5782 2014-01-31 18:21:24 +0000 Do not configure sftp for the ssh daemon by default 2017-06-13 11:00:26 +0000 1 1 7 Build System, Metadata & Runtime OE-Core connectivity unspecified x86 Multiple RESOLVED WONTFIX Roxanna is no longer at Intel Low minor Future 1 lpapp unassigned jefro mcrapet meta.mr.watcher meta.watcher richard.purdie roxana.ciobanu sgw --- --- Don't know oldest_to_newest 40137 0 lpapp 2014-01-31 18:21:24 +0000 If I use the IMAGE_FEATURES += "ssh-server-openssh" statement in my image recipe, I will get the "packagegroup-core-ssh-openssh" group installed which currently only has the "openssh" inside. Note that there is no sftp server installed by default, yet the openssh daemon configuration file generated contains this line: # override default of no subsystems Subsystem sftp /usr/lib/openssh/sftp-server I think it would make more sense to leave this out since there is no sftp-server installed. It is misleading at the least. 40222 1 sgw 2014-02-07 04:25:36 +0000 That configuration line does no harm as it is today and it allows for one package to deliver the configuration file. The requested fix would require some addition post processing to either comment out or un-comment that line based on the installation of the various packages, which is likely to be more error prone then just leaving the line in. If you wish to submit a patch for this, you are more than welcome to, I can assign it to you if you wish. 40494 2 1781 mcrapet 2014-02-20 13:54:44 +0000 Created attachment 1781 proposition number one 40495 3 lpapp 2014-02-20 13:56:41 +0000 Matthieu, this is one part, but I think it would be nice to have the second part, too, which adds this back for the corresponding package installed. That would be handy for sftp users. 40497 4 mcrapet 2014-02-20 14:46:12 +0000 Hi, You'd like a dynamic behavior (using pkg_postinst_${PN}-ssh) and checking if /usr/libexec/sftp-server exists? Not sure that it is a good idea. 40498 5 lpapp 2014-02-20 14:48:07 +0000 No, I would like the post-install script of the sftp-server package to add this entry back. Basically, when an end user installs the package, it would also be configured without further work required. 