From 752f22ec6c7e46051c23a73dc1b1d06883d741e8 Mon Sep 17 00:00:00 2001 From: Marcel Schwarz Date: Fri, 8 Jan 2021 21:43:23 +0100 Subject: [PATCH] Add hetzner ubuntu 16.04 --- .../lynis-console-1.log | 675 ++ .../lynis-console-2.log | 673 ++ .../lynis-console-3.log | 648 ++ .../1_hetzner_ubuntu_16.04/lynis-log-1.log | 4918 ++++++++++ .../1_hetzner_ubuntu_16.04/lynis-log-2.log | 4917 ++++++++++ .../1_hetzner_ubuntu_16.04/lynis-log-3.log | 4962 ++++++++++ .../1_hetzner_ubuntu_16.04/lynis-report-1.dat | 699 ++ .../1_hetzner_ubuntu_16.04/lynis-report-2.dat | 697 ++ .../1_hetzner_ubuntu_16.04/lynis-report-3.dat | 725 ++ .../1_hetzner_ubuntu_16.04/otseca-1/.gitkeep | 0 .../otseca-1/report.1610038143/css/main.css | 389 + .../otseca-1/report.1610038143/css/util.css | 932 ++ .../report.1610038143/distro.all.log.html | 773 ++ .../fonts/Lato/Lato-Black.ttf | Bin 0 -> 114588 bytes .../fonts/Lato/Lato-BlackItalic.ttf | Bin 0 -> 111616 bytes .../fonts/Lato/Lato-Bold.ttf | Bin 0 -> 121788 bytes .../fonts/Lato/Lato-BoldItalic.ttf | Bin 0 -> 120312 bytes .../fonts/Lato/Lato-Hairline.ttf | Bin 0 -> 115316 bytes .../fonts/Lato/Lato-HairlineItalic.ttf | Bin 0 -> 91460 bytes .../fonts/Lato/Lato-Italic.ttf | Bin 0 -> 118352 bytes .../fonts/Lato/Lato-Light.ttf | Bin 0 -> 122524 bytes .../fonts/Lato/Lato-LightItalic.ttf | Bin 0 -> 91600 bytes .../fonts/Lato/Lato-Regular.ttf | Bin 0 -> 120196 bytes .../report.1610038143/fonts/Lato/OFL.txt | 93 + .../images/icons/favicon.ico | 0 .../report.1610038143/images/otseca_logo.png | Bin 0 -> 9114 bytes .../otseca-1/report.1610038143/index.html | 144 + .../otseca-1/report.1610038143/js/main.js | 25 + .../report.1610038143/kernel.all.log.html | 856 ++ .../report.1610038143/network.all.log.html | 420 + .../permissions.all.log.html | 2110 +++++ .../report.1610038143/services.all.log.html | 2527 +++++ .../report.1610038143/system.all.log.html | 840 ++ .../vendor/animate/animate.css | 1579 ++++ .../vendor/bootstrap/css/bootstrap-grid.css | 1353 +++ .../bootstrap/css/bootstrap-grid.css.map | 1 + .../bootstrap/css/bootstrap-grid.min.css | 2 + .../bootstrap/css/bootstrap-grid.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap-reboot.css | 330 + .../bootstrap/css/bootstrap-reboot.css.map | 1 + .../bootstrap/css/bootstrap-reboot.min.css | 2 + .../css/bootstrap-reboot.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap.css | 8185 +++++++++++++++++ .../vendor/bootstrap/css/bootstrap.css.map | 1 + .../vendor/bootstrap/css/bootstrap.min.css | 7 + .../bootstrap/css/bootstrap.min.css.map | 1 + .../vendor/bootstrap/js/bootstrap.js | 3831 ++++++++ .../vendor/bootstrap/js/bootstrap.min.js | 6 + .../vendor/bootstrap/js/popper.js | 2448 +++++ .../vendor/bootstrap/js/popper.min.js | 5 + .../vendor/bootstrap/js/tooltip.js | 539 ++ .../vendor/jquery/jquery-3.2.1.min.js | 4 + .../perfect-scrollbar/perfect-scrollbar.css | 112 + .../perfect-scrollbar.min.js | 6 + .../vendor/select2/select2.css | 484 + .../vendor/select2/select2.js | 6450 +++++++++++++ .../vendor/select2/select2.min.css | 1 + .../vendor/select2/select2.min.js | 3 + .../otseca-2/report.1610038332/css/main.css | 389 + .../otseca-2/report.1610038332/css/util.css | 932 ++ .../report.1610038332/distro.all.log.html | 763 ++ .../fonts/Lato/Lato-Black.ttf | Bin 0 -> 114588 bytes .../fonts/Lato/Lato-BlackItalic.ttf | Bin 0 -> 111616 bytes .../fonts/Lato/Lato-Bold.ttf | Bin 0 -> 121788 bytes .../fonts/Lato/Lato-BoldItalic.ttf | Bin 0 -> 120312 bytes .../fonts/Lato/Lato-Hairline.ttf | Bin 0 -> 115316 bytes .../fonts/Lato/Lato-HairlineItalic.ttf | Bin 0 -> 91460 bytes .../fonts/Lato/Lato-Italic.ttf | Bin 0 -> 118352 bytes .../fonts/Lato/Lato-Light.ttf | Bin 0 -> 122524 bytes .../fonts/Lato/Lato-LightItalic.ttf | Bin 0 -> 91600 bytes .../fonts/Lato/Lato-Regular.ttf | Bin 0 -> 120196 bytes .../report.1610038332/fonts/Lato/OFL.txt | 93 + .../images/icons/favicon.ico | 0 .../report.1610038332/images/otseca_logo.png | Bin 0 -> 9114 bytes .../otseca-2/report.1610038332/index.html | 144 + .../otseca-2/report.1610038332/js/main.js | 25 + .../report.1610038332/kernel.all.log.html | 856 ++ .../report.1610038332/network.all.log.html | 420 + .../permissions.all.log.html | 2110 +++++ .../report.1610038332/services.all.log.html | 2527 +++++ .../report.1610038332/system.all.log.html | 837 ++ .../vendor/animate/animate.css | 1579 ++++ .../vendor/bootstrap/css/bootstrap-grid.css | 1353 +++ .../bootstrap/css/bootstrap-grid.css.map | 1 + .../bootstrap/css/bootstrap-grid.min.css | 2 + .../bootstrap/css/bootstrap-grid.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap-reboot.css | 330 + .../bootstrap/css/bootstrap-reboot.css.map | 1 + .../bootstrap/css/bootstrap-reboot.min.css | 2 + .../css/bootstrap-reboot.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap.css | 8185 +++++++++++++++++ .../vendor/bootstrap/css/bootstrap.css.map | 1 + .../vendor/bootstrap/css/bootstrap.min.css | 7 + .../bootstrap/css/bootstrap.min.css.map | 1 + .../vendor/bootstrap/js/bootstrap.js | 3831 ++++++++ .../vendor/bootstrap/js/bootstrap.min.js | 6 + .../vendor/bootstrap/js/popper.js | 2448 +++++ .../vendor/bootstrap/js/popper.min.js | 5 + .../vendor/bootstrap/js/tooltip.js | 539 ++ .../vendor/jquery/jquery-3.2.1.min.js | 4 + .../perfect-scrollbar/perfect-scrollbar.css | 112 + .../perfect-scrollbar.min.js | 6 + .../vendor/select2/select2.css | 484 + .../vendor/select2/select2.js | 6450 +++++++++++++ .../vendor/select2/select2.min.css | 1 + .../vendor/select2/select2.min.js | 3 + .../otseca-3/report.1610038776/css/main.css | 389 + .../otseca-3/report.1610038776/css/util.css | 932 ++ .../report.1610038776/distro.all.log.html | 788 ++ .../fonts/Lato/Lato-Black.ttf | Bin 0 -> 114588 bytes .../fonts/Lato/Lato-BlackItalic.ttf | Bin 0 -> 111616 bytes .../fonts/Lato/Lato-Bold.ttf | Bin 0 -> 121788 bytes .../fonts/Lato/Lato-BoldItalic.ttf | Bin 0 -> 120312 bytes .../fonts/Lato/Lato-Hairline.ttf | Bin 0 -> 115316 bytes .../fonts/Lato/Lato-HairlineItalic.ttf | Bin 0 -> 91460 bytes .../fonts/Lato/Lato-Italic.ttf | Bin 0 -> 118352 bytes .../fonts/Lato/Lato-Light.ttf | Bin 0 -> 122524 bytes .../fonts/Lato/Lato-LightItalic.ttf | Bin 0 -> 91600 bytes .../fonts/Lato/Lato-Regular.ttf | Bin 0 -> 120196 bytes .../report.1610038776/fonts/Lato/OFL.txt | 93 + .../images/icons/favicon.ico | 0 .../report.1610038776/images/otseca_logo.png | Bin 0 -> 9114 bytes .../otseca-3/report.1610038776/index.html | 144 + .../otseca-3/report.1610038776/js/main.js | 25 + .../report.1610038776/kernel.all.log.html | 859 ++ .../report.1610038776/network.all.log.html | 460 + .../permissions.all.log.html | 2137 +++++ .../report.1610038776/services.all.log.html | 2534 +++++ .../report.1610038776/system.all.log.html | 851 ++ .../vendor/animate/animate.css | 1579 ++++ .../vendor/bootstrap/css/bootstrap-grid.css | 1353 +++ .../bootstrap/css/bootstrap-grid.css.map | 1 + .../bootstrap/css/bootstrap-grid.min.css | 2 + .../bootstrap/css/bootstrap-grid.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap-reboot.css | 330 + .../bootstrap/css/bootstrap-reboot.css.map | 1 + .../bootstrap/css/bootstrap-reboot.min.css | 2 + .../css/bootstrap-reboot.min.css.map | 1 + .../vendor/bootstrap/css/bootstrap.css | 8185 +++++++++++++++++ .../vendor/bootstrap/css/bootstrap.css.map | 1 + .../vendor/bootstrap/css/bootstrap.min.css | 7 + .../bootstrap/css/bootstrap.min.css.map | 1 + .../vendor/bootstrap/js/bootstrap.js | 3831 ++++++++ .../vendor/bootstrap/js/bootstrap.min.js | 6 + .../vendor/bootstrap/js/popper.js | 2448 +++++ .../vendor/bootstrap/js/popper.min.js | 5 + .../vendor/bootstrap/js/tooltip.js | 539 ++ .../vendor/jquery/jquery-3.2.1.min.js | 4 + .../perfect-scrollbar/perfect-scrollbar.css | 112 + .../perfect-scrollbar.min.js | 6 + .../vendor/select2/select2.css | 484 + .../vendor/select2/select2.js | 6450 +++++++++++++ .../vendor/select2/select2.min.css | 1 + .../vendor/select2/select2.min.js | 3 + .../1_hetzner_ubuntu_16.04/testssl-1.log | 240 + .../1_hetzner_ubuntu_16.04/testssl-2.log | 240 + .../1_hetzner_ubuntu_16.04/testssl-3.log | 237 + 157 files changed, 123107 insertions(+) create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-console-1.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-console-2.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-console-3.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-log-1.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-log-2.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-log-3.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-report-1.dat create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-report-2.dat create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/lynis-report-3.dat create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/.gitkeep create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/main.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/util.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/distro.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Black.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BlackItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Bold.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BoldItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Hairline.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-HairlineItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Italic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Light.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-LightItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Regular.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/OFL.txt create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/icons/favicon.ico create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/otseca_logo.png create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/index.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/js/main.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/kernel.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/network.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/permissions.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/services.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/system.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/animate/animate.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/js/bootstrap.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/js/bootstrap.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/js/popper.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/js/popper.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/js/tooltip.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/jquery/jquery-3.2.1.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/perfect-scrollbar/perfect-scrollbar.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/perfect-scrollbar/perfect-scrollbar.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/select2/select2.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/select2/select2.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/select2/select2.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/select2/select2.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/css/main.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/css/util.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/distro.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Black.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-BlackItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Bold.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-BoldItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Hairline.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-HairlineItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Italic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Light.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-LightItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/Lato-Regular.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/fonts/Lato/OFL.txt create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/images/icons/favicon.ico create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/images/otseca_logo.png create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/index.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/js/main.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/kernel.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/network.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/permissions.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/services.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/system.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/animate/animate.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-grid.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-grid.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-grid.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-grid.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-reboot.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-reboot.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-reboot.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap-reboot.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/css/bootstrap.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/js/bootstrap.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/js/bootstrap.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/js/popper.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/js/popper.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/bootstrap/js/tooltip.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/jquery/jquery-3.2.1.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/perfect-scrollbar/perfect-scrollbar.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/perfect-scrollbar/perfect-scrollbar.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/select2/select2.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/select2/select2.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/select2/select2.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-2/report.1610038332/vendor/select2/select2.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/css/main.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/css/util.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/distro.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Black.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-BlackItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Bold.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-BoldItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Hairline.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-HairlineItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Italic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Light.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-LightItalic.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/Lato-Regular.ttf create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/fonts/Lato/OFL.txt create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/images/icons/favicon.ico create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/images/otseca_logo.png create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/index.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/js/main.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/kernel.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/network.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/permissions.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/services.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/system.all.log.html create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/animate/animate.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-grid.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-grid.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-grid.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-grid.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-reboot.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-reboot.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-reboot.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap-reboot.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/css/bootstrap.min.css.map create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/js/bootstrap.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/js/bootstrap.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/js/popper.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/js/popper.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/bootstrap/js/tooltip.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/jquery/jquery-3.2.1.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/perfect-scrollbar/perfect-scrollbar.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/perfect-scrollbar/perfect-scrollbar.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/select2/select2.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/select2/select2.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/select2/select2.min.css create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/otseca-3/report.1610038776/vendor/select2/select2.min.js create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/testssl-1.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/testssl-2.log create mode 100644 raw_scans/1_hetzner_ubuntu_16.04/testssl-3.log diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-1.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-1.log new file mode 100644 index 0000000..d3f5ecd --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-1.log @@ -0,0 +1,675 @@ + +[ Lynis 3.0.3 ] + +################################################################################ + Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are + welcome to redistribute it under the terms of the GNU General Public License. + See the LICENSE file for details about using this software. + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) +################################################################################ + + +[+] Initializing program +------------------------------------ +- Detecting OS...  [ DONE ] +- Checking profiles... [ DONE ] + + --------------------------------------------------- + Program version: 3.0.3 + Operating system: Linux + Operating system name: Ubuntu + Operating system version: 16.04 + Kernel version: 4.4.0 + Hardware platform: x86_64 + Hostname: it-sec-test-vm + --------------------------------------------------- + Profiles: /root/scans/lynis/default.prf + Log file: /var/log/lynis.log + Report file: /var/log/lynis-report.dat + Report version: 1.0 + Plugin directory: ./plugins + --------------------------------------------------- + Auditor: [Not Specified] + Language: en + Test category: all + Test group: all + --------------------------------------------------- +- Program update status...  [ NO UPDATE ] + +[+] System tools +------------------------------------ +- Scanning available tools... +- Checking system binaries... + +[+] Plugins (phase 1) +------------------------------------ +Note: plugins have more extensive tests and may take several minutes to complete +  +- Plugin: pam + [..] +- Plugin: systemd + [................] + +[+] Boot and services +------------------------------------ +- Service Manager [ systemd ] +- Checking UEFI boot [ DISABLED ] +- Checking presence GRUB2 [ FOUND ] +- Checking for password protection [ NONE ] +- Check running services (systemctl) [ DONE ] +Result: found 18 running services +- Check enabled services at boot (systemctl) [ DONE ] +Result: found 20 enabled services +- Check startup files (permissions) [ OK ] + +[+] Kernel +------------------------------------ +- Checking default run level [ RUNLEVEL 5 ] +- Checking CPU support (NX/PAE) +CPU support: PAE and/or NoeXecute supported [ FOUND ] +- Checking kernel version and release [ DONE ] +- Checking kernel type [ DONE ] +- Checking loaded kernel modules [ DONE ] +Found 50 active modules +- Checking Linux kernel configuration file [ FOUND ] +- Checking default I/O kernel scheduler [ FOUND ] +- Checking for available kernel update [ OK ] +- Checking core dumps configuration +- configuration in systemd conf files [ DEFAULT ] +- configuration in etc/profile [ DEFAULT ] +- 'hard' configuration in security/limits.conf [ DEFAULT ] +- 'soft' configuration in security/limits.conf [ DEFAULT ] +- Checking setuid core dumps configuration [ DISABLED ] +- Check if reboot is needed [ NO ] + +[+] Memory and Processes +------------------------------------ +- Checking /proc/meminfo [ FOUND ] +- Searching for dead/zombie processes [ NOT FOUND ] +- Searching for IO waiting processes [ NOT FOUND ] +- Search prelink tooling [ NOT FOUND ] + +[+] Users, Groups and Authentication +------------------------------------ +- Administrator accounts [ OK ] +- Unique UIDs [ OK ] +- Consistency of group files (grpck) [ OK ] +- Unique group IDs [ OK ] +- Unique group names [ OK ] +- Password file consistency [ OK ] +- Password hashing methods [ OK ] +- Checking password hashing rounds [ DISABLED ] +- Query system users (non daemons) [ DONE ] +- NIS+ authentication support [ NOT ENABLED ] +- NIS authentication support [ NOT ENABLED ] +- Sudoers file(s) [ FOUND ] +- Permissions for directory: /etc/sudoers.d [ OK ] +- Permissions for: /etc/sudoers [ OK ] +- Permissions for: /etc/sudoers.d/README [ OK ] +- Permissions for: /etc/sudoers.d/90-cloud-init-users [ OK ] +- PAM password strength tools [ SUGGESTION ] +- PAM configuration files (pam.conf) [ FOUND ] +- PAM configuration files (pam.d) [ FOUND ] +- PAM modules [ FOUND ] +- LDAP module in PAM [ NOT FOUND ] +- Accounts without expire date [ OK ] +- Accounts without password [ OK ] +- Locked accounts [ OK ] +- Checking user password aging (minimum) [ DISABLED ] +- User password aging (maximum) [ DISABLED ] +- Checking expired passwords [ OK ] +- Checking Linux single user mode authentication [ OK ] +- Determining default umask +- umask (/etc/profile) [ NOT FOUND ] +- umask (/etc/login.defs) [ SUGGESTION ] +- umask (/etc/init.d/rc) [ SUGGESTION ] +- LDAP authentication support [ NOT ENABLED ] +- Logging failed login attempts [ ENABLED ] + +[+] Shells +------------------------------------ +- Checking shells from /etc/shells +Result: found 4 shells (valid shells: 4). +- Session timeout settings/tools [ NONE ] +- Checking default umask values +- Checking default umask in /etc/bash.bashrc [ NONE ] +- Checking default umask in /etc/profile [ NONE ] + +[+] File systems +------------------------------------ +- Checking mount points +- Checking /home mount point [ SUGGESTION ] +- Checking /tmp mount point [ SUGGESTION ] +- Checking /var mount point [ SUGGESTION ] +- Query swap partitions (fstab) [ NONE ] +- Testing swap partitions [ OK ] +- Testing /proc mount (hidepid) [ SUGGESTION ] +- Checking for old files in /tmp [ OK ] +- Checking /tmp sticky bit [ OK ] +- Checking /var/tmp sticky bit [ OK ] +- ACL support root file system [ ENABLED ] +- Mount options of / [ NON DEFAULT ] +- Mount options of /dev [ PARTIALLY HARDENED ] +- Mount options of /dev/shm [ PARTIALLY HARDENED ] +- Mount options of /run [ PARTIALLY HARDENED ] +- Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11 of total 30 +- Disable kernel support of some filesystems +- Discovered kernel modules: udf  + +[+] USB Devices +------------------------------------ +- Checking usb-storage driver (modprobe config) [ NOT DISABLED ] +- Checking USB devices authorization [ ENABLED ] +- Checking USBGuard [ NOT FOUND ] + +[+] Storage +------------------------------------ +- Checking firewire ohci driver (modprobe config) [ DISABLED ] + +[+] NFS +------------------------------------ +- Check running NFS daemon [ NOT FOUND ] + +[+] Name services +------------------------------------ +- Searching DNS domain name [ UNKNOWN ] +- Checking /etc/hosts +- Duplicate entries in hosts file [ NONE ] +- Presence of configured hostname in /etc/hosts [ FOUND ] +- Hostname mapped to localhost [ NOT FOUND ] +- Localhost mapping to IP address [ OK ] + +[+] Ports and packages +------------------------------------ +- Searching package managers +- Searching dpkg package manager [ FOUND ] +- Querying package manager +- Query unpurged packages [ NONE ] +- Checking security repository in sources.list file [ OK ] +- Checking security repository in sources.list.d directory [ OK ] +- Checking APT package database [ OK ] +- Checking vulnerable packages [ WARNING ] +- Checking upgradeable packages [ SKIPPED ] +- Checking package audit tool [ INSTALLED ] +Found: apt-get +- Toolkit for automatic upgrades (unattended-upgrade) [ FOUND ] + +[+] Networking +------------------------------------ +- Checking IPv6 configuration [ ENABLED ] +Configuration method [ AUTO ] +IPv6 only [ NO ] +- Checking configured nameservers +- Testing nameservers +Nameserver: 213.133.99.99 [ SKIPPED ] +Nameserver: 213.133.98.98 [ SKIPPED ] +Nameserver: 213.133.100.100 [ SKIPPED ] +- Minimal of 2 responsive nameservers [ SKIPPED ] +- DNSSEC supported (systemd-resolved) [ NO ] +- Checking default gateway [ DONE ] +- Getting listening ports (TCP/UDP) [ DONE ] +- Checking promiscuous interfaces [ OK ] +- Checking waiting connections [ OK ] +- Checking status DHCP client [ RUNNING ] +- Checking for ARP monitoring software [ NOT FOUND ] +- Uncommon network protocols [ 0 ] + +[+] Printers and Spools +------------------------------------ +- Checking cups daemon [ NOT FOUND ] +- Checking lp daemon [ NOT RUNNING ] + +[+] Software: e-mail and messaging +------------------------------------ + +[+] Software: firewalls +------------------------------------ +- Checking iptables kernel module [ FOUND ] +- Checking iptables policies of chains [ FOUND ] +- Checking for empty ruleset [ WARNING ] +- Checking for unused rules [ OK ] +- Checking host based firewall [ ACTIVE ] + +[+] Software: webserver +------------------------------------ +- Checking Apache [ NOT FOUND ] +- Checking nginx [ NOT FOUND ] + +[+] SSH Support +------------------------------------ +- Checking running SSH daemon [ FOUND ] +- Searching SSH configuration [ FOUND ] +- OpenSSH option: AllowTcpForwarding [ SUGGESTION ] +- OpenSSH option: ClientAliveCountMax [ SUGGESTION ] +- OpenSSH option: ClientAliveInterval [ OK ] +- OpenSSH option: Compression [ SUGGESTION ] +- OpenSSH option: FingerprintHash [ OK ] +- OpenSSH option: GatewayPorts [ OK ] +- OpenSSH option: IgnoreRhosts [ OK ] +- OpenSSH option: LoginGraceTime [ OK ] +- OpenSSH option: LogLevel [ SUGGESTION ] +- OpenSSH option: MaxAuthTries [ SUGGESTION ] +- OpenSSH option: MaxSessions [ SUGGESTION ] +- OpenSSH option: PermitRootLogin [ SUGGESTION ] +- OpenSSH option: PermitUserEnvironment [ OK ] +- OpenSSH option: PermitTunnel [ OK ] +- OpenSSH option: Port [ SUGGESTION ] +- OpenSSH option: PrintLastLog [ OK ] +- OpenSSH option: StrictModes [ OK ] +- OpenSSH option: TCPKeepAlive [ SUGGESTION ] +- OpenSSH option: UseDNS [ OK ] +- OpenSSH option: X11Forwarding [ SUGGESTION ] +- OpenSSH option: AllowAgentForwarding [ SUGGESTION ] +- OpenSSH option: Protocol [ OK ] +- OpenSSH option: UsePrivilegeSeparation [ SUGGESTION ] +- OpenSSH option: AllowUsers [ NOT FOUND ] +- OpenSSH option: AllowGroups [ NOT FOUND ] + +[+] SNMP Support +------------------------------------ +- Checking running SNMP daemon [ NOT FOUND ] + +[+] Databases +------------------------------------ +No database engines found + +[+] LDAP Services +------------------------------------ +- Checking OpenLDAP instance [ NOT FOUND ] + +[+] PHP +------------------------------------ +- Checking PHP [ NOT FOUND ] + +[+] Squid Support +------------------------------------ +- Checking running Squid daemon [ NOT FOUND ] + +[+] Logging and files +------------------------------------ +- Checking for a running log daemon [ OK ] +- Checking Syslog-NG status [ NOT FOUND ] +- Checking systemd journal status [ FOUND ] +- Checking Metalog status [ NOT FOUND ] +- Checking RSyslog status [ FOUND ] +- Checking RFC 3195 daemon status [ NOT FOUND ] +- Checking minilogd instances [ NOT FOUND ] +- Checking logrotate presence [ OK ] +- Checking remote logging [ NOT ENABLED ] +- Checking log directories (static list) [ DONE ] +- Checking open log files [ SKIPPED ] + +[+] Insecure services +------------------------------------ +- Installed inetd package [ NOT FOUND ] +- Installed xinetd package [ OK ] +- xinetd status +- Installed rsh client package [ OK ] +- Installed rsh server package [ OK ] +- Installed telnet client package [ OK ] +- Installed telnet server package [ NOT FOUND ] +- Checking NIS client installation [ OK ] +- Checking NIS server installation [ OK ] +- Checking TFTP client installation [ OK ] +- Checking TFTP server installation [ OK ] + +[+] Banners and identification +------------------------------------ +- /etc/issue [ FOUND ] +- /etc/issue contents [ WEAK ] +- /etc/issue.net [ FOUND ] +- /etc/issue.net contents [ WEAK ] + +[+] Scheduled tasks +------------------------------------ +- Checking crontab and cronjob files [ DONE ] +- Checking atd status [ RUNNING ] +- Checking at users [ DONE ] +- Checking at jobs [ NONE ] + +[+] Accounting +------------------------------------ +- Checking accounting information [ NOT FOUND ] +- Checking sysstat accounting data [ NOT FOUND ] +- Checking auditd [ NOT FOUND ] + +[+] Time and Synchronization +------------------------------------ +- NTP daemon found: systemd (timesyncd) [ FOUND ] +- Checking for a running NTP daemon or client [ OK ] +- Last time synchronization [ NOT FOUND ] + +[+] Cryptography +------------------------------------ +- Checking for expired SSL certificates [0/139] [ NONE ] +- Found 0 encrypted and 0 unencrypted swap devices in use. [ OK ] +- Kernel entropy is sufficient [ YES ] +- HW RNG & rngd [ NO ] +- SW prng [ NO ] + +[+] Virtualization +------------------------------------ + +[+] Containers +------------------------------------ + +[+] Security frameworks +------------------------------------ +- Checking presence AppArmor [ NOT FOUND ] +- Checking presence SELinux [ NOT FOUND ] +- Checking presence TOMOYO Linux [ NOT FOUND ] +- Checking presence grsecurity [ NOT FOUND ] +- Checking for implemented MAC framework [ NONE ] + +[+] Software: file integrity +------------------------------------ +- Checking file integrity tools +- dm-verity (status) [ DISABLED ] +- Checking presence integrity tool [ NOT FOUND ] + +[+] Software: System tooling +------------------------------------ +- Checking automation tooling +- Automation tooling [ NOT FOUND ] +- Checking for IDS/IPS tooling [ NONE ] + +[+] Software: Malware +------------------------------------ + +[+] File Permissions +------------------------------------ +- Starting file permissions check +File: /boot/grub/grub.cfg [ OK ] +File: /etc/at.deny [ SUGGESTION ] +File: /etc/crontab [ SUGGESTION ] +File: /etc/group [ OK ] +File: /etc/group- [ OK ] +File: /etc/hosts.allow [ OK ] +File: /etc/hosts.deny [ OK ] +File: /etc/issue [ OK ] +File: /etc/issue.net [ OK ] +File: /etc/passwd [ OK ] +File: /etc/passwd- [ OK ] +File: /etc/ssh/sshd_config [ SUGGESTION ] +Directory: /root/.ssh [ OK ] +Directory: /etc/cron.d [ SUGGESTION ] +Directory: /etc/cron.daily [ SUGGESTION ] +Directory: /etc/cron.hourly [ SUGGESTION ] +Directory: /etc/cron.weekly [ SUGGESTION ] +Directory: /etc/cron.monthly [ SUGGESTION ] + +[+] Home directories +------------------------------------ +- Permissions of home directories [ OK ] +- Ownership of home directories [ OK ] +- Checking shell history files [ OK ] + +[+] Kernel Hardening +------------------------------------ +- Comparing sysctl key pairs with scan profile +- dev.tty.ldisc_autoload (exp: 0) [ DIFFERENT ] +- fs.protected_fifos (exp: 2) [ DIFFERENT ] +- fs.protected_hardlinks (exp: 1) [ OK ] +- fs.protected_regular (exp: 2) [ DIFFERENT ] +- fs.protected_symlinks (exp: 1) [ OK ] +- fs.suid_dumpable (exp: 0) [ OK ] +- kernel.core_uses_pid (exp: 1) [ DIFFERENT ] +- kernel.ctrl-alt-del (exp: 0) [ OK ] +- kernel.dmesg_restrict (exp: 1) [ DIFFERENT ] +- kernel.kptr_restrict (exp: 2) [ DIFFERENT ] +- kernel.modules_disabled (exp: 1) [ DIFFERENT ] +- kernel.perf_event_paranoid (exp: 3) [ DIFFERENT ] +- kernel.randomize_va_space (exp: 2) [ OK ] +- kernel.sysrq (exp: 0) [ DIFFERENT ] +- kernel.unprivileged_bpf_disabled (exp: 1) [ DIFFERENT ] +- kernel.yama.ptrace_scope (exp: 1 2 3) [ OK ] +- net.core.bpf_jit_harden (exp: 2) [ DIFFERENT ] +- net.ipv4.conf.all.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv4.conf.all.bootp_relay (exp: 0) [ OK ] +- net.ipv4.conf.all.forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.log_martians (exp: 1) [ DIFFERENT ] +- net.ipv4.conf.all.mc_forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.proxy_arp (exp: 0) [ OK ] +- net.ipv4.conf.all.rp_filter (exp: 1) [ OK ] +- net.ipv4.conf.all.send_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.accept_source_route (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.log_martians (exp: 1) [ DIFFERENT ] +- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1) [ OK ] +- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1) [ OK ] +- net.ipv4.tcp_syncookies (exp: 1) [ OK ] +- net.ipv4.tcp_timestamps (exp: 0 1) [ OK ] +- net.ipv6.conf.all.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv6.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv6.conf.default.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv6.conf.default.accept_source_route (exp: 0) [ OK ] + +[+] Hardening +------------------------------------ +- Installed compiler(s) [ NOT FOUND ] +- Installed malware scanner [ NOT FOUND ] +- Non-native binary formats [ NOT FOUND ] + +[+] Custom tests +------------------------------------ +- Running custom tests...  [ NONE ] + +[+] Plugins (phase 2) +------------------------------------ +- Plugins (phase 2) [ DONE ] + +================================================================================ + + -[ Lynis 3.0.3 Results ]- + + Warnings (3): + ---------------------------- + ! Found one or more vulnerable packages. [PKGS-7392] + https://cisofy.com/lynis/controls/PKGS-7392/ + + ! iptables module(s) loaded, but no rules active [FIRE-4512] + https://cisofy.com/lynis/controls/FIRE-4512/ + + ! systemd-timesyncd never successfully synchronized time [TIME-3185] + https://cisofy.com/lynis/controls/TIME-3185/ + + Suggestions (44): + ---------------------------- + * Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] + https://cisofy.com/lynis/controls/BOOT-5122/ + + * If not required, consider explicit disabling of core dump in /etc/security/limits.conf file [KRNL-5820] + https://cisofy.com/lynis/controls/KRNL-5820/ + + * Configure password hashing rounds in /etc/login.defs [AUTH-9230] + https://cisofy.com/lynis/controls/AUTH-9230/ + + * Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [AUTH-9262] + https://cisofy.com/lynis/controls/AUTH-9262/ + + * Configure minimum password age in /etc/login.defs [AUTH-9286] + https://cisofy.com/lynis/controls/AUTH-9286/ + + * Configure maximum password age in /etc/login.defs [AUTH-9286] + https://cisofy.com/lynis/controls/AUTH-9286/ + + * Default umask in /etc/login.defs could be more strict like 027 [AUTH-9328] + https://cisofy.com/lynis/controls/AUTH-9328/ + + * Default umask in /etc/init.d/rc could be more strict like 027 [AUTH-9328] + https://cisofy.com/lynis/controls/AUTH-9328/ + + * To decrease the impact of a full /home file system, place /home on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * To decrease the impact of a full /tmp file system, place /tmp on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * To decrease the impact of a full /var file system, place /var on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * Consider disabling unused kernel modules [FILE-6430] + - Details : /etc/modprobe.d/blacklist.conf + - Solution : Add 'install MODULENAME /bin/true' (without quotes) + https://cisofy.com/lynis/controls/FILE-6430/ + + * Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [USB-1000] + https://cisofy.com/lynis/controls/USB-1000/ + + * Check DNS configuration for the dns domain name [NAME-4028] + https://cisofy.com/lynis/controls/NAME-4028/ + + * Install debsums utility for the verification of packages with known good database. [PKGS-7370] + https://cisofy.com/lynis/controls/PKGS-7370/ + + * Update your system with apt-get update, apt-get upgrade, apt-get dist-upgrade and/or unattended-upgrades [PKGS-7392] + https://cisofy.com/lynis/controls/PKGS-7392/ + + * Install package apt-show-versions for patch management purposes [PKGS-7394] + https://cisofy.com/lynis/controls/PKGS-7394/ + + * Determine if protocol 'dccp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'sctp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'rds' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'tipc' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowTcpForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : ClientAliveCountMax (set 3 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Compression (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : LogLevel (set INFO to VERBOSE) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxAuthTries (set 6 to 3) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxSessions (set 10 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD)) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Port (set 22 to ) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : TCPKeepAlive (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : X11Forwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowAgentForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : UsePrivilegeSeparation (set YES to SANDBOX) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Enable logging to an external logging host for archiving purposes and additional protection [LOGG-2154] + https://cisofy.com/lynis/controls/LOGG-2154/ + + * Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] + https://cisofy.com/lynis/controls/BANN-7126/ + + * Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] + https://cisofy.com/lynis/controls/BANN-7130/ + + * Enable process accounting [ACCT-9622] + https://cisofy.com/lynis/controls/ACCT-9622/ + + * Enable sysstat to collect accounting (no results) [ACCT-9626] + https://cisofy.com/lynis/controls/ACCT-9626/ + + * Enable auditd to collect audit information [ACCT-9628] + https://cisofy.com/lynis/controls/ACCT-9628/ + + * Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] + https://cisofy.com/lynis/controls/FINT-4350/ + + * Determine if automation tools are present for system management [TOOL-5002] + https://cisofy.com/lynis/controls/TOOL-5002/ + + * Consider restricting file permissions [FILE-7524] + - Details : See screen output or log file + - Solution : Use chmod to change file permissions + https://cisofy.com/lynis/controls/FILE-7524/ + + * One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] + - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:) + https://cisofy.com/lynis/controls/KRNL-6000/ + + * Harden the system by installing at least one malware scanner, to perform periodic file system scans [HRDN-7230] + - Solution : Install a tool like rkhunter, chkrootkit, OSSEC + https://cisofy.com/lynis/controls/HRDN-7230/ + + Follow-up: + ---------------------------- + - Show details of a test (lynis show details TEST-ID) + - Check the logfile for all details (less /var/log/lynis.log) + - Read security controls texts (https://cisofy.com) + - Use --upload to upload data to central system (Lynis Enterprise users) + +================================================================================ + + Lynis security scan details: + + Hardening index : 62 [############ ] + Tests performed : 258 + Plugins enabled : 2 + + Components: + - Firewall [V] + - Malware scanner [X] + + Scan mode: + Normal [V] Forensics [ ] Integration [ ] Pentest [ ] + + Lynis modules: + - Compliance status [?] + - Security audit [V] + - Vulnerability scan [V] + + Files: + - Test and debug information : /var/log/lynis.log + - Report data : /var/log/lynis-report.dat + +================================================================================ + + Lynis 3.0.3 + + Auditing, system hardening, and compliance for UNIX-based systems + (Linux, macOS, BSD, and others) + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) + +================================================================================ + + [TIP]: Enhance Lynis audits by adding your settings to custom.prf (see /root/scans/lynis/default.prf for all settings) + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-2.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-2.log new file mode 100644 index 0000000..7eb5281 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-2.log @@ -0,0 +1,673 @@ + +[ Lynis 3.0.3 ] + +################################################################################ + Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are + welcome to redistribute it under the terms of the GNU General Public License. + See the LICENSE file for details about using this software. + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) +################################################################################ + + +[+] Initializing program +------------------------------------ +- Detecting OS...  [ DONE ] +- Checking profiles... [ DONE ] + + --------------------------------------------------- + Program version: 3.0.3 + Operating system: Linux + Operating system name: Ubuntu + Operating system version: 16.04 + Kernel version: 4.4.0 + Hardware platform: x86_64 + Hostname: it-sec-test-vm + --------------------------------------------------- + Profiles: /root/scans/lynis/default.prf + Log file: /var/log/lynis.log + Report file: /var/log/lynis-report.dat + Report version: 1.0 + Plugin directory: ./plugins + --------------------------------------------------- + Auditor: [Not Specified] + Language: en + Test category: all + Test group: all + --------------------------------------------------- +- Program update status...  [ NO UPDATE ] + +[+] System tools +------------------------------------ +- Scanning available tools... +- Checking system binaries... + +[+] Plugins (phase 1) +------------------------------------ +Note: plugins have more extensive tests and may take several minutes to complete +  +- Plugin: pam + [..] +- Plugin: systemd + [................] + +[+] Boot and services +------------------------------------ +- Service Manager [ systemd ] +- Checking UEFI boot [ DISABLED ] +- Checking presence GRUB2 [ FOUND ] +- Checking for password protection [ NONE ] +- Check running services (systemctl) [ DONE ] +Result: found 18 running services +- Check enabled services at boot (systemctl) [ DONE ] +Result: found 20 enabled services +- Check startup files (permissions) [ OK ] + +[+] Kernel +------------------------------------ +- Checking default run level [ RUNLEVEL 5 ] +- Checking CPU support (NX/PAE) +CPU support: PAE and/or NoeXecute supported [ FOUND ] +- Checking kernel version and release [ DONE ] +- Checking kernel type [ DONE ] +- Checking loaded kernel modules [ DONE ] +Found 50 active modules +- Checking Linux kernel configuration file [ FOUND ] +- Checking default I/O kernel scheduler [ FOUND ] +- Checking for available kernel update [ OK ] +- Checking core dumps configuration +- configuration in systemd conf files [ DEFAULT ] +- configuration in etc/profile [ DEFAULT ] +- 'hard' configuration in security/limits.conf [ DEFAULT ] +- 'soft' configuration in security/limits.conf [ DEFAULT ] +- Checking setuid core dumps configuration [ DISABLED ] +- Check if reboot is needed [ YES ] + +[+] Memory and Processes +------------------------------------ +- Checking /proc/meminfo [ FOUND ] +- Searching for dead/zombie processes [ NOT FOUND ] +- Searching for IO waiting processes [ NOT FOUND ] +- Search prelink tooling [ NOT FOUND ] + +[+] Users, Groups and Authentication +------------------------------------ +- Administrator accounts [ OK ] +- Unique UIDs [ OK ] +- Consistency of group files (grpck) [ OK ] +- Unique group IDs [ OK ] +- Unique group names [ OK ] +- Password file consistency [ OK ] +- Password hashing methods [ OK ] +- Checking password hashing rounds [ DISABLED ] +- Query system users (non daemons) [ DONE ] +- NIS+ authentication support [ NOT ENABLED ] +- NIS authentication support [ NOT ENABLED ] +- Sudoers file(s) [ FOUND ] +- Permissions for directory: /etc/sudoers.d [ OK ] +- Permissions for: /etc/sudoers [ OK ] +- Permissions for: /etc/sudoers.d/README [ OK ] +- Permissions for: /etc/sudoers.d/90-cloud-init-users [ OK ] +- PAM password strength tools [ SUGGESTION ] +- PAM configuration files (pam.conf) [ FOUND ] +- PAM configuration files (pam.d) [ FOUND ] +- PAM modules [ FOUND ] +- LDAP module in PAM [ NOT FOUND ] +- Accounts without expire date [ OK ] +- Accounts without password [ OK ] +- Locked accounts [ OK ] +- Checking user password aging (minimum) [ DISABLED ] +- User password aging (maximum) [ DISABLED ] +- Checking expired passwords [ OK ] +- Checking Linux single user mode authentication [ OK ] +- Determining default umask +- umask (/etc/profile) [ NOT FOUND ] +- umask (/etc/login.defs) [ SUGGESTION ] +- umask (/etc/init.d/rc) [ SUGGESTION ] +- LDAP authentication support [ NOT ENABLED ] +- Logging failed login attempts [ ENABLED ] + +[+] Shells +------------------------------------ +- Checking shells from /etc/shells +Result: found 4 shells (valid shells: 4). +- Session timeout settings/tools [ NONE ] +- Checking default umask values +- Checking default umask in /etc/bash.bashrc [ NONE ] +- Checking default umask in /etc/profile [ NONE ] + +[+] File systems +------------------------------------ +- Checking mount points +- Checking /home mount point [ SUGGESTION ] +- Checking /tmp mount point [ SUGGESTION ] +- Checking /var mount point [ SUGGESTION ] +- Query swap partitions (fstab) [ NONE ] +- Testing swap partitions [ OK ] +- Testing /proc mount (hidepid) [ SUGGESTION ] +- Checking for old files in /tmp [ OK ] +- Checking /tmp sticky bit [ OK ] +- Checking /var/tmp sticky bit [ OK ] +- ACL support root file system [ ENABLED ] +- Mount options of / [ NON DEFAULT ] +- Mount options of /dev [ PARTIALLY HARDENED ] +- Mount options of /dev/shm [ PARTIALLY HARDENED ] +- Mount options of /run [ PARTIALLY HARDENED ] +- Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11 of total 30 +- Disable kernel support of some filesystems +- Discovered kernel modules: udf  + +[+] USB Devices +------------------------------------ +- Checking usb-storage driver (modprobe config) [ NOT DISABLED ] +- Checking USB devices authorization [ ENABLED ] +- Checking USBGuard [ NOT FOUND ] + +[+] Storage +------------------------------------ +- Checking firewire ohci driver (modprobe config) [ DISABLED ] + +[+] NFS +------------------------------------ +- Check running NFS daemon [ NOT FOUND ] + +[+] Name services +------------------------------------ +- Searching DNS domain name [ UNKNOWN ] +- Checking /etc/hosts +- Duplicate entries in hosts file [ NONE ] +- Presence of configured hostname in /etc/hosts [ FOUND ] +- Hostname mapped to localhost [ NOT FOUND ] +- Localhost mapping to IP address [ OK ] + +[+] Ports and packages +------------------------------------ +- Searching package managers +- Searching dpkg package manager [ FOUND ] +- Querying package manager +- Query unpurged packages [ NONE ] +- Checking security repository in sources.list file [ OK ] +- Checking security repository in sources.list.d directory [ OK ] +- Checking APT package database [ OK ] +- Checking vulnerable packages (apt-get only) [ DONE ] +- Checking upgradeable packages [ SKIPPED ] +- Checking package audit tool [ INSTALLED ] +Found: apt-get +- Toolkit for automatic upgrades (unattended-upgrade) [ FOUND ] + +[+] Networking +------------------------------------ +- Checking IPv6 configuration [ ENABLED ] +Configuration method [ AUTO ] +IPv6 only [ NO ] +- Checking configured nameservers +- Testing nameservers +Nameserver: 213.133.99.99 [ SKIPPED ] +Nameserver: 213.133.98.98 [ SKIPPED ] +Nameserver: 213.133.100.100 [ SKIPPED ] +- Minimal of 2 responsive nameservers [ SKIPPED ] +- DNSSEC supported (systemd-resolved) [ NO ] +- Checking default gateway [ DONE ] +- Getting listening ports (TCP/UDP) [ DONE ] +- Checking promiscuous interfaces [ OK ] +- Checking waiting connections [ OK ] +- Checking status DHCP client [ RUNNING ] +- Checking for ARP monitoring software [ NOT FOUND ] +- Uncommon network protocols [ 0 ] + +[+] Printers and Spools +------------------------------------ +- Checking cups daemon [ NOT FOUND ] +- Checking lp daemon [ NOT RUNNING ] + +[+] Software: e-mail and messaging +------------------------------------ + +[+] Software: firewalls +------------------------------------ +- Checking iptables kernel module [ FOUND ] +- Checking iptables policies of chains [ FOUND ] +- Checking for empty ruleset [ WARNING ] +- Checking for unused rules [ OK ] +- Checking host based firewall [ ACTIVE ] + +[+] Software: webserver +------------------------------------ +- Checking Apache [ NOT FOUND ] +- Checking nginx [ NOT FOUND ] + +[+] SSH Support +------------------------------------ +- Checking running SSH daemon [ FOUND ] +- Searching SSH configuration [ FOUND ] +- OpenSSH option: AllowTcpForwarding [ SUGGESTION ] +- OpenSSH option: ClientAliveCountMax [ SUGGESTION ] +- OpenSSH option: ClientAliveInterval [ OK ] +- OpenSSH option: Compression [ SUGGESTION ] +- OpenSSH option: FingerprintHash [ OK ] +- OpenSSH option: GatewayPorts [ OK ] +- OpenSSH option: IgnoreRhosts [ OK ] +- OpenSSH option: LoginGraceTime [ OK ] +- OpenSSH option: LogLevel [ SUGGESTION ] +- OpenSSH option: MaxAuthTries [ SUGGESTION ] +- OpenSSH option: MaxSessions [ SUGGESTION ] +- OpenSSH option: PermitRootLogin [ SUGGESTION ] +- OpenSSH option: PermitUserEnvironment [ OK ] +- OpenSSH option: PermitTunnel [ OK ] +- OpenSSH option: Port [ SUGGESTION ] +- OpenSSH option: PrintLastLog [ OK ] +- OpenSSH option: StrictModes [ OK ] +- OpenSSH option: TCPKeepAlive [ SUGGESTION ] +- OpenSSH option: UseDNS [ OK ] +- OpenSSH option: X11Forwarding [ SUGGESTION ] +- OpenSSH option: AllowAgentForwarding [ SUGGESTION ] +- OpenSSH option: Protocol [ OK ] +- OpenSSH option: UsePrivilegeSeparation [ SUGGESTION ] +- OpenSSH option: AllowUsers [ NOT FOUND ] +- OpenSSH option: AllowGroups [ NOT FOUND ] + +[+] SNMP Support +------------------------------------ +- Checking running SNMP daemon [ NOT FOUND ] + +[+] Databases +------------------------------------ +No database engines found + +[+] LDAP Services +------------------------------------ +- Checking OpenLDAP instance [ NOT FOUND ] + +[+] PHP +------------------------------------ +- Checking PHP [ NOT FOUND ] + +[+] Squid Support +------------------------------------ +- Checking running Squid daemon [ NOT FOUND ] + +[+] Logging and files +------------------------------------ +- Checking for a running log daemon [ OK ] +- Checking Syslog-NG status [ NOT FOUND ] +- Checking systemd journal status [ FOUND ] +- Checking Metalog status [ NOT FOUND ] +- Checking RSyslog status [ FOUND ] +- Checking RFC 3195 daemon status [ NOT FOUND ] +- Checking minilogd instances [ NOT FOUND ] +- Checking logrotate presence [ OK ] +- Checking remote logging [ NOT ENABLED ] +- Checking log directories (static list) [ DONE ] +- Checking open log files [ SKIPPED ] + +[+] Insecure services +------------------------------------ +- Installed inetd package [ NOT FOUND ] +- Installed xinetd package [ OK ] +- xinetd status +- Installed rsh client package [ OK ] +- Installed rsh server package [ OK ] +- Installed telnet client package [ OK ] +- Installed telnet server package [ NOT FOUND ] +- Checking NIS client installation [ OK ] +- Checking NIS server installation [ OK ] +- Checking TFTP client installation [ OK ] +- Checking TFTP server installation [ OK ] + +[+] Banners and identification +------------------------------------ +- /etc/issue [ FOUND ] +- /etc/issue contents [ WEAK ] +- /etc/issue.net [ FOUND ] +- /etc/issue.net contents [ WEAK ] + +[+] Scheduled tasks +------------------------------------ +- Checking crontab and cronjob files [ DONE ] +- Checking atd status [ RUNNING ] +- Checking at users [ DONE ] +- Checking at jobs [ NONE ] + +[+] Accounting +------------------------------------ +- Checking accounting information [ NOT FOUND ] +- Checking sysstat accounting data [ NOT FOUND ] +- Checking auditd [ NOT FOUND ] + +[+] Time and Synchronization +------------------------------------ +- NTP daemon found: systemd (timesyncd) [ FOUND ] +- Checking for a running NTP daemon or client [ OK ] +- Last time synchronization [ NOT FOUND ] + +[+] Cryptography +------------------------------------ +- Checking for expired SSL certificates [0/139] [ NONE ] +- Found 0 encrypted and 0 unencrypted swap devices in use. [ OK ] +- Kernel entropy is sufficient [ YES ] +- HW RNG & rngd [ NO ] +- SW prng [ NO ] + +[+] Virtualization +------------------------------------ + +[+] Containers +------------------------------------ + +[+] Security frameworks +------------------------------------ +- Checking presence AppArmor [ NOT FOUND ] +- Checking presence SELinux [ NOT FOUND ] +- Checking presence TOMOYO Linux [ NOT FOUND ] +- Checking presence grsecurity [ NOT FOUND ] +- Checking for implemented MAC framework [ NONE ] + +[+] Software: file integrity +------------------------------------ +- Checking file integrity tools +- dm-verity (status) [ DISABLED ] +- Checking presence integrity tool [ NOT FOUND ] + +[+] Software: System tooling +------------------------------------ +- Checking automation tooling +- Automation tooling [ NOT FOUND ] +- Checking for IDS/IPS tooling [ NONE ] + +[+] Software: Malware +------------------------------------ + +[+] File Permissions +------------------------------------ +- Starting file permissions check +File: /boot/grub/grub.cfg [ OK ] +File: /etc/at.deny [ SUGGESTION ] +File: /etc/crontab [ SUGGESTION ] +File: /etc/group [ OK ] +File: /etc/group- [ OK ] +File: /etc/hosts.allow [ OK ] +File: /etc/hosts.deny [ OK ] +File: /etc/issue [ OK ] +File: /etc/issue.net [ OK ] +File: /etc/passwd [ OK ] +File: /etc/passwd- [ OK ] +File: /etc/ssh/sshd_config [ SUGGESTION ] +Directory: /root/.ssh [ OK ] +Directory: /etc/cron.d [ SUGGESTION ] +Directory: /etc/cron.daily [ SUGGESTION ] +Directory: /etc/cron.hourly [ SUGGESTION ] +Directory: /etc/cron.weekly [ SUGGESTION ] +Directory: /etc/cron.monthly [ SUGGESTION ] + +[+] Home directories +------------------------------------ +- Permissions of home directories [ OK ] +- Ownership of home directories [ OK ] +- Checking shell history files [ OK ] + +[+] Kernel Hardening +------------------------------------ +- Comparing sysctl key pairs with scan profile +- dev.tty.ldisc_autoload (exp: 0) [ DIFFERENT ] +- fs.protected_fifos (exp: 2) [ DIFFERENT ] +- fs.protected_hardlinks (exp: 1) [ OK ] +- fs.protected_regular (exp: 2) [ DIFFERENT ] +- fs.protected_symlinks (exp: 1) [ OK ] +- fs.suid_dumpable (exp: 0) [ OK ] +- kernel.core_uses_pid (exp: 1) [ DIFFERENT ] +- kernel.ctrl-alt-del (exp: 0) [ OK ] +- kernel.dmesg_restrict (exp: 1) [ DIFFERENT ] +- kernel.kptr_restrict (exp: 2) [ DIFFERENT ] +- kernel.modules_disabled (exp: 1) [ DIFFERENT ] +- kernel.perf_event_paranoid (exp: 3) [ DIFFERENT ] +- kernel.randomize_va_space (exp: 2) [ OK ] +- kernel.sysrq (exp: 0) [ DIFFERENT ] +- kernel.unprivileged_bpf_disabled (exp: 1) [ DIFFERENT ] +- kernel.yama.ptrace_scope (exp: 1 2 3) [ OK ] +- net.core.bpf_jit_harden (exp: 2) [ DIFFERENT ] +- net.ipv4.conf.all.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv4.conf.all.bootp_relay (exp: 0) [ OK ] +- net.ipv4.conf.all.forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.log_martians (exp: 1) [ DIFFERENT ] +- net.ipv4.conf.all.mc_forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.proxy_arp (exp: 0) [ OK ] +- net.ipv4.conf.all.rp_filter (exp: 1) [ OK ] +- net.ipv4.conf.all.send_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.accept_source_route (exp: 0) [ DIFFERENT ] +- net.ipv4.conf.default.log_martians (exp: 1) [ DIFFERENT ] +- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1) [ OK ] +- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1) [ OK ] +- net.ipv4.tcp_syncookies (exp: 1) [ OK ] +- net.ipv4.tcp_timestamps (exp: 0 1) [ OK ] +- net.ipv6.conf.all.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv6.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv6.conf.default.accept_redirects (exp: 0) [ DIFFERENT ] +- net.ipv6.conf.default.accept_source_route (exp: 0) [ OK ] + +[+] Hardening +------------------------------------ +- Installed compiler(s) [ NOT FOUND ] +- Installed malware scanner [ NOT FOUND ] +- Non-native binary formats [ NOT FOUND ] + +[+] Custom tests +------------------------------------ +- Running custom tests...  [ NONE ] + +[+] Plugins (phase 2) +------------------------------------ +- Plugins (phase 2) [ DONE ] + +================================================================================ + + -[ Lynis 3.0.3 Results ]- + + Warnings (3): + ---------------------------- + ! Reboot of system is most likely needed [KRNL-5830] + - Solution : reboot + https://cisofy.com/lynis/controls/KRNL-5830/ + + ! iptables module(s) loaded, but no rules active [FIRE-4512] + https://cisofy.com/lynis/controls/FIRE-4512/ + + ! systemd-timesyncd never successfully synchronized time [TIME-3185] + https://cisofy.com/lynis/controls/TIME-3185/ + + Suggestions (43): + ---------------------------- + * Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] + https://cisofy.com/lynis/controls/BOOT-5122/ + + * If not required, consider explicit disabling of core dump in /etc/security/limits.conf file [KRNL-5820] + https://cisofy.com/lynis/controls/KRNL-5820/ + + * Configure password hashing rounds in /etc/login.defs [AUTH-9230] + https://cisofy.com/lynis/controls/AUTH-9230/ + + * Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [AUTH-9262] + https://cisofy.com/lynis/controls/AUTH-9262/ + + * Configure minimum password age in /etc/login.defs [AUTH-9286] + https://cisofy.com/lynis/controls/AUTH-9286/ + + * Configure maximum password age in /etc/login.defs [AUTH-9286] + https://cisofy.com/lynis/controls/AUTH-9286/ + + * Default umask in /etc/login.defs could be more strict like 027 [AUTH-9328] + https://cisofy.com/lynis/controls/AUTH-9328/ + + * Default umask in /etc/init.d/rc could be more strict like 027 [AUTH-9328] + https://cisofy.com/lynis/controls/AUTH-9328/ + + * To decrease the impact of a full /home file system, place /home on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * To decrease the impact of a full /tmp file system, place /tmp on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * To decrease the impact of a full /var file system, place /var on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * Consider disabling unused kernel modules [FILE-6430] + - Details : /etc/modprobe.d/blacklist.conf + - Solution : Add 'install MODULENAME /bin/true' (without quotes) + https://cisofy.com/lynis/controls/FILE-6430/ + + * Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [USB-1000] + https://cisofy.com/lynis/controls/USB-1000/ + + * Check DNS configuration for the dns domain name [NAME-4028] + https://cisofy.com/lynis/controls/NAME-4028/ + + * Install debsums utility for the verification of packages with known good database. [PKGS-7370] + https://cisofy.com/lynis/controls/PKGS-7370/ + + * Install package apt-show-versions for patch management purposes [PKGS-7394] + https://cisofy.com/lynis/controls/PKGS-7394/ + + * Determine if protocol 'dccp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'sctp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'rds' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'tipc' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowTcpForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : ClientAliveCountMax (set 3 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Compression (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : LogLevel (set INFO to VERBOSE) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxAuthTries (set 6 to 3) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxSessions (set 10 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD)) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Port (set 22 to ) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : TCPKeepAlive (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : X11Forwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowAgentForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : UsePrivilegeSeparation (set YES to SANDBOX) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Enable logging to an external logging host for archiving purposes and additional protection [LOGG-2154] + https://cisofy.com/lynis/controls/LOGG-2154/ + + * Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] + https://cisofy.com/lynis/controls/BANN-7126/ + + * Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] + https://cisofy.com/lynis/controls/BANN-7130/ + + * Enable process accounting [ACCT-9622] + https://cisofy.com/lynis/controls/ACCT-9622/ + + * Enable sysstat to collect accounting (no results) [ACCT-9626] + https://cisofy.com/lynis/controls/ACCT-9626/ + + * Enable auditd to collect audit information [ACCT-9628] + https://cisofy.com/lynis/controls/ACCT-9628/ + + * Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] + https://cisofy.com/lynis/controls/FINT-4350/ + + * Determine if automation tools are present for system management [TOOL-5002] + https://cisofy.com/lynis/controls/TOOL-5002/ + + * Consider restricting file permissions [FILE-7524] + - Details : See screen output or log file + - Solution : Use chmod to change file permissions + https://cisofy.com/lynis/controls/FILE-7524/ + + * One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] + - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:) + https://cisofy.com/lynis/controls/KRNL-6000/ + + * Harden the system by installing at least one malware scanner, to perform periodic file system scans [HRDN-7230] + - Solution : Install a tool like rkhunter, chkrootkit, OSSEC + https://cisofy.com/lynis/controls/HRDN-7230/ + + Follow-up: + ---------------------------- + - Show details of a test (lynis show details TEST-ID) + - Check the logfile for all details (less /var/log/lynis.log) + - Read security controls texts (https://cisofy.com) + - Use --upload to upload data to central system (Lynis Enterprise users) + +================================================================================ + + Lynis security scan details: + + Hardening index : 61 [############ ] + Tests performed : 258 + Plugins enabled : 2 + + Components: + - Firewall [V] + - Malware scanner [X] + + Scan mode: + Normal [V] Forensics [ ] Integration [ ] Pentest [ ] + + Lynis modules: + - Compliance status [?] + - Security audit [V] + - Vulnerability scan [V] + + Files: + - Test and debug information : /var/log/lynis.log + - Report data : /var/log/lynis-report.dat + +================================================================================ + + Lynis 3.0.3 + + Auditing, system hardening, and compliance for UNIX-based systems + (Linux, macOS, BSD, and others) + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) + +================================================================================ + + [TIP]: Enhance Lynis audits by adding your settings to custom.prf (see /root/scans/lynis/default.prf for all settings) + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-3.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-3.log new file mode 100644 index 0000000..d0a6daf --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-console-3.log @@ -0,0 +1,648 @@ + +[ Lynis 3.0.3 ] + +################################################################################ + Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are + welcome to redistribute it under the terms of the GNU General Public License. + See the LICENSE file for details about using this software. + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) +################################################################################ + + +[+] Initializing program +------------------------------------ +- Detecting OS...  [ DONE ] +- Checking profiles... [ DONE ] + + --------------------------------------------------- + Program version: 3.0.3 + Operating system: Linux + Operating system name: Ubuntu + Operating system version: 16.04 + Kernel version: 4.4.0 + Hardware platform: x86_64 + Hostname: it-sec-test-vm + --------------------------------------------------- + Profiles: /root/scans/lynis/default.prf + Log file: /var/log/lynis.log + Report file: /var/log/lynis-report.dat + Report version: 1.0 + Plugin directory: ./plugins + --------------------------------------------------- + Auditor: [Not Specified] + Language: en + Test category: all + Test group: all + --------------------------------------------------- +- Program update status...  [ NO UPDATE ] + +[+] System tools +------------------------------------ +- Scanning available tools... +- Checking system binaries... + +[+] Plugins (phase 1) +------------------------------------ +Note: plugins have more extensive tests and may take several minutes to complete +  +- Plugin: pam + [..] +- Plugin: systemd + [................] + +[+] Boot and services +------------------------------------ +- Service Manager [ systemd ] +- Checking UEFI boot [ DISABLED ] +- Checking presence GRUB2 [ FOUND ] +- Checking for password protection [ NONE ] +- Check running services (systemctl) [ DONE ] +Result: found 20 running services +- Check enabled services at boot (systemctl) [ DONE ] +Result: found 20 enabled services +- Check startup files (permissions) [ OK ] + +[+] Kernel +------------------------------------ +- Checking default run level [ RUNLEVEL 5 ] +- Checking CPU support (NX/PAE) +CPU support: PAE and/or NoeXecute supported [ FOUND ] +- Checking kernel version and release [ DONE ] +- Checking kernel type [ DONE ] +- Checking loaded kernel modules [ DONE ] +Found 53 active modules +- Checking Linux kernel configuration file [ FOUND ] +- Checking default I/O kernel scheduler [ FOUND ] +- Checking for available kernel update [ OK ] +- Checking core dumps configuration +- configuration in systemd conf files [ DEFAULT ] +- configuration in etc/profile [ DEFAULT ] +- 'hard' configuration in security/limits.conf [ DISABLED ] +- 'soft' config in security/limits.conf (implicit) [ DISABLED ] +- Checking setuid core dumps configuration [ DISABLED ] +- Check if reboot is needed [ YES ] + +[+] Memory and Processes +------------------------------------ +- Checking /proc/meminfo [ FOUND ] +- Searching for dead/zombie processes [ NOT FOUND ] +- Searching for IO waiting processes [ NOT FOUND ] +- Search prelink tooling [ NOT FOUND ] + +[+] Users, Groups and Authentication +------------------------------------ +- Administrator accounts [ OK ] +- Unique UIDs [ OK ] +- Consistency of group files (grpck) [ OK ] +- Unique group IDs [ OK ] +- Unique group names [ OK ] +- Password file consistency [ OK ] +- Password hashing methods [ OK ] +- Checking password hashing rounds [ DISABLED ] +- Query system users (non daemons) [ DONE ] +- NIS+ authentication support [ NOT ENABLED ] +- NIS authentication support [ NOT ENABLED ] +- Sudoers file(s) [ FOUND ] +- Permissions for directory: /etc/sudoers.d [ OK ] +- Permissions for: /etc/sudoers [ OK ] +- Permissions for: /etc/sudoers.d/README [ OK ] +- Permissions for: /etc/sudoers.d/90-cloud-init-users [ OK ] +- PAM password strength tools [ OK ] +- PAM configuration files (pam.conf) [ FOUND ] +- PAM configuration files (pam.d) [ FOUND ] +- PAM modules [ FOUND ] +- LDAP module in PAM [ NOT FOUND ] +- Accounts without expire date [ OK ] +- Accounts without password [ OK ] +- Locked accounts [ OK ] +- User password aging (minimum) [ CONFIGURED ] +- User password aging (maximum) [ CONFIGURED ] +- Checking expired passwords [ OK ] +- Checking Linux single user mode authentication [ OK ] +- Determining default umask +- umask (/etc/profile) [ NOT FOUND ] +- umask (/etc/login.defs) [ OK ] +- umask (/etc/init.d/rc) [ OK ] +- LDAP authentication support [ NOT ENABLED ] +- Logging failed login attempts [ ENABLED ] + +[+] Shells +------------------------------------ +- Checking shells from /etc/shells +Result: found 4 shells (valid shells: 4). +- Session timeout settings/tools [ NONE ] +- Checking default umask values +- Checking default umask in /etc/bash.bashrc [ NONE ] +- Checking default umask in /etc/profile [ NONE ] + +[+] File systems +------------------------------------ +- Checking mount points +- Checking /home mount point [ SUGGESTION ] +- Checking /tmp mount point [ OK ] +- Checking /var mount point [ SUGGESTION ] +- Query swap partitions (fstab) [ NONE ] +- Testing swap partitions [ OK ] +- Testing /proc mount (hidepid) [ SUGGESTION ] +- Checking for old files in /tmp [ OK ] +- Checking /tmp sticky bit [ OK ] +- Checking /var/tmp sticky bit [ OK ] +- ACL support root file system [ ENABLED ] +- Mount options of / [ NON DEFAULT ] +- Mount options of /dev [ PARTIALLY HARDENED ] +- Mount options of /dev/shm [ PARTIALLY HARDENED ] +- Mount options of /run [ PARTIALLY HARDENED ] +- Mount options of /tmp [ HARDENED ] +- Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11 of total 31 +- Disable kernel support of some filesystems +- Discovered kernel modules: udf  + +[+] USB Devices +------------------------------------ +- Checking usb-storage driver (modprobe config) [ DISABLED ] +- Checking USB devices authorization [ ENABLED ] +- Checking USBGuard [ NOT FOUND ] + +[+] Storage +------------------------------------ +- Checking firewire ohci driver (modprobe config) [ DISABLED ] + +[+] NFS +------------------------------------ +- Check running NFS daemon [ NOT FOUND ] + +[+] Name services +------------------------------------ +- Searching DNS domain name [ UNKNOWN ] +- Checking /etc/hosts +- Duplicate entries in hosts file [ NONE ] +- Presence of configured hostname in /etc/hosts [ FOUND ] +- Hostname mapped to localhost [ NOT FOUND ] +- Localhost mapping to IP address [ OK ] + +[+] Ports and packages +------------------------------------ +- Searching package managers +- Searching dpkg package manager [ FOUND ] +- Querying package manager +- Query unpurged packages [ NONE ] +- Checking security repository in sources.list file [ OK ] +- Checking security repository in sources.list.d directory [ OK ] +- Checking APT package database [ OK ] +- Checking vulnerable packages (apt-get only) [ DONE ] +- Checking upgradeable packages [ SKIPPED ] +- Checking package audit tool [ INSTALLED ] +Found: apt-get +- Toolkit for automatic upgrades (unattended-upgrade) [ FOUND ] + +[+] Networking +------------------------------------ +- Checking IPv6 configuration [ ENABLED ] +Configuration method [ AUTO ] +IPv6 only [ NO ] +- Checking configured nameservers +- Testing nameservers +Nameserver: 213.133.99.99 [ SKIPPED ] +Nameserver: 213.133.98.98 [ SKIPPED ] +Nameserver: 213.133.100.100 [ SKIPPED ] +- Minimal of 2 responsive nameservers [ SKIPPED ] +- DNSSEC supported (systemd-resolved) [ NO ] +- Checking default gateway [ DONE ] +- Getting listening ports (TCP/UDP) [ DONE ] +- Checking promiscuous interfaces [ OK ] +- Checking waiting connections [ OK ] +- Checking status DHCP client [ RUNNING ] +- Checking for ARP monitoring software [ NOT FOUND ] +- Uncommon network protocols [ 0 ] + +[+] Printers and Spools +------------------------------------ +- Checking cups daemon [ NOT FOUND ] +- Checking lp daemon [ NOT RUNNING ] + +[+] Software: e-mail and messaging +------------------------------------ +- Sendmail status [ RUNNING ] + +[+] Software: firewalls +------------------------------------ +- Checking iptables kernel module [ FOUND ] +- Checking iptables policies of chains [ FOUND ] +- Checking for empty ruleset [ WARNING ] +- Checking for unused rules [ FOUND ] +- Checking host based firewall [ ACTIVE ] + +[+] Software: webserver +------------------------------------ +- Checking Apache [ NOT FOUND ] +- Checking nginx [ NOT FOUND ] + +[+] SSH Support +------------------------------------ +- Checking running SSH daemon [ FOUND ] +- Searching SSH configuration [ FOUND ] +- OpenSSH option: AllowTcpForwarding [ SUGGESTION ] +- OpenSSH option: ClientAliveCountMax [ SUGGESTION ] +- OpenSSH option: ClientAliveInterval [ OK ] +- OpenSSH option: Compression [ SUGGESTION ] +- OpenSSH option: FingerprintHash [ OK ] +- OpenSSH option: GatewayPorts [ OK ] +- OpenSSH option: IgnoreRhosts [ OK ] +- OpenSSH option: LoginGraceTime [ OK ] +- OpenSSH option: LogLevel [ SUGGESTION ] +- OpenSSH option: MaxAuthTries [ SUGGESTION ] +- OpenSSH option: MaxSessions [ SUGGESTION ] +- OpenSSH option: PermitRootLogin [ SUGGESTION ] +- OpenSSH option: PermitUserEnvironment [ OK ] +- OpenSSH option: PermitTunnel [ OK ] +- OpenSSH option: Port [ SUGGESTION ] +- OpenSSH option: PrintLastLog [ OK ] +- OpenSSH option: StrictModes [ OK ] +- OpenSSH option: TCPKeepAlive [ SUGGESTION ] +- OpenSSH option: UseDNS [ OK ] +- OpenSSH option: X11Forwarding [ SUGGESTION ] +- OpenSSH option: AllowAgentForwarding [ SUGGESTION ] +- OpenSSH option: Protocol [ OK ] +- OpenSSH option: UsePrivilegeSeparation [ SUGGESTION ] +- OpenSSH option: AllowUsers [ NOT FOUND ] +- OpenSSH option: AllowGroups [ NOT FOUND ] + +[+] SNMP Support +------------------------------------ +- Checking running SNMP daemon [ NOT FOUND ] + +[+] Databases +------------------------------------ +No database engines found + +[+] LDAP Services +------------------------------------ +- Checking OpenLDAP instance [ NOT FOUND ] + +[+] PHP +------------------------------------ +- Checking PHP [ NOT FOUND ] + +[+] Squid Support +------------------------------------ +- Checking running Squid daemon [ NOT FOUND ] + +[+] Logging and files +------------------------------------ +- Checking for a running log daemon [ OK ] +- Checking Syslog-NG status [ NOT FOUND ] +- Checking systemd journal status [ FOUND ] +- Checking Metalog status [ NOT FOUND ] +- Checking RSyslog status [ FOUND ] +- Checking RFC 3195 daemon status [ NOT FOUND ] +- Checking minilogd instances [ NOT FOUND ] +- Checking logrotate presence [ OK ] +- Checking remote logging [ NOT ENABLED ] +- Checking log directories (static list) [ DONE ] +- Checking open log files [ SKIPPED ] + +[+] Insecure services +------------------------------------ +- Installed inetd package [ NOT FOUND ] +- Installed xinetd package [ OK ] +- xinetd status +- Installed rsh client package [ OK ] +- Installed rsh server package [ OK ] +- Installed telnet client package [ OK ] +- Installed telnet server package [ NOT FOUND ] +- Checking NIS client installation [ OK ] +- Checking NIS server installation [ OK ] +- Checking TFTP client installation [ OK ] +- Checking TFTP server installation [ OK ] + +[+] Banners and identification +------------------------------------ +- /etc/issue [ FOUND ] +- /etc/issue contents [ WEAK ] +- /etc/issue.net [ FOUND ] +- /etc/issue.net contents [ WEAK ] + +[+] Scheduled tasks +------------------------------------ +- Checking crontab and cronjob files [ DONE ] + +[+] Accounting +------------------------------------ +- Checking accounting information [ OK ] +- Checking sysstat accounting data [ NOT FOUND ] +- Checking auditd [ NOT FOUND ] + +[+] Time and Synchronization +------------------------------------ +- NTP daemon found: systemd (timesyncd) [ FOUND ] +- Checking for a running NTP daemon or client [ OK ] +- Last time synchronization [ NOT FOUND ] + +[+] Cryptography +------------------------------------ +- Checking for expired SSL certificates [0/139] [ NONE ] +- Found 0 encrypted and 0 unencrypted swap devices in use. [ OK ] +- Kernel entropy is sufficient [ YES ] +- HW RNG & rngd [ NO ] +- SW prng [ NO ] + +[+] Virtualization +------------------------------------ + +[+] Containers +------------------------------------ + +[+] Security frameworks +------------------------------------ +- Checking presence AppArmor [ NOT FOUND ] +- Checking presence SELinux [ NOT FOUND ] +- Checking presence TOMOYO Linux [ NOT FOUND ] +- Checking presence grsecurity [ NOT FOUND ] +- Checking for implemented MAC framework [ NONE ] + +[+] Software: file integrity +------------------------------------ +- Checking file integrity tools +- dm-verity (status) [ DISABLED ] +- Checking presence integrity tool [ NOT FOUND ] + +[+] Software: System tooling +------------------------------------ +- Checking automation tooling +- Automation tooling [ NOT FOUND ] +- Checking presence of Fail2ban [ FOUND ] +- Checking Fail2ban jails [ ENABLED ] +- Checking for IDS/IPS tooling [ FOUND ] + +[+] Software: Malware +------------------------------------ +- Checking Rootkit Hunter [ FOUND ] + +[+] File Permissions +------------------------------------ +- Starting file permissions check +File: /boot/grub/grub.cfg [ OK ] +File: /etc/cron.allow [ OK ] +File: /etc/cron.deny [ SUGGESTION ] +File: /etc/crontab [ SUGGESTION ] +File: /etc/group [ OK ] +File: /etc/group- [ OK ] +File: /etc/hosts.allow [ OK ] +File: /etc/hosts.deny [ OK ] +File: /etc/issue [ OK ] +File: /etc/issue.net [ OK ] +File: /etc/passwd [ OK ] +File: /etc/passwd- [ OK ] +File: /etc/ssh/sshd_config [ SUGGESTION ] +Directory: /root/.ssh [ OK ] +Directory: /etc/cron.d [ SUGGESTION ] +Directory: /etc/cron.daily [ SUGGESTION ] +Directory: /etc/cron.hourly [ SUGGESTION ] +Directory: /etc/cron.weekly [ SUGGESTION ] +Directory: /etc/cron.monthly [ SUGGESTION ] + +[+] Home directories +------------------------------------ +- Permissions of home directories [ OK ] +- Ownership of home directories [ OK ] +- Checking shell history files [ OK ] + +[+] Kernel Hardening +------------------------------------ +- Comparing sysctl key pairs with scan profile +- dev.tty.ldisc_autoload (exp: 0) [ DIFFERENT ] +- fs.protected_fifos (exp: 2) [ DIFFERENT ] +- fs.protected_hardlinks (exp: 1) [ OK ] +- fs.protected_regular (exp: 2) [ DIFFERENT ] +- fs.protected_symlinks (exp: 1) [ OK ] +- fs.suid_dumpable (exp: 0) [ OK ] +- kernel.core_uses_pid (exp: 1) [ OK ] +- kernel.ctrl-alt-del (exp: 0) [ OK ] +- kernel.dmesg_restrict (exp: 1) [ OK ] +- kernel.kptr_restrict (exp: 2) [ OK ] +- kernel.modules_disabled (exp: 1) [ DIFFERENT ] +- kernel.perf_event_paranoid (exp: 3) [ DIFFERENT ] +- kernel.randomize_va_space (exp: 2) [ OK ] +- kernel.sysrq (exp: 0) [ OK ] +- kernel.unprivileged_bpf_disabled (exp: 1) [ DIFFERENT ] +- kernel.yama.ptrace_scope (exp: 1 2 3) [ OK ] +- net.core.bpf_jit_harden (exp: 2) [ DIFFERENT ] +- net.ipv4.conf.all.accept_redirects (exp: 0) [ OK ] +- net.ipv4.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv4.conf.all.bootp_relay (exp: 0) [ OK ] +- net.ipv4.conf.all.forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.log_martians (exp: 1) [ OK ] +- net.ipv4.conf.all.mc_forwarding (exp: 0) [ OK ] +- net.ipv4.conf.all.proxy_arp (exp: 0) [ OK ] +- net.ipv4.conf.all.rp_filter (exp: 1) [ OK ] +- net.ipv4.conf.all.send_redirects (exp: 0) [ OK ] +- net.ipv4.conf.default.accept_redirects (exp: 0) [ OK ] +- net.ipv4.conf.default.accept_source_route (exp: 0) [ OK ] +- net.ipv4.conf.default.log_martians (exp: 1) [ OK ] +- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1) [ OK ] +- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1) [ OK ] +- net.ipv4.tcp_syncookies (exp: 1) [ OK ] +- net.ipv4.tcp_timestamps (exp: 0 1) [ OK ] +- net.ipv6.conf.all.accept_redirects (exp: 0) [ OK ] +- net.ipv6.conf.all.accept_source_route (exp: 0) [ OK ] +- net.ipv6.conf.default.accept_redirects (exp: 0) [ OK ] +- net.ipv6.conf.default.accept_source_route (exp: 0) [ OK ] + +[+] Hardening +------------------------------------ +- Installed compiler(s) [ FOUND ] +- Installed malware scanner [ FOUND ] +- Non-native binary formats [ NOT FOUND ] + +[+] Custom tests +------------------------------------ +- Running custom tests...  [ NONE ] + +[+] Plugins (phase 2) +------------------------------------ +- Plugins (phase 2) [ DONE ] + +================================================================================ + + -[ Lynis 3.0.3 Results ]- + + Warnings (3): + ---------------------------- + ! Reboot of system is most likely needed [KRNL-5830] + - Solution : reboot + https://cisofy.com/lynis/controls/KRNL-5830/ + + ! iptables module(s) loaded, but no rules active [FIRE-4512] + https://cisofy.com/lynis/controls/FIRE-4512/ + + ! systemd-timesyncd never successfully synchronized time [TIME-3185] + https://cisofy.com/lynis/controls/TIME-3185/ + + Suggestions (34): + ---------------------------- + * Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] + https://cisofy.com/lynis/controls/BOOT-5122/ + + * Configure password hashing rounds in /etc/login.defs [AUTH-9230] + https://cisofy.com/lynis/controls/AUTH-9230/ + + * To decrease the impact of a full /home file system, place /home on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * To decrease the impact of a full /var file system, place /var on a separate partition [FILE-6310] + https://cisofy.com/lynis/controls/FILE-6310/ + + * Consider disabling unused kernel modules [FILE-6430] + - Details : /etc/modprobe.d/blacklist.conf + - Solution : Add 'install MODULENAME /bin/true' (without quotes) + https://cisofy.com/lynis/controls/FILE-6430/ + + * Check DNS configuration for the dns domain name [NAME-4028] + https://cisofy.com/lynis/controls/NAME-4028/ + + * Install debsums utility for the verification of packages with known good database. [PKGS-7370] + https://cisofy.com/lynis/controls/PKGS-7370/ + + * Install package apt-show-versions for patch management purposes [PKGS-7394] + https://cisofy.com/lynis/controls/PKGS-7394/ + + * Determine if protocol 'dccp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'sctp' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'rds' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Determine if protocol 'tipc' is really needed on this system [NETW-3200] + https://cisofy.com/lynis/controls/NETW-3200/ + + * Check iptables rules to see which rules are currently not used [FIRE-4513] + https://cisofy.com/lynis/controls/FIRE-4513/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowTcpForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : ClientAliveCountMax (set 3 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Compression (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : LogLevel (set INFO to VERBOSE) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxAuthTries (set 6 to 3) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : MaxSessions (set 10 to 2) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD)) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : Port (set 22 to ) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : TCPKeepAlive (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : X11Forwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : AllowAgentForwarding (set YES to NO) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Consider hardening SSH configuration [SSH-7408] + - Details : UsePrivilegeSeparation (set YES to SANDBOX) + https://cisofy.com/lynis/controls/SSH-7408/ + + * Enable logging to an external logging host for archiving purposes and additional protection [LOGG-2154] + https://cisofy.com/lynis/controls/LOGG-2154/ + + * Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] + https://cisofy.com/lynis/controls/BANN-7126/ + + * Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] + https://cisofy.com/lynis/controls/BANN-7130/ + + * Enable sysstat to collect accounting (no results) [ACCT-9626] + https://cisofy.com/lynis/controls/ACCT-9626/ + + * Enable auditd to collect audit information [ACCT-9628] + https://cisofy.com/lynis/controls/ACCT-9628/ + + * Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] + https://cisofy.com/lynis/controls/FINT-4350/ + + * Determine if automation tools are present for system management [TOOL-5002] + https://cisofy.com/lynis/controls/TOOL-5002/ + + * Consider restricting file permissions [FILE-7524] + - Details : See screen output or log file + - Solution : Use chmod to change file permissions + https://cisofy.com/lynis/controls/FILE-7524/ + + * One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] + - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:) + https://cisofy.com/lynis/controls/KRNL-6000/ + + Follow-up: + ---------------------------- + - Show details of a test (lynis show details TEST-ID) + - Check the logfile for all details (less /var/log/lynis.log) + - Read security controls texts (https://cisofy.com) + - Use --upload to upload data to central system (Lynis Enterprise users) + +================================================================================ + + Lynis security scan details: + + Hardening index : 71 [############## ] + Tests performed : 257 + Plugins enabled : 2 + + Components: + - Firewall [V] + - Malware scanner [V] + + Scan mode: + Normal [V] Forensics [ ] Integration [ ] Pentest [ ] + + Lynis modules: + - Compliance status [?] + - Security audit [V] + - Vulnerability scan [V] + + Files: + - Test and debug information : /var/log/lynis.log + - Report data : /var/log/lynis-report.dat + +================================================================================ + + Lynis 3.0.3 + + Auditing, system hardening, and compliance for UNIX-based systems + (Linux, macOS, BSD, and others) + + 2007-2021, CISOfy - https://cisofy.com/lynis/ + Enterprise support available (compliance, plugins, interface and tools) + +================================================================================ + + [TIP]: Enhance Lynis audits by adding your settings to custom.prf (see /root/scans/lynis/default.prf for all settings) + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-1.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-1.log new file mode 100644 index 0000000..eadb671 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-1.log @@ -0,0 +1,4918 @@ +2021-01-07 17:48:03 Starting Lynis 3.0.3 with PID 1442, build date 2021-01-07 +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 ### 2007-2021, CISOfy - https://cisofy.com/lynis/ ### +2021-01-07 17:48:03 Checking permissions of /root/scans/lynis/include/profiles +2021-01-07 17:48:03 File permissions are OK +2021-01-07 17:48:03 Reading profile/configuration /root/scans/lynis/default.prf +2021-01-07 17:48:03 Action: created temporary file /tmp/lynis.GCdbmWlRnH +2021-01-07 17:48:03 Language set via profile to '' +2021-01-07 17:48:03 Plugin 'authentication' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'compliance' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'configuration' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'control-panels' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'crypto' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'dns' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'docker' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'file-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'file-systems' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'firewalls' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'forensics' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'hardware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'intrusion-detection' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'intrusion-prevention' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'kernel' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'malware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'memory' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'nginx' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'pam' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'processes' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'security-modules' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'software' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'system-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'systemd' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Plugin 'users' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Set option to default value: NTPD_ROLE --> client +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 EOL check: 0 +2021-01-07 17:48:03 Program version: 3.0.3 +2021-01-07 17:48:03 Operating system: Linux +2021-01-07 17:48:03 Operating system name: Ubuntu +2021-01-07 17:48:03 Operating system version: 16.04 +2021-01-07 17:48:03 Kernel version: 4.4.0 +2021-01-07 17:48:03 Kernel version (full): 4.4.0-197-generic +2021-01-07 17:48:03 Hardware platform: x86_64 +2021-01-07 17:48:03 ----------------------------------------------------- +2021-01-07 17:48:03 Hostname: it-sec-test-vm +2021-01-07 17:48:03 Auditor: [Not Specified] +2021-01-07 17:48:03 Profiles: /root/scans/lynis/default.prf +2021-01-07 17:48:03 Work directory: /root/scans/lynis +2021-01-07 17:48:03 Include directory: /root/scans/lynis/include +2021-01-07 17:48:03 Plugin directory: ./plugins +2021-01-07 17:48:03 ----------------------------------------------------- +2021-01-07 17:48:03 Log file: /var/log/lynis.log +2021-01-07 17:48:03 Report file: /var/log/lynis-report.dat +2021-01-07 17:48:03 Report version: 1.0 +2021-01-07 17:48:03 ----------------------------------------------------- +2021-01-07 17:48:03 Test category: all +2021-01-07 17:48:03 Test group: all +2021-01-07 17:48:03 BusyBox used: 0 +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Test: Checking for program update... +2021-01-07 17:48:03 Current installed version : 303 +2021-01-07 17:48:03 Latest stable version : 303 +2021-01-07 17:48:03 No Lynis update available. +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Checking permissions of /root/scans/lynis/include/binaries +2021-01-07 17:48:03 File permissions are OK +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Action: Performing tests from category: System tools +2021-01-07 17:48:03 Start scanning for available audit binaries and tools... +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Performing test ID CORE-1000 (Check all system binaries) +2021-01-07 17:48:03 Status: Starting binary scan... +2021-01-07 17:48:03 Test: Checking binaries in directory /snap/bin +2021-01-07 17:48:03 Result: Directory /snap/bin does NOT exist +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/local/games +2021-01-07 17:48:03 Directory /usr/local/games exists. Starting directory scanning... +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/games +2021-01-07 17:48:03 Directory /usr/games exists. Starting directory scanning... +2021-01-07 17:48:03 Test: Checking binaries in directory /bin +2021-01-07 17:48:03 Directory /bin exists. Starting directory scanning... +2021-01-07 17:48:03 Found known binary: cat (generic file handling) - /bin/cat +2021-01-07 17:48:03 Found known binary: dnsdomainname (DNS domain) - /bin/dnsdomainname +2021-01-07 17:48:03 Found known binary: domainname (NIS domain) - /bin/domainname +2021-01-07 17:48:03 Found known binary: egrep (text search) - /bin/egrep +2021-01-07 17:48:03 Found known binary: grep (text search) - /bin/grep +2021-01-07 17:48:03 Found known binary: gzip (compressing utility) - /bin/gzip +2021-01-07 17:48:03 Found known binary: ip (IP configuration) - /bin/ip +2021-01-07 17:48:03 Found known binary: journalctl (systemd journal) - /bin/journalctl +2021-01-07 17:48:03 Found known binary: ls (file listing) - /bin/ls +2021-01-07 17:48:03 Found known binary: lsblk (block devices) - /bin/lsblk +2021-01-07 17:48:03 Found known binary: lsmod (kernel modules) - /bin/lsmod +2021-01-07 17:48:03 Found known binary: mount (disk utility) - /bin/mount +2021-01-07 17:48:03 Found known binary: netstat (network statistics) - /bin/netstat +2021-01-07 17:48:03 Found known binary: ps (process listing) - /bin/ps +2021-01-07 17:48:03 Found known binary: readlink (follows symlinks) - /bin/readlink +2021-01-07 17:48:03 Found known binary: sed (text stream editor) - /bin/sed +2021-01-07 17:48:03 Found known binary: ss (show sockets) - /bin/ss +2021-01-07 17:48:03 Found known binary: systemctl (client to systemd) - /bin/systemctl +2021-01-07 17:48:03 Found known binary: uname (operating system details) - /bin/uname +2021-01-07 17:48:03 Found known binary: zgrep (text search for compressed files) - /bin/zgrep +2021-01-07 17:48:03 Test: Checking binaries in directory /sbin +2021-01-07 17:48:03 Directory /sbin exists. Starting directory scanning... +2021-01-07 17:48:03 Found known binary: blkid (information about block devices) - /sbin/blkid +2021-01-07 17:48:03 Found known binary: cryptsetup (block device encryption) - /sbin/cryptsetup +2021-01-07 17:48:03 Found known binary: getcap (kernel capabilities) - /sbin/getcap +2021-01-07 17:48:03 Found known binary: ipconfig (IP configuration) - /sbin/ifconfig +2021-01-07 17:48:03 Found known binary: ip (IP configuration) - /sbin/ip +2021-01-07 17:48:03 Found known binary: iptables (firewall) - /sbin/iptables +2021-01-07 17:48:03 Found known binary: iptables-save (firewall) - /sbin/iptables-save +2021-01-07 17:48:03 Found known binary: lsmod (kernel modules) - /sbin/lsmod +2021-01-07 17:48:03 Found known binary: lvdisplay (LVM tool) - /sbin/lvdisplay +2021-01-07 17:48:03 Found known binary: modprobe (kernel modules) - /sbin/modprobe +2021-01-07 17:48:03 Found known binary: runlevel (system utility) - /sbin/runlevel +2021-01-07 17:48:03 Found known binary: swapon (swap device tool) - /sbin/swapon +2021-01-07 17:48:03 Found known binary: sysctl (kernel parameters) - /sbin/sysctl +2021-01-07 17:48:03 Found known binary: tune2fs (file system tool) - /sbin/tune2fs +2021-01-07 17:48:03 Found known binary: veritysetup (dm-verity setup tool) - /sbin/veritysetup +2021-01-07 17:48:03 Found known binary: vgdisplay (LVM tool) - /sbin/vgdisplay +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/bin +2021-01-07 17:48:03 Directory /usr/bin exists. Starting directory scanning... +2021-01-07 17:48:03 Found known binary: apt (package manager) - /usr/bin/apt +2021-01-07 17:48:03 Found known binary: awk (string tool) - /usr/bin/awk +2021-01-07 17:48:03 Found known binary: base64 (encoding tool) - /usr/bin/base64 +2021-01-07 17:48:03 Found known binary: bootctl (systemd-boot manager utility) - /usr/bin/bootctl +2021-01-07 17:48:03 Found known binary: comm (file compare) - /usr/bin/comm +2021-01-07 17:48:03 Found known binary: curl (browser, download utility) - /usr/bin/curl +2021-01-07 17:48:03 Found known binary: cut (text stream editor) - /usr/bin/cut +2021-01-07 17:48:03 Found known binary: dpkg (package management) - /usr/bin/dpkg +2021-01-07 17:48:03 Found known binary: find (search tool) - /usr/bin/find +2021-01-07 17:48:03 Found known binary: getent (query tool for name service switch libraries) - /usr/bin/getent +2021-01-07 17:48:03 Found known binary: head (text filter) - /usr/bin/head +2021-01-07 17:48:03 Found known binary: lsattr (file attributes) - /usr/bin/lsattr +2021-01-07 17:48:03 Found known binary: md5sum (hash tool) - /usr/bin/md5sum +2021-01-07 17:48:03 Found /usr/bin/openssl (version 1.0.2g) +2021-01-07 17:48:03 Found /usr/bin/perl (version 5.22.1) +2021-01-07 17:48:03 Found known binary: pgrep (search in process list) - /usr/bin/pgrep +2021-01-07 17:48:03 Found known binary: python3 (programming language interpreter) - /usr/bin/python3 (version 3.5.2) +2021-01-07 17:48:03 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/sha1sum +2021-01-07 17:48:03 Found known binary: sha256/sha256sum (crypto hashing) - /usr/bin/sha256sum +2021-01-07 17:48:03 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/shasum +2021-01-07 17:48:03 Found known binary: sort (sort data streams) - /usr/bin/sort +2021-01-07 17:48:03 Found known binary: ssh-keyscan (scanner for SSH keys) - /usr/bin/ssh-keyscan +2021-01-07 17:48:03 Found known binary: stat (file information) - /usr/bin/stat +2021-01-07 17:48:03 Found known binary: systemd-analyze (systemd service analysis tool) - /usr/bin/systemd-analyze +2021-01-07 17:48:03 Found known binary: tail (text filter) - /usr/bin/tail +2021-01-07 17:48:03 Found known binary: timedatectl (timedate client) - /usr/bin/timedatectl +2021-01-07 17:48:03 Found known binary: tr (text transformation) - /usr/bin/tr +2021-01-07 17:48:03 Found known binary: uniq (text manipulation utility) - /usr/bin/uniq +2021-01-07 17:48:03 Found known binary: wc (word count) - /usr/bin/wc +2021-01-07 17:48:03 Found /usr/bin/wget (version 1.17.1) +2021-01-07 17:48:03 Found known binary: xargs (command output redirection) - /usr/bin/xargs +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/sbin +2021-01-07 17:48:03 Directory /usr/sbin exists. Starting directory scanning... +2021-01-07 17:48:03 Found known binary: grpck (consistency checker) - /usr/sbin/grpck +2021-01-07 17:48:03 Found known binary: logrotate (log rotation tool) - /usr/sbin/logrotate +2021-01-07 17:48:03 Found known binary: service (system services) - /usr/sbin/service +2021-01-07 17:48:03 Found /usr/sbin/sshd (version 7.2) +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/local/bin +2021-01-07 17:48:03 Directory /usr/local/bin exists. Starting directory scanning... +2021-01-07 17:48:03 Test: Checking binaries in directory /usr/local/sbin +2021-01-07 17:48:03 Directory /usr/local/sbin exists. Starting directory scanning... +2021-01-07 17:48:03 Discovered directories: /usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +2021-01-07 17:48:03 Result: found 992 binaries including 16 set-uid and 12 set-gid +2021-01-07 17:48:03 Result: set-uid binaries: /bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit +2021-01-07 17:48:03 Result: set-gid binaries: /sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/expiry /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Informational: package manager is used +2021-01-07 17:48:03 Test: Determine if this system is a virtual machine +2021-01-07 17:48:03 Result: facter utility not found +2021-01-07 17:48:03 Test: trying to guess virtualization technology with systemd-detect-virt +2021-01-07 17:48:03 Result: found kvm +2021-01-07 17:48:03 Result: skipped lscpu test, as we already found machine type +2021-01-07 17:48:03 Result: skipped dmidecode test, as we already found machine type +2021-01-07 17:48:03 Result: skipped processes test, as we already found platform +2021-01-07 17:48:03 Result: skipped Amazon EC2 test, as we already found platform +2021-01-07 17:48:03 Result: skipped sysctl test, as we already found platform +2021-01-07 17:48:03 Result: skipped lshw test, as we already found machine type +2021-01-07 17:48:03 Result: found virtual machine (type: kvm, KVM) +2021-01-07 17:48:03 Result: Lynis is not running in container +2021-01-07 17:48:03 Result: system is using systemd +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Action: Performing plugin tests +2021-01-07 17:48:03 Searching plugins... +2021-01-07 17:48:03 Found plugin file: ./plugins/plugin_pam_phase1 +2021-01-07 17:48:03 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:48:03 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:03 Result: plugin pam is enabled +2021-01-07 17:48:03 Checking permissions of ./plugins/plugin_pam_phase1 +2021-01-07 17:48:03 File permissions are OK +2021-01-07 17:48:03 Including plugin file: ./plugins/plugin_pam_phase1 (version: 1.0.5) +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Skipped test PLGN-0008 (Check PAM configuration (pwquality.conf)) +2021-01-07 17:48:03 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:03 ==== +2021-01-07 17:48:03 Performing test ID PLGN-0010 (Check PAM configuration) +2021-01-07 17:48:03 Result: /etc/pam.d exists +2021-01-07 17:48:03 Now checking PAM file /etc/pam.d/chpasswd +2021-01-07 17:48:03 Now checking PAM file /etc/pam.d/newusers +2021-01-07 17:48:03 Now checking PAM file /etc/pam.d/su +2021-01-07 17:48:03 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:48:04 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:48:04 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:48:04 Result: using module pam_mail.so (optional) with options nopen +2021-01-07 17:48:04 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:04 Now checking PAM file /etc/pam.d/other +2021-01-07 17:48:04 Now checking PAM file /etc/pam.d/cron +2021-01-07 17:48:04 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:48:04 Result: using module pam_env.so (required) without options configured +2021-01-07 17:48:04 Result: using module pam_env.so (required) with options envfile=/etc/default/locale +2021-01-07 17:48:04 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:04 Now checking PAM file /etc/pam.d/login +2021-01-07 17:48:04 Result: using module pam_faildelay.so (optional) with options delay=3000000 +2021-01-07 17:48:04 Result: Found brackets in line, indicating multiple options for control flags: success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die +2021-01-07 17:48:04 Result: brackets used, ignoring control flags +2021-01-07 17:48:04 Result: using module pam_securetty.so (other) without options configured +2021-01-07 17:48:04 Result: using module pam_nologin.so (requisite) without options configured +2021-01-07 17:48:04 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:48:04 Result: brackets used, ignoring control flags +2021-01-07 17:48:04 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:48:04 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:48:04 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:48:04 Result: using module pam_group.so (optional) without options configured +2021-01-07 17:48:04 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:04 Result: using module pam_lastlog.so (optional) without options configured +2021-01-07 17:48:04 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:48:04 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:48:04 Result: using module pam_mail.so (optional) with options standard +2021-01-07 17:48:04 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:48:04 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:48:04 Result: brackets used, ignoring control flags +2021-01-07 17:48:04 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:48:04 Now checking PAM file /etc/pam.d/sshd +2021-01-07 17:48:04 Result: using module pam_nologin.so (required) without options configured +2021-01-07 17:48:04 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:48:04 Result: brackets used, ignoring control flags +2021-01-07 17:48:04 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:48:04 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:48:04 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:48:04 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:48:04 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:48:04 Result: using module pam_mail.so (optional) with options standard noenv +2021-01-07 17:48:04 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:05 Result: using module pam_env.so (required) without options configured +2021-01-07 17:48:05 Result: using module pam_env.so (required) with options user_readenv=1 envfile=/etc/default/locale +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/common-auth +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_unix.so (other) with options nullok_secure +2021-01-07 17:48:05 Result: found pam_unix.so module (generic) +2021-01-07 17:48:05 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:48:05 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/common-session +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:48:05 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:48:05 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:48:05 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:48:05 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:48:05 Result: found pam_unix.so module (generic) +2021-01-07 17:48:05 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/systemd-user +2021-01-07 17:48:05 Result: using module pam_selinux.so (required) with options close +2021-01-07 17:48:05 Result: using module pam_selinux.so (required) with options nottys open +2021-01-07 17:48:05 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/passwd +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/common-account +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: success=1 new_authtok_reqd=done default=ignore +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_unix.so (other) without options configured +2021-01-07 17:48:05 Result: found pam_unix.so module (generic) +2021-01-07 17:48:05 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:48:05 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/sudo +2021-01-07 17:48:05 Result: using module pam_env.so (required) with options readenv=1 user_readenv=0 +2021-01-07 17:48:05 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale user_readenv=0 +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/common-password +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_unix.so (other) with options obscure sha512 +2021-01-07 17:48:05 Result: found pam_unix.so module (generic) +2021-01-07 17:48:05 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:48:05 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/chsh +2021-01-07 17:48:05 Result: using module pam_shells.so (required) without options configured +2021-01-07 17:48:05 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/common-session-noninteractive +2021-01-07 17:48:05 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:48:05 Result: brackets used, ignoring control flags +2021-01-07 17:48:05 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:48:05 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:48:05 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:48:05 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:48:05 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:48:05 Result: found pam_unix.so module (generic) +2021-01-07 17:48:05 Now checking PAM file /etc/pam.d/atd +2021-01-07 17:48:06 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:48:06 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:06 Result: using module pam_env.so (required) with options user_readenv=1 +2021-01-07 17:48:06 Now checking PAM file /etc/pam.d/chfn +2021-01-07 17:48:06 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:48:06 Now checking PAM file /etc/pam.d/runuser-l +2021-01-07 17:48:06 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:48:06 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:48:06 Now checking PAM file /etc/pam.d/runuser +2021-01-07 17:48:06 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:48:06 Result: using module pam_keyinit.so (optional) with options revoke +2021-01-07 17:48:06 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:48:06 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:48:06 Result: found pam_unix.so module (generic) +2021-01-07 17:48:06 [PAM] PAM 2F authentication enabled: 0 +2021-01-07 17:48:06 [PAM] PAM 2F authentication required: 0 +2021-01-07 17:48:06 [PAM] Authentication unlock time: not configured +2021-01-07 17:48:06 [PAM] Password brute force protection: 0 +2021-01-07 17:48:06 [PAM] Minimum password length: not configured +2021-01-07 17:48:06 [PAM] Password strength testing enabled: 0 +2021-01-07 17:48:06 [PAM] Password maximum retry: Not configured +2021-01-07 17:48:06 [PAM] Password history with pam_pwhistory IS NOT enabled +2021-01-07 17:48:06 [PAM] Password history with pam_unix IS NOT enabled +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Result: pam plugin (phase 1) finished +2021-01-07 17:48:06 -- +2021-01-07 17:48:06 Found plugin file: ./plugins/plugin_systemd_phase1 +2021-01-07 17:48:06 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:48:06 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:48:06 Result: plugin systemd is enabled +2021-01-07 17:48:06 Checking permissions of ./plugins/plugin_systemd_phase1 +2021-01-07 17:48:06 File permissions are OK +2021-01-07 17:48:06 Including plugin file: ./plugins/plugin_systemd_phase1 (version: 1.0.4) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3800 (Gather systemctl exit code) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3802 (Query systemd version and options) +2021-01-07 17:48:06 Result: found systemd version 229 +2021-01-07 17:48:06 Result: found builtin components list +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3804 (Gather systemd unit files and their status) +2021-01-07 17:48:06 Result: found systemd unit files via systemctl list-unit-files +2021-01-07 17:48:06 Output: proc-sys-fs-binfmt_misc.automount|static| +2021-01-07 17:48:06 Output: dev-hugepages.mount|static| +2021-01-07 17:48:06 Output: dev-mqueue.mount|static| +2021-01-07 17:48:06 Output: proc-sys-fs-binfmt_misc.mount|static| +2021-01-07 17:48:06 Output: sys-fs-fuse-connections.mount|static| +2021-01-07 17:48:06 Output: sys-kernel-config.mount|static| +2021-01-07 17:48:06 Output: sys-kernel-debug.mount|static| +2021-01-07 17:48:06 Output: acpid.path|enabled| +2021-01-07 17:48:06 Output: systemd-ask-password-console.path|static| +2021-01-07 17:48:06 Output: systemd-ask-password-plymouth.path|static| +2021-01-07 17:48:06 Output: systemd-ask-password-wall.path|static| +2021-01-07 17:48:06 Output: systemd-networkd-resolvconf-update.path|static| +2021-01-07 17:48:06 Output: acpid.service|disabled| +2021-01-07 17:48:06 Output: apt-daily-upgrade.service|static| +2021-01-07 17:48:06 Output: apt-daily.service|static| +2021-01-07 17:48:06 Output: atd.service|enabled| +2021-01-07 17:48:06 Output: autovt@.service|enabled| +2021-01-07 17:48:06 Output: bootlogd.service|masked| +2021-01-07 17:48:06 Output: bootlogs.service|masked| +2021-01-07 17:48:06 Output: bootmisc.service|masked| +2021-01-07 17:48:06 Output: checkfs.service|masked| +2021-01-07 17:48:06 Output: checkroot-bootclean.service|masked| +2021-01-07 17:48:06 Output: checkroot.service|masked| +2021-01-07 17:48:06 Output: cloud-config.service|enabled| +2021-01-07 17:48:06 Output: cloud-final.service|enabled| +2021-01-07 17:48:06 Output: cloud-init-local.service|enabled| +2021-01-07 17:48:06 Output: cloud-init.service|enabled| +2021-01-07 17:48:06 Output: console-getty.service|disabled| +2021-01-07 17:48:06 Output: console-setup.service|static| +2021-01-07 17:48:06 Output: console-shell.service|disabled| +2021-01-07 17:48:06 Output: container-getty@.service|static| +2021-01-07 17:48:06 Output: cron.service|enabled| +2021-01-07 17:48:06 Output: cryptdisks-early.service|masked| +2021-01-07 17:48:06 Output: cryptdisks.service|masked| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.hostname1.service|static| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.locale1.service|static| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.login1.service|static| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.network1.service|disabled| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.resolve1.service|disabled| +2021-01-07 17:48:06 Output: dbus-org.freedesktop.timedate1.service|static| +2021-01-07 17:48:06 Output: dbus.service|static| +2021-01-07 17:48:06 Output: debug-shell.service|disabled| +2021-01-07 17:48:06 Output: dm-event.service|disabled| +2021-01-07 17:48:06 Output: emergency.service|static| +2021-01-07 17:48:06 Output: fuse.service|masked| +2021-01-07 17:48:06 Output: getty-static.service|static| +2021-01-07 17:48:06 Output: getty@.service|enabled| +2021-01-07 17:48:06 Output: halt.service|masked| +2021-01-07 17:48:06 Output: hc-net-ifup@.service|static| +2021-01-07 17:48:06 Output: hc-net-scan.service|enabled| +2021-01-07 17:48:06 Output: hostname.service|masked| +2021-01-07 17:48:06 Output: hwclock.service|masked| +2021-01-07 17:48:06 Output: ifup@.service|static| +2021-01-07 17:48:06 Output: initrd-cleanup.service|static| +2021-01-07 17:48:06 Output: initrd-parse-etc.service|static| +2021-01-07 17:48:06 Output: initrd-switch-root.service|static| +2021-01-07 17:48:06 Output: initrd-udevadm-cleanup-db.service|static| +2021-01-07 17:48:06 Output: keyboard-setup.service|disabled| +2021-01-07 17:48:06 Output: killprocs.service|masked| +2021-01-07 17:48:06 Output: kmod-static-nodes.service|static| +2021-01-07 17:48:06 Output: kmod.service|static| +2021-01-07 17:48:06 Output: lvm2-lvmetad.service|disabled| +2021-01-07 17:48:06 Output: lvm2-lvmpolld.service|disabled| +2021-01-07 17:48:06 Output: lvm2-monitor.service|enabled| +2021-01-07 17:48:06 Output: lvm2-pvscan@.service|static| +2021-01-07 17:48:06 Output: lvm2.service|masked| +2021-01-07 17:48:06 Output: mdadm-shutdown.service|disabled| +2021-01-07 17:48:06 Output: module-init-tools.service|static| +2021-01-07 17:48:06 Output: motd-news.service|static| +2021-01-07 17:48:06 Output: motd.service|masked| +2021-01-07 17:48:06 Output: mountall-bootclean.service|masked| +2021-01-07 17:48:06 Output: mountall.service|masked| +2021-01-07 17:48:06 Output: mountdevsubfs.service|masked| +2021-01-07 17:48:06 Output: mountkernfs.service|masked| +2021-01-07 17:48:06 Output: mountnfs-bootclean.service|masked| +2021-01-07 17:48:06 Output: mountnfs.service|masked| +2021-01-07 17:48:06 Output: networking.service|enabled| +2021-01-07 17:48:06 Output: plymouth-halt.service|static| +2021-01-07 17:48:06 Output: plymouth-kexec.service|static| +2021-01-07 17:48:06 Output: plymouth-log.service|static| +2021-01-07 17:48:06 Output: plymouth-poweroff.service|static| +2021-01-07 17:48:06 Output: plymouth-quit-wait.service|static| +2021-01-07 17:48:06 Output: plymouth-quit.service|static| +2021-01-07 17:48:06 Output: plymouth-read-write.service|static| +2021-01-07 17:48:06 Output: plymouth-reboot.service|static| +2021-01-07 17:48:06 Output: plymouth-start.service|static| +2021-01-07 17:48:06 Output: plymouth-switch-root.service|static| +2021-01-07 17:48:06 Output: plymouth.service|static| +2021-01-07 17:48:06 Output: pollinate.service|enabled| +2021-01-07 17:48:06 Output: procps.service|static| +2021-01-07 17:48:06 Output: quotaon.service|static| +2021-01-07 17:48:06 Output: rc-local.service|static| +2021-01-07 17:48:06 Output: rc.local.service|static| +2021-01-07 17:48:06 Output: rc.service|masked| +2021-01-07 17:48:06 Output: rcS.service|masked| +2021-01-07 17:48:06 Output: reboot.service|masked| +2021-01-07 17:48:06 Output: rescue.service|static| +2021-01-07 17:48:06 Output: resolvconf.service|enabled| +2021-01-07 17:48:06 Output: rmnologin.service|masked| +2021-01-07 17:48:06 Output: rsync.service|disabled| +2021-01-07 17:48:06 Output: rsyslog.service|enabled| +2021-01-07 17:48:06 Output: sendsigs.service|masked| +2021-01-07 17:48:06 Output: serial-getty@.service|disabled| +2021-01-07 17:48:06 Output: setvtrgb.service|static| +2021-01-07 17:48:06 Output: sigpwr-container-shutdown.service|static| +2021-01-07 17:48:06 Output: single.service|masked| +2021-01-07 17:48:06 Output: ssh.service|enabled| +2021-01-07 17:48:06 Output: ssh@.service|static| +2021-01-07 17:48:06 Output: sshd.service|enabled| +2021-01-07 17:48:06 Output: stop-bootlogd-single.service|masked| +2021-01-07 17:48:06 Output: stop-bootlogd.service|masked| +2021-01-07 17:48:06 Output: syslog.service|enabled| +2021-01-07 17:48:06 Output: systemd-ask-password-console.service|static| +2021-01-07 17:48:06 Output: systemd-ask-password-plymouth.service|static| +2021-01-07 17:48:06 Output: systemd-ask-password-wall.service|static| +2021-01-07 17:48:06 Output: systemd-backlight@.service|static| +2021-01-07 17:48:06 Output: systemd-binfmt.service|static| +2021-01-07 17:48:06 Output: systemd-bootchart.service|disabled| +2021-01-07 17:48:06 Output: systemd-bus-proxyd.service|static| +2021-01-07 17:48:06 Output: systemd-exit.service|static| +2021-01-07 17:48:06 Output: systemd-fsck-root.service|static| +2021-01-07 17:48:06 Output: systemd-fsck@.service|static| +2021-01-07 17:48:06 Output: systemd-fsckd.service|static| +2021-01-07 17:48:06 Output: systemd-halt.service|static| +2021-01-07 17:48:06 Output: systemd-hibernate-resume@.service|static| +2021-01-07 17:48:06 Output: systemd-hibernate.service|static| +2021-01-07 17:48:06 Output: systemd-hostnamed.service|static| +2021-01-07 17:48:06 Output: systemd-hwdb-update.service|static| +2021-01-07 17:48:06 Output: systemd-hybrid-sleep.service|static| +2021-01-07 17:48:06 Output: systemd-initctl.service|static| +2021-01-07 17:48:06 Output: systemd-journal-flush.service|static| +2021-01-07 17:48:06 Output: systemd-journald.service|static| +2021-01-07 17:48:06 Output: systemd-kexec.service|static| +2021-01-07 17:48:06 Output: systemd-localed.service|static| +2021-01-07 17:48:06 Output: systemd-logind.service|static| +2021-01-07 17:48:06 Output: systemd-machine-id-commit.service|static| +2021-01-07 17:48:06 Output: systemd-modules-load.service|static| +2021-01-07 17:48:06 Output: systemd-networkd-resolvconf-update.service|static| +2021-01-07 17:48:06 Output: systemd-networkd-wait-online.service|disabled| +2021-01-07 17:48:06 Output: systemd-networkd.service|disabled| +2021-01-07 17:48:06 Output: systemd-poweroff.service|static| +2021-01-07 17:48:06 Output: systemd-quotacheck.service|static| +2021-01-07 17:48:06 Output: systemd-random-seed.service|static| +2021-01-07 17:48:06 Output: systemd-reboot.service|static| +2021-01-07 17:48:06 Output: systemd-remount-fs.service|static| +2021-01-07 17:48:06 Output: systemd-resolved.service|disabled| +2021-01-07 17:48:06 Output: systemd-rfkill.service|static| +2021-01-07 17:48:06 Output: systemd-suspend.service|static| +2021-01-07 17:48:06 Output: systemd-sysctl.service|static| +2021-01-07 17:48:06 Output: systemd-timedated.service|static| +2021-01-07 17:48:06 Output: systemd-timesyncd.service|enabled| +2021-01-07 17:48:06 Output: systemd-tmpfiles-clean.service|static| +2021-01-07 17:48:06 Output: systemd-tmpfiles-setup-dev.service|static| +2021-01-07 17:48:06 Output: systemd-tmpfiles-setup.service|static| +2021-01-07 17:48:06 Output: systemd-udev-settle.service|static| +2021-01-07 17:48:06 Output: systemd-udev-trigger.service|static| +2021-01-07 17:48:06 Output: systemd-udevd.service|static| +2021-01-07 17:48:06 Output: systemd-update-utmp-runlevel.service|static| +2021-01-07 17:48:06 Output: systemd-update-utmp.service|static| +2021-01-07 17:48:06 Output: systemd-user-sessions.service|static| +2021-01-07 17:48:06 Output: udev.service|static| +2021-01-07 17:48:06 Output: umountfs.service|masked| +2021-01-07 17:48:06 Output: umountnfs.service|masked| +2021-01-07 17:48:06 Output: umountroot.service|masked| +2021-01-07 17:48:06 Output: unattended-upgrades.service|enabled| +2021-01-07 17:48:06 Output: urandom.service|static| +2021-01-07 17:48:06 Output: ureadahead-stop.service|static| +2021-01-07 17:48:06 Output: ureadahead.service|enabled| +2021-01-07 17:48:06 Output: user@.service|static| +2021-01-07 17:48:06 Output: x11-common.service|masked| +2021-01-07 17:48:06 Output: -.slice|static| +2021-01-07 17:48:06 Output: machine.slice|static| +2021-01-07 17:48:06 Output: system.slice|static| +2021-01-07 17:48:06 Output: user.slice|static| +2021-01-07 17:48:06 Output: acpid.socket|enabled| +2021-01-07 17:48:06 Output: dbus.socket|static| +2021-01-07 17:48:06 Output: dm-event.socket|enabled| +2021-01-07 17:48:06 Output: lvm2-lvmetad.socket|enabled| +2021-01-07 17:48:06 Output: lvm2-lvmpolld.socket|enabled| +2021-01-07 17:48:06 Output: ssh.socket|disabled| +2021-01-07 17:48:06 Output: syslog.socket|static| +2021-01-07 17:48:06 Output: systemd-bus-proxyd.socket|static| +2021-01-07 17:48:06 Output: systemd-fsckd.socket|static| +2021-01-07 17:48:06 Output: systemd-initctl.socket|static| +2021-01-07 17:48:06 Output: systemd-journald-audit.socket|static| +2021-01-07 17:48:06 Output: systemd-journald-dev-log.socket|static| +2021-01-07 17:48:06 Output: systemd-journald.socket|static| +2021-01-07 17:48:06 Output: systemd-networkd.socket|disabled| +2021-01-07 17:48:06 Output: systemd-rfkill.socket|static| +2021-01-07 17:48:06 Output: systemd-udevd-control.socket|static| +2021-01-07 17:48:06 Output: systemd-udevd-kernel.socket|static| +2021-01-07 17:48:06 Output: basic.target|static| +2021-01-07 17:48:06 Output: bluetooth.target|static| +2021-01-07 17:48:06 Output: busnames.target|static| +2021-01-07 17:48:06 Output: cloud-config.target|static| +2021-01-07 17:48:06 Output: cloud-init.target|static| +2021-01-07 17:48:06 Output: cryptsetup-pre.target|static| +2021-01-07 17:48:06 Output: cryptsetup.target|static| +2021-01-07 17:48:06 Output: ctrl-alt-del.target|disabled| +2021-01-07 17:48:06 Output: default.target|static| +2021-01-07 17:48:06 Output: emergency.target|static| +2021-01-07 17:48:06 Output: exit.target|disabled| +2021-01-07 17:48:06 Output: final.target|static| +2021-01-07 17:48:06 Output: getty.target|static| +2021-01-07 17:48:06 Output: graphical.target|static| +2021-01-07 17:48:06 Output: halt.target|disabled| +2021-01-07 17:48:06 Output: hibernate.target|static| +2021-01-07 17:48:06 Output: hybrid-sleep.target|static| +2021-01-07 17:48:06 Output: initrd-fs.target|static| +2021-01-07 17:48:06 Output: initrd-root-fs.target|static| +2021-01-07 17:48:06 Output: initrd-switch-root.target|static| +2021-01-07 17:48:06 Output: initrd.target|static| +2021-01-07 17:48:06 Output: kexec.target|disabled| +2021-01-07 17:48:06 Output: local-fs-pre.target|static| +2021-01-07 17:48:06 Output: local-fs.target|static| +2021-01-07 17:48:06 Output: mail-transport-agent.target|static| +2021-01-07 17:48:06 Output: multi-user.target|static| +2021-01-07 17:48:06 Output: network-online.target|static| +2021-01-07 17:48:06 Output: network-pre.target|static| +2021-01-07 17:48:06 Output: network.target|static| +2021-01-07 17:48:06 Output: nss-lookup.target|static| +2021-01-07 17:48:06 Output: nss-user-lookup.target|static| +2021-01-07 17:48:06 Output: paths.target|static| +2021-01-07 17:48:06 Output: poweroff.target|disabled| +2021-01-07 17:48:06 Output: printer.target|static| +2021-01-07 17:48:06 Output: reboot.target|disabled| +2021-01-07 17:48:06 Output: remote-fs-pre.target|static| +2021-01-07 17:48:06 Output: remote-fs.target|enabled| +2021-01-07 17:48:06 Output: rescue.target|disabled| +2021-01-07 17:48:06 Output: rpcbind.target|static| +2021-01-07 17:48:06 Output: runlevel0.target|disabled| +2021-01-07 17:48:06 Output: runlevel1.target|disabled| +2021-01-07 17:48:06 Output: runlevel2.target|static| +2021-01-07 17:48:06 Output: runlevel3.target|static| +2021-01-07 17:48:06 Output: runlevel4.target|static| +2021-01-07 17:48:06 Output: runlevel5.target|static| +2021-01-07 17:48:06 Output: runlevel6.target|disabled| +2021-01-07 17:48:06 Output: shutdown.target|static| +2021-01-07 17:48:06 Output: sigpwr.target|static| +2021-01-07 17:48:06 Output: sleep.target|static| +2021-01-07 17:48:06 Output: slices.target|static| +2021-01-07 17:48:06 Output: smartcard.target|static| +2021-01-07 17:48:06 Output: sockets.target|static| +2021-01-07 17:48:06 Output: sound.target|static| +2021-01-07 17:48:06 Output: suspend.target|static| +2021-01-07 17:48:06 Output: swap.target|static| +2021-01-07 17:48:06 Output: sysinit.target|static| +2021-01-07 17:48:06 Output: system-update.target|static| +2021-01-07 17:48:06 Output: time-sync.target|static| +2021-01-07 17:48:06 Output: timers.target|static| +2021-01-07 17:48:06 Output: umount.target|static| +2021-01-07 17:48:06 Output: apt-daily-upgrade.timer|enabled| +2021-01-07 17:48:06 Output: apt-daily.timer|enabled| +2021-01-07 17:48:06 Output: motd-news.timer|enabled| +2021-01-07 17:48:06 Output: systemd-tmpfiles-clean.timer|static| +2021-01-07 17:48:06 Output: ureadahead-stop.timer|static| +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3806 (Gather failed systemd units) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3808 (Gather systemd machine ID) +2021-01-07 17:48:06 Result: found machine ID: 69729f16b49d4ddd97099d6ef60261e2 +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3810 (Query main systemd binaries) +2021-01-07 17:48:06 Result: no binaries found in /usr/lib/systemd +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3812 (Query journal for boot related information) +2021-01-07 17:48:06 Output: number of boots listed in journal is 1 +2021-01-07 17:48:06 Output: oldest boot date in journal is 2021-01-07 +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3814 (Verify journal integrity) +2021-01-07 17:48:06 Result: systemd journal has no errors +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3816 (Query journal for boot related information) +2021-01-07 17:48:06 Result: journals are 2.4M in size +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3818 (Query journal meta data) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3820 (Check for journal FSS configuration) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3830 (Query systemd status) +2021-01-07 17:48:06 Result: found systemd status = running +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3832 (Query systemd status for processes which can not be found) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3834 (Collect service units which can not be found in systemd) +2021-01-07 17:48:06 Result: found one or more services with faulty state +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) apparmor.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) auditd.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) console-screen.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) display-manager.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) kbd.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) lvm2-activation.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) NetworkManager.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) snapd.seeded.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) sshd-keygen.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) systemd-sysusers.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) systemd-update-done.service +2021-01-07 17:48:06 Result: service seems to be faulty (not-found) systemd-vconsole-setup.service +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3856 (Check if systemd-coredump is used) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID PLGN-3860 (Query coredumps from journals since Yesterday) +2021-01-07 17:48:06 Result: found no coredumps +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Result: systemd plugin (phase 1) finished +2021-01-07 17:48:06 -- +2021-01-07 17:48:06 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:48:06 Result: Plugins phase 1 finished +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Info: using hardware address 96:00:00:8b:fc:bd to create ID +2021-01-07 17:48:06 Result: Found HostID: 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:48:06 Info: creating a HostID (version 2) +2021-01-07 17:48:06 Result: found file ssh_host_ed25519_key.pub in /etc/ssh, using that to create host identifier +2021-01-07 17:48:06 Using SSH public key to create the second host identifier +2021-01-07 17:48:06 Hash (hostname): 416e24601be51bc2d559991c1bad1cf3454cb2fcb9a22233aa9d05c6bccbd29d +2021-01-07 17:48:06 Hash (ssh or machineid): 7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +2021-01-07 17:48:06 Info: found valid HostID 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:48:06 Info: no machine ID found +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Info: perform tests from all categories +2021-01-07 17:48:06 Security check: file is normal +2021-01-07 17:48:06 Checking permissions of /root/scans/lynis/include/tests_boot_services +2021-01-07 17:48:06 File permissions are OK +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Action: Performing tests from category: Boot and services +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Skipped test BOOT-5102 (Check for AIX boot device) +2021-01-07 17:48:06 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5104 (Determine service manager) +2021-01-07 17:48:06 Result: cmdline found = /sbin/init +2021-01-07 17:48:06 Result: file on disk = /sbin/init +2021-01-07 17:48:06 Action: checking symlink for file /sbin/init +2021-01-07 17:48:06 Note: Using real readlink binary to determine symlink on /sbin/init +2021-01-07 17:48:06 Result: readlink shows /lib/systemd/systemd as output +2021-01-07 17:48:06 Result: symlink found, pointing to file /lib/systemd/systemd +2021-01-07 17:48:06 Found: systemd +2021-01-07 17:48:06 Result: service manager found = systemd +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Skipped test BOOT-5106 (Check EFI boot file on Mac OS X/macOS) +2021-01-07 17:48:06 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5108 (Check Syslinux as bootloader) +2021-01-07 17:48:06 Test: checking if file /boot/syslinux/syslinux.cfg exists +2021-01-07 17:48:06 Result: file /boot/syslinux/syslinux.cfg NOT found +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5109 (Check rEFInd as bootloader) +2021-01-07 17:48:06 Test: checking if file /boot/refind_linux.conf exists +2021-01-07 17:48:06 Result: file /boot/refind_linux.conf NOT found +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5116 (Check if system is booted in UEFI mode) +2021-01-07 17:48:06 Test: checking if UEFI is used +2021-01-07 17:48:06 Result: UEFI not used, can't find /sys/firmware/efi directory +2021-01-07 17:48:06 Test: determine if Secure Boot is used +2021-01-07 17:48:06 Result: system not booted with Secure Boot (no SecureBoot file found) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Skipped test BOOT-5117 (Check for systemd-boot bootloader presence) +2021-01-07 17:48:06 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5121 (Check for GRUB boot loader presence) +2021-01-07 17:48:06 Test: Checking for presence GRUB conf file (/boot/grub/grub.conf or /boot/grub/menu.lst) +2021-01-07 17:48:06 Result: found GRUB2 configuration file (/boot/grub/grub.cfg) +2021-01-07 17:48:06 ==== +2021-01-07 17:48:06 Performing test ID BOOT-5122 (Check for GRUB boot password) +2021-01-07 17:48:06 Found file /boot/grub/grub.cfg, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /boot/grub/grub.cfg (escaped: /boot/grub/grub.cfg) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /boot/grub/grub.cfg is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Result: File '/boot/grub/custom.cfg' does not exist +2021-01-07 17:48:06 Found file /etc/grub.d/00_header, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/00_header (escaped: /etc/grub.d/00_header) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/00_header is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/05_debian_theme, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/05_debian_theme (escaped: /etc/grub.d/05_debian_theme) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/05_debian_theme is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/10_linux, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/10_linux (escaped: /etc/grub.d/10_linux) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/10_linux is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/30_os-prober, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/30_os-prober (escaped: /etc/grub.d/30_os-prober) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/30_os-prober is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/40_custom, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/40_custom (escaped: /etc/grub.d/40_custom) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/40_custom is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/41_custom, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/41_custom (escaped: /etc/grub.d/41_custom) +2021-01-07 17:48:06 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:06 Result: file /etc/grub.d/41_custom is readable (or directory accessible). +2021-01-07 17:48:06 Result: did not find hashed password line in this file +2021-01-07 17:48:06 Found file /etc/grub.d/20_linux_xen, proceeding with tests. +2021-01-07 17:48:06 Test: check if we can access /etc/grub.d/20_linux_xen (escaped: /etc/grub.d/20_linux_xen) +2021-01-07 17:48:07 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:07 Result: file /etc/grub.d/20_linux_xen is readable (or directory accessible). +2021-01-07 17:48:07 Result: did not find hashed password line in this file +2021-01-07 17:48:07 Found file /etc/grub.d/30_uefi-firmware, proceeding with tests. +2021-01-07 17:48:07 Test: check if we can access /etc/grub.d/30_uefi-firmware (escaped: /etc/grub.d/30_uefi-firmware) +2021-01-07 17:48:07 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:07 Result: file /etc/grub.d/30_uefi-firmware is readable (or directory accessible). +2021-01-07 17:48:07 Result: did not find hashed password line in this file +2021-01-07 17:48:07 Result: Didn't find hashed password line in GRUB configuration +2021-01-07 17:48:07 Suggestion: Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [test:BOOT-5122] [details:-] [solution:-] +2021-01-07 17:48:07 Hardening: assigned partial number of hardening points (0 of 2). Currently having 0 points (out of 2) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5124 (Check for FreeBSD boot loader presence) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5261 (Check for DragonFly boot loader presence) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5126 (Check for NetBSD boot loader presence) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5139 (Check for LILO boot loader presence) +2021-01-07 17:48:07 Test: checking for presence LILO configuration file +2021-01-07 17:48:07 Result: LILO configuration file not found +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5142 (Check SPARC Improved boot loader (SILO)) +2021-01-07 17:48:07 Result: no SILO configuration file found. +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5155 (Check for YABOOT boot loader configuration file) +2021-01-07 17:48:07 Test: Check for /etc/yaboot.conf +2021-01-07 17:48:07 Result: no YABOOT configuration file found. +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5159 (Check for OpenBSD boot loader presence) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5165 (Check for FreeBSD boot services) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5170 (Check for Solaris boot daemons) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5177 (Check for Linux boot and running services) +2021-01-07 17:48:07 Test: checking presence systemctl binary +2021-01-07 17:48:07 Result: systemctl binary found, trying that to discover information +2021-01-07 17:48:07 Searching for running services (systemctl services only) +2021-01-07 17:48:07 Found running service: acpid +2021-01-07 17:48:07 Found running service: atd +2021-01-07 17:48:07 Found running service: cron +2021-01-07 17:48:07 Found running service: dbus +2021-01-07 17:48:07 Found running service: getty@tty1 +2021-01-07 17:48:07 Found running service: lvm2-lvmetad +2021-01-07 17:48:07 Found running service: mdadm +2021-01-07 17:48:07 Found running service: qemu-guest-agent +2021-01-07 17:48:07 Found running service: rsyslog +2021-01-07 17:48:07 Found running service: serial-getty@ttyS0 +2021-01-07 17:48:07 Found running service: ssh +2021-01-07 17:48:07 Found running service: systemd-journald +2021-01-07 17:48:07 Found running service: systemd-logind +2021-01-07 17:48:07 Found running service: systemd-resolved +2021-01-07 17:48:07 Found running service: systemd-timesyncd +2021-01-07 17:48:07 Found running service: systemd-udevd +2021-01-07 17:48:07 Found running service: unattended-upgrades +2021-01-07 17:48:07 Found running service: user@0 +2021-01-07 17:48:07 Hint: Run systemctl --full --type=service to see all services +2021-01-07 17:48:07 Result: Found 18 running services +2021-01-07 17:48:07 Searching for enabled services (systemctl services only) +2021-01-07 17:48:07 Found enabled service at boot: atd +2021-01-07 17:48:07 Found enabled service at boot: autovt@ +2021-01-07 17:48:07 Found enabled service at boot: cloud-config +2021-01-07 17:48:07 Found enabled service at boot: cloud-final +2021-01-07 17:48:07 Found enabled service at boot: cloud-init-local +2021-01-07 17:48:07 Found enabled service at boot: cloud-init +2021-01-07 17:48:07 Found enabled service at boot: cron +2021-01-07 17:48:07 Found enabled service at boot: getty@ +2021-01-07 17:48:07 Found enabled service at boot: hc-net-scan +2021-01-07 17:48:07 Found enabled service at boot: lvm2-monitor +2021-01-07 17:48:07 Found enabled service at boot: networking +2021-01-07 17:48:07 Found enabled service at boot: pollinate +2021-01-07 17:48:07 Found enabled service at boot: resolvconf +2021-01-07 17:48:07 Found enabled service at boot: rsyslog +2021-01-07 17:48:07 Found enabled service at boot: ssh +2021-01-07 17:48:07 Found enabled service at boot: sshd +2021-01-07 17:48:07 Found enabled service at boot: syslog +2021-01-07 17:48:07 Found enabled service at boot: systemd-timesyncd +2021-01-07 17:48:07 Found enabled service at boot: unattended-upgrades +2021-01-07 17:48:07 Found enabled service at boot: ureadahead +2021-01-07 17:48:07 Hint: Run systemctl list-unit-files --type=service to see all services +2021-01-07 17:48:07 Result: Found 20 enabled services +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5180 (Check for Linux boot services (Debian style)) +2021-01-07 17:48:07 Result: found runlevel 5 +2021-01-07 17:48:07 Result: skipping further actions +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5184 (Check permissions for boot files/scripts) +2021-01-07 17:48:07 Result: checking /etc/init.d scripts for writable bit +2021-01-07 17:48:07 Test: checking if directory /etc/init.d exists +2021-01-07 17:48:07 Result: directory /etc/init.d found +2021-01-07 17:48:07 Test: checking for available files in directory +2021-01-07 17:48:07 Result: found files in directory, checking permissions now +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/.depend.boot +2021-01-07 17:48:07 Result: good, file /etc/init.d/.depend.boot not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/.depend.start +2021-01-07 17:48:07 Result: good, file /etc/init.d/.depend.start not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/.depend.stop +2021-01-07 17:48:07 Result: good, file /etc/init.d/.depend.stop not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/README +2021-01-07 17:48:07 Result: good, file /etc/init.d/README not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/acpid +2021-01-07 17:48:07 Result: good, file /etc/init.d/acpid not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/atd +2021-01-07 17:48:07 Result: good, file /etc/init.d/atd not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/bootmisc.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/bootmisc.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/checkfs.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/checkfs.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/checkroot-bootclean.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/checkroot-bootclean.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/checkroot.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/checkroot.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/console-setup +2021-01-07 17:48:07 Result: good, file /etc/init.d/console-setup not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/cron +2021-01-07 17:48:07 Result: good, file /etc/init.d/cron not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/cryptdisks +2021-01-07 17:48:07 Result: good, file /etc/init.d/cryptdisks not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/cryptdisks-early +2021-01-07 17:48:07 Result: good, file /etc/init.d/cryptdisks-early not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/dbus +2021-01-07 17:48:07 Result: good, file /etc/init.d/dbus not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/grub-common +2021-01-07 17:48:07 Result: good, file /etc/init.d/grub-common not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/halt +2021-01-07 17:48:07 Result: good, file /etc/init.d/halt not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/hostname.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/hostname.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/hwclock.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/hwclock.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/keyboard-setup +2021-01-07 17:48:07 Result: good, file /etc/init.d/keyboard-setup not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/killprocs +2021-01-07 17:48:07 Result: good, file /etc/init.d/killprocs not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/kmod +2021-01-07 17:48:07 Result: good, file /etc/init.d/kmod not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/lvm2 +2021-01-07 17:48:07 Result: good, file /etc/init.d/lvm2 not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/lvm2-lvmetad +2021-01-07 17:48:07 Result: good, file /etc/init.d/lvm2-lvmetad not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/lvm2-lvmpolld +2021-01-07 17:48:07 Result: good, file /etc/init.d/lvm2-lvmpolld not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mdadm +2021-01-07 17:48:07 Result: good, file /etc/init.d/mdadm not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mdadm-waitidle +2021-01-07 17:48:07 Result: good, file /etc/init.d/mdadm-waitidle not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountall-bootclean.