/usr/sbin
NameSizeModeActions
accessdb157920755editdlrm
addgnupghome30790755editdlrm
addpart155200755editdlrm
adduser1411440755editdlrm
agetty580720755editdlrm
alternatives405440755editdlrm
anacron404640755editdlrm
apachectl48080755editdlrm
applygnupgdefaults22210755editdlrm
arp647280755editdlrm
arping279040755editdlrm
arptables2369600755editdlrm
arptables-nft2369600755editdlrm
arptables-nft-restore2369600755editdlrm
arptables-nft-save2369600755editdlrm
arptables-restore2369600755editdlrm
arptables-save2369600755editdlrm
atd320080755editdlrm
atrun700755editdlrm
auditctl528240755editdlrm
auditd1403360755editdlrm
augenrules41460755editdlrm
aureport1231920755editdlrm
ausearch1231600755editdlrm
autrace196320750editdlrm
avcstat157200755editdlrm
badblocks362000755editdlrm
blkdeactivate163550555editdlrm
blkdiscard237600755editdlrm
blkid528480755editdlrm
blkmapd403600755editdlrm
blkzone363040755editdlrm
blockdev321680755editdlrm
bridge1340880755editdlrm
cache_check30462960755editdlrm
cache_dump30462960755editdlrm
cache_metadata_size30462960755editdlrm
cache_repair30462960755editdlrm
cache_restore30462960755editdlrm
cache_writeback30462960755editdlrm
capsh319600755editdlrm
cfdisk986560755editdlrm
chcpu321760755editdlrm
chgpasswd612000755editdlrm
chkconfig448320755editdlrm
chpasswd569680755editdlrm
chronyd3825440755editdlrm
chroot405040755editdlrm
clock612000755editdlrm
consoletype156480755editdlrm
convertquota706640755editdlrm
cracklib-check154720755editdlrm
cracklib-format2550755editdlrm
cracklib-packer154720755editdlrm
cracklib-unpacker154640755editdlrm
create-cracklib-dict9940755editdlrm
crond779920755editdlrm
ctrlaltdel155520755editdlrm
ctstat241600755editdlrm
dcb969600755editdlrm
ddns-confgen279120755editdlrm
debugfs2386240755editdlrm
delpart154800755editdlrm
depmod1695440755editdlrm
devlink1698160755editdlrm
dmeventd530320555editdlrm
dmfilemapd238560555editdlrm
dmsetup1605360555editdlrm
dmstats1605360555editdlrm
dnssec-cds488160755editdlrm
dnssec-checkds9240755editdlrm
dnssec-coverage9260755editdlrm
dnssec-dsfromkey403840755editdlrm
dnssec-importkey362880755editdlrm
dnssec-keyfromlabel403680755editdlrm
dnssec-keygen485840755editdlrm
dnssec-keymgr9220755editdlrm
dnssec-revoke321680755editdlrm
dnssec-settime485760755editdlrm
dnssec-signzone981840755editdlrm
dnssec-verify322000755editdlrm
dosfsck865920755editdlrm
dosfslabel409760755editdlrm
dovecot1474800755editdlrm
dovecot_cpshutdown33440755editdlrm
dpll493120755editdlrm
dumpe2fs320400755editdlrm
e2freefrag155520755editdlrm
e2fsck3646320755editdlrm
e2image444560755editdlrm
e2label1069680755editdlrm
e2mmpstatus320400755editdlrm
e2undo237120755editdlrm
e4crypt320480755editdlrm
e4defrag320080755editdlrm
ebtables2369600755editdlrm
ebtables-nft2369600755editdlrm
ebtables-nft-restore2369600755editdlrm
ebtables-nft-save2369600755editdlrm
ebtables-restore2369600755editdlrm
ebtables-save2369600755editdlrm
ebtables-translate2369600755editdlrm
edquota916480755editdlrm
efibootdump244400755editdlrm
efibootmgr462640755editdlrm
era_check30462960755editdlrm
era_dump30462960755editdlrm
era_invalidate30462960755editdlrm
era_restore30462960755editdlrm
ether-wake514480755editdlrm
ethtool10126960755editdlrm
exicyclog113650755editdlrm
exigrep117100755editdlrm
exim17288484755editdlrm
eximstats1525460755editdlrm
exim_checkaccess49430755editdlrm
exim_dbmbuild230400755editdlrm
exim_dumpdb418720755editdlrm
exim_fixdb463600755editdlrm
exim_lock233280755editdlrm
exim_tidydb334720755editdlrm