40525 6 1782 mcrapet 2014-02-20 18:10:30 +0000 Created attachment 1782 proposition number two This patch discards the first one. 40526 7 lpapp 2014-02-20 18:17:57 +0000 Thanks for your work. Unfortunately, I am not a bash guru, but it seems you moved the removal into the post install part of the sftp package. I will try to be a bit more verbose because it seems I cannot communicate properly; apologies. 1) Your removal is good, and it could be part of the basic openssh installation. 2) You could insert this line back once someone installs the sftp package. The use case would go along these lines: a) there is user `A` who would like to get the openssh package, but without the additional size (~70 KB) and complexity constraint of the sftp package. This is all fine, user `A` will get a basic openssh installation without the SFTP enabled inside the ssh configuration. b) there is user `B` who would like to get the openssh package, but with the additional sftp feature because the advantage in that case would outweight the detriments of the size and complexity. That is all fine, user `B` would get a config with the SFTP enabled inside the ssh configuration. Hope, it is a bit more clear. Any questions or concerns, please let me know. 40564 8 1784 mcrapet 2014-02-21 09:01:08 +0000 Created attachment 1784 v3 My assumption, hooks for openssh-sftp-server only. But indeed, there is no package dependency with openssh-sshd package. So there is a potential issue if openssh-sftp-server is installed before openssh-sshd. Is is worth adding a check (-x /usr/libexec/sftp-server) in openssh-sshd postinst? 40957 9 mcrapet 2014-03-07 09:11:35 +0000 Let's be safe and keep sshd_config untouched. Let's keep snippets for: pkg_postinst_${PN}-sftp-server & pkg_postrm_${PN}-sftp-server, even if it doesn't cover all cases.. 74052 10 richard.purdie 2017-06-13 11:00:26 +0000 (In reply to comment #1) > That configuration line does no harm as it is today and it allows for one > package to deliver the configuration file. > > The requested fix would require some addition post processing to either > comment out or un-comment that line based on the installation of the various > packages, which is likely to be more error prone then just leaving the line > in. Looking at the complexity of the solutions proposed, I agree with Saul here, this is