Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lynis for openSUSE:Factory checked in at 2023-08-03 17:30:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lynis (Old) and /work/SRC/openSUSE:Factory/.lynis.new.22712 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lynis" Thu Aug 3 17:30:49 2023 rev:52 rq:1102186 version:3.0.9 Changes: -------- --- /work/SRC/openSUSE:Factory/lynis/lynis.changes 2022-05-18 13:13:51.718697386 +0200 +++ /work/SRC/openSUSE:Factory/.lynis.new.22712/lynis.changes 2023-08-03 17:31:06.924247181 +0200 @@ -1,0 +2,11 @@ +Thu Aug 3 12:56:11 UTC 2023 - Robert Frohl <rfr...@suse.com> + +- Update to 3.0.9: + * Changed + - DBS-1820 - Added newer style format for Mongo authorization setting + - FILE-6410 - Locations added for plocate + - SSH-7408 - Only test Compression if sshd version < 7.4 + - Improved fetching timestamp + - Minor changes such as typos + +------------------------------------------------------------------- Old: ---- lynis-3.0.8.tar.gz lynis-3.0.8.tar.gz.asc New: ---- lynis-3.0.9.tar.gz lynis-3.0.9.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lynis.spec ++++++ --- /var/tmp/diff_new_pack.Uzs2NC/_old 2023-08-03 17:31:08.104254323 +0200 +++ /var/tmp/diff_new_pack.Uzs2NC/_new 2023-08-03 17:31:08.108254347 +0200 @@ -1,7 +1,7 @@ # # spec file for package lynis # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # Copyright (c) 2009-2013 Sascha Manns <saigk...@opensuse.org> # # All modifications and additions to the file contributed by third parties @@ -23,7 +23,7 @@ %define _pluginsdir %{_datadir}/lynis/plugins %define _dbdir %{_datadir}/lynis/db Name: lynis -Version: 3.0.8 +Version: 3.0.9 Release: 0 Summary: Security and System auditing tool License: GPL-3.0-only ++++++ lynis-3.0.8.tar.gz -> lynis-3.0.9.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/CHANGELOG.md new/lynis/CHANGELOG.md --- old/lynis/CHANGELOG.md 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/CHANGELOG.md 2023-08-03 02:00:00.000000000 +0200 @@ -1,5 +1,16 @@ # Lynis Changelog +## Lynis 3.0.9 (2023-08-03) + +### Changed +- DBS-1820 - Added newer style format for Mongo authorization setting +- FILE-6410 - Locations added for plocate +- SSH-7408 - Only test Compression if sshd version < 7.4 +- Improved fetching timestamp +- Minor changes such as typos + +--------------------------------------------------------------------------------- + ## Lynis 3.0.8 (2022-05-17) ### Added diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/db/tests.db new/lynis/db/tests.db --- old/lynis/db/tests.db 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/db/tests.db 2023-08-03 02:00:00.000000000 +0200 @@ -136,7 +136,7 @@ FINT-4310:test:security:file_integrity::AFICK availability: FINT-4314:test:security:file_integrity::AIDE availability: FINT-4315:test:security:file_integrity::Check AIDE configuration file: -FINT-4316:test:security:file_integirty::Presence of AIDE database and size check: +FINT-4316:test:security:file_integrity::Presence of AIDE database and size check: FINT-4318:test:security:file_integrity::Osiris availability: FINT-4322:test:security:file_integrity::Samhain availability: FINT-4326:test:security:file_integrity::Tripwire availability: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/include/functions new/lynis/include/functions --- old/lynis/include/functions 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/include/functions 2023-08-03 02:00:00.000000000 +0200 @@ -2562,14 +2562,18 @@ GetTimestamp() { ts=0 - case "${OS}" in - "Linux") + # Detect if the implementation of date supports nanoseconds, + if [ "${OS}" = "Linux" ]; then + current_nanoseconds=$(date "+%N") + # Verify if the result of the command is a number + if [ -n "$current_nanoseconds" ] && [ "$current_nanoseconds" -eq "$current_nanoseconds" ] 2>/dev/null; then ts=$(date "+%s%N") - ;; - *) + else ts=$(date "+%s") - ;; - esac + fi + else + ts=$(date "+%s") + fi echo $ts } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/include/osdetection new/lynis/include/osdetection --- old/lynis/include/osdetection 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/include/osdetection 2023-08-03 02:00:00.000000000 +0200 @@ -777,10 +777,26 @@ ECHONB="" case ${OS} in - "AIX") ECHOCMD="echo"; ECHONB="printf" ;; - "DragonFly"|"FreeBSD"|"NetBSD") ECHOCMD="echo -e"; ECHONB="echo -n" ;; - "macOS" | "Mac OS X") ECHOCMD="echo"; ECHONB="/bin/echo -n" ;; - "Solaris") ECHOCMD="echo" ; test -f /usr/ucb/echo && ECHONB="/usr/ucb/echo -n" ;; + "AIX") + ECHOCMD="echo"; + ECHONB="printf" + ;; + "DragonFly"|"FreeBSD"|"NetBSD") + ECHOCMD="echo -e" + ECHONB="echo -n" + NOW=$(date "+%s") + ;; + "macOS" | "Mac OS X") + ECHOCMD="echo" + ECHONB="/bin/echo -n" + NOW=$(date "+%s") + ;; + + "Solaris") + ECHOCMD="echo" + test -f /usr/ucb/echo && ECHONB="/usr/ucb/echo -n" + NOW=$(nawk 'BEGIN{print srand()}') + ;; "Linux") # Check if dash is