exinext82170755editdlrm
exiqgrep67390755editdlrm
exiqsumm64430755editdlrm
exiwhat45240755editdlrm
exportfs701120755editdlrm
faillock237360755editdlrm
fatlabel409760755editdlrm
fcgistarter253040755editdlrm
fdformat237440755editdlrm
fdisk1147600755editdlrm
filefrag196800755editdlrm
findfs155200755editdlrm
firewalld99890755editdlrm
fix-info-dir80370755editdlrm
fixfiles123870755editdlrm
fsadm246020555editdlrm
fsck445920755editdlrm
fsck.cramfs321280755editdlrm
fsck.ext23646320755editdlrm
fsck.ext33646320755editdlrm
fsck.ext43646320755editdlrm
fsck.fat865920755editdlrm
fsck.minix570480755editdlrm
fsck.msdos865920755editdlrm
fsck.vfat865920755editdlrm
fsck.xfs25980755editdlrm
fsfreeze155120755editdlrm
fstrim445440755editdlrm
fuser420720755editdlrm
g13-syshelp907280755editdlrm
genhomedircon328080755editdlrm
genhostid156480755editdlrm
genl1332720755editdlrm
getcap154960755editdlrm
getenforce156400755editdlrm
getpcaps154880755editdlrm
getpidprevcon156560755editdlrm
getpolicyload156480755editdlrm
getsebool156640755editdlrm
groupadd704240755editdlrm
groupdel660800755editdlrm
groupmems571120755editdlrm
groupmod745040755editdlrm
grpck611920755editdlrm
grpconv528000755editdlrm
grpunconv527680755editdlrm
grub2-bios-setup17499040755editdlrm
grub2-get-kernel-settings27460755editdlrm
grub2-install20685200755editdlrm
grub2-macbless17288720755editdlrm
grub2-mkconfig94310755editdlrm
grub2-probe17459840755editdlrm
grub2-reboot48140755editdlrm
grub2-set-bootflag154564755editdlrm
grub2-set-default35380755editdlrm
grub2-set-password28090755editdlrm
grub2-setpassword28090755editdlrm
grub2-switch-to-blscfg90240755editdlrm
grubby2600755editdlrm
gssproxy1278880755editdlrm
halt3055760755editdlrm
htcacheclean540720755editdlrm
httpd11397200755editdlrm
hwclock612000755editdlrm
iconvconfig324320755editdlrm
ifconfig808800755editdlrm
ifdown10970755editdlrm
ifenslave243040755editdlrm
ifstat405520755editdlrm
ifup10660755editdlrm
imunify-notifier103256160755editdlrm
init980400755editdlrm
insmod1695440755editdlrm
install-info1092560755editdlrm
installkernel3230755editdlrm
intel_sdsi229680755editdlrm
ip7929040755editdlrm
ip6tables2369600755editdlrm
ip6tables-nft2369600755editdlrm
ip6tables-nft-restore2369600755editdlrm
ip6tables-nft-save2369600755editdlrm
ip6tables-restore2369600755editdlrm
ip6tables-restore-translate2369600755editdlrm
ip6tables-save2369600755editdlrm
ip6tables-translate2369600755editdlrm
ipmaddr199120755editdlrm
ipset156400755editdlrm
ipset-translate156400755editdlrm
iptables2369600755editdlrm
iptables-nft2369600755editdlrm
iptables-nft-restore2369600755editdlrm
iptables-nft-save2369600755editdlrm
iptables-restore2369600755editdlrm
iptables-restore-translate2369600755editdlrm
iptables-save2369600755editdlrm
iptables-translate2369600755editdlrm
iptunnel199680755editdlrm
irqbalance659920755editdlrm
irqbalance-ui405360755editdlrm
kexec1972160755editdlrm
key.dns_resolver321040755editdlrm
kpartx486640755editdlrm
lchage237200755editdlrm
ldattach278800755editdlrm
ldconfig11764640755editdlrm
lgroupadd154800755editdlrm
lgroupdel154720755editdlrm
lgroupmod236800755editdlrm
lid195920755editdlrm
lnewusers236800755editdlrm
lnstat241600755editdlrm
load_policy154800755editdlrm
logrotate979600755editdlrm
logsave155520755editdlrm
losetup738160755editdlrm
lpasswd236800755editdlrm
lshw8740640755editdlrm
lsmod1695440755editdlrm
lspci999120755editdlrm
luseradd236800755editdlrm
luserdel154800755editdlrm
lusermod236880755editdlrm
lvchange28310720555editdlrm
