From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 6313EC282C5 for ; Fri, 28 Feb 2025 21:56:50 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1to8Kp-00053K-5l; Fri, 28 Feb 2025 16:55:55 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1to8Ki-0004rS-NV for grub-devel@gnu.org; Fri, 28 Feb 2025 16:55:50 -0500 Received: from mail-io1-xd2c.google.com ([2607:f8b0:4864:20::d2c]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1to8Kg-0004Ql-6m for grub-devel@gnu.org; Fri, 28 Feb 2025 16:55:48 -0500 Received: by mail-io1-xd2c.google.com with SMTP id ca18e2360f4ac-855a4024edeso88039539f.0 for ; Fri, 28 Feb 2025 13:55:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1740779737; x=1741384537; darn=gnu.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=2XCmPnaEDmKHLyb1nJdcVourZhQhcLQdQ263ZYJtGGw=; b=NicpLwe1G6zavdjJlYngFujISgdjfFe8Nuj4gf/3exAkjlfU2L0L5jwEto6FCg3ZgH vnKFeYEMKkxVFADHpe0T434k1zMYxeI/v6mKhbfqmtvLqvDwGzeB4MtXSF54arDw1/Lg D1N+LPVPBz14Rfp5TJlHTNZO/kdqYYbfeR10aDQkXMePBzSfnH6hrSpcBC6F8twxsocz y5f2yF3YMZgky8riSITECku9y6pqGfehJy0z4SE+CoDsFkFmQKTitcygm72JJVv6kEjb nEggvWXFrsvLqtGgt/WFNZC49Emk/VY4iiWzHAuHeLC8XS8qHfsUo9qJXeourGOQOD8w LSVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1740779737; x=1741384537; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=2XCmPnaEDmKHLyb1nJdcVourZhQhcLQdQ263ZYJtGGw=; b=Ch7jmQDNTGzu0vQpMCqQv4EnSjWgPvidCwGRCrP2G72tLCLEHbvoUgqLEpdKtWwHQW BZAU/iuJYuWIc4R80+SqxFIMvxJTjmS/dTKm6z4E2124/UaRvXSzWafjuP9lnWEvUzhS 0X5NmHTJQepk/pCnpIWFQL1azVDcXHeXyMjhp8oldZj4ZlpOEFJSvZx+1k2jXlZ0D+IB OOTWBS/RYDMpoca8XegaW7OinkU1KSyyV2sLj8HnkQKWDezb6kqn2xFhZSJ7xqzF8s6u 7VzPpePqsQkQ0PxuuwQUsfpv7TyAF8hN3Xc/Yi8fcfdBHPkBsBDnZMk4uCpPx4Ux9/LJ fXVg== X-Gm-Message-State: AOJu0YwcUWkopdlFraSDogRcUy3pJos+oyILFY6Fxe/xAHt3bsDAaO1X 8oX5hAGuEi/lnioMzO9LbU1LR96/E4JgWZ/kZl8jkFBNKv/H5R9HoRSc90P/ X-Gm-Gg: ASbGncuYd8qwkv9aJuK/EURgAhOk7L0mBpKjT8e4WwxeqxTFlQQXfi/ktGH5Tw15M2f +dnE9rFW6cIiAgK98ArVYwOxBW005jhWk5YvVjv227kZGJMLHt6R9fbzrsZgcnRMz36n1D9SpSK