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountall-bootclean.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountall.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountall.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountdevsubfs.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountdevsubfs.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountkernfs.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountkernfs.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountnfs-bootclean.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountnfs-bootclean.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/mountnfs.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/mountnfs.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/networking +2021-01-07 17:48:07 Result: good, file /etc/init.d/networking not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/ondemand +2021-01-07 17:48:07 Result: good, file /etc/init.d/ondemand not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/plymouth +2021-01-07 17:48:07 Result: good, file /etc/init.d/plymouth not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/plymouth-log +2021-01-07 17:48:07 Result: good, file /etc/init.d/plymouth-log not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/procps +2021-01-07 17:48:07 Result: good, file /etc/init.d/procps not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/qemu-guest-agent +2021-01-07 17:48:07 Result: good, file /etc/init.d/qemu-guest-agent not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/rc +2021-01-07 17:48:07 Result: good, file /etc/init.d/rc not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/rc.local +2021-01-07 17:48:07 Result: good, file /etc/init.d/rc.local not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/rcS +2021-01-07 17:48:07 Result: good, file /etc/init.d/rcS not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/reboot +2021-01-07 17:48:07 Result: good, file /etc/init.d/reboot not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/resolvconf +2021-01-07 17:48:07 Result: good, file /etc/init.d/resolvconf not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/rsync +2021-01-07 17:48:07 Result: good, file /etc/init.d/rsync not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/rsyslog +2021-01-07 17:48:07 Result: good, file /etc/init.d/rsyslog not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/sendsigs +2021-01-07 17:48:07 Result: good, file /etc/init.d/sendsigs not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/single +2021-01-07 17:48:07 Result: good, file /etc/init.d/single not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/skeleton +2021-01-07 17:48:07 Result: good, file /etc/init.d/skeleton not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/ssh +2021-01-07 17:48:07 Result: good, file /etc/init.d/ssh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/udev +2021-01-07 17:48:07 Result: good, file /etc/init.d/udev not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/umountfs +2021-01-07 17:48:07 Result: good, file /etc/init.d/umountfs not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/umountnfs.sh +2021-01-07 17:48:07 Result: good, file /etc/init.d/umountnfs.sh not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/umountroot +2021-01-07 17:48:07 Result: good, file /etc/init.d/umountroot not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/unattended-upgrades +2021-01-07 17:48:07 Result: good, file /etc/init.d/unattended-upgrades not world writable +2021-01-07 17:48:07 Test: checking permissions of file /etc/init.d/urandom +2021-01-07 17:48:07 Result: good, file /etc/init.d/urandom not world writable +2021-01-07 17:48:07 Test: checking if directory /etc/rc.d exists +2021-01-07 17:48:07 Result: directory /etc/rc.d not found. Skipping.. +2021-01-07 17:48:07 Test: checking if directory /etc/rcS.d exists +2021-01-07 17:48:07 Result: directory /etc/rcS.d found +2021-01-07 17:48:07 Test: checking for available files in directory +2021-01-07 17:48:07 Result: found files in directory, checking permissions now +2021-01-07 17:48:07 Test: checking permissions of file /etc/rcS.d/README +2021-01-07 17:48:07 Result: good, file /etc/rcS.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc0.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc0.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc1.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc1.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc2.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc2.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc3.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc3.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc4.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc4.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc5.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc5.d/README not world writable +2021-01-07 17:48:07 Test: Checking /etc/rc6.d scripts for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc6.d/README not world writable +2021-01-07 17:48:07 Action: checking symlink for file /etc/rc.local +2021-01-07 17:48:07 Result: file /etc/rc.local is not a symlink +2021-01-07 17:48:07 Test: Checking /etc/rc.local file for writable bit +2021-01-07 17:48:07 Result: good, file /etc/rc.local not world writable +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (3). Currently having 3 points (out of 5) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5202 (Check uptime of system) +2021-01-07 17:48:07 Uptime (in seconds): 389 +2021-01-07 17:48:07 Uptime (in days): 0 +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID BOOT-5260 (Check single user mode for systemd) +2021-01-07 17:48:07 Test: Searching /usr/lib/systemd/system/rescue.service +2021-01-07 17:48:07 Result: file /usr/lib/systemd/system/rescue.service does not exist +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5262 (Check for OpenBSD boot daemons) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5263 (Check permissions for boot files/scripts) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test BOOT-5264 (Run systemd-analyze security) +2021-01-07 17:48:07 Reason to skip: systemd-analyze too old (v229), need at least v240 +2021-01-07 17:48:07 Security check: file is normal +2021-01-07 17:48:07 Checking permissions of /root/scans/lynis/include/tests_kernel +2021-01-07 17:48:07 File permissions are OK +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Action: Performing tests from category: Kernel +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5622 (Determine Linux default run level) +2021-01-07 17:48:07 Test: Checking for systemd default.target +2021-01-07 17:48:07 Result: no systemd found, so trying inittab +2021-01-07 17:48:07 Test: Checking /etc/inittab +2021-01-07 17:48:07 Result: file /etc/inittab not found +2021-01-07 17:48:07 Test: Checking run level with who -r, for Debian based systems +2021-01-07 17:48:07 Result: Found default run level '5' +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5677 (Check CPU options and support) +2021-01-07 17:48:07 Test: Checking /proc/cpuinfo +2021-01-07 17:48:07 Result: found /proc/cpuinfo +2021-01-07 17:48:07 Test: Checking CPU options (XD/NX/PAE) +2021-01-07 17:48:07 PAE: Yes +2021-01-07 17:48:07 NX: Yes +2021-01-07 17:48:07 Result: PAE or No eXecute option(s) both found +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5695 (Determine Linux kernel version and release number) +2021-01-07 17:48:07 Result: found kernel release 4.4.0-197-generic +2021-01-07 17:48:07 Result: found kernel version #229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5723 (Determining if Linux kernel is monolithic) +2021-01-07 17:48:07 Test: checking if kernel is monolithic or modular +2021-01-07 17:48:07 Result: Found modular kernel +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5726 (Checking Linux loaded kernel modules) +2021-01-07 17:48:07 Loaded modules according lsmod: +2021-01-07 17:48:07 Loaded module: ablk_helper +2021-01-07 17:48:07 Loaded module: aes_x86_64 +2021-01-07 17:48:07 Loaded module: aesni_intel +2021-01-07 17:48:07 Loaded module: ahci +2021-01-07 17:48:07 Loaded module: async_memcpy +2021-01-07 17:48:07 Loaded module: async_pq +2021-01-07 17:48:07 Loaded module: async_raid6_recov +2021-01-07 17:48:07 Loaded module: async_tx +2021-01-07 17:48:07 Loaded module: async_xor +2021-01-07 17:48:07 Loaded module: autofs4 +2021-01-07 17:48:07 Loaded module: binfmt_misc +2021-01-07 17:48:07 Loaded module: btrfs +2021-01-07 17:48:07 Loaded module: crc32_pclmul +2021-01-07 17:48:07 Loaded module: crct10dif_pclmul +2021-01-07 17:48:07 Loaded module: cryptd +2021-01-07 17:48:07 Loaded module: gf128mul +2021-01-07 17:48:07 Loaded module: ghash_clmulni_intel +2021-01-07 17:48:07 Loaded module: glue_helper +2021-01-07 17:48:07 Loaded module: hid +2021-01-07 17:48:07 Loaded module: hid_generic +2021-01-07 17:48:07 Loaded module: inet_diag +2021-01-07 17:48:07 Loaded module: input_leds +2021-01-07 17:48:07 Loaded module: ip_tables +2021-01-07 17:48:07 Loaded module: iptable_filter +2021-01-07 17:48:07 Loaded module: iptable_nat +2021-01-07 17:48:07 Loaded module: joydev +2021-01-07 17:48:07 Loaded module: libahci +2021-01-07 17:48:07 Loaded module: libcrc32c +2021-01-07 17:48:07 Loaded module: linear +2021-01-07 17:48:07 Loaded module: lrw +2021-01-07 17:48:07 Loaded module: multipath +2021-01-07 17:48:07 Loaded module: nf_conntrack +2021-01-07 17:48:07 Loaded module: nf_conntrack_ipv4 +2021-01-07 17:48:07 Loaded module: nf_defrag_ipv4 +2021-01-07 17:48:07 Loaded module: nf_nat +2021-01-07 17:48:07 Loaded module: nf_nat_ipv4 +2021-01-07 17:48:07 Loaded module: psmouse +2021-01-07 17:48:07 Loaded module: raid0 +2021-01-07 17:48:07 Loaded module: raid1 +2021-01-07 17:48:07 Loaded module: raid10 +2021-01-07 17:48:07 Loaded module: raid456 +2021-01-07 17:48:07 Loaded module: raid6_pq +2021-01-07 17:48:07 Loaded module: serio_raw +2021-01-07 17:48:07 Loaded module: tcp_diag +2021-01-07 17:48:07 Loaded module: udp_diag +2021-01-07 17:48:07 Loaded module: usbhid +2021-01-07 17:48:07 Loaded module: virtio_rng +2021-01-07 17:48:07 Loaded module: virtio_scsi +2021-01-07 17:48:07 Loaded module: x_tables +2021-01-07 17:48:07 Loaded module: xor +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5728 (Checking Linux kernel config) +2021-01-07 17:48:07 Result: found config (/boot/config-4.4.0-197-generic) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5730 (Checking disk I/O kernel scheduler) +2021-01-07 17:48:07 Test: Checking the default I/O kernel scheduler +2021-01-07 17:48:07 Result: found IO scheduler 'deadline' +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test KRNL-5745 (Checking FreeBSD loaded kernel modules) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test KRNL-5831 (Checking DragonFly loaded kernel modules) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test KRNL-5770 (Checking active kernel modules) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5788 (Checking availability new Linux kernel) +2021-01-07 17:48:07 Test: Searching apt-cache, to determine if a newer kernel is available +2021-01-07 17:48:07 Result: found /usr/bin/apt-cache +2021-01-07 17:48:07 Test: checking presence of /vmlinuz or /boot/vmlinuz +2021-01-07 17:48:07 Result: found /vmlinuz +2021-01-07 17:48:07 Test: checking readlink location of /vmlinuz +2021-01-07 17:48:07 Output: readlink reported file /boot/vmlinuz-4.4.0-197-generic +2021-01-07 17:48:07 Test: checking package from dpkg -S +2021-01-07 17:48:07 Output: dpkg -S reported package linux-image-4.4.0-197-generic +2021-01-07 17:48:07 Test: Using apt-cache policy to determine if there is an update available +2021-01-07 17:48:07 Kernel installed: 4.4.0-197.229 +2021-01-07 17:48:07 Kernel candidate: 4.4.0-197.229 +2021-01-07 17:48:07 Result: no kernel update available +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5820 (Checking core dumps configuration) +2021-01-07 17:48:07 Test: Checking presence of systemd +2021-01-07 17:48:07 Result: systemd is present on this system +2021-01-07 17:48:07 Test: Checking if core dumps are disabled in /etc/systemd/coredump.conf and /etc/systemd/coredump.conf.d/*.conf +2021-01-07 17:48:07 Result: core dumps are not disabled in systemd configuration. Didn't find settings 'ProcessSizeMax=0' and 'Storage=none' +2021-01-07 17:48:07 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 6) +2021-01-07 17:48:07 Test: Checking presence /etc/profile +2021-01-07 17:48:07 Test: Checking if 'ulimit -c 0' exists in /etc/profile or /etc/profile.d/*.sh +2021-01-07 17:48:07 Result: core dumps are not disabled in /etc/profile or /etc/profile.d/*.sh config files. Didn't find setting 'ulimit -c 0' +2021-01-07 17:48:07 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 7) +2021-01-07 17:48:07 Test: Checking presence /etc/security/limits.conf +2021-01-07 17:48:07 Result: file /etc/security/limits.conf exists +2021-01-07 17:48:07 Test: Checking if core dumps are disabled in /etc/security/limits.conf and /etc/security/limits.d/* +2021-01-07 17:48:07 Result: core dumps are not explicitly disabled +2021-01-07 17:48:07 Suggestion: If not required, consider explicit disabling of core dump in /etc/security/limits.conf file [test:KRNL-5820] [details:-] [solution:-] +2021-01-07 17:48:07 Hardening: assigned partial number of hardening points (1 of 3). Currently having 4 points (out of 10) +2021-01-07 17:48:07 Test: Checking sysctl value of fs.suid_dumpable +2021-01-07 17:48:07 Result: value 0 found +2021-01-07 17:48:07 Result: found default option (0), no execute only program or program with changed privilege levels can dump +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (1). Currently having 5 points (out of 11) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel) +2021-01-07 17:48:07 Test: Checking presence /var/run/reboot-required.pkgs +2021-01-07 17:48:07 Result: file /var/run/reboot-required.pkgs not found +2021-01-07 17:48:07 Result: /boot exists, performing more tests from here +2021-01-07 17:48:07 Result: found /boot/vmlinuz-4.4.0-197-generic +2021-01-07 17:48:07 Result: version derived from file name is '4.4.0-197-generic' +2021-01-07 17:48:07 Result: found version 4.4.0-197-generic +2021-01-07 17:48:07 Result: active kernel version 4.4.0-197-generic +2021-01-07 17:48:07 Result: no reboot needed, active kernel is the same version as the one on disk +2021-01-07 17:48:07 Result: /var/cache/apt/archives/ does not exist +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (5). Currently having 10 points (out of 16) +2021-01-07 17:48:07 Security check: file is normal +2021-01-07 17:48:07 Checking permissions of /root/scans/lynis/include/tests_memory_processes +2021-01-07 17:48:07 File permissions are OK +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Action: Performing tests from category: Memory and Processes +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID PROC-3602 (Checking /proc/meminfo for memory details) +2021-01-07 17:48:07 Result: found /proc/meminfo +2021-01-07 17:48:07 Result: Found 1998680 kB memory +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test PROC-3604 (Query prtconf for memory details) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID PROC-3612 (Check dead or zombie processes) +2021-01-07 17:48:07 Result: no zombie processes found +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID PROC-3614 (Check heavy IO waiting based processes) +2021-01-07 17:48:07 Result: No processes were waiting for IO requests to be handled first +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID PROC-3802 (Check presence of prelink tooling) +2021-01-07 17:48:07 Result: prelink package is NOT installed +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (3). Currently having 13 points (out of 19) +2021-01-07 17:48:07 Security check: file is normal +2021-01-07 17:48:07 Checking permissions of /root/scans/lynis/include/tests_authentication +2021-01-07 17:48:07 File permissions are OK +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Action: Performing tests from category: Users, Groups and Authentication +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9204 (Check users with an UID of zero) +2021-01-07 17:48:07 Test: Searching accounts with UID 0 +2021-01-07 17:48:07 Result: No accounts found with UID 0 other than root. +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9208 (Check non-unique accounts in passwd file) +2021-01-07 17:48:07 Test: Checking for non-unique accounts +2021-01-07 17:48:07 Result: all accounts found in /etc/passwd are unique +2021-01-07 17:48:07 Remarks: Non unique UIDs can be a risk for the system or part of a configuration mistake +2021-01-07 17:48:07 Prerequisite test: /usr/sbin/chkgrp +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test AUTH-9212 (Test group file) +2021-01-07 17:48:07 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9216 (Check group and shadow group files) +2021-01-07 17:48:07 Test: Checking for grpck binary output +2021-01-07 17:48:07 Result: grpck binary didn't find any errors in the group files +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Skipped test AUTH-9218 (Check login shells for passwordless accounts) +2021-01-07 17:48:07 Reason to skip: Incorrect guest OS (DragonFly FreeBSD NetBSD OpenBSD only) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9222 (Check unique groups (IDs)) +2021-01-07 17:48:07 Test: Checking for non unique group ID's in /etc/group +2021-01-07 17:48:07 Result: All group ID's are unique +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9226 (Check unique group names) +2021-01-07 17:48:07 Test: Checking for non unique group names in /etc/group +2021-01-07 17:48:07 Result: All group names are unique +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9228 (Check password file consistency with pwck) +2021-01-07 17:48:07 Test: Checking password file consistency (pwck) +2021-01-07 17:48:07 Result: pwck check didn't find any problems +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (2). Currently having 15 points (out of 21) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9229 (Check password hashing methods) +2021-01-07 17:48:07 Test: Checking password hashing methods +2021-01-07 17:48:07 Result: no poor password hashing methods found +2021-01-07 17:48:07 Hardening: assigned maximum number of hardening points for this item (2). Currently having 17 points (out of 23) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9230 (Check password hashing rounds) +2021-01-07 17:48:07 Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs +2021-01-07 17:48:07 Result: number of password hashing rounds is not configured +2021-01-07 17:48:07 Suggestion: Configure password hashing rounds in /etc/login.defs [test:AUTH-9230] [details:-] [solution:-] +2021-01-07 17:48:07 Hardening: assigned partial number of hardening points (0 of 2). Currently having 17 points (out of 25) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9234 (Query user accounts) +2021-01-07 17:48:07 Test: Read system users (including root user) from password database (e.g. /etc/passwd) +2021-01-07 17:48:07 Result: found minimal user id specified: 1000 +2021-01-07 17:48:07 Linux real users output (ID = 0, or 1000+, but not 65534): +2021-01-07 17:48:07 Real user: root,0 +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9240 (Query NIS+ authentication support) +2021-01-07 17:48:07 Result: NIS+ authentication not enabled +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9242 (Query NIS authentication support) +2021-01-07 17:48:07 Result: NIS authentication not enabled +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9250 (Checking sudoers file) +2021-01-07 17:48:07 Test: checking presence /etc/sudoers +2021-01-07 17:48:07 Result: found file (/etc/sudoers) +2021-01-07 17:48:07 Test: checking presence /usr/local/etc/sudoers +2021-01-07 17:48:07 Result: file /usr/local/etc/sudoers not found +2021-01-07 17:48:07 Test: checking presence /usr/pkg/etc/sudoers +2021-01-07 17:48:07 Result: file /usr/pkg/etc/sudoers not found +2021-01-07 17:48:07 Result: sudoers file found (/etc/sudoers) +2021-01-07 17:48:07 ==== +2021-01-07 17:48:07 Performing test ID AUTH-9252 (Check ownership and permissions for sudo configuration files) +2021-01-07 17:48:07 Test: checking drop-in directory (/etc/sudoers.d) +2021-01-07 17:48:07 Result: Found directory permissions: rwxr-x--- and owner UID GID: 00 +2021-01-07 17:48:07 Result: directory /etc/sudoers.d permissions OK +2021-01-07 17:48:07 Result: directory /etc/sudoers.d ownership OK +2021-01-07 17:48:07 Test: checking file (/etc/sudoers) +2021-01-07 17:48:07 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:48:08 Result: file /etc/sudoers permissions OK +2021-01-07 17:48:08 Result: file /etc/sudoers ownership OK +2021-01-07 17:48:08 Test: checking file (/etc/sudoers.d/README) +2021-01-07 17:48:08 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:48:08 Result: file /etc/sudoers.d/README permissions OK +2021-01-07 17:48:08 Result: file /etc/sudoers.d/README ownership OK +2021-01-07 17:48:08 Test: checking file (/etc/sudoers.d/90-cloud-init-users) +2021-01-07 17:48:08 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:48:08 Result: file /etc/sudoers.d/90-cloud-init-users permissions OK +2021-01-07 17:48:08 Result: file /etc/sudoers.d/90-cloud-init-users ownership OK +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9254 (Solaris passwordless accounts) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9262 (Checking presence password strength testing tools (PAM)) +2021-01-07 17:48:08 Searching PAM password testing modules (cracklib, passwdqc, pwquality) +2021-01-07 17:48:08 Result: pam_cracklib.so NOT found (crack library PAM) +2021-01-07 17:48:08 Result: pam_passwdqc.so NOT found (passwd quality control PAM) +2021-01-07 17:48:08 Result: pam_pwquality.so NOT found (pwquality control PAM) +2021-01-07 17:48:08 Result: no PAM modules for password strength testing found +2021-01-07 17:48:08 Suggestion: Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [test:AUTH-9262] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 3). Currently having 17 points (out of 28) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9264 (Checking presence pam.conf) +2021-01-07 17:48:08 Test: Checking file /etc/pam.conf +2021-01-07 17:48:08 Result: file /etc/pam.conf exists +2021-01-07 17:48:08 Test: searching PAM configuration files +2021-01-07 17:48:08 Result: File has no configuration options defined (empty, or only filled with comments and empty lines) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9266 (Checking presence pam.d files) +2021-01-07 17:48:08 Test: Checking directory /etc/pam.d +2021-01-07 17:48:08 Result: directory /etc/pam.d exists +2021-01-07 17:48:08 Test: searching PAM configuration files +2021-01-07 17:48:08 Found file: /etc/pam.d/atd +2021-01-07 17:48:08 Found file: /etc/pam.d/chfn +2021-01-07 17:48:08 Found file: /etc/pam.d/chpasswd +2021-01-07 17:48:08 Found file: /etc/pam.d/chsh +2021-01-07 17:48:08 Found file: /etc/pam.d/common-account +2021-01-07 17:48:08 Found file: /etc/pam.d/common-auth +2021-01-07 17:48:08 Found file: /etc/pam.d/common-password +2021-01-07 17:48:08 Found file: /etc/pam.d/common-session +2021-01-07 17:48:08 Found file: /etc/pam.d/common-session-noninteractive +2021-01-07 17:48:08 Found file: /etc/pam.d/cron +2021-01-07 17:48:08 Found file: /etc/pam.d/login +2021-01-07 17:48:08 Found file: /etc/pam.d/newusers +2021-01-07 17:48:08 Found file: /etc/pam.d/other +2021-01-07 17:48:08 Found file: /etc/pam.d/passwd +2021-01-07 17:48:08 Found file: /etc/pam.d/runuser +2021-01-07 17:48:08 Found file: /etc/pam.d/runuser-l +2021-01-07 17:48:08 Found file: /etc/pam.d/sshd +2021-01-07 17:48:08 Found file: /etc/pam.d/su +2021-01-07 17:48:08 Found file: /etc/pam.d/sudo +2021-01-07 17:48:08 Found file: /etc/pam.d/systemd-user +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9268 (Checking presence pam.d files) +2021-01-07 17:48:08 Test: Searching pam modules +2021-01-07 17:48:08 Test: Checking /lib/arm-linux-gnueabihf/security +2021-01-07 17:48:08 Result: directory /lib/arm-linux-gnueabihf/security could not be found or is a symlink to another directory +2021-01-07 17:48:08 Test: Checking /lib/i386-linux-gnu/security +2021-01-07 17:48:08 Result: directory /lib/i386-linux-gnu/security could not be found or is a symlink to another directory +2021-01-07 17:48:08 Test: Checking /lib/security +2021-01-07 17:48:08 Result: directory /lib/security could not be found or is a symlink to another directory +2021-01-07 17:48:08 Test: Checking /lib/x86_64-linux-gnu/security +2021-01-07 17:48:08 Result: directory /lib/x86_64-linux-gnu/security exists +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_access.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_debug.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_deny.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_echo.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_env.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_exec.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_extrausers.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_faildelay.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_filter.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_ftp.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_group.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_issue.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_keyinit.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_lastlog.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_limits.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_listfile.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_localuser.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_loginuid.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_mail.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_mkhomedir.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_motd.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_namespace.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_nologin.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_permit.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_pwhistory.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_rhosts.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_rootok.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_securetty.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_selinux.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_sepermit.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_shells.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_stress.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_succeed_if.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_systemd.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_tally.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_tally2.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_time.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_timestamp.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_tty_audit.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_umask.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_unix.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_userdb.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_warn.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_wheel.so +2021-01-07 17:48:08 Found file: /lib/x86_64-linux-gnu/security/pam_xauth.so +2021-01-07 17:48:08 Test: Checking /lib64/security +2021-01-07 17:48:08 Result: directory /lib64/security could not be found or is a symlink to another directory +2021-01-07 17:48:08 Test: Checking /usr/lib +2021-01-07 17:48:08 Result: directory /usr/lib exists +2021-01-07 17:48:08 Test: Checking /usr/lib/security +2021-01-07 17:48:08 Result: directory /usr/lib/security could not be found or is a symlink to another directory +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9278 (Determine LDAP support in PAM files) +2021-01-07 17:48:08 Test: checking presence /etc/pam.d/common-auth +2021-01-07 17:48:08 Result: file /etc/pam.d/common-auth exists +2021-01-07 17:48:08 Test: checking presence LDAP module +2021-01-07 17:48:08 Result: LDAP module not found +2021-01-07 17:48:08 Test: checking presence /etc/pam.d/system-auth +2021-01-07 17:48:08 Result: file /etc/pam.d/system-auth not found, skipping test +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9282 (Checking password protected account without expire date) +2021-01-07 17:48:08 Test: Checking Linux version and password expire date status +2021-01-07 17:48:08 Result: all accounts seem to have an expire date +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9283 (Checking accounts without password) +2021-01-07 17:48:08 Test: Checking passwordless accounts +2021-01-07 17:48:08 Result: all accounts seem to have a password +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9284 (Check locked user accounts in /etc/passwd) +2021-01-07 17:48:08 Test: Checking locked accounts +2021-01-07 17:48:08 Result: all accounts seem to be unlocked +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9286 (Checking user password aging) +2021-01-07 17:48:08 Test: Checking PASS_MIN_DAYS option in /etc/login.defs +2021-01-07 17:48:08 Result: password minimum age is not configured +2021-01-07 17:48:08 Suggestion: Configure minimum password age in /etc/login.defs [test:AUTH-9286] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 1). Currently having 17 points (out of 29) +2021-01-07 17:48:08 Test: Checking PASS_MAX_DAYS option in /etc/login.defs +2021-01-07 17:48:08 Result: password aging limits are not configured +2021-01-07 17:48:08 Suggestion: Configure maximum password age in /etc/login.defs [test:AUTH-9286] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 1). Currently having 17 points (out of 30) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9288 (Checking for expired passwords) +2021-01-07 17:48:08 Test: check if we can access /etc/shadow (escaped: /etc/shadow) +2021-01-07 17:48:08 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:08 Result: file /etc/shadow is readable (or directory accessible). +2021-01-07 17:48:08 Data: Days since epoch is 18634 +2021-01-07 17:48:08 Test: collecting accounts which have an expired password (last day changed + maximum change time) +2021-01-07 17:48:08 Result: good, no passwords have been expired +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (10). Currently having 27 points (out of 40) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9304 (Check single user login configuration) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9306 (Check single boot authentication) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (HP-UX only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9308 (Check single user login configuration) +2021-01-07 17:48:08 Test: going to check several systemd targets now +2021-01-07 17:48:08 Test: checking if target console-shell.service is available (/lib/systemd/system/console-shell.service) +2021-01-07 17:48:08 Result: found target console-shell.service +2021-01-07 17:48:08 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:48:08 Test: checking if target emergency.service is available (/lib/systemd/system/emergency.service) +2021-01-07 17:48:08 Result: found target emergency.service +2021-01-07 17:48:08 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:48:08 Test: checking if target rescue.service is available (/lib/systemd/system/rescue.service) +2021-01-07 17:48:08 Result: found target rescue.service +2021-01-07 17:48:08 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:48:08 Result: option set, password is needed at single user mode boot +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (2). Currently having 29 points (out of 42) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9328 (Default umask values) +2021-01-07 17:48:08 Test: Checking /etc/profile.d directory +2021-01-07 17:48:08 Result: found /etc/profile.d, with one or more files in it +2021-01-07 17:48:08 Test: Checking /etc/profile +2021-01-07 17:48:08 Result: file /etc/profile exists +2021-01-07 17:48:08 Test: Checking umask value in /etc/profile +2021-01-07 17:48:08 Result: did not find umask in /etc/profile +2021-01-07 17:48:08 Result: found no umask. Please check if this is correct +2021-01-07 17:48:08 Test: Checking umask entries in /etc/passwd (pam_umask) +2021-01-07 17:48:08 Result: file /etc/passwd exists +2021-01-07 17:48:08 Test: Checking umask value in /etc/passwd +2021-01-07 17:48:08 Manual: one or more manual actions are required for further testing of this control/plugin +2021-01-07 17:48:08 Test: Checking /etc/login.defs +2021-01-07 17:48:08 Result: file /etc/login.defs exists +2021-01-07 17:48:08 Test: Checking umask value in /etc/login.defs +2021-01-07 17:48:08 Result: found umask 022, which could be improved +2021-01-07 17:48:08 Suggestion: Default umask in /etc/login.defs could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 2). Currently having 29 points (out of 44) +2021-01-07 17:48:08 Test: Checking /etc/init.d/functions +2021-01-07 17:48:08 Result: file /etc/init.d/functions does not exist +2021-01-07 17:48:08 Test: Checking /etc/init.d/rc +2021-01-07 17:48:08 Result: file /etc/init.d/rc exists +2021-01-07 17:48:08 Test: Checking UMASK value in /etc/init.d/rc +2021-01-07 17:48:08 Result: found umask 022, which could be improved +2021-01-07 17:48:08 Suggestion: Default umask in /etc/init.d/rc could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 2). Currently having 29 points (out of 46) +2021-01-07 17:48:08 Test: Checking /etc/init.d/rcS +2021-01-07 17:48:08 Result: file /etc/init.d/rcS exists +2021-01-07 17:48:08 Test: Checking if script runs another script. +2021-01-07 17:48:08 Result: exec line present in file, setting of umask not needed in this script +2021-01-07 17:48:08 Output: /etc/init.d/rc +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9340 (Solaris account locking) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9402 (Query LDAP authentication support) +2021-01-07 17:48:08 Result: LDAP authentication not enabled +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9406 (Query LDAP servers in client configuration) +2021-01-07 17:48:08 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID AUTH-9408 (Logging of failed login attempts) +2021-01-07 17:48:08 Result: did not find /var/log/tallylog on disk or its file size is zero bytes +2021-01-07 17:48:08 Result: found pam_tally2 module on disk +2021-01-07 17:48:08 Outcome: it looks like pam_tally2 is not configured to log failed login attempts +2021-01-07 17:48:08 Test: Checking FAILLOG_ENAB option in /etc/login.defs +2021-01-07 17:48:08 Result: FAILLOG_ENAB is set to 'yes' +2021-01-07 17:48:08 Outcome: failed login attempts are logged in /var/log/faillog +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 32 points (out of 49) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9409 (Checking /etc/doas.conf file) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test AUTH-9410 (Check /etc/doas.conf file permissions) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:08 Security check: file is normal +2021-01-07 17:48:08 Checking permissions of /root/scans/lynis/include/tests_shells +2021-01-07 17:48:08 File permissions are OK +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Action: Performing tests from category: Shells +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test SHLL-6202 (Check console TTYs) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID SHLL-6211 (Available and valid shells) +2021-01-07 17:48:08 Test: Searching for /etc/shells +2021-01-07 17:48:08 Result: Found /etc/shells file +2021-01-07 17:48:08 Test: Reading available shells from /etc/shells +2021-01-07 17:48:08 Found installed shell: /bin/sh +2021-01-07 17:48:08 Found installed shell: /bin/dash +2021-01-07 17:48:08 Found installed shell: /bin/bash +2021-01-07 17:48:08 Found installed shell: /bin/rbash +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID SHLL-6220 (Idle session killing tools or settings) +2021-01-07 17:48:08 Test: Search for session timeout tools or settings in shell +2021-01-07 17:48:08 Performing pgrep scan without uid +2021-01-07 17:48:08 IsRunning: process 'timeoutd' not found +2021-01-07 17:48:08 Performing pgrep scan without uid +2021-01-07 17:48:08 IsRunning: process 'autolog' not found +2021-01-07 17:48:08 Result: could not find TMOUT setting in /etc/profile +2021-01-07 17:48:08 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:48:08 Result: could not find TMOUT setting in /etc/profile.d/*.sh +2021-01-07 17:48:08 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (1 of 3). Currently having 33 points (out of 52) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID SHLL-6230 (Perform umask check for shell configurations) +2021-01-07 17:48:08 Result: file /etc/bashrc not found +2021-01-07 17:48:08 Result: file /etc/bash.bashrc exists +2021-01-07 17:48:08 Result: did not find umask configured in /etc/bash.bashrc +2021-01-07 17:48:08 Result: file /etc/bash.bashrc.local not found +2021-01-07 17:48:08 Result: file /etc/csh.cshrc not found +2021-01-07 17:48:08 Result: file /etc/profile exists +2021-01-07 17:48:08 Result: did not find umask configured in /etc/profile +2021-01-07 17:48:08 Security check: file is normal +2021-01-07 17:48:08 Checking permissions of /root/scans/lynis/include/tests_filesystems +2021-01-07 17:48:08 File permissions are OK +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Action: Performing tests from category: File systems +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6310 (Checking /tmp, /home and /var directory) +2021-01-07 17:48:08 Test: Checking if /home is mounted separately or mounted on / file system +2021-01-07 17:48:08 Result: directory /home exists +2021-01-07 17:48:08 Result: /home not found in mount list. Directory most likely stored on / file system +2021-01-07 17:48:08 Suggestion: To decrease the impact of a full /home file system, place /home on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (9 of 10). Currently having 42 points (out of 62) +2021-01-07 17:48:08 Test: Checking if /tmp is mounted separately or mounted on / file system +2021-01-07 17:48:08 Result: directory /tmp exists +2021-01-07 17:48:08 Result: /tmp not found in mount list. Directory most likely stored on / file system +2021-01-07 17:48:08 Suggestion: To decrease the impact of a full /tmp file system, place /tmp on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (9 of 10). Currently having 51 points (out of 72) +2021-01-07 17:48:08 Test: Checking if /var is mounted separately or mounted on / file system +2021-01-07 17:48:08 Result: directory /var exists +2021-01-07 17:48:08 Result: /var not found in mount list. Directory most likely stored on / file system +2021-01-07 17:48:08 Suggestion: To decrease the impact of a full /var file system, place /var on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (9 of 10). Currently having 60 points (out of 82) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6311 (Checking LVM volume groups) +2021-01-07 17:48:08 Test: Checking for LVM volume groups +2021-01-07 17:48:08 Result: no LVM volume groups found +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test FILE-6312 (Checking LVM volumes) +2021-01-07 17:48:08 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6323 (Checking EXT file systems) +2021-01-07 17:48:08 Test: Checking for Linux EXT file systems +2021-01-07 17:48:08 Result: found one or more EXT file systems +2021-01-07 17:48:08 File system: / (type: ext4) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6324 (Checking XFS file systems) +2021-01-07 17:48:08 Test: Checking for Linux XFS file systems +2021-01-07 17:48:08 Result: no XFS file systems found +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6329 (Checking FFS/UFS file systems) +2021-01-07 17:48:08 Test: Query /etc/fstab for available FFS/UFS mount points +2021-01-07 17:48:08 Result: unable to find any single mount point (FFS/UFS) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test FILE-6330 (Checking ZFS file systems) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test FILE-6439 (Checking HAMMER PFS mounts) +2021-01-07 17:48:08 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6332 (Checking swap partitions) +2021-01-07 17:48:08 Test: query swap partitions from /etc/fstab file +2021-01-07 17:48:08 Result: no swap partitions found in /etc/fstab +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6336 (Checking swap mount options) +2021-01-07 17:48:08 Test: check swap partitions with incorrect mount options +2021-01-07 17:48:08 Result: all swap partitions have correct options (sw or swap) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6344 (Checking proc mount options) +2021-01-07 17:48:08 Test: check proc mount with incorrect mount options +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 3). Currently having 60 points (out of 85) +2021-01-07 17:48:08 Result: /proc filesystem is not mounted with option hidepid=1 or hidepid=2 +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6354 (Searching for old files in /tmp) +2021-01-07 17:48:08 Test: Searching for old files in /tmp +2021-01-07 17:48:08 Result: no files found in /tmp which are older than 3 months +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6362 (Checking /tmp sticky bit) +2021-01-07 17:48:08 Result: sticky bit found on /tmp directory +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 63 points (out of 88) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6363 (Checking /var/tmp sticky bit) +2021-01-07 17:48:08 Result: sticky bit found on /var/tmp directory +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 66 points (out of 91) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6368 (Checking ACL support on root file system) +2021-01-07 17:48:08 Test: Checking acl option on ext[2-4] root file system +2021-01-07 17:48:08 Result: mount point probably mounted with defaults +2021-01-07 17:48:08 Test: Checking device which holds root file system +2021-01-07 17:48:08 Result: found /dev/sda1 +2021-01-07 17:48:08 Test: Checking default options on /dev/sda1 +2021-01-07 17:48:08 Result: found ACL option in default mount options +2021-01-07 17:48:08 Test: Checking acl option on xfs root file system +2021-01-07 17:48:08 Result: ACL option enabled on root file system +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 69 points (out of 94) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6372 (Checking / mount options) +2021-01-07 17:48:08 Result: mount system / is configured with options: errors=remount-ro +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6374 (Linux mount options) +2021-01-07 17:48:08 Result: file system /boot not found in /etc/fstab +2021-01-07 17:48:08 File system: /dev +2021-01-07 17:48:08 Expected flags: noexec nosuid +2021-01-07 17:48:08 Found flags: (rw nosuid relatime size=990692k nr_inodes=247673 mode=755) +2021-01-07 17:48:08 Result: Could not find mount option noexec on file system /dev +2021-01-07 17:48:08 Result: GOOD, found mount option nosuid on file system /dev +2021-01-07 17:48:08 Result: marked /dev as partially hardened +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (4 of 5). Currently having 73 points (out of 99) +2021-01-07 17:48:08 File system: /dev/shm +2021-01-07 17:48:08 Expected flags: nosuid nodev noexec +2021-01-07 17:48:08 Found flags: (rw nosuid nodev) +2021-01-07 17:48:08 Result: GOOD, found mount option nosuid on file system /dev/shm +2021-01-07 17:48:08 Result: GOOD, found mount option nodev on file system /dev/shm +2021-01-07 17:48:08 Result: Could not find mount option noexec on file system /dev/shm +2021-01-07 17:48:08 Result: marked /dev/shm as partially hardened +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (4 of 5). Currently having 77 points (out of 104) +2021-01-07 17:48:08 Result: file system /home not found in /etc/fstab +2021-01-07 17:48:08 File system: /run +2021-01-07 17:48:08 Expected flags: nodev nosuid +2021-01-07 17:48:08 Found flags: (rw nosuid noexec relatime size=199868k mode=755) +2021-01-07 17:48:08 Result: Could not find mount option nodev on file system /run +2021-01-07 17:48:08 Result: GOOD, found mount option nosuid on file system /run +2021-01-07 17:48:08 Result: marked /run as partially hardened +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (4 of 5). Currently having 81 points (out of 109) +2021-01-07 17:48:08 Result: file system /tmp not found in /etc/fstab +2021-01-07 17:48:08 Result: file system /var not found in /etc/fstab +2021-01-07 17:48:08 Result: file system /var/log not found in /etc/fstab +2021-01-07 17:48:08 Result: file system /var/log/audit not found in /etc/fstab +2021-01-07 17:48:08 Result: file system /var/tmp not found in /etc/fstab +2021-01-07 17:48:08 Result: Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11, of total 30 +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6376 (Determine if /var/tmp is bound to /tmp) +2021-01-07 17:48:08 Result: no mount point /var/tmp or expected options found +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6394 (Determine level of swappiness.) +2021-01-07 17:48:08 Test: checking level of vm.swappiness: 60 +2021-01-07 17:48:08 Result: vm.swappiness=60 which is the standard level of swappiness and works well for desktop systems. +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Skipped test FILE-6410 (Checking Locate database) +2021-01-07 17:48:08 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID FILE-6430 (Disable mounting of some filesystems) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 84 points (out of 112) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 87 points (out of 115) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 90 points (out of 118) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 93 points (out of 121) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 96 points (out of 124) +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 99 points (out of 127) +2021-01-07 17:48:08 Result: found udf support in the kernel (output = insmod /lib/modules/4.4.0-197-generic/kernel/fs/udf/udf.ko ) +2021-01-07 17:48:08 Test: Checking if udf is active +2021-01-07 17:48:08 Result: module udf is currently not loaded in the kernel. +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (2 of 3). Currently having 101 points (out of 130) +2021-01-07 17:48:08 Suggestion: Consider disabling unused kernel modules [test:FILE-6430] [details:/etc/modprobe.d/blacklist.conf] [solution:Add 'install MODULENAME /bin/true' (without quotes)] +2021-01-07 17:48:08 Security check: file is normal +2021-01-07 17:48:08 Checking permissions of /root/scans/lynis/include/tests_usb +2021-01-07 17:48:08 File permissions are OK +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Action: Performing tests from category: USB Devices +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID USB-1000 (Check if USB storage is disabled) +2021-01-07 17:48:08 Test: Checking USB storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:48:08 Result: usb-storage driver is not explicitly disabled +2021-01-07 17:48:08 Suggestion: Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [test:USB-1000] [details:-] [solution:-] +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (2 of 3). Currently having 103 points (out of 133) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID USB-2000 (Check USB authorizations) +2021-01-07 17:48:08 Test: checking presence of USB devices path (/sys/bus/usb/devices) +2021-01-07 17:48:08 Test: Checking USB devices authorization to connect to the system +2021-01-07 17:48:08 Test: /sys/bus/usb/devices/usb1 is authorized by default (authorized_default=1) +2021-01-07 17:48:08 Test: /sys/bus/usb/devices/usb1 is authorized currently (authorized=1) +2021-01-07 17:48:08 Test: /sys/bus/usb/devices/usb2 is authorized by default (authorized_default=1) +2021-01-07 17:48:08 Test: /sys/bus/usb/devices/usb2 is authorized currently (authorized=1) +2021-01-07 17:48:08 Result: Some USB devices are authorized by default (or temporary) to connect to the system +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 3). Currently having 103 points (out of 136) +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID USB-3000 (Check for presence of USBGuard) +2021-01-07 17:48:08 Result: USBGuard not found +2021-01-07 17:48:08 Hardening: assigned partial number of hardening points (0 of 8). Currently having 103 points (out of 144) +2021-01-07 17:48:08 Security check: file is normal +2021-01-07 17:48:08 Checking permissions of /root/scans/lynis/include/tests_storage +2021-01-07 17:48:08 File permissions are OK +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Action: Performing tests from category: Storage +2021-01-07 17:48:08 ==== +2021-01-07 17:48:08 Performing test ID STRG-1846 (Check if firewire storage is disabled) +2021-01-07 17:48:08 Test: Checking firewire storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:48:08 Result: found firewire ohci driver in disabled state +2021-01-07 17:48:08 Result: firewire ohci driver is disabled +2021-01-07 17:48:08 Hardening: assigned maximum number of hardening points for this item (3). Currently having 106 points (out of 147) +2021-01-07 17:48:08 Security check: file is normal +2021-01-07 17:48:08 Checking permissions of /root/scans/lynis/include/tests_storage_nfs +2021-01-07 17:48:09 File permissions are OK +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Action: Performing tests from category: NFS +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1902 (Check rpcinfo registered programs) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1904 (Check nfs rpc) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1906 (Check nfs rpc) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID STRG-1920 (Checking NFS daemon) +2021-01-07 17:48:09 Test: Checking running NFS daemon +2021-01-07 17:48:09 Output: NFS daemon is not running +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1926 (Checking NFS exports) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1928 (Checking empty /etc/exports) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test STRG-1930 (Check client access to nfs share) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 Security check: file is normal +2021-01-07 17:48:09 Checking permissions of /root/scans/lynis/include/tests_nameservices +2021-01-07 17:48:09 File permissions are OK +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Action: Performing tests from category: Name services +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4016 (Check /etc/resolv.conf default domain) +2021-01-07 17:48:09 Test: check /etc/resolv.conf for default domain +2021-01-07 17:48:09 Result: /etc/resolv.conf found +2021-01-07 17:48:09 Result: no default domain found +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4018 (Check /etc/resolv.conf search domains) +2021-01-07 17:48:09 Test: check /etc/resolv.conf for search domains +2021-01-07 17:48:09 Result: /etc/resolv.conf found +2021-01-07 17:48:09 Result: no search domains found, default domain is being used +2021-01-07 17:48:09 Result: found 0 line(s) with a search statement (expecting less than 2 lines) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4020 (Check non default options) +2021-01-07 17:48:09 Test: check /etc/resolv.conf for non default options +2021-01-07 17:48:09 Result: /etc/resolv.conf found +2021-01-07 17:48:09 Result: no specific other options configured in /etc/resolv.conf +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4024 (Solaris uname -n output) +2021-01-07 17:48:09 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4026 (Check /etc/nodename) +2021-01-07 17:48:09 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4028 (Check domain name) +2021-01-07 17:48:09 Test: Checking if dnsdomainname command is available +2021-01-07 17:48:09 Result: dnsdomainname command returned no value +2021-01-07 17:48:09 Result: using domain name from FQDN hostname (it-sec-test-vm) +2021-01-07 17:48:09 Suggestion: Check DNS configuration for the dns domain name [test:NAME-4028] [details:-] [solution:-] +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4032 (Check nscd status) +2021-01-07 17:48:09 Test: checking nscd status +2021-01-07 17:48:09 Performing pgrep scan without uid +2021-01-07 17:48:09 IsRunning: process 'nscd' not found +2021-01-07 17:48:09 Result: nscd is not running +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4034 (Check Unbound status) +2021-01-07 17:48:09 Test: checking Unbound (unbound) status +2021-01-07 17:48:09 Performing pgrep scan without uid +2021-01-07 17:48:09 IsRunning: process 'unbound' not found +2021-01-07 17:48:09 Result: Unbound daemon is not running +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4036 (Check Unbound configuration file) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4202 (Check BIND status) +2021-01-07 17:48:09 Test: Checking for running BIND instance +2021-01-07 17:48:09 Performing pgrep scan without uid +2021-01-07 17:48:09 IsRunning: process 'named' not found +2021-01-07 17:48:09 Result: BIND not running +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4204 (Search BIND configuration file) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4206 (Check BIND configuration consistency) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4210 (Check DNS banner) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4230 (Check PowerDNS status) +2021-01-07 17:48:09 Test: Checking for running PowerDNS instance +2021-01-07 17:48:09 Performing pgrep scan without uid +2021-01-07 17:48:09 IsRunning: process 'pdns_server' not found +2021-01-07 17:48:09 Result: PowerDNS not running +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4232 (Search PowerDNS configuration file) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4236 (Check PowerDNS backends) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4238 (Check PowerDNS authoritative status) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4304 (Check NIS ypbind status) +2021-01-07 17:48:09 Test: Checking status of ypbind daemon +2021-01-07 17:48:09 Performing pgrep scan without uid +2021-01-07 17:48:09 IsRunning: process 'ypbind' not found +2021-01-07 17:48:09 Result: ypbind is not active +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test NAME-4306 (Check NIS domain) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4402 (Check duplicate line in /etc/hosts) +2021-01-07 17:48:09 Test: check duplicate line in /etc/hosts +2021-01-07 17:48:09 Result: OK, no duplicate lines found +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4404 (Check /etc/hosts contains an entry for this server name) +2021-01-07 17:48:09 Test: Check /etc/hosts contains an entry for this server name +2021-01-07 17:48:09 Result: Found entry for it-sec-test-vm in /etc/hosts +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4406 (Check server hostname mapping) +2021-01-07 17:48:09 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:48:09 Result: this server hostname is not mapped to a local address +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID NAME-4408 (Check localhost entry) +2021-01-07 17:48:09 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:48:09 Result: localhost mapped to ::1 +2021-01-07 17:48:09 Security check: file is normal +2021-01-07 17:48:09 Checking permissions of /root/scans/lynis/include/tests_dns +2021-01-07 17:48:09 File permissions are OK +2021-01-07 17:48:09 Security check: file is normal +2021-01-07 17:48:09 Checking permissions of /root/scans/lynis/include/tests_ports_packages +2021-01-07 17:48:09 File permissions are OK +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Action: Performing tests from category: Ports and packages +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7301 (Query FreeBSD pkg) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7302 (Query FreeBSD/NetBSD pkg_info) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7303 (Query brew package manager) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 Result: brew can NOT be found on this system +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7304 (Querying Gentoo packages) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 Result: emerge can NOT be found on this system +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7306 (Querying Solaris packages) +2021-01-07 17:48:09 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:09 Result: pkginfo can NOT be found on this system +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7308 (Checking package list with RPM) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 Result: RPM binary NOT found on this system, test skipped +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7310 (Checking package list with pacman) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7312 (Checking available updates for pacman based system) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 Result: pacman binary NOT found on this system, test skipped +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7314 (Checking pacman configuration options) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7320 (Checking for arch-audit tooling) +2021-01-07 17:48:09 Reason to skip: Test only applies to Arch Linux +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7322 (Discover vulnerable packages with arch-audit) +2021-01-07 17:48:09 Reason to skip: arch-audit not found +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7328 (Querying Zypper for installed packages) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7330 (Querying Zypper for vulnerable packages) +2021-01-07 17:48:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7332 (Query macOS ports) +2021-01-07 17:48:09 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Skipped test PKGS-7334 (Query port for port upgrades) +2021-01-07 17:48:09 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:09 ==== +2021-01-07 17:48:09 Performing test ID PKGS-7345 (Querying dpkg) +2021-01-07 17:48:09 Result: Found dpkg binary +2021-01-07 17:48:09 Test: Querying dpkg -l to get package list +2021-01-07 17:48:09 Output: +2021-01-07 17:48:09 Found package: acl (version: 2.2.52-3) +2021-01-07 17:48:09 Found package: acpid (version: 1:2.0.26-1ubuntu2) +2021-01-07 17:48:09 Found package: adduser (version: 3.113+nmu3ubuntu4) +2021-01-07 17:48:09 Found package: apt (version: 1.2.32ubuntu0.2) +2021-01-07 17:48:09 Found package: apt-transport-https (version: 1.2.32ubuntu0.2) +2021-01-07 17:48:09 Found package: apt-utils (version: 1.2.32ubuntu0.2) +2021-01-07 17:48:09 Found package: aptitude (version: 0.7.4-2ubuntu2) +2021-01-07 17:48:09 Found package: aptitude-common (version: 0.7.4-2ubuntu2) +2021-01-07 17:48:09 Found package: at (version: 3.1.18-2ubuntu1) +2021-01-07 17:48:09 Found package: base-files (version: 9.4ubuntu4.13) +2021-01-07 17:48:09 Found package: base-passwd (version: 3.5.39) +2021-01-07 17:48:09 Found package: bash (version: 4.3-14ubuntu1.4) +2021-01-07 17:48:09 Found package: bind9-host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: bsdmainutils (version: 9.0.6ubuntu3) +2021-01-07 17:48:09 Found package: bsdutils (version: 1:2.27.1-6ubuntu3.10) +2021-01-07 17:48:09 Found package: btrfs-tools (version: 4.4-1ubuntu1.1) +2021-01-07 17:48:09 Found package: busybox-initramfs (version: 1:1.22.0-15ubuntu1.4) +2021-01-07 17:48:09 Found package: bzip2 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:48:09 Found package: ca-certificates (version: 20201027ubuntu0.16.04.1) +2021-01-07 17:48:09 Found package: cloud-guest-utils (version: 0.27-0ubuntu25.2) +2021-01-07 17:48:09 Found package: cloud-init (version: 20.3-2-g371b392c-0ubuntu1~16.04.1) +2021-01-07 17:48:09 Found package: console-setup (version: 1.108ubuntu15.5) +2021-01-07 17:48:09 Found package: console-setup-linux (version: 1.108ubuntu15.5) +2021-01-07 17:48:09 Found package: coreutils (version: 8.25-2ubuntu3~16.04) +2021-01-07 17:48:09 Found package: cpio (version: 2.11+dfsg-5ubuntu1.1) +2021-01-07 17:48:09 Found package: cron (version: 3.0pl1-128ubuntu2) +2021-01-07 17:48:09 Found package: cryptsetup (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:48:09 Found package: cryptsetup-bin (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:48:09 Found package: curl (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:48:09 Found package: dash (version: 0.5.8-2.1ubuntu2) +2021-01-07 17:48:09 Found package: dbus (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:48:09 Found package: debconf (version: 1.5.58ubuntu2) +2021-01-07 17:48:09 Found package: debconf-i18n (version: 1.5.58ubuntu2) +2021-01-07 17:48:09 Found package: debianutils (version: 4.7) +2021-01-07 17:48:09 Found package: dh-python (version: 2.20151103ubuntu1.2) +2021-01-07 17:48:09 Found package: diffutils (version: 1:3.3-3) +2021-01-07 17:48:09 Found package: dirmngr (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:48:09 Found package: distro-info-data (version: 0.28ubuntu0.16) +2021-01-07 17:48:09 Found package: dmeventd (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:48:09 Found package: dmsetup (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:48:09 Found package: dpkg (version: 1.18.4ubuntu1.6) +2021-01-07 17:48:09 Found package: e2fslibs:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:48:09 Found package: e2fsprogs (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:48:09 Found package: eatmydata (version: 105-3) +2021-01-07 17:48:09 Found package: efibootmgr (version: 0.12-4) +2021-01-07 17:48:09 Found package: ethtool (version: 1:4.5-1) +2021-01-07 17:48:09 Found package: findutils (version: 4.6.0+git+20160126-2) +2021-01-07 17:48:09 Found package: gcc-5-base:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:48:09 Found package: gcc-6-base:amd64 (version: 6.0.1-0ubuntu1) +2021-01-07 17:48:09 Found package: gdisk (version: 1.0.1-1build1) +2021-01-07 17:48:09 Found package: gettext-base (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:48:09 Found package: gir1.2-glib-2.0:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:48:09 Found package: git (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:48:09 Found package: git-man (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:48:09 Found package: gnupg (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:48:09 Found package: gnupg-agent (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:48:09 Found package: gnupg2 (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:48:09 Found package: gpgv (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:48:09 Found package: grep (version: 2.25-1~16.04.1) +2021-01-07 17:48:09 Found package: groff-base (version: 1.22.3-7) +2021-01-07 17:48:09 Found package: grub-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:48:09 Found package: grub-efi-amd64 (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:48:09 Found package: grub-efi-amd64-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:48:09 Found package: grub-pc-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:48:09 Found package: grub2-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:48:09 Found package: gzip (version: 1.6-4ubuntu1) +2021-01-07 17:48:09 Found package: hc-utils (version: 0.0.3-1) +2021-01-07 17:48:09 Found package: host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: hostname (version: 3.16ubuntu2) +2021-01-07 17:48:09 Found package: htop (version: 2.0.1-1ubuntu1) +2021-01-07 17:48:09 Found package: ifupdown (version: 0.8.10ubuntu1.4) +2021-01-07 17:48:09 Found package: init (version: 1.29ubuntu4) +2021-01-07 17:48:09 Found package: init-system-helpers (version: 1.29ubuntu4) +2021-01-07 17:48:09 Found package: initramfs-tools (version: 0.122ubuntu8.17) +2021-01-07 17:48:09 Found package: initramfs-tools-bin (version: 0.122ubuntu8.17) +2021-01-07 17:48:09 Found package: initramfs-tools-core (version: 0.122ubuntu8.17) +2021-01-07 17:48:09 Found package: initscripts (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:48:09 Found package: insserv (version: 1.14.0-5ubuntu3) +2021-01-07 17:48:09 Found package: iproute2 (version: 4.3.0-1ubuntu3.16.04.5) +2021-01-07 17:48:09 Found package: iptables (version: 1.6.0-2ubuntu3) +2021-01-07 17:48:09 Found package: iputils-ping (version: 3:20121221-5ubuntu2) +2021-01-07 17:48:09 Found package: isc-dhcp-client (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:48:09 Found package: isc-dhcp-common (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:48:09 Found package: iso-codes (version: 3.65-1) +2021-01-07 17:48:09 Found package: kbd (version: 1.15.5-1ubuntu5) +2021-01-07 17:48:09 Found package: keyboard-configuration (version: 1.108ubuntu15.5) +2021-01-07 17:48:09 Found package: klibc-utils (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:48:09 Found package: kmod (version: 22-1ubuntu5.2) +2021-01-07 17:48:09 Found package: less (version: 481-2.1ubuntu0.2) +2021-01-07 17:48:09 Found package: libacl1:amd64 (version: 2.2.52-3) +2021-01-07 17:48:09 Found package: libapparmor1:amd64 (version: 2.10.95-0ubuntu2.11) +2021-01-07 17:48:09 Found package: libapt-inst2.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:48:09 Found package: libapt-pkg5.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:48:09 Found package: libasn1-8-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libasprintf0v5:amd64 (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:48:09 Found package: libassuan0:amd64 (version: 2.4.2-2) +2021-01-07 17:48:09 Found package: libatm1:amd64 (version: 1:2.5.1-1.5) +2021-01-07 17:48:09 Found package: libattr1:amd64 (version: 1:2.4.47-2) +2021-01-07 17:48:09 Found package: libaudit-common (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:48:09 Found package: libaudit1:amd64 (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:48:09 Found package: libbind9-140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libblkid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:09 Found package: libboost-iostreams1.58.0:amd64 (version: 1.58.0+dfsg-5ubuntu3.1) +2021-01-07 17:48:09 Found package: libbsd0:amd64 (version: 0.8.2-1ubuntu0.1) +2021-01-07 17:48:09 Found package: libbz2-1.0:amd64 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:48:09 Found package: libc-bin (version: 2.23-0ubuntu11.2) +2021-01-07 17:48:09 Found package: libc6:amd64 (version: 2.23-0ubuntu11.2) +2021-01-07 17:48:09 Found package: libcap-ng0:amd64 (version: 0.7.7-1) +2021-01-07 17:48:09 Found package: libcap2-bin (version: 1:2.24-12) +2021-01-07 17:48:09 Found package: libcap2:amd64 (version: 1:2.24-12) +2021-01-07 17:48:09 Found package: libcomerr2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:48:09 Found package: libcryptsetup4:amd64 (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:48:09 Found package: libcurl3-gnutls:amd64 (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:48:09 Found package: libcwidget3v5:amd64 (version: 0.5.17-4ubuntu2) +2021-01-07 17:48:09 Found package: libdb5.3:amd64 (version: 5.3.28-11ubuntu0.2) +2021-01-07 17:48:09 Found package: libdbus-1-3:amd64 (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:48:09 Found package: libdbus-glib-1-2:amd64 (version: 0.106-1) +2021-01-07 17:48:09 Found package: libdebconfclient0:amd64 (version: 0.198ubuntu1) +2021-01-07 17:48:09 Found package: libdevmapper-event1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:48:09 Found package: libdevmapper1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:48:09 Found package: libdns-export162 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libdns162:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libdrm-common (version: 2.4.91-2~16.04.1) +2021-01-07 17:48:09 Found package: libdrm2:amd64 (version: 2.4.91-2~16.04.1) +2021-01-07 17:48:09 Found package: libeatmydata1:amd64 (version: 105-3) +2021-01-07 17:48:09 Found package: libedit2:amd64 (version: 3.1-20150325-1ubuntu2) +2021-01-07 17:48:09 Found package: libefivar0:amd64 (version: 0.23-2) +2021-01-07 17:48:09 Found package: liberror-perl (version: 0.17-1.2) +2021-01-07 17:48:09 Found package: libestr0 (version: 0.1.10-1) +2021-01-07 17:48:09 Found package: libexpat1:amd64 (version: 2.1.0-7ubuntu0.16.04.5) +2021-01-07 17:48:09 Found package: libfdisk1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:09 Found package: libffi6:amd64 (version: 3.2.1-4) +2021-01-07 17:48:09 Found package: libfreetype6:amd64 (version: 2.6.1-0.1ubuntu2.5) +2021-01-07 17:48:09 Found package: libfribidi0:amd64 (version: 0.19.7-1) +2021-01-07 17:48:09 Found package: libfuse2:amd64 (version: 2.9.4-1ubuntu3.1) +2021-01-07 17:48:09 Found package: libgcc1:amd64 (version: 1:6.0.1-0ubuntu1) +2021-01-07 17:48:09 Found package: libgcrypt20:amd64 (version: 1.6.5-2ubuntu0.6) +2021-01-07 17:48:09 Found package: libgdbm3:amd64 (version: 1.8.3-13.1) +2021-01-07 17:48:09 Found package: libgeoip1:amd64 (version: 1.6.9-1) +2021-01-07 17:48:09 Found package: libgirepository-1.0-1:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:48:09 Found package: libglib2.0-0:amd64 (version: 2.48.2-0ubuntu4.6) +2021-01-07 17:48:09 Found package: libgmp10:amd64 (version: 2:6.1.0+dfsg-2) +2021-01-07 17:48:09 Found package: libgnutls-openssl27:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:48:09 Found package: libgnutls30:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:48:09 Found package: libgpg-error0:amd64 (version: 1.21-2ubuntu1) +2021-01-07 17:48:09 Found package: libgpm2:amd64 (version: 1.20.4-6.1) +2021-01-07 17:48:09 Found package: libgssapi-krb5-2:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:48:09 Found package: libgssapi3-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libhcrypto4-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libheimbase1-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libheimntlm0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libhogweed4:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:48:09 Found package: libhx509-5-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libicu55:amd64 (version: 55.1-7ubuntu0.5) +2021-01-07 17:48:09 Found package: libidn11:amd64 (version: 1.32-3ubuntu1.2) +2021-01-07 17:48:09 Found package: libisc-export160 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libisc160:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libisccc140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libisccfg140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: libjson-c2:amd64 (version: 0.11-4ubuntu2.6) +2021-01-07 17:48:09 Found package: libk5crypto3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:48:09 Found package: libkeyutils1:amd64 (version: 1.5.9-8ubuntu1) +2021-01-07 17:48:09 Found package: libklibc (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:48:09 Found package: libkmod2:amd64 (version: 22-1ubuntu5.2) +2021-01-07 17:48:09 Found package: libkrb5-26-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: libkrb5-3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:48:09 Found package: libkrb5support0:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:48:09 Found package: libksba8:amd64 (version: 1.3.3-1ubuntu0.16.04.1) +2021-01-07 17:48:09 Found package: libldap-2.4-2:amd64 (version: 2.4.42+dfsg-2ubuntu3.11) +2021-01-07 17:48:09 Found package: liblocale-gettext-perl (version: 1.07-1build1) +2021-01-07 17:48:09 Found package: liblvm2app2.2:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:48:09 Found package: liblvm2cmd2.02:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:48:09 Found package: liblwres141:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:48:09 Found package: liblz4-1:amd64 (version: 0.0~r131-2ubuntu2) +2021-01-07 17:48:09 Found package: liblzma5:amd64 (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:48:09 Found package: liblzo2-2:amd64 (version: 2.08-1.2) +2021-01-07 17:48:09 Found package: libmagic1:amd64 (version: 1:5.25-2ubuntu1.4) +2021-01-07 17:48:09 Found package: libmnl0:amd64 (version: 1.0.3-5) +2021-01-07 17:48:09 Found package: libmount1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:09 Found package: libmpdec2:amd64 (version: 2.4.2-1) +2021-01-07 17:48:09 Found package: libncurses5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:09 Found package: libncursesw5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:09 Found package: libnettle6:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:48:09 Found package: libnewt0.52:amd64 (version: 0.52.18-1ubuntu2) +2021-01-07 17:48:09 Found package: libnfnetlink0:amd64 (version: 1.0.1-3) +2021-01-07 17:48:09 Found package: libnih1:amd64 (version: 1.0.3-4.3ubuntu1) +2021-01-07 17:48:09 Found package: libnpth0:amd64 (version: 1.2-3) +2021-01-07 17:48:09 Found package: libp11-kit0:amd64 (version: 0.23.2-5~ubuntu16.04.1) +2021-01-07 17:48:09 Found package: libpam-modules-bin (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:48:09 Found package: libpam-modules:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:48:09 Found package: libpam-runtime (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:48:09 Found package: libpam-systemd:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:48:09 Found package: libpam0g:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:48:09 Found package: libpci3:amd64 (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:48:09 Found package: libpcre3:amd64 (version: 2:8.38-3.1) +2021-01-07 17:48:09 Found package: libperl5.22:amd64 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:48:09 Found package: libpipeline1:amd64 (version: 1.4.1-2) +2021-01-07 17:48:09 Found package: libplymouth4:amd64 (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:48:09 Found package: libpng12-0:amd64 (version: 1.2.54-1ubuntu1.1) +2021-01-07 17:48:09 Found package: libpopt0:amd64 (version: 1.16-10) +2021-01-07 17:48:09 Found package: libprocps4:amd64 (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:48:09 Found package: libpython3-stdlib:amd64 (version: 3.5.1-3) +2021-01-07 17:48:09 Found package: libpython3.5-minimal:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:48:09 Found package: libpython3.5-stdlib:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:48:09 Found package: libpython3.5:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:48:09 Found package: libreadline5:amd64 (version: 5.2+dfsg-3build1) +2021-01-07 17:48:09 Found package: libreadline6:amd64 (version: 6.3-8ubuntu2) +2021-01-07 17:48:09 Found package: libroken18-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:09 Found package: librtmp1:amd64 (version: 2.4+20151223.gitfa8646d-1ubuntu0.1) +2021-01-07 17:48:09 Found package: libsasl2-2:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:48:09 Found package: libsasl2-modules-db:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:48:09 Found package: libseccomp2:amd64 (version: 2.4.3-1ubuntu3.16.04.3) +2021-01-07 17:48:09 Found package: libselinux1:amd64 (version: 2.4-3build2) +2021-01-07 17:48:09 Found package: libsemanage-common (version: 2.3-1build3) +2021-01-07 17:48:09 Found package: libsemanage1:amd64 (version: 2.3-1build3) +2021-01-07 17:48:09 Found package: libsepol1:amd64 (version: 2.4-2) +2021-01-07 17:48:09 Found package: libsigc++-2.0-0v5:amd64 (version: 2.6.2-1) +2021-01-07 17:48:09 Found package: libslang2:amd64 (version: 2.3.0-2ubuntu1.1) +2021-01-07 17:48:09 Found package: libsmartcols1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:09 Found package: libsqlite3-0:amd64 (version: 3.11.0-1ubuntu1.5) +2021-01-07 17:48:09 Found package: libss2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:48:10 Found package: libssl1.0.0:amd64 (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:48:10 Found package: libstdc++6:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:48:10 Found package: libsystemd0:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:48:10 Found package: libtasn1-6:amd64 (version: 4.7-3ubuntu0.16.04.3) +2021-01-07 17:48:10 Found package: libtext-charwidth-perl (version: 0.04-7build5) +2021-01-07 17:48:10 Found package: libtext-iconv-perl (version: 1.7-5build4) +2021-01-07 17:48:10 Found package: libtext-wrapi18n-perl (version: 0.06-7.1) +2021-01-07 17:48:10 Found package: libtinfo5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:10 Found package: libudev1:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:48:10 Found package: libusb-0.1-4:amd64 (version: 2:0.1.12-28) +2021-01-07 17:48:10 Found package: libusb-1.0-0:amd64 (version: 2:1.0.20-1) +2021-01-07 17:48:10 Found package: libustr-1.0-1:amd64 (version: 1.0.4-5) +2021-01-07 17:48:10 Found package: libuuid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:10 Found package: libwind0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:48:10 Found package: libwrap0:amd64 (version: 7.6.q-25) +2021-01-07 17:48:10 Found package: libxapian22v5:amd64 (version: 1.2.22-2) +2021-01-07 17:48:10 Found package: libxml2:amd64 (version: 2.9.3+dfsg1-1ubuntu0.7) +2021-01-07 17:48:10 Found package: libxtables11:amd64 (version: 1.6.0-2ubuntu3) +2021-01-07 17:48:10 Found package: libyaml-0-2:amd64 (version: 0.1.6-3) +2021-01-07 17:48:10 Found package: linux-base (version: 4.5ubuntu1.2~16.04.1) +2021-01-07 17:48:10 Found package: linux-firmware (version: 1.157.23) +2021-01-07 17:48:10 Found package: linux-image-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:48:10 Found package: linux-image-virtual (version: 4.4.0.197.203) +2021-01-07 17:48:10 Found package: linux-modules-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:48:10 Found package: locales (version: 2.23-0ubuntu11.2) +2021-01-07 17:48:10 Found package: login (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:48:10 Found package: logrotate (version: 3.8.7-2ubuntu2.16.04.2) +2021-01-07 17:48:10 Found package: lsb-base (version: 9.20160110ubuntu0.2) +2021-01-07 17:48:10 Found package: lsb-release (version: 9.20160110ubuntu0.2) +2021-01-07 17:48:10 Found package: lvm2 (version: 2.02.133-1ubuntu10) +2021-01-07 17:48:10 Found package: makedev (version: 2.3.1-93ubuntu2~ubuntu16.04.1) +2021-01-07 17:48:10 Found package: man-db (version: 2.7.5-1) +2021-01-07 17:48:10 Found package: mawk (version: 1.3.3-17ubuntu2) +2021-01-07 17:48:10 Found package: mdadm (version: 3.3-2ubuntu7.6) +2021-01-07 17:48:10 Found package: mime-support (version: 3.59ubuntu1) +2021-01-07 17:48:10 Found package: mokutil (version: 0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1) +2021-01-07 17:48:10 Found package: mount (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:10 Found package: mtr-tiny (version: 0.86-1ubuntu0.1) +2021-01-07 17:48:10 Found package: multiarch-support (version: 2.23-0ubuntu11.2) +2021-01-07 17:48:10 Found package: nano (version: 2.5.3-2ubuntu2) +2021-01-07 17:48:10 Found package: ncurses-base (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:10 Found package: ncurses-bin (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:10 Found package: ncurses-term (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:48:10 Found package: net-tools (version: 1.60-26ubuntu1) +2021-01-07 17:48:10 Found package: netbase (version: 5.3) +2021-01-07 17:48:10 Found package: netcat-openbsd (version: 1.105-7ubuntu1) +2021-01-07 17:48:10 Found package: openssh-client (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:48:10 Found package: openssh-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:48:10 Found package: openssh-sftp-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:48:10 Found package: openssl (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:48:10 Found package: passwd (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:48:10 Found package: patch (version: 2.7.5-1ubuntu0.16.04.2) +2021-01-07 17:48:10 Found package: pciutils (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:48:10 Found package: perl (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:48:10 Found package: perl-base (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:48:10 Found package: perl-modules-5.22 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:48:10 Found package: pinentry-curses (version: 0.9.7-3) +2021-01-07 17:48:10 Found package: plymouth (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:48:10 Found package: pollinate (version: 4.33-0ubuntu1~16.04.1) +2021-01-07 17:48:10 Found package: powermgmt-base (version: 1.31+nmu1) +2021-01-07 17:48:10 Found package: procps (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:48:10 Found package: python-apt-common (version: 1.1.0~beta1ubuntu0.16.04.10) +2021-01-07 17:48:10 Found package: python3 (version: 3.5.1-3) +2021-01-07 17:48:10 Found package: python3-apt (version: 1.1.0~beta1ubuntu0.16.04.10) +2021-01-07 17:48:10 Found package: python3-blinker (version: 1.3.dfsg2-1build1) +2021-01-07 17:48:10 Found package: python3-cffi-backend (version: 1.5.2-1ubuntu1) +2021-01-07 17:48:10 Found package: python3-chardet (version: 2.3.0-2) +2021-01-07 17:48:10 Found package: python3-configobj (version: 5.0.6-2) +2021-01-07 17:48:10 Found package: python3-cryptography (version: 1.2.3-1ubuntu0.3) +2021-01-07 17:48:10 Found package: python3-dbus (version: 1.2.0-3) +2021-01-07 17:48:10 Found package: python3-gi (version: 3.20.0-0ubuntu1) +2021-01-07 17:48:10 Found package: python3-idna (version: 2.0-3) +2021-01-07 17:48:10 Found package: python3-jinja2 (version: 2.8-1ubuntu0.1) +2021-01-07 17:48:10 Found package: python3-json-pointer (version: 1.9-3) +2021-01-07 17:48:10 Found package: python3-jsonpatch (version: 1.19-3) +2021-01-07 17:48:10 Found package: python3-jwt (version: 1.3.0-1ubuntu0.1) +2021-01-07 17:48:10 Found package: python3-markupsafe (version: 0.23-2build2) +2021-01-07 17:48:10 Found package: python3-minimal (version: 3.5.1-3) +2021-01-07 17:48:10 Found package: python3-oauthlib (version: 1.0.3-1) +2021-01-07 17:48:10 Found package: python3-pkg-resources (version: 20.7.0-1) +2021-01-07 17:48:10 Found package: python3-pyasn1 (version: 0.1.9-1) +2021-01-07 17:48:10 Found package: python3-pycurl (version: 7.43.0-1ubuntu1) +2021-01-07 17:48:10 Found package: python3-requests (version: 2.9.1-3ubuntu0.1) +2021-01-07 17:48:10 Found package: python3-serial (version: 3.0.1-1) +2021-01-07 17:48:10 Found package: python3-six (version: 1.10.0-3) +2021-01-07 17:48:10 Found package: python3-software-properties (version: 0.96.20.10) +2021-01-07 17:48:10 Found package: python3-urllib3 (version: 1.13.1-2ubuntu0.16.04.4) +2021-01-07 17:48:10 Found package: python3-yaml (version: 3.11-3build1) +2021-01-07 17:48:10 Found package: python3.5 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:48:10 Found package: python3.5-minimal (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:48:10 Found package: qemu-guest-agent (version: 1:2.5+dfsg-5ubuntu10.48) +2021-01-07 17:48:10 Found package: readline-common (version: 6.3-8ubuntu2) +2021-01-07 17:48:10 Found package: resolvconf (version: 1.78ubuntu7) +2021-01-07 17:48:10 Found package: rsync (version: 3.1.1-3ubuntu1.3) +2021-01-07 17:48:10 Found package: rsyslog (version: 8.16.0-1ubuntu3.1) +2021-01-07 17:48:10 Found package: sbsigntool (version: 0.6-0ubuntu10.1) +2021-01-07 17:48:10 Found package: sed (version: 4.2.2-7) +2021-01-07 17:48:10 Found package: sensible-utils (version: 0.0.9ubuntu0.16.04.1) +2021-01-07 17:48:10 Found package: shim (version: 15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:48:10 Found package: shim-signed (version: 1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:48:10 Found package: software-properties-common (version: 0.96.20.10) +2021-01-07 17:48:10 Found package: ssh-import-id (version: 5.5-0ubuntu1) +2021-01-07 17:48:10 Found package: sudo (version: 1.8.16-0ubuntu1.9) +2021-01-07 17:48:10 Found package: systemd (version: 229-4ubuntu21.29) +2021-01-07 17:48:10 Found package: systemd-sysv (version: 229-4ubuntu21.29) +2021-01-07 17:48:10 Found package: sysv-rc (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:48:10 Found package: sysvinit-utils (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:48:10 Found package: tar (version: 1.28-2.1ubuntu0.1) +2021-01-07 17:48:10 Found package: tasksel (version: 3.34ubuntu3) +2021-01-07 17:48:10 Found package: tasksel-data (version: 3.34ubuntu3) +2021-01-07 17:48:10 Found package: tzdata (version: 2020d-0ubuntu0.16.04) +2021-01-07 17:48:10 Found package: ubuntu-advantage-tools (version: 10ubuntu0.16.04.1) +2021-01-07 17:48:10 Found package: ubuntu-keyring (version: 2012.05.19.1) +2021-01-07 17:48:10 Found package: ucf (version: 3.0036) +2021-01-07 17:48:10 Found package: udev (version: 229-4ubuntu21.29) +2021-01-07 17:48:10 Found package: unattended-upgrades (version: 1.1ubuntu1.18.04.7~16.04.6) +2021-01-07 17:48:10 Found package: ureadahead (version: 0.100.0-19.1) +2021-01-07 17:48:10 Found package: usbutils (version: 1:007-4) +2021-01-07 17:48:10 Found package: util-linux (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:48:10 Found package: vim (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:48:10 Found package: vim-common (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:48:10 Found package: vim-runtime (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:48:10 Found package: vim-tiny (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:48:10 Found package: wget (version: 1.17.1-1ubuntu1.5) +2021-01-07 17:48:10 Found package: whiptail (version: 0.52.18-1ubuntu2) +2021-01-07 17:48:10 Found package: xfsprogs (version: 4.3.0+nmu1ubuntu1.1) +2021-01-07 17:48:10 Found package: xkb-data (version: 2.16-1ubuntu1) +2021-01-07 17:48:10 Found package: xz-utils (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:48:10 Found package: zlib1g:amd64 (version: 1:1.2.8.dfsg-2ubuntu4.3) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Performing test ID PKGS-7346 (Search unpurged packages on system) +2021-01-07 17:48:10 Test: Querying dpkg -l to get unpurged packages +2021-01-07 17:48:10 Result: no packages found with left overs +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7348 (Check for old distfiles) +2021-01-07 17:48:10 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7350 (Checking for installed packages with DNF utility) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7352 (Checking for security updates with DNF utility) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7354 (Checking package database integrity) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7366 (Checking for debsecan utility) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Performing test ID PKGS-7370 (Checking for debsums utility) +2021-01-07 17:48:10 Result: debsums utility is not installed. +2021-01-07 17:48:10 Hardening: assigned partial number of hardening points (0 of 2). Currently having 106 points (out of 149) +2021-01-07 17:48:10 Suggestion: Install debsums utility for the verification of packages with known good database. [test:PKGS-7370] [details:-] [solution:-] +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7378 (Query portmaster for port upgrades) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7380 (Check for vulnerable NetBSD packages) +2021-01-07 17:48:10 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7381 (Check for vulnerable FreeBSD packages with pkg) +2021-01-07 17:48:10 Reason to skip: pkg tool not available +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7382 (Check for vulnerable FreeBSD packages with portaudit) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7383 (Check for YUM package update management) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7384 (Check for YUM utils package) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7386 (Check for YUM security package) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Skipped test PKGS-7387 (Check for GPG signing in YUM security package) +2021-01-07 17:48:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Performing test ID PKGS-7388 (Check security repository in apt sources.list file) +2021-01-07 17:48:10 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list file +2021-01-07 17:48:10 Result: Found security repository in /etc/apt/sources.list +2021-01-07 17:48:10 Output: deb http://security.ubuntu.com/ubuntu xenial-security main restricted +2021-01-07 17:48:10 Output: deb http://security.ubuntu.com/ubuntu xenial-security universe +2021-01-07 17:48:10 Output: deb http://security.ubuntu.com/ubuntu xenial-security multiverse +2021-01-07 17:48:10 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list.d directory +2021-01-07 17:48:10 Result: Found security repository in one or more files in directory /etc/apt/sources.list.d +2021-01-07 17:48:10 Output: /etc/apt/sources.list.d/hetzner-mirror.list:deb http://mirror.hetzner.de/ubuntu/packages xenial-security main restricted universe multiverse +2021-01-07 17:48:10 Result: security repository was found +2021-01-07 17:48:10 Hardening: assigned maximum number of hardening points for this item (3). Currently having 109 points (out of 152) +2021-01-07 17:48:10 ==== +2021-01-07 17:48:10 Performing test ID PKGS-7390 (Check Ubuntu database consistency) +2021-01-07 17:48:10 Test: Package database consistency by running apt-get check +2021-01-07 17:48:11 Result: package database seems to be consistent. +2021-01-07 17:48:11 ==== +2021-01-07 17:48:11 Performing test ID PKGS-7392 (Check for Debian/Ubuntu security updates) +2021-01-07 17:48:11 Action: updating package repository with apt-get +2021-01-07 17:48:15 Result: apt-get finished +2021-01-07 17:48:15 Test: Checking if /usr/lib/update-notifier/apt-check exists +2021-01-07 17:48:15 Result: apt-check (update-notifier-common) not found +2021-01-07 17:48:16 Result: found vulnerable package(s) via apt-get (-security channel) +2021-01-07 17:48:16 Found vulnerable package: libp11-kit0 +2021-01-07 17:48:16 Found vulnerable package: python-apt-common +2021-01-07 17:48:16 Found vulnerable package: python3-apt +2021-01-07 17:48:16 Warning: Found one or more vulnerable packages. [test:PKGS-7392] [details:-] [solution:-] +2021-01-07 17:48:16 Suggestion: Update your system with apt-get update, apt-get upgrade, apt-get dist-upgrade and/or unattended-upgrades [test:PKGS-7392] [details:-] [solution:-] +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PKGS-7393 (Check for Gentoo vulnerable packages) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PKGS-7394 (Check for Ubuntu updates) +2021-01-07 17:48:16 Test: checking /usr/bin/apt-show-versions +2021-01-07 17:48:16 Result: /usr/bin/apt-show-versions not found +2021-01-07 17:48:16 Suggestion: Install package apt-show-versions for patch management purposes [test:PKGS-7394] [details:-] [solution:-] +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PKGS-7398 (Check for package audit tool) +2021-01-07 17:48:16 Test: checking for package audit tool +2021-01-07 17:48:16 Result: found package audit tool: apt-get +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PKGS-7410 (Count installed kernel packages) +2021-01-07 17:48:16 Test: Checking how many kernel packages are installed +2021-01-07 17:48:16 Result: found 1 kernel packages on the system, which is fine +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PKGS-7420 (Detect toolkit to automatically download and apply upgrades) +2021-01-07 17:48:16 Result: found unattended-upgrade +2021-01-07 17:48:16 Hardening: assigned maximum number of hardening points for this item (5). Currently having 114 points (out of 157) +2021-01-07 17:48:16 Security check: file is normal +2021-01-07 17:48:16 Checking permissions of /root/scans/lynis/include/tests_networking +2021-01-07 17:48:16 File permissions are OK +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Action: Performing tests from category: Networking +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-2400 (Hostname length and value check) +2021-01-07 17:48:16 Result: FQDN is defined and not longer than 253 characters (14 characters) +2021-01-07 17:48:16 Result: hostnamed is defined and not longer than 63 characters +2021-01-07 17:48:16 Result: good, no unexpected characters discovered in hostname +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-2600 (Checking IPv6 configuration) +2021-01-07 17:48:16 Result: IPV6 mode is auto +2021-01-07 17:48:16 Result: IPv6 only configuration: NO +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-2704 (Basic nameserver configuration tests) +2021-01-07 17:48:16 Test: Checking /etc/resolv.conf file +2021-01-07 17:48:16 Result: Found /etc/resolv.conf file +2021-01-07 17:48:16 Test: Querying nameservers +2021-01-07 17:48:16 Found nameserver: 213.133.99.99 +2021-01-07 17:48:16 Result: Nameserver test for 213.133.99.99 skipped, 'dig' not installed +2021-01-07 17:48:16 Found nameserver: 213.133.98.98 +2021-01-07 17:48:16 Result: Nameserver test for 213.133.98.98 skipped, 'dig' not installed +2021-01-07 17:48:16 Found nameserver: 213.133.100.100 +2021-01-07 17:48:16 Result: Nameserver test for 213.133.100.100 skipped, 'dig' not installed +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-2705 (Check availability two nameservers) +2021-01-07 17:48:16 Result: dig not installed, test can't be fully performed +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-2706 (Check systemd-resolved and upstream DNSSEC status) +2021-01-07 17:48:16 Result: DNSSEC not supported by systemd-resolved or upstream DNS servers +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3001 (Find default gateway (route)) +2021-01-07 17:48:16 Test: Searching default gateway(s) +2021-01-07 17:48:16 Result: Found default gateway 172.31.1.1 +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3004 (Search for available network interfaces) +2021-01-07 17:48:16 Found network interface: lo +2021-01-07 17:48:16 Found network interface: eth0 +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3006 (Get network MAC addresses) +2021-01-07 17:48:16 Found MAC address: 96:00:00:8b:fc:bd +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3008 (Get network IP addresses) +2021-01-07 17:48:16 Found IPv4 address: 116.203.241.83 +2021-01-07 17:48:16 Found IPv4 address: 127.0.0.1 +2021-01-07 17:48:16 Found IPv6 address: 2a01:4f8:c2c:410b::1/64 +2021-01-07 17:48:16 Found IPv6 address: fe80::9400:ff:fe8b:fcbd/64 +2021-01-07 17:48:16 Found IPv6 address: ::1/128 +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3012 (Check listening ports) +2021-01-07 17:48:16 Test: Retrieving ss information to find listening ports +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test NETW-3014 (Checking promiscuous interfaces (BSD)) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3015 (Checking promiscuous interfaces (Linux)) +2021-01-07 17:48:16 Test: Using ip binary to retrieve network interfaces +2021-01-07 17:48:16 Test: Checking all interfaces to discover any with promiscuous mode enabled +2021-01-07 17:48:16 Result: No promiscuous interfaces found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3028 (Checking connections in WAIT state) +2021-01-07 17:48:16 Test: Using netstat for check for connections in WAIT state +2021-01-07 17:48:16 Result: currently 7 connections are in a waiting state (max configured: 5000). +2021-01-07 17:48:16 Result: 7 connections are in WAIT state +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3030 (Checking DHCP client status) +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'dhclient' found (947 ) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3032 (Checking for ARP monitoring software) +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'addrwatch' not found +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'arpwatch' not found +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'arpon' not found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID NETW-3200 (Determine available network protocols) +2021-01-07 17:48:16 Test: checking the status of some network protocols that typically are not used +2021-01-07 17:48:16 Test: now checking module 'dccp' +2021-01-07 17:48:16 Suggestion: Determine if protocol 'dccp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:48:16 Test: now checking module 'sctp' +2021-01-07 17:48:16 Suggestion: Determine if protocol 'sctp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:48:16 Test: now checking module 'rds' +2021-01-07 17:48:16 Suggestion: Determine if protocol 'rds' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:48:16 Test: now checking module 'tipc' +2021-01-07 17:48:16 Suggestion: Determine if protocol 'tipc' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:48:16 Security check: file is normal +2021-01-07 17:48:16 Checking permissions of /root/scans/lynis/include/tests_printers_spoolers +2021-01-07 17:48:16 File permissions are OK +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Action: Performing tests from category: Printers and Spools +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2302 (Check for printcap consistency) +2021-01-07 17:48:16 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PRNT-2304 (Check cupsd status) +2021-01-07 17:48:16 Test: Checking cupsd status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'cupsd' not found +2021-01-07 17:48:16 Result: cups daemon not running, cups daemon tests skipped +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2306 (Check CUPSd configuration file) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2307 (Check CUPSd configuration file permissions) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2308 (Check CUPSd network configuration) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID PRNT-2314 (Check lpd status) +2021-01-07 17:48:16 Test: Checking lpd status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'lpd' not found +2021-01-07 17:48:16 Result: lp daemon not running +2021-01-07 17:48:16 Hardening: assigned maximum number of hardening points for this item (4). Currently having 118 points (out of 161) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2316 (Checking /etc/qconfig file) +2021-01-07 17:48:16 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2418 (Checking qdaemon printer spooler status) +2021-01-07 17:48:16 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test PRNT-2420 (Checking old print jobs) +2021-01-07 17:48:16 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:48:16 Security check: file is normal +2021-01-07 17:48:16 Checking permissions of /root/scans/lynis/include/tests_mail_messaging +2021-01-07 17:48:16 File permissions are OK +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Action: Performing tests from category: Software: e-mail and messaging +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8802 (Check Exim status) +2021-01-07 17:48:16 Test: check Exim status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'exim4' not found +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'exim' not found +2021-01-07 17:48:16 Result: no running Exim processes found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test MAIL-8804 (Exim configuration options) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8814 (Check postfix process status) +2021-01-07 17:48:16 Test: check Postfix status +2021-01-07 17:48:16 Result: no running Postfix processes found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test MAIL-8816 (Check Postfix configuration) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test MAIL-8817 (Check Postfix configuration errors) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test MAIL-8818 (Check Postfix configuration: banner) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8820 (Postfix configuration scan) +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8838 (Check dovecot process) +2021-01-07 17:48:16 Test: check dovecot status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'dovecot' not found +2021-01-07 17:48:16 Result: dovecot not found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8860 (Check Qmail status) +2021-01-07 17:48:16 Test: check Qmail status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'qmail-smtpd' not found +2021-01-07 17:48:16 Result: no running Qmail processes found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID MAIL-8880 (Check Sendmail status) +2021-01-07 17:48:16 Test: check sendmail status +2021-01-07 17:48:16 Performing pgrep scan without uid +2021-01-07 17:48:16 IsRunning: process 'sendmail' not found +2021-01-07 17:48:16 Result: no running Sendmail processes found +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Skipped test MAIL-8920 (Check OpenSMTPD status) +2021-01-07 17:48:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:16 Security check: file is normal +2021-01-07 17:48:16 Checking permissions of /root/scans/lynis/include/tests_firewalls +2021-01-07 17:48:16 File permissions are OK +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Action: Performing tests from category: Software: firewalls +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID FIRE-4502 (Check iptables kernel module) +2021-01-07 17:48:16 Result: Found iptables in loaded kernel modules +2021-01-07 17:48:16 Found module: ip_tables +2021-01-07 17:48:16 ==== +2021-01-07 17:48:16 Performing test ID FIRE-4508 (Check used policies of iptables chains) +2021-01-07 17:48:16 Test: gathering information from table filter +2021-01-07 17:48:17 Result: iptables -- policy is . +2021-01-07 17:48:17 Result: +2021-01-07 17:48:17 Result: iptables filter -- INPUTACCEPTFORWARDACCEPTOUTPUTACCEPT policy is . +2021-01-07 17:48:17 Result: +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4512 (Check iptables for empty ruleset) +2021-01-07 17:48:17 Result: iptables ruleset seems to be empty (found 0 rules) +2021-01-07 17:48:17 Warning: iptables module(s) loaded, but no rules active [test:FIRE-4512] [details:-] [solution:-] +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4513 (Check iptables for unused rules) +2021-01-07 17:48:17 Result: There are no unused rules present +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4518 (Check pf firewall components) +2021-01-07 17:48:17 Reason to skip: No /dev/pf device +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4520 (Check pf configuration consistency) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4524 (Check for CSF presence) +2021-01-07 17:48:17 Test: check /etc/csf/csf.conf +2021-01-07 17:48:17 Result: /etc/csf/csf.conf does NOT exist +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4526 (Check ipf status) +2021-01-07 17:48:17 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4530 (Check IPFW status) +2021-01-07 17:48:17 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4532 (Check macOS application firewall) +2021-01-07 17:48:17 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4534 (Check for presence of outbound firewalls on macOS) +2021-01-07 17:48:17 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4536 (Check nftables status) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4538 (Check nftables basic configuration) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test FIRE-4540 (Check for empty nftables configuration) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4586 (Check firewall logging) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4590 (Check firewall status) +2021-01-07 17:48:17 Result: host based firewall or packet filter is active +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (5). Currently having 123 points (out of 166) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID FIRE-4594 (Check for APF presence) +2021-01-07 17:48:17 Test: check /etc/apf/conf.apf +2021-01-07 17:48:17 Result: /etc/apf/conf.apf does NOT exist +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_webservers +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: Software: webserver +2021-01-07 17:48:17 Action: created temporary file /tmp/lynis.bht7Td4W59 +2021-01-07 17:48:17 Action: created temporary file /tmp/lynis.D8kqFK73JM +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID HTTP-6622 (Checking Apache presence) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6624 (Testing main Apache configuration file) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6626 (Testing other Apache configuration file) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6632 (Determining all available Apache modules) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6640 (Determining existence of specific Apache modules) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6641 (Determining existence of specific Apache modules) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6643 (Determining existence of specific Apache modules) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID HTTP-6702 (Check nginx process) +2021-01-07 17:48:17 Test: searching running nginx process +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'nginx' not found +2021-01-07 17:48:17 Result: no running nginx process found +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6704 (Check nginx configuration file) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6706 (Check for additional nginx configuration files) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6708 (Check discovered nginx configuration settings) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6710 (Check nginx SSL configuration settings) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6712 (Check nginx access logging) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6714 (Check for missing error logs in nginx) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6716 (Check for debug mode on error log in nginx) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test HTTP-6720 (Check Nginx log files) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_ssh +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: SSH Support +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SSH-7402 (Check for running SSH daemon) +2021-01-07 17:48:17 Test: Searching for a SSH daemon +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'sshd' found (1333 1380 ) +2021-01-07 17:48:17 Action: created temporary file /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SSH-7404 (Check SSH daemon file location) +2021-01-07 17:48:17 Test: searching for sshd_config file +2021-01-07 17:48:17 Result: /etc/ssh/sshd_config exists +2021-01-07 17:48:17 Test: check if we can access /etc/ssh/sshd_config (escaped: /etc/ssh/sshd_config) +2021-01-07 17:48:17 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:17 Result: file /etc/ssh/sshd_config is readable (or directory accessible). +2021-01-07 17:48:17 Result: using last found configuration file: /etc/ssh/sshd_config +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SSH-7406 (Determine OpenSSH version) +2021-01-07 17:48:17 Result: discovered OpenSSH version is 7.2 +2021-01-07 17:48:17 Result: OpenSSH major version: 7 +2021-01-07 17:48:17 Result: OpenSSH minor version: 2 +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SSH-7408 (Check SSH specific defined options) +2021-01-07 17:48:17 Test: Checking specific defined options in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: added additional options for OpenSSH < 7.4 +2021-01-07 17:48:17 Result: added additional options for OpenSSH < 7.5 +2021-01-07 17:48:17 Test: Checking AllowTcpForwarding in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option AllowTcpForwarding found +2021-01-07 17:48:17 Result: Option AllowTcpForwarding value is YES +2021-01-07 17:48:17 Result: OpenSSH option AllowTcpForwarding is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowTcpForwarding (set YES to NO)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 123 points (out of 169) +2021-01-07 17:48:17 Test: Checking ClientAliveCountMax in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option ClientAliveCountMax found +2021-01-07 17:48:17 Result: Option ClientAliveCountMax value is 3 +2021-01-07 17:48:17 Result: OpenSSH option ClientAliveCountMax is configured reasonably +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:ClientAliveCountMax (set 3 to 2)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (1 of 3). Currently having 124 points (out of 172) +2021-01-07 17:48:17 Test: Checking ClientAliveInterval in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option ClientAliveInterval found +2021-01-07 17:48:17 Result: Option ClientAliveInterval value is 0 +2021-01-07 17:48:17 Result: OpenSSH option ClientAliveInterval is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 127 points (out of 175) +2021-01-07 17:48:17 Test: Checking Compression in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option Compression found +2021-01-07 17:48:17 Result: Option Compression value is YES +2021-01-07 17:48:17 Result: OpenSSH option Compression is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Compression (set YES to NO)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 127 points (out of 178) +2021-01-07 17:48:17 Test: Checking FingerprintHash in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option FingerprintHash found +2021-01-07 17:48:17 Result: Option FingerprintHash value is SHA256 +2021-01-07 17:48:17 Result: OpenSSH option FingerprintHash is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 130 points (out of 181) +2021-01-07 17:48:17 Test: Checking GatewayPorts in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option GatewayPorts found +2021-01-07 17:48:17 Result: Option GatewayPorts value is NO +2021-01-07 17:48:17 Result: OpenSSH option GatewayPorts is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 133 points (out of 184) +2021-01-07 17:48:17 Test: Checking IgnoreRhosts in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option IgnoreRhosts found +2021-01-07 17:48:17 Result: Option IgnoreRhosts value is YES +2021-01-07 17:48:17 Result: OpenSSH option IgnoreRhosts is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 136 points (out of 187) +2021-01-07 17:48:17 Test: Checking LoginGraceTime in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option LoginGraceTime found +2021-01-07 17:48:17 Result: Option LoginGraceTime value is 120 +2021-01-07 17:48:17 Result: OpenSSH option LoginGraceTime is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 139 points (out of 190) +2021-01-07 17:48:17 Test: Checking LogLevel in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option LogLevel found +2021-01-07 17:48:17 Result: Option LogLevel value is INFO +2021-01-07 17:48:17 Result: OpenSSH option LogLevel is configured reasonably +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:LogLevel (set INFO to VERBOSE)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (1 of 3). Currently having 140 points (out of 193) +2021-01-07 17:48:17 Test: Checking MaxAuthTries in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option MaxAuthTries found +2021-01-07 17:48:17 Result: Option MaxAuthTries value is 6 +2021-01-07 17:48:17 Result: OpenSSH option MaxAuthTries is configured reasonably +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxAuthTries (set 6 to 3)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (1 of 3). Currently having 141 points (out of 196) +2021-01-07 17:48:17 Test: Checking MaxSessions in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option MaxSessions found +2021-01-07 17:48:17 Result: Option MaxSessions value is 10 +2021-01-07 17:48:17 Result: OpenSSH option MaxSessions is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxSessions (set 10 to 2)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 141 points (out of 199) +2021-01-07 17:48:17 Test: Checking PermitRootLogin in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option PermitRootLogin found +2021-01-07 17:48:17 Result: Option PermitRootLogin value is YES +2021-01-07 17:48:17 Result: OpenSSH option PermitRootLogin is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 141 points (out of 202) +2021-01-07 17:48:17 Test: Checking PermitUserEnvironment in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option PermitUserEnvironment found +2021-01-07 17:48:17 Result: Option PermitUserEnvironment value is NO +2021-01-07 17:48:17 Result: OpenSSH option PermitUserEnvironment is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 144 points (out of 205) +2021-01-07 17:48:17 Test: Checking PermitTunnel in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option PermitTunnel found +2021-01-07 17:48:17 Result: Option PermitTunnel value is NO +2021-01-07 17:48:17 Result: OpenSSH option PermitTunnel is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 147 points (out of 208) +2021-01-07 17:48:17 Test: Checking Port in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option Port found +2021-01-07 17:48:17 Result: Option Port value is 22 +2021-01-07 17:48:17 Result: OpenSSH option Port is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Port (set 22 to )] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 147 points (out of 211) +2021-01-07 17:48:17 Test: Checking PrintLastLog in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option PrintLastLog found +2021-01-07 17:48:17 Result: Option PrintLastLog value is YES +2021-01-07 17:48:17 Result: OpenSSH option PrintLastLog is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 150 points (out of 214) +2021-01-07 17:48:17 Test: Checking StrictModes in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option StrictModes found +2021-01-07 17:48:17 Result: Option StrictModes value is YES +2021-01-07 17:48:17 Result: OpenSSH option StrictModes is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 153 points (out of 217) +2021-01-07 17:48:17 Test: Checking TCPKeepAlive in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option TCPKeepAlive found +2021-01-07 17:48:17 Result: Option TCPKeepAlive value is YES +2021-01-07 17:48:17 Result: OpenSSH option TCPKeepAlive is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:TCPKeepAlive (set YES to NO)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 153 points (out of 220) +2021-01-07 17:48:17 Test: Checking UseDNS in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option UseDNS found +2021-01-07 17:48:17 Result: Option UseDNS value is NO +2021-01-07 17:48:17 Result: OpenSSH option UseDNS is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 156 points (out of 223) +2021-01-07 17:48:17 Test: Checking X11Forwarding in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option X11Forwarding found +2021-01-07 17:48:17 Result: Option X11Forwarding value is YES +2021-01-07 17:48:17 Result: OpenSSH option X11Forwarding is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:X11Forwarding (set YES to NO)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 156 points (out of 226) +2021-01-07 17:48:17 Test: Checking AllowAgentForwarding in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option AllowAgentForwarding found +2021-01-07 17:48:17 Result: Option AllowAgentForwarding value is YES +2021-01-07 17:48:17 Result: OpenSSH option AllowAgentForwarding is in a weak configuration state and should be fixed +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowAgentForwarding (set YES to NO)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 3). Currently having 156 points (out of 229) +2021-01-07 17:48:17 Test: Checking Protocol in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option Protocol found +2021-01-07 17:48:17 Result: Option Protocol value is 2 +2021-01-07 17:48:17 Result: OpenSSH option Protocol is configured very well +2021-01-07 17:48:17 Hardening: assigned maximum number of hardening points for this item (3). Currently having 159 points (out of 232) +2021-01-07 17:48:17 Test: Checking UsePrivilegeSeparation in /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:17 Result: Option UsePrivilegeSeparation found +2021-01-07 17:48:17 Result: Option UsePrivilegeSeparation value is YES +2021-01-07 17:48:17 Result: OpenSSH option UsePrivilegeSeparation is configured reasonably +2021-01-07 17:48:17 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:UsePrivilegeSeparation (set YES to SANDBOX)] [solution:-] +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (1 of 3). Currently having 160 points (out of 235) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups) +2021-01-07 17:48:17 Result: AllowUsers is not set +2021-01-07 17:48:17 Result: AllowGroups is not set +2021-01-07 17:48:17 Result: SSH has no specific user or group limitation. Most likely all valid users can SSH to this machine. +2021-01-07 17:48:17 Hardening: assigned partial number of hardening points (0 of 1). Currently having 160 points (out of 236) +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_snmp +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: SNMP Support +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID SNMP-3302 (Check for running SNMP daemon) +2021-01-07 17:48:17 Test: Searching for a SNMP daemon +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'snmpd' not found +2021-01-07 17:48:17 Result: No running SNMP daemon found +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test SNMP-3304 (Check SNMP daemon file location) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test SNMP-3306 (Check SNMP communities) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_databases +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: Databases +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1804 (Checking active MySQL process) +2021-01-07 17:48:17 Result: MySQL process not active +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1816 (Checking MySQL root password) +2021-01-07 17:48:17 Reason to skip: MySQL not installed, or not running +2021-01-07 17:48:17 Test skipped, MySQL daemon not running or no MySQL client available +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1818 (Check status of MongoDB server) +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'mongod' not found +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1820 (Check for authorization in MongoDB) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1826 (Checking active PostgreSQL processes) +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'postgres:' not found +2021-01-07 17:48:17 Result: PostgreSQL process not active +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1828 (Test PostgreSQL configuration) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1840 (Checking active Oracle processes) +2021-01-07 17:48:17 Result: Oracle process(es) not active +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1860 (Checking active DB2 instances) +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'db2sysc' not found +2021-01-07 17:48:17 Result: No DB2 instances are running +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID DBS-1880 (Check for active Redis server) +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'redis-server' not found +2021-01-07 17:48:17 Result: No Redis processes are running +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1882 (Redis configuration file) +2021-01-07 17:48:17 Reason to skip: Redis not running +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1884 (Redis: requirepass option configured) +2021-01-07 17:48:17 Reason to skip: Redis not running, or no configuration file found +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1886 (Redis: rename-command CONFIG used) +2021-01-07 17:48:17 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test DBS-1888 (Redis: bind on localhost) +2021-01-07 17:48:17 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_ldap +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: LDAP Services +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID LDAP-2219 (Check running OpenLDAP instance) +2021-01-07 17:48:17 Performing pgrep scan without uid +2021-01-07 17:48:17 IsRunning: process 'slapd' not found +2021-01-07 17:48:17 Result: No running slapd process found. +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Skipped test LDAP-2224 (Check presence slapd.conf) +2021-01-07 17:48:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:17 Security check: file is normal +2021-01-07 17:48:17 Checking permissions of /root/scans/lynis/include/tests_php +2021-01-07 17:48:17 File permissions are OK +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Action: Performing tests from category: PHP +2021-01-07 17:48:17 ==== +2021-01-07 17:48:17 Performing test ID PHP-2211 (Check php.ini presence) +2021-01-07 17:48:17 Test: Checking for presence php.ini +2021-01-07 17:48:17 Test: checking presence /etc/php.ini +2021-01-07 17:48:17 Result: file /etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php.ini.default +2021-01-07 17:48:17 Result: file /etc/php.ini.default not found +2021-01-07 17:48:17 Test: checking presence /etc/php/php.ini +2021-01-07 17:48:17 Result: file /etc/php/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/apache2-php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php/apache2-php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cgi-php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cgi-php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/cli-php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php/cli-php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/embed-php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php/embed-php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php7.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php7.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php7.3/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php7.3/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php7.2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php7.2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php7.1/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php7.1/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php7.0/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php7.0/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/fpm-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php/fpm-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/cgi/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/cgi/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/cli-php5.4/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/cli-php5.4/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/cli-php5.5/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/cli-php5.5/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/cli-php5.6/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/cli-php5.6/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php5/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php5/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /private/etc/php.ini +2021-01-07 17:48:17 Result: file /private/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.0/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.0/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.1/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.1/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.2/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.2/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.3/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.3/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.4/apache2/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.4/apache2/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.0/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.0/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.0/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.0/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.1/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.1/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.1/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.1/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.2/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.2/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.2/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.2/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.3/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.3/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.3/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.3/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.4/cli/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.4/cli/php.ini not found +2021-01-07 17:48:17 Test: checking presence /etc/php/7.4/fpm/php.ini +2021-01-07 17:48:17 Result: file /etc/php/7.4/fpm/php.ini not found +2021-01-07 17:48:17 Test: checking presence /var/www/conf/php.ini +2021-01-07 17:48:17 Result: file /var/www/conf/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/etc/php.ini +2021-01-07 17:48:17 Result: file /usr/local/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/etc/php5/cgi/php.ini +2021-01-07 17:48:17 Result: file /usr/local/etc/php5/cgi/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php54/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php54/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php56/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php56/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php70/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php70/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php71/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php71/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php72/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php72/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php73/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php73/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/php74/lib/php.ini +2021-01-07 17:48:17 Result: file /usr/local/php74/lib/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/local/zend/etc/php.ini +2021-01-07 17:48:17 Result: file /usr/local/zend/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /usr/pkg/etc/php.ini +2021-01-07 17:48:17 Result: file /usr/pkg/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php54/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php54/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php55/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php55/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php56/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php56/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php70/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php70/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php71/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php71/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php72/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php72/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php73/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php73/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/cpanel/ea-php74/root/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/cpanel/ea-php74/root/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php44/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php44/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php51/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php51/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php52/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php52/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php53/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php53/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php54/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php54/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php55/etc/php.ini +2021-01-07 17:48:17 Result: file /opt/alt/php55/etc/php.ini not found +2021-01-07 17:48:17 Test: checking presence /opt/alt/php56/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php56/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /opt/alt/php70/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php70/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /opt/alt/php71/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php71/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /opt/alt/php72/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php72/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /opt/alt/php73/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php73/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /opt/alt/php74/etc/php.ini +2021-01-07 17:48:18 Result: file /opt/alt/php74/etc/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php56/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php56/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php70/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php70/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php71/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php71/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php72/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php72/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php73/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php73/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/opt/remi/php74/php.ini +2021-01-07 17:48:18 Result: file /etc/opt/remi/php74/php.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-5.6.ini +2021-01-07 17:48:18 Result: file /etc/php-5.6.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-7.0.ini +2021-01-07 17:48:18 Result: file /etc/php-7.0.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-7.1.ini +2021-01-07 17:48:18 Result: file /etc/php-7.1.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-7.2.ini +2021-01-07 17:48:18 Result: file /etc/php-7.2.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-7.3.ini +2021-01-07 17:48:18 Result: file /etc/php-7.3.ini not found +2021-01-07 17:48:18 Test: checking presence /etc/php-7.4.ini +2021-01-07 17:48:18 Result: file /etc/php-7.4.ini not found +2021-01-07 17:48:18 Result: no files found for /etc/php5/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.0/cli/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.1/cli/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.2/cli/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.3/cli/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.4/cli/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.0/fpm/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.1/fpm/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.2/fpm/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.3/fpm/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php/7.4/fpm/conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php54/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php55/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php56/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php70/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php71/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php72/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php73/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/cpanel/ea-php74/root/etc/php.d +2021-01-07 17:48:18 Result: no files found for /opt/alt/php44/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php51/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php52/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php53/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php54/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php55/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php56/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php70/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php71/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php72/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php73/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /opt/alt/php74/etc/php.d.all +2021-01-07 17:48:18 Result: no files found for /usr/local/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /usr/local/php70/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /usr/local/php71/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /usr/local/php72/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /usr/local/php73/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /usr/local/php74/lib/php.conf.d +2021-01-07 17:48:18 Result: no files found for /etc/php-5.6 +2021-01-07 17:48:18 Result: no files found for /etc/php-7.0 +2021-01-07 17:48:18 Result: no files found for /etc/php-7.1 +2021-01-07 17:48:18 Result: no files found for /etc/php-7.2 +2021-01-07 17:48:18 Result: no files found for /etc/php-7.3 +2021-01-07 17:48:18 Result: no files found for /etc/php-7.4 +2021-01-07 17:48:18 Result: no php.ini file found +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2320 (Check PHP disabled functions) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2368 (Check PHP register_globals option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2372 (Check PHP expose_php option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2374 (Check PHP enable_dl option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2376 (Check PHP allow_url_fopen option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2378 (Check PHP allow_url_include option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test PHP-2382 (Check PHP expose_php option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 Security check: file is normal +2021-01-07 17:48:18 Checking permissions of /root/scans/lynis/include/tests_squid +2021-01-07 17:48:18 File permissions are OK +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Action: Performing tests from category: Squid Support +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID SQD-3602 (Check for running Squid daemon) +2021-01-07 17:48:18 Test: Searching for a Squid daemon +2021-01-07 17:48:18 Result: No running Squid daemon found +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3604 (Check Squid daemon file location) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3606 (Check Squid version) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3610 (Gather Squid settings) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3613 (Check Squid file permissions) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3614 (Check Squid authentication methods) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3616 (Check external Squid authentication) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3620 (Check Squid access control lists) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3624 (Check Squid safe ports) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3630 (Check Squid reply_body_max_size option) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test SQD-3680 (Check Squid version suppression) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 Security check: file is normal +2021-01-07 17:48:18 Checking permissions of /root/scans/lynis/include/tests_logging +2021-01-07 17:48:18 File permissions are OK +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Action: Performing tests from category: Logging and files +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2130 (Check for running syslog daemon) +2021-01-07 17:48:18 Test: Searching for a logging daemon +2021-01-07 17:48:18 Result: Found a logging daemon +2021-01-07 17:48:18 Hardening: assigned maximum number of hardening points for this item (3). Currently having 163 points (out of 239) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2132 (Check for running syslog-ng daemon) +2021-01-07 17:48:18 Test: Searching for syslog-ng daemon in process list +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'syslog-ng' not found +2021-01-07 17:48:18 Result: Syslog-ng NOT found in process list +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2134 (Checking Syslog-NG configuration file consistency) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2136 (Check for running systemd journal daemon) +2021-01-07 17:48:18 Test: Searching for systemd journal daemon in process list +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'systemd-journal' found (604 ) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2210 (Check for running metalog daemon) +2021-01-07 17:48:18 Test: Searching for metalog daemon in process list +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'metalog' not found +2021-01-07 17:48:18 Result: metalog NOT found in process list +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2230 (Check for running RSyslog daemon) +2021-01-07 17:48:18 Test: Searching for RSyslog daemon in process list +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'rsyslogd' found (1229 ) +2021-01-07 17:48:18 Result: Found rsyslogd in process list +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2240 (Check for running RFC 3195 compliant daemon) +2021-01-07 17:48:18 Test: Searching for RFC 3195 daemon (alias syslog reliable) in process list +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'rfc3195d' not found +2021-01-07 17:48:18 Result: rfc3195d NOT found in process list +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2138 (Checking kernel logger daemon on Linux) +2021-01-07 17:48:18 Test: Searching kernel logger daemon (klogd) +2021-01-07 17:48:18 Result: test skipped, because other facility is being used to log kernel messages +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2142 (Checking minilog daemon) +2021-01-07 17:48:18 Result: Checking for unkilled minilogd instances +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'minilogd' not found +2021-01-07 17:48:18 Result: No minilogd is running +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2146 (Checking logrotate.conf and logrotate.d) +2021-01-07 17:48:18 Test: Checking for /etc/logrotate.conf +2021-01-07 17:48:18 Result: /etc/logrotate.conf found (file) +2021-01-07 17:48:18 Test: Checking for /etc/logrotate.d (directory) +2021-01-07 17:48:18 Result: /etc/logrotate.d found +2021-01-07 17:48:18 Result: logrotate configuration found +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2148 (Checking logrotated files) +2021-01-07 17:48:18 Test: Checking which files are rotated with logrotate and if they exist +2021-01-07 17:48:18 Result: found one or more files which are rotated via logrotate +2021-01-07 17:48:18 Output: File:/var/log/aptitude:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/cron.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/daemon.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/debug:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/lpr.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/mail.err:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/mail.info:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/mail.