From shawn at redhat.com Thu Aug 20 11:35:11 2015 Content-Type: multipart/mixed; boundary="===============6701360500439259283==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 5/8] Add 'Installing and Maintaining Software' and 'Updating Software' XML files. Date: Sat, 14 Sep 2013 18:49:35 -0500 Message-ID: <5234F60F.4040601@redhat.com> In-Reply-To: 718200356.12440874.1379054118537.JavaMail.root@redhat.com --===============6701360500439259283== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 9/13/13 1:35 AM, Jan Lieskovsky wrote: > > 0005-Add-Installing-and-Maintaining-Software-and-Updating.patch > > > From e0675a9045306f8bb35268e2fdddde52de00d62d Mon Sep 17 00:00:00 2001 > From: Jan Lieskovsky > Date: Thu, 12 Sep 2013 17:23:20 +0200 > Subject: [PATCH 5/8] Add 'Installing and Maintaining Software' and 'Updat= ing > Software' XML files. > > > Signed-off-by: Jan Lieskovsky > --- > FEDORA/input/system/software/software.xml | 8 ++++ > FEDORA/input/system/software/updating.xml | 72 ++++++++++++++++++++++++= +++++++ > 2 files changed, 80 insertions(+) > create mode 100644 FEDORA/input/system/software/software.xml > create mode 100644 FEDORA/input/system/software/updating.xml > > diff --git a/FEDORA/input/system/software/software.xml b/FEDORA/input/sys= tem/software/software.xml > new file mode 100644 > index 0000000..97558fb > --- /dev/null > +++ b/FEDORA/input/system/software/software.xml > @@ -0,0 +1,8 @@ > + > +Installing and Maintaining Software > +The following sections contain information on > +security-relevant choices during the initial operating system > +installation process and the setup of software > +updates. > + > + > diff --git a/FEDORA/input/system/software/updating.xml b/FEDORA/input/sys= tem/software/updating.xml > new file mode 100644 > index 0000000..0ad4b79 > --- /dev/null > +++ b/FEDORA/input/system/software/updating.xml > @@ -0,0 +1,72 @@ > + > +Updating Software > +The yum command line tool is used to install and > +update software packages. The system also provides a graphical > +software update tool in the System menu, in the Administration= submenu, > +called Software Update. > +

> +Fedora systems contain an installed software catalog called > +the RPM database, which records metadata of installed packages. Tools s= uch as > +yum or the graphical Software Update ensure usage of RPM > +packages for software installation. This allows for insight into the cu= rrent > +inventory of installed software on the system, and is highly recommended. > +