i7i7JaSdwfVuqLxmdC2OGF81j4SwpGuYR8I7Yw7mwygOsXIraVpiHwT52eshZ9Xmrq1gvZgFWT/ ZdbCLcxExC4PcBbPSqKmVIz+4Kk1r5i8JuPRbNA/O8n74I9UvNs5Ua0BigDkhNBbBhrXv9Wnibh Hz2V/2Wdbo6mgekktxgV8wpYXM8wK8lcsI0zCCs13y0OhBnQBJDwTNbfCfHjCnFXuPA4OkeG6K+ acLf87DOQjwZbV/VoIMT1cKsKCg== X-Google-Smtp-Source: AGHT+IHP9UcFfcHleKUcCnaC9706OeQ1WTdrYdqZ7JQMp4J6il405rUhY/oTjNKAuvrDzwezGRjoKA== X-Received: by 2002:a6b:7e4d:0:b0:841:99cb:776f with SMTP id ca18e2360f4ac-85870eee265mr1002183039f.6.1740779736820; Fri, 28 Feb 2025 13:55:36 -0800 (PST) Received: from localhost.localdomain (204-144-197-247.cgn.imoncommunications.net. [204.144.197.247]) by smtp.gmail.com with ESMTPSA id 8926c6da1cb9f-4f061b280a6sm1120962173.0.2025.02.28.13.55.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 28 Feb 2025 13:55:35 -0800 (PST) From: Andrew Hamilton To: grub-devel@gnu.org Cc: daniel.kiper@oracle.com, Andrew Hamilton Subject: [PATCH 1/2] docs: Document Restricted Filesystems in Lockdown Date: Fri, 28 Feb 2025 15:55:23 -0600 Message-Id: <20250228215524.45240-2-adhamilt@gmail.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250228215524.45240-1-adhamilt@gmail.com> References: <20250228215524.45240-1-adhamilt@gmail.com> MIME-Version: 1.0 Received-SPF: pass client-ip=2607:f8b0:4864:20::d2c; envelope-from=adhamilt@gmail.com; helo=mail-io1-xd2c.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org RG9jdW1lbnQgd2hpY2ggZmlsZSBzeXN0ZW1zIGFyZSBub3QgYWxsb3dlZCB3aGVuIGxvY2tkb3du CmlzIGVuYWJsZWQgdG8gYWxpZ24gdG8gcmVjZW50IEdSVUIgY2hhbmdlcy4KClNpZ25lZC1vZmYt Ynk6IEFuZHJldyBIYW1pbHRvbiA8YWRoYW1pbHRAZ21haWwuY29tPgotLS0KIGRvY3MvZ3J1Yi50 ZXhpIHwgODkgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr LS0KIDEgZmlsZSBjaGFuZ2VkLCA4NyBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQoKZGlm ZiAtLWdpdCBhL2RvY3MvZ3J1Yi50ZXhpIGIvZG9jcy9ncnViLnRleGkKaW5kZXggZTk2ZjE1Nzlh Li4yM2ViM2FkODEgMTAwNjQ0Ci0tLSBhL2RvY3MvZ3J1Yi50ZXhpCisrKyBiL2RvY3MvZ3J1Yi50 