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/mail.warn:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/messages:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/user.log:does_not_exist +2021-01-07 17:48:18 Output: File:/var/log/alternatives.log:exists +2021-01-07 17:48:18 Output: File:/var/log/apt/history.log:exists +2021-01-07 17:48:18 Output: File:/var/log/apt/term.log:exists +2021-01-07 17:48:18 Output: File:/var/log/aptitude:exists +2021-01-07 17:48:18 Output: File:/var/log/auth.log:exists +2021-01-07 17:48:18 Output: File:/var/log/btmp:exists +2021-01-07 17:48:18 Output: File:/var/log/cron.log:exists +2021-01-07 17:48:18 Output: File:/var/log/daemon.log:exists +2021-01-07 17:48:18 Output: File:/var/log/debug:exists +2021-01-07 17:48:18 Output: File:/var/log/dpkg.log:exists +2021-01-07 17:48:18 Output: File:/var/log/kern.log:exists +2021-01-07 17:48:18 Output: File:/var/log/lpr.log:exists +2021-01-07 17:48:18 Output: File:/var/log/mail.err:exists +2021-01-07 17:48:18 Output: File:/var/log/mail.info:exists +2021-01-07 17:48:18 Output: File:/var/log/mail.log:exists +2021-01-07 17:48:18 Output: File:/var/log/mail.warn:exists +2021-01-07 17:48:18 Output: File:/var/log/messages:exists +2021-01-07 17:48:18 Output: File:/var/log/syslog:exists +2021-01-07 17:48:18 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:exists +2021-01-07 17:48:18 Output: File:/var/log/unattended-upgrades/unattended-upgrades-shutdown.log:exists +2021-01-07 17:48:18 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:exists +2021-01-07 17:48:18 Output: File:/var/log/user.log:exists +2021-01-07 17:48:18 Output: File:/var/log/wtmp:exists +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2150 (Checking directories in logrotate configuration) +2021-01-07 17:48:18 Test: Checking which directories can be found in logrotate configuration +2021-01-07 17:48:18 Result: found one or more directories (via logrotate configuration) +2021-01-07 17:48:18 Directory found: /var/log +2021-01-07 17:48:18 Directory found: /var/log/apt +2021-01-07 17:48:18 Directory found: /var/log/unattended-upgrades +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2152 (Checking loghost) +2021-01-07 17:48:18 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2153 (Checking loghost is localhost) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2154 (Checking syslog configuration file) +2021-01-07 17:48:18 Test: analyzing file /etc/rsyslog.conf for remote target +2021-01-07 17:48:18 Result: no remote target found +2021-01-07 17:48:18 Test: analyzing file /etc/rsyslog.d/21-cloudinit.conf for remote target +2021-01-07 17:48:18 Result: no remote target found +2021-01-07 17:48:18 Test: analyzing file /etc/rsyslog.d/50-default.conf for remote target +2021-01-07 17:48:18 Result: no remote target found +2021-01-07 17:48:18 Result: no remote logging found +2021-01-07 17:48:18 Suggestion: Enable logging to an external logging host for archiving purposes and additional protection [test:LOGG-2154] [details:-] [solution:-] +2021-01-07 17:48:18 Hardening: assigned partial number of hardening points (1 of 3). Currently having 164 points (out of 242) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2160 (Checking /etc/newsyslog.conf) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2162 (Checking directories in /etc/newsyslog.conf) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2164 (Checking files specified /etc/newsyslog.conf) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2170 (Checking log paths) +2021-01-07 17:48:18 Test: Searching log paths +2021-01-07 17:48:18 Result: directory /var/log exists +2021-01-07 17:48:18 Result: directory /var/adm can't be found +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID LOGG-2180 (Checking open log files) +2021-01-07 17:48:18 Test: checking open log files with lsof +2021-01-07 17:48:18 Result: lsof not installed, skipping test +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2190 (Checking for deleted files in use) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test LOGG-2192 (Checking for open log files that are empty) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 Security check: file is normal +2021-01-07 17:48:18 Checking permissions of /root/scans/lynis/include/tests_insecure_services +2021-01-07 17:48:18 File permissions are OK +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Action: Performing tests from category: Insecure services +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8000 (Installed inetd package) +2021-01-07 17:48:18 Test: Checking if inetd is installed +2021-01-07 17:48:18 Result: inetd is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8002 (Check for enabled inet daemon) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8004 (Presence of inetd configuration file) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8006 (Check configuration of inetd when disabled) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8016 (Check for telnet via inetd) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8100 (Check for installed xinetd daemon) +2021-01-07 17:48:18 Test: Checking for installed xinetd daemon +2021-01-07 17:48:18 Result: xinetd is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8102 (Check for active xinet daemon) +2021-01-07 17:48:18 Test: Searching for active extended internet services daemon (xinetd) +2021-01-07 17:48:18 Performing pgrep scan without uid +2021-01-07 17:48:18 IsRunning: process 'xinetd' not found +2021-01-07 17:48:18 Result: xinetd is NOT running +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8104 (Check for enabled xinet daemon) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8106 (Check configuration of xinetd when disabled) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8116 (Insecure services enabled via xinetd) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Skipped test INSE-8200 (Check if tcp_wrappers is installed when inetd/xinetd is active) +2021-01-07 17:48:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8300 (Check if rsh client is installed) +2021-01-07 17:48:18 Test: Checking if rsh client is installed +2021-01-07 17:48:18 Result: rsh client is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8304 (Check if rsh server is installed) +2021-01-07 17:48:18 Test: Checking if rsh server is installed +2021-01-07 17:48:18 Result: rsh server is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8310 (Check if telnet client is installed) +2021-01-07 17:48:18 Test: Checking if telnet client is installed +2021-01-07 17:48:18 Result: telnet client is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8322 (Check if telnet server is installed) +2021-01-07 17:48:18 Test: Checking if telnet server is installed +2021-01-07 17:48:18 Result: telnet server is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8314 (Check if NIS client is installed) +2021-01-07 17:48:18 Test: Checking if NIS client is installed +2021-01-07 17:48:18 Result: NIS client is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8316 (Check if NIS server is installed) +2021-01-07 17:48:18 Test: Checking if NIS server is installed +2021-01-07 17:48:18 Result: NIS server is NOT installed +2021-01-07 17:48:18 ==== +2021-01-07 17:48:18 Performing test ID INSE-8318 (Check if TFTP client is installed) +2021-01-07 17:48:18 Test: Checking if TFTP client is installed +2021-01-07 17:48:19 Result: TFTP client is NOT installed +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID INSE-8320 (Check if TFTP server is installed) +2021-01-07 17:48:19 Test: Checking if TFTP server is installed +2021-01-07 17:48:19 Result: TFTP server is NOT installed +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test INSE-8050 (Check for insecure services on macOS) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:48:19 Security check: file is normal +2021-01-07 17:48:19 Checking permissions of /root/scans/lynis/include/tests_banners +2021-01-07 17:48:19 File permissions are OK +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Action: Performing tests from category: Banners and identification +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test BANN-7113 (Check COPYRIGHT banner file) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID BANN-7124 (Check issue banner file) +2021-01-07 17:48:19 Test: Checking file /etc/issue +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID BANN-7126 (Check issue banner file contents) +2021-01-07 17:48:19 Test: Checking file /etc/issue contents for legal key words +2021-01-07 17:48:19 Result: Found only 0 key words (5 or more suggested), to warn unauthorized users and could be increased +2021-01-07 17:48:19 Suggestion: Add a legal banner to /etc/issue, to warn unauthorized users [test:BANN-7126] [details:-] [solution:-] +2021-01-07 17:48:19 Hardening: assigned partial number of hardening points (0 of 1). Currently having 164 points (out of 243) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID BANN-7128 (Check issue.net banner file) +2021-01-07 17:48:19 Test: Checking file /etc/issue.net +2021-01-07 17:48:19 Result: file /etc/issue.net exists +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID BANN-7130 (Check issue.net banner file contents) +2021-01-07 17:48:19 Test: Checking file /etc/issue.net contents for legal key words +2021-01-07 17:48:19 Result: Found only 0 key words, to warn unauthorized users and could be increased +2021-01-07 17:48:19 Suggestion: Add legal banner to /etc/issue.net, to warn unauthorized users [test:BANN-7130] [details:-] [solution:-] +2021-01-07 17:48:19 Hardening: assigned partial number of hardening points (0 of 1). Currently having 164 points (out of 244) +2021-01-07 17:48:19 Security check: file is normal +2021-01-07 17:48:19 Checking permissions of /root/scans/lynis/include/tests_scheduling +2021-01-07 17:48:19 File permissions are OK +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Action: Performing tests from category: Scheduled tasks +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID SCHD-7702 (Check status of cron daemon) +2021-01-07 17:48:19 Result: cron daemon running +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID SCHD-7704 (Check crontab/cronjobs) +2021-01-07 17:48:19 Found cronjob (/etc/crontab): 17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +2021-01-07 17:48:19 Found cronjob (/etc/crontab): 25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +2021-01-07 17:48:19 Found cronjob (/etc/crontab): 47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +2021-01-07 17:48:19 Found cronjob (/etc/crontab): 52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +2021-01-07 17:48:19 Test: checking directory /etc/cron.d +2021-01-07 17:48:19 Test: check if we can access /etc/cron.d (escaped: /etc/cron.d) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/cron.d is readable (or directory accessible). +2021-01-07 17:48:19 Result: found directory /etc/cron.d +2021-01-07 17:48:19 Test: searching files in /etc/cron.d +2021-01-07 17:48:19 Result: found one or more files in /etc/cron.d. Analyzing files.. +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.d/mdadm): 57,0,*,*,0,root,if,[,-x,/usr/share/mdadm/checkarray,],&&,[,$(date,+\%d),-le,7,];,then,/usr/share/mdadm/checkarray,--cron,--all,--idle,--quiet;,fi +2021-01-07 17:48:19 Result: done with analyzing files in /etc/cron.d +2021-01-07 17:48:19 Test: checking directory /etc/cron.hourly +2021-01-07 17:48:19 Result: found directory /etc/cron.hourly +2021-01-07 17:48:19 Test: check if we can access /etc/cron.hourly (escaped: /etc/cron.hourly) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/cron.hourly is readable (or directory accessible). +2021-01-07 17:48:19 Test: searching files in /etc/cron.hourly +2021-01-07 17:48:19 Result: no files found in /etc/cron.hourly +2021-01-07 17:48:19 Test: checking directory /etc/cron.daily +2021-01-07 17:48:19 Result: found directory /etc/cron.daily +2021-01-07 17:48:19 Test: check if we can access /etc/cron.daily (escaped: /etc/cron.daily) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/cron.daily is readable (or directory accessible). +2021-01-07 17:48:19 Test: searching files in /etc/cron.daily +2021-01-07 17:48:19 Result: found one or more files in /etc/cron.daily. Analyzing files.. +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/bsdmainutils +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/apt-compat +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/passwd +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/man-db +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/aptitude +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/dpkg +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/mdadm +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/logrotate +2021-01-07 17:48:19 Result: done with analyzing files in /etc/cron.daily +2021-01-07 17:48:19 Test: checking directory /etc/cron.weekly +2021-01-07 17:48:19 Result: found directory /etc/cron.weekly +2021-01-07 17:48:19 Test: check if we can access /etc/cron.weekly (escaped: /etc/cron.weekly) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/cron.weekly is readable (or directory accessible). +2021-01-07 17:48:19 Test: searching files in /etc/cron.weekly +2021-01-07 17:48:19 Result: found one or more files in /etc/cron.weekly. Analyzing files.. +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/man-db +2021-01-07 17:48:19 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/fstrim +2021-01-07 17:48:19 Result: done with analyzing files in /etc/cron.weekly +2021-01-07 17:48:19 Test: checking directory /etc/cron.monthly +2021-01-07 17:48:19 Result: found directory /etc/cron.monthly +2021-01-07 17:48:19 Test: check if we can access /etc/cron.monthly (escaped: /etc/cron.monthly) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/cron.monthly is readable (or directory accessible). +2021-01-07 17:48:19 Test: searching files in /etc/cron.monthly +2021-01-07 17:48:19 Result: no files found in /etc/cron.monthly +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID SCHD-7718 (Check at users) +2021-01-07 17:48:19 Test: Checking atd status +2021-01-07 17:48:19 Result: at daemon active +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID SCHD-7720 (Check at users) +2021-01-07 17:48:19 Test: checking for file /etc/at.allow +2021-01-07 17:48:19 Result: file /etc/at.allow does not exist +2021-01-07 17:48:19 Test: checking for file /etc/at.deny +2021-01-07 17:48:19 Test: check if we can access /etc/at.deny (escaped: /etc/at.deny) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/at.deny is readable (or directory accessible). +2021-01-07 17:48:19 Result: file /etc/at.deny exists, only non listed users can schedule at jobs +2021-01-07 17:48:19 Denied at user: alias +2021-01-07 17:48:19 Denied at user: backup +2021-01-07 17:48:19 Denied at user: bin +2021-01-07 17:48:19 Denied at user: daemon +2021-01-07 17:48:19 Denied at user: ftp +2021-01-07 17:48:19 Denied at user: games +2021-01-07 17:48:19 Denied at user: gnats +2021-01-07 17:48:19 Denied at user: guest +2021-01-07 17:48:19 Denied at user: irc +2021-01-07 17:48:19 Denied at user: lp +2021-01-07 17:48:19 Denied at user: mail +2021-01-07 17:48:19 Denied at user: man +2021-01-07 17:48:19 Denied at user: nobody +2021-01-07 17:48:19 Denied at user: operator +2021-01-07 17:48:19 Denied at user: proxy +2021-01-07 17:48:19 Denied at user: qmaild +2021-01-07 17:48:19 Denied at user: qmaill +2021-01-07 17:48:19 Denied at user: qmailp +2021-01-07 17:48:19 Denied at user: qmailq +2021-01-07 17:48:19 Denied at user: qmailr +2021-01-07 17:48:19 Denied at user: qmails +2021-01-07 17:48:19 Denied at user: sync +2021-01-07 17:48:19 Denied at user: sys +2021-01-07 17:48:19 Denied at user: www-data +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID SCHD-7724 (Check at jobs) +2021-01-07 17:48:19 Test: Check scheduled at jobs +2021-01-07 17:48:19 Result: no pending at jobs +2021-01-07 17:48:19 Result: no scheduled Lynis execution found (e.g. crontab, cronjob) +2021-01-07 17:48:19 Security check: file is normal +2021-01-07 17:48:19 Checking permissions of /root/scans/lynis/include/tests_accounting +2021-01-07 17:48:19 File permissions are OK +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Action: Performing tests from category: Accounting +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-2754 (Check for available FreeBSD accounting information) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-2760 (Check for available OpenBSD accounting information) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID ACCT-9622 (Check for available Linux accounting information) +2021-01-07 17:48:19 Test: Check accounting information +2021-01-07 17:48:19 Result: No accounting information available (/var/account/pacct, /var/log/account/pact nor /var/log/pact exist) +2021-01-07 17:48:19 Remark: Possibly there is another location where the accounting data is stored +2021-01-07 17:48:19 Suggestion: Enable process accounting [test:ACCT-9622] [details:-] [solution:-] +2021-01-07 17:48:19 Hardening: assigned partial number of hardening points (2 of 3). Currently having 166 points (out of 247) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID ACCT-9626 (Check for sysstat accounting data) +2021-01-07 17:48:19 Test: check /etc/default/sysstat presence +2021-01-07 17:48:19 Result: sysstat not found via /etc/default/sysstat or /etc/cron.d/sysstat or as a systemd unit +2021-01-07 17:48:19 Suggestion: Enable sysstat to collect accounting (no results) [test:ACCT-9626] [details:-] [solution:-] +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID ACCT-9628 (Check for auditd) +2021-01-07 17:48:19 Test: Check auditd status +2021-01-07 17:48:19 Performing pgrep scan without uid +2021-01-07 17:48:19 IsRunning: process 'auditd' not found +2021-01-07 17:48:19 Result: auditd not active +2021-01-07 17:48:19 Suggestion: Enable auditd to collect audit information [test:ACCT-9628] [details:-] [solution:-] +2021-01-07 17:48:19 Hardening: assigned partial number of hardening points (0 of 1). Currently having 166 points (out of 248) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9630 (Check for auditd rules) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9632 (Check for auditd configuration file) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9634 (Check for auditd log file) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID ACCT-9636 (Check for Snoopy wrapper and logger) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9650 (Check Solaris audit daemon) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9652 (Check auditd SMF status) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9654 (Check BSM auditing in /etc/system) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9656 (Check BSM auditing in module list) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9660 (Check location of audit events) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test ACCT-9662 (Check Solaris auditing stats) +2021-01-07 17:48:19 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:19 Security check: file is normal +2021-01-07 17:48:19 Checking permissions of /root/scans/lynis/include/tests_time +2021-01-07 17:48:19 File permissions are OK +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Action: Performing tests from category: Time and Synchronization +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID TIME-3104 (Check for running NTP daemon or client) +2021-01-07 17:48:19 Test: Searching for a running NTP daemon or available client +2021-01-07 17:48:19 Result: no chrony configuration found +2021-01-07 17:48:19 Performing pgrep scan without uid +2021-01-07 17:48:19 IsRunning: process 'dntpd' not found +2021-01-07 17:48:19 Performing pgrep scan without uid +2021-01-07 17:48:19 IsRunning: process 'timed' not found +2021-01-07 17:48:19 Result: Found running systemd-timesyncd in process list +2021-01-07 17:48:19 Result: crontab file /etc/anacrontab not found +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in crontab file /etc/crontab +2021-01-07 17:48:19 Result: no ntpdate, rdate, sntp or ntpdig reference found in crontab file /etc/crontab +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.d/mdadm +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/apt-compat +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/aptitude +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/bsdmainutils +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/dpkg +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/logrotate +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/man-db +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/mdadm +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/passwd +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/fstrim +2021-01-07 17:48:19 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/man-db +2021-01-07 17:48:19 Result: no ntpdate or rdate found in cron directories +2021-01-07 17:48:19 Test: checking for file /etc/network/if-up.d/ntpdate +2021-01-07 17:48:19 Result: file /etc/network/if-up.d/ntpdate does not exist +2021-01-07 17:48:19 Result: Found a time syncing daemon/client. +2021-01-07 17:48:19 Hardening: assigned maximum number of hardening points for this item (3). Currently having 169 points (out of 251) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3106 (Check systemd NTP time synchronization status) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3112 (Check active NTP associations ID's) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3116 (Check peers with stratum value of 16) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3120 (Check unreliable NTP peers) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3124 (Check selected time source) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3128 (Check preferred time source) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3132 (Check NTP falsetickers) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3136 (Check NTP protocol version) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID TIME-3148 (Check TZ variable) +2021-01-07 17:48:19 Test: testing for TZ variable +2021-01-07 17:48:19 Result: found TZ variable with value notset +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3160 (Check empty NTP step-tickers) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID TIME-3170 (Check configuration files) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3180 (Report if ntpctl cannot communicate with OpenNTPD) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3181 (Check status of OpenNTPD time synchronisation) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Skipped test TIME-3182 (Check OpenNTPD has working peers) +2021-01-07 17:48:19 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID TIME-3185 (Check systemd-timesyncd synchronized time) +2021-01-07 17:48:19 Warning: systemd-timesyncd never successfully synchronized time [test:TIME-3185] [details:-] [solution:-] +2021-01-07 17:48:19 Security check: file is normal +2021-01-07 17:48:19 Checking permissions of /root/scans/lynis/include/tests_crypto +2021-01-07 17:48:19 File permissions are OK +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Action: Performing tests from category: Cryptography +2021-01-07 17:48:19 ==== +2021-01-07 17:48:19 Performing test ID CRYP-7902 (Check expire date of SSL certificates) +2021-01-07 17:48:19 Paths to scan: /etc/apache2 /etc/dovecot /etc/httpd /etc/letsencrypt /etc/pki /etc/postfix /etc/refind.d/keys /etc/ssl /opt/psa/var/certificates /usr/local/psa/var/certificates /usr/local/share/ca-certificates /usr/share/ca-certificates /usr/share/gnupg /var/www /srv/www +2021-01-07 17:48:19 Paths to ignore: /etc/letsencrypt/archive +2021-01-07 17:48:19 Result: SSL path /etc/apache2 does not exist +2021-01-07 17:48:19 Result: SSL path /etc/dovecot does not exist +2021-01-07 17:48:19 Result: SSL path /etc/httpd does not exist +2021-01-07 17:48:19 Result: SSL path /etc/letsencrypt does not exist +2021-01-07 17:48:19 Result: SSL path /etc/pki does not exist +2021-01-07 17:48:19 Result: SSL path /etc/postfix does not exist +2021-01-07 17:48:19 Result: SSL path /etc/refind.d/keys does not exist +2021-01-07 17:48:19 Test: check if we can access /etc/ssl (escaped: /etc/ssl) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/ssl is readable (or directory accessible). +2021-01-07 17:48:19 Result: found directory /etc/ssl +2021-01-07 17:48:19 Test: check if we can access /etc/ssl/certs/ca-certificates.crt (escaped: /etc/ssl/certs/ca-certificates.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /etc/ssl/certs/ca-certificates.crt is readable (or directory accessible). +2021-01-07 17:48:19 Result: file '/etc/ssl/certs/ca-certificates.crt' does most likely not belong to a package +2021-01-07 17:48:19 Result: file is a certificate file +2021-01-07 17:48:19 Result: certificate /etc/ssl/certs/ca-certificates.crt seems to be correct and still valid +2021-01-07 17:48:19 Result: found 1 certificates in /etc/ssl +2021-01-07 17:48:19 Result: SSL path /opt/psa/var/certificates does not exist +2021-01-07 17:48:19 Result: SSL path /usr/local/psa/var/certificates does not exist +2021-01-07 17:48:19 Test: check if we can access /usr/local/share/ca-certificates (escaped: /usr/local/share/ca-certificates) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/local/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:48:19 Result: found directory /usr/local/share/ca-certificates +2021-01-07 17:48:19 Result: found 0 certificates in /usr/local/share/ca-certificates +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates (escaped: /usr/share/ca-certificates) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:48:19 Result: found directory /usr/share/ca-certificates +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt (escaped: /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt is readable (or directory accessible). +2021-01-07 17:48:19 Result: file '/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt (escaped: /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt is readable (or directory accessible). +2021-01-07 17:48:19 Result: file '/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt' belongs to package (ca-certificates) +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:19 Result: file '/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:19 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt is readable (or directory accessible). +2021-01-07 17:48:19 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt' belongs to package (ca-certificates) +2021-01-07 17:48:19 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt) +2021-01-07 17:48:19 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt (escaped: /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Certigna.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Certigna.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt (escaped: /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:48:20 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt) +2021-01-07 17:48:20 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:20 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt is readable (or directory accessible). +2021-01-07 17:48:20 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt (escaped: /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/EC-ACC.crt (escaped: /usr/share/ca-certificates/mozilla/EC-ACC.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/EC-ACC.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/EC-ACC.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt) +2021-01-07 17:48:21 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:21 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt is readable (or directory accessible). +2021-01-07 17:48:21 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:21 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt (escaped: /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Izenpe.com.crt (escaped: /usr/share/ca-certificates/mozilla/Izenpe.com.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Izenpe.com.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Izenpe.com.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt (escaped: /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt (escaped: /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:22 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:22 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt) +2021-01-07 17:48:22 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:22 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt (escaped: /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt (escaped: /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt (escaped: /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt (escaped: /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt) +2021-01-07 17:48:23 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:23 Result: file /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:23 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:23 Test: check if we can access /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt (escaped: /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt (escaped: /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt (escaped: /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:48:24 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:48:24 Result: found 138 certificates in /usr/share/ca-certificates +2021-01-07 17:48:24 Test: check if we can access /usr/share/gnupg (escaped: /usr/share/gnupg) +2021-01-07 17:48:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:48:24 Result: file /usr/share/gnupg is readable (or directory accessible). +2021-01-07 17:48:24 Result: found directory /usr/share/gnupg +2021-01-07 17:48:24 Result: found 0 certificates in /usr/share/gnupg +2021-01-07 17:48:24 Result: SSL path /var/www does not exist +2021-01-07 17:48:24 Result: SSL path /srv/www does not exist +2021-01-07 17:48:24 Result: found a total of 139 certificates +2021-01-07 17:48:24 ==== +2021-01-07 17:48:24 Performing test ID CRYP-7930 (Determine if system uses LUKS block device encryption) +2021-01-07 17:48:25 Result: block device sda is not LUKS encrypted +2021-01-07 17:48:25 Result: block device sda1 is not LUKS encrypted +2021-01-07 17:48:25 Result: block device sda14 is not LUKS encrypted +2021-01-07 17:48:25 Result: block device sda15 is not LUKS encrypted +2021-01-07 17:48:25 Result: block device sr0 is not LUKS encrypted +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID CRYP-7931 (Determine if system uses encrypted swap) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID CRYP-8002 (Gather available kernel entropy) +2021-01-07 17:48:25 Result: found kernel entropy value of 1164 +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID CRYP-8004 (Presence of hardware random number generators) +2021-01-07 17:48:25 Test: looking for /sys/class/misc/hw_random/rng_current +2021-01-07 17:48:25 Result: positive match, found RNG: virtio_rng.0 +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'rngd' not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID CRYP-8005 (Presence of software pseudo random number generators) +2021-01-07 17:48:25 Test: looking for software pseudo random number generators +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'audio-entropyd' not found +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'haveged' not found +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'jitterentropy-rngd' not found +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_virtualization +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Virtualization +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_containers +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Containers +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test CONT-8004 (Query running Solaris zones) +2021-01-07 17:48:25 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID CONT-8102 (Checking Docker status and information) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'dockerd' not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test CONT-8104 (Checking Docker info for any warnings) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test CONT-8106 (Gather basic stats from Docker) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test CONT-8107 (Check number of Docker containers) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test CONT-8108 (Check file permissions for Docker files) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_mac_frameworks +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Security frameworks +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MACF-6204 (Check AppArmor presence) +2021-01-07 17:48:25 Result: aa-status binary not found, AppArmor not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test MACF-6208 (Check if AppArmor is enabled) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MACF-6232 (Check SELINUX presence) +2021-01-07 17:48:25 Test: checking if we have sestatus binary +2021-01-07 17:48:25 Result: sestatus binary NOT found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test MACF-6234 (Check SELINUX status) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MACF-6240 (Check TOMOYO Linux presence) +2021-01-07 17:48:25 Test: checking if we have tomoyo-init binary +2021-01-07 17:48:25 Result: tomoyo-init binary not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test MACF-6242 (Check TOMOYO Linux status) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID RBAC-6272 (Check grsecurity presence) +2021-01-07 17:48:25 Result: no grsecurity found in kernel config +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MACF-6290 (Check for implemented MAC framework) +2021-01-07 17:48:25 Hardening: assigned partial number of hardening points (2 of 3). Currently having 171 points (out of 254) +2021-01-07 17:48:25 Result: found no implemented MAC framework +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_file_integrity +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Software: file integrity +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4310 (AFICK availability) +2021-01-07 17:48:25 Test: Checking AFICK binary +2021-01-07 17:48:25 Result: AFICK is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4314 (AIDE availability) +2021-01-07 17:48:25 Test: Checking AIDE binary +2021-01-07 17:48:25 Result: AIDE is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4315 (Check AIDE configuration file) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4316 (Presence of AIDE database and size check) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4318 (Osiris availability) +2021-01-07 17:48:25 Test: Checking Osiris binary +2021-01-07 17:48:25 Result: Osiris is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4322 (Samhain availability) +2021-01-07 17:48:25 Test: Checking Samhain binary +2021-01-07 17:48:25 Result: Samhain is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4326 (Tripwire availability) +2021-01-07 17:48:25 Test: Checking Tripwire binary +2021-01-07 17:48:25 Result: Tripwire is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4328 (OSSEC syscheck daemon running) +2021-01-07 17:48:25 Test: Checking if OSSEC syscheck daemon is running +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'ossec-syscheckd' not found +2021-01-07 17:48:25 Result: syscheck (OSSEC) is not active +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4330 (mtree availability) +2021-01-07 17:48:25 Test: Checking mtree binary +2021-01-07 17:48:25 Result: mtree is not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4334 (Check lfd daemon status) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4336 (Check lfd configuration status) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4338 (osqueryd syscheck daemon running) +2021-01-07 17:48:25 Test: Checking if osqueryd syscheck daemon is running +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'osqueryd' not found +2021-01-07 17:48:25 Result: syscheck (osquery) not installed +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4339 (Check IMA/EVM status) +2021-01-07 17:48:25 Reason to skip: No evmctl binary found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4340 (Check dm-integrity status) +2021-01-07 17:48:25 Reason to skip: No integritysetup binary found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4341 (Check dm-verity status) +2021-01-07 17:48:25 Result: dm-verity tools found but no active devices +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test FINT-4402 (AIDE configuration: Checksums (SHA256 or SHA512)) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FINT-4350 (File integrity software installed) +2021-01-07 17:48:25 Test: Check if at least on file integrity tool is available/installed +2021-01-07 17:48:25 Result: No file integrity tools found +2021-01-07 17:48:25 Suggestion: Install a file integrity tool to monitor changes to critical and sensitive files [test:FINT-4350] [details:-] [solution:-] +2021-01-07 17:48:25 Hardening: assigned partial number of hardening points (0 of 5). Currently having 171 points (out of 259) +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_tooling +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Software: System tooling +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5002 (Checking for automation tools) +2021-01-07 17:48:25 Test: checking if directory /root/.ansible exists +2021-01-07 17:48:25 Result: directory /root/.ansible NOT found +2021-01-07 17:48:25 Test: checking if directory /etc/ansible exists +2021-01-07 17:48:25 Result: directory /etc/ansible NOT found +2021-01-07 17:48:25 Test: checking if directory /root/.ansible exists +2021-01-07 17:48:25 Result: directory /root/.ansible NOT found +2021-01-07 17:48:25 Test: checking if directory /tmp/.ansible exists +2021-01-07 17:48:25 Result: directory /tmp/.ansible NOT found +2021-01-07 17:48:25 Test: checking if file /var/log/ansible.log exists +2021-01-07 17:48:25 Result: file /var/log/ansible.log NOT found +2021-01-07 17:48:25 Test: checking if file ~/.ansible-retry exists +2021-01-07 17:48:25 Result: file ~/.ansible-retry NOT found +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'puppet master' not found +2021-01-07 17:48:25 Suggestion: Determine if automation tools are present for system management [test:TOOL-5002] [details:-] [solution:-] +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5102 (Check for presence of Fail2ban) +2021-01-07 17:48:25 Result: Fail2ban not present (fail2ban-server not found) +2021-01-07 17:48:25 Checking Fail2ban configuration file +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test TOOL-5104 (Enabled tests in Fail2ban) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5120 (Check for presence of Snort) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'snort' not found +2021-01-07 17:48:25 Result: Snort not present (Snort not running) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5122 (Check Snort configuration file) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5130 (Check for active Suricata daemon) +2021-01-07 17:48:25 Result: Suricata not installed (suricata not found) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5126 (Check for active OSSEC daemon) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'ossec-analysisd' not found +2021-01-07 17:48:25 Result: OSSEC analysis daemon not active +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'ossec-agentd' not found +2021-01-07 17:48:25 Result: OSSEC agent daemon not active +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID TOOL-5190 (Check presence of IDS/IPS tool) +2021-01-07 17:48:25 Hardening: assigned partial number of hardening points (0 of 2). Currently having 171 points (out of 261) +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_malware +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Software: Malware +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3275 (Check for chkrootkit) +2021-01-07 17:48:25 Test: checking presence chkrootkit +2021-01-07 17:48:25 Result: chkrootkit not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3276 (Check for Rootkit Hunter) +2021-01-07 17:48:25 Test: checking presence Rootkit Hunter +2021-01-07 17:48:25 Result: Rootkit Hunter not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3278 (Check for LMD) +2021-01-07 17:48:25 Test: checking presence LMD +2021-01-07 17:48:25 Result: LMD not found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3280 (Check if anti-virus tool is installed) +2021-01-07 17:48:25 Test: checking process com.avast.daemon +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'com.avast.daemon' not found +2021-01-07 17:48:25 Test: checking process Avira daemon +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'avqmd' not found +2021-01-07 17:48:25 Test: checking process epagd +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'bdagentd' not found +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'epagd' not found +2021-01-07 17:48:25 Test: checking process falcon-sensor (CrowdStrike) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'falcon-sensor' not found +2021-01-07 17:48:25 Test: checking process CylanceSvc +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'CylanceSvc' not found +2021-01-07 17:48:25 Test: checking process esets_daemon +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'esets_daemon' not found +2021-01-07 17:48:25 Test: checking process wdserver or klnagent (Kaspersky) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'klnagent' not found +2021-01-07 17:48:25 Test: checking process cma or cmdagent (McAfee) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'cmdagent' not found +2021-01-07 17:48:25 Test: checking process savscand +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'savscand' not found +2021-01-07 17:48:25 Test: checking process SophosScanD +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'SophosScanD' not found +2021-01-07 17:48:25 Test: checking process rtvscand +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'rtvscand' not found +2021-01-07 17:48:25 Test: checking process Symantec management client service +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'smcd' not found +2021-01-07 17:48:25 Test: checking process Symantec Endpoint Protection configuration service +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'symcfgd' not found +2021-01-07 17:48:25 Test: checking process synoavd +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'synoavd' not found +2021-01-07 17:48:25 Test: checking process TmccMac to test for Trend Micro anti-virus (macOS) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'TmccMac' not found +2021-01-07 17:48:25 Result: no commercial anti-virus tools found +2021-01-07 17:48:25 Hardening: assigned partial number of hardening points (0 of 3). Currently having 171 points (out of 264) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3282 (Check for clamscan) +2021-01-07 17:48:25 Test: checking presence clamscan +2021-01-07 17:48:25 Result: clamscan couldn't be found +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID MALW-3284 (Check for clamd) +2021-01-07 17:48:25 Test: checking running ClamAV daemon (clamd) +2021-01-07 17:48:25 Performing pgrep scan without uid +2021-01-07 17:48:25 IsRunning: process 'clamd' not found +2021-01-07 17:48:25 Result: clamd not running +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test MALW-3286 (Check for freshclam) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Skipped test MALW-3288 (Check for ClamXav) +2021-01-07 17:48:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_file_permissions +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: File Permissions +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID FILE-7524 (Perform file permissions check) +2021-01-07 17:48:25 Test: Checking file permissions +2021-01-07 17:48:25 Using profile /root/scans/lynis/default.prf for baseline. +2021-01-07 17:48:25 Test: checking file/directory /boot/grub/grub.cfg +2021-01-07 17:48:25 Test: checking if file /boot/grub/grub.cfg has the permissions set to 600 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (444) +2021-01-07 17:48:25 Test: checking file/directory /boot/grub2/grub.cfg +2021-01-07 17:48:25 Skipping file/directory /boot/grub2/grub.cfg as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /boot/grub2/user.cfg +2021-01-07 17:48:25 Skipping file/directory /boot/grub2/user.cfg as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/at.allow +2021-01-07 17:48:25 Skipping file/directory /etc/at.allow as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/at.deny +2021-01-07 17:48:25 Test: checking if file /etc/at.deny has the permissions set to 600 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/at.deny are not matching expected value (640 != rw-------) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.allow +2021-01-07 17:48:25 Skipping file/directory /etc/cron.allow as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.deny +2021-01-07 17:48:25 Skipping file/directory /etc/cron.deny as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/crontab +2021-01-07 17:48:25 Test: checking if file /etc/crontab has the permissions set to 600 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/crontab are not matching expected value (644 != rw-------) +2021-01-07 17:48:25 Test: checking file/directory /etc/group +2021-01-07 17:48:25 Test: checking if file /etc/group has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/group- +2021-01-07 17:48:25 Test: checking if file /etc/group- has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (600) +2021-01-07 17:48:25 Test: checking file/directory /etc/hosts.allow +2021-01-07 17:48:25 Test: checking if file /etc/hosts.allow has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/hosts.deny +2021-01-07 17:48:25 Test: checking if file /etc/hosts.deny has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/issue +2021-01-07 17:48:25 Test: checking if file /etc/issue has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/issue.net +2021-01-07 17:48:25 Test: checking if file /etc/issue.net has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/lilo.conf +2021-01-07 17:48:25 Skipping file/directory /etc/lilo.conf as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/motd +2021-01-07 17:48:25 Skipping file/directory /etc/motd as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/passwd +2021-01-07 17:48:25 Test: checking if file /etc/passwd has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (644) +2021-01-07 17:48:25 Test: checking file/directory /etc/passwd- +2021-01-07 17:48:25 Test: checking if file /etc/passwd- has the permissions set to 644 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (600) +2021-01-07 17:48:25 Test: checking file/directory /etc/ssh/sshd_config +2021-01-07 17:48:25 Test: checking if file /etc/ssh/sshd_config has the permissions set to 600 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/ssh/sshd_config are not matching expected value (644 != rw-------) +2021-01-07 17:48:25 Test: checking file/directory /etc/hosts.equiv +2021-01-07 17:48:25 Skipping file/directory /etc/hosts.equiv as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /etc/shosts.equiv +2021-01-07 17:48:25 Skipping file/directory /etc/shosts.equiv as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /root/.rhosts +2021-01-07 17:48:25 Skipping file/directory /root/.rhosts as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /root/.rlogin +2021-01-07 17:48:25 Skipping file/directory /root/.rlogin as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /root/.shosts +2021-01-07 17:48:25 Skipping file/directory /root/.shosts as it does not exist on this system +2021-01-07 17:48:25 Test: checking file/directory /root/.ssh +2021-01-07 17:48:25 Test: checking if file /root/.ssh has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: correct permissions (700) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.d +2021-01-07 17:48:25 Test: checking if file /etc/cron.d has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/cron.d are not matching expected value (755 != rwx------) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.daily +2021-01-07 17:48:25 Test: checking if file /etc/cron.daily has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/cron.daily are not matching expected value (755 != rwx------) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.hourly +2021-01-07 17:48:25 Test: checking if file /etc/cron.hourly has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/cron.hourly are not matching expected value (755 != rwx------) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.weekly +2021-01-07 17:48:25 Test: checking if file /etc/cron.weekly has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/cron.weekly are not matching expected value (755 != rwx------) +2021-01-07 17:48:25 Test: checking file/directory /etc/cron.monthly +2021-01-07 17:48:25 Test: checking if file /etc/cron.monthly has the permissions set to 700 or more restrictive +2021-01-07 17:48:25 Outcome: permissions of file /etc/cron.monthly are not matching expected value (755 != rwx------) +2021-01-07 17:48:25 Suggestion: Consider restricting file permissions [test:FILE-7524] [details:See screen output or log file] [solution:text:Use chmod to change file permissions] +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_homedirs +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Home directories +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID HOME-9302 (Create list with home directories) +2021-01-07 17:48:25 Test: query /etc/passwd to obtain home directories +2021-01-07 17:48:25 Result: found home directory: /bin (directory exists) +2021-01-07 17:48:25 Result: found home directory: /dev (directory exists) +2021-01-07 17:48:25 Result: found home directory: /home/syslog (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /nonexistent (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /root (directory exists) +2021-01-07 17:48:25 Result: found home directory: /run/systemd (directory exists) +2021-01-07 17:48:25 Result: found home directory: /run/systemd/netif (directory exists) +2021-01-07 17:48:25 Result: found home directory: /run/systemd/resolve (directory exists) +2021-01-07 17:48:25 Result: found home directory: /usr/games (directory exists) +2021-01-07 17:48:25 Result: found home directory: /usr/sbin (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/backups (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/cache/man (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/cache/pollinate (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/lib/gnats (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/list (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/mail (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/run/dbus (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/run/ircd (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/run/sshd (directory exists) +2021-01-07 17:48:25 Result: found home directory: /var/spool/lpd (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/spool/news (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/spool/uucp (directory does not exist) +2021-01-07 17:48:25 Result: found home directory: /var/www (directory does not exist) +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID HOME-9304 (Check if users' home directories permissions are 750 or more restrictive) +2021-01-07 17:48:25 Test: checking directory '' for user '' +2021-01-07 17:48:25 Result: OK, all permissions of the home directories are 750 or more restrictive +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID HOME-9306 (Check if users own their home directories) +2021-01-07 17:48:25 Test: checking directory '' for user '' +2021-01-07 17:48:25 Result: OK, all users own their home directories +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID HOME-9310 (Checking for suspicious shell history files) +2021-01-07 17:48:25 Result: Ok, history files are type 'file'. +2021-01-07 17:48:25 Remark: History files are normally of the type 'file'. Symbolic links and other types are suspicious. +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID HOME-9350 (Collecting information from home directories) +2021-01-07 17:48:25 Result: IGNORE_HOME_DIRS empty, no paths excluded +2021-01-07 17:48:25 Security check: file is normal +2021-01-07 17:48:25 Checking permissions of /root/scans/lynis/include/tests_kernel_hardening +2021-01-07 17:48:25 File permissions are OK +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Action: Performing tests from category: Kernel Hardening +2021-01-07 17:48:25 ==== +2021-01-07 17:48:25 Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile) +2021-01-07 17:48:26 Result: sysctl key dev.tty.ldisc_autoload has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 171 points (out of 265) +2021-01-07 17:48:26 Result: sysctl key fs.protected_fifos has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 171 points (out of 266) +2021-01-07 17:48:26 Result: sysctl key fs.protected_hardlinks contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 172 points (out of 267) +2021-01-07 17:48:26 Result: sysctl key fs.protected_regular has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 172 points (out of 268) +2021-01-07 17:48:26 Result: sysctl key fs.protected_symlinks contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 173 points (out of 269) +2021-01-07 17:48:26 Result: sysctl key fs.suid_dumpable contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 174 points (out of 270) +2021-01-07 17:48:26 Result: key hw.kbd.keymap_restrict_change does not exist on this machine +2021-01-07 17:48:26 Result: key kern.sugid_coredump does not exist on this machine +2021-01-07 17:48:26 Result: key kernel.core_setuid_ok does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key kernel.core_uses_pid has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 174 points (out of 271) +2021-01-07 17:48:26 Result: sysctl key kernel.ctrl-alt-del contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 175 points (out of 272) +2021-01-07 17:48:26 Result: sysctl key kernel.dmesg_restrict has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 175 points (out of 273) +2021-01-07 17:48:26 Result: key kernel.exec-shield-randomize does not exist on this machine +2021-01-07 17:48:26 Result: key kernel.exec-shield does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key kernel.kptr_restrict has a different value than expected in scan profile. Expected=2, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 175 points (out of 274) +2021-01-07 17:48:26 Result: key kernel.maps_protect does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key kernel.modules_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 175 points (out of 275) +2021-01-07 17:48:26 Result: sysctl key kernel.perf_event_paranoid has a different value than expected in scan profile. Expected=3, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 175 points (out of 276) +2021-01-07 17:48:26 Result: sysctl key kernel.randomize_va_space contains equal expected and current value (2) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 176 points (out of 277) +2021-01-07 17:48:26 Result: key kernel.suid_dumpable does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key kernel.sysrq has a different value than expected in scan profile. Expected=0, Real=176 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 176 points (out of 278) +2021-01-07 17:48:26 Result: sysctl key kernel.unprivileged_bpf_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 176 points (out of 279) +2021-01-07 17:48:26 Result: key kernel.use-nx does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key kernel.yama.ptrace_scope contains equal expected and current value (1 2 3) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 177 points (out of 280) +2021-01-07 17:48:26 Result: sysctl key net.core.bpf_jit_harden has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 177 points (out of 281) +2021-01-07 17:48:26 Result: key net.inet.icmp.bmcastecho does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.icmp.drop_redirect does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.icmp.rediraccept does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.icmp.timestamp does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.accept_sourceroute does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.check_interface does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.forwarding does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.linklocal.in.allowbadttl does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.process_options does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.random_id does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.redirect does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip.sourceroute does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.ip6.redirect does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.always_keepalive does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.blackhole does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.drop_synfin does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.icmp_may_rst does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.nolocaltimewait does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.tcp.path_mtu_discovery does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet.udp.blackhole does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet6.icmp6.rediraccept does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet6.ip6.forwarding does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet6.ip6.fw.enable does not exist on this machine +2021-01-07 17:48:26 Result: key net.inet6.ip6.redirect does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 177 points (out of 282) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 178 points (out of 283) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.bootp_relay contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 179 points (out of 284) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.forwarding contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 180 points (out of 285) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.log_martians has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 180 points (out of 286) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.mc_forwarding contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 181 points (out of 287) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.proxy_arp contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 182 points (out of 288) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.rp_filter contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 183 points (out of 289) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.all.send_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 183 points (out of 290) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 183 points (out of 291) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.default.accept_source_route has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 183 points (out of 292) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.conf.default.log_martians has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 183 points (out of 293) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.icmp_echo_ignore_broadcasts contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 184 points (out of 294) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.icmp_ignore_bogus_error_responses contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 185 points (out of 295) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.tcp_syncookies contains equal expected and current value (1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 186 points (out of 296) +2021-01-07 17:48:26 Result: sysctl key net.ipv4.tcp_timestamps contains equal expected and current value (0 1) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 187 points (out of 297) +2021-01-07 17:48:26 Result: sysctl key net.ipv6.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 187 points (out of 298) +2021-01-07 17:48:26 Result: sysctl key net.ipv6.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 188 points (out of 299) +2021-01-07 17:48:26 Result: key net.ipv6.conf.all.send_redirects does not exist on this machine +2021-01-07 17:48:26 Result: sysctl key net.ipv6.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 188 points (out of 300) +2021-01-07 17:48:26 Result: sysctl key net.ipv6.conf.default.accept_source_route contains equal expected and current value (0) +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (1). Currently having 189 points (out of 301) +2021-01-07 17:48:26 Result: key security.bsd.hardlink_check_gid does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.hardlink_check_uid does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.see_other_gids does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.see_other_uids does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.stack_guard_page does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.unprivileged_proc_debug does not exist on this machine +2021-01-07 17:48:26 Result: key security.bsd.unprivileged_read_msgbuf does not exist on this machine +2021-01-07 17:48:26 Result: found 19 keys that can use tuning, according scan profile +2021-01-07 17:48:26 Suggestion: One or more sysctl values differ from the scan profile and could be tweaked [test:KRNL-6000] [details:] [solution:Change sysctl value or disable test (skip-test=KRNL-6000:)] +2021-01-07 17:48:26 Security check: file is normal +2021-01-07 17:48:26 Checking permissions of /root/scans/lynis/include/tests_hardening +2021-01-07 17:48:26 File permissions are OK +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Action: Performing tests from category: Hardening +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Performing test ID HRDN-7220 (Check if one or more compilers are installed) +2021-01-07 17:48:26 Test: Check if one or more compilers can be found on the system +2021-01-07 17:48:26 Result: no compilers found +2021-01-07 17:48:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 192 points (out of 304) +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Performing test ID HRDN-7222 (Check compiler permissions) +2021-01-07 17:48:26 Test: Check if one or more compilers can be found on the system +2021-01-07 17:48:26 Result: no compilers found +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Performing test ID HRDN-7230 (Check for malware scanner) +2021-01-07 17:48:26 Test: Check if a malware scanner is installed +2021-01-07 17:48:26 Result: no malware scanner found +2021-01-07 17:48:26 Suggestion: Harden the system by installing at least one malware scanner, to perform periodic file system scans [test:HRDN-7230] [details:-] [solution:Install a tool like rkhunter, chkrootkit, OSSEC] +2021-01-07 17:48:26 Hardening: assigned partial number of hardening points (1 of 3). Currently having 193 points (out of 307) +2021-01-07 17:48:26 Result: no malware scanner found +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Performing test ID HRDN-7231 (Check for registered non-native binary formats) +2021-01-07 17:48:26 Test: Check for registered non-native binary formats +2021-01-07 17:48:26 Result: no non-native binary formats found +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Action: Performing tests from category: Custom tests +2021-01-07 17:48:26 Test: Checking for tests_custom file +2021-01-07 17:48:26 ==== +2021-01-07 17:48:26 Action: Performing plugin tests +2021-01-07 17:48:26 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:48:26 Result: Plugins phase 2 finished +2021-01-07 17:48:26 Checking permissions of /root/scans/lynis/include/report +2021-01-07 17:48:26 File permissions are OK +2021-01-07 17:48:26 Hardening index : [62] [############ ] +2021-01-07 17:48:26 Hardening strength: System has been hardened, but could use additional hardening +2021-01-07 17:48:26 ==== +2021-01-07 17:48:27 Checking permissions of /root/scans/lynis/include/tool_tips +2021-01-07 17:48:27 File permissions are OK +2021-01-07 17:48:27 Tool tips: enabled +2021-01-07 17:48:27 ================================================================================ +2021-01-07 17:48:27 Tests performed: 258 +2021-01-07 17:48:27 Total tests: 455 +2021-01-07 17:48:27 Active plugins: 2 +2021-01-07 17:48:27 Total plugins: 2 +2021-01-07 17:48:27 ================================================================================ +2021-01-07 17:48:27 Lynis 3.0.3 +2021-01-07 17:48:27 2007-2021, CISOfy - https://cisofy.com/lynis/ +2021-01-07 17:48:27 Enterprise support available (compliance, plugins, interface and tools) +2021-01-07 17:48:27 Program ended successfully +2021-01-07 17:48:27 ================================================================================ +2021-01-07 17:48:27 PID file removed (/var/run/lynis.pid) +2021-01-07 17:48:27 Temporary files: /tmp/lynis.GCdbmWlRnH /tmp/lynis.bht7Td4W59 /tmp/lynis.D8kqFK73JM /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:27 Action: removing temporary file /tmp/lynis.GCdbmWlRnH +2021-01-07 17:48:27 Info: temporary file /tmp/lynis.bht7Td4W59 was already removed +2021-01-07 17:48:27 Info: temporary file /tmp/lynis.D8kqFK73JM was already removed +2021-01-07 17:48:27 Action: removing temporary file /tmp/lynis.ZP6tdJRMzU +2021-01-07 17:48:27 Lynis ended successfully. diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-2.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-2.log new file mode 100644 index 0000000..13c312f --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-2.log @@ -0,0 +1,4917 @@ +2021-01-07 17:51:09 Starting Lynis 3.0.3 with PID 2234, build date 2021-01-07 +2021-01-07 17:51:09 ==== +2021-01-07 17:51:09 ### 2007-2021, CISOfy - https://cisofy.com/lynis/ ### +2021-01-07 17:51:09 Checking permissions of /root/scans/lynis/include/profiles +2021-01-07 17:51:09 File permissions are OK +2021-01-07 17:51:09 Reading profile/configuration /root/scans/lynis/default.prf +2021-01-07 17:51:09 Action: created temporary file /tmp/lynis.se3EFLCTUP +2021-01-07 17:51:09 Language set via profile to '' +2021-01-07 17:51:09 Plugin 'authentication' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'compliance' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'configuration' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'control-panels' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'crypto' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'dns' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'docker' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'file-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'file-systems' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'firewalls' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'forensics' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'hardware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'intrusion-detection' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'intrusion-prevention' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'kernel' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'malware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'memory' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'nginx' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'pam' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'processes' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'security-modules' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'software' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'system-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'systemd' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:09 Plugin 'users' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:10 Set option to default value: NTPD_ROLE --> client +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 EOL check: 0 +2021-01-07 17:51:10 Program version: 3.0.3 +2021-01-07 17:51:10 Operating system: Linux +2021-01-07 17:51:10 Operating system name: Ubuntu +2021-01-07 17:51:10 Operating system version: 16.04 +2021-01-07 17:51:10 Kernel version: 4.4.0 +2021-01-07 17:51:10 Kernel version (full): 4.4.0-197-generic +2021-01-07 17:51:10 Hardware platform: x86_64 +2021-01-07 17:51:10 ----------------------------------------------------- +2021-01-07 17:51:10 Hostname: it-sec-test-vm +2021-01-07 17:51:10 Auditor: [Not Specified] +2021-01-07 17:51:10 Profiles: /root/scans/lynis/default.prf +2021-01-07 17:51:10 Work directory: /root/scans/lynis +2021-01-07 17:51:10 Include directory: /root/scans/lynis/include +2021-01-07 17:51:10 Plugin directory: ./plugins +2021-01-07 17:51:10 ----------------------------------------------------- +2021-01-07 17:51:10 Log file: /var/log/lynis.log +2021-01-07 17:51:10 Report file: /var/log/lynis-report.dat +2021-01-07 17:51:10 Report version: 1.0 +2021-01-07 17:51:10 ----------------------------------------------------- +2021-01-07 17:51:10 Test category: all +2021-01-07 17:51:10 Test group: all +2021-01-07 17:51:10 BusyBox used: 0 +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Test: Checking for program update... +2021-01-07 17:51:10 Current installed version : 303 +2021-01-07 17:51:10 Latest stable version : 303 +2021-01-07 17:51:10 No Lynis update available. +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Checking permissions of /root/scans/lynis/include/binaries +2021-01-07 17:51:10 File permissions are OK +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Action: Performing tests from category: System tools +2021-01-07 17:51:10 Start scanning for available audit binaries and tools... +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Performing test ID CORE-1000 (Check all system binaries) +2021-01-07 17:51:10 Status: Starting binary scan... +2021-01-07 17:51:10 Test: Checking binaries in directory /snap/bin +2021-01-07 17:51:10 Result: Directory /snap/bin does NOT exist +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/local/games +2021-01-07 17:51:10 Directory /usr/local/games exists. Starting directory scanning... +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/games +2021-01-07 17:51:10 Directory /usr/games exists. Starting directory scanning... +2021-01-07 17:51:10 Test: Checking binaries in directory /bin +2021-01-07 17:51:10 Directory /bin exists. Starting directory scanning... +2021-01-07 17:51:10 Found known binary: cat (generic file handling) - /bin/cat +2021-01-07 17:51:10 Found known binary: dnsdomainname (DNS domain) - /bin/dnsdomainname +2021-01-07 17:51:10 Found known binary: domainname (NIS domain) - /bin/domainname +2021-01-07 17:51:10 Found known binary: egrep (text search) - /bin/egrep +2021-01-07 17:51:10 Found known binary: grep (text search) - /bin/grep +2021-01-07 17:51:10 Found known binary: gzip (compressing utility) - /bin/gzip +2021-01-07 17:51:10 Found known binary: ip (IP configuration) - /bin/ip +2021-01-07 17:51:10 Found known binary: journalctl (systemd journal) - /bin/journalctl +2021-01-07 17:51:10 Found known binary: ls (file listing) - /bin/ls +2021-01-07 17:51:10 Found known binary: lsblk (block devices) - /bin/lsblk +2021-01-07 17:51:10 Found known binary: lsmod (kernel modules) - /bin/lsmod +2021-01-07 17:51:10 Found known binary: mount (disk utility) - /bin/mount +2021-01-07 17:51:10 Found known binary: netstat (network statistics) - /bin/netstat +2021-01-07 17:51:10 Found known binary: ps (process listing) - /bin/ps +2021-01-07 17:51:10 Found known binary: readlink (follows symlinks) - /bin/readlink +2021-01-07 17:51:10 Found known binary: sed (text stream editor) - /bin/sed +2021-01-07 17:51:10 Found known binary: ss (show sockets) - /bin/ss +2021-01-07 17:51:10 Found known binary: systemctl (client to systemd) - /bin/systemctl +2021-01-07 17:51:10 Found known binary: uname (operating system details) - /bin/uname +2021-01-07 17:51:10 Found known binary: zgrep (text search for compressed files) - /bin/zgrep +2021-01-07 17:51:10 Test: Checking binaries in directory /sbin +2021-01-07 17:51:10 Directory /sbin exists. Starting directory scanning... +2021-01-07 17:51:10 Found known binary: blkid (information about block devices) - /sbin/blkid +2021-01-07 17:51:10 Found known binary: cryptsetup (block device encryption) - /sbin/cryptsetup +2021-01-07 17:51:10 Found known binary: getcap (kernel capabilities) - /sbin/getcap +2021-01-07 17:51:10 Found known binary: ipconfig (IP configuration) - /sbin/ifconfig +2021-01-07 17:51:10 Found known binary: ip (IP configuration) - /sbin/ip +2021-01-07 17:51:10 Found known binary: iptables (firewall) - /sbin/iptables +2021-01-07 17:51:10 Found known binary: iptables-save (firewall) - /sbin/iptables-save +2021-01-07 17:51:10 Found known binary: lsmod (kernel modules) - /sbin/lsmod +2021-01-07 17:51:10 Found known binary: lvdisplay (LVM tool) - /sbin/lvdisplay +2021-01-07 17:51:10 Found known binary: modprobe (kernel modules) - /sbin/modprobe +2021-01-07 17:51:10 Found known binary: runlevel (system utility) - /sbin/runlevel +2021-01-07 17:51:10 Found known binary: swapon (swap device tool) - /sbin/swapon +2021-01-07 17:51:10 Found known binary: sysctl (kernel parameters) - /sbin/sysctl +2021-01-07 17:51:10 Found known binary: tune2fs (file system tool) - /sbin/tune2fs +2021-01-07 17:51:10 Found known binary: veritysetup (dm-verity setup tool) - /sbin/veritysetup +2021-01-07 17:51:10 Found known binary: vgdisplay (LVM tool) - /sbin/vgdisplay +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/bin +2021-01-07 17:51:10 Directory /usr/bin exists. Starting directory scanning... +2021-01-07 17:51:10 Found known binary: apt (package manager) - /usr/bin/apt +2021-01-07 17:51:10 Found known binary: awk (string tool) - /usr/bin/awk +2021-01-07 17:51:10 Found known binary: base64 (encoding tool) - /usr/bin/base64 +2021-01-07 17:51:10 Found known binary: bootctl (systemd-boot manager utility) - /usr/bin/bootctl +2021-01-07 17:51:10 Found known binary: comm (file compare) - /usr/bin/comm +2021-01-07 17:51:10 Found known binary: curl (browser, download utility) - /usr/bin/curl +2021-01-07 17:51:10 Found known binary: cut (text stream editor) - /usr/bin/cut +2021-01-07 17:51:10 Found known binary: dpkg (package management) - /usr/bin/dpkg +2021-01-07 17:51:10 Found known binary: find (search tool) - /usr/bin/find +2021-01-07 17:51:10 Found known binary: getent (query tool for name service switch libraries) - /usr/bin/getent +2021-01-07 17:51:10 Found known binary: head (text filter) - /usr/bin/head +2021-01-07 17:51:10 Found known binary: lsattr (file attributes) - /usr/bin/lsattr +2021-01-07 17:51:10 Found known binary: md5sum (hash tool) - /usr/bin/md5sum +2021-01-07 17:51:10 Found /usr/bin/openssl (version 1.0.2g) +2021-01-07 17:51:10 Found /usr/bin/perl (version 5.22.1) +2021-01-07 17:51:10 Found known binary: pgrep (search in process list) - /usr/bin/pgrep +2021-01-07 17:51:10 Found known binary: python3 (programming language interpreter) - /usr/bin/python3 (version 3.5.2) +2021-01-07 17:51:10 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/sha1sum +2021-01-07 17:51:10 Found known binary: sha256/sha256sum (crypto hashing) - /usr/bin/sha256sum +2021-01-07 17:51:10 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/shasum +2021-01-07 17:51:10 Found known binary: sort (sort data streams) - /usr/bin/sort +2021-01-07 17:51:10 Found known binary: ssh-keyscan (scanner for SSH keys) - /usr/bin/ssh-keyscan +2021-01-07 17:51:10 Found known binary: stat (file information) - /usr/bin/stat +2021-01-07 17:51:10 Found known binary: systemd-analyze (systemd service analysis tool) - /usr/bin/systemd-analyze +2021-01-07 17:51:10 Found known binary: tail (text filter) - /usr/bin/tail +2021-01-07 17:51:10 Found known binary: timedatectl (timedate client) - /usr/bin/timedatectl +2021-01-07 17:51:10 Found known binary: tr (text transformation) - /usr/bin/tr +2021-01-07 17:51:10 Found known binary: uniq (text manipulation utility) - /usr/bin/uniq +2021-01-07 17:51:10 Found known binary: wc (word count) - /usr/bin/wc +2021-01-07 17:51:10 Found /usr/bin/wget (version 1.17.1) +2021-01-07 17:51:10 Found known binary: xargs (command output redirection) - /usr/bin/xargs +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/sbin +2021-01-07 17:51:10 Directory /usr/sbin exists. Starting directory scanning... +2021-01-07 17:51:10 Found known binary: grpck (consistency checker) - /usr/sbin/grpck +2021-01-07 17:51:10 Found known binary: logrotate (log rotation tool) - /usr/sbin/logrotate +2021-01-07 17:51:10 Found known binary: service (system services) - /usr/sbin/service +2021-01-07 17:51:10 Found /usr/sbin/sshd (version 7.2) +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/local/bin +2021-01-07 17:51:10 Directory /usr/local/bin exists. Starting directory scanning... +2021-01-07 17:51:10 Test: Checking binaries in directory /usr/local/sbin +2021-01-07 17:51:10 Directory /usr/local/sbin exists. Starting directory scanning... +2021-01-07 17:51:10 Discovered directories: /usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +2021-01-07 17:51:10 Result: found 992 binaries including 16 set-uid and 12 set-gid +2021-01-07 17:51:10 Result: set-uid binaries: /bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit +2021-01-07 17:51:10 Result: set-gid binaries: /sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/expiry /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Informational: package manager is used +2021-01-07 17:51:10 Test: Determine if this system is a virtual machine +2021-01-07 17:51:10 Result: facter utility not found +2021-01-07 17:51:10 Test: trying to guess virtualization technology with systemd-detect-virt +2021-01-07 17:51:10 Result: found kvm +2021-01-07 17:51:10 Result: skipped lscpu test, as we already found machine type +2021-01-07 17:51:10 Result: skipped dmidecode test, as we already found machine type +2021-01-07 17:51:10 Result: skipped processes test, as we already found platform +2021-01-07 17:51:10 Result: skipped Amazon EC2 test, as we already found platform +2021-01-07 17:51:10 Result: skipped sysctl test, as we already found platform +2021-01-07 17:51:10 Result: skipped lshw test, as we already found machine type +2021-01-07 17:51:10 Result: found virtual machine (type: kvm, KVM) +2021-01-07 17:51:10 Result: Lynis is not running in container +2021-01-07 17:51:10 Result: system is using systemd +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Action: Performing plugin tests +2021-01-07 17:51:10 Searching plugins... +2021-01-07 17:51:10 Found plugin file: ./plugins/plugin_pam_phase1 +2021-01-07 17:51:10 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:51:10 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:10 Result: plugin pam is enabled +2021-01-07 17:51:10 Checking permissions of ./plugins/plugin_pam_phase1 +2021-01-07 17:51:10 File permissions are OK +2021-01-07 17:51:10 Including plugin file: ./plugins/plugin_pam_phase1 (version: 1.0.5) +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Skipped test PLGN-0008 (Check PAM configuration (pwquality.conf)) +2021-01-07 17:51:10 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:10 ==== +2021-01-07 17:51:10 Performing test ID PLGN-0010 (Check PAM configuration) +2021-01-07 17:51:10 Result: /etc/pam.d exists +2021-01-07 17:51:10 Now checking PAM file /etc/pam.d/chpasswd +2021-01-07 17:51:10 Now checking PAM file /etc/pam.d/newusers +2021-01-07 17:51:10 Now checking PAM file /etc/pam.d/su +2021-01-07 17:51:10 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:51:10 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:51:10 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:51:10 Result: using module pam_mail.so (optional) with options nopen +2021-01-07 17:51:10 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:10 Now checking PAM file /etc/pam.d/other +2021-01-07 17:51:11 Now checking PAM file /etc/pam.d/cron +2021-01-07 17:51:11 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:51:11 Result: using module pam_env.so (required) without options configured +2021-01-07 17:51:11 Result: using module pam_env.so (required) with options envfile=/etc/default/locale +2021-01-07 17:51:11 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:11 Now checking PAM file /etc/pam.d/login +2021-01-07 17:51:11 Result: using module pam_faildelay.so (optional) with options delay=3000000 +2021-01-07 17:51:11 Result: Found brackets in line, indicating multiple options for control flags: success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die +2021-01-07 17:51:11 Result: brackets used, ignoring control flags +2021-01-07 17:51:11 Result: using module pam_securetty.so (other) without options configured +2021-01-07 17:51:11 Result: using module pam_nologin.so (requisite) without options configured +2021-01-07 17:51:11 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:51:11 Result: brackets used, ignoring control flags +2021-01-07 17:51:11 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:51:11 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:51:11 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:51:11 Result: using module pam_group.so (optional) without options configured +2021-01-07 17:51:11 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:11 Result: using module pam_lastlog.so (optional) without options configured +2021-01-07 17:51:11 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:51:11 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:51:11 Result: using module pam_mail.so (optional) with options standard +2021-01-07 17:51:11 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:51:11 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:51:11 Result: brackets used, ignoring control flags +2021-01-07 17:51:11 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:51:11 Now checking PAM file /etc/pam.d/sshd +2021-01-07 17:51:11 Result: using module pam_nologin.so (required) without options configured +2021-01-07 17:51:11 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:51:11 Result: brackets used, ignoring control flags +2021-01-07 17:51:11 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:51:11 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:51:11 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:51:11 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:51:11 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:51:11 Result: using module pam_mail.so (optional) with options standard noenv +2021-01-07 17:51:12 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:12 Result: using module pam_env.so (required) without options configured +2021-01-07 17:51:12 Result: using module pam_env.so (required) with options user_readenv=1 envfile=/etc/default/locale +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/common-auth +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_unix.so (other) with options nullok_secure +2021-01-07 17:51:12 Result: found pam_unix.so module (generic) +2021-01-07 17:51:12 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:51:12 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/common-session +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:51:12 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:51:12 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:51:12 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:51:12 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:51:12 Result: found pam_unix.so module (generic) +2021-01-07 17:51:12 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/systemd-user +2021-01-07 17:51:12 Result: using module pam_selinux.so (required) with options close +2021-01-07 17:51:12 Result: using module pam_selinux.so (required) with options nottys open +2021-01-07 17:51:12 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/passwd +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/common-account +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: success=1 new_authtok_reqd=done default=ignore +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_unix.so (other) without options configured +2021-01-07 17:51:12 Result: found pam_unix.so module (generic) +2021-01-07 17:51:12 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:51:12 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/sudo +2021-01-07 17:51:12 Result: using module pam_env.so (required) with options readenv=1 user_readenv=0 +2021-01-07 17:51:12 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale user_readenv=0 +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/common-password +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_unix.so (other) with options obscure sha512 +2021-01-07 17:51:12 Result: found pam_unix.so module (generic) +2021-01-07 17:51:12 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:51:12 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/chsh +2021-01-07 17:51:12 Result: using module pam_shells.so (required) without options configured +2021-01-07 17:51:12 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:51:12 Now checking PAM file /etc/pam.d/common-session-noninteractive +2021-01-07 17:51:12 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:51:12 Result: brackets used, ignoring control flags +2021-01-07 17:51:12 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:51:13 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:51:13 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:51:13 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:51:13 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:51:13 Result: found pam_unix.so module (generic) +2021-01-07 17:51:13 Now checking PAM file /etc/pam.d/atd +2021-01-07 17:51:13 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:51:13 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:13 Result: using module pam_env.so (required) with options user_readenv=1 +2021-01-07 17:51:13 Now checking PAM file /etc/pam.d/chfn +2021-01-07 17:51:13 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:51:13 Now checking PAM file /etc/pam.d/runuser-l +2021-01-07 17:51:13 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:51:13 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:51:13 Now checking PAM file /etc/pam.d/runuser +2021-01-07 17:51:13 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:51:13 Result: using module pam_keyinit.so (optional) with options revoke +2021-01-07 17:51:13 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:51:13 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:51:13 Result: found pam_unix.so module (generic) +2021-01-07 17:51:13 [PAM] PAM 2F authentication enabled: 0 +2021-01-07 17:51:13 [PAM] PAM 2F authentication required: 0 +2021-01-07 17:51:13 [PAM] Authentication unlock time: not configured +2021-01-07 17:51:13 [PAM] Password brute force protection: 0 +2021-01-07 17:51:13 [PAM] Minimum password length: not configured +2021-01-07 17:51:13 [PAM] Password strength testing enabled: 0 +2021-01-07 17:51:13 [PAM] Password maximum retry: Not configured +2021-01-07 17:51:13 [PAM] Password history with pam_pwhistory IS NOT enabled +2021-01-07 17:51:13 [PAM] Password history with pam_unix IS NOT enabled +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Result: pam plugin (phase 1) finished +2021-01-07 17:51:13 -- +2021-01-07 17:51:13 Found plugin file: ./plugins/plugin_systemd_phase1 +2021-01-07 17:51:13 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:51:13 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:51:13 Result: plugin systemd is enabled +2021-01-07 17:51:13 Checking permissions of ./plugins/plugin_systemd_phase1 +2021-01-07 17:51:13 File permissions are OK +2021-01-07 17:51:13 Including plugin file: ./plugins/plugin_systemd_phase1 (version: 1.0.4) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3800 (Gather systemctl exit code) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3802 (Query systemd version and options) +2021-01-07 17:51:13 Result: found systemd version 229 +2021-01-07 17:51:13 Result: found builtin components list +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3804 (Gather systemd unit files and their status) +2021-01-07 17:51:13 Result: found systemd unit files via systemctl list-unit-files +2021-01-07 17:51:13 Output: proc-sys-fs-binfmt_misc.automount|static| +2021-01-07 17:51:13 Output: dev-hugepages.mount|static| +2021-01-07 17:51:13 Output: dev-mqueue.mount|static| +2021-01-07 17:51:13 Output: proc-sys-fs-binfmt_misc.mount|static| +2021-01-07 17:51:13 Output: sys-fs-fuse-connections.mount|static| +2021-01-07 17:51:13 Output: sys-kernel-config.mount|static| +2021-01-07 17:51:13 Output: sys-kernel-debug.mount|static| +2021-01-07 17:51:13 Output: acpid.path|enabled| +2021-01-07 17:51:13 Output: systemd-ask-password-console.path|static| +2021-01-07 17:51:13 Output: systemd-ask-password-plymouth.path|static| +2021-01-07 17:51:13 Output: systemd-ask-password-wall.path|static| +2021-01-07 17:51:13 Output: systemd-networkd-resolvconf-update.path|static| +2021-01-07 17:51:13 Output: acpid.service|disabled| +2021-01-07 17:51:13 Output: apt-daily-upgrade.service|static| +2021-01-07 17:51:13 Output: apt-daily.service|static| +2021-01-07 17:51:13 Output: atd.service|enabled| +2021-01-07 17:51:13 Output: autovt@.service|enabled| +2021-01-07 17:51:13 Output: bootlogd.service|masked| +2021-01-07 17:51:13 Output: bootlogs.service|masked| +2021-01-07 17:51:13 Output: bootmisc.service|masked| +2021-01-07 17:51:13 Output: checkfs.service|masked| +2021-01-07 17:51:13 Output: checkroot-bootclean.service|masked| +2021-01-07 17:51:13 Output: checkroot.service|masked| +2021-01-07 17:51:13 Output: cloud-config.service|enabled| +2021-01-07 17:51:13 Output: cloud-final.service|enabled| +2021-01-07 17:51:13 Output: cloud-init-local.service|enabled| +2021-01-07 17:51:13 Output: cloud-init.service|enabled| +2021-01-07 17:51:13 Output: console-getty.service|disabled| +2021-01-07 17:51:13 Output: console-setup.service|static| +2021-01-07 17:51:13 Output: console-shell.service|disabled| +2021-01-07 17:51:13 Output: container-getty@.service|static| +2021-01-07 17:51:13 Output: cron.service|enabled| +2021-01-07 17:51:13 Output: cryptdisks-early.service|masked| +2021-01-07 17:51:13 Output: cryptdisks.service|masked| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.hostname1.service|static| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.locale1.service|static| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.login1.service|static| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.network1.service|disabled| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.resolve1.service|disabled| +2021-01-07 17:51:13 Output: dbus-org.freedesktop.timedate1.service|static| +2021-01-07 17:51:13 Output: dbus.service|static| +2021-01-07 17:51:13 Output: debug-shell.service|disabled| +2021-01-07 17:51:13 Output: dm-event.service|disabled| +2021-01-07 17:51:13 Output: emergency.service|static| +2021-01-07 17:51:13 Output: fuse.service|masked| +2021-01-07 17:51:13 Output: getty-static.service|static| +2021-01-07 17:51:13 Output: getty@.service|enabled| +2021-01-07 17:51:13 Output: halt.service|masked| +2021-01-07 17:51:13 Output: hc-net-ifup@.service|static| +2021-01-07 17:51:13 Output: hc-net-scan.service|enabled| +2021-01-07 17:51:13 Output: hostname.service|masked| +2021-01-07 17:51:13 Output: hwclock.service|masked| +2021-01-07 17:51:13 Output: ifup@.service|static| +2021-01-07 17:51:13 Output: initrd-cleanup.service|static| +2021-01-07 17:51:13 Output: initrd-parse-etc.service|static| +2021-01-07 17:51:13 Output: initrd-switch-root.service|static| +2021-01-07 17:51:13 Output: initrd-udevadm-cleanup-db.service|static| +2021-01-07 17:51:13 Output: keyboard-setup.service|disabled| +2021-01-07 17:51:13 Output: killprocs.service|masked| +2021-01-07 17:51:13 Output: kmod-static-nodes.service|static| +2021-01-07 17:51:13 Output: kmod.service|static| +2021-01-07 17:51:13 Output: lvm2-lvmetad.service|disabled| +2021-01-07 17:51:13 Output: lvm2-lvmpolld.service|disabled| +2021-01-07 17:51:13 Output: lvm2-monitor.service|enabled| +2021-01-07 17:51:13 Output: lvm2-pvscan@.service|static| +2021-01-07 17:51:13 Output: lvm2.service|masked| +2021-01-07 17:51:13 Output: mdadm-shutdown.service|disabled| +2021-01-07 17:51:13 Output: module-init-tools.service|static| +2021-01-07 17:51:13 Output: motd-news.service|static| +2021-01-07 17:51:13 Output: motd.service|masked| +2021-01-07 17:51:13 Output: mountall-bootclean.service|masked| +2021-01-07 17:51:13 Output: mountall.service|masked| +2021-01-07 17:51:13 Output: mountdevsubfs.service|masked| +2021-01-07 17:51:13 Output: mountkernfs.service|masked| +2021-01-07 17:51:13 Output: mountnfs-bootclean.service|masked| +2021-01-07 17:51:13 Output: mountnfs.service|masked| +2021-01-07 17:51:13 Output: networking.service|enabled| +2021-01-07 17:51:13 Output: plymouth-halt.service|static| +2021-01-07 17:51:13 Output: plymouth-kexec.service|static| +2021-01-07 17:51:13 Output: plymouth-log.service|static| +2021-01-07 17:51:13 Output: plymouth-poweroff.service|static| +2021-01-07 17:51:13 Output: plymouth-quit-wait.service|static| +2021-01-07 17:51:13 Output: plymouth-quit.service|static| +2021-01-07 17:51:13 Output: plymouth-read-write.service|static| +2021-01-07 17:51:13 Output: plymouth-reboot.service|static| +2021-01-07 17:51:13 Output: plymouth-start.service|static| +2021-01-07 17:51:13 Output: plymouth-switch-root.service|static| +2021-01-07 17:51:13 Output: plymouth.service|static| +2021-01-07 17:51:13 Output: pollinate.service|enabled| +2021-01-07 17:51:13 Output: procps.service|static| +2021-01-07 17:51:13 Output: quotaon.service|static| +2021-01-07 17:51:13 Output: rc-local.service|static| +2021-01-07 17:51:13 Output: rc.local.service|static| +2021-01-07 17:51:13 Output: rc.service|masked| +2021-01-07 17:51:13 Output: rcS.service|masked| +2021-01-07 17:51:13 Output: reboot.service|masked| +2021-01-07 17:51:13 Output: rescue.service|static| +2021-01-07 17:51:13 Output: resolvconf.service|enabled| +2021-01-07 17:51:13 Output: rmnologin.service|masked| +2021-01-07 17:51:13 Output: rsync.service|disabled| +2021-01-07 17:51:13 Output: rsyslog.service|enabled| +2021-01-07 17:51:13 Output: sendsigs.service|masked| +2021-01-07 17:51:13 Output: serial-getty@.service|disabled| +2021-01-07 17:51:13 Output: setvtrgb.service|static| +2021-01-07 17:51:13 Output: sigpwr-container-shutdown.service|static| +2021-01-07 17:51:13 Output: single.service|masked| +2021-01-07 17:51:13 Output: ssh.service|enabled| +2021-01-07 17:51:13 Output: ssh@.service|static| +2021-01-07 17:51:13 Output: sshd.service|enabled| +2021-01-07 17:51:13 Output: stop-bootlogd-single.service|masked| +2021-01-07 17:51:13 Output: stop-bootlogd.service|masked| +2021-01-07 17:51:13 Output: syslog.service|enabled| +2021-01-07 17:51:13 Output: systemd-ask-password-console.service|static| +2021-01-07 17:51:13 Output: systemd-ask-password-plymouth.service|static| +2021-01-07 17:51:13 Output: systemd-ask-password-wall.service|static| +2021-01-07 17:51:13 Output: systemd-backlight@.service|static| +2021-01-07 17:51:13 Output: systemd-binfmt.service|static| +2021-01-07 17:51:13 Output: systemd-bootchart.service|disabled| +2021-01-07 17:51:13 Output: systemd-bus-proxyd.service|static| +2021-01-07 17:51:13 Output: systemd-exit.service|static| +2021-01-07 17:51:13 Output: systemd-fsck-root.service|static| +2021-01-07 17:51:13 Output: systemd-fsck@.service|static| +2021-01-07 17:51:13 Output: systemd-fsckd.service|static| +2021-01-07 17:51:13 Output: systemd-halt.service|static| +2021-01-07 17:51:13 Output: systemd-hibernate-resume@.service|static| +2021-01-07 17:51:13 Output: systemd-hibernate.service|static| +2021-01-07 17:51:13 Output: systemd-hostnamed.service|static| +2021-01-07 17:51:13 Output: systemd-hwdb-update.service|static| +2021-01-07 17:51:13 Output: systemd-hybrid-sleep.service|static| +2021-01-07 17:51:13 Output: systemd-initctl.service|static| +2021-01-07 17:51:13 Output: systemd-journal-flush.service|static| +2021-01-07 17:51:13 Output: systemd-journald.service|static| +2021-01-07 17:51:13 Output: systemd-kexec.service|static| +2021-01-07 17:51:13 Output: systemd-localed.service|static| +2021-01-07 17:51:13 Output: systemd-logind.service|static| +2021-01-07 17:51:13 Output: systemd-machine-id-commit.service|static| +2021-01-07 17:51:13 Output: systemd-modules-load.service|static| +2021-01-07 17:51:13 Output: systemd-networkd-resolvconf-update.service|static| +2021-01-07 17:51:13 Output: systemd-networkd-wait-online.service|disabled| +2021-01-07 17:51:13 Output: systemd-networkd.service|disabled| +2021-01-07 17:51:13 Output: systemd-poweroff.service|static| +2021-01-07 17:51:13 Output: systemd-quotacheck.service|static| +2021-01-07 17:51:13 Output: systemd-random-seed.service|static| +2021-01-07 17:51:13 Output: systemd-reboot.service|static| +2021-01-07 17:51:13 Output: systemd-remount-fs.service|static| +2021-01-07 17:51:13 Output: systemd-resolved.service|disabled| +2021-01-07 17:51:13 Output: systemd-rfkill.service|static| +2021-01-07 17:51:13 Output: systemd-suspend.service|static| +2021-01-07 17:51:13 Output: systemd-sysctl.service|static| +2021-01-07 17:51:13 Output: systemd-timedated.service|static| +2021-01-07 17:51:13 Output: systemd-timesyncd.service|enabled| +2021-01-07 17:51:13 Output: systemd-tmpfiles-clean.service|static| +2021-01-07 17:51:13 Output: systemd-tmpfiles-setup-dev.service|static| +2021-01-07 17:51:13 Output: systemd-tmpfiles-setup.service|static| +2021-01-07 17:51:13 Output: systemd-udev-settle.service|static| +2021-01-07 17:51:13 Output: systemd-udev-trigger.service|static| +2021-01-07 17:51:13 Output: systemd-udevd.service|static| +2021-01-07 17:51:13 Output: systemd-update-utmp-runlevel.service|static| +2021-01-07 17:51:13 Output: systemd-update-utmp.service|static| +2021-01-07 17:51:13 Output: systemd-user-sessions.service|static| +2021-01-07 17:51:13 Output: udev.service|static| +2021-01-07 17:51:13 Output: umountfs.service|masked| +2021-01-07 17:51:13 Output: umountnfs.service|masked| +2021-01-07 17:51:13 Output: umountroot.service|masked| +2021-01-07 17:51:13 Output: unattended-upgrades.service|enabled| +2021-01-07 17:51:13 Output: urandom.service|static| +2021-01-07 17:51:13 Output: ureadahead-stop.service|static| +2021-01-07 17:51:13 Output: ureadahead.service|enabled| +2021-01-07 17:51:13 Output: user@.service|static| +2021-01-07 17:51:13 Output: x11-common.service|masked| +2021-01-07 17:51:13 Output: -.slice|static| +2021-01-07 17:51:13 Output: machine.slice|static| +2021-01-07 17:51:13 Output: system.slice|static| +2021-01-07 17:51:13 Output: user.slice|static| +2021-01-07 17:51:13 Output: acpid.socket|enabled| +2021-01-07 17:51:13 Output: dbus.socket|static| +2021-01-07 17:51:13 Output: dm-event.socket|enabled| +2021-01-07 17:51:13 Output: lvm2-lvmetad.socket|enabled| +2021-01-07 17:51:13 Output: lvm2-lvmpolld.socket|enabled| +2021-01-07 17:51:13 Output: ssh.socket|disabled| +2021-01-07 17:51:13 Output: syslog.socket|static| +2021-01-07 17:51:13 Output: systemd-bus-proxyd.socket|static| +2021-01-07 17:51:13 Output: systemd-fsckd.socket|static| +2021-01-07 17:51:13 Output: systemd-initctl.socket|static| +2021-01-07 17:51:13 Output: systemd-journald-audit.socket|static| +2021-01-07 17:51:13 Output: systemd-journald-dev-log.socket|static| +2021-01-07 17:51:13 Output: systemd-journald.socket|static| +2021-01-07 17:51:13 Output: systemd-networkd.socket|disabled| +2021-01-07 17:51:13 Output: systemd-rfkill.socket|static| +2021-01-07 17:51:13 Output: systemd-udevd-control.socket|static| +2021-01-07 17:51:13 Output: systemd-udevd-kernel.socket|static| +2021-01-07 17:51:13 Output: basic.target|static| +2021-01-07 17:51:13 Output: bluetooth.target|static| +2021-01-07 17:51:13 Output: busnames.target|static| +2021-01-07 17:51:13 Output: cloud-config.target|static| +2021-01-07 17:51:13 Output: cloud-init.target|static| +2021-01-07 17:51:13 Output: cryptsetup-pre.target|static| +2021-01-07 17:51:13 Output: cryptsetup.target|static| +2021-01-07 17:51:13 Output: ctrl-alt-del.target|disabled| +2021-01-07 17:51:13 Output: default.target|static| +2021-01-07 17:51:13 Output: emergency.target|static| +2021-01-07 17:51:13 Output: exit.target|disabled| +2021-01-07 17:51:13 Output: final.target|static| +2021-01-07 17:51:13 Output: getty.target|static| +2021-01-07 17:51:13 Output: graphical.target|static| +2021-01-07 17:51:13 Output: halt.target|disabled| +2021-01-07 17:51:13 Output: hibernate.target|static| +2021-01-07 17:51:13 Output: hybrid-sleep.target|static| +2021-01-07 17:51:13 Output: initrd-fs.target|static| +2021-01-07 17:51:13 Output: initrd-root-fs.target|static| +2021-01-07 17:51:13 Output: initrd-switch-root.target|static| +2021-01-07 17:51:13 Output: initrd.target|static| +2021-01-07 17:51:13 Output: kexec.target|disabled| +2021-01-07 17:51:13 Output: local-fs-pre.target|static| +2021-01-07 17:51:13 Output: local-fs.target|static| +2021-01-07 17:51:13 Output: mail-transport-agent.target|static| +2021-01-07 17:51:13 Output: multi-user.target|static| +2021-01-07 17:51:13 Output: network-online.target|static| +2021-01-07 17:51:13 Output: network-pre.target|static| +2021-01-07 17:51:13 Output: network.target|static| +2021-01-07 17:51:13 Output: nss-lookup.target|static| +2021-01-07 17:51:13 Output: nss-user-lookup.target|static| +2021-01-07 17:51:13 Output: paths.target|static| +2021-01-07 17:51:13 Output: poweroff.target|disabled| +2021-01-07 17:51:13 Output: printer.target|static| +2021-01-07 17:51:13 Output: reboot.target|disabled| +2021-01-07 17:51:13 Output: remote-fs-pre.target|static| +2021-01-07 17:51:13 Output: remote-fs.target|enabled| +2021-01-07 17:51:13 Output: rescue.target|disabled| +2021-01-07 17:51:13 Output: rpcbind.target|static| +2021-01-07 17:51:13 Output: runlevel0.target|disabled| +2021-01-07 17:51:13 Output: runlevel1.target|disabled| +2021-01-07 17:51:13 Output: runlevel2.target|static| +2021-01-07 17:51:13 Output: runlevel3.target|static| +2021-01-07 17:51:13 Output: runlevel4.target|static| +2021-01-07 17:51:13 Output: runlevel5.target|static| +2021-01-07 17:51:13 Output: runlevel6.target|disabled| +2021-01-07 17:51:13 Output: shutdown.target|static| +2021-01-07 17:51:13 Output: sigpwr.target|static| +2021-01-07 17:51:13 Output: sleep.target|static| +2021-01-07 17:51:13 Output: slices.target|static| +2021-01-07 17:51:13 Output: smartcard.target|static| +2021-01-07 17:51:13 Output: sockets.target|static| +2021-01-07 17:51:13 Output: sound.target|static| +2021-01-07 17:51:13 Output: suspend.target|static| +2021-01-07 17:51:13 Output: swap.target|static| +2021-01-07 17:51:13 Output: sysinit.target|static| +2021-01-07 17:51:13 Output: system-update.target|static| +2021-01-07 17:51:13 Output: time-sync.target|static| +2021-01-07 17:51:13 Output: timers.target|static| +2021-01-07 17:51:13 Output: umount.target|static| +2021-01-07 17:51:13 Output: apt-daily-upgrade.timer|enabled| +2021-01-07 17:51:13 Output: apt-daily.timer|enabled| +2021-01-07 17:51:13 Output: motd-news.timer|enabled| +2021-01-07 17:51:13 Output: systemd-tmpfiles-clean.timer|static| +2021-01-07 17:51:13 Output: ureadahead-stop.timer|static| +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3806 (Gather failed systemd units) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3808 (Gather systemd machine ID) +2021-01-07 17:51:13 Result: found machine ID: 69729f16b49d4ddd97099d6ef60261e2 +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3810 (Query main systemd binaries) +2021-01-07 17:51:13 Result: no binaries found in /usr/lib/systemd +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3812 (Query journal for boot related information) +2021-01-07 17:51:13 Output: number of boots listed in journal is 1 +2021-01-07 17:51:13 Output: oldest boot date in journal is 2021-01-07 +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3814 (Verify journal integrity) +2021-01-07 17:51:13 Result: systemd journal has no errors +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3816 (Query journal for boot related information) +2021-01-07 17:51:13 Result: journals are 2.4M in size +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3818 (Query journal meta data) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3820 (Check for journal FSS configuration) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3830 (Query systemd status) +2021-01-07 17:51:13 Result: found systemd status = running +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3832 (Query systemd status for processes which can not be found) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3834 (Collect service units which can not be found in systemd) +2021-01-07 17:51:13 Result: found one or more services with faulty state +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) apparmor.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) auditd.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) console-screen.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) display-manager.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) hv_kvp_daemon.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) kbd.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) lvm2-activation.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) NetworkManager.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) snapd.seeded.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) sshd-keygen.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) systemd-sysusers.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) systemd-update-done.service +2021-01-07 17:51:13 Result: service seems to be faulty (not-found) systemd-vconsole-setup.service +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3856 (Check if systemd-coredump is used) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID PLGN-3860 (Query coredumps from journals since Yesterday) +2021-01-07 17:51:13 Result: found no coredumps +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Result: systemd plugin (phase 1) finished +2021-01-07 17:51:13 -- +2021-01-07 17:51:13 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:51:13 Result: Plugins phase 1 finished +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Info: using hardware address 96:00:00:8b:fc:bd to create ID +2021-01-07 17:51:13 Result: Found HostID: 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:51:13 Info: creating a HostID (version 2) +2021-01-07 17:51:13 Result: found file ssh_host_ed25519_key.pub in /etc/ssh, using that to create host identifier +2021-01-07 17:51:13 Using SSH public key to create the second host identifier +2021-01-07 17:51:13 Hash (hostname): 416e24601be51bc2d559991c1bad1cf3454cb2fcb9a22233aa9d05c6bccbd29d +2021-01-07 17:51:13 Hash (ssh or machineid): 7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +2021-01-07 17:51:13 Info: found valid HostID 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:51:13 Info: no machine ID found +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Info: perform tests from all categories +2021-01-07 17:51:13 Security check: file is normal +2021-01-07 17:51:13 Checking permissions of /root/scans/lynis/include/tests_boot_services +2021-01-07 17:51:13 File permissions are OK +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Action: Performing tests from category: Boot and services +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Skipped test BOOT-5102 (Check for AIX boot device) +2021-01-07 17:51:13 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5104 (Determine service manager) +2021-01-07 17:51:13 Result: cmdline found = /sbin/init +2021-01-07 17:51:13 Result: file on disk = /sbin/init +2021-01-07 17:51:13 Action: checking symlink for file /sbin/init +2021-01-07 17:51:13 Note: Using real readlink binary to determine symlink on /sbin/init +2021-01-07 17:51:13 Result: readlink shows /lib/systemd/systemd as output +2021-01-07 17:51:13 Result: symlink found, pointing to file /lib/systemd/systemd +2021-01-07 17:51:13 Found: systemd +2021-01-07 17:51:13 Result: service manager found = systemd +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Skipped test BOOT-5106 (Check EFI boot file on Mac OS X/macOS) +2021-01-07 17:51:13 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5108 (Check Syslinux as bootloader) +2021-01-07 17:51:13 Test: checking if file /boot/syslinux/syslinux.cfg exists +2021-01-07 17:51:13 Result: file /boot/syslinux/syslinux.cfg NOT found +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5109 (Check rEFInd as bootloader) +2021-01-07 17:51:13 Test: checking if file /boot/refind_linux.conf exists +2021-01-07 17:51:13 Result: file /boot/refind_linux.conf NOT found +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5116 (Check if system is booted in UEFI mode) +2021-01-07 17:51:13 Test: checking if UEFI is used +2021-01-07 17:51:13 Result: UEFI not used, can't find /sys/firmware/efi directory +2021-01-07 17:51:13 Test: determine if Secure Boot is used +2021-01-07 17:51:13 Result: system not booted with Secure Boot (no SecureBoot file found) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Skipped test BOOT-5117 (Check for systemd-boot bootloader presence) +2021-01-07 17:51:13 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5121 (Check for GRUB boot loader presence) +2021-01-07 17:51:13 Test: Checking for presence GRUB conf file (/boot/grub/grub.conf or /boot/grub/menu.lst) +2021-01-07 17:51:13 Result: found GRUB2 configuration file (/boot/grub/grub.cfg) +2021-01-07 17:51:13 ==== +2021-01-07 17:51:13 Performing test ID BOOT-5122 (Check for GRUB boot password) +2021-01-07 17:51:13 Found file /boot/grub/grub.cfg, proceeding with tests. +2021-01-07 17:51:13 Test: check if we can access /boot/grub/grub.cfg (escaped: /boot/grub/grub.cfg) +2021-01-07 17:51:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:13 Result: file /boot/grub/grub.cfg is readable (or directory accessible). +2021-01-07 17:51:13 Result: did not find hashed password line in this file +2021-01-07 17:51:13 Result: File '/boot/grub/custom.cfg' does not exist +2021-01-07 17:51:13 Found file /etc/grub.d/00_header, proceeding with tests. +2021-01-07 17:51:13 Test: check if we can access /etc/grub.d/00_header (escaped: /etc/grub.d/00_header) +2021-01-07 17:51:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:13 Result: file /etc/grub.d/00_header is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/05_debian_theme, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/05_debian_theme (escaped: /etc/grub.d/05_debian_theme) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/05_debian_theme is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/10_linux, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/10_linux (escaped: /etc/grub.d/10_linux) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/10_linux is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/30_os-prober, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/30_os-prober (escaped: /etc/grub.d/30_os-prober) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/30_os-prober is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/40_custom, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/40_custom (escaped: /etc/grub.d/40_custom) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/40_custom is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/41_custom, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/41_custom (escaped: /etc/grub.d/41_custom) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/41_custom is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/20_linux_xen, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/20_linux_xen (escaped: /etc/grub.d/20_linux_xen) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/20_linux_xen is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Found file /etc/grub.d/30_uefi-firmware, proceeding with tests. +2021-01-07 17:51:14 Test: check if we can access /etc/grub.d/30_uefi-firmware (escaped: /etc/grub.d/30_uefi-firmware) +2021-01-07 17:51:14 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:14 Result: file /etc/grub.d/30_uefi-firmware is readable (or directory accessible). +2021-01-07 17:51:14 Result: did not find hashed password line in this file +2021-01-07 17:51:14 Result: Didn't find hashed password line in GRUB configuration +2021-01-07 17:51:14 Suggestion: Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [test:BOOT-5122] [details:-] [solution:-] +2021-01-07 17:51:14 Hardening: assigned partial number of hardening points (0 of 2). Currently having 0 points (out of 2) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5124 (Check for FreeBSD boot loader presence) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5261 (Check for DragonFly boot loader presence) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5126 (Check for NetBSD boot loader presence) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5139 (Check for LILO boot loader presence) +2021-01-07 17:51:14 Test: checking for presence LILO configuration file +2021-01-07 17:51:14 Result: LILO configuration file not found +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5142 (Check SPARC Improved boot loader (SILO)) +2021-01-07 17:51:14 Result: no SILO configuration file found. +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5155 (Check for YABOOT boot loader configuration file) +2021-01-07 17:51:14 Test: Check for /etc/yaboot.conf +2021-01-07 17:51:14 Result: no YABOOT configuration file found. +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5159 (Check for OpenBSD boot loader presence) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5165 (Check for FreeBSD boot services) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5170 (Check for Solaris boot daemons) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5177 (Check for Linux boot and running services) +2021-01-07 17:51:14 Test: checking presence systemctl binary +2021-01-07 17:51:14 Result: systemctl binary found, trying that to discover information +2021-01-07 17:51:14 Searching for running services (systemctl services only) +2021-01-07 17:51:14 Found running service: acpid +2021-01-07 17:51:14 Found running service: atd +2021-01-07 17:51:14 Found running service: cron +2021-01-07 17:51:14 Found running service: dbus +2021-01-07 17:51:14 Found running service: getty@tty1 +2021-01-07 17:51:14 Found running service: lvm2-lvmetad +2021-01-07 17:51:14 Found running service: mdadm +2021-01-07 17:51:14 Found running service: qemu-guest-agent +2021-01-07 17:51:14 Found running service: rsyslog +2021-01-07 17:51:14 Found running service: serial-getty@ttyS0 +2021-01-07 17:51:14 Found running service: ssh +2021-01-07 17:51:14 Found running service: systemd-journald +2021-01-07 17:51:14 Found running service: systemd-logind +2021-01-07 17:51:14 Found running service: systemd-resolved +2021-01-07 17:51:14 Found running service: systemd-timesyncd +2021-01-07 17:51:14 Found running service: systemd-udevd +2021-01-07 17:51:14 Found running service: unattended-upgrades +2021-01-07 17:51:14 Found running service: user@0 +2021-01-07 17:51:14 Hint: Run systemctl --full --type=service to see all services +2021-01-07 17:51:14 Result: Found 18 running services +2021-01-07 17:51:14 Searching for enabled services (systemctl services only) +2021-01-07 17:51:14 Found enabled service at boot: atd +2021-01-07 17:51:14 Found enabled service at boot: autovt@ +2021-01-07 17:51:14 Found enabled service at boot: cloud-config +2021-01-07 17:51:14 Found enabled service at boot: cloud-final +2021-01-07 17:51:14 Found enabled service at boot: cloud-init-local +2021-01-07 17:51:14 Found enabled service at boot: cloud-init +2021-01-07 17:51:14 Found enabled service at boot: cron +2021-01-07 17:51:14 Found enabled service at boot: getty@ +2021-01-07 17:51:14 Found enabled service at boot: hc-net-scan +2021-01-07 17:51:14 Found enabled service at boot: lvm2-monitor +2021-01-07 17:51:14 Found enabled service at boot: networking +2021-01-07 17:51:14 Found enabled service at boot: pollinate +2021-01-07 17:51:14 Found enabled service at boot: resolvconf +2021-01-07 17:51:14 Found enabled service at boot: rsyslog +2021-01-07 17:51:14 Found enabled service at boot: ssh +2021-01-07 17:51:14 Found enabled service at boot: sshd +2021-01-07 17:51:14 Found enabled service at boot: syslog +2021-01-07 17:51:14 Found enabled service at boot: systemd-timesyncd +2021-01-07 17:51:14 Found enabled service at boot: unattended-upgrades +2021-01-07 17:51:14 Found enabled service at boot: ureadahead +2021-01-07 17:51:14 Hint: Run systemctl list-unit-files --type=service to see all services +2021-01-07 17:51:14 Result: Found 20 enabled services +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5180 (Check for Linux boot services (Debian style)) +2021-01-07 17:51:14 Result: found runlevel 5 +2021-01-07 17:51:14 Result: skipping further actions +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5184 (Check permissions for boot files/scripts) +2021-01-07 17:51:14 Result: checking /etc/init.d scripts for writable bit +2021-01-07 17:51:14 Test: checking if directory /etc/init.d exists +2021-01-07 17:51:14 Result: directory /etc/init.d found +2021-01-07 17:51:14 Test: checking for available files in directory +2021-01-07 17:51:14 Result: found files in directory, checking permissions now +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/.depend.boot +2021-01-07 17:51:14 Result: good, file /etc/init.d/.depend.boot not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/.depend.start +2021-01-07 17:51:14 Result: good, file /etc/init.d/.depend.start not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/.depend.stop +2021-01-07 17:51:14 Result: good, file /etc/init.d/.depend.stop not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/README +2021-01-07 17:51:14 Result: good, file /etc/init.d/README not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/acpid +2021-01-07 17:51:14 Result: good, file /etc/init.d/acpid not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/atd +2021-01-07 17:51:14 Result: good, file /etc/init.d/atd not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/bootmisc.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/bootmisc.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/checkfs.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/checkfs.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/checkroot-bootclean.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/checkroot-bootclean.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/checkroot.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/checkroot.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/console-setup +2021-01-07 17:51:14 Result: good, file /etc/init.d/console-setup not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/cron +2021-01-07 17:51:14 Result: good, file /etc/init.d/cron not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/cryptdisks +2021-01-07 17:51:14 Result: good, file /etc/init.d/cryptdisks not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/cryptdisks-early +2021-01-07 17:51:14 Result: good, file /etc/init.d/cryptdisks-early not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/dbus +2021-01-07 17:51:14 Result: good, file /etc/init.d/dbus not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/grub-common +2021-01-07 17:51:14 Result: good, file /etc/init.d/grub-common not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/halt +2021-01-07 17:51:14 Result: good, file /etc/init.d/halt not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/hostname.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/hostname.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/hwclock.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/hwclock.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/keyboard-setup +2021-01-07 17:51:14 Result: good, file /etc/init.d/keyboard-setup not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/killprocs +2021-01-07 17:51:14 Result: good, file /etc/init.d/killprocs not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/kmod +2021-01-07 17:51:14 Result: good, file /etc/init.d/kmod not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/lvm2 +2021-01-07 17:51:14 Result: good, file /etc/init.d/lvm2 not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/lvm2-lvmetad +2021-01-07 17:51:14 Result: good, file /etc/init.d/lvm2-lvmetad not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/lvm2-lvmpolld +2021-01-07 17:51:14 Result: good, file /etc/init.d/lvm2-lvmpolld not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mdadm +2021-01-07 17:51:14 Result: good, file /etc/init.d/mdadm not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mdadm-waitidle +2021-01-07 17:51:14 Result: good, file /etc/init.d/mdadm-waitidle not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountall-bootclean.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountall-bootclean.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountall.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountall.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountdevsubfs.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountdevsubfs.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountkernfs.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountkernfs.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountnfs-bootclean.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountnfs-bootclean.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/mountnfs.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/mountnfs.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/networking +2021-01-07 17:51:14 Result: good, file /etc/init.d/networking not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/ondemand +2021-01-07 17:51:14 Result: good, file /etc/init.d/ondemand not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/plymouth +2021-01-07 17:51:14 Result: good, file /etc/init.d/plymouth not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/plymouth-log +2021-01-07 17:51:14 Result: good, file /etc/init.d/plymouth-log not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/procps +2021-01-07 17:51:14 Result: good, file /etc/init.d/procps not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/qemu-guest-agent +2021-01-07 17:51:14 Result: good, file /etc/init.d/qemu-guest-agent not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/rc +2021-01-07 17:51:14 Result: good, file /etc/init.d/rc not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/rc.local +2021-01-07 17:51:14 Result: good, file /etc/init.d/rc.local not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/rcS +2021-01-07 17:51:14 Result: good, file /etc/init.d/rcS not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/reboot +2021-01-07 17:51:14 Result: good, file /etc/init.d/reboot not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/resolvconf +2021-01-07 17:51:14 Result: good, file /etc/init.d/resolvconf not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/rsync +2021-01-07 17:51:14 Result: good, file /etc/init.d/rsync not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/rsyslog +2021-01-07 17:51:14 Result: good, file /etc/init.d/rsyslog not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/sendsigs +2021-01-07 17:51:14 Result: good, file /etc/init.d/sendsigs not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/single +2021-01-07 17:51:14 Result: good, file /etc/init.d/single not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/skeleton +2021-01-07 17:51:14 Result: good, file /etc/init.d/skeleton not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/ssh +2021-01-07 17:51:14 Result: good, file /etc/init.d/ssh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/udev +2021-01-07 17:51:14 Result: good, file /etc/init.d/udev not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/umountfs +2021-01-07 17:51:14 Result: good, file /etc/init.d/umountfs not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/umountnfs.sh +2021-01-07 17:51:14 Result: good, file /etc/init.d/umountnfs.sh not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/umountroot +2021-01-07 17:51:14 Result: good, file /etc/init.d/umountroot not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/unattended-upgrades +2021-01-07 17:51:14 Result: good, file /etc/init.d/unattended-upgrades not world writable +2021-01-07 17:51:14 Test: checking permissions of file /etc/init.d/urandom +2021-01-07 17:51:14 Result: good, file /etc/init.d/urandom not world writable +2021-01-07 17:51:14 Test: checking if directory /etc/rc.d exists +2021-01-07 17:51:14 Result: directory /etc/rc.d not found. Skipping.. +2021-01-07 17:51:14 Test: checking if directory /etc/rcS.d exists +2021-01-07 17:51:14 Result: directory /etc/rcS.d found +2021-01-07 17:51:14 Test: checking for available files in directory +2021-01-07 17:51:14 Result: found files in directory, checking permissions now +2021-01-07 17:51:14 Test: checking permissions of file /etc/rcS.d/README +2021-01-07 17:51:14 Result: good, file /etc/rcS.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc0.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc0.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc1.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc1.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc2.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc2.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc3.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc3.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc4.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc4.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc5.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc5.d/README not world writable +2021-01-07 17:51:14 Test: Checking /etc/rc6.d scripts for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc6.d/README not world writable +2021-01-07 17:51:14 Action: checking symlink for file /etc/rc.local +2021-01-07 17:51:14 Result: file /etc/rc.local is not a symlink +2021-01-07 17:51:14 Test: Checking /etc/rc.local file for writable bit +2021-01-07 17:51:14 Result: good, file /etc/rc.local not world writable +2021-01-07 17:51:14 Hardening: assigned maximum number of hardening points for this item (3). Currently having 3 points (out of 5) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5202 (Check uptime of system) +2021-01-07 17:51:14 Uptime (in seconds): 576 +2021-01-07 17:51:14 Uptime (in days): 0 +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID BOOT-5260 (Check single user mode for systemd) +2021-01-07 17:51:14 Test: Searching /usr/lib/systemd/system/rescue.service +2021-01-07 17:51:14 Result: file /usr/lib/systemd/system/rescue.service does not exist +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5262 (Check for OpenBSD boot daemons) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5263 (Check permissions for boot files/scripts) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test BOOT-5264 (Run systemd-analyze security) +2021-01-07 17:51:14 Reason to skip: systemd-analyze too old (v229), need at least v240 +2021-01-07 17:51:14 Security check: file is normal +2021-01-07 17:51:14 Checking permissions of /root/scans/lynis/include/tests_kernel +2021-01-07 17:51:14 File permissions are OK +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Action: Performing tests from category: Kernel +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5622 (Determine Linux default run level) +2021-01-07 17:51:14 Test: Checking for systemd default.target +2021-01-07 17:51:14 Result: no systemd found, so trying inittab +2021-01-07 17:51:14 Test: Checking /etc/inittab +2021-01-07 17:51:14 Result: file /etc/inittab not found +2021-01-07 17:51:14 Test: Checking run level with who -r, for Debian based systems +2021-01-07 17:51:14 Result: Found default run level '5' +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5677 (Check CPU options and support) +2021-01-07 17:51:14 Test: Checking /proc/cpuinfo +2021-01-07 17:51:14 Result: found /proc/cpuinfo +2021-01-07 17:51:14 Test: Checking CPU options (XD/NX/PAE) +2021-01-07 17:51:14 PAE: Yes +2021-01-07 17:51:14 NX: Yes +2021-01-07 17:51:14 Result: PAE or No eXecute option(s) both found +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5695 (Determine Linux kernel version and release number) +2021-01-07 17:51:14 Result: found kernel release 4.4.0-197-generic +2021-01-07 17:51:14 Result: found kernel version #229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5723 (Determining if Linux kernel is monolithic) +2021-01-07 17:51:14 Test: checking if kernel is monolithic or modular +2021-01-07 17:51:14 Result: Found modular kernel +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5726 (Checking Linux loaded kernel modules) +2021-01-07 17:51:14 Loaded modules according lsmod: +2021-01-07 17:51:14 Loaded module: ablk_helper +2021-01-07 17:51:14 Loaded module: aes_x86_64 +2021-01-07 17:51:14 Loaded module: aesni_intel +2021-01-07 17:51:14 Loaded module: ahci +2021-01-07 17:51:14 Loaded module: async_memcpy +2021-01-07 17:51:14 Loaded module: async_pq +2021-01-07 17:51:14 Loaded module: async_raid6_recov +2021-01-07 17:51:14 Loaded module: async_tx +2021-01-07 17:51:14 Loaded module: async_xor +2021-01-07 17:51:14 Loaded module: autofs4 +2021-01-07 17:51:14 Loaded module: binfmt_misc +2021-01-07 17:51:14 Loaded module: btrfs +2021-01-07 17:51:14 Loaded module: crc32_pclmul +2021-01-07 17:51:14 Loaded module: crct10dif_pclmul +2021-01-07 17:51:14 Loaded module: cryptd +2021-01-07 17:51:14 Loaded module: gf128mul +2021-01-07 17:51:14 Loaded module: ghash_clmulni_intel +2021-01-07 17:51:14 Loaded module: glue_helper +2021-01-07 17:51:14 Loaded module: hid +2021-01-07 17:51:14 Loaded module: hid_generic +2021-01-07 17:51:14 Loaded module: inet_diag +2021-01-07 17:51:14 Loaded module: input_leds +2021-01-07 17:51:14 Loaded module: ip_tables +2021-01-07 17:51:14 Loaded module: iptable_filter +2021-01-07 17:51:14 Loaded module: iptable_nat +2021-01-07 17:51:14 Loaded module: joydev +2021-01-07 17:51:14 Loaded module: libahci +2021-01-07 17:51:14 Loaded module: libcrc32c +2021-01-07 17:51:14 Loaded module: linear +2021-01-07 17:51:14 Loaded module: lrw +2021-01-07 17:51:14 Loaded module: multipath +2021-01-07 17:51:14 Loaded module: nf_conntrack +2021-01-07 17:51:14 Loaded module: nf_conntrack_ipv4 +2021-01-07 17:51:14 Loaded module: nf_defrag_ipv4 +2021-01-07 17:51:14 Loaded module: nf_nat +2021-01-07 17:51:14 Loaded module: nf_nat_ipv4 +2021-01-07 17:51:14 Loaded module: psmouse +2021-01-07 17:51:14 Loaded module: raid0 +2021-01-07 17:51:14 Loaded module: raid1 +2021-01-07 17:51:14 Loaded module: raid10 +2021-01-07 17:51:14 Loaded module: raid456 +2021-01-07 17:51:14 Loaded module: raid6_pq +2021-01-07 17:51:14 Loaded module: serio_raw +2021-01-07 17:51:14 Loaded module: tcp_diag +2021-01-07 17:51:14 Loaded module: udp_diag +2021-01-07 17:51:14 Loaded module: usbhid +2021-01-07 17:51:14 Loaded module: virtio_rng +2021-01-07 17:51:14 Loaded module: virtio_scsi +2021-01-07 17:51:14 Loaded module: x_tables +2021-01-07 17:51:14 Loaded module: xor +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5728 (Checking Linux kernel config) +2021-01-07 17:51:14 Result: found config (/boot/config-4.4.0-197-generic) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5730 (Checking disk I/O kernel scheduler) +2021-01-07 17:51:14 Test: Checking the default I/O kernel scheduler +2021-01-07 17:51:14 Result: found IO scheduler 'deadline' +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test KRNL-5745 (Checking FreeBSD loaded kernel modules) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test KRNL-5831 (Checking DragonFly loaded kernel modules) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Skipped test KRNL-5770 (Checking active kernel modules) +2021-01-07 17:51:14 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5788 (Checking availability new Linux kernel) +2021-01-07 17:51:14 Test: Searching apt-cache, to determine if a newer kernel is available +2021-01-07 17:51:14 Result: found /usr/bin/apt-cache +2021-01-07 17:51:14 Test: checking presence of /vmlinuz or /boot/vmlinuz +2021-01-07 17:51:14 Result: found /vmlinuz +2021-01-07 17:51:14 Test: checking readlink location of /vmlinuz +2021-01-07 17:51:14 Output: readlink reported file /boot/vmlinuz-4.4.0-198-generic +2021-01-07 17:51:14 Test: checking package from dpkg -S +2021-01-07 17:51:14 Output: dpkg -S reported package linux-image-4.4.0-198-generic +2021-01-07 17:51:14 Test: Using apt-cache policy to determine if there is an update available +2021-01-07 17:51:14 Kernel installed: 4.4.0-198.230 +2021-01-07 17:51:14 Kernel candidate: 4.4.0-198.230 +2021-01-07 17:51:14 Result: no kernel update available +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5820 (Checking core dumps configuration) +2021-01-07 17:51:14 Test: Checking presence of systemd +2021-01-07 17:51:14 Result: systemd is present on this system +2021-01-07 17:51:14 Test: Checking if core dumps are disabled in /etc/systemd/coredump.conf and /etc/systemd/coredump.conf.d/*.conf +2021-01-07 17:51:14 Result: core dumps are not disabled in systemd configuration. Didn't find settings 'ProcessSizeMax=0' and 'Storage=none' +2021-01-07 17:51:14 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 6) +2021-01-07 17:51:14 Test: Checking presence /etc/profile +2021-01-07 17:51:14 Test: Checking if 'ulimit -c 0' exists in /etc/profile or /etc/profile.d/*.sh +2021-01-07 17:51:14 Result: core dumps are not disabled in /etc/profile or /etc/profile.d/*.sh config files. Didn't find setting 'ulimit -c 0' +2021-01-07 17:51:14 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 7) +2021-01-07 17:51:14 Test: Checking presence /etc/security/limits.conf +2021-01-07 17:51:14 Result: file /etc/security/limits.conf exists +2021-01-07 17:51:14 Test: Checking if core dumps are disabled in /etc/security/limits.conf and /etc/security/limits.d/* +2021-01-07 17:51:14 Result: core dumps are not explicitly disabled +2021-01-07 17:51:14 Suggestion: If not required, consider explicit disabling of core dump in /etc/security/limits.conf file [test:KRNL-5820] [details:-] [solution:-] +2021-01-07 17:51:14 Hardening: assigned partial number of hardening points (1 of 3). Currently having 4 points (out of 10) +2021-01-07 17:51:14 Test: Checking sysctl value of fs.suid_dumpable +2021-01-07 17:51:14 Result: value 0 found +2021-01-07 17:51:14 Result: found default option (0), no execute only program or program with changed privilege levels can dump +2021-01-07 17:51:14 Hardening: assigned maximum number of hardening points for this item (1). Currently having 5 points (out of 11) +2021-01-07 17:51:14 ==== +2021-01-07 17:51:14 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel) +2021-01-07 17:51:14 Test: Checking presence /var/run/reboot-required.pkgs +2021-01-07 17:51:14 Result: file /var/run/reboot-required.pkgs not found +2021-01-07 17:51:14 Result: /boot exists, performing more tests from here +2021-01-07 17:51:14 Result: found /boot/vmlinuz-4.4.0-198-generic +2021-01-07 17:51:14 Result: version derived from file name is '4.4.0-198-generic' +2021-01-07 17:51:14 Result: found version 4.4.0-198-generic +2021-01-07 17:51:14 Result: active kernel version 4.4.0-197-generic +2021-01-07 17:51:14 Result: reboot needed, as there is a difference between active kernel and the one on disk +2021-01-07 17:51:14 Result: /var/cache/apt/archives/ does not exist +2021-01-07 17:51:14 Warning: Reboot of system is most likely needed [test:KRNL-5830] [details:] [solution:text:reboot] +2021-01-07 17:51:14 Hardening: assigned partial number of hardening points (0 of 5). Currently having 5 points (out of 16) +2021-01-07 17:51:14 Security check: file is normal +2021-01-07 17:51:14 Checking permissions of /root/scans/lynis/include/tests_memory_processes +2021-01-07 17:51:15 File permissions are OK +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Action: Performing tests from category: Memory and Processes +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID PROC-3602 (Checking /proc/meminfo for memory details) +2021-01-07 17:51:15 Result: found /proc/meminfo +2021-01-07 17:51:15 Result: Found 1998680 kB memory +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test PROC-3604 (Query prtconf for memory details) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID PROC-3612 (Check dead or zombie processes) +2021-01-07 17:51:15 Result: no zombie processes found +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID PROC-3614 (Check heavy IO waiting based processes) +2021-01-07 17:51:15 Result: No processes were waiting for IO requests to be handled first +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID PROC-3802 (Check presence of prelink tooling) +2021-01-07 17:51:15 Result: prelink package is NOT installed +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 8 points (out of 19) +2021-01-07 17:51:15 Security check: file is normal +2021-01-07 17:51:15 Checking permissions of /root/scans/lynis/include/tests_authentication +2021-01-07 17:51:15 File permissions are OK +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Action: Performing tests from category: Users, Groups and Authentication +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9204 (Check users with an UID of zero) +2021-01-07 17:51:15 Test: Searching accounts with UID 0 +2021-01-07 17:51:15 Result: No accounts found with UID 0 other than root. +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9208 (Check non-unique accounts in passwd file) +2021-01-07 17:51:15 Test: Checking for non-unique accounts +2021-01-07 17:51:15 Result: all accounts found in /etc/passwd are unique +2021-01-07 17:51:15 Remarks: Non unique UIDs can be a risk for the system or part of a configuration mistake +2021-01-07 17:51:15 Prerequisite test: /usr/sbin/chkgrp +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9212 (Test group file) +2021-01-07 17:51:15 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9216 (Check group and shadow group files) +2021-01-07 17:51:15 Test: Checking for grpck binary output +2021-01-07 17:51:15 Result: grpck binary didn't find any errors in the group files +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9218 (Check login shells for passwordless accounts) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (DragonFly FreeBSD NetBSD OpenBSD only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9222 (Check unique groups (IDs)) +2021-01-07 17:51:15 Test: Checking for non unique group ID's in /etc/group +2021-01-07 17:51:15 Result: All group ID's are unique +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9226 (Check unique group names) +2021-01-07 17:51:15 Test: Checking for non unique group names in /etc/group +2021-01-07 17:51:15 Result: All group names are unique +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9228 (Check password file consistency with pwck) +2021-01-07 17:51:15 Test: Checking password file consistency (pwck) +2021-01-07 17:51:15 Result: pwck check didn't find any problems +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 10 points (out of 21) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9229 (Check password hashing methods) +2021-01-07 17:51:15 Test: Checking password hashing methods +2021-01-07 17:51:15 Result: no poor password hashing methods found +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 12 points (out of 23) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9230 (Check password hashing rounds) +2021-01-07 17:51:15 Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs +2021-01-07 17:51:15 Result: number of password hashing rounds is not configured +2021-01-07 17:51:15 Suggestion: Configure password hashing rounds in /etc/login.defs [test:AUTH-9230] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 2). Currently having 12 points (out of 25) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9234 (Query user accounts) +2021-01-07 17:51:15 Test: Read system users (including root user) from password database (e.g. /etc/passwd) +2021-01-07 17:51:15 Result: found minimal user id specified: 1000 +2021-01-07 17:51:15 Linux real users output (ID = 0, or 1000+, but not 65534): +2021-01-07 17:51:15 Real user: root,0 +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9240 (Query NIS+ authentication support) +2021-01-07 17:51:15 Result: NIS+ authentication not enabled +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9242 (Query NIS authentication support) +2021-01-07 17:51:15 Result: NIS authentication not enabled +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9250 (Checking sudoers file) +2021-01-07 17:51:15 Test: checking presence /etc/sudoers +2021-01-07 17:51:15 Result: found file (/etc/sudoers) +2021-01-07 17:51:15 Test: checking presence /usr/local/etc/sudoers +2021-01-07 17:51:15 Result: file /usr/local/etc/sudoers not found +2021-01-07 17:51:15 Test: checking presence /usr/pkg/etc/sudoers +2021-01-07 17:51:15 Result: file /usr/pkg/etc/sudoers not found +2021-01-07 17:51:15 Result: sudoers file found (/etc/sudoers) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9252 (Check ownership and permissions for sudo configuration files) +2021-01-07 17:51:15 Test: checking drop-in directory (/etc/sudoers.d) +2021-01-07 17:51:15 Result: Found directory permissions: rwxr-x--- and owner UID GID: 00 +2021-01-07 17:51:15 Result: directory /etc/sudoers.d permissions OK +2021-01-07 17:51:15 Result: directory /etc/sudoers.d ownership OK +2021-01-07 17:51:15 Test: checking file (/etc/sudoers) +2021-01-07 17:51:15 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:51:15 Result: file /etc/sudoers permissions OK +2021-01-07 17:51:15 Result: file /etc/sudoers ownership OK +2021-01-07 17:51:15 Test: checking file (/etc/sudoers.d/README) +2021-01-07 17:51:15 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:51:15 Result: file /etc/sudoers.d/README permissions OK +2021-01-07 17:51:15 Result: file /etc/sudoers.d/README ownership OK +2021-01-07 17:51:15 Test: checking file (/etc/sudoers.d/90-cloud-init-users) +2021-01-07 17:51:15 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:51:15 Result: file /etc/sudoers.d/90-cloud-init-users permissions OK +2021-01-07 17:51:15 Result: file /etc/sudoers.d/90-cloud-init-users ownership OK +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9254 (Solaris passwordless accounts) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9262 (Checking presence password strength testing tools (PAM)) +2021-01-07 17:51:15 Searching PAM password testing modules (cracklib, passwdqc, pwquality) +2021-01-07 17:51:15 Result: pam_cracklib.so NOT found (crack library PAM) +2021-01-07 17:51:15 Result: pam_passwdqc.so NOT found (passwd quality control PAM) +2021-01-07 17:51:15 Result: pam_pwquality.so NOT found (pwquality control PAM) +2021-01-07 17:51:15 Result: no PAM modules for password strength testing found +2021-01-07 17:51:15 Suggestion: Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [test:AUTH-9262] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 3). Currently having 12 points (out of 28) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9264 (Checking presence pam.conf) +2021-01-07 17:51:15 Test: Checking file /etc/pam.conf +2021-01-07 17:51:15 Result: file /etc/pam.conf exists +2021-01-07 17:51:15 Test: searching PAM configuration files +2021-01-07 17:51:15 Result: File has no configuration options defined (empty, or only filled with comments and empty lines) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9266 (Checking presence pam.d files) +2021-01-07 17:51:15 Test: Checking directory /etc/pam.d +2021-01-07 17:51:15 Result: directory /etc/pam.d exists +2021-01-07 17:51:15 Test: searching PAM configuration files +2021-01-07 17:51:15 Found file: /etc/pam.d/atd +2021-01-07 17:51:15 Found file: /etc/pam.d/chfn +2021-01-07 17:51:15 Found file: /etc/pam.d/chpasswd +2021-01-07 17:51:15 Found file: /etc/pam.d/chsh +2021-01-07 17:51:15 Found file: /etc/pam.d/common-account +2021-01-07 17:51:15 Found file: /etc/pam.d/common-auth +2021-01-07 17:51:15 Found file: /etc/pam.d/common-password +2021-01-07 17:51:15 Found file: /etc/pam.d/common-session +2021-01-07 17:51:15 Found file: /etc/pam.d/common-session-noninteractive +2021-01-07 17:51:15 Found file: /etc/pam.d/cron +2021-01-07 17:51:15 Found file: /etc/pam.d/login +2021-01-07 17:51:15 Found file: /etc/pam.d/newusers +2021-01-07 17:51:15 Found file: /etc/pam.d/other +2021-01-07 17:51:15 Found file: /etc/pam.d/passwd +2021-01-07 17:51:15 Found file: /etc/pam.d/runuser +2021-01-07 17:51:15 Found file: /etc/pam.d/runuser-l +2021-01-07 17:51:15 Found file: /etc/pam.d/sshd +2021-01-07 17:51:15 Found file: /etc/pam.d/su +2021-01-07 17:51:15 Found file: /etc/pam.d/sudo +2021-01-07 17:51:15 Found file: /etc/pam.d/systemd-user +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9268 (Checking presence pam.d files) +2021-01-07 17:51:15 Test: Searching pam modules +2021-01-07 17:51:15 Test: Checking /lib/arm-linux-gnueabihf/security +2021-01-07 17:51:15 Result: directory /lib/arm-linux-gnueabihf/security could not be found or is a symlink to another directory +2021-01-07 17:51:15 Test: Checking /lib/i386-linux-gnu/security +2021-01-07 17:51:15 Result: directory /lib/i386-linux-gnu/security could not be found or is a symlink to another directory +2021-01-07 17:51:15 Test: Checking /lib/security +2021-01-07 17:51:15 Result: directory /lib/security could not be found or is a symlink to another directory +2021-01-07 17:51:15 Test: Checking /lib/x86_64-linux-gnu/security +2021-01-07 17:51:15 Result: directory /lib/x86_64-linux-gnu/security exists +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_access.