> + > + > + > +Ensure gpgcheck Enabled In Main Yum Configuration > +The gpgcheck option should be used to ensure > +checking of an RPM package's signature always occurs prior to its > +installation. To configure yum to check package signatures before instal= ling > +them, ensure the following line appears in /etc/yum.conf in > +the [main] section: > +
gpgcheck=3D1
> +
> + > +To determine whether yum is configured to use gpgcheck, > +inspect /etc/yum.conf and ensure the following appears in the > +[main] section: > +
gpgcheck=3D1
> +A value of 1 indicates that gpgcheck is enabled. Absen= ce of a > +gpgcheck line or a setting of 0 indicates that it is > +disabled. > +
> + > +Ensuring the validity of packages' cryptographic signatures prior to > +installation ensures the provenance of the software and > +protects against malicious tampering. > + > + These CCE's are operating system specific. We'll need to work with Steve = Grubb (+Jeff and NIST?) to get new ones assigned for Fedora. For the = time being, we should strip off CCE values for the Fedora content. > + > + > + ^^ test attestation as mentioned by Dave > +
> + > + > +Ensure gpgcheck Enabled For All Yum Package Repositories > +To ensure signature checking is not disabled for > +any repos, remove any lines from files in /etc/yum.repos.d of t= he form: > +
gpgcheck=3D0
> +
> + > +To determine whether yum has been configured to disable > +gpgcheck for any repos, inspect all files in > +/etc/yum.repos.d and ensure the following does not appear in any > +sections: > +
gpgcheck=3D0
> +A value of 0 indicates that gpgcheck has been disabled= for that repo. > +
> + > +Ensuring all packages' cryptographic signatures are valid prior to > +installation ensures the provenance of the software and > +protects against malicious tampering. > + > + ^^ CCE > + > + > + ^^ test attestation > +
> + > +
> -- 1.7.11.7 > > > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide -- = Shawn Wells Director, Innovation Programs shawn(a)redhat.com | 443.534.0130 @shawndwells --===============6701360500439259283== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5PbiA5LzEzLzEzIDE6MzUgQU0sIEphbiBMaWVza292c2t5CiAgICAgIHdyb3RlOjxicj4KICAg