ZXhpCkBAIC0zNjMsNiArMzYzLDggQEAgRmFzdCBGaWxlU3lzdGVtIChBRkZTKX0sIEBkZm57QXRo ZU9TIGZzfSwgQGRmbntCZUZTfSwKIEBkZm57QlNEIFVGUy9VRlMyfSwgQGRmbntYRlN9LCBhbmQg QGRmbntaRlN9IChpbmNsdWRpbmcgbHpqYiwgZ3ppcCwKIHpsZSwgbWlycm9yLCBzdHJpcGUsIHJh aWR6MS8yLzMgYW5kIGVuY3J5cHRpb24gaW4gQUVTLUNDTSBhbmQgQUVTLUdDTSkuCiBAeHJlZntG aWxlc3lzdGVtfSwgZm9yIG1vcmUgaW5mb3JtYXRpb24uCitOb3RlOiBPbmx5IGEgc3Vic2V0IG9m IGZpbGVzeXN0ZW1zIGFyZSBzdXBwb3J0ZWQgaW4gbG9ja2Rvd24gbW9kZSAoc3VjaAorYXMgd2hl biBzZWN1cmUgYm9vdCBpcyBlbmFibGVkLCBAcHhyZWZ7TG9ja2Rvd259IGZvciBtb3JlIGluZm9y bWF0aW9uKS4KIAogQGl0ZW0gU3VwcG9ydCBhdXRvbWF0aWMgZGVjb21wcmVzc2lvbgogQ2FuIGRl Y29tcHJlc3MgZmlsZXMgd2hpY2ggd2VyZSBjb21wcmVzc2VkIGJ5IEBjb21tYW5ke2d6aXB9IG9y CkBAIC04NDMsNiArODQ1LDggQEAgbm90IHVzZSBhbnkgYWRkaXRpb25hbCBwYXJ0aXRpb24gbWFw cyB0byBhY2Nlc3MgQGZpbGV7L2Jvb3R9CiAgICBGMkZTLCBIRlMsIHVuY29tcHJlc3NlZCBIRlMr LCBJU085NjYwLCBKRlMsIE1pbml4LCBNaW5peDIsIE1pbml4MywgTklMRlMyLAogICAgTlRGUywg UmVpc2VyRlMsIFJPTUZTLCBTRlMsIHRhciwgVURGLCBVRlMxLCBVRlMyLCBYRlMKIEBlbmQgaXRl bWl6ZQorTm90ZTogT25seSBhIHN1YnNldCBvZiBmaWxlc3lzdGVtcyBhcmUgc3VwcG9ydGVkIGlu IGxvY2tkb3duIG1vZGUgKHN1Y2gKK2FzIHdoZW4gc2VjdXJlIGJvb3QgaXMgZW5hYmxlZCwgQHB4 cmVme0xvY2tkb3dufSBmb3IgbW9yZSBpbmZvcm1hdGlvbikuCiAKIE1CUiBnYXAgaGFzIGZldyB0 ZWNobmljYWwgcHJvYmxlbXMuICBUaGVyZSBpcyBubyB3YXkgdG8gcmVzZXJ2ZSBzcGFjZSBpbgog dGhlIGVtYmVkZGluZyBhcmVhIHdpdGggY29tcGxldGUgc2FmZXR5LCBhbmQgc29tZSBwcm9wcmll dGFyeSBzb2Z0d2FyZSBpcwpAQCAtNDE5OCwxMCArNDIwMiwxNCBAQCBUaGlzIGlzIHVzZWQgYXMg cGFydCBvZiBMWk8gZGVjb21wcmVzc2lvbiAvIGNvbXByZXNzaW9uLgogQG5vZGUgYWZmc19tb2R1 bGUKIEBzZWN0aW9uIGFmZnMKIFRoaXMgbW9kdWxlIHByb3ZpZGVzIHN1cHBvcnQgZm9yIHRoZSBB bWlnYSBGYXN0IEZpbGVTeXN0ZW0gKEFGRlMpLgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFs bG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3Jt YXRpb24uCiAKIEBub2RlIGFmc19tb2R1bGUKIEBzZWN0aW9uIGFmcwogVGhpcyBtb2R1bGUgcHJv dmlkZXMgc3VwcG9ydCBmb3IgdGhlIEF0aGVPUyBGaWxlIFN5c3RlbSAoQUZTKS4KK05vdGU6IFRo aXMgbW9kdWxlIGlzIG5vdCBhbGxvd2VkIGluIGxvY2tkb3duIG1vZGUsIEBweHJlZntMb2NrZG93 bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9uLgogCiBAbm9kZSBhZnNwbGl0dGVyX21vZHVsZQogQHNl Y3Rpb24gYWZzcGxpdHRlcgpAQCAtNDI1Myw2ICs0MjYxLDggQEAgdG8gdGhlIHRlcm1pbmFsIGZv ciB0aGUgY3VycmVudCBjYWxsIHN0YWNrLgogQG5vZGUgYmZzX21vZHVsZQogQHNlY3Rpb24gYmZz CiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUgQmVPUyAiQmUgRmlsZSBTeXN0 ZW0iIChCRlMpLgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24g bW9kZSwgQHB4cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIGJp b3NkaXNrX21vZHVsZQogQHNlY3Rpb24gYmlvc2Rpc2sKQEAgLTQzNDIsNiArNDM1Miw4IEBAIGNv bnRlbnQgb2YgYSBmaWxlIHRvIHRoZSB0ZXJtaW5hbC4gUGxlYXNlIEBweHJlZntjYXR9IGZvciBt b3JlIGluZm8uCiBAc2VjdGlvbiBjYmZzCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZv ciB0aGUgQ29yZWJvb3QgRmlsZSBTeXN0ZW0gKENCRlMpIHdoaWNoIGlzIGFuCiBhcmNoaXZlIGJh c2VkIGZpbGUgc3lzdGVtLgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9j a2Rvd24gbW9kZSwgQHB4cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBu b2RlIGNibHNfbW9kdWxlCiBAc2VjdGlvbiBjYmxzCkBAIC00ODQ3LDYgKzQ4NTksOCBAQCBjb250 ZW50cyBvZiBhIGZpbGUgaW4gaGV4YWRlY2ltYWwuIEB4cmVme2hleGR1bXB9IGZvciBtb3JlIGlu Zm9ybWF0aW9uLgogQHNlY3Rpb24gaGZzCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZv ciB0aGUgSGllcmFyY2hpY2FsIEZpbGUgU3lzdGVtIChIRlMpIGZpbGUgc3lzdGVtCiBpbiBHUlVC LgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4 cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIGhmc3BsdXNfbW9k dWxlCiBAc2VjdGlvbiBoZnNwbHVzCkBAIC00ODg3LDYgKzQ5MDEsOCBAQCBsb25nZXIgbmFtZXMp CiBAbm9kZSBqZnNfbW9kdWxlCiBAc2VjdGlvbiBqZnMKIFRoaXMgbW9kdWxlIHByb3ZpZGVzIHN1 cHBvcnQgZm9yIHRoZSBKb3VybmFsZWQgRmlsZSBTeXN0ZW0gKEpGUykgZmlsZSBzeXN0ZW0uCitO b3RlOiBUaGlzIG1vZHVsZSBpcyBub3QgYWxsb3dlZCBpbiBsb2NrZG93biBtb2RlLCBAcHhyZWZ7 TG9ja2Rvd259IGZvciBtb3JlCitpbmZvcm1hdGlvbi4KIAogQG5vZGUganBlZ19tb2R1bGUKIEBz ZWN0aW9uIGpwZWcKQEAgLTUxMjUsMjYgKzUxNDEsMzggQEAgbW9kdWxlcy4KIEBub2RlIG1pbml4 X21vZHVsZQogQHNlY3Rpb24gbWluaXgKIFRoaXMgbW9kdWxlIHByb3ZpZGVzIHN1cHBvcnQgZm9y