From shawn at redhat.com Thu Aug 20 11:37:11 2015 Content-Type: multipart/mixed; boundary="===============4325162986182992348==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] [RHEL/6, RHEL/7, shared] Finish logrotate_rotate_all_files => ensure_logrotate_activated transition. Replace ensure_logrotate_activated unknown test stub with actual OVAL check implementation. Date: Fri, 30 May 2014 22:27:04 -0400 Message-ID: <53893DF8.50306@redhat.com> In-Reply-To: 36765062.22788637.1401440991848.JavaMail.zimbra@redhat.com --===============4325162986182992348== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 5/30/14, 5:09 AM, Jan Lieskovsky wrote: > The change: > [1]https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?i= d=3Dd2f99b0bd6dab889c5e023cf4df90df8bab8bc33 > > attempted to replace "logrotate_rotate_all_files" OVAL check with "ensure= _logrotate_activated" OVAL check, > but failed (to do so in all locations): > > scap-security-guide]$ grep -rHn "logrotate_rotate_all_files" * > RHEL/6/input/system/logging.xml:377: > RHEL/7/input/system/logging.xml:377: > > resulting into the following new 'make validate' / verify-input-reference= s.py error message to appear: > Invalid OVAL definition referenced by XCCDF Rule: ensure_logrotate_act= ivated > > Fix that by referencing the new OVAL check name in RHEL/{6,7}/input/syste= m/logging.xml files too. > > Besides that the original RHEL/6/input/checks/ensure_logrotate_activated.= xml OVAL check was implemented just > as unknown OVAL test stub. Replace that stub definition with actual imple= mentation based on guide.html content, > move it to shared, and create links for RHEL/6 and RHEL/7. > > The proposal has been tested on RHEL/6 & RHEL/7 - rpm package builds prop= erly, make validate warning > disappeared & the check seems to be working properly on both of the produ= cts. > > Please review. > > Thank you && Regards, Jan. > -- > Jan iankko Lieskovsky / Red Hat Security Technologies Team > > 0001-RHEL-6-RHEL-7-shared-Finish-logrotate_rotate_all_fil.patch > > > From de1beb4d9137c24fd4e603b1a9e23c8d5eabc2cd Mon Sep 17 00:00:00 2001 > From: Jan Lieskovsky > Date: Fri, 30 May 2014 10:56:04 +0200 > Subject: [PATCH] [RHEL/6, RHEL/7, shared] Finish logrotate_rotate_all_fil= es =3D> > ensure_logrotate_activated transition. Replace > ensure_logrotate_activated unknown test stub with actual OVAL check > implementation. > > Signed-off-by: Jan Lieskovsky > --- > RHEL/6/input/checks/ensure_logrotate_activated.xml | 21 +--------- > RHEL/6/input/system/logging.xml | 2 +- > RHEL/7/input/checks/ensure_logrotate_activated.xml | 1 + > RHEL/7/input/system/logging.xml | 2 +- > shared/oval/ensure_logrotate_activated.xml | 46 +++++++++++++++= +++++++ > 5 files changed, 50 insertions(+), 22 deletions(-) > mode change 100644 =3D> 120000 RHEL/6/input/checks/ensure_logrotate_act= ivated.xml > create mode 120000 RHEL/7/input/checks/ensure_logrotate_activated.xml > create mode 100644 shared/oval/ensure_logrotate_activated.xml > > diff --git a/RHEL/6/input/checks/ensure_logrotate_activated.xml b/RHEL/6/= input/checks/ensure_logrotate_activated.xml > deleted file mode 100644 > index aca539b..0000000 > --- a/RHEL/6/input/checks/ensure_logrotate_activated.xml > +++ /dev/null > @@ -1,20 +0,0 @@ > - > - - id=3D"ensure_logrotate_activated" version=3D"1"> > - > - Ensure All Logs are Rotated by logrotate > - > - Red Hat Enterprise Linux 6 > - > - The logrotate (syslog rotater) service should be > - enabled. > - > - > - - test_ref=3D"test_20154" /> > - > - > - - comment=3D"use extended content to evaluated this test" > - id=3D"test_20154" version=3D"1" /> > - > diff --git a/RHEL/6/input/checks/ensure_logrotate_activated.xml b/RHEL/6/= input/checks/ensure_logrotate_activated.xml > new file mode 120000 > index 0000000..1916c40 > --- /dev/null > +++ b/RHEL/6/input/checks/ensure_logrotate_activated.xml > @@ -0,0 +1 @@ > +../../../../shared/oval/ensure_logrotate_activated.xml > \ No newline at end of file > diff --git a/RHEL/6/input/system/logging.xml b/RHEL/6/input/system/loggin= g.xml > index 82455d6..c7fc389 100644 > --- a/RHEL/6/input/system/logging.xml > +++ b/RHEL/6/input/system/logging.xml > @@ -374,7 +374,7 @@ If logrotate is configured properly, output should in= clude references to > /etc/cron.daily. > > > - > + > > > > diff --git a/RHEL/7/input/checks/ensure_logrotate_activated.xml b/RHEL/7/= input/checks/ensure_logrotate_activated.xml > new file mode 120000 > index 0000000..1916c40 > --- /dev/null > +++ b/RHEL/7/input/checks/ensure_logrotate_activated.xml > @@ -0,0 +1 @@ > +../../../../shared/oval/ensure_logrotate_activated.xml > \ No newline at end of file > diff --git a/RHEL/7/input/system/logging.xml b/RHEL/7/input/system/loggin= g.xml > index 36c2fb0..993d214 100644 > --- a/RHEL/7/input/system/logging.xml > +++ b/RHEL/7/input/system/logging.xml > @@ -374,7 +374,7 @@ If logrotate is configured properly, output should in= clude references to > /etc/cron.daily. > > > - > + > > > > diff --git a/shared/oval/ensure_logrotate_activated.xml b/shared/oval/ens= ure_logrotate_activated.xml > new file mode 100644 > index 0000000..c82b3a3 > --- /dev/null > +++ b/shared/oval/ensure_logrotate_activated.xml > @@ -0,0 +1,46 @@ > + > + > + > + Ensure the logrotate utility performs the automatic rotatio= n of log files on daily basis > + > + Red Hat Enterprise Linux 6 > + Red Hat Enterprise Linux 7 > + > + > + The frequency of automatic log files rotation performed by the log= rotate utility should be configured to run daily > + > + > + > + > + + test_ref=3D"test_logrotate_conf_daily_setting" /> > + + test_ref=3D"test_cron_daily_logrotate_existence" /> > + > + > + > + + comment=3D"Tests the presence of daily setting in /etc/logrotate.conf = file" > + id=3D"test_logrotate_conf_daily_setting" version=3D"1"> > + > + > + > + > + /etc/logrotate.conf > + ^[\s]*daily[\s]*$ > + 1 > + Is there configuration precedence in the logrotate.conf file? e.g. if = you have "daily" followed immediately by "weekly," which will the = logrotate use? Should we ensure that daily exists, and the other options = do not? I tried looking through the manpage and google with no avail. > + > + + comment=3D"Tests the existence of /etc/cron.daily/logrotate file (and = verify it actually calls logrotate utility)" > + id=3D"test_cron_daily_logrotate_existence" version=3D"1"> > + > + > + > + > + /etc/cron.daily/logrotate > + ^[\s]*/usr/sbin/logrotate[\= s]*/etc/logrotate.conf(?:.*)$ > + 1 > + > + > + > -- 1.8.3.1 --===============4325162986182992348== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGJyPgogICAgPGRpdiBjbGFzcz0ibW96LWNp dGUtcHJlZml4Ij5PbiA1LzMwLzE0LCA1OjA5IEFNLCBKYW4gTGllc2tvdnNreQogICAgICB3cm90 ZTo8YnI+CiAgICA8L2Rpdj4KICAgIDxibG9ja3F1b3RlCiAgICAgIGNpdGU9Im1pZDozNjc2NTA2 Mi4yMjc4ODYzNy4xNDAxNDQwOTkxODQ4LkphdmFNYWlsLnppbWJyYUByZWRoYXQuY29tIgogICAg ICB0eXBlPSJjaXRlIj4KICAgICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxhaW4iIHdyYXA9InRy dWUiIGdyYXBoaWNhbC1xdW90ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9udC1mYW1pbHk6IC1t b3otZml4ZWQ7IGZvbnQtc2l6ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC11bmljb2RlIj4KICAg ICAgICA8cHJlIHdyYXA9IiI+VGhlIGNoYW5nZToKICBbMV0gPGEgbW96LWRvLW5vdC1zZW5kPSJ0 cnVlIiBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0IiBocmVmPSJodHRwczovL2dpdC5mZWRv cmFob3N0ZWQub3JnL2NnaXQvc2NhcC1zZWN1cml0eS1ndWlkZS5naXQvY29tbWl0Lz9pZD1kMmY5 OWIwYmQ2ZGFiODg5YzVlMDIzY2Y0ZGY5MGRmOGJhYjhiYzMzIj5odHRwczovL2dpdC5mZWRvcmFo b3N0ZWQub3JnL2NnaXQvc2NhcC1zZWN1cml0eS1ndWlkZS5naXQvY29tbWl0Lz9pZD1kMmY5OWIw YmQ2ZGFiODg5YzVlMDIzY2Y0ZGY5MGRmOGJhYjhiYzMzPC9hPgoKYXR0ZW1wdGVkIHRvIHJlcGxh Y2UgImxvZ3JvdGF0ZV9yb3RhdGVfYWxsX2ZpbGVzIiBPVkFMIGNoZWNrIHdpdGggImVuc3VyZV9s b2dyb3RhdGVfYWN0aXZhdGVkIiBPVkFMIGNoZWNrLApidXQgZmFpbGVkICh0byBkbyBzbyBpbiBh