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_debug.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_deny.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_echo.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_env.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_exec.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_extrausers.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_faildelay.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_filter.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_ftp.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_group.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_issue.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_keyinit.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_lastlog.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_limits.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_listfile.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_localuser.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_loginuid.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_mail.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_mkhomedir.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_motd.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_namespace.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_nologin.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_permit.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_pwhistory.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_rhosts.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_rootok.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_securetty.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_selinux.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_sepermit.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_shells.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_stress.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_succeed_if.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_systemd.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_tally.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_tally2.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_time.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_timestamp.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_tty_audit.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_umask.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_unix.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_userdb.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_warn.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_wheel.so +2021-01-07 17:51:15 Found file: /lib/x86_64-linux-gnu/security/pam_xauth.so +2021-01-07 17:51:15 Test: Checking /lib64/security +2021-01-07 17:51:15 Result: directory /lib64/security could not be found or is a symlink to another directory +2021-01-07 17:51:15 Test: Checking /usr/lib +2021-01-07 17:51:15 Result: directory /usr/lib exists +2021-01-07 17:51:15 Test: Checking /usr/lib/security +2021-01-07 17:51:15 Result: directory /usr/lib/security could not be found or is a symlink to another directory +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9278 (Determine LDAP support in PAM files) +2021-01-07 17:51:15 Test: checking presence /etc/pam.d/common-auth +2021-01-07 17:51:15 Result: file /etc/pam.d/common-auth exists +2021-01-07 17:51:15 Test: checking presence LDAP module +2021-01-07 17:51:15 Result: LDAP module not found +2021-01-07 17:51:15 Test: checking presence /etc/pam.d/system-auth +2021-01-07 17:51:15 Result: file /etc/pam.d/system-auth not found, skipping test +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9282 (Checking password protected account without expire date) +2021-01-07 17:51:15 Test: Checking Linux version and password expire date status +2021-01-07 17:51:15 Result: all accounts seem to have an expire date +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9283 (Checking accounts without password) +2021-01-07 17:51:15 Test: Checking passwordless accounts +2021-01-07 17:51:15 Result: all accounts seem to have a password +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9284 (Check locked user accounts in /etc/passwd) +2021-01-07 17:51:15 Test: Checking locked accounts +2021-01-07 17:51:15 Result: all accounts seem to be unlocked +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9286 (Checking user password aging) +2021-01-07 17:51:15 Test: Checking PASS_MIN_DAYS option in /etc/login.defs +2021-01-07 17:51:15 Result: password minimum age is not configured +2021-01-07 17:51:15 Suggestion: Configure minimum password age in /etc/login.defs [test:AUTH-9286] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 1). Currently having 12 points (out of 29) +2021-01-07 17:51:15 Test: Checking PASS_MAX_DAYS option in /etc/login.defs +2021-01-07 17:51:15 Result: password aging limits are not configured +2021-01-07 17:51:15 Suggestion: Configure maximum password age in /etc/login.defs [test:AUTH-9286] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 1). Currently having 12 points (out of 30) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9288 (Checking for expired passwords) +2021-01-07 17:51:15 Test: check if we can access /etc/shadow (escaped: /etc/shadow) +2021-01-07 17:51:15 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:15 Result: file /etc/shadow is readable (or directory accessible). +2021-01-07 17:51:15 Data: Days since epoch is 18634 +2021-01-07 17:51:15 Test: collecting accounts which have an expired password (last day changed + maximum change time) +2021-01-07 17:51:15 Result: good, no passwords have been expired +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (10). Currently having 22 points (out of 40) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9304 (Check single user login configuration) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9306 (Check single boot authentication) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (HP-UX only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9308 (Check single user login configuration) +2021-01-07 17:51:15 Test: going to check several systemd targets now +2021-01-07 17:51:15 Test: checking if target console-shell.service is available (/lib/systemd/system/console-shell.service) +2021-01-07 17:51:15 Result: found target console-shell.service +2021-01-07 17:51:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:51:15 Test: checking if target emergency.service is available (/lib/systemd/system/emergency.service) +2021-01-07 17:51:15 Result: found target emergency.service +2021-01-07 17:51:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:51:15 Test: checking if target rescue.service is available (/lib/systemd/system/rescue.service) +2021-01-07 17:51:15 Result: found target rescue.service +2021-01-07 17:51:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:51:15 Result: option set, password is needed at single user mode boot +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 24 points (out of 42) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9328 (Default umask values) +2021-01-07 17:51:15 Test: Checking /etc/profile.d directory +2021-01-07 17:51:15 Result: found /etc/profile.d, with one or more files in it +2021-01-07 17:51:15 Test: Checking /etc/profile +2021-01-07 17:51:15 Result: file /etc/profile exists +2021-01-07 17:51:15 Test: Checking umask value in /etc/profile +2021-01-07 17:51:15 Result: did not find umask in /etc/profile +2021-01-07 17:51:15 Result: found no umask. Please check if this is correct +2021-01-07 17:51:15 Test: Checking umask entries in /etc/passwd (pam_umask) +2021-01-07 17:51:15 Result: file /etc/passwd exists +2021-01-07 17:51:15 Test: Checking umask value in /etc/passwd +2021-01-07 17:51:15 Manual: one or more manual actions are required for further testing of this control/plugin +2021-01-07 17:51:15 Test: Checking /etc/login.defs +2021-01-07 17:51:15 Result: file /etc/login.defs exists +2021-01-07 17:51:15 Test: Checking umask value in /etc/login.defs +2021-01-07 17:51:15 Result: found umask 022, which could be improved +2021-01-07 17:51:15 Suggestion: Default umask in /etc/login.defs could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 2). Currently having 24 points (out of 44) +2021-01-07 17:51:15 Test: Checking /etc/init.d/functions +2021-01-07 17:51:15 Result: file /etc/init.d/functions does not exist +2021-01-07 17:51:15 Test: Checking /etc/init.d/rc +2021-01-07 17:51:15 Result: file /etc/init.d/rc exists +2021-01-07 17:51:15 Test: Checking UMASK value in /etc/init.d/rc +2021-01-07 17:51:15 Result: found umask 022, which could be improved +2021-01-07 17:51:15 Suggestion: Default umask in /etc/init.d/rc could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (0 of 2). Currently having 24 points (out of 46) +2021-01-07 17:51:15 Test: Checking /etc/init.d/rcS +2021-01-07 17:51:15 Result: file /etc/init.d/rcS exists +2021-01-07 17:51:15 Test: Checking if script runs another script. +2021-01-07 17:51:15 Result: exec line present in file, setting of umask not needed in this script +2021-01-07 17:51:15 Output: /etc/init.d/rc +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9340 (Solaris account locking) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9402 (Query LDAP authentication support) +2021-01-07 17:51:15 Result: LDAP authentication not enabled +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9406 (Query LDAP servers in client configuration) +2021-01-07 17:51:15 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID AUTH-9408 (Logging of failed login attempts) +2021-01-07 17:51:15 Result: did not find /var/log/tallylog on disk or its file size is zero bytes +2021-01-07 17:51:15 Result: found pam_tally2 module on disk +2021-01-07 17:51:15 Outcome: it looks like pam_tally2 is not configured to log failed login attempts +2021-01-07 17:51:15 Test: Checking FAILLOG_ENAB option in /etc/login.defs +2021-01-07 17:51:15 Result: FAILLOG_ENAB is set to 'yes' +2021-01-07 17:51:15 Outcome: failed login attempts are logged in /var/log/faillog +2021-01-07 17:51:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 27 points (out of 49) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9409 (Checking /etc/doas.conf file) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test AUTH-9410 (Check /etc/doas.conf file permissions) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:15 Security check: file is normal +2021-01-07 17:51:15 Checking permissions of /root/scans/lynis/include/tests_shells +2021-01-07 17:51:15 File permissions are OK +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Action: Performing tests from category: Shells +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test SHLL-6202 (Check console TTYs) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID SHLL-6211 (Available and valid shells) +2021-01-07 17:51:15 Test: Searching for /etc/shells +2021-01-07 17:51:15 Result: Found /etc/shells file +2021-01-07 17:51:15 Test: Reading available shells from /etc/shells +2021-01-07 17:51:15 Found installed shell: /bin/sh +2021-01-07 17:51:15 Found installed shell: /bin/dash +2021-01-07 17:51:15 Found installed shell: /bin/bash +2021-01-07 17:51:15 Found installed shell: /bin/rbash +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID SHLL-6220 (Idle session killing tools or settings) +2021-01-07 17:51:15 Test: Search for session timeout tools or settings in shell +2021-01-07 17:51:15 Performing pgrep scan without uid +2021-01-07 17:51:15 IsRunning: process 'timeoutd' not found +2021-01-07 17:51:15 Performing pgrep scan without uid +2021-01-07 17:51:15 IsRunning: process 'autolog' not found +2021-01-07 17:51:15 Result: could not find TMOUT setting in /etc/profile +2021-01-07 17:51:15 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:51:15 Result: could not find TMOUT setting in /etc/profile.d/*.sh +2021-01-07 17:51:15 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (1 of 3). Currently having 28 points (out of 52) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID SHLL-6230 (Perform umask check for shell configurations) +2021-01-07 17:51:15 Result: file /etc/bashrc not found +2021-01-07 17:51:15 Result: file /etc/bash.bashrc exists +2021-01-07 17:51:15 Result: did not find umask configured in /etc/bash.bashrc +2021-01-07 17:51:15 Result: file /etc/bash.bashrc.local not found +2021-01-07 17:51:15 Result: file /etc/csh.cshrc not found +2021-01-07 17:51:15 Result: file /etc/profile exists +2021-01-07 17:51:15 Result: did not find umask configured in /etc/profile +2021-01-07 17:51:15 Security check: file is normal +2021-01-07 17:51:15 Checking permissions of /root/scans/lynis/include/tests_filesystems +2021-01-07 17:51:15 File permissions are OK +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Action: Performing tests from category: File systems +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6310 (Checking /tmp, /home and /var directory) +2021-01-07 17:51:15 Test: Checking if /home is mounted separately or mounted on / file system +2021-01-07 17:51:15 Result: directory /home exists +2021-01-07 17:51:15 Result: /home not found in mount list. Directory most likely stored on / file system +2021-01-07 17:51:15 Suggestion: To decrease the impact of a full /home file system, place /home on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (9 of 10). Currently having 37 points (out of 62) +2021-01-07 17:51:15 Test: Checking if /tmp is mounted separately or mounted on / file system +2021-01-07 17:51:15 Result: directory /tmp exists +2021-01-07 17:51:15 Result: /tmp not found in mount list. Directory most likely stored on / file system +2021-01-07 17:51:15 Suggestion: To decrease the impact of a full /tmp file system, place /tmp on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (9 of 10). Currently having 46 points (out of 72) +2021-01-07 17:51:15 Test: Checking if /var is mounted separately or mounted on / file system +2021-01-07 17:51:15 Result: directory /var exists +2021-01-07 17:51:15 Result: /var not found in mount list. Directory most likely stored on / file system +2021-01-07 17:51:15 Suggestion: To decrease the impact of a full /var file system, place /var on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:51:15 Hardening: assigned partial number of hardening points (9 of 10). Currently having 55 points (out of 82) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6311 (Checking LVM volume groups) +2021-01-07 17:51:15 Test: Checking for LVM volume groups +2021-01-07 17:51:15 Result: no LVM volume groups found +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test FILE-6312 (Checking LVM volumes) +2021-01-07 17:51:15 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6323 (Checking EXT file systems) +2021-01-07 17:51:15 Test: Checking for Linux EXT file systems +2021-01-07 17:51:15 Result: found one or more EXT file systems +2021-01-07 17:51:15 File system: / (type: ext4) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6324 (Checking XFS file systems) +2021-01-07 17:51:15 Test: Checking for Linux XFS file systems +2021-01-07 17:51:15 Result: no XFS file systems found +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6329 (Checking FFS/UFS file systems) +2021-01-07 17:51:15 Test: Query /etc/fstab for available FFS/UFS mount points +2021-01-07 17:51:15 Result: unable to find any single mount point (FFS/UFS) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test FILE-6330 (Checking ZFS file systems) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Skipped test FILE-6439 (Checking HAMMER PFS mounts) +2021-01-07 17:51:15 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:51:15 ==== +2021-01-07 17:51:15 Performing test ID FILE-6332 (Checking swap partitions) +2021-01-07 17:51:15 Test: query swap partitions from /etc/fstab file +2021-01-07 17:51:16 Result: no swap partitions found in /etc/fstab +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6336 (Checking swap mount options) +2021-01-07 17:51:16 Test: check swap partitions with incorrect mount options +2021-01-07 17:51:16 Result: all swap partitions have correct options (sw or swap) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6344 (Checking proc mount options) +2021-01-07 17:51:16 Test: check proc mount with incorrect mount options +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (0 of 3). Currently having 55 points (out of 85) +2021-01-07 17:51:16 Result: /proc filesystem is not mounted with option hidepid=1 or hidepid=2 +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6354 (Searching for old files in /tmp) +2021-01-07 17:51:16 Test: Searching for old files in /tmp +2021-01-07 17:51:16 Result: no files found in /tmp which are older than 3 months +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6362 (Checking /tmp sticky bit) +2021-01-07 17:51:16 Result: sticky bit found on /tmp directory +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 58 points (out of 88) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6363 (Checking /var/tmp sticky bit) +2021-01-07 17:51:16 Result: sticky bit found on /var/tmp directory +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 61 points (out of 91) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6368 (Checking ACL support on root file system) +2021-01-07 17:51:16 Test: Checking acl option on ext[2-4] root file system +2021-01-07 17:51:16 Result: mount point probably mounted with defaults +2021-01-07 17:51:16 Test: Checking device which holds root file system +2021-01-07 17:51:16 Result: found /dev/sda1 +2021-01-07 17:51:16 Test: Checking default options on /dev/sda1 +2021-01-07 17:51:16 Result: found ACL option in default mount options +2021-01-07 17:51:16 Test: Checking acl option on xfs root file system +2021-01-07 17:51:16 Result: ACL option enabled on root file system +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 64 points (out of 94) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6372 (Checking / mount options) +2021-01-07 17:51:16 Result: mount system / is configured with options: errors=remount-ro +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6374 (Linux mount options) +2021-01-07 17:51:16 Result: file system /boot not found in /etc/fstab +2021-01-07 17:51:16 File system: /dev +2021-01-07 17:51:16 Expected flags: noexec nosuid +2021-01-07 17:51:16 Found flags: (rw nosuid relatime size=990692k nr_inodes=247673 mode=755) +2021-01-07 17:51:16 Result: Could not find mount option noexec on file system /dev +2021-01-07 17:51:16 Result: GOOD, found mount option nosuid on file system /dev +2021-01-07 17:51:16 Result: marked /dev as partially hardened +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (4 of 5). Currently having 68 points (out of 99) +2021-01-07 17:51:16 File system: /dev/shm +2021-01-07 17:51:16 Expected flags: nosuid nodev noexec +2021-01-07 17:51:16 Found flags: (rw nosuid nodev) +2021-01-07 17:51:16 Result: GOOD, found mount option nosuid on file system /dev/shm +2021-01-07 17:51:16 Result: GOOD, found mount option nodev on file system /dev/shm +2021-01-07 17:51:16 Result: Could not find mount option noexec on file system /dev/shm +2021-01-07 17:51:16 Result: marked /dev/shm as partially hardened +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (4 of 5). Currently having 72 points (out of 104) +2021-01-07 17:51:16 Result: file system /home not found in /etc/fstab +2021-01-07 17:51:16 File system: /run +2021-01-07 17:51:16 Expected flags: nodev nosuid +2021-01-07 17:51:16 Found flags: (rw nosuid noexec relatime size=199868k mode=755) +2021-01-07 17:51:16 Result: Could not find mount option nodev on file system /run +2021-01-07 17:51:16 Result: GOOD, found mount option nosuid on file system /run +2021-01-07 17:51:16 Result: marked /run as partially hardened +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (4 of 5). Currently having 76 points (out of 109) +2021-01-07 17:51:16 Result: file system /tmp not found in /etc/fstab +2021-01-07 17:51:16 Result: file system /var not found in /etc/fstab +2021-01-07 17:51:16 Result: file system /var/log not found in /etc/fstab +2021-01-07 17:51:16 Result: file system /var/log/audit not found in /etc/fstab +2021-01-07 17:51:16 Result: file system /var/tmp not found in /etc/fstab +2021-01-07 17:51:16 Result: Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11, of total 30 +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6376 (Determine if /var/tmp is bound to /tmp) +2021-01-07 17:51:16 Result: no mount point /var/tmp or expected options found +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6394 (Determine level of swappiness.) +2021-01-07 17:51:16 Test: checking level of vm.swappiness: 60 +2021-01-07 17:51:16 Result: vm.swappiness=60 which is the standard level of swappiness and works well for desktop systems. +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test FILE-6410 (Checking Locate database) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID FILE-6430 (Disable mounting of some filesystems) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 79 points (out of 112) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 82 points (out of 115) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 85 points (out of 118) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 88 points (out of 121) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 91 points (out of 124) +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 94 points (out of 127) +2021-01-07 17:51:16 Result: found udf support in the kernel (output = insmod /lib/modules/4.4.0-197-generic/kernel/fs/udf/udf.ko ) +2021-01-07 17:51:16 Test: Checking if udf is active +2021-01-07 17:51:16 Result: module udf is currently not loaded in the kernel. +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (2 of 3). Currently having 96 points (out of 130) +2021-01-07 17:51:16 Suggestion: Consider disabling unused kernel modules [test:FILE-6430] [details:/etc/modprobe.d/blacklist.conf] [solution:Add 'install MODULENAME /bin/true' (without quotes)] +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_usb +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Action: Performing tests from category: USB Devices +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID USB-1000 (Check if USB storage is disabled) +2021-01-07 17:51:16 Test: Checking USB storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:51:16 Result: usb-storage driver is not explicitly disabled +2021-01-07 17:51:16 Suggestion: Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [test:USB-1000] [details:-] [solution:-] +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (2 of 3). Currently having 98 points (out of 133) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID USB-2000 (Check USB authorizations) +2021-01-07 17:51:16 Test: checking presence of USB devices path (/sys/bus/usb/devices) +2021-01-07 17:51:16 Test: Checking USB devices authorization to connect to the system +2021-01-07 17:51:16 Test: /sys/bus/usb/devices/usb1 is authorized by default (authorized_default=1) +2021-01-07 17:51:16 Test: /sys/bus/usb/devices/usb1 is authorized currently (authorized=1) +2021-01-07 17:51:16 Test: /sys/bus/usb/devices/usb2 is authorized by default (authorized_default=1) +2021-01-07 17:51:16 Test: /sys/bus/usb/devices/usb2 is authorized currently (authorized=1) +2021-01-07 17:51:16 Result: Some USB devices are authorized by default (or temporary) to connect to the system +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (0 of 3). Currently having 98 points (out of 136) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID USB-3000 (Check for presence of USBGuard) +2021-01-07 17:51:16 Result: USBGuard not found +2021-01-07 17:51:16 Hardening: assigned partial number of hardening points (0 of 8). Currently having 98 points (out of 144) +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_storage +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Action: Performing tests from category: Storage +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID STRG-1846 (Check if firewire storage is disabled) +2021-01-07 17:51:16 Test: Checking firewire storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:51:16 Result: found firewire ohci driver in disabled state +2021-01-07 17:51:16 Result: firewire ohci driver is disabled +2021-01-07 17:51:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 101 points (out of 147) +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_storage_nfs +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Action: Performing tests from category: NFS +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1902 (Check rpcinfo registered programs) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1904 (Check nfs rpc) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1906 (Check nfs rpc) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID STRG-1920 (Checking NFS daemon) +2021-01-07 17:51:16 Test: Checking running NFS daemon +2021-01-07 17:51:16 Output: NFS daemon is not running +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1926 (Checking NFS exports) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1928 (Checking empty /etc/exports) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test STRG-1930 (Check client access to nfs share) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_nameservices +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Action: Performing tests from category: Name services +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4016 (Check /etc/resolv.conf default domain) +2021-01-07 17:51:16 Test: check /etc/resolv.conf for default domain +2021-01-07 17:51:16 Result: /etc/resolv.conf found +2021-01-07 17:51:16 Result: no default domain found +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4018 (Check /etc/resolv.conf search domains) +2021-01-07 17:51:16 Test: check /etc/resolv.conf for search domains +2021-01-07 17:51:16 Result: /etc/resolv.conf found +2021-01-07 17:51:16 Result: no search domains found, default domain is being used +2021-01-07 17:51:16 Result: found 0 line(s) with a search statement (expecting less than 2 lines) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4020 (Check non default options) +2021-01-07 17:51:16 Test: check /etc/resolv.conf for non default options +2021-01-07 17:51:16 Result: /etc/resolv.conf found +2021-01-07 17:51:16 Result: no specific other options configured in /etc/resolv.conf +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4024 (Solaris uname -n output) +2021-01-07 17:51:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4026 (Check /etc/nodename) +2021-01-07 17:51:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4028 (Check domain name) +2021-01-07 17:51:16 Test: Checking if dnsdomainname command is available +2021-01-07 17:51:16 Result: dnsdomainname command returned no value +2021-01-07 17:51:16 Result: using domain name from FQDN hostname (it-sec-test-vm) +2021-01-07 17:51:16 Suggestion: Check DNS configuration for the dns domain name [test:NAME-4028] [details:-] [solution:-] +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4032 (Check nscd status) +2021-01-07 17:51:16 Test: checking nscd status +2021-01-07 17:51:16 Performing pgrep scan without uid +2021-01-07 17:51:16 IsRunning: process 'nscd' not found +2021-01-07 17:51:16 Result: nscd is not running +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4034 (Check Unbound status) +2021-01-07 17:51:16 Test: checking Unbound (unbound) status +2021-01-07 17:51:16 Performing pgrep scan without uid +2021-01-07 17:51:16 IsRunning: process 'unbound' not found +2021-01-07 17:51:16 Result: Unbound daemon is not running +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4036 (Check Unbound configuration file) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4202 (Check BIND status) +2021-01-07 17:51:16 Test: Checking for running BIND instance +2021-01-07 17:51:16 Performing pgrep scan without uid +2021-01-07 17:51:16 IsRunning: process 'named' not found +2021-01-07 17:51:16 Result: BIND not running +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4204 (Search BIND configuration file) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4206 (Check BIND configuration consistency) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4210 (Check DNS banner) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4230 (Check PowerDNS status) +2021-01-07 17:51:16 Test: Checking for running PowerDNS instance +2021-01-07 17:51:16 Performing pgrep scan without uid +2021-01-07 17:51:16 IsRunning: process 'pdns_server' not found +2021-01-07 17:51:16 Result: PowerDNS not running +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4232 (Search PowerDNS configuration file) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4236 (Check PowerDNS backends) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4238 (Check PowerDNS authoritative status) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4304 (Check NIS ypbind status) +2021-01-07 17:51:16 Test: Checking status of ypbind daemon +2021-01-07 17:51:16 Performing pgrep scan without uid +2021-01-07 17:51:16 IsRunning: process 'ypbind' not found +2021-01-07 17:51:16 Result: ypbind is not active +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test NAME-4306 (Check NIS domain) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4402 (Check duplicate line in /etc/hosts) +2021-01-07 17:51:16 Test: check duplicate line in /etc/hosts +2021-01-07 17:51:16 Result: OK, no duplicate lines found +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4404 (Check /etc/hosts contains an entry for this server name) +2021-01-07 17:51:16 Test: Check /etc/hosts contains an entry for this server name +2021-01-07 17:51:16 Result: Found entry for it-sec-test-vm in /etc/hosts +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4406 (Check server hostname mapping) +2021-01-07 17:51:16 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:51:16 Result: this server hostname is not mapped to a local address +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID NAME-4408 (Check localhost entry) +2021-01-07 17:51:16 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:51:16 Result: localhost mapped to ::1 +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_dns +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 Security check: file is normal +2021-01-07 17:51:16 Checking permissions of /root/scans/lynis/include/tests_ports_packages +2021-01-07 17:51:16 File permissions are OK +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Action: Performing tests from category: Ports and packages +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7301 (Query FreeBSD pkg) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7302 (Query FreeBSD/NetBSD pkg_info) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7303 (Query brew package manager) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 Result: brew can NOT be found on this system +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7304 (Querying Gentoo packages) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 Result: emerge can NOT be found on this system +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7306 (Querying Solaris packages) +2021-01-07 17:51:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:16 Result: pkginfo can NOT be found on this system +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7308 (Checking package list with RPM) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 Result: RPM binary NOT found on this system, test skipped +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7310 (Checking package list with pacman) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7312 (Checking available updates for pacman based system) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 Result: pacman binary NOT found on this system, test skipped +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7314 (Checking pacman configuration options) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7320 (Checking for arch-audit tooling) +2021-01-07 17:51:16 Reason to skip: Test only applies to Arch Linux +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7322 (Discover vulnerable packages with arch-audit) +2021-01-07 17:51:16 Reason to skip: arch-audit not found +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7328 (Querying Zypper for installed packages) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7330 (Querying Zypper for vulnerable packages) +2021-01-07 17:51:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7332 (Query macOS ports) +2021-01-07 17:51:16 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Skipped test PKGS-7334 (Query port for port upgrades) +2021-01-07 17:51:16 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:16 ==== +2021-01-07 17:51:16 Performing test ID PKGS-7345 (Querying dpkg) +2021-01-07 17:51:16 Result: Found dpkg binary +2021-01-07 17:51:16 Test: Querying dpkg -l to get package list +2021-01-07 17:51:16 Output: +2021-01-07 17:51:16 Found package: acl (version: 2.2.52-3) +2021-01-07 17:51:16 Found package: acpid (version: 1:2.0.26-1ubuntu2) +2021-01-07 17:51:16 Found package: adduser (version: 3.113+nmu3ubuntu4) +2021-01-07 17:51:16 Found package: apt (version: 1.2.32ubuntu0.2) +2021-01-07 17:51:16 Found package: apt-transport-https (version: 1.2.32ubuntu0.2) +2021-01-07 17:51:16 Found package: apt-utils (version: 1.2.32ubuntu0.2) +2021-01-07 17:51:16 Found package: aptitude (version: 0.7.4-2ubuntu2) +2021-01-07 17:51:16 Found package: aptitude-common (version: 0.7.4-2ubuntu2) +2021-01-07 17:51:16 Found package: at (version: 3.1.18-2ubuntu1) +2021-01-07 17:51:16 Found package: base-files (version: 9.4ubuntu4.13) +2021-01-07 17:51:16 Found package: base-passwd (version: 3.5.39) +2021-01-07 17:51:16 Found package: bash (version: 4.3-14ubuntu1.4) +2021-01-07 17:51:17 Found package: bind9-host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: bsdmainutils (version: 9.0.6ubuntu3) +2021-01-07 17:51:17 Found package: bsdutils (version: 1:2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: btrfs-tools (version: 4.4-1ubuntu1.1) +2021-01-07 17:51:17 Found package: busybox-initramfs (version: 1:1.22.0-15ubuntu1.4) +2021-01-07 17:51:17 Found package: bzip2 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:51:17 Found package: ca-certificates (version: 20201027ubuntu0.16.04.1) +2021-01-07 17:51:17 Found package: cloud-guest-utils (version: 0.27-0ubuntu25.2) +2021-01-07 17:51:17 Found package: cloud-init (version: 20.4-0ubuntu1~16.04.1) +2021-01-07 17:51:17 Found package: console-setup (version: 1.108ubuntu15.5) +2021-01-07 17:51:17 Found package: console-setup-linux (version: 1.108ubuntu15.5) +2021-01-07 17:51:17 Found package: coreutils (version: 8.25-2ubuntu3~16.04) +2021-01-07 17:51:17 Found package: cpio (version: 2.11+dfsg-5ubuntu1.1) +2021-01-07 17:51:17 Found package: cron (version: 3.0pl1-128ubuntu2) +2021-01-07 17:51:17 Found package: cryptsetup (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:51:17 Found package: cryptsetup-bin (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:51:17 Found package: curl (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:51:17 Found package: dash (version: 0.5.8-2.1ubuntu2) +2021-01-07 17:51:17 Found package: dbus (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:51:17 Found package: debconf (version: 1.5.58ubuntu2) +2021-01-07 17:51:17 Found package: debconf-i18n (version: 1.5.58ubuntu2) +2021-01-07 17:51:17 Found package: debianutils (version: 4.7) +2021-01-07 17:51:17 Found package: dh-python (version: 2.20151103ubuntu1.2) +2021-01-07 17:51:17 Found package: diffutils (version: 1:3.3-3) +2021-01-07 17:51:17 Found package: dirmngr (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:51:17 Found package: distro-info-data (version: 0.28ubuntu0.16) +2021-01-07 17:51:17 Found package: dmeventd (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:51:17 Found package: dmsetup (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:51:17 Found package: dpkg (version: 1.18.4ubuntu1.6) +2021-01-07 17:51:17 Found package: e2fslibs:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:51:17 Found package: e2fsprogs (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:51:17 Found package: eatmydata (version: 105-3) +2021-01-07 17:51:17 Found package: efibootmgr (version: 0.12-4) +2021-01-07 17:51:17 Found package: ethtool (version: 1:4.5-1) +2021-01-07 17:51:17 Found package: findutils (version: 4.6.0+git+20160126-2) +2021-01-07 17:51:17 Found package: gcc-5-base:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:51:17 Found package: gcc-6-base:amd64 (version: 6.0.1-0ubuntu1) +2021-01-07 17:51:17 Found package: gdisk (version: 1.0.1-1build1) +2021-01-07 17:51:17 Found package: gettext-base (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:51:17 Found package: gir1.2-glib-2.0:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:51:17 Found package: git (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:51:17 Found package: git-man (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:51:17 Found package: gnupg (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:51:17 Found package: gnupg-agent (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:51:17 Found package: gnupg2 (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:51:17 Found package: gpgv (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:51:17 Found package: grep (version: 2.25-1~16.04.1) +2021-01-07 17:51:17 Found package: groff-base (version: 1.22.3-7) +2021-01-07 17:51:17 Found package: grub-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:51:17 Found package: grub-efi-amd64 (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:51:17 Found package: grub-efi-amd64-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:51:17 Found package: grub-pc-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:51:17 Found package: grub2-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:51:17 Found package: gzip (version: 1.6-4ubuntu1) +2021-01-07 17:51:17 Found package: hc-utils (version: 0.0.3-1) +2021-01-07 17:51:17 Found package: host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: hostname (version: 3.16ubuntu2) +2021-01-07 17:51:17 Found package: htop (version: 2.0.1-1ubuntu1) +2021-01-07 17:51:17 Found package: ifupdown (version: 0.8.10ubuntu1.4) +2021-01-07 17:51:17 Found package: init (version: 1.29ubuntu4) +2021-01-07 17:51:17 Found package: init-system-helpers (version: 1.29ubuntu4) +2021-01-07 17:51:17 Found package: initramfs-tools (version: 0.122ubuntu8.17) +2021-01-07 17:51:17 Found package: initramfs-tools-bin (version: 0.122ubuntu8.17) +2021-01-07 17:51:17 Found package: initramfs-tools-core (version: 0.122ubuntu8.17) +2021-01-07 17:51:17 Found package: initscripts (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:51:17 Found package: insserv (version: 1.14.0-5ubuntu3) +2021-01-07 17:51:17 Found package: iproute2 (version: 4.3.0-1ubuntu3.16.04.5) +2021-01-07 17:51:17 Found package: iptables (version: 1.6.0-2ubuntu3) +2021-01-07 17:51:17 Found package: iputils-ping (version: 3:20121221-5ubuntu2) +2021-01-07 17:51:17 Found package: isc-dhcp-client (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:51:17 Found package: isc-dhcp-common (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:51:17 Found package: iso-codes (version: 3.65-1) +2021-01-07 17:51:17 Found package: kbd (version: 1.15.5-1ubuntu5) +2021-01-07 17:51:17 Found package: keyboard-configuration (version: 1.108ubuntu15.5) +2021-01-07 17:51:17 Found package: klibc-utils (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:51:17 Found package: kmod (version: 22-1ubuntu5.2) +2021-01-07 17:51:17 Found package: less (version: 481-2.1ubuntu0.2) +2021-01-07 17:51:17 Found package: libacl1:amd64 (version: 2.2.52-3) +2021-01-07 17:51:17 Found package: libapparmor1:amd64 (version: 2.10.95-0ubuntu2.11) +2021-01-07 17:51:17 Found package: libapt-inst2.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:51:17 Found package: libapt-pkg5.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:51:17 Found package: libasn1-8-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libasprintf0v5:amd64 (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:51:17 Found package: libassuan0:amd64 (version: 2.4.2-2) +2021-01-07 17:51:17 Found package: libatm1:amd64 (version: 1:2.5.1-1.5) +2021-01-07 17:51:17 Found package: libattr1:amd64 (version: 1:2.4.47-2) +2021-01-07 17:51:17 Found package: libaudit-common (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:51:17 Found package: libaudit1:amd64 (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:51:17 Found package: libbind9-140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libblkid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: libboost-iostreams1.58.0:amd64 (version: 1.58.0+dfsg-5ubuntu3.1) +2021-01-07 17:51:17 Found package: libbsd0:amd64 (version: 0.8.2-1ubuntu0.1) +2021-01-07 17:51:17 Found package: libbz2-1.0:amd64 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:51:17 Found package: libc-bin (version: 2.23-0ubuntu11.2) +2021-01-07 17:51:17 Found package: libc6:amd64 (version: 2.23-0ubuntu11.2) +2021-01-07 17:51:17 Found package: libcap-ng0:amd64 (version: 0.7.7-1) +2021-01-07 17:51:17 Found package: libcap2-bin (version: 1:2.24-12) +2021-01-07 17:51:17 Found package: libcap2:amd64 (version: 1:2.24-12) +2021-01-07 17:51:17 Found package: libcomerr2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:51:17 Found package: libcryptsetup4:amd64 (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:51:17 Found package: libcurl3-gnutls:amd64 (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:51:17 Found package: libcwidget3v5:amd64 (version: 0.5.17-4ubuntu2) +2021-01-07 17:51:17 Found package: libdb5.3:amd64 (version: 5.3.28-11ubuntu0.2) +2021-01-07 17:51:17 Found package: libdbus-1-3:amd64 (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:51:17 Found package: libdbus-glib-1-2:amd64 (version: 0.106-1) +2021-01-07 17:51:17 Found package: libdebconfclient0:amd64 (version: 0.198ubuntu1) +2021-01-07 17:51:17 Found package: libdevmapper-event1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:51:17 Found package: libdevmapper1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:51:17 Found package: libdns-export162 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libdns162:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libdrm-common (version: 2.4.91-2~16.04.1) +2021-01-07 17:51:17 Found package: libdrm2:amd64 (version: 2.4.91-2~16.04.1) +2021-01-07 17:51:17 Found package: libeatmydata1:amd64 (version: 105-3) +2021-01-07 17:51:17 Found package: libedit2:amd64 (version: 3.1-20150325-1ubuntu2) +2021-01-07 17:51:17 Found package: libefivar0:amd64 (version: 0.23-2) +2021-01-07 17:51:17 Found package: liberror-perl (version: 0.17-1.2) +2021-01-07 17:51:17 Found package: libestr0 (version: 0.1.10-1) +2021-01-07 17:51:17 Found package: libexpat1:amd64 (version: 2.1.0-7ubuntu0.16.04.5) +2021-01-07 17:51:17 Found package: libfdisk1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: libffi6:amd64 (version: 3.2.1-4) +2021-01-07 17:51:17 Found package: libfreetype6:amd64 (version: 2.6.1-0.1ubuntu2.5) +2021-01-07 17:51:17 Found package: libfribidi0:amd64 (version: 0.19.7-1) +2021-01-07 17:51:17 Found package: libfuse2:amd64 (version: 2.9.4-1ubuntu3.1) +2021-01-07 17:51:17 Found package: libgcc1:amd64 (version: 1:6.0.1-0ubuntu1) +2021-01-07 17:51:17 Found package: libgcrypt20:amd64 (version: 1.6.5-2ubuntu0.6) +2021-01-07 17:51:17 Found package: libgdbm3:amd64 (version: 1.8.3-13.1) +2021-01-07 17:51:17 Found package: libgeoip1:amd64 (version: 1.6.9-1) +2021-01-07 17:51:17 Found package: libgirepository-1.0-1:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:51:17 Found package: libglib2.0-0:amd64 (version: 2.48.2-0ubuntu4.6) +2021-01-07 17:51:17 Found package: libgmp10:amd64 (version: 2:6.1.0+dfsg-2) +2021-01-07 17:51:17 Found package: libgnutls-openssl27:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:51:17 Found package: libgnutls30:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:51:17 Found package: libgpg-error0:amd64 (version: 1.21-2ubuntu1) +2021-01-07 17:51:17 Found package: libgpm2:amd64 (version: 1.20.4-6.1) +2021-01-07 17:51:17 Found package: libgssapi-krb5-2:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:51:17 Found package: libgssapi3-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libhcrypto4-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libheimbase1-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libheimntlm0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libhogweed4:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:51:17 Found package: libhx509-5-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libicu55:amd64 (version: 55.1-7ubuntu0.5) +2021-01-07 17:51:17 Found package: libidn11:amd64 (version: 1.32-3ubuntu1.2) +2021-01-07 17:51:17 Found package: libisc-export160 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libisc160:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libisccc140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libisccfg140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: libjson-c2:amd64 (version: 0.11-4ubuntu2.6) +2021-01-07 17:51:17 Found package: libk5crypto3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:51:17 Found package: libkeyutils1:amd64 (version: 1.5.9-8ubuntu1) +2021-01-07 17:51:17 Found package: libklibc (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:51:17 Found package: libkmod2:amd64 (version: 22-1ubuntu5.2) +2021-01-07 17:51:17 Found package: libkrb5-26-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libkrb5-3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:51:17 Found package: libkrb5support0:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:51:17 Found package: libksba8:amd64 (version: 1.3.3-1ubuntu0.16.04.1) +2021-01-07 17:51:17 Found package: libldap-2.4-2:amd64 (version: 2.4.42+dfsg-2ubuntu3.11) +2021-01-07 17:51:17 Found package: liblocale-gettext-perl (version: 1.07-1build1) +2021-01-07 17:51:17 Found package: liblvm2app2.2:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:51:17 Found package: liblvm2cmd2.02:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:51:17 Found package: liblwres141:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:51:17 Found package: liblz4-1:amd64 (version: 0.0~r131-2ubuntu2) +2021-01-07 17:51:17 Found package: liblzma5:amd64 (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:51:17 Found package: liblzo2-2:amd64 (version: 2.08-1.2) +2021-01-07 17:51:17 Found package: libmagic1:amd64 (version: 1:5.25-2ubuntu1.4) +2021-01-07 17:51:17 Found package: libmnl0:amd64 (version: 1.0.3-5) +2021-01-07 17:51:17 Found package: libmount1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: libmpdec2:amd64 (version: 2.4.2-1) +2021-01-07 17:51:17 Found package: libncurses5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: libncursesw5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: libnettle6:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:51:17 Found package: libnewt0.52:amd64 (version: 0.52.18-1ubuntu2) +2021-01-07 17:51:17 Found package: libnfnetlink0:amd64 (version: 1.0.1-3) +2021-01-07 17:51:17 Found package: libnih1:amd64 (version: 1.0.3-4.3ubuntu1) +2021-01-07 17:51:17 Found package: libnpth0:amd64 (version: 1.2-3) +2021-01-07 17:51:17 Found package: libp11-kit0:amd64 (version: 0.23.2-5~ubuntu16.04.2) +2021-01-07 17:51:17 Found package: libpam-modules-bin (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:51:17 Found package: libpam-modules:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:51:17 Found package: libpam-runtime (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:51:17 Found package: libpam-systemd:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:51:17 Found package: libpam0g:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:51:17 Found package: libpci3:amd64 (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:51:17 Found package: libpcre3:amd64 (version: 2:8.38-3.1) +2021-01-07 17:51:17 Found package: libperl5.22:amd64 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:51:17 Found package: libpipeline1:amd64 (version: 1.4.1-2) +2021-01-07 17:51:17 Found package: libplymouth4:amd64 (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:51:17 Found package: libpng12-0:amd64 (version: 1.2.54-1ubuntu1.1) +2021-01-07 17:51:17 Found package: libpopt0:amd64 (version: 1.16-10) +2021-01-07 17:51:17 Found package: libprocps4:amd64 (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:51:17 Found package: libpython3-stdlib:amd64 (version: 3.5.1-3) +2021-01-07 17:51:17 Found package: libpython3.5-minimal:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:51:17 Found package: libpython3.5-stdlib:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:51:17 Found package: libpython3.5:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:51:17 Found package: libreadline5:amd64 (version: 5.2+dfsg-3build1) +2021-01-07 17:51:17 Found package: libreadline6:amd64 (version: 6.3-8ubuntu2) +2021-01-07 17:51:17 Found package: libroken18-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: librtmp1:amd64 (version: 2.4+20151223.gitfa8646d-1ubuntu0.1) +2021-01-07 17:51:17 Found package: libsasl2-2:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:51:17 Found package: libsasl2-modules-db:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:51:17 Found package: libseccomp2:amd64 (version: 2.4.3-1ubuntu3.16.04.3) +2021-01-07 17:51:17 Found package: libselinux1:amd64 (version: 2.4-3build2) +2021-01-07 17:51:17 Found package: libsemanage-common (version: 2.3-1build3) +2021-01-07 17:51:17 Found package: libsemanage1:amd64 (version: 2.3-1build3) +2021-01-07 17:51:17 Found package: libsepol1:amd64 (version: 2.4-2) +2021-01-07 17:51:17 Found package: libsigc++-2.0-0v5:amd64 (version: 2.6.2-1) +2021-01-07 17:51:17 Found package: libslang2:amd64 (version: 2.3.0-2ubuntu1.1) +2021-01-07 17:51:17 Found package: libsmartcols1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: libsqlite3-0:amd64 (version: 3.11.0-1ubuntu1.5) +2021-01-07 17:51:17 Found package: libss2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:51:17 Found package: libssl1.0.0:amd64 (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:51:17 Found package: libstdc++6:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:51:17 Found package: libsystemd0:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:51:17 Found package: libtasn1-6:amd64 (version: 4.7-3ubuntu0.16.04.3) +2021-01-07 17:51:17 Found package: libtext-charwidth-perl (version: 0.04-7build5) +2021-01-07 17:51:17 Found package: libtext-iconv-perl (version: 1.7-5build4) +2021-01-07 17:51:17 Found package: libtext-wrapi18n-perl (version: 0.06-7.1) +2021-01-07 17:51:17 Found package: libtinfo5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: libudev1:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:51:17 Found package: libusb-0.1-4:amd64 (version: 2:0.1.12-28) +2021-01-07 17:51:17 Found package: libusb-1.0-0:amd64 (version: 2:1.0.20-1) +2021-01-07 17:51:17 Found package: libustr-1.0-1:amd64 (version: 1.0.4-5) +2021-01-07 17:51:17 Found package: libuuid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: libwind0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:51:17 Found package: libwrap0:amd64 (version: 7.6.q-25) +2021-01-07 17:51:17 Found package: libxapian22v5:amd64 (version: 1.2.22-2) +2021-01-07 17:51:17 Found package: libxml2:amd64 (version: 2.9.3+dfsg1-1ubuntu0.7) +2021-01-07 17:51:17 Found package: libxtables11:amd64 (version: 1.6.0-2ubuntu3) +2021-01-07 17:51:17 Found package: libyaml-0-2:amd64 (version: 0.1.6-3) +2021-01-07 17:51:17 Found package: linux-base (version: 4.5ubuntu1.2~16.04.1) +2021-01-07 17:51:17 Found package: linux-firmware (version: 1.157.23) +2021-01-07 17:51:17 Found package: linux-image-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:51:17 Found package: linux-image-4.4.0-198-generic (version: 4.4.0-198.230) +2021-01-07 17:51:17 Found package: linux-image-virtual (version: 4.4.0.198.204) +2021-01-07 17:51:17 Found package: linux-modules-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:51:17 Found package: linux-modules-4.4.0-198-generic (version: 4.4.0-198.230) +2021-01-07 17:51:17 Found package: locales (version: 2.23-0ubuntu11.2) +2021-01-07 17:51:17 Found package: login (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:51:17 Found package: logrotate (version: 3.8.7-2ubuntu2.16.04.2) +2021-01-07 17:51:17 Found package: lsb-base (version: 9.20160110ubuntu0.2) +2021-01-07 17:51:17 Found package: lsb-release (version: 9.20160110ubuntu0.2) +2021-01-07 17:51:17 Found package: lvm2 (version: 2.02.133-1ubuntu10) +2021-01-07 17:51:17 Found package: makedev (version: 2.3.1-93ubuntu2~ubuntu16.04.1) +2021-01-07 17:51:17 Found package: man-db (version: 2.7.5-1) +2021-01-07 17:51:17 Found package: mawk (version: 1.3.3-17ubuntu2) +2021-01-07 17:51:17 Found package: mdadm (version: 3.3-2ubuntu7.6) +2021-01-07 17:51:17 Found package: mime-support (version: 3.59ubuntu1) +2021-01-07 17:51:17 Found package: mokutil (version: 0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1) +2021-01-07 17:51:17 Found package: mount (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:17 Found package: mtr-tiny (version: 0.86-1ubuntu0.1) +2021-01-07 17:51:17 Found package: multiarch-support (version: 2.23-0ubuntu11.2) +2021-01-07 17:51:17 Found package: nano (version: 2.5.3-2ubuntu2) +2021-01-07 17:51:17 Found package: ncurses-base (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: ncurses-bin (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: ncurses-term (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:51:17 Found package: net-tools (version: 1.60-26ubuntu1) +2021-01-07 17:51:17 Found package: netbase (version: 5.3) +2021-01-07 17:51:17 Found package: netcat-openbsd (version: 1.105-7ubuntu1) +2021-01-07 17:51:17 Found package: openssh-client (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:51:17 Found package: openssh-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:51:17 Found package: openssh-sftp-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:51:17 Found package: openssl (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:51:17 Found package: passwd (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:51:17 Found package: patch (version: 2.7.5-1ubuntu0.16.04.2) +2021-01-07 17:51:17 Found package: pciutils (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:51:17 Found package: perl (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:51:17 Found package: perl-base (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:51:17 Found package: perl-modules-5.22 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:51:17 Found package: pinentry-curses (version: 0.9.7-3) +2021-01-07 17:51:17 Found package: plymouth (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:51:17 Found package: pollinate (version: 4.33-0ubuntu1~16.04.1) +2021-01-07 17:51:17 Found package: powermgmt-base (version: 1.31+nmu1) +2021-01-07 17:51:17 Found package: procps (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:51:17 Found package: python-apt-common (version: 1.1.0~beta1ubuntu0.16.04.11) +2021-01-07 17:51:17 Found package: python3 (version: 3.5.1-3) +2021-01-07 17:51:17 Found package: python3-apt (version: 1.1.0~beta1ubuntu0.16.04.11) +2021-01-07 17:51:17 Found package: python3-blinker (version: 1.3.dfsg2-1build1) +2021-01-07 17:51:17 Found package: python3-cffi-backend (version: 1.5.2-1ubuntu1) +2021-01-07 17:51:17 Found package: python3-chardet (version: 2.3.0-2) +2021-01-07 17:51:17 Found package: python3-configobj (version: 5.0.6-2) +2021-01-07 17:51:17 Found package: python3-cryptography (version: 1.2.3-1ubuntu0.3) +2021-01-07 17:51:17 Found package: python3-dbus (version: 1.2.0-3) +2021-01-07 17:51:17 Found package: python3-gi (version: 3.20.0-0ubuntu1) +2021-01-07 17:51:17 Found package: python3-idna (version: 2.0-3) +2021-01-07 17:51:17 Found package: python3-jinja2 (version: 2.8-1ubuntu0.1) +2021-01-07 17:51:17 Found package: python3-json-pointer (version: 1.9-3) +2021-01-07 17:51:17 Found package: python3-jsonpatch (version: 1.19-3) +2021-01-07 17:51:17 Found package: python3-jwt (version: 1.3.0-1ubuntu0.1) +2021-01-07 17:51:17 Found package: python3-markupsafe (version: 0.23-2build2) +2021-01-07 17:51:17 Found package: python3-minimal (version: 3.5.1-3) +2021-01-07 17:51:17 Found package: python3-oauthlib (version: 1.0.3-1) +2021-01-07 17:51:17 Found package: python3-pkg-resources (version: 20.7.0-1) +2021-01-07 17:51:17 Found package: python3-pyasn1 (version: 0.1.9-1) +2021-01-07 17:51:17 Found package: python3-pycurl (version: 7.43.0-1ubuntu1) +2021-01-07 17:51:17 Found package: python3-requests (version: 2.9.1-3ubuntu0.1) +2021-01-07 17:51:17 Found package: python3-serial (version: 3.0.1-1) +2021-01-07 17:51:17 Found package: python3-six (version: 1.10.0-3) +2021-01-07 17:51:17 Found package: python3-software-properties (version: 0.96.20.10) +2021-01-07 17:51:17 Found package: python3-urllib3 (version: 1.13.1-2ubuntu0.16.04.4) +2021-01-07 17:51:17 Found package: python3-yaml (version: 3.11-3build1) +2021-01-07 17:51:17 Found package: python3.5 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:51:17 Found package: python3.5-minimal (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:51:17 Found package: qemu-guest-agent (version: 1:2.5+dfsg-5ubuntu10.48) +2021-01-07 17:51:17 Found package: readline-common (version: 6.3-8ubuntu2) +2021-01-07 17:51:17 Found package: resolvconf (version: 1.78ubuntu7) +2021-01-07 17:51:17 Found package: rsync (version: 3.1.1-3ubuntu1.3) +2021-01-07 17:51:17 Found package: rsyslog (version: 8.16.0-1ubuntu3.1) +2021-01-07 17:51:17 Found package: sbsigntool (version: 0.6-0ubuntu10.1) +2021-01-07 17:51:17 Found package: sed (version: 4.2.2-7) +2021-01-07 17:51:17 Found package: sensible-utils (version: 0.0.9ubuntu0.16.04.1) +2021-01-07 17:51:17 Found package: shim (version: 15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:51:17 Found package: shim-signed (version: 1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:51:17 Found package: software-properties-common (version: 0.96.20.10) +2021-01-07 17:51:17 Found package: ssh-import-id (version: 5.5-0ubuntu1) +2021-01-07 17:51:17 Found package: sudo (version: 1.8.16-0ubuntu1.9) +2021-01-07 17:51:17 Found package: systemd (version: 229-4ubuntu21.29) +2021-01-07 17:51:17 Found package: systemd-sysv (version: 229-4ubuntu21.29) +2021-01-07 17:51:18 Found package: sysv-rc (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:51:18 Found package: sysvinit-utils (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:51:18 Found package: tar (version: 1.28-2.1ubuntu0.1) +2021-01-07 17:51:18 Found package: tasksel (version: 3.34ubuntu3) +2021-01-07 17:51:18 Found package: tasksel-data (version: 3.34ubuntu3) +2021-01-07 17:51:18 Found package: tzdata (version: 2020d-0ubuntu0.16.04) +2021-01-07 17:51:18 Found package: ubuntu-advantage-tools (version: 10ubuntu0.16.04.1) +2021-01-07 17:51:18 Found package: ubuntu-keyring (version: 2012.05.19.1) +2021-01-07 17:51:18 Found package: ucf (version: 3.0036) +2021-01-07 17:51:18 Found package: udev (version: 229-4ubuntu21.29) +2021-01-07 17:51:18 Found package: unattended-upgrades (version: 1.1ubuntu1.18.04.7~16.04.6) +2021-01-07 17:51:18 Found package: ureadahead (version: 0.100.0-19.1) +2021-01-07 17:51:18 Found package: usbutils (version: 1:007-4) +2021-01-07 17:51:18 Found package: util-linux (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:51:18 Found package: vim (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:51:18 Found package: vim-common (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:51:18 Found package: vim-runtime (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:51:18 Found package: vim-tiny (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:51:18 Found package: wget (version: 1.17.1-1ubuntu1.5) +2021-01-07 17:51:18 Found package: whiptail (version: 0.52.18-1ubuntu2) +2021-01-07 17:51:18 Found package: xfsprogs (version: 4.3.0+nmu1ubuntu1.1) +2021-01-07 17:51:18 Found package: xkb-data (version: 2.16-1ubuntu1) +2021-01-07 17:51:18 Found package: xz-utils (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:51:18 Found package: zlib1g:amd64 (version: 1:1.2.8.dfsg-2ubuntu4.3) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Performing test ID PKGS-7346 (Search unpurged packages on system) +2021-01-07 17:51:18 Test: Querying dpkg -l to get unpurged packages +2021-01-07 17:51:18 Result: no packages found with left overs +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7348 (Check for old distfiles) +2021-01-07 17:51:18 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7350 (Checking for installed packages with DNF utility) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7352 (Checking for security updates with DNF utility) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7354 (Checking package database integrity) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7366 (Checking for debsecan utility) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Performing test ID PKGS-7370 (Checking for debsums utility) +2021-01-07 17:51:18 Result: debsums utility is not installed. +2021-01-07 17:51:18 Hardening: assigned partial number of hardening points (0 of 2). Currently having 101 points (out of 149) +2021-01-07 17:51:18 Suggestion: Install debsums utility for the verification of packages with known good database. [test:PKGS-7370] [details:-] [solution:-] +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7378 (Query portmaster for port upgrades) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7380 (Check for vulnerable NetBSD packages) +2021-01-07 17:51:18 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7381 (Check for vulnerable FreeBSD packages with pkg) +2021-01-07 17:51:18 Reason to skip: pkg tool not available +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7382 (Check for vulnerable FreeBSD packages with portaudit) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7383 (Check for YUM package update management) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7384 (Check for YUM utils package) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7386 (Check for YUM security package) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Skipped test PKGS-7387 (Check for GPG signing in YUM security package) +2021-01-07 17:51:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Performing test ID PKGS-7388 (Check security repository in apt sources.list file) +2021-01-07 17:51:18 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list file +2021-01-07 17:51:18 Result: Found security repository in /etc/apt/sources.list +2021-01-07 17:51:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security main restricted +2021-01-07 17:51:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security universe +2021-01-07 17:51:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security multiverse +2021-01-07 17:51:18 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list.d directory +2021-01-07 17:51:18 Result: Found security repository in one or more files in directory /etc/apt/sources.list.d +2021-01-07 17:51:18 Output: /etc/apt/sources.list.d/hetzner-mirror.list:deb http://mirror.hetzner.de/ubuntu/packages xenial-security main restricted universe multiverse +2021-01-07 17:51:18 Result: security repository was found +2021-01-07 17:51:18 Hardening: assigned maximum number of hardening points for this item (3). Currently having 104 points (out of 152) +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Performing test ID PKGS-7390 (Check Ubuntu database consistency) +2021-01-07 17:51:18 Test: Package database consistency by running apt-get check +2021-01-07 17:51:18 Result: package database seems to be consistent. +2021-01-07 17:51:18 ==== +2021-01-07 17:51:18 Performing test ID PKGS-7392 (Check for Debian/Ubuntu security updates) +2021-01-07 17:51:18 Action: updating package repository with apt-get +2021-01-07 17:51:22 Result: apt-get finished +2021-01-07 17:51:22 Test: Checking if /usr/lib/update-notifier/apt-check exists +2021-01-07 17:51:22 Result: apt-check (update-notifier-common) not found +2021-01-07 17:51:23 Result: test not fully executed (missing apt-check output) +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Skipped test PKGS-7393 (Check for Gentoo vulnerable packages) +2021-01-07 17:51:23 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID PKGS-7394 (Check for Ubuntu updates) +2021-01-07 17:51:23 Test: checking /usr/bin/apt-show-versions +2021-01-07 17:51:23 Result: /usr/bin/apt-show-versions not found +2021-01-07 17:51:23 Suggestion: Install package apt-show-versions for patch management purposes [test:PKGS-7394] [details:-] [solution:-] +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID PKGS-7398 (Check for package audit tool) +2021-01-07 17:51:23 Test: checking for package audit tool +2021-01-07 17:51:23 Result: found package audit tool: apt-get +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID PKGS-7410 (Count installed kernel packages) +2021-01-07 17:51:23 Test: Checking how many kernel packages are installed +2021-01-07 17:51:23 Result: found 2 kernel packages on the system, which is fine +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID PKGS-7420 (Detect toolkit to automatically download and apply upgrades) +2021-01-07 17:51:23 Result: found unattended-upgrade +2021-01-07 17:51:23 Hardening: assigned maximum number of hardening points for this item (5). Currently having 109 points (out of 157) +2021-01-07 17:51:23 Security check: file is normal +2021-01-07 17:51:23 Checking permissions of /root/scans/lynis/include/tests_networking +2021-01-07 17:51:23 File permissions are OK +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Action: Performing tests from category: Networking +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-2400 (Hostname length and value check) +2021-01-07 17:51:23 Result: FQDN is defined and not longer than 253 characters (14 characters) +2021-01-07 17:51:23 Result: hostnamed is defined and not longer than 63 characters +2021-01-07 17:51:23 Result: good, no unexpected characters discovered in hostname +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-2600 (Checking IPv6 configuration) +2021-01-07 17:51:23 Result: IPV6 mode is auto +2021-01-07 17:51:23 Result: IPv6 only configuration: NO +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-2704 (Basic nameserver configuration tests) +2021-01-07 17:51:23 Test: Checking /etc/resolv.conf file +2021-01-07 17:51:23 Result: Found /etc/resolv.conf file +2021-01-07 17:51:23 Test: Querying nameservers +2021-01-07 17:51:23 Found nameserver: 213.133.99.99 +2021-01-07 17:51:23 Result: Nameserver test for 213.133.99.99 skipped, 'dig' not installed +2021-01-07 17:51:23 Found nameserver: 213.133.98.98 +2021-01-07 17:51:23 Result: Nameserver test for 213.133.98.98 skipped, 'dig' not installed +2021-01-07 17:51:23 Found nameserver: 213.133.100.100 +2021-01-07 17:51:23 Result: Nameserver test for 213.133.100.100 skipped, 'dig' not installed +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-2705 (Check availability two nameservers) +2021-01-07 17:51:23 Result: dig not installed, test can't be fully performed +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-2706 (Check systemd-resolved and upstream DNSSEC status) +2021-01-07 17:51:23 Result: DNSSEC not supported by systemd-resolved or upstream DNS servers +2021-01-07 17:51:23 ==== +2021-01-07 17:51:23 Performing test ID NETW-3001 (Find default gateway (route)) +2021-01-07 17:51:23 Test: Searching default gateway(s) +2021-01-07 17:51:24 Result: Found default gateway 172.31.1.1 +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3004 (Search for available network interfaces) +2021-01-07 17:51:24 Found network interface: lo +2021-01-07 17:51:24 Found network interface: eth0 +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3006 (Get network MAC addresses) +2021-01-07 17:51:24 Found MAC address: 96:00:00:8b:fc:bd +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3008 (Get network IP addresses) +2021-01-07 17:51:24 Found IPv4 address: 116.203.241.83 +2021-01-07 17:51:24 Found IPv4 address: 127.0.0.1 +2021-01-07 17:51:24 Found IPv6 address: 2a01:4f8:c2c:410b::1/64 +2021-01-07 17:51:24 Found IPv6 address: fe80::9400:ff:fe8b:fcbd/64 +2021-01-07 17:51:24 Found IPv6 address: ::1/128 +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3012 (Check listening ports) +2021-01-07 17:51:24 Test: Retrieving ss information to find listening ports +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test NETW-3014 (Checking promiscuous interfaces (BSD)) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3015 (Checking promiscuous interfaces (Linux)) +2021-01-07 17:51:24 Test: Using ip binary to retrieve network interfaces +2021-01-07 17:51:24 Test: Checking all interfaces to discover any with promiscuous mode enabled +2021-01-07 17:51:24 Result: No promiscuous interfaces found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3028 (Checking connections in WAIT state) +2021-01-07 17:51:24 Test: Using netstat for check for connections in WAIT state +2021-01-07 17:51:24 Result: currently 7 connections are in a waiting state (max configured: 5000). +2021-01-07 17:51:24 Result: 7 connections are in WAIT state +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3030 (Checking DHCP client status) +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'dhclient' found (947 ) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3032 (Checking for ARP monitoring software) +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'addrwatch' not found +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'arpwatch' not found +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'arpon' not found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID NETW-3200 (Determine available network protocols) +2021-01-07 17:51:24 Test: checking the status of some network protocols that typically are not used +2021-01-07 17:51:24 Test: now checking module 'dccp' +2021-01-07 17:51:24 Suggestion: Determine if protocol 'dccp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:51:24 Test: now checking module 'sctp' +2021-01-07 17:51:24 Suggestion: Determine if protocol 'sctp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:51:24 Test: now checking module 'rds' +2021-01-07 17:51:24 Suggestion: Determine if protocol 'rds' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:51:24 Test: now checking module 'tipc' +2021-01-07 17:51:24 Suggestion: Determine if protocol 'tipc' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:51:24 Security check: file is normal +2021-01-07 17:51:24 Checking permissions of /root/scans/lynis/include/tests_printers_spoolers +2021-01-07 17:51:24 File permissions are OK +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Action: Performing tests from category: Printers and Spools +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2302 (Check for printcap consistency) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID PRNT-2304 (Check cupsd status) +2021-01-07 17:51:24 Test: Checking cupsd status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'cupsd' not found +2021-01-07 17:51:24 Result: cups daemon not running, cups daemon tests skipped +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2306 (Check CUPSd configuration file) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2307 (Check CUPSd configuration file permissions) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2308 (Check CUPSd network configuration) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID PRNT-2314 (Check lpd status) +2021-01-07 17:51:24 Test: Checking lpd status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'lpd' not found +2021-01-07 17:51:24 Result: lp daemon not running +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (4). Currently having 113 points (out of 161) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2316 (Checking /etc/qconfig file) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2418 (Checking qdaemon printer spooler status) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test PRNT-2420 (Checking old print jobs) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:51:24 Security check: file is normal +2021-01-07 17:51:24 Checking permissions of /root/scans/lynis/include/tests_mail_messaging +2021-01-07 17:51:24 File permissions are OK +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Action: Performing tests from category: Software: e-mail and messaging +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8802 (Check Exim status) +2021-01-07 17:51:24 Test: check Exim status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'exim4' not found +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'exim' not found +2021-01-07 17:51:24 Result: no running Exim processes found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test MAIL-8804 (Exim configuration options) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8814 (Check postfix process status) +2021-01-07 17:51:24 Test: check Postfix status +2021-01-07 17:51:24 Result: no running Postfix processes found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test MAIL-8816 (Check Postfix configuration) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test MAIL-8817 (Check Postfix configuration errors) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test MAIL-8818 (Check Postfix configuration: banner) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8820 (Postfix configuration scan) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8838 (Check dovecot process) +2021-01-07 17:51:24 Test: check dovecot status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'dovecot' not found +2021-01-07 17:51:24 Result: dovecot not found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8860 (Check Qmail status) +2021-01-07 17:51:24 Test: check Qmail status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'qmail-smtpd' not found +2021-01-07 17:51:24 Result: no running Qmail processes found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID MAIL-8880 (Check Sendmail status) +2021-01-07 17:51:24 Test: check sendmail status +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'sendmail' not found +2021-01-07 17:51:24 Result: no running Sendmail processes found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test MAIL-8920 (Check OpenSMTPD status) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 Security check: file is normal +2021-01-07 17:51:24 Checking permissions of /root/scans/lynis/include/tests_firewalls +2021-01-07 17:51:24 File permissions are OK +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Action: Performing tests from category: Software: firewalls +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4502 (Check iptables kernel module) +2021-01-07 17:51:24 Result: Found iptables in loaded kernel modules +2021-01-07 17:51:24 Found module: ip_tables +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4508 (Check used policies of iptables chains) +2021-01-07 17:51:24 Test: gathering information from table filter +2021-01-07 17:51:24 Result: iptables -- policy is . +2021-01-07 17:51:24 Result: +2021-01-07 17:51:24 Result: iptables filter -- INPUTACCEPTFORWARDACCEPTOUTPUTACCEPT policy is . +2021-01-07 17:51:24 Result: +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4512 (Check iptables for empty ruleset) +2021-01-07 17:51:24 Result: iptables ruleset seems to be empty (found 0 rules) +2021-01-07 17:51:24 Warning: iptables module(s) loaded, but no rules active [test:FIRE-4512] [details:-] [solution:-] +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4513 (Check iptables for unused rules) +2021-01-07 17:51:24 Result: There are no unused rules present +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4518 (Check pf firewall components) +2021-01-07 17:51:24 Reason to skip: No /dev/pf device +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4520 (Check pf configuration consistency) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4524 (Check for CSF presence) +2021-01-07 17:51:24 Test: check /etc/csf/csf.conf +2021-01-07 17:51:24 Result: /etc/csf/csf.conf does NOT exist +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4526 (Check ipf status) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4530 (Check IPFW status) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4532 (Check macOS application firewall) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4534 (Check for presence of outbound firewalls on macOS) +2021-01-07 17:51:24 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4536 (Check nftables status) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4538 (Check nftables basic configuration) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test FIRE-4540 (Check for empty nftables configuration) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4586 (Check firewall logging) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4590 (Check firewall status) +2021-01-07 17:51:24 Result: host based firewall or packet filter is active +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (5). Currently having 118 points (out of 166) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID FIRE-4594 (Check for APF presence) +2021-01-07 17:51:24 Test: check /etc/apf/conf.apf +2021-01-07 17:51:24 Result: /etc/apf/conf.apf does NOT exist +2021-01-07 17:51:24 Security check: file is normal +2021-01-07 17:51:24 Checking permissions of /root/scans/lynis/include/tests_webservers +2021-01-07 17:51:24 File permissions are OK +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Action: Performing tests from category: Software: webserver +2021-01-07 17:51:24 Action: created temporary file /tmp/lynis.u1Az70AnwO +2021-01-07 17:51:24 Action: created temporary file /tmp/lynis.o5C5DIqbhL +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID HTTP-6622 (Checking Apache presence) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6624 (Testing main Apache configuration file) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6626 (Testing other Apache configuration file) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6632 (Determining all available Apache modules) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6640 (Determining existence of specific Apache modules) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6641 (Determining existence of specific Apache modules) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6643 (Determining existence of specific Apache modules) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID HTTP-6702 (Check nginx process) +2021-01-07 17:51:24 Test: searching running nginx process +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'nginx' not found +2021-01-07 17:51:24 Result: no running nginx process found +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6704 (Check nginx configuration file) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6706 (Check for additional nginx configuration files) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6708 (Check discovered nginx configuration settings) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6710 (Check nginx SSL configuration settings) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6712 (Check nginx access logging) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6714 (Check for missing error logs in nginx) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6716 (Check for debug mode on error log in nginx) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Skipped test HTTP-6720 (Check Nginx log files) +2021-01-07 17:51:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:24 Security check: file is normal +2021-01-07 17:51:24 Checking permissions of /root/scans/lynis/include/tests_ssh +2021-01-07 17:51:24 File permissions are OK +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Action: Performing tests from category: SSH Support +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID SSH-7402 (Check for running SSH daemon) +2021-01-07 17:51:24 Test: Searching for a SSH daemon +2021-01-07 17:51:24 Performing pgrep scan without uid +2021-01-07 17:51:24 IsRunning: process 'sshd' found (1333 1380 ) +2021-01-07 17:51:24 Action: created temporary file /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID SSH-7404 (Check SSH daemon file location) +2021-01-07 17:51:24 Test: searching for sshd_config file +2021-01-07 17:51:24 Result: /etc/ssh/sshd_config exists +2021-01-07 17:51:24 Test: check if we can access /etc/ssh/sshd_config (escaped: /etc/ssh/sshd_config) +2021-01-07 17:51:24 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:24 Result: file /etc/ssh/sshd_config is readable (or directory accessible). +2021-01-07 17:51:24 Result: using last found configuration file: /etc/ssh/sshd_config +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID SSH-7406 (Determine OpenSSH version) +2021-01-07 17:51:24 Result: discovered OpenSSH version is 7.2 +2021-01-07 17:51:24 Result: OpenSSH major version: 7 +2021-01-07 17:51:24 Result: OpenSSH minor version: 2 +2021-01-07 17:51:24 ==== +2021-01-07 17:51:24 Performing test ID SSH-7408 (Check SSH specific defined options) +2021-01-07 17:51:24 Test: Checking specific defined options in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: added additional options for OpenSSH < 7.4 +2021-01-07 17:51:24 Result: added additional options for OpenSSH < 7.5 +2021-01-07 17:51:24 Test: Checking AllowTcpForwarding in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option AllowTcpForwarding found +2021-01-07 17:51:24 Result: Option AllowTcpForwarding value is YES +2021-01-07 17:51:24 Result: OpenSSH option AllowTcpForwarding is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowTcpForwarding (set YES to NO)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 118 points (out of 169) +2021-01-07 17:51:24 Test: Checking ClientAliveCountMax in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option ClientAliveCountMax found +2021-01-07 17:51:24 Result: Option ClientAliveCountMax value is 3 +2021-01-07 17:51:24 Result: OpenSSH option ClientAliveCountMax is configured reasonably +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:ClientAliveCountMax (set 3 to 2)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (1 of 3). Currently having 119 points (out of 172) +2021-01-07 17:51:24 Test: Checking ClientAliveInterval in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option ClientAliveInterval found +2021-01-07 17:51:24 Result: Option ClientAliveInterval value is 0 +2021-01-07 17:51:24 Result: OpenSSH option ClientAliveInterval is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 122 points (out of 175) +2021-01-07 17:51:24 Test: Checking Compression in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option Compression found +2021-01-07 17:51:24 Result: Option Compression value is YES +2021-01-07 17:51:24 Result: OpenSSH option Compression is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Compression (set YES to NO)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 122 points (out of 178) +2021-01-07 17:51:24 Test: Checking FingerprintHash in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option FingerprintHash found +2021-01-07 17:51:24 Result: Option FingerprintHash value is SHA256 +2021-01-07 17:51:24 Result: OpenSSH option FingerprintHash is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 125 points (out of 181) +2021-01-07 17:51:24 Test: Checking GatewayPorts in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option GatewayPorts found +2021-01-07 17:51:24 Result: Option GatewayPorts value is NO +2021-01-07 17:51:24 Result: OpenSSH option GatewayPorts is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 128 points (out of 184) +2021-01-07 17:51:24 Test: Checking IgnoreRhosts in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option IgnoreRhosts found +2021-01-07 17:51:24 Result: Option IgnoreRhosts value is YES +2021-01-07 17:51:24 Result: OpenSSH option IgnoreRhosts is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 131 points (out of 187) +2021-01-07 17:51:24 Test: Checking LoginGraceTime in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option LoginGraceTime found +2021-01-07 17:51:24 Result: Option LoginGraceTime value is 120 +2021-01-07 17:51:24 Result: OpenSSH option LoginGraceTime is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 134 points (out of 190) +2021-01-07 17:51:24 Test: Checking LogLevel in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option LogLevel found +2021-01-07 17:51:24 Result: Option LogLevel value is INFO +2021-01-07 17:51:24 Result: OpenSSH option LogLevel is configured reasonably +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:LogLevel (set INFO to VERBOSE)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (1 of 3). Currently having 135 points (out of 193) +2021-01-07 17:51:24 Test: Checking MaxAuthTries in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option MaxAuthTries found +2021-01-07 17:51:24 Result: Option MaxAuthTries value is 6 +2021-01-07 17:51:24 Result: OpenSSH option MaxAuthTries is configured reasonably +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxAuthTries (set 6 to 3)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (1 of 3). Currently having 136 points (out of 196) +2021-01-07 17:51:24 Test: Checking MaxSessions in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option MaxSessions found +2021-01-07 17:51:24 Result: Option MaxSessions value is 10 +2021-01-07 17:51:24 Result: OpenSSH option MaxSessions is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxSessions (set 10 to 2)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 136 points (out of 199) +2021-01-07 17:51:24 Test: Checking PermitRootLogin in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option PermitRootLogin found +2021-01-07 17:51:24 Result: Option PermitRootLogin value is YES +2021-01-07 17:51:24 Result: OpenSSH option PermitRootLogin is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 136 points (out of 202) +2021-01-07 17:51:24 Test: Checking PermitUserEnvironment in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option PermitUserEnvironment found +2021-01-07 17:51:24 Result: Option PermitUserEnvironment value is NO +2021-01-07 17:51:24 Result: OpenSSH option PermitUserEnvironment is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 139 points (out of 205) +2021-01-07 17:51:24 Test: Checking PermitTunnel in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option PermitTunnel found +2021-01-07 17:51:24 Result: Option PermitTunnel value is NO +2021-01-07 17:51:24 Result: OpenSSH option PermitTunnel is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 142 points (out of 208) +2021-01-07 17:51:24 Test: Checking Port in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option Port found +2021-01-07 17:51:24 Result: Option Port value is 22 +2021-01-07 17:51:24 Result: OpenSSH option Port is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Port (set 22 to )] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 142 points (out of 211) +2021-01-07 17:51:24 Test: Checking PrintLastLog in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option PrintLastLog found +2021-01-07 17:51:24 Result: Option PrintLastLog value is YES +2021-01-07 17:51:24 Result: OpenSSH option PrintLastLog is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 145 points (out of 214) +2021-01-07 17:51:24 Test: Checking StrictModes in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option StrictModes found +2021-01-07 17:51:24 Result: Option StrictModes value is YES +2021-01-07 17:51:24 Result: OpenSSH option StrictModes is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 148 points (out of 217) +2021-01-07 17:51:24 Test: Checking TCPKeepAlive in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option TCPKeepAlive found +2021-01-07 17:51:24 Result: Option TCPKeepAlive value is YES +2021-01-07 17:51:24 Result: OpenSSH option TCPKeepAlive is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:TCPKeepAlive (set YES to NO)] [solution:-] +2021-01-07 17:51:24 Hardening: assigned partial number of hardening points (0 of 3). Currently having 148 points (out of 220) +2021-01-07 17:51:24 Test: Checking UseDNS in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option UseDNS found +2021-01-07 17:51:24 Result: Option UseDNS value is NO +2021-01-07 17:51:24 Result: OpenSSH option UseDNS is configured very well +2021-01-07 17:51:24 Hardening: assigned maximum number of hardening points for this item (3). Currently having 151 points (out of 223) +2021-01-07 17:51:24 Test: Checking X11Forwarding in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:24 Result: Option X11Forwarding found +2021-01-07 17:51:24 Result: Option X11Forwarding value is YES +2021-01-07 17:51:24 Result: OpenSSH option X11Forwarding is in a weak configuration state and should be fixed +2021-01-07 17:51:24 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:X11Forwarding (set YES to NO)] [solution:-] +2021-01-07 17:51:25 Hardening: assigned partial number of hardening points (0 of 3). Currently having 151 points (out of 226) +2021-01-07 17:51:25 Test: Checking AllowAgentForwarding in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:25 Result: Option AllowAgentForwarding found +2021-01-07 17:51:25 Result: Option AllowAgentForwarding value is YES +2021-01-07 17:51:25 Result: OpenSSH option AllowAgentForwarding is in a weak configuration state and should be fixed +2021-01-07 17:51:25 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowAgentForwarding (set YES to NO)] [solution:-] +2021-01-07 17:51:25 Hardening: assigned partial number of hardening points (0 of 3). Currently having 151 points (out of 229) +2021-01-07 17:51:25 Test: Checking Protocol in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:25 Result: Option Protocol found +2021-01-07 17:51:25 Result: Option Protocol value is 2 +2021-01-07 17:51:25 Result: OpenSSH option Protocol is configured very well +2021-01-07 17:51:25 Hardening: assigned maximum number of hardening points for this item (3). Currently having 154 points (out of 232) +2021-01-07 17:51:25 Test: Checking UsePrivilegeSeparation in /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:25 Result: Option UsePrivilegeSeparation found +2021-01-07 17:51:25 Result: Option UsePrivilegeSeparation value is YES +2021-01-07 17:51:25 Result: OpenSSH option UsePrivilegeSeparation is configured reasonably +2021-01-07 17:51:25 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:UsePrivilegeSeparation (set YES to SANDBOX)] [solution:-] +2021-01-07 17:51:25 Hardening: assigned partial number of hardening points (1 of 3). Currently having 155 points (out of 235) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups) +2021-01-07 17:51:25 Result: AllowUsers is not set +2021-01-07 17:51:25 Result: AllowGroups is not set +2021-01-07 17:51:25 Result: SSH has no specific user or group limitation. Most likely all valid users can SSH to this machine. +2021-01-07 17:51:25 Hardening: assigned partial number of hardening points (0 of 1). Currently having 155 points (out of 236) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_snmp +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: SNMP Support +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID SNMP-3302 (Check for running SNMP daemon) +2021-01-07 17:51:25 Test: Searching for a SNMP daemon +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'snmpd' not found +2021-01-07 17:51:25 Result: No running SNMP daemon found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SNMP-3304 (Check SNMP daemon file location) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SNMP-3306 (Check SNMP communities) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_databases +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: Databases +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1804 (Checking active MySQL process) +2021-01-07 17:51:25 Result: MySQL process not active +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1816 (Checking MySQL root password) +2021-01-07 17:51:25 Reason to skip: MySQL not installed, or not running +2021-01-07 17:51:25 Test skipped, MySQL daemon not running or no MySQL client available +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1818 (Check status of MongoDB server) +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'mongod' not found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1820 (Check for authorization in MongoDB) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1826 (Checking active PostgreSQL processes) +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'postgres:' not found +2021-01-07 17:51:25 Result: PostgreSQL process not active +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1828 (Test PostgreSQL configuration) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1840 (Checking active Oracle processes) +2021-01-07 17:51:25 Result: Oracle process(es) not active +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1860 (Checking active DB2 instances) +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'db2sysc' not found +2021-01-07 17:51:25 Result: No DB2 instances are running +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID DBS-1880 (Check for active Redis server) +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'redis-server' not found +2021-01-07 17:51:25 Result: No Redis processes are running +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1882 (Redis configuration file) +2021-01-07 17:51:25 Reason to skip: Redis not running +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1884 (Redis: requirepass option configured) +2021-01-07 17:51:25 Reason to skip: Redis not running, or no configuration file found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1886 (Redis: rename-command CONFIG used) +2021-01-07 17:51:25 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test DBS-1888 (Redis: bind on localhost) +2021-01-07 17:51:25 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_ldap +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: LDAP Services +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LDAP-2219 (Check running OpenLDAP instance) +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'slapd' not found +2021-01-07 17:51:25 Result: No running slapd process found. +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LDAP-2224 (Check presence slapd.conf) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_php +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: PHP +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID PHP-2211 (Check php.ini presence) +2021-01-07 17:51:25 Test: Checking for presence php.ini +2021-01-07 17:51:25 Test: checking presence /etc/php.ini +2021-01-07 17:51:25 Result: file /etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php.ini.default +2021-01-07 17:51:25 Result: file /etc/php.ini.default not found +2021-01-07 17:51:25 Test: checking presence /etc/php/php.ini +2021-01-07 17:51:25 Result: file /etc/php/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/apache2-php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php/apache2-php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cgi-php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cgi-php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/cli-php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php/cli-php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/embed-php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php/embed-php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php7.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php7.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php7.3/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php7.3/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php7.2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php7.2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php7.1/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php7.1/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php7.0/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php7.0/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/fpm-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php/fpm-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/cgi/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/cgi/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/cli-php5.4/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/cli-php5.4/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/cli-php5.5/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/cli-php5.5/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/cli-php5.6/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/cli-php5.6/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php5/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php5/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /private/etc/php.ini +2021-01-07 17:51:25 Result: file /private/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.0/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.0/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.1/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.1/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.2/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.2/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.3/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.3/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.4/apache2/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.4/apache2/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.0/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.0/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.0/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.0/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.1/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.1/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.1/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.1/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.2/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.2/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.2/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.2/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.3/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.3/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.3/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.3/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.4/cli/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.4/cli/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php/7.4/fpm/php.ini +2021-01-07 17:51:25 Result: file /etc/php/7.4/fpm/php.ini not found +2021-01-07 17:51:25 Test: checking presence /var/www/conf/php.ini +2021-01-07 17:51:25 Result: file /var/www/conf/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/etc/php.ini +2021-01-07 17:51:25 Result: file /usr/local/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/etc/php5/cgi/php.ini +2021-01-07 17:51:25 Result: file /usr/local/etc/php5/cgi/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php54/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php54/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php56/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php56/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php70/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php70/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php71/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php71/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php72/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php72/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php73/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php73/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/php74/lib/php.ini +2021-01-07 17:51:25 Result: file /usr/local/php74/lib/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/local/zend/etc/php.ini +2021-01-07 17:51:25 Result: file /usr/local/zend/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /usr/pkg/etc/php.ini +2021-01-07 17:51:25 Result: file /usr/pkg/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php54/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php54/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php55/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php55/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php56/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php56/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php70/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php70/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php71/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php71/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php72/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php72/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php73/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php73/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/cpanel/ea-php74/root/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/cpanel/ea-php74/root/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php44/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php44/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php51/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php51/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php52/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php52/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php53/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php53/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php54/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php54/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php55/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php55/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php56/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php56/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php70/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php70/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php71/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php71/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php72/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php72/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php73/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php73/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /opt/alt/php74/etc/php.ini +2021-01-07 17:51:25 Result: file /opt/alt/php74/etc/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php56/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php56/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php70/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php70/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php71/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php71/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php72/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php72/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php73/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php73/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/opt/remi/php74/php.ini +2021-01-07 17:51:25 Result: file /etc/opt/remi/php74/php.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-5.6.ini +2021-01-07 17:51:25 Result: file /etc/php-5.6.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-7.0.ini +2021-01-07 17:51:25 Result: file /etc/php-7.0.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-7.1.ini +2021-01-07 17:51:25 Result: file /etc/php-7.1.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-7.2.ini +2021-01-07 17:51:25 Result: file /etc/php-7.2.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-7.3.ini +2021-01-07 17:51:25 Result: file /etc/php-7.3.ini not found +2021-01-07 17:51:25 Test: checking presence /etc/php-7.4.ini +2021-01-07 17:51:25 Result: file /etc/php-7.4.ini not found +2021-01-07 17:51:25 Result: no files found for /etc/php5/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.0/cli/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.1/cli/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.2/cli/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.3/cli/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.4/cli/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.0/fpm/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.1/fpm/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.2/fpm/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.3/fpm/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php/7.4/fpm/conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php54/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php55/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php56/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php70/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php71/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php72/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php73/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/cpanel/ea-php74/root/etc/php.d +2021-01-07 17:51:25 Result: no files found for /opt/alt/php44/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php51/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php52/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php53/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php54/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php55/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php56/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php70/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php71/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php72/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php73/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /opt/alt/php74/etc/php.d.all +2021-01-07 17:51:25 Result: no files found for /usr/local/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /usr/local/php70/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /usr/local/php71/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /usr/local/php72/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /usr/local/php73/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /usr/local/php74/lib/php.conf.d +2021-01-07 17:51:25 Result: no files found for /etc/php-5.6 +2021-01-07 17:51:25 Result: no files found for /etc/php-7.0 +2021-01-07 17:51:25 Result: no files found for /etc/php-7.1 +2021-01-07 17:51:25 Result: no files found for /etc/php-7.2 +2021-01-07 17:51:25 Result: no files found for /etc/php-7.3 +2021-01-07 17:51:25 Result: no files found for /etc/php-7.4 +2021-01-07 17:51:25 Result: no php.ini file found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2320 (Check PHP disabled functions) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2368 (Check PHP register_globals option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2372 (Check PHP expose_php option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2374 (Check PHP enable_dl option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2376 (Check PHP allow_url_fopen option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2378 (Check PHP allow_url_include option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test PHP-2382 (Check PHP expose_php option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_squid +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: Squid Support +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID SQD-3602 (Check for running Squid daemon) +2021-01-07 17:51:25 Test: Searching for a Squid daemon +2021-01-07 17:51:25 Result: No running Squid daemon found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3604 (Check Squid daemon file location) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3606 (Check Squid version) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3610 (Gather Squid settings) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3613 (Check Squid file permissions) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3614 (Check Squid authentication methods) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3616 (Check external Squid authentication) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3620 (Check Squid access control lists) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3624 (Check Squid safe ports) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3630 (Check Squid reply_body_max_size option) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test SQD-3680 (Check Squid version suppression) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_logging +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: Logging and files +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2130 (Check for running syslog daemon) +2021-01-07 17:51:25 Test: Searching for a logging daemon +2021-01-07 17:51:25 Result: Found a logging daemon +2021-01-07 17:51:25 Hardening: assigned maximum number of hardening points for this item (3). Currently having 158 points (out of 239) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2132 (Check for running syslog-ng daemon) +2021-01-07 17:51:25 Test: Searching for syslog-ng daemon in process list +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'syslog-ng' not found +2021-01-07 17:51:25 Result: Syslog-ng NOT found in process list +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2134 (Checking Syslog-NG configuration file consistency) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2136 (Check for running systemd journal daemon) +2021-01-07 17:51:25 Test: Searching for systemd journal daemon in process list +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'systemd-journal' found (604 ) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2210 (Check for running metalog daemon) +2021-01-07 17:51:25 Test: Searching for metalog daemon in process list +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'metalog' not found +2021-01-07 17:51:25 Result: metalog NOT found in process list +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2230 (Check for running RSyslog daemon) +2021-01-07 17:51:25 Test: Searching for RSyslog daemon in process list +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'rsyslogd' found (1229 ) +2021-01-07 17:51:25 Result: Found rsyslogd in process list +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2240 (Check for running RFC 3195 compliant daemon) +2021-01-07 17:51:25 Test: Searching for RFC 3195 daemon (alias syslog reliable) in process list +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'rfc3195d' not found +2021-01-07 17:51:25 Result: rfc3195d NOT found in process list +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2138 (Checking kernel logger daemon on Linux) +2021-01-07 17:51:25 Test: Searching kernel logger daemon (klogd) +2021-01-07 17:51:25 Result: test skipped, because other facility is being used to log kernel messages +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2142 (Checking minilog daemon) +2021-01-07 17:51:25 Result: Checking for unkilled minilogd instances +2021-01-07 17:51:25 Performing pgrep scan without uid +2021-01-07 17:51:25 IsRunning: process 'minilogd' not found +2021-01-07 17:51:25 Result: No minilogd is running +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2146 (Checking logrotate.conf and logrotate.d) +2021-01-07 17:51:25 Test: Checking for /etc/logrotate.conf +2021-01-07 17:51:25 Result: /etc/logrotate.conf found (file) +2021-01-07 17:51:25 Test: Checking for /etc/logrotate.d (directory) +2021-01-07 17:51:25 Result: /etc/logrotate.d found +2021-01-07 17:51:25 Result: logrotate configuration found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2148 (Checking logrotated files) +2021-01-07 17:51:25 Test: Checking which files are rotated with logrotate and if they exist +2021-01-07 17:51:25 Result: found one or more files which are rotated via logrotate +2021-01-07 17:51:25 Output: File:/var/log/aptitude:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/cron.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/daemon.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/debug:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/lpr.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/mail.err:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/mail.info:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/mail.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/mail.warn:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/messages:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/user.log:does_not_exist +2021-01-07 17:51:25 Output: File:/var/log/alternatives.log:exists +2021-01-07 17:51:25 Output: File:/var/log/apt/history.log:exists +2021-01-07 17:51:25 Output: File:/var/log/apt/term.log:exists +2021-01-07 17:51:25 Output: File:/var/log/aptitude:exists +2021-01-07 17:51:25 Output: File:/var/log/auth.log:exists +2021-01-07 17:51:25 Output: File:/var/log/btmp:exists +2021-01-07 17:51:25 Output: File:/var/log/cron.log:exists +2021-01-07 17:51:25 Output: File:/var/log/daemon.log:exists +2021-01-07 17:51:25 Output: File:/var/log/debug:exists +2021-01-07 17:51:25 Output: File:/var/log/dpkg.log:exists +2021-01-07 17:51:25 Output: File:/var/log/kern.log:exists +2021-01-07 17:51:25 Output: File:/var/log/lpr.log:exists +2021-01-07 17:51:25 Output: File:/var/log/mail.err:exists +2021-01-07 17:51:25 Output: File:/var/log/mail.info:exists +2021-01-07 17:51:25 Output: File:/var/log/mail.log:exists +2021-01-07 17:51:25 Output: File:/var/log/mail.warn:exists +2021-01-07 17:51:25 Output: File:/var/log/messages:exists +2021-01-07 17:51:25 Output: File:/var/log/syslog:exists +2021-01-07 17:51:25 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:exists +2021-01-07 17:51:25 Output: File:/var/log/unattended-upgrades/unattended-upgrades-shutdown.log:exists +2021-01-07 17:51:25 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:exists +2021-01-07 17:51:25 Output: File:/var/log/user.log:exists +2021-01-07 17:51:25 Output: File:/var/log/wtmp:exists +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2150 (Checking directories in logrotate configuration) +2021-01-07 17:51:25 Test: Checking which directories can be found in logrotate configuration +2021-01-07 17:51:25 Result: found one or more directories (via logrotate configuration) +2021-01-07 17:51:25 Directory found: /var/log +2021-01-07 17:51:25 Directory found: /var/log/apt +2021-01-07 17:51:25 Directory found: /var/log/unattended-upgrades +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2152 (Checking loghost) +2021-01-07 17:51:25 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2153 (Checking loghost is localhost) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2154 (Checking syslog configuration file) +2021-01-07 17:51:25 Test: analyzing file /etc/rsyslog.conf for remote target +2021-01-07 17:51:25 Result: no remote target found +2021-01-07 17:51:25 Test: analyzing file /etc/rsyslog.d/21-cloudinit.conf for remote target +2021-01-07 17:51:25 Result: no remote target found +2021-01-07 17:51:25 Test: analyzing file /etc/rsyslog.d/50-default.conf for remote target +2021-01-07 17:51:25 Result: no remote target found +2021-01-07 17:51:25 Result: no remote logging found +2021-01-07 17:51:25 Suggestion: Enable logging to an external logging host for archiving purposes and additional protection [test:LOGG-2154] [details:-] [solution:-] +2021-01-07 17:51:25 Hardening: assigned partial number of hardening points (1 of 3). Currently having 159 points (out of 242) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2160 (Checking /etc/newsyslog.conf) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2162 (Checking directories in /etc/newsyslog.conf) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2164 (Checking files specified /etc/newsyslog.conf) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2170 (Checking log paths) +2021-01-07 17:51:25 Test: Searching log paths +2021-01-07 17:51:25 Result: directory /var/log exists +2021-01-07 17:51:25 Result: directory /var/adm can't be found +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID LOGG-2180 (Checking open log files) +2021-01-07 17:51:25 Test: checking open log files with lsof +2021-01-07 17:51:25 Result: lsof not installed, skipping test +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2190 (Checking for deleted files in use) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test LOGG-2192 (Checking for open log files that are empty) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 Security check: file is normal +2021-01-07 17:51:25 Checking permissions of /root/scans/lynis/include/tests_insecure_services +2021-01-07 17:51:25 File permissions are OK +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Action: Performing tests from category: Insecure services +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID INSE-8000 (Installed inetd package) +2021-01-07 17:51:25 Test: Checking if inetd is installed +2021-01-07 17:51:25 Result: inetd is NOT installed +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test INSE-8002 (Check for enabled inet daemon) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test INSE-8004 (Presence of inetd configuration file) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test INSE-8006 (Check configuration of inetd when disabled) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Skipped test INSE-8016 (Check for telnet via inetd) +2021-01-07 17:51:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:25 ==== +2021-01-07 17:51:25 Performing test ID INSE-8100 (Check for installed xinetd daemon) +2021-01-07 17:51:25 Test: Checking for installed xinetd daemon +2021-01-07 17:51:25 Result: xinetd is NOT installed +2021-01-07 17:51:25 ==== +2021-01-07 17:51:26 Performing test ID INSE-8102 (Check for active xinet daemon) +2021-01-07 17:51:26 Test: Searching for active extended internet services daemon (xinetd) +2021-01-07 17:51:26 Performing pgrep scan without uid +2021-01-07 17:51:26 IsRunning: process 'xinetd' not found +2021-01-07 17:51:26 Result: xinetd is NOT running +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test INSE-8104 (Check for enabled xinet daemon) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test INSE-8106 (Check configuration of xinetd when disabled) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test INSE-8116 (Insecure services enabled via xinetd) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test INSE-8200 (Check if tcp_wrappers is installed when inetd/xinetd is active) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8300 (Check if rsh client is installed) +2021-01-07 17:51:26 Test: Checking if rsh client is installed +2021-01-07 17:51:26 Result: rsh client is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8304 (Check if rsh server is installed) +2021-01-07 17:51:26 Test: Checking if rsh server is installed +2021-01-07 17:51:26 Result: rsh server is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8310 (Check if telnet client is installed) +2021-01-07 17:51:26 Test: Checking if telnet client is installed +2021-01-07 17:51:26 Result: telnet client is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8322 (Check if telnet server is installed) +2021-01-07 17:51:26 Test: Checking if telnet server is installed +2021-01-07 17:51:26 Result: telnet server is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8314 (Check if NIS client is installed) +2021-01-07 17:51:26 Test: Checking if NIS client is installed +2021-01-07 17:51:26 Result: NIS client is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8316 (Check if NIS server is installed) +2021-01-07 17:51:26 Test: Checking if NIS server is installed +2021-01-07 17:51:26 Result: NIS server is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8318 (Check if TFTP client is installed) +2021-01-07 17:51:26 Test: Checking if TFTP client is installed +2021-01-07 17:51:26 Result: TFTP client is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID INSE-8320 (Check if TFTP server is installed) +2021-01-07 17:51:26 Test: Checking if TFTP server is installed +2021-01-07 17:51:26 Result: TFTP server is NOT installed +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test INSE-8050 (Check for insecure services on macOS) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:51:26 Security check: file is normal +2021-01-07 17:51:26 Checking permissions of /root/scans/lynis/include/tests_banners +2021-01-07 17:51:26 File permissions are OK +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Action: Performing tests from category: Banners and identification +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test BANN-7113 (Check COPYRIGHT banner file) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID BANN-7124 (Check issue banner file) +2021-01-07 17:51:26 Test: Checking file /etc/issue +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID BANN-7126 (Check issue banner file contents) +2021-01-07 17:51:26 Test: Checking file /etc/issue contents for legal key words +2021-01-07 17:51:26 Result: Found only 0 key words (5 or more suggested), to warn unauthorized users and could be increased +2021-01-07 17:51:26 Suggestion: Add a legal banner to /etc/issue, to warn unauthorized users [test:BANN-7126] [details:-] [solution:-] +2021-01-07 17:51:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 159 points (out of 243) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID BANN-7128 (Check issue.net banner file) +2021-01-07 17:51:26 Test: Checking file /etc/issue.net +2021-01-07 17:51:26 Result: file /etc/issue.net exists +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID BANN-7130 (Check issue.net banner file contents) +2021-01-07 17:51:26 Test: Checking file /etc/issue.net contents for legal key words +2021-01-07 17:51:26 Result: Found only 0 key words, to warn unauthorized users and could be increased +2021-01-07 17:51:26 Suggestion: Add legal banner to /etc/issue.net, to warn unauthorized users [test:BANN-7130] [details:-] [solution:-] +2021-01-07 17:51:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 159 points (out of 244) +2021-01-07 17:51:26 Security check: file is normal +2021-01-07 17:51:26 Checking permissions of /root/scans/lynis/include/tests_scheduling +2021-01-07 17:51:26 File permissions are OK +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Action: Performing tests from category: Scheduled tasks +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID SCHD-7702 (Check status of cron daemon) +2021-01-07 17:51:26 Result: cron daemon running +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID SCHD-7704 (Check crontab/cronjobs) +2021-01-07 17:51:26 Found cronjob (/etc/crontab): 17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +2021-01-07 17:51:26 Found cronjob (/etc/crontab): 25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +2021-01-07 17:51:26 Found cronjob (/etc/crontab): 47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +2021-01-07 17:51:26 Found cronjob (/etc/crontab): 52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +2021-01-07 17:51:26 Test: checking directory /etc/cron.d +2021-01-07 17:51:26 Test: check if we can access /etc/cron.d (escaped: /etc/cron.d) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/cron.d is readable (or directory accessible). +2021-01-07 17:51:26 Result: found directory /etc/cron.d +2021-01-07 17:51:26 Test: searching files in /etc/cron.d +2021-01-07 17:51:26 Result: found one or more files in /etc/cron.d. Analyzing files.. +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.d/mdadm): 57,0,*,*,0,root,if,[,-x,/usr/share/mdadm/checkarray,],&&,[,$(date,+\%d),-le,7,];,then,/usr/share/mdadm/checkarray,--cron,--all,--idle,--quiet;,fi +2021-01-07 17:51:26 Result: done with analyzing files in /etc/cron.d +2021-01-07 17:51:26 Test: checking directory /etc/cron.hourly +2021-01-07 17:51:26 Result: found directory /etc/cron.hourly +2021-01-07 17:51:26 Test: check if we can access /etc/cron.hourly (escaped: /etc/cron.hourly) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/cron.hourly is readable (or directory accessible). +2021-01-07 17:51:26 Test: searching files in /etc/cron.hourly +2021-01-07 17:51:26 Result: no files found in /etc/cron.hourly +2021-01-07 17:51:26 Test: checking directory /etc/cron.daily +2021-01-07 17:51:26 Result: found directory /etc/cron.daily +2021-01-07 17:51:26 Test: check if we can access /etc/cron.daily (escaped: /etc/cron.daily) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/cron.daily is readable (or directory accessible). +2021-01-07 17:51:26 Test: searching files in /etc/cron.daily +2021-01-07 17:51:26 Result: found one or more files in /etc/cron.daily. Analyzing files.. +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/bsdmainutils +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/apt-compat +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/passwd +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/man-db +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/aptitude +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/dpkg +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/mdadm +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/logrotate +2021-01-07 17:51:26 Result: done with analyzing files in /etc/cron.daily +2021-01-07 17:51:26 Test: checking directory /etc/cron.weekly +2021-01-07 17:51:26 Result: found directory /etc/cron.weekly +2021-01-07 17:51:26 Test: check if we can access /etc/cron.weekly (escaped: /etc/cron.weekly) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/cron.weekly is readable (or directory accessible). +2021-01-07 17:51:26 Test: searching files in /etc/cron.weekly +2021-01-07 17:51:26 Result: found one or more files in /etc/cron.weekly. Analyzing files.. +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/man-db +2021-01-07 17:51:26 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/fstrim +2021-01-07 17:51:26 Result: done with analyzing files in /etc/cron.weekly +2021-01-07 17:51:26 Test: checking directory /etc/cron.monthly +2021-01-07 17:51:26 Result: found directory /etc/cron.monthly +2021-01-07 17:51:26 Test: check if we can access /etc/cron.monthly (escaped: /etc/cron.monthly) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/cron.monthly is readable (or directory accessible). +2021-01-07 17:51:26 Test: searching files in /etc/cron.monthly +2021-01-07 17:51:26 Result: no files found in /etc/cron.monthly +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID SCHD-7718 (Check at users) +2021-01-07 17:51:26 Test: Checking atd status +2021-01-07 17:51:26 Result: at daemon active +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID SCHD-7720 (Check at users) +2021-01-07 17:51:26 Test: checking for file /etc/at.allow +2021-01-07 17:51:26 Result: file /etc/at.allow does not exist +2021-01-07 17:51:26 Test: checking for file /etc/at.deny +2021-01-07 17:51:26 Test: check if we can access /etc/at.deny (escaped: /etc/at.deny) +2021-01-07 17:51:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:26 Result: file /etc/at.deny is readable (or directory accessible). +2021-01-07 17:51:26 Result: file /etc/at.deny exists, only non listed users can schedule at jobs +2021-01-07 17:51:26 Denied at user: alias +2021-01-07 17:51:26 Denied at user: backup +2021-01-07 17:51:26 Denied at user: bin +2021-01-07 17:51:26 Denied at user: daemon +2021-01-07 17:51:26 Denied at user: ftp +2021-01-07 17:51:26 Denied at user: games +2021-01-07 17:51:26 Denied at user: gnats +2021-01-07 17:51:26 Denied at user: guest +2021-01-07 17:51:26 Denied at user: irc +2021-01-07 17:51:26 Denied at user: lp +2021-01-07 17:51:26 Denied at user: mail +2021-01-07 17:51:26 Denied at user: man +2021-01-07 17:51:26 Denied at user: nobody +2021-01-07 17:51:26 Denied at user: operator +2021-01-07 17:51:26 Denied at user: proxy +2021-01-07 17:51:26 Denied at user: qmaild +2021-01-07 17:51:26 Denied at user: qmaill +2021-01-07 17:51:26 Denied at user: qmailp +2021-01-07 17:51:26 Denied at user: qmailq +2021-01-07 17:51:26 Denied at user: qmailr +2021-01-07 17:51:26 Denied at user: qmails +2021-01-07 17:51:26 Denied at user: sync +2021-01-07 17:51:26 Denied at user: sys +2021-01-07 17:51:26 Denied at user: www-data +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID SCHD-7724 (Check at jobs) +2021-01-07 17:51:26 Test: Check scheduled at jobs +2021-01-07 17:51:26 Result: no pending at jobs +2021-01-07 17:51:26 Result: no scheduled Lynis execution found (e.g. crontab, cronjob) +2021-01-07 17:51:26 Security check: file is normal +2021-01-07 17:51:26 Checking permissions of /root/scans/lynis/include/tests_accounting +2021-01-07 17:51:26 File permissions are OK +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Action: Performing tests from category: Accounting +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-2754 (Check for available FreeBSD accounting information) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-2760 (Check for available OpenBSD accounting information) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID ACCT-9622 (Check for available Linux accounting information) +2021-01-07 17:51:26 Test: Check accounting information +2021-01-07 17:51:26 Result: No accounting information available (/var/account/pacct, /var/log/account/pact nor /var/log/pact exist) +2021-01-07 17:51:26 Remark: Possibly there is another location where the accounting data is stored +2021-01-07 17:51:26 Suggestion: Enable process accounting [test:ACCT-9622] [details:-] [solution:-] +2021-01-07 17:51:26 Hardening: assigned partial number of hardening points (2 of 3). Currently having 161 points (out of 247) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID ACCT-9626 (Check for sysstat accounting data) +2021-01-07 17:51:26 Test: check /etc/default/sysstat presence +2021-01-07 17:51:26 Result: sysstat not found via /etc/default/sysstat or /etc/cron.d/sysstat or as a systemd unit +2021-01-07 17:51:26 Suggestion: Enable sysstat to collect accounting (no results) [test:ACCT-9626] [details:-] [solution:-] +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID ACCT-9628 (Check for auditd) +2021-01-07 17:51:26 Test: Check auditd status +2021-01-07 17:51:26 Performing pgrep scan without uid +2021-01-07 17:51:26 IsRunning: process 'auditd' not found +2021-01-07 17:51:26 Result: auditd not active +2021-01-07 17:51:26 Suggestion: Enable auditd to collect audit information [test:ACCT-9628] [details:-] [solution:-] +2021-01-07 17:51:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 161 points (out of 248) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9630 (Check for auditd rules) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9632 (Check for auditd configuration file) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9634 (Check for auditd log file) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID ACCT-9636 (Check for Snoopy wrapper and logger) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9650 (Check Solaris audit daemon) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9652 (Check auditd SMF status) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9654 (Check BSM auditing in /etc/system) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9656 (Check BSM auditing in module list) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9660 (Check location of audit events) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test ACCT-9662 (Check Solaris auditing stats) +2021-01-07 17:51:26 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:26 Security check: file is normal +2021-01-07 17:51:26 Checking permissions of /root/scans/lynis/include/tests_time +2021-01-07 17:51:26 File permissions are OK +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Action: Performing tests from category: Time and Synchronization +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID TIME-3104 (Check for running NTP daemon or client) +2021-01-07 17:51:26 Test: Searching for a running NTP daemon or available client +2021-01-07 17:51:26 Result: no chrony configuration found +2021-01-07 17:51:26 Performing pgrep scan without uid +2021-01-07 17:51:26 IsRunning: process 'dntpd' not found +2021-01-07 17:51:26 Performing pgrep scan without uid +2021-01-07 17:51:26 IsRunning: process 'timed' not found +2021-01-07 17:51:26 Result: Found running systemd-timesyncd in process list +2021-01-07 17:51:26 Result: crontab file /etc/anacrontab not found +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in crontab file /etc/crontab +2021-01-07 17:51:26 Result: no ntpdate, rdate, sntp or ntpdig reference found in crontab file /etc/crontab +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.d/mdadm +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/apt-compat +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/aptitude +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/bsdmainutils +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/dpkg +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/logrotate +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/man-db +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/mdadm +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/passwd +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/fstrim +2021-01-07 17:51:26 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/man-db +2021-01-07 17:51:26 Result: no ntpdate or rdate found in cron directories +2021-01-07 17:51:26 Test: checking for file /etc/network/if-up.d/ntpdate +2021-01-07 17:51:26 Result: file /etc/network/if-up.d/ntpdate does not exist +2021-01-07 17:51:26 Result: Found a time syncing daemon/client. +2021-01-07 17:51:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 164 points (out of 251) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3106 (Check systemd NTP time synchronization status) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3112 (Check active NTP associations ID's) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3116 (Check peers with stratum value of 16) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3120 (Check unreliable NTP peers) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3124 (Check selected time source) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3128 (Check preferred time source) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3132 (Check NTP falsetickers) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3136 (Check NTP protocol version) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID TIME-3148 (Check TZ variable) +2021-01-07 17:51:26 Test: testing for TZ variable +2021-01-07 17:51:26 Result: found TZ variable with value notset +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3160 (Check empty NTP step-tickers) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID TIME-3170 (Check configuration files) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3180 (Report if ntpctl cannot communicate with OpenNTPD) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3181 (Check status of OpenNTPD time synchronisation) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Skipped test TIME-3182 (Check OpenNTPD has working peers) +2021-01-07 17:51:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:26 ==== +2021-01-07 17:51:26 Performing test ID TIME-3185 (Check systemd-timesyncd synchronized time) +2021-01-07 17:51:26 Warning: systemd-timesyncd never successfully synchronized time [test:TIME-3185] [details:-] [solution:-] +2021-01-07 17:51:26 Security check: file is normal +2021-01-07 17:51:26 Checking permissions of /root/scans/lynis/include/tests_crypto +2021-01-07 17:51:27 File permissions are OK +2021-01-07 17:51:27 ==== +2021-01-07 17:51:27 Action: Performing tests from category: Cryptography +2021-01-07 17:51:27 ==== +2021-01-07 17:51:27 Performing test ID CRYP-7902 (Check expire date of SSL certificates) +2021-01-07 17:51:27 Paths to scan: /etc/apache2 /etc/dovecot /etc/httpd /etc/letsencrypt /etc/pki /etc/postfix /etc/refind.d/keys /etc/ssl /opt/psa/var/certificates /usr/local/psa/var/certificates /usr/local/share/ca-certificates /usr/share/ca-certificates /usr/share/gnupg /var/www /srv/www +2021-01-07 17:51:27 Paths to ignore: /etc/letsencrypt/archive +2021-01-07 17:51:27 Result: SSL path /etc/apache2 does not exist +2021-01-07 17:51:27 Result: SSL path /etc/dovecot does not exist +2021-01-07 17:51:27 Result: SSL path /etc/httpd does not exist +2021-01-07 17:51:27 Result: SSL path /etc/letsencrypt does not exist +2021-01-07 17:51:27 Result: SSL path /etc/pki does not exist +2021-01-07 17:51:27 Result: SSL path /etc/postfix does not exist +2021-01-07 17:51:27 Result: SSL path /etc/refind.d/keys does not exist +2021-01-07 17:51:27 Test: check if we can access /etc/ssl (escaped: /etc/ssl) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /etc/ssl is readable (or directory accessible). +2021-01-07 17:51:27 Result: found directory /etc/ssl +2021-01-07 17:51:27 Test: check if we can access /etc/ssl/certs/ca-certificates.crt (escaped: /etc/ssl/certs/ca-certificates.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /etc/ssl/certs/ca-certificates.