IHRoZSBNaW5peCBmaWxlc3lzdGVtLCB2ZXJzaW9uIDEuCitOb3RlOiBUaGlzIG1vZHVsZSBpcyBu b3QgYWxsb3dlZCBpbiBsb2NrZG93biBtb2RlLCBAcHhyZWZ7TG9ja2Rvd259IGZvciBtb3JlCitp bmZvcm1hdGlvbi4KIAogQG5vZGUgbWluaXgyX21vZHVsZQogQHNlY3Rpb24gbWluaXgyCiBUaGlz IG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUgTWluaXggZmlsZXN5c3RlbSwgdmVyc2lv biAyLgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwg QHB4cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIG1pbml4Ml9i ZV9tb2R1bGUKIEBzZWN0aW9uIG1pbml4Ml9iZQogVGhpcyBtb2R1bGUgcHJvdmlkZXMgc3VwcG9y dCBmb3IgdGhlIE1pbml4IGZpbGVzeXN0ZW0sIHZlcnNpb24gMiBiaWctZW5kaWFuLgorTm90ZTog VGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4cmVme0xvY2tk b3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIG1pbml4M19tb2R1bGUKIEBzZWN0 aW9uIG1pbml4MwogVGhpcyBtb2R1bGUgcHJvdmlkZXMgc3VwcG9ydCBmb3IgdGhlIE1pbml4IGZp bGVzeXN0ZW0sIHZlcnNpb24gMy4KK05vdGU6IFRoaXMgbW9kdWxlIGlzIG5vdCBhbGxvd2VkIGlu IGxvY2tkb3duIG1vZGUsIEBweHJlZntMb2NrZG93bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9uLgog CiBAbm9kZSBtaW5peDNfYmVfbW9kdWxlCiBAc2VjdGlvbiBtaW5peDNfYmUKIFRoaXMgbW9kdWxl IHByb3ZpZGVzIHN1cHBvcnQgZm9yIHRoZSBNaW5peCBmaWxlc3lzdGVtLCB2ZXJzaW9uIDMgYmln LWVuZGlhbi4KK05vdGU6IFRoaXMgbW9kdWxlIGlzIG5vdCBhbGxvd2VkIGluIGxvY2tkb3duIG1v ZGUsIEBweHJlZntMb2NrZG93bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9uLgogCiBAbm9kZSBtaW5p eF9iZV9tb2R1bGUKIEBzZWN0aW9uIG1pbml4X2JlCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBw b3J0IGZvciB0aGUgTWluaXggZmlsZXN5c3RlbSwgdmVyc2lvbiAxIGJpZy1lbmRpYW4uCitOb3Rl OiBUaGlzIG1vZHVsZSBpcyBub3QgYWxsb3dlZCBpbiBsb2NrZG93biBtb2RlLCBAcHhyZWZ7TG9j a2Rvd259IGZvciBtb3JlCitpbmZvcm1hdGlvbi4KIAogQG5vZGUgbW1hcF9tb2R1bGUKIEBzZWN0 aW9uIG1tYXAKQEAgLTUyNzgsNiArNTMwNiw4IEBAIHNvbWV0aGluZyBsaWtlICJBU0NJSSBjcGlv IGFyY2hpdmUgKFNWUjQgd2l0aCBDUkMpIgogQHNlY3Rpb24gbmlsZnMyCiBUaGlzIG1vZHVsZSBw cm92aWRlcyBzdXBwb3J0IGZvciB0aGUgTmV3IEltcGxlbWVudGF0aW9uIG9mIExvZyBmaWxlc3lz dGVtCiAobmlsZnMyKS4KK05vdGU6IFRoaXMgbW9kdWxlIGlzIG5vdCBhbGxvd2VkIGluIGxvY2tk