harmless and we can leave it as is. 1781 2014-02-20 13:54:44 +0000 2014-02-20 13:54:44 +0000 proposition number one 0001-openssh-indroduce-a-USE_SFTP-configuration-variable.patch text/plain 2679 mcrapet RnJvbSAyZGU0Yjg1N2Y4M2U5MjYzNWFmNTY4NTI3Y2Q5ZmU2MmIxOTNkMzk5IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBNYXR0aGlldSBDcmFwZXQgPE1hdHRoaWV1LkNyYXBldEBpbmdl bmljby5jb20+CkRhdGU6IFRodSwgMjAgRmViIDIwMTQgMTU6NDQ6NTggKzAxMDAKU3ViamVjdDog W09FLWNvcmVdW1JGQ11bUEFUQ0hdIG9wZW5zc2g6IGluZHJvZHVjZSBhIFVTRV9TRlRQIGNvbmZp Z3VyYXRpb24KIHZhcmlhYmxlCgpEZWZhdWx0IGlzIGVuYWJsZWQgKHBhc3QgJiBjdXJyZW50IGJl aGF2aW9yKS4KQ2hhbmdlIHRvICIwIiBpZiB5b3Ugd2FudCB0byBjb21tZW50IHRoaXMgbGluZToK ClN1YnN5c3RlbSBzZnRwICAvdXNyL2xpYmV4ZWMvc2Z0cC1zZXJ2ZXIKCihzZWUgL2V0Yy9zc2gv c3NoZF9jb25maWcgJiAvZXRjL3NzaC9zc2hkX2NvbmZpZ19yZWFkb25seSBmaWxlcykKClNpZ25l ZC1vZmYtYnk6IE1hdHRoaWV1IENyYXBldCA8TWF0dGhpZXUuQ3JhcGV0QGluZ2VuaWNvLmNvbT4K LS0tCiBtZXRhL3JlY2lwZXMtY29ubmVjdGl2aXR5L29wZW5zc2gvb3BlbnNzaF82LjRwMS5iYiB8 IDExICsrKysrKysrLS0tCiAxIGZpbGUgY2hhbmdlZCwgOCBpbnNlcnRpb25zKCspLCAzIGRlbGV0 aW9ucygtKQoKZGlmZiAtLWdpdCBhL21ldGEvcmVjaXBlcy1jb25uZWN0aXZpdHkvb3BlbnNzaC9v cGVuc3NoXzYuNHAxLmJiIGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5z c2hfNi40cDEuYmIKaW5kZXggOWMwYmI0OC4uOTMwYjQwZSAxMDA2NDQKLS0tIGEvbWV0YS9yZWNp cGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIKKysrIGIvbWV0YS9yZWNp cGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIKQEAgLTcsNiArNyw3IEBA IFNFQ1RJT04gPSAiY29uc29sZS9uZXR3b3JrIgogTElDRU5TRSA9ICJCU0QiCiBMSUNfRklMRVNf Q0hLU1VNID0gImZpbGU6Ly9MSUNFTkNFO21kNT1lMzI2MDQ1NjU3ZTg0MjU0MWQzZjM1YWFkYTQ0 MjUwNyIKIAorUFIgPSAicjEiCiAKIERFUEVORFMgPSAiemxpYiBvcGVuc3NsIgogREVQRU5EUyAr PSAiJHtAYmFzZV9jb250YWlucygnRElTVFJPX0ZFQVRVUkVTJywgJ3BhbScsICdsaWJwYW0nLCAn JywgZCl9IgpAQCAtNDksNiArNTAsMTAgQEAgU1lTVEVNRF9TRVJWSUNFXyR7UE59LXNzaGQgPSAi c3NoZC5zb2NrZXQiCiBQQUNLQUdFQ09ORklHID8/PSAidGNwLXdyYXBwZXJzIgogUEFDS0FHRUNP TkZJR1t0Y3Atd3JhcHBlcnNdID0gIi0td2l0aC10Y3Atd3JhcHBlcnMsLHRjcC13cmFwcGVycyIK IAorIyBDb25maWd1cmF0aW9uIHZhcmlhYmxlLgorIyBNb2RpZmllcyBzc2hkX2NvbmZpZyBhbmQg c3NoZF9jb25maWdfcmVhZG9ubHkgZmlsZXMuCitVU0VfU0ZUUCA/PSAiMSIKKwogaW5oZXJpdCBh dXRvdG9vbHMKIAogIyBMRlMgc3VwcG9ydDoKQEAgLTc0LDYgKzc5LDggQEAgZG9fY29uZmlndXJl X3ByZXBlbmQgKCkgewogfQogCiBkb19jb21waWxlX2FwcGVuZCAoKSB7CisJdGVzdCAiJHtVU0Vf