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/etc/ssl/certs/ca-certificates.crt' does most likely not belong to a package +2021-01-07 17:51:27 Result: file is a certificate file +2021-01-07 17:51:27 Result: certificate /etc/ssl/certs/ca-certificates.crt seems to be correct and still valid +2021-01-07 17:51:27 Result: found 1 certificates in /etc/ssl +2021-01-07 17:51:27 Result: SSL path /opt/psa/var/certificates does not exist +2021-01-07 17:51:27 Result: SSL path /usr/local/psa/var/certificates does not exist +2021-01-07 17:51:27 Test: check if we can access /usr/local/share/ca-certificates (escaped: /usr/local/share/ca-certificates) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/local/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:51:27 Result: found directory /usr/local/share/ca-certificates +2021-01-07 17:51:27 Result: found 0 certificates in /usr/local/share/ca-certificates +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates (escaped: /usr/share/ca-certificates) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:51:27 Result: found directory /usr/share/ca-certificates +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt (escaped: /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt (escaped: /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt (escaped: /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Certigna.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Certigna.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt is readable (or directory accessible). +2021-01-07 17:51:27 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:27 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt) +2021-01-07 17:51:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:27 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt (escaped: /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt (escaped: /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/EC-ACC.crt (escaped: /usr/share/ca-certificates/mozilla/EC-ACC.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/EC-ACC.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/EC-ACC.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt is readable (or directory accessible). +2021-01-07 17:51:28 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:28 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt) +2021-01-07 17:51:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:28 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt (escaped: /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Izenpe.com.crt (escaped: /usr/share/ca-certificates/mozilla/Izenpe.com.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Izenpe.com.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Izenpe.com.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt (escaped: /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:51:29 Test: check if we can access /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt (escaped: /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt) +2021-01-07 17:51:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:29 Result: file /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt is readable (or directory accessible). +2021-01-07 17:51:29 Result: file '/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt (escaped: /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt (escaped: /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt (escaped: /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:30 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:30 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt) +2021-01-07 17:51:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:30 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt (escaped: /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt (escaped: /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt (escaped: /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt (escaped: /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt is readable (or directory accessible). +2021-01-07 17:51:31 Result: file '/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:51:31 Test: check if we can access /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt) +2021-01-07 17:51:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:31 Result: file /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:51:32 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:51:32 Result: found 138 certificates in /usr/share/ca-certificates +2021-01-07 17:51:32 Test: check if we can access /usr/share/gnupg (escaped: /usr/share/gnupg) +2021-01-07 17:51:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:51:32 Result: file /usr/share/gnupg is readable (or directory accessible). +2021-01-07 17:51:32 Result: found directory /usr/share/gnupg +2021-01-07 17:51:32 Result: found 0 certificates in /usr/share/gnupg +2021-01-07 17:51:32 Result: SSL path /var/www does not exist +2021-01-07 17:51:32 Result: SSL path /srv/www does not exist +2021-01-07 17:51:32 Result: found a total of 139 certificates +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CRYP-7930 (Determine if system uses LUKS block device encryption) +2021-01-07 17:51:32 Result: block device sda is not LUKS encrypted +2021-01-07 17:51:32 Result: block device sda1 is not LUKS encrypted +2021-01-07 17:51:32 Result: block device sda14 is not LUKS encrypted +2021-01-07 17:51:32 Result: block device sda15 is not LUKS encrypted +2021-01-07 17:51:32 Result: block device sr0 is not LUKS encrypted +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CRYP-7931 (Determine if system uses encrypted swap) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CRYP-8002 (Gather available kernel entropy) +2021-01-07 17:51:32 Result: found kernel entropy value of 1126 +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CRYP-8004 (Presence of hardware random number generators) +2021-01-07 17:51:32 Test: looking for /sys/class/misc/hw_random/rng_current +2021-01-07 17:51:32 Result: positive match, found RNG: virtio_rng.0 +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'rngd' not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CRYP-8005 (Presence of software pseudo random number generators) +2021-01-07 17:51:32 Test: looking for software pseudo random number generators +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'audio-entropyd' not found +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'haveged' not found +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'jitterentropy-rngd' not found +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_virtualization +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Virtualization +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_containers +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Containers +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test CONT-8004 (Query running Solaris zones) +2021-01-07 17:51:32 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID CONT-8102 (Checking Docker status and information) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'dockerd' not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test CONT-8104 (Checking Docker info for any warnings) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test CONT-8106 (Gather basic stats from Docker) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test CONT-8107 (Check number of Docker containers) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test CONT-8108 (Check file permissions for Docker files) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_mac_frameworks +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Security frameworks +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MACF-6204 (Check AppArmor presence) +2021-01-07 17:51:32 Result: aa-status binary not found, AppArmor not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test MACF-6208 (Check if AppArmor is enabled) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MACF-6232 (Check SELINUX presence) +2021-01-07 17:51:32 Test: checking if we have sestatus binary +2021-01-07 17:51:32 Result: sestatus binary NOT found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test MACF-6234 (Check SELINUX status) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MACF-6240 (Check TOMOYO Linux presence) +2021-01-07 17:51:32 Test: checking if we have tomoyo-init binary +2021-01-07 17:51:32 Result: tomoyo-init binary not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test MACF-6242 (Check TOMOYO Linux status) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID RBAC-6272 (Check grsecurity presence) +2021-01-07 17:51:32 Result: no grsecurity found in kernel config +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MACF-6290 (Check for implemented MAC framework) +2021-01-07 17:51:32 Hardening: assigned partial number of hardening points (2 of 3). Currently having 166 points (out of 254) +2021-01-07 17:51:32 Result: found no implemented MAC framework +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_file_integrity +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Software: file integrity +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4310 (AFICK availability) +2021-01-07 17:51:32 Test: Checking AFICK binary +2021-01-07 17:51:32 Result: AFICK is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4314 (AIDE availability) +2021-01-07 17:51:32 Test: Checking AIDE binary +2021-01-07 17:51:32 Result: AIDE is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4315 (Check AIDE configuration file) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4316 (Presence of AIDE database and size check) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4318 (Osiris availability) +2021-01-07 17:51:32 Test: Checking Osiris binary +2021-01-07 17:51:32 Result: Osiris is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4322 (Samhain availability) +2021-01-07 17:51:32 Test: Checking Samhain binary +2021-01-07 17:51:32 Result: Samhain is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4326 (Tripwire availability) +2021-01-07 17:51:32 Test: Checking Tripwire binary +2021-01-07 17:51:32 Result: Tripwire is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4328 (OSSEC syscheck daemon running) +2021-01-07 17:51:32 Test: Checking if OSSEC syscheck daemon is running +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'ossec-syscheckd' not found +2021-01-07 17:51:32 Result: syscheck (OSSEC) is not active +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4330 (mtree availability) +2021-01-07 17:51:32 Test: Checking mtree binary +2021-01-07 17:51:32 Result: mtree is not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4334 (Check lfd daemon status) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4336 (Check lfd configuration status) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4338 (osqueryd syscheck daemon running) +2021-01-07 17:51:32 Test: Checking if osqueryd syscheck daemon is running +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'osqueryd' not found +2021-01-07 17:51:32 Result: syscheck (osquery) not installed +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4339 (Check IMA/EVM status) +2021-01-07 17:51:32 Reason to skip: No evmctl binary found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4340 (Check dm-integrity status) +2021-01-07 17:51:32 Reason to skip: No integritysetup binary found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4341 (Check dm-verity status) +2021-01-07 17:51:32 Result: dm-verity tools found but no active devices +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test FINT-4402 (AIDE configuration: Checksums (SHA256 or SHA512)) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FINT-4350 (File integrity software installed) +2021-01-07 17:51:32 Test: Check if at least on file integrity tool is available/installed +2021-01-07 17:51:32 Result: No file integrity tools found +2021-01-07 17:51:32 Suggestion: Install a file integrity tool to monitor changes to critical and sensitive files [test:FINT-4350] [details:-] [solution:-] +2021-01-07 17:51:32 Hardening: assigned partial number of hardening points (0 of 5). Currently having 166 points (out of 259) +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_tooling +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Software: System tooling +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5002 (Checking for automation tools) +2021-01-07 17:51:32 Test: checking if directory /root/.ansible exists +2021-01-07 17:51:32 Result: directory /root/.ansible NOT found +2021-01-07 17:51:32 Test: checking if directory /etc/ansible exists +2021-01-07 17:51:32 Result: directory /etc/ansible NOT found +2021-01-07 17:51:32 Test: checking if directory /root/.ansible exists +2021-01-07 17:51:32 Result: directory /root/.ansible NOT found +2021-01-07 17:51:32 Test: checking if directory /tmp/.ansible exists +2021-01-07 17:51:32 Result: directory /tmp/.ansible NOT found +2021-01-07 17:51:32 Test: checking if file /var/log/ansible.log exists +2021-01-07 17:51:32 Result: file /var/log/ansible.log NOT found +2021-01-07 17:51:32 Test: checking if file ~/.ansible-retry exists +2021-01-07 17:51:32 Result: file ~/.ansible-retry NOT found +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'puppet master' not found +2021-01-07 17:51:32 Suggestion: Determine if automation tools are present for system management [test:TOOL-5002] [details:-] [solution:-] +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5102 (Check for presence of Fail2ban) +2021-01-07 17:51:32 Result: Fail2ban not present (fail2ban-server not found) +2021-01-07 17:51:32 Checking Fail2ban configuration file +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test TOOL-5104 (Enabled tests in Fail2ban) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5120 (Check for presence of Snort) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'snort' not found +2021-01-07 17:51:32 Result: Snort not present (Snort not running) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5122 (Check Snort configuration file) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5130 (Check for active Suricata daemon) +2021-01-07 17:51:32 Result: Suricata not installed (suricata not found) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5126 (Check for active OSSEC daemon) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'ossec-analysisd' not found +2021-01-07 17:51:32 Result: OSSEC analysis daemon not active +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'ossec-agentd' not found +2021-01-07 17:51:32 Result: OSSEC agent daemon not active +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID TOOL-5190 (Check presence of IDS/IPS tool) +2021-01-07 17:51:32 Hardening: assigned partial number of hardening points (0 of 2). Currently having 166 points (out of 261) +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_malware +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: Software: Malware +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3275 (Check for chkrootkit) +2021-01-07 17:51:32 Test: checking presence chkrootkit +2021-01-07 17:51:32 Result: chkrootkit not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3276 (Check for Rootkit Hunter) +2021-01-07 17:51:32 Test: checking presence Rootkit Hunter +2021-01-07 17:51:32 Result: Rootkit Hunter not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3278 (Check for LMD) +2021-01-07 17:51:32 Test: checking presence LMD +2021-01-07 17:51:32 Result: LMD not found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3280 (Check if anti-virus tool is installed) +2021-01-07 17:51:32 Test: checking process com.avast.daemon +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'com.avast.daemon' not found +2021-01-07 17:51:32 Test: checking process Avira daemon +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'avqmd' not found +2021-01-07 17:51:32 Test: checking process epagd +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'bdagentd' not found +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'epagd' not found +2021-01-07 17:51:32 Test: checking process falcon-sensor (CrowdStrike) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'falcon-sensor' not found +2021-01-07 17:51:32 Test: checking process CylanceSvc +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'CylanceSvc' not found +2021-01-07 17:51:32 Test: checking process esets_daemon +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'esets_daemon' not found +2021-01-07 17:51:32 Test: checking process wdserver or klnagent (Kaspersky) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'klnagent' not found +2021-01-07 17:51:32 Test: checking process cma or cmdagent (McAfee) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'cmdagent' not found +2021-01-07 17:51:32 Test: checking process savscand +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'savscand' not found +2021-01-07 17:51:32 Test: checking process SophosScanD +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'SophosScanD' not found +2021-01-07 17:51:32 Test: checking process rtvscand +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'rtvscand' not found +2021-01-07 17:51:32 Test: checking process Symantec management client service +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'smcd' not found +2021-01-07 17:51:32 Test: checking process Symantec Endpoint Protection configuration service +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'symcfgd' not found +2021-01-07 17:51:32 Test: checking process synoavd +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'synoavd' not found +2021-01-07 17:51:32 Test: checking process TmccMac to test for Trend Micro anti-virus (macOS) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'TmccMac' not found +2021-01-07 17:51:32 Result: no commercial anti-virus tools found +2021-01-07 17:51:32 Hardening: assigned partial number of hardening points (0 of 3). Currently having 166 points (out of 264) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3282 (Check for clamscan) +2021-01-07 17:51:32 Test: checking presence clamscan +2021-01-07 17:51:32 Result: clamscan couldn't be found +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID MALW-3284 (Check for clamd) +2021-01-07 17:51:32 Test: checking running ClamAV daemon (clamd) +2021-01-07 17:51:32 Performing pgrep scan without uid +2021-01-07 17:51:32 IsRunning: process 'clamd' not found +2021-01-07 17:51:32 Result: clamd not running +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test MALW-3286 (Check for freshclam) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Skipped test MALW-3288 (Check for ClamXav) +2021-01-07 17:51:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:51:32 Security check: file is normal +2021-01-07 17:51:32 Checking permissions of /root/scans/lynis/include/tests_file_permissions +2021-01-07 17:51:32 File permissions are OK +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Action: Performing tests from category: File Permissions +2021-01-07 17:51:32 ==== +2021-01-07 17:51:32 Performing test ID FILE-7524 (Perform file permissions check) +2021-01-07 17:51:32 Test: Checking file permissions +2021-01-07 17:51:32 Using profile /root/scans/lynis/default.prf for baseline. +2021-01-07 17:51:32 Test: checking file/directory /boot/grub/grub.cfg +2021-01-07 17:51:32 Test: checking if file /boot/grub/grub.cfg has the permissions set to 600 or more restrictive +2021-01-07 17:51:32 Outcome: correct permissions (444) +2021-01-07 17:51:32 Test: checking file/directory /boot/grub2/grub.cfg +2021-01-07 17:51:32 Skipping file/directory /boot/grub2/grub.cfg as it does not exist on this system +2021-01-07 17:51:32 Test: checking file/directory /boot/grub2/user.cfg +2021-01-07 17:51:32 Skipping file/directory /boot/grub2/user.cfg as it does not exist on this system +2021-01-07 17:51:32 Test: checking file/directory /etc/at.allow +2021-01-07 17:51:32 Skipping file/directory /etc/at.allow as it does not exist on this system +2021-01-07 17:51:32 Test: checking file/directory /etc/at.deny +2021-01-07 17:51:32 Test: checking if file /etc/at.deny has the permissions set to 600 or more restrictive +2021-01-07 17:51:32 Outcome: permissions of file /etc/at.deny are not matching expected value (640 != rw-------) +2021-01-07 17:51:32 Test: checking file/directory /etc/cron.allow +2021-01-07 17:51:32 Skipping file/directory /etc/cron.allow as it does not exist on this system +2021-01-07 17:51:32 Test: checking file/directory /etc/cron.deny +2021-01-07 17:51:32 Skipping file/directory /etc/cron.deny as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /etc/crontab +2021-01-07 17:51:33 Test: checking if file /etc/crontab has the permissions set to 600 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/crontab are not matching expected value (644 != rw-------) +2021-01-07 17:51:33 Test: checking file/directory /etc/group +2021-01-07 17:51:33 Test: checking if file /etc/group has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/group- +2021-01-07 17:51:33 Test: checking if file /etc/group- has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (600) +2021-01-07 17:51:33 Test: checking file/directory /etc/hosts.allow +2021-01-07 17:51:33 Test: checking if file /etc/hosts.allow has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/hosts.deny +2021-01-07 17:51:33 Test: checking if file /etc/hosts.deny has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/issue +2021-01-07 17:51:33 Test: checking if file /etc/issue has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/issue.net +2021-01-07 17:51:33 Test: checking if file /etc/issue.net has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/lilo.conf +2021-01-07 17:51:33 Skipping file/directory /etc/lilo.conf as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /etc/motd +2021-01-07 17:51:33 Skipping file/directory /etc/motd as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /etc/passwd +2021-01-07 17:51:33 Test: checking if file /etc/passwd has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (644) +2021-01-07 17:51:33 Test: checking file/directory /etc/passwd- +2021-01-07 17:51:33 Test: checking if file /etc/passwd- has the permissions set to 644 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (600) +2021-01-07 17:51:33 Test: checking file/directory /etc/ssh/sshd_config +2021-01-07 17:51:33 Test: checking if file /etc/ssh/sshd_config has the permissions set to 600 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/ssh/sshd_config are not matching expected value (644 != rw-------) +2021-01-07 17:51:33 Test: checking file/directory /etc/hosts.equiv +2021-01-07 17:51:33 Skipping file/directory /etc/hosts.equiv as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /etc/shosts.equiv +2021-01-07 17:51:33 Skipping file/directory /etc/shosts.equiv as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /root/.rhosts +2021-01-07 17:51:33 Skipping file/directory /root/.rhosts as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /root/.rlogin +2021-01-07 17:51:33 Skipping file/directory /root/.rlogin as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /root/.shosts +2021-01-07 17:51:33 Skipping file/directory /root/.shosts as it does not exist on this system +2021-01-07 17:51:33 Test: checking file/directory /root/.ssh +2021-01-07 17:51:33 Test: checking if file /root/.ssh has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: correct permissions (700) +2021-01-07 17:51:33 Test: checking file/directory /etc/cron.d +2021-01-07 17:51:33 Test: checking if file /etc/cron.d has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/cron.d are not matching expected value (755 != rwx------) +2021-01-07 17:51:33 Test: checking file/directory /etc/cron.daily +2021-01-07 17:51:33 Test: checking if file /etc/cron.daily has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/cron.daily are not matching expected value (755 != rwx------) +2021-01-07 17:51:33 Test: checking file/directory /etc/cron.hourly +2021-01-07 17:51:33 Test: checking if file /etc/cron.hourly has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/cron.hourly are not matching expected value (755 != rwx------) +2021-01-07 17:51:33 Test: checking file/directory /etc/cron.weekly +2021-01-07 17:51:33 Test: checking if file /etc/cron.weekly has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/cron.weekly are not matching expected value (755 != rwx------) +2021-01-07 17:51:33 Test: checking file/directory /etc/cron.monthly +2021-01-07 17:51:33 Test: checking if file /etc/cron.monthly has the permissions set to 700 or more restrictive +2021-01-07 17:51:33 Outcome: permissions of file /etc/cron.monthly are not matching expected value (755 != rwx------) +2021-01-07 17:51:33 Suggestion: Consider restricting file permissions [test:FILE-7524] [details:See screen output or log file] [solution:text:Use chmod to change file permissions] +2021-01-07 17:51:33 Security check: file is normal +2021-01-07 17:51:33 Checking permissions of /root/scans/lynis/include/tests_homedirs +2021-01-07 17:51:33 File permissions are OK +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Action: Performing tests from category: Home directories +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID HOME-9302 (Create list with home directories) +2021-01-07 17:51:33 Test: query /etc/passwd to obtain home directories +2021-01-07 17:51:33 Result: found home directory: /bin (directory exists) +2021-01-07 17:51:33 Result: found home directory: /dev (directory exists) +2021-01-07 17:51:33 Result: found home directory: /home/syslog (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /nonexistent (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /root (directory exists) +2021-01-07 17:51:33 Result: found home directory: /run/systemd (directory exists) +2021-01-07 17:51:33 Result: found home directory: /run/systemd/netif (directory exists) +2021-01-07 17:51:33 Result: found home directory: /run/systemd/resolve (directory exists) +2021-01-07 17:51:33 Result: found home directory: /usr/games (directory exists) +2021-01-07 17:51:33 Result: found home directory: /usr/sbin (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/backups (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/cache/man (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/cache/pollinate (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/lib/gnats (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/list (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/mail (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/run/dbus (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/run/ircd (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/run/sshd (directory exists) +2021-01-07 17:51:33 Result: found home directory: /var/spool/lpd (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/spool/news (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/spool/uucp (directory does not exist) +2021-01-07 17:51:33 Result: found home directory: /var/www (directory does not exist) +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID HOME-9304 (Check if users' home directories permissions are 750 or more restrictive) +2021-01-07 17:51:33 Test: checking directory '' for user '' +2021-01-07 17:51:33 Result: OK, all permissions of the home directories are 750 or more restrictive +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID HOME-9306 (Check if users own their home directories) +2021-01-07 17:51:33 Test: checking directory '' for user '' +2021-01-07 17:51:33 Result: OK, all users own their home directories +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID HOME-9310 (Checking for suspicious shell history files) +2021-01-07 17:51:33 Result: Ok, history files are type 'file'. +2021-01-07 17:51:33 Remark: History files are normally of the type 'file'. Symbolic links and other types are suspicious. +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID HOME-9350 (Collecting information from home directories) +2021-01-07 17:51:33 Result: IGNORE_HOME_DIRS empty, no paths excluded +2021-01-07 17:51:33 Security check: file is normal +2021-01-07 17:51:33 Checking permissions of /root/scans/lynis/include/tests_kernel_hardening +2021-01-07 17:51:33 File permissions are OK +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Action: Performing tests from category: Kernel Hardening +2021-01-07 17:51:33 ==== +2021-01-07 17:51:33 Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile) +2021-01-07 17:51:33 Result: sysctl key dev.tty.ldisc_autoload has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 166 points (out of 265) +2021-01-07 17:51:33 Result: sysctl key fs.protected_fifos has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 166 points (out of 266) +2021-01-07 17:51:33 Result: sysctl key fs.protected_hardlinks contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 167 points (out of 267) +2021-01-07 17:51:33 Result: sysctl key fs.protected_regular has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 167 points (out of 268) +2021-01-07 17:51:33 Result: sysctl key fs.protected_symlinks contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 168 points (out of 269) +2021-01-07 17:51:33 Result: sysctl key fs.suid_dumpable contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 169 points (out of 270) +2021-01-07 17:51:33 Result: key hw.kbd.keymap_restrict_change does not exist on this machine +2021-01-07 17:51:33 Result: key kern.sugid_coredump does not exist on this machine +2021-01-07 17:51:33 Result: key kernel.core_setuid_ok does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key kernel.core_uses_pid has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 169 points (out of 271) +2021-01-07 17:51:33 Result: sysctl key kernel.ctrl-alt-del contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 170 points (out of 272) +2021-01-07 17:51:33 Result: sysctl key kernel.dmesg_restrict has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 170 points (out of 273) +2021-01-07 17:51:33 Result: key kernel.exec-shield-randomize does not exist on this machine +2021-01-07 17:51:33 Result: key kernel.exec-shield does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key kernel.kptr_restrict has a different value than expected in scan profile. Expected=2, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 170 points (out of 274) +2021-01-07 17:51:33 Result: key kernel.maps_protect does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key kernel.modules_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 170 points (out of 275) +2021-01-07 17:51:33 Result: sysctl key kernel.perf_event_paranoid has a different value than expected in scan profile. Expected=3, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 170 points (out of 276) +2021-01-07 17:51:33 Result: sysctl key kernel.randomize_va_space contains equal expected and current value (2) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 171 points (out of 277) +2021-01-07 17:51:33 Result: key kernel.suid_dumpable does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key kernel.sysrq has a different value than expected in scan profile. Expected=0, Real=176 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 171 points (out of 278) +2021-01-07 17:51:33 Result: sysctl key kernel.unprivileged_bpf_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 171 points (out of 279) +2021-01-07 17:51:33 Result: key kernel.use-nx does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key kernel.yama.ptrace_scope contains equal expected and current value (1 2 3) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 172 points (out of 280) +2021-01-07 17:51:33 Result: sysctl key net.core.bpf_jit_harden has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 172 points (out of 281) +2021-01-07 17:51:33 Result: key net.inet.icmp.bmcastecho does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.icmp.drop_redirect does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.icmp.rediraccept does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.icmp.timestamp does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.accept_sourceroute does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.check_interface does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.forwarding does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.linklocal.in.allowbadttl does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.process_options does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.random_id does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.redirect does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip.sourceroute does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.ip6.redirect does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.always_keepalive does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.blackhole does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.drop_synfin does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.icmp_may_rst does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.nolocaltimewait does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.tcp.path_mtu_discovery does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet.udp.blackhole does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet6.icmp6.rediraccept does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet6.ip6.forwarding does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet6.ip6.fw.enable does not exist on this machine +2021-01-07 17:51:33 Result: key net.inet6.ip6.redirect does not exist on this machine +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 172 points (out of 282) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 173 points (out of 283) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.bootp_relay contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 174 points (out of 284) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.forwarding contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 175 points (out of 285) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.log_martians has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 175 points (out of 286) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.mc_forwarding contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 176 points (out of 287) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.proxy_arp contains equal expected and current value (0) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 177 points (out of 288) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.rp_filter contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 178 points (out of 289) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.all.send_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 178 points (out of 290) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 178 points (out of 291) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.default.accept_source_route has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 178 points (out of 292) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.conf.default.log_martians has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 178 points (out of 293) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.icmp_echo_ignore_broadcasts contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 179 points (out of 294) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.icmp_ignore_bogus_error_responses contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 180 points (out of 295) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.tcp_syncookies contains equal expected and current value (1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 181 points (out of 296) +2021-01-07 17:51:33 Result: sysctl key net.ipv4.tcp_timestamps contains equal expected and current value (0 1) +2021-01-07 17:51:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 182 points (out of 297) +2021-01-07 17:51:33 Result: sysctl key net.ipv6.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:33 Hardening: assigned partial number of hardening points (0 of 1). Currently having 182 points (out of 298) +2021-01-07 17:51:34 Result: sysctl key net.ipv6.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:51:34 Hardening: assigned maximum number of hardening points for this item (1). Currently having 183 points (out of 299) +2021-01-07 17:51:34 Result: key net.ipv6.conf.all.send_redirects does not exist on this machine +2021-01-07 17:51:34 Result: sysctl key net.ipv6.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:51:34 Hardening: assigned partial number of hardening points (0 of 1). Currently having 183 points (out of 300) +2021-01-07 17:51:34 Result: sysctl key net.ipv6.conf.default.accept_source_route contains equal expected and current value (0) +2021-01-07 17:51:34 Hardening: assigned maximum number of hardening points for this item (1). Currently having 184 points (out of 301) +2021-01-07 17:51:34 Result: key security.bsd.hardlink_check_gid does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.hardlink_check_uid does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.see_other_gids does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.see_other_uids does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.stack_guard_page does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.unprivileged_proc_debug does not exist on this machine +2021-01-07 17:51:34 Result: key security.bsd.unprivileged_read_msgbuf does not exist on this machine +2021-01-07 17:51:34 Result: found 19 keys that can use tuning, according scan profile +2021-01-07 17:51:34 Suggestion: One or more sysctl values differ from the scan profile and could be tweaked [test:KRNL-6000] [details:] [solution:Change sysctl value or disable test (skip-test=KRNL-6000:)] +2021-01-07 17:51:34 Security check: file is normal +2021-01-07 17:51:34 Checking permissions of /root/scans/lynis/include/tests_hardening +2021-01-07 17:51:34 File permissions are OK +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Action: Performing tests from category: Hardening +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Performing test ID HRDN-7220 (Check if one or more compilers are installed) +2021-01-07 17:51:34 Test: Check if one or more compilers can be found on the system +2021-01-07 17:51:34 Result: no compilers found +2021-01-07 17:51:34 Hardening: assigned maximum number of hardening points for this item (3). Currently having 187 points (out of 304) +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Performing test ID HRDN-7222 (Check compiler permissions) +2021-01-07 17:51:34 Test: Check if one or more compilers can be found on the system +2021-01-07 17:51:34 Result: no compilers found +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Performing test ID HRDN-7230 (Check for malware scanner) +2021-01-07 17:51:34 Test: Check if a malware scanner is installed +2021-01-07 17:51:34 Result: no malware scanner found +2021-01-07 17:51:34 Suggestion: Harden the system by installing at least one malware scanner, to perform periodic file system scans [test:HRDN-7230] [details:-] [solution:Install a tool like rkhunter, chkrootkit, OSSEC] +2021-01-07 17:51:34 Hardening: assigned partial number of hardening points (1 of 3). Currently having 188 points (out of 307) +2021-01-07 17:51:34 Result: no malware scanner found +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Performing test ID HRDN-7231 (Check for registered non-native binary formats) +2021-01-07 17:51:34 Test: Check for registered non-native binary formats +2021-01-07 17:51:34 Result: no non-native binary formats found +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Action: Performing tests from category: Custom tests +2021-01-07 17:51:34 Test: Checking for tests_custom file +2021-01-07 17:51:34 ==== +2021-01-07 17:51:34 Action: Performing plugin tests +2021-01-07 17:51:34 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:51:34 Result: Plugins phase 2 finished +2021-01-07 17:51:34 Checking permissions of /root/scans/lynis/include/report +2021-01-07 17:51:34 File permissions are OK +2021-01-07 17:51:34 Hardening index : [61] [############ ] +2021-01-07 17:51:34 Hardening strength: System has been hardened, but could use additional hardening +2021-01-07 17:51:34 ==== +2021-01-07 17:51:35 Checking permissions of /root/scans/lynis/include/tool_tips +2021-01-07 17:51:35 File permissions are OK +2021-01-07 17:51:35 Tool tips: enabled +2021-01-07 17:51:35 ================================================================================ +2021-01-07 17:51:35 Tests performed: 258 +2021-01-07 17:51:35 Total tests: 455 +2021-01-07 17:51:35 Active plugins: 2 +2021-01-07 17:51:35 Total plugins: 2 +2021-01-07 17:51:35 ================================================================================ +2021-01-07 17:51:35 Lynis 3.0.3 +2021-01-07 17:51:35 2007-2021, CISOfy - https://cisofy.com/lynis/ +2021-01-07 17:51:35 Enterprise support available (compliance, plugins, interface and tools) +2021-01-07 17:51:35 Program ended successfully +2021-01-07 17:51:35 ================================================================================ +2021-01-07 17:51:35 PID file removed (/var/run/lynis.pid) +2021-01-07 17:51:35 Temporary files: /tmp/lynis.se3EFLCTUP /tmp/lynis.u1Az70AnwO /tmp/lynis.o5C5DIqbhL /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:35 Action: removing temporary file /tmp/lynis.se3EFLCTUP +2021-01-07 17:51:35 Info: temporary file /tmp/lynis.u1Az70AnwO was already removed +2021-01-07 17:51:35 Info: temporary file /tmp/lynis.o5C5DIqbhL was already removed +2021-01-07 17:51:35 Action: removing temporary file /tmp/lynis.AnP7sHfhiN +2021-01-07 17:51:35 Lynis ended successfully. diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-3.log b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-3.log new file mode 100644 index 0000000..f013b17 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-log-3.log @@ -0,0 +1,4962 @@ +2021-01-07 17:58:08 Starting Lynis 3.0.3 with PID 21198, build date 2021-01-07 +2021-01-07 17:58:08 ==== +2021-01-07 17:58:08 ### 2007-2021, CISOfy - https://cisofy.com/lynis/ ### +2021-01-07 17:58:08 Checking permissions of /root/scans/lynis/include/profiles +2021-01-07 17:58:08 File permissions are OK +2021-01-07 17:58:08 Reading profile/configuration /root/scans/lynis/default.prf +2021-01-07 17:58:08 Action: created temporary file /tmp/lynis.jQlDoUkmun +2021-01-07 17:58:08 Language set via profile to '' +2021-01-07 17:58:08 Plugin 'authentication' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'compliance' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'configuration' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'control-panels' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'crypto' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'dns' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'docker' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'file-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'file-systems' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'firewalls' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'forensics' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'hardware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'intrusion-detection' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'intrusion-prevention' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'kernel' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'malware' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'memory' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'nginx' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'pam' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'processes' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'security-modules' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'software' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'system-integrity' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'systemd' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:08 Plugin 'users' enabled according profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:09 Set option to default value: NTPD_ROLE --> client +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 EOL check: 0 +2021-01-07 17:58:09 Program version: 3.0.3 +2021-01-07 17:58:09 Operating system: Linux +2021-01-07 17:58:09 Operating system name: Ubuntu +2021-01-07 17:58:09 Operating system version: 16.04 +2021-01-07 17:58:09 Kernel version: 4.4.0 +2021-01-07 17:58:09 Kernel version (full): 4.4.0-197-generic +2021-01-07 17:58:09 Hardware platform: x86_64 +2021-01-07 17:58:09 ----------------------------------------------------- +2021-01-07 17:58:09 Hostname: it-sec-test-vm +2021-01-07 17:58:09 Auditor: [Not Specified] +2021-01-07 17:58:09 Profiles: /root/scans/lynis/default.prf +2021-01-07 17:58:09 Work directory: /root/scans/lynis +2021-01-07 17:58:09 Include directory: /root/scans/lynis/include +2021-01-07 17:58:09 Plugin directory: ./plugins +2021-01-07 17:58:09 ----------------------------------------------------- +2021-01-07 17:58:09 Log file: /var/log/lynis.log +2021-01-07 17:58:09 Report file: /var/log/lynis-report.dat +2021-01-07 17:58:09 Report version: 1.0 +2021-01-07 17:58:09 ----------------------------------------------------- +2021-01-07 17:58:09 Test category: all +2021-01-07 17:58:09 Test group: all +2021-01-07 17:58:09 BusyBox used: 0 +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Test: Checking for program update... +2021-01-07 17:58:09 Current installed version : 303 +2021-01-07 17:58:09 Latest stable version : 303 +2021-01-07 17:58:09 No Lynis update available. +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Checking permissions of /root/scans/lynis/include/binaries +2021-01-07 17:58:09 File permissions are OK +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Action: Performing tests from category: System tools +2021-01-07 17:58:09 Start scanning for available audit binaries and tools... +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Performing test ID CORE-1000 (Check all system binaries) +2021-01-07 17:58:09 Status: Starting binary scan... +2021-01-07 17:58:09 Test: Checking binaries in directory /snap/bin +2021-01-07 17:58:09 Result: Directory /snap/bin does NOT exist +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/local/games +2021-01-07 17:58:09 Directory /usr/local/games exists. Starting directory scanning... +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/games +2021-01-07 17:58:09 Directory /usr/games exists. Starting directory scanning... +2021-01-07 17:58:09 Test: Checking binaries in directory /bin +2021-01-07 17:58:09 Directory /bin exists. Starting directory scanning... +2021-01-07 17:58:09 Found known binary: cat (generic file handling) - /bin/cat +2021-01-07 17:58:09 Found known binary: dnsdomainname (DNS domain) - /bin/dnsdomainname +2021-01-07 17:58:09 Found known binary: domainname (NIS domain) - /bin/domainname +2021-01-07 17:58:09 Found known binary: egrep (text search) - /bin/egrep +2021-01-07 17:58:09 Found known binary: grep (text search) - /bin/grep +2021-01-07 17:58:09 Found known binary: gzip (compressing utility) - /bin/gzip +2021-01-07 17:58:09 Found known binary: ip (IP configuration) - /bin/ip +2021-01-07 17:58:09 Found known binary: journalctl (systemd journal) - /bin/journalctl +2021-01-07 17:58:09 Found known binary: ls (file listing) - /bin/ls +2021-01-07 17:58:09 Found known binary: lsblk (block devices) - /bin/lsblk +2021-01-07 17:58:09 Found known binary: lsmod (kernel modules) - /bin/lsmod +2021-01-07 17:58:09 Found known binary: mount (disk utility) - /bin/mount +2021-01-07 17:58:09 Found known binary: netstat (network statistics) - /bin/netstat +2021-01-07 17:58:09 Found known binary: ps (process listing) - /bin/ps +2021-01-07 17:58:09 Found known binary: readlink (follows symlinks) - /bin/readlink +2021-01-07 17:58:09 Found known binary: sed (text stream editor) - /bin/sed +2021-01-07 17:58:09 Found known binary: ss (show sockets) - /bin/ss +2021-01-07 17:58:09 Found known binary: systemctl (client to systemd) - /bin/systemctl +2021-01-07 17:58:09 Found known binary: uname (operating system details) - /bin/uname +2021-01-07 17:58:09 Found known binary: zgrep (text search for compressed files) - /bin/zgrep +2021-01-07 17:58:09 Test: Checking binaries in directory /sbin +2021-01-07 17:58:09 Directory /sbin exists. Starting directory scanning... +2021-01-07 17:58:09 Found known binary: blkid (information about block devices) - /sbin/blkid +2021-01-07 17:58:09 Found known binary: cryptsetup (block device encryption) - /sbin/cryptsetup +2021-01-07 17:58:09 Found known binary: getcap (kernel capabilities) - /sbin/getcap +2021-01-07 17:58:09 Found known binary: ipconfig (IP configuration) - /sbin/ifconfig +2021-01-07 17:58:09 Found known binary: ip (IP configuration) - /sbin/ip +2021-01-07 17:58:09 Found known binary: iptables (firewall) - /sbin/iptables +2021-01-07 17:58:09 Found known binary: iptables-save (firewall) - /sbin/iptables-save +2021-01-07 17:58:09 Found known binary: lsmod (kernel modules) - /sbin/lsmod +2021-01-07 17:58:09 Found known binary: lvdisplay (LVM tool) - /sbin/lvdisplay +2021-01-07 17:58:09 Found known binary: modprobe (kernel modules) - /sbin/modprobe +2021-01-07 17:58:09 Found known binary: runlevel (system utility) - /sbin/runlevel +2021-01-07 17:58:09 Found known binary: swapon (swap device tool) - /sbin/swapon +2021-01-07 17:58:09 Found known binary: sysctl (kernel parameters) - /sbin/sysctl +2021-01-07 17:58:09 Found known binary: tune2fs (file system tool) - /sbin/tune2fs +2021-01-07 17:58:09 Found known binary: veritysetup (dm-verity setup tool) - /sbin/veritysetup +2021-01-07 17:58:09 Found known binary: vgdisplay (LVM tool) - /sbin/vgdisplay +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/bin +2021-01-07 17:58:09 Directory /usr/bin exists. Starting directory scanning... +2021-01-07 17:58:09 Found known binary: apt (package manager) - /usr/bin/apt +2021-01-07 17:58:09 Found known binary: as (compiler) - /usr/bin/as +2021-01-07 17:58:09 Found known binary: awk (string tool) - /usr/bin/awk +2021-01-07 17:58:09 Found known binary: base64 (encoding tool) - /usr/bin/base64 +2021-01-07 17:58:09 Found known binary: bootctl (systemd-boot manager utility) - /usr/bin/bootctl +2021-01-07 17:58:09 Found known binary: comm (file compare) - /usr/bin/comm +2021-01-07 17:58:09 Found known binary: curl (browser, download utility) - /usr/bin/curl +2021-01-07 17:58:09 Found known binary: cut (text stream editor) - /usr/bin/cut +2021-01-07 17:58:09 Found known binary: dpkg (package management) - /usr/bin/dpkg +2021-01-07 17:58:09 Found known binary: fail2ban (IPS tool) - /usr/bin/fail2ban-server +2021-01-07 17:58:09 Found known binary: file (file type detection) - /usr/bin/file +2021-01-07 17:58:09 Found known binary: find (search tool) - /usr/bin/find +2021-01-07 17:58:09 Found known binary: getent (query tool for name service switch libraries) - /usr/bin/getent +2021-01-07 17:58:09 Found known binary: head (text filter) - /usr/bin/head +2021-01-07 17:58:09 Found known binary: lsattr (file attributes) - /usr/bin/lsattr +2021-01-07 17:58:09 Found known binary: md5sum (hash tool) - /usr/bin/md5sum +2021-01-07 17:58:09 Found /usr/bin/openssl (version 1.0.2g) +2021-01-07 17:58:09 Found /usr/bin/perl (version 5.22.1) +2021-01-07 17:58:09 Found known binary: pgrep (search in process list) - /usr/bin/pgrep +2021-01-07 17:58:09 Found known binary: python3 (programming language interpreter) - /usr/bin/python3 (version 3.5.2) +2021-01-07 17:58:09 Found known binary: rkhunter (malware scanner) - /usr/bin/rkhunter +2021-01-07 17:58:09 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/sha1sum +2021-01-07 17:58:09 Found known binary: sha256/sha256sum (crypto hashing) - /usr/bin/sha256sum +2021-01-07 17:58:09 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/shasum +2021-01-07 17:58:09 Found known binary: sort (sort data streams) - /usr/bin/sort +2021-01-07 17:58:09 Found known binary: ssh-keyscan (scanner for SSH keys) - /usr/bin/ssh-keyscan +2021-01-07 17:58:09 Found known binary: stat (file information) - /usr/bin/stat +2021-01-07 17:58:09 Found known binary: strings (text strings search) - /usr/bin/strings +2021-01-07 17:58:09 Found known binary: systemd-analyze (systemd service analysis tool) - /usr/bin/systemd-analyze +2021-01-07 17:58:09 Found known binary: tail (text filter) - /usr/bin/tail +2021-01-07 17:58:09 Found known binary: timedatectl (timedate client) - /usr/bin/timedatectl +2021-01-07 17:58:09 Found known binary: tr (text transformation) - /usr/bin/tr +2021-01-07 17:58:09 Found known binary: uniq (text manipulation utility) - /usr/bin/uniq +2021-01-07 17:58:09 Found known binary: wc (word count) - /usr/bin/wc +2021-01-07 17:58:09 Found /usr/bin/wget (version 1.17.1) +2021-01-07 17:58:09 Found known binary: xargs (command output redirection) - /usr/bin/xargs +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/sbin +2021-01-07 17:58:09 Directory /usr/sbin exists. Starting directory scanning... +2021-01-07 17:58:09 Found known binary: grpck (consistency checker) - /usr/sbin/grpck +2021-01-07 17:58:09 Found known binary: logrotate (log rotation tool) - /usr/sbin/logrotate +2021-01-07 17:58:09 Found known binary: service (system services) - /usr/sbin/service +2021-01-07 17:58:09 Found /usr/sbin/sshd (version 7.2) +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/local/bin +2021-01-07 17:58:09 Directory /usr/local/bin exists. Starting directory scanning... +2021-01-07 17:58:09 Test: Checking binaries in directory /usr/local/sbin +2021-01-07 17:58:09 Directory /usr/local/sbin exists. Starting directory scanning... +2021-01-07 17:58:09 Discovered directories: /usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +2021-01-07 17:58:09 Result: found 1077 binaries including 15 set-uid and 17 set-gid +2021-01-07 17:58:09 Result: set-uid binaries: /bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/procmail /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit /usr/sbin/sensible-mda +2021-01-07 17:58:09 Result: set-gid binaries: /sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/dotlockfile /usr/bin/expiry /usr/bin/lockfile /usr/bin/procmail /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write /usr/sbin/hoststat /usr/sbin/purgestat /usr/sbin/sendmail /usr/sbin/sendmail-msp /usr/sbin/sendmail-mta +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Informational: package manager is used +2021-01-07 17:58:09 Test: Determine if this system is a virtual machine +2021-01-07 17:58:09 Result: facter utility not found +2021-01-07 17:58:09 Test: trying to guess virtualization technology with systemd-detect-virt +2021-01-07 17:58:09 Result: found kvm +2021-01-07 17:58:09 Result: skipped lscpu test, as we already found machine type +2021-01-07 17:58:09 Result: skipped dmidecode test, as we already found machine type +2021-01-07 17:58:09 Result: skipped processes test, as we already found platform +2021-01-07 17:58:09 Result: skipped Amazon EC2 test, as we already found platform +2021-01-07 17:58:09 Result: skipped sysctl test, as we already found platform +2021-01-07 17:58:09 Result: skipped lshw test, as we already found machine type +2021-01-07 17:58:09 Result: found virtual machine (type: kvm, KVM) +2021-01-07 17:58:09 Result: Lynis is not running in container +2021-01-07 17:58:09 Result: system is using systemd +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Action: Performing plugin tests +2021-01-07 17:58:09 Searching plugins... +2021-01-07 17:58:09 Found plugin file: ./plugins/plugin_pam_phase1 +2021-01-07 17:58:09 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:58:09 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:09 Result: plugin pam is enabled +2021-01-07 17:58:09 Checking permissions of ./plugins/plugin_pam_phase1 +2021-01-07 17:58:09 File permissions are OK +2021-01-07 17:58:09 Including plugin file: ./plugins/plugin_pam_phase1 (version: 1.0.5) +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Skipped test PLGN-0008 (Check PAM configuration (pwquality.conf)) +2021-01-07 17:58:09 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:09 ==== +2021-01-07 17:58:09 Performing test ID PLGN-0010 (Check PAM configuration) +2021-01-07 17:58:09 Result: /etc/pam.d exists +2021-01-07 17:58:09 Now checking PAM file /etc/pam.d/chpasswd +2021-01-07 17:58:09 Now checking PAM file /etc/pam.d/newusers +2021-01-07 17:58:09 Now checking PAM file /etc/pam.d/su +2021-01-07 17:58:09 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:58:09 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:58:09 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:58:09 Result: using module pam_mail.so (optional) with options nopen +2021-01-07 17:58:09 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:58:10 Now checking PAM file /etc/pam.d/other +2021-01-07 17:58:10 Now checking PAM file /etc/pam.d/cron +2021-01-07 17:58:10 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:58:10 Result: using module pam_env.so (required) without options configured +2021-01-07 17:58:10 Result: using module pam_env.so (required) with options envfile=/etc/default/locale +2021-01-07 17:58:10 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:58:10 Now checking PAM file /etc/pam.d/login +2021-01-07 17:58:10 Result: using module pam_faildelay.so (optional) with options delay=3000000 +2021-01-07 17:58:10 Result: Found brackets in line, indicating multiple options for control flags: success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die +2021-01-07 17:58:10 Result: brackets used, ignoring control flags +2021-01-07 17:58:10 Result: using module pam_securetty.so (other) without options configured +2021-01-07 17:58:10 Result: using module pam_nologin.so (requisite) without options configured +2021-01-07 17:58:10 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:58:10 Result: brackets used, ignoring control flags +2021-01-07 17:58:10 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:58:10 Result: using module pam_env.so (required) with options readenv=1 +2021-01-07 17:58:10 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale +2021-01-07 17:58:10 Result: using module pam_group.so (optional) without options configured +2021-01-07 17:58:10 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:58:10 Result: using module pam_lastlog.so (optional) without options configured +2021-01-07 17:58:10 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:58:10 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:58:10 Result: using module pam_mail.so (optional) with options standard +2021-01-07 17:58:10 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:58:10 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:58:10 Result: brackets used, ignoring control flags +2021-01-07 17:58:10 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:58:10 Now checking PAM file /etc/pam.d/sshd +2021-01-07 17:58:10 Result: using module pam_nologin.so (required) without options configured +2021-01-07 17:58:10 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:58:10 Result: brackets used, ignoring control flags +2021-01-07 17:58:10 Result: using module pam_selinux.so (other) with options close +2021-01-07 17:58:10 Result: using module pam_loginuid.so (required) without options configured +2021-01-07 17:58:10 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:58:11 Result: using module pam_motd.so (optional) with options motd=/run/motd.dynamic +2021-01-07 17:58:11 Result: using module pam_motd.so (optional) with options noupdate +2021-01-07 17:58:11 Result: using module pam_mail.so (optional) with options standard noenv +2021-01-07 17:58:11 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:58:11 Result: using module pam_env.so (required) without options configured +2021-01-07 17:58:11 Result: using module pam_env.so (required) with options user_readenv=1 envfile=/etc/default/locale +2021-01-07 17:58:11 Result: Found brackets in line, indicating multiple options for control flags: success=ok ignore=ignore module_unknown=ignore default=bad +2021-01-07 17:58:11 Result: brackets used, ignoring control flags +2021-01-07 17:58:11 Result: using module pam_selinux.so (other) with options open +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/common-auth +2021-01-07 17:58:11 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:58:11 Result: brackets used, ignoring control flags +2021-01-07 17:58:11 Result: using module pam_unix.so (other) with options nullok_secure +2021-01-07 17:58:11 Result: found pam_unix.so module (generic) +2021-01-07 17:58:11 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:58:11 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/common-session +2021-01-07 17:58:11 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:58:11 Result: brackets used, ignoring control flags +2021-01-07 17:58:11 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:58:11 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:58:11 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:58:11 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:58:11 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:58:11 Result: found pam_unix.so module (generic) +2021-01-07 17:58:11 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/systemd-user +2021-01-07 17:58:11 Result: using module pam_selinux.so (required) with options close +2021-01-07 17:58:11 Result: using module pam_selinux.so (required) with options nottys open +2021-01-07 17:58:11 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/passwd +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/common-account +2021-01-07 17:58:11 Result: Found brackets in line, indicating multiple options for control flags: success=1 new_authtok_reqd=done default=ignore +2021-01-07 17:58:11 Result: brackets used, ignoring control flags +2021-01-07 17:58:11 Result: using module pam_unix.so (other) without options configured +2021-01-07 17:58:11 Result: found pam_unix.so module (generic) +2021-01-07 17:58:11 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:58:11 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/sudo +2021-01-07 17:58:11 Result: using module pam_env.so (required) with options readenv=1 user_readenv=0 +2021-01-07 17:58:11 Result: using module pam_env.so (required) with options readenv=1 envfile=/etc/default/locale user_readenv=0 +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/common-password +2021-01-07 17:58:11 Result: using module pam_cracklib.so (requisite) with options retry=3 minlen=8 difok=3 +2021-01-07 17:58:11 Result: found module pam_cracklib.so for password strength testing +2021-01-07 17:58:11 Result: Max password Retry configured +2021-01-07 17:58:11 Value is now: 3 +2021-01-07 17:58:11 Returning value: 3 +2021-01-07 17:58:11 Result: minlen configured +2021-01-07 17:58:11 Value is now: 8 +2021-01-07 17:58:11 Returning value: 8 +2021-01-07 17:58:11 Result: unknown option found: difok with value 3 +2021-01-07 17:58:11 Result: Found brackets in line, indicating multiple options for control flags: success=1 default=ignore +2021-01-07 17:58:11 Result: brackets used, ignoring control flags +2021-01-07 17:58:11 Result: using module pam_unix.so (other) with options obscure use_authtok try_first_pass sha512 +2021-01-07 17:58:11 Result: found pam_unix.so module (generic) +2021-01-07 17:58:11 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:58:11 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/smtp +2021-01-07 17:58:11 Now checking PAM file /etc/pam.d/chsh +2021-01-07 17:58:11 Result: using module pam_shells.so (required) without options configured +2021-01-07 17:58:12 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:58:12 Now checking PAM file /etc/pam.d/common-session-noninteractive +2021-01-07 17:58:12 Result: Found brackets in line, indicating multiple options for control flags: default=1 +2021-01-07 17:58:12 Result: brackets used, ignoring control flags +2021-01-07 17:58:12 Result: using module pam_permit.so (other) without options configured +2021-01-07 17:58:12 Result: using module pam_deny.so (requisite) without options configured +2021-01-07 17:58:12 Result: using module pam_permit.so (required) without options configured +2021-01-07 17:58:12 Result: using module pam_umask.so (optional) without options configured +2021-01-07 17:58:12 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:58:12 Result: found pam_unix.so module (generic) +2021-01-07 17:58:12 Now checking PAM file /etc/pam.d/chfn +2021-01-07 17:58:12 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:58:12 Now checking PAM file /etc/pam.d/runuser-l +2021-01-07 17:58:12 Result: using module pam_keyinit.so (optional) with options force revoke +2021-01-07 17:58:12 Result: using module pam_systemd.so (optional) without options configured +2021-01-07 17:58:12 Now checking PAM file /etc/pam.d/runuser +2021-01-07 17:58:12 Result: using module pam_rootok.so (sufficient) without options configured +2021-01-07 17:58:12 Result: using module pam_keyinit.so (optional) with options revoke +2021-01-07 17:58:12 Result: using module pam_limits.so (required) without options configured +2021-01-07 17:58:12 Result: using module pam_unix.so (required) without options configured +2021-01-07 17:58:12 Result: found pam_unix.so module (generic) +2021-01-07 17:58:12 [PAM] PAM 2F authentication enabled: 0 +2021-01-07 17:58:12 [PAM] PAM 2F authentication required: 0 +2021-01-07 17:58:12 [PAM] Authentication unlock time: not configured +2021-01-07 17:58:12 [PAM] Password brute force protection: 0 +2021-01-07 17:58:12 [PAM] Minimum password length: 8 +2021-01-07 17:58:12 [PAM] Password strength testing enabled: 1 +2021-01-07 17:58:12 [PAM] Minimum password class out of 4: 0 +2021-01-07 17:58:12 [PAM] Maximum credit for Digital characters: 1 +2021-01-07 17:58:12 [PAM] Maximum credit for Lowercase characters: 1 +2021-01-07 17:58:12 [PAM] Maximum credit for Other characters: 1 +2021-01-07 17:58:12 [PAM] Maximum credit for Uppercase characters: 1 +2021-01-07 17:58:12 [PAM] Password maximum retry: 3 +2021-01-07 17:58:12 [PAM] Password history with pam_pwhistory IS NOT enabled +2021-01-07 17:58:12 [PAM] Password history with pam_unix IS NOT enabled +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Result: pam plugin (phase 1) finished +2021-01-07 17:58:12 -- +2021-01-07 17:58:12 Found plugin file: ./plugins/plugin_systemd_phase1 +2021-01-07 17:58:12 Action: checking plugin status in profile: /root/scans/lynis/default.prf +2021-01-07 17:58:12 Result: plugin enabled in profile (/root/scans/lynis/default.prf) +2021-01-07 17:58:12 Result: plugin systemd is enabled +2021-01-07 17:58:12 Checking permissions of ./plugins/plugin_systemd_phase1 +2021-01-07 17:58:12 File permissions are OK +2021-01-07 17:58:12 Including plugin file: ./plugins/plugin_systemd_phase1 (version: 1.0.4) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3800 (Gather systemctl exit code) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3802 (Query systemd version and options) +2021-01-07 17:58:12 Result: found systemd version 229 +2021-01-07 17:58:12 Result: found builtin components list +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3804 (Gather systemd unit files and their status) +2021-01-07 17:58:12 Result: found systemd unit files via systemctl list-unit-files +2021-01-07 17:58:12 Output: proc-sys-fs-binfmt_misc.automount|static| +2021-01-07 17:58:12 Output: dev-hugepages.mount|static| +2021-01-07 17:58:12 Output: dev-mqueue.mount|static| +2021-01-07 17:58:12 Output: proc-sys-fs-binfmt_misc.mount|static| +2021-01-07 17:58:12 Output: sys-fs-fuse-connections.mount|static| +2021-01-07 17:58:12 Output: sys-kernel-config.mount|static| +2021-01-07 17:58:12 Output: sys-kernel-debug.mount|static| +2021-01-07 17:58:12 Output: acpid.path|enabled| +2021-01-07 17:58:12 Output: systemd-ask-password-console.path|static| +2021-01-07 17:58:12 Output: systemd-ask-password-plymouth.path|static| +2021-01-07 17:58:12 Output: systemd-ask-password-wall.path|static| +2021-01-07 17:58:12 Output: systemd-networkd-resolvconf-update.path|static| +2021-01-07 17:58:12 Output: acpid.service|disabled| +2021-01-07 17:58:12 Output: apt-daily-upgrade.service|static| +2021-01-07 17:58:12 Output: apt-daily.service|static| +2021-01-07 17:58:12 Output: autovt@.service|enabled| +2021-01-07 17:58:12 Output: bootlogd.service|masked| +2021-01-07 17:58:12 Output: bootlogs.service|masked| +2021-01-07 17:58:12 Output: bootmisc.service|masked| +2021-01-07 17:58:12 Output: checkfs.service|masked| +2021-01-07 17:58:12 Output: checkroot-bootclean.service|masked| +2021-01-07 17:58:12 Output: checkroot.service|masked| +2021-01-07 17:58:12 Output: cloud-config.service|enabled| +2021-01-07 17:58:12 Output: cloud-final.service|enabled| +2021-01-07 17:58:12 Output: cloud-init-local.service|enabled| +2021-01-07 17:58:12 Output: cloud-init.service|enabled| +2021-01-07 17:58:12 Output: console-getty.service|disabled| +2021-01-07 17:58:12 Output: console-setup.service|static| +2021-01-07 17:58:12 Output: console-shell.service|disabled| +2021-01-07 17:58:12 Output: container-getty@.service|static| +2021-01-07 17:58:12 Output: cron.service|enabled| +2021-01-07 17:58:12 Output: cryptdisks-early.service|masked| +2021-01-07 17:58:12 Output: cryptdisks.service|masked| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.hostname1.service|static| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.locale1.service|static| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.login1.service|static| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.network1.service|disabled| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.resolve1.service|disabled| +2021-01-07 17:58:12 Output: dbus-org.freedesktop.timedate1.service|static| +2021-01-07 17:58:12 Output: dbus.service|static| +2021-01-07 17:58:12 Output: debug-shell.service|disabled| +2021-01-07 17:58:12 Output: dm-event.service|disabled| +2021-01-07 17:58:12 Output: emergency.service|static| +2021-01-07 17:58:12 Output: fail2ban.service|enabled| +2021-01-07 17:58:12 Output: fuse.service|masked| +2021-01-07 17:58:12 Output: getty-static.service|static| +2021-01-07 17:58:12 Output: getty@.service|enabled| +2021-01-07 17:58:12 Output: halt.service|masked| +2021-01-07 17:58:12 Output: hc-net-ifup@.service|static| +2021-01-07 17:58:12 Output: hc-net-scan.service|enabled| +2021-01-07 17:58:12 Output: hostname.service|masked| +2021-01-07 17:58:12 Output: hwclock.service|masked| +2021-01-07 17:58:12 Output: ifup@.service|static| +2021-01-07 17:58:12 Output: initrd-cleanup.service|static| +2021-01-07 17:58:12 Output: initrd-parse-etc.service|static| +2021-01-07 17:58:12 Output: initrd-switch-root.service|static| +2021-01-07 17:58:12 Output: initrd-udevadm-cleanup-db.service|static| +2021-01-07 17:58:12 Output: keyboard-setup.service|disabled| +2021-01-07 17:58:12 Output: killprocs.service|masked| +2021-01-07 17:58:12 Output: kmod-static-nodes.service|static| +2021-01-07 17:58:12 Output: kmod.service|static| +2021-01-07 17:58:12 Output: lvm2-lvmetad.service|disabled| +2021-01-07 17:58:12 Output: lvm2-lvmpolld.service|disabled| +2021-01-07 17:58:12 Output: lvm2-monitor.service|enabled| +2021-01-07 17:58:12 Output: lvm2-pvscan@.service|static| +2021-01-07 17:58:12 Output: lvm2.service|masked| +2021-01-07 17:58:12 Output: mdadm-shutdown.service|disabled| +2021-01-07 17:58:12 Output: module-init-tools.service|static| +2021-01-07 17:58:12 Output: motd-news.service|static| +2021-01-07 17:58:12 Output: motd.service|masked| +2021-01-07 17:58:12 Output: mountall-bootclean.service|masked| +2021-01-07 17:58:12 Output: mountall.service|masked| +2021-01-07 17:58:12 Output: mountdevsubfs.service|masked| +2021-01-07 17:58:12 Output: mountkernfs.service|masked| +2021-01-07 17:58:12 Output: mountnfs-bootclean.service|masked| +2021-01-07 17:58:12 Output: mountnfs.service|masked| +2021-01-07 17:58:12 Output: networking.service|enabled| +2021-01-07 17:58:12 Output: plymouth-halt.service|static| +2021-01-07 17:58:12 Output: plymouth-kexec.service|static| +2021-01-07 17:58:12 Output: plymouth-log.service|static| +2021-01-07 17:58:12 Output: plymouth-poweroff.service|static| +2021-01-07 17:58:12 Output: plymouth-quit-wait.service|static| +2021-01-07 17:58:12 Output: plymouth-quit.service|static| +2021-01-07 17:58:12 Output: plymouth-read-write.service|static| +2021-01-07 17:58:12 Output: plymouth-reboot.service|static| +2021-01-07 17:58:12 Output: plymouth-start.service|static| +2021-01-07 17:58:12 Output: plymouth-switch-root.service|static| +2021-01-07 17:58:12 Output: plymouth.service|static| +2021-01-07 17:58:12 Output: pollinate.service|enabled| +2021-01-07 17:58:12 Output: procps.service|static| +2021-01-07 17:58:12 Output: quotaon.service|static| +2021-01-07 17:58:12 Output: rc-local.service|static| +2021-01-07 17:58:12 Output: rc.local.service|static| +2021-01-07 17:58:12 Output: rc.service|masked| +2021-01-07 17:58:12 Output: rcS.service|masked| +2021-01-07 17:58:12 Output: reboot.service|masked| +2021-01-07 17:58:12 Output: rescue.service|static| +2021-01-07 17:58:12 Output: resolvconf.service|enabled| +2021-01-07 17:58:12 Output: rmnologin.service|masked| +2021-01-07 17:58:12 Output: rsync.service|disabled| +2021-01-07 17:58:12 Output: rsyslog.service|enabled| +2021-01-07 17:58:12 Output: sendsigs.service|masked| +2021-01-07 17:58:12 Output: serial-getty@.service|disabled| +2021-01-07 17:58:12 Output: setvtrgb.service|static| +2021-01-07 17:58:12 Output: sigpwr-container-shutdown.service|static| +2021-01-07 17:58:12 Output: single.service|masked| +2021-01-07 17:58:12 Output: ssh.service|enabled| +2021-01-07 17:58:12 Output: ssh@.service|static| +2021-01-07 17:58:12 Output: sshd.service|enabled| +2021-01-07 17:58:12 Output: stop-bootlogd-single.service|masked| +2021-01-07 17:58:12 Output: stop-bootlogd.service|masked| +2021-01-07 17:58:12 Output: syslog.service|enabled| +2021-01-07 17:58:12 Output: systemd-ask-password-console.service|static| +2021-01-07 17:58:12 Output: systemd-ask-password-plymouth.service|static| +2021-01-07 17:58:12 Output: systemd-ask-password-wall.service|static| +2021-01-07 17:58:12 Output: systemd-backlight@.service|static| +2021-01-07 17:58:12 Output: systemd-binfmt.service|static| +2021-01-07 17:58:12 Output: systemd-bootchart.service|disabled| +2021-01-07 17:58:12 Output: systemd-bus-proxyd.service|static| +2021-01-07 17:58:12 Output: systemd-exit.service|static| +2021-01-07 17:58:12 Output: systemd-fsck-root.service|static| +2021-01-07 17:58:12 Output: systemd-fsck@.service|static| +2021-01-07 17:58:12 Output: systemd-fsckd.service|static| +2021-01-07 17:58:12 Output: systemd-halt.service|static| +2021-01-07 17:58:12 Output: systemd-hibernate-resume@.service|static| +2021-01-07 17:58:12 Output: systemd-hibernate.service|static| +2021-01-07 17:58:12 Output: systemd-hostnamed.service|static| +2021-01-07 17:58:12 Output: systemd-hwdb-update.service|static| +2021-01-07 17:58:12 Output: systemd-hybrid-sleep.service|static| +2021-01-07 17:58:12 Output: systemd-initctl.service|static| +2021-01-07 17:58:12 Output: systemd-journal-flush.service|static| +2021-01-07 17:58:12 Output: systemd-journald.service|static| +2021-01-07 17:58:12 Output: systemd-kexec.service|static| +2021-01-07 17:58:12 Output: systemd-localed.service|static| +2021-01-07 17:58:12 Output: systemd-logind.service|static| +2021-01-07 17:58:12 Output: systemd-machine-id-commit.service|static| +2021-01-07 17:58:12 Output: systemd-modules-load.service|static| +2021-01-07 17:58:12 Output: systemd-networkd-resolvconf-update.service|static| +2021-01-07 17:58:12 Output: systemd-networkd-wait-online.service|disabled| +2021-01-07 17:58:12 Output: systemd-networkd.service|disabled| +2021-01-07 17:58:12 Output: systemd-poweroff.service|static| +2021-01-07 17:58:12 Output: systemd-quotacheck.service|static| +2021-01-07 17:58:12 Output: systemd-random-seed.service|static| +2021-01-07 17:58:12 Output: systemd-reboot.service|static| +2021-01-07 17:58:12 Output: systemd-remount-fs.service|static| +2021-01-07 17:58:12 Output: systemd-resolved.service|disabled| +2021-01-07 17:58:12 Output: systemd-rfkill.service|static| +2021-01-07 17:58:12 Output: systemd-suspend.service|static| +2021-01-07 17:58:12 Output: systemd-sysctl.service|static| +2021-01-07 17:58:12 Output: systemd-timedated.service|static| +2021-01-07 17:58:12 Output: systemd-timesyncd.service|enabled| +2021-01-07 17:58:12 Output: systemd-tmpfiles-clean.service|static| +2021-01-07 17:58:12 Output: systemd-tmpfiles-setup-dev.service|static| +2021-01-07 17:58:12 Output: systemd-tmpfiles-setup.service|static| +2021-01-07 17:58:12 Output: systemd-udev-settle.service|static| +2021-01-07 17:58:12 Output: systemd-udev-trigger.service|static| +2021-01-07 17:58:12 Output: systemd-udevd.service|static| +2021-01-07 17:58:12 Output: systemd-update-utmp-runlevel.service|static| +2021-01-07 17:58:12 Output: systemd-update-utmp.service|static| +2021-01-07 17:58:12 Output: systemd-user-sessions.service|static| +2021-01-07 17:58:12 Output: udev.service|static| +2021-01-07 17:58:12 Output: umountfs.service|masked| +2021-01-07 17:58:12 Output: umountnfs.service|masked| +2021-01-07 17:58:12 Output: umountroot.service|masked| +2021-01-07 17:58:12 Output: unattended-upgrades.service|enabled| +2021-01-07 17:58:12 Output: urandom.service|static| +2021-01-07 17:58:12 Output: ureadahead-stop.service|static| +2021-01-07 17:58:12 Output: ureadahead.service|enabled| +2021-01-07 17:58:12 Output: user@.service|static| +2021-01-07 17:58:12 Output: x11-common.service|masked| +2021-01-07 17:58:12 Output: -.slice|static| +2021-01-07 17:58:12 Output: machine.slice|static| +2021-01-07 17:58:12 Output: system.slice|static| +2021-01-07 17:58:12 Output: user.slice|static| +2021-01-07 17:58:12 Output: acpid.socket|enabled| +2021-01-07 17:58:12 Output: dbus.socket|static| +2021-01-07 17:58:12 Output: dm-event.socket|enabled| +2021-01-07 17:58:12 Output: lvm2-lvmetad.socket|enabled| +2021-01-07 17:58:12 Output: lvm2-lvmpolld.socket|enabled| +2021-01-07 17:58:12 Output: ssh.socket|disabled| +2021-01-07 17:58:12 Output: syslog.socket|static| +2021-01-07 17:58:12 Output: systemd-bus-proxyd.socket|static| +2021-01-07 17:58:12 Output: systemd-fsckd.socket|static| +2021-01-07 17:58:12 Output: systemd-initctl.socket|static| +2021-01-07 17:58:12 Output: systemd-journald-audit.socket|static| +2021-01-07 17:58:12 Output: systemd-journald-dev-log.socket|static| +2021-01-07 17:58:12 Output: systemd-journald.socket|static| +2021-01-07 17:58:12 Output: systemd-networkd.socket|disabled| +2021-01-07 17:58:12 Output: systemd-rfkill.socket|static| +2021-01-07 17:58:12 Output: systemd-udevd-control.socket|static| +2021-01-07 17:58:12 Output: systemd-udevd-kernel.socket|static| +2021-01-07 17:58:12 Output: basic.target|static| +2021-01-07 17:58:12 Output: bluetooth.target|static| +2021-01-07 17:58:12 Output: busnames.target|static| +2021-01-07 17:58:12 Output: cloud-config.target|static| +2021-01-07 17:58:12 Output: cloud-init.target|static| +2021-01-07 17:58:12 Output: cryptsetup-pre.target|static| +2021-01-07 17:58:12 Output: cryptsetup.target|static| +2021-01-07 17:58:12 Output: ctrl-alt-del.target|disabled| +2021-01-07 17:58:12 Output: default.target|static| +2021-01-07 17:58:12 Output: emergency.target|static| +2021-01-07 17:58:12 Output: exit.target|disabled| +2021-01-07 17:58:12 Output: final.target|static| +2021-01-07 17:58:12 Output: getty.target|static| +2021-01-07 17:58:12 Output: graphical.target|static| +2021-01-07 17:58:12 Output: halt.target|disabled| +2021-01-07 17:58:12 Output: hibernate.target|static| +2021-01-07 17:58:12 Output: hybrid-sleep.target|static| +2021-01-07 17:58:12 Output: initrd-fs.target|static| +2021-01-07 17:58:12 Output: initrd-root-fs.target|static| +2021-01-07 17:58:12 Output: initrd-switch-root.target|static| +2021-01-07 17:58:12 Output: initrd.target|static| +2021-01-07 17:58:12 Output: kexec.target|disabled| +2021-01-07 17:58:12 Output: local-fs-pre.target|static| +2021-01-07 17:58:12 Output: local-fs.target|static| +2021-01-07 17:58:12 Output: mail-transport-agent.target|static| +2021-01-07 17:58:12 Output: multi-user.target|static| +2021-01-07 17:58:12 Output: network-online.target|static| +2021-01-07 17:58:12 Output: network-pre.target|static| +2021-01-07 17:58:12 Output: network.target|static| +2021-01-07 17:58:12 Output: nss-lookup.target|static| +2021-01-07 17:58:12 Output: nss-user-lookup.target|static| +2021-01-07 17:58:12 Output: paths.target|static| +2021-01-07 17:58:12 Output: poweroff.target|disabled| +2021-01-07 17:58:12 Output: printer.target|static| +2021-01-07 17:58:12 Output: reboot.target|disabled| +2021-01-07 17:58:12 Output: remote-fs-pre.target|static| +2021-01-07 17:58:12 Output: remote-fs.target|enabled| +2021-01-07 17:58:12 Output: rescue.target|disabled| +2021-01-07 17:58:12 Output: rpcbind.target|static| +2021-01-07 17:58:12 Output: runlevel0.target|disabled| +2021-01-07 17:58:12 Output: runlevel1.target|disabled| +2021-01-07 17:58:12 Output: runlevel2.target|static| +2021-01-07 17:58:12 Output: runlevel3.target|static| +2021-01-07 17:58:12 Output: runlevel4.target|static| +2021-01-07 17:58:12 Output: runlevel5.target|static| +2021-01-07 17:58:12 Output: runlevel6.target|disabled| +2021-01-07 17:58:12 Output: shutdown.target|static| +2021-01-07 17:58:12 Output: sigpwr.target|static| +2021-01-07 17:58:12 Output: sleep.target|static| +2021-01-07 17:58:12 Output: slices.target|static| +2021-01-07 17:58:12 Output: smartcard.target|static| +2021-01-07 17:58:12 Output: sockets.target|static| +2021-01-07 17:58:12 Output: sound.target|static| +2021-01-07 17:58:12 Output: suspend.target|static| +2021-01-07 17:58:12 Output: swap.target|static| +2021-01-07 17:58:12 Output: sysinit.target|static| +2021-01-07 17:58:12 Output: system-update.target|static| +2021-01-07 17:58:12 Output: time-sync.target|static| +2021-01-07 17:58:12 Output: timers.target|static| +2021-01-07 17:58:12 Output: umount.target|static| +2021-01-07 17:58:12 Output: apt-daily-upgrade.timer|enabled| +2021-01-07 17:58:12 Output: apt-daily.timer|enabled| +2021-01-07 17:58:12 Output: motd-news.timer|enabled| +2021-01-07 17:58:12 Output: systemd-tmpfiles-clean.timer|static| +2021-01-07 17:58:12 Output: ureadahead-stop.timer|static| +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3806 (Gather failed systemd units) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3808 (Gather systemd machine ID) +2021-01-07 17:58:12 Result: found machine ID: 69729f16b49d4ddd97099d6ef60261e2 +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3810 (Query main systemd binaries) +2021-01-07 17:58:12 Result: no binaries found in /usr/lib/systemd +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3812 (Query journal for boot related information) +2021-01-07 17:58:12 Output: number of boots listed in journal is 1 +2021-01-07 17:58:12 Output: oldest boot date in journal is 2021-01-07 +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3814 (Verify journal integrity) +2021-01-07 17:58:12 Result: systemd journal has no errors +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3816 (Query journal for boot related information) +2021-01-07 17:58:12 Result: journals are 4.8M in size +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3818 (Query journal meta data) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3820 (Check for journal FSS configuration) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3830 (Query systemd status) +2021-01-07 17:58:12 Result: found systemd status = running +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3832 (Query systemd status for processes which can not be found) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3834 (Collect service units which can not be found in systemd) +2021-01-07 17:58:12 Result: found one or more services with faulty state +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) apparmor.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) auditd.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) console-screen.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) display-manager.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) firewalld.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) hv_kvp_daemon.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) iptables.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) kbd.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) lvm2-activation.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) NetworkManager.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) snapd.seeded.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) sshd-keygen.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) systemd-sysusers.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) systemd-update-done.service +2021-01-07 17:58:12 Result: service seems to be faulty (not-found) systemd-vconsole-setup.service +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3856 (Check if systemd-coredump is used) +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Performing test ID PLGN-3860 (Query coredumps from journals since Yesterday) +2021-01-07 17:58:12 Result: found no coredumps +2021-01-07 17:58:12 ==== +2021-01-07 17:58:12 Result: systemd plugin (phase 1) finished +2021-01-07 17:58:12 -- +2021-01-07 17:58:12 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:58:12 Result: Plugins phase 1 finished +2021-01-07 17:58:12 ==== +2021-01-07 17:58:13 Info: using hardware address 96:00:00:8b:fc:bd to create ID +2021-01-07 17:58:13 Result: Found HostID: 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:58:13 Info: creating a HostID (version 2) +2021-01-07 17:58:13 Result: found file ssh_host_ed25519_key.pub in /etc/ssh, using that to create host identifier +2021-01-07 17:58:13 Using SSH public key to create the second host identifier +2021-01-07 17:58:13 Hash (hostname): 416e24601be51bc2d559991c1bad1cf3454cb2fcb9a22233aa9d05c6bccbd29d +2021-01-07 17:58:13 Hash (ssh or machineid): 7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +2021-01-07 17:58:13 Info: found valid HostID 8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +2021-01-07 17:58:13 Info: no machine ID found +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Info: perform tests from all categories +2021-01-07 17:58:13 Security check: file is normal +2021-01-07 17:58:13 Checking permissions of /root/scans/lynis/include/tests_boot_services +2021-01-07 17:58:13 File permissions are OK +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Action: Performing tests from category: Boot and services +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5102 (Check for AIX boot device) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5104 (Determine service manager) +2021-01-07 17:58:13 Result: cmdline found = /sbin/init +2021-01-07 17:58:13 Result: file on disk = /sbin/init +2021-01-07 17:58:13 Action: checking symlink for file /sbin/init +2021-01-07 17:58:13 Note: Using real readlink binary to determine symlink on /sbin/init +2021-01-07 17:58:13 Result: readlink shows /lib/systemd/systemd as output +2021-01-07 17:58:13 Result: symlink found, pointing to file /lib/systemd/systemd +2021-01-07 17:58:13 Found: systemd +2021-01-07 17:58:13 Result: service manager found = systemd +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5106 (Check EFI boot file on Mac OS X/macOS) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5108 (Check Syslinux as bootloader) +2021-01-07 17:58:13 Test: checking if file /boot/syslinux/syslinux.cfg exists +2021-01-07 17:58:13 Result: file /boot/syslinux/syslinux.cfg NOT found +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5109 (Check rEFInd as bootloader) +2021-01-07 17:58:13 Test: checking if file /boot/refind_linux.conf exists +2021-01-07 17:58:13 Result: file /boot/refind_linux.conf NOT found +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5116 (Check if system is booted in UEFI mode) +2021-01-07 17:58:13 Test: checking if UEFI is used +2021-01-07 17:58:13 Result: UEFI not used, can't find /sys/firmware/efi directory +2021-01-07 17:58:13 Test: determine if Secure Boot is used +2021-01-07 17:58:13 Result: system not booted with Secure Boot (no SecureBoot file found) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5117 (Check for systemd-boot bootloader presence) +2021-01-07 17:58:13 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5121 (Check for GRUB boot loader presence) +2021-01-07 17:58:13 Test: Checking for presence GRUB conf file (/boot/grub/grub.conf or /boot/grub/menu.lst) +2021-01-07 17:58:13 Result: found GRUB2 configuration file (/boot/grub/grub.cfg) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5122 (Check for GRUB boot password) +2021-01-07 17:58:13 Found file /boot/grub/grub.cfg, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /boot/grub/grub.cfg (escaped: /boot/grub/grub.cfg) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /boot/grub/grub.cfg is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Result: File '/boot/grub/custom.cfg' does not exist +2021-01-07 17:58:13 Found file /etc/grub.d/00_header, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/00_header (escaped: /etc/grub.d/00_header) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/00_header is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/05_debian_theme, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/05_debian_theme (escaped: /etc/grub.d/05_debian_theme) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/05_debian_theme is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/10_linux, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/10_linux (escaped: /etc/grub.d/10_linux) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/10_linux is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/30_os-prober, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/30_os-prober (escaped: /etc/grub.d/30_os-prober) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/30_os-prober is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/40_custom, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/40_custom (escaped: /etc/grub.d/40_custom) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/40_custom is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/41_custom, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/41_custom (escaped: /etc/grub.d/41_custom) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/41_custom is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/20_linux_xen, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/20_linux_xen (escaped: /etc/grub.d/20_linux_xen) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/20_linux_xen is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Found file /etc/grub.d/30_uefi-firmware, proceeding with tests. +2021-01-07 17:58:13 Test: check if we can access /etc/grub.d/30_uefi-firmware (escaped: /etc/grub.d/30_uefi-firmware) +2021-01-07 17:58:13 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:13 Result: file /etc/grub.d/30_uefi-firmware is readable (or directory accessible). +2021-01-07 17:58:13 Result: did not find hashed password line in this file +2021-01-07 17:58:13 Result: Didn't find hashed password line in GRUB configuration +2021-01-07 17:58:13 Suggestion: Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password) [test:BOOT-5122] [details:-] [solution:-] +2021-01-07 17:58:13 Hardening: assigned partial number of hardening points (0 of 2). Currently having 0 points (out of 2) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5124 (Check for FreeBSD boot loader presence) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5261 (Check for DragonFly boot loader presence) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5126 (Check for NetBSD boot loader presence) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5139 (Check for LILO boot loader presence) +2021-01-07 17:58:13 Test: checking for presence LILO configuration file +2021-01-07 17:58:13 Result: LILO configuration file not found +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5142 (Check SPARC Improved boot loader (SILO)) +2021-01-07 17:58:13 Result: no SILO configuration file found. +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5155 (Check for YABOOT boot loader configuration file) +2021-01-07 17:58:13 Test: Check for /etc/yaboot.conf +2021-01-07 17:58:13 Result: no YABOOT configuration file found. +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5159 (Check for OpenBSD boot loader presence) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5165 (Check for FreeBSD boot services) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5170 (Check for Solaris boot daemons) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5177 (Check for Linux boot and running services) +2021-01-07 17:58:13 Test: checking presence systemctl binary +2021-01-07 17:58:13 Result: systemctl binary found, trying that to discover information +2021-01-07 17:58:13 Searching for running services (systemctl services only) +2021-01-07 17:58:13 Found running service: acpid +2021-01-07 17:58:13 Found running service: cron +2021-01-07 17:58:13 Found running service: dbus +2021-01-07 17:58:13 Found running service: fail2ban +2021-01-07 17:58:13 Found running service: getty@tty1 +2021-01-07 17:58:13 Found running service: lvm2-lvmetad +2021-01-07 17:58:13 Found running service: mdadm +2021-01-07 17:58:13 Found running service: portsentry +2021-01-07 17:58:13 Found running service: qemu-guest-agent +2021-01-07 17:58:13 Found running service: rsyslog +2021-01-07 17:58:13 Found running service: sendmail +2021-01-07 17:58:13 Found running service: serial-getty@ttyS0 +2021-01-07 17:58:13 Found running service: ssh +2021-01-07 17:58:13 Found running service: systemd-journald +2021-01-07 17:58:13 Found running service: systemd-logind +2021-01-07 17:58:13 Found running service: systemd-resolved +2021-01-07 17:58:13 Found running service: systemd-timesyncd +2021-01-07 17:58:13 Found running service: systemd-udevd +2021-01-07 17:58:13 Found running service: unattended-upgrades +2021-01-07 17:58:13 Found running service: user@0 +2021-01-07 17:58:13 Hint: Run systemctl --full --type=service to see all services +2021-01-07 17:58:13 Result: Found 20 running services +2021-01-07 17:58:13 Searching for enabled services (systemctl services only) +2021-01-07 17:58:13 Found enabled service at boot: autovt@ +2021-01-07 17:58:13 Found enabled service at boot: cloud-config +2021-01-07 17:58:13 Found enabled service at boot: cloud-final +2021-01-07 17:58:13 Found enabled service at boot: cloud-init-local +2021-01-07 17:58:13 Found enabled service at boot: cloud-init +2021-01-07 17:58:13 Found enabled service at boot: cron +2021-01-07 17:58:13 Found enabled service at boot: fail2ban +2021-01-07 17:58:13 Found enabled service at boot: getty@ +2021-01-07 17:58:13 Found enabled service at boot: hc-net-scan +2021-01-07 17:58:13 Found enabled service at boot: lvm2-monitor +2021-01-07 17:58:13 Found enabled service at boot: networking +2021-01-07 17:58:13 Found enabled service at boot: pollinate +2021-01-07 17:58:13 Found enabled service at boot: resolvconf +2021-01-07 17:58:13 Found enabled service at boot: rsyslog +2021-01-07 17:58:13 Found enabled service at boot: ssh +2021-01-07 17:58:13 Found enabled service at boot: sshd +2021-01-07 17:58:13 Found enabled service at boot: syslog +2021-01-07 17:58:13 Found enabled service at boot: systemd-timesyncd +2021-01-07 17:58:13 Found enabled service at boot: unattended-upgrades +2021-01-07 17:58:13 Found enabled service at boot: ureadahead +2021-01-07 17:58:13 Hint: Run systemctl list-unit-files --type=service to see all services +2021-01-07 17:58:13 Result: Found 20 enabled services +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5180 (Check for Linux boot services (Debian style)) +2021-01-07 17:58:13 Result: found runlevel 5 +2021-01-07 17:58:13 Result: skipping further actions +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5184 (Check permissions for boot files/scripts) +2021-01-07 17:58:13 Result: checking /etc/init.d scripts for writable bit +2021-01-07 17:58:13 Test: checking if directory /etc/init.d exists +2021-01-07 17:58:13 Result: directory /etc/init.d found +2021-01-07 17:58:13 Test: checking for available files in directory +2021-01-07 17:58:13 Result: found files in directory, checking permissions now +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/.depend.boot +2021-01-07 17:58:13 Result: good, file /etc/init.d/.depend.boot not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/.depend.start +2021-01-07 17:58:13 Result: good, file /etc/init.d/.depend.start not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/.depend.stop +2021-01-07 17:58:13 Result: good, file /etc/init.d/.depend.stop not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/README +2021-01-07 17:58:13 Result: good, file /etc/init.d/README not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/acct +2021-01-07 17:58:13 Result: good, file /etc/init.d/acct not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/acpid +2021-01-07 17:58:13 Result: good, file /etc/init.d/acpid not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/bootmisc.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/bootmisc.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/checkfs.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/checkfs.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/checkroot-bootclean.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/checkroot-bootclean.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/checkroot.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/checkroot.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/console-setup +2021-01-07 17:58:13 Result: good, file /etc/init.d/console-setup not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/cron +2021-01-07 17:58:13 Result: good, file /etc/init.d/cron not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/cryptdisks +2021-01-07 17:58:13 Result: good, file /etc/init.d/cryptdisks not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/cryptdisks-early +2021-01-07 17:58:13 Result: good, file /etc/init.d/cryptdisks-early not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/dbus +2021-01-07 17:58:13 Result: good, file /etc/init.d/dbus not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/fail2ban +2021-01-07 17:58:13 Result: good, file /etc/init.d/fail2ban not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/grub-common +2021-01-07 17:58:13 Result: good, file /etc/init.d/grub-common not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/halt +2021-01-07 17:58:13 Result: good, file /etc/init.d/halt not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/hostname.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/hostname.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/hwclock.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/hwclock.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/keyboard-setup +2021-01-07 17:58:13 Result: good, file /etc/init.d/keyboard-setup not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/killprocs +2021-01-07 17:58:13 Result: good, file /etc/init.d/killprocs not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/kmod +2021-01-07 17:58:13 Result: good, file /etc/init.d/kmod not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/lvm2 +2021-01-07 17:58:13 Result: good, file /etc/init.d/lvm2 not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/lvm2-lvmetad +2021-01-07 17:58:13 Result: good, file /etc/init.d/lvm2-lvmetad not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/lvm2-lvmpolld +2021-01-07 17:58:13 Result: good, file /etc/init.d/lvm2-lvmpolld not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mdadm +2021-01-07 17:58:13 Result: good, file /etc/init.d/mdadm not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mdadm-waitidle +2021-01-07 17:58:13 Result: good, file /etc/init.d/mdadm-waitidle not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountall-bootclean.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountall-bootclean.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountall.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountall.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountdevsubfs.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountdevsubfs.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountkernfs.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountkernfs.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountnfs-bootclean.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountnfs-bootclean.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/mountnfs.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/mountnfs.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/networking +2021-01-07 17:58:13 Result: good, file /etc/init.d/networking not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/ondemand +2021-01-07 17:58:13 Result: good, file /etc/init.d/ondemand not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/plymouth +2021-01-07 17:58:13 Result: good, file /etc/init.d/plymouth not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/plymouth-log +2021-01-07 17:58:13 Result: good, file /etc/init.d/plymouth-log not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/portsentry +2021-01-07 17:58:13 Result: good, file /etc/init.d/portsentry not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/procps +2021-01-07 17:58:13 Result: good, file /etc/init.d/procps not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/qemu-guest-agent +2021-01-07 17:58:13 Result: good, file /etc/init.d/qemu-guest-agent not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/rc +2021-01-07 17:58:13 Result: good, file /etc/init.d/rc not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/rc.local +2021-01-07 17:58:13 Result: good, file /etc/init.d/rc.local not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/rcS +2021-01-07 17:58:13 Result: good, file /etc/init.d/rcS not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/reboot +2021-01-07 17:58:13 Result: good, file /etc/init.d/reboot not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/resolvconf +2021-01-07 17:58:13 Result: good, file /etc/init.d/resolvconf not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/rsync +2021-01-07 17:58:13 Result: good, file /etc/init.d/rsync not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/rsyslog +2021-01-07 17:58:13 Result: good, file /etc/init.d/rsyslog not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/sendmail +2021-01-07 17:58:13 Result: good, file /etc/init.d/sendmail not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/sendsigs +2021-01-07 17:58:13 Result: good, file /etc/init.d/sendsigs not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/single +2021-01-07 17:58:13 Result: good, file /etc/init.d/single not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/skeleton +2021-01-07 17:58:13 Result: good, file /etc/init.d/skeleton not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/ssh +2021-01-07 17:58:13 Result: good, file /etc/init.d/ssh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/udev +2021-01-07 17:58:13 Result: good, file /etc/init.d/udev not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/umountfs +2021-01-07 17:58:13 Result: good, file /etc/init.d/umountfs not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/umountnfs.sh +2021-01-07 17:58:13 Result: good, file /etc/init.d/umountnfs.sh not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/umountroot +2021-01-07 17:58:13 Result: good, file /etc/init.d/umountroot not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/unattended-upgrades +2021-01-07 17:58:13 Result: good, file /etc/init.d/unattended-upgrades not world writable +2021-01-07 17:58:13 Test: checking permissions of file /etc/init.d/urandom +2021-01-07 17:58:13 Result: good, file /etc/init.d/urandom not world writable +2021-01-07 17:58:13 Test: checking if directory /etc/rc.d exists +2021-01-07 17:58:13 Result: directory /etc/rc.d not found. Skipping.. +2021-01-07 17:58:13 Test: checking if directory /etc/rcS.d exists +2021-01-07 17:58:13 Result: directory /etc/rcS.d found +2021-01-07 17:58:13 Test: checking for available files in directory +2021-01-07 17:58:13 Result: found files in directory, checking permissions now +2021-01-07 17:58:13 Test: checking permissions of file /etc/rcS.d/README +2021-01-07 17:58:13 Result: good, file /etc/rcS.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc0.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc0.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc1.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc1.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc2.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc2.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc3.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc3.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc4.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc4.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc5.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc5.d/README not world writable +2021-01-07 17:58:13 Test: Checking /etc/rc6.d scripts for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc6.d/README not world writable +2021-01-07 17:58:13 Action: checking symlink for file /etc/rc.local +2021-01-07 17:58:13 Result: file /etc/rc.local is not a symlink +2021-01-07 17:58:13 Test: Checking /etc/rc.local file for writable bit +2021-01-07 17:58:13 Result: good, file /etc/rc.local not world writable +2021-01-07 17:58:13 Hardening: assigned maximum number of hardening points for this item (3). Currently having 3 points (out of 5) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5202 (Check uptime of system) +2021-01-07 17:58:13 Uptime (in seconds): 995 +2021-01-07 17:58:13 Uptime (in days): 0 +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID BOOT-5260 (Check single user mode for systemd) +2021-01-07 17:58:13 Test: Searching /usr/lib/systemd/system/rescue.service +2021-01-07 17:58:13 Result: file /usr/lib/systemd/system/rescue.service does not exist +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5262 (Check for OpenBSD boot daemons) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5263 (Check permissions for boot files/scripts) +2021-01-07 17:58:13 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Skipped test BOOT-5264 (Run systemd-analyze security) +2021-01-07 17:58:13 Reason to skip: systemd-analyze too old (v229), need at least v240 +2021-01-07 17:58:13 Security check: file is normal +2021-01-07 17:58:13 Checking permissions of /root/scans/lynis/include/tests_kernel +2021-01-07 17:58:13 File permissions are OK +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Action: Performing tests from category: Kernel +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5622 (Determine Linux default run level) +2021-01-07 17:58:13 Test: Checking for systemd default.target +2021-01-07 17:58:13 Result: no systemd found, so trying inittab +2021-01-07 17:58:13 Test: Checking /etc/inittab +2021-01-07 17:58:13 Result: file /etc/inittab not found +2021-01-07 17:58:13 Test: Checking run level with who -r, for Debian based systems +2021-01-07 17:58:13 Result: Found default run level '5' +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5677 (Check CPU options and support) +2021-01-07 17:58:13 Test: Checking /proc/cpuinfo +2021-01-07 17:58:13 Result: found /proc/cpuinfo +2021-01-07 17:58:13 Test: Checking CPU options (XD/NX/PAE) +2021-01-07 17:58:13 PAE: Yes +2021-01-07 17:58:13 NX: Yes +2021-01-07 17:58:13 Result: PAE or No eXecute option(s) both found +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5695 (Determine Linux kernel version and release number) +2021-01-07 17:58:13 Result: found kernel release 4.4.0-197-generic +2021-01-07 17:58:13 Result: found kernel version #229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5723 (Determining if Linux kernel is monolithic) +2021-01-07 17:58:13 Test: checking if kernel is monolithic or modular +2021-01-07 17:58:13 Result: Found modular kernel +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5726 (Checking Linux loaded kernel modules) +2021-01-07 17:58:13 Loaded modules according lsmod: +2021-01-07 17:58:13 Loaded module: ablk_helper +2021-01-07 17:58:13 Loaded module: aes_x86_64 +2021-01-07 17:58:13 Loaded module: aesni_intel +2021-01-07 17:58:13 Loaded module: ahci +2021-01-07 17:58:13 Loaded module: async_memcpy +2021-01-07 17:58:13 Loaded module: async_pq +2021-01-07 17:58:13 Loaded module: async_raid6_recov +2021-01-07 17:58:13 Loaded module: async_tx +2021-01-07 17:58:13 Loaded module: async_xor +2021-01-07 17:58:13 Loaded module: autofs4 +2021-01-07 17:58:13 Loaded module: binfmt_misc +2021-01-07 17:58:13 Loaded module: btrfs +2021-01-07 17:58:13 Loaded module: crc32_pclmul +2021-01-07 17:58:13 Loaded module: crct10dif_pclmul +2021-01-07 17:58:13 Loaded module: cryptd +2021-01-07 17:58:13 Loaded module: gf128mul +2021-01-07 17:58:13 Loaded module: ghash_clmulni_intel +2021-01-07 17:58:13 Loaded module: glue_helper +2021-01-07 17:58:13 Loaded module: hid +2021-01-07 17:58:13 Loaded module: hid_generic +2021-01-07 17:58:13 Loaded module: inet_diag +2021-01-07 17:58:13 Loaded module: input_leds +2021-01-07 17:58:13 Loaded module: ip_tables +2021-01-07 17:58:13 Loaded module: ipt_REJECT +2021-01-07 17:58:13 Loaded module: iptable_filter +2021-01-07 17:58:13 Loaded module: iptable_nat +2021-01-07 17:58:13 Loaded module: joydev +2021-01-07 17:58:13 Loaded module: libahci +2021-01-07 17:58:13 Loaded module: libcrc32c +2021-01-07 17:58:13 Loaded module: linear +2021-01-07 17:58:13 Loaded module: lrw +2021-01-07 17:58:13 Loaded module: multipath +2021-01-07 17:58:13 Loaded module: nf_conntrack +2021-01-07 17:58:13 Loaded module: nf_conntrack_ipv4 +2021-01-07 17:58:13 Loaded module: nf_defrag_ipv4 +2021-01-07 17:58:13 Loaded module: nf_nat +2021-01-07 17:58:13 Loaded module: nf_nat_ipv4 +2021-01-07 17:58:13 Loaded module: nf_reject_ipv4 +2021-01-07 17:58:13 Loaded module: psmouse +2021-01-07 17:58:13 Loaded module: raid0 +2021-01-07 17:58:13 Loaded module: raid1 +2021-01-07 17:58:13 Loaded module: raid10 +2021-01-07 17:58:13 Loaded module: raid456 +2021-01-07 17:58:13 Loaded module: raid6_pq +2021-01-07 17:58:13 Loaded module: serio_raw +2021-01-07 17:58:13 Loaded module: tcp_diag +2021-01-07 17:58:13 Loaded module: udp_diag +2021-01-07 17:58:13 Loaded module: usbhid +2021-01-07 17:58:13 Loaded module: virtio_rng +2021-01-07 17:58:13 Loaded module: virtio_scsi +2021-01-07 17:58:13 Loaded module: x_tables +2021-01-07 17:58:13 Loaded module: xor +2021-01-07 17:58:13 Loaded module: xt_multiport +2021-01-07 17:58:13 ==== +2021-01-07 17:58:13 Performing test ID KRNL-5728 (Checking Linux kernel config) +2021-01-07 17:58:13 Result: found config (/boot/config-4.4.0-197-generic) +2021-01-07 17:58:13 ==== +2021-01-07 17:58:14 Performing test ID KRNL-5730 (Checking disk I/O kernel scheduler) +2021-01-07 17:58:14 Test: Checking the default I/O kernel scheduler +2021-01-07 17:58:14 Result: found IO scheduler 'deadline' +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test KRNL-5745 (Checking FreeBSD loaded kernel modules) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test KRNL-5831 (Checking DragonFly loaded kernel modules) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test KRNL-5770 (Checking active kernel modules) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID KRNL-5788 (Checking availability new Linux kernel) +2021-01-07 17:58:14 Test: Searching apt-cache, to determine if a newer kernel is available +2021-01-07 17:58:14 Result: found /usr/bin/apt-cache +2021-01-07 17:58:14 Test: checking presence of /vmlinuz or /boot/vmlinuz +2021-01-07 17:58:14 Result: found /vmlinuz +2021-01-07 17:58:14 Test: checking readlink location of /vmlinuz +2021-01-07 17:58:14 Output: readlink reported file /boot/vmlinuz-4.4.0-198-generic +2021-01-07 17:58:14 Test: checking package from dpkg -S +2021-01-07 17:58:14 Output: dpkg -S reported package linux-image-4.4.0-198-generic +2021-01-07 17:58:14 Test: Using apt-cache policy to determine if there is an update available +2021-01-07 17:58:14 Kernel installed: 4.4.0-198.230 +2021-01-07 17:58:14 Kernel candidate: 4.4.0-198.230 +2021-01-07 17:58:14 Result: no kernel update available +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID KRNL-5820 (Checking core dumps configuration) +2021-01-07 17:58:14 Test: Checking presence of systemd +2021-01-07 17:58:14 Result: systemd is present on this system +2021-01-07 17:58:14 Test: Checking if core dumps are disabled in /etc/systemd/coredump.conf and /etc/systemd/coredump.conf.d/*.conf +2021-01-07 17:58:14 Result: core dumps are not disabled in systemd configuration. Didn't find settings 'ProcessSizeMax=0' and 'Storage=none' +2021-01-07 17:58:14 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 6) +2021-01-07 17:58:14 Test: Checking presence /etc/profile +2021-01-07 17:58:14 Test: Checking if 'ulimit -c 0' exists in /etc/profile or /etc/profile.d/*.sh +2021-01-07 17:58:14 Result: core dumps are not disabled in /etc/profile or /etc/profile.d/*.sh config files. Didn't find setting 'ulimit -c 0' +2021-01-07 17:58:14 Hardening: assigned partial number of hardening points (0 of 1). Currently having 3 points (out of 7) +2021-01-07 17:58:14 Test: Checking presence /etc/security/limits.conf +2021-01-07 17:58:14 Result: file /etc/security/limits.conf exists +2021-01-07 17:58:14 Test: Checking if core dumps are disabled in /etc/security/limits.conf and /etc/security/limits.d/* +2021-01-07 17:58:14 Result: core dumps are hard disabled +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (3). Currently having 6 points (out of 10) +2021-01-07 17:58:14 Test: Checking sysctl value of fs.suid_dumpable +2021-01-07 17:58:14 Result: value 0 found +2021-01-07 17:58:14 Result: found default option (0), no execute only program or program with changed privilege levels can dump +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (1). Currently having 7 points (out of 11) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel) +2021-01-07 17:58:14 Test: Checking presence /var/run/reboot-required.pkgs +2021-01-07 17:58:14 Result: file /var/run/reboot-required.pkgs not found +2021-01-07 17:58:14 Result: /boot exists, performing more tests from here +2021-01-07 17:58:14 Result: found /boot/vmlinuz-4.4.0-198-generic +2021-01-07 17:58:14 Result: version derived from file name is '4.4.0-198-generic' +2021-01-07 17:58:14 Result: found version 4.4.0-198-generic +2021-01-07 17:58:14 Result: active kernel version 4.4.0-197-generic +2021-01-07 17:58:14 Result: reboot needed, as there is a difference between active kernel and the one on disk +2021-01-07 17:58:14 Result: /var/cache/apt/archives/ does not exist +2021-01-07 17:58:14 Warning: Reboot of system is most likely needed [test:KRNL-5830] [details:] [solution:text:reboot] +2021-01-07 17:58:14 Hardening: assigned partial number of hardening points (0 of 5). Currently having 7 points (out of 16) +2021-01-07 17:58:14 Security check: file is normal +2021-01-07 17:58:14 Checking permissions of /root/scans/lynis/include/tests_memory_processes +2021-01-07 17:58:14 File permissions are OK +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Action: Performing tests from category: Memory and Processes +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID PROC-3602 (Checking /proc/meminfo for memory details) +2021-01-07 17:58:14 Result: found /proc/meminfo +2021-01-07 17:58:14 Result: Found 1998680 kB memory +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test PROC-3604 (Query prtconf for memory details) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID PROC-3612 (Check dead or zombie processes) +2021-01-07 17:58:14 Result: no zombie processes found +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID PROC-3614 (Check heavy IO waiting based processes) +2021-01-07 17:58:14 Result: No processes were waiting for IO requests to be handled first +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID PROC-3802 (Check presence of prelink tooling) +2021-01-07 17:58:14 Result: prelink package is NOT installed +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (3). Currently having 10 points (out of 19) +2021-01-07 17:58:14 Security check: file is normal +2021-01-07 17:58:14 Checking permissions of /root/scans/lynis/include/tests_authentication +2021-01-07 17:58:14 File permissions are OK +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Action: Performing tests from category: Users, Groups and Authentication +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9204 (Check users with an UID of zero) +2021-01-07 17:58:14 Test: Searching accounts with UID 0 +2021-01-07 17:58:14 Result: No accounts found with UID 0 other than root. +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9208 (Check non-unique accounts in passwd file) +2021-01-07 17:58:14 Test: Checking for non-unique accounts +2021-01-07 17:58:14 Result: all accounts found in /etc/passwd are unique +2021-01-07 17:58:14 Remarks: Non unique UIDs can be a risk for the system or part of a configuration mistake +2021-01-07 17:58:14 Prerequisite test: /usr/sbin/chkgrp +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test AUTH-9212 (Test group file) +2021-01-07 17:58:14 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9216 (Check group and shadow group files) +2021-01-07 17:58:14 Test: Checking for grpck binary output +2021-01-07 17:58:14 Result: grpck binary didn't find any errors in the group files +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test AUTH-9218 (Check login shells for passwordless accounts) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (DragonFly FreeBSD NetBSD OpenBSD only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9222 (Check unique groups (IDs)) +2021-01-07 17:58:14 Test: Checking for non unique group ID's in /etc/group +2021-01-07 17:58:14 Result: All group ID's are unique +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9226 (Check unique group names) +2021-01-07 17:58:14 Test: Checking for non unique group names in /etc/group +2021-01-07 17:58:14 Result: All group names are unique +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9228 (Check password file consistency with pwck) +2021-01-07 17:58:14 Test: Checking password file consistency (pwck) +2021-01-07 17:58:14 Result: pwck check didn't find any problems +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (2). Currently having 12 points (out of 21) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9229 (Check password hashing methods) +2021-01-07 17:58:14 Test: Checking password hashing methods +2021-01-07 17:58:14 Result: no poor password hashing methods found +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (2). Currently having 14 points (out of 23) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9230 (Check password hashing rounds) +2021-01-07 17:58:14 Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs +2021-01-07 17:58:14 Result: number of password hashing rounds is not configured +2021-01-07 17:58:14 Suggestion: Configure password hashing rounds in /etc/login.defs [test:AUTH-9230] [details:-] [solution:-] +2021-01-07 17:58:14 Hardening: assigned partial number of hardening points (0 of 2). Currently having 14 points (out of 25) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9234 (Query user accounts) +2021-01-07 17:58:14 Test: Read system users (including root user) from password database (e.g. /etc/passwd) +2021-01-07 17:58:14 Result: found minimal user id specified: 1000 +2021-01-07 17:58:14 Linux real users output (ID = 0, or 1000+, but not 65534): +2021-01-07 17:58:14 Real user: root,0 +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9240 (Query NIS+ authentication support) +2021-01-07 17:58:14 Result: NIS+ authentication not enabled +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9242 (Query NIS authentication support) +2021-01-07 17:58:14 Result: NIS authentication not enabled +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9250 (Checking sudoers file) +2021-01-07 17:58:14 Test: checking presence /etc/sudoers +2021-01-07 17:58:14 Result: found file (/etc/sudoers) +2021-01-07 17:58:14 Test: checking presence /usr/local/etc/sudoers +2021-01-07 17:58:14 Result: file /usr/local/etc/sudoers not found +2021-01-07 17:58:14 Test: checking presence /usr/pkg/etc/sudoers +2021-01-07 17:58:14 Result: file /usr/pkg/etc/sudoers not found +2021-01-07 17:58:14 Result: sudoers file found (/etc/sudoers) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9252 (Check ownership and permissions for sudo configuration files) +2021-01-07 17:58:14 Test: checking drop-in directory (/etc/sudoers.d) +2021-01-07 17:58:14 Result: Found directory permissions: rwxr-x--- and owner UID GID: 00 +2021-01-07 17:58:14 Result: directory /etc/sudoers.d permissions OK +2021-01-07 17:58:14 Result: directory /etc/sudoers.d ownership OK +2021-01-07 17:58:14 Test: checking file (/etc/sudoers) +2021-01-07 17:58:14 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:58:14 Result: file /etc/sudoers permissions OK +2021-01-07 17:58:14 Result: file /etc/sudoers ownership OK +2021-01-07 17:58:14 Test: checking file (/etc/sudoers.d/README) +2021-01-07 17:58:14 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:58:14 Result: file /etc/sudoers.d/README permissions OK +2021-01-07 17:58:14 Result: file /etc/sudoers.d/README ownership OK +2021-01-07 17:58:14 Test: checking file (/etc/sudoers.d/90-cloud-init-users) +2021-01-07 17:58:14 Result: Found file permissions: r--r----- and owner UID GID: 00 +2021-01-07 17:58:14 Result: file /etc/sudoers.d/90-cloud-init-users permissions OK +2021-01-07 17:58:14 Result: file /etc/sudoers.d/90-cloud-init-users ownership OK +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Skipped test AUTH-9254 (Solaris passwordless accounts) +2021-01-07 17:58:14 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9262 (Checking presence password strength testing tools (PAM)) +2021-01-07 17:58:14 Searching PAM password testing modules (cracklib, passwdqc, pwquality) +2021-01-07 17:58:14 Result: found pam_cracklib.so (crack library PAM) in /lib/x86_64-linux-gnu/security +2021-01-07 17:58:14 Result: pam_cracklib.so found +2021-01-07 17:58:14 Result: pam_passwdqc.so NOT found (passwd quality control PAM) +2021-01-07 17:58:14 Result: pam_pwquality.so NOT found (pwquality control PAM) +2021-01-07 17:58:14 Result: found at least one PAM module for password strength testing +2021-01-07 17:58:14 Hardening: assigned maximum number of hardening points for this item (3). Currently having 17 points (out of 28) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9264 (Checking presence pam.conf) +2021-01-07 17:58:14 Test: Checking file /etc/pam.conf +2021-01-07 17:58:14 Result: file /etc/pam.conf exists +2021-01-07 17:58:14 Test: searching PAM configuration files +2021-01-07 17:58:14 Result: File has no configuration options defined (empty, or only filled with comments and empty lines) +2021-01-07 17:58:14 ==== +2021-01-07 17:58:14 Performing test ID AUTH-9266 (Checking presence pam.d files) +2021-01-07 17:58:14 Test: Checking directory /etc/pam.d +2021-01-07 17:58:14 Result: directory /etc/pam.d exists +2021-01-07 17:58:14 Test: searching PAM configuration files +2021-01-07 17:58:14 Found file: /etc/pam.d/chfn +2021-01-07 17:58:14 Found file: /etc/pam.d/chpasswd +2021-01-07 17:58:15 Found file: /etc/pam.d/chsh +2021-01-07 17:58:15 Found file: /etc/pam.d/common-account +2021-01-07 17:58:15 Found file: /etc/pam.d/common-auth +2021-01-07 17:58:15 Found file: /etc/pam.d/common-password +2021-01-07 17:58:15 Found file: /etc/pam.d/common-session +2021-01-07 17:58:15 Found file: /etc/pam.d/common-session-noninteractive +2021-01-07 17:58:15 Found file: /etc/pam.d/cron +2021-01-07 17:58:15 Found file: /etc/pam.d/login +2021-01-07 17:58:15 Found file: /etc/pam.d/newusers +2021-01-07 17:58:15 Found file: /etc/pam.d/other +2021-01-07 17:58:15 Found file: /etc/pam.d/passwd +2021-01-07 17:58:15 Found file: /etc/pam.d/runuser +2021-01-07 17:58:15 Found file: /etc/pam.d/runuser-l +2021-01-07 17:58:15 Found file: /etc/pam.d/smtp +2021-01-07 17:58:15 Found file: /etc/pam.d/sshd +2021-01-07 17:58:15 Found file: /etc/pam.d/su +2021-01-07 17:58:15 Found file: /etc/pam.d/sudo +2021-01-07 17:58:15 Found file: /etc/pam.d/systemd-user +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9268 (Checking presence pam.d files) +2021-01-07 17:58:15 Test: Searching pam modules +2021-01-07 17:58:15 Test: Checking /lib/arm-linux-gnueabihf/security +2021-01-07 17:58:15 Result: directory /lib/arm-linux-gnueabihf/security could not be found or is a symlink to another directory +2021-01-07 17:58:15 Test: Checking /lib/i386-linux-gnu/security +2021-01-07 17:58:15 Result: directory /lib/i386-linux-gnu/security could not be found or is a symlink to another directory +2021-01-07 17:58:15 Test: Checking /lib/security +2021-01-07 17:58:15 Result: directory /lib/security could not be found or is a symlink to another directory +2021-01-07 17:58:15 Test: Checking /lib/x86_64-linux-gnu/security +2021-01-07 17:58:15 Result: directory /lib/x86_64-linux-gnu/security exists +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_access.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_cracklib.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_debug.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_deny.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_echo.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_env.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_exec.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_extrausers.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_faildelay.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_filter.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_ftp.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_group.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_issue.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_keyinit.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_lastlog.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_limits.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_listfile.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_localuser.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_loginuid.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_mail.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_mkhomedir.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_motd.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_namespace.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_nologin.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_permit.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_pwhistory.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_rhosts.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_rootok.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_securetty.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_selinux.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_sepermit.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_shells.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_stress.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_succeed_if.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_systemd.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_tally.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_tally2.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_time.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_timestamp.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_tty_audit.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_umask.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_unix.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_userdb.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_warn.