AuditdConf - file /etc/audit/auditd.conf

The auditd.conf file is a standard key = value file with hash comments. Active settings are provided using the get_active_settings_value method or by using the dictionary contains functionality.

Example

>>> conf = shared[AuditdConf]
>>> conf.get_active_setting_value('log_group')
'root'
>>> 'log_file' in conf
True

class insights.parsers.auditd_conf.AuditdConf(*args, **kwargs)

Bases: Parser

A parser for accessing /etc/audit/auditd.conf.

get_active_setting_value(setting_name)

Access active setting value by setting name.

Parameters:

setting_name (string) -- Setting name

parse_content(content)

Main parsing class method which stores all interesting data from the content.

Parameters:

content (context.content) -- Parser context content