bGwgbG9jYXRpb25zKToKCiAgc2NhcC1zZWN1cml0eS1ndWlkZV0kIGdyZXAgLXJIbiAibG9ncm90 YXRlX3JvdGF0ZV9hbGxfZmlsZXMiICoKICBSSEVMLzYvaW5wdXQvc3lzdGVtL2xvZ2dpbmcueG1s OjM3NzombHQ7b3ZhbCBpZD0ibG9ncm90YXRlX3JvdGF0ZV9hbGxfZmlsZXMiIC8mZ3Q7CiAgUkhF TC83L2lucHV0L3N5c3RlbS9sb2dnaW5nLnhtbDozNzc6Jmx0O292YWwgaWQ9ImxvZ3JvdGF0ZV9y b3RhdGVfYWxsX2ZpbGVzIiAvJmd0OwoKcmVzdWx0aW5nIGludG8gdGhlIGZvbGxvd2luZyBuZXcg J21ha2UgdmFsaWRhdGUnIC8gdmVyaWZ5LWlucHV0LXJlZmVyZW5jZXMucHkgZXJyb3IgbWVzc2Fn ZSB0byBhcHBlYXI6CiAgSW52YWxpZCBPVkFMIGRlZmluaXRpb24gcmVmZXJlbmNlZCBieSBYQ0NE RiBSdWxlOiBlbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZAoKRml4IHRoYXQgYnkgcmVmZXJlbmNp bmcgdGhlIG5ldyBPVkFMIGNoZWNrIG5hbWUgaW4gUkhFTC97Niw3fS9pbnB1dC9zeXN0ZW0vbG9n Z2luZy54bWwgZmlsZXMgdG9vLgoKQmVzaWRlcyB0aGF0IHRoZSBvcmlnaW5hbCBSSEVMLzYvaW5w dXQvY2hlY2tzL2Vuc3VyZV9sb2dyb3RhdGVfYWN0aXZhdGVkLnhtbCBPVkFMIGNoZWNrIHdhcyBp bXBsZW1lbnRlZCBqdXN0CmFzIHVua25vd24gT1ZBTCB0ZXN0IHN0dWIuIFJlcGxhY2UgdGhhdCBz dHViIGRlZmluaXRpb24gd2l0aCBhY3R1YWwgaW1wbGVtZW50YXRpb24gYmFzZWQgb24gZ3VpZGUu aHRtbCBjb250ZW50LAptb3ZlIGl0IHRvIHNoYXJlZCwgYW5kIGNyZWF0ZSBsaW5rcyBmb3IgUkhF TC82IGFuZCBSSEVMLzcuCgpUaGUgcHJvcG9zYWwgaGFzIGJlZW4gdGVzdGVkIG9uIFJIRUwvNiAm YW1wOyBSSEVMLzcgLSBycG0gcGFja2FnZSBidWlsZHMgcHJvcGVybHksIG1ha2UgdmFsaWRhdGUg d2FybmluZwpkaXNhcHBlYXJlZCAmYW1wOyB0aGUgY2hlY2sgc2VlbXMgdG8gYmUgd29ya2luZyBw cm9wZXJseSBvbiBib3RoIG9mIHRoZSBwcm9kdWN0cy4KClBsZWFzZSByZXZpZXcuCgpUaGFuayB5 b3UgJmFtcDsmYW1wOyBSZWdhcmRzLCBKYW4uCi0tCkphbiBpYW5ra28gTGllc2tvdnNreSAvIFJl ZCBIYXQgU2VjdXJpdHkgVGVjaG5vbG9naWVzIFRlYW0KPC9wcmU+CiAgICAgIDwvZGl2PgogICAg ICA8YnI+CiAgICAgIDxmaWVsZHNldCBjbGFzcz0ibWltZUF0dGFjaG1lbnRIZWFkZXIiPjxsZWdl bmQKICAgICAgICAgIGNsYXNzPSJtaW1lQXR0YWNobWVudEhlYWRlck5hbWUiPjAwMDEtUkhFTC02 LVJIRUwtNy1zaGFyZWQtRmluaXNoLWxvZ3JvdGF0ZV9yb3RhdGVfYWxsX2ZpbC5wYXRjaDwvbGVn ZW5kPjwvZmllbGRzZXQ+CiAgICAgIDxicj4KICAgICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxh aW4iIHdyYXA9InRydWUiIGdyYXBoaWNhbC1xdW90ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9u dC1mYW1pbHk6IC1tb3otZml4ZWQ7IGZvbnQtc2l6ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC13 ZXN0ZXJuIj4KICAgICAgICA8cHJlIHdyYXA9IiI+RnJvbSBkZTFiZWI0ZDkxMzdjMjRmZDRlNjAz YjFhOWUyM2M4ZDVlYWJjMmNkIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gTGll c2tvdnNreSA8YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGNsYXNzPSJtb3otdHh0LWxpbmstcmZj MjM5NkUiIGhyZWY9Im1haWx0bzpqbGllc2tvdkByZWRoYXQuY29tIj4mbHQ7amxpZXNrb3ZAcmVk aGF0LmNvbSZndDs8L2E+CkRhdGU6IEZyaSwgMzAgTWF5IDIwMTQgMTA6NTY6MDQgKzAyMDAKU3Vi amVjdDogW1BBVENIXSBbUkhFTC82LCBSSEVMLzcsIHNoYXJlZF0gRmluaXNoIGxvZ3JvdGF0ZV9y