IDwvZGl2PgogICAgPGJsb2NrcXVvdGUKICAgICAgY2l0ZT0ibWlkOjcxODIwMDM1Ni4xMjQ0MDg3 NC4xMzc5MDU0MTE4NTM3LkphdmFNYWlsLnJvb3RAcmVkaGF0LmNvbSIKICAgICAgdHlwZT0iY2l0 ZSI+CiAgICAgIDxicj4KICAgICAgPGZpZWxkc2V0IGNsYXNzPSJtaW1lQXR0YWNobWVudEhlYWRl ciI+PGxlZ2VuZAogICAgICAgICAgY2xhc3M9Im1pbWVBdHRhY2htZW50SGVhZGVyTmFtZSI+MDAw NS1BZGQtSW5zdGFsbGluZy1hbmQtTWFpbnRhaW5pbmctU29mdHdhcmUtYW5kLVVwZGF0aW5nLnBh dGNoPC9sZWdlbmQ+PC9maWVsZHNldD4KICAgICAgPGJyPgogICAgICA8ZGl2IGNsYXNzPSJtb3ot dGV4dC1wbGFpbiIgd3JhcD0idHJ1ZSIgZ3JhcGhpY2FsLXF1b3RlPSJ0cnVlIgogICAgICAgIHN0 eWxlPSJmb250LWZhbWlseTogLW1vei1maXhlZDsgZm9udC1zaXplOiAxMnB4OyIKICAgICAgICBs YW5nPSJ4LXdlc3Rlcm4iPgogICAgICAgIDxwcmUgd3JhcD0iIj5Gcm9tIGUwNjc1YTkwNDUzMDZm OGJiMzUyNjhlMmZkZGRkZTUyZGUwMGQ2MmQgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCkZyb206 IEphbiBMaWVza292c2t5IDxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIgY2xhc3M9Im1vei10eHQt bGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmpsaWVza292QHJlZGhhdC5jb20iPiZsdDtqbGll c2tvdkByZWRoYXQuY29tJmd0OzwvYT4KRGF0ZTogVGh1LCAxMiBTZXAgMjAxMyAxNzoyMzoyMCAr MDIwMApTdWJqZWN0OiBbUEFUQ0ggNS84XSBBZGQgJ0luc3RhbGxpbmcgYW5kIE1haW50YWluaW5n IFNvZnR3YXJlJyBhbmQgJ1VwZGF0aW5nCiBTb2Z0d2FyZScgWE1MIGZpbGVzLgoKClNpZ25lZC1v ZmYtYnk6IEphbiBMaWVza292c2t5IDxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIgY2xhc3M9Im1v ei10eHQtbGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmpsaWVza292QHJlZGhhdC5jb20iPiZs dDtqbGllc2tvdkByZWRoYXQuY29tJmd0OzwvYT4KLS0tCiBGRURPUkEvaW5wdXQvc3lzdGVtL3Nv ZnR3YXJlL3NvZnR3YXJlLnhtbCB8ICA4ICsrKysKIEZFRE9SQS9pbnB1dC9zeXN0ZW0vc29mdHdh cmUvdXBkYXRpbmcueG1sIHwgNzIgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKwogMiBm aWxlcyBjaGFuZ2VkLCA4MCBpbnNlcnRpb25zKCspCiBjcmVhdGUgbW9kZSAxMDA2NDQgRkVET1JB L2lucHV0L3N5c3RlbS9zb2Z0d2FyZS9zb2Z0d2FyZS54bWwKIGNyZWF0ZSBtb2RlIDEwMDY0NCBG RURPUkEvaW5wdXQvc3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbAoKZGlmZiAtLWdpdCBhL0ZF RE9SQS9pbnB1dC9zeXN0ZW0vc29mdHdhcmUvc29mdHdhcmUueG1sIGIvRkVET1JBL2lucHV0L3N5 c3RlbS9zb2Z0d2FyZS9zb2Z0d2FyZS54bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAw MDAwMC4uOTc1NThmYgotLS0gL2Rldi9udWxsCisrKyBiL0ZFRE9SQS9pbnB1dC9zeXN0ZW0vc29m dHdhcmUvc29mdHdhcmUueG1sCkBAIC0wLDAgKzEsOCBAQAorJmx0O0dyb3VwIGlkPSJzb2Z0d2Fy ZSImZ3Q7CismbHQ7dGl0bGUmZ3Q7SW5zdGFsbGluZyBhbmQgTWFpbnRhaW5pbmcgU29mdHdhcmUm bHQ7L3RpdGxlJmd0OworJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSBmb2xsb3dpbmcgc2VjdGlvbnMg