U0ZUUH0iID0gJzAnICYmIFwKKwkJc2VkIC1pIC1lICcvW1s6c3BhY2U6XV1zZnRwW1s6c3BhY2U6 XV0vcy9eW14jXS8jJi8nICR7V09SS0RJUn0vc3NoZF9jb25maWcKIAlpbnN0YWxsIC1tIDA2NDQg JHtXT1JLRElSfS9zc2hkX2NvbmZpZyAke1N9LwogCWluc3RhbGwgLW0gMDY0NCAke1dPUktESVJ9 L3NzaF9jb25maWcgJHtTfS8KIH0KQEAgLTkxLDcgKzk4LDcgQEAgZG9faW5zdGFsbF9hcHBlbmQg KCkgewogCWluc3RhbGwgLWQgJHtEfS8ke3N5c2NvbmZkaXJ9L2RlZmF1bHQvdm9sYXRpbGVzCiAJ aW5zdGFsbCAtbSA2NDQgJHtXT1JLRElSfS92b2xhdGlsZXMuOTlfc3NoZCAke0R9LyR7c3lzY29u ZmRpcn0vZGVmYXVsdC92b2xhdGlsZXMvOTlfc3NoZAogCi0gICAgICAgICMgQ3JlYXRlIGNvbmZp ZyBmaWxlcyBmb3IgcmVhZC1vbmx5IHJvb3RmcworCSMgQ3JlYXRlIGNvbmZpZyBmaWxlcyBmb3Ig cmVhZC1vbmx5IHJvb3RmcwogCWluc3RhbGwgLWQgJHtEfSR7c3lzY29uZmRpcn0vc3NoCiAJaW5z dGFsbCAtbSA2NDQgJHtXT1JLRElSfS9zc2hkX2NvbmZpZyAke0R9JHtzeXNjb25mZGlyfS9zc2gv c3NoZF9jb25maWdfcmVhZG9ubHkKIAlzZWQgLWkgJy9Ib3N0S2V5L2QnICR7RH0ke3N5c2NvbmZk aXJ9L3NzaC9zc2hkX2NvbmZpZ19yZWFkb25seQpAQCAtMTI0LDExICsxMzEsOSBAQCBGSUxFU18k e1BOfS1rZXlnZW4gPSAiJHtiaW5kaXJ9L3NzaC1rZXlnZW4iCiBSREVQRU5EU18ke1BOfSArPSAi JHtQTn0tc2NwICR7UE59LXNzaCAke1BOfS1zc2hkICR7UE59LWtleWdlbiIKIFJERVBFTkRTXyR7 UE59LXNzaGQgKz0gIiR7UE59LWtleWdlbiAke0BiYXNlX2NvbnRhaW5zKCdESVNUUk9fRkVBVFVS RVMnLCAncGFtJywgJ3BhbS1wbHVnaW4ta2V5aW5pdCBwYW0tcGx1Z2luLWxvZ2ludWlkJywgJycs IGQpfSIKIAotCiBDT05GRklMRVNfJHtQTn0tc3NoZCA9ICIke3N5c2NvbmZkaXJ9L3NzaC9zc2hk X2NvbmZpZyIKIENPTkZGSUxFU18ke1BOfS1zc2ggPSAiJHtzeXNjb25mZGlyfS9zc2gvc3NoX2Nv bmZpZyIKIAogQUxURVJOQVRJVkVfUFJJT1JJVFkgPSAiOTAiCiBBTFRFUk5BVElWRV8ke1BOfS1z Y3AgPSAic2NwIgogQUxURVJOQVRJVkVfJHtQTn0tc3NoID0gInNzaCIKLQotLSAKMS44LjUuNAoK 1782 2014-02-20 18:10:30 +0000 2014-02-20 18:10:30 +0000 proposition number two 0001-openssh-disable-sftp-configuration-sshd_config.patch text/plain 3221 mcrapet RnJvbSAzN2UyYWIyYjIwYjZmNDI3YzhjOTBlNTBkMjIwMGRlZGIxNzI2OTE0IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBNYXR0aGlldSBDcmFwZXQgPE1hdHRoaWV1LkNyYXBldEBpbmdl bmljby5jb20+CkRhdGU6IFRodSwgMjAgRmViIDIwMTQgMTU6NDQ6NTggKzAxMDAKU3ViamVjdDog W1BBVENIXSBvcGVuc3NoOiBkaXNhYmxlIHNmdHAgY29uZmlndXJhdGlvbiAoc3NoZF9jb25maWcp CgpUaGlzIGNvbmNlcm5zIHRoaXMgbGluZToKPGNvZGU+ClN1YnN5c3RlbSBzZnRwICAvdXNyL2xp YmV4ZWMvc2Z0cC1zZXJ2ZXIKPC9jb2RlPgppbiAvZXRjL3NzaC9zc2hkX2NvbmZpZyAmIC9ldGMv c3NoL3NzaGRfY29uZmlnX3JlYWRvbmx5IGZpbGVzLgoKV2lsbCBiZSB1bmNvbW1lbnRlZCBvbiBw