b3RhdGVfYWxsX2ZpbGVzID0mZ3Q7CiBlbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZCB0cmFuc2l0 aW9uLiAgICAgICAgICAgICAgICAgICAgICAgICAgUmVwbGFjZQogZW5zdXJlX2xvZ3JvdGF0ZV9h Y3RpdmF0ZWQgdW5rbm93biB0ZXN0IHN0dWIgd2l0aCBhY3R1YWwgT1ZBTCBjaGVjayAgICAgICAg ICAKICAgICAgICAgICAgICAgIGltcGxlbWVudGF0aW9uLgoKU2lnbmVkLW9mZi1ieTogSmFuIExp ZXNrb3Zza3kgPGEgbW96LWRvLW5vdC1zZW5kPSJ0cnVlIiBjbGFzcz0ibW96LXR4dC1saW5rLXJm YzIzOTZFIiBocmVmPSJtYWlsdG86amxpZXNrb3ZAcmVkaGF0LmNvbSI+Jmx0O2psaWVza292QHJl ZGhhdC5jb20mZ3Q7PC9hPgotLS0KIFJIRUwvNi9pbnB1dC9jaGVja3MvZW5zdXJlX2xvZ3JvdGF0 ZV9hY3RpdmF0ZWQueG1sIHwgMjEgKy0tLS0tLS0tLQogUkhFTC82L2lucHV0L3N5c3RlbS9sb2dn aW5nLnhtbCAgICAgICAgICAgICAgICAgICAgfCAgMiArLQogUkhFTC83L2lucHV0L2NoZWNrcy9l bnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwgfCAgMSArCiBSSEVMLzcvaW5wdXQvc3lzdGVt L2xvZ2dpbmcueG1sICAgICAgICAgICAgICAgICAgICB8ICAyICstCiBzaGFyZWQvb3ZhbC9lbnN1 cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwgICAgICAgICB8IDQ2ICsrKysrKysrKysrKysrKysr KysrKysKIDUgZmlsZXMgY2hhbmdlZCwgNTAgaW5zZXJ0aW9ucygrKSwgMjIgZGVsZXRpb25zKC0p CiBtb2RlIGNoYW5nZSAxMDA2NDQgPSZndDsgMTIwMDAwIFJIRUwvNi9pbnB1dC9jaGVja3MvZW5z dXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sCiBjcmVhdGUgbW9kZSAxMjAwMDAgUkhFTC83L2lu cHV0L2NoZWNrcy9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwKIGNyZWF0ZSBtb2RlIDEw MDY0NCBzaGFyZWQvb3ZhbC9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwKCmRpZmYgLS1n aXQgYS9SSEVMLzYvaW5wdXQvY2hlY2tzL2Vuc3VyZV9sb2dyb3RhdGVfYWN0aXZhdGVkLnhtbCBi L1JIRUwvNi9pbnB1dC9jaGVja3MvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sCmRlbGV0 ZWQgZmlsZSBtb2RlIDEwMDY0NAppbmRleCBhY2E1MzliLi4wMDAwMDAwCi0tLSBhL1JIRUwvNi9p bnB1dC9jaGVja3MvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sCisrKyAvZGV2L251bGwK QEAgLTEsMjAgKzAsMCBAQAotJmx0O2RlZi1ncm91cCZndDsKLSAgJmx0O2RlZmluaXRpb24gY2xh c3M9ImNvbXBsaWFuY2UiCi0gIGlkPSJlbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZCIgdmVyc2lv bj0iMSImZ3Q7Ci0gICAgJmx0O21ldGFkYXRhJmd0OwotICAgICAgJmx0O3RpdGxlJmd0O0Vuc3Vy ZSBBbGwgTG9ncyBhcmUgUm90YXRlZCBieSBsb2dyb3RhdGUmbHQ7L3RpdGxlJmd0OwotICAgICAg Jmx0O2FmZmVjdGVkIGZhbWlseT0idW5peCImZ3Q7Ci0gICAgICAgICZsdDtwbGF0Zm9ybSZndDtS ZWQgSGF0IEVudGVycHJpc2UgTGludXggNiZsdDsvcGxhdGZvcm0mZ3Q7Ci0gICAgICAmbHQ7L2Fm ZmVjdGVkJmd0OwotICAgICAgJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSBsb2dyb3RhdGUgKHN5c2xv ZyByb3RhdGVyKSBzZXJ2aWNlIHNob3VsZCBiZQotICAgICAgZW5hYmxlZC4mbHQ7L2Rlc2NyaXB0 aW9uJmd0OwotICAgICZsdDsvbWV0YWRhdGEmZ3Q7Ci0gICAgJmx0O2NyaXRlcmlhJmd0OwotICAg ICAgJmx0O2NyaXRlcmlvbiBjb21tZW50PSJGaW5kIGVhY2ggZmlsZSBpbiAvZXRjL3N5c2xvZy5j b25mIGluIC9ldGMvbG9ncm90YXRlLmQvc3lzbG9nIgotICAgICAgdGVzdF9yZWY9InRlc3RfMjAx