Y29udGFpbiBpbmZvcm1hdGlvbiBvbgorc2VjdXJpdHktcmVsZXZhbnQgY2hvaWNlcyBkdXJpbmcg dGhlIGluaXRpYWwgb3BlcmF0aW5nIHN5c3RlbQoraW5zdGFsbGF0aW9uIHByb2Nlc3MgYW5kIHRo ZSBzZXR1cCBvZiBzb2Z0d2FyZQordXBkYXRlcy4mbHQ7L2Rlc2NyaXB0aW9uJmd0OworCismbHQ7 L0dyb3VwJmd0OwpkaWZmIC0tZ2l0IGEvRkVET1JBL2lucHV0L3N5c3RlbS9zb2Z0d2FyZS91cGRh dGluZy54bWwgYi9GRURPUkEvaW5wdXQvc3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi4wYWQ0Yjc5Ci0tLSAvZGV2L251bGwKKysr IGIvRkVET1JBL2lucHV0L3N5c3RlbS9zb2Z0d2FyZS91cGRhdGluZy54bWwKQEAgLTAsMCArMSw3 MiBAQAorJmx0O0dyb3VwIGlkPSJ1cGRhdGluZyImZ3Q7CismbHQ7dGl0bGUmZ3Q7VXBkYXRpbmcg U29mdHdhcmUmbHQ7L3RpdGxlJmd0OworJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSAmbHQ7dHQmZ3Q7 eXVtJmx0Oy90dCZndDsgY29tbWFuZCBsaW5lIHRvb2wgaXMgdXNlZCB0byBpbnN0YWxsIGFuZAor dXBkYXRlIHNvZnR3YXJlIHBhY2thZ2VzLiBUaGUgc3lzdGVtIGFsc28gcHJvdmlkZXMgYSBncmFw aGljYWwKK3NvZnR3YXJlIHVwZGF0ZSB0b29sIGluIHRoZSAmbHQ7YiZndDtTeXN0ZW0mbHQ7L2Im Z3Q7IG1lbnUsIGluIHRoZSAmbHQ7YiZndDtBZG1pbmlzdHJhdGlvbiZsdDsvYiZndDsgc3VibWVu dSwKK2NhbGxlZCAmbHQ7YiZndDtTb2Z0d2FyZSBVcGRhdGUmbHQ7L2ImZ3Q7LgorJmx0O2JyIC8m Z3Q7Jmx0O2JyIC8mZ3Q7CitGZWRvcmEgc3lzdGVtcyBjb250YWluIGFuIGluc3RhbGxlZCBzb2Z0 d2FyZSBjYXRhbG9nIGNhbGxlZAordGhlIFJQTSBkYXRhYmFzZSwgd2hpY2ggcmVjb3JkcyBtZXRh ZGF0YSBvZiBpbnN0YWxsZWQgcGFja2FnZXMuICBUb29scyBzdWNoIGFzCismbHQ7dHQmZ3Q7eXVt Jmx0Oy90dCZndDsgb3IgdGhlIGdyYXBoaWNhbCAmbHQ7YiZndDtTb2Z0d2FyZSBVcGRhdGUmbHQ7 L2ImZ3Q7IGVuc3VyZSB1c2FnZSBvZiBSUE0KK3BhY2thZ2VzIGZvciBzb2Z0d2FyZSBpbnN0YWxs YXRpb24uICBUaGlzIGFsbG93cyBmb3IgaW5zaWdodCBpbnRvIHRoZSBjdXJyZW50CitpbnZlbnRv cnkgb2YgaW5zdGFsbGVkIHNvZnR3YXJlIG9uIHRoZSBzeXN0ZW0sIGFuZCBpcyBoaWdobHkgcmVj b21tZW5kZWQuCismbHQ7L2Rlc2NyaXB0aW9uJmd0OworCismbHQ7IS0tIFJFTUlOREVSOiBCZWZv cmUgdGVsbGluZyBwZW9wbGUgdG8gdXBkYXRlIHRoZWlyIHN5c3RlbXMKKyAgICAgdmlhIHRoZSBz ZWN1cml0eV9wYXRjaGVzX3VwX3RvX2RhdGUgcnVsZSwgd2UgbXVzdAorICAgICBlbnN1cmUgdGhl eSBoYXZlIGNvbmZpZ3VyZWQgYW4gdXBkYXRlIHNvdXJjZSEgLS0mZ3Q7CismbHQ7UnVsZSBpZD0i ZW5zdXJlX2dwZ2NoZWNrX2dsb2JhbGx5X2FjdGl2YXRlZCIgc2V2ZXJpdHk9ImhpZ2giJmd0Owor Jmx0O3RpdGxlJmd0O0Vuc3VyZSBncGdjaGVjayBFbmFibGVkIEluIE1haW4gWXVtIENvbmZpZ3Vy YXRpb24mbHQ7L3RpdGxlJmd0OworJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSAmbHQ7dHQmZ3Q7Z3Bn Y2hlY2smbHQ7L3R0Jmd0OyBvcHRpb24gc2hvdWxkIGJlIHVzZWQgdG8gZW5zdXJlCitjaGVja2lu ZyBvZiBhbiBSUE0gcGFja2FnZSdzIHNpZ25hdHVyZSBhbHdheXMgb2NjdXJzIHByaW9yIHRvIGl0 cworaW5zdGFsbGF0aW9uLiBUbyBjb25maWd1cmUgeXVtIHRvIGNoZWNrIHBhY2thZ2Ugc2lnbmF0 