tH5*Lʿ12MH(R 8&Q H=R HcҹL"HQ H!%tDHJHDHH+uP )Љ}Q =P L=iP MMH5})1At P H581AAT@H581A2f.=.P HO H8HJP 3fD12H53H1AD1f2@YH53H1AnfauLAH5(1A':fH5!(1Af.I7A`hIE8-xi xLO @5@HAN HcID8--xk#xHc-O IuH=UO @mwH5!21A/Bf.H551AH551AH521AM YL=}M MM E 11LHD$ HL$=M C@+I11LHD$HL$ M==M @=M "L=L MMCD$HL H5k$H1L$AH5y%1AH5L 3&A#H5 %1A:MDH531H5%1HD$88oH5"1f.H=&H|$LκH|$-Ƅ$@xL@HD$(-LLD$vHHzH@HL$(LD$ysyyuysuyyusH=%HH=H$HH=5$HH="$Ht{H5$1&H=#LvH=#L_H=#LHH59$1XMH=J LAHJ P jpHI H=J H56LL$J LL$P3H5.1AH5&/1AH(I HcID8-QH58.1O H#I H5!A1(;HH HcIDHt58-u0xku*xu$HcI IuH=I @H5-1AH5811AI$H5 1A|H511A^qH5~H LXtLH5-1 xixH @IH51AIH51AH5m1AH5.1}`G 1ۉƒEHG 9}QL=G H5T$(MLLL$Ht*HcT$(LL$ID8-uxtuxu H5-1AHt$8AMH5-1H5,1{H51{1qH5 ¿1ZH5-1B%H5),1%H5|+1H5Z1H5ZH51H51yw1HulDHHt0\t3@t u7H1HufDfD@t1fDDf.SHHtbHKHft+QHHt)uA Hf.A\HfDAH[c[@f.AW1AVAUATUSHdH%(H$1H|$HT$ ƿe|$<D$8%=HT$H5-1AqH$dH3%(DH[]A\A]A^A_8taHT$H5H1As|8AHT$H5nH1DgHT$H5,1E1GHT$H5,H5PYHIH$AAELH߉D$ H HHtH݋EH!ကt$DHEHDHH)@ uHKDHq@ t@u A\HHdHI8#tH1HxIHcHHVL`HD$L`HAGD$ fD;l$}#LIM|$1HIuHT$HcHJAL|$t$ LLBr R8oHL$T$ H5)+1=A tY=A -A LE1HT$H58?H5HLAPH51L0H|$A]LHHGGfHHGHHu fDHHBHuHW@f.HGHtH@HGf.AUIATIUSHHMHt[LHHtLLH HHMH;LeHEt4HCHhHkCH[]A\A]fHH+ϐf.ATIUSHHu #HH;Hk HHuID$AD$[]I$A\f.AWAVAUAATUSH$dH%(H$#1TA"H\$@1HHIcEeHl$DE1AL?)ѺHH T@HD$ HHD$H$H$@HD$HD$@C8u11IHDxH4$1ɺDe~!H$D9xAAA'~H|$|HD$(HuDH|$HHHD2y؉H5)H¿1oH$#dH3%(H$[]A\A]A^A_Ð$ZtD=1H$#H$#H|$ HH$#؉1fHH=!| t}HH5&HH1Ed H AE1AHD;e uDDH6 DAxD8jAHP7 DE<Hu6 DDEH5Z#H¿1AHD;ekDt$H?AŋEP1DHH=? | t11E1A@DDDHc҅D tbH5 8EDDHHH^"fH5"1DAAvt$L\$,DED$(YDDIH54"HL1/D$(D$LD$HD$,EL HD$8HD$0E11MAiAk<ApBAUAjAf!AoDA8AAE7|$,wH4 _|$H5I#HEL1DI;]EEAA tAxDDl$YHI}A AF AE|$N%IDD$DD$H5 HM1LAGI;]S NH='4 2HQH=4 1&fDDL$(J%AEu#H5/ 1hAIDH5 1EA?HA?|$IH5HML1rf.DD$(J%AEuH51[|$E7AH5f!HE1E/Ƅ$A.A AAt$(HT$DH5411@AgAE7|$H5HEL1_J%AH5fAH|$@N%H_1MH|$XAL-FHT$ LIHt^Hl$Lt$ l$(&H5<1M1LLPHt#HuH51!Hl$H|$Xy|@H51`|$E7H5HEL1+A?!AH57 HcHH|$H5&H|$H5襾H|$H5) 芾HD$rf8E7DHD$0YA?;HA?*DH5VH¿1pDHD$8 }HD$X1+Hu21H5,1HL$HL$HaHkH5D1ec蛾A D$LELt$L  L$HD$xD$dD$HLD$`HD$0HD$hHD$8HD$p1VLLL$>Ht$  |$IH5UHML1L AA?1)fE7EiHHD$[|$cLD$H5 HL1ED8H5HD1D$,D$L'H=H1|$H5yH¿1ӿF|$ŽH5FH¿1诿"|$衽H5H¿1苿|$}H5H¿1g|$YH5H¿1C|$5H5{H¿1|$H5GH¿1n|$H5H¿1׾J|$ɼH5H¿1賾&|$襼H5H¿1菾|$聼H5zH¿1k|$]H5FH¿1G|$9H5H¿1#|$H5H¿1r|$H5H¿1۽N|$ͻH5}H¿1跽*|$詻H5FH¿1蓽|$腻H5H¿1o|$aH5H¿1K|$=H5H¿1'|$H5mH¿1v|$H57H¿1߼R|$ѺH5H¿1軼.|$譺H5H¿1藼 |$艺H5H¿1s1mHPH5O1N!H516D$,?D$LCD$HP菹f.DAWAAVIAUIATL% $ UH- $ SL)1HHݷHtLLDAHH9uH[]A\A]A^A_Ðf.HHtaskexituserfilesystemexcludeThe audit system is disabledRule existsError - no list specifiedThe path must start with '/'..neverpossiblealwaysThe audit system is disabled Syscall name unknown: %sOnly -i option is allowedError converting rateError converting backlogAppend rule - bad keyword %sAdd rule - bad keyword %sDelete rule - bad keyword %sError detecting machine typeError looking up elf type %dElf type unknown: 0x%xarch=key=Only the -k option is allowedwatch option