NTQiIC8mZ3Q7Ci0gICAgJmx0Oy9jcml0ZXJpYSZndDsKLSAgJmx0Oy9kZWZpbml0aW9uJmd0Owot ICAmbHQ7aW5kOnVua25vd25fdGVzdCBjaGVjaz0iYWxsIgotICBjb21tZW50PSJ1c2UgZXh0ZW5k ZWQgY29udGVudCB0byBldmFsdWF0ZWQgdGhpcyB0ZXN0IgotICBpZD0idGVzdF8yMDE1NCIgdmVy c2lvbj0iMSIgLyZndDsKLSZsdDsvZGVmLWdyb3VwJmd0OwpkaWZmIC0tZ2l0IGEvUkhFTC82L2lu cHV0L2NoZWNrcy9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwgYi9SSEVMLzYvaW5wdXQv Y2hlY2tzL2Vuc3VyZV9sb2dyb3RhdGVfYWN0aXZhdGVkLnhtbApuZXcgZmlsZSBtb2RlIDEyMDAw MAppbmRleCAwMDAwMDAwLi4xOTE2YzQwCi0tLSAvZGV2L251bGwKKysrIGIvUkhFTC82L2lucHV0 L2NoZWNrcy9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwKQEAgLTAsMCArMSBAQAorLi4v Li4vLi4vLi4vc2hhcmVkL292YWwvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sClwgTm8g bmV3bGluZSBhdCBlbmQgb2YgZmlsZQpkaWZmIC0tZ2l0IGEvUkhFTC82L2lucHV0L3N5c3RlbS9s b2dnaW5nLnhtbCBiL1JIRUwvNi9pbnB1dC9zeXN0ZW0vbG9nZ2luZy54bWwKaW5kZXggODI0NTVk Ni4uYzdmYzM4OSAxMDA2NDQKLS0tIGEvUkhFTC82L2lucHV0L3N5c3RlbS9sb2dnaW5nLnhtbAor KysgYi9SSEVMLzYvaW5wdXQvc3lzdGVtL2xvZ2dpbmcueG1sCkBAIC0zNzQsNyArMzc0LDcgQEAg SWYgbG9ncm90YXRlIGlzIGNvbmZpZ3VyZWQgcHJvcGVybHksIG91dHB1dCBzaG91bGQgaW5jbHVk ZSByZWZlcmVuY2VzIHRvCiAmbHQ7dHQmZ3Q7L2V0Yy9jcm9uLmRhaWx5Jmx0Oy90dCZndDsuCiAm bHQ7L29jaWwmZ3Q7CiAmbHQ7aWRlbnQgY2NlPSIyNzAxNC0wIiAvJmd0OwotJmx0O292YWwgaWQ9 ImxvZ3JvdGF0ZV9yb3RhdGVfYWxsX2ZpbGVzIiAvJmd0OworJmx0O292YWwgaWQ9ImVuc3VyZV9s b2dyb3RhdGVfYWN0aXZhdGVkIiAvJmd0OwogJmx0O3JlZiBuaXN0PSJBVS05IiBkaXNhPSIzNjYi IC8mZ3Q7CiAmbHQ7L1J1bGUmZ3Q7CiAmbHQ7L0dyb3VwJmd0OwpkaWZmIC0tZ2l0IGEvUkhFTC83 L2lucHV0L2NoZWNrcy9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwgYi9SSEVMLzcvaW5w dXQvY2hlY2tzL2Vuc3VyZV9sb2dyb3RhdGVfYWN0aXZhdGVkLnhtbApuZXcgZmlsZSBtb2RlIDEy MDAwMAppbmRleCAwMDAwMDAwLi4xOTE2YzQwCi0tLSAvZGV2L251bGwKKysrIGIvUkhFTC83L2lu cHV0L2NoZWNrcy9lbnN1cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwKQEAgLTAsMCArMSBAQAor Li4vLi4vLi4vLi4vc2hhcmVkL292YWwvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sClwg Tm8gbmV3bGluZSBhdCBlbmQgb2YgZmlsZQpkaWZmIC0tZ2l0IGEvUkhFTC83L2lucHV0L3N5c3Rl bS9sb2dnaW5nLnhtbCBiL1JIRUwvNy9pbnB1dC9zeXN0ZW0vbG9nZ2luZy54bWwKaW5kZXggMzZj MmZiMC4uOTkzZDIxNCAxMDA2NDQKLS0tIGEvUkhFTC83L2lucHV0L3N5c3RlbS9sb2dnaW5nLnht bAorKysgYi9SSEVMLzcvaW5wdXQvc3lzdGVtL2xvZ2dpbmcueG1sCkBAIC0zNzQsNyArMzc0LDcg QEAgSWYgbG9ncm90YXRlIGlzIGNvbmZpZ3VyZWQgcHJvcGVybHksIG91dHB1dCBzaG91bGQgaW5j bHVkZSByZWZlcmVuY2VzIHRvCiAmbHQ7dHQmZ3Q7L2V0Yy9jcm9uLmRhaWx5Jmx0Oy90dCZndDsu CiAmbHQ7L29jaWwmZ3Q7CiAmbHQ7aWRlbnQgY2NlPSJSSEVMNy1DQ0UtVEJEIiAvJmd0OwotJmx0 O292YWwgaWQ9ImxvZ3JvdGF0ZV9yb3RhdGVfYWxsX2ZpbGVzIiAvJmd0OworJmx0O292YWwgaWQ9 ImVuc3VyZV9sb2dyb3RhdGVfYWN0aXZhdGVkIiAvJmd0OwogJmx0O3JlZiBuaXN0PSJBVS05IiBk