dXJlcyBiZWZvcmUgaW5zdGFsbGluZwordGhlbSwgZW5zdXJlIHRoZSBmb2xsb3dpbmcgbGluZSBh cHBlYXJzIGluICZsdDt0dCZndDsvZXRjL3l1bS5jb25mJmx0Oy90dCZndDsgaW4KK3RoZSAmbHQ7 dHQmZ3Q7W21haW5dJmx0Oy90dCZndDsgc2VjdGlvbjoKKyZsdDtwcmUmZ3Q7Z3BnY2hlY2s9MSZs dDsvcHJlJmd0OworJmx0Oy9kZXNjcmlwdGlvbiZndDsKKyZsdDtvY2lsIGNsYXVzZT0iR1BHIGNo ZWNraW5nIGlzIG5vdCBlbmFibGVkIiZndDsKK1RvIGRldGVybWluZSB3aGV0aGVyICZsdDt0dCZn dDt5dW0mbHQ7L3R0Jmd0OyBpcyBjb25maWd1cmVkIHRvIHVzZSAmbHQ7dHQmZ3Q7Z3BnY2hlY2sm bHQ7L3R0Jmd0OywKK2luc3BlY3QgJmx0O3R0Jmd0Oy9ldGMveXVtLmNvbmYmbHQ7L3R0Jmd0OyBh bmQgZW5zdXJlIHRoZSBmb2xsb3dpbmcgYXBwZWFycyBpbiB0aGUKKyZsdDt0dCZndDtbbWFpbl0m bHQ7L3R0Jmd0OyBzZWN0aW9uOgorJmx0O3ByZSZndDtncGdjaGVjaz0xJmx0Oy9wcmUmZ3Q7CitB IHZhbHVlIG9mICZsdDt0dCZndDsxJmx0Oy90dCZndDsgaW5kaWNhdGVzIHRoYXQgJmx0O3R0Jmd0 O2dwZ2NoZWNrJmx0Oy90dCZndDsgaXMgZW5hYmxlZC4gQWJzZW5jZSBvZiBhCismbHQ7dHQmZ3Q7 Z3BnY2hlY2smbHQ7L3R0Jmd0OyBsaW5lIG9yIGEgc2V0dGluZyBvZiAmbHQ7dHQmZ3Q7MCZsdDsv dHQmZ3Q7IGluZGljYXRlcyB0aGF0IGl0IGlzCitkaXNhYmxlZC4KKyZsdDsvb2NpbCZndDsKKyZs dDtyYXRpb25hbGUmZ3Q7CitFbnN1cmluZyB0aGUgdmFsaWRpdHkgb2YgcGFja2FnZXMnIGNyeXB0 b2dyYXBoaWMgc2lnbmF0dXJlcyBwcmlvciB0bworaW5zdGFsbGF0aW9uIGVuc3VyZXMgdGhlIHBy b3ZlbmFuY2Ugb2YgdGhlIHNvZnR3YXJlIGFuZAorcHJvdGVjdHMgYWdhaW5zdCBtYWxpY2lvdXMg dGFtcGVyaW5nLgorJmx0Oy9yYXRpb25hbGUmZ3Q7CismbHQ7aWRlbnQgY2NlPSIyNjcwOS02IiAv Jmd0OzwvcHJlPgogICAgICA8L2Rpdj4KICAgIDwvYmxvY2txdW90ZT4KICAgIDxicj4KICAgIFRo ZXNlIENDRSdzIGFyZSBvcGVyYXRpbmcgc3lzdGVtIHNwZWNpZmljLiBXZSdsbCBuZWVkIHRvIHdv cmsgd2l0aAogICAgU3RldmUgR3J1YmIgKCtKZWZmIGFuZCBOSVNUPykgdG8gZ2V0IG5ldyBvbmVz IGFzc2lnbmVkIGZvciBGZWRvcmEuCiAgICBGb3IgdGhlIHRpbWUgYmVpbmcsIHdlIHNob3VsZCBz dHJpcCBvZmYgQ0NFIHZhbHVlcyBmb3IgdGhlIEZlZG9yYQogICAgY29udGVudC48YnI+CiAgICA8 YnI+CiAgICA8YmxvY2txdW90ZQogICAgICBjaXRlPSJtaWQ6NzE4MjAwMzU2LjEyNDQwODc0LjEz NzkwNTQxMTg1MzcuSmF2YU1haWwucm9vdEByZWRoYXQuY29tIgogICAgICB0eXBlPSJjaXRlIj4K ICAgICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxhaW4iIHdyYXA9InRydWUiIGdyYXBoaWNhbC1x dW90ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9udC1mYW1pbHk6IC1tb3otZml4ZWQ7IGZvbnQt c2l6ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC13ZXN0ZXJuIj4KICAgICAgICA8cHJlIHdyYXA9 IiI+CismbHQ7b3ZhbCBpZD0ieXVtX2dwZ2NoZWNrX2dsb2JhbF9hY3RpdmF0aW9uIiAvJmd0Owor Jmx0O3JlZiBuaXN0PSJTSS03LE1BLTEoYikiIGRpc2E9IjM1Miw2NjMiIC8mZ3Q7CismbHQ7dGVz dGVkIGJ5PSJNTSIgb249IjIwMTIwOTI4Ii8mZ3Q7PC9wcmU+CiAgICAgIDwvZGl2PgogICAgPC9i