b3duIG1vZGUsIEBweHJlZntMb2NrZG93bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9uLgogCiBAbm9k ZSBub3JtYWxfbW9kdWxlCiBAc2VjdGlvbiBub3JtYWwKQEAgLTUyODcsMTEgKzUzMTcsMTUgQEAg bW9yZSBpbmZvcm1hdGlvbi4KIEBub2RlIG50ZnNfbW9kdWxlCiBAc2VjdGlvbiBudGZzCiBUaGlz IG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUgTmV3IFRlY2hub2xvZ3kgRmlsZSBTeXN0 ZW0gKE5URlMpIGluIEdSVUIuCitOb3RlOiBUaGlzIG1vZHVsZSBpcyBub3QgYWxsb3dlZCBpbiBs b2NrZG93biBtb2RlLCBAcHhyZWZ7TG9ja2Rvd259IGZvciBtb3JlCitpbmZvcm1hdGlvbi4KIAog QG5vZGUgbnRmc2NvbXBfbW9kdWxlCiBAc2VjdGlvbiBudGZzY29tcAogVGhpcyBtb2R1bGUgcHJv dmlkZXMgc3VwcG9ydCBmb3IgY29tcHJlc3Npb24gd2l0aCB0aGUgTmV3IFRlY2hub2xvZ3kgRmls ZQogU3lzdGVtIChOVEZTKSBpbiBHUlVCLgorTm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93 ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4cmVme0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRp b24uCiAKIEBub2RlIG50bGRyX21vZHVsZQogQHNlY3Rpb24gbnRsZHIKQEAgLTU1MTcsNiArNTU1 MSw4IEBAIEdSVUIgc2NyaXB0IHdpbGRjYXJkIHRyYW5zbGF0b3IuIEB4cmVme3JlZ2V4cH0gZm9y IG1vcmUgaW5mb3JtYXRpb24uCiBAbm9kZSByZWlzZXJmc19tb2R1bGUKIEBzZWN0aW9uIHJlaXNl cmZzCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUgUmVpc2VyRlMgRmlsZSBT eXN0ZW0gaW4gR1JVQi4KK05vdGU6IFRoaXMgbW9kdWxlIGlzIG5vdCBhbGxvd2VkIGluIGxvY2tk b3duIG1vZGUsIEBweHJlZntMb2NrZG93bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9uLgogCiBAbm9k ZSByZWxvY2F0b3JfbW9kdWxlCiBAc2VjdGlvbiByZWxvY2F0b3IKQEAgLTU1MjYsNiArNTU2Miw4 IEBAIHRvIHRoZSBleHBlY3RlZCBtZW1vcnkgbG9jYXRpb24ocykgYW5kIGp1bXBpbmcgdG8gKGlu dm9raW5nKSB0aGUgZXhlY3V0YWJsZS4KIEBub2RlIHJvbWZzX21vZHVsZQogQHNlY3Rpb24gcm9t ZnMKIFRoaXMgbW9kdWxlIHByb3ZpZGVzIHN1cHBvcnQgZm9yIHRoZSBSZWFkLU9ubHkgTWVtb3J5 IEZpbGUgU3lzdGVtIChST01GUykuCitOb3RlOiBUaGlzIG1vZHVsZSBpcyBub3QgYWxsb3dlZCBp biBsb2NrZG93biBtb2RlLCBAcHhyZWZ7TG9ja2Rvd259IGZvciBtb3JlCitpbmZvcm1hdGlvbi4K IAogQG5vZGUgc2NzaV9tb2R1bGUKIEBzZWN0aW9uIHNjc2kKQEAgLTU1OTQsNiArNTYzMiw4IEBA IHZhbHVlcyBmcm9tIC8gdG8gc3BlY2lmaWVkIFBDSSAvIFBDSWUgZGV2aWNlcy4KIEBub2RlIHNm