lvconvert28310720555editdlrm
lvcreate28310720555editdlrm
lvdisplay28310720555editdlrm
lvextend28310720555editdlrm
lvm28310720555editdlrm
lvmconfig28310720555editdlrm
lvmdevices28310720555editdlrm
lvmdiskscan28310720555editdlrm
lvmdump103780555editdlrm
lvmpolld2153440555editdlrm
lvmsadc28310720555editdlrm
lvmsar28310720555editdlrm
lvm_import_vdo237080555editdlrm
lvreduce28310720555editdlrm
lvremove28310720555editdlrm
lvrename28310720555editdlrm
lvresize28310720555editdlrm
lvs28310720555editdlrm
lvscan28310720555editdlrm
makedumpfile4422080755editdlrm
matchpathcon156800755editdlrm
mii-diag247760755editdlrm
mii-tool284480755editdlrm
mkdict2550755editdlrm
mkdosfs537680755editdlrm
mkdumprd124180755editdlrm
mke2fs1357120755editdlrm
mkfs155360755editdlrm
mkfs.cramfs362240755editdlrm
mkfs.ext21357120755editdlrm
mkfs.ext31357120755editdlrm
mkfs.ext41357120755editdlrm
mkfs.fat537680755editdlrm
mkfs.minix446000755editdlrm
mkfs.msdos537680755editdlrm
mkfs.vfat537680755editdlrm
mkfs.xfs4615920755editdlrm
mkhomedir_helper237680755editdlrm
mklost+found154800755editdlrm
mksquashfs2023600755editdlrm
mkswap486400755editdlrm
modinfo1695440755editdlrm
modprobe1695440755editdlrm
modsec-sdbm-util343680750editdlrm
mount.fuse157040755editdlrm
mount.fuse3198320755editdlrm
mount.nfs1029364755editdlrm
mount.nfs41029364755editdlrm
mountstats435190755editdlrm
mysqld566875760755editdlrm
named5581040755editdlrm
named-checkconf403440755editdlrm
named-checkzone402880755editdlrm
named-compilezone402880755editdlrm
named-journalprint154960755editdlrm
named-nzd2nzf154800755editdlrm
nameif159520755editdlrm
NetworkManager38939280755editdlrm
newusers908320755editdlrm
nfsconf408160755editdlrm
nfsdcld572080755editdlrm
nfsdclddb102300755editdlrm
nfsdclnts92710755editdlrm
nfsdcltrack408720755editdlrm
nfsidmap238560755editdlrm
nfsiostat239100755editdlrm
nfsref445600755editdlrm
nfsstat391920755editdlrm
nft278240755editdlrm
nologin155200755editdlrm
nscd1668560755editdlrm
nsec3hash155600755editdlrm
nstat320880755editdlrm
packer154720755editdlrm
pam_console_apply445520755editdlrm
pam_namespace_helper4710755editdlrm
pam_timestamp_check154964755editdlrm
paperconfig41730755editdlrm
parted987040755editdlrm
partprobe157040755editdlrm
partx612000755editdlrm
pdata_tools30462960755editdlrm
pdns_server61628000755editdlrm
pidof238880755editdlrm
ping914720755editdlrm
ping6914720755editdlrm
pivot_root155200755editdlrm
plipconfig157200755editdlrm
poweroff3055760755editdlrm
pure-authd235680755editdlrm
pure-certd234720755editdlrm
pure-config.pl47550755editdlrm
pure-ftpd1813760755editdlrm
pure-ftpwho272160755editdlrm
pure-mrtginfo148960755editdlrm
pure-quotacheck231040755editdlrm
pure-uploadscript233760755editdlrm
pvchange28310720555editdlrm
pvck28310720555editdlrm
pvcreate28310720555editdlrm
pvdisplay28310720555editdlrm
pvmove28310720555editdlrm
pvremove28310720555editdlrm
pvresize28310720555editdlrm
pvs28310720555editdlrm
pvscan28310720555editdlrm
pwck569360755editdlrm
pwconv485840755editdlrm
pwhistory_helper196560755editdlrm
pwunconv485440755editdlrm
quotacheck958640755editdlrm
quotaoff580320755editdlrm
quotaon580320755editdlrm
quotastats157040755editdlrm
rdisc321120755editdlrm
rdma1198720755editdlrm
readprofile238240755editdlrm
reboot3055760755editdlrm
repquota794160755editdlrm
request-key279440755editdlrm
resize2fs692640755editdlrm
resizepart239600755editdlrm
restorecon237440755editdlrm
restorecon_xattr154880755editdlrm
rfkill320960755editdlrm
rmmod1695440755editdlrm