bG9ja3F1b3RlPgogICAgXl4gdGVzdCBhdHRlc3RhdGlvbiBhcyBtZW50aW9uZWQgYnkgRGF2ZTxi cj4KICAgIDxicj4KICAgIDxibG9ja3F1b3RlCiAgICAgIGNpdGU9Im1pZDo3MTgyMDAzNTYuMTI0 NDA4NzQuMTM3OTA1NDExODUzNy5KYXZhTWFpbC5yb290QHJlZGhhdC5jb20iCiAgICAgIHR5cGU9 ImNpdGUiPgogICAgICA8ZGl2IGNsYXNzPSJtb3otdGV4dC1wbGFpbiIgd3JhcD0idHJ1ZSIgZ3Jh cGhpY2FsLXF1b3RlPSJ0cnVlIgogICAgICAgIHN0eWxlPSJmb250LWZhbWlseTogLW1vei1maXhl ZDsgZm9udC1zaXplOiAxMnB4OyIKICAgICAgICBsYW5nPSJ4LXdlc3Rlcm4iPgogICAgICAgIDxw cmUgd3JhcD0iIj4KKyZsdDsvUnVsZSZndDsKKworJmx0O1J1bGUgaWQ9ImVuc3VyZV9ncGdjaGVj a19uZXZlcl9kaXNhYmxlZCIgc2V2ZXJpdHk9ImhpZ2giJmd0OworJmx0O3RpdGxlJmd0O0Vuc3Vy ZSBncGdjaGVjayBFbmFibGVkIEZvciBBbGwgWXVtIFBhY2thZ2UgUmVwb3NpdG9yaWVzJmx0Oy90 aXRsZSZndDsKKyZsdDtkZXNjcmlwdGlvbiZndDtUbyBlbnN1cmUgc2lnbmF0dXJlIGNoZWNraW5n IGlzIG5vdCBkaXNhYmxlZCBmb3IKK2FueSByZXBvcywgcmVtb3ZlIGFueSBsaW5lcyBmcm9tIGZp bGVzIGluICZsdDt0dCZndDsvZXRjL3l1bS5yZXBvcy5kJmx0Oy90dCZndDsgb2YgdGhlIGZvcm06 CismbHQ7cHJlJmd0O2dwZ2NoZWNrPTAmbHQ7L3ByZSZndDsKKyZsdDsvZGVzY3JpcHRpb24mZ3Q7 CismbHQ7b2NpbCBjbGF1c2U9IkdQRyBjaGVja2luZyBpcyBkaXNhYmxlZCImZ3Q7CitUbyBkZXRl cm1pbmUgd2hldGhlciAmbHQ7dHQmZ3Q7eXVtJmx0Oy90dCZndDsgaGFzIGJlZW4gY29uZmlndXJl ZCB0byBkaXNhYmxlCismbHQ7dHQmZ3Q7Z3BnY2hlY2smbHQ7L3R0Jmd0OyBmb3IgYW55IHJlcG9z LCAgaW5zcGVjdCBhbGwgZmlsZXMgaW4KKyZsdDt0dCZndDsvZXRjL3l1bS5yZXBvcy5kJmx0Oy90 dCZndDsgYW5kIGVuc3VyZSB0aGUgZm9sbG93aW5nIGRvZXMgbm90IGFwcGVhciBpbiBhbnkKK3Nl Y3Rpb25zOgorJmx0O3ByZSZndDtncGdjaGVjaz0wJmx0Oy9wcmUmZ3Q7CitBIHZhbHVlIG9mICZs dDt0dCZndDswJmx0Oy90dCZndDsgaW5kaWNhdGVzIHRoYXQgJmx0O3R0Jmd0O2dwZ2NoZWNrJmx0 Oy90dCZndDsgaGFzIGJlZW4gZGlzYWJsZWQgZm9yIHRoYXQgcmVwby4KKyZsdDsvb2NpbCZndDsK KyZsdDtyYXRpb25hbGUmZ3Q7CitFbnN1cmluZyBhbGwgcGFja2FnZXMnIGNyeXB0b2dyYXBoaWMg c2lnbmF0dXJlcyBhcmUgdmFsaWQgcHJpb3IgdG8KK2luc3RhbGxhdGlvbiBlbnN1cmVzIHRoZSBw cm92ZW5hbmNlIG9mIHRoZSBzb2Z0d2FyZSBhbmQKK3Byb3RlY3RzIGFnYWluc3QgbWFsaWNpb3Vz IHRhbXBlcmluZy4KKyZsdDsvcmF0aW9uYWxlJmd0OworJmx0O2lkZW50IGNjZT0iMjY2NDctOCIg LyZndDs8L3ByZT4KICAgICAgPC9kaXY+CiAgICA8L2Jsb2NrcXVvdGU+CiAgICBeXiBDQ0U8YnI+ CiAgICA8YmxvY2txdW90ZQogICAgICBjaXRlPSJtaWQ6NzE4MjAwMzU2LjEyNDQwODc0LjEzNzkw NTQxMTg1MzcuSmF2YU1haWwucm9vdEByZWRoYXQuY29tIgogICAgICB0eXBlPSJjaXRlIj4KICAg ICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxhaW4iIHdyYXA9InRydWUiIGdyYXBoaWNhbC1xdW90 ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9udC1mYW1pbHk6IC1tb3otZml4ZWQ7IGZvbnQtc2l6 ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC13ZXN0ZXJuIj4KICAgICAgICA8cHJlIHdyYXA9IiI+ CismbHQ7b3ZhbCBpZD0iZW5zdXJlX2dwZ2NoZWNrX25ldmVyX2Rpc2FibGVkIiAvJmd0OworJmx0 O3JlZiBuaXN0PSJTSS03LE1BLTEoYikiIGRpc2E9IjM1Miw2NjMiLyZndDsKKyZsdDt0ZXN0ZWQg Ynk9Ik1NIiBvbj0iMjAxMjA5MjgiLyZndDs8L3ByZT4KICAgICAgPC9kaXY+CiAgICA8L2Jsb2Nr cXVvdGU+CiAgICBeXiB0ZXN0IGF0dGVzdGF0aW9uPGJyPgogICAgPGJsb2NrcXVvdGUKICAgICAg Y2l0ZT0ibWlkOjcxODIwMDM1Ni4xMjQ0MDg3NC4xMzc5MDU0MTE4NTM3LkphdmFNYWlsLnJvb3RA cmVkaGF0LmNvbSIKICAgICAgdHlwZT0iY2l0ZSI+CiAgICAgIDxkaXYgY2xhc3M9Im1vei10ZXh0 LXBsYWluIiB3cmFwPSJ0cnVlIiBncmFwaGljYWwtcXVvdGU9InRydWUiCiAgICAgICAgc3R5bGU9 ImZvbnQtZmFtaWx5OiAtbW96LWZpeGVkOyBmb250LXNpemU6IDEycHg7IgogICAgICAgIGxhbmc9 Ingtd2VzdGVybiI+CiAgICAgICAgPHByZSB3cmFwPSIiPgorJmx0Oy9SdWxlJmd0OworCismbHQ7 L0dyb3VwJmd0Owo8ZGl2IGNsYXNzPSJtb3otdHh0LXNpZyI+LS0gCjEuNy4xMS43Cgo8L2Rpdj48 L3ByZT4KICAgICAgPC9kaXY+CiAgICAgIDxicj4KICAgICAgPGZpZWxkc2V0IGNsYXNzPSJtaW1l QXR0YWNobWVudEhlYWRlciI+PC9maWVsZHNldD4KICAgICAgPGJyPgogICAgICA8ZGl2IGNsYXNz PSJtb3otdGV4dC1wbGFpbiIgd3JhcD0idHJ1ZSIgZ3JhcGhpY2FsLXF1b3RlPSJ0cnVlIgogICAg ICAgIHN0eWxlPSJmb250LWZhbWlseTogLW1vei1maXhlZDsgZm9udC1zaXplOiAxMnB4OyIKICAg ICAgICBsYW5nPSJ4LXVuaWNvZGUiPgogICAgICAgIDxwcmUgd3JhcD0iIj5fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpzY2FwLXNlY3VyaXR5LWd1aWRlIG1h aWxpbmcgbGlzdAo8YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGNsYXNzPSJtb3otdHh0LWxpbmst YWJicmV2aWF0ZWQiIGhyZWY9Im1haWx0bzpzY2FwLXNlY3VyaXR5LWd1aWRlQGxpc3RzLmZlZG9y YWhvc3RlZC5vcmciPnNjYXAtc2VjdXJpdHktZ3VpZGVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwv YT4KPGEgbW96LWRvLW5vdC1zZW5kPSJ0cnVlIiBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0 IiBocmVmPSJodHRwczovL2xpc3RzLmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9z Y2FwLXNlY3VyaXR5LWd1aWRlIj5odHRwczovL2xpc3RzLmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1h bi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRlPC9hPgo8L3ByZT4KICAgICAgPC9kaXY+CiAg ICA8L2Jsb2NrcXVvdGU+CiAgICA8YnI+CiAgICA8YnI+CiAgICA8cHJlIGNsYXNzPSJtb3otc2ln bmF0dXJlIiBjb2xzPSI3MiI+LS0gClNoYXduIFdlbGxzCkRpcmVjdG9yLCBJbm5vdmF0aW9uIFBy b2dyYW1zCjxhIGNsYXNzPSJtb3otdHh0LWxpbmstYWJicmV2aWF0ZWQiIGhyZWY9Im1haWx0bzpz aGF3bkByZWRoYXQuY29tIj5zaGF3bkByZWRoYXQuY29tPC9hPiB8IDQ0My41MzQuMDEzMApAc2hh d25kd2VsbHM8L3ByZT4KICA8L2JvZHk+CjwvaHRtbD4K --===============6701360500439259283==--