P*MHº(µ/ýXœ÷ ,õpackage/0000755015257763332011164 5ustar rootvar/7761lib/2012522dbus/174756051messagebusetc136dbus-1/3031session.conf64415065365 0 <> ystem1221us42767013104doc/16437014606examples/417GetAllMatchRules.py7524202214#!bin/env python import sysargparsedbutime def get_cmdline(pid): = '' if pid > 0: try procpath = '/proc/' + str + '/'open(, 'r') as f" ".join(f.rea).split('\0'))exceptass return # Parsing parameters r =.ArgumentP(description='Testing rules').add_a('--', help='', ac"store_true"allprint allargs = _args() if args.and: rint_help() sys.exit(1) # Fetch data fromus driver: =.SBus() else remote_object =get("orgDBus", "/org) bus_ifaceInterface(, ) stat.Debug.Stats") _ = .() ("GetConne failed: did you enable i?"nam.ListNamunique_[ a for a in if a.startswith(":") ] pidict((name,UnixProcessID))name in ) cms[name]well_ ] ownerwknNameOwner(wknwkn in ) k{'wkn': [kk, v in .items() if v == ]'pid': cmcm or "': v 'warnings': 'not_signal': [ if "type='"a],_sender=Local"C0member='"arg0}) n) ='Mout selecs',a criteriaoarg0*}Pthe # nalythemall: %%d '%s' (%s): %d, %d "% []cm 'wkn']), le'])len(sum].values(), []))forin \t%s" % ))0onlyuspicious for conn,: _count =data=continue % ( cmknle)) warn_code,rule_lis[() \ in f> 0] - %s:[]- -hardening--traditional-activat203032343 E drop-i(service.d/d # has many osthus # it ly suitases where is used # or disby compiling # -- [S] CapabilityBoundingSet=CAP_SETGID UPCAPYS_RESOURCEAUDIT_WRITE DeviceAllow=/dev/null rwurandom rPolicy=strict IPAddressDeny=any LimitMEMLOCK=0 LockPersonality=yes MemoryDenyWriteExecuteNoNewPrivilegesPrivateTmpotectControlGroupsHomeKernelModulesTuReadOnlyPaths=-/ ReFamilies=AF_UNIXpaRealtiCallArchitectures=nativeFilter=@~@chown @clock @cpu-emul@debug @m @m@obsolete @raw-io @reboot @resources @swap memfd_mincore mall p UMask=0077 13625137US