aXNhPSIzNjYiIC8mZ3Q7CiAmbHQ7L1J1bGUmZ3Q7CiAmbHQ7L0dyb3VwJmd0OwpkaWZmIC0tZ2l0 IGEvc2hhcmVkL292YWwvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sIGIvc2hhcmVkL292 YWwvZW5zdXJlX2xvZ3JvdGF0ZV9hY3RpdmF0ZWQueG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLmM4MmIzYTMKLS0tIC9kZXYvbnVsbAorKysgYi9zaGFyZWQvb3ZhbC9lbnN1 cmVfbG9ncm90YXRlX2FjdGl2YXRlZC54bWwKQEAgLTAsMCArMSw0NiBAQAorJmx0O2RlZi1ncm91 cCZndDsKKyAgJmx0O2RlZmluaXRpb24gY2xhc3M9ImNvbXBsaWFuY2UiIGlkPSJlbnN1cmVfbG9n cm90YXRlX2FjdGl2YXRlZCIgdmVyc2lvbj0iMSImZ3Q7CisgICAgJmx0O21ldGFkYXRhJmd0Owor ICAgICAgJmx0O3RpdGxlJmd0O0Vuc3VyZSB0aGUgbG9ncm90YXRlIHV0aWxpdHkgcGVyZm9ybXMg dGhlIGF1dG9tYXRpYyByb3RhdGlvbiBvZiBsb2cgZmlsZXMgb24gZGFpbHkgYmFzaXMmbHQ7L3Rp dGxlJmd0OworICAgICAgJmx0O2FmZmVjdGVkIGZhbWlseT0idW5peCImZ3Q7CisgICAgICAgICZs dDtwbGF0Zm9ybSZndDtSZWQgSGF0IEVudGVycHJpc2UgTGludXggNiZsdDsvcGxhdGZvcm0mZ3Q7 CisgICAgICAgICZsdDtwbGF0Zm9ybSZndDtSZWQgSGF0IEVudGVycHJpc2UgTGludXggNyZsdDsv cGxhdGZvcm0mZ3Q7CisgICAgICAmbHQ7L2FmZmVjdGVkJmd0OworICAgICAgJmx0O2Rlc2NyaXB0 aW9uJmd0OworICAgICAgVGhlIGZyZXF1ZW5jeSBvZiBhdXRvbWF0aWMgbG9nIGZpbGVzIHJvdGF0 aW9uIHBlcmZvcm1lZCBieSB0aGUgbG9ncm90YXRlIHV0aWxpdHkgc2hvdWxkIGJlIGNvbmZpZ3Vy ZWQgdG8gcnVuIGRhaWx5CisgICAgICAmbHQ7L2Rlc2NyaXB0aW9uJmd0OworICAgICAgJmx0O3Jl ZmVyZW5jZSBzb3VyY2U9IkpMIiByZWZfaWQ9IjIwMTQwNTMwIiByZWZfdXJsPSJ0ZXN0X2F0dGVz dGF0aW9uIiAvJmd0OworICAgICZsdDsvbWV0YWRhdGEmZ3Q7CisgICAgJmx0O2NyaXRlcmlhIGNv bW1lbnQ9Ii9ldGMvbG9ncm90YXRlLmNvbmYgY29udGFpbnMgZGFpbHkgc2V0dGluZyBvciAvZXRj L2Nyb24uZGFpbHkvbG9ncm90YXRlIGZpbGUgZXhpc3RzIiBvcGVyYXRvcj0iT1IiJmd0OworICAg ICAgJmx0O2NyaXRlcmlvbiBjb21tZW50PSJDaGVjayBpZiBkYWlseSBpcyBzZXQgaW4gL2V0Yy9s b2dyb3RhdGUuY29uZiIKKyAgICAgIHRlc3RfcmVmPSJ0ZXN0X2xvZ3JvdGF0ZV9jb25mX2RhaWx5 X3NldHRpbmciIC8mZ3Q7CisgICAgICAmbHQ7Y3JpdGVyaW9uIGNvbW1lbnQ9IkNoZWNrIGlmIC9l dGMvY3Jvbi5kYWlseS9sb2dyb3RhdGUgZmlsZSBleGlzdHMgKGFuZCBjYWxscyBsb2dyb3RhdGUp IgorICAgICAgdGVzdF9yZWY9InRlc3RfY3Jvbl9kYWlseV9sb2dyb3RhdGVfZXhpc3RlbmNlIiAv Jmd0OworICAgICZsdDsvY3JpdGVyaWEmZ3Q7CisgICZsdDsvZGVmaW5pdGlvbiZndDsKKworICAm bHQ7aW5kOnRleHRmaWxlY29udGVudDU0X3Rlc3QgY2hlY2s9ImFsbCIgY2hlY2tfZXhpc3RlbmNl PSJhbGxfZXhpc3QiCisgIGNvbW1lbnQ9IlRlc3RzIHRoZSBwcmVzZW5jZSBvZiBkYWlseSBzZXR0 aW5nIGluIC9ldGMvbG9ncm90YXRlLmNvbmYgZmlsZSIKKyAgaWQ9InRlc3RfbG9ncm90YXRlX2Nv bmZfZGFpbHlfc2V0dGluZyIgdmVyc2lvbj0iMSImZ3Q7CisgICAgJmx0O2luZDpvYmplY3Qgb2Jq ZWN0X3JlZj0ib2JqX2xvZ3JvdGF0ZV9jb25mX2RhaWx5X3NldHRpbmciIC8mZ3Q7CisgICZsdDsv aW5kOnRleHRmaWxlY29udGVudDU0X3Rlc3QmZ3Q7CisKKyAgJmx0O2luZDp0ZXh0ZmlsZWNvbnRl bnQ1NF9vYmplY3QgaWQ9Im9ial9sb2dyb3RhdGVfY29uZl9kYWlseV9zZXR0aW5nIiB2ZXJzaW9u