YWNrYWdlIGNvbmZpZ3JhdGlvbiAob3BlbnNzaC1zZnRwLXNlcnZlciBwYWNrYWdlIHBvc3RpbnN0 KS4KClNpZ25lZC1vZmYtYnk6IE1hdHRoaWV1IENyYXBldCA8TWF0dGhpZXUuQ3JhcGV0QGluZ2Vu aWNvLmNvbT4KLS0tCiBtZXRhL3JlY2lwZXMtY29ubmVjdGl2aXR5L29wZW5zc2gvb3BlbnNzaC02 LjRwMS9zc2hkX2NvbmZpZyB8ICAyICstCiBtZXRhL3JlY2lwZXMtY29ubmVjdGl2aXR5L29wZW5z c2gvb3BlbnNzaF82LjRwMS5iYiAgICAgICAgICB8IDEyICsrKysrKysrKy0tLQogMiBmaWxlcyBj aGFuZ2VkLCAxMCBpbnNlcnRpb25zKCspLCA0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL21l dGEvcmVjaXBlcy1jb25uZWN0aXZpdHkvb3BlbnNzaC9vcGVuc3NoLTYuNHAxL3NzaGRfY29uZmln IGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9j b25maWcKaW5kZXggNGY5YjYyNi4uZjA2YjFjNSAxMDA2NDQKLS0tIGEvbWV0YS9yZWNpcGVzLWNv bm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9jb25maWcKKysrIGIvbWV0YS9y ZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9jb25maWcKQEAg LTExMCw3ICsxMTAsNyBAQCBDbGllbnRBbGl2ZUNvdW50TWF4IDQKICNCYW5uZXIgbm9uZQogCiAj IG92ZXJyaWRlIGRlZmF1bHQgb2Ygbm8gc3Vic3lzdGVtcwotU3Vic3lzdGVtCXNmdHAJL3Vzci9s aWJleGVjL3NmdHAtc2VydmVyCisjU3Vic3lzdGVtCXNmdHAJL3Vzci9saWJleGVjL3NmdHAtc2Vy dmVyCiAKICMgRXhhbXBsZSBvZiBvdmVycmlkaW5nIHNldHRpbmdzIG9uIGEgcGVyLXVzZXIgYmFz aXMKICNNYXRjaCBVc2VyIGFub25jdnMKZGlmZiAtLWdpdCBhL21ldGEvcmVjaXBlcy1jb25uZWN0 aXZpdHkvb3BlbnNzaC9vcGVuc3NoXzYuNHAxLmJiIGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0 eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIKaW5kZXggOWMwYmI0OC4uN2JkNWJlYSAxMDA2NDQK LS0tIGEvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIK KysrIGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIK QEAgLTcsNiArNyw3IEBAIFNFQ1RJT04gPSAiY29uc29sZS9uZXR3b3JrIgogTElDRU5TRSA9ICJC U0QiCiBMSUNfRklMRVNfQ0hLU1VNID0gImZpbGU6Ly9MSUNFTkNFO21kNT1lMzI2MDQ1NjU3ZTg0 MjU0MWQzZjM1YWFkYTQ0MjUwNyIKIAorUFIgPSAicjEiCiAKIERFUEVORFMgPSAiemxpYiBvcGVu c3NsIgogREVQRU5EUyArPSAiJHtAYmFzZV9jb250YWlucygnRElTVFJPX0ZFQVRVUkVTJywgJ3Bh bScsICdsaWJwYW0nLCAnJywgZCl9IgpAQCAtOTEsNyArOTIsNyBAQCBkb19pbnN0YWxsX2FwcGVu ZCAoKSB7CiAJaW5zdGFsbCAtZCAke0R9LyR7c3lzY29uZmRpcn0vZGVmYXVsdC92b2xhdGlsZXMK IAlpbnN0YWxsIC1tIDY0NCAke1dPUktESVJ9L3ZvbGF0aWxlcy45OV9zc2hkICR7RH0vJHtzeXNj b25mZGlyfS9kZWZhdWx0L3ZvbGF0aWxlcy85OV9zc2hkCiAKLSAgICAgICAgIyBDcmVhdGUgY29u ZmlnIGZpbGVzIGZvciByZWFkLW9ubHkgcm9vdGZzCisJIyBDcmVhdGUgY29uZmlnIGZpbGVzIGZv