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_wheel.so +2021-01-07 17:58:15 Found file: /lib/x86_64-linux-gnu/security/pam_xauth.so +2021-01-07 17:58:15 Test: Checking /lib64/security +2021-01-07 17:58:15 Result: directory /lib64/security could not be found or is a symlink to another directory +2021-01-07 17:58:15 Test: Checking /usr/lib +2021-01-07 17:58:15 Result: directory /usr/lib exists +2021-01-07 17:58:15 Test: Checking /usr/lib/security +2021-01-07 17:58:15 Result: directory /usr/lib/security could not be found or is a symlink to another directory +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9278 (Determine LDAP support in PAM files) +2021-01-07 17:58:15 Test: checking presence /etc/pam.d/common-auth +2021-01-07 17:58:15 Result: file /etc/pam.d/common-auth exists +2021-01-07 17:58:15 Test: checking presence LDAP module +2021-01-07 17:58:15 Result: LDAP module not found +2021-01-07 17:58:15 Test: checking presence /etc/pam.d/system-auth +2021-01-07 17:58:15 Result: file /etc/pam.d/system-auth not found, skipping test +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9282 (Checking password protected account without expire date) +2021-01-07 17:58:15 Test: Checking Linux version and password expire date status +2021-01-07 17:58:15 Result: all accounts seem to have an expire date +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9283 (Checking accounts without password) +2021-01-07 17:58:15 Test: Checking passwordless accounts +2021-01-07 17:58:15 Result: all accounts seem to have a password +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9284 (Check locked user accounts in /etc/passwd) +2021-01-07 17:58:15 Test: Checking locked accounts +2021-01-07 17:58:15 Result: all accounts seem to be unlocked +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9286 (Checking user password aging) +2021-01-07 17:58:15 Test: Checking PASS_MIN_DAYS option in /etc/login.defs +2021-01-07 17:58:15 Result: password needs to be at least 7 days old +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 20 points (out of 31) +2021-01-07 17:58:15 Test: Checking PASS_MAX_DAYS option in /etc/login.defs +2021-01-07 17:58:15 Result: max password age is 90 days +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 23 points (out of 34) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9288 (Checking for expired passwords) +2021-01-07 17:58:15 Test: check if we can access /etc/shadow (escaped: /etc/shadow) +2021-01-07 17:58:15 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:15 Result: file /etc/shadow is readable (or directory accessible). +2021-01-07 17:58:15 Data: Days since epoch is 18634 +2021-01-07 17:58:15 Test: collecting accounts which have an expired password (last day changed + maximum change time) +2021-01-07 17:58:15 Result: good, no passwords have been expired +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (10). Currently having 33 points (out of 44) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9304 (Check single user login configuration) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9306 (Check single boot authentication) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (HP-UX only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9308 (Check single user login configuration) +2021-01-07 17:58:15 Test: going to check several systemd targets now +2021-01-07 17:58:15 Test: checking if target console-shell.service is available (/lib/systemd/system/console-shell.service) +2021-01-07 17:58:15 Result: found target console-shell.service +2021-01-07 17:58:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:58:15 Test: checking if target emergency.service is available (/lib/systemd/system/emergency.service) +2021-01-07 17:58:15 Result: found target emergency.service +2021-01-07 17:58:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:58:15 Test: checking if target rescue.service is available (/lib/systemd/system/rescue.service) +2021-01-07 17:58:15 Result: found target rescue.service +2021-01-07 17:58:15 Result: sulogin was found, which is a good measure to protect single user mode +2021-01-07 17:58:15 Result: option set, password is needed at single user mode boot +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 35 points (out of 46) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9328 (Default umask values) +2021-01-07 17:58:15 Test: Checking /etc/profile.d directory +2021-01-07 17:58:15 Result: found /etc/profile.d, with one or more files in it +2021-01-07 17:58:15 Test: Checking /etc/profile +2021-01-07 17:58:15 Result: file /etc/profile exists +2021-01-07 17:58:15 Test: Checking umask value in /etc/profile +2021-01-07 17:58:15 Result: did not find umask in /etc/profile +2021-01-07 17:58:15 Result: found no umask. Please check if this is correct +2021-01-07 17:58:15 Test: Checking umask entries in /etc/passwd (pam_umask) +2021-01-07 17:58:15 Result: file /etc/passwd exists +2021-01-07 17:58:15 Test: Checking umask value in /etc/passwd +2021-01-07 17:58:15 Manual: one or more manual actions are required for further testing of this control/plugin +2021-01-07 17:58:15 Test: Checking /etc/login.defs +2021-01-07 17:58:15 Result: file /etc/login.defs exists +2021-01-07 17:58:15 Test: Checking umask value in /etc/login.defs +2021-01-07 17:58:15 Result: umask is 027, which is fine +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 37 points (out of 48) +2021-01-07 17:58:15 Test: Checking /etc/init.d/functions +2021-01-07 17:58:15 Result: file /etc/init.d/functions does not exist +2021-01-07 17:58:15 Test: Checking /etc/init.d/rc +2021-01-07 17:58:15 Result: file /etc/init.d/rc exists +2021-01-07 17:58:15 Test: Checking UMASK value in /etc/init.d/rc +2021-01-07 17:58:15 Result: umask is 027, which is fine +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (2). Currently having 39 points (out of 50) +2021-01-07 17:58:15 Test: Checking /etc/init.d/rcS +2021-01-07 17:58:15 Result: file /etc/init.d/rcS exists +2021-01-07 17:58:15 Test: Checking if script runs another script. +2021-01-07 17:58:15 Result: exec line present in file, setting of umask not needed in this script +2021-01-07 17:58:15 Output: /etc/init.d/rc +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9340 (Solaris account locking) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9402 (Query LDAP authentication support) +2021-01-07 17:58:15 Result: LDAP authentication not enabled +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9406 (Query LDAP servers in client configuration) +2021-01-07 17:58:15 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID AUTH-9408 (Logging of failed login attempts) +2021-01-07 17:58:15 Result: did not find /var/log/tallylog on disk or its file size is zero bytes +2021-01-07 17:58:15 Result: found pam_tally2 module on disk +2021-01-07 17:58:15 Outcome: it looks like pam_tally2 is not configured to log failed login attempts +2021-01-07 17:58:15 Test: Checking FAILLOG_ENAB option in /etc/login.defs +2021-01-07 17:58:15 Result: FAILLOG_ENAB is set to 'yes' +2021-01-07 17:58:15 Outcome: failed login attempts are logged in /var/log/faillog +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 42 points (out of 53) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9409 (Checking /etc/doas.conf file) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test AUTH-9410 (Check /etc/doas.conf file permissions) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:15 Security check: file is normal +2021-01-07 17:58:15 Checking permissions of /root/scans/lynis/include/tests_shells +2021-01-07 17:58:15 File permissions are OK +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Action: Performing tests from category: Shells +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test SHLL-6202 (Check console TTYs) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID SHLL-6211 (Available and valid shells) +2021-01-07 17:58:15 Test: Searching for /etc/shells +2021-01-07 17:58:15 Result: Found /etc/shells file +2021-01-07 17:58:15 Test: Reading available shells from /etc/shells +2021-01-07 17:58:15 Found installed shell: /bin/sh +2021-01-07 17:58:15 Found installed shell: /bin/dash +2021-01-07 17:58:15 Found installed shell: /bin/bash +2021-01-07 17:58:15 Found installed shell: /bin/rbash +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID SHLL-6220 (Idle session killing tools or settings) +2021-01-07 17:58:15 Test: Search for session timeout tools or settings in shell +2021-01-07 17:58:15 Performing pgrep scan without uid +2021-01-07 17:58:15 IsRunning: process 'timeoutd' not found +2021-01-07 17:58:15 Performing pgrep scan without uid +2021-01-07 17:58:15 IsRunning: process 'autolog' not found +2021-01-07 17:58:15 Result: could not find TMOUT setting in /etc/profile +2021-01-07 17:58:15 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:58:15 Result: could not find TMOUT setting in /etc/profile.d/*.sh +2021-01-07 17:58:15 Result: could not find export, readonly or typeset -r in /etc/profile +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (1 of 3). Currently having 43 points (out of 56) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID SHLL-6230 (Perform umask check for shell configurations) +2021-01-07 17:58:15 Result: file /etc/bashrc not found +2021-01-07 17:58:15 Result: file /etc/bash.bashrc exists +2021-01-07 17:58:15 Result: did not find umask configured in /etc/bash.bashrc +2021-01-07 17:58:15 Result: file /etc/bash.bashrc.local not found +2021-01-07 17:58:15 Result: file /etc/csh.cshrc not found +2021-01-07 17:58:15 Result: file /etc/profile exists +2021-01-07 17:58:15 Result: did not find umask configured in /etc/profile +2021-01-07 17:58:15 Security check: file is normal +2021-01-07 17:58:15 Checking permissions of /root/scans/lynis/include/tests_filesystems +2021-01-07 17:58:15 File permissions are OK +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Action: Performing tests from category: File systems +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6310 (Checking /tmp, /home and /var directory) +2021-01-07 17:58:15 Test: Checking if /home is mounted separately or mounted on / file system +2021-01-07 17:58:15 Result: directory /home exists +2021-01-07 17:58:15 Result: /home not found in mount list. Directory most likely stored on / file system +2021-01-07 17:58:15 Suggestion: To decrease the impact of a full /home file system, place /home on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (9 of 10). Currently having 52 points (out of 66) +2021-01-07 17:58:15 Test: Checking if /tmp is mounted separately or mounted on / file system +2021-01-07 17:58:15 Result: directory /tmp exists +2021-01-07 17:58:15 Result: found /tmp as a separated mount point +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (10). Currently having 62 points (out of 76) +2021-01-07 17:58:15 Test: Checking if /var is mounted separately or mounted on / file system +2021-01-07 17:58:15 Result: directory /var exists +2021-01-07 17:58:15 Result: /var not found in mount list. Directory most likely stored on / file system +2021-01-07 17:58:15 Suggestion: To decrease the impact of a full /var file system, place /var on a separate partition [test:FILE-6310] [details:-] [solution:-] +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (9 of 10). Currently having 71 points (out of 86) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6311 (Checking LVM volume groups) +2021-01-07 17:58:15 Test: Checking for LVM volume groups +2021-01-07 17:58:15 Result: no LVM volume groups found +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test FILE-6312 (Checking LVM volumes) +2021-01-07 17:58:15 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6323 (Checking EXT file systems) +2021-01-07 17:58:15 Test: Checking for Linux EXT file systems +2021-01-07 17:58:15 Result: found one or more EXT file systems +2021-01-07 17:58:15 File system: / (type: ext4) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6324 (Checking XFS file systems) +2021-01-07 17:58:15 Test: Checking for Linux XFS file systems +2021-01-07 17:58:15 Result: no XFS file systems found +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6329 (Checking FFS/UFS file systems) +2021-01-07 17:58:15 Test: Query /etc/fstab for available FFS/UFS mount points +2021-01-07 17:58:15 Result: unable to find any single mount point (FFS/UFS) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test FILE-6330 (Checking ZFS file systems) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Skipped test FILE-6439 (Checking HAMMER PFS mounts) +2021-01-07 17:58:15 Reason to skip: Incorrect guest OS (DragonFly only) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6332 (Checking swap partitions) +2021-01-07 17:58:15 Test: query swap partitions from /etc/fstab file +2021-01-07 17:58:15 Result: no swap partitions found in /etc/fstab +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6336 (Checking swap mount options) +2021-01-07 17:58:15 Test: check swap partitions with incorrect mount options +2021-01-07 17:58:15 Result: all swap partitions have correct options (sw or swap) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6344 (Checking proc mount options) +2021-01-07 17:58:15 Test: check proc mount with incorrect mount options +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (0 of 3). Currently having 71 points (out of 89) +2021-01-07 17:58:15 Result: /proc filesystem is not mounted with option hidepid=1 or hidepid=2 +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6354 (Searching for old files in /tmp) +2021-01-07 17:58:15 Test: Searching for old files in /tmp +2021-01-07 17:58:15 Result: no files found in /tmp which are older than 3 months +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6362 (Checking /tmp sticky bit) +2021-01-07 17:58:15 Result: sticky bit found on /tmp directory +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 74 points (out of 92) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6363 (Checking /var/tmp sticky bit) +2021-01-07 17:58:15 Result: sticky bit found on /var/tmp directory +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 77 points (out of 95) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6368 (Checking ACL support on root file system) +2021-01-07 17:58:15 Test: Checking acl option on ext[2-4] root file system +2021-01-07 17:58:15 Result: mount point probably mounted with defaults +2021-01-07 17:58:15 Test: Checking device which holds root file system +2021-01-07 17:58:15 Result: found /dev/sda1 +2021-01-07 17:58:15 Test: Checking default options on /dev/sda1 +2021-01-07 17:58:15 Result: found ACL option in default mount options +2021-01-07 17:58:15 Test: Checking acl option on xfs root file system +2021-01-07 17:58:15 Result: ACL option enabled on root file system +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (3). Currently having 80 points (out of 98) +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6372 (Checking / mount options) +2021-01-07 17:58:15 Result: mount system / is configured with options: errors=remount-ro +2021-01-07 17:58:15 ==== +2021-01-07 17:58:15 Performing test ID FILE-6374 (Linux mount options) +2021-01-07 17:58:15 Result: file system /boot not found in /etc/fstab +2021-01-07 17:58:15 File system: /dev +2021-01-07 17:58:15 Expected flags: noexec nosuid +2021-01-07 17:58:15 Found flags: (rw nosuid relatime size=990692k nr_inodes=247673 mode=755) +2021-01-07 17:58:15 Result: Could not find mount option noexec on file system /dev +2021-01-07 17:58:15 Result: GOOD, found mount option nosuid on file system /dev +2021-01-07 17:58:15 Result: marked /dev as partially hardened +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (4 of 5). Currently having 84 points (out of 103) +2021-01-07 17:58:15 File system: /dev/shm +2021-01-07 17:58:15 Expected flags: nosuid nodev noexec +2021-01-07 17:58:15 Found flags: (rw nosuid nodev) +2021-01-07 17:58:15 Result: GOOD, found mount option nosuid on file system /dev/shm +2021-01-07 17:58:15 Result: GOOD, found mount option nodev on file system /dev/shm +2021-01-07 17:58:15 Result: Could not find mount option noexec on file system /dev/shm +2021-01-07 17:58:15 Result: marked /dev/shm as partially hardened +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (4 of 5). Currently having 88 points (out of 108) +2021-01-07 17:58:15 Result: file system /home not found in /etc/fstab +2021-01-07 17:58:15 File system: /run +2021-01-07 17:58:15 Expected flags: nodev nosuid +2021-01-07 17:58:15 Found flags: (rw nosuid noexec relatime size=199868k mode=755) +2021-01-07 17:58:15 Result: Could not find mount option nodev on file system /run +2021-01-07 17:58:15 Result: GOOD, found mount option nosuid on file system /run +2021-01-07 17:58:15 Result: marked /run as partially hardened +2021-01-07 17:58:15 Hardening: assigned partial number of hardening points (4 of 5). Currently having 92 points (out of 113) +2021-01-07 17:58:15 File system: /tmp +2021-01-07 17:58:15 Expected flags: nodev noexec nosuid +2021-01-07 17:58:15 Found flags: loop nosuid nodev noexec rw +2021-01-07 17:58:15 Result: GOOD, found mount option nodev on file system /tmp +2021-01-07 17:58:15 Result: GOOD, found mount option noexec on file system /tmp +2021-01-07 17:58:15 Result: GOOD, found mount option nosuid on file system /tmp +2021-01-07 17:58:15 Result: marked /tmp as fully hardened +2021-01-07 17:58:15 Hardening: assigned maximum number of hardening points for this item (5). Currently having 97 points (out of 118) +2021-01-07 17:58:15 Result: file system /var not found in /etc/fstab +2021-01-07 17:58:15 Result: file system /var/log not found in /etc/fstab +2021-01-07 17:58:15 Result: file system /var/log/audit not found in /etc/fstab +2021-01-07 17:58:15 Result: file system /var/tmp not found in /etc/fstab +2021-01-07 17:58:16 Result: Total without nodev:11 noexec:11 nosuid:8 ro or noexec (W^X): 11, of total 31 +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID FILE-6376 (Determine if /var/tmp is bound to /tmp) +2021-01-07 17:58:16 Result: no mount point /var/tmp or expected options found +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID FILE-6394 (Determine level of swappiness.) +2021-01-07 17:58:16 Test: checking level of vm.swappiness: 60 +2021-01-07 17:58:16 Result: vm.swappiness=60 which is the standard level of swappiness and works well for desktop systems. +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test FILE-6410 (Checking Locate database) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID FILE-6430 (Disable mounting of some filesystems) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 100 points (out of 121) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 103 points (out of 124) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 106 points (out of 127) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 109 points (out of 130) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 112 points (out of 133) +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 115 points (out of 136) +2021-01-07 17:58:16 Result: found udf support in the kernel (output = insmod /lib/modules/4.4.0-197-generic/kernel/fs/udf/udf.ko ) +2021-01-07 17:58:16 Test: Checking if udf is active +2021-01-07 17:58:16 Result: module udf is currently not loaded in the kernel. +2021-01-07 17:58:16 Hardening: assigned partial number of hardening points (2 of 3). Currently having 117 points (out of 139) +2021-01-07 17:58:16 Suggestion: Consider disabling unused kernel modules [test:FILE-6430] [details:/etc/modprobe.d/blacklist.conf] [solution:Add 'install MODULENAME /bin/true' (without quotes)] +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_usb +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Action: Performing tests from category: USB Devices +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID USB-1000 (Check if USB storage is disabled) +2021-01-07 17:58:16 Test: Checking USB storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:58:16 Result: found usb-storage driver in disabled state (blacklisted) +2021-01-07 17:58:16 Result: usb-storage driver is disabled +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 120 points (out of 142) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID USB-2000 (Check USB authorizations) +2021-01-07 17:58:16 Test: checking presence of USB devices path (/sys/bus/usb/devices) +2021-01-07 17:58:16 Test: Checking USB devices authorization to connect to the system +2021-01-07 17:58:16 Test: /sys/bus/usb/devices/usb1 is authorized by default (authorized_default=1) +2021-01-07 17:58:16 Test: /sys/bus/usb/devices/usb1 is authorized currently (authorized=1) +2021-01-07 17:58:16 Test: /sys/bus/usb/devices/usb2 is authorized by default (authorized_default=1) +2021-01-07 17:58:16 Test: /sys/bus/usb/devices/usb2 is authorized currently (authorized=1) +2021-01-07 17:58:16 Result: Some USB devices are authorized by default (or temporary) to connect to the system +2021-01-07 17:58:16 Hardening: assigned partial number of hardening points (0 of 3). Currently having 120 points (out of 145) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID USB-3000 (Check for presence of USBGuard) +2021-01-07 17:58:16 Result: USBGuard not found +2021-01-07 17:58:16 Hardening: assigned partial number of hardening points (0 of 8). Currently having 120 points (out of 153) +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_storage +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Action: Performing tests from category: Storage +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID STRG-1846 (Check if firewire storage is disabled) +2021-01-07 17:58:16 Test: Checking firewire storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf +2021-01-07 17:58:16 Result: found firewire ohci driver in disabled state +2021-01-07 17:58:16 Result: firewire ohci driver is disabled +2021-01-07 17:58:16 Hardening: assigned maximum number of hardening points for this item (3). Currently having 123 points (out of 156) +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_storage_nfs +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Action: Performing tests from category: NFS +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1902 (Check rpcinfo registered programs) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1904 (Check nfs rpc) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1906 (Check nfs rpc) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID STRG-1920 (Checking NFS daemon) +2021-01-07 17:58:16 Test: Checking running NFS daemon +2021-01-07 17:58:16 Output: NFS daemon is not running +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1926 (Checking NFS exports) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1928 (Checking empty /etc/exports) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test STRG-1930 (Check client access to nfs share) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_nameservices +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Action: Performing tests from category: Name services +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4016 (Check /etc/resolv.conf default domain) +2021-01-07 17:58:16 Test: check /etc/resolv.conf for default domain +2021-01-07 17:58:16 Result: /etc/resolv.conf found +2021-01-07 17:58:16 Result: no default domain found +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4018 (Check /etc/resolv.conf search domains) +2021-01-07 17:58:16 Test: check /etc/resolv.conf for search domains +2021-01-07 17:58:16 Result: /etc/resolv.conf found +2021-01-07 17:58:16 Result: no search domains found, default domain is being used +2021-01-07 17:58:16 Result: found 0 line(s) with a search statement (expecting less than 2 lines) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4020 (Check non default options) +2021-01-07 17:58:16 Test: check /etc/resolv.conf for non default options +2021-01-07 17:58:16 Result: /etc/resolv.conf found +2021-01-07 17:58:16 Result: no specific other options configured in /etc/resolv.conf +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4024 (Solaris uname -n output) +2021-01-07 17:58:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4026 (Check /etc/nodename) +2021-01-07 17:58:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4028 (Check domain name) +2021-01-07 17:58:16 Test: Checking if dnsdomainname command is available +2021-01-07 17:58:16 Result: dnsdomainname command returned no value +2021-01-07 17:58:16 Result: using domain name from FQDN hostname (it-sec-test-vm) +2021-01-07 17:58:16 Suggestion: Check DNS configuration for the dns domain name [test:NAME-4028] [details:-] [solution:-] +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4032 (Check nscd status) +2021-01-07 17:58:16 Test: checking nscd status +2021-01-07 17:58:16 Performing pgrep scan without uid +2021-01-07 17:58:16 IsRunning: process 'nscd' not found +2021-01-07 17:58:16 Result: nscd is not running +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4034 (Check Unbound status) +2021-01-07 17:58:16 Test: checking Unbound (unbound) status +2021-01-07 17:58:16 Performing pgrep scan without uid +2021-01-07 17:58:16 IsRunning: process 'unbound' not found +2021-01-07 17:58:16 Result: Unbound daemon is not running +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4036 (Check Unbound configuration file) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4202 (Check BIND status) +2021-01-07 17:58:16 Test: Checking for running BIND instance +2021-01-07 17:58:16 Performing pgrep scan without uid +2021-01-07 17:58:16 IsRunning: process 'named' not found +2021-01-07 17:58:16 Result: BIND not running +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4204 (Search BIND configuration file) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4206 (Check BIND configuration consistency) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4210 (Check DNS banner) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4230 (Check PowerDNS status) +2021-01-07 17:58:16 Test: Checking for running PowerDNS instance +2021-01-07 17:58:16 Performing pgrep scan without uid +2021-01-07 17:58:16 IsRunning: process 'pdns_server' not found +2021-01-07 17:58:16 Result: PowerDNS not running +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4232 (Search PowerDNS configuration file) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4236 (Check PowerDNS backends) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4238 (Check PowerDNS authoritative status) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4304 (Check NIS ypbind status) +2021-01-07 17:58:16 Test: Checking status of ypbind daemon +2021-01-07 17:58:16 Performing pgrep scan without uid +2021-01-07 17:58:16 IsRunning: process 'ypbind' not found +2021-01-07 17:58:16 Result: ypbind is not active +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test NAME-4306 (Check NIS domain) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4402 (Check duplicate line in /etc/hosts) +2021-01-07 17:58:16 Test: check duplicate line in /etc/hosts +2021-01-07 17:58:16 Result: OK, no duplicate lines found +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4404 (Check /etc/hosts contains an entry for this server name) +2021-01-07 17:58:16 Test: Check /etc/hosts contains an entry for this server name +2021-01-07 17:58:16 Result: Found entry for it-sec-test-vm in /etc/hosts +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4406 (Check server hostname mapping) +2021-01-07 17:58:16 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:58:16 Result: this server hostname is not mapped to a local address +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID NAME-4408 (Check localhost entry) +2021-01-07 17:58:16 Test: Check server hostname not locally mapped in /etc/hosts +2021-01-07 17:58:16 Result: localhost mapped to ::1 +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_dns +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 Security check: file is normal +2021-01-07 17:58:16 Checking permissions of /root/scans/lynis/include/tests_ports_packages +2021-01-07 17:58:16 File permissions are OK +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Action: Performing tests from category: Ports and packages +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7301 (Query FreeBSD pkg) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7302 (Query FreeBSD/NetBSD pkg_info) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7303 (Query brew package manager) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 Result: brew can NOT be found on this system +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7304 (Querying Gentoo packages) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 Result: emerge can NOT be found on this system +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7306 (Querying Solaris packages) +2021-01-07 17:58:16 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:16 Result: pkginfo can NOT be found on this system +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7308 (Checking package list with RPM) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 Result: RPM binary NOT found on this system, test skipped +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7310 (Checking package list with pacman) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7312 (Checking available updates for pacman based system) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 Result: pacman binary NOT found on this system, test skipped +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7314 (Checking pacman configuration options) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7320 (Checking for arch-audit tooling) +2021-01-07 17:58:16 Reason to skip: Test only applies to Arch Linux +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7322 (Discover vulnerable packages with arch-audit) +2021-01-07 17:58:16 Reason to skip: arch-audit not found +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7328 (Querying Zypper for installed packages) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7330 (Querying Zypper for vulnerable packages) +2021-01-07 17:58:16 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7332 (Query macOS ports) +2021-01-07 17:58:16 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Skipped test PKGS-7334 (Query port for port upgrades) +2021-01-07 17:58:16 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:16 ==== +2021-01-07 17:58:16 Performing test ID PKGS-7345 (Querying dpkg) +2021-01-07 17:58:16 Result: Found dpkg binary +2021-01-07 17:58:16 Test: Querying dpkg -l to get package list +2021-01-07 17:58:16 Output: +2021-01-07 17:58:16 Found package: acct (version: 6.5.5-2.1ubuntu1) +2021-01-07 17:58:16 Found package: acl (version: 2.2.52-3) +2021-01-07 17:58:16 Found package: acpid (version: 1:2.0.26-1ubuntu2) +2021-01-07 17:58:16 Found package: adduser (version: 3.113+nmu3ubuntu4) +2021-01-07 17:58:16 Found package: apt (version: 1.2.32ubuntu0.2) +2021-01-07 17:58:16 Found package: apt-transport-https (version: 1.2.32ubuntu0.2) +2021-01-07 17:58:16 Found package: apt-utils (version: 1.2.32ubuntu0.2) +2021-01-07 17:58:16 Found package: aptitude (version: 0.7.4-2ubuntu2) +2021-01-07 17:58:16 Found package: aptitude-common (version: 0.7.4-2ubuntu2) +2021-01-07 17:58:16 Found package: base-files (version: 9.4ubuntu4.13) +2021-01-07 17:58:16 Found package: base-passwd (version: 3.5.39) +2021-01-07 17:58:16 Found package: bash (version: 4.3-14ubuntu1.4) +2021-01-07 17:58:16 Found package: bind9-host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:16 Found package: binutils (version: 2.26.1-1ubuntu1~16.04.8) +2021-01-07 17:58:16 Found package: bsdmainutils (version: 9.0.6ubuntu3) +2021-01-07 17:58:16 Found package: bsdutils (version: 1:2.27.1-6ubuntu3.10) +2021-01-07 17:58:16 Found package: btrfs-tools (version: 4.4-1ubuntu1.1) +2021-01-07 17:58:16 Found package: busybox-initramfs (version: 1:1.22.0-15ubuntu1.4) +2021-01-07 17:58:16 Found package: bzip2 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:58:16 Found package: ca-certificates (version: 20201027ubuntu0.16.04.1) +2021-01-07 17:58:16 Found package: cloud-guest-utils (version: 0.27-0ubuntu25.2) +2021-01-07 17:58:16 Found package: cloud-init (version: 20.4-0ubuntu1~16.04.1) +2021-01-07 17:58:16 Found package: console-setup (version: 1.108ubuntu15.5) +2021-01-07 17:58:16 Found package: console-setup-linux (version: 1.108ubuntu15.5) +2021-01-07 17:58:16 Found package: coreutils (version: 8.25-2ubuntu3~16.04) +2021-01-07 17:58:16 Found package: cpio (version: 2.11+dfsg-5ubuntu1.1) +2021-01-07 17:58:16 Found package: cracklib-runtime (version: 2.9.2-1ubuntu1) +2021-01-07 17:58:16 Found package: cron (version: 3.0pl1-128ubuntu2) +2021-01-07 17:58:16 Found package: cryptsetup (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:58:16 Found package: cryptsetup-bin (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:58:16 Found package: curl (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:58:16 Found package: dash (version: 0.5.8-2.1ubuntu2) +2021-01-07 17:58:16 Found package: dbus (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:58:16 Found package: debconf (version: 1.5.58ubuntu2) +2021-01-07 17:58:16 Found package: debconf-i18n (version: 1.5.58ubuntu2) +2021-01-07 17:58:16 Found package: debianutils (version: 4.7) +2021-01-07 17:58:16 Found package: dh-python (version: 2.20151103ubuntu1.2) +2021-01-07 17:58:16 Found package: diffutils (version: 1:3.3-3) +2021-01-07 17:58:16 Found package: dirmngr (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:58:16 Found package: distro-info-data (version: 0.28ubuntu0.16) +2021-01-07 17:58:16 Found package: dmeventd (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:58:16 Found package: dmsetup (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:58:16 Found package: dpkg (version: 1.18.4ubuntu1.6) +2021-01-07 17:58:16 Found package: e2fslibs:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:58:16 Found package: e2fsprogs (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:58:16 Found package: eatmydata (version: 105-3) +2021-01-07 17:58:16 Found package: efibootmgr (version: 0.12-4) +2021-01-07 17:58:16 Found package: ethtool (version: 1:4.5-1) +2021-01-07 17:58:16 Found package: fail2ban (version: 0.9.3-1) +2021-01-07 17:58:16 Found package: file (version: 1:5.25-2ubuntu1.4) +2021-01-07 17:58:16 Found package: findutils (version: 4.6.0+git+20160126-2) +2021-01-07 17:58:16 Found package: gcc-5-base:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:58:16 Found package: gcc-6-base:amd64 (version: 6.0.1-0ubuntu1) +2021-01-07 17:58:16 Found package: gdisk (version: 1.0.1-1build1) +2021-01-07 17:58:16 Found package: gettext-base (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:58:17 Found package: gir1.2-glib-2.0:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:58:17 Found package: git (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:58:17 Found package: git-man (version: 1:2.7.4-0ubuntu1.9) +2021-01-07 17:58:17 Found package: gnupg (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:58:17 Found package: gnupg-agent (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:58:17 Found package: gnupg2 (version: 2.1.11-6ubuntu2.1) +2021-01-07 17:58:17 Found package: gpgv (version: 1.4.20-1ubuntu3.3) +2021-01-07 17:58:17 Found package: grep (version: 2.25-1~16.04.1) +2021-01-07 17:58:17 Found package: groff-base (version: 1.22.3-7) +2021-01-07 17:58:17 Found package: grub-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:58:17 Found package: grub-efi-amd64 (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:58:17 Found package: grub-efi-amd64-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:58:17 Found package: grub-pc-bin (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:58:17 Found package: grub2-common (version: 2.02~beta2-36ubuntu3.29) +2021-01-07 17:58:17 Found package: gzip (version: 1.6-4ubuntu1) +2021-01-07 17:58:17 Found package: hc-utils (version: 0.0.3-1) +2021-01-07 17:58:17 Found package: host (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: hostname (version: 3.16ubuntu2) +2021-01-07 17:58:17 Found package: htop (version: 2.0.1-1ubuntu1) +2021-01-07 17:58:17 Found package: ifupdown (version: 0.8.10ubuntu1.4) +2021-01-07 17:58:17 Found package: init (version: 1.29ubuntu4) +2021-01-07 17:58:17 Found package: init-system-helpers (version: 1.29ubuntu4) +2021-01-07 17:58:17 Found package: initramfs-tools (version: 0.122ubuntu8.17) +2021-01-07 17:58:17 Found package: initramfs-tools-bin (version: 0.122ubuntu8.17) +2021-01-07 17:58:17 Found package: initramfs-tools-core (version: 0.122ubuntu8.17) +2021-01-07 17:58:17 Found package: initscripts (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:58:17 Found package: insserv (version: 1.14.0-5ubuntu3) +2021-01-07 17:58:17 Found package: iproute2 (version: 4.3.0-1ubuntu3.16.04.5) +2021-01-07 17:58:17 Found package: iptables (version: 1.6.0-2ubuntu3) +2021-01-07 17:58:17 Found package: iputils-ping (version: 3:20121221-5ubuntu2) +2021-01-07 17:58:17 Found package: isc-dhcp-client (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:58:17 Found package: isc-dhcp-common (version: 4.3.3-5ubuntu12.10) +2021-01-07 17:58:17 Found package: iso-codes (version: 3.65-1) +2021-01-07 17:58:17 Found package: kbd (version: 1.15.5-1ubuntu5) +2021-01-07 17:58:17 Found package: keyboard-configuration (version: 1.108ubuntu15.5) +2021-01-07 17:58:17 Found package: klibc-utils (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:58:17 Found package: kmod (version: 22-1ubuntu5.2) +2021-01-07 17:58:17 Found package: less (version: 481-2.1ubuntu0.2) +2021-01-07 17:58:17 Found package: libacl1:amd64 (version: 2.2.52-3) +2021-01-07 17:58:17 Found package: libapparmor1:amd64 (version: 2.10.95-0ubuntu2.11) +2021-01-07 17:58:17 Found package: libapt-inst2.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:58:17 Found package: libapt-pkg5.0:amd64 (version: 1.2.32ubuntu0.2) +2021-01-07 17:58:17 Found package: libasn1-8-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libasprintf0v5:amd64 (version: 0.19.7-2ubuntu3.1) +2021-01-07 17:58:17 Found package: libassuan0:amd64 (version: 2.4.2-2) +2021-01-07 17:58:17 Found package: libatm1:amd64 (version: 1:2.5.1-1.5) +2021-01-07 17:58:17 Found package: libattr1:amd64 (version: 1:2.4.47-2) +2021-01-07 17:58:17 Found package: libaudit-common (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:58:17 Found package: libaudit1:amd64 (version: 1:2.4.5-1ubuntu2.1) +2021-01-07 17:58:17 Found package: libbind9-140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libblkid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: libboost-iostreams1.58.0:amd64 (version: 1.58.0+dfsg-5ubuntu3.1) +2021-01-07 17:58:17 Found package: libbsd0:amd64 (version: 0.8.2-1ubuntu0.1) +2021-01-07 17:58:17 Found package: libbz2-1.0:amd64 (version: 1.0.6-8ubuntu0.2) +2021-01-07 17:58:17 Found package: libc-bin (version: 2.23-0ubuntu11.2) +2021-01-07 17:58:17 Found package: libc6:amd64 (version: 2.23-0ubuntu11.2) +2021-01-07 17:58:17 Found package: libcap-ng0:amd64 (version: 0.7.7-1) +2021-01-07 17:58:17 Found package: libcap2-bin (version: 1:2.24-12) +2021-01-07 17:58:17 Found package: libcap2:amd64 (version: 1:2.24-12) +2021-01-07 17:58:17 Found package: libcomerr2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:58:17 Found package: libcrack2:amd64 (version: 2.9.2-1ubuntu1) +2021-01-07 17:58:17 Found package: libcryptsetup4:amd64 (version: 2:1.6.6-5ubuntu2.1) +2021-01-07 17:58:17 Found package: libcurl3-gnutls:amd64 (version: 7.47.0-1ubuntu2.18) +2021-01-07 17:58:17 Found package: libcurses-perl (version: 1.33-1build1) +2021-01-07 17:58:17 Found package: libcurses-ui-perl (version: 0.9609-1) +2021-01-07 17:58:17 Found package: libcwidget3v5:amd64 (version: 0.5.17-4ubuntu2) +2021-01-07 17:58:17 Found package: libdb5.3:amd64 (version: 5.3.28-11ubuntu0.2) +2021-01-07 17:58:17 Found package: libdbus-1-3:amd64 (version: 1.10.6-1ubuntu3.6) +2021-01-07 17:58:17 Found package: libdbus-glib-1-2:amd64 (version: 0.106-1) +2021-01-07 17:58:17 Found package: libdebconfclient0:amd64 (version: 0.198ubuntu1) +2021-01-07 17:58:17 Found package: libdevmapper-event1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:58:17 Found package: libdevmapper1.02.1:amd64 (version: 2:1.02.110-1ubuntu10) +2021-01-07 17:58:17 Found package: libdns-export162 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libdns162:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libdrm-common (version: 2.4.91-2~16.04.1) +2021-01-07 17:58:17 Found package: libdrm2:amd64 (version: 2.4.91-2~16.04.1) +2021-01-07 17:58:17 Found package: libeatmydata1:amd64 (version: 105-3) +2021-01-07 17:58:17 Found package: libedit2:amd64 (version: 3.1-20150325-1ubuntu2) +2021-01-07 17:58:17 Found package: libefivar0:amd64 (version: 0.23-2) +2021-01-07 17:58:17 Found package: liberror-perl (version: 0.17-1.2) +2021-01-07 17:58:17 Found package: libestr0 (version: 0.1.10-1) +2021-01-07 17:58:17 Found package: libexpat1:amd64 (version: 2.1.0-7ubuntu0.16.04.5) +2021-01-07 17:58:17 Found package: libfdisk1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: libffi6:amd64 (version: 3.2.1-4) +2021-01-07 17:58:17 Found package: libfreetype6:amd64 (version: 2.6.1-0.1ubuntu2.5) +2021-01-07 17:58:17 Found package: libfribidi0:amd64 (version: 0.19.7-1) +2021-01-07 17:58:17 Found package: libfuse2:amd64 (version: 2.9.4-1ubuntu3.1) +2021-01-07 17:58:17 Found package: libgcc1:amd64 (version: 1:6.0.1-0ubuntu1) +2021-01-07 17:58:17 Found package: libgcrypt20:amd64 (version: 1.6.5-2ubuntu0.6) +2021-01-07 17:58:17 Found package: libgdbm3:amd64 (version: 1.8.3-13.1) +2021-01-07 17:58:17 Found package: libgeoip1:amd64 (version: 1.6.9-1) +2021-01-07 17:58:17 Found package: libgirepository-1.0-1:amd64 (version: 1.46.0-3ubuntu1) +2021-01-07 17:58:17 Found package: libglib2.0-0:amd64 (version: 2.48.2-0ubuntu4.6) +2021-01-07 17:58:17 Found package: libgmp10:amd64 (version: 2:6.1.0+dfsg-2) +2021-01-07 17:58:17 Found package: libgnutls-openssl27:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:58:17 Found package: libgnutls30:amd64 (version: 3.4.10-4ubuntu1.8) +2021-01-07 17:58:17 Found package: libgpg-error0:amd64 (version: 1.21-2ubuntu1) +2021-01-07 17:58:17 Found package: libgpm2:amd64 (version: 1.20.4-6.1) +2021-01-07 17:58:17 Found package: libgssapi-krb5-2:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:58:17 Found package: libgssapi3-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libhcrypto4-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libheimbase1-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libheimntlm0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libhogweed4:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: libhx509-5-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libicu55:amd64 (version: 55.1-7ubuntu0.5) +2021-01-07 17:58:17 Found package: libidn11:amd64 (version: 1.32-3ubuntu1.2) +2021-01-07 17:58:17 Found package: libisc-export160 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libisc160:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libisccc140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libisccfg140:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: libjson-c2:amd64 (version: 0.11-4ubuntu2.6) +2021-01-07 17:58:17 Found package: libk5crypto3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:58:17 Found package: libkeyutils1:amd64 (version: 1.5.9-8ubuntu1) +2021-01-07 17:58:17 Found package: libklibc (version: 2.0.4-8ubuntu1.16.04.4) +2021-01-07 17:58:17 Found package: libkmod2:amd64 (version: 22-1ubuntu5.2) +2021-01-07 17:58:17 Found package: libkrb5-26-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libkrb5-3:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:58:17 Found package: libkrb5support0:amd64 (version: 1.13.2+dfsg-5ubuntu2.2) +2021-01-07 17:58:17 Found package: libksba8:amd64 (version: 1.3.3-1ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: libldap-2.4-2:amd64 (version: 2.4.42+dfsg-2ubuntu3.11) +2021-01-07 17:58:17 Found package: liblocale-gettext-perl (version: 1.07-1build1) +2021-01-07 17:58:17 Found package: liblockfile-bin (version: 1.09-6ubuntu1) +2021-01-07 17:58:17 Found package: liblockfile1:amd64 (version: 1.09-6ubuntu1) +2021-01-07 17:58:17 Found package: liblvm2app2.2:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:58:17 Found package: liblvm2cmd2.02:amd64 (version: 2.02.133-1ubuntu10) +2021-01-07 17:58:17 Found package: liblwres141:amd64 (version: 1:9.10.3.dfsg.P4-8ubuntu1.17) +2021-01-07 17:58:17 Found package: liblz4-1:amd64 (version: 0.0~r131-2ubuntu2) +2021-01-07 17:58:17 Found package: liblzma5:amd64 (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:58:17 Found package: liblzo2-2:amd64 (version: 2.08-1.2) +2021-01-07 17:58:17 Found package: libmagic1:amd64 (version: 1:5.25-2ubuntu1.4) +2021-01-07 17:58:17 Found package: libmnl0:amd64 (version: 1.0.3-5) +2021-01-07 17:58:17 Found package: libmount1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: libmpdec2:amd64 (version: 2.4.2-1) +2021-01-07 17:58:17 Found package: libncurses5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: libncursesw5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: libnettle6:amd64 (version: 3.2-1ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: libnewt0.52:amd64 (version: 0.52.18-1ubuntu2) +2021-01-07 17:58:17 Found package: libnfnetlink0:amd64 (version: 1.0.1-3) +2021-01-07 17:58:17 Found package: libnih1:amd64 (version: 1.0.3-4.3ubuntu1) +2021-01-07 17:58:17 Found package: libnpth0:amd64 (version: 1.2-3) +2021-01-07 17:58:17 Found package: libp11-kit0:amd64 (version: 0.23.2-5~ubuntu16.04.2) +2021-01-07 17:58:17 Found package: libpam-cracklib:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:58:17 Found package: libpam-modules-bin (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:58:17 Found package: libpam-modules:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:58:17 Found package: libpam-runtime (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:58:17 Found package: libpam-systemd:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: libpam0g:amd64 (version: 1.1.8-3.2ubuntu2.3) +2021-01-07 17:58:17 Found package: libpci3:amd64 (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:58:17 Found package: libpcre3:amd64 (version: 2:8.38-3.1) +2021-01-07 17:58:17 Found package: libperl5.22:amd64 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:58:17 Found package: libpipeline1:amd64 (version: 1.4.1-2) +2021-01-07 17:58:17 Found package: libplymouth4:amd64 (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:58:17 Found package: libpng12-0:amd64 (version: 1.2.54-1ubuntu1.1) +2021-01-07 17:58:17 Found package: libpopt0:amd64 (version: 1.16-10) +2021-01-07 17:58:17 Found package: libprocps4:amd64 (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:58:17 Found package: libpython3-stdlib:amd64 (version: 3.5.1-3) +2021-01-07 17:58:17 Found package: libpython3.5-minimal:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:58:17 Found package: libpython3.5-stdlib:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:58:17 Found package: libpython3.5:amd64 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:58:17 Found package: libreadline5:amd64 (version: 5.2+dfsg-3build1) +2021-01-07 17:58:17 Found package: libreadline6:amd64 (version: 6.3-8ubuntu2) +2021-01-07 17:58:17 Found package: libroken18-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: librtmp1:amd64 (version: 2.4+20151223.gitfa8646d-1ubuntu0.1) +2021-01-07 17:58:17 Found package: libsasl2-2:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:58:17 Found package: libsasl2-modules-db:amd64 (version: 2.1.26.dfsg1-14ubuntu0.2) +2021-01-07 17:58:17 Found package: libseccomp2:amd64 (version: 2.4.3-1ubuntu3.16.04.3) +2021-01-07 17:58:17 Found package: libselinux1:amd64 (version: 2.4-3build2) +2021-01-07 17:58:17 Found package: libsemanage-common (version: 2.3-1build3) +2021-01-07 17:58:17 Found package: libsemanage1:amd64 (version: 2.3-1build3) +2021-01-07 17:58:17 Found package: libsepol1:amd64 (version: 2.4-2) +2021-01-07 17:58:17 Found package: libsigc++-2.0-0v5:amd64 (version: 2.6.2-1) +2021-01-07 17:58:17 Found package: libsigsegv2:amd64 (version: 2.10-4) +2021-01-07 17:58:17 Found package: libslang2:amd64 (version: 2.3.0-2ubuntu1.1) +2021-01-07 17:58:17 Found package: libsmartcols1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: libsqlite3-0:amd64 (version: 3.11.0-1ubuntu1.5) +2021-01-07 17:58:17 Found package: libss2:amd64 (version: 1.42.13-1ubuntu1.2) +2021-01-07 17:58:17 Found package: libssl1.0.0:amd64 (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:58:17 Found package: libstdc++6:amd64 (version: 5.4.0-6ubuntu1~16.04.12) +2021-01-07 17:58:17 Found package: libsystemd0:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: libtasn1-6:amd64 (version: 4.7-3ubuntu0.16.04.3) +2021-01-07 17:58:17 Found package: libterm-readkey-perl (version: 2.33-1build1) +2021-01-07 17:58:17 Found package: libtext-charwidth-perl (version: 0.04-7build5) +2021-01-07 17:58:17 Found package: libtext-iconv-perl (version: 1.7-5build4) +2021-01-07 17:58:17 Found package: libtext-wrapi18n-perl (version: 0.06-7.1) +2021-01-07 17:58:17 Found package: libtinfo5:amd64 (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: libudev1:amd64 (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: libusb-0.1-4:amd64 (version: 2:0.1.12-28) +2021-01-07 17:58:17 Found package: libusb-1.0-0:amd64 (version: 2:1.0.20-1) +2021-01-07 17:58:17 Found package: libustr-1.0-1:amd64 (version: 1.0.4-5) +2021-01-07 17:58:17 Found package: libuuid1:amd64 (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: libwind0-heimdal:amd64 (version: 1.7~git20150920+dfsg-4ubuntu1.16.04.1) +2021-01-07 17:58:17 Found package: libwrap0:amd64 (version: 7.6.q-25) +2021-01-07 17:58:17 Found package: libxapian22v5:amd64 (version: 1.2.22-2) +2021-01-07 17:58:17 Found package: libxml2:amd64 (version: 2.9.3+dfsg1-1ubuntu0.7) +2021-01-07 17:58:17 Found package: libxtables11:amd64 (version: 1.6.0-2ubuntu3) +2021-01-07 17:58:17 Found package: libyaml-0-2:amd64 (version: 0.1.6-3) +2021-01-07 17:58:17 Found package: linux-base (version: 4.5ubuntu1.2~16.04.1) +2021-01-07 17:58:17 Found package: linux-firmware (version: 1.157.23) +2021-01-07 17:58:17 Found package: linux-image-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:58:17 Found package: linux-image-4.4.0-198-generic (version: 4.4.0-198.230) +2021-01-07 17:58:17 Found package: linux-image-virtual (version: 4.4.0.198.204) +2021-01-07 17:58:17 Found package: linux-modules-4.4.0-197-generic (version: 4.4.0-197.229) +2021-01-07 17:58:17 Found package: linux-modules-4.4.0-198-generic (version: 4.4.0-198.230) +2021-01-07 17:58:17 Found package: locales (version: 2.23-0ubuntu11.2) +2021-01-07 17:58:17 Found package: login (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:58:17 Found package: logrotate (version: 3.8.7-2ubuntu2.16.04.2) +2021-01-07 17:58:17 Found package: lsb-base (version: 9.20160110ubuntu0.2) +2021-01-07 17:58:17 Found package: lsb-release (version: 9.20160110ubuntu0.2) +2021-01-07 17:58:17 Found package: lvm2 (version: 2.02.133-1ubuntu10) +2021-01-07 17:58:17 Found package: m4 (version: 1.4.17-5) +2021-01-07 17:58:17 Found package: make (version: 4.1-6) +2021-01-07 17:58:17 Found package: makedev (version: 2.3.1-93ubuntu2~ubuntu16.04.1) +2021-01-07 17:58:17 Found package: man-db (version: 2.7.5-1) +2021-01-07 17:58:17 Found package: mawk (version: 1.3.3-17ubuntu2) +2021-01-07 17:58:17 Found package: mdadm (version: 3.3-2ubuntu7.6) +2021-01-07 17:58:17 Found package: mime-support (version: 3.59ubuntu1) +2021-01-07 17:58:17 Found package: mokutil (version: 0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1) +2021-01-07 17:58:17 Found package: mount (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: mtr-tiny (version: 0.86-1ubuntu0.1) +2021-01-07 17:58:17 Found package: multiarch-support (version: 2.23-0ubuntu11.2) +2021-01-07 17:58:17 Found package: nano (version: 2.5.3-2ubuntu2) +2021-01-07 17:58:17 Found package: ncurses-base (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: ncurses-bin (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: ncurses-term (version: 6.0+20160213-1ubuntu1) +2021-01-07 17:58:17 Found package: net-tools (version: 1.60-26ubuntu1) +2021-01-07 17:58:17 Found package: netbase (version: 5.3) +2021-01-07 17:58:17 Found package: netcat-openbsd (version: 1.105-7ubuntu1) +2021-01-07 17:58:17 Found package: openssh-client (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:58:17 Found package: openssh-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:58:17 Found package: openssh-sftp-server (version: 1:7.2p2-4ubuntu2.10) +2021-01-07 17:58:17 Found package: openssl (version: 1.0.2g-1ubuntu4.18) +2021-01-07 17:58:17 Found package: passwd (version: 1:4.2-3.1ubuntu5.4) +2021-01-07 17:58:17 Found package: patch (version: 2.7.5-1ubuntu0.16.04.2) +2021-01-07 17:58:17 Found package: pciutils (version: 1:3.3.1-1.1ubuntu1.3) +2021-01-07 17:58:17 Found package: perl (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:58:17 Found package: perl-base (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:58:17 Found package: perl-modules-5.22 (version: 5.22.1-9ubuntu0.9) +2021-01-07 17:58:17 Found package: pinentry-curses (version: 0.9.7-3) +2021-01-07 17:58:17 Found package: plymouth (version: 0.9.2-3ubuntu13.5) +2021-01-07 17:58:17 Found package: pollinate (version: 4.33-0ubuntu1~16.04.1) +2021-01-07 17:58:17 Found package: portsentry (version: 1.2-14) +2021-01-07 17:58:17 Found package: powermgmt-base (version: 1.31+nmu1) +2021-01-07 17:58:17 Found package: procmail (version: 3.22-25ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: procps (version: 2:3.3.10-4ubuntu2.5) +2021-01-07 17:58:17 Found package: python-apt-common (version: 1.1.0~beta1ubuntu0.16.04.11) +2021-01-07 17:58:17 Found package: python3 (version: 3.5.1-3) +2021-01-07 17:58:17 Found package: python3-apt (version: 1.1.0~beta1ubuntu0.16.04.11) +2021-01-07 17:58:17 Found package: python3-blinker (version: 1.3.dfsg2-1build1) +2021-01-07 17:58:17 Found package: python3-cffi-backend (version: 1.5.2-1ubuntu1) +2021-01-07 17:58:17 Found package: python3-chardet (version: 2.3.0-2) +2021-01-07 17:58:17 Found package: python3-configobj (version: 5.0.6-2) +2021-01-07 17:58:17 Found package: python3-cryptography (version: 1.2.3-1ubuntu0.3) +2021-01-07 17:58:17 Found package: python3-dbus (version: 1.2.0-3) +2021-01-07 17:58:17 Found package: python3-gi (version: 3.20.0-0ubuntu1) +2021-01-07 17:58:17 Found package: python3-idna (version: 2.0-3) +2021-01-07 17:58:17 Found package: python3-jinja2 (version: 2.8-1ubuntu0.1) +2021-01-07 17:58:17 Found package: python3-json-pointer (version: 1.9-3) +2021-01-07 17:58:17 Found package: python3-jsonpatch (version: 1.19-3) +2021-01-07 17:58:17 Found package: python3-jwt (version: 1.3.0-1ubuntu0.1) +2021-01-07 17:58:17 Found package: python3-markupsafe (version: 0.23-2build2) +2021-01-07 17:58:17 Found package: python3-minimal (version: 3.5.1-3) +2021-01-07 17:58:17 Found package: python3-oauthlib (version: 1.0.3-1) +2021-01-07 17:58:17 Found package: python3-pkg-resources (version: 20.7.0-1) +2021-01-07 17:58:17 Found package: python3-pyasn1 (version: 0.1.9-1) +2021-01-07 17:58:17 Found package: python3-pycurl (version: 7.43.0-1ubuntu1) +2021-01-07 17:58:17 Found package: python3-requests (version: 2.9.1-3ubuntu0.1) +2021-01-07 17:58:17 Found package: python3-serial (version: 3.0.1-1) +2021-01-07 17:58:17 Found package: python3-six (version: 1.10.0-3) +2021-01-07 17:58:17 Found package: python3-software-properties (version: 0.96.20.10) +2021-01-07 17:58:17 Found package: python3-urllib3 (version: 1.13.1-2ubuntu0.16.04.4) +2021-01-07 17:58:17 Found package: python3-yaml (version: 3.11-3build1) +2021-01-07 17:58:17 Found package: python3.5 (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:58:17 Found package: python3.5-minimal (version: 3.5.2-2ubuntu0~16.04.12) +2021-01-07 17:58:17 Found package: qemu-guest-agent (version: 1:2.5+dfsg-5ubuntu10.48) +2021-01-07 17:58:17 Found package: readline-common (version: 6.3-8ubuntu2) +2021-01-07 17:58:17 Found package: resolvconf (version: 1.78ubuntu7) +2021-01-07 17:58:17 Found package: rsync (version: 3.1.1-3ubuntu1.3) +2021-01-07 17:58:17 Found package: rsyslog (version: 8.16.0-1ubuntu3.1) +2021-01-07 17:58:17 Found package: sbsigntool (version: 0.6-0ubuntu10.1) +2021-01-07 17:58:17 Found package: sed (version: 4.2.2-7) +2021-01-07 17:58:17 Found package: sendmail (version: 8.15.2-3) +2021-01-07 17:58:17 Found package: sendmail-base (version: 8.15.2-3) +2021-01-07 17:58:17 Found package: sendmail-bin (version: 8.15.2-3) +2021-01-07 17:58:17 Found package: sendmail-cf (version: 8.15.2-3) +2021-01-07 17:58:17 Found package: sensible-mda (version: 8.15.2-3) +2021-01-07 17:58:17 Found package: sensible-utils (version: 0.0.9ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: shim (version: 15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:58:17 Found package: shim-signed (version: 1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2) +2021-01-07 17:58:17 Found package: software-properties-common (version: 0.96.20.10) +2021-01-07 17:58:17 Found package: ssh-import-id (version: 5.5-0ubuntu1) +2021-01-07 17:58:17 Found package: sudo (version: 1.8.16-0ubuntu1.9) +2021-01-07 17:58:17 Found package: systemd (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: systemd-sysv (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: sysv-rc (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:58:17 Found package: sysv-rc-conf (version: 0.99-7) +2021-01-07 17:58:17 Found package: sysvinit-utils (version: 2.88dsf-59.3ubuntu2) +2021-01-07 17:58:17 Found package: tar (version: 1.28-2.1ubuntu0.1) +2021-01-07 17:58:17 Found package: tasksel (version: 3.34ubuntu3) +2021-01-07 17:58:17 Found package: tasksel-data (version: 3.34ubuntu3) +2021-01-07 17:58:17 Found package: tiger (version: 1:3.2.3-14) +2021-01-07 17:58:17 Found package: tzdata (version: 2020d-0ubuntu0.16.04) +2021-01-07 17:58:17 Found package: ubuntu-advantage-tools (version: 10ubuntu0.16.04.1) +2021-01-07 17:58:17 Found package: ubuntu-keyring (version: 2012.05.19.1) +2021-01-07 17:58:17 Found package: ucf (version: 3.0036) +2021-01-07 17:58:17 Found package: udev (version: 229-4ubuntu21.29) +2021-01-07 17:58:17 Found package: unattended-upgrades (version: 1.1ubuntu1.18.04.7~16.04.6) +2021-01-07 17:58:17 Found package: unhide (version: 20130526-1) +2021-01-07 17:58:17 Found package: ureadahead (version: 0.100.0-19.1) +2021-01-07 17:58:17 Found package: usbutils (version: 1:007-4) +2021-01-07 17:58:17 Found package: util-linux (version: 2.27.1-6ubuntu3.10) +2021-01-07 17:58:17 Found package: vim (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:58:17 Found package: vim-common (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:58:17 Found package: vim-runtime (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:58:17 Found package: vim-tiny (version: 2:7.4.1689-3ubuntu1.5) +2021-01-07 17:58:17 Found package: wamerican (version: 7.1-1) +2021-01-07 17:58:17 Found package: wget (version: 1.17.1-1ubuntu1.5) +2021-01-07 17:58:17 Found package: whiptail (version: 0.52.18-1ubuntu2) +2021-01-07 17:58:17 Found package: xfsprogs (version: 4.3.0+nmu1ubuntu1.1) +2021-01-07 17:58:17 Found package: xkb-data (version: 2.16-1ubuntu1) +2021-01-07 17:58:17 Found package: xz-utils (version: 5.1.1alpha+20120614-2ubuntu2) +2021-01-07 17:58:17 Found package: zlib1g:amd64 (version: 1:1.2.8.dfsg-2ubuntu4.3) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Performing test ID PKGS-7346 (Search unpurged packages on system) +2021-01-07 17:58:17 Test: Querying dpkg -l to get unpurged packages +2021-01-07 17:58:17 Result: no packages found with left overs +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7348 (Check for old distfiles) +2021-01-07 17:58:17 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7350 (Checking for installed packages with DNF utility) +2021-01-07 17:58:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7352 (Checking for security updates with DNF utility) +2021-01-07 17:58:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7354 (Checking package database integrity) +2021-01-07 17:58:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7366 (Checking for debsecan utility) +2021-01-07 17:58:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Performing test ID PKGS-7370 (Checking for debsums utility) +2021-01-07 17:58:17 Result: debsums utility is not installed. +2021-01-07 17:58:17 Hardening: assigned partial number of hardening points (0 of 2). Currently having 123 points (out of 158) +2021-01-07 17:58:17 Suggestion: Install debsums utility for the verification of packages with known good database. [test:PKGS-7370] [details:-] [solution:-] +2021-01-07 17:58:17 ==== +2021-01-07 17:58:17 Skipped test PKGS-7378 (Query portmaster for port upgrades) +2021-01-07 17:58:17 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:17 ==== +2021-01-07 17:58:18 Skipped test PKGS-7380 (Check for vulnerable NetBSD packages) +2021-01-07 17:58:18 Reason to skip: Incorrect guest OS (NetBSD only) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7381 (Check for vulnerable FreeBSD packages with pkg) +2021-01-07 17:58:18 Reason to skip: pkg tool not available +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7382 (Check for vulnerable FreeBSD packages with portaudit) +2021-01-07 17:58:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7383 (Check for YUM package update management) +2021-01-07 17:58:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7384 (Check for YUM utils package) +2021-01-07 17:58:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7386 (Check for YUM security package) +2021-01-07 17:58:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Skipped test PKGS-7387 (Check for GPG signing in YUM security package) +2021-01-07 17:58:18 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Performing test ID PKGS-7388 (Check security repository in apt sources.list file) +2021-01-07 17:58:18 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list file +2021-01-07 17:58:18 Result: Found security repository in /etc/apt/sources.list +2021-01-07 17:58:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security main restricted +2021-01-07 17:58:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security universe +2021-01-07 17:58:18 Output: deb http://security.ubuntu.com/ubuntu xenial-security multiverse +2021-01-07 17:58:18 Searching for security.debian.org/security.ubuntu.com or security repositories in /etc/apt/sources.list.d directory +2021-01-07 17:58:18 Result: Found security repository in one or more files in directory /etc/apt/sources.list.d +2021-01-07 17:58:18 Output: /etc/apt/sources.list.d/hetzner-mirror.list:deb http://mirror.hetzner.de/ubuntu/packages xenial-security main restricted universe multiverse +2021-01-07 17:58:18 Result: security repository was found +2021-01-07 17:58:18 Hardening: assigned maximum number of hardening points for this item (3). Currently having 126 points (out of 161) +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Performing test ID PKGS-7390 (Check Ubuntu database consistency) +2021-01-07 17:58:18 Test: Package database consistency by running apt-get check +2021-01-07 17:58:18 Result: package database seems to be consistent. +2021-01-07 17:58:18 ==== +2021-01-07 17:58:18 Performing test ID PKGS-7392 (Check for Debian/Ubuntu security updates) +2021-01-07 17:58:18 Action: updating package repository with apt-get +2021-01-07 17:58:23 Result: apt-get finished +2021-01-07 17:58:23 Test: Checking if /usr/lib/update-notifier/apt-check exists +2021-01-07 17:58:23 Result: apt-check (update-notifier-common) not found +2021-01-07 17:58:24 Result: test not fully executed (missing apt-check output) +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Skipped test PKGS-7393 (Check for Gentoo vulnerable packages) +2021-01-07 17:58:24 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Performing test ID PKGS-7394 (Check for Ubuntu updates) +2021-01-07 17:58:24 Test: checking /usr/bin/apt-show-versions +2021-01-07 17:58:24 Result: /usr/bin/apt-show-versions not found +2021-01-07 17:58:24 Suggestion: Install package apt-show-versions for patch management purposes [test:PKGS-7394] [details:-] [solution:-] +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Performing test ID PKGS-7398 (Check for package audit tool) +2021-01-07 17:58:24 Test: checking for package audit tool +2021-01-07 17:58:24 Result: found package audit tool: apt-get +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Performing test ID PKGS-7410 (Count installed kernel packages) +2021-01-07 17:58:24 Test: Checking how many kernel packages are installed +2021-01-07 17:58:24 Result: found 2 kernel packages on the system, which is fine +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Performing test ID PKGS-7420 (Detect toolkit to automatically download and apply upgrades) +2021-01-07 17:58:24 Result: found unattended-upgrade +2021-01-07 17:58:24 Hardening: assigned maximum number of hardening points for this item (5). Currently having 131 points (out of 166) +2021-01-07 17:58:24 Security check: file is normal +2021-01-07 17:58:24 Checking permissions of /root/scans/lynis/include/tests_networking +2021-01-07 17:58:24 File permissions are OK +2021-01-07 17:58:24 ==== +2021-01-07 17:58:24 Action: Performing tests from category: Networking +2021-01-07 17:58:24 ==== +2021-01-07 17:58:25 Performing test ID NETW-2400 (Hostname length and value check) +2021-01-07 17:58:25 Result: FQDN is defined and not longer than 253 characters (14 characters) +2021-01-07 17:58:25 Result: hostnamed is defined and not longer than 63 characters +2021-01-07 17:58:25 Result: good, no unexpected characters discovered in hostname +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-2600 (Checking IPv6 configuration) +2021-01-07 17:58:25 Result: IPV6 mode is auto +2021-01-07 17:58:25 Result: IPv6 only configuration: NO +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-2704 (Basic nameserver configuration tests) +2021-01-07 17:58:25 Test: Checking /etc/resolv.conf file +2021-01-07 17:58:25 Result: Found /etc/resolv.conf file +2021-01-07 17:58:25 Test: Querying nameservers +2021-01-07 17:58:25 Found nameserver: 213.133.99.99 +2021-01-07 17:58:25 Result: Nameserver test for 213.133.99.99 skipped, 'dig' not installed +2021-01-07 17:58:25 Found nameserver: 213.133.98.98 +2021-01-07 17:58:25 Result: Nameserver test for 213.133.98.98 skipped, 'dig' not installed +2021-01-07 17:58:25 Found nameserver: 213.133.100.100 +2021-01-07 17:58:25 Result: Nameserver test for 213.133.100.100 skipped, 'dig' not installed +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-2705 (Check availability two nameservers) +2021-01-07 17:58:25 Result: dig not installed, test can't be fully performed +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-2706 (Check systemd-resolved and upstream DNSSEC status) +2021-01-07 17:58:25 Result: DNSSEC not supported by systemd-resolved or upstream DNS servers +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3001 (Find default gateway (route)) +2021-01-07 17:58:25 Test: Searching default gateway(s) +2021-01-07 17:58:25 Result: Found default gateway 172.31.1.1 +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3004 (Search for available network interfaces) +2021-01-07 17:58:25 Found network interface: lo +2021-01-07 17:58:25 Found network interface: eth0 +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3006 (Get network MAC addresses) +2021-01-07 17:58:25 Found MAC address: 96:00:00:8b:fc:bd +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3008 (Get network IP addresses) +2021-01-07 17:58:25 Found IPv4 address: 116.203.241.83 +2021-01-07 17:58:25 Found IPv4 address: 127.0.0.1 +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3012 (Check listening ports) +2021-01-07 17:58:25 Test: Retrieving ss information to find listening ports +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test NETW-3014 (Checking promiscuous interfaces (BSD)) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3015 (Checking promiscuous interfaces (Linux)) +2021-01-07 17:58:25 Test: Using ip binary to retrieve network interfaces +2021-01-07 17:58:25 Test: Checking all interfaces to discover any with promiscuous mode enabled +2021-01-07 17:58:25 Result: No promiscuous interfaces found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3028 (Checking connections in WAIT state) +2021-01-07 17:58:25 Test: Using netstat for check for connections in WAIT state +2021-01-07 17:58:25 Result: currently 4 connections are in a waiting state (max configured: 5000). +2021-01-07 17:58:25 Result: 4 connections are in WAIT state +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3030 (Checking DHCP client status) +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'dhclient' found (947 ) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3032 (Checking for ARP monitoring software) +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'addrwatch' not found +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'arpwatch' not found +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'arpon' not found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID NETW-3200 (Determine available network protocols) +2021-01-07 17:58:25 Test: checking the status of some network protocols that typically are not used +2021-01-07 17:58:25 Test: now checking module 'dccp' +2021-01-07 17:58:25 Suggestion: Determine if protocol 'dccp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:58:25 Test: now checking module 'sctp' +2021-01-07 17:58:25 Suggestion: Determine if protocol 'sctp' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:58:25 Test: now checking module 'rds' +2021-01-07 17:58:25 Suggestion: Determine if protocol 'rds' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:58:25 Test: now checking module 'tipc' +2021-01-07 17:58:25 Suggestion: Determine if protocol 'tipc' is really needed on this system [test:NETW-3200] [details:-] [solution:-] +2021-01-07 17:58:25 Security check: file is normal +2021-01-07 17:58:25 Checking permissions of /root/scans/lynis/include/tests_printers_spoolers +2021-01-07 17:58:25 File permissions are OK +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Action: Performing tests from category: Printers and Spools +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2302 (Check for printcap consistency) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID PRNT-2304 (Check cupsd status) +2021-01-07 17:58:25 Test: Checking cupsd status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'cupsd' not found +2021-01-07 17:58:25 Result: cups daemon not running, cups daemon tests skipped +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2306 (Check CUPSd configuration file) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2307 (Check CUPSd configuration file permissions) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2308 (Check CUPSd network configuration) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID PRNT-2314 (Check lpd status) +2021-01-07 17:58:25 Test: Checking lpd status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'lpd' not found +2021-01-07 17:58:25 Result: lp daemon not running +2021-01-07 17:58:25 Hardening: assigned maximum number of hardening points for this item (4). Currently having 135 points (out of 170) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2316 (Checking /etc/qconfig file) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2418 (Checking qdaemon printer spooler status) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test PRNT-2420 (Checking old print jobs) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (AIX only) +2021-01-07 17:58:25 Security check: file is normal +2021-01-07 17:58:25 Checking permissions of /root/scans/lynis/include/tests_mail_messaging +2021-01-07 17:58:25 File permissions are OK +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Action: Performing tests from category: Software: e-mail and messaging +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8802 (Check Exim status) +2021-01-07 17:58:25 Test: check Exim status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'exim4' not found +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'exim' not found +2021-01-07 17:58:25 Result: no running Exim processes found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test MAIL-8804 (Exim configuration options) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8814 (Check postfix process status) +2021-01-07 17:58:25 Test: check Postfix status +2021-01-07 17:58:25 Result: no running Postfix processes found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test MAIL-8816 (Check Postfix configuration) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test MAIL-8817 (Check Postfix configuration errors) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test MAIL-8818 (Check Postfix configuration: banner) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8820 (Postfix configuration scan) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8838 (Check dovecot process) +2021-01-07 17:58:25 Test: check dovecot status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'dovecot' not found +2021-01-07 17:58:25 Result: dovecot not found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8860 (Check Qmail status) +2021-01-07 17:58:25 Test: check Qmail status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'qmail-smtpd' not found +2021-01-07 17:58:25 Result: no running Qmail processes found +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID MAIL-8880 (Check Sendmail status) +2021-01-07 17:58:25 Test: check sendmail status +2021-01-07 17:58:25 Performing pgrep scan without uid +2021-01-07 17:58:25 IsRunning: process 'sendmail' found (22277 ) +2021-01-07 17:58:25 Result: found running Sendmail process +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test MAIL-8920 (Check OpenSMTPD status) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 Security check: file is normal +2021-01-07 17:58:25 Checking permissions of /root/scans/lynis/include/tests_firewalls +2021-01-07 17:58:25 File permissions are OK +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Action: Performing tests from category: Software: firewalls +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4502 (Check iptables kernel module) +2021-01-07 17:58:25 Result: Found iptables in loaded kernel modules +2021-01-07 17:58:25 Found module: ip_tables +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4508 (Check used policies of iptables chains) +2021-01-07 17:58:25 Test: gathering information from table filter +2021-01-07 17:58:25 Result: iptables -- policy is . +2021-01-07 17:58:25 Result: +2021-01-07 17:58:25 Result: iptables filter -- INPUTACCEPTFORWARDACCEPTOUTPUTACCEPTREJECTREJECTRETURN policy is . +2021-01-07 17:58:25 Result: +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4512 (Check iptables for empty ruleset) +2021-01-07 17:58:25 Result: iptables ruleset seems to be empty (found 4 rules) +2021-01-07 17:58:25 Warning: iptables module(s) loaded, but no rules active [test:FIRE-4512] [details:-] [solution:-] +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4513 (Check iptables for unused rules) +2021-01-07 17:58:25 Result: Found one or more possible unused rules +2021-01-07 17:58:25 Description: Unused rules can be a sign that the firewall rules aren't optimized or up-to-date +2021-01-07 17:58:25 Note: Sometimes rules aren't triggered but still in use. Keep this in mind before cleaning up rules. +2021-01-07 17:58:25 Output: iptables rule numbers: 1 1 2 3 +2021-01-07 17:58:25 Suggestion: Check iptables rules to see which rules are currently not used [test:FIRE-4513] [details:-] [solution:-] +2021-01-07 17:58:25 Tip: iptables --list --numeric --line-numbers --verbose +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4518 (Check pf firewall components) +2021-01-07 17:58:25 Reason to skip: No /dev/pf device +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4520 (Check pf configuration consistency) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4524 (Check for CSF presence) +2021-01-07 17:58:25 Test: check /etc/csf/csf.conf +2021-01-07 17:58:25 Result: /etc/csf/csf.conf does NOT exist +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4526 (Check ipf status) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4530 (Check IPFW status) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4532 (Check macOS application firewall) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4534 (Check for presence of outbound firewalls on macOS) +2021-01-07 17:58:25 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4536 (Check nftables status) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4538 (Check nftables basic configuration) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test FIRE-4540 (Check for empty nftables configuration) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4586 (Check firewall logging) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4590 (Check firewall status) +2021-01-07 17:58:25 Result: host based firewall or packet filter is active +2021-01-07 17:58:25 Hardening: assigned maximum number of hardening points for this item (5). Currently having 140 points (out of 175) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID FIRE-4594 (Check for APF presence) +2021-01-07 17:58:25 Test: check /etc/apf/conf.apf +2021-01-07 17:58:25 Result: /etc/apf/conf.apf does NOT exist +2021-01-07 17:58:25 Security check: file is normal +2021-01-07 17:58:25 Checking permissions of /root/scans/lynis/include/tests_webservers +2021-01-07 17:58:25 File permissions are OK +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Action: Performing tests from category: Software: webserver +2021-01-07 17:58:25 Action: created temporary file /tmp/lynis.66sIYrqA5x +2021-01-07 17:58:25 Action: created temporary file /tmp/lynis.TY0vCjeFMj +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Performing test ID HTTP-6622 (Checking Apache presence) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test HTTP-6624 (Testing main Apache configuration file) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:25 Skipped test HTTP-6626 (Testing other Apache configuration file) +2021-01-07 17:58:25 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:25 ==== +2021-01-07 17:58:26 Skipped test HTTP-6632 (Determining all available Apache modules) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6640 (Determining existence of specific Apache modules) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6641 (Determining existence of specific Apache modules) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6643 (Determining existence of specific Apache modules) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID HTTP-6702 (Check nginx process) +2021-01-07 17:58:26 Test: searching running nginx process +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'nginx' not found +2021-01-07 17:58:26 Result: no running nginx process found +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6704 (Check nginx configuration file) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6706 (Check for additional nginx configuration files) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6708 (Check discovered nginx configuration settings) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6710 (Check nginx SSL configuration settings) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6712 (Check nginx access logging) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6714 (Check for missing error logs in nginx) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6716 (Check for debug mode on error log in nginx) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test HTTP-6720 (Check Nginx log files) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 Security check: file is normal +2021-01-07 17:58:26 Checking permissions of /root/scans/lynis/include/tests_ssh +2021-01-07 17:58:26 File permissions are OK +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Action: Performing tests from category: SSH Support +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SSH-7402 (Check for running SSH daemon) +2021-01-07 17:58:26 Test: Searching for a SSH daemon +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'sshd' found (1333 1380 ) +2021-01-07 17:58:26 Action: created temporary file /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SSH-7404 (Check SSH daemon file location) +2021-01-07 17:58:26 Test: searching for sshd_config file +2021-01-07 17:58:26 Result: /etc/ssh/sshd_config exists +2021-01-07 17:58:26 Test: check if we can access /etc/ssh/sshd_config (escaped: /etc/ssh/sshd_config) +2021-01-07 17:58:26 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:26 Result: file /etc/ssh/sshd_config is readable (or directory accessible). +2021-01-07 17:58:26 Result: using last found configuration file: /etc/ssh/sshd_config +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SSH-7406 (Determine OpenSSH version) +2021-01-07 17:58:26 Result: discovered OpenSSH version is 7.2 +2021-01-07 17:58:26 Result: OpenSSH major version: 7 +2021-01-07 17:58:26 Result: OpenSSH minor version: 2 +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SSH-7408 (Check SSH specific defined options) +2021-01-07 17:58:26 Test: Checking specific defined options in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: added additional options for OpenSSH < 7.4 +2021-01-07 17:58:26 Result: added additional options for OpenSSH < 7.5 +2021-01-07 17:58:26 Test: Checking AllowTcpForwarding in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option AllowTcpForwarding found +2021-01-07 17:58:26 Result: Option AllowTcpForwarding value is YES +2021-01-07 17:58:26 Result: OpenSSH option AllowTcpForwarding is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowTcpForwarding (set YES to NO)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 140 points (out of 178) +2021-01-07 17:58:26 Test: Checking ClientAliveCountMax in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option ClientAliveCountMax found +2021-01-07 17:58:26 Result: Option ClientAliveCountMax value is 3 +2021-01-07 17:58:26 Result: OpenSSH option ClientAliveCountMax is configured reasonably +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:ClientAliveCountMax (set 3 to 2)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (1 of 3). Currently having 141 points (out of 181) +2021-01-07 17:58:26 Test: Checking ClientAliveInterval in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option ClientAliveInterval found +2021-01-07 17:58:26 Result: Option ClientAliveInterval value is 0 +2021-01-07 17:58:26 Result: OpenSSH option ClientAliveInterval is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 144 points (out of 184) +2021-01-07 17:58:26 Test: Checking Compression in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option Compression found +2021-01-07 17:58:26 Result: Option Compression value is YES +2021-01-07 17:58:26 Result: OpenSSH option Compression is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Compression (set YES to NO)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 144 points (out of 187) +2021-01-07 17:58:26 Test: Checking FingerprintHash in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option FingerprintHash found +2021-01-07 17:58:26 Result: Option FingerprintHash value is SHA256 +2021-01-07 17:58:26 Result: OpenSSH option FingerprintHash is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 147 points (out of 190) +2021-01-07 17:58:26 Test: Checking GatewayPorts in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option GatewayPorts found +2021-01-07 17:58:26 Result: Option GatewayPorts value is NO +2021-01-07 17:58:26 Result: OpenSSH option GatewayPorts is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 150 points (out of 193) +2021-01-07 17:58:26 Test: Checking IgnoreRhosts in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option IgnoreRhosts found +2021-01-07 17:58:26 Result: Option IgnoreRhosts value is YES +2021-01-07 17:58:26 Result: OpenSSH option IgnoreRhosts is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 153 points (out of 196) +2021-01-07 17:58:26 Test: Checking LoginGraceTime in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option LoginGraceTime found +2021-01-07 17:58:26 Result: Option LoginGraceTime value is 120 +2021-01-07 17:58:26 Result: OpenSSH option LoginGraceTime is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 156 points (out of 199) +2021-01-07 17:58:26 Test: Checking LogLevel in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option LogLevel found +2021-01-07 17:58:26 Result: Option LogLevel value is INFO +2021-01-07 17:58:26 Result: OpenSSH option LogLevel is configured reasonably +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:LogLevel (set INFO to VERBOSE)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (1 of 3). Currently having 157 points (out of 202) +2021-01-07 17:58:26 Test: Checking MaxAuthTries in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option MaxAuthTries found +2021-01-07 17:58:26 Result: Option MaxAuthTries value is 6 +2021-01-07 17:58:26 Result: OpenSSH option MaxAuthTries is configured reasonably +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxAuthTries (set 6 to 3)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (1 of 3). Currently having 158 points (out of 205) +2021-01-07 17:58:26 Test: Checking MaxSessions in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option MaxSessions found +2021-01-07 17:58:26 Result: Option MaxSessions value is 10 +2021-01-07 17:58:26 Result: OpenSSH option MaxSessions is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:MaxSessions (set 10 to 2)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 158 points (out of 208) +2021-01-07 17:58:26 Test: Checking PermitRootLogin in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option PermitRootLogin found +2021-01-07 17:58:26 Result: Option PermitRootLogin value is YES +2021-01-07 17:58:26 Result: OpenSSH option PermitRootLogin is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 158 points (out of 211) +2021-01-07 17:58:26 Test: Checking PermitUserEnvironment in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option PermitUserEnvironment found +2021-01-07 17:58:26 Result: Option PermitUserEnvironment value is NO +2021-01-07 17:58:26 Result: OpenSSH option PermitUserEnvironment is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 161 points (out of 214) +2021-01-07 17:58:26 Test: Checking PermitTunnel in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option PermitTunnel found +2021-01-07 17:58:26 Result: Option PermitTunnel value is NO +2021-01-07 17:58:26 Result: OpenSSH option PermitTunnel is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 164 points (out of 217) +2021-01-07 17:58:26 Test: Checking Port in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option Port found +2021-01-07 17:58:26 Result: Option Port value is 22 +2021-01-07 17:58:26 Result: OpenSSH option Port is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Port (set 22 to )] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 164 points (out of 220) +2021-01-07 17:58:26 Test: Checking PrintLastLog in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option PrintLastLog found +2021-01-07 17:58:26 Result: Option PrintLastLog value is YES +2021-01-07 17:58:26 Result: OpenSSH option PrintLastLog is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 167 points (out of 223) +2021-01-07 17:58:26 Test: Checking StrictModes in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option StrictModes found +2021-01-07 17:58:26 Result: Option StrictModes value is YES +2021-01-07 17:58:26 Result: OpenSSH option StrictModes is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 170 points (out of 226) +2021-01-07 17:58:26 Test: Checking TCPKeepAlive in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option TCPKeepAlive found +2021-01-07 17:58:26 Result: Option TCPKeepAlive value is YES +2021-01-07 17:58:26 Result: OpenSSH option TCPKeepAlive is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:TCPKeepAlive (set YES to NO)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 170 points (out of 229) +2021-01-07 17:58:26 Test: Checking UseDNS in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option UseDNS found +2021-01-07 17:58:26 Result: Option UseDNS value is NO +2021-01-07 17:58:26 Result: OpenSSH option UseDNS is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 173 points (out of 232) +2021-01-07 17:58:26 Test: Checking X11Forwarding in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option X11Forwarding found +2021-01-07 17:58:26 Result: Option X11Forwarding value is YES +2021-01-07 17:58:26 Result: OpenSSH option X11Forwarding is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:X11Forwarding (set YES to NO)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 173 points (out of 235) +2021-01-07 17:58:26 Test: Checking AllowAgentForwarding in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option AllowAgentForwarding found +2021-01-07 17:58:26 Result: Option AllowAgentForwarding value is YES +2021-01-07 17:58:26 Result: OpenSSH option AllowAgentForwarding is in a weak configuration state and should be fixed +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:AllowAgentForwarding (set YES to NO)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 3). Currently having 173 points (out of 238) +2021-01-07 17:58:26 Test: Checking Protocol in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option Protocol found +2021-01-07 17:58:26 Result: Option Protocol value is 2 +2021-01-07 17:58:26 Result: OpenSSH option Protocol is configured very well +2021-01-07 17:58:26 Hardening: assigned maximum number of hardening points for this item (3). Currently having 176 points (out of 241) +2021-01-07 17:58:26 Test: Checking UsePrivilegeSeparation in /tmp/lynis.mD71WggfqA +2021-01-07 17:58:26 Result: Option UsePrivilegeSeparation found +2021-01-07 17:58:26 Result: Option UsePrivilegeSeparation value is YES +2021-01-07 17:58:26 Result: OpenSSH option UsePrivilegeSeparation is configured reasonably +2021-01-07 17:58:26 Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:UsePrivilegeSeparation (set YES to SANDBOX)] [solution:-] +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (1 of 3). Currently having 177 points (out of 244) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups) +2021-01-07 17:58:26 Result: AllowUsers is not set +2021-01-07 17:58:26 Result: AllowGroups is not set +2021-01-07 17:58:26 Result: SSH has no specific user or group limitation. Most likely all valid users can SSH to this machine. +2021-01-07 17:58:26 Hardening: assigned partial number of hardening points (0 of 1). Currently having 177 points (out of 245) +2021-01-07 17:58:26 Security check: file is normal +2021-01-07 17:58:26 Checking permissions of /root/scans/lynis/include/tests_snmp +2021-01-07 17:58:26 File permissions are OK +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Action: Performing tests from category: SNMP Support +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID SNMP-3302 (Check for running SNMP daemon) +2021-01-07 17:58:26 Test: Searching for a SNMP daemon +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'snmpd' not found +2021-01-07 17:58:26 Result: No running SNMP daemon found +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test SNMP-3304 (Check SNMP daemon file location) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test SNMP-3306 (Check SNMP communities) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 Security check: file is normal +2021-01-07 17:58:26 Checking permissions of /root/scans/lynis/include/tests_databases +2021-01-07 17:58:26 File permissions are OK +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Action: Performing tests from category: Databases +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1804 (Checking active MySQL process) +2021-01-07 17:58:26 Result: MySQL process not active +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1816 (Checking MySQL root password) +2021-01-07 17:58:26 Reason to skip: MySQL not installed, or not running +2021-01-07 17:58:26 Test skipped, MySQL daemon not running or no MySQL client available +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1818 (Check status of MongoDB server) +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'mongod' not found +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1820 (Check for authorization in MongoDB) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1826 (Checking active PostgreSQL processes) +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'postgres:' not found +2021-01-07 17:58:26 Result: PostgreSQL process not active +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1828 (Test PostgreSQL configuration) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1840 (Checking active Oracle processes) +2021-01-07 17:58:26 Result: Oracle process(es) not active +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1860 (Checking active DB2 instances) +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'db2sysc' not found +2021-01-07 17:58:26 Result: No DB2 instances are running +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID DBS-1880 (Check for active Redis server) +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'redis-server' not found +2021-01-07 17:58:26 Result: No Redis processes are running +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1882 (Redis configuration file) +2021-01-07 17:58:26 Reason to skip: Redis not running +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1884 (Redis: requirepass option configured) +2021-01-07 17:58:26 Reason to skip: Redis not running, or no configuration file found +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1886 (Redis: rename-command CONFIG used) +2021-01-07 17:58:26 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test DBS-1888 (Redis: bind on localhost) +2021-01-07 17:58:26 Reason to skip: Redis not running, or no configuration found +2021-01-07 17:58:26 Security check: file is normal +2021-01-07 17:58:26 Checking permissions of /root/scans/lynis/include/tests_ldap +2021-01-07 17:58:26 File permissions are OK +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Action: Performing tests from category: LDAP Services +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID LDAP-2219 (Check running OpenLDAP instance) +2021-01-07 17:58:26 Performing pgrep scan without uid +2021-01-07 17:58:26 IsRunning: process 'slapd' not found +2021-01-07 17:58:26 Result: No running slapd process found. +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Skipped test LDAP-2224 (Check presence slapd.conf) +2021-01-07 17:58:26 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:26 Security check: file is normal +2021-01-07 17:58:26 Checking permissions of /root/scans/lynis/include/tests_php +2021-01-07 17:58:26 File permissions are OK +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Action: Performing tests from category: PHP +2021-01-07 17:58:26 ==== +2021-01-07 17:58:26 Performing test ID PHP-2211 (Check php.ini presence) +2021-01-07 17:58:26 Test: Checking for presence php.ini +2021-01-07 17:58:26 Test: checking presence /etc/php.ini +2021-01-07 17:58:26 Result: file /etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php.ini.default +2021-01-07 17:58:26 Result: file /etc/php.ini.default not found +2021-01-07 17:58:26 Test: checking presence /etc/php/php.ini +2021-01-07 17:58:26 Result: file /etc/php/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/apache2-php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php/apache2-php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cgi-php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cgi-php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/cli-php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php/cli-php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/embed-php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php/embed-php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php7.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php7.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php7.3/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php7.3/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php7.2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php7.2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php7.1/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php7.1/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php7.0/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php7.0/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/fpm-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php/fpm-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/cgi/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/cgi/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/cli-php5.4/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/cli-php5.4/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/cli-php5.5/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/cli-php5.5/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/cli-php5.6/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/cli-php5.6/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php5/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php5/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /private/etc/php.ini +2021-01-07 17:58:26 Result: file /private/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.0/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.0/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.1/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.1/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.2/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.2/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.3/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.3/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.4/apache2/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.4/apache2/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.0/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.0/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.0/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.0/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.1/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.1/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.1/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.1/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.2/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.2/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.2/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.2/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.3/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.3/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.3/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.3/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.4/cli/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.4/cli/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php/7.4/fpm/php.ini +2021-01-07 17:58:26 Result: file /etc/php/7.4/fpm/php.ini not found +2021-01-07 17:58:26 Test: checking presence /var/www/conf/php.ini +2021-01-07 17:58:26 Result: file /var/www/conf/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/etc/php.ini +2021-01-07 17:58:26 Result: file /usr/local/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/etc/php5/cgi/php.ini +2021-01-07 17:58:26 Result: file /usr/local/etc/php5/cgi/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php54/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php54/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php56/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php56/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php70/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php70/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php71/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php71/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php72/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php72/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php73/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php73/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/php74/lib/php.ini +2021-01-07 17:58:26 Result: file /usr/local/php74/lib/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/local/zend/etc/php.ini +2021-01-07 17:58:26 Result: file /usr/local/zend/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /usr/pkg/etc/php.ini +2021-01-07 17:58:26 Result: file /usr/pkg/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php54/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php54/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php55/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php55/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php56/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php56/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php70/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php70/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php71/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php71/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php72/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php72/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php73/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php73/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/cpanel/ea-php74/root/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/cpanel/ea-php74/root/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php44/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php44/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php51/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php51/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php52/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php52/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php53/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php53/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php54/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php54/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php55/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php55/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php56/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php56/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php70/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php70/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php71/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php71/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php72/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php72/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php73/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php73/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /opt/alt/php74/etc/php.ini +2021-01-07 17:58:26 Result: file /opt/alt/php74/etc/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php56/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php56/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php70/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php70/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php71/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php71/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php72/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php72/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php73/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php73/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/opt/remi/php74/php.ini +2021-01-07 17:58:26 Result: file /etc/opt/remi/php74/php.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-5.6.ini +2021-01-07 17:58:26 Result: file /etc/php-5.6.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-7.0.ini +2021-01-07 17:58:26 Result: file /etc/php-7.0.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-7.1.ini +2021-01-07 17:58:26 Result: file /etc/php-7.1.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-7.2.ini +2021-01-07 17:58:26 Result: file /etc/php-7.2.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-7.3.ini +2021-01-07 17:58:26 Result: file /etc/php-7.3.ini not found +2021-01-07 17:58:26 Test: checking presence /etc/php-7.4.ini +2021-01-07 17:58:26 Result: file /etc/php-7.4.ini not found +2021-01-07 17:58:26 Result: no files found for /etc/php5/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.0/cli/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.1/cli/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.2/cli/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.3/cli/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.4/cli/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.0/fpm/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.1/fpm/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.2/fpm/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.3/fpm/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php/7.4/fpm/conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php54/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php55/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php56/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php70/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php71/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php72/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php73/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/cpanel/ea-php74/root/etc/php.d +2021-01-07 17:58:26 Result: no files found for /opt/alt/php44/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php51/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php52/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php53/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php54/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php55/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php56/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php70/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php71/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php72/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php73/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /opt/alt/php74/etc/php.d.all +2021-01-07 17:58:26 Result: no files found for /usr/local/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /usr/local/php70/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /usr/local/php71/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /usr/local/php72/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /usr/local/php73/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /usr/local/php74/lib/php.conf.d +2021-01-07 17:58:26 Result: no files found for /etc/php-5.6 +2021-01-07 17:58:26 Result: no files found for /etc/php-7.0 +2021-01-07 17:58:27 Result: no files found for /etc/php-7.1 +2021-01-07 17:58:27 Result: no files found for /etc/php-7.2 +2021-01-07 17:58:27 Result: no files found for /etc/php-7.3 +2021-01-07 17:58:27 Result: no files found for /etc/php-7.4 +2021-01-07 17:58:27 Result: no php.ini file found +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2320 (Check PHP disabled functions) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2368 (Check PHP register_globals option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2372 (Check PHP expose_php option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2374 (Check PHP enable_dl option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2376 (Check PHP allow_url_fopen option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2378 (Check PHP allow_url_include option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test PHP-2382 (Check PHP expose_php option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 Security check: file is normal +2021-01-07 17:58:27 Checking permissions of /root/scans/lynis/include/tests_squid +2021-01-07 17:58:27 File permissions are OK +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Action: Performing tests from category: Squid Support +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID SQD-3602 (Check for running Squid daemon) +2021-01-07 17:58:27 Test: Searching for a Squid daemon +2021-01-07 17:58:27 Result: No running Squid daemon found +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3604 (Check Squid daemon file location) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3606 (Check Squid version) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3610 (Gather Squid settings) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3613 (Check Squid file permissions) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3614 (Check Squid authentication methods) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3616 (Check external Squid authentication) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3620 (Check Squid access control lists) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3624 (Check Squid safe ports) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3630 (Check Squid reply_body_max_size option) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test SQD-3680 (Check Squid version suppression) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 Security check: file is normal +2021-01-07 17:58:27 Checking permissions of /root/scans/lynis/include/tests_logging +2021-01-07 17:58:27 File permissions are OK +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Action: Performing tests from category: Logging and files +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2130 (Check for running syslog daemon) +2021-01-07 17:58:27 Test: Searching for a logging daemon +2021-01-07 17:58:27 Result: Found a logging daemon +2021-01-07 17:58:27 Hardening: assigned maximum number of hardening points for this item (3). Currently having 180 points (out of 248) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2132 (Check for running syslog-ng daemon) +2021-01-07 17:58:27 Test: Searching for syslog-ng daemon in process list +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'syslog-ng' not found +2021-01-07 17:58:27 Result: Syslog-ng NOT found in process list +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2134 (Checking Syslog-NG configuration file consistency) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2136 (Check for running systemd journal daemon) +2021-01-07 17:58:27 Test: Searching for systemd journal daemon in process list +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'systemd-journal' found (604 ) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2210 (Check for running metalog daemon) +2021-01-07 17:58:27 Test: Searching for metalog daemon in process list +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'metalog' not found +2021-01-07 17:58:27 Result: metalog NOT found in process list +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2230 (Check for running RSyslog daemon) +2021-01-07 17:58:27 Test: Searching for RSyslog daemon in process list +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'rsyslogd' found (1229 ) +2021-01-07 17:58:27 Result: Found rsyslogd in process list +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2240 (Check for running RFC 3195 compliant daemon) +2021-01-07 17:58:27 Test: Searching for RFC 3195 daemon (alias syslog reliable) in process list +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'rfc3195d' not found +2021-01-07 17:58:27 Result: rfc3195d NOT found in process list +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2138 (Checking kernel logger daemon on Linux) +2021-01-07 17:58:27 Test: Searching kernel logger daemon (klogd) +2021-01-07 17:58:27 Result: test skipped, because other facility is being used to log kernel messages +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2142 (Checking minilog daemon) +2021-01-07 17:58:27 Result: Checking for unkilled minilogd instances +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'minilogd' not found +2021-01-07 17:58:27 Result: No minilogd is running +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2146 (Checking logrotate.conf and logrotate.d) +2021-01-07 17:58:27 Test: Checking for /etc/logrotate.conf +2021-01-07 17:58:27 Result: /etc/logrotate.conf found (file) +2021-01-07 17:58:27 Test: Checking for /etc/logrotate.d (directory) +2021-01-07 17:58:27 Result: /etc/logrotate.d found +2021-01-07 17:58:27 Result: logrotate configuration found +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2148 (Checking logrotated files) +2021-01-07 17:58:27 Test: Checking which files are rotated with logrotate and if they exist +2021-01-07 17:58:27 Result: found one or more files which are rotated via logrotate +2021-01-07 17:58:27 Output: File:/var/log/aptitude:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/cron.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/daemon.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/debug:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/lpr.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/mail.info:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/mail.warn:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/messages:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/user.log:does_not_exist +2021-01-07 17:58:27 Output: File:/var/log/alternatives.log:exists +2021-01-07 17:58:27 Output: File:/var/log/apt/history.log:exists +2021-01-07 17:58:27 Output: File:/var/log/apt/term.log:exists +2021-01-07 17:58:27 Output: File:/var/log/aptitude:exists +2021-01-07 17:58:27 Output: File:/var/log/auth.log:exists +2021-01-07 17:58:27 Output: File:/var/log/btmp:exists +2021-01-07 17:58:27 Output: File:/var/log/cron.log:exists +2021-01-07 17:58:27 Output: File:/var/log/daemon.log:exists +2021-01-07 17:58:27 Output: File:/var/log/debug:exists +2021-01-07 17:58:27 Output: File:/var/log/dpkg.log:exists +2021-01-07 17:58:27 Output: File:/var/log/fail2ban.log:exists +2021-01-07 17:58:27 Output: File:/var/log/kern.log:exists +2021-01-07 17:58:27 Output: File:/var/log/lpr.log:exists +2021-01-07 17:58:27 Output: File:/var/log/mail.err:exists +2021-01-07 17:58:27 Output: File:/var/log/mail.info:exists +2021-01-07 17:58:27 Output: File:/var/log/mail.log:exists +2021-01-07 17:58:27 Output: File:/var/log/mail.warn:exists +2021-01-07 17:58:27 Output: File:/var/log/messages:exists +2021-01-07 17:58:27 Output: File:/var/log/syslog:exists +2021-01-07 17:58:27 Output: File:/var/log/unattended-upgrades/unattended-upgrades-dpkg.log:exists +2021-01-07 17:58:27 Output: File:/var/log/unattended-upgrades/unattended-upgrades-shutdown.log:exists +2021-01-07 17:58:27 Output: File:/var/log/unattended-upgrades/unattended-upgrades.log:exists +2021-01-07 17:58:27 Output: File:/var/log/user.log:exists +2021-01-07 17:58:27 Output: File:/var/log/wtmp:exists +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2150 (Checking directories in logrotate configuration) +2021-01-07 17:58:27 Test: Checking which directories can be found in logrotate configuration +2021-01-07 17:58:27 Result: found one or more directories (via logrotate configuration) +2021-01-07 17:58:27 Directory found: /var/log +2021-01-07 17:58:27 Directory found: /var/log/apt +2021-01-07 17:58:27 Directory found: /var/log/unattended-upgrades +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2152 (Checking loghost) +2021-01-07 17:58:27 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2153 (Checking loghost is localhost) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2154 (Checking syslog configuration file) +2021-01-07 17:58:27 Test: analyzing file /etc/rsyslog.conf for remote target +2021-01-07 17:58:27 Result: no remote target found +2021-01-07 17:58:27 Test: analyzing file /etc/rsyslog.d/21-cloudinit.conf for remote target +2021-01-07 17:58:27 Result: no remote target found +2021-01-07 17:58:27 Test: analyzing file /etc/rsyslog.d/50-default.conf for remote target +2021-01-07 17:58:27 Result: no remote target found +2021-01-07 17:58:27 Result: no remote logging found +2021-01-07 17:58:27 Suggestion: Enable logging to an external logging host for archiving purposes and additional protection [test:LOGG-2154] [details:-] [solution:-] +2021-01-07 17:58:27 Hardening: assigned partial number of hardening points (1 of 3). Currently having 181 points (out of 251) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2160 (Checking /etc/newsyslog.conf) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2162 (Checking directories in /etc/newsyslog.conf) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2164 (Checking files specified /etc/newsyslog.conf) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2170 (Checking log paths) +2021-01-07 17:58:27 Test: Searching log paths +2021-01-07 17:58:27 Result: directory /var/log exists +2021-01-07 17:58:27 Result: directory /var/adm can't be found +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID LOGG-2180 (Checking open log files) +2021-01-07 17:58:27 Test: checking open log files with lsof +2021-01-07 17:58:27 Result: lsof not installed, skipping test +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2190 (Checking for deleted files in use) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test LOGG-2192 (Checking for open log files that are empty) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 Security check: file is normal +2021-01-07 17:58:27 Checking permissions of /root/scans/lynis/include/tests_insecure_services +2021-01-07 17:58:27 File permissions are OK +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Action: Performing tests from category: Insecure services +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8000 (Installed inetd package) +2021-01-07 17:58:27 Test: Checking if inetd is installed +2021-01-07 17:58:27 Result: inetd is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8002 (Check for enabled inet daemon) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8004 (Presence of inetd configuration file) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8006 (Check configuration of inetd when disabled) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8016 (Check for telnet via inetd) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8100 (Check for installed xinetd daemon) +2021-01-07 17:58:27 Test: Checking for installed xinetd daemon +2021-01-07 17:58:27 Result: xinetd is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8102 (Check for active xinet daemon) +2021-01-07 17:58:27 Test: Searching for active extended internet services daemon (xinetd) +2021-01-07 17:58:27 Performing pgrep scan without uid +2021-01-07 17:58:27 IsRunning: process 'xinetd' not found +2021-01-07 17:58:27 Result: xinetd is NOT running +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8104 (Check for enabled xinet daemon) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8106 (Check configuration of xinetd when disabled) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8116 (Insecure services enabled via xinetd) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8200 (Check if tcp_wrappers is installed when inetd/xinetd is active) +2021-01-07 17:58:27 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8300 (Check if rsh client is installed) +2021-01-07 17:58:27 Test: Checking if rsh client is installed +2021-01-07 17:58:27 Result: rsh client is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8304 (Check if rsh server is installed) +2021-01-07 17:58:27 Test: Checking if rsh server is installed +2021-01-07 17:58:27 Result: rsh server is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8310 (Check if telnet client is installed) +2021-01-07 17:58:27 Test: Checking if telnet client is installed +2021-01-07 17:58:27 Result: telnet client is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8322 (Check if telnet server is installed) +2021-01-07 17:58:27 Test: Checking if telnet server is installed +2021-01-07 17:58:27 Result: telnet server is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8314 (Check if NIS client is installed) +2021-01-07 17:58:27 Test: Checking if NIS client is installed +2021-01-07 17:58:27 Result: NIS client is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8316 (Check if NIS server is installed) +2021-01-07 17:58:27 Test: Checking if NIS server is installed +2021-01-07 17:58:27 Result: NIS server is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8318 (Check if TFTP client is installed) +2021-01-07 17:58:27 Test: Checking if TFTP client is installed +2021-01-07 17:58:27 Result: TFTP client is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID INSE-8320 (Check if TFTP server is installed) +2021-01-07 17:58:27 Test: Checking if TFTP server is installed +2021-01-07 17:58:27 Result: TFTP server is NOT installed +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test INSE-8050 (Check for insecure services on macOS) +2021-01-07 17:58:27 Reason to skip: Incorrect guest OS (macOS only) +2021-01-07 17:58:27 Security check: file is normal +2021-01-07 17:58:27 Checking permissions of /root/scans/lynis/include/tests_banners +2021-01-07 17:58:27 File permissions are OK +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Action: Performing tests from category: Banners and identification +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Skipped test BANN-7113 (Check COPYRIGHT banner file) +2021-01-07 17:58:27 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID BANN-7124 (Check issue banner file) +2021-01-07 17:58:27 Test: Checking file /etc/issue +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID BANN-7126 (Check issue banner file contents) +2021-01-07 17:58:27 Test: Checking file /etc/issue contents for legal key words +2021-01-07 17:58:27 Result: Found only 0 key words (5 or more suggested), to warn unauthorized users and could be increased +2021-01-07 17:58:27 Suggestion: Add a legal banner to /etc/issue, to warn unauthorized users [test:BANN-7126] [details:-] [solution:-] +2021-01-07 17:58:27 Hardening: assigned partial number of hardening points (0 of 1). Currently having 181 points (out of 252) +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID BANN-7128 (Check issue.net banner file) +2021-01-07 17:58:27 Test: Checking file /etc/issue.net +2021-01-07 17:58:27 Result: file /etc/issue.net exists +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID BANN-7130 (Check issue.net banner file contents) +2021-01-07 17:58:27 Test: Checking file /etc/issue.net contents for legal key words +2021-01-07 17:58:27 Result: Found only 0 key words, to warn unauthorized users and could be increased +2021-01-07 17:58:27 Suggestion: Add legal banner to /etc/issue.net, to warn unauthorized users [test:BANN-7130] [details:-] [solution:-] +2021-01-07 17:58:27 Hardening: assigned partial number of hardening points (0 of 1). Currently having 181 points (out of 253) +2021-01-07 17:58:27 Security check: file is normal +2021-01-07 17:58:27 Checking permissions of /root/scans/lynis/include/tests_scheduling +2021-01-07 17:58:27 File permissions are OK +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Action: Performing tests from category: Scheduled tasks +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID SCHD-7702 (Check status of cron daemon) +2021-01-07 17:58:27 Result: cron daemon running +2021-01-07 17:58:27 ==== +2021-01-07 17:58:27 Performing test ID SCHD-7704 (Check crontab/cronjobs) +2021-01-07 17:58:27 Found cronjob (/etc/crontab): 17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +2021-01-07 17:58:27 Found cronjob (/etc/crontab): 25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +2021-01-07 17:58:27 Found cronjob (/etc/crontab): 47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +2021-01-07 17:58:27 Found cronjob (/etc/crontab): 52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +2021-01-07 17:58:27 Test: checking directory /etc/cron.d +2021-01-07 17:58:27 Test: check if we can access /etc/cron.d (escaped: /etc/cron.d) +2021-01-07 17:58:27 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:27 Result: file /etc/cron.d is readable (or directory accessible). +2021-01-07 17:58:27 Result: found directory /etc/cron.d +2021-01-07 17:58:27 Test: searching files in /etc/cron.d +2021-01-07 17:58:27 Result: found one or more files in /etc/cron.d. Analyzing files.. +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.d/tiger): 0,*,*,*,*,root,test,-x,/usr/sbin/tigercron,&&,{,[,-r,"$DEFAULT",],&&,.,"$DEFAULT",;,nice,-n$NICETIGER,/usr/sbin/tigercron,-q,;,} +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.d/sendmail): */20,*,*,*,*,smmsp,test,-x,/etc/init.d/sendmail,&&,test,-x,/usr/share/sendmail/sendmail,&&,test,-x,/usr/lib/sm.bin/sendmail,&&,/usr/share/sendmail/sendmail,cron-msp +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.d/mdadm): 57,0,*,*,0,root,if,[,-x,/usr/share/mdadm/checkarray,],&&,[,$(date,+\%d),-le,7,];,then,/usr/share/mdadm/checkarray,--cron,--all,--idle,--quiet;,fi +2021-01-07 17:58:28 Result: done with analyzing files in /etc/cron.d +2021-01-07 17:58:28 Test: checking directory /etc/cron.hourly +2021-01-07 17:58:28 Result: found directory /etc/cron.hourly +2021-01-07 17:58:28 Test: check if we can access /etc/cron.hourly (escaped: /etc/cron.hourly) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/cron.hourly is readable (or directory accessible). +2021-01-07 17:58:28 Test: searching files in /etc/cron.hourly +2021-01-07 17:58:28 Result: no files found in /etc/cron.hourly +2021-01-07 17:58:28 Test: checking directory /etc/cron.daily +2021-01-07 17:58:28 Result: found directory /etc/cron.daily +2021-01-07 17:58:28 Test: check if we can access /etc/cron.daily (escaped: /etc/cron.daily) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/cron.daily is readable (or directory accessible). +2021-01-07 17:58:28 Test: searching files in /etc/cron.daily +2021-01-07 17:58:28 Result: found one or more files in /etc/cron.daily. Analyzing files.. +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/bsdmainutils +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/apt-compat +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/sendmail +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/passwd +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/acct +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/man-db +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/aptitude +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/dpkg +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/mdadm +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/cracklib-runtime +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.daily): /etc/cron.daily/logrotate +2021-01-07 17:58:28 Result: done with analyzing files in /etc/cron.daily +2021-01-07 17:58:28 Test: checking directory /etc/cron.weekly +2021-01-07 17:58:28 Result: found directory /etc/cron.weekly +2021-01-07 17:58:28 Test: check if we can access /etc/cron.weekly (escaped: /etc/cron.weekly) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/cron.weekly is readable (or directory accessible). +2021-01-07 17:58:28 Test: searching files in /etc/cron.weekly +2021-01-07 17:58:28 Result: found one or more files in /etc/cron.weekly. Analyzing files.. +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/man-db +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.weekly): /etc/cron.weekly/fstrim +2021-01-07 17:58:28 Result: done with analyzing files in /etc/cron.weekly +2021-01-07 17:58:28 Test: checking directory /etc/cron.monthly +2021-01-07 17:58:28 Result: found directory /etc/cron.monthly +2021-01-07 17:58:28 Test: check if we can access /etc/cron.monthly (escaped: /etc/cron.monthly) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/cron.monthly is readable (or directory accessible). +2021-01-07 17:58:28 Test: searching files in /etc/cron.monthly +2021-01-07 17:58:28 Result: found one or more files in /etc/cron.monthly. Analyzing files.. +2021-01-07 17:58:28 Result: Found cronjob (/etc/cron.monthly): /etc/cron.monthly/acct +2021-01-07 17:58:28 Result: done with analyzing files in /etc/cron.monthly +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID SCHD-7718 (Check at users) +2021-01-07 17:58:28 Test: Checking atd status +2021-01-07 17:58:28 Result: at daemon not active +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test SCHD-7720 (Check at users) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test SCHD-7724 (Check at jobs) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 Result: no scheduled Lynis execution found (e.g. crontab, cronjob) +2021-01-07 17:58:28 Security check: file is normal +2021-01-07 17:58:28 Checking permissions of /root/scans/lynis/include/tests_accounting +2021-01-07 17:58:28 File permissions are OK +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Action: Performing tests from category: Accounting +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-2754 (Check for available FreeBSD accounting information) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (FreeBSD only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-2760 (Check for available OpenBSD accounting information) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (OpenBSD only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID ACCT-9622 (Check for available Linux accounting information) +2021-01-07 17:58:28 Test: Check accounting information +2021-01-07 17:58:28 Result: /var/log/account/pacct available +2021-01-07 17:58:28 Hardening: assigned maximum number of hardening points for this item (3). Currently having 184 points (out of 256) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID ACCT-9626 (Check for sysstat accounting data) +2021-01-07 17:58:28 Test: check /etc/default/sysstat presence +2021-01-07 17:58:28 Result: sysstat not found via /etc/default/sysstat or /etc/cron.d/sysstat or as a systemd unit +2021-01-07 17:58:28 Suggestion: Enable sysstat to collect accounting (no results) [test:ACCT-9626] [details:-] [solution:-] +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID ACCT-9628 (Check for auditd) +2021-01-07 17:58:28 Test: Check auditd status +2021-01-07 17:58:28 Performing pgrep scan without uid +2021-01-07 17:58:28 IsRunning: process 'auditd' not found +2021-01-07 17:58:28 Result: auditd not active +2021-01-07 17:58:28 Suggestion: Enable auditd to collect audit information [test:ACCT-9628] [details:-] [solution:-] +2021-01-07 17:58:28 Hardening: assigned partial number of hardening points (0 of 1). Currently having 184 points (out of 257) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9630 (Check for auditd rules) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9632 (Check for auditd configuration file) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9634 (Check for auditd log file) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID ACCT-9636 (Check for Snoopy wrapper and logger) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9650 (Check Solaris audit daemon) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9652 (Check auditd SMF status) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9654 (Check BSM auditing in /etc/system) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9656 (Check BSM auditing in module list) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9660 (Check location of audit events) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test ACCT-9662 (Check Solaris auditing stats) +2021-01-07 17:58:28 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:28 Security check: file is normal +2021-01-07 17:58:28 Checking permissions of /root/scans/lynis/include/tests_time +2021-01-07 17:58:28 File permissions are OK +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Action: Performing tests from category: Time and Synchronization +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID TIME-3104 (Check for running NTP daemon or client) +2021-01-07 17:58:28 Test: Searching for a running NTP daemon or available client +2021-01-07 17:58:28 Result: no chrony configuration found +2021-01-07 17:58:28 Performing pgrep scan without uid +2021-01-07 17:58:28 IsRunning: process 'dntpd' not found +2021-01-07 17:58:28 Performing pgrep scan without uid +2021-01-07 17:58:28 IsRunning: process 'timed' not found +2021-01-07 17:58:28 Result: Found running systemd-timesyncd in process list +2021-01-07 17:58:28 Result: crontab file /etc/anacrontab not found +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in crontab file /etc/crontab +2021-01-07 17:58:28 Result: no ntpdate, rdate, sntp or ntpdig reference found in crontab file /etc/crontab +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.d/mdadm +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.d/sendmail +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.d/tiger +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/acct +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/apt-compat +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/aptitude +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/bsdmainutils +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/cracklib-runtime +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/dpkg +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/logrotate +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/man-db +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/mdadm +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/passwd +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.daily/sendmail +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/fstrim +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.weekly/man-db +2021-01-07 17:58:28 Test: checking for ntpdate, rdate, sntp or ntpdig in /etc/cron.monthly/acct +2021-01-07 17:58:28 Result: no ntpdate or rdate found in cron directories +2021-01-07 17:58:28 Test: checking for file /etc/network/if-up.d/ntpdate +2021-01-07 17:58:28 Result: file /etc/network/if-up.d/ntpdate does not exist +2021-01-07 17:58:28 Result: Found a time syncing daemon/client. +2021-01-07 17:58:28 Hardening: assigned maximum number of hardening points for this item (3). Currently having 187 points (out of 260) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3106 (Check systemd NTP time synchronization status) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3112 (Check active NTP associations ID's) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3116 (Check peers with stratum value of 16) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3120 (Check unreliable NTP peers) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3124 (Check selected time source) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3128 (Check preferred time source) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3132 (Check NTP falsetickers) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3136 (Check NTP protocol version) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID TIME-3148 (Check TZ variable) +2021-01-07 17:58:28 Test: testing for TZ variable +2021-01-07 17:58:28 Result: found TZ variable with value notset +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3160 (Check empty NTP step-tickers) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID TIME-3170 (Check configuration files) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3180 (Report if ntpctl cannot communicate with OpenNTPD) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3181 (Check status of OpenNTPD time synchronisation) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Skipped test TIME-3182 (Check OpenNTPD has working peers) +2021-01-07 17:58:28 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID TIME-3185 (Check systemd-timesyncd synchronized time) +2021-01-07 17:58:28 Warning: systemd-timesyncd never successfully synchronized time [test:TIME-3185] [details:-] [solution:-] +2021-01-07 17:58:28 Security check: file is normal +2021-01-07 17:58:28 Checking permissions of /root/scans/lynis/include/tests_crypto +2021-01-07 17:58:28 File permissions are OK +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Action: Performing tests from category: Cryptography +2021-01-07 17:58:28 ==== +2021-01-07 17:58:28 Performing test ID CRYP-7902 (Check expire date of SSL certificates) +2021-01-07 17:58:28 Paths to scan: /etc/apache2 /etc/dovecot /etc/httpd /etc/letsencrypt /etc/pki /etc/postfix /etc/refind.d/keys /etc/ssl /opt/psa/var/certificates /usr/local/psa/var/certificates /usr/local/share/ca-certificates /usr/share/ca-certificates /usr/share/gnupg /var/www /srv/www +2021-01-07 17:58:28 Paths to ignore: /etc/letsencrypt/archive +2021-01-07 17:58:28 Result: SSL path /etc/apache2 does not exist +2021-01-07 17:58:28 Result: SSL path /etc/dovecot does not exist +2021-01-07 17:58:28 Result: SSL path /etc/httpd does not exist +2021-01-07 17:58:28 Result: SSL path /etc/letsencrypt does not exist +2021-01-07 17:58:28 Result: SSL path /etc/pki does not exist +2021-01-07 17:58:28 Result: SSL path /etc/postfix does not exist +2021-01-07 17:58:28 Result: SSL path /etc/refind.d/keys does not exist +2021-01-07 17:58:28 Test: check if we can access /etc/ssl (escaped: /etc/ssl) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/ssl is readable (or directory accessible). +2021-01-07 17:58:28 Result: found directory /etc/ssl +2021-01-07 17:58:28 Test: check if we can access /etc/ssl/certs/ca-certificates.crt (escaped: /etc/ssl/certs/ca-certificates.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /etc/ssl/certs/ca-certificates.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/etc/ssl/certs/ca-certificates.crt' does most likely not belong to a package +2021-01-07 17:58:28 Result: file is a certificate file +2021-01-07 17:58:28 Result: certificate /etc/ssl/certs/ca-certificates.crt seems to be correct and still valid +2021-01-07 17:58:28 Result: found 1 certificates in /etc/ssl +2021-01-07 17:58:28 Result: SSL path /opt/psa/var/certificates does not exist +2021-01-07 17:58:28 Result: SSL path /usr/local/psa/var/certificates does not exist +2021-01-07 17:58:28 Test: check if we can access /usr/local/share/ca-certificates (escaped: /usr/local/share/ca-certificates) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/local/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:58:28 Result: found directory /usr/local/share/ca-certificates +2021-01-07 17:58:28 Result: found 0 certificates in /usr/local/share/ca-certificates +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates (escaped: /usr/share/ca-certificates) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates is readable (or directory accessible). +2021-01-07 17:58:28 Result: found directory /usr/share/ca-certificates +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt (escaped: /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt (escaped: /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:28 Result: file /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt is readable (or directory accessible). +2021-01-07 17:58:28 Result: file '/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:58:28 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt) +2021-01-07 17:58:28 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt (escaped: /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt (escaped: /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Certigna.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Certigna.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt (escaped: /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt (escaped: /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt (escaped: /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt (escaped: /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:29 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:58:29 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:29 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt) +2021-01-07 17:58:29 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt (escaped: /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/EC-ACC.crt (escaped: /usr/share/ca-certificates/mozilla/EC-ACC.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/EC-ACC.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/EC-ACC.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt (escaped: /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt is readable (or directory accessible). +2021-01-07 17:58:30 Result: file '/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:30 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt) +2021-01-07 17:58:30 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:30 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt (escaped: /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt (escaped: /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt (escaped: /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt (escaped: /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt (escaped: /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Izenpe.com.crt (escaped: /usr/share/ca-certificates/mozilla/Izenpe.com.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Izenpe.com.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Izenpe.com.