Current File : //usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyc
�
���^c @@ s( d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l m
Z
d d l m Z e j e � Z d Z d d d d
d d d
d d g Z i d d 6d d 6d d 6d d 6Z d � Z d � Z d d � Z d � Z d � Z d � Z d � Z d S( u{
A salt util for modifying the audit policies on the machine. This util is used
by the ``win_auditpol`` and ``win_lgpo`` modules.
Though this utility does not set group policy for auditing, it displays how all
auditing configuration is applied on the machine, either set directly or via
local or domain group policy.
.. versionadded:: 2018.3.4
.. versionadded:: 2019.2.1
This util allows you to view and modify the audit settings as they are applied
on the machine. The audit settings are broken down into nine categories:
- Account Logon
- Account Management
- Detailed Tracking
- DS Access
- Logon/Logoff
- Object Access
- Policy Change
- Privilege Use
- System
The ``get_settings`` function will return the subcategories for all nine of
the above categories in one dictionary along with their auditing status.
To modify a setting you only need to specify the subcategory name and the value
you wish to set. Valid settings are:
- No Auditing
- Success
- Failure
- Success and Failure
Usage:
.. code-block:: python
import salt.utils.win_lgpo_auditpol
# Get current state of all audit settings
salt.utils.win_lgpo_auditpol.get_settings()
# Get the current state of all audit settings in the "Account Logon"
# category
salt.utils.win_lgpo_auditpol.get_settings(category="Account Logon")
# Get current state of the "Credential Validation" setting
salt.utils.win_lgpo_auditpol.get_setting(name='Credential Validation')
# Set the state of the "Credential Validation" setting to Success and
# Failure
salt.utils.win_lgpo_auditpol.set_setting(name='Credential Validation',
value='Success and Failure')
# Set the state of the "Credential Validation" setting to No Auditing
salt.utils.win_lgpo_auditpol.set_setting(name='Credential Validation',
value='No Auditing')
i ( t absolute_importt unicode_literalst print_functionN( t CommandExecutionError( t zipu auditpolu
Account Logonu Account Managementu Detailed Trackingu DS Accessu Logon/Logoffu
Object Accessu
Policy Changeu
Privilege Useu Systemu! /success:disable /failure:disableu No Auditingu /success:enable /failure:disableu Successu /success:disable /failure:enableu Failureu /success:enable /failure:enableu Success and Failurec C@ s t j j j � s t d f St S( u*
Only load if on a Windows system
u& This utility only available on Windows( t saltt utilst platformt
is_windowst Falset __virtualname__( ( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt __virtual__b s
c C@ s{ t j j j d d j | � d t � } | d d k rE | d j � Sd j | � } | d j | d � 7} t | � � d S(
u
Helper function for running the auditpol command
Args:
cmd (str): the auditpol command to run
Returns:
list: A list containing each line of the return (splitlines)
Raises:
CommandExecutionError: If the command encounters an error
t cmdu auditpol {0}t python_shellu retcodei u stdoutu& Error executing auditpol command: {0}
u
N( R t modulest cmdmodt run_allt formatt Truet
splitlinest joinR ( R t rett msg( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt
_auditpol_cmdl s
u Allc C@ s� | j � d k r d } nC | j � g t D] } | j � ^ q+ k r^ t d j | � � � n d j | � } t | � } i } xe | d D]Y } d | j � k r� | j t t t t
t j d | j � � � g d � � � � q� q� W| S(
u�
Get the current configuration for all audit settings specified in the
category
Args:
category (str):
One of the nine categories to return. Can also be ``All`` to return
the settings for all categories. Valid options are:
- Account Logon
- Account Management
- Detailed Tracking
- DS Access
- Logon/Logoff
- Object Access
- Policy Change
- Privilege Use
- System
- All
Default value is ``All``
Returns:
dict: A dictionary containing all subcategories for the specified
category along with their current configuration
Raises:
KeyError: On invalid category
CommandExecutionError: If an error is encountered retrieving the settings
Usage:
.. code-block:: python
import salt.utils.win_lgpo_auditpol
# Get current state of all audit settings
salt.utils.win_lgpo_auditpol.get_settings()
# Get the current state of all audit settings in the "Account Logon"
# category
salt.utils.win_lgpo_auditpol.get_settings(category="Account Logon")
u allu *u Invalid category: "{0}"u /get /category:"{0}"i u u \s{2,}i ( u allu *(
t lowert
categoriest KeyErrorR R t stript updatet dictt listR t itert ret split( t categoryt xR t resultsR t line( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt get_settings� s - + Ec C@ sY t d d � } x. | D]& } | j � | j � k r | | Sq Wt d j | � � � d S( uB
Get the current configuration for the named audit setting
Args:
name (str): The name of the setting to retrieve
Returns:
str: The current configuration for the named setting
Raises:
KeyError: On invalid setting name
CommandExecutionError: If an error is encountered retrieving the settings
Usage:
.. code-block:: python
import salt.utils.win_lgpo_auditpol
# Get current state of the "Credential Validation" setting
salt.utils.win_lgpo_auditpol.get_setting(name='Credential Validation')
R" u Allu Invalid name: {0}N( R& R R R ( t namet current_settingst setting( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt get_setting� s
c C@ sI d t k rA t d d � } g | D] } | j � ^ q" t d <n t d S( Nu auditpol.valid_namesR" u All( t __context__R& R ( t settingst k( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt _get_valid_names� s &c C@ s� | j � t � k r- t d j | � � � n xU t D]8 } | j � | j � k r4 d j | t | � } Pq4 q4 Wt d j | � � � t | � t S( uG
Set the configuration for the named audit setting
Args:
name (str):
The name of the setting to configure
value (str):
The configuration for the named value. Valid options are:
- No Auditing
- Success
- Failure
- Success and Failure
Returns:
bool: True if successful
Raises:
KeyError: On invalid ``name`` or ``value``
CommandExecutionError: If an error is encountered modifying the setting
Usage:
.. code-block:: python
import salt.utils.win_lgpo_auditpol
# Set the state of the "Credential Validation" setting to Success and
# Failure
salt.utils.win_lgpo_auditpol.set_setting(name='Credential Validation',
value='Success and Failure')
# Set the state of the "Credential Validation" setting to No Auditing
salt.utils.win_lgpo_auditpol.set_setting(name='Credential Validation',
value='No Auditing')
u Invalid name: {0}u /set /subcategory:"{0}" {1}u Invalid setting value: {0}( R R. R R R, R R ( R' t valueR) R ( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt set_setting� s (
c C@ si t j d d � � } | j } Wd QXd j | � } t | � t j j j | � � } | j � SWd QXd S( u_
Gets the contents of an auditpol /backup. Used by the LGPO module to get
fieldnames and GUIDs for Advanced Audit policies.
Returns:
list: A list of lines form the backup file
Usage:
.. code-block:: python
import salt.utils.win_lgpo_auditpol
dump = salt.utils.win_lgpo_auditpol.get_auditpol_dump()
t suffixu .csvNu /backup /file:{0}(
t tempfilet NamedTemporaryFileR' R R R R t filest fopent readlines( t tmp_filet csv_fileR t fp( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt get_auditpol_dump s
( t __doc__t
__future__R R R t loggingR R2 t salt.modules.cmdmodR t salt.utils.filest salt.utils.platformt salt.exceptionsR t salt.ext.six.movesR t getLoggert __name__t logR
R R, R R R& R* R. R0 R: ( ( ( s@ /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_auditpol.pyt <module>= s>
= 6
Mini Shell