ciByZWFkLW9ubHkgcm9vdGZzCiAJaW5zdGFsbCAtZCAke0R9JHtzeXNjb25mZGlyfS9zc2gKIAlp bnN0YWxsIC1tIDY0NCAke1dPUktESVJ9L3NzaGRfY29uZmlnICR7RH0ke3N5c2NvbmZkaXJ9L3Nz aC9zc2hkX2NvbmZpZ19yZWFkb25seQogCXNlZCAtaSAnL0hvc3RLZXkvZCcgJHtEfSR7c3lzY29u ZmRpcn0vc3NoL3NzaGRfY29uZmlnX3JlYWRvbmx5CkBAIC0xMDksNiArMTEwLDEzIEBAIGRvX2lu c3RhbGxfYXBwZW5kICgpIHsKIAkJJHtEfSR7c3lzdGVtZF91bml0ZGlyfS9zeXN0ZW0vc3NoZC5z b2NrZXQgJHtEfSR7c3lzdGVtZF91bml0ZGlyfS9zeXN0ZW0vKi5zZXJ2aWNlCiB9CiAKK3BrZ19w b3N0aW5zdF8ke1BOfS1zZnRwLXNlcnZlciAoKSB7CisJZm9yIGNvbmYgaW4gc3NoZF9jb25maWcg c3NoZF9jb25maWdfcmVhZG9ubHk7IGRvCisJCXRlc3QgLWYgIiREJHtzeXNjb25mZGlyfS9zc2gv JGNvbmYiICYmIFwKKwkJCXNlZCAtaSAtZSAnL1tbOnNwYWNlOl1dc2Z0cFtbOnNwYWNlOl1dL3Mv XiMvLycgIiREJHtzeXNjb25mZGlyfS9zc2gvJGNvbmYiCisJZG9uZQorfQorCiBBTExPV19FTVBU WV8ke1BOfSA9ICIxIgogCiBQQUNLQUdFUyA9KyAiJHtQTn0ta2V5Z2VuICR7UE59LXNjcCAke1BO fS1zc2ggJHtQTn0tc3NoZCAke1BOfS1zZnRwICR7UE59LW1pc2MgJHtQTn0tc2Z0cC1zZXJ2ZXIi CkBAIC0xMjQsMTEgKzEzMiw5IEBAIEZJTEVTXyR7UE59LWtleWdlbiA9ICIke2JpbmRpcn0vc3No LWtleWdlbiIKIFJERVBFTkRTXyR7UE59ICs9ICIke1BOfS1zY3AgJHtQTn0tc3NoICR7UE59LXNz aGQgJHtQTn0ta2V5Z2VuIgogUkRFUEVORFNfJHtQTn0tc3NoZCArPSAiJHtQTn0ta2V5Z2VuICR7 QGJhc2VfY29udGFpbnMoJ0RJU1RST19GRUFUVVJFUycsICdwYW0nLCAncGFtLXBsdWdpbi1rZXlp bml0IHBhbS1wbHVnaW4tbG9naW51aWQnLCAnJywgZCl9IgogCi0KIENPTkZGSUxFU18ke1BOfS1z c2hkID0gIiR7c3lzY29uZmRpcn0vc3NoL3NzaGRfY29uZmlnIgogQ09ORkZJTEVTXyR7UE59LXNz aCA9ICIke3N5c2NvbmZkaXJ9L3NzaC9zc2hfY29uZmlnIgogCiBBTFRFUk5BVElWRV9QUklPUklU WSA9ICI5MCIKIEFMVEVSTkFUSVZFXyR7UE59LXNjcCA9ICJzY3AiCiBBTFRFUk5BVElWRV8ke1BO fS1zc2ggPSAic3NoIgotCi0tIAoxLjguNS40Cgo= 1784 2014-02-21 09:01:08 +0000 2014-02-21 09:01:08 +0000 v3 0001-openssh-disable-sftp-configuration-sshd_config.patch text/plain 3685 mcrapet RnJvbSBiZmFmMmEwNjExYjI5YmQxMDc0YWEyODJmMDU4OWQzODdmOGU2NGYwIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBNYXR0aGlldSBDcmFwZXQgPE1hdHRoaWV1LkNyYXBldEBpbmdl bmljby5jb20+CkRhdGU6IFRodSwgMjAgRmViIDIwMTQgMTU6NDQ6NTggKzAxMDAKU3ViamVjdDog W1BBVENIXSBvcGVuc3NoOiBkaXNhYmxlIHNmdHAgY29uZmlndXJhdGlvbiAoc3NoZF9jb25maWcp CgpUaGlzIGNvbmNlcm5zIHRoaXMgbGluZToKPGNvZGU+ClN1YnN5c3RlbSBzZnRwICAvdXNyL2xp YmV4ZWMvc2Z0cC1zZXJ2ZXIKPC9jb2RlPgppbiAvZXRjL3NzaC9zc2hkX2NvbmZpZyAmIC9ldGMv c3NoL3NzaGRfY29uZmlnX3JlYWRvbmx5IGZpbGVzLgoKQWRkIGhvb2tzIChwb3N0aW5zdCwgcG9z