used (Debian/Ubuntu) DEFAULT_SHELL=$(ls -l /bin/sh | awk -F'>' '{print $2}') @@ -788,10 +804,14 @@ " dash") ECHOCMD="/bin/echo -e" ;; *) ECHOCMD="echo -e" ;; esac + NOW=$(date "+%s") + ;; + *) + ECHOCMD="echo -e" + NOW=$(date "+%s") ;; - *) ECHOCMD="echo -e" ;; esac - + # Check if we have full featured commands, or are using BusyBox as a shell if [ -x /bin/busybox ]; then if [ -L /bin/ps ]; then @@ -820,13 +840,10 @@ if [ -n "${EOL_TIMESTAMP}" ]; then EOL_DATE=$(awk -v value="${FIND}" -F: '{if ($1=="os" && value ~ $2){print $3}}' ${DBDIR}/software-eol.db | head -n 1) if [ -n "${EOL_DATE}" ]; then - NOW=$(date "+%s") - if [ -n "${NOW}" ]; then - if [ ${NOW} -gt ${EOL_TIMESTAMP} ]; then - EOL=1 - else - EOL=0 - fi + if [ ${NOW} -gt ${EOL_TIMESTAMP} ]; then + EOL=1 + else + EOL=0 fi else EOL=0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/include/tests_databases new/lynis/include/tests_databases --- old/lynis/include/tests_databases 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/include/tests_databases 2023-08-03 02:00:00.000000000 +0200 @@ -127,12 +127,25 @@ for FILE in ${MONGO_CONF_FILES}; do if [ -f ${FILE} ]; then LogText "Result: found MongoDB configuration file (${FILE})" - LogText "Test: determine authorization setting in new style YAML format" - AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: enabled" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)") - if HasData "${AUTH_IN_CONFIG}"; then - LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format)" - MONGODB_AUTHORIZATION_ENABLED=1 - else + # YAML with quotes + if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then + LogText "Test: determine authorization setting in new style YAML format" + AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: \"enabled\"" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)") + if HasData "${AUTH_IN_CONFIG}"; then + LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format with quotes)" + MONGODB_AUTHORIZATION_ENABLED=1 + fi + fi + # YAML without quotes + if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then + AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: enabled" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)") + if HasData "${AUTH_IN_CONFIG}"; then + LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format without quotes)" + MONGODB_AUTHORIZATION_ENABLED=1 + fi + fi + # Old style + if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then