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt (escaped: /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt (escaped: /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt (escaped: /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt (escaped: /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:31 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt) +2021-01-07 17:58:31 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:31 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt is readable (or directory accessible). +2021-01-07 17:58:31 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt (escaped: /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt (escaped: /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt (escaped: /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt (escaped: /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt (escaped: /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt (escaped: /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt is readable (or directory accessible). +2021-01-07 17:58:32 Result: file '/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:32 Test: check if we can access /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt (escaped: /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt) +2021-01-07 17:58:32 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:32 Result: file /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt (escaped: /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt (escaped: /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt (escaped: /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt (escaped: /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt (escaped: /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt (escaped: /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt (escaped: /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt (escaped: /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt) +2021-01-07 17:58:33 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:33 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt is readable (or directory accessible). +2021-01-07 17:58:33 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt' belongs to package (ca-certificates) +2021-01-07 17:58:33 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt) +2021-01-07 17:58:34 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:34 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt is readable (or directory accessible). +2021-01-07 17:58:34 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt' belongs to package (ca-certificates) +2021-01-07 17:58:34 Test: check if we can access /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt (escaped: /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt) +2021-01-07 17:58:34 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:34 Result: file /usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt is readable (or directory accessible). +2021-01-07 17:58:34 Result: file '/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt' belongs to package (ca-certificates) +2021-01-07 17:58:34 Result: found 138 certificates in /usr/share/ca-certificates +2021-01-07 17:58:34 Test: check if we can access /usr/share/gnupg (escaped: /usr/share/gnupg) +2021-01-07 17:58:34 Result: file is owned by our current user ID (0), checking if it is readable +2021-01-07 17:58:34 Result: file /usr/share/gnupg is readable (or directory accessible). +2021-01-07 17:58:34 Result: found directory /usr/share/gnupg +2021-01-07 17:58:34 Result: found 0 certificates in /usr/share/gnupg +2021-01-07 17:58:34 Result: SSL path /var/www does not exist +2021-01-07 17:58:34 Result: SSL path /srv/www does not exist +2021-01-07 17:58:34 Result: found a total of 139 certificates +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CRYP-7930 (Determine if system uses LUKS block device encryption) +2021-01-07 17:58:34 Result: block device sda is not LUKS encrypted +2021-01-07 17:58:34 Result: block device sda1 is not LUKS encrypted +2021-01-07 17:58:34 Result: block device sda14 is not LUKS encrypted +2021-01-07 17:58:34 Result: block device sda15 is not LUKS encrypted +2021-01-07 17:58:34 Result: block device sr0 is not LUKS encrypted +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CRYP-7931 (Determine if system uses encrypted swap) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CRYP-8002 (Gather available kernel entropy) +2021-01-07 17:58:34 Result: found kernel entropy value of 994 +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CRYP-8004 (Presence of hardware random number generators) +2021-01-07 17:58:34 Test: looking for /sys/class/misc/hw_random/rng_current +2021-01-07 17:58:34 Result: positive match, found RNG: virtio_rng.0 +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'rngd' not found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CRYP-8005 (Presence of software pseudo random number generators) +2021-01-07 17:58:34 Test: looking for software pseudo random number generators +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'audio-entropyd' not found +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'haveged' not found +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'jitterentropy-rngd' not found +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_virtualization +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Virtualization +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_containers +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Containers +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test CONT-8004 (Query running Solaris zones) +2021-01-07 17:58:34 Reason to skip: Incorrect guest OS (Solaris only) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID CONT-8102 (Checking Docker status and information) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'dockerd' not found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test CONT-8104 (Checking Docker info for any warnings) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test CONT-8106 (Gather basic stats from Docker) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test CONT-8107 (Check number of Docker containers) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test CONT-8108 (Check file permissions for Docker files) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_mac_frameworks +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Security frameworks +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MACF-6204 (Check AppArmor presence) +2021-01-07 17:58:34 Result: aa-status binary not found, AppArmor not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test MACF-6208 (Check if AppArmor is enabled) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MACF-6232 (Check SELINUX presence) +2021-01-07 17:58:34 Test: checking if we have sestatus binary +2021-01-07 17:58:34 Result: sestatus binary NOT found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test MACF-6234 (Check SELINUX status) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MACF-6240 (Check TOMOYO Linux presence) +2021-01-07 17:58:34 Test: checking if we have tomoyo-init binary +2021-01-07 17:58:34 Result: tomoyo-init binary not found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test MACF-6242 (Check TOMOYO Linux status) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID RBAC-6272 (Check grsecurity presence) +2021-01-07 17:58:34 Result: no grsecurity found in kernel config +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MACF-6290 (Check for implemented MAC framework) +2021-01-07 17:58:34 Hardening: assigned partial number of hardening points (2 of 3). Currently having 189 points (out of 263) +2021-01-07 17:58:34 Result: found no implemented MAC framework +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_file_integrity +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Software: file integrity +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4310 (AFICK availability) +2021-01-07 17:58:34 Test: Checking AFICK binary +2021-01-07 17:58:34 Result: AFICK is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4314 (AIDE availability) +2021-01-07 17:58:34 Test: Checking AIDE binary +2021-01-07 17:58:34 Result: AIDE is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4315 (Check AIDE configuration file) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4316 (Presence of AIDE database and size check) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4318 (Osiris availability) +2021-01-07 17:58:34 Test: Checking Osiris binary +2021-01-07 17:58:34 Result: Osiris is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4322 (Samhain availability) +2021-01-07 17:58:34 Test: Checking Samhain binary +2021-01-07 17:58:34 Result: Samhain is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4326 (Tripwire availability) +2021-01-07 17:58:34 Test: Checking Tripwire binary +2021-01-07 17:58:34 Result: Tripwire is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4328 (OSSEC syscheck daemon running) +2021-01-07 17:58:34 Test: Checking if OSSEC syscheck daemon is running +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'ossec-syscheckd' not found +2021-01-07 17:58:34 Result: syscheck (OSSEC) is not active +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4330 (mtree availability) +2021-01-07 17:58:34 Test: Checking mtree binary +2021-01-07 17:58:34 Result: mtree is not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4334 (Check lfd daemon status) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4336 (Check lfd configuration status) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4338 (osqueryd syscheck daemon running) +2021-01-07 17:58:34 Test: Checking if osqueryd syscheck daemon is running +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'osqueryd' not found +2021-01-07 17:58:34 Result: syscheck (osquery) not installed +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4339 (Check IMA/EVM status) +2021-01-07 17:58:34 Reason to skip: No evmctl binary found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4340 (Check dm-integrity status) +2021-01-07 17:58:34 Reason to skip: No integritysetup binary found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4341 (Check dm-verity status) +2021-01-07 17:58:34 Result: dm-verity tools found but no active devices +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Skipped test FINT-4402 (AIDE configuration: Checksums (SHA256 or SHA512)) +2021-01-07 17:58:34 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID FINT-4350 (File integrity software installed) +2021-01-07 17:58:34 Test: Check if at least on file integrity tool is available/installed +2021-01-07 17:58:34 Result: No file integrity tools found +2021-01-07 17:58:34 Suggestion: Install a file integrity tool to monitor changes to critical and sensitive files [test:FINT-4350] [details:-] [solution:-] +2021-01-07 17:58:34 Hardening: assigned partial number of hardening points (0 of 5). Currently having 189 points (out of 268) +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_tooling +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Software: System tooling +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5002 (Checking for automation tools) +2021-01-07 17:58:34 Test: checking if directory /root/.ansible exists +2021-01-07 17:58:34 Result: directory /root/.ansible NOT found +2021-01-07 17:58:34 Test: checking if directory /etc/ansible exists +2021-01-07 17:58:34 Result: directory /etc/ansible NOT found +2021-01-07 17:58:34 Test: checking if directory /root/.ansible exists +2021-01-07 17:58:34 Result: directory /root/.ansible NOT found +2021-01-07 17:58:34 Test: checking if directory /tmp/.ansible exists +2021-01-07 17:58:34 Result: directory /tmp/.ansible NOT found +2021-01-07 17:58:34 Test: checking if file /var/log/ansible.log exists +2021-01-07 17:58:34 Result: file /var/log/ansible.log NOT found +2021-01-07 17:58:34 Test: checking if file ~/.ansible-retry exists +2021-01-07 17:58:34 Result: file ~/.ansible-retry NOT found +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'puppet master' not found +2021-01-07 17:58:34 Suggestion: Determine if automation tools are present for system management [test:TOOL-5002] [details:-] [solution:-] +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5102 (Check for presence of Fail2ban) +2021-01-07 17:58:34 Result: Fail2ban is installed (/usr/bin/fail2ban-server) +2021-01-07 17:58:34 Checking Fail2ban configuration file +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5104 (Enabled tests in Fail2ban) +2021-01-07 17:58:34 Result: service 'sshd' enabled +2021-01-07 17:58:34 Result: found at least one enabled jail +2021-01-07 17:58:34 Hardening: assigned maximum number of hardening points for this item (3). Currently having 192 points (out of 271) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5120 (Check for presence of Snort) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'snort' not found +2021-01-07 17:58:34 Result: Snort not present (Snort not running) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5122 (Check Snort configuration file) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5130 (Check for active Suricata daemon) +2021-01-07 17:58:34 Result: Suricata not installed (suricata not found) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5126 (Check for active OSSEC daemon) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'ossec-analysisd' not found +2021-01-07 17:58:34 Result: OSSEC analysis daemon not active +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'ossec-agentd' not found +2021-01-07 17:58:34 Result: OSSEC agent daemon not active +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID TOOL-5190 (Check presence of IDS/IPS tool) +2021-01-07 17:58:34 Hardening: assigned maximum number of hardening points for this item (2). Currently having 194 points (out of 273) +2021-01-07 17:58:34 Security check: file is normal +2021-01-07 17:58:34 Checking permissions of /root/scans/lynis/include/tests_malware +2021-01-07 17:58:34 File permissions are OK +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Action: Performing tests from category: Software: Malware +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MALW-3275 (Check for chkrootkit) +2021-01-07 17:58:34 Test: checking presence chkrootkit +2021-01-07 17:58:34 Result: chkrootkit not found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MALW-3276 (Check for Rootkit Hunter) +2021-01-07 17:58:34 Test: checking presence Rootkit Hunter +2021-01-07 17:58:34 Result: Found /usr/bin/rkhunter +2021-01-07 17:58:34 Hardening: assigned maximum number of hardening points for this item (2). Currently having 196 points (out of 275) +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MALW-3278 (Check for LMD) +2021-01-07 17:58:34 Test: checking presence LMD +2021-01-07 17:58:34 Result: LMD not found +2021-01-07 17:58:34 ==== +2021-01-07 17:58:34 Performing test ID MALW-3280 (Check if anti-virus tool is installed) +2021-01-07 17:58:34 Test: checking process com.avast.daemon +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'com.avast.daemon' not found +2021-01-07 17:58:34 Test: checking process Avira daemon +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'avqmd' not found +2021-01-07 17:58:34 Test: checking process epagd +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'bdagentd' not found +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'epagd' not found +2021-01-07 17:58:34 Test: checking process falcon-sensor (CrowdStrike) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'falcon-sensor' not found +2021-01-07 17:58:34 Test: checking process CylanceSvc +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'CylanceSvc' not found +2021-01-07 17:58:34 Test: checking process esets_daemon +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'esets_daemon' not found +2021-01-07 17:58:34 Test: checking process wdserver or klnagent (Kaspersky) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'klnagent' not found +2021-01-07 17:58:34 Test: checking process cma or cmdagent (McAfee) +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'cmdagent' not found +2021-01-07 17:58:34 Test: checking process savscand +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:34 IsRunning: process 'savscand' not found +2021-01-07 17:58:34 Test: checking process SophosScanD +2021-01-07 17:58:34 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'SophosScanD' not found +2021-01-07 17:58:35 Test: checking process rtvscand +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'rtvscand' not found +2021-01-07 17:58:35 Test: checking process Symantec management client service +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'smcd' not found +2021-01-07 17:58:35 Test: checking process Symantec Endpoint Protection configuration service +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'symcfgd' not found +2021-01-07 17:58:35 Test: checking process synoavd +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'synoavd' not found +2021-01-07 17:58:35 Test: checking process TmccMac to test for Trend Micro anti-virus (macOS) +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'TmccMac' not found +2021-01-07 17:58:35 Result: no commercial anti-virus tools found +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 3). Currently having 196 points (out of 278) +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID MALW-3282 (Check for clamscan) +2021-01-07 17:58:35 Test: checking presence clamscan +2021-01-07 17:58:35 Result: clamscan couldn't be found +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID MALW-3284 (Check for clamd) +2021-01-07 17:58:35 Test: checking running ClamAV daemon (clamd) +2021-01-07 17:58:35 Performing pgrep scan without uid +2021-01-07 17:58:35 IsRunning: process 'clamd' not found +2021-01-07 17:58:35 Result: clamd not running +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Skipped test MALW-3286 (Check for freshclam) +2021-01-07 17:58:35 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Skipped test MALW-3288 (Check for ClamXav) +2021-01-07 17:58:35 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution) +2021-01-07 17:58:35 Security check: file is normal +2021-01-07 17:58:35 Checking permissions of /root/scans/lynis/include/tests_file_permissions +2021-01-07 17:58:35 File permissions are OK +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Action: Performing tests from category: File Permissions +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID FILE-7524 (Perform file permissions check) +2021-01-07 17:58:35 Test: Checking file permissions +2021-01-07 17:58:35 Using profile /root/scans/lynis/default.prf for baseline. +2021-01-07 17:58:35 Test: checking file/directory /boot/grub/grub.cfg +2021-01-07 17:58:35 Test: checking if file /boot/grub/grub.cfg has the permissions set to 600 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (600) +2021-01-07 17:58:35 Test: checking file/directory /boot/grub2/grub.cfg +2021-01-07 17:58:35 Skipping file/directory /boot/grub2/grub.cfg as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /boot/grub2/user.cfg +2021-01-07 17:58:35 Skipping file/directory /boot/grub2/user.cfg as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/at.allow +2021-01-07 17:58:35 Skipping file/directory /etc/at.allow as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/at.deny +2021-01-07 17:58:35 Skipping file/directory /etc/at.deny as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.allow +2021-01-07 17:58:35 Test: checking if file /etc/cron.allow has the permissions set to 600 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (600) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.deny +2021-01-07 17:58:35 Test: checking if file /etc/cron.deny has the permissions set to 600 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.deny are not matching expected value (644 != rw-------) +2021-01-07 17:58:35 Test: checking file/directory /etc/crontab +2021-01-07 17:58:35 Test: checking if file /etc/crontab has the permissions set to 600 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/crontab are not matching expected value (644 != rw-------) +2021-01-07 17:58:35 Test: checking file/directory /etc/group +2021-01-07 17:58:35 Test: checking if file /etc/group has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/group- +2021-01-07 17:58:35 Test: checking if file /etc/group- has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (600) +2021-01-07 17:58:35 Test: checking file/directory /etc/hosts.allow +2021-01-07 17:58:35 Test: checking if file /etc/hosts.allow has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/hosts.deny +2021-01-07 17:58:35 Test: checking if file /etc/hosts.deny has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/issue +2021-01-07 17:58:35 Test: checking if file /etc/issue has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/issue.net +2021-01-07 17:58:35 Test: checking if file /etc/issue.net has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/lilo.conf +2021-01-07 17:58:35 Skipping file/directory /etc/lilo.conf as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/motd +2021-01-07 17:58:35 Skipping file/directory /etc/motd as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/passwd +2021-01-07 17:58:35 Test: checking if file /etc/passwd has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (644) +2021-01-07 17:58:35 Test: checking file/directory /etc/passwd- +2021-01-07 17:58:35 Test: checking if file /etc/passwd- has the permissions set to 644 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (600) +2021-01-07 17:58:35 Test: checking file/directory /etc/ssh/sshd_config +2021-01-07 17:58:35 Test: checking if file /etc/ssh/sshd_config has the permissions set to 600 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/ssh/sshd_config are not matching expected value (644 != rw-------) +2021-01-07 17:58:35 Test: checking file/directory /etc/hosts.equiv +2021-01-07 17:58:35 Skipping file/directory /etc/hosts.equiv as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /etc/shosts.equiv +2021-01-07 17:58:35 Skipping file/directory /etc/shosts.equiv as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /root/.rhosts +2021-01-07 17:58:35 Skipping file/directory /root/.rhosts as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /root/.rlogin +2021-01-07 17:58:35 Skipping file/directory /root/.rlogin as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /root/.shosts +2021-01-07 17:58:35 Skipping file/directory /root/.shosts as it does not exist on this system +2021-01-07 17:58:35 Test: checking file/directory /root/.ssh +2021-01-07 17:58:35 Test: checking if file /root/.ssh has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: correct permissions (700) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.d +2021-01-07 17:58:35 Test: checking if file /etc/cron.d has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.d are not matching expected value (755 != rwx------) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.daily +2021-01-07 17:58:35 Test: checking if file /etc/cron.daily has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.daily are not matching expected value (755 != rwx------) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.hourly +2021-01-07 17:58:35 Test: checking if file /etc/cron.hourly has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.hourly are not matching expected value (755 != rwx------) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.weekly +2021-01-07 17:58:35 Test: checking if file /etc/cron.weekly has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.weekly are not matching expected value (755 != rwx------) +2021-01-07 17:58:35 Test: checking file/directory /etc/cron.monthly +2021-01-07 17:58:35 Test: checking if file /etc/cron.monthly has the permissions set to 700 or more restrictive +2021-01-07 17:58:35 Outcome: permissions of file /etc/cron.monthly are not matching expected value (755 != rwx------) +2021-01-07 17:58:35 Suggestion: Consider restricting file permissions [test:FILE-7524] [details:See screen output or log file] [solution:text:Use chmod to change file permissions] +2021-01-07 17:58:35 Security check: file is normal +2021-01-07 17:58:35 Checking permissions of /root/scans/lynis/include/tests_homedirs +2021-01-07 17:58:35 File permissions are OK +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Action: Performing tests from category: Home directories +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID HOME-9302 (Create list with home directories) +2021-01-07 17:58:35 Test: query /etc/passwd to obtain home directories +2021-01-07 17:58:35 Result: found home directory: /bin (directory exists) +2021-01-07 17:58:35 Result: found home directory: /dev (directory exists) +2021-01-07 17:58:35 Result: found home directory: /home/syslog (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /nonexistent (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /root (directory exists) +2021-01-07 17:58:35 Result: found home directory: /run/systemd (directory exists) +2021-01-07 17:58:35 Result: found home directory: /run/systemd/netif (directory exists) +2021-01-07 17:58:35 Result: found home directory: /run/systemd/resolve (directory exists) +2021-01-07 17:58:35 Result: found home directory: /usr/games (directory exists) +2021-01-07 17:58:35 Result: found home directory: /usr/sbin (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/backups (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/cache/man (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/cache/pollinate (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/lib/gnats (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/lib/sendmail (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/list (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/mail (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/run/dbus (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/run/ircd (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/run/sshd (directory exists) +2021-01-07 17:58:35 Result: found home directory: /var/spool/lpd (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/spool/news (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/spool/uucp (directory does not exist) +2021-01-07 17:58:35 Result: found home directory: /var/www (directory does not exist) +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID HOME-9304 (Check if users' home directories permissions are 750 or more restrictive) +2021-01-07 17:58:35 Test: checking directory '' for user '' +2021-01-07 17:58:35 Result: OK, all permissions of the home directories are 750 or more restrictive +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID HOME-9306 (Check if users own their home directories) +2021-01-07 17:58:35 Test: checking directory '' for user '' +2021-01-07 17:58:35 Result: OK, all users own their home directories +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID HOME-9310 (Checking for suspicious shell history files) +2021-01-07 17:58:35 Result: Ok, history files are type 'file'. +2021-01-07 17:58:35 Remark: History files are normally of the type 'file'. Symbolic links and other types are suspicious. +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID HOME-9350 (Collecting information from home directories) +2021-01-07 17:58:35 Result: IGNORE_HOME_DIRS empty, no paths excluded +2021-01-07 17:58:35 Security check: file is normal +2021-01-07 17:58:35 Checking permissions of /root/scans/lynis/include/tests_kernel_hardening +2021-01-07 17:58:35 File permissions are OK +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Action: Performing tests from category: Kernel Hardening +2021-01-07 17:58:35 ==== +2021-01-07 17:58:35 Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile) +2021-01-07 17:58:35 Result: sysctl key dev.tty.ldisc_autoload has a different value than expected in scan profile. Expected=0, Real=1 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 196 points (out of 279) +2021-01-07 17:58:35 Result: sysctl key fs.protected_fifos has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 196 points (out of 280) +2021-01-07 17:58:35 Result: sysctl key fs.protected_hardlinks contains equal expected and current value (1) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 197 points (out of 281) +2021-01-07 17:58:35 Result: sysctl key fs.protected_regular has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 197 points (out of 282) +2021-01-07 17:58:35 Result: sysctl key fs.protected_symlinks contains equal expected and current value (1) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 198 points (out of 283) +2021-01-07 17:58:35 Result: sysctl key fs.suid_dumpable contains equal expected and current value (0) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 199 points (out of 284) +2021-01-07 17:58:35 Result: key hw.kbd.keymap_restrict_change does not exist on this machine +2021-01-07 17:58:35 Result: key kern.sugid_coredump does not exist on this machine +2021-01-07 17:58:35 Result: key kernel.core_setuid_ok does not exist on this machine +2021-01-07 17:58:35 Result: sysctl key kernel.core_uses_pid contains equal expected and current value (1) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 200 points (out of 285) +2021-01-07 17:58:35 Result: sysctl key kernel.ctrl-alt-del contains equal expected and current value (0) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 201 points (out of 286) +2021-01-07 17:58:35 Result: sysctl key kernel.dmesg_restrict contains equal expected and current value (1) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 202 points (out of 287) +2021-01-07 17:58:35 Result: key kernel.exec-shield-randomize does not exist on this machine +2021-01-07 17:58:35 Result: key kernel.exec-shield does not exist on this machine +2021-01-07 17:58:35 Result: sysctl key kernel.kptr_restrict contains equal expected and current value (2) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 203 points (out of 288) +2021-01-07 17:58:35 Result: key kernel.maps_protect does not exist on this machine +2021-01-07 17:58:35 Result: sysctl key kernel.modules_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 203 points (out of 289) +2021-01-07 17:58:35 Result: sysctl key kernel.perf_event_paranoid has a different value than expected in scan profile. Expected=3, Real=1 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 203 points (out of 290) +2021-01-07 17:58:35 Result: sysctl key kernel.randomize_va_space contains equal expected and current value (2) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 204 points (out of 291) +2021-01-07 17:58:35 Result: key kernel.suid_dumpable does not exist on this machine +2021-01-07 17:58:35 Result: sysctl key kernel.sysrq contains equal expected and current value (0) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 205 points (out of 292) +2021-01-07 17:58:35 Result: sysctl key kernel.unprivileged_bpf_disabled has a different value than expected in scan profile. Expected=1, Real=0 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 205 points (out of 293) +2021-01-07 17:58:35 Result: key kernel.use-nx does not exist on this machine +2021-01-07 17:58:35 Result: sysctl key kernel.yama.ptrace_scope contains equal expected and current value (1 2 3) +2021-01-07 17:58:35 Hardening: assigned maximum number of hardening points for this item (1). Currently having 206 points (out of 294) +2021-01-07 17:58:35 Result: sysctl key net.core.bpf_jit_harden has a different value than expected in scan profile. Expected=2, Real=0 +2021-01-07 17:58:35 Hardening: assigned partial number of hardening points (0 of 1). Currently having 206 points (out of 295) +2021-01-07 17:58:35 Result: key net.inet.icmp.bmcastecho does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.icmp.drop_redirect does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.icmp.rediraccept does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.icmp.timestamp does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.accept_sourceroute does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.check_interface does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.forwarding does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.linklocal.in.allowbadttl does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.process_options does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.random_id does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.redirect does not exist on this machine +2021-01-07 17:58:35 Result: key net.inet.ip.sourceroute does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.ip6.redirect does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.always_keepalive does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.blackhole does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.drop_synfin does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.icmp_may_rst does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.nolocaltimewait does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.tcp.path_mtu_discovery does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet.udp.blackhole does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet6.icmp6.rediraccept does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet6.ip6.forwarding does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet6.ip6.fw.enable does not exist on this machine +2021-01-07 17:58:36 Result: key net.inet6.ip6.redirect does not exist on this machine +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.accept_redirects contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 207 points (out of 296) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 208 points (out of 297) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.bootp_relay contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 209 points (out of 298) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.forwarding contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 210 points (out of 299) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.log_martians contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 211 points (out of 300) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.mc_forwarding contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 212 points (out of 301) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.proxy_arp contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 213 points (out of 302) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.rp_filter contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 214 points (out of 303) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.all.send_redirects contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 215 points (out of 304) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.default.accept_redirects contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 216 points (out of 305) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.default.accept_source_route contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 217 points (out of 306) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.conf.default.log_martians contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 218 points (out of 307) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.icmp_echo_ignore_broadcasts contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 219 points (out of 308) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.icmp_ignore_bogus_error_responses contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 220 points (out of 309) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.tcp_syncookies contains equal expected and current value (1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 221 points (out of 310) +2021-01-07 17:58:36 Result: sysctl key net.ipv4.tcp_timestamps contains equal expected and current value (0 1) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 222 points (out of 311) +2021-01-07 17:58:36 Result: sysctl key net.ipv6.conf.all.accept_redirects contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 223 points (out of 312) +2021-01-07 17:58:36 Result: sysctl key net.ipv6.conf.all.accept_source_route contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 224 points (out of 313) +2021-01-07 17:58:36 Result: key net.ipv6.conf.all.send_redirects does not exist on this machine +2021-01-07 17:58:36 Result: sysctl key net.ipv6.conf.default.accept_redirects contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 225 points (out of 314) +2021-01-07 17:58:36 Result: sysctl key net.ipv6.conf.default.accept_source_route contains equal expected and current value (0) +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (1). Currently having 226 points (out of 315) +2021-01-07 17:58:36 Result: key security.bsd.hardlink_check_gid does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.hardlink_check_uid does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.see_other_gids does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.see_other_uids does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.stack_guard_page does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.unprivileged_proc_debug does not exist on this machine +2021-01-07 17:58:36 Result: key security.bsd.unprivileged_read_msgbuf does not exist on this machine +2021-01-07 17:58:36 Result: found 7 keys that can use tuning, according scan profile +2021-01-07 17:58:36 Suggestion: One or more sysctl values differ from the scan profile and could be tweaked [test:KRNL-6000] [details:] [solution:Change sysctl value or disable test (skip-test=KRNL-6000:)] +2021-01-07 17:58:36 Security check: file is normal +2021-01-07 17:58:36 Checking permissions of /root/scans/lynis/include/tests_hardening +2021-01-07 17:58:36 File permissions are OK +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Action: Performing tests from category: Hardening +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Performing test ID HRDN-7220 (Check if one or more compilers are installed) +2021-01-07 17:58:36 Test: Check if one or more compilers can be found on the system +2021-01-07 17:58:36 Result: found installed compiler. See top of logfile which compilers have been found or use /bin/grep to filter on 'compiler' +2021-01-07 17:58:36 Hardening: assigned partial number of hardening points (1 of 3). Currently having 227 points (out of 318) +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Performing test ID HRDN-7222 (Check compiler permissions) +2021-01-07 17:58:36 Test: Check if one or more compilers can be found on the system +2021-01-07 17:58:36 Test: Check file permissions for /usr/bin/as +2021-01-07 17:58:36 Action: checking symlink for file /usr/bin/as +2021-01-07 17:58:36 Note: Using real readlink binary to determine symlink on /usr/bin/as +2021-01-07 17:58:36 Result: readlink shows /usr/bin/x86_64-linux-gnu-as as output +2021-01-07 17:58:36 Result: symlink found, pointing to file /usr/bin/x86_64-linux-gnu-as +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (3). Currently having 230 points (out of 321) +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Performing test ID HRDN-7230 (Check for malware scanner) +2021-01-07 17:58:36 Test: Check if a malware scanner is installed +2021-01-07 17:58:36 Result: found at least one malware scanner +2021-01-07 17:58:36 Hardening: assigned maximum number of hardening points for this item (3). Currently having 233 points (out of 324) +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Performing test ID HRDN-7231 (Check for registered non-native binary formats) +2021-01-07 17:58:36 Test: Check for registered non-native binary formats +2021-01-07 17:58:36 Result: no non-native binary formats found +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Action: Performing tests from category: Custom tests +2021-01-07 17:58:36 Test: Checking for tests_custom file +2021-01-07 17:58:36 ==== +2021-01-07 17:58:36 Action: Performing plugin tests +2021-01-07 17:58:36 Result: Found 2 plugins of which 2 are enabled +2021-01-07 17:58:36 Result: Plugins phase 2 finished +2021-01-07 17:58:36 Checking permissions of /root/scans/lynis/include/report +2021-01-07 17:58:36 File permissions are OK +2021-01-07 17:58:36 Hardening index : [71] [############## ] +2021-01-07 17:58:36 Hardening strength: System has been hardened, but could use additional hardening +2021-01-07 17:58:36 ==== +2021-01-07 17:58:37 Checking permissions of /root/scans/lynis/include/tool_tips +2021-01-07 17:58:37 File permissions are OK +2021-01-07 17:58:37 Tool tips: enabled +2021-01-07 17:58:37 ================================================================================ +2021-01-07 17:58:37 Tests performed: 257 +2021-01-07 17:58:37 Total tests: 455 +2021-01-07 17:58:37 Active plugins: 2 +2021-01-07 17:58:37 Total plugins: 2 +2021-01-07 17:58:37 ================================================================================ +2021-01-07 17:58:37 Lynis 3.0.3 +2021-01-07 17:58:37 2007-2021, CISOfy - https://cisofy.com/lynis/ +2021-01-07 17:58:37 Enterprise support available (compliance, plugins, interface and tools) +2021-01-07 17:58:37 Program ended successfully +2021-01-07 17:58:37 ================================================================================ +2021-01-07 17:58:37 PID file removed (/var/run/lynis.pid) +2021-01-07 17:58:37 Temporary files: /tmp/lynis.jQlDoUkmun /tmp/lynis.66sIYrqA5x /tmp/lynis.TY0vCjeFMj /tmp/lynis.mD71WggfqA +2021-01-07 17:58:37 Action: removing temporary file /tmp/lynis.jQlDoUkmun +2021-01-07 17:58:37 Info: temporary file /tmp/lynis.66sIYrqA5x was already removed +2021-01-07 17:58:37 Info: temporary file /tmp/lynis.TY0vCjeFMj was already removed +2021-01-07 17:58:37 Action: removing temporary file /tmp/lynis.mD71WggfqA +2021-01-07 17:58:37 Lynis ended successfully. diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-1.dat b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-1.dat new file mode 100644 index 0000000..56c599b --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-1.dat @@ -0,0 +1,699 @@ +# Lynis Report +report_version_major=1 +report_version_minor=0 +report_datetime_start=2021-01-07 17:48:03 +auditor=[Not Specified] +lynis_version=3.0.3 +os=Linux +os_name=Ubuntu +os_fullname=Ubuntu 16.04.7 LTS +os_version=16.04 +linux_version=Ubuntu +os_kernel_version=4.4.0 +os_kernel_version_full=4.4.0-197-generic +hostname=it-sec-test-vm +test_category=all +test_group=all +plugin_directory=./plugins +lynis_update_available=0 +binaries_count=992 +binaries_suid_count=/bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit +binaries_sgid_count=/sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/expiry /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write +binary_paths=/usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +vm=1 +vmtype=kvm +container=0 +systemd=1 +plugin_enabled_phase1[]=pam|1.0.5| +authentication_two_factor_enabled=0 +authentication_two_factor_required=0 +plugin_enabled_phase1[]=systemd|1.0.4| +systemctl_exit_code=0 +systemd_version=229 +systemd_builtin_components=+PAM,+AUDIT,+SELINUX,+IMA,+APPARMOR,+SMACK,+SYSVINIT,+UTMP,+LIBCRYPTSETUP,+GCRYPT,+GNUTLS,+ACL,+XZ,-LZ4,+SECCOMP,+BLKID,+ELFUTILS,+KMOD,-IDN +systemd_unit_file[]=proc-sys-fs-binfmt_misc.automount|static| +systemd_unit_file[]=dev-hugepages.mount|static| +systemd_unit_file[]=dev-mqueue.mount|static| +systemd_unit_file[]=proc-sys-fs-binfmt_misc.mount|static| +systemd_unit_file[]=sys-fs-fuse-connections.mount|static| +systemd_unit_file[]=sys-kernel-config.mount|static| +systemd_unit_file[]=sys-kernel-debug.mount|static| +systemd_unit_file[]=acpid.path|enabled| +systemd_unit_file[]=systemd-ask-password-console.path|static| +systemd_unit_file[]=systemd-ask-password-plymouth.path|static| +systemd_unit_file[]=systemd-ask-password-wall.path|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.path|static| +systemd_unit_file[]=acpid.service|disabled| +systemd_unit_file[]=apt-daily-upgrade.service|static| +systemd_unit_file[]=apt-daily.service|static| +systemd_unit_file[]=atd.service|enabled| +systemd_unit_file[]=autovt@.service|enabled| +systemd_unit_file[]=bootlogd.service|masked| +systemd_unit_file[]=bootlogs.service|masked| +systemd_unit_file[]=bootmisc.service|masked| +systemd_unit_file[]=checkfs.service|masked| +systemd_unit_file[]=checkroot-bootclean.service|masked| +systemd_unit_file[]=checkroot.service|masked| +systemd_unit_file[]=cloud-config.service|enabled| +systemd_unit_file[]=cloud-final.service|enabled| +systemd_unit_file[]=cloud-init-local.service|enabled| +systemd_unit_file[]=cloud-init.service|enabled| +systemd_unit_file[]=console-getty.service|disabled| +systemd_unit_file[]=console-setup.service|static| +systemd_unit_file[]=console-shell.service|disabled| +systemd_unit_file[]=container-getty@.service|static| +systemd_unit_file[]=cron.service|enabled| +systemd_unit_file[]=cryptdisks-early.service|masked| +systemd_unit_file[]=cryptdisks.service|masked| +systemd_unit_file[]=dbus-org.freedesktop.hostname1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.locale1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.login1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.network1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.resolve1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.timedate1.service|static| +systemd_unit_file[]=dbus.service|static| +systemd_unit_file[]=debug-shell.service|disabled| +systemd_unit_file[]=dm-event.service|disabled| +systemd_unit_file[]=emergency.service|static| +systemd_unit_file[]=fuse.service|masked| +systemd_unit_file[]=getty-static.service|static| +systemd_unit_file[]=getty@.service|enabled| +systemd_unit_file[]=halt.service|masked| +systemd_unit_file[]=hc-net-ifup@.service|static| +systemd_unit_file[]=hc-net-scan.service|enabled| +systemd_unit_file[]=hostname.service|masked| +systemd_unit_file[]=hwclock.service|masked| +systemd_unit_file[]=ifup@.service|static| +systemd_unit_file[]=initrd-cleanup.service|static| +systemd_unit_file[]=initrd-parse-etc.service|static| +systemd_unit_file[]=initrd-switch-root.service|static| +systemd_unit_file[]=initrd-udevadm-cleanup-db.service|static| +systemd_unit_file[]=keyboard-setup.service|disabled| +systemd_unit_file[]=killprocs.service|masked| +systemd_unit_file[]=kmod-static-nodes.service|static| +systemd_unit_file[]=kmod.service|static| +systemd_unit_file[]=lvm2-lvmetad.service|disabled| +systemd_unit_file[]=lvm2-lvmpolld.service|disabled| +systemd_unit_file[]=lvm2-monitor.service|enabled| +systemd_unit_file[]=lvm2-pvscan@.service|static| +systemd_unit_file[]=lvm2.service|masked| +systemd_unit_file[]=mdadm-shutdown.service|disabled| +systemd_unit_file[]=module-init-tools.service|static| +systemd_unit_file[]=motd-news.service|static| +systemd_unit_file[]=motd.service|masked| +systemd_unit_file[]=mountall-bootclean.service|masked| +systemd_unit_file[]=mountall.service|masked| +systemd_unit_file[]=mountdevsubfs.service|masked| +systemd_unit_file[]=mountkernfs.service|masked| +systemd_unit_file[]=mountnfs-bootclean.service|masked| +systemd_unit_file[]=mountnfs.service|masked| +systemd_unit_file[]=networking.service|enabled| +systemd_unit_file[]=plymouth-halt.service|static| +systemd_unit_file[]=plymouth-kexec.service|static| +systemd_unit_file[]=plymouth-log.service|static| +systemd_unit_file[]=plymouth-poweroff.service|static| +systemd_unit_file[]=plymouth-quit-wait.service|static| +systemd_unit_file[]=plymouth-quit.service|static| +systemd_unit_file[]=plymouth-read-write.service|static| +systemd_unit_file[]=plymouth-reboot.service|static| +systemd_unit_file[]=plymouth-start.service|static| +systemd_unit_file[]=plymouth-switch-root.service|static| +systemd_unit_file[]=plymouth.service|static| +systemd_unit_file[]=pollinate.service|enabled| +systemd_unit_file[]=procps.service|static| +systemd_unit_file[]=quotaon.service|static| +systemd_unit_file[]=rc-local.service|static| +systemd_unit_file[]=rc.local.service|static| +systemd_unit_file[]=rc.service|masked| +systemd_unit_file[]=rcS.service|masked| +systemd_unit_file[]=reboot.service|masked| +systemd_unit_file[]=rescue.service|static| +systemd_unit_file[]=resolvconf.service|enabled| +systemd_unit_file[]=rmnologin.service|masked| +systemd_unit_file[]=rsync.service|disabled| +systemd_unit_file[]=rsyslog.service|enabled| +systemd_unit_file[]=sendsigs.service|masked| +systemd_unit_file[]=serial-getty@.service|disabled| +systemd_unit_file[]=setvtrgb.service|static| +systemd_unit_file[]=sigpwr-container-shutdown.service|static| +systemd_unit_file[]=single.service|masked| +systemd_unit_file[]=ssh.service|enabled| +systemd_unit_file[]=ssh@.service|static| +systemd_unit_file[]=sshd.service|enabled| +systemd_unit_file[]=stop-bootlogd-single.service|masked| +systemd_unit_file[]=stop-bootlogd.service|masked| +systemd_unit_file[]=syslog.service|enabled| +systemd_unit_file[]=systemd-ask-password-console.service|static| +systemd_unit_file[]=systemd-ask-password-plymouth.service|static| +systemd_unit_file[]=systemd-ask-password-wall.service|static| +systemd_unit_file[]=systemd-backlight@.service|static| +systemd_unit_file[]=systemd-binfmt.service|static| +systemd_unit_file[]=systemd-bootchart.service|disabled| +systemd_unit_file[]=systemd-bus-proxyd.service|static| +systemd_unit_file[]=systemd-exit.service|static| +systemd_unit_file[]=systemd-fsck-root.service|static| +systemd_unit_file[]=systemd-fsck@.service|static| +systemd_unit_file[]=systemd-fsckd.service|static| +systemd_unit_file[]=systemd-halt.service|static| +systemd_unit_file[]=systemd-hibernate-resume@.service|static| +systemd_unit_file[]=systemd-hibernate.service|static| +systemd_unit_file[]=systemd-hostnamed.service|static| +systemd_unit_file[]=systemd-hwdb-update.service|static| +systemd_unit_file[]=systemd-hybrid-sleep.service|static| +systemd_unit_file[]=systemd-initctl.service|static| +systemd_unit_file[]=systemd-journal-flush.service|static| +systemd_unit_file[]=systemd-journald.service|static| +systemd_unit_file[]=systemd-kexec.service|static| +systemd_unit_file[]=systemd-localed.service|static| +systemd_unit_file[]=systemd-logind.service|static| +systemd_unit_file[]=systemd-machine-id-commit.service|static| +systemd_unit_file[]=systemd-modules-load.service|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.service|static| +systemd_unit_file[]=systemd-networkd-wait-online.service|disabled| +systemd_unit_file[]=systemd-networkd.service|disabled| +systemd_unit_file[]=systemd-poweroff.service|static| +systemd_unit_file[]=systemd-quotacheck.service|static| +systemd_unit_file[]=systemd-random-seed.service|static| +systemd_unit_file[]=systemd-reboot.service|static| +systemd_unit_file[]=systemd-remount-fs.service|static| +systemd_unit_file[]=systemd-resolved.service|disabled| +systemd_unit_file[]=systemd-rfkill.service|static| +systemd_unit_file[]=systemd-suspend.service|static| +systemd_unit_file[]=systemd-sysctl.service|static| +systemd_unit_file[]=systemd-timedated.service|static| +systemd_unit_file[]=systemd-timesyncd.service|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup-dev.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup.service|static| +systemd_unit_file[]=systemd-udev-settle.service|static| +systemd_unit_file[]=systemd-udev-trigger.service|static| +systemd_unit_file[]=systemd-udevd.service|static| +systemd_unit_file[]=systemd-update-utmp-runlevel.service|static| +systemd_unit_file[]=systemd-update-utmp.service|static| +systemd_unit_file[]=systemd-user-sessions.service|static| +systemd_unit_file[]=udev.service|static| +systemd_unit_file[]=umountfs.service|masked| +systemd_unit_file[]=umountnfs.service|masked| +systemd_unit_file[]=umountroot.service|masked| +systemd_unit_file[]=unattended-upgrades.service|enabled| +systemd_unit_file[]=urandom.service|static| +systemd_unit_file[]=ureadahead-stop.service|static| +systemd_unit_file[]=ureadahead.service|enabled| +systemd_unit_file[]=user@.service|static| +systemd_unit_file[]=x11-common.service|masked| +systemd_unit_file[]=-.slice|static| +systemd_unit_file[]=machine.slice|static| +systemd_unit_file[]=system.slice|static| +systemd_unit_file[]=user.slice|static| +systemd_unit_file[]=acpid.socket|enabled| +systemd_unit_file[]=dbus.socket|static| +systemd_unit_file[]=dm-event.socket|enabled| +systemd_unit_file[]=lvm2-lvmetad.socket|enabled| +systemd_unit_file[]=lvm2-lvmpolld.socket|enabled| +systemd_unit_file[]=ssh.socket|disabled| +systemd_unit_file[]=syslog.socket|static| +systemd_unit_file[]=systemd-bus-proxyd.socket|static| +systemd_unit_file[]=systemd-fsckd.socket|static| +systemd_unit_file[]=systemd-initctl.socket|static| +systemd_unit_file[]=systemd-journald-audit.socket|static| +systemd_unit_file[]=systemd-journald-dev-log.socket|static| +systemd_unit_file[]=systemd-journald.socket|static| +systemd_unit_file[]=systemd-networkd.socket|disabled| +systemd_unit_file[]=systemd-rfkill.socket|static| +systemd_unit_file[]=systemd-udevd-control.socket|static| +systemd_unit_file[]=systemd-udevd-kernel.socket|static| +systemd_unit_file[]=basic.target|static| +systemd_unit_file[]=bluetooth.target|static| +systemd_unit_file[]=busnames.target|static| +systemd_unit_file[]=cloud-config.target|static| +systemd_unit_file[]=cloud-init.target|static| +systemd_unit_file[]=cryptsetup-pre.target|static| +systemd_unit_file[]=cryptsetup.target|static| +systemd_unit_file[]=ctrl-alt-del.target|disabled| +systemd_unit_file[]=default.target|static| +systemd_unit_file[]=emergency.target|static| +systemd_unit_file[]=exit.target|disabled| +systemd_unit_file[]=final.target|static| +systemd_unit_file[]=getty.target|static| +systemd_unit_file[]=graphical.target|static| +systemd_unit_file[]=halt.target|disabled| +systemd_unit_file[]=hibernate.target|static| +systemd_unit_file[]=hybrid-sleep.target|static| +systemd_unit_file[]=initrd-fs.target|static| +systemd_unit_file[]=initrd-root-fs.target|static| +systemd_unit_file[]=initrd-switch-root.target|static| +systemd_unit_file[]=initrd.target|static| +systemd_unit_file[]=kexec.target|disabled| +systemd_unit_file[]=local-fs-pre.target|static| +systemd_unit_file[]=local-fs.target|static| +systemd_unit_file[]=mail-transport-agent.target|static| +systemd_unit_file[]=multi-user.target|static| +systemd_unit_file[]=network-online.target|static| +systemd_unit_file[]=network-pre.target|static| +systemd_unit_file[]=network.target|static| +systemd_unit_file[]=nss-lookup.target|static| +systemd_unit_file[]=nss-user-lookup.target|static| +systemd_unit_file[]=paths.target|static| +systemd_unit_file[]=poweroff.target|disabled| +systemd_unit_file[]=printer.target|static| +systemd_unit_file[]=reboot.target|disabled| +systemd_unit_file[]=remote-fs-pre.target|static| +systemd_unit_file[]=remote-fs.target|enabled| +systemd_unit_file[]=rescue.target|disabled| +systemd_unit_file[]=rpcbind.target|static| +systemd_unit_file[]=runlevel0.target|disabled| +systemd_unit_file[]=runlevel1.target|disabled| +systemd_unit_file[]=runlevel2.target|static| +systemd_unit_file[]=runlevel3.target|static| +systemd_unit_file[]=runlevel4.target|static| +systemd_unit_file[]=runlevel5.target|static| +systemd_unit_file[]=runlevel6.target|disabled| +systemd_unit_file[]=shutdown.target|static| +systemd_unit_file[]=sigpwr.target|static| +systemd_unit_file[]=sleep.target|static| +systemd_unit_file[]=slices.target|static| +systemd_unit_file[]=smartcard.target|static| +systemd_unit_file[]=sockets.target|static| +systemd_unit_file[]=sound.target|static| +systemd_unit_file[]=suspend.target|static| +systemd_unit_file[]=swap.target|static| +systemd_unit_file[]=sysinit.target|static| +systemd_unit_file[]=system-update.target|static| +systemd_unit_file[]=time-sync.target|static| +systemd_unit_file[]=timers.target|static| +systemd_unit_file[]=umount.target|static| +systemd_unit_file[]=apt-daily-upgrade.timer|enabled| +systemd_unit_file[]=apt-daily.timer|enabled| +systemd_unit_file[]=motd-news.timer|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.timer|static| +systemd_unit_file[]=ureadahead-stop.timer|static| +journal_bootlogs=1 +journal_oldest_bootdate=2021-01-07 +journal_contains_errors=0 +journal_disk_size=2.4M +journal_meta_data=FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system.journal,FileID:38dc3cd3d69f481fb5f769834a761273,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ONLINE,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:no,HeadSequentialNumber:1,TailSequentialNumber:1195,HeadRealtimeTimestamp:Thu2021-01-0717:41:42CET,TailRealtimeTimestamp:Thu2021-01-0717:48:04CET,TailMonotonicTimestamp:6min26.296s,Objects:4644,EntryObjects:1195,DataObjects:2627,DataHashTableFill:59.1%,FieldObjects:59,FieldHashTableFill:17.7%,TagObjects:0,EntryArrayObjects:761,Diskusage:2.4M, +systemd_status=running +systemd_unit_not_found[]=org.freedesktop.network1.busname +systemd_unit_not_found[]=org.freedesktop.resolve1.busname +systemd_unit_not_found[]=tmp.mount +systemd_unit_not_found[]=apparmor.service +systemd_unit_not_found[]=auditd.service +systemd_unit_not_found[]=console-screen.service +systemd_unit_not_found[]=display-manager.service +systemd_unit_not_found[]=kbd.service +systemd_unit_not_found[]=lvm2-activation.service +systemd_unit_not_found[]=NetworkManager.service +systemd_unit_not_found[]=snapd.seeded.service +systemd_unit_not_found[]=sshd-keygen.service +systemd_unit_not_found[]=systemd-sysusers.service +systemd_unit_not_found[]=systemd-update-done.service +systemd_unit_not_found[]=systemd-vconsole-setup.service +systemd_service_not_found[]=apparmor.service +systemd_service_not_found[]=auditd.service +systemd_service_not_found[]=console-screen.service +systemd_service_not_found[]=display-manager.service +systemd_service_not_found[]=kbd.service +systemd_service_not_found[]=lvm2-activation.service +systemd_service_not_found[]=NetworkManager.service +systemd_service_not_found[]=snapd.seeded.service +systemd_service_not_found[]=sshd-keygen.service +systemd_service_not_found[]=systemd-sysusers.service +systemd_service_not_found[]=systemd-update-done.service +systemd_service_not_found[]=systemd-vconsole-setup.service +journal_coredumps_lastday=0 +plugins_enabled=1 +hostid=8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +hostid2=7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +suggestion[]=BOOT-5122|Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-| +running_service_tool=systemctl +running_service[]=acpid +running_service[]=atd +running_service[]=cron +running_service[]=dbus +running_service[]=getty@tty1 +running_service[]=lvm2-lvmetad +running_service[]=mdadm +running_service[]=qemu-guest-agent +running_service[]=rsyslog +running_service[]=serial-getty@ttyS0 +running_service[]=ssh +running_service[]=systemd-journald +running_service[]=systemd-logind +running_service[]=systemd-resolved +running_service[]=systemd-timesyncd +running_service[]=systemd-udevd +running_service[]=unattended-upgrades +running_service[]=user@0 +boot_service_tool=systemctl +boot_service[]=atd +boot_service[]=autovt@ +boot_service[]=cloud-config +boot_service[]=cloud-final +boot_service[]=cloud-init-local +boot_service[]=cloud-init +boot_service[]=cron +boot_service[]=getty@ +boot_service[]=hc-net-scan +boot_service[]=lvm2-monitor +boot_service[]=networking +boot_service[]=pollinate +boot_service[]=resolvconf +boot_service[]=rsyslog +boot_service[]=ssh +boot_service[]=sshd +boot_service[]=syslog +boot_service[]=systemd-timesyncd +boot_service[]=unattended-upgrades +boot_service[]=ureadahead +uptime_in_seconds=389 +uptime_in_days=0 +boot_loader=GRUB2 +boot_uefi_booted=0 +boot_uefi_booted_secure=0 +service_manager=systemd +linux_default_runlevel=5 +cpu_pae=1 +cpu_nx=1 +linux_kernel_release=4.4.0-197-generic +linux_kernel_version=#229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +linux_kernel_type=modular +loaded_kernel_module[]=ablk_helper +loaded_kernel_module[]=aes_x86_64 +loaded_kernel_module[]=aesni_intel +loaded_kernel_module[]=ahci +loaded_kernel_module[]=async_memcpy +loaded_kernel_module[]=async_pq +loaded_kernel_module[]=async_raid6_recov +loaded_kernel_module[]=async_tx +loaded_kernel_module[]=async_xor +loaded_kernel_module[]=autofs4 +loaded_kernel_module[]=binfmt_misc +loaded_kernel_module[]=btrfs +loaded_kernel_module[]=crc32_pclmul +loaded_kernel_module[]=crct10dif_pclmul +loaded_kernel_module[]=cryptd +loaded_kernel_module[]=gf128mul +loaded_kernel_module[]=ghash_clmulni_intel +loaded_kernel_module[]=glue_helper +loaded_kernel_module[]=hid +loaded_kernel_module[]=hid_generic +loaded_kernel_module[]=inet_diag +loaded_kernel_module[]=input_leds +loaded_kernel_module[]=ip_tables +loaded_kernel_module[]=iptable_filter +loaded_kernel_module[]=iptable_nat +loaded_kernel_module[]=joydev +loaded_kernel_module[]=libahci +loaded_kernel_module[]=libcrc32c +loaded_kernel_module[]=linear +loaded_kernel_module[]=lrw +loaded_kernel_module[]=multipath +loaded_kernel_module[]=nf_conntrack +loaded_kernel_module[]=nf_conntrack_ipv4 +loaded_kernel_module[]=nf_defrag_ipv4 +loaded_kernel_module[]=nf_nat +loaded_kernel_module[]=nf_nat_ipv4 +loaded_kernel_module[]=psmouse +loaded_kernel_module[]=raid0 +loaded_kernel_module[]=raid1 +loaded_kernel_module[]=raid10 +loaded_kernel_module[]=raid456 +loaded_kernel_module[]=raid6_pq +loaded_kernel_module[]=serio_raw +loaded_kernel_module[]=tcp_diag +loaded_kernel_module[]=udp_diag +loaded_kernel_module[]=usbhid +loaded_kernel_module[]=virtio_rng +loaded_kernel_module[]=virtio_scsi +loaded_kernel_module[]=x_tables +loaded_kernel_module[]=xor +linux_config_file=/boot/config-4.4.0-197-generic +linux_kernel_io_scheduler[]=deadline +suggestion[]=KRNL-5820|If not required, consider explicit disabling of core dump in /etc/security/limits.conf file|-|-| +memory_size=1998680 +memory_units=kB +auth_group_ids_unique=1 +auth_group_names_unique=1 +suggestion[]=AUTH-9230|Configure password hashing rounds in /etc/login.defs|-|-| +real_user[]=root,0 +suggestion[]=AUTH-9262|Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc|-|-| +pam_module[]=/lib/x86_64-linux-gnu/security/pam_access.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_debug.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_deny.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_echo.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_env.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_exec.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_extrausers.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_faildelay.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_filter.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_ftp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_group.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_issue.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_keyinit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_lastlog.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_limits.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_listfile.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_localuser.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_loginuid.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mail.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mkhomedir.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_motd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_namespace.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_nologin.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_permit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_pwhistory.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rhosts.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rootok.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_securetty.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_selinux.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_sepermit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_shells.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_stress.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_succeed_if.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_systemd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally2.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_time.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_timestamp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tty_audit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_umask.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_unix.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_userdb.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_warn.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_wheel.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_xauth.so +suggestion[]=AUTH-9286|Configure minimum password age in /etc/login.defs|-|-| +suggestion[]=AUTH-9286|Configure maximum password age in /etc/login.defs|-|-| +manual_event[]=AUTH-9328:03 +suggestion[]=AUTH-9328|Default umask in /etc/login.defs could be more strict like 027|-|-| +suggestion[]=AUTH-9328|Default umask in /etc/init.d/rc could be more strict like 027|-|-| +auth_failed_logins_tooling[]=/etc/login.defs +auth_failed_logins_logged=1 +ldap_auth_enabled=0 +ldap_pam_enabled=0 +password_min_days=-1 +password_max_days=-1 +available_shell[]=/bin/sh +available_shell[]=/bin/dash +available_shell[]=/bin/bash +available_shell[]=/bin/rbash +session_timeout_enabled=0 +suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-| +suggestion[]=FILE-6310|To decrease the impact of a full /tmp file system, place /tmp on a separate partition|-|-| +suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-| +file_systems_ext[]=/|ext4| +suggestion[]=FILE-6430|Consider disabling unused kernel modules|/etc/modprobe.d/blacklist.conf|Add 'install MODULENAME /bin/true' (without quotes)| +suggestion[]=USB-1000|Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft|-|-| +usb_authorized_default_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_default_device[]=/sys/bus/usb/devices/usb2 +usb_authorized_device[]=/sys/bus/usb/devices/usb2 +suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-| +localhost-mapped-to=::1 +name_cache_used=0 +package_manager[]=dpkg +installed_packages=350 +suggestion[]=PKGS-7370|Install debsums utility for the verification of packages with known good database.|-|-| +vulnerable_package[]=libp11-kit0 +vulnerable_package[]=python-apt-common +vulnerable_package[]=python3-apt +warning[]=PKGS-7392|Found one or more vulnerable packages.|-|-| +suggestion[]=PKGS-7392|Update your system with apt-get update, apt-get upgrade, apt-get dist-upgrade and/or unattended-upgrades|-|-| +suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-| +installed_kernel_packages=1 +unattended_upgrade_tool[]=unattended-upgrade +unattended_upgrade_option_available=1 +ipv6_mode=auto +ipv6_only=0 +nameserver[]=213.133.99.99 +nameserver[]=213.133.98.98 +nameserver[]=213.133.100.100 +default_gateway[]=172.31.1.1 +network_interface[]=lo +network_interface[]=eth0 +network_mac_address[]=96:00:00:8b:fc:bd +network_ipv4_address[]=116.203.241.83 +network_ipv4_address[]=127.0.0.1 +network_ipv6_address[]=2a01:4f8:c2c:410b::1/64 +network_ipv6_address[]=fe80::9400:ff:fe8b:fcbd/64 +network_ipv6_address[]=::1/128 +network_listen[]=raw,ss,v1|udp|*:68|dhclient| +network_listen[]=raw,ss,v1|udp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|udp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|*:22|sshd| +network_listen[]=raw,ss,v1|tcp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|:::22|sshd| +suggestion[]=NETW-3200|Determine if protocol 'dccp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=dccp +suggestion[]=NETW-3200|Determine if protocol 'sctp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=sctp +suggestion[]=NETW-3200|Determine if protocol 'rds' is really needed on this system|-|-| +uncommon_network_protocol_enabled=rds +suggestion[]=NETW-3200|Determine if protocol 'tipc' is really needed on this system|-|-| +uncommon_network_protocol_enabled=tipc +imap_daemon= +pop3_daemon= +smtp_daemon= +firewall_software[]=iptables +warning[]=FIRE-4512|iptables module(s) loaded, but no rules active|-|-| +firewall_no_logging[]=iptables +manual[]=Verify if there is a formal process for testing and applying firewall rules +manual[]=Verify all traffic is filtered the right way between the different security zones +manual[]=Verify if a list is available with all required services +manual[]=Make sure an explicit deny all is the default policy for all unmatched traffic +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowTcpForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowTcpForwarding;field:AllowTcpForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|ClientAliveCountMax (set 3 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option ClientAliveCountMax;field:ClientAliveCountMax;prefval:2;value:3;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Compression (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option Compression;field:Compression;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|LogLevel (set INFO to VERBOSE)|-| +details[]=SSH-7408|sshd|desc:sshd option LogLevel;field:LogLevel;prefval:VERBOSE;value:INFO;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxAuthTries (set 6 to 3)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxAuthTries;field:MaxAuthTries;prefval:3;value:6;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxSessions (set 10 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxSessions;field:MaxSessions;prefval:2;value:10;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))|-| +details[]=SSH-7408|sshd|desc:sshd option PermitRootLogin;field:PermitRootLogin;prefval:(FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD);value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Port (set 22 to )|-| +details[]=SSH-7408|sshd|desc:sshd option Port;field:Port;prefval:;value:22;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|TCPKeepAlive (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option TCPKeepAlive;field:TCPKeepAlive;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|X11Forwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option X11Forwarding;field:X11Forwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowAgentForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowAgentForwarding;field:AllowAgentForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|UsePrivilegeSeparation (set YES to SANDBOX)|-| +details[]=SSH-7408|sshd|desc:sshd option UsePrivilegeSeparation;field:UsePrivilegeSeparation;prefval:SANDBOX;value:YES;| +ssh_daemon_running=1 +openssh_daemon_running=1 +syslog_daemon_present=1 +syslog_daemon[]=systemd-journal +syslog_daemon_present=1 +syslog_daemon[]=rsyslog +log_directory[]=/var/log +log_directory[]=/var/log/apt +log_directory[]=/var/log/unattended-upgrades +remote_syslog_configured=0 +suggestion[]=LOGG-2154|Enable logging to an external logging host for archiving purposes and additional protection|-|-| +log_directory[]=/var/log +log_rotation_config_found=1 +log_rotation_tool=logrotate +suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-| +weak_banner_file[]=/etc/issue +suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-| +crond_running=1 +scheduler[]=crond +cronjob[]=17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +cronjob[]=25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +cronjob[]=47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +cronjob[]=52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +cronjob[]=/etc/cron.d/mdadm +cronjob[]=/etc/cron.daily/bsdmainutils +cronjob[]=/etc/cron.daily/apt-compat +cronjob[]=/etc/cron.daily/passwd +cronjob[]=/etc/cron.daily/man-db +cronjob[]=/etc/cron.daily/aptitude +cronjob[]=/etc/cron.daily/dpkg +cronjob[]=/etc/cron.daily/mdadm +cronjob[]=/etc/cron.daily/logrotate +cronjob[]=/etc/cron.weekly/man-db +cronjob[]=/etc/cron.weekly/fstrim +scheduler[]=atd +suggestion[]=ACCT-9622|Enable process accounting|-|-| +suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-| +suggestion[]=ACCT-9628|Enable auditd to collect audit information|-|-| +linux_auditd_running=0 +audit_daemon_running=0 +tz_variable_empty=1 +warning[]=TIME-3185|systemd-timesyncd never successfully synchronized time|-|-| +ntp_config_found=0 +ntp_config_type_daemon=1 +ntp_config_type_eventbased=0 +ntp_config_type_scheduled=0 +ntp_config_type_startup=0 +ntp_daemon=systemd-timesyncd +ntp_daemon_running=1 +certificate[]=/etc/ssl/certs/ca-certificates.crt|0|cn:ACCVRAIZ1;notafter:Dec 31 09:37:37 2030 GMT;| +certificates=139 +kernel_entropy=1164 +rng_found=0 +framework_grsecurity=0 +framework_selinux=0 +suggestion[]=FINT-4350|Install a file integrity tool to monitor changes to critical and sensitive files|-|-| +suggestion[]=TOOL-5002|Determine if automation tools are present for system management|-|-| +automation_tool_present=0 +malware_scanner_installed=0 +suggestion[]=FILE-7524|Consider restricting file permissions|See screen output or log file|text:Use chmod to change file permissions| +home_directory[]=/bin +home_directory[]=/dev +home_directory[]=/root +home_directory[]=/run/systemd +home_directory[]=/run/systemd/netif +home_directory[]=/run/systemd/resolve +home_directory[]=/usr/games +home_directory[]=/usr/sbin +home_directory[]=/var/backups +home_directory[]=/var/cache/man +home_directory[]=/var/cache/pollinate +home_directory[]=/var/mail +home_directory[]=/var/run/dbus +home_directory[]=/var/run/sshd +details[]=KRNL-6000|sysctl|desc:Disable loading of TTY line disciplines;field:dev.tty.ldisc_autoload;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict FIFO special device creation behavior;field:fs.protected_fifos;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict regular files creation behavior;field:fs.protected_regular;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:No description;field:kernel.core_uses_pid;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict use of dmesg;field:kernel.dmesg_restrict;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict access to kernel symbols;field:kernel.kptr_restrict;prefval:2;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict module loading once this sysctl value is loaded;field:kernel.modules_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict unprivileged access to the perf_event_open() system call.;field:kernel.perf_event_paranoid;prefval:3;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable magic SysRQ;field:kernel.sysrq;prefval:0;value:176;| +details[]=KRNL-6000|sysctl|desc:Restrict BPF for unprivileged users;field:kernel.unprivileged_bpf_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Hardened BPF JIT compilation;field:net.core.bpf_jit_harden;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.all.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Log all packages for which the host does not have a path back to the source;field:net.ipv4.conf.all.log_martians;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.all.send_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.default.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable IP source routing;field:net.ipv4.conf.default.accept_source_route;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Log all packages for which the host does not have a path back to the source;field:net.ipv4.conf.default.log_martians;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv6.conf.all.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv6.conf.default.accept_redirects;prefval:0;value:1;| +suggestion[]=KRNL-6000|One or more sysctl values differ from the scan profile and could be tweaked||Change sysctl value or disable test (skip-test=KRNL-6000:)| +suggestion[]=HRDN-7230|Harden the system by installing at least one malware scanner, to perform periodic file system scans|-|Install a tool like rkhunter, chkrootkit, OSSEC| +compiler_installed=0 +lynis_tests_done=258 +report_datetime_end=2021-01-07 17:48:26 +dhcp_client_running=1 +arpwatch_running=0 +firewall_active=1 +firewall_empty_ruleset=1 +firewall_installed=1 +installed_packages_array=|acl,2.2.52-3|acpid,1:2.0.26-1ubuntu2|adduser,3.113+nmu3ubuntu4|apt,1.2.32ubuntu0.2|apt-transport-https,1.2.32ubuntu0.2|apt-utils,1.2.32ubuntu0.2|aptitude,0.7.4-2ubuntu2|aptitude-common,0.7.4-2ubuntu2|at,3.1.18-2ubuntu1|base-files,9.4ubuntu4.13|base-passwd,3.5.39|bash,4.3-14ubuntu1.4|bind9-host,1:9.10.3.dfsg.P4-8ubuntu1.17|bsdmainutils,9.0.6ubuntu3|bsdutils,1:2.27.1-6ubuntu3.10|btrfs-tools,4.4-1ubuntu1.1|busybox-initramfs,1:1.22.0-15ubuntu1.4|bzip2,1.0.6-8ubuntu0.2|ca-certificates,20201027ubuntu0.16.04.1|cloud-guest-utils,0.27-0ubuntu25.2|cloud-init,20.3-2-g371b392c-0ubuntu1~16.04.1|console-setup,1.108ubuntu15.5|console-setup-linux,1.108ubuntu15.5|coreutils,8.25-2ubuntu3~16.04|cpio,2.11+dfsg-5ubuntu1.1|cron,3.0pl1-128ubuntu2|cryptsetup,2:1.6.6-5ubuntu2.1|cryptsetup-bin,2:1.6.6-5ubuntu2.1|curl,7.47.0-1ubuntu2.18|dash,0.5.8-2.1ubuntu2|dbus,1.10.6-1ubuntu3.6|debconf,1.5.58ubuntu2|debconf-i18n,1.5.58ubuntu2|debianutils,4.7|dh-python,2.20151103ubuntu1.2|diffutils,1:3.3-3|dirmngr,2.1.11-6ubuntu2.1|distro-info-data,0.28ubuntu0.16|dmeventd,2:1.02.110-1ubuntu10|dmsetup,2:1.02.110-1ubuntu10|dpkg,1.18.4ubuntu1.6|e2fslibs:amd64,1.42.13-1ubuntu1.2|e2fsprogs,1.42.13-1ubuntu1.2|eatmydata,105-3|efibootmgr,0.12-4|ethtool,1:4.5-1|findutils,4.6.0+git+20160126-2|gcc-5-base:amd64,5.4.0-6ubuntu1~16.04.12|gcc-6-base:amd64,6.0.1-0ubuntu1|gdisk,1.0.1-1build1|gettext-base,0.19.7-2ubuntu3.1|gir1.2-glib-2.0:amd64,1.46.0-3ubuntu1|git,1:2.7.4-0ubuntu1.9|git-man,1:2.7.4-0ubuntu1.9|gnupg,1.4.20-1ubuntu3.3|gnupg-agent,2.1.11-6ubuntu2.1|gnupg2,2.1.11-6ubuntu2.1|gpgv,1.4.20-1ubuntu3.3|grep,2.25-1~16.04.1|groff-base,1.22.3-7|grub-common,2.02~beta2-36ubuntu3.29|grub-efi-amd64,2.02~beta2-36ubuntu3.29|grub-efi-amd64-bin,2.02~beta2-36ubuntu3.29|grub-pc-bin,2.02~beta2-36ubuntu3.29|grub2-common,2.02~beta2-36ubuntu3.29|gzip,1.6-4ubuntu1|hc-utils,0.0.3-1|host,1:9.10.3.dfsg.P4-8ubuntu1.17|hostname,3.16ubuntu2|htop,2.0.1-1ubuntu1|ifupdown,0.8.10ubuntu1.4|init,1.29ubuntu4|init-system-helpers,1.29ubuntu4|initramfs-tools,0.122ubuntu8.17|initramfs-tools-bin,0.122ubuntu8.17|initramfs-tools-core,0.122ubuntu8.17|initscripts,2.88dsf-59.3ubuntu2|insserv,1.14.0-5ubuntu3|iproute2,4.3.0-1ubuntu3.16.04.5|iptables,1.6.0-2ubuntu3|iputils-ping,3:20121221-5ubuntu2|isc-dhcp-client,4.3.3-5ubuntu12.10|isc-dhcp-common,4.3.3-5ubuntu12.10|iso-codes,3.65-1|kbd,1.15.5-1ubuntu5|keyboard-configuration,1.108ubuntu15.5|klibc-utils,2.0.4-8ubuntu1.16.04.4|kmod,22-1ubuntu5.2|less,481-2.1ubuntu0.2|libacl1:amd64,2.2.52-3|libapparmor1:amd64,2.10.95-0ubuntu2.11|libapt-inst2.0:amd64,1.2.32ubuntu0.2|libapt-pkg5.0:amd64,1.2.32ubuntu0.2|libasn1-8-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libasprintf0v5:amd64,0.19.7-2ubuntu3.1|libassuan0:amd64,2.4.2-2|libatm1:amd64,1:2.5.1-1.5|libattr1:amd64,1:2.4.47-2|libaudit-common,1:2.4.5-1ubuntu2.1|libaudit1:amd64,1:2.4.5-1ubuntu2.1|libbind9-140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libblkid1:amd64,2.27.1-6ubuntu3.10|libboost-iostreams1.58.0:amd64,1.58.0+dfsg-5ubuntu3.1|libbsd0:amd64,0.8.2-1ubuntu0.1|libbz2-1.0:amd64,1.0.6-8ubuntu0.2|libc-bin,2.23-0ubuntu11.2|libc6:amd64,2.23-0ubuntu11.2|libcap-ng0:amd64,0.7.7-1|libcap2-bin,1:2.24-12|libcap2:amd64,1:2.24-12|libcomerr2:amd64,1.42.13-1ubuntu1.2|libcryptsetup4:amd64,2:1.6.6-5ubuntu2.1|libcurl3-gnutls:amd64,7.47.0-1ubuntu2.18|libcwidget3v5:amd64,0.5.17-4ubuntu2|libdb5.3:amd64,5.3.28-11ubuntu0.2|libdbus-1-3:amd64,1.10.6-1ubuntu3.6|libdbus-glib-1-2:amd64,0.106-1|libdebconfclient0:amd64,0.198ubuntu1|libdevmapper-event1.02.1:amd64,2:1.02.110-1ubuntu10|libdevmapper1.02.1:amd64,2:1.02.110-1ubuntu10|libdns-export162,1:9.10.3.dfsg.P4-8ubuntu1.17|libdns162:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libdrm-common,2.4.91-2~16.04.1|libdrm2:amd64,2.4.91-2~16.04.1|libeatmydata1:amd64,105-3|libedit2:amd64,3.1-20150325-1ubuntu2|libefivar0:amd64,0.23-2|liberror-perl,0.17-1.2|libestr0,0.1.10-1|libexpat1:amd64,2.1.0-7ubuntu0.16.04.5|libfdisk1:amd64,2.27.1-6ubuntu3.10|libffi6:amd64,3.2.1-4|libfreetype6:amd64,2.6.1-0.1ubuntu2.5|libfribidi0:amd64,0.19.7-1|libfuse2:amd64,2.9.4-1ubuntu3.1|libgcc1:amd64,1:6.0.1-0ubuntu1|libgcrypt20:amd64,1.6.5-2ubuntu0.6|libgdbm3:amd64,1.8.3-13.1|libgeoip1:amd64,1.6.9-1|libgirepository-1.0-1:amd64,1.46.0-3ubuntu1|libglib2.0-0:amd64,2.48.2-0ubuntu4.6|libgmp10:amd64,2:6.1.0+dfsg-2|libgnutls-openssl27:amd64,3.4.10-4ubuntu1.8|libgnutls30:amd64,3.4.10-4ubuntu1.8|libgpg-error0:amd64,1.21-2ubuntu1|libgpm2:amd64,1.20.4-6.1|libgssapi-krb5-2:amd64,1.13.2+dfsg-5ubuntu2.2|libgssapi3-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhcrypto4-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimbase1-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimntlm0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhogweed4:amd64,3.2-1ubuntu0.16.04.1|libhx509-5-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libicu55:amd64,55.1-7ubuntu0.5|libidn11:amd64,1.32-3ubuntu1.2|libisc-export160,1:9.10.3.dfsg.P4-8ubuntu1.17|libisc160:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccc140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccfg140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libjson-c2:amd64,0.11-4ubuntu2.6|libk5crypto3:amd64,1.13.2+dfsg-5ubuntu2.2|libkeyutils1:amd64,1.5.9-8ubuntu1|libklibc,2.0.4-8ubuntu1.16.04.4|libkmod2:amd64,22-1ubuntu5.2|libkrb5-26-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libkrb5-3:amd64,1.13.2+dfsg-5ubuntu2.2|libkrb5support0:amd64,1.13.2+dfsg-5ubuntu2.2|libksba8:amd64,1.3.3-1ubuntu0.16.04.1|libldap-2.4-2:amd64,2.4.42+dfsg-2ubuntu3.11|liblocale-gettext-perl,1.07-1build1|liblvm2app2.2:amd64,2.02.133-1ubuntu10|liblvm2cmd2.02:amd64,2.02.133-1ubuntu10|liblwres141:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|liblz4-1:amd64,0.0~r131-2ubuntu2|liblzma5:amd64,5.1.1alpha+20120614-2ubuntu2|liblzo2-2:amd64,2.08-1.2|libmagic1:amd64,1:5.25-2ubuntu1.4|libmnl0:amd64,1.0.3-5|libmount1:amd64,2.27.1-6ubuntu3.10|libmpdec2:amd64,2.4.2-1|libncurses5:amd64,6.0+20160213-1ubuntu1|libncursesw5:amd64,6.0+20160213-1ubuntu1|libnettle6:amd64,3.2-1ubuntu0.16.04.1|libnewt0.52:amd64,0.52.18-1ubuntu2|libnfnetlink0:amd64,1.0.1-3|libnih1:amd64,1.0.3-4.3ubuntu1|libnpth0:amd64,1.2-3|libp11-kit0:amd64,0.23.2-5~ubuntu16.04.1|libpam-modules-bin,1.1.8-3.2ubuntu2.3|libpam-modules:amd64,1.1.8-3.2ubuntu2.3|libpam-runtime,1.1.8-3.2ubuntu2.3|libpam-systemd:amd64,229-4ubuntu21.29|libpam0g:amd64,1.1.8-3.2ubuntu2.3|libpci3:amd64,1:3.3.1-1.1ubuntu1.3|libpcre3:amd64,2:8.38-3.1|libperl5.22:amd64,5.22.1-9ubuntu0.9|libpipeline1:amd64,1.4.1-2|libplymouth4:amd64,0.9.2-3ubuntu13.5|libpng12-0:amd64,1.2.54-1ubuntu1.1|libpopt0:amd64,1.16-10|libprocps4:amd64,2:3.3.10-4ubuntu2.5|libpython3-stdlib:amd64,3.5.1-3|libpython3.5-minimal:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5-stdlib:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5:amd64,3.5.2-2ubuntu0~16.04.12|libreadline5:amd64,5.2+dfsg-3build1|libreadline6:amd64,6.3-8ubuntu2|libroken18-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|librtmp1:amd64,2.4+20151223.gitfa8646d-1ubuntu0.1|libsasl2-2:amd64,2.1.26.dfsg1-14ubuntu0.2|libsasl2-modules-db:amd64,2.1.26.dfsg1-14ubuntu0.2|libseccomp2:amd64,2.4.3-1ubuntu3.16.04.3|libselinux1:amd64,2.4-3build2|libsemanage-common,2.3-1build3|libsemanage1:amd64,2.3-1build3|libsepol1:amd64,2.4-2|libsigc++-2.0-0v5:amd64,2.6.2-1|libslang2:amd64,2.3.0-2ubuntu1.1|libsmartcols1:amd64,2.27.1-6ubuntu3.10|libsqlite3-0:amd64,3.11.0-1ubuntu1.5|libss2:amd64,1.42.13-1ubuntu1.2|libssl1.0.0:amd64,1.0.2g-1ubuntu4.18|libstdc++6:amd64,5.4.0-6ubuntu1~16.04.12|libsystemd0:amd64,229-4ubuntu21.29|libtasn1-6:amd64,4.7-3ubuntu0.16.04.3|libtext-charwidth-perl,0.04-7build5|libtext-iconv-perl,1.7-5build4|libtext-wrapi18n-perl,0.06-7.1|libtinfo5:amd64,6.0+20160213-1ubuntu1|libudev1:amd64,229-4ubuntu21.29|libusb-0.1-4:amd64,2:0.1.12-28|libusb-1.0-0:amd64,2:1.0.20-1|libustr-1.0-1:amd64,1.0.4-5|libuuid1:amd64,2.27.1-6ubuntu3.10|libwind0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libwrap0:amd64,7.6.q-25|libxapian22v5:amd64,1.2.22-2|libxml2:amd64,2.9.3+dfsg1-1ubuntu0.7|libxtables11:amd64,1.6.0-2ubuntu3|libyaml-0-2:amd64,0.1.6-3|linux-base,4.5ubuntu1.2~16.04.1|linux-firmware,1.157.23|linux-image-4.4.0-197-generic,4.4.0-197.229|linux-image-virtual,4.4.0.197.203|linux-modules-4.4.0-197-generic,4.4.0-197.229|locales,2.23-0ubuntu11.2|login,1:4.2-3.1ubuntu5.4|logrotate,3.8.7-2ubuntu2.16.04.2|lsb-base,9.20160110ubuntu0.2|lsb-release,9.20160110ubuntu0.2|lvm2,2.02.133-1ubuntu10|makedev,2.3.1-93ubuntu2~ubuntu16.04.1|man-db,2.7.5-1|mawk,1.3.3-17ubuntu2|mdadm,3.3-2ubuntu7.6|mime-support,3.59ubuntu1|mokutil,0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1|mount,2.27.1-6ubuntu3.10|mtr-tiny,0.86-1ubuntu0.1|multiarch-support,2.23-0ubuntu11.2|nano,2.5.3-2ubuntu2|ncurses-base,6.0+20160213-1ubuntu1|ncurses-bin,6.0+20160213-1ubuntu1|ncurses-term,6.0+20160213-1ubuntu1|net-tools,1.60-26ubuntu1|netbase,5.3|netcat-openbsd,1.105-7ubuntu1|openssh-client,1:7.2p2-4ubuntu2.10|openssh-server,1:7.2p2-4ubuntu2.10|openssh-sftp-server,1:7.2p2-4ubuntu2.10|openssl,1.0.2g-1ubuntu4.18|passwd,1:4.2-3.1ubuntu5.4|patch,2.7.5-1ubuntu0.16.04.2|pciutils,1:3.3.1-1.1ubuntu1.3|perl,5.22.1-9ubuntu0.9|perl-base,5.22.1-9ubuntu0.9|perl-modules-5.22,5.22.1-9ubuntu0.9|pinentry-curses,0.9.7-3|plymouth,0.9.2-3ubuntu13.5|pollinate,4.33-0ubuntu1~16.04.1|powermgmt-base,1.31+nmu1|procps,2:3.3.10-4ubuntu2.5|python-apt-common,1.1.0~beta1ubuntu0.16.04.10|python3,3.5.1-3|python3-apt,1.1.0~beta1ubuntu0.16.04.10|python3-blinker,1.3.dfsg2-1build1|python3-cffi-backend,1.5.2-1ubuntu1|python3-chardet,2.3.0-2|python3-configobj,5.0.6-2|python3-cryptography,1.2.3-1ubuntu0.3|python3-dbus,1.2.0-3|python3-gi,3.20.0-0ubuntu1|python3-idna,2.0-3|python3-jinja2,2.8-1ubuntu0.1|python3-json-pointer,1.9-3|python3-jsonpatch,1.19-3|python3-jwt,1.3.0-1ubuntu0.1|python3-markupsafe,0.23-2build2|python3-minimal,3.5.1-3|python3-oauthlib,1.0.3-1|python3-pkg-resources,20.7.0-1|python3-pyasn1,0.1.9-1|python3-pycurl,7.43.0-1ubuntu1|python3-requests,2.9.1-3ubuntu0.1|python3-serial,3.0.1-1|python3-six,1.10.0-3|python3-software-properties,0.96.20.10|python3-urllib3,1.13.1-2ubuntu0.16.04.4|python3-yaml,3.11-3build1|python3.5,3.5.2-2ubuntu0~16.04.12|python3.5-minimal,3.5.2-2ubuntu0~16.04.12|qemu-guest-agent,1:2.5+dfsg-5ubuntu10.48|readline-common,6.3-8ubuntu2|resolvconf,1.78ubuntu7|rsync,3.1.1-3ubuntu1.3|rsyslog,8.16.0-1ubuntu3.1|sbsigntool,0.6-0ubuntu10.1|sed,4.2.2-7|sensible-utils,0.0.9ubuntu0.16.04.1|shim,15+1552672080.a4a1fbe-0ubuntu2|shim-signed,1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2|software-properties-common,0.96.20.10|ssh-import-id,5.5-0ubuntu1|sudo,1.8.16-0ubuntu1.9|systemd,229-4ubuntu21.29|systemd-sysv,229-4ubuntu21.29|sysv-rc,2.88dsf-59.3ubuntu2|sysvinit-utils,2.88dsf-59.3ubuntu2|tar,1.28-2.1ubuntu0.1|tasksel,3.34ubuntu3|tasksel-data,3.34ubuntu3|tzdata,2020d-0ubuntu0.16.04|ubuntu-advantage-tools,10ubuntu0.16.04.1|ubuntu-keyring,2012.05.19.1|ucf,3.0036|udev,229-4ubuntu21.29|unattended-upgrades,1.1ubuntu1.18.04.7~16.04.6|ureadahead,0.100.0-19.1|usbutils,1:007-4|util-linux,2.27.1-6ubuntu3.10|vim,2:7.4.1689-3ubuntu1.5|vim-common,2:7.4.1689-3ubuntu1.5|vim-runtime,2:7.4.1689-3ubuntu1.5|vim-tiny,2:7.4.1689-3ubuntu1.5|wget,1.17.1-1ubuntu1.5|whiptail,0.52.18-1ubuntu2|xfsprogs,4.3.0+nmu1ubuntu1.1|xkb-data,2.16-1ubuntu1|xz-utils,5.1.1alpha+20120614-2ubuntu2|zlib1g:amd64,1:1.2.8.dfsg-2ubuntu4.3 +package_audit_tool=apt-get +package_audit_tool_found=1 +vulnerable_packages_found=1 +hardening_index=62 +tests_executed=HRDN-7231|HRDN-7230|HRDN-7222|HRDN-7220|KRNL-6000|HOME-9350|HOME-9310|HOME-9306|HOME-9304|HOME-9302|FILE-7524|MALW-3284|MALW-3282|MALW-3280|MALW-3278|MALW-3276|MALW-3275|TOOL-5190|TOOL-5126|TOOL-5130|TOOL-5122|TOOL-5120|TOOL-5102|TOOL-5002|FINT-4350|FINT-4341|FINT-4338|FINT-4330|FINT-4328|FINT-4326|FINT-4322|FINT-4318|FINT-4314|FINT-4310|MACF-6290|RBAC-6272|MACF-6240|MACF-6232|MACF-6204|CONT-8102|CRYP-8005|CRYP-8004|CRYP-8002|CRYP-7931|CRYP-7930|CRYP-7902|TIME-3185|TIME-3170|TIME-3148|TIME-3104|ACCT-9636|ACCT-9628|ACCT-9626|ACCT-9622|SCHD-7724|SCHD-7720|SCHD-7718|SCHD-7704|SCHD-7702|BANN-7130|BANN-7128|BANN-7126|BANN-7124|INSE-8320|INSE-8318|INSE-8316|INSE-8314|INSE-8322|INSE-8310|INSE-8304|INSE-8300|INSE-8102|INSE-8100|INSE-8000|LOGG-2180|LOGG-2170|LOGG-2154|LOGG-2150|LOGG-2148|LOGG-2146|LOGG-2142|LOGG-2138|LOGG-2240|LOGG-2230|LOGG-2210|LOGG-2136|LOGG-2132|LOGG-2130|SQD-3602|PHP-2211|LDAP-2219|DBS-1880|DBS-1860|DBS-1840|DBS-1826|DBS-1820|DBS-1818|DBS-1804|SNMP-3302|SSH-7440|SSH-7408|SSH-7406|SSH-7404|SSH-7402|HTTP-6702|HTTP-6622|FIRE-4594|FIRE-4590|FIRE-4586|FIRE-4524|FIRE-4513|FIRE-4512|FIRE-4508|FIRE-4502|MAIL-8880|MAIL-8860|MAIL-8838|MAIL-8820|MAIL-8814|MAIL-8802|PRNT-2314|PRNT-2304|NETW-3200|NETW-3032|NETW-3030|NETW-3028|NETW-3015|NETW-3012|NETW-3008|NETW-3006|NETW-3004|NETW-3001|NETW-2706|NETW-2705|NETW-2704|NETW-2600|NETW-2400|PKGS-7420|PKGS-7410|PKGS-7398|PKGS-7394|PKGS-7392|PKGS-7390|PKGS-7388|PKGS-7370|PKGS-7346|PKGS-7345|NAME-4408|NAME-4406|NAME-4404|NAME-4402|NAME-4304|NAME-4230|NAME-4202|NAME-4034|NAME-4032|NAME-4028|NAME-4020|NAME-4018|NAME-4016|STRG-1920|STRG-1846|USB-3000|USB-2000|USB-1000|FILE-6430|FILE-6394|FILE-6376|FILE-6374|FILE-6372|FILE-6368|FILE-6363|FILE-6362|FILE-6354|FILE-6344|FILE-6336|FILE-6332|FILE-6329|FILE-6324|FILE-6323|FILE-6311|FILE-6310|SHLL-6230|SHLL-6220|SHLL-6211|AUTH-9408|AUTH-9402|AUTH-9328|AUTH-9308|AUTH-9288|AUTH-9286|AUTH-9284|AUTH-9283|AUTH-9282|AUTH-9278|AUTH-9268|AUTH-9266|AUTH-9264|AUTH-9262|AUTH-9252|AUTH-9250|AUTH-9242|AUTH-9240|AUTH-9234|AUTH-9230|AUTH-9229|AUTH-9228|AUTH-9226|AUTH-9222|AUTH-9216|AUTH-9208|AUTH-9204|PROC-3802|PROC-3614|PROC-3612|PROC-3602|KRNL-5830|KRNL-5820|KRNL-5788|KRNL-5730|KRNL-5728|KRNL-5726|KRNL-5723|KRNL-5695|KRNL-5677|KRNL-5622|BOOT-5260|BOOT-5202|BOOT-5184|BOOT-5180|BOOT-5177|BOOT-5155|BOOT-5142|BOOT-5139|BOOT-5122|BOOT-5121|BOOT-5116|BOOT-5109|BOOT-5108|BOOT-5104|PLGN-3860|PLGN-3856|PLGN-3834|PLGN-3832|PLGN-3830|PLGN-3820|PLGN-3818|PLGN-3816|PLGN-3814|PLGN-3812|PLGN-3810|PLGN-3808|PLGN-3806|PLGN-3804|PLGN-3802|PLGN-3800|PLGN-0010|CORE-1000| +tests_skipped=MALW-3288|MALW-3286|TOOL-5104|FINT-4402|FINT-4340|FINT-4339|FINT-4336|FINT-4334|FINT-4316|FINT-4315|MACF-6242|MACF-6234|MACF-6208|CONT-8108|CONT-8107|CONT-8106|CONT-8104|CONT-8004|TIME-3182|TIME-3181|TIME-3180|TIME-3160|TIME-3136|TIME-3132|TIME-3128|TIME-3124|TIME-3120|TIME-3116|TIME-3112|TIME-3106|ACCT-9662|ACCT-9660|ACCT-9656|ACCT-9654|ACCT-9652|ACCT-9650|ACCT-9634|ACCT-9632|ACCT-9630|ACCT-2760|ACCT-2754|BANN-7113|INSE-8050|INSE-8200|INSE-8116|INSE-8106|INSE-8104|INSE-8016|INSE-8006|INSE-8004|INSE-8002|LOGG-2192|LOGG-2190|LOGG-2164|LOGG-2162|LOGG-2160|LOGG-2153|LOGG-2152|LOGG-2134|SQD-3680|SQD-3630|SQD-3624|SQD-3620|SQD-3616|SQD-3614|SQD-3613|SQD-3610|SQD-3606|SQD-3604|PHP-2382|PHP-2378|PHP-2376|PHP-2374|PHP-2372|PHP-2368|PHP-2320|LDAP-2224|DBS-1888|DBS-1886|DBS-1884|DBS-1882|DBS-1828|DBS-1816|SNMP-3306|SNMP-3304|HTTP-6720|HTTP-6716|HTTP-6714|HTTP-6712|HTTP-6710|HTTP-6708|HTTP-6706|HTTP-6704|HTTP-6643|HTTP-6641|HTTP-6640|HTTP-6632|HTTP-6626|HTTP-6624|FIRE-4540|FIRE-4538|FIRE-4536|FIRE-4534|FIRE-4532|FIRE-4530|FIRE-4526|FIRE-4520|FIRE-4518|MAIL-8920|MAIL-8818|MAIL-8817|MAIL-8816|MAIL-8804|PRNT-2420|PRNT-2418|PRNT-2316|PRNT-2308|PRNT-2307|PRNT-2306|PRNT-2302|NETW-3014|PKGS-7393|PKGS-7387|PKGS-7386|PKGS-7384|PKGS-7383|PKGS-7382|PKGS-7381|PKGS-7380|PKGS-7378|PKGS-7366|PKGS-7354|PKGS-7352|PKGS-7350|PKGS-7348|PKGS-7334|PKGS-7332|PKGS-7330|PKGS-7328|PKGS-7322|PKGS-7320|PKGS-7314|PKGS-7312|PKGS-7310|PKGS-7308|PKGS-7306|PKGS-7304|PKGS-7303|PKGS-7302|PKGS-7301|NAME-4306|NAME-4238|NAME-4236|NAME-4232|NAME-4210|NAME-4206|NAME-4204|NAME-4036|NAME-4026|NAME-4024|STRG-1930|STRG-1928|STRG-1926|STRG-1906|STRG-1904|STRG-1902|FILE-6410|FILE-6439|FILE-6330|FILE-6312|SHLL-6202|AUTH-9410|AUTH-9409|AUTH-9406|AUTH-9340|AUTH-9306|AUTH-9304|AUTH-9254|AUTH-9218|AUTH-9212|PROC-3604|KRNL-5770|KRNL-5831|KRNL-5745|BOOT-5264|BOOT-5263|BOOT-5262|BOOT-5170|BOOT-5165|BOOT-5159|BOOT-5126|BOOT-5261|BOOT-5124|BOOT-5117|BOOT-5106|BOOT-5102|PLGN-0008| +finish=true diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-2.dat b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-2.dat new file mode 100644 index 0000000..3aeefa4 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-2.dat @@ -0,0 +1,697 @@ +# Lynis Report +report_version_major=1 +report_version_minor=0 +report_datetime_start=2021-01-07 17:51:09 +auditor=[Not Specified] +lynis_version=3.0.3 +os=Linux +os_name=Ubuntu +os_fullname=Ubuntu 16.04.7 LTS +os_version=16.04 +linux_version=Ubuntu +os_kernel_version=4.4.0 +os_kernel_version_full=4.4.0-197-generic +hostname=it-sec-test-vm +test_category=all +test_group=all +plugin_directory=./plugins +lynis_update_available=0 +binaries_count=992 +binaries_suid_count=/bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit +binaries_sgid_count=/sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/at /usr/bin/atq /usr/bin/atrm /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/expiry /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write +binary_paths=/usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +vm=1 +vmtype=kvm +container=0 +systemd=1 +plugin_enabled_phase1[]=pam|1.0.5| +authentication_two_factor_enabled=0 +authentication_two_factor_required=0 +plugin_enabled_phase1[]=systemd|1.0.4| +systemctl_exit_code=0 +systemd_version=229 +systemd_builtin_components=+PAM,+AUDIT,+SELINUX,+IMA,+APPARMOR,+SMACK,+SYSVINIT,+UTMP,+LIBCRYPTSETUP,+GCRYPT,+GNUTLS,+ACL,+XZ,-LZ4,+SECCOMP,+BLKID,+ELFUTILS,+KMOD,-IDN +systemd_unit_file[]=proc-sys-fs-binfmt_misc.automount|static| +systemd_unit_file[]=dev-hugepages.mount|static| +systemd_unit_file[]=dev-mqueue.mount|static| +systemd_unit_file[]=proc-sys-fs-binfmt_misc.mount|static| +systemd_unit_file[]=sys-fs-fuse-connections.mount|static| +systemd_unit_file[]=sys-kernel-config.mount|static| +systemd_unit_file[]=sys-kernel-debug.mount|static| +systemd_unit_file[]=acpid.path|enabled| +systemd_unit_file[]=systemd-ask-password-console.path|static| +systemd_unit_file[]=systemd-ask-password-plymouth.path|static| +systemd_unit_file[]=systemd-ask-password-wall.path|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.path|static| +systemd_unit_file[]=acpid.service|disabled| +systemd_unit_file[]=apt-daily-upgrade.service|static| +systemd_unit_file[]=apt-daily.service|static| +systemd_unit_file[]=atd.service|enabled| +systemd_unit_file[]=autovt@.service|enabled| +systemd_unit_file[]=bootlogd.service|masked| +systemd_unit_file[]=bootlogs.service|masked| +systemd_unit_file[]=bootmisc.service|masked| +systemd_unit_file[]=checkfs.service|masked| +systemd_unit_file[]=checkroot-bootclean.service|masked| +systemd_unit_file[]=checkroot.service|masked| +systemd_unit_file[]=cloud-config.service|enabled| +systemd_unit_file[]=cloud-final.service|enabled| +systemd_unit_file[]=cloud-init-local.service|enabled| +systemd_unit_file[]=cloud-init.service|enabled| +systemd_unit_file[]=console-getty.service|disabled| +systemd_unit_file[]=console-setup.service|static| +systemd_unit_file[]=console-shell.service|disabled| +systemd_unit_file[]=container-getty@.service|static| +systemd_unit_file[]=cron.service|enabled| +systemd_unit_file[]=cryptdisks-early.service|masked| +systemd_unit_file[]=cryptdisks.service|masked| +systemd_unit_file[]=dbus-org.freedesktop.hostname1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.locale1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.login1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.network1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.resolve1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.timedate1.service|static| +systemd_unit_file[]=dbus.service|static| +systemd_unit_file[]=debug-shell.service|disabled| +systemd_unit_file[]=dm-event.service|disabled| +systemd_unit_file[]=emergency.service|static| +systemd_unit_file[]=fuse.service|masked| +systemd_unit_file[]=getty-static.service|static| +systemd_unit_file[]=getty@.service|enabled| +systemd_unit_file[]=halt.service|masked| +systemd_unit_file[]=hc-net-ifup@.service|static| +systemd_unit_file[]=hc-net-scan.service|enabled| +systemd_unit_file[]=hostname.service|masked| +systemd_unit_file[]=hwclock.service|masked| +systemd_unit_file[]=ifup@.service|static| +systemd_unit_file[]=initrd-cleanup.service|static| +systemd_unit_file[]=initrd-parse-etc.service|static| +systemd_unit_file[]=initrd-switch-root.service|static| +systemd_unit_file[]=initrd-udevadm-cleanup-db.service|static| +systemd_unit_file[]=keyboard-setup.service|disabled| +systemd_unit_file[]=killprocs.service|masked| +systemd_unit_file[]=kmod-static-nodes.service|static| +systemd_unit_file[]=kmod.service|static| +systemd_unit_file[]=lvm2-lvmetad.service|disabled| +systemd_unit_file[]=lvm2-lvmpolld.service|disabled| +systemd_unit_file[]=lvm2-monitor.service|enabled| +systemd_unit_file[]=lvm2-pvscan@.service|static| +systemd_unit_file[]=lvm2.service|masked| +systemd_unit_file[]=mdadm-shutdown.service|disabled| +systemd_unit_file[]=module-init-tools.service|static| +systemd_unit_file[]=motd-news.service|static| +systemd_unit_file[]=motd.service|masked| +systemd_unit_file[]=mountall-bootclean.service|masked| +systemd_unit_file[]=mountall.service|masked| +systemd_unit_file[]=mountdevsubfs.service|masked| +systemd_unit_file[]=mountkernfs.service|masked| +systemd_unit_file[]=mountnfs-bootclean.service|masked| +systemd_unit_file[]=mountnfs.service|masked| +systemd_unit_file[]=networking.service|enabled| +systemd_unit_file[]=plymouth-halt.service|static| +systemd_unit_file[]=plymouth-kexec.service|static| +systemd_unit_file[]=plymouth-log.service|static| +systemd_unit_file[]=plymouth-poweroff.service|static| +systemd_unit_file[]=plymouth-quit-wait.service|static| +systemd_unit_file[]=plymouth-quit.service|static| +systemd_unit_file[]=plymouth-read-write.service|static| +systemd_unit_file[]=plymouth-reboot.service|static| +systemd_unit_file[]=plymouth-start.service|static| +systemd_unit_file[]=plymouth-switch-root.service|static| +systemd_unit_file[]=plymouth.service|static| +systemd_unit_file[]=pollinate.service|enabled| +systemd_unit_file[]=procps.service|static| +systemd_unit_file[]=quotaon.service|static| +systemd_unit_file[]=rc-local.service|static| +systemd_unit_file[]=rc.local.service|static| +systemd_unit_file[]=rc.service|masked| +systemd_unit_file[]=rcS.service|masked| +systemd_unit_file[]=reboot.service|masked| +systemd_unit_file[]=rescue.service|static| +systemd_unit_file[]=resolvconf.service|enabled| +systemd_unit_file[]=rmnologin.service|masked| +systemd_unit_file[]=rsync.service|disabled| +systemd_unit_file[]=rsyslog.service|enabled| +systemd_unit_file[]=sendsigs.service|masked| +systemd_unit_file[]=serial-getty@.service|disabled| +systemd_unit_file[]=setvtrgb.service|static| +systemd_unit_file[]=sigpwr-container-shutdown.service|static| +systemd_unit_file[]=single.service|masked| +systemd_unit_file[]=ssh.service|enabled| +systemd_unit_file[]=ssh@.service|static| +systemd_unit_file[]=sshd.service|enabled| +systemd_unit_file[]=stop-bootlogd-single.service|masked| +systemd_unit_file[]=stop-bootlogd.service|masked| +systemd_unit_file[]=syslog.service|enabled| +systemd_unit_file[]=systemd-ask-password-console.service|static| +systemd_unit_file[]=systemd-ask-password-plymouth.service|static| +systemd_unit_file[]=systemd-ask-password-wall.service|static| +systemd_unit_file[]=systemd-backlight@.service|static| +systemd_unit_file[]=systemd-binfmt.service|static| +systemd_unit_file[]=systemd-bootchart.service|disabled| +systemd_unit_file[]=systemd-bus-proxyd.service|static| +systemd_unit_file[]=systemd-exit.service|static| +systemd_unit_file[]=systemd-fsck-root.service|static| +systemd_unit_file[]=systemd-fsck@.service|static| +systemd_unit_file[]=systemd-fsckd.service|static| +systemd_unit_file[]=systemd-halt.service|static| +systemd_unit_file[]=systemd-hibernate-resume@.service|static| +systemd_unit_file[]=systemd-hibernate.service|static| +systemd_unit_file[]=systemd-hostnamed.service|static| +systemd_unit_file[]=systemd-hwdb-update.service|static| +systemd_unit_file[]=systemd-hybrid-sleep.service|static| +systemd_unit_file[]=systemd-initctl.service|static| +systemd_unit_file[]=systemd-journal-flush.service|static| +systemd_unit_file[]=systemd-journald.service|static| +systemd_unit_file[]=systemd-kexec.service|static| +systemd_unit_file[]=systemd-localed.service|static| +systemd_unit_file[]=systemd-logind.service|static| +systemd_unit_file[]=systemd-machine-id-commit.service|static| +systemd_unit_file[]=systemd-modules-load.service|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.service|static| +systemd_unit_file[]=systemd-networkd-wait-online.service|disabled| +systemd_unit_file[]=systemd-networkd.service|disabled| +systemd_unit_file[]=systemd-poweroff.service|static| +systemd_unit_file[]=systemd-quotacheck.service|static| +systemd_unit_file[]=systemd-random-seed.service|static| +systemd_unit_file[]=systemd-reboot.service|static| +systemd_unit_file[]=systemd-remount-fs.service|static| +systemd_unit_file[]=systemd-resolved.service|disabled| +systemd_unit_file[]=systemd-rfkill.service|static| +systemd_unit_file[]=systemd-suspend.service|static| +systemd_unit_file[]=systemd-sysctl.service|static| +systemd_unit_file[]=systemd-timedated.service|static| +systemd_unit_file[]=systemd-timesyncd.service|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup-dev.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup.service|static| +systemd_unit_file[]=systemd-udev-settle.service|static| +systemd_unit_file[]=systemd-udev-trigger.service|static| +systemd_unit_file[]=systemd-udevd.service|static| +systemd_unit_file[]=systemd-update-utmp-runlevel.service|static| +systemd_unit_file[]=systemd-update-utmp.service|static| +systemd_unit_file[]=systemd-user-sessions.service|static| +systemd_unit_file[]=udev.service|static| +systemd_unit_file[]=umountfs.service|masked| +systemd_unit_file[]=umountnfs.service|masked| +systemd_unit_file[]=umountroot.service|masked| +systemd_unit_file[]=unattended-upgrades.service|enabled| +systemd_unit_file[]=urandom.service|static| +systemd_unit_file[]=ureadahead-stop.service|static| +systemd_unit_file[]=ureadahead.service|enabled| +systemd_unit_file[]=user@.service|static| +systemd_unit_file[]=x11-common.service|masked| +systemd_unit_file[]=-.slice|static| +systemd_unit_file[]=machine.slice|static| +systemd_unit_file[]=system.slice|static| +systemd_unit_file[]=user.slice|static| +systemd_unit_file[]=acpid.socket|enabled| +systemd_unit_file[]=dbus.socket|static| +systemd_unit_file[]=dm-event.socket|enabled| +systemd_unit_file[]=lvm2-lvmetad.socket|enabled| +systemd_unit_file[]=lvm2-lvmpolld.socket|enabled| +systemd_unit_file[]=ssh.socket|disabled| +systemd_unit_file[]=syslog.socket|static| +systemd_unit_file[]=systemd-bus-proxyd.socket|static| +systemd_unit_file[]=systemd-fsckd.socket|static| +systemd_unit_file[]=systemd-initctl.socket|static| +systemd_unit_file[]=systemd-journald-audit.socket|static| +systemd_unit_file[]=systemd-journald-dev-log.socket|static| +systemd_unit_file[]=systemd-journald.socket|static| +systemd_unit_file[]=systemd-networkd.socket|disabled| +systemd_unit_file[]=systemd-rfkill.socket|static| +systemd_unit_file[]=systemd-udevd-control.socket|static| +systemd_unit_file[]=systemd-udevd-kernel.socket|static| +systemd_unit_file[]=basic.target|static| +systemd_unit_file[]=bluetooth.target|static| +systemd_unit_file[]=busnames.target|static| +systemd_unit_file[]=cloud-config.target|static| +systemd_unit_file[]=cloud-init.target|static| +systemd_unit_file[]=cryptsetup-pre.target|static| +systemd_unit_file[]=cryptsetup.target|static| +systemd_unit_file[]=ctrl-alt-del.target|disabled| +systemd_unit_file[]=default.target|static| +systemd_unit_file[]=emergency.target|static| +systemd_unit_file[]=exit.target|disabled| +systemd_unit_file[]=final.target|static| +systemd_unit_file[]=getty.target|static| +systemd_unit_file[]=graphical.target|static| +systemd_unit_file[]=halt.target|disabled| +systemd_unit_file[]=hibernate.target|static| +systemd_unit_file[]=hybrid-sleep.target|static| +systemd_unit_file[]=initrd-fs.target|static| +systemd_unit_file[]=initrd-root-fs.target|static| +systemd_unit_file[]=initrd-switch-root.target|static| +systemd_unit_file[]=initrd.target|static| +systemd_unit_file[]=kexec.target|disabled| +systemd_unit_file[]=local-fs-pre.target|static| +systemd_unit_file[]=local-fs.target|static| +systemd_unit_file[]=mail-transport-agent.target|static| +systemd_unit_file[]=multi-user.target|static| +systemd_unit_file[]=network-online.target|static| +systemd_unit_file[]=network-pre.target|static| +systemd_unit_file[]=network.target|static| +systemd_unit_file[]=nss-lookup.target|static| +systemd_unit_file[]=nss-user-lookup.target|static| +systemd_unit_file[]=paths.target|static| +systemd_unit_file[]=poweroff.target|disabled| +systemd_unit_file[]=printer.target|static| +systemd_unit_file[]=reboot.target|disabled| +systemd_unit_file[]=remote-fs-pre.target|static| +systemd_unit_file[]=remote-fs.target|enabled| +systemd_unit_file[]=rescue.target|disabled| +systemd_unit_file[]=rpcbind.target|static| +systemd_unit_file[]=runlevel0.target|disabled| +systemd_unit_file[]=runlevel1.target|disabled| +systemd_unit_file[]=runlevel2.target|static| +systemd_unit_file[]=runlevel3.target|static| +systemd_unit_file[]=runlevel4.target|static| +systemd_unit_file[]=runlevel5.target|static| +systemd_unit_file[]=runlevel6.target|disabled| +systemd_unit_file[]=shutdown.target|static| +systemd_unit_file[]=sigpwr.target|static| +systemd_unit_file[]=sleep.target|static| +systemd_unit_file[]=slices.target|static| +systemd_unit_file[]=smartcard.target|static| +systemd_unit_file[]=sockets.target|static| +systemd_unit_file[]=sound.target|static| +systemd_unit_file[]=suspend.target|static| +systemd_unit_file[]=swap.target|static| +systemd_unit_file[]=sysinit.target|static| +systemd_unit_file[]=system-update.target|static| +systemd_unit_file[]=time-sync.target|static| +systemd_unit_file[]=timers.target|static| +systemd_unit_file[]=umount.target|static| +systemd_unit_file[]=apt-daily-upgrade.timer|enabled| +systemd_unit_file[]=apt-daily.timer|enabled| +systemd_unit_file[]=motd-news.timer|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.timer|static| +systemd_unit_file[]=ureadahead-stop.timer|static| +journal_bootlogs=1 +journal_oldest_bootdate=2021-01-07 +journal_contains_errors=0 +journal_disk_size=2.4M +journal_meta_data=FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system.journal,FileID:38dc3cd3d69f481fb5f769834a761273,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ONLINE,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:no,HeadSequentialNumber:1,TailSequentialNumber:1249,HeadRealtimeTimestamp:Thu2021-01-0717:41:42CET,TailRealtimeTimestamp:Thu2021-01-0717:50:58CET,TailMonotonicTimestamp:9min21.023s,Objects:4860,EntryObjects:1249,DataObjects:2742,DataHashTableFill:61.7%,FieldObjects:59,FieldHashTableFill:17.7%,TagObjects:0,EntryArrayObjects:808,Diskusage:2.4M, +systemd_status=running +systemd_unit_not_found[]=org.freedesktop.network1.busname +systemd_unit_not_found[]=org.freedesktop.resolve1.busname +systemd_unit_not_found[]=tmp.mount +systemd_unit_not_found[]=apparmor.service +systemd_unit_not_found[]=auditd.service +systemd_unit_not_found[]=console-screen.service +systemd_unit_not_found[]=display-manager.service +systemd_unit_not_found[]=hv_kvp_daemon.service +systemd_unit_not_found[]=kbd.service +systemd_unit_not_found[]=lvm2-activation.service +systemd_unit_not_found[]=NetworkManager.service +systemd_unit_not_found[]=snapd.seeded.service +systemd_unit_not_found[]=sshd-keygen.service +systemd_unit_not_found[]=systemd-sysusers.service +systemd_unit_not_found[]=systemd-update-done.service +systemd_unit_not_found[]=systemd-vconsole-setup.service +systemd_service_not_found[]=apparmor.service +systemd_service_not_found[]=auditd.service +systemd_service_not_found[]=console-screen.service +systemd_service_not_found[]=display-manager.service +systemd_service_not_found[]=hv_kvp_daemon.service +systemd_service_not_found[]=kbd.service +systemd_service_not_found[]=lvm2-activation.service +systemd_service_not_found[]=NetworkManager.service +systemd_service_not_found[]=snapd.seeded.service +systemd_service_not_found[]=sshd-keygen.service +systemd_service_not_found[]=systemd-sysusers.service +systemd_service_not_found[]=systemd-update-done.service +systemd_service_not_found[]=systemd-vconsole-setup.service +journal_coredumps_lastday=0 +plugins_enabled=1 +hostid=8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +hostid2=7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +suggestion[]=BOOT-5122|Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-| +running_service_tool=systemctl +running_service[]=acpid +running_service[]=atd +running_service[]=cron +running_service[]=dbus +running_service[]=getty@tty1 +running_service[]=lvm2-lvmetad +running_service[]=mdadm +running_service[]=qemu-guest-agent +running_service[]=rsyslog +running_service[]=serial-getty@ttyS0 +running_service[]=ssh +running_service[]=systemd-journald +running_service[]=systemd-logind +running_service[]=systemd-resolved +running_service[]=systemd-timesyncd +running_service[]=systemd-udevd +running_service[]=unattended-upgrades +running_service[]=user@0 +boot_service_tool=systemctl +boot_service[]=atd +boot_service[]=autovt@ +boot_service[]=cloud-config +boot_service[]=cloud-final +boot_service[]=cloud-init-local +boot_service[]=cloud-init +boot_service[]=cron +boot_service[]=getty@ +boot_service[]=hc-net-scan +boot_service[]=lvm2-monitor +boot_service[]=networking +boot_service[]=pollinate +boot_service[]=resolvconf +boot_service[]=rsyslog +boot_service[]=ssh +boot_service[]=sshd +boot_service[]=syslog +boot_service[]=systemd-timesyncd +boot_service[]=unattended-upgrades +boot_service[]=ureadahead +uptime_in_seconds=576 +uptime_in_days=0 +boot_loader=GRUB2 +boot_uefi_booted=0 +boot_uefi_booted_secure=0 +service_manager=systemd +linux_default_runlevel=5 +cpu_pae=1 +cpu_nx=1 +linux_kernel_release=4.4.0-197-generic +linux_kernel_version=#229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +linux_kernel_type=modular +loaded_kernel_module[]=ablk_helper +loaded_kernel_module[]=aes_x86_64 +loaded_kernel_module[]=aesni_intel +loaded_kernel_module[]=ahci +loaded_kernel_module[]=async_memcpy +loaded_kernel_module[]=async_pq +loaded_kernel_module[]=async_raid6_recov +loaded_kernel_module[]=async_tx +loaded_kernel_module[]=async_xor +loaded_kernel_module[]=autofs4 +loaded_kernel_module[]=binfmt_misc +loaded_kernel_module[]=btrfs +loaded_kernel_module[]=crc32_pclmul +loaded_kernel_module[]=crct10dif_pclmul +loaded_kernel_module[]=cryptd +loaded_kernel_module[]=gf128mul +loaded_kernel_module[]=ghash_clmulni_intel +loaded_kernel_module[]=glue_helper +loaded_kernel_module[]=hid +loaded_kernel_module[]=hid_generic +loaded_kernel_module[]=inet_diag +loaded_kernel_module[]=input_leds +loaded_kernel_module[]=ip_tables +loaded_kernel_module[]=iptable_filter +loaded_kernel_module[]=iptable_nat +loaded_kernel_module[]=joydev +loaded_kernel_module[]=libahci +loaded_kernel_module[]=libcrc32c +loaded_kernel_module[]=linear +loaded_kernel_module[]=lrw +loaded_kernel_module[]=multipath +loaded_kernel_module[]=nf_conntrack +loaded_kernel_module[]=nf_conntrack_ipv4 +loaded_kernel_module[]=nf_defrag_ipv4 +loaded_kernel_module[]=nf_nat +loaded_kernel_module[]=nf_nat_ipv4 +loaded_kernel_module[]=psmouse +loaded_kernel_module[]=raid0 +loaded_kernel_module[]=raid1 +loaded_kernel_module[]=raid10 +loaded_kernel_module[]=raid456 +loaded_kernel_module[]=raid6_pq +loaded_kernel_module[]=serio_raw +loaded_kernel_module[]=tcp_diag +loaded_kernel_module[]=udp_diag +loaded_kernel_module[]=usbhid +loaded_kernel_module[]=virtio_rng +loaded_kernel_module[]=virtio_scsi +loaded_kernel_module[]=x_tables +loaded_kernel_module[]=xor +linux_config_file=/boot/config-4.4.0-197-generic +linux_kernel_io_scheduler[]=deadline +suggestion[]=KRNL-5820|If not required, consider explicit disabling of core dump in /etc/security/limits.conf file|-|-| +warning[]=KRNL-5830|Reboot of system is most likely needed||text:reboot| +memory_size=1998680 +memory_units=kB +auth_group_ids_unique=1 +auth_group_names_unique=1 +suggestion[]=AUTH-9230|Configure password hashing rounds in /etc/login.defs|-|-| +real_user[]=root,0 +suggestion[]=AUTH-9262|Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc|-|-| +pam_module[]=/lib/x86_64-linux-gnu/security/pam_access.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_debug.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_deny.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_echo.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_env.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_exec.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_extrausers.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_faildelay.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_filter.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_ftp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_group.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_issue.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_keyinit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_lastlog.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_limits.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_listfile.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_localuser.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_loginuid.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mail.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mkhomedir.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_motd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_namespace.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_nologin.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_permit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_pwhistory.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rhosts.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rootok.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_securetty.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_selinux.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_sepermit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_shells.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_stress.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_succeed_if.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_systemd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally2.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_time.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_timestamp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tty_audit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_umask.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_unix.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_userdb.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_warn.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_wheel.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_xauth.so +suggestion[]=AUTH-9286|Configure minimum password age in /etc/login.defs|-|-| +suggestion[]=AUTH-9286|Configure maximum password age in /etc/login.defs|-|-| +manual_event[]=AUTH-9328:03 +suggestion[]=AUTH-9328|Default umask in /etc/login.defs could be more strict like 027|-|-| +suggestion[]=AUTH-9328|Default umask in /etc/init.d/rc could be more strict like 027|-|-| +auth_failed_logins_tooling[]=/etc/login.defs +auth_failed_logins_logged=1 +ldap_auth_enabled=0 +ldap_pam_enabled=0 +password_min_days=-1 +password_max_days=-1 +available_shell[]=/bin/sh +available_shell[]=/bin/dash +available_shell[]=/bin/bash +available_shell[]=/bin/rbash +session_timeout_enabled=0 +suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-| +suggestion[]=FILE-6310|To decrease the impact of a full /tmp file system, place /tmp on a separate partition|-|-| +suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-| +file_systems_ext[]=/|ext4| +suggestion[]=FILE-6430|Consider disabling unused kernel modules|/etc/modprobe.d/blacklist.conf|Add 'install MODULENAME /bin/true' (without quotes)| +suggestion[]=USB-1000|Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft|-|-| +usb_authorized_default_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_default_device[]=/sys/bus/usb/devices/usb2 +usb_authorized_device[]=/sys/bus/usb/devices/usb2 +suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-| +localhost-mapped-to=::1 +name_cache_used=0 +package_manager[]=dpkg +installed_packages=352 +suggestion[]=PKGS-7370|Install debsums utility for the verification of packages with known good database.|-|-| +suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-| +installed_kernel_packages=2 +unattended_upgrade_tool[]=unattended-upgrade +unattended_upgrade_option_available=1 +ipv6_mode=auto +ipv6_only=0 +nameserver[]=213.133.99.99 +nameserver[]=213.133.98.98 +nameserver[]=213.133.100.100 +default_gateway[]=172.31.1.1 +network_interface[]=lo +network_interface[]=eth0 +network_mac_address[]=96:00:00:8b:fc:bd +network_ipv4_address[]=116.203.241.83 +network_ipv4_address[]=127.0.0.1 +network_ipv6_address[]=2a01:4f8:c2c:410b::1/64 +network_ipv6_address[]=fe80::9400:ff:fe8b:fcbd/64 +network_ipv6_address[]=::1/128 +network_listen[]=raw,ss,v1|udp|*:68|dhclient| +network_listen[]=raw,ss,v1|udp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|udp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|*:22|sshd| +network_listen[]=raw,ss,v1|tcp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|:::22|sshd| +suggestion[]=NETW-3200|Determine if protocol 'dccp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=dccp +suggestion[]=NETW-3200|Determine if protocol 'sctp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=sctp +suggestion[]=NETW-3200|Determine if protocol 'rds' is really needed on this system|-|-| +uncommon_network_protocol_enabled=rds +suggestion[]=NETW-3200|Determine if protocol 'tipc' is really needed on this system|-|-| +uncommon_network_protocol_enabled=tipc +imap_daemon= +pop3_daemon= +smtp_daemon= +firewall_software[]=iptables +warning[]=FIRE-4512|iptables module(s) loaded, but no rules active|-|-| +firewall_no_logging[]=iptables +manual[]=Verify if there is a formal process for testing and applying firewall rules +manual[]=Verify all traffic is filtered the right way between the different security zones +manual[]=Verify if a list is available with all required services +manual[]=Make sure an explicit deny all is the default policy for all unmatched traffic +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowTcpForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowTcpForwarding;field:AllowTcpForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|ClientAliveCountMax (set 3 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option ClientAliveCountMax;field:ClientAliveCountMax;prefval:2;value:3;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Compression (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option Compression;field:Compression;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|LogLevel (set INFO to VERBOSE)|-| +details[]=SSH-7408|sshd|desc:sshd option LogLevel;field:LogLevel;prefval:VERBOSE;value:INFO;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxAuthTries (set 6 to 3)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxAuthTries;field:MaxAuthTries;prefval:3;value:6;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxSessions (set 10 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxSessions;field:MaxSessions;prefval:2;value:10;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))|-| +details[]=SSH-7408|sshd|desc:sshd option PermitRootLogin;field:PermitRootLogin;prefval:(FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD);value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Port (set 22 to )|-| +details[]=SSH-7408|sshd|desc:sshd option Port;field:Port;prefval:;value:22;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|TCPKeepAlive (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option TCPKeepAlive;field:TCPKeepAlive;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|X11Forwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option X11Forwarding;field:X11Forwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowAgentForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowAgentForwarding;field:AllowAgentForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|UsePrivilegeSeparation (set YES to SANDBOX)|-| +details[]=SSH-7408|sshd|desc:sshd option UsePrivilegeSeparation;field:UsePrivilegeSeparation;prefval:SANDBOX;value:YES;| +ssh_daemon_running=1 +openssh_daemon_running=1 +syslog_daemon_present=1 +syslog_daemon[]=systemd-journal +syslog_daemon_present=1 +syslog_daemon[]=rsyslog +log_directory[]=/var/log +log_directory[]=/var/log/apt +log_directory[]=/var/log/unattended-upgrades +remote_syslog_configured=0 +suggestion[]=LOGG-2154|Enable logging to an external logging host for archiving purposes and additional protection|-|-| +log_directory[]=/var/log +log_rotation_config_found=1 +log_rotation_tool=logrotate +suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-| +weak_banner_file[]=/etc/issue +suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-| +crond_running=1 +scheduler[]=crond +cronjob[]=17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +cronjob[]=25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +cronjob[]=47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +cronjob[]=52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +cronjob[]=/etc/cron.d/mdadm +cronjob[]=/etc/cron.daily/bsdmainutils +cronjob[]=/etc/cron.daily/apt-compat +cronjob[]=/etc/cron.daily/passwd +cronjob[]=/etc/cron.daily/man-db +cronjob[]=/etc/cron.daily/aptitude +cronjob[]=/etc/cron.daily/dpkg +cronjob[]=/etc/cron.daily/mdadm +cronjob[]=/etc/cron.daily/logrotate +cronjob[]=/etc/cron.weekly/man-db +cronjob[]=/etc/cron.weekly/fstrim +scheduler[]=atd +suggestion[]=ACCT-9622|Enable process accounting|-|-| +suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-| +suggestion[]=ACCT-9628|Enable auditd to collect audit information|-|-| +linux_auditd_running=0 +audit_daemon_running=0 +tz_variable_empty=1 +warning[]=TIME-3185|systemd-timesyncd never successfully synchronized time|-|-| +ntp_config_found=0 +ntp_config_type_daemon=1 +ntp_config_type_eventbased=0 +ntp_config_type_scheduled=0 +ntp_config_type_startup=0 +ntp_daemon=systemd-timesyncd +ntp_daemon_running=1 +certificate[]=/etc/ssl/certs/ca-certificates.crt|0|cn:ACCVRAIZ1;notafter:Dec 31 09:37:37 2030 GMT;| +certificates=139 +kernel_entropy=1126 +rng_found=0 +framework_grsecurity=0 +framework_selinux=0 +suggestion[]=FINT-4350|Install a file integrity tool to monitor changes to critical and sensitive files|-|-| +suggestion[]=TOOL-5002|Determine if automation tools are present for system management|-|-| +automation_tool_present=0 +malware_scanner_installed=0 +suggestion[]=FILE-7524|Consider restricting file permissions|See screen output or log file|text:Use chmod to change file permissions| +home_directory[]=/bin +home_directory[]=/dev +home_directory[]=/root +home_directory[]=/run/systemd +home_directory[]=/run/systemd/netif +home_directory[]=/run/systemd/resolve +home_directory[]=/usr/games +home_directory[]=/usr/sbin +home_directory[]=/var/backups +home_directory[]=/var/cache/man +home_directory[]=/var/cache/pollinate +home_directory[]=/var/mail +home_directory[]=/var/run/dbus +home_directory[]=/var/run/sshd +details[]=KRNL-6000|sysctl|desc:Disable loading of TTY line disciplines;field:dev.tty.ldisc_autoload;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict FIFO special device creation behavior;field:fs.protected_fifos;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict regular files creation behavior;field:fs.protected_regular;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:No description;field:kernel.core_uses_pid;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict use of dmesg;field:kernel.dmesg_restrict;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict access to kernel symbols;field:kernel.kptr_restrict;prefval:2;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict module loading once this sysctl value is loaded;field:kernel.modules_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict unprivileged access to the perf_event_open() system call.;field:kernel.perf_event_paranoid;prefval:3;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable magic SysRQ;field:kernel.sysrq;prefval:0;value:176;| +details[]=KRNL-6000|sysctl|desc:Restrict BPF for unprivileged users;field:kernel.unprivileged_bpf_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Hardened BPF JIT compilation;field:net.core.bpf_jit_harden;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.all.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Log all packages for which the host does not have a path back to the source;field:net.ipv4.conf.all.log_martians;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.all.send_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv4.conf.default.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable IP source routing;field:net.ipv4.conf.default.accept_source_route;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Log all packages for which the host does not have a path back to the source;field:net.ipv4.conf.default.log_martians;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv6.conf.all.accept_redirects;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Disable/Ignore ICMP routing redirects;field:net.ipv6.conf.default.accept_redirects;prefval:0;value:1;| +suggestion[]=KRNL-6000|One or more sysctl values differ from the scan profile and could be tweaked||Change sysctl value or disable test (skip-test=KRNL-6000:)| +suggestion[]=HRDN-7230|Harden the system by installing at least one malware scanner, to perform periodic file system scans|-|Install a tool like rkhunter, chkrootkit, OSSEC| +compiler_installed=0 +lynis_tests_done=258 +report_datetime_end=2021-01-07 17:51:34 +dhcp_client_running=1 +arpwatch_running=0 +firewall_active=1 +firewall_empty_ruleset=1 +firewall_installed=1 +installed_packages_array=|acl,2.2.52-3|acpid,1:2.0.26-1ubuntu2|adduser,3.113+nmu3ubuntu4|apt,1.2.32ubuntu0.2|apt-transport-https,1.2.32ubuntu0.2|apt-utils,1.2.32ubuntu0.2|aptitude,0.7.4-2ubuntu2|aptitude-common,0.7.4-2ubuntu2|at,3.1.18-2ubuntu1|base-files,9.4ubuntu4.13|base-passwd,3.5.39|bash,4.3-14ubuntu1.4|bind9-host,1:9.10.3.dfsg.P4-8ubuntu1.17|bsdmainutils,9.0.6ubuntu3|bsdutils,1:2.27.1-6ubuntu3.10|btrfs-tools,4.4-1ubuntu1.1|busybox-initramfs,1:1.22.0-15ubuntu1.4|bzip2,1.0.6-8ubuntu0.2|ca-certificates,20201027ubuntu0.16.04.1|cloud-guest-utils,0.27-0ubuntu25.2|cloud-init,20.4-0ubuntu1~16.04.1|console-setup,1.108ubuntu15.5|console-setup-linux,1.108ubuntu15.5|coreutils,8.25-2ubuntu3~16.04|cpio,2.11+dfsg-5ubuntu1.1|cron,3.0pl1-128ubuntu2|cryptsetup,2:1.6.6-5ubuntu2.1|cryptsetup-bin,2:1.6.6-5ubuntu2.1|curl,7.47.0-1ubuntu2.18|dash,0.5.8-2.1ubuntu2|dbus,1.10.6-1ubuntu3.6|debconf,1.5.58ubuntu2|debconf-i18n,1.5.58ubuntu2|debianutils,4.7|dh-python,2.20151103ubuntu1.2|diffutils,1:3.3-3|dirmngr,2.1.11-6ubuntu2.1|distro-info-data,0.28ubuntu0.16|dmeventd,2:1.02.110-1ubuntu10|dmsetup,2:1.02.110-1ubuntu10|dpkg,1.18.4ubuntu1.6|e2fslibs:amd64,1.42.13-1ubuntu1.2|e2fsprogs,1.42.13-1ubuntu1.2|eatmydata,105-3|efibootmgr,0.12-4|ethtool,1:4.5-1|findutils,4.6.0+git+20160126-2|gcc-5-base:amd64,5.4.0-6ubuntu1~16.04.12|gcc-6-base:amd64,6.0.1-0ubuntu1|gdisk,1.0.1-1build1|gettext-base,0.19.7-2ubuntu3.1|gir1.2-glib-2.0:amd64,1.46.0-3ubuntu1|git,1:2.7.4-0ubuntu1.9|git-man,1:2.7.4-0ubuntu1.9|gnupg,1.4.20-1ubuntu3.3|gnupg-agent,2.1.11-6ubuntu2.1|gnupg2,2.1.11-6ubuntu2.1|gpgv,1.4.20-1ubuntu3.3|grep,2.25-1~16.04.1|groff-base,1.22.3-7|grub-common,2.02~beta2-36ubuntu3.29|grub-efi-amd64,2.02~beta2-36ubuntu3.29|grub-efi-amd64-bin,2.02~beta2-36ubuntu3.29|grub-pc-bin,2.02~beta2-36ubuntu3.29|grub2-common,2.02~beta2-36ubuntu3.29|gzip,1.6-4ubuntu1|hc-utils,0.0.3-1|host,1:9.10.3.dfsg.P4-8ubuntu1.17|hostname,3.16ubuntu2|htop,2.0.1-1ubuntu1|ifupdown,0.8.10ubuntu1.4|init,1.29ubuntu4|init-system-helpers,1.29ubuntu4|initramfs-tools,0.122ubuntu8.17|initramfs-tools-bin,0.122ubuntu8.17|initramfs-tools-core,0.122ubuntu8.17|initscripts,2.88dsf-59.3ubuntu2|insserv,1.14.0-5ubuntu3|iproute2,4.3.0-1ubuntu3.16.04.5|iptables,1.6.0-2ubuntu3|iputils-ping,3:20121221-5ubuntu2|isc-dhcp-client,4.3.3-5ubuntu12.10|isc-dhcp-common,4.3.3-5ubuntu12.10|iso-codes,3.65-1|kbd,1.15.5-1ubuntu5|keyboard-configuration,1.108ubuntu15.5|klibc-utils,2.0.4-8ubuntu1.16.04.4|kmod,22-1ubuntu5.2|less,481-2.1ubuntu0.2|libacl1:amd64,2.2.52-3|libapparmor1:amd64,2.10.95-0ubuntu2.11|libapt-inst2.0:amd64,1.2.32ubuntu0.2|libapt-pkg5.0:amd64,1.2.32ubuntu0.2|libasn1-8-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libasprintf0v5:amd64,0.19.7-2ubuntu3.1|libassuan0:amd64,2.4.2-2|libatm1:amd64,1:2.5.1-1.5|libattr1:amd64,1:2.4.47-2|libaudit-common,1:2.4.5-1ubuntu2.1|libaudit1:amd64,1:2.4.5-1ubuntu2.1|libbind9-140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libblkid1:amd64,2.27.1-6ubuntu3.10|libboost-iostreams1.58.0:amd64,1.58.0+dfsg-5ubuntu3.1|libbsd0:amd64,0.8.2-1ubuntu0.1|libbz2-1.0:amd64,1.0.6-8ubuntu0.2|libc-bin,2.23-0ubuntu11.2|libc6:amd64,2.23-0ubuntu11.2|libcap-ng0:amd64,0.7.7-1|libcap2-bin,1:2.24-12|libcap2:amd64,1:2.24-12|libcomerr2:amd64,1.42.13-1ubuntu1.2|libcryptsetup4:amd64,2:1.6.6-5ubuntu2.1|libcurl3-gnutls:amd64,7.47.0-1ubuntu2.18|libcwidget3v5:amd64,0.5.17-4ubuntu2|libdb5.3:amd64,5.3.28-11ubuntu0.2|libdbus-1-3:amd64,1.10.6-1ubuntu3.6|libdbus-glib-1-2:amd64,0.106-1|libdebconfclient0:amd64,0.198ubuntu1|libdevmapper-event1.02.1:amd64,2:1.02.110-1ubuntu10|libdevmapper1.02.1:amd64,2:1.02.110-1ubuntu10|libdns-export162,1:9.10.3.dfsg.P4-8ubuntu1.17|libdns162:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libdrm-common,2.4.91-2~16.04.1|libdrm2:amd64,2.4.91-2~16.04.1|libeatmydata1:amd64,105-3|libedit2:amd64,3.1-20150325-1ubuntu2|libefivar0:amd64,0.23-2|liberror-perl,0.17-1.2|libestr0,0.1.10-1|libexpat1:amd64,2.1.0-7ubuntu0.16.04.5|libfdisk1:amd64,2.27.1-6ubuntu3.10|libffi6:amd64,3.2.1-4|libfreetype6:amd64,2.6.1-0.1ubuntu2.5|libfribidi0:amd64,0.19.7-1|libfuse2:amd64,2.9.4-1ubuntu3.1|libgcc1:amd64,1:6.0.1-0ubuntu1|libgcrypt20:amd64,1.6.5-2ubuntu0.6|libgdbm3:amd64,1.8.3-13.1|libgeoip1:amd64,1.6.9-1|libgirepository-1.0-1:amd64,1.46.0-3ubuntu1|libglib2.0-0:amd64,2.48.2-0ubuntu4.6|libgmp10:amd64,2:6.1.0+dfsg-2|libgnutls-openssl27:amd64,3.4.10-4ubuntu1.8|libgnutls30:amd64,3.4.10-4ubuntu1.8|libgpg-error0:amd64,1.21-2ubuntu1|libgpm2:amd64,1.20.4-6.1|libgssapi-krb5-2:amd64,1.13.2+dfsg-5ubuntu2.2|libgssapi3-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhcrypto4-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimbase1-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimntlm0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhogweed4:amd64,3.2-1ubuntu0.16.04.1|libhx509-5-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libicu55:amd64,55.1-7ubuntu0.5|libidn11:amd64,1.32-3ubuntu1.2|libisc-export160,1:9.10.3.dfsg.P4-8ubuntu1.17|libisc160:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccc140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccfg140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libjson-c2:amd64,0.11-4ubuntu2.6|libk5crypto3:amd64,1.13.2+dfsg-5ubuntu2.2|libkeyutils1:amd64,1.5.9-8ubuntu1|libklibc,2.0.4-8ubuntu1.16.04.4|libkmod2:amd64,22-1ubuntu5.2|libkrb5-26-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libkrb5-3:amd64,1.13.2+dfsg-5ubuntu2.2|libkrb5support0:amd64,1.13.2+dfsg-5ubuntu2.2|libksba8:amd64,1.3.3-1ubuntu0.16.04.1|libldap-2.4-2:amd64,2.4.42+dfsg-2ubuntu3.11|liblocale-gettext-perl,1.07-1build1|liblvm2app2.2:amd64,2.02.133-1ubuntu10|liblvm2cmd2.02:amd64,2.02.133-1ubuntu10|liblwres141:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|liblz4-1:amd64,0.0~r131-2ubuntu2|liblzma5:amd64,5.1.1alpha+20120614-2ubuntu2|liblzo2-2:amd64,2.08-1.2|libmagic1:amd64,1:5.25-2ubuntu1.4|libmnl0:amd64,1.0.3-5|libmount1:amd64,2.27.1-6ubuntu3.10|libmpdec2:amd64,2.4.2-1|libncurses5:amd64,6.0+20160213-1ubuntu1|libncursesw5:amd64,6.0+20160213-1ubuntu1|libnettle6:amd64,3.2-1ubuntu0.16.04.1|libnewt0.52:amd64,0.52.18-1ubuntu2|libnfnetlink0:amd64,1.0.1-3|libnih1:amd64,1.0.3-4.3ubuntu1|libnpth0:amd64,1.2-3|libp11-kit0:amd64,0.23.2-5~ubuntu16.04.2|libpam-modules-bin,1.1.8-3.2ubuntu2.3|libpam-modules:amd64,1.1.8-3.2ubuntu2.3|libpam-runtime,1.1.8-3.2ubuntu2.3|libpam-systemd:amd64,229-4ubuntu21.29|libpam0g:amd64,1.1.8-3.2ubuntu2.3|libpci3:amd64,1:3.3.1-1.1ubuntu1.3|libpcre3:amd64,2:8.38-3.1|libperl5.22:amd64,5.22.1-9ubuntu0.9|libpipeline1:amd64,1.4.1-2|libplymouth4:amd64,0.9.2-3ubuntu13.5|libpng12-0:amd64,1.2.54-1ubuntu1.1|libpopt0:amd64,1.16-10|libprocps4:amd64,2:3.3.10-4ubuntu2.5|libpython3-stdlib:amd64,3.5.1-3|libpython3.5-minimal:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5-stdlib:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5:amd64,3.5.2-2ubuntu0~16.04.12|libreadline5:amd64,5.2+dfsg-3build1|libreadline6:amd64,6.3-8ubuntu2|libroken18-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|librtmp1:amd64,2.4+20151223.gitfa8646d-1ubuntu0.1|libsasl2-2:amd64,2.1.26.dfsg1-14ubuntu0.2|libsasl2-modules-db:amd64,2.1.26.dfsg1-14ubuntu0.2|libseccomp2:amd64,2.4.3-1ubuntu3.16.04.3|libselinux1:amd64,2.4-3build2|libsemanage-common,2.3-1build3|libsemanage1:amd64,2.3-1build3|libsepol1:amd64,2.4-2|libsigc++-2.0-0v5:amd64,2.6.2-1|libslang2:amd64,2.3.0-2ubuntu1.1|libsmartcols1:amd64,2.27.1-6ubuntu3.10|libsqlite3-0:amd64,3.11.0-1ubuntu1.5|libss2:amd64,1.42.13-1ubuntu1.2|libssl1.0.0:amd64,1.0.2g-1ubuntu4.18|libstdc++6:amd64,5.4.0-6ubuntu1~16.04.12|libsystemd0:amd64,229-4ubuntu21.29|libtasn1-6:amd64,4.7-3ubuntu0.16.04.3|libtext-charwidth-perl,0.04-7build5|libtext-iconv-perl,1.7-5build4|libtext-wrapi18n-perl,0.06-7.1|libtinfo5:amd64,6.0+20160213-1ubuntu1|libudev1:amd64,229-4ubuntu21.29|libusb-0.1-4:amd64,2:0.1.12-28|libusb-1.0-0:amd64,2:1.0.20-1|libustr-1.0-1:amd64,1.0.4-5|libuuid1:amd64,2.27.1-6ubuntu3.10|libwind0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libwrap0:amd64,7.6.q-25|libxapian22v5:amd64,1.2.22-2|libxml2:amd64,2.9.3+dfsg1-1ubuntu0.7|libxtables11:amd64,1.6.0-2ubuntu3|libyaml-0-2:amd64,0.1.6-3|linux-base,4.5ubuntu1.2~16.04.1|linux-firmware,1.157.23|linux-image-4.4.0-197-generic,4.4.0-197.229|linux-image-4.4.0-198-generic,4.4.0-198.230|linux-image-virtual,4.4.0.198.204|linux-modules-4.4.0-197-generic,4.4.0-197.229|linux-modules-4.4.0-198-generic,4.4.0-198.230|locales,2.23-0ubuntu11.2|login,1:4.2-3.1ubuntu5.4|logrotate,3.8.7-2ubuntu2.16.04.2|lsb-base,9.20160110ubuntu0.2|lsb-release,9.20160110ubuntu0.2|lvm2,2.02.133-1ubuntu10|makedev,2.3.1-93ubuntu2~ubuntu16.04.1|man-db,2.7.5-1|mawk,1.3.3-17ubuntu2|mdadm,3.3-2ubuntu7.6|mime-support,3.59ubuntu1|mokutil,0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1|mount,2.27.1-6ubuntu3.10|mtr-tiny,0.86-1ubuntu0.1|multiarch-support,2.23-0ubuntu11.2|nano,2.5.3-2ubuntu2|ncurses-base,6.0+20160213-1ubuntu1|ncurses-bin,6.0+20160213-1ubuntu1|ncurses-term,6.0+20160213-1ubuntu1|net-tools,1.60-26ubuntu1|netbase,5.3|netcat-openbsd,1.105-7ubuntu1|openssh-client,1:7.2p2-4ubuntu2.10|openssh-server,1:7.2p2-4ubuntu2.10|openssh-sftp-server,1:7.2p2-4ubuntu2.10|openssl,1.0.2g-1ubuntu4.18|passwd,1:4.2-3.1ubuntu5.4|patch,2.7.5-1ubuntu0.16.04.2|pciutils,1:3.3.1-1.1ubuntu1.3|perl,5.22.1-9ubuntu0.9|perl-base,5.22.1-9ubuntu0.9|perl-modules-5.22,5.22.1-9ubuntu0.9|pinentry-curses,0.9.7-3|plymouth,0.9.2-3ubuntu13.5|pollinate,4.33-0ubuntu1~16.04.1|powermgmt-base,1.31+nmu1|procps,2:3.3.10-4ubuntu2.5|python-apt-common,1.1.0~beta1ubuntu0.16.04.11|python3,3.5.1-3|python3-apt,1.1.0~beta1ubuntu0.16.04.11|python3-blinker,1.3.dfsg2-1build1|python3-cffi-backend,1.5.2-1ubuntu1|python3-chardet,2.3.0-2|python3-configobj,5.0.6-2|python3-cryptography,1.2.3-1ubuntu0.3|python3-dbus,1.2.0-3|python3-gi,3.20.0-0ubuntu1|python3-idna,2.0-3|python3-jinja2,2.8-1ubuntu0.1|python3-json-pointer,1.9-3|python3-jsonpatch,1.19-3|python3-jwt,1.3.0-1ubuntu0.1|python3-markupsafe,0.23-2build2|python3-minimal,3.5.1-3|python3-oauthlib,1.0.3-1|python3-pkg-resources,20.7.0-1|python3-pyasn1,0.1.9-1|python3-pycurl,7.43.0-1ubuntu1|python3-requests,2.9.1-3ubuntu0.1|python3-serial,3.0.1-1|python3-six,1.10.0-3|python3-software-properties,0.96.20.10|python3-urllib3,1.13.1-2ubuntu0.16.04.4|python3-yaml,3.11-3build1|python3.5,3.5.2-2ubuntu0~16.04.12|python3.5-minimal,3.5.2-2ubuntu0~16.04.12|qemu-guest-agent,1:2.5+dfsg-5ubuntu10.48|readline-common,6.3-8ubuntu2|resolvconf,1.78ubuntu7|rsync,3.1.1-3ubuntu1.3|rsyslog,8.16.0-1ubuntu3.1|sbsigntool,0.6-0ubuntu10.1|sed,4.2.2-7|sensible-utils,0.0.9ubuntu0.16.04.1|shim,15+1552672080.a4a1fbe-0ubuntu2|shim-signed,1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2|software-properties-common,0.96.20.10|ssh-import-id,5.5-0ubuntu1|sudo,1.8.16-0ubuntu1.9|systemd,229-4ubuntu21.29|systemd-sysv,229-4ubuntu21.29|sysv-rc,2.88dsf-59.3ubuntu2|sysvinit-utils,2.88dsf-59.3ubuntu2|tar,1.28-2.1ubuntu0.1|tasksel,3.34ubuntu3|tasksel-data,3.34ubuntu3|tzdata,2020d-0ubuntu0.16.04|ubuntu-advantage-tools,10ubuntu0.16.04.1|ubuntu-keyring,2012.05.19.1|ucf,3.0036|udev,229-4ubuntu21.29|unattended-upgrades,1.1ubuntu1.18.04.7~16.04.6|ureadahead,0.100.0-19.1|usbutils,1:007-4|util-linux,2.27.1-6ubuntu3.10|vim,2:7.4.1689-3ubuntu1.5|vim-common,2:7.4.1689-3ubuntu1.5|vim-runtime,2:7.4.1689-3ubuntu1.5|vim-tiny,2:7.4.1689-3ubuntu1.5|wget,1.17.1-1ubuntu1.5|whiptail,0.52.18-1ubuntu2|xfsprogs,4.3.0+nmu1ubuntu1.1|xkb-data,2.16-1ubuntu1|xz-utils,5.1.1alpha+20120614-2ubuntu2|zlib1g:amd64,1:1.2.8.dfsg-2ubuntu4.3 +package_audit_tool=apt-get +package_audit_tool_found=1 +vulnerable_packages_found=0 +hardening_index=61 +tests_executed=HRDN-7231|HRDN-7230|HRDN-7222|HRDN-7220|KRNL-6000|HOME-9350|HOME-9310|HOME-9306|HOME-9304|HOME-9302|FILE-7524|MALW-3284|MALW-3282|MALW-3280|MALW-3278|MALW-3276|MALW-3275|TOOL-5190|TOOL-5126|TOOL-5130|TOOL-5122|TOOL-5120|TOOL-5102|TOOL-5002|FINT-4350|FINT-4341|FINT-4338|FINT-4330|FINT-4328|FINT-4326|FINT-4322|FINT-4318|FINT-4314|FINT-4310|MACF-6290|RBAC-6272|MACF-6240|MACF-6232|MACF-6204|CONT-8102|CRYP-8005|CRYP-8004|CRYP-8002|CRYP-7931|CRYP-7930|CRYP-7902|TIME-3185|TIME-3170|TIME-3148|TIME-3104|ACCT-9636|ACCT-9628|ACCT-9626|ACCT-9622|SCHD-7724|SCHD-7720|SCHD-7718|SCHD-7704|SCHD-7702|BANN-7130|BANN-7128|BANN-7126|BANN-7124|INSE-8320|INSE-8318|INSE-8316|INSE-8314|INSE-8322|INSE-8310|INSE-8304|INSE-8300|INSE-8102|INSE-8100|INSE-8000|LOGG-2180|LOGG-2170|LOGG-2154|LOGG-2150|LOGG-2148|LOGG-2146|LOGG-2142|LOGG-2138|LOGG-2240|LOGG-2230|LOGG-2210|LOGG-2136|LOGG-2132|LOGG-2130|SQD-3602|PHP-2211|LDAP-2219|DBS-1880|DBS-1860|DBS-1840|DBS-1826|DBS-1820|DBS-1818|DBS-1804|SNMP-3302|SSH-7440|SSH-7408|SSH-7406|SSH-7404|SSH-7402|HTTP-6702|HTTP-6622|FIRE-4594|FIRE-4590|FIRE-4586|FIRE-4524|FIRE-4513|FIRE-4512|FIRE-4508|FIRE-4502|MAIL-8880|MAIL-8860|MAIL-8838|MAIL-8820|MAIL-8814|MAIL-8802|PRNT-2314|PRNT-2304|NETW-3200|NETW-3032|NETW-3030|NETW-3028|NETW-3015|NETW-3012|NETW-3008|NETW-3006|NETW-3004|NETW-3001|NETW-2706|NETW-2705|NETW-2704|NETW-2600|NETW-2400|PKGS-7420|PKGS-7410|PKGS-7398|PKGS-7394|PKGS-7392|PKGS-7390|PKGS-7388|PKGS-7370|PKGS-7346|PKGS-7345|NAME-4408|NAME-4406|NAME-4404|NAME-4402|NAME-4304|NAME-4230|NAME-4202|NAME-4034|NAME-4032|NAME-4028|NAME-4020|NAME-4018|NAME-4016|STRG-1920|STRG-1846|USB-3000|USB-2000|USB-1000|FILE-6430|FILE-6394|FILE-6376|FILE-6374|FILE-6372|FILE-6368|FILE-6363|FILE-6362|FILE-6354|FILE-6344|FILE-6336|FILE-6332|FILE-6329|FILE-6324|FILE-6323|FILE-6311|FILE-6310|SHLL-6230|SHLL-6220|SHLL-6211|AUTH-9408|AUTH-9402|AUTH-9328|AUTH-9308|AUTH-9288|AUTH-9286|AUTH-9284|AUTH-9283|AUTH-9282|AUTH-9278|AUTH-9268|AUTH-9266|AUTH-9264|AUTH-9262|AUTH-9252|AUTH-9250|AUTH-9242|AUTH-9240|AUTH-9234|AUTH-9230|AUTH-9229|AUTH-9228|AUTH-9226|AUTH-9222|AUTH-9216|AUTH-9208|AUTH-9204|PROC-3802|PROC-3614|PROC-3612|PROC-3602|KRNL-5830|KRNL-5820|KRNL-5788|KRNL-5730|KRNL-5728|KRNL-5726|KRNL-5723|KRNL-5695|KRNL-5677|KRNL-5622|BOOT-5260|BOOT-5202|BOOT-5184|BOOT-5180|BOOT-5177|BOOT-5155|BOOT-5142|BOOT-5139|BOOT-5122|BOOT-5121|BOOT-5116|BOOT-5109|BOOT-5108|BOOT-5104|PLGN-3860|PLGN-3856|PLGN-3834|PLGN-3832|PLGN-3830|PLGN-3820|PLGN-3818|PLGN-3816|PLGN-3814|PLGN-3812|PLGN-3810|PLGN-3808|PLGN-3806|PLGN-3804|PLGN-3802|PLGN-3800|PLGN-0010|CORE-1000| +tests_skipped=MALW-3288|MALW-3286|TOOL-5104|FINT-4402|FINT-4340|FINT-4339|FINT-4336|FINT-4334|FINT-4316|FINT-4315|MACF-6242|MACF-6234|MACF-6208|CONT-8108|CONT-8107|CONT-8106|CONT-8104|CONT-8004|TIME-3182|TIME-3181|TIME-3180|TIME-3160|TIME-3136|TIME-3132|TIME-3128|TIME-3124|TIME-3120|TIME-3116|TIME-3112|TIME-3106|ACCT-9662|ACCT-9660|ACCT-9656|ACCT-9654|ACCT-9652|ACCT-9650|ACCT-9634|ACCT-9632|ACCT-9630|ACCT-2760|ACCT-2754|BANN-7113|INSE-8050|INSE-8200|INSE-8116|INSE-8106|INSE-8104|INSE-8016|INSE-8006|INSE-8004|INSE-8002|LOGG-2192|LOGG-2190|LOGG-2164|LOGG-2162|LOGG-2160|LOGG-2153|LOGG-2152|LOGG-2134|SQD-3680|SQD-3630|SQD-3624|SQD-3620|SQD-3616|SQD-3614|SQD-3613|SQD-3610|SQD-3606|SQD-3604|PHP-2382|PHP-2378|PHP-2376|PHP-2374|PHP-2372|PHP-2368|PHP-2320|LDAP-2224|DBS-1888|DBS-1886|DBS-1884|DBS-1882|DBS-1828|DBS-1816|SNMP-3306|SNMP-3304|HTTP-6720|HTTP-6716|HTTP-6714|HTTP-6712|HTTP-6710|HTTP-6708|HTTP-6706|HTTP-6704|HTTP-6643|HTTP-6641|HTTP-6640|HTTP-6632|HTTP-6626|HTTP-6624|FIRE-4540|FIRE-4538|FIRE-4536|FIRE-4534|FIRE-4532|FIRE-4530|FIRE-4526|FIRE-4520|FIRE-4518|MAIL-8920|MAIL-8818|MAIL-8817|MAIL-8816|MAIL-8804|PRNT-2420|PRNT-2418|PRNT-2316|PRNT-2308|PRNT-2307|PRNT-2306|PRNT-2302|NETW-3014|PKGS-7393|PKGS-7387|PKGS-7386|PKGS-7384|PKGS-7383|PKGS-7382|PKGS-7381|PKGS-7380|PKGS-7378|PKGS-7366|PKGS-7354|PKGS-7352|PKGS-7350|PKGS-7348|PKGS-7334|PKGS-7332|PKGS-7330|PKGS-7328|PKGS-7322|PKGS-7320|PKGS-7314|PKGS-7312|PKGS-7310|PKGS-7308|PKGS-7306|PKGS-7304|PKGS-7303|PKGS-7302|PKGS-7301|NAME-4306|NAME-4238|NAME-4236|NAME-4232|NAME-4210|NAME-4206|NAME-4204|NAME-4036|NAME-4026|NAME-4024|STRG-1930|STRG-1928|STRG-1926|STRG-1906|STRG-1904|STRG-1902|FILE-6410|FILE-6439|FILE-6330|FILE-6312|SHLL-6202|AUTH-9410|AUTH-9409|AUTH-9406|AUTH-9340|AUTH-9306|AUTH-9304|AUTH-9254|AUTH-9218|AUTH-9212|PROC-3604|KRNL-5770|KRNL-5831|KRNL-5745|BOOT-5264|BOOT-5263|BOOT-5262|BOOT-5170|BOOT-5165|BOOT-5159|BOOT-5126|BOOT-5261|BOOT-5124|BOOT-5117|BOOT-5106|BOOT-5102|PLGN-0008| +finish=true diff --git a/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-3.dat b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-3.dat new file mode 100644 index 0000000..5109f5e --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/lynis-report-3.dat @@ -0,0 +1,725 @@ +# Lynis Report +report_version_major=1 +report_version_minor=0 +report_datetime_start=2021-01-07 17:58:08 +auditor=[Not Specified] +lynis_version=3.0.3 +os=Linux +os_name=Ubuntu +os_fullname=Ubuntu 16.04.7 LTS +os_version=16.04 +linux_version=Ubuntu +os_kernel_version=4.4.0 +os_kernel_version_full=4.4.0-197-generic +hostname=it-sec-test-vm +test_category=all +test_group=all +plugin_directory=./plugins +lynis_update_available=0 +binaries_count=1077 +binaries_suid_count=/bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/procmail /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit /usr/sbin/sensible-mda +binaries_sgid_count=/sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/dotlockfile /usr/bin/expiry /usr/bin/lockfile /usr/bin/procmail /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write /usr/sbin/hoststat /usr/sbin/purgestat /usr/sbin/sendmail /usr/sbin/sendmail-msp /usr/sbin/sendmail-mta +binary_paths=/usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin +vm=1 +vmtype=kvm +container=0 +systemd=1 +plugin_enabled_phase1[]=pam|1.0.5| +authentication_two_factor_enabled=0 +authentication_two_factor_required=0 +minimum_password_length=8 +password_strength_tested=1 +min_password_class=0 +password_max_digital_credit=1 +password_max_l_credit=1 +password_max_other_credit=1 +password_max_u_credit=1 +max_password_retry=3 +plugin_enabled_phase1[]=systemd|1.0.4| +systemctl_exit_code=0 +systemd_version=229 +systemd_builtin_components=+PAM,+AUDIT,+SELINUX,+IMA,+APPARMOR,+SMACK,+SYSVINIT,+UTMP,+LIBCRYPTSETUP,+GCRYPT,+GNUTLS,+ACL,+XZ,-LZ4,+SECCOMP,+BLKID,+ELFUTILS,+KMOD,-IDN +systemd_unit_file[]=proc-sys-fs-binfmt_misc.automount|static| +systemd_unit_file[]=dev-hugepages.mount|static| +systemd_unit_file[]=dev-mqueue.mount|static| +systemd_unit_file[]=proc-sys-fs-binfmt_misc.mount|static| +systemd_unit_file[]=sys-fs-fuse-connections.mount|static| +systemd_unit_file[]=sys-kernel-config.mount|static| +systemd_unit_file[]=sys-kernel-debug.mount|static| +systemd_unit_file[]=acpid.path|enabled| +systemd_unit_file[]=systemd-ask-password-console.path|static| +systemd_unit_file[]=systemd-ask-password-plymouth.path|static| +systemd_unit_file[]=systemd-ask-password-wall.path|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.path|static| +systemd_unit_file[]=acpid.service|disabled| +systemd_unit_file[]=apt-daily-upgrade.service|static| +systemd_unit_file[]=apt-daily.service|static| +systemd_unit_file[]=autovt@.service|enabled| +systemd_unit_file[]=bootlogd.service|masked| +systemd_unit_file[]=bootlogs.service|masked| +systemd_unit_file[]=bootmisc.service|masked| +systemd_unit_file[]=checkfs.service|masked| +systemd_unit_file[]=checkroot-bootclean.service|masked| +systemd_unit_file[]=checkroot.service|masked| +systemd_unit_file[]=cloud-config.service|enabled| +systemd_unit_file[]=cloud-final.service|enabled| +systemd_unit_file[]=cloud-init-local.service|enabled| +systemd_unit_file[]=cloud-init.service|enabled| +systemd_unit_file[]=console-getty.service|disabled| +systemd_unit_file[]=console-setup.service|static| +systemd_unit_file[]=console-shell.service|disabled| +systemd_unit_file[]=container-getty@.service|static| +systemd_unit_file[]=cron.service|enabled| +systemd_unit_file[]=cryptdisks-early.service|masked| +systemd_unit_file[]=cryptdisks.service|masked| +systemd_unit_file[]=dbus-org.freedesktop.hostname1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.locale1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.login1.service|static| +systemd_unit_file[]=dbus-org.freedesktop.network1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.resolve1.service|disabled| +systemd_unit_file[]=dbus-org.freedesktop.timedate1.service|static| +systemd_unit_file[]=dbus.service|static| +systemd_unit_file[]=debug-shell.service|disabled| +systemd_unit_file[]=dm-event.service|disabled| +systemd_unit_file[]=emergency.service|static| +systemd_unit_file[]=fail2ban.service|enabled| +systemd_unit_file[]=fuse.service|masked| +systemd_unit_file[]=getty-static.service|static| +systemd_unit_file[]=getty@.service|enabled| +systemd_unit_file[]=halt.service|masked| +systemd_unit_file[]=hc-net-ifup@.service|static| +systemd_unit_file[]=hc-net-scan.service|enabled| +systemd_unit_file[]=hostname.service|masked| +systemd_unit_file[]=hwclock.service|masked| +systemd_unit_file[]=ifup@.service|static| +systemd_unit_file[]=initrd-cleanup.service|static| +systemd_unit_file[]=initrd-parse-etc.service|static| +systemd_unit_file[]=initrd-switch-root.service|static| +systemd_unit_file[]=initrd-udevadm-cleanup-db.service|static| +systemd_unit_file[]=keyboard-setup.service|disabled| +systemd_unit_file[]=killprocs.service|masked| +systemd_unit_file[]=kmod-static-nodes.service|static| +systemd_unit_file[]=kmod.service|static| +systemd_unit_file[]=lvm2-lvmetad.service|disabled| +systemd_unit_file[]=lvm2-lvmpolld.service|disabled| +systemd_unit_file[]=lvm2-monitor.service|enabled| +systemd_unit_file[]=lvm2-pvscan@.service|static| +systemd_unit_file[]=lvm2.service|masked| +systemd_unit_file[]=mdadm-shutdown.service|disabled| +systemd_unit_file[]=module-init-tools.service|static| +systemd_unit_file[]=motd-news.service|static| +systemd_unit_file[]=motd.service|masked| +systemd_unit_file[]=mountall-bootclean.service|masked| +systemd_unit_file[]=mountall.service|masked| +systemd_unit_file[]=mountdevsubfs.service|masked| +systemd_unit_file[]=mountkernfs.service|masked| +systemd_unit_file[]=mountnfs-bootclean.service|masked| +systemd_unit_file[]=mountnfs.service|masked| +systemd_unit_file[]=networking.service|enabled| +systemd_unit_file[]=plymouth-halt.service|static| +systemd_unit_file[]=plymouth-kexec.service|static| +systemd_unit_file[]=plymouth-log.service|static| +systemd_unit_file[]=plymouth-poweroff.service|static| +systemd_unit_file[]=plymouth-quit-wait.service|static| +systemd_unit_file[]=plymouth-quit.service|static| +systemd_unit_file[]=plymouth-read-write.service|static| +systemd_unit_file[]=plymouth-reboot.service|static| +systemd_unit_file[]=plymouth-start.service|static| +systemd_unit_file[]=plymouth-switch-root.service|static| +systemd_unit_file[]=plymouth.service|static| +systemd_unit_file[]=pollinate.service|enabled| +systemd_unit_file[]=procps.service|static| +systemd_unit_file[]=quotaon.service|static| +systemd_unit_file[]=rc-local.service|static| +systemd_unit_file[]=rc.local.service|static| +systemd_unit_file[]=rc.service|masked| +systemd_unit_file[]=rcS.service|masked| +systemd_unit_file[]=reboot.service|masked| +systemd_unit_file[]=rescue.service|static| +systemd_unit_file[]=resolvconf.service|enabled| +systemd_unit_file[]=rmnologin.service|masked| +systemd_unit_file[]=rsync.service|disabled| +systemd_unit_file[]=rsyslog.service|enabled| +systemd_unit_file[]=sendsigs.service|masked| +systemd_unit_file[]=serial-getty@.service|disabled| +systemd_unit_file[]=setvtrgb.service|static| +systemd_unit_file[]=sigpwr-container-shutdown.service|static| +systemd_unit_file[]=single.service|masked| +systemd_unit_file[]=ssh.service|enabled| +systemd_unit_file[]=ssh@.service|static| +systemd_unit_file[]=sshd.service|enabled| +systemd_unit_file[]=stop-bootlogd-single.service|masked| +systemd_unit_file[]=stop-bootlogd.service|masked| +systemd_unit_file[]=syslog.service|enabled| +systemd_unit_file[]=systemd-ask-password-console.service|static| +systemd_unit_file[]=systemd-ask-password-plymouth.service|static| +systemd_unit_file[]=systemd-ask-password-wall.service|static| +systemd_unit_file[]=systemd-backlight@.service|static| +systemd_unit_file[]=systemd-binfmt.service|static| +systemd_unit_file[]=systemd-bootchart.service|disabled| +systemd_unit_file[]=systemd-bus-proxyd.service|static| +systemd_unit_file[]=systemd-exit.service|static| +systemd_unit_file[]=systemd-fsck-root.service|static| +systemd_unit_file[]=systemd-fsck@.service|static| +systemd_unit_file[]=systemd-fsckd.service|static| +systemd_unit_file[]=systemd-halt.service|static| +systemd_unit_file[]=systemd-hibernate-resume@.service|static| +systemd_unit_file[]=systemd-hibernate.service|static| +systemd_unit_file[]=systemd-hostnamed.service|static| +systemd_unit_file[]=systemd-hwdb-update.service|static| +systemd_unit_file[]=systemd-hybrid-sleep.service|static| +systemd_unit_file[]=systemd-initctl.service|static| +systemd_unit_file[]=systemd-journal-flush.service|static| +systemd_unit_file[]=systemd-journald.service|static| +systemd_unit_file[]=systemd-kexec.service|static| +systemd_unit_file[]=systemd-localed.service|static| +systemd_unit_file[]=systemd-logind.service|static| +systemd_unit_file[]=systemd-machine-id-commit.service|static| +systemd_unit_file[]=systemd-modules-load.service|static| +systemd_unit_file[]=systemd-networkd-resolvconf-update.service|static| +systemd_unit_file[]=systemd-networkd-wait-online.service|disabled| +systemd_unit_file[]=systemd-networkd.service|disabled| +systemd_unit_file[]=systemd-poweroff.service|static| +systemd_unit_file[]=systemd-quotacheck.service|static| +systemd_unit_file[]=systemd-random-seed.service|static| +systemd_unit_file[]=systemd-reboot.service|static| +systemd_unit_file[]=systemd-remount-fs.service|static| +systemd_unit_file[]=systemd-resolved.service|disabled| +systemd_unit_file[]=systemd-rfkill.service|static| +systemd_unit_file[]=systemd-suspend.service|static| +systemd_unit_file[]=systemd-sysctl.service|static| +systemd_unit_file[]=systemd-timedated.service|static| +systemd_unit_file[]=systemd-timesyncd.service|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup-dev.service|static| +systemd_unit_file[]=systemd-tmpfiles-setup.service|static| +systemd_unit_file[]=systemd-udev-settle.service|static| +systemd_unit_file[]=systemd-udev-trigger.service|static| +systemd_unit_file[]=systemd-udevd.service|static| +systemd_unit_file[]=systemd-update-utmp-runlevel.service|static| +systemd_unit_file[]=systemd-update-utmp.service|static| +systemd_unit_file[]=systemd-user-sessions.service|static| +systemd_unit_file[]=udev.service|static| +systemd_unit_file[]=umountfs.service|masked| +systemd_unit_file[]=umountnfs.service|masked| +systemd_unit_file[]=umountroot.service|masked| +systemd_unit_file[]=unattended-upgrades.service|enabled| +systemd_unit_file[]=urandom.service|static| +systemd_unit_file[]=ureadahead-stop.service|static| +systemd_unit_file[]=ureadahead.service|enabled| +systemd_unit_file[]=user@.service|static| +systemd_unit_file[]=x11-common.service|masked| +systemd_unit_file[]=-.slice|static| +systemd_unit_file[]=machine.slice|static| +systemd_unit_file[]=system.slice|static| +systemd_unit_file[]=user.slice|static| +systemd_unit_file[]=acpid.socket|enabled| +systemd_unit_file[]=dbus.socket|static| +systemd_unit_file[]=dm-event.socket|enabled| +systemd_unit_file[]=lvm2-lvmetad.socket|enabled| +systemd_unit_file[]=lvm2-lvmpolld.socket|enabled| +systemd_unit_file[]=ssh.socket|disabled| +systemd_unit_file[]=syslog.socket|static| +systemd_unit_file[]=systemd-bus-proxyd.socket|static| +systemd_unit_file[]=systemd-fsckd.socket|static| +systemd_unit_file[]=systemd-initctl.socket|static| +systemd_unit_file[]=systemd-journald-audit.socket|static| +systemd_unit_file[]=systemd-journald-dev-log.socket|static| +systemd_unit_file[]=systemd-journald.socket|static| +systemd_unit_file[]=systemd-networkd.socket|disabled| +systemd_unit_file[]=systemd-rfkill.socket|static| +systemd_unit_file[]=systemd-udevd-control.socket|static| +systemd_unit_file[]=systemd-udevd-kernel.socket|static| +systemd_unit_file[]=basic.target|static| +systemd_unit_file[]=bluetooth.target|static| +systemd_unit_file[]=busnames.target|static| +systemd_unit_file[]=cloud-config.target|static| +systemd_unit_file[]=cloud-init.target|static| +systemd_unit_file[]=cryptsetup-pre.target|static| +systemd_unit_file[]=cryptsetup.target|static| +systemd_unit_file[]=ctrl-alt-del.target|disabled| +systemd_unit_file[]=default.target|static| +systemd_unit_file[]=emergency.target|static| +systemd_unit_file[]=exit.target|disabled| +systemd_unit_file[]=final.target|static| +systemd_unit_file[]=getty.target|static| +systemd_unit_file[]=graphical.target|static| +systemd_unit_file[]=halt.target|disabled| +systemd_unit_file[]=hibernate.target|static| +systemd_unit_file[]=hybrid-sleep.target|static| +systemd_unit_file[]=initrd-fs.target|static| +systemd_unit_file[]=initrd-root-fs.target|static| +systemd_unit_file[]=initrd-switch-root.target|static| +systemd_unit_file[]=initrd.target|static| +systemd_unit_file[]=kexec.target|disabled| +systemd_unit_file[]=local-fs-pre.target|static| +systemd_unit_file[]=local-fs.target|static| +systemd_unit_file[]=mail-transport-agent.target|static| +systemd_unit_file[]=multi-user.target|static| +systemd_unit_file[]=network-online.target|static| +systemd_unit_file[]=network-pre.target|static| +systemd_unit_file[]=network.target|static| +systemd_unit_file[]=nss-lookup.target|static| +systemd_unit_file[]=nss-user-lookup.target|static| +systemd_unit_file[]=paths.target|static| +systemd_unit_file[]=poweroff.target|disabled| +systemd_unit_file[]=printer.target|static| +systemd_unit_file[]=reboot.target|disabled| +systemd_unit_file[]=remote-fs-pre.target|static| +systemd_unit_file[]=remote-fs.target|enabled| +systemd_unit_file[]=rescue.target|disabled| +systemd_unit_file[]=rpcbind.target|static| +systemd_unit_file[]=runlevel0.target|disabled| +systemd_unit_file[]=runlevel1.target|disabled| +systemd_unit_file[]=runlevel2.target|static| +systemd_unit_file[]=runlevel3.target|static| +systemd_unit_file[]=runlevel4.target|static| +systemd_unit_file[]=runlevel5.target|static| +systemd_unit_file[]=runlevel6.target|disabled| +systemd_unit_file[]=shutdown.target|static| +systemd_unit_file[]=sigpwr.target|static| +systemd_unit_file[]=sleep.target|static| +systemd_unit_file[]=slices.target|static| +systemd_unit_file[]=smartcard.target|static| +systemd_unit_file[]=sockets.target|static| +systemd_unit_file[]=sound.target|static| +systemd_unit_file[]=suspend.target|static| +systemd_unit_file[]=swap.target|static| +systemd_unit_file[]=sysinit.target|static| +systemd_unit_file[]=system-update.target|static| +systemd_unit_file[]=time-sync.target|static| +systemd_unit_file[]=timers.target|static| +systemd_unit_file[]=umount.target|static| +systemd_unit_file[]=apt-daily-upgrade.timer|enabled| +systemd_unit_file[]=apt-daily.timer|enabled| +systemd_unit_file[]=motd-news.timer|enabled| +systemd_unit_file[]=systemd-tmpfiles-clean.timer|static| +systemd_unit_file[]=ureadahead-stop.timer|static| +journal_bootlogs=1 +journal_oldest_bootdate=2021-01-07 +journal_contains_errors=0 +journal_disk_size=4.8M +journal_meta_data=FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system.journal,FileID:3d91fd1665b343a3a14e088eb44bb6c7,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ONLINE,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:no,HeadSequentialNumber:1509,TailSequentialNumber:1664,HeadRealtimeTimestamp:Thu2021-01-0717:56:39CET,TailRealtimeTimestamp:Thu2021-01-0717:58:09CET,TailMonotonicTimestamp:16min32.192s,Objects:871,EntryObjects:156,DataObjects:394,DataHashTableFill:8.9%,FieldObjects:33,FieldHashTableFill:9.9%,TagObjects:0,EntryArrayObjects:286,Diskusage:2.4M,|,FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system@38dc3cd3d69f481fb5f769834a761273-0000000000000001-0005b8521d57f454.journal,FileID:38dc3cd3d69f481fb5f769834a761273,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ARCHIVED,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:yes,HeadSequentialNumber:1,TailSequentialNumber:1508,HeadRealtimeTimestamp:Thu2021-01-0717:41:42CET,TailRealtimeTimestamp:Thu2021-01-0717:56:39CET,TailMonotonicTimestamp:15min1.902s,Objects:5937,EntryObjects:1508,DataObjects:3335,DataHashTableFill:75.0%,FieldObjects:59,FieldHashTableFill:17.7%,TagObjects:0,EntryArrayObjects:1033,Diskusage:2.4M, +systemd_status=running +systemd_unit_not_found[]=org.freedesktop.network1.busname +systemd_unit_not_found[]=org.freedesktop.resolve1.busname +systemd_unit_not_found[]=apparmor.service +systemd_unit_not_found[]=auditd.service +systemd_unit_not_found[]=console-screen.service +systemd_unit_not_found[]=display-manager.service +systemd_unit_not_found[]=firewalld.service +systemd_unit_not_found[]=hv_kvp_daemon.service +systemd_unit_not_found[]=iptables.service +systemd_unit_not_found[]=kbd.service +systemd_unit_not_found[]=lvm2-activation.service +systemd_unit_not_found[]=NetworkManager.service +systemd_unit_not_found[]=snapd.seeded.service +systemd_unit_not_found[]=sshd-keygen.service +systemd_unit_not_found[]=systemd-sysusers.service +systemd_unit_not_found[]=systemd-update-done.service +systemd_unit_not_found[]=systemd-vconsole-setup.service +systemd_service_not_found[]=apparmor.service +systemd_service_not_found[]=auditd.service +systemd_service_not_found[]=console-screen.service +systemd_service_not_found[]=display-manager.service +systemd_service_not_found[]=firewalld.service +systemd_service_not_found[]=hv_kvp_daemon.service +systemd_service_not_found[]=iptables.service +systemd_service_not_found[]=kbd.service +systemd_service_not_found[]=lvm2-activation.service +systemd_service_not_found[]=NetworkManager.service +systemd_service_not_found[]=snapd.seeded.service +systemd_service_not_found[]=sshd-keygen.service +systemd_service_not_found[]=systemd-sysusers.service +systemd_service_not_found[]=systemd-update-done.service +systemd_service_not_found[]=systemd-vconsole-setup.service +journal_coredumps_lastday=0 +plugins_enabled=1 +hostid=8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 +hostid2=7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 +suggestion[]=BOOT-5122|Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-| +running_service_tool=systemctl +running_service[]=acpid +running_service[]=cron +running_service[]=dbus +running_service[]=fail2ban +running_service[]=getty@tty1 +running_service[]=lvm2-lvmetad +running_service[]=mdadm +running_service[]=portsentry +running_service[]=qemu-guest-agent +running_service[]=rsyslog +running_service[]=sendmail +running_service[]=serial-getty@ttyS0 +running_service[]=ssh +running_service[]=systemd-journald +running_service[]=systemd-logind +running_service[]=systemd-resolved +running_service[]=systemd-timesyncd +running_service[]=systemd-udevd +running_service[]=unattended-upgrades +running_service[]=user@0 +boot_service_tool=systemctl +boot_service[]=autovt@ +boot_service[]=cloud-config +boot_service[]=cloud-final +boot_service[]=cloud-init-local +boot_service[]=cloud-init +boot_service[]=cron +boot_service[]=fail2ban +boot_service[]=getty@ +boot_service[]=hc-net-scan +boot_service[]=lvm2-monitor +boot_service[]=networking +boot_service[]=pollinate +boot_service[]=resolvconf +boot_service[]=rsyslog +boot_service[]=ssh +boot_service[]=sshd +boot_service[]=syslog +boot_service[]=systemd-timesyncd +boot_service[]=unattended-upgrades +boot_service[]=ureadahead +uptime_in_seconds=995 +uptime_in_days=0 +boot_loader=GRUB2 +boot_uefi_booted=0 +boot_uefi_booted_secure=0 +service_manager=systemd +linux_default_runlevel=5 +cpu_pae=1 +cpu_nx=1 +linux_kernel_release=4.4.0-197-generic +linux_kernel_version=#229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 +linux_kernel_type=modular +loaded_kernel_module[]=ablk_helper +loaded_kernel_module[]=aes_x86_64 +loaded_kernel_module[]=aesni_intel +loaded_kernel_module[]=ahci +loaded_kernel_module[]=async_memcpy +loaded_kernel_module[]=async_pq +loaded_kernel_module[]=async_raid6_recov +loaded_kernel_module[]=async_tx +loaded_kernel_module[]=async_xor +loaded_kernel_module[]=autofs4 +loaded_kernel_module[]=binfmt_misc +loaded_kernel_module[]=btrfs +loaded_kernel_module[]=crc32_pclmul +loaded_kernel_module[]=crct10dif_pclmul +loaded_kernel_module[]=cryptd +loaded_kernel_module[]=gf128mul +loaded_kernel_module[]=ghash_clmulni_intel +loaded_kernel_module[]=glue_helper +loaded_kernel_module[]=hid +loaded_kernel_module[]=hid_generic +loaded_kernel_module[]=inet_diag +loaded_kernel_module[]=input_leds +loaded_kernel_module[]=ip_tables +loaded_kernel_module[]=ipt_REJECT +loaded_kernel_module[]=iptable_filter +loaded_kernel_module[]=iptable_nat +loaded_kernel_module[]=joydev +loaded_kernel_module[]=libahci +loaded_kernel_module[]=libcrc32c +loaded_kernel_module[]=linear +loaded_kernel_module[]=lrw +loaded_kernel_module[]=multipath +loaded_kernel_module[]=nf_conntrack +loaded_kernel_module[]=nf_conntrack_ipv4 +loaded_kernel_module[]=nf_defrag_ipv4 +loaded_kernel_module[]=nf_nat +loaded_kernel_module[]=nf_nat_ipv4 +loaded_kernel_module[]=nf_reject_ipv4 +loaded_kernel_module[]=psmouse +loaded_kernel_module[]=raid0 +loaded_kernel_module[]=raid1 +loaded_kernel_module[]=raid10 +loaded_kernel_module[]=raid456 +loaded_kernel_module[]=raid6_pq +loaded_kernel_module[]=serio_raw +loaded_kernel_module[]=tcp_diag +loaded_kernel_module[]=udp_diag +loaded_kernel_module[]=usbhid +loaded_kernel_module[]=virtio_rng +loaded_kernel_module[]=virtio_scsi +loaded_kernel_module[]=x_tables +loaded_kernel_module[]=xor +loaded_kernel_module[]=xt_multiport +linux_config_file=/boot/config-4.4.0-197-generic +linux_kernel_io_scheduler[]=deadline +warning[]=KRNL-5830|Reboot of system is most likely needed||text:reboot| +memory_size=1998680 +memory_units=kB +auth_group_ids_unique=1 +auth_group_names_unique=1 +suggestion[]=AUTH-9230|Configure password hashing rounds in /etc/login.defs|-|-| +real_user[]=root,0 +pam_cracklib=1 +pam_module[]=/lib/x86_64-linux-gnu/security/pam_access.