dHJtKSBmb3Igb3BlbnNzaC1zZnRwLXNlcnZlciBwYWNrYWdlLgpMaW5lIHdpbGwgYmUgdW5jb21t ZW50ZWQgb3IgY29tbWVudGVkLCBhbmQgc3NoZCBkYWVtb24gcmVzdGFydGVkLgoKU2lnbmVkLW9m Zi1ieTogTWF0dGhpZXUgQ3JhcGV0IDxNYXR0aGlldS5DcmFwZXRAaW5nZW5pY28uY29tPgotLS0K IC4uLi9vcGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9jb25maWcgICAgICAgICAgICAgIHwgIDIg Ky0KIG1ldGEvcmVjaXBlcy1jb25uZWN0aXZpdHkvb3BlbnNzaC9vcGVuc3NoXzYuNHAxLmJiIHwg MjUgKysrKysrKysrKysrKysrKysrKy0tLQogMiBmaWxlcyBjaGFuZ2VkLCAyMyBpbnNlcnRpb25z KCspLCA0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL21ldGEvcmVjaXBlcy1jb25uZWN0aXZp dHkvb3BlbnNzaC9vcGVuc3NoLTYuNHAxL3NzaGRfY29uZmlnIGIvbWV0YS9yZWNpcGVzLWNvbm5l Y3Rpdml0eS9vcGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9jb25maWcKaW5kZXggNGY5YjYyNi4u ZjA2YjFjNSAxMDA2NDQKLS0tIGEvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29w ZW5zc2gtNi40cDEvc3NoZF9jb25maWcKKysrIGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9v cGVuc3NoL29wZW5zc2gtNi40cDEvc3NoZF9jb25maWcKQEAgLTExMCw3ICsxMTAsNyBAQCBDbGll bnRBbGl2ZUNvdW50TWF4IDQKICNCYW5uZXIgbm9uZQogCiAjIG92ZXJyaWRlIGRlZmF1bHQgb2Yg bm8gc3Vic3lzdGVtcwotU3Vic3lzdGVtCXNmdHAJL3Vzci9saWJleGVjL3NmdHAtc2VydmVyCisj U3Vic3lzdGVtCXNmdHAJL3Vzci9saWJleGVjL3NmdHAtc2VydmVyCiAKICMgRXhhbXBsZSBvZiBv dmVycmlkaW5nIHNldHRpbmdzIG9uIGEgcGVyLXVzZXIgYmFzaXMKICNNYXRjaCBVc2VyIGFub25j dnMKZGlmZiAtLWdpdCBhL21ldGEvcmVjaXBlcy1jb25uZWN0aXZpdHkvb3BlbnNzaC9vcGVuc3No XzYuNHAxLmJiIGIvbWV0YS9yZWNpcGVzLWNvbm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40 cDEuYmIKaW5kZXggOWMwYmI0OC4uM2E2ZTgxZSAxMDA2NDQKLS0tIGEvbWV0YS9yZWNpcGVzLWNv bm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIKKysrIGIvbWV0YS9yZWNpcGVzLWNv bm5lY3Rpdml0eS9vcGVuc3NoL29wZW5zc2hfNi40cDEuYmIKQEAgLTcsNiArNyw3IEBAIFNFQ1RJ T04gPSAiY29uc29sZS9uZXR3b3JrIgogTElDRU5TRSA9ICJCU0QiCiBMSUNfRklMRVNfQ0hLU1VN ID0gImZpbGU6Ly9MSUNFTkNFO21kNT1lMzI2MDQ1NjU3ZTg0MjU0MWQzZjM1YWFkYTQ0MjUwNyIK IAorUFIgPSAicjEiCiAKIERFUEVORFMgPSAiemxpYiBvcGVuc3NsIgogREVQRU5EUyArPSAiJHtA YmFzZV9jb250YWlucygnRElTVFJPX0ZFQVRVUkVTJywgJ3BhbScsICdsaWJwYW0nLCAnJywgZCl9 IgpAQCAtOTEsNyArOTIsNyBAQCBkb19pbnN0YWxsX2FwcGVuZCAoKSB7CiAJaW5zdGFsbCAtZCAk e0R9LyR7c3lzY29uZmRpcn0vZGVmYXVsdC92b2xhdGlsZXMKIAlpbnN0YWxsIC1tIDY0NCAke1dP UktESVJ9L3ZvbGF0aWxlcy45OV9zc2hkICR7RH0vJHtzeXNjb25mZGlyfS9kZWZhdWx0L3ZvbGF0 