LogText "Result: did NOT find authorization option enabled in configuration file (with YAML format)" LogText "Test: now searching for old style configuration (auth = true) in configuration file" AUTH_IN_CONFIG=$(${GREPBINARY} "auth = true" ${FILE} | ${GREPBINARY} -v "noauth" | ${GREPBINARY} -E -v "(^#|#auth)") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/include/tests_filesystems new/lynis/include/tests_filesystems --- old/lynis/include/tests_filesystems 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/include/tests_filesystems 2023-08-03 02:00:00.000000000 +0200 @@ -744,7 +744,7 @@ if [ ${SKIPTEST} -eq 0 ]; then LogText "Test: Checking locate database" FOUND=0 - LOCATE_DBS="${ROOTDIR}var/lib/mlocate/mlocate.db ${ROOTDIR}var/lib/locate/locatedb ${ROOTDIR}var/lib/locatedb ${ROOTDIR}var/lib/slocate/slocate.db ${ROOTDIR}var/cache/locate/locatedb ${ROOTDIR}var/db/locate.database" + LOCATE_DBS="${ROOTDIR}var/cache/locate/locatedb ${ROOTDIR}var/db/locate.database ${ROOTDIR}var/lib/locate/locatedb ${ROOTDIR}var/lib/locatedb ${ROOTDIR}var/lib/mlocate/mlocate.db ${ROOTDIR}var/lib/plocate/plocate.db ${ROOTDIR}var/lib/slocate/slocate.db" for FILE in ${LOCATE_DBS}; do if [ -f ${FILE} ]; then LogText "Result: locate database found (${FILE})" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/include/tests_ssh new/lynis/include/tests_ssh --- old/lynis/include/tests_ssh 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/include/tests_ssh 2023-08-03 02:00:00.000000000 +0200 @@ -135,7 +135,6 @@ SSHOPS="AllowTcpForwarding:NO,LOCAL,YES:=\ ClientAliveCountMax:2,4,16:<\ ClientAliveInterval:300,600,900:<\ - Compression:NO,,YES:=\ FingerprintHash:SHA256,MD5,:=\ GatewayPorts:NO,,YES:=\ IgnoreRhosts:YES,,NO:=\ @@ -158,12 +157,12 @@ # OpenSSH had some options removed over time. Based on the version we add some additional options to check if [ ${OPENSSHD_VERSION_MAJOR} -lt 7 ]; then LogText "Result: added additional options for OpenSSH 6.x and lower" - SSHOPS="${SSHOPS} UsePrivilegeSeparation:SANDBOX,YES,NO:= Protocol:2,,1:=" + SSHOPS="${SSHOPS} Compression:(DELAYED|NO),,YES:= UsePrivilegeSeparation:SANDBOX,YES,NO:= Protocol:2,,1:=" elif [ ${OPENSSHD_VERSION_MAJOR} -eq 7 ]; then # Protocol 1 support removed (OpenSSH 7.4 and later) if [ ${OPENSSHD_VERSION_MINOR} -lt 4 ]; then LogText "Result: added additional options for OpenSSH < 7.4" - SSHOPS="${SSHOPS} Protocol:2,,1:=" + SSHOPS="${SSHOPS} Compression:(DELAYED|NO),,YES:= Protocol:2,,1:=" fi # UsePrivilegedSeparation removed (OpenSSH 7.5 and later) if [ ${OPENSSHD_VERSION_MINOR} -lt 5 ]; then diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lynis/lynis new/lynis/lynis --- old/lynis/lynis 2022-05-17 02:00:00.000000000 +0200 +++ new/lynis/lynis 2023-08-03 02:00:00.000000000 +0200 @@ -43,10 +43,10 @@ PROGRAM_WEBSITE="https://cisofy.com/lynis/" # Version details - PROGRAM_RELEASE_DATE="2022-05-17" - PROGRAM_RELEASE_TIMESTAMP=1652791205 + PROGRAM_RELEASE_DATE="2023-08-03" + PROGRAM_RELEASE_TIMESTAMP=1691062820 PROGRAM_RELEASE_TYPE="release" # pre-release or release - PROGRAM_VERSION="3.0.8" + PROGRAM_VERSION="3.0.9" # Source, documentation and license PROGRAM_SOURCE="https://github.com/CISOfy/lynis" @@ -514,7 +514,7 @@ . ${INCLUDEDIR}/osdetection Display --indent 2 --text "- Detecting OS... " --result "${STATUS_DONE}" --color GREEN - # Check hostname + # Check hostname and get timestamp case ${OS} in HP-UX) HOSTNAME=$(hostname) ;; @@ -531,7 +531,6 @@ if [ "${OS}" = "Linux" -a "${HOSTNAME}" = "${FQDN}" ]; then FQDN=$(hostname -f 2> /dev/null) fi - # ################################################################################# # @@ -789,16 +788,10 @@ fi fi - # Test for older releases, without testing via update mechanism - if [ "${OS}" = "Solaris" ]; then - NOW=$(nawk 'BEGIN{print srand()}') - else - NOW=$(date "+%s") - fi - OLD_RELEASE=0 TIME_DIFFERENCE_CHECK=10368000 # 4 months RELEASE_PLUS_TIMEDIFF=$((PROGRAM_RELEASE_TIMESTAMP + TIME_DIFFERENCE_CHECK)) + NOW=$(date "+%s") if [ ${NOW} -gt ${RELEASE_PLUS_TIMEDIFF} ]; then # Show if release is old, only if we didn't show it with normal update check if [ ${UPDATE_AVAILABLE} -eq 0 ]; then ++++++ lynis.keyring ++++++ --- /var/tmp/diff_new_pack.Uzs2NC/_old 2023-08-03 17:31:08.444256380 +0200 +++ /var/tmp/diff_new_pack.Uzs2NC/_new 2023-08-03 17:31:08.448256405 +0200 @@ -1,4 +1,5 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1 mQINBGDRds0BEAC4XJX2CtSzyZWmVTn5waHSpu/Bfzs8qb9K4IALEtds5LKnvoGV 7gK1fC8gbN2mY9dfuhcTxuLg8G37MROWjY2KAANfjmFUT/MTOE13/uhggg3/Q23U @@ -24,63 +25,63 @@ ASOmI0nXqYEElAONpB8K/GPVmNVatEqu7fTXtfFz4buiaxCZdrzY8QkBtY/tA6H/ O7Ln2Oz5DBBeGWvd4wT0lajrQtE7Qx8dQEt185MztKNrP/2gbZzgbKNWN06lN9V8 Of59oIBycPsFrYhmAMdNp6FaZt9+ndAhCjVmze59Vo3b0JN/eqjV/YeDoWNOefFn -uQINBGDRdy0BEACywPYrQsu7xn4VhI8tF3sEmyWB6S5n2SlVMoc8/PUALboNJJ7m -siga30jERUm1wNvTt2Cb5vJU+O8yLi8hF44MeNoDX1rvqTO81sFJbadM59hqTCBN -0LUhndcyJo8aKxxaRDhtVs07OwhDvWMWEd87qOP5LZe+onFUQMMfwzr+PhYBum1B -g3YjFd0C13UsTvpGE+Rk5dZxUCojpyON7KfrNtKEdSLGgzxTEOi1a44OuyN0fLda -t4T7tCpJAvXgp7N6XXy7QqKNMWEUXwTvMIZ2UXVj5SB92Op/scMJLVqaB1RBmsd8 -2okT0fQDKnWfFYGwBoYBBh7h/LpYTAR3Kik3fFqZygtn9tliZmt1C4h4KpD6t+QL -t6/Rq64q65WgS+YKAR0S92xCPSMek81PMPReQFMT/lNLJdwrO3bxQv6oTd5PGg6m -Yo7O3djpBT7EpdRQhS+iqcWMGoL24D0mMle3J4gaMhDIYy9vxi3oaODu270PTyW3 -o2gHw8x1smdPclyDT4gYTu+a97kVMhMcyohBRC/TqjYTKXPX1YjREg1ChhJ5DkWN -FuyK36YH9Dby6SlqtHyT8GHHpE1WQF2TzxkfZvl4g4nDLZkaYBvYl8w5evaRN0wc -gIYknFHAq1ew+bE8jtrkd7j3+XRuEK4PKCjkK2502EUuqnrTuNHVM6roPQARAQAB -iQREBBgBAgAPBQJg0XctAhsCBQkSzAMAAikJEP67fRgSV2SCwV0gBBkBAgAGBQJg -0XctAAoJEJ3pIvHC/ebEigwP/0VR8Dkm522ZbR2ipAoEz/GNFRfJQ+an4GOOVs2D -EubKyUFmTzxs6TAxncATwFWoSPgd+xtKNMJbmL9NeHAR7nfrgHrw+fn/HAaGIjBL -XZAjqZidOg9+wvqNuTTz7UCYmezvZZqk55+dIT8gTXekRlS5vZk2bH+kUxK7v2tF -fWY38nvDDL7qeUuJDoIXGHZeYHDsDMcIkFtxYmFEI1f4abP1RnkC6IwbKsIo8vqD -3eIJFO2oPPrgDg+zF/0KNF4RQlUqgng4iZ5FakqsqSh8uGplzMjzTRjNc1dNXmsI -3n7G9O973/ZmpPyhHFVpI9J39IkAWmXgd2en/mxGKkXh6XOOWVvgSwZ/2aWFLYsK -WBukCiN5KaS/HpO8zCf3LkvqzyvcW9JOILK45e4r8gVMefp1NmCdE0Ww9khzpimq -osQHu4jt/Pc9l/2ImKDoX5hvPHkjuw71jhJCDSoAe5jWkjIdzS61pB3SQUmjIfWb -Vrmc/LsxzVncKGzMisrUNVH7t8U4wn0Q+x0R4NvIiK/Ws5FxiYTaCf7oIoZX9nKt -Gz5SD/WE04QDmoXymweyr1qoxa5H/YPppTZSFrSEHCxIlL07/RDC8alA6EhBa+Wu -P/9fRlFf04mOLIYmmMfKAg9t8RGvqwFmoMHUTikoJkEgOlaiZyLpV+beXCC4w7G/ -xKdWGmwP/igj3rCx0IOzfrMuyGxILBPdZrHTQ+FMjI9m+bQ2ci7eBH0fuxgM5FDD -wu4+0XutbXkhruVPSxRPt3yC3ouQsSi8GDi43AxEfHoWliFs5kLlqCArJdIMugiK -ICEjrUKYLIEcJnkdcPr+vt/0YXLNTEWZdmK/dU5Qm52BjK92zuO3H2+Heh5XHbJC -NUE75hd0I4GLjJR+CBCAK1OqvS8m6Lq5PCWfrAWyTf6AxEXdIAcwAp2igJXE3NR9 -vpi3mWwXkAvT3dkGkvIoyp6qUdBxglT7ifl0EFl8l2ehy7QwTHMF6X2Y3LYTOdn3 -9rQIF789HMW1iolB0CNyULDnEA3cawQgpuTke/XlZpIMhVLL44UpEhMVZ9/20OgK -xwP/1q2/iirZVdzqQCYRxKluPyAb0FOUIbQUOA5QdK8EEwPwAH2HGRk4LsF7xdXP -lep2OQObIAjMs9WPbveexdFGiUG/xSPrNaDpFc+DXX94/hJO9NsUwdI8gN1H+r9f -xBZ4a8UHzceMD12Wct4N2wLPZX4MCHYDbGMmGF0SC2eFOFK7Nn2/emJjjnr15VAg -DOKknzFo16lvY7LV6pywNsUsSnPB1bGHbisG6mkdkW7nPsL0d2w4yz+lL9R7yQjv -S1Z8hMeTxbzr6OZdgF4rMxpPclTOaAj94qEb1toWkgrwUmMepzoGuQINBGDRds0B -EADNjOgAEz4azwlpR+lC5T5b3xVGclct0S1BxfZw4scj/7hIjPlJtX288Kj8fs8L -0vIKUY7IW2Y2bePKAkjnIdOsV86DTHDOGW99um61trHGP2Y1KLYP6/amDPSOTELn -5+U88B2RpXr7xXD14fqdnM46GOM+7FORxOe3pdmeCuoyDDfXZ43ZgmYl6R0Ioo3+ -LsFrn74vlVGSzjBW+F6alZpACW6ZET3iM5wDhrxBP9GybIMkpLKoNVNu9WdHv9Wt -J1cnqgyM70EAKbAKddRqGwOf80reFzP+TcdmGzXUWbWt2T+bs34LnczLjJNB7sl3 -k8ArLZtrKxRsoAD7vvCh981mHCLGU8kS7Tf6tALJYcVgFVLjX4N1ASF3525AKfOE -4yOGWvbKDNQP0rJe8nFrDLtikAhmPt346D4tArZGzwuuzzOAca76WB9w45wS5w6l -IejRft961FeHvqm6r8OE+rS5w6J/NH5vFMm425cwHY1O3u7x1y0Ik3VrOZ6OJ1WU -3WTqkCGKtBWBU2hkx4BbwZD6l/f523iS9tgxlUVoNud08fQQTwRYs4T7oSZ1xbZs -HHe/LzwhdQojTc2uMETcTDX9GUDePoVohELzVlMAeQm5mvWFUQ87rsgbo3/iEH2u -/jeqaM4Q6QeNcEtw1VJ6I0LiSb39TlBpZsw9atC0DOxHXQARAQABiQIlBBgBAgAP -BQJg0XbNAhsMBQkSzAMAAAoJEP67fRgSV2SC/EQQAKmvxewbYCtN5kQ6BadCeE2I -rtV/yyaz2r0vIMI0jtA1F5n/IYbR/5gVUWLphBL7hKw+Jn9oMqV4yymCvY0N4faq -qIW0QElp1seTCCFzbVhYC9Hv9vWgfHZhXUDTm6WE/vAwl3BYS/p8KSyMIdkmParx -WbHV0k6tzyVuV3hYMQD8GsHq4i4/TjJtfh2fNKh4lAaxuUoifpBFte+3YI5GSKXS -STm2fxAIXoWPnpFTh+VTcTu5Sv7pbR6YT0vFM04V3DPVhNO1l72oUEA6ubSf1gys -03CQ4/yK1k9kBJ3RAGK0nLZbB4cSQD2Lu7KCG3jakpzUiu38Gn/XNz7aU78Qnj0V -zSL7Ko3Eg0g3TURG+UE4JYE3qUnU/++V43HkGaoh9Cq+ytE6wPAEGC2j660sI5+T -N+hZURUqmyU8sFdviskXQnlJztnEY5tVsoh6JuKEykcBj9jgyvNgTaA7HAC/Qh2z -uEJ4OA0al+IDhMLfWwhhop2+ghy7yF4zHC/VnCaQ+O7+ZIfnIsRWgpBHTkl70uTl -G64crM7RDxGVIgO5O6HIZ+Fu3HIAM6AWtPjkv8XQ/g8x3NnSor40E8DeW45fjk/O -nh/bs0zyGN6XuZPU2L7aogTF3gP0wxkU0r96r8z+BOqmT6lD4mOLuSeVcIqCYWRC -7bhk2ySSo/oC9QhN3CBl -=30Fa +uQINBGDRds0BEADNjOgAEz4azwlpR+lC5T5b3xVGclct0S1BxfZw4scj/7hIjPlJ +tX288Kj8fs8L0vIKUY7IW2Y2bePKAkjnIdOsV86DTHDOGW99um61trHGP2Y1KLYP +6/amDPSOTELn5+U88B2RpXr7xXD14fqdnM46GOM+7FORxOe3pdmeCuoyDDfXZ43Z +gmYl6R0Ioo3+LsFrn74vlVGSzjBW+F6alZpACW6ZET3iM5wDhrxBP9GybIMkpLKo +NVNu9WdHv9WtJ1cnqgyM70EAKbAKddRqGwOf80reFzP+TcdmGzXUWbWt2T+bs34L +nczLjJNB7sl3k8ArLZtrKxRsoAD7vvCh981mHCLGU8kS7Tf6tALJYcVgFVLjX4N1 +ASF3525AKfOE4yOGWvbKDNQP0rJe8nFrDLtikAhmPt346D4tArZGzwuuzzOAca76 +WB9w45wS5w6lIejRft961FeHvqm6r8OE+rS5w6J/NH5vFMm425cwHY1O3u7x1y0I +k3VrOZ6OJ1WU3WTqkCGKtBWBU2hkx4BbwZD6l/f523iS9tgxlUVoNud08fQQTwRY +s4T7oSZ1xbZsHHe/LzwhdQojTc2uMETcTDX9GUDePoVohELzVlMAeQm5mvWFUQ87 +rsgbo3/iEH2u/jeqaM4Q6QeNcEtw1VJ6I0LiSb39TlBpZsw9atC0DOxHXQARAQAB +iQIlBBgBAgAPBQJg0XbNAhsMBQkSzAMAAAoJEP67fRgSV2SC/EQQAKmvxewbYCtN +5kQ6BadCeE2IrtV/yyaz2r0vIMI0jtA1F5n/IYbR/5gVUWLphBL7hKw+Jn9oMqV4 +yymCvY0N4faqqIW0QElp1seTCCFzbVhYC9Hv9vWgfHZhXUDTm6WE/vAwl3BYS/p8 +KSyMIdkmParxWbHV0k6tzyVuV3hYMQD8GsHq4i4/TjJtfh2fNKh4lAaxuUoifpBF +te+3YI5GSKXSSTm2fxAIXoWPnpFTh+VTcTu5Sv7pbR6YT0vFM04V3DPVhNO1l72o +UEA6ubSf1gys03CQ4/yK1k9kBJ3RAGK0nLZbB4cSQD2Lu7KCG3jakpzUiu38Gn/X +Nz7aU78Qnj0VzSL7Ko3Eg0g3TURG+UE4JYE3qUnU/++V43HkGaoh9Cq+ytE6wPAE +GC2j660sI5+TN+hZURUqmyU8sFdviskXQnlJztnEY5tVsoh6JuKEykcBj9jgyvNg +TaA7HAC/Qh2zuEJ4OA0al+IDhMLfWwhhop2+ghy7yF4zHC/VnCaQ+O7+ZIfnIsRW +gpBHTkl70uTlG64crM7RDxGVIgO5O6HIZ+Fu3HIAM6AWtPjkv8XQ/g8x3NnSor40 +E8DeW45fjk/Onh/bs0zyGN6XuZPU2L7aogTF3gP0wxkU0r96r8z+BOqmT6lD4mOL +uSeVcIqCYWRC7bhk2ySSo/oC9QhN3CBluQINBGDRdy0BEACywPYrQsu7xn4VhI8t +F3sEmyWB6S5n2SlVMoc8/PUALboNJJ7msiga30jERUm1wNvTt2Cb5vJU+O8yLi8h +F44MeNoDX1rvqTO81sFJbadM59hqTCBN0LUhndcyJo8aKxxaRDhtVs07OwhDvWMW +Ed87qOP5LZe+onFUQMMfwzr+PhYBum1Bg3YjFd0C13UsTvpGE+Rk5dZxUCojpyON +7KfrNtKEdSLGgzxTEOi1a44OuyN0fLdat4T7tCpJAvXgp7N6XXy7QqKNMWEUXwTv +MIZ2UXVj5SB92Op/scMJLVqaB1RBmsd82okT0fQDKnWfFYGwBoYBBh7h/LpYTAR3 +Kik3fFqZygtn9tliZmt1C4h4KpD6t+QLt6/Rq64q65WgS+YKAR0S92xCPSMek81P +MPReQFMT/lNLJdwrO3bxQv6oTd5PGg6mYo7O3djpBT7EpdRQhS+iqcWMGoL24D0m +Mle3J4gaMhDIYy9vxi3oaODu270PTyW3o2gHw8x1smdPclyDT4gYTu+a97kVMhMc +yohBRC/TqjYTKXPX1YjREg1ChhJ5DkWNFuyK36YH9Dby6SlqtHyT8GHHpE1WQF2T +zxkfZvl4g4nDLZkaYBvYl8w5evaRN0wcgIYknFHAq1ew+bE8jtrkd7j3+XRuEK4P +KCjkK2502EUuqnrTuNHVM6roPQARAQABiQREBBgBAgAPBQJg0XctAhsCBQkSzAMA +AikJEP67fRgSV2SCwV0gBBkBAgAGBQJg0XctAAoJEJ3pIvHC/ebEigwP/0VR8Dkm +522ZbR2ipAoEz/GNFRfJQ+an4GOOVs2DEubKyUFmTzxs6TAxncATwFWoSPgd+xtK +NMJbmL9NeHAR7nfrgHrw+fn/HAaGIjBLXZAjqZidOg9+wvqNuTTz7UCYmezvZZqk +55+dIT8gTXekRlS5vZk2bH+kUxK7v2tFfWY38nvDDL7qeUuJDoIXGHZeYHDsDMcI +kFtxYmFEI1f4abP1RnkC6IwbKsIo8vqD3eIJFO2oPPrgDg+zF/0KNF4RQlUqgng4 +iZ5FakqsqSh8uGplzMjzTRjNc1dNXmsI3n7G9O973/ZmpPyhHFVpI9J39IkAWmXg +d2en/mxGKkXh6XOOWVvgSwZ/2aWFLYsKWBukCiN5KaS/HpO8zCf3LkvqzyvcW9JO +ILK45e4r8gVMefp1NmCdE0Ww9khzpimqosQHu4jt/Pc9l/2ImKDoX5hvPHkjuw71 +jhJCDSoAe5jWkjIdzS61pB3SQUmjIfWbVrmc/LsxzVncKGzMisrUNVH7t8U4wn0Q ++x0R4NvIiK/Ws5FxiYTaCf7oIoZX9nKtGz5SD/WE04QDmoXymweyr1qoxa5H/YPp +pTZSFrSEHCxIlL07/RDC8alA6EhBa+WuP/9fRlFf04mOLIYmmMfKAg9t8RGvqwFm +oMHUTikoJkEgOlaiZyLpV+beXCC4w7G/xKdWGmwP/igj3rCx0IOzfrMuyGxILBPd +ZrHTQ+FMjI9m+bQ2ci7eBH0fuxgM5FDDwu4+0XutbXkhruVPSxRPt3yC3ouQsSi8 +GDi43AxEfHoWliFs5kLlqCArJdIMugiKICEjrUKYLIEcJnkdcPr+vt/0YXLNTEWZ +dmK/dU5Qm52BjK92zuO3H2+Heh5XHbJCNUE75hd0I4GLjJR+CBCAK1OqvS8m6Lq5 +PCWfrAWyTf6AxEXdIAcwAp2igJXE3NR9vpi3mWwXkAvT3dkGkvIoyp6qUdBxglT7 +ifl0EFl8l2ehy7QwTHMF6X2Y3LYTOdn39rQIF789HMW1iolB0CNyULDnEA3cawQg +puTke/XlZpIMhVLL44UpEhMVZ9/20OgKxwP/1q2/iirZVdzqQCYRxKluPyAb0FOU +IbQUOA5QdK8EEwPwAH2HGRk4LsF7xdXPlep2OQObIAjMs9WPbveexdFGiUG/xSPr +NaDpFc+DXX94/hJO9NsUwdI8gN1H+r9fxBZ4a8UHzceMD12Wct4N2wLPZX4MCHYD +bGMmGF0SC2eFOFK7Nn2/emJjjnr15VAgDOKknzFo16lvY7LV6pywNsUsSnPB1bGH +bisG6mkdkW7nPsL0d2w4yz+lL9R7yQjvS1Z8hMeTxbzr6OZdgF4rMxpPclTOaAj9 +4qEb1toWkgrwUmMepzoG +=PBwG -----END PGP PUBLIC KEY BLOCK-----