rndc442880755editdlrm
rndc-confgen238160755editdlrm
rotatelogs390480755editdlrm
route673520755editdlrm
rpc.gssd902240755editdlrm
rpc.idmapd488800755editdlrm
rpc.mountd1357360755editdlrm
rpc.nfsd409600755editdlrm
rpc.statd827280755editdlrm
rpcbind613280755editdlrm
rpcctl96450755editdlrm
rpcdebug191040755editdlrm
rpcinfo364320755editdlrm
rsyslogd8262400755editdlrm
rtacct300480755editdlrm
rtcwake361040755editdlrm
rtkitctl156080755editdlrm
rtmon1290800755editdlrm
rtstat241600755editdlrm
runlevel3055760755editdlrm
runq17288484755editdlrm
runuser569440755editdlrm
sasldblistusers2156400755editdlrm
saslpasswd2156080755editdlrm
sefcontext_compile741200755editdlrm
selabel_digest156800755editdlrm
selabel_get_digests_all_partial_matches156960755editdlrm
selabel_lookup156720755editdlrm
selabel_lookup_best_match156800755editdlrm
selabel_partial_match156720755editdlrm
selinuxconlist156720755editdlrm
selinuxdefcon156720755editdlrm
selinuxenabled156400755editdlrm
selinuxexeccon156560755editdlrm
selinux_check_access156800755editdlrm
semanage416140755editdlrm
semodule328080755editdlrm
sendmail185122755editdlrm
service46230755editdlrm
sestatus236800755editdlrm
setcap154880755editdlrm
setenforce156640755editdlrm
setfiles237440755editdlrm
setpci321040755editdlrm
setquota835360755editdlrm
setsebool196080755editdlrm
sfdisk1064800755editdlrm
showmount158480755editdlrm
shutdown3055760755editdlrm
slattach384720755editdlrm
sm-notify530160755editdlrm
smartctl8743280755editdlrm
smartd6302400755editdlrm
ss1344720755editdlrm
sshd4166640755editdlrm
sssd733280755editdlrm
sss_cache360960755editdlrm
start-statd10270755editdlrm
start-stop-daemon498160755editdlrm
suexec385044755editdlrm
sulogin444400755editdlrm
sw-engine-fpm253146800755editdlrm
swaplabel196480755editdlrm
swapoff238240755editdlrm
swapon443520755editdlrm
switch_root237600755editdlrm
sysctl322480755editdlrm
tc6554560755editdlrm
tcpdump13402560755editdlrm
tcpslice280480755editdlrm
telinit3055760755editdlrm
thin_check30462960755editdlrm
thin_delta30462960755editdlrm
thin_dump30462960755editdlrm
thin_ls30462960755editdlrm
thin_metadata_pack30462960755editdlrm
thin_metadata_size30462960755editdlrm
thin_metadata_unpack30462960755editdlrm
thin_migrate30462960755editdlrm
thin_repair30462960755editdlrm
thin_restore30462960755editdlrm
thin_rmap30462960755editdlrm
thin_trim30462960755editdlrm
tipc950240755editdlrm
tmpwatch368960755editdlrm
tracepath196800755editdlrm
tracepath6196800755editdlrm
tsig-keygen279120755editdlrm
tune2fs1069680755editdlrm
udevadm6019600755editdlrm
umount.nfs1029364755editdlrm
umount.nfs41029364755editdlrm
unix_chkpwd238484755editdlrm
unix_update320800700editdlrm
unsquashfs1165360755editdlrm
update-alternatives405440755editdlrm
update-pciids17570755editdlrm
update-smart-drivedb238850755editdlrm
useradd1411440755editdlrm
userdel909680755editdlrm
usermod1327760755editdlrm
validatetrans156560755editdlrm
vdpa367360755editdlrm
vgcfgbackup28310720555editdlrm
vgcfgrestore28310720555editdlrm
vgchange28310720555editdlrm
vgck28310720555editdlrm
vgconvert28310720555editdlrm
vgcreate28310720555editdlrm
vgdisplay28310720555editdlrm
vgexport28310720555editdlrm
vgextend28310720555editdlrm
vgimport28310720555editdlrm
vgimportclone28310720555editdlrm
vgimportdevices28310720555editdlrm
vgmerge28310720555editdlrm
vgmknodes28310720555editdlrm
vgreduce28310720555editdlrm
vgremove28310720555editdlrm
vgrename28310720555editdlrm
vgs28310720555editdlrm
vgscan28310720555editdlrm
vgsplit28310720555editdlrm