aWxlcy85OV9zc2hkCiAKLSAgICAgICAgIyBDcmVhdGUgY29uZmlnIGZpbGVzIGZvciByZWFkLW9u bHkgcm9vdGZzCisJIyBDcmVhdGUgY29uZmlnIGZpbGVzIGZvciByZWFkLW9ubHkgcm9vdGZzCiAJ aW5zdGFsbCAtZCAke0R9JHtzeXNjb25mZGlyfS9zc2gKIAlpbnN0YWxsIC1tIDY0NCAke1dPUktE SVJ9L3NzaGRfY29uZmlnICR7RH0ke3N5c2NvbmZkaXJ9L3NzaC9zc2hkX2NvbmZpZ19yZWFkb25s eQogCXNlZCAtaSAnL0hvc3RLZXkvZCcgJHtEfSR7c3lzY29uZmRpcn0vc3NoL3NzaGRfY29uZmln X3JlYWRvbmx5CkBAIC0xMDksNiArMTEwLDI2IEBAIGRvX2luc3RhbGxfYXBwZW5kICgpIHsKIAkJ JHtEfSR7c3lzdGVtZF91bml0ZGlyfS9zeXN0ZW0vc3NoZC5zb2NrZXQgJHtEfSR7c3lzdGVtZF91 bml0ZGlyfS9zeXN0ZW0vKi5zZXJ2aWNlCiB9CiAKK3BrZ19wb3N0aW5zdF8ke1BOfS1zZnRwLXNl cnZlciAoKSB7CisJZm9yIGNvbmYgaW4gc3NoZF9jb25maWcgc3NoZF9jb25maWdfcmVhZG9ubHk7 IGRvCisJCXRlc3QgLWYgIiREJHtzeXNjb25mZGlyfS9zc2gvJGNvbmYiICYmIFwKKwkJCXNlZCAt aSAtZSAnL1tbOnNwYWNlOl1dc2Z0cFtbOnNwYWNlOl1dL3MvXiMvLycgIiREJHtzeXNjb25mZGly fS9zc2gvJGNvbmYiCisJZG9uZQorCWlmIFsgLXogIiREIiBdICYmIFsgLWUgJHtzeXNjb25mZGly fS9pbml0LmQvc3NoZCBdOyB0aGVuCisJCSR7c3lzY29uZmRpcn0vaW5pdC5kL3NzaGQgcmVzdGFy dAorCWZpCit9CisKK3BrZ19wb3N0cm1fJHtQTn0tc2Z0cC1zZXJ2ZXIgKCkgeworCWZvciBjb25m IGluIHNzaGRfY29uZmlnIHNzaGRfY29uZmlnX3JlYWRvbmx5OyBkbworCQl0ZXN0IC1mICIkRCR7 c3lzY29uZmRpcn0vc3NoLyRjb25mIiAmJiBcCisJCQlzZWQgLWkgLWUgJy9bWzpzcGFjZTpdXXNm dHBbWzpzcGFjZTpdXS9zL15bXiNdLyMmLycgIiREJHtzeXNjb25mZGlyfS9zc2gvJGNvbmYiCisJ ZG9uZQorCWlmIFsgLXogIiREIiBdICYmIFsgLWUgJHtzeXNjb25mZGlyfS9pbml0LmQvc3NoZCBd OyB0aGVuCisJCSR7c3lzY29uZmRpcn0vaW5pdC5kL3NzaGQgcmVzdGFydAorCWZpCit9CisKIEFM TE9XX0VNUFRZXyR7UE59ID0gIjEiCiAKIFBBQ0tBR0VTID0rICIke1BOfS1rZXlnZW4gJHtQTn0t c2NwICR7UE59LXNzaCAke1BOfS1zc2hkICR7UE59LXNmdHAgJHtQTn0tbWlzYyAke1BOfS1zZnRw LXNlcnZlciIKQEAgLTEyNCwxMSArMTQ1LDkgQEAgRklMRVNfJHtQTn0ta2V5Z2VuID0gIiR7Ymlu ZGlyfS9zc2gta2V5Z2VuIgogUkRFUEVORFNfJHtQTn0gKz0gIiR7UE59LXNjcCAke1BOfS1zc2gg JHtQTn0tc3NoZCAke1BOfS1rZXlnZW4iCiBSREVQRU5EU18ke1BOfS1zc2hkICs9ICIke1BOfS1r ZXlnZW4gJHtAYmFzZV9jb250YWlucygnRElTVFJPX0ZFQVRVUkVTJywgJ3BhbScsICdwYW0tcGx1 Z2luLWtleWluaXQgcGFtLXBsdWdpbi1sb2dpbnVpZCcsICcnLCBkKX0iCiAKLQogQ09ORkZJTEVT XyR7UE59LXNzaGQgPSAiJHtzeXNjb25mZGlyfS9zc2gvc3NoZF9jb25maWciCiBDT05GRklMRVNf JHtQTn0tc3NoID0gIiR7c3lzY29uZmRpcn0vc3NoL3NzaF9jb25maWciCiAKIEFMVEVSTkFUSVZF X1BSSU9SSVRZID0gIjkwIgogQUxURVJOQVRJVkVfJHtQTn0tc2NwID0gInNjcCIKIEFMVEVSTkFU SVZFXyR7UE59LXNzaCA9ICJzc2giCi0KLS0gCjEuOC41LjQKCg==