c19tb2R1bGUKIEBzZWN0aW9uIHNmcwogVGhpcyBtb2R1bGUgcHJvdmlkZXMgc3VwcG9ydCBmb3Ig dGhlIEFtaWdhIFNtYXJ0IEZpbGUgU3lzdGVtIChTRlMpIGluIEdSVUIuCitOb3RlOiBUaGlzIG1v ZHVsZSBpcyBub3QgYWxsb3dlZCBpbiBsb2NrZG93biBtb2RlLCBAcHhyZWZ7TG9ja2Rvd259IGZv ciBtb3JlCitpbmZvcm1hdGlvbi4KIAogQG5vZGUgc2hpZnRfdGVzdF9tb2R1bGUKIEBzZWN0aW9u IHNoaWZ0X3Rlc3QKQEAgLTU3NDIsMTkgKzU3ODIsMjcgQEAgaW5mb3JtYXRpb24gcHJvdmlkZWQg YnkgYSBVLUJvb3QgYm9vdGxvYWRlci4KIEBzZWN0aW9uIHVkZgogVGhpcyBtb2R1bGUgcHJvdmlk ZXMgc3VwcG9ydCBmb3IgdGhlIFVuaXZlcnNhbCBEaXNrIEZvcm1hdCAoVURGKSB1c2VkIG9uIHNv bWUKIG5ld2VyIG9wdGljYWwgZGlza3MuCitOb3RlOiBUaGlzIG1vZHVsZSBpcyBub3QgYWxsb3dl ZCBpbiBsb2NrZG93biBtb2RlLCBAcHhyZWZ7TG9ja2Rvd259IGZvciBtb3JlCitpbmZvcm1hdGlv bi4KIAogQG5vZGUgdWZzMV9tb2R1bGUKIEBzZWN0aW9uIHVmczEKIFRoaXMgbW9kdWxlIHByb3Zp ZGVzIHN1cHBvcnQgZm9yIHRoZSBVbml4IEZpbGUgU3lzdGVtIHZlcnNpb24gMSBpbiBHUlVCLgor Tm90ZTogVGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4cmVm e0xvY2tkb3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIHVmczFfYmVfbW9kdWxl CiBAc2VjdGlvbiB1ZnMxX2JlCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUg VW5peCBGaWxlIFN5c3RlbSB2ZXJzaW9uIDEgKGJpZy1lbmRpYW4pIGluCiBHUlVCLgorTm90ZTog VGhpcyBtb2R1bGUgaXMgbm90IGFsbG93ZWQgaW4gbG9ja2Rvd24gbW9kZSwgQHB4cmVme0xvY2tk b3dufSBmb3IgbW9yZQoraW5mb3JtYXRpb24uCiAKIEBub2RlIHVmczJfbW9kdWxlCiBAc2VjdGlv biB1ZnMyCiBUaGlzIG1vZHVsZSBwcm92aWRlcyBzdXBwb3J0IGZvciB0aGUgVW5peCBGaWxlIFN5 c3RlbSB2ZXJzaW9uIDIgaW4gR1JVQi4KK05vdGU6IFRoaXMgbW9kdWxlIGlzIG5vdCBhbGxvd2Vk IGluIGxvY2tkb3duIG1vZGUsIEBweHJlZntMb2NrZG93bn0gZm9yIG1vcmUKK2luZm9ybWF0aW9u LgogCiBAbm9kZSB1aGNpX21vZHVsZQogQHNlY3Rpb24gdWhjaQpAQCAtODgxMywxMCArODg2MSw0 NyBAQCBwbGF0Zm9ybXMuCiAKIFRoZSBHUlVCIGNhbiBiZSBsb2NrZWQgZG93biB3aGVuIGJvb3Rl ZCBvbiBhIHNlY3VyZSBib290IGVudmlyb25tZW50LCBmb3IgZXhhbXBsZQogaWYgdGhlIFVFRkkg c2VjdXJlIGJvb3QgaXMgZW5hYmxlZC4gT24gYSBsb2NrZWQgZG93biBjb25maWd1cmF0aW9uLCB0 aGUgR1JVQiB3aWxsCi1iZSByZXN0cmljdGVkIGFuZCBzb21lIG9wZXJhdGlvbnMvY29tbWFuZHMg