vigr595520755editdlrm
vipw595520755editdlrm
visudo2736800755editdlrm
vmcore-dmesg279520755editdlrm
weak-modules343840755editdlrm
whmapi034781120755editdlrm
whmapi134781120755editdlrm
whmlogin23900755editdlrm
wipefs402240755editdlrm
xfs_admin21780755editdlrm
xfs_bmap6990755editdlrm
xfs_copy948400755editdlrm
xfs_db7250720755editdlrm
xfs_estimate155280755editdlrm
xfs_freeze8040755editdlrm
xfs_fsr445520755editdlrm
xfs_growfs446800755editdlrm
xfs_info12980755editdlrm
xfs_io2074560755editdlrm
xfs_logprint903760755editdlrm
xfs_mdrestore279360755editdlrm
xfs_metadump7860755editdlrm
xfs_mkfile10440755editdlrm
xfs_ncheck6890755editdlrm
xfs_quota943120755editdlrm
xfs_repair7027040755editdlrm
xfs_rtcp196000755editdlrm
xfs_spaceman448320755editdlrm
xqmstats156960755editdlrm
xtables-monitor2369600755editdlrm
xtables-nft-multi2369600755editdlrm
zic610560755editdlrm
zramctl572080755editdlrm
Edit: /usr/sbin/auditctl (52824B)
ELF>=@@8 @@@@!!000QQX#X#0Ⱥ88800hhhDDStd88800PtdXXXQtdRtdPP/lib64/ld-linux-x86-64.so.2 GNUGNU5Èf CDSGNUb D,bdhCa*.l 92 YHKQXOeCeUo +`| wH4Y&ZB@<A a@T m=9zpfG4rtI, ,s`F"dg{-0@&] _ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__cxa_finalize__libc_start_main_audit_syscalladded_audit_permadded_audit_archadded_audit_exeadded_audit_filterfsadded_audit_elfaudit_rule_free_dataaudit_rule_create_dataaudit_openaudit_msgstrdupstrtok_raudit_rule_syscallbyname_datamemcmpfree__stack_chk_fail__fdelt_chkstrcasecmpaudit_request_status__errno_locationselectaudit_get_replyexitpollstrerrorperrorstrchrstrcmp__asprintf_chkstrstraudit_is_enabledstrlen__xpg_basenameaudit_add_watch_diraudit_name_to_flagmallocmemcpy__printf_chkaudit_closeaudit_flag_to_nameaudit_action_to_nameaudit_elf_to_machineaudit_operator_to_symbolaudit_detect_machineaudit_field_to_nameputsputcharaudit_errno_to_nameaudit_fstype_to_nameaudit_msg_type_to_nameaudit_machine_to_nameaudit_syscall_to_name__strcat_chk__snprintf_chkauparse_interp_adjust_typeauparse_do_interpretationaudit_uringop_to_nameset_aumessage_modeaudit_add_rule_dataaudit_delete_rule_dataaudit_request_rules_list_dataaudit_sendoptindopterrgetopt_longaudit_set_loginuid_immutableoptarg__ctype_b_locstrtoulaudit_set_backlog_wait_timeaudit_rule_fieldpair_data__ctype_tolower_locaudit_update_watch_permsaudit_set_rate_limitaudit_request_featuresaudit_trim_subtrees__strncat_chkaudit_set_enabledaudit_set_failureaudit_rule_interfield_comp_datastrncmpaudit_reset_lostaudit_number_to_errmsgaudit_reset_backlog_wait_time_actualaudit_rule_io_uringbyname_dataaudit_set_backlog_limitstderrfwriteaudit_make_equivalentaudit_machine_to_elf_audit_parse_syscallaudit_log_user_messagefstatfdopenfgets_unlockedfcloseaudit_can_controlgeteuidlibaudit.so.1libauparse.so.0libc.so.6GLIBC_2.3GLIBC_2.14GLIBC_2.33GLIBC_2.8GLIBC_2.15GLIBC_2.4GLIBC_2.34GLIBC_2.2.5GLIBC_2.3.4   ii  ii ii ui ti >p> @`ӫV  0R[bhcijde k0f@g (0 8 @ HPX`hpx !"#$%&'( )(*0+8,@-H.P/X1`2h3p4x56789:;<=>?@ABCDEFGHI J(K0L8M@NHOPPXQ`ShTpUxVWXYZ[\]^_`aHHٟHtH5%hhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQhZAh[1h\!%D%ݖD%ՖD%͖D%ŖD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݕD%ՕD%͕D%ŕD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݔD%ՔD%͔D%ŔD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%DAUI1ATU1uhMeH5oLtwH5oLtdH5oLrl%uDH5Jg1AXtكuI}H55o%8AąL1!)Ń=\u =Lt 7N tG3#Ńu!8oH5f1H=A,D]A\A]H=A1Am tI}@?H=AuD%AH=$H=VUA3rYH5f1H@1I^HHPTE11H=f.H=ْHҒH9tHƑHt H=H5H)HH?HHHtHHtfD=͒u+UH=rHt H=.d]wHH=ݓ-ِ{m8HTx 1Hcy1H5P&ff.