needs a pathkey option needs a valuekey option exceeds size limitids-fileexecmkexelowmedhiids key is badkey %s has illegal characterPermission %c isn't supported2.8.5auditctl version %s lost: %uOut of memory adding keyids key type is badinfids key severity is badError opening %s (%s)Error fstat'ing %s (%s)Error - %s is world writablermError - fdopen failed (%s)auditctl--helploginuid-immutablereset-lostCannot open netlink audit socketThe audit system is in immutable mode, no rule changes allowedError sending add rule data request (%s)Error sending delete rule data request (%s)usage: auditctl [options] -a Append rule to end of ist with ction -A Add rule at beginning of ist with ction -b Set max number of outstanding audit buffers allowed Default=64 -c Continue through errors in rules -C f=f Compare collected fields if available: Field name, operator(=,!=), field name -d Delete rule from ist with ction l=task,exit,user,exclude a=never,always -D Delete all rules and watches -e [0..2] Set enabled flag -f [0..2] Set failure flag 0=silent 1=printk 2=panic -F f=v Build rule: field name, operator(=,!=,<,>,<=, >=,&,&=) value -h Help -i Ignore errors when reading rules from file -k Set filter key on audit rule -l List rules -m text Send a user-space message -p [r|w|x|a] Set permissions filter on watch r=read, w=write, x=execute, a=attribute -q make subtree part of mount point's dir watches -r Set limit in messages/sec (0=none) -R read rules from file -s Report status -S syscall Build rule: syscall name or number -t Trim directory watches -v Version -w Insert watch at -W Remove watch at --loginuid-immutable Make loginuids unchangeable once set --reset-lost Reset the lost record counterThe path passed for the watch is too bigThe base name of the path is too bigWarning - relative path notation is not supportedWarning - wildcard notation is not supportedWARNING - 32/64 bit syscall mismatch in line %d, you should specify an archWARNING - 32/64 bit syscall mismatch, you should specify an archToo many options for status commandEnable must be 0, 1, or 2 was %sFailure must be 0, 1, or 2 was %sRate must be a numeric value was %sBacklog must be a numeric value was %sWrong number of options for list requestOnly -k or -i options are allowedSyscall auditing requested for task listMultiple rule insert/delete operations are not allowed Append rule - possible is deprecatedError: syscall auditing requested for task listMultiple rule insert/delete operations are not allowedDelete rule - possible is deprecatedError: syscall auditing being added to task listError: syscall auditing being added to user listError: syscall auditing being added to filesystem listError: syscall auditing cannot be put on exclude listList must be given before fieldThe -m option must be only the only option and takes 1 parameterIllegal