PSIxIiZndDsKKyAgICAmbHQ7aW5kOmZpbGVwYXRoJmd0Oy9ldGMvbG9ncm90YXRlLmNvbmYmbHQ7 L2luZDpmaWxlcGF0aCZndDsKKyAgICAmbHQ7aW5kOnBhdHRlcm4gb3BlcmF0aW9uPSJwYXR0ZXJu IG1hdGNoIiZndDteW1xzXSpkYWlseVtcc10qJCZsdDsvaW5kOnBhdHRlcm4mZ3Q7CisgICAgJmx0 O2luZDppbnN0YW5jZSBkYXRhdHlwZT0iaW50IiZndDsxJmx0Oy9pbmQ6aW5zdGFuY2UmZ3Q7Cisg ICZsdDsvaW5kOnRleHRmaWxlY29udGVudDU0X29iamVjdCZndDs8L3ByZT4KICAgICAgPC9kaXY+ CiAgICA8L2Jsb2NrcXVvdGU+CiAgICA8YnI+CiAgICBJcyB0aGVyZSBjb25maWd1cmF0aW9uIHBy ZWNlZGVuY2UgaW4gdGhlIGxvZ3JvdGF0ZS5jb25mIGZpbGU/IGUuZy4KICAgIGlmIHlvdSBoYXZl ICJkYWlseSIgZm9sbG93ZWQgaW1tZWRpYXRlbHkgYnkgIndlZWtseSwiIHdoaWNoIHdpbGwgdGhl CiAgICBsb2dyb3RhdGUgdXNlPyBTaG91bGQgd2UgZW5zdXJlIHRoYXQgZGFpbHkgZXhpc3RzLCBh bmQgdGhlIG90aGVyCiAgICBvcHRpb25zIGRvIG5vdD8gPGJyPgogICAgPGJyPgogICAgSSB0cmll ZCBsb29raW5nIHRocm91Z2ggdGhlIG1hbnBhZ2UgYW5kIGdvb2dsZSB3aXRoIG5vIGF2YWlsLjxi cj4KICAgIDxicj4KICAgIDxicj4KICAgIDxicj4KICAgIDxibG9ja3F1b3RlCiAgICAgIGNpdGU9 Im1pZDozNjc2NTA2Mi4yMjc4ODYzNy4xNDAxNDQwOTkxODQ4LkphdmFNYWlsLnppbWJyYUByZWRo YXQuY29tIgogICAgICB0eXBlPSJjaXRlIj4KICAgICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxh aW4iIHdyYXA9InRydWUiIGdyYXBoaWNhbC1xdW90ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9u dC1mYW1pbHk6IC1tb3otZml4ZWQ7IGZvbnQtc2l6ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC13 ZXN0ZXJuIj4KICAgICAgICA8cHJlIHdyYXA9IiI+CisKKyAgJmx0O2luZDp0ZXh0ZmlsZWNvbnRl bnQ1NF90ZXN0IGNoZWNrPSJhbGwiIGNoZWNrX2V4aXN0ZW5jZT0iYWxsX2V4aXN0IgorICBjb21t ZW50PSJUZXN0cyB0aGUgZXhpc3RlbmNlIG9mIC9ldGMvY3Jvbi5kYWlseS9sb2dyb3RhdGUgZmls ZSAoYW5kIHZlcmlmeSBpdCBhY3R1YWxseSBjYWxscyBsb2dyb3RhdGUgdXRpbGl0eSkiCisgIGlk PSJ0ZXN0X2Nyb25fZGFpbHlfbG9ncm90YXRlX2V4aXN0ZW5jZSIgdmVyc2lvbj0iMSImZ3Q7Cisg ICAgJmx0O2luZDpvYmplY3Qgb2JqZWN0X3JlZj0ib2JqX2Nyb25fZGFpbHlfbG9ncm90YXRlX2V4 aXN0ZW5jZSIgLyZndDsKKyAgJmx0Oy9pbmQ6dGV4dGZpbGVjb250ZW50NTRfdGVzdCZndDsKKwor ICAmbHQ7aW5kOnRleHRmaWxlY29udGVudDU0X29iamVjdCBpZD0ib2JqX2Nyb25fZGFpbHlfbG9n cm90YXRlX2V4aXN0ZW5jZSIgdmVyc2lvbj0iMSImZ3Q7CisgICAgJmx0O2luZDpmaWxlcGF0aCZn dDsvZXRjL2Nyb24uZGFpbHkvbG9ncm90YXRlJmx0Oy9pbmQ6ZmlsZXBhdGgmZ3Q7CisgICAgJmx0 O2luZDpwYXR0ZXJuIG9wZXJhdGlvbj0icGF0dGVybiBtYXRjaCImZ3Q7Xltcc10qL3Vzci9zYmlu L2xvZ3JvdGF0ZVtcc10qL2V0Yy9sb2dyb3RhdGUuY29uZig/Oi4qKSQmbHQ7L2luZDpwYXR0ZXJu Jmd0OworICAgICZsdDtpbmQ6aW5zdGFuY2UgZGF0YXR5cGU9ImludCImZ3Q7MSZsdDsvaW5kOmlu c3RhbmNlJmd0OworICAmbHQ7L2luZDp0ZXh0ZmlsZWNvbnRlbnQ1NF9vYmplY3QmZ3Q7CisKKyZs dDsvZGVmLWdyb3VwJmd0Owo8ZGl2IGNsYXNzPSJtb3otdHh0LXNpZyI+LS0gCjEuOC4zLjE8L2Rp dj48L3ByZT4KICAgICAgPC9kaXY+CiAgICA8L2Jsb2NrcXVvdGU+CiAgICA8YnI+CiAgICA8YnI+ CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============4325162986182992348==--