@AWAVAHAUATUSH8D-RdH%(H$(1A2A>AIH7Hl$HcHHHL|$(LH1HHt LxHH1HHuHDH|$Hp LADžu?D-H$(dH+%(H8D[]A\A]A^A_{D-DEtODH5UO1E1@@H5YO1E1zR ADAVAUATUSHH $HH $HdH%(H$#1H\$ IHHHc=`-UH5SbLIHJ D tH53bL]AE1Hl$L$HD$HD$@K8uč11IHލxxڋ=1ɺLu~$t=tFt=tEAA(uH5NN1DH$#uAGH$#p 1ҿ1E11DHÉƿ1A H$#dH+%(H#[]A\A]A^H5`LH5`LH5`LH5`LtsH5`L!H5q`L H5a`LtH5S`LADAA H|$\$fD$ D$u6$8H5^LH17 D8ouH5_1ȿLH5_1A H=_A\`H5n_1sATL%WDL9u3I L:HuH*A<$LDLA\HLA\UH5 _Hu j]H5^Hu K]ÐHH5^]@AWAVAUATUSH(dH%(HD$1GI1E1Ll$L%e_.@P tA IHA9_A %=uA 1LLO7x|H|$H5H|$H|$Hu`Dph~iHjHA9_u1HT$dH+%(u&H([]A\A]A^A_1/CH=ڈqtGIA8otH1H5IQ11H5\:1fDATIUSHdH%(H$1H=nA<$/tGH5\1AH$dH+%(HĠD[]A\LHHH5HHH]H5\L>HtH5jI1V*LHH5yI1-LHvA|/HPLH$iuD$1%=@@Ǎ|?iLH5щA~=AH5If.H59H1Awf?L3H(DIt$DA|/HHufDH5G1A$ff.fAVAUPATAUԈSu4H,HIHtLp,LuHtA[D]A\A]A^fDAEHKAătcAE,;Lt3.Aąu=t=tE1[]DA\A]A^fD+uHtuAE,XfnAUIATIUHSHHtRHMt$LHHtLLHHIH}L#LkHCtHEHXEH]H[]A\A]ÐH]f.AWAVAUATUSHH $HH $HhE1L5ȅdH%(H$X$1H$Hl$@HL$ HHc=7 ,HsIHhHJ ĠYfHD$@HD$H@C=8Au11IHxD1ɺLDfD$ AH$P$8`iH5[HH$P$1DH$X$dH+%( Hh$[]A\A]A^A_AA(tDۂD΃DAHA&H$(DH5Z1XQfAtgAuH$P$@t@ H>WH 9WHDʋPH5)Z1DA'af=H$P$tHtH$P$ LH|DAH$P$ D@DH H =VAt"H 7VAtEH -VHVHDH+VAt"H&VAtEHUHUHDH5X1HH$X$H51CDHD@HP @P1XZH$P$H5XP$1$$<*H$P$H5XP(1dDaHHHH(DEDMElL AP1LH&f.t iuUHH9tсjuHH9uDȃD$Dȃ  DD}ILH5TH1\E D$(E1L-TH|TfDID9uB % uF F DD%&Ax*D$(D%DELIH1D9uvD$AƋEÃ\$,tjD$,@vU?%EиD|HH9ut$1H5zVD$,D$DEL ETHD$1MHD$ HD$jf.HD$DLL $L $ELHH5!S1~A$HD$I;]A$ tE$׉$OAxIH$E$ B Lpef w"H XHcH>H= RDEHLH59R1I;]<@ H~HtH@H}HFH}HtfHH[H}HHuH}H}}&HD$DLMDH5QH¿1A$HD$kAaHWJcH>HD$DT$LEDMDH5KQHƄ$L$AAA\A6DD$LEH5(Q1/DAH,E$IEHDMLHH5R1fHD$D\$LEDMDHH5JP1DELHH5uP1nfDH$A$pDI5MLHH5O1 @pDHED$HD$|$w=g{DELHH57Q1fDHD$H|$8DHOL1H|$8Lt$PL-WA$HD$LLL=NHH;H,$l$.fDL1LL1THHuH5N1΃ DA5KzLH5=PH1}E$DpA$H5PHE1CfDDHtA$E$DHE<nD$,D$D$(H,$H|$8+VLDH5]M1ADȃ1HE H8HH9uD$D$,D$(D$=DADH޿H1DD$D$H=|$(DH$H $H5ILH1H5LH1{H5L1#11L%JE1L-KuA@LDH5aL1ODAADD#D tً=Lwu8ExDDXHtQLHtL1AfDH5EK1H4NLH$H5!K1H $HtHN뎉t$,\$rD$,D$D$(D$iDDH5,M1H5,HH1DH5HH1DH5HH1]DH5GH1:DH5GH1DH5GH1iDlH5GH1FDIH5GH1#D&H5GH1DH5yGH1hSATu:D%pE)5roDA\o=t =_p1H5r=do bodo11AEEqAEA܅WfD=o-AE1#ADn=t=otH=_qH5Fk1OH5@q=n nn11A%E2HFH501AYfDtLHtFuPH501AfH=pH5(F_H5qp kt{DHH5F1AHDH2H5p kudž i fmdm=VmA dž i =m?m=-mAH=/=m%ff.AWAVAUATUSHH $HH $HdH%(H$#1AD$PH\$@1E1HEfHl$HIcL$DD$0HD$ IHD$(HJ D@HD$ HD$HD$HD$@8u11IHDTx1ɺLD~bH$t$9puA$tS=u%=VmH$#AUDAA(BH\$ H\$(Ht`HfDH@HD$(Ht*HHDHD$(HuDHH[H}XHPHu1H$#dH+%(H$[]A\A]A^A_H$#6؉H57H1_H$# HH|$HV؉H5BH1O=fDAWL=WjAVL5<AUATE1UHSHXt$ Ll$HcmjH>~HTD$  H5uD1 =Ui"j09(=jtk,8oh AHD$HdH+%(rHXD[]A\A]A^A_L-iMVwAUHDP>/1L1HD$HL$Ƌ9=h,l@=nh%i4iit<9)=iAbH5q81=ijAHD$@g= A1H|$@H ViHl=5 Ht$@DH=6jy) H|$@AkRH=YhH5^g rD$^=+g L-hMHiLHD$A 1tMD$y|$11LID HAw  aq rp H9wH|$+PagD$@DAgE%H5A8;L-EgM AUHDP 11LHD$hHL$Ƌm=e,t9=fu^uYHE8-t0H5O>1Uf[xiuʀxufD=fe =Me. f8"9fD1H51=f=dH?H5?1ef=duN=duBH=eH dnd =bie cTe9{ZfDH=ycH 0111=FbA c9 AH=bHq01SI11(=a;CfDaH5bH=-dxHdP j;bumHcbHD8-t0H5*;1axkuʀxuċxbHuH=tb=`D$ L$Dd$i`=L-{aAH5R:LDD$DD$zMELGaH5 11 a=`PDž HcD$_ 8`%t$_H=`,H|$sH|$HHD$HHHD$@H52HHD$HH?\$$H\$Hl$(#f.H52H1HHtH=aŅtH|$\$$L$Hl$(L$i _H=!_H^ ^^uD$9H=^LH|$XH|$Ht^nH5]tgH5:,1A0yL-q^MAUHDP11LHD$HL$Ƌ=!]xZH581HD$@\ЃEAH501A7fH5/1"fDm8o-H k]H=4 =\H5-@=[H51-@[ЃE$D[AcL-\AHci\HD8-H5)H|$%@Ht$@|H|$@'DH551kH5["DH5=5@DLH=s]uHc]P jHp[D2HH5' 2HH5'HI[H53DH58H=[LD$ALD$hZ9@HH=\LH5_41l)E*HcmZHDH8-xkxZHuH=ZkZDD$9ډT$}*L-ZH52LHtHcT$HD8-t@H55)xioxeZZH5&xtuxDD$/DH52LH5J& LH5&LH5*H5`' H5*H5@)H5&1A#HYH5>1H542HXH51H5\&H5 *1A~HXH50QH XHBH<H5,(1A$mH5&1AOH5601A1H-,X,H蟾H+xL`,LxH=VLHH5 1=Vɿ:WDXH5#OH5Y/1'jH5S11 APH5$ H5%zULD-XE u:L$9L$ljL$D$^T$L$VH5YXH=VL$aL$y@TV1H53/CV!L| Vj=>UZH5!V|$ A=V=WyH5'1H|$@H.WxpAQ=TE1E1jHT$P1ɾbAZA[H|$@2кnULw׻%W螺AQH5?.1A5H0UH5-=VA(H5-A觾H5a-1A苾H5#1AoH5#1ASH5/#1A7H5"1AdfDAWAVAUATUSHH $H1H|$HdH%(H$11ye蘹D ADAHڿH5,.H1蔽H$dH+%(VHD[]A\A]A^A_Ht$ ljD$8%=H5-AJH$IHfDAELH߉D$ 踻H H貹HtHr$H$Hʼn@ u H tH1@u+@QH2@r@\u@SƄ1HT$H5$1A$}HT$H5L$1g@ u1ƄgfDLDXHRM4$IH=H|$HcH訿AąLt$t$ LLt[uO*8o@HL$T$ 1H5#5=R=QtQDAfDHQTIH8#tHHHzAH蔹HD$H4H|$H+HH`QLgHLgD|$HH5QIH9l$L蒺HHnSHLt+HQ9HuH DH\DLE15<葵A8$HT$H5G*H1虹H|$AL׵nH;*AH5!OL觵 8覹H5)HҵLAv}H5"1LV]HHCannot open netlink audit socketWARNING - 32/64 bit syscall mismatch in line %d, you should specify an archWARNING - 32/64 bit syscall mismatch, you should specify an archFailed sending signal to auditd (%s)Failed sending signal to auditd (timeout)The audit system is in immutable mode, no rule changes allowedThe path passed for the watch is too bigThe base name of the path is too bigWarning - relative path notation is not supportedWarning - wildcard notation is not supportedOld style watch rules are slowerpid %u rate_limit %u backlog_limit %u lost %u backlog %u Error sending add rule data request (%s)Error sending delete rule data request (%s)usage: auditctl [options] -a Append rule to end of ist with ction -A Add rule at beginning of ist with ction -b Set max number of outstanding audit buffers allowed Default=64 -c Continue through errors in rules -C f=f Compare collected fields if available: Field name, operator(=,!=), field name -d Delete rule from ist with ction l=task,exit,user,exclude,filesystem a=never,always -D Delete all rules and watches -e [0..2] Set enabled flag -f [0..2] Set failure flag 0=silent 1=printk 2=panic -F f=v Build rule: field name, operator(=,!=,<,>,<=, >=,&,&=) value -h Help -i Ignore errors when reading rules from file -k Set filter key on audit rule -l List rules -m text Send a user-space message -p [r|w|x|a] Set permissions filter on watch r=read, w=write, x=execute, a=attribute -q make subtree part of mount point's dir watches -r Set limit in messages/sec (0=none) -R read rules from file -s Report status -S syscall Build rule: syscall name or number --signal Send the specified signal to the daemon -t Trim directory watches -v Version -w Insert watch at -W Remove watch at --loginuid-immutable Make loginuids unchangeable once set --backlog_wait_time Set the kernel backlog_wait_time --reset-lost Reset the lost record counter --reset_backlog_wait_time_actual Reset the actual backlog wait time counterError receiving rules list (%s)parameter passed without an option givenToo many options for status commandEnable must be 0, 1, or 2 was %sFailure must be 0, 1, or 2 was %sRate must be a numeric value was %sBacklog must be a numeric value was %sWrong number of options for list requestOnly -k or -i options are allowedSyscall auditing requested for task listMultiple rule insert/delete operations are not allowed Append rule - possible is deprecatedError: syscall auditing requested for task listMultiple rule insert/delete operations are not allowedDelete rule - possible is deprecatedError: syscall auditing being added to task listError: syscall auditing being added to user listError: syscall auditing being added to filesystem listError: syscall auditing cannot be put on exclude listList must be given before fieldThe -m option must be only the only option and takes 1 parameterIllegal character in audit eventError - nested rule files not supportedWrong number of options for Delete all requestwatch option can't be given with a syscallkey option needs a watch or syscall given prior to