character in audit eventError - nested rule files not supportedWrong number of options for Delete all requestwatch option can't be given with a syscallkey option needs a watch or syscall given prior to itpermission option needs a watch given prior to itpermission option needs a filterSyscall auditing requested for make equivalentbacklog_wait_time is not supported on your kernelhicslDvtC:e:f:r:b:a:A:d:S:F:m:R:w:W:k:p:q:parameter passed without an option givenError parsing equivalent partsfile %s doesn't exist, skippingError - %s isn't owned by rootError - %s is not a regular fileThere was an error in line %d of %sYou must be root to run this program.@80P`P0`0к(Error receiving rules list (%s)Error deleting rule (%s)disableenabledenabled+immutableunknownsilentprintkpanic,unlockedNo rules -F arch%s0x%X -F arch%sb64 -F arch%sb32 -F arch%s%s -S -F %s%s%d -F %s%s%s -F %s%s%.*s-w %.*s -F path=%.*s -F dir=%.*s -F exe=%.*s -k %s -F key=%sa -p %s -F perm=%s -F %s%s%u -C uid%sobj_uid -C gid%sobj_gid -C euid%sobj_uid -C egid%sobj_gid -C auid%sobj_uid -C suid%sobj_uid -C sgid%sobj_gid -C fsuid%sobj_uid -C fsgid%sobj_gid -C uid%sauid -C uid%seuid -C uid%sfsuid -C uid%ssuid -C auid%sfsuid -C auid%ssuid -C auid%seuid -C euid%ssuid -C euid%sfsuid -C suid%sfsuid -C gid%segid -C gid%sfsgid -C gid%ssgid -C egid%sfsgid -C egid%ssgid -C sgid%sfsgid -F %s%s0x%X -F %s%s-%s f%d%s%dNLMSG_ERROR %d (%s) enabled %s failure %s enabled %u failure %u loginuid_immutable %u %s Unknown: type=%d, len=%d -a %s,%s -S allpid %u rate_limit %u backlog_limit %u lost %u backlog %u jF"nJ&rN*v;!0`%0@PP pH`Я0h  @ @P @`0H`xpzRx *zRx $ȜPFJ w?;*3$"<D<BGA A(GH (A ABBA hD E HRD_ A $Cu H  G 4 BAA J_  AABG <ث}<T@BJA D(D0l (A ABBI *De<ج"BEA A(G (A ABBD 4ȭAAF k CAI Q FAH L$ OBBA D(O@ (A ABBD W (G ABBE Lt )BBB E(D0C8N 8A0A(B BBBK xrAg H ALBDB B(A0A8G2 8A0A(B BBBA ,LBFE ` ABA |X`X"p<xBED A(L0X (A ABBJ ,SBDA @AJLLhBBB E(A0A8GH 8A0A(B BBBB L(aBBB B(A0A8D` 8A0A(B BBBD HP,h,L4BBB B(A0A8J 8A0A(B BBBA D0eBEE E(H0H8M@l8A0A(B BBBXP&& ?q ` f  o   Ȍ  oooo2o &6FVfv  & 6 F V f v !!&!6!F!V!f!v!!!!!!!!!""&"6"F"V"f"v"""""""""##&#6#F#V#f#v###### ^jqjauditctl.debugp7zXZִF!t/]?Eh=ڊ2ND`@$דPh!hxَx:=aR Qgf|Tfۊ{ ROʋ^AQ$sfϾ2XfN #/ΛtRG'*BӾ3S..!oؚ:D(8B"ف\GGd<|Qj$_> 3cz(̉~4v)=MAv"q86ZD9D_o[j% xD'sh2Yk%³Xj`X떩@& {bP!»&-= Fu ̈ϻN_⊫^ƅ`7G|\;M֪NnwVV=FWըT]Km&0k&qMxS>Lc2 ư!,Wkec20*մv+i[dw]Eɾȟ9F$voVc%LJ.#}ՉGwTq;WS.21yrF}q%ũp5pr Z*ll;_̊zHOd} ᳭wć \ӻ !)&W$& ᢵjpL=6,+76 )ߧM?!05K7t`n;1aEb8ș}eI$Kl<6ndiޣuEDcq#.gf 'a9r~T*lwۺ+otך?P9%!p^C-pm`/g{ذiX^EZHT2bԽƫ_,@N%w;B0O nۂ@ -lR vB\t8{XR؊;*ӚD{yXpeC C@U!<6y"f%)St][g9]݌O>{ (p~M}ag9HP};}+0~~@H"CHc&t Jr|JVi%uUAK)1d: :[eRՓD5h!Bp]|-Ur.h?Eo-4f"UFX +$ $*D# ,#=Tۼ=˲|W ݲg&Lj>Up۲;Z2װ %$gYZ.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.jcr.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata 88TT !tt$4o<>  F No22[ojtB~``yP##Bff ffPPhh     Ȍ Ȍ8  h