Y2Fubm90IGJlIGV4ZWN1dGVkLgorYmUgcmVzdHJpY3RlZCBhbmQgc29tZSBvcGVyYXRpb25zL2Nv bW1hbmRzIGNhbm5vdCBiZSBleGVjdXRlZC4gVGhpcyBhbHNvIGluY2x1ZGVzCitsaW1pdGluZyB3 aGljaCBmaWxlc3lzdGVtcyBhcmUgc3VwcG9ydGVkIHRvIHRob3NlIHRob3VnaHQgdG8gYmUgbW9y ZSByb2J1c3QgYW5kCit3aWRlbHkgdXNlZCB3aXRoaW4gR1JVQi4KKworVGhlIGZpbGVzeXN0ZW1z IGN1cnJlbnRseSBhbGxvd2VkIGluIGxvY2tkb3duIG1vZGUgaW5jbHVkZToKK0BpdGVtaXplIEBi dWxsZXQKK0BpdGVtIEJ0ckZTCitAaXRlbSBjcGlvCitAaXRlbSBleEZBVAorQGl0ZW0gRW5oYW5j ZWQgUmVhZC1Pbmx5IEZpbGUgU3lzdGVtIChFUk9GUykKK0BpdGVtIExpbnV4IGV4dDIvZXh0My9l eHQ0CitAaXRlbSBGMkZTCitAaXRlbSBET1MgRkFUMTIvRkFUMTYvRkFUMzIKK0BpdGVtIEhGUysK K0BpdGVtIElTTzk2NjAKK0BpdGVtIFNxdWFzaDQKK0BpdGVtIHRhcgorQGl0ZW0gWEZTCitAaXRl bSBaRlMKK0BlbmQgaXRlbWl6ZQorCitUaGUgZmlsZXN5c3RlbXMgY3VycmVudGx5IG5vdCBhbGxv d2VkIGluIGxvY2tkb3duIG1vZGUgaW5jbHVkZToKK0BpdGVtaXplIEBidWxsZXQKK0BpdGVtIEFt aWdhIEZhc3QgRmlsZVN5c3RlbSAoQUZGUykKK0BpdGVtIEF0aGVPUyBGaWxlIFN5c3RlbSAoQUZT KQorQGl0ZW0gQmVlIEZpbGUgU3lzdGVtIChCRlMpCitAaXRlbSBDb3JlYm9vdCBGaWxlIFN5c3Rl bSAoQ0JGUykKK0BpdGVtIEhpZXJhcmNoaWNhbCBGaWxlIFN5c3RlbSAoSEZTKQorQGl0ZW0gSm91 cm5hbGVkIEZpbGUgU3lzdGVtIChKRlMpCitAaXRlbSBNaW5peCBmaWxlc3lzdGVtCitAaXRlbSBO ZXcgSW1wbGVtZW50YXRpb24gb2YgTG9nIGZpbGVzeXN0ZW0gKG5pbGZzMikKK0BpdGVtIFdpbmRv d3MgTmV3IFRlY2hub2xvZ3kgRmlsZSBTeXN0ZW0gKE5URlMpCitAaXRlbSBSZWlzZXJGUworQGl0 ZW0gUmVhZC1Pbmx5IE1lbW9yeSBGaWxlIFN5c3RlbSAoUk9NRlMpCitAaXRlbSBBbWlnYSBTbWFy dCBGaWxlIFN5c3RlbSAoU0ZTKQorQGl0ZW0gVW5pdmVyc2FsIERpc2sgRm9ybWF0IChVREYpCitA aXRlbSBVbml4IEZpbGUgU3lzdGVtIChVRlMpCitAZW5kIGl0ZW1pemUKIAogVGhlIEBzYW1we2xv Y2tkb3dufSB2YXJpYWJsZSBpcyBzZXQgdG8gQHNhbXB7eX0gd2hlbiB0aGUgR1JVQiBpcyBsb2Nr ZWQgZG93bi4KLU90aGVyd2lzZSBpdCBkb2VzIG5vdCBleGl0LgorT3RoZXJ3aXNlIGl0IGRvZXMg bm90IGV4aXN0LgogCiBAbm9kZSBUUE0yIGtleSBwcm90ZWN0b3IKIEBzZWN0aW9uIFRQTTIga2V5 IHByb3RlY3RvciBpbiBHUlVCCi0tIAoyLjM5LjUKCgpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwpHcnViLWRldmVsIG1haWxpbmcgbGlzdApHcnViLWRldmVs QGdudS5vcmcKaHR0cHM6Ly9saXN0cy5nbnUub3JnL21haWxtYW4vbGlzdGluZm8vZ3J1Yi1kZXZl bAo=