itpermission option needs a watch given prior to itpermission option needs a filterSyscall auditing requested for make equivalentError parsing equivalent partsError converting backlog_wait_timeBacklog_wait_time must be a numeric value was %sOption %s on line %d is invalidhicslDvtC:e:f:r:b:a:A:d:S:F:m:R:w:W:k:p:q:audit rules file %s doesn't existError - %s is not a regular fileOut of memory. Check %s file, %d lineThere was an error in line %d of %sYou must be root to run this program.There was an error while processing parametersreset_backlog_wait_time_actual,TERMstopHUPreloadUSR1rotateUSR2resumeCONTstate%s is an unsupported signalThe audit system is disabledAuditd is not runningpollalwaysneverpossibleThe path must start with '/'..silentprintkpanicunknowndisableenabledenabled+immutableunlockedNo rules-a %s,%s -F arch%s0x%X -F arch%sb64 -F arch%sb32 -F arch%s%s -S -F %s%s%d -F %s%s%s -F %s%s%.*s-w %.*s -F path%s%.*s -F dir%s%.*s -F exe%s%.*s -k %s -F key=%swa -p %s -F perm=%s -F %s%s%u -C uid%sobj_uid -C gid%sobj_gid -C euid%sobj_uid -C egid%sobj_gid -C auid%sobj_uid -C suid%sobj_uid -C sgid%sobj_gid -C fsuid%sobj_uid -C fsgid%sobj_gid -C uid%sauid -C uid%seuid -C uid%sfsuid -C uid%ssuid -C auid%sfsuid -C auid%ssuid -C auid%seuid -C euid%ssuid -C euid%sfsuid -C suid%sfsuid -C gid%segid -C gid%sfsgid -C gid%ssgid -C egid%sfsgid -C egid%ssgid -C sgid%sfsgid -F %s%s0x%X -F %s%s-%s -F %s%sunset f%d%s%denabled %s failure %s enabled %u failure %u backlog_wait_time %u backlog_wait_time_actual %u loginuid_immutable %u %s Unknown: type=%d, len=%d -S allNLMSG_ERROR %d (%s) Rule existsError - no list specifiedError deleting rule (%s)Only -i option is allowedThe audit system is disabled Error converting rateError converting backlogtaskAppend rule - bad keyword %sAdd rule - bad keyword %sDelete rule - bad keyword %sio_uring op unknown: %sError detecting machine typeError looking up elf type %dSyscall name unknown: %sElf type unknown: 0x%xarch=key=text=%sCan't create user eventOnly the -k option is allowedwatch option needs a pathkey option needs a valuekey option exceeds size limitkey %s has illegal characterpermission %s is too longPermission %c isn't supported3.1.5auditctl version %s lost: %ubacklog_wait_time_actual: %uOption %s is invalidOut of memory adding keyError opening %s (%s)Error fstat'ing %s (%s)rmError - fdopen failed (%s)auditctl.cauditctl--help-h-l-Rloginuid-immutablebacklog_wait_timereset-lostn֨0*u@000%dװ@c̱5X{*Mpٳ5q>JXd,, Ppkg$@;ȁxxhH4Ȗ(Șd(hx@hH|zRx &D$4FJ w?:*3$"\tHD D H BBH B(A0A8G 8D0A(B BBBH LpBBB A(A0G L@LH 0F(A BBBA ,XBB D O$L0\A^ A ^ B PHth=BBB B(A0A8D` 8A0A(B BBBH \ZDg A 03BDA Gb  DABI LHBE G(G0z (D BBBG G (A EBBG 8`lBED I(D0` (A ABBB dBBB B(A0A8G L@LI} 8A0A(B BBBH IfIHIAIBv H T BBB B(A0A8G L@LH 8A0A(B BBBA \xDBII B(D0D8F2 8D0A(B BBBA NSBLBBB B(A0A8G L2} 8D0A(B BBBA ,(FGA : BBA >p> 0 o  ' ( oo ooHo00@0P0`0p00000000011 101@1P1`1p11111111122 202@2P2`2p22222222233 303@3P3`3p33333333344 404@4P4`4p44444444455 505@5P5`5p555555555ӫVauditctl-3.1.5-8.el9.x86_64.debugк7zXZִF!t/Ge]?Eh=ڊ2N`X %O`pUwM,@:zv#iDMΞg..z^@0o@[Ȣ?jGNنyƾ{F-.Ka"@ *9mpHYT|\?O>8L^Nd>E*xDY¸Y*0Ц37bTHsJyg&Jwp4 _EK8c{Iٽ<'>C*+YLXUwW+獬ao lVpKHl: V 6ͥvMrձsAH$D:aT*^qY+ i ɹCe =Zv{Αqlb7Lobx\GӇj_h$ØU,LVw[&ps1I=L{S ^|bQENat51wۥUP\_tC# L"{.dsVOJZmcj"E/ԕP @n eS,oNN-k9L[ {d) *;J0}b3]H`Lq PAh=C<*9tb0}fѿ3> TE@\RUo$>#}^֭2r/>Ms[dp.64Ꝣu]MqM =dMAqx>sW@y~; $YgYZ.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata 880&hh$9 GoLQ  Y  'aoHHno  }(B00 0 066;;E VXXXȺؼ(  ((