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_cracklib.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_debug.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_deny.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_echo.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_env.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_exec.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_extrausers.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_faildelay.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_filter.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_ftp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_group.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_issue.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_keyinit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_lastlog.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_limits.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_listfile.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_localuser.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_loginuid.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mail.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_mkhomedir.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_motd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_namespace.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_nologin.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_permit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_pwhistory.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rhosts.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_rootok.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_securetty.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_selinux.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_sepermit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_shells.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_stress.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_succeed_if.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_systemd.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally2.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_time.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_timestamp.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_tty_audit.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_umask.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_unix.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_userdb.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_warn.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_wheel.so +pam_module[]=/lib/x86_64-linux-gnu/security/pam_xauth.so +manual_event[]=AUTH-9328:03 +auth_failed_logins_tooling[]=/etc/login.defs +auth_failed_logins_logged=1 +ldap_auth_enabled=0 +ldap_pam_enabled=0 +password_min_days=7 +password_max_days=90 +available_shell[]=/bin/sh +available_shell[]=/bin/dash +available_shell[]=/bin/bash +available_shell[]=/bin/rbash +session_timeout_enabled=0 +suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-| +suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-| +file_systems_ext[]=/|ext4| +suggestion[]=FILE-6430|Consider disabling unused kernel modules|/etc/modprobe.d/blacklist.conf|Add 'install MODULENAME /bin/true' (without quotes)| +usb_authorized_default_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_device[]=/sys/bus/usb/devices/usb1 +usb_authorized_default_device[]=/sys/bus/usb/devices/usb2 +usb_authorized_device[]=/sys/bus/usb/devices/usb2 +suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-| +localhost-mapped-to=::1 +name_cache_used=0 +package_manager[]=dpkg +installed_packages=377 +suggestion[]=PKGS-7370|Install debsums utility for the verification of packages with known good database.|-|-| +suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-| +installed_kernel_packages=2 +unattended_upgrade_tool[]=unattended-upgrade +unattended_upgrade_option_available=1 +ipv6_mode=auto +ipv6_only=0 +nameserver[]=213.133.99.99 +nameserver[]=213.133.98.98 +nameserver[]=213.133.100.100 +default_gateway[]=172.31.1.1 +network_interface[]=lo +network_interface[]=eth0 +network_mac_address[]=96:00:00:8b:fc:bd +network_ipv4_address[]=116.203.241.83 +network_ipv4_address[]=127.0.0.1 +network_listen[]=raw,ss,v1|udp|*:513|portsentry| +network_listen[]=raw,ss,v1|udp|*:37444|portsentry| +network_listen[]=raw,ss,v1|udp|*:31335|portsentry| +network_listen[]=raw,ss,v1|udp|*:31337|portsentry| +network_listen[]=raw,ss,v1|udp|*:635|portsentry| +network_listen[]=raw,ss,v1|udp|*:640|portsentry| +network_listen[]=raw,ss,v1|udp|*:641|portsentry| +network_listen[]=raw,ss,v1|udp|*:700|portsentry| +network_listen[]=raw,ss,v1|udp|*:34555|portsentry| +network_listen[]=raw,ss,v1|udp|*:1|portsentry| +network_listen[]=raw,ss,v1|udp|*:32770|portsentry| +network_listen[]=raw,ss,v1|udp|*:32771|portsentry| +network_listen[]=raw,ss,v1|udp|*:32772|portsentry| +network_listen[]=raw,ss,v1|udp|*:32773|portsentry| +network_listen[]=raw,ss,v1|udp|*:32774|portsentry| +network_listen[]=raw,ss,v1|udp|*:7|portsentry| +network_listen[]=raw,ss,v1|udp|*:9|portsentry| +network_listen[]=raw,ss,v1|udp|*:54321|portsentry| +network_listen[]=raw,ss,v1|udp|*:68|dhclient| +network_listen[]=raw,ss,v1|udp|*:69|portsentry| +network_listen[]=raw,ss,v1|udp|*:161|portsentry| +network_listen[]=raw,ss,v1|udp|*:162|portsentry| +network_listen[]=raw,ss,v1|udp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|udp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|127.0.0.1:587|sendmail-mta| +network_listen[]=raw,ss,v1|tcp|*:5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|*:22|sshd| +network_listen[]=raw,ss,v1|tcp|127.0.0.1:25|sendmail-mta| +network_listen[]=raw,ss,v1|tcp|:::5355|systemd-resolve| +network_listen[]=raw,ss,v1|tcp|:::22|sshd| +suggestion[]=NETW-3200|Determine if protocol 'dccp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=dccp +suggestion[]=NETW-3200|Determine if protocol 'sctp' is really needed on this system|-|-| +uncommon_network_protocol_enabled=sctp +suggestion[]=NETW-3200|Determine if protocol 'rds' is really needed on this system|-|-| +uncommon_network_protocol_enabled=rds +suggestion[]=NETW-3200|Determine if protocol 'tipc' is really needed on this system|-|-| +uncommon_network_protocol_enabled=tipc +smtp_daemon[]=sendmail +imap_daemon= +pop3_daemon= +smtp_daemon=sendmail +firewall_software[]=iptables +warning[]=FIRE-4512|iptables module(s) loaded, but no rules active|-|-| +suggestion[]=FIRE-4513|Check iptables rules to see which rules are currently not used|-|-| +firewall_no_logging[]=iptables +manual[]=Verify if there is a formal process for testing and applying firewall rules +manual[]=Verify all traffic is filtered the right way between the different security zones +manual[]=Verify if a list is available with all required services +manual[]=Make sure an explicit deny all is the default policy for all unmatched traffic +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowTcpForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowTcpForwarding;field:AllowTcpForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|ClientAliveCountMax (set 3 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option ClientAliveCountMax;field:ClientAliveCountMax;prefval:2;value:3;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Compression (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option Compression;field:Compression;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|LogLevel (set INFO to VERBOSE)|-| +details[]=SSH-7408|sshd|desc:sshd option LogLevel;field:LogLevel;prefval:VERBOSE;value:INFO;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxAuthTries (set 6 to 3)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxAuthTries;field:MaxAuthTries;prefval:3;value:6;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxSessions (set 10 to 2)|-| +details[]=SSH-7408|sshd|desc:sshd option MaxSessions;field:MaxSessions;prefval:2;value:10;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))|-| +details[]=SSH-7408|sshd|desc:sshd option PermitRootLogin;field:PermitRootLogin;prefval:(FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD);value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|Port (set 22 to )|-| +details[]=SSH-7408|sshd|desc:sshd option Port;field:Port;prefval:;value:22;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|TCPKeepAlive (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option TCPKeepAlive;field:TCPKeepAlive;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|X11Forwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option X11Forwarding;field:X11Forwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowAgentForwarding (set YES to NO)|-| +details[]=SSH-7408|sshd|desc:sshd option AllowAgentForwarding;field:AllowAgentForwarding;prefval:NO;value:YES;| +suggestion[]=SSH-7408|Consider hardening SSH configuration|UsePrivilegeSeparation (set YES to SANDBOX)|-| +details[]=SSH-7408|sshd|desc:sshd option UsePrivilegeSeparation;field:UsePrivilegeSeparation;prefval:SANDBOX;value:YES;| +ssh_daemon_running=1 +openssh_daemon_running=1 +syslog_daemon_present=1 +syslog_daemon[]=systemd-journal +syslog_daemon_present=1 +syslog_daemon[]=rsyslog +log_directory[]=/var/log +log_directory[]=/var/log/apt +log_directory[]=/var/log/unattended-upgrades +remote_syslog_configured=0 +suggestion[]=LOGG-2154|Enable logging to an external logging host for archiving purposes and additional protection|-|-| +log_directory[]=/var/log +log_rotation_config_found=1 +log_rotation_tool=logrotate +suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-| +weak_banner_file[]=/etc/issue +suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-| +crond_running=1 +scheduler[]=crond +cronjob[]=17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly +cronjob[]=25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) +cronjob[]=47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) +cronjob[]=52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) +cronjob[]=/etc/cron.d/tiger +cronjob[]=/etc/cron.d/sendmail +cronjob[]=/etc/cron.d/mdadm +cronjob[]=/etc/cron.daily/bsdmainutils +cronjob[]=/etc/cron.daily/apt-compat +cronjob[]=/etc/cron.daily/sendmail +cronjob[]=/etc/cron.daily/passwd +cronjob[]=/etc/cron.daily/acct +cronjob[]=/etc/cron.daily/man-db +cronjob[]=/etc/cron.daily/aptitude +cronjob[]=/etc/cron.daily/dpkg +cronjob[]=/etc/cron.daily/mdadm +cronjob[]=/etc/cron.daily/cracklib-runtime +cronjob[]=/etc/cron.daily/logrotate +cronjob[]=/etc/cron.weekly/man-db +cronjob[]=/etc/cron.weekly/fstrim +cronjob[]=/etc/cron.monthly/acct +suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-| +suggestion[]=ACCT-9628|Enable auditd to collect audit information|-|-| +linux_auditd_running=0 +audit_daemon_running=0 +tz_variable_empty=1 +warning[]=TIME-3185|systemd-timesyncd never successfully synchronized time|-|-| +ntp_config_found=0 +ntp_config_type_daemon=1 +ntp_config_type_eventbased=0 +ntp_config_type_scheduled=0 +ntp_config_type_startup=0 +ntp_daemon=systemd-timesyncd +ntp_daemon_running=1 +certificate[]=/etc/ssl/certs/ca-certificates.crt|0|cn:ACCVRAIZ1;notafter:Dec 31 09:37:37 2030 GMT;| +certificates=139 +kernel_entropy=994 +rng_found=0 +framework_grsecurity=0 +framework_selinux=0 +suggestion[]=FINT-4350|Install a file integrity tool to monitor changes to critical and sensitive files|-|-| +suggestion[]=TOOL-5002|Determine if automation tools are present for system management|-|-| +ids_ips_tooling[]=fail2ban +fail2ban_config=/etc/fail2ban/jail.local +fail2ban_enabled_service[]=sshd +automation_tool_present=0 +malware_scanner[]=rkhunter +malware_scanner_installed=1 +suggestion[]=FILE-7524|Consider restricting file permissions|See screen output or log file|text:Use chmod to change file permissions| +home_directory[]=/bin +home_directory[]=/dev +home_directory[]=/root +home_directory[]=/run/systemd +home_directory[]=/run/systemd/netif +home_directory[]=/run/systemd/resolve +home_directory[]=/usr/games +home_directory[]=/usr/sbin +home_directory[]=/var/backups +home_directory[]=/var/cache/man +home_directory[]=/var/cache/pollinate +home_directory[]=/var/lib/sendmail +home_directory[]=/var/mail +home_directory[]=/var/run/dbus +home_directory[]=/var/run/sshd +details[]=KRNL-6000|sysctl|desc:Disable loading of TTY line disciplines;field:dev.tty.ldisc_autoload;prefval:0;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict FIFO special device creation behavior;field:fs.protected_fifos;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict regular files creation behavior;field:fs.protected_regular;prefval:2;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict module loading once this sysctl value is loaded;field:kernel.modules_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Restrict unprivileged access to the perf_event_open() system call.;field:kernel.perf_event_paranoid;prefval:3;value:1;| +details[]=KRNL-6000|sysctl|desc:Restrict BPF for unprivileged users;field:kernel.unprivileged_bpf_disabled;prefval:1;value:0;| +details[]=KRNL-6000|sysctl|desc:Hardened BPF JIT compilation;field:net.core.bpf_jit_harden;prefval:2;value:0;| +suggestion[]=KRNL-6000|One or more sysctl values differ from the scan profile and could be tweaked||Change sysctl value or disable test (skip-test=KRNL-6000:)| +compiler_installed=1 +lynis_tests_done=257 +report_datetime_end=2021-01-07 17:58:36 +dhcp_client_running=1 +arpwatch_running=0 +firewall_active=1 +firewall_empty_ruleset=1 +firewall_installed=1 +installed_packages_array=|acct,6.5.5-2.1ubuntu1|acl,2.2.52-3|acpid,1:2.0.26-1ubuntu2|adduser,3.113+nmu3ubuntu4|apt,1.2.32ubuntu0.2|apt-transport-https,1.2.32ubuntu0.2|apt-utils,1.2.32ubuntu0.2|aptitude,0.7.4-2ubuntu2|aptitude-common,0.7.4-2ubuntu2|base-files,9.4ubuntu4.13|base-passwd,3.5.39|bash,4.3-14ubuntu1.4|bind9-host,1:9.10.3.dfsg.P4-8ubuntu1.17|binutils,2.26.1-1ubuntu1~16.04.8|bsdmainutils,9.0.6ubuntu3|bsdutils,1:2.27.1-6ubuntu3.10|btrfs-tools,4.4-1ubuntu1.1|busybox-initramfs,1:1.22.0-15ubuntu1.4|bzip2,1.0.6-8ubuntu0.2|ca-certificates,20201027ubuntu0.16.04.1|cloud-guest-utils,0.27-0ubuntu25.2|cloud-init,20.4-0ubuntu1~16.04.1|console-setup,1.108ubuntu15.5|console-setup-linux,1.108ubuntu15.5|coreutils,8.25-2ubuntu3~16.04|cpio,2.11+dfsg-5ubuntu1.1|cracklib-runtime,2.9.2-1ubuntu1|cron,3.0pl1-128ubuntu2|cryptsetup,2:1.6.6-5ubuntu2.1|cryptsetup-bin,2:1.6.6-5ubuntu2.1|curl,7.47.0-1ubuntu2.18|dash,0.5.8-2.1ubuntu2|dbus,1.10.6-1ubuntu3.6|debconf,1.5.58ubuntu2|debconf-i18n,1.5.58ubuntu2|debianutils,4.7|dh-python,2.20151103ubuntu1.2|diffutils,1:3.3-3|dirmngr,2.1.11-6ubuntu2.1|distro-info-data,0.28ubuntu0.16|dmeventd,2:1.02.110-1ubuntu10|dmsetup,2:1.02.110-1ubuntu10|dpkg,1.18.4ubuntu1.6|e2fslibs:amd64,1.42.13-1ubuntu1.2|e2fsprogs,1.42.13-1ubuntu1.2|eatmydata,105-3|efibootmgr,0.12-4|ethtool,1:4.5-1|fail2ban,0.9.3-1|file,1:5.25-2ubuntu1.4|findutils,4.6.0+git+20160126-2|gcc-5-base:amd64,5.4.0-6ubuntu1~16.04.12|gcc-6-base:amd64,6.0.1-0ubuntu1|gdisk,1.0.1-1build1|gettext-base,0.19.7-2ubuntu3.1|gir1.2-glib-2.0:amd64,1.46.0-3ubuntu1|git,1:2.7.4-0ubuntu1.9|git-man,1:2.7.4-0ubuntu1.9|gnupg,1.4.20-1ubuntu3.3|gnupg-agent,2.1.11-6ubuntu2.1|gnupg2,2.1.11-6ubuntu2.1|gpgv,1.4.20-1ubuntu3.3|grep,2.25-1~16.04.1|groff-base,1.22.3-7|grub-common,2.02~beta2-36ubuntu3.29|grub-efi-amd64,2.02~beta2-36ubuntu3.29|grub-efi-amd64-bin,2.02~beta2-36ubuntu3.29|grub-pc-bin,2.02~beta2-36ubuntu3.29|grub2-common,2.02~beta2-36ubuntu3.29|gzip,1.6-4ubuntu1|hc-utils,0.0.3-1|host,1:9.10.3.dfsg.P4-8ubuntu1.17|hostname,3.16ubuntu2|htop,2.0.1-1ubuntu1|ifupdown,0.8.10ubuntu1.4|init,1.29ubuntu4|init-system-helpers,1.29ubuntu4|initramfs-tools,0.122ubuntu8.17|initramfs-tools-bin,0.122ubuntu8.17|initramfs-tools-core,0.122ubuntu8.17|initscripts,2.88dsf-59.3ubuntu2|insserv,1.14.0-5ubuntu3|iproute2,4.3.0-1ubuntu3.16.04.5|iptables,1.6.0-2ubuntu3|iputils-ping,3:20121221-5ubuntu2|isc-dhcp-client,4.3.3-5ubuntu12.10|isc-dhcp-common,4.3.3-5ubuntu12.10|iso-codes,3.65-1|kbd,1.15.5-1ubuntu5|keyboard-configuration,1.108ubuntu15.5|klibc-utils,2.0.4-8ubuntu1.16.04.4|kmod,22-1ubuntu5.2|less,481-2.1ubuntu0.2|libacl1:amd64,2.2.52-3|libapparmor1:amd64,2.10.95-0ubuntu2.11|libapt-inst2.0:amd64,1.2.32ubuntu0.2|libapt-pkg5.0:amd64,1.2.32ubuntu0.2|libasn1-8-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libasprintf0v5:amd64,0.19.7-2ubuntu3.1|libassuan0:amd64,2.4.2-2|libatm1:amd64,1:2.5.1-1.5|libattr1:amd64,1:2.4.47-2|libaudit-common,1:2.4.5-1ubuntu2.1|libaudit1:amd64,1:2.4.5-1ubuntu2.1|libbind9-140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libblkid1:amd64,2.27.1-6ubuntu3.10|libboost-iostreams1.58.0:amd64,1.58.0+dfsg-5ubuntu3.1|libbsd0:amd64,0.8.2-1ubuntu0.1|libbz2-1.0:amd64,1.0.6-8ubuntu0.2|libc-bin,2.23-0ubuntu11.2|libc6:amd64,2.23-0ubuntu11.2|libcap-ng0:amd64,0.7.7-1|libcap2-bin,1:2.24-12|libcap2:amd64,1:2.24-12|libcomerr2:amd64,1.42.13-1ubuntu1.2|libcrack2:amd64,2.9.2-1ubuntu1|libcryptsetup4:amd64,2:1.6.6-5ubuntu2.1|libcurl3-gnutls:amd64,7.47.0-1ubuntu2.18|libcurses-perl,1.33-1build1|libcurses-ui-perl,0.9609-1|libcwidget3v5:amd64,0.5.17-4ubuntu2|libdb5.3:amd64,5.3.28-11ubuntu0.2|libdbus-1-3:amd64,1.10.6-1ubuntu3.6|libdbus-glib-1-2:amd64,0.106-1|libdebconfclient0:amd64,0.198ubuntu1|libdevmapper-event1.02.1:amd64,2:1.02.110-1ubuntu10|libdevmapper1.02.1:amd64,2:1.02.110-1ubuntu10|libdns-export162,1:9.10.3.dfsg.P4-8ubuntu1.17|libdns162:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libdrm-common,2.4.91-2~16.04.1|libdrm2:amd64,2.4.91-2~16.04.1|libeatmydata1:amd64,105-3|libedit2:amd64,3.1-20150325-1ubuntu2|libefivar0:amd64,0.23-2|liberror-perl,0.17-1.2|libestr0,0.1.10-1|libexpat1:amd64,2.1.0-7ubuntu0.16.04.5|libfdisk1:amd64,2.27.1-6ubuntu3.10|libffi6:amd64,3.2.1-4|libfreetype6:amd64,2.6.1-0.1ubuntu2.5|libfribidi0:amd64,0.19.7-1|libfuse2:amd64,2.9.4-1ubuntu3.1|libgcc1:amd64,1:6.0.1-0ubuntu1|libgcrypt20:amd64,1.6.5-2ubuntu0.6|libgdbm3:amd64,1.8.3-13.1|libgeoip1:amd64,1.6.9-1|libgirepository-1.0-1:amd64,1.46.0-3ubuntu1|libglib2.0-0:amd64,2.48.2-0ubuntu4.6|libgmp10:amd64,2:6.1.0+dfsg-2|libgnutls-openssl27:amd64,3.4.10-4ubuntu1.8|libgnutls30:amd64,3.4.10-4ubuntu1.8|libgpg-error0:amd64,1.21-2ubuntu1|libgpm2:amd64,1.20.4-6.1|libgssapi-krb5-2:amd64,1.13.2+dfsg-5ubuntu2.2|libgssapi3-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhcrypto4-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimbase1-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimntlm0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhogweed4:amd64,3.2-1ubuntu0.16.04.1|libhx509-5-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libicu55:amd64,55.1-7ubuntu0.5|libidn11:amd64,1.32-3ubuntu1.2|libisc-export160,1:9.10.3.dfsg.P4-8ubuntu1.17|libisc160:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccc140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccfg140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libjson-c2:amd64,0.11-4ubuntu2.6|libk5crypto3:amd64,1.13.2+dfsg-5ubuntu2.2|libkeyutils1:amd64,1.5.9-8ubuntu1|libklibc,2.0.4-8ubuntu1.16.04.4|libkmod2:amd64,22-1ubuntu5.2|libkrb5-26-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libkrb5-3:amd64,1.13.2+dfsg-5ubuntu2.2|libkrb5support0:amd64,1.13.2+dfsg-5ubuntu2.2|libksba8:amd64,1.3.3-1ubuntu0.16.04.1|libldap-2.4-2:amd64,2.4.42+dfsg-2ubuntu3.11|liblocale-gettext-perl,1.07-1build1|liblockfile-bin,1.09-6ubuntu1|liblockfile1:amd64,1.09-6ubuntu1|liblvm2app2.2:amd64,2.02.133-1ubuntu10|liblvm2cmd2.02:amd64,2.02.133-1ubuntu10|liblwres141:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|liblz4-1:amd64,0.0~r131-2ubuntu2|liblzma5:amd64,5.1.1alpha+20120614-2ubuntu2|liblzo2-2:amd64,2.08-1.2|libmagic1:amd64,1:5.25-2ubuntu1.4|libmnl0:amd64,1.0.3-5|libmount1:amd64,2.27.1-6ubuntu3.10|libmpdec2:amd64,2.4.2-1|libncurses5:amd64,6.0+20160213-1ubuntu1|libncursesw5:amd64,6.0+20160213-1ubuntu1|libnettle6:amd64,3.2-1ubuntu0.16.04.1|libnewt0.52:amd64,0.52.18-1ubuntu2|libnfnetlink0:amd64,1.0.1-3|libnih1:amd64,1.0.3-4.3ubuntu1|libnpth0:amd64,1.2-3|libp11-kit0:amd64,0.23.2-5~ubuntu16.04.2|libpam-cracklib:amd64,1.1.8-3.2ubuntu2.3|libpam-modules-bin,1.1.8-3.2ubuntu2.3|libpam-modules:amd64,1.1.8-3.2ubuntu2.3|libpam-runtime,1.1.8-3.2ubuntu2.3|libpam-systemd:amd64,229-4ubuntu21.29|libpam0g:amd64,1.1.8-3.2ubuntu2.3|libpci3:amd64,1:3.3.1-1.1ubuntu1.3|libpcre3:amd64,2:8.38-3.1|libperl5.22:amd64,5.22.1-9ubuntu0.9|libpipeline1:amd64,1.4.1-2|libplymouth4:amd64,0.9.2-3ubuntu13.5|libpng12-0:amd64,1.2.54-1ubuntu1.1|libpopt0:amd64,1.16-10|libprocps4:amd64,2:3.3.10-4ubuntu2.5|libpython3-stdlib:amd64,3.5.1-3|libpython3.5-minimal:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5-stdlib:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5:amd64,3.5.2-2ubuntu0~16.04.12|libreadline5:amd64,5.2+dfsg-3build1|libreadline6:amd64,6.3-8ubuntu2|libroken18-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|librtmp1:amd64,2.4+20151223.gitfa8646d-1ubuntu0.1|libsasl2-2:amd64,2.1.26.dfsg1-14ubuntu0.2|libsasl2-modules-db:amd64,2.1.26.dfsg1-14ubuntu0.2|libseccomp2:amd64,2.4.3-1ubuntu3.16.04.3|libselinux1:amd64,2.4-3build2|libsemanage-common,2.3-1build3|libsemanage1:amd64,2.3-1build3|libsepol1:amd64,2.4-2|libsigc++-2.0-0v5:amd64,2.6.2-1|libsigsegv2:amd64,2.10-4|libslang2:amd64,2.3.0-2ubuntu1.1|libsmartcols1:amd64,2.27.1-6ubuntu3.10|libsqlite3-0:amd64,3.11.0-1ubuntu1.5|libss2:amd64,1.42.13-1ubuntu1.2|libssl1.0.0:amd64,1.0.2g-1ubuntu4.18|libstdc++6:amd64,5.4.0-6ubuntu1~16.04.12|libsystemd0:amd64,229-4ubuntu21.29|libtasn1-6:amd64,4.7-3ubuntu0.16.04.3|libterm-readkey-perl,2.33-1build1|libtext-charwidth-perl,0.04-7build5|libtext-iconv-perl,1.7-5build4|libtext-wrapi18n-perl,0.06-7.1|libtinfo5:amd64,6.0+20160213-1ubuntu1|libudev1:amd64,229-4ubuntu21.29|libusb-0.1-4:amd64,2:0.1.12-28|libusb-1.0-0:amd64,2:1.0.20-1|libustr-1.0-1:amd64,1.0.4-5|libuuid1:amd64,2.27.1-6ubuntu3.10|libwind0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libwrap0:amd64,7.6.q-25|libxapian22v5:amd64,1.2.22-2|libxml2:amd64,2.9.3+dfsg1-1ubuntu0.7|libxtables11:amd64,1.6.0-2ubuntu3|libyaml-0-2:amd64,0.1.6-3|linux-base,4.5ubuntu1.2~16.04.1|linux-firmware,1.157.23|linux-image-4.4.0-197-generic,4.4.0-197.229|linux-image-4.4.0-198-generic,4.4.0-198.230|linux-image-virtual,4.4.0.198.204|linux-modules-4.4.0-197-generic,4.4.0-197.229|linux-modules-4.4.0-198-generic,4.4.0-198.230|locales,2.23-0ubuntu11.2|login,1:4.2-3.1ubuntu5.4|logrotate,3.8.7-2ubuntu2.16.04.2|lsb-base,9.20160110ubuntu0.2|lsb-release,9.20160110ubuntu0.2|lvm2,2.02.133-1ubuntu10|m4,1.4.17-5|make,4.1-6|makedev,2.3.1-93ubuntu2~ubuntu16.04.1|man-db,2.7.5-1|mawk,1.3.3-17ubuntu2|mdadm,3.3-2ubuntu7.6|mime-support,3.59ubuntu1|mokutil,0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1|mount,2.27.1-6ubuntu3.10|mtr-tiny,0.86-1ubuntu0.1|multiarch-support,2.23-0ubuntu11.2|nano,2.5.3-2ubuntu2|ncurses-base,6.0+20160213-1ubuntu1|ncurses-bin,6.0+20160213-1ubuntu1|ncurses-term,6.0+20160213-1ubuntu1|net-tools,1.60-26ubuntu1|netbase,5.3|netcat-openbsd,1.105-7ubuntu1|openssh-client,1:7.2p2-4ubuntu2.10|openssh-server,1:7.2p2-4ubuntu2.10|openssh-sftp-server,1:7.2p2-4ubuntu2.10|openssl,1.0.2g-1ubuntu4.18|passwd,1:4.2-3.1ubuntu5.4|patch,2.7.5-1ubuntu0.16.04.2|pciutils,1:3.3.1-1.1ubuntu1.3|perl,5.22.1-9ubuntu0.9|perl-base,5.22.1-9ubuntu0.9|perl-modules-5.22,5.22.1-9ubuntu0.9|pinentry-curses,0.9.7-3|plymouth,0.9.2-3ubuntu13.5|pollinate,4.33-0ubuntu1~16.04.1|portsentry,1.2-14|powermgmt-base,1.31+nmu1|procmail,3.22-25ubuntu0.16.04.1|procps,2:3.3.10-4ubuntu2.5|python-apt-common,1.1.0~beta1ubuntu0.16.04.11|python3,3.5.1-3|python3-apt,1.1.0~beta1ubuntu0.16.04.11|python3-blinker,1.3.dfsg2-1build1|python3-cffi-backend,1.5.2-1ubuntu1|python3-chardet,2.3.0-2|python3-configobj,5.0.6-2|python3-cryptography,1.2.3-1ubuntu0.3|python3-dbus,1.2.0-3|python3-gi,3.20.0-0ubuntu1|python3-idna,2.0-3|python3-jinja2,2.8-1ubuntu0.1|python3-json-pointer,1.9-3|python3-jsonpatch,1.19-3|python3-jwt,1.3.0-1ubuntu0.1|python3-markupsafe,0.23-2build2|python3-minimal,3.5.1-3|python3-oauthlib,1.0.3-1|python3-pkg-resources,20.7.0-1|python3-pyasn1,0.1.9-1|python3-pycurl,7.43.0-1ubuntu1|python3-requests,2.9.1-3ubuntu0.1|python3-serial,3.0.1-1|python3-six,1.10.0-3|python3-software-properties,0.96.20.10|python3-urllib3,1.13.1-2ubuntu0.16.04.4|python3-yaml,3.11-3build1|python3.5,3.5.2-2ubuntu0~16.04.12|python3.5-minimal,3.5.2-2ubuntu0~16.04.12|qemu-guest-agent,1:2.5+dfsg-5ubuntu10.48|readline-common,6.3-8ubuntu2|resolvconf,1.78ubuntu7|rsync,3.1.1-3ubuntu1.3|rsyslog,8.16.0-1ubuntu3.1|sbsigntool,0.6-0ubuntu10.1|sed,4.2.2-7|sendmail,8.15.2-3|sendmail-base,8.15.2-3|sendmail-bin,8.15.2-3|sendmail-cf,8.15.2-3|sensible-mda,8.15.2-3|sensible-utils,0.0.9ubuntu0.16.04.1|shim,15+1552672080.a4a1fbe-0ubuntu2|shim-signed,1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2|software-properties-common,0.96.20.10|ssh-import-id,5.5-0ubuntu1|sudo,1.8.16-0ubuntu1.9|systemd,229-4ubuntu21.29|systemd-sysv,229-4ubuntu21.29|sysv-rc,2.88dsf-59.3ubuntu2|sysv-rc-conf,0.99-7|sysvinit-utils,2.88dsf-59.3ubuntu2|tar,1.28-2.1ubuntu0.1|tasksel,3.34ubuntu3|tasksel-data,3.34ubuntu3|tiger,1:3.2.3-14|tzdata,2020d-0ubuntu0.16.04|ubuntu-advantage-tools,10ubuntu0.16.04.1|ubuntu-keyring,2012.05.19.1|ucf,3.0036|udev,229-4ubuntu21.29|unattended-upgrades,1.1ubuntu1.18.04.7~16.04.6|unhide,20130526-1|ureadahead,0.100.0-19.1|usbutils,1:007-4|util-linux,2.27.1-6ubuntu3.10|vim,2:7.4.1689-3ubuntu1.5|vim-common,2:7.4.1689-3ubuntu1.5|vim-runtime,2:7.4.1689-3ubuntu1.5|vim-tiny,2:7.4.1689-3ubuntu1.5|wamerican,7.1-1|wget,1.17.1-1ubuntu1.5|whiptail,0.52.18-1ubuntu2|xfsprogs,4.3.0+nmu1ubuntu1.1|xkb-data,2.16-1ubuntu1|xz-utils,5.1.1alpha+20120614-2ubuntu2|zlib1g:amd64,1:1.2.8.dfsg-2ubuntu4.3 +package_audit_tool=apt-get +package_audit_tool_found=1 +vulnerable_packages_found=0 +hardening_index=71 +tests_executed=HRDN-7231|HRDN-7230|HRDN-7222|HRDN-7220|KRNL-6000|HOME-9350|HOME-9310|HOME-9306|HOME-9304|HOME-9302|FILE-7524|MALW-3284|MALW-3282|MALW-3280|MALW-3278|MALW-3276|MALW-3275|TOOL-5190|TOOL-5126|TOOL-5130|TOOL-5122|TOOL-5120|TOOL-5104|TOOL-5102|TOOL-5002|FINT-4350|FINT-4341|FINT-4338|FINT-4330|FINT-4328|FINT-4326|FINT-4322|FINT-4318|FINT-4314|FINT-4310|MACF-6290|RBAC-6272|MACF-6240|MACF-6232|MACF-6204|CONT-8102|CRYP-8005|CRYP-8004|CRYP-8002|CRYP-7931|CRYP-7930|CRYP-7902|TIME-3185|TIME-3170|TIME-3148|TIME-3104|ACCT-9636|ACCT-9628|ACCT-9626|ACCT-9622|SCHD-7718|SCHD-7704|SCHD-7702|BANN-7130|BANN-7128|BANN-7126|BANN-7124|INSE-8320|INSE-8318|INSE-8316|INSE-8314|INSE-8322|INSE-8310|INSE-8304|INSE-8300|INSE-8102|INSE-8100|INSE-8000|LOGG-2180|LOGG-2170|LOGG-2154|LOGG-2150|LOGG-2148|LOGG-2146|LOGG-2142|LOGG-2138|LOGG-2240|LOGG-2230|LOGG-2210|LOGG-2136|LOGG-2132|LOGG-2130|SQD-3602|PHP-2211|LDAP-2219|DBS-1880|DBS-1860|DBS-1840|DBS-1826|DBS-1820|DBS-1818|DBS-1804|SNMP-3302|SSH-7440|SSH-7408|SSH-7406|SSH-7404|SSH-7402|HTTP-6702|HTTP-6622|FIRE-4594|FIRE-4590|FIRE-4586|FIRE-4524|FIRE-4513|FIRE-4512|FIRE-4508|FIRE-4502|MAIL-8880|MAIL-8860|MAIL-8838|MAIL-8820|MAIL-8814|MAIL-8802|PRNT-2314|PRNT-2304|NETW-3200|NETW-3032|NETW-3030|NETW-3028|NETW-3015|NETW-3012|NETW-3008|NETW-3006|NETW-3004|NETW-3001|NETW-2706|NETW-2705|NETW-2704|NETW-2600|NETW-2400|PKGS-7420|PKGS-7410|PKGS-7398|PKGS-7394|PKGS-7392|PKGS-7390|PKGS-7388|PKGS-7370|PKGS-7346|PKGS-7345|NAME-4408|NAME-4406|NAME-4404|NAME-4402|NAME-4304|NAME-4230|NAME-4202|NAME-4034|NAME-4032|NAME-4028|NAME-4020|NAME-4018|NAME-4016|STRG-1920|STRG-1846|USB-3000|USB-2000|USB-1000|FILE-6430|FILE-6394|FILE-6376|FILE-6374|FILE-6372|FILE-6368|FILE-6363|FILE-6362|FILE-6354|FILE-6344|FILE-6336|FILE-6332|FILE-6329|FILE-6324|FILE-6323|FILE-6311|FILE-6310|SHLL-6230|SHLL-6220|SHLL-6211|AUTH-9408|AUTH-9402|AUTH-9328|AUTH-9308|AUTH-9288|AUTH-9286|AUTH-9284|AUTH-9283|AUTH-9282|AUTH-9278|AUTH-9268|AUTH-9266|AUTH-9264|AUTH-9262|AUTH-9252|AUTH-9250|AUTH-9242|AUTH-9240|AUTH-9234|AUTH-9230|AUTH-9229|AUTH-9228|AUTH-9226|AUTH-9222|AUTH-9216|AUTH-9208|AUTH-9204|PROC-3802|PROC-3614|PROC-3612|PROC-3602|KRNL-5830|KRNL-5820|KRNL-5788|KRNL-5730|KRNL-5728|KRNL-5726|KRNL-5723|KRNL-5695|KRNL-5677|KRNL-5622|BOOT-5260|BOOT-5202|BOOT-5184|BOOT-5180|BOOT-5177|BOOT-5155|BOOT-5142|BOOT-5139|BOOT-5122|BOOT-5121|BOOT-5116|BOOT-5109|BOOT-5108|BOOT-5104|PLGN-3860|PLGN-3856|PLGN-3834|PLGN-3832|PLGN-3830|PLGN-3820|PLGN-3818|PLGN-3816|PLGN-3814|PLGN-3812|PLGN-3810|PLGN-3808|PLGN-3806|PLGN-3804|PLGN-3802|PLGN-3800|PLGN-0010|CORE-1000| +tests_skipped=MALW-3288|MALW-3286|FINT-4402|FINT-4340|FINT-4339|FINT-4336|FINT-4334|FINT-4316|FINT-4315|MACF-6242|MACF-6234|MACF-6208|CONT-8108|CONT-8107|CONT-8106|CONT-8104|CONT-8004|TIME-3182|TIME-3181|TIME-3180|TIME-3160|TIME-3136|TIME-3132|TIME-3128|TIME-3124|TIME-3120|TIME-3116|TIME-3112|TIME-3106|ACCT-9662|ACCT-9660|ACCT-9656|ACCT-9654|ACCT-9652|ACCT-9650|ACCT-9634|ACCT-9632|ACCT-9630|ACCT-2760|ACCT-2754|SCHD-7724|SCHD-7720|BANN-7113|INSE-8050|INSE-8200|INSE-8116|INSE-8106|INSE-8104|INSE-8016|INSE-8006|INSE-8004|INSE-8002|LOGG-2192|LOGG-2190|LOGG-2164|LOGG-2162|LOGG-2160|LOGG-2153|LOGG-2152|LOGG-2134|SQD-3680|SQD-3630|SQD-3624|SQD-3620|SQD-3616|SQD-3614|SQD-3613|SQD-3610|SQD-3606|SQD-3604|PHP-2382|PHP-2378|PHP-2376|PHP-2374|PHP-2372|PHP-2368|PHP-2320|LDAP-2224|DBS-1888|DBS-1886|DBS-1884|DBS-1882|DBS-1828|DBS-1816|SNMP-3306|SNMP-3304|HTTP-6720|HTTP-6716|HTTP-6714|HTTP-6712|HTTP-6710|HTTP-6708|HTTP-6706|HTTP-6704|HTTP-6643|HTTP-6641|HTTP-6640|HTTP-6632|HTTP-6626|HTTP-6624|FIRE-4540|FIRE-4538|FIRE-4536|FIRE-4534|FIRE-4532|FIRE-4530|FIRE-4526|FIRE-4520|FIRE-4518|MAIL-8920|MAIL-8818|MAIL-8817|MAIL-8816|MAIL-8804|PRNT-2420|PRNT-2418|PRNT-2316|PRNT-2308|PRNT-2307|PRNT-2306|PRNT-2302|NETW-3014|PKGS-7393|PKGS-7387|PKGS-7386|PKGS-7384|PKGS-7383|PKGS-7382|PKGS-7381|PKGS-7380|PKGS-7378|PKGS-7366|PKGS-7354|PKGS-7352|PKGS-7350|PKGS-7348|PKGS-7334|PKGS-7332|PKGS-7330|PKGS-7328|PKGS-7322|PKGS-7320|PKGS-7314|PKGS-7312|PKGS-7310|PKGS-7308|PKGS-7306|PKGS-7304|PKGS-7303|PKGS-7302|PKGS-7301|NAME-4306|NAME-4238|NAME-4236|NAME-4232|NAME-4210|NAME-4206|NAME-4204|NAME-4036|NAME-4026|NAME-4024|STRG-1930|STRG-1928|STRG-1926|STRG-1906|STRG-1904|STRG-1902|FILE-6410|FILE-6439|FILE-6330|FILE-6312|SHLL-6202|AUTH-9410|AUTH-9409|AUTH-9406|AUTH-9340|AUTH-9306|AUTH-9304|AUTH-9254|AUTH-9218|AUTH-9212|PROC-3604|KRNL-5770|KRNL-5831|KRNL-5745|BOOT-5264|BOOT-5263|BOOT-5262|BOOT-5170|BOOT-5165|BOOT-5159|BOOT-5126|BOOT-5261|BOOT-5124|BOOT-5117|BOOT-5106|BOOT-5102|PLGN-0008| +finish=true diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/.gitkeep b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/main.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/main.css new file mode 100644 index 0000000..0b6385d --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/main.css @@ -0,0 +1,389 @@ +@font-face { + font-family: Lato-Regular; + src: url('../fonts/Lato/Lato-Regular.ttf'); +} + +@font-face { + font-family: Lato-Bold; + src: url('../fonts/Lato/Lato-Bold.ttf'); +} + +img { + display: block; + margin: 0 auto; + margin-top: 40px; + width: 258px; /* Width of new image */ + height: 232px; /* Height of new image */ +} + +* { + margin: 0px; + padding: 0px; + box-sizing: border-box; +} + +body, html { + height: 100%; + font-family: sans-serif; +} + +a { + margin: 0px; + transition: all 0.4s; + -webkit-transition: all 0.4s; + -o-transition: all 0.4s; + -moz-transition: all 0.4s; +} + +a:focus { + outline: none !important; +} + +a:hover { + text-decoration: none; +} + +h1,h2,h3,h4,h5,h6 {margin: 0px;} + +p {margin: 0px;} + +ul, li { + margin: 0px; + list-style-type: none; +} + +input { + display: block; + outline: none; + border: none !important; +} + +textarea { + display: block; + outline: none; +} + +textarea:focus, input:focus { + border-color: transparent !important; +} + +button { + outline: none !important; + border: none; + background: transparent; +} + +button:hover { + cursor: pointer; +} + +iframe { + border: none !important; +} + +h2.title { + color: #111; + font-family: Lato-Bold; + font-size: 30px; + font-weight: 300; + line-height: 32px; + margin: 20px 0 22px; + text-align: center; +} + +p.desc { + color: #111; + font-family: Lato-Regular; + font-size: 16px; + font-weight: 300; + line-height: 32px; + margin: 5px 0 40px; + text-align: center; +} + +p.info { + color: #111; + font-family: Lato-Bold; + font-size: 15px; + font-weight: 300; + line-height: 32px; + margin: 20px 0 2px; + text-align: center; +} + +p.date { + color: #111; + font-family: monospace; + font-size: 12px; + font-weight: 300; + line-height: 12px; + margin: 20px 0 42px; + text-align: center; +} + +p.link { + color: #111; + font-family: Lato-Bold; + font-size: 14px; + font-weight: 300; + line-height: 32px; + margin: 0px 0 42px; + text-align: center; +} + +.js-pscroll { + position: relative; + overflow: hidden; +} + +.table100 .ps__rail-y { + width: 9px; + background-color: transparent; + opacity: 1 !important; + right: 5px; +} + +.table100 .ps__rail-y::before { + content: ""; + display: block; + position: absolute; + // background-color: #ebebeb; + border-radius: 5px; + width: 100%; + // height: calc(100% - 30px); + left: 0; + top: 15px; +} + +.table100 .ps__rail-y .ps__thumb-y { + width: 100%; + right: 0; + background-color: transparent; + opacity: 1 !important; +} + +.table100 .ps__rail-y .ps__thumb-y::before { + content: ""; + display: block; + position: absolute; + background-color: #cccccc; + border-radius: 5px; + width: 100%; + height: calc(100% - 30px); + left: 0; + top: 15px; +} + +.limiter { + width: 1366px; + margin: 0 auto; +} + +.container-table100 { + width: 100%; + min-height: 20vh; + background: #fff; + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + align-items: center; + justify-content: center; + flex-wrap: wrap; + padding: 10px 10px; +} + +.wrap-table100 { + width: 1170px; +} + +.table100 { + background-color: #fff; +} + +table { + width: 100%; +} + +th, td { + font-weight: unset; + padding-right: 10px; +} + +.column1 { + width: 33%; + padding-left: 20px; +} + +.column2 { + width: 13%; +} + +.column3 { + width: 22%; +} + +.column4 { + width: 19%; +} + +.column5 { + width: 13%; +} + +.table100-head th { + padding-top: 18px; + padding-bottom: 18px; +} + +.table100-body td { + padding-top: 25px; + padding-bottom: 0px; +} + +.table100 { + position: relative; + padding-top: 60px; +} + +.table100-head { + position: absolute; + width: 100%; + top: 0; + left: 0; +} + +.table100-body { + max-height: 585px; + overflow: auto; +} + +.table100.ver1 th { + // font-family: Lato-Bold; + font-family: monospace; + font-size: 18px; + color: #fff; + line-height: 1.4; + + background-color: #6c7ae0; +} + +.table100.ver1 td { + font-family: Lato-Regular; + font-size: 15px; + color: #808080; + line-height: 1.4; +} + +.table100.ver1 .table100-body tr:nth-child(even) { + background-color: #f8f6ff; +} + +.table100.ver1 { + border-radius: 10px; + overflow: hidden; + box-shadow: 0 0px 40px 0px rgba(0, 0, 0, 0.15); + -moz-box-shadow: 0 0px 40px 0px rgba(0, 0, 0, 0.15); + -webkit-box-shadow: 0 0px 40px 0px rgba(0, 0, 0, 0.15); + -o-box-shadow: 0 0px 40px 0px rgba(0, 0, 0, 0.15); + -ms-box-shadow: 0 0px 40px 0px rgba(0, 0, 0, 0.15); +} + +.table100.ver1 .ps__rail-y { + right: 5px; +} + +.table100.ver1 .ps__rail-y::before { + background-color: #ebebeb; +} + +.table100.ver1 .ps__rail-y .ps__thumb-y::before { + background-color: #778899; +} + +a { + color: #111; + font-family: Lato-Bold; + font-size: 14px; + font-weight: 300; + line-height: 32px; + margin: 20px 0 2px; + text-align: center; +} + +code, .code, +pre { + font-family: 'monospace'; + background: $char; + color: $lightGray; + font-size: 13px; + padding: 0; + padding: 10px; + &:before { + display: block; + width: calc(100%); + margin-left: -3px; + margin-top: -3px; + padding: 3px; + text-transform: uppercase; + content: attr(data-lang); + background: $medBlue; + } + .o { + color: orange; + } + .w { + color: white; + } +} + +table.greyGridTable { + border: 2px solid #FFFFFF; + margin-left: auto; + margin-right: auto; + width: 40%; + text-align: center; + border-collapse: collapse; +} + +table.greyGridTable td, table.greyGridTable th { + border: 1px solid #FFFFFF; + padding: 3px 4px; +} + +table.greyGridTable tbody td { + font-size: 13px; +} + +table.greyGridTable td:nth-child(even) { + background: #EBEBEB; +} + +table.greyGridTable thead { + background: #FFFFFF; + border-bottom: 4px solid #003c43; +} + +table.greyGridTable thead th { + font-size: 15px; + font-weight: bold; + color: #003c43; + text-align: center; + border-left: 2px solid #003c43; +} + +table.greyGridTable thead th:first-child { + border-left: none; +} + +table.greyGridTable tfoot { + font-size: 14px; + font-weight: bold; + color: #003c43; + border-top: 4px solid #003c43; +} + +table.greyGridTable tfoot td { + font-size: 14px; +} diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/util.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/util.css new file mode 100644 index 0000000..d9bcee7 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/css/util.css @@ -0,0 +1,932 @@ +.m-b-0 {margin-bottom: 0px;} +.m-b-1 {margin-bottom: 1px;} +.m-b-2 {margin-bottom: 2px;} +.m-b-3 {margin-bottom: 3px;} +.m-b-4 {margin-bottom: 4px;} +.m-b-5 {margin-bottom: 5px;} +.m-b-6 {margin-bottom: 6px;} +.m-b-7 {margin-bottom: 7px;} +.m-b-8 {margin-bottom: 8px;} +.m-b-9 {margin-bottom: 9px;} +.m-b-10 {margin-bottom: 10px;} +.m-b-11 {margin-bottom: 11px;} +.m-b-12 {margin-bottom: 12px;} +.m-b-13 {margin-bottom: 13px;} +.m-b-14 {margin-bottom: 14px;} +.m-b-15 {margin-bottom: 15px;} +.m-b-16 {margin-bottom: 16px;} +.m-b-17 {margin-bottom: 17px;} +.m-b-18 {margin-bottom: 18px;} +.m-b-19 {margin-bottom: 19px;} +.m-b-20 {margin-bottom: 20px;} +.m-b-21 {margin-bottom: 21px;} +.m-b-22 {margin-bottom: 22px;} +.m-b-23 {margin-bottom: 23px;} +.m-b-24 {margin-bottom: 24px;} +.m-b-25 {margin-bottom: 25px;} +.m-b-26 {margin-bottom: 26px;} +.m-b-27 {margin-bottom: 27px;} +.m-b-28 {margin-bottom: 28px;} +.m-b-29 {margin-bottom: 29px;} +.m-b-30 {margin-bottom: 30px;} +.m-b-31 {margin-bottom: 31px;} +.m-b-32 {margin-bottom: 32px;} +.m-b-33 {margin-bottom: 33px;} +.m-b-34 {margin-bottom: 34px;} +.m-b-35 {margin-bottom: 35px;} +.m-b-36 {margin-bottom: 36px;} +.m-b-37 {margin-bottom: 37px;} +.m-b-38 {margin-bottom: 38px;} +.m-b-39 {margin-bottom: 39px;} +.m-b-40 {margin-bottom: 40px;} +.m-b-41 {margin-bottom: 41px;} +.m-b-42 {margin-bottom: 42px;} +.m-b-43 {margin-bottom: 43px;} +.m-b-44 {margin-bottom: 44px;} +.m-b-45 {margin-bottom: 45px;} +.m-b-46 {margin-bottom: 46px;} +.m-b-47 {margin-bottom: 47px;} +.m-b-48 {margin-bottom: 48px;} +.m-b-49 {margin-bottom: 49px;} +.m-b-50 {margin-bottom: 50px;} +.m-b-51 {margin-bottom: 51px;} +.m-b-52 {margin-bottom: 52px;} +.m-b-53 {margin-bottom: 53px;} +.m-b-54 {margin-bottom: 54px;} +.m-b-55 {margin-bottom: 55px;} +.m-b-56 {margin-bottom: 56px;} +.m-b-57 {margin-bottom: 57px;} +.m-b-58 {margin-bottom: 58px;} +.m-b-59 {margin-bottom: 59px;} +.m-b-60 {margin-bottom: 60px;} +.m-b-61 {margin-bottom: 61px;} +.m-b-62 {margin-bottom: 62px;} +.m-b-63 {margin-bottom: 63px;} +.m-b-64 {margin-bottom: 64px;} +.m-b-65 {margin-bottom: 65px;} +.m-b-66 {margin-bottom: 66px;} +.m-b-67 {margin-bottom: 67px;} +.m-b-68 {margin-bottom: 68px;} +.m-b-69 {margin-bottom: 69px;} +.m-b-70 {margin-bottom: 70px;} +.m-b-71 {margin-bottom: 71px;} +.m-b-72 {margin-bottom: 72px;} +.m-b-73 {margin-bottom: 73px;} +.m-b-74 {margin-bottom: 74px;} +.m-b-75 {margin-bottom: 75px;} +.m-b-76 {margin-bottom: 76px;} +.m-b-77 {margin-bottom: 77px;} +.m-b-78 {margin-bottom: 78px;} +.m-b-79 {margin-bottom: 79px;} +.m-b-80 {margin-bottom: 80px;} +.m-b-81 {margin-bottom: 81px;} +.m-b-82 {margin-bottom: 82px;} +.m-b-83 {margin-bottom: 83px;} +.m-b-84 {margin-bottom: 84px;} +.m-b-85 {margin-bottom: 85px;} +.m-b-86 {margin-bottom: 86px;} +.m-b-87 {margin-bottom: 87px;} +.m-b-88 {margin-bottom: 88px;} +.m-b-89 {margin-bottom: 89px;} +.m-b-90 {margin-bottom: 90px;} +.m-b-91 {margin-bottom: 91px;} +.m-b-92 {margin-bottom: 92px;} +.m-b-93 {margin-bottom: 93px;} +.m-b-94 {margin-bottom: 94px;} +.m-b-95 {margin-bottom: 95px;} +.m-b-96 {margin-bottom: 96px;} +.m-b-97 {margin-bottom: 97px;} +.m-b-98 {margin-bottom: 98px;} +.m-b-99 {margin-bottom: 99px;} +.m-b-100 {margin-bottom: 100px;} +.m-b-101 {margin-bottom: 101px;} +.m-b-102 {margin-bottom: 102px;} +.m-b-103 {margin-bottom: 103px;} +.m-b-104 {margin-bottom: 104px;} +.m-b-105 {margin-bottom: 105px;} +.m-b-106 {margin-bottom: 106px;} +.m-b-107 {margin-bottom: 107px;} +.m-b-108 {margin-bottom: 108px;} +.m-b-109 {margin-bottom: 109px;} +.m-b-110 {margin-bottom: 110px;} +.m-b-111 {margin-bottom: 111px;} +.m-b-112 {margin-bottom: 112px;} +.m-b-113 {margin-bottom: 113px;} +.m-b-114 {margin-bottom: 114px;} +.m-b-115 {margin-bottom: 115px;} +.m-b-116 {margin-bottom: 116px;} +.m-b-117 {margin-bottom: 117px;} +.m-b-118 {margin-bottom: 118px;} +.m-b-119 {margin-bottom: 119px;} +.m-b-120 {margin-bottom: 120px;} +.m-b-121 {margin-bottom: 121px;} +.m-b-122 {margin-bottom: 122px;} +.m-b-123 {margin-bottom: 123px;} +.m-b-124 {margin-bottom: 124px;} +.m-b-125 {margin-bottom: 125px;} +.m-b-126 {margin-bottom: 126px;} +.m-b-127 {margin-bottom: 127px;} +.m-b-128 {margin-bottom: 128px;} +.m-b-129 {margin-bottom: 129px;} +.m-b-130 {margin-bottom: 130px;} +.m-b-131 {margin-bottom: 131px;} +.m-b-132 {margin-bottom: 132px;} +.m-b-133 {margin-bottom: 133px;} +.m-b-134 {margin-bottom: 134px;} +.m-b-135 {margin-bottom: 135px;} +.m-b-136 {margin-bottom: 136px;} +.m-b-137 {margin-bottom: 137px;} +.m-b-138 {margin-bottom: 138px;} +.m-b-139 {margin-bottom: 139px;} +.m-b-140 {margin-bottom: 140px;} +.m-b-141 {margin-bottom: 141px;} +.m-b-142 {margin-bottom: 142px;} +.m-b-143 {margin-bottom: 143px;} +.m-b-144 {margin-bottom: 144px;} +.m-b-145 {margin-bottom: 145px;} +.m-b-146 {margin-bottom: 146px;} +.m-b-147 {margin-bottom: 147px;} +.m-b-148 {margin-bottom: 148px;} +.m-b-149 {margin-bottom: 149px;} +.m-b-150 {margin-bottom: 150px;} +.m-b-151 {margin-bottom: 151px;} +.m-b-152 {margin-bottom: 152px;} +.m-b-153 {margin-bottom: 153px;} +.m-b-154 {margin-bottom: 154px;} +.m-b-155 {margin-bottom: 155px;} +.m-b-156 {margin-bottom: 156px;} +.m-b-157 {margin-bottom: 157px;} +.m-b-158 {margin-bottom: 158px;} +.m-b-159 {margin-bottom: 159px;} +.m-b-160 {margin-bottom: 160px;} +.m-b-161 {margin-bottom: 161px;} +.m-b-162 {margin-bottom: 162px;} +.m-b-163 {margin-bottom: 163px;} +.m-b-164 {margin-bottom: 164px;} +.m-b-165 {margin-bottom: 165px;} +.m-b-166 {margin-bottom: 166px;} +.m-b-167 {margin-bottom: 167px;} +.m-b-168 {margin-bottom: 168px;} +.m-b-169 {margin-bottom: 169px;} +.m-b-170 {margin-bottom: 170px;} +.m-b-171 {margin-bottom: 171px;} +.m-b-172 {margin-bottom: 172px;} +.m-b-173 {margin-bottom: 173px;} +.m-b-174 {margin-bottom: 174px;} +.m-b-175 {margin-bottom: 175px;} +.m-b-176 {margin-bottom: 176px;} +.m-b-177 {margin-bottom: 177px;} +.m-b-178 {margin-bottom: 178px;} +.m-b-179 {margin-bottom: 179px;} +.m-b-180 {margin-bottom: 180px;} +.m-b-181 {margin-bottom: 181px;} +.m-b-182 {margin-bottom: 182px;} +.m-b-183 {margin-bottom: 183px;} +.m-b-184 {margin-bottom: 184px;} +.m-b-185 {margin-bottom: 185px;} +.m-b-186 {margin-bottom: 186px;} +.m-b-187 {margin-bottom: 187px;} +.m-b-188 {margin-bottom: 188px;} +.m-b-189 {margin-bottom: 189px;} +.m-b-190 {margin-bottom: 190px;} +.m-b-191 {margin-bottom: 191px;} +.m-b-192 {margin-bottom: 192px;} +.m-b-193 {margin-bottom: 193px;} +.m-b-194 {margin-bottom: 194px;} +.m-b-195 {margin-bottom: 195px;} +.m-b-196 {margin-bottom: 196px;} +.m-b-197 {margin-bottom: 197px;} +.m-b-198 {margin-bottom: 198px;} +.m-b-199 {margin-bottom: 199px;} +.m-b-200 {margin-bottom: 200px;} +.m-b-201 {margin-bottom: 201px;} +.m-b-202 {margin-bottom: 202px;} +.m-b-203 {margin-bottom: 203px;} +.m-b-204 {margin-bottom: 204px;} +.m-b-205 {margin-bottom: 205px;} +.m-b-206 {margin-bottom: 206px;} +.m-b-207 {margin-bottom: 207px;} +.m-b-208 {margin-bottom: 208px;} +.m-b-209 {margin-bottom: 209px;} +.m-b-210 {margin-bottom: 210px;} +.m-b-211 {margin-bottom: 211px;} +.m-b-212 {margin-bottom: 212px;} +.m-b-213 {margin-bottom: 213px;} +.m-b-214 {margin-bottom: 214px;} +.m-b-215 {margin-bottom: 215px;} +.m-b-216 {margin-bottom: 216px;} +.m-b-217 {margin-bottom: 217px;} +.m-b-218 {margin-bottom: 218px;} +.m-b-219 {margin-bottom: 219px;} +.m-b-220 {margin-bottom: 220px;} +.m-b-221 {margin-bottom: 221px;} +.m-b-222 {margin-bottom: 222px;} +.m-b-223 {margin-bottom: 223px;} +.m-b-224 {margin-bottom: 224px;} +.m-b-225 {margin-bottom: 225px;} +.m-b-226 {margin-bottom: 226px;} +.m-b-227 {margin-bottom: 227px;} +.m-b-228 {margin-bottom: 228px;} +.m-b-229 {margin-bottom: 229px;} +.m-b-230 {margin-bottom: 230px;} +.m-b-231 {margin-bottom: 231px;} +.m-b-232 {margin-bottom: 232px;} +.m-b-233 {margin-bottom: 233px;} +.m-b-234 {margin-bottom: 234px;} +.m-b-235 {margin-bottom: 235px;} +.m-b-236 {margin-bottom: 236px;} +.m-b-237 {margin-bottom: 237px;} +.m-b-238 {margin-bottom: 238px;} +.m-b-239 {margin-bottom: 239px;} +.m-b-240 {margin-bottom: 240px;} +.m-b-241 {margin-bottom: 241px;} +.m-b-242 {margin-bottom: 242px;} +.m-b-243 {margin-bottom: 243px;} +.m-b-244 {margin-bottom: 244px;} +.m-b-245 {margin-bottom: 245px;} +.m-b-246 {margin-bottom: 246px;} +.m-b-247 {margin-bottom: 247px;} +.m-b-248 {margin-bottom: 248px;} +.m-b-249 {margin-bottom: 249px;} +.m-b-250 {margin-bottom: 250px;} +.m-l-r-auto {margin-left: auto; margin-right: auto;} +.m-l-auto {margin-left: auto;} +.m-r-auto {margin-right: auto;} + +.text-white {color: white;} +.text-black {color: black;} + +.text-hov-white:hover {color: white;} + +.text-up {text-transform: uppercase;} + +.text-center {text-align: center;} +.text-left {text-align: left;} +.text-right {text-align: right;} +.text-middle {vertical-align: middle;} + +.lh-1-0 {line-height: 1.0;} +.lh-1-1 {line-height: 1.1;} +.lh-1-2 {line-height: 1.2;} +.lh-1-3 {line-height: 1.3;} +.lh-1-4 {line-height: 1.4;} +.lh-1-5 {line-height: 1.5;} +.lh-1-6 {line-height: 1.6;} +.lh-1-7 {line-height: 1.7;} +.lh-1-8 {line-height: 1.8;} +.lh-1-9 {line-height: 1.9;} +.lh-2-0 {line-height: 2.0;} +.lh-2-1 {line-height: 2.1;} +.lh-2-2 {line-height: 2.2;} +.lh-2-3 {line-height: 2.3;} +.lh-2-4 {line-height: 2.4;} +.lh-2-5 {line-height: 2.5;} +.lh-2-6 {line-height: 2.6;} +.lh-2-7 {line-height: 2.7;} +.lh-2-8 {line-height: 2.8;} +.lh-2-9 {line-height: 2.9;} + +.dis-none {display: none;} +.dis-block {display: block;} +.dis-inline {display: inline;} +.dis-inline-block {display: inline-block;} +.dis-flex { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; +} + +.pos-relative {position: relative;} +.pos-absolute {position: absolute;} +.pos-fixed {position: fixed;} + +.float-l {float: left;} +.float-r {float: right;} + +.sizefull { + width: 100%; + height: 100%; +} +.w-full {width: 100%;} +.h-full {height: 100%;} +.max-w-full {max-width: 100%;} +.max-h-full {max-height: 100%;} +.min-w-full {min-width: 100%;} +.min-h-full {min-height: 100%;} + +.top-0 {top: 0;} +.bottom-0 {bottom: 0;} +.left-0 {left: 0;} +.right-0 {right: 0;} + +.top-auto {top: auto;} +.bottom-auto {bottom: auto;} +.left-auto {left: auto;} +.right-auto {right: auto;} + +.op-0-0 {opacity: 0;} +.op-0-1 {opacity: 0.1;} +.op-0-2 {opacity: 0.2;} +.op-0-3 {opacity: 0.3;} +.op-0-4 {opacity: 0.4;} +.op-0-5 {opacity: 0.5;} +.op-0-6 {opacity: 0.6;} +.op-0-7 {opacity: 0.7;} +.op-0-8 {opacity: 0.8;} +.op-0-9 {opacity: 0.9;} +.op-1-0 {opacity: 1;} + +.bgwhite {background-color: white;} +.bgblack {background-color: black;} + +.wrap-pic-w img {width: 100%;} +.wrap-pic-max-w img {max-width: 100%;} + +.wrap-pic-h img {height: 100%;} +.wrap-pic-max-h img {max-height: 100%;} + +.wrap-pic-cir { + border-radius: 50%; + overflow: hidden; +} +.wrap-pic-cir img { + width: 100%; +} + +.hov-pointer:hover {cursor: pointer;} + +.hov-img-zoom { + display: block; + overflow: hidden; +} +.hov-img-zoom img{ + width: 100%; + -webkit-transition: all 0.6s; + -o-transition: all 0.6s; + -moz-transition: all 0.6s; + transition: all 0.6s; +} +.hov-img-zoom:hover img { + -webkit-transform: scale(1.1); + -moz-transform: scale(1.1); + -ms-transform: scale(1.1); + -o-transform: scale(1.1); + transform: scale(1.1); +} + +.bo-cir {border-radius: 50%;} + +.of-hidden {overflow: hidden;} + +.visible-false {visibility: hidden;} +.visible-true {visibility: visible;} + +.trans-0-1 { + -webkit-transition: all 0.1s; + -o-transition: all 0.1s; + -moz-transition: all 0.1s; + transition: all 0.1s; +} +.trans-0-2 { + -webkit-transition: all 0.2s; + -o-transition: all 0.2s; + -moz-transition: all 0.2s; + transition: all 0.2s; +} +.trans-0-3 { + -webkit-transition: all 0.3s; + -o-transition: all 0.3s; + -moz-transition: all 0.3s; + transition: all 0.3s; +} +.trans-0-4 { + -webkit-transition: all 0.4s; + -o-transition: all 0.4s; + -moz-transition: all 0.4s; + transition: all 0.4s; +} +.trans-0-5 { + -webkit-transition: all 0.5s; + -o-transition: all 0.5s; + -moz-transition: all 0.5s; + transition: all 0.5s; +} +.trans-0-6 { + -webkit-transition: all 0.6s; + -o-transition: all 0.6s; + -moz-transition: all 0.6s; + transition: all 0.6s; +} +.trans-0-9 { + -webkit-transition: all 0.9s; + -o-transition: all 0.9s; + -moz-transition: all 0.9s; + transition: all 0.9s; +} +.trans-1-0 { + -webkit-transition: all 1s; + -o-transition: all 1s; + -moz-transition: all 1s; + transition: all 1s; +} + +.flex-w { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-wrap: wrap; + -moz-flex-wrap: wrap; + -ms-flex-wrap: wrap; + -o-flex-wrap: wrap; + flex-wrap: wrap; +} + +.flex-l { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: flex-start; +} + +.flex-r { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: flex-end; +} + +.flex-c { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: center; +} + +.flex-sa { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: space-around; +} + +.flex-sb { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: space-between; +} + +.flex-t { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -ms-align-items: flex-start; + align-items: flex-start; +} + +.flex-b { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -ms-align-items: flex-end; + align-items: flex-end; +} + +.flex-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -ms-align-items: center; + align-items: center; +} + +.flex-str { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -ms-align-items: stretch; + align-items: stretch; +} + +.flex-row { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: row; + -moz-flex-direction: row; + -ms-flex-direction: row; + -o-flex-direction: row; + flex-direction: row; +} + +.flex-row-rev { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: row-reverse; + -moz-flex-direction: row-reverse; + -ms-flex-direction: row-reverse; + -o-flex-direction: row-reverse; + flex-direction: row-reverse; +} + +.flex-col { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; +} + +.flex-col-rev { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column-reverse; + -moz-flex-direction: column-reverse; + -ms-flex-direction: column-reverse; + -o-flex-direction: column-reverse; + flex-direction: column-reverse; +} + +.flex-c-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: center; + -ms-align-items: center; + align-items: center; +} + +.flex-c-t { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: center; + -ms-align-items: flex-start; + align-items: flex-start; +} + +.flex-c-b { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: center; + -ms-align-items: flex-end; + align-items: flex-end; +} + +.flex-c-str { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: center; + -ms-align-items: stretch; + align-items: stretch; +} + +.flex-l-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: flex-start; + -ms-align-items: center; + align-items: center; +} + +.flex-r-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: flex-end; + -ms-align-items: center; + align-items: center; +} + +.flex-sa-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: space-around; + -ms-align-items: center; + align-items: center; +} + +.flex-sb-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + justify-content: space-between; + -ms-align-items: center; + align-items: center; +} + +.flex-col-l { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: flex-start; + align-items: flex-start; +} + +.flex-col-r { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: flex-end; + align-items: flex-end; +} + +.flex-col-c { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: center; + align-items: center; +} + +.flex-col-l-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: flex-start; + align-items: flex-start; + justify-content: center; +} + +.flex-col-r-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: flex-end; + align-items: flex-end; + justify-content: center; +} + +.flex-col-c-m { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: center; + align-items: center; + justify-content: center; +} + +.flex-col-str { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + -ms-align-items: stretch; + align-items: stretch; +} + +.flex-col-sb { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column; + -moz-flex-direction: column; + -ms-flex-direction: column; + -o-flex-direction: column; + flex-direction: column; + justify-content: space-between; +} + +.flex-col-rev-l { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column-reverse; + -moz-flex-direction: column-reverse; + -ms-flex-direction: column-reverse; + -o-flex-direction: column-reverse; + flex-direction: column-reverse; + -ms-align-items: flex-start; + align-items: flex-start; +} + +.flex-col-rev-r { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column-reverse; + -moz-flex-direction: column-reverse; + -ms-flex-direction: column-reverse; + -o-flex-direction: column-reverse; + flex-direction: column-reverse; + -ms-align-items: flex-end; + align-items: flex-end; +} + +.flex-col-rev-c { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column-reverse; + -moz-flex-direction: column-reverse; + -ms-flex-direction: column-reverse; + -o-flex-direction: column-reverse; + flex-direction: column-reverse; + -ms-align-items: center; + align-items: center; +} + +.flex-col-rev-str { + display: -webkit-box; + display: -webkit-flex; + display: -moz-box; + display: -ms-flexbox; + display: flex; + -webkit-flex-direction: column-reverse; + -moz-flex-direction: column-reverse; + -ms-flex-direction: column-reverse; + -o-flex-direction: column-reverse; + flex-direction: column-reverse; + -ms-align-items: stretch; + align-items: stretch; +} + +.ab-c-m { + position: absolute; + top: 50%; + left: 50%; + -webkit-transform: translate(-50%, -50%); + -moz-transform: translate(-50%, -50%); + -ms-transform: translate(-50%, -50%); + -o-transform: translate(-50%, -50%); + transform: translate(-50%, -50%); +} + +.ab-c-t { + position: absolute; + top: 0px; + left: 50%; + -webkit-transform: translateX(-50%); + -moz-transform: translateX(-50%); + -ms-transform: translateX(-50%); + -o-transform: translateX(-50%); + transform: translateX(-50%); +} + +.ab-c-b { + position: absolute; + bottom: 0px; + left: 50%; + -webkit-transform: translateX(-50%); + -moz-transform: translateX(-50%); + -ms-transform: translateX(-50%); + -o-transform: translateX(-50%); + transform: translateX(-50%); +} + +.ab-l-m { + position: absolute; + left: 0px; + top: 50%; + -webkit-transform: translateY(-50%); + -moz-transform: translateY(-50%); + -ms-transform: translateY(-50%); + -o-transform: translateY(-50%); + transform: translateY(-50%); +} + +.ab-r-m { + position: absolute; + right: 0px; + top: 50%; + -webkit-transform: translateY(-50%); + -moz-transform: translateY(-50%); + -ms-transform: translateY(-50%); + -o-transform: translateY(-50%); + transform: translateY(-50%); +} + +.ab-t-l { + position: absolute; + left: 0px; + top: 0px; +} + +.ab-t-r { + position: absolute; + right: 0px; + top: 0px; +} + +.ab-b-l { + position: absolute; + left: 0px; + bottom: 0px; +} + +.ab-b-r { + position: absolute; + right: 0px; + bottom: 0px; +} diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/distro.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/distro.all.log.html new file mode 100644 index 0000000..4a17eef --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/distro.all.log.html @@ -0,0 +1,773 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /etc/debian-release
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /etc/debian_version
+
+
+ + + + + + +
+
stretch/sid
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "setroubleshoot"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "prelink"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "mcstrans"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "libselinux"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "xorg-x11*"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg-query -f "iptables"
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec dpkg -l
+
+
+ + + + + + +
+
Desired=Unknown/Install/Remove/Purge/Hold
+| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
+|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
+||/ Name                            Version                                       Architecture Description
++++-===============================-=============================================-============-===============================================================================
+ii  acl                             2.2.52-3                                      amd64        Access control list utilities
+ii  acpid                           1:2.0.26-1ubuntu2                             amd64        Advanced Configuration and Power Interface event daemon
+ii  adduser                         3.113+nmu3ubuntu4                             all          add and remove users and groups
+ii  apt                             1.2.32ubuntu0.2                               amd64        commandline package manager
+ii  apt-transport-https             1.2.32ubuntu0.2                               amd64        https download transport for APT
+ii  apt-utils                       1.2.32ubuntu0.2                               amd64        package management related utility programs
+ii  aptitude                        0.7.4-2ubuntu2                                amd64        terminal-based package manager
+ii  aptitude-common                 0.7.4-2ubuntu2                                all          architecture independent files for the aptitude package manager
+ii  at                              3.1.18-2ubuntu1                               amd64        Delayed job execution and batch processing
+ii  base-files                      9.4ubuntu4.13                                 amd64        Debian base system miscellaneous files
+ii  base-passwd                     3.5.39                                        amd64        Debian base system master password and group files
+ii  bash                            4.3-14ubuntu1.4                               amd64        GNU Bourne Again SHell
+ii  bind9-host                      1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Version of 'host' bundled with BIND 9.X
+ii  bsdmainutils                    9.0.6ubuntu3                                  amd64        collection of more utilities from FreeBSD
+ii  bsdutils                        1:2.27.1-6ubuntu3.10                          amd64        basic utilities from 4.4BSD-Lite
+ii  btrfs-tools                     4.4-1ubuntu1.1                                amd64        Checksumming Copy on Write Filesystem utilities
+ii  busybox-initramfs               1:1.22.0-15ubuntu1.4                          amd64        Standalone shell setup for initramfs
+ii  bzip2                           1.0.6-8ubuntu0.2                              amd64        high-quality block-sorting file compressor - utilities
+ii  ca-certificates                 20201027ubuntu0.16.04.1                       all          Common CA certificates
+ii  cloud-guest-utils               0.27-0ubuntu25.2                              all          cloud guest utilities
+ii  cloud-init                      20.3-2-g371b392c-0ubuntu1~16.04.1             all          Init scripts for cloud instances
+ii  console-setup                   1.108ubuntu15.5                               all          console font and keymap setup program
+ii  console-setup-linux             1.108ubuntu15.5                               all          Linux specific part of console-setup
+ii  coreutils                       8.25-2ubuntu3~16.04                           amd64        GNU core utilities
+ii  cpio                            2.11+dfsg-5ubuntu1.1                          amd64        GNU cpio -- a program to manage archives of files
+ii  cron                            3.0pl1-128ubuntu2                             amd64        process scheduling daemon
+ii  cryptsetup                      2:1.6.6-5ubuntu2.1                            amd64        disk encryption support - startup scripts
+ii  cryptsetup-bin                  2:1.6.6-5ubuntu2.1                            amd64        disk encryption support - command line tools
+ii  curl                            7.47.0-1ubuntu2.18                            amd64        command line tool for transferring data with URL syntax
+ii  dash                            0.5.8-2.1ubuntu2                              amd64        POSIX-compliant shell
+ii  dbus                            1.10.6-1ubuntu3.6                             amd64        simple interprocess messaging system (daemon and utilities)
+ii  debconf                         1.5.58ubuntu2                                 all          Debian configuration management system
+ii  debconf-i18n                    1.5.58ubuntu2                                 all          full internationalization support for debconf
+ii  debianutils                     4.7                                           amd64        Miscellaneous utilities specific to Debian
+ii  dh-python                       2.20151103ubuntu1.2                           all          Debian helper tools for packaging Python libraries and applications
+ii  diffutils                       1:3.3-3                                       amd64        File comparison utilities
+ii  dirmngr                         2.1.11-6ubuntu2.1                             amd64        server for managing certificate revocation lists
+ii  distro-info-data                0.28ubuntu0.16                                all          information about the distributions' releases (data files)
+ii  dmeventd                        2:1.02.110-1ubuntu10                          amd64        Linux Kernel Device Mapper event daemon
+ii  dmsetup                         2:1.02.110-1ubuntu10                          amd64        Linux Kernel Device Mapper userspace library
+ii  dpkg                            1.18.4ubuntu1.6                               amd64        Debian package management system
+ii  e2fslibs:amd64                  1.42.13-1ubuntu1.2                            amd64        ext2/ext3/ext4 file system libraries
+ii  e2fsprogs                       1.42.13-1ubuntu1.2                            amd64        ext2/ext3/ext4 file system utilities
+ii  eatmydata                       105-3                                         all          Library and utilities designed to disable fsync and friends
+ii  efibootmgr                      0.12-4                                        amd64        Interact with the EFI Boot Manager
+ii  ethtool                         1:4.5-1                                       amd64        display or change Ethernet device settings
+ii  findutils                       4.6.0+git+20160126-2                          amd64        utilities for finding files--find, xargs
+ii  gcc-5-base:amd64                5.4.0-6ubuntu1~16.04.12                       amd64        GCC, the GNU Compiler Collection (base package)
+ii  gcc-6-base:amd64                6.0.1-0ubuntu1                                amd64        GCC, the GNU Compiler Collection (base package)
+ii  gdisk                           1.0.1-1build1                                 amd64        GPT fdisk text-mode partitioning tool
+ii  gettext-base                    0.19.7-2ubuntu3.1                             amd64        GNU Internationalization utilities for the base system
+ii  gir1.2-glib-2.0:amd64           1.46.0-3ubuntu1                               amd64        Introspection data for GLib, GObject, Gio and GModule
+ii  git                             1:2.7.4-0ubuntu1.9                            amd64        fast, scalable, distributed revision control system
+ii  git-man                         1:2.7.4-0ubuntu1.9                            all          fast, scalable, distributed revision control system (manual pages)
+ii  gnupg                           1.4.20-1ubuntu3.3                             amd64        GNU privacy guard - a free PGP replacement
+ii  gnupg-agent                     2.1.11-6ubuntu2.1                             amd64        GNU privacy guard - cryptographic agent
+ii  gnupg2                          2.1.11-6ubuntu2.1                             amd64        GNU privacy guard - a free PGP replacement (new v2.x)
+ii  gpgv                            1.4.20-1ubuntu3.3                             amd64        GNU privacy guard - signature verification tool
+ii  grep                            2.25-1~16.04.1                                amd64        GNU grep, egrep and fgrep
+ii  groff-base                      1.22.3-7                                      amd64        GNU troff text-formatting system (base system components)
+ii  grub-common                     2.02~beta2-36ubuntu3.29                       amd64        GRand Unified Bootloader (common files)
+ii  grub-efi-amd64                  2.02~beta2-36ubuntu3.29                       amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 version)
+ii  grub-efi-amd64-bin              2.02~beta2-36ubuntu3.29                       amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 binaries)
+ii  grub-pc-bin                     2.02~beta2-36ubuntu3.29                       amd64        GRand Unified Bootloader, version 2 (PC/BIOS binaries)
+ii  grub2-common                    2.02~beta2-36ubuntu3.29                       amd64        GRand Unified Bootloader (common files for version 2)
+ii  gzip                            1.6-4ubuntu1                                  amd64        GNU compression utilities
+ii  hc-utils                        0.0.3-1                                       all          A set of tools for the Hetzner Cloud platform
+ii  host                            1:9.10.3.dfsg.P4-8ubuntu1.17                  all          Transitional package
+ii  hostname                        3.16ubuntu2                                   amd64        utility to set/show the host name or domain name
+ii  htop                            2.0.1-1ubuntu1                                amd64        interactive processes viewer
+ii  ifupdown                        0.8.10ubuntu1.4                               amd64        high level tools to configure network interfaces
+ii  init                            1.29ubuntu4                                   amd64        System-V-like init utilities - metapackage
+ii  init-system-helpers             1.29ubuntu4                                   all          helper tools for all init systems
+ii  initramfs-tools                 0.122ubuntu8.17                               all          generic modular initramfs generator (automation)
+ii  initramfs-tools-bin             0.122ubuntu8.17                               amd64        binaries used by initramfs-tools
+ii  initramfs-tools-core            0.122ubuntu8.17                               all          generic modular initramfs generator (core tools)
+ii  initscripts                     2.88dsf-59.3ubuntu2                           amd64        scripts for initializing and shutting down the system
+ii  insserv                         1.14.0-5ubuntu3                               amd64        boot sequence organizer using LSB init.d script dependency information
+ii  iproute2                        4.3.0-1ubuntu3.16.04.5                        amd64        networking and traffic control tools
+ii  iptables                        1.6.0-2ubuntu3                                amd64        administration tools for packet filtering and NAT
+ii  iputils-ping                    3:20121221-5ubuntu2                           amd64        Tools to test the reachability of network hosts
+ii  isc-dhcp-client                 4.3.3-5ubuntu12.10                            amd64        DHCP client for automatically obtaining an IP address
+ii  isc-dhcp-common                 4.3.3-5ubuntu12.10                            amd64        common files used by all of the isc-dhcp packages
+ii  iso-codes                       3.65-1                                        all          ISO language, territory, currency, script codes and their translations
+ii  kbd                             1.15.5-1ubuntu5                               amd64        Linux console font and keytable utilities
+ii  keyboard-configuration          1.108ubuntu15.5                               all          system-wide keyboard preferences
+ii  klibc-utils                     2.0.4-8ubuntu1.16.04.4                        amd64        small utilities built with klibc for early boot
+ii  kmod                            22-1ubuntu5.2                                 amd64        tools for managing Linux kernel modules
+ii  less                            481-2.1ubuntu0.2                              amd64        pager program similar to more
+ii  libacl1:amd64                   2.2.52-3                                      amd64        Access control list shared library
+ii  libapparmor1:amd64              2.10.95-0ubuntu2.11                           amd64        changehat AppArmor library
+ii  libapt-inst2.0:amd64            1.2.32ubuntu0.2                               amd64        deb package format runtime library
+ii  libapt-pkg5.0:amd64             1.2.32ubuntu0.2                               amd64        package management runtime library
+ii  libasn1-8-heimdal:amd64         1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - ASN.1 library
+ii  libasprintf0v5:amd64            0.19.7-2ubuntu3.1                             amd64        GNU library to use fprintf and friends in C++
+ii  libassuan0:amd64                2.4.2-2                                       amd64        IPC library for the GnuPG components
+ii  libatm1:amd64                   1:2.5.1-1.5                                   amd64        shared library for ATM (Asynchronous Transfer Mode)
+ii  libattr1:amd64                  1:2.4.47-2                                    amd64        Extended attribute shared library
+ii  libaudit-common                 1:2.4.5-1ubuntu2.1                            all          Dynamic library for security auditing - common files
+ii  libaudit1:amd64                 1:2.4.5-1ubuntu2.1                            amd64        Dynamic library for security auditing
+ii  libbind9-140:amd64              1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        BIND9 Shared Library used by BIND
+ii  libblkid1:amd64                 2.27.1-6ubuntu3.10                            amd64        block device ID library
+ii  libboost-iostreams1.58.0:amd64  1.58.0+dfsg-5ubuntu3.1                        amd64        Boost.Iostreams Library
+ii  libbsd0:amd64                   0.8.2-1ubuntu0.1                              amd64        utility functions from BSD systems - shared library
+ii  libbz2-1.0:amd64                1.0.6-8ubuntu0.2                              amd64        high-quality block-sorting file compressor library - runtime
+ii  libc-bin                        2.23-0ubuntu11.2                              amd64        GNU C Library: Binaries
+ii  libc6:amd64                     2.23-0ubuntu11.2                              amd64        GNU C Library: Shared libraries
+ii  libcap-ng0:amd64                0.7.7-1                                       amd64        An alternate POSIX capabilities library
+ii  libcap2:amd64                   1:2.24-12                                     amd64        POSIX 1003.1e capabilities (library)
+ii  libcap2-bin                     1:2.24-12                                     amd64        POSIX 1003.1e capabilities (utilities)
+ii  libcomerr2:amd64                1.42.13-1ubuntu1.2                            amd64        common error description library
+ii  libcryptsetup4:amd64            2:1.6.6-5ubuntu2.1                            amd64        disk encryption support - shared library
+ii  libcurl3-gnutls:amd64           7.47.0-1ubuntu2.18                            amd64        easy-to-use client-side URL transfer library (GnuTLS flavour)
+ii  libcwidget3v5:amd64             0.5.17-4ubuntu2                               amd64        high-level terminal interface library for C++ (runtime files)
+ii  libdb5.3:amd64                  5.3.28-11ubuntu0.2                            amd64        Berkeley v5.3 Database Libraries [runtime]
+ii  libdbus-1-3:amd64               1.10.6-1ubuntu3.6                             amd64        simple interprocess messaging system (library)
+ii  libdbus-glib-1-2:amd64          0.106-1                                       amd64        simple interprocess messaging system (GLib-based shared library)
+ii  libdebconfclient0:amd64         0.198ubuntu1                                  amd64        Debian Configuration Management System (C-implementation library)
+ii  libdevmapper-event1.02.1:amd64  2:1.02.110-1ubuntu10                          amd64        Linux Kernel Device Mapper event support library
+ii  libdevmapper1.02.1:amd64        2:1.02.110-1ubuntu10                          amd64        Linux Kernel Device Mapper userspace library
+ii  libdns-export162                1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Exported DNS Shared Library
+ii  libdns162:amd64                 1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        DNS Shared Library used by BIND
+ii  libdrm-common                   2.4.91-2~16.04.1                              all          Userspace interface to kernel DRM services -- common files
+ii  libdrm2:amd64                   2.4.91-2~16.04.1                              amd64        Userspace interface to kernel DRM services -- runtime
+ii  libeatmydata1:amd64             105-3                                         amd64        Library and utilities to disable fsync and friends - shared library
+ii  libedit2:amd64                  3.1-20150325-1ubuntu2                         amd64        BSD editline and history libraries
+ii  libefivar0:amd64                0.23-2                                        amd64        Library to manage UEFI variables
+ii  liberror-perl                   0.17-1.2                                      all          Perl module for error/exception handling in an OO-ish way
+ii  libestr0                        0.1.10-1                                      amd64        Helper functions for handling strings (lib)
+ii  libexpat1:amd64                 2.1.0-7ubuntu0.16.04.5                        amd64        XML parsing C library - runtime library
+ii  libfdisk1:amd64                 2.27.1-6ubuntu3.10                            amd64        fdisk partitioning library
+ii  libffi6:amd64                   3.2.1-4                                       amd64        Foreign Function Interface library runtime
+ii  libfreetype6:amd64              2.6.1-0.1ubuntu2.5                            amd64        FreeType 2 font engine, shared library files
+ii  libfribidi0:amd64               0.19.7-1                                      amd64        Free Implementation of the Unicode BiDi algorithm
+ii  libfuse2:amd64                  2.9.4-1ubuntu3.1                              amd64        Filesystem in Userspace (library)
+ii  libgcc1:amd64                   1:6.0.1-0ubuntu1                              amd64        GCC support library
+ii  libgcrypt20:amd64               1.6.5-2ubuntu0.6                              amd64        LGPL Crypto library - runtime library
+ii  libgdbm3:amd64                  1.8.3-13.1                                    amd64        GNU dbm database routines (runtime version)
+ii  libgeoip1:amd64                 1.6.9-1                                       amd64        non-DNS IP-to-country resolver library
+ii  libgirepository-1.0-1:amd64     1.46.0-3ubuntu1                               amd64        Library for handling GObject introspection data (runtime library)
+ii  libglib2.0-0:amd64              2.48.2-0ubuntu4.6                             amd64        GLib library of C routines
+ii  libgmp10:amd64                  2:6.1.0+dfsg-2                                amd64        Multiprecision arithmetic library
+ii  libgnutls-openssl27:amd64       3.4.10-4ubuntu1.8                             amd64        GNU TLS library - OpenSSL wrapper
+ii  libgnutls30:amd64               3.4.10-4ubuntu1.8                             amd64        GNU TLS library - main runtime library
+ii  libgpg-error0:amd64             1.21-2ubuntu1                                 amd64        library for common error values and messages in GnuPG components
+ii  libgpm2:amd64                   1.20.4-6.1                                    amd64        General Purpose Mouse - shared library
+ii  libgssapi-krb5-2:amd64          1.13.2+dfsg-5ubuntu2.2                        amd64        MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
+ii  libgssapi3-heimdal:amd64        1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - GSSAPI support library
+ii  libhcrypto4-heimdal:amd64       1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - crypto library
+ii  libheimbase1-heimdal:amd64      1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - Base library
+ii  libheimntlm0-heimdal:amd64      1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - NTLM support library
+ii  libhogweed4:amd64               3.2-1ubuntu0.16.04.1                          amd64        low level cryptographic library (public-key cryptos)
+ii  libhx509-5-heimdal:amd64        1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - X509 support library
+ii  libicu55:amd64                  55.1-7ubuntu0.5                               amd64        International Components for Unicode
+ii  libidn11:amd64                  1.32-3ubuntu1.2                               amd64        GNU Libidn library, implementation of IETF IDN specifications
+ii  libisc-export160                1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Exported ISC Shared Library
+ii  libisc160:amd64                 1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        ISC Shared Library used by BIND
+ii  libisccc140:amd64               1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Command Channel Library used by BIND
+ii  libisccfg140:amd64              1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Config File Handling Library used by BIND
+ii  libjson-c2:amd64                0.11-4ubuntu2.6                               amd64        JSON manipulation library - shared library
+ii  libk5crypto3:amd64              1.13.2+dfsg-5ubuntu2.2                        amd64        MIT Kerberos runtime libraries - Crypto Library
+ii  libkeyutils1:amd64              1.5.9-8ubuntu1                                amd64        Linux Key Management Utilities (library)
+ii  libklibc                        2.0.4-8ubuntu1.16.04.4                        amd64        minimal libc subset for use with initramfs
+ii  libkmod2:amd64                  22-1ubuntu5.2                                 amd64        libkmod shared library
+ii  libkrb5-26-heimdal:amd64        1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - libraries
+ii  libkrb5-3:amd64                 1.13.2+dfsg-5ubuntu2.2                        amd64        MIT Kerberos runtime libraries
+ii  libkrb5support0:amd64           1.13.2+dfsg-5ubuntu2.2                        amd64        MIT Kerberos runtime libraries - Support library
+ii  libksba8:amd64                  1.3.3-1ubuntu0.16.04.1                        amd64        X.509 and CMS support library
+ii  libldap-2.4-2:amd64             2.4.42+dfsg-2ubuntu3.11                       amd64        OpenLDAP libraries
+ii  liblocale-gettext-perl          1.07-1build1                                  amd64        module using libc functions for internationalization in Perl
+ii  liblvm2app2.2:amd64             2.02.133-1ubuntu10                            amd64        LVM2 application library
+ii  liblvm2cmd2.02:amd64            2.02.133-1ubuntu10                            amd64        LVM2 command library
+ii  liblwres141:amd64               1:9.10.3.dfsg.P4-8ubuntu1.17                  amd64        Lightweight Resolver Library used by BIND
+ii  liblz4-1:amd64                  0.0~r131-2ubuntu2                             amd64        Fast LZ compression algorithm library - runtime
+ii  liblzma5:amd64                  5.1.1alpha+20120614-2ubuntu2                  amd64        XZ-format compression library
+ii  liblzo2-2:amd64                 2.08-1.2                                      amd64        data compression library
+ii  libmagic1:amd64                 1:5.25-2ubuntu1.4                             amd64        File type determination library using "magic" numbers
+ii  libmnl0:amd64                   1.0.3-5                                       amd64        minimalistic Netlink communication library
+ii  libmount1:amd64                 2.27.1-6ubuntu3.10                            amd64        device mounting library
+ii  libmpdec2:amd64                 2.4.2-1                                       amd64        library for decimal floating point arithmetic (runtime library)
+ii  libncurses5:amd64               6.0+20160213-1ubuntu1                         amd64        shared libraries for terminal handling
+ii  libncursesw5:amd64              6.0+20160213-1ubuntu1                         amd64        shared libraries for terminal handling (wide character support)
+ii  libnettle6:amd64                3.2-1ubuntu0.16.04.1                          amd64        low level cryptographic library (symmetric and one-way cryptos)
+ii  libnewt0.52:amd64               0.52.18-1ubuntu2                              amd64        Not Erik's Windowing Toolkit - text mode windowing with slang
+ii  libnfnetlink0:amd64             1.0.1-3                                       amd64        Netfilter netlink library
+ii  libnih1:amd64                   1.0.3-4.3ubuntu1                              amd64        NIH Utility Library
+ii  libnpth0:amd64                  1.2-3                                         amd64        replacement for GNU Pth using system threads
+ii  libp11-kit0:amd64               0.23.2-5~ubuntu16.04.1                        amd64        library for loading and coordinating access to PKCS#11 modules - runtime
+ii  libpam-modules:amd64            1.1.8-3.2ubuntu2.3                            amd64        Pluggable Authentication Modules for PAM
+ii  libpam-modules-bin              1.1.8-3.2ubuntu2.3                            amd64        Pluggable Authentication Modules for PAM - helper binaries
+ii  libpam-runtime                  1.1.8-3.2ubuntu2.3                            all          Runtime support for the PAM library
+ii  libpam-systemd:amd64            229-4ubuntu21.29                              amd64        system and service manager - PAM module
+ii  libpam0g:amd64                  1.1.8-3.2ubuntu2.3                            amd64        Pluggable Authentication Modules library
+ii  libpci3:amd64                   1:3.3.1-1.1ubuntu1.3                          amd64        Linux PCI Utilities (shared library)
+ii  libpcre3:amd64                  2:8.38-3.1                                    amd64        Perl 5 Compatible Regular Expression Library - runtime files
+ii  libperl5.22:amd64               5.22.1-9ubuntu0.9                             amd64        shared Perl library
+ii  libpipeline1:amd64              1.4.1-2                                       amd64        pipeline manipulation library
+ii  libplymouth4:amd64              0.9.2-3ubuntu13.5                             amd64        graphical boot animation and logger - shared libraries
+ii  libpng12-0:amd64                1.2.54-1ubuntu1.1                             amd64        PNG library - runtime
+ii  libpopt0:amd64                  1.16-10                                       amd64        lib for parsing cmdline parameters
+ii  libprocps4:amd64                2:3.3.10-4ubuntu2.5                           amd64        library for accessing process information from /proc
+ii  libpython3-stdlib:amd64         3.5.1-3                                       amd64        interactive high-level object-oriented language (default python3 version)
+ii  libpython3.5:amd64              3.5.2-2ubuntu0~16.04.12                       amd64        Shared Python runtime library (version 3.5)
+ii  libpython3.5-minimal:amd64      3.5.2-2ubuntu0~16.04.12                       amd64        Minimal subset of the Python language (version 3.5)
+ii  libpython3.5-stdlib:amd64       3.5.2-2ubuntu0~16.04.12                       amd64        Interactive high-level object-oriented language (standard library, version 3.5)
+ii  libreadline5:amd64              5.2+dfsg-3build1                              amd64        GNU readline and history libraries, run-time libraries
+ii  libreadline6:amd64              6.3-8ubuntu2                                  amd64        GNU readline and history libraries, run-time libraries
+ii  libroken18-heimdal:amd64        1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - roken support library
+ii  librtmp1:amd64                  2.4+20151223.gitfa8646d-1ubuntu0.1            amd64        toolkit for RTMP streams (shared library)
+ii  libsasl2-2:amd64                2.1.26.dfsg1-14ubuntu0.2                      amd64        Cyrus SASL - authentication abstraction library
+ii  libsasl2-modules-db:amd64       2.1.26.dfsg1-14ubuntu0.2                      amd64        Cyrus SASL - pluggable authentication modules (DB)
+ii  libseccomp2:amd64               2.4.3-1ubuntu3.16.04.3                        amd64        high level interface to Linux seccomp filter
+ii  libselinux1:amd64               2.4-3build2                                   amd64        SELinux runtime shared libraries
+ii  libsemanage-common              2.3-1build3                                   all          Common files for SELinux policy management libraries
+ii  libsemanage1:amd64              2.3-1build3                                   amd64        SELinux policy management library
+ii  libsepol1:amd64                 2.4-2                                         amd64        SELinux library for manipulating binary security policies
+ii  libsigc++-2.0-0v5:amd64         2.6.2-1                                       amd64        type-safe Signal Framework for C++ - runtime
+ii  libslang2:amd64                 2.3.0-2ubuntu1.1                              amd64        S-Lang programming library - runtime version
+ii  libsmartcols1:amd64             2.27.1-6ubuntu3.10                            amd64        smart column output alignment library
+ii  libsqlite3-0:amd64              3.11.0-1ubuntu1.5                             amd64        SQLite 3 shared library
+ii  libss2:amd64                    1.42.13-1ubuntu1.2                            amd64        command-line interface parsing library
+ii  libssl1.0.0:amd64               1.0.2g-1ubuntu4.18                            amd64        Secure Sockets Layer toolkit - shared libraries
+ii  libstdc++6:amd64                5.4.0-6ubuntu1~16.04.12                       amd64        GNU Standard C++ Library v3
+ii  libsystemd0:amd64               229-4ubuntu21.29                              amd64        systemd utility library
+ii  libtasn1-6:amd64                4.7-3ubuntu0.16.04.3                          amd64        Manage ASN.1 structures (runtime)
+ii  libtext-charwidth-perl          0.04-7build5                                  amd64        get display widths of characters on the terminal
+ii  libtext-iconv-perl              1.7-5build4                                   amd64        converts between character sets in Perl
+ii  libtext-wrapi18n-perl           0.06-7.1                                      all          internationalized substitute of Text::Wrap
+ii  libtinfo5:amd64                 6.0+20160213-1ubuntu1                         amd64        shared low-level terminfo library for terminal handling
+ii  libudev1:amd64                  229-4ubuntu21.29                              amd64        libudev shared library
+ii  libusb-0.1-4:amd64              2:0.1.12-28                                   amd64        userspace USB programming library
+ii  libusb-1.0-0:amd64              2:1.0.20-1                                    amd64        userspace USB programming library
+ii  libustr-1.0-1:amd64             1.0.4-5                                       amd64        Micro string library: shared library
+ii  libuuid1:amd64                  2.27.1-6ubuntu3.10                            amd64        Universally Unique ID library
+ii  libwind0-heimdal:amd64          1.7~git20150920+dfsg-4ubuntu1.16.04.1         amd64        Heimdal Kerberos - stringprep implementation
+ii  libwrap0:amd64                  7.6.q-25                                      amd64        Wietse Venema's TCP wrappers library
+ii  libxapian22v5:amd64             1.2.22-2                                      amd64        Search engine library
+ii  libxml2:amd64                   2.9.3+dfsg1-1ubuntu0.7                        amd64        GNOME XML library
+ii  libxtables11:amd64              1.6.0-2ubuntu3                                amd64        netfilter xtables library
+ii  libyaml-0-2:amd64               0.1.6-3                                       amd64        Fast YAML 1.1 parser and emitter library
+ii  linux-base                      4.5ubuntu1.2~16.04.1                          all          Linux image base package
+ii  linux-firmware                  1.157.23                                      all          Firmware for Linux kernel drivers
+ii  linux-image-4.4.0-197-generic   4.4.0-197.229                                 amd64        Signed kernel image generic
+ii  linux-image-virtual             4.4.0.197.203                                 amd64        This package will always depend on the latest minimal generic kernel image.
+ii  linux-modules-4.4.0-197-generic 4.4.0-197.229                                 amd64        Linux kernel extra modules for version 4.4.0 on 64 bit x86 SMP
+ii  locales                         2.23-0ubuntu11.2                              all          GNU C Library: National Language (locale) data [support]
+ii  login                           1:4.2-3.1ubuntu5.4                            amd64        system login tools
+ii  logrotate                       3.8.7-2ubuntu2.16.04.2                        amd64        Log rotation utility
+ii  lsb-base                        9.20160110ubuntu0.2                           all          Linux Standard Base init script functionality
+ii  lsb-release                     9.20160110ubuntu0.2                           all          Linux Standard Base version reporting utility
+ii  lvm2                            2.02.133-1ubuntu10                            amd64        Linux Logical Volume Manager
+ii  makedev                         2.3.1-93ubuntu2~ubuntu16.04.1                 all          creates device files in /dev
+ii  man-db                          2.7.5-1                                       amd64        on-line manual pager
+ii  mawk                            1.3.3-17ubuntu2                               amd64        a pattern scanning and text processing language
+ii  mdadm                           3.3-2ubuntu7.6                                amd64        tool to administer Linux MD arrays (software RAID)
+ii  mime-support                    3.59ubuntu1                                   all          MIME files 'mime.types' & 'mailcap', and support programs
+ii  mokutil                         0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1     amd64        tools for manipulating machine owner keys
+ii  mount                           2.27.1-6ubuntu3.10                            amd64        tools for mounting and manipulating filesystems
+ii  mtr-tiny                        0.86-1ubuntu0.1                               amd64        Full screen ncurses traceroute tool
+ii  multiarch-support               2.23-0ubuntu11.2                              amd64        Transitional package to ensure multiarch compatibility
+ii  nano                            2.5.3-2ubuntu2                                amd64        small, friendly text editor inspired by Pico
+ii  ncurses-base                    6.0+20160213-1ubuntu1                         all          basic terminal type definitions
+ii  ncurses-bin                     6.0+20160213-1ubuntu1                         amd64        terminal-related programs and man pages
+ii  ncurses-term                    6.0+20160213-1ubuntu1                         all          additional terminal type definitions
+ii  net-tools                       1.60-26ubuntu1                                amd64        NET-3 networking toolkit
+ii  netbase                         5.3                                           all          Basic TCP/IP networking system
+ii  netcat-openbsd                  1.105-7ubuntu1                                amd64        TCP/IP swiss army knife
+ii  openssh-client                  1:7.2p2-4ubuntu2.10                           amd64        secure shell (SSH) client, for secure access to remote machines
+ii  openssh-server                  1:7.2p2-4ubuntu2.10                           amd64        secure shell (SSH) server, for secure access from remote machines
+ii  openssh-sftp-server             1:7.2p2-4ubuntu2.10                           amd64        secure shell (SSH) sftp server module, for SFTP access from remote machines
+ii  openssl                         1.0.2g-1ubuntu4.18                            amd64        Secure Sockets Layer toolkit - cryptographic utility
+ii  passwd                          1:4.2-3.1ubuntu5.4                            amd64        change and administer password and group data
+ii  patch                           2.7.5-1ubuntu0.16.04.2                        amd64        Apply a diff file to an original
+ii  pciutils                        1:3.3.1-1.1ubuntu1.3                          amd64        Linux PCI Utilities
+ii  perl                            5.22.1-9ubuntu0.9                             amd64        Larry Wall's Practical Extraction and Report Language
+ii  perl-base                       5.22.1-9ubuntu0.9                             amd64        minimal Perl system
+ii  perl-modules-5.22               5.22.1-9ubuntu0.9                             all          Core Perl modules
+ii  pinentry-curses                 0.9.7-3                                       amd64        curses-based PIN or pass-phrase entry dialog for GnuPG
+ii  plymouth                        0.9.2-3ubuntu13.5                             amd64        boot animation, logger and I/O multiplexer
+ii  pollinate                       4.33-0ubuntu1~16.04.1                         all          seed the pseudo random number generator
+ii  powermgmt-base                  1.31+nmu1                                     all          Common utils and configs for power management
+ii  procps                          2:3.3.10-4ubuntu2.5                           amd64        /proc file system utilities
+ii  python-apt-common               1.1.0~beta1ubuntu0.16.04.10                   all          Python interface to libapt-pkg (locales)
+ii  python3                         3.5.1-3                                       amd64        interactive high-level object-oriented language (default python3 version)
+ii  python3-apt                     1.1.0~beta1ubuntu0.16.04.10                   amd64        Python 3 interface to libapt-pkg
+ii  python3-blinker                 1.3.dfsg2-1build1                             all          fast, simple object-to-object and broadcast signaling library
+ii  python3-cffi-backend            1.5.2-1ubuntu1                                amd64        Foreign Function Interface for Python 3 calling C code - runtime
+ii  python3-chardet                 2.3.0-2                                       all          universal character encoding detector for Python3
+ii  python3-configobj               5.0.6-2                                       all          simple but powerful config file reader and writer for Python 3
+ii  python3-cryptography            1.2.3-1ubuntu0.3                              amd64        Python library exposing cryptographic recipes and primitives (Python 3)
+ii  python3-dbus                    1.2.0-3                                       amd64        simple interprocess messaging system (Python 3 interface)
+ii  python3-gi                      3.20.0-0ubuntu1                               amd64        Python 3 bindings for gobject-introspection libraries
+ii  python3-idna                    2.0-3                                         all          Python IDNA2008 (RFC 5891) handling (Python 3)
+ii  python3-jinja2                  2.8-1ubuntu0.1                                all          small but fast and easy to use stand-alone template engine
+ii  python3-json-pointer            1.9-3                                         all          resolve JSON pointers - Python 3.x
+ii  python3-jsonpatch               1.19-3                                        all          library to apply JSON patches - Python 3.x
+ii  python3-jwt                     1.3.0-1ubuntu0.1                              all          Python 3 implementation of JSON Web Token
+ii  python3-markupsafe              0.23-2build2                                  amd64        HTML/XHTML/XML string library for Python 3
+ii  python3-minimal                 3.5.1-3                                       amd64        minimal subset of the Python language (default python3 version)
+ii  python3-oauthlib                1.0.3-1                                       all          generic, spec-compliant implementation of OAuth for Python3
+ii  python3-pkg-resources           20.7.0-1                                      all          Package Discovery and Resource Access using pkg_resources
+ii  python3-pyasn1                  0.1.9-1                                       all          ASN.1 library for Python (Python 3 module)
+ii  python3-pycurl                  7.43.0-1ubuntu1                               amd64        Python bindings to libcurl (Python 3)
+ii  python3-requests                2.9.1-3ubuntu0.1                              all          elegant and simple HTTP library for Python3, built for human beings
+ii  python3-serial                  3.0.1-1                                       all          pyserial - module encapsulating access for the serial port
+ii  python3-six                     1.10.0-3                                      all          Python 2 and 3 compatibility library (Python 3 interface)
+ii  python3-software-properties     0.96.20.10                                    all          manage the repositories that you install software from
+ii  python3-urllib3                 1.13.1-2ubuntu0.16.04.4                       all          HTTP library with thread-safe connection pooling for Python3
+ii  python3-yaml                    3.11-3build1                                  amd64        YAML parser and emitter for Python3
+ii  python3.5                       3.5.2-2ubuntu0~16.04.12                       amd64        Interactive high-level object-oriented language (version 3.5)
+ii  python3.5-minimal               3.5.2-2ubuntu0~16.04.12                       amd64        Minimal subset of the Python language (version 3.5)
+ii  qemu-guest-agent                1:2.5+dfsg-5ubuntu10.48                       amd64        Guest-side qemu-system agent
+ii  readline-common                 6.3-8ubuntu2                                  all          GNU readline and history libraries, common files
+ii  resolvconf                      1.78ubuntu7                                   all          name server information handler
+ii  rsync                           3.1.1-3ubuntu1.3                              amd64        fast, versatile, remote (and local) file-copying tool
+ii  rsyslog                         8.16.0-1ubuntu3.1                             amd64        reliable system and kernel logging daemon
+ii  sbsigntool                      0.6-0ubuntu10.1                               amd64        utility for signing and verifying files for UEFI Secure Boot
+ii  sed                             4.2.2-7                                       amd64        The GNU sed stream editor
+ii  sensible-utils                  0.0.9ubuntu0.16.04.1                          all          Utilities for sensible alternative selection
+ii  shim                            15+1552672080.a4a1fbe-0ubuntu2                amd64        boot loader to chain-load signed boot loaders under Secure Boot
+ii  shim-signed                     1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2 amd64        Secure Boot chain-loading bootloader (Microsoft-signed binary)
+ii  software-properties-common      0.96.20.10                                    all          manage the repositories that you install software from (common)
+ii  ssh-import-id                   5.5-0ubuntu1                                  all          securely retrieve an SSH public key and install it locally
+ii  sudo                            1.8.16-0ubuntu1.9                             amd64        Provide limited super user privileges to specific users
+ii  systemd                         229-4ubuntu21.29                              amd64        system and service manager
+ii  systemd-sysv                    229-4ubuntu21.29                              amd64        system and service manager - SysV links
+ii  sysv-rc                         2.88dsf-59.3ubuntu2                           all          System-V-like runlevel change mechanism
+ii  sysvinit-utils                  2.88dsf-59.3ubuntu2                           amd64        System-V-like utilities
+ii  tar                             1.28-2.1ubuntu0.1                             amd64        GNU version of the tar archiving utility
+ii  tasksel                         3.34ubuntu3                                   all          tool for selecting tasks for installation on Debian systems
+ii  tasksel-data                    3.34ubuntu3                                   all          official tasks used for installation of Debian systems
+ii  tzdata                          2020d-0ubuntu0.16.04                          all          time zone and daylight-saving time data
+ii  ubuntu-advantage-tools          10ubuntu0.16.04.1                             all          management tools for Ubuntu Advantage
+ii  ubuntu-keyring                  2012.05.19.1                                  all          GnuPG keys of the Ubuntu archive
+ii  ucf                             3.0036                                        all          Update Configuration File(s): preserve user changes to config files
+ii  udev                            229-4ubuntu21.29                              amd64        /dev/ and hotplug management daemon
+ii  unattended-upgrades             1.1ubuntu1.18.04.7~16.04.6                    all          automatic installation of security upgrades
+ii  ureadahead                      0.100.0-19.1                                  amd64        Read required files in advance
+ii  usbutils                        1:007-4                                       amd64        Linux USB utilities
+ii  util-linux                      2.27.1-6ubuntu3.10                            amd64        miscellaneous system utilities
+ii  vim                             2:7.4.1689-3ubuntu1.5                         amd64        Vi IMproved - enhanced vi editor
+ii  vim-common                      2:7.4.1689-3ubuntu1.5                         amd64        Vi IMproved - Common files
+ii  vim-runtime                     2:7.4.1689-3ubuntu1.5                         all          Vi IMproved - Runtime files
+ii  vim-tiny                        2:7.4.1689-3ubuntu1.5                         amd64        Vi IMproved - enhanced vi editor - compact version
+ii  wget                            1.17.1-1ubuntu1.5                             amd64        retrieves files from the web
+ii  whiptail                        0.52.18-1ubuntu2                              amd64        Displays user-friendly dialog boxes from shell scripts
+ii  xfsprogs                        4.3.0+nmu1ubuntu1.1                           amd64        Utilities for managing the XFS filesystem
+ii  xkb-data                        2.16-1ubuntu1                                 all          X Keyboard Extension (XKB) configuration data
+ii  xz-utils                        5.1.1alpha+20120614-2ubuntu2                  amd64        XZ-format compression utilities
+ii  zlib1g:amd64                    1:1.2.8.dfsg-2ubuntu4.3                       amd64        compression library - runtime
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec apt-get --just-print upgrade
+
+
+ + + + + + +
+
Reading package lists...
+Building dependency tree...
+Reading state information...
+Calculating upgrade...
+The following packages have been kept back:
+  linux-image-virtual
+The following packages will be upgraded:
+  cloud-init libp11-kit0 python-apt-common python3-apt
+4 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
+Inst libp11-kit0 [0.23.2-5~ubuntu16.04.1] (0.23.2-5~ubuntu16.04.2 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64])
+Inst python-apt-common [1.1.0~beta1ubuntu0.16.04.10] (1.1.0~beta1ubuntu0.16.04.11 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [all])
+Inst python3-apt [1.1.0~beta1ubuntu0.16.04.10] (1.1.0~beta1ubuntu0.16.04.11 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64])
+Inst cloud-init [20.3-2-g371b392c-0ubuntu1~16.04.1] (20.4-0ubuntu1~16.04.1 Ubuntu:16.04/xenial-updates [all])
+Conf libp11-kit0 (0.23.2-5~ubuntu16.04.2 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64])
+Conf python-apt-common (1.1.0~beta1ubuntu0.16.04.11 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [all])
+Conf python3-apt (1.1.0~beta1ubuntu0.16.04.11 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64])
+Conf cloud-init (20.4-0ubuntu1~16.04.1 Ubuntu:16.04/xenial-updates [all])
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Black.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Black.ttf new file mode 100644 index 0000000000000000000000000000000000000000..6848db0d1acf36f95ee7dc0130eab9e6fb1d19a6 GIT binary patch literal 114588 zcmeFad0wP)w`{*)^S0*u7cpjejj?}uW9z2zjT81y zx1jwn-ZyN;gMu2}hq&K}`_ipD_UyeRFvrN4q{sJ`p1EoF&gOrq{~lwV|?!}$)Niy>R*NWo}J@6HXZ!;v1b`ybA&PD?Yqu8XHTnZ%{s=< z!uRA`ckSM^>ptDL?Wj-R9|UAj)p_TMWn11~m*4hRR;UA97<=VgYiS(pm3N~DCP$OE zWw~{9pT#74ia)5Qdpx-ukA@~kCxcmT(USU3EnuZ5+{z9z9a{@rNX*9~tQjwlX#apa z&Sa%dKEyPPY4&O?DC%^!@0C2wF`PV1QZ}#(dP0BrK|t#`ds*Jcb}Cmf3l5)lBdgWi$D;gW zwo_WkhH%7X4{O4^rTh)nBYnU&;@l>CCO^Wn3LJ-Ubm5qXLyIGtx*x{54aY92f^DP& z*9URz$MLqjn+3Ex@vY~Xr17x58Xqgw{F3ce&cHE>`y;sji0zdwVMpcFtUz-ko*UR+ z-EzFcb8Vc3l@sb&Q;TeA^ICtRt zD`mh|x^eO?rGfR~ey{vXR)=$~5@&VNYk-9f?cur9!Zu3{lg}%ci0gyeC-E&j7iABr zXSoIScQG5_`4~KcMUim!$B|^O2Z!4+i?`(7*(#C{DjKL ze`E8}w~w?w^!s_%Cx0gJv!7rup54eSa!|m2sdPJQ!V#BlWRIbZjhaW81AT78{UJOb zz&LAB|1!X$E_H+fdll{k`x%FB>EwHa3xNm1Me2|)nLHb~*n;y9ar{bK%^K2pAY4p8 z(2wPGFK|KlNFRg?;7n7>?h|k)*v~k$hcI5k1@JKakXj~xgmE3j`TID2t{fILsp5g~ zcJi?l_YQ)`Ne6JD5YBL>anrYHtm1n#PQpFDp{xcBUj&RmXQ;ndzY^nnAKzHZ41{N* zH9Dthi||V{cG4O61P*_#9?SxKNH~t*SdQZoJpUBusHTZk;~Nivt{%X=T83kg4!MIZ z!$IdkyeHbEW2v@+wPg*lTIpKM&uiIbn1`SnR-t(u{e4QnB& zr8ph|E0NVhz9Pl(itq%SP6{xsl#O?EgMX*_Bc0~?$&Y35OAXV4bLzo!vsn(yWqHiN z@*!D_%*4#h!mP~3?99OmnUlF#5i4eHRsz1~1)ue^QdY(StQ;J$k_B0ag~5BHtcq2$ z8dl3!;6D{Euztb=v3IGe+|SU2loy{wP*vjH}j&4Zkn&la$SY!Mq` zi`g(+!j`gSY&l!OR*0C`*j-gz^u4GrUYrv6jW_Pf=*__Y=_7nC~_B8t=+YMZ8V%ylC*IK@XK>E0Vz;s+JBLeLW?R_#>~r=d`+|MICfRnjpZza(KYNm0$~Lf_Y=XT7 zMEn=q!7gIQ*?M-6UCwS|zhb{;e_$W7kJ*2)e`6o9A9IC0$Nrgp#{SAaWq;vXu48{< z7qEY4pRoUAhZrc2eS;ll-(*MF_3S$KZFUqRypi3`zQb-~FSCDP@3XVnJM3Nd9^1!$ z&;FIY%@jU{GD`tX4KT%ky8~>J>v$or;XQl_U&Y7y0e*w@lJpDdck;6yi^u74dwiaN zr`prv>G3@1^?3t6$*1+@`%FHk&+QBO27F__O=YhHwtXp0PNGd})x+-O3U{E@IeeIp z@-e;_t-gp>-$1KokHb^s@rYKNXS8aZ*6K#lDo3k)@~@M>pL~Au>B)yDZ<@Sn^1{h; zC(oW-H93&9CM`+rMCp64zV|=g`}KRjdheC@o_p`d?8Tey{8BN>5^FXr(t1A8~mSO?1^XGU7>O^^R{$RM2f!uP0GW z7u8ha*`bx5&7Q-D$32Pcp_OBJ;-Pohbk#st4P&mck&zKsf`vv#Qs2hMrEo&$?@DNK zFgm&u+U~_G6T0ruBcQPEv95$|QxVF^VZ8I;lTz=71n*rx))Pr6>1QnDKc-d6#yq`; z{o^zk@ona!{v|vvj3NESgk0ty??GKnIKjs}7*F>+f&(u6T_cHXx*Nt_Htr$`Eqx#% zm35{1ax4qi$FlKXg4_HaG=}z3LMiJyeAt6;Cp1B?Kf%Y-*BGs+k2b`+5qz&7U+Eu9 zT(W*@EKqCB{+$mR8-=UL%|K9tZ0BZ=&=$J392rs3uvZ}NK%FIzeDp^K{Jgc(Mb z$POmBwK|f>4SVX*ZX}V1=ducT;4j@4T{7Eaf(7(+_?wR9ax1=Q2z%Pldb-pYU@+bk zN#uv4_O?i(V3xNS`396QhL1_iR_2L%`UNpaWpfW7?)Ufm$JZygzw40#&aD=Fzy!3| z0CfBlZxcMU>2TEV@w6RAE9R-Uo~U^5NoYV?Jmg7?5vJpdS3W9x6p!msIiNU4y1IZ# zeK$}h3j6!U5}IzHXUv1~sT3`Dk8SiPlm2o zeS{Nzw`dDZs7>Jupi$fa7@>rQh=J;&9_9-O7p=?qAM?cJ_l``p2$Wc8IAHY&O&~QK ze;Y<=6^|2oe;3~M`2nyHFdIqO#OTp8DFqw0bY;}jh8eBWN*W+jz|)qYGjs8FJi&W6 z_}8n`%b$WLx)Vv*Qy=S219XfS2nLXbxg+fNL}}!Gm^^JG(PLTM0%9%9JOFS zMd@_algha8Nvlc+n0&yyIhrs4_eH09UK~EgxW$~vM;UiGVZ_NFPMAXJ#!u>3Ae=CV z4uf8ZFb-oroYHroDw@c`5K09+iPqBK2O(j)d7_|qb(G%lF+Dgyh9=WM`dX^%|L+kR zftMz4o4?8BorZMpNU9?qOnMM{3A*j0v8T~cM#J?IuBc0?erHBlLL=-23_N|{VCg}X zhZB}e0~K_WaG>2vaaD+`pa2XWJ8=^VC#;#$VY(5eBjSomN5vHttqLb>nWEKnBZ}6D zD=JzmuBd1%oUmt#*3pe9S}(4sXoI+-qK#qv*Az}Ps+Bo9#*c&`x96eyv{#^-6 zFD6mN7=+Zal~dH7ko-N5W@XD#=+T@4`rl~7|09nm724k69z0W|&@>%~$JvKGPXDtH z$s3`0Q^{j2`6JD9lgBmhD#eq>ledZDZ!z(gH}Qw1$K+kge$7VBJ({<*1=^$9k97fE zpYD+E5q**VNLEqSYuQ8DALi`Lc`A2%?w|5D=DlH%4Aq8F!|?)7!L3H0@d=a3wAqv} zFEl62Z&`XQzqTsYn{CXt-S&!oq5T8L0mo~F9fdbIZO-eQAG?}d2V4)kJ}v4g+FkTO z@p=oy1n%Nvh`(u3#=@!DF0i<{gpjIDR^`65lQ^K|W@+P}qKt$U(gs&A`b-7wm)ui>4>p2nA(&TD$O z`EYZxrMBhy)`r#xT0d{scl5=N&Ka1qbk5kE?Q{0dIW*@;S8ew|_tNgM?(N-syAO3A z>At=D{+^bezMkQpwLNF_oY!-(=lGe9g*6DI}9=&TYu@;SVry7wZF3G%>acZj?v@6MfZ&O*W_`KO$(ZaUX zW-)YQw)XToot|N|>26W)yjde7iKdXbgU4#!lGS2R^0~h}(4o}V1^hmPpG;= zOWZ~!?lpQFaeUZu`?iJW4+ov)Rbijj^_op@4%CE-ou!^&iOUqSbU4B-es4>turSo( z^|yo_$ww6Pmw#L!pLODT<&x^oih<1?jYBQLQlE8nS9xQ|9|)J&OS1E_ODE=en}ZHV zu-ThBD_4H8Xh>s(kMm`CJ}Q8-ELi8O;|9i@jsgSjvNVc@@I)YXVf3()N)@Pdz=8xg z0}HZjg7)Ex`|udhAu}ofpaTy8NxBRb^(q7rZnS81{wS|E$}`3<<=RZInruE-RXk7@ zuXeer<7I((l}mGM;)T^eT)Xy%tEILtJ}K>px?ItY($dbT(;4l=7uinv3ON^j&xWVr zwzw%L2R?3Vj@6itC)rv>o9VwLH;XHfzHaIzjYK0WGRDF@GN|Yy46!^@M7$EE{Awvw zC`CQ`>&0**q9n%U#<+!F#jn9xVl?mofru(l11PT%#K4U@1NZv^Rov*Ey5#$dvZD2o zSay+gNBT;0EcyN&4b9CBcX0RA6^#`(x^f6(?PmSFISzX4@9XWsU3YtHOH+MaG#m<6 zmY4cU+{HyUi`kf)Bjc;UA2j=T#E>f~1$i=XpZ#MutG=%9 zzP`iZMqc+kJ?aeZ5G5uay)Sqlzb1KZfve1_$<^?JzFGSA>~Y4Qw$TaftwVO0#r&x{@RUII#+2 z3FMoGOQl+_0W|>pg9$(C0Y_g~59O({7L_3!O{+BtWi z$zQ0^g7YX^i8LQb4Y?K+0Z5nXz^OnHGG-M-6ju~rSgXz4C>fon{qJuEvs<(RU8)o~ zH)+sFyleLQ^nKu3pj)eGw1ist`5^|00JK`Q4LV_x3wBD=Tg>M2CE`hpH@E0s*65U=#ok`)uk)L-tYyV~tIMO4ysj4( z4)EIKukEEJMFpMf{`KM&-#a)|Id4mQRj_%-KfF}jFc|GVr#5-4F{*j4dCk6f1?S)FVzd1 zO8g$aA#w)sS5A5b-!Jrv#c_(42yH@6YZJCC(psUms;UI$vZ_eLJ*gKoyU_~s(<{Pj zN*PG0K^a|ON&%QI_EBLd`KaW;eZhMZi zV9Aev_6v2qaePmY?-kMaa!vT28Iu(#6_U|rG8RZWao5-(pRk4FLA}mtJbeA7mtKF^ zo;_wusz3dA<)YXnPzAj{)W*5aXA3ZZE#kT|#NFxwm6(`8q1MNIU;OpR>LL5OVm2etkxviMBS z{@@R&pG(=@O09Am;%4W@P3U$DnV6F@x!zaX`=3~~WsVGIsa5E?77354n) zEF^-8L?@w?X3C`$AX0_!nOVzgRCU~I^&0&~Z@t$jJaV)b|Ez&)&T=Qk`QqWZScHeZkryxhUEyzPpkCUb;m3 z9r#aKTuZ98gfAm0OO&52W9HLGW#x{8aSY%-Z5wlF6vAS~JiX zsTERqOxz>6QmqoROTVD^UYWo&eRRab+GZLl-#NuD;gcUten*aL-ULn~acxdk>f0xP z&s^$SJ(>qKPN_L#kp#o$P?SwV zhvO#A4C$?m4PXD#o;^Q5vUu^4pYPf8()Gj1X9Jx>m6eOy%gWjpRaOpl2BbHiNq+Ri z=;#yN@ys*a@x;i;6UmRBx#_u`m6bc6yXod<&#J6E>sbQGA!wp4nn%#dyW+XvHu;9U zEXbmaF6+;QO)m*Y0SPA(mpLWqJZK%t4+NYdtQMLu!E{lf=n`~MPEh~>|5OF4M@C20 zDTPVgF*yimh$^V2enQkxWgaZ`y2dmQhv^=(dQWhNd~bm#-&vWxp1;W1@e|L#C%xOy zdUaloJ?|jD=*#GPXbHg&G}onh4!YyPcmZeR5wVyH@>mV8$=Irq2+S9lIUL#n>==mN z+7yZ)c1b%RCO}hP%9Ti4uRFCo6(nt+gfCo8QwgROei>%-<6AW*5{1v+cR} z6s)@PVa;=$yKY-Ebk&9Dv?kv!FgHdX+gRM?;@@jnziwUqiZvEr)D@|aq~aZSZLb$_ znFpF)3b=H$$Kp0j-IlsqGH1Odu0m4*>*n2AY3lCogoT;S6^)G}>B`N(FSR;k93clw zk)TIum;!@U)mDhCp>C@h)zpNC`ZMpVTcJu?9fSH4nARY;FCa?uMQw{t&~-6wx$5YV zbP&+0&a0X}Hb@%MbYY!K{(5mS6R_uPzkg3#QRCvePnUk<$xU1DI3Ffyi+y=2rq5% z2h~!T9tzp*Qa#E8E|_gZgdn<70u#XxP#AGkK;e;8z?sBsG)XYP;$5e!jT&5wHZUVI?I=hcB#KJ6K~1UFGbcLoLOYr6 zCQRGYDoKHobmeBR{Glb(SChP_vT}auIf=dPOK$wtzWz(k9xETquduu8JC}BJtZXdY zyL0{8XZK4VYic}o<<|ey>H03Xd(FAeUAw>?>keFEv3kormHq1)&N!>API?pLgPiFC ztkwcn#o$)w6Ssu0)X`hYYR4^F;7*dEca|?!tlvs4@zQOs|ym0=$ z=dbKvI?M-bE1S3_Ih1YA@-Ik!$EY6!z{B7>=&E5nYQq-HWZrS={(rj)DpJ~5)@U{|Klf+&Xw;c4LA1E_Kp$aDusRL8MCdY>=+I5{8(s;aIRJSL zsR~5CikJq|s-ieZ2BbW#9@SR`jYfFfI;528r;@Z*=az|EmZ$k+%6K%-xR-kNJbU$^ zt94D+#__%b4{h1<(1E`78|JKOEgHP~**$ghYwVWjg68H0QH#B1u)eMbIq^O^TEm38TVoT9xGzBj_=p|O_0QXP)#tD}KZt&*`*9Vzoif+C-u z&D=mTG47rAYMSOnG(ZY0#RF#86en3sGXo>rPj5l#XAbSFO)BXprw){}gX|gkLFG#5 z-LU()k?elqRM3FM!bsM*IgH_ha?s&Se&B5Jcv_si$muxoy7Vr;|F`yX!z~80UT-wq zY6#eW%fAPV0e1WO1xmL3A~3CEv3PdMpk?5b87vFi6j%j6BrKCGC6oip01nx4MjZR) z>rU*ZLt62UwBTJ)@NM=COwd$+jc~h!vdBfzSca(p)4eRp+d2GdCti1;qlK*=PirAM z?vR7h=H$q4?E&=EsMnj(?{fQZlPg7k1CyW1qTRnHqL|bdGX+)-unJnz#Ot}o=Gd3a7ja@y>`uILko5e zx7O8`T>D*Zt~T7&7;Bwd+tzP$*~-5B^C<*_kj$h(+oL%j`Lx@3SKPB|l(P-vquW+( zTeP5iPHQv8cs*{bIZFr6_(&e<>@Ar0OA2|mG{)s@3{h_9I*sC{5DwEqZ`VU#*8>pn zi8JIbWaBC~3oy=sl1c_C6mXpm_55&M!XiZImrh=a{Vqh)qiWMxU)yw++BDCSnQ&Nt z?H3RdUNzM?|H^)68b^n-K-b{=$aMRv{;M(KGO(=jjB8XOtlMR+)nc2j*reU%jSaEd z5^g~Jsx$zLqJxSnBtgp{F&oXous~JiI!{}DD6j3{;GFec-r|;#y|=6h4|FsZug`}^ zx-;sUclC4UUHZoDE5^V7A6GBBeEU+j&FnV>YcKf5U8|o;zVL6CHf_D(u~+wu|M=c( zHa5*U_q)kFTPRSH-RE%BuI{ajJf2rvP_(UsWj6;ua6B_}h)OXjhc&vrSg2~UNIzF1bmS1;8p5IvD%dhk#lSL8Du@n3GHv?PR+P9J& z0WOI(TFQGuuk=E@xFT+|TCr#gy0+D8^*C(MGtDv=@dJ{f;au_vVEj7RziG7%uqZ`a znfQ*DbDqn|IS@+~2V9X*L6kYIA~aBpm_qfSS*UudN-BHQZZ+Rqa=!_Q^767Ka{~-N6r;1lmF|7_a*=9N9%X} zf;;|k`1%89RPN4kyG)+aQ0t=l)i>{GZ{K$9P;~yBR(Ea@zaT5;8|R#R_DkG&=iS`+ z;?Ck&f9Mv2y}<6W7tFcf!83O~e11ok&F{=cs2dy;w4=ETw3CY!7Vrg9+&>Fee8wi3 z<_iRIq#b=^nf!Nrffz3&a;;($PCyvqgn!LlJ6=rw`vViNNDU8g`-?l0_cd+1dHntN z$8X-&B)xe@@~=PJp*gnm`Q%@}v;E-<=A2kD=Yoe-{1UzU(B~YsCr&6o)$dJoUIt2l z7yv_{X#)SZ2#|_FU>;|De(^B*y@4SVBFj2mMOHu&AZ~4xO zhAK;au0mseHvAVX#$y>S(Mm)LJ)7rnnS%ZrtpqL#FB$b$2q-nGh^a!h9@r4kxya|i zB(GDkRMsA%nXUd}xXX>Pp1AW`8 zk9bNYZPNu;-!^h*^7u<w7~Nv8+_xu7FKS1IwM7DV%*akxZ*46YNy3!D-mI{(4iX?NO zQqZKpyjQa;`QSt%`5<2^4dK{2aWj&j{y`c?C5!>9dici}gUnhoF%i|a$^}7z?u6Gt zL^SYO{3AM3zeguEqCubIAJZoUO%+TYmp;Ii4YDU2oZAhI9Gt)5mSf@&$^|1@p9Q#wyy}z|v!4p5Z9%OXLXXwL=ME1%`L$qladH5a^C&W6h$Q$c4TD}j z;OedAf#i_A)*0w@@+Xq77FW7$*~!OEja9?RhxxF)p^Cp>PgU42WZl;aBh zqaI2{CvL#nE(83pnQv*|!F2`uhj?zO*HhxKLYK?VXmOB#a262!RZdb%vxFi#;?o)E z&r%BD10JY2{*{t<1!n<$QJ7RCs6`?aK>8u!jF3RmfCLFu!hcjJ1${sq#v_6rF&a!A zB_xEP-<5OdJv2Jf$+oBDt@cv5pr%C?#(iqQ+AQ{qVuwl|*Z zKz!ejn*$Rl1E+kDmkJm`mJ+NUig6XuV@xs3Z&83~iex1bBJfs@aZ)ZWG$agE001x{ zU0Eo6Y4S^@CW--4RwjbMQ{#^Dpv~>D8KlRcF$WXn4TTenWeoEX%`qj%Vm$Hf;3B^) zf3e8nkv9hBdQSWWqmWp5^0?Nf`M({TJX!xrsU>MSLi|E&6S~O*$&X&zvEwD~cwm}_ zvi_EBO-c}2Y=3BPJihm#?K>XY+u6DIp_HDb zkX>Sco+Y$_LOXIy4J=OskH8d9L8t&&ATJn&NsCC8dM=p>a1*5DCHISCS7)(yhPyW>4Rd-`$i*9NObj?KN~ z;Y~XpKR9>tz}dCKtsc+^;UxKI?N;EV21rAADrRD=Qg>{cQFXT@3h+%tRl*~yRF z)(3tVURC{fU~lb1Hy^A`?kEobKUvvdgG5zV_5g>4z{;bfd6xQ$oVasXOoYXZWl?5G zSy);w6QYF7&ft<}R4PZ7W@1z=jHj|dY|1r`da%+2Owa&SSIRa9P!O$6wGKBB7+@_h z6a(15x>_pLD#eY+8cWHEa#)^38x&y-sIg+iSzFjIsV<>v7~xzJJAeh2E-F`HP2za z^|j;?s|fhLP6uKgQij%JaJ0cah@cPA4F-qUD~2p1n-niFW+*zsD@KG3YEq+PEvK(V z%Wz4~V& zIHz2n8E$SR;(;J41)NApO37K3r{k9Kdb|-uz}KNyqo|-P#z?O$Bi|vDg6V?7nVu;q zsuAxHDiqNQ{wlX7HzyxXBGjAw?8{Zky*w9fqW(tM*aKoNTpUN5mBnnx)oEEFFP!Qt z$zsxn@Wl)U(~2+&Y9vGhs7 z=auu}6?c7f{S6=8wVV%^&pVUnM3!E#Kwfv^yH~t-*XZb7?_GiGyB1uqEF#8)|1{5I zOeVG}u15}u0q{v{duBcOG9)_sDU?&FcAJh2$$ly8i9a9 zV6&qoRcRot&C3hIO}X4@E;ky=OxywA4>wIbk^HshScUh*XR*CqU3+74Zc*e5?63pa zBcD)Dns<<$6VFACgQuj}h`weZZ!fd!$)-Z;n~?oP2{0zp{k2YiEn^o7yrw>T={W?x zVB_gtD^TCm5UU(g^&KmjuWV)YpD~6+bv$!{#7lm81Ue2~?vK={}WVHr2!n^fx zjw4HN%z9bh7UbE`nPzEbD4=WZjo(ro%&{hg%6g8cOGw;+(l>iB`M5bva z2ozX>G9Xh}=wR-|iZMYz5yW6-(SowLz$-LCb3@FFJJN(iP}c9|?l2NKJw4=^M%IgK$$ds3l9^io&}tS>7D*c(7tf_3LKF{N{vzleJdv`puU4Yn~baD)LK9P z-udpZ=C@%H)x};-ObLJvC*89_$aRPt5X zGI=BBRJX`8#_USXHi}f|gCU>{Xq0wABa{>pi=cY`saI4&b(m= zr5xd(LO05ywh`q~5c0{&%;bE49SxD(W=5WBTYZMM@eRDgdz{p^&E!xPcGrojsPU?V zKWK*o^0|`Yznbk_2d>8YCXdUnDqif7Q_qrdXDG;7RWw*1sxS2wyBs#N2`daLd8Jr! z;>PIOJxE=OfO$bGYvKEYQyX%De1AGEv~kP>8D}{a5mgA$8t0yC~O3ci3-_Re1-EEkkI;OTpCt6a1siImE zsTEuZdSzBrf>cteQbyr)G$6IaCijFR`L^R3a_>#r#JC2S_?EPu5 z>WJbfjk@ZwjvDp^bmZlj?}aSP^Wrv_69naRhFxK@DUA8Vg)*x?YRKO6lpr(F$|Vhu z0$u>WYuaMs77A2=JW4UCg|1A?fXEGw#Gy<@dDe=sEo7|kP^*K*2}N7wJGC<_V|O2f znL!tn)`-+`&X8WN>Y3Cd8A-J9wy&xrBQuV;H)^G1Y5Kd=7`apkO$Z(tXJoEXgoMM> zt24SY8IgN=L(8`|EIz!kdCs|aZ-~xqk2!L5Wo{n!HC9zv{KJvZK)u@$YSX+q@nUmt z-<2<1bnc5c44b@BSDnWp*X23N9La(565rt7<-@yrRlNsul-+_=jQ|4iRzMha>6A)iOWQ5v z>K4J>bSRgWB9ggcv&$O|PKUiL+7WGD(%?L2Q$uICtfyU~L9d~o5}{olURWNU}=iakn=&T6rYOSv^T4^a=oF-DIbCI{9+&Xa8&ks;8 zd{sco`=b1vJV&X6KOtyznM$KDGJqQ`XtWf&o!uOF1j;z8tSE~FB1KM%2}*DlxN&JF zPfx@-AtIsKf=FwTH^F7%hygv8fY7ig@Nz1_ia6&~H55X51io8?RoO5 z^YvtUwfnR>FWga5-IniP*sCpYStlOIzhqOx!uFUT*|W|)w|>Vn-(1pv`A;tz*;v3Y zGl%+=;`qK}yZm8i_Q7+V9;ZsS{n!4};jK?zJN){lb!B~xLLXzWqose+{EB(lU&%{@ zvxhwRcKAlIwwQFPC7_;A0hwrAVVK9694z5*Ko!^lj2TL3l}u_$CGpbAX;nx;K?8t> zSQ>D01zG@2&Yjp)1vI5-$a9yfh7X8}$mdk!e(*9YjFE?@IaNz04g-fCJR>t}L+;HI zo=g#D%!pM;Se=w+3|Qes)L4x5N`B*gJ^s)Q&1c@aJ}}3x<@q*OUS&LF`|M-6$)NXn z_qC23+1!+seN%xoPg_vg9jkfm1Xg&-%#gfI(JLj`M{faJ#S`(OMGHAwwq)U|MXTlw z#5??62mG1nQZsMPAqd+r`hKkC*4LUONjE15nI*fkp^r$iPC$)wiLqv58f@_p6$d5uqfdBmfpMv*Apn5{*&X4{5stGaExk&>4O0^gd2C zdQwMcwnwCKO6R`1JuRb!P^@e^1oR{)7M-qN1SD(@0o^AsdlwOMBef^B+EZ;`ETk3g z955%cLGpQOfkF964luHq)K!(K6LLZoD9-83A(@=V$Pc1Q692I4+*;mT?4NI#bM~z( zYeK%p(LHp#7ZjCC`xdl!4h(d+y{31%-5w8|bR13>VHQ#2$99f2F2 z5&BTmWviB5HX2R7($^Ckt%Tz9W_4@pw(FNo?2x`Se_6N;K_k(N&G^vUns+g??QB0; zzCx-CD<@->7lJRM2P8Mm@Z*VzC3JiWuMuDzAfOJaQwI1?Lbfr_B&&ZX(%Vw7AeJEfi^R*exX(oItchQ>{+J@D`3NLyH+g;7*6xn5~zmA{~CjA}9u%@f?uAgvv*xg191i+|rY% zB2^RuP>e8Bg~}nL0ooO+YBHY6Qpt`Z?!|BbZaj+bKS@TQRa4zUptLFW%gi%SeI7^_NoQSvi$#2NAO(&R_}SiuVh zx4SL*issD|KQ6HHQl}&NO=m@cuPIqzFXm?z<|pd`Lj2*#lVV+ zfSZ_I6r&}I$`=*M5rB7J=VZuCB}^U7n_rZtzYAWdT`ugI|BBntV2}lon~XI}&O(bR zH(TaHPjusRr3NjQ98@9zBe}IOEYWFv8f?l?0*9C^T*x%>slOG|%A!$HlvGQU`f8af zpVotFPAU&I0W^-Hs71D-;Blm&i|+tLf-`obju!nv%n0d6IvIT+gCd3j>8L&qh){?; zO8ixHWGfM`gvSF*_7FNjE2(WHVn{cGkA#wH$C{;1XkW(5G5mOW`mQ{*pQj@|`Z9R%7pJq8Q9{(i4ear$7KN5!}P# zdCHrBm#TkqsuUGYIf&CHNlMh1r?eWI)OX(V*DP3Y&GYA-|Fdr_Sn!RXoqy)0O=s@h zyjdxpclhTQ?tkf;!NF@@+JE8C56?UC(ACI`&4&l04mMVZvm&KXtllGkPW4b4PMW%32d)Cx^Nn#e?0G>uaRiFs-Q ziv7$)a+c9N)0;yR(C+SCw5lQP(pkJS^1=*X4)zyZ?sU$FsceI(EF3z~^5kyiqEo#& zMDex2PXX}bVA!ZBZgaw$kL-nzGlVCwSTa5~!cUDAevA?~{1}*Hv~F{nN6j+b*=8b6 z4Zm+1J@u$4Ppe4S!&FUswxn4rr?JyGqw-f(BW+AHPJY&S`;3}+L#trH8Z({?LKO^6 z5Ex`&+D`|}uqmYinU$Pk2WjQYj%5Oz76eRlVkia4S6Xino;Gq|RL$>fD9kgpBww82 z!%*_Rcz{3I(w}x>6u5(hm31e6qk1s{9(dYPUJR0n;FEF%aAW5-!6)s^ZZ(?C;@7)fSG$D_c7&d$2iWPi50tcb`#z#)hTtfxOaUSE#l-R$A*e z1bbGDuILHIHs89XY1``g#d6SGV78ef6~%#Krzg}o+PUE1+B%D`%C*~KcN97DogQOJ zMRB1g(z~(0>-^DrOKA-(B#!;jj>}q23-j{=%9C~%71}Lk$_c9_|8KxC=zBeE*U!-m~6(q=_$MjbfAH5^NsPO1wwFs&*v3li}yr>RPr zGh9om0XgQ$OXr_zfEx0GU&M33)u#28adJXn(;iC7#;ON|<)HnMjy!u4DRoLL#-$iv zJ9fTlK)8?GN@=Gw^en6>{b1hN3o2GReD}8JHr;jN1d{*3YqJf;thH@N3qp%_^-7Ks z_XVDb>f~=;o0urA!p41hhHphE4Fj-8ZV7mH9%Skpf-e*@p{r);HS(1H1eoGWu%q2j znNp@H$uXMtFgr5()2Zd~p7=Kk5|*$5Wm-#(OqGS`5R#4B#wD~0p^52v*1iQ3e1jHI|BSLYnQm38NtO=MgXLd zur1OV0mjTL$aB0Bu~a-eO*TL!KRFiwoA61GCqGQ?1Rx^%BgT@P9FOU!KJ5ORl2>9+ zRyA*LXxQG&e`CjILHkhIM->D1OgI|Pt%~?g$yceEp07fdVE&RPG`(Hnjbr^u8LyhLl=$W)&OCE9}rV}(&Fd8z^x-IpNfCpIvj(}}F zGXU{S)fDf^_ykFSO%r7>%8d(95jB+n>=F|h|Dg=b%;^P@awaToO7S+Ua{?wMa(-xE zO37oW2!Hf)ay>VdR_Gsa$^vi}?RI@k^_j|1jAp`{e6AE!K$_K0IJt;Y z)W=|%nJDL9aA3klMLE6#+MzHmxe4KU2hGx#DI@|3MEL;)o*D_5;=>|Llc*b1(Qtvj?hx_WdJ<9#goBYqEHgfm&QSN*PM8)CLA;sU_EQvpIPBXR0%i$ApkW3 z@{s)me2RmhYannkR0s!ORaDT=3{qEjc!Iy5Kpny&d5SWN9CEtE=4^BlQ32X*gcMaO zC?W<{pO(Kj3;0{h%Ufpwe-5_aY>V=5sL(&O?j-1!^|yv|b0e*Nfs>%W_HqIJaB+>_ z^3YrrUPJs+rAaP9K45pmUW1(0^ngpKOrF2w!f5n70ed`3yBr&ul-6Ht?IA#zCY z2n+xqBR;^qS_lS?0mo8_rKGF+1rU&3`c`$_7m=kGF05ZO)a{yfE#2GEw(P2PF?+E+ zbAirbkL=`+qzdTav`6+uL>Dvm$R=uWK^;*$0E-c|XeyIV2+~QbGY*=-QkfV2)?O$(F7cEMcI zEKhM~MdM}CnfU~dn#L;`kGan|yRk+mCY#V)~1yElmo7)^w#$4ywZT>cJvip zE<%sDYo5celKnYuX=$#lrk$jUC>zU|lch+R=zViOm}{(DLgp127(}$R)M+XfpYaDG zbgf0cDWD+swoh9O@mU(c_fuZMlbS+oJQYDyo1xaoZW#E=CNLbm2C-9O`v}6S%xBi7 z)D$dp9c+e-vq7iDZuXQdp~dELf)FW8N!wPX?&>?Rae}`n7F*hK{-gUAU$$jo@qX-j zP!{M2FJ8p==h;il$+wXEFdF55Gy7`XC;GhY(V{1%hbmg%Soi&d3o7SsXkKUuln2f} zanY3=6a*~y!$mR60cj68oQqgItq_dD#qQPDk_K3&_ z5MCG6=)h=c`#n&Lgl*(CdN{>t5BUHFOiP^v^`=d-#*^$6WN#py?WEe+Q5bp;ni1R3 zqb)iU(at-?nxWe0bG8DbiFSPuyAsnCHmVj8rYxq{W(h)8TZ3Ipjb#g!&m5a!0wGj{ zeH+!k_1FTn-n;K}{7kD9ZZOiItwhfn`dRh^JD4XdhckiK!^SD&Bw6}~%v@*4SZ%`^Bd#1VE=+|b({4OfDJ2kDte6RNzP9H7iQ@>HfMGVAW*JX9 zsX;8}5&Iu^fb)nQQ{=9+M`@rhI)8lg`26U+;ZXeyuTp(~)10|g^Ve@)Kfh|>P`DxE zSDJXedf~>pB1iSY4YA@v<(KAslik!1bOr-~a6|v<)}hOTW#c_3`A1irW75 zJqr&6Dz-07`X)GA9n?s0af25ozJ*atD?3H!ajJ>jGE)@X8fG~r< z1G9#rgQ|nbNj@NYfxII8j{+!2e`#5#7pM~NNbr&f00F6mP=(5*Lh>nirkS*6#yt-@ zBdtD9bI9ooHG6!m5hp)b7;g1>RleZ$wT25d`JN{1uU^^YN&ni&jC*vUV)9eX7nS#W>_BF6hJy@P;0T5~Gi}cfOmlV5j%k~3Adg2~ z2u7RAgO_Tx5RUkT6}r~xOgf|##TR`=Q~1diiFTzIk;U|m9+^hzCtHY7ryHbp@slk= zT@>!Gv>ih1n$lL`Tvr{PV!Oezsf~BA-$zuL#<|7*AMzWyHvQ&?ADpx4?%f>&7u`R8 z&V8|Ay~AQDF0Bu5+TyD2uBd7(b)MK*KYrDHKi#tBnR~Auudg4!`rc=@Y<~K_tH$f^ z8@c_T_g(lu?-;EdJmcWe;eG#n`-tSu&Du7&VD7~atl#|oi+YFJcId4po9Xi1ZL2#x zMvLjGEl=NznrQLfr_oCK`lnkie*5kx(BKqkXf$W`XBOPAp`kFRC`3NUd?(VeioYWE$(Fgw z)r}aiN_ljm-}Vut0?DoV{Q| zDDf0xr}RMUktMBTJ!Q#PTp>qQizmk+&ns}cEJc>A)k{6Strc=X)SGL_bsBo>s{%c% z>i^4V@04;>=JhilNO|S_hG>q*;&A=eZ7guV;dEF$IZ=MYtdEHi?dMMH|CSHS z3_Isd+h-sPB!M;WP>?D?hLCN5Ezu)pHB2@J_C-4mKyiYYpY=5X-i%c$M%o%K`NhOu zIX{`hX-9DO|8B4FDPHEnZwQZYUEDUZV$p)R{WVq5NH`cM^?7U-y;iKSAnrYYF1v?&`3V-^!5}f#{n%!h8GRu zS#Uv(x+a+xtXF&`qdVsp3*Tt8uFffRc#@y-v5nWS30v@U0>u>t`{ys8;(+{kyt=VS zr*l+QES28;Dt0$KxBTCX`B?sQd1=qacyPg-I%9s7H#xcZ^@}oGa3sGd2+I0qu1M5VN0Ktb@L96H8qVLoHuak zSab8(rG4J!ki!vbhODRG5~Kb0CAJj5PF|~gj{TVO*)^1HME=Z^cV`lEf!y{{kPb8y za>0m9bVl0?kwQzBBTa1BvNW-wv}0n!f7Jkc0UmJZumODR@2#jhv1l{M)bA9)$n;86 zzg3VtBENIOr+l7FyqkQEcfQMqPBcKq(eF$gl6GtNVL!D?Xt&miKx&`$D31#78^xxv zkZR^W>ySUfogwB$%8=t0%7Tm6eRXMKYa}cPCdAO_l-dI!HAC{@c5lV@VK9{8%!Ok^ z-DMp=;K6A=b;x`yK0e1&SlLjt$s2d}_{%3=EU>(2@jLS^PHSPV!Cho1*q>FqV3T%V zX~*J7Wlu+odrNk1S;>K3OVs?lrK&1oc9dCc7Q1Y2U)c;71!r-2zqAK%Xl0MYv9Ef4 z40~G!%7k`?{VQ5|tH5X%@w7(ltBxIgHCCiQB6$L4%k+KKX^9tb34M&hi|H-aIoS>r zhO=YdJ+ERTQ6t{P*>-1DLHaFKS zTwhbSVxZYJR%ov>8UiM_FQ>SstfI!Hw|E?dS$VEPgL!vW?Ywo`eg5V?f5!@^xv#lv zZCjDC3cp>D<#Ag4#f9zy&9&L4B9qf^GTCiu$P#QHQ;tZlL;n@)072BSKappb_Be?2 zKMaV>Vk0T|={1HJD?LL4>F|YcA7>#P8sfB*f%JOvggxkg@+xDrO7mRuzwG9}79%H< zZ4|jMNG0S;L{6uN;nx(c=3M+}h(;FcB5c580Fr~-^C3Wy2Z*E|N~g!{#@FEIr_iZ_ z;H-$5Mo>DKDh-2TTIm#0QFy9GI$5S-S`9RuVqfVmO_e7X0LjYfUzjSNZWvTms@9$Q z0f*YtegUQ_Iavat1~?Erh7`CZ{?dd>8Vp+ugi~6Us$QhoD`KOmy6`oqRp})1XjF}E zdPp~|+m+M)w@~$vt9$D}mm1ndmXo=-uD;nkK>wft0EU!d%BqEVNd9AD zyX7YpqO@3%D?p_HTe21DOz?mR!upYu_99E|GJfzA^GXn?_bc>b;0+yYL0#R#cs`YU+k6}dd|6J`Pw^ncjBY?(FT4Y zPs&k@6LK{5dn>2?WffB8X85n${OyaYs+P3-{q0Mtsus8VrKORfR-dnRC=yvjXWBji z-#L`L7omS6;smeI-WAx9J{z%A#0Z4HItO6#Vh33!6>=g5(k!J4*qxwNE>Z?;v@xIR zit(IW5DSw}Ek~A2Xtr{~Rp_5qgFZm8kEBb}FLy|4K>=&giZewzGKH;^|y{}g(-@Y5p43(E$0 zCNNWo`;(P4;EbtS+TWL;syYzT`H^bKb9#m5*U~vA$t7Ea%7tfE?)Wn*q zt2I9lFFAj3{sl`T*xh9Q;Q33!$@1RCi+g$&FYX0KBz75WyenYiSy_l|ypRK%wdI7$ z#Lsadg9qN@Dh?|YDh0QeS@~?w9m2@Vw`QC4!pcM5_16E*+nc~gbzN!V?^UU^lvGHi zg^C*A2Zt?g%nMa*iJ{E5w? z5GO;+B*Z<0?&;#s&`CPU_}{S|+yBmtJ?-h(Am;nNS0xD{Y|@k8w9}s+x8A$wopaAU z@1Aqdy?5~AQH8tY?jSXFJM852FpjB;jR4L}v*pAb8CXN-<<=HaMfgpae)HKQV&!I)1trk{{P z?;2sajOb_%;$q`)%rd6NXuxb9WE|3fIbpy!R{7IX!T0SBDvaa)X{n6G3zzu*X{n6G z3sc1(`Sfa9F=>3{tUx-bjrj zXQ;-Aj&b000iK5)(mtFd%P$?K@yF7_A&t-{DSAppDcnO^1WyE9s(wh~D%&~xbHXIJHX5MIiuqX*`8U05)7rUUlqjQI0 z`2w!+3%}gj%h1ZzjDU5)P8Xr9q0->Pa0k&;d}OR@!k|X98behu`G?6Di-V6xU`rUD zt@s($;5?ULHGC@!XAQ00WDmz&4UhBTtc^W%UIufHZ70IE+}t(O{D;9+*|x+Rm$L?w z>&Gq5L4#GBpIeofl{jKIeslR?YL+d>_7^3OVc#WuPX`a_e253kYQ{A0TV9CoczPPo z@xyTV0rLUHG}(I=Pl9(|R_u&|Ca*9fxDmb`YbNZ&YbF#Zy6wOSZG?qW%sACNK0+H# zFal6BU<F7CNlYl?q@%@%AHpEt*4-n|4a2_w2A0=)Z11)UqEO7|3{R^Smn3Qp#1+; z{nq`iPjvsSpP~GRvLjZxljZ2N^HFIy>;?Vn(-rY4R&o|j>m0{}Yq6t9aIFY-uLpHI zRGghXj47iCrCa$}K_$ePGnAHvL|XXn44vNoT!f~&)1dj*GyKDVmUgVR?uSc(jap=d z;B*D)jrm+~yHOq_gWaB!;8cfUAyHbocCpr!4(ABx9}XTL5Ukr+l|?`{tEl4 ze`us5JGaERS~0F@e$K2J$Q+1u1y3iN2jf(jHU*J@0`JT$80&!3($Xe@tt#J=xosjDZZCPtZwkC`*R ztNq_+XZyydBt+hNZ1DZ>T==r>7vm>zBltDnD7@*Ls;%ImZ`wOqdQ}wED_EH^%45tC z<s2s=rkA$C&ryul6t39`tdDd~dIaH?Z0sXL`mNSOv}1 z14H|lr{Z3u0l*@_62K@hDu7E_gW&!z6&N6DV1Oar*!O}Wnu%7?+KoP4XYz%X35?p0 z-mE@#$An1hvG&Ln?mu{BqSBrzsaaAt}-g3U?h3Bq@I0>h)wV~_-%3Mv2W+n*unO*bX1J>Hv**WtwGJW1vn^t)pKKMxa z#-hoCf4Ab>fA9F&{ZBUL7gZI{%E+8NHD_+o>TN4GcWlZTUO?;1%_^EZZ|Nh;OE;9~ z%`Hq{{J_iywlBL;WdFw}zW>}Rv_AAy`;R*Q7J9k_1rf$#RmspZqw;RXY~YM6(8`C|GGP&7%))}LJxl$p;*%yfrui~v?+*)NPJ2eXdRZ6 zVRLaXl4iKVu)!1mhM3{sR7SeK4I;IlMg$XiAvzg|d`Cn^{RgOUiuBR3sl?b~(7t0+ zG0YgYcp7*zV(j1x*7DO?LJZ{#Av%uR+U8T~Ab1~x72v3T3_`HOF4=6Wxwy;;!iye` zmIOnyX?N_%m`N9$d5B?mY>3O%jiJpNv1BIbmluTXt$Fd!7ly}9PP+LMcSFtM)%od@ zXC9BZZ3NC(e+KIq_Ou6pjV;>FgkwAEv8UYoJ@!G~r?jpf(1 z#BFGQwcgsYb{ldpZrjmz_JXVlj_IS^Iev?@cdEWcmBDY(2l^I`E`Qn>SH;NSp3iU1G>!^fW11R{AsKF)^U^{zh0tO@HZ2+_3WM-kj=%S@z^7*3VyClsvs?WmsBLf;%N@e1t1Ja+YUe@)z6{ z^Pc#eJHeeCnfisnU%cM^yYH-B{I&j_n+`pDe^Gw*v-yoT-KncP9xGq#!9g_(w=SN6 zcEJc6dqr|gu?F&pFy1u7)Lz{Gc!S!jTIGw48)KF~eOo!((YpT^x0SPgtNhK|%GthF z`Qt3d*kqmY*T|v#e{eMcv-JzDJ*c@iBN`7gn6oOdI0Qcimw770BZqygRn!jV$RKz& zI)pm<%=2~3fi%lT$4p26+aCKXGcYPhdb4I!0eP5s>y@z9u&>}dJ_~yKLPdPKCvUE2 zRyuT)r*uR`40#$wI3Uhp!)Ej|5kic2(()j}Hsm;t*gy&UP%*tJsI&+%A}iz59v$*Z zxPcW%<49Ht)xe6Zm32^8OGho=5qfECB=hzhZA$`k$WW)?xD|PJ)~Gi=`L7 z%nihH%aY(C-dMZ;`Bf!@YZA@kszUR-3HzmA+WSO$_fSyp{(a2yr;U;2)I00`U))ws z{j$m*50-0x1=U}p`kyxbJN^duF~g>TcLupDad2wWWMA z_N@4XdV^C8 zXkf+&v>|`yv z#4dx}@6<>))3w%stu=QRRzoo-mfi(AS0t?~E4KrY! zGuCs~y}X-qK%pwEz#ttCZ}6cATM8njwg@cn;R)>_s_-fpIllc_y5AglFB*Opxd;v~ zU(Z_bjH)8+M#S8aH8J*#22>;(Z_a9wf>W_-R3!*DB3zF>w-5se!^9Vir_Gom=?Eb4V~52HNRA23MVQzEH8|8UhmP^ylN2#0?TaN()GuBUGx|Jl zn|DcO;gl({@iCD%{t8EX$IfuarN$mfs832>w=n;)oX{cPAFoa-&zP8O!y?YBL&tq% z?bYBRtW!=^Hq19FQWjR2#?mDfD;BOOEuK4PW~OJxw3P9Q(13EYJcb@CHDL8@Gc0_u z85va&2OkFew<35uVvPruo!B7|Mtu>5;A*+VY0+k6BtAHtdx)PF0mD2(LAW0`6=dbT zRck$Msmxs{*fdK*{aJfQoe{&Y3Kue{QTCyC9@410R*ej*&G%MoIHHZ%5DStRsvmNI z%1{&;80(LrA;INbj*$w&e7d1Y&9ToI8CII1MPBxQ32Du;m6NAMf7Y=hAtf3#L&uK< zb;$dLoUkd$pK%gNNVm+bBabA3&GGQ;bj1$2%pwBkxSrPc2jgS=fW8~cSZ+LRypO-w z!w>q%v$)gDX0G3yo)TL6jkG=PX5+vwX2eQZX0SZ-z6{0YGU zlc32s3t*91RWY@s*fh!(6fY`SG~b(@m7a!iLlW9ObP@pDec|jFj_trXK0*+d-9d}Y zoIBZc2W*nIwGU1kVf&MC>!XBORDF~}?O%2;6XL0dYu${(sTV#v2%5~_upYTW)h zXe#XS5I*9y;KU)@^^Usut+|J4Y(C^81}#Q0(Z+p?xyA|gfDj z848+@4BVLTwSylXd+0EYcS3DjT>kkJU%d~9XMB0g<24rTukz$s-=LR6r)vb;eeNUK zk*mLX>FYdGW7KgQD_4$7DoxiX$^NfH$8Ep{G{X?|V-G7k{1xm+hrjeRLofDXeWYR z;YvTb;|OXj2+h3hhP$3d?NB~ZdJ?{!Tp#L=pfl@E#eQY0vIc+7CD(%+c#v_pTShxcG-Jt?lZ=GF;ot}m@#|HFMe7Ff9ibZ z$T)}20ybAx;KV9M9V&Oc^$+L;vPqEY zF%%D9J_VVWs4{Bg+h8GoaNL85p^+8hs|2%d)d%xEvbu`QJ+$a8HG~BtH!9(Wn!xrwu@?tbn0Z4;kRW~O20`P zS*arG{1$N_ur5?9oSo48&u7$%@v9~}u*d+L{DC-ECInTVf0^#T9@U0JijEQ0B3m<5 zGeiH8PO01Q+m5IgvjAMIg9!);H#iFr8X*Ly4{gJ908GG90$!%H4oYW*a?4DGKN$DG zXT}VEV!}SYE$*LxpD!=jJ;hmL1^z#`dCm0l3yoj+Ui1AcTF*Z5^!Lk)&)ht-wWen4 zqYpo9PY#9rM~3-vkW*}o4j@aKy?D-sn$RZeo7S(X9o}f&_LLRmN6*3-RcA|Mm2d{L zTR28F235|zj%#GIHmDyzZL|;HulaN9eoW#F-G9Gguh#v)G+J36oImHhda3Gnnzgz= z3*VuaWGfd~bWMzr@jey!)BtDF1o{}!IL<q2M~)+~?sx{`~)nTv95UrUTkoBow{>@8hzXs%~fZPQiA276## z!8+cbV0`j_`8?BvRNGIk#HYlpi--vicZF|=N{zqvuIUN;c63ywBPKF3#!(p=W2WBz zj&1{ITf;YVArKN8odnOe#>n1QfQCTc5r!R>jr$|dw&n>N(>Mpf<>^?gZcoj-7M~im zE__^gbnH63;FWg=5xI(vti+D6anY6GuEAg9{m?6ddniB&pQ22Wwb5bQ1DPgaJca)1 z#;)+#q$|lx8k*&Z=Ym|kGZYVwg&A!Q?SX`i;_>m}{({3v#|9VSY1#r~!WsA`;dcd^ z$G$0ev^ZC==7)Ax<3^C?{k6}ooPIrO(yX)@vnNGepT6?hu#UNF>K07No-%G6U_sp) z?3ZC0-^Tt;;f~*6Z6Wpq4X$Oi#(LT_g5AV46AWul&@mO+8V=t!gMy7G!$+TrI8&xh9M8AFes&eqh|sELj3*J>U|u#F z9V23@-ktfE(OPpX%&>nlVM^oq^ znkg>$ic@*)9j!vp|KoaF`u`cDZs7wM3=iMTXP9xAB^|Kpf<@EL&tvgwB^llpzL_xO zSee&C4%Mm+`$sv*h1=%D47tVTtq;QX+73F-AhYVnW9~g_z5ZkjG%A2VQQhgIFlE5gEv)o$IXyJKJxy#z#Go?(EX4VTYPAn zB2_^*RP}_G6W?v;Q}dOHDX*oKt(%u#QJCYNIQ2)KvUPLQ7tYUdJTYlz`J>A-CQO|$ z1s9c>xImS2!oF=^2Y(?7J-MYK9$6-aGs&44>q1FrKX-;^;-Q9WZ@S~b4G%06l%f*- zm}dQm_lJ7~L{q~*%4E8fHP{5f0?a1B0RfA+pmKvT{y`R+Ts$O?Te~Fiq$gh4^Udo& zP0UGqcE`ARxwa+RI$_T#XTqe^3EVtklKbCMQnZHxcKwZ%9?xZr4E}DK@$dS+rWrGM zx@6oqxj%M&UpXF5k2f(ff%B8`qF8X~z_hE}9(=*Vxo5XFat>{CF!NJyhG>+2hTZBz z;d1Zo55T11f7ry|o{#!PD2;^h#vW4U1yl3OgO54FaqLz$v|fkD|Z}9hOaJ0kdF9yIaNqXeRF!{&h;4^XGWS6GpBlz zB96tTWKRimJ(E#*7*GGZIkNU>C-S|F^yy9zuA9fdjlW- zd*4&%nB9Bhvh59gmGyjh+#mbAkb?`q9eZMNa&Ug37N}si z5T?RtqC4VXR_69?pTi=Ii0CO3-IJ1?6O-&`%A3lb`0?7}$OLC}Vnj?@t}oS7of{Vy zKb0zk_gi7#V}2(*)~X*`5j{(Dk>L@VN1qS1A=#8IX_NE%_91O?m1RL|{HeMwt4)XW^Z=lig2~=h9CRwT*JN zM@Y_k&nc-!INtNFvc}=j+*|eD8o@UG&NuzEhFSU~x#x2*r<`B&S#G%KCMNamM#gj`;WDG#^l7bBp0#`fX2JUr##j-m#y+Cj&2qXAqcH1c$TA zi2m>ohZLou#~ijHhVUyMLyvaY@kNFIgkd%OoI4)pBr-ogp<&eoyA|27TgTC1ODA`N zCKxj@&+K)l&Ci&+aLMwt%+%_foa)r9wB<`HlG6**+=E-Qf<=Q{?SDCGjwcD5O-Go& zOThmPPKdxED@mR?leP~2!;POMU~w3}ZQQ*L0tvO(Li4XH#v^AaZ`Mpt+6?U2s1qH* z_t1QCX%hDSv5&`C*H)N|OxO8yZIPIS!!UtI)56^bms}OVX-DV{O+Dgm%pvb{>DX0Z{L3i^W;EeJdI?M#xQ#(n z>apskKe|3tk0T61i3$%2B~%YS@m%R>DL}A3h&?KT5hg}#kRu!v+=zO4o{p4)F~8t= zdkn=$4W&_KhEyapxoGYk-1=#{V(xXP6{aUwEM1-!RGZASDId| zP|@cn78eMYp`sk8bx zAEOE|(nJ(LJUl*pXp*k(2C1VS~{%+1@YS^3|m)zxuG(`|wv+uKfDL z-hXxD$drj$Q{&>MW?|dr6t}HEc6R2QpPY@&nf{LBC!cw{{pX)~OITG^>my$8Bdt|y zJGK-QZ0T5=zc?!{E^BfA+=`62xQq((^X}x2cO^_RH&nIp#67bk{AD+W#f0FaA?Prr$_F4vVLd_ z6WoqHw!@x5|6gtvSEMXowrF8RIc9P4a%RoUoRON0h;V{3#&F}2@jrdG4@J}7-M2uF9Ju=s4p=r!%z*nV`L;W++#SM@lNcsZTawP?_MX~ zkxnOSxoho_PA9AmHm3;I%s-qd`TV`q3Te3<*i{0Z4%R$)JOy?ojfjb689vQH9>%1C z)e{`Gm~lxJV**aE#u#oo?u<8+1@GiJ`1nU#sj0LV{>40Mi^=?5=JNjHWxSJfQLvNv4~BI)Qltcfn{XEs?OSR*yMs0EBNeAD=1X7 z2TMck6R;~GKgko)ae@B|?5`z^i->n_bx)eye}3Gv&J4&f!}(0i`F>YItSfTxAG@!1 zhJ8OfJ1INqpAw^QzHsBI!4H!rOh_^#>u%T{wME1@r@cJ5#C+{#C>Y+L2rfV?;#`Hs z8Lq6vUraq@cqUF@?)Ff=bH=<$ZhVfI0);-$Zo-Kcj-c6pv@2!I@ZfdM@ZAtU`l31s zZpFBUL)W2)c%fz1V?4kpIq&C6&Y|5n^kgvFYehhj+{%c9X8Rx|H+BG9fPH3_fC8nq z78^$3v3iRM34d}TZ~n%YbNI>0TiXw8dSK7jx2>8rYt^=|?|ER;f%dJF zpFEu7quyfOb=W4yj}VqBH4aoH&Ym^jJF9edsdaWK$9O}l)=LnvGNzj0wz)7%a4>^W zPSimqvMdv%#<8dy2lzTT*r%C_H!;kpSbUeK(KK)Y`Segdc-G``76^xhDq&s0EON_< z!wU7=r%-v+1ZVBJt%0@d0TZoS8Dl!LH$3v>;w=ZCS@OW%_xm1s>FLGQfAzOdZvI-% zbl>VZsTIDt@$S_4*Rt2%R~#ReoU?Ft`R3xOYaIpC^V1R@*z*r9R|k*%_vSMHOOHPN z#^0=)pO?P2aZOg@#KeT;8{^Z~KKJO11-Vn^tlhEn(I>&U4b#Mi%IUY0fY&9Q`H-BK; zF?cIx+BjFT%kjOBS3_UVr>@V-doY##B@5>`7wMaKR{bT~7_o_o`U_(S6Er?YuSYgE z(~TK3jWZQ2=c`ZPXU8nK{ifl`t5oY}JPHBe%~=No;^Ft3v59w0=V~9y7)%TL#hxBP5|6SwaW4@C5KsczD{-o$y2$VBq;Gp+`(i z3{=b5rcPu!%dF-K^FMs@n@wth%zqR!z&K-}+8*THnNBwGg%dfWNm0melw8=bQ)AJu`5m%07iDL(I&%!8ILPT5@iVf`xV;3$kw#E==O1f< zQUX84FlE7sNu1Sa4Wm>4*L@SRrze=(ad>BOTq2I@beRv~1k)=we>M2AZM!RZPU@Cv z6W*Tt`TWe)*{ng zX~{_mIKe*C%v2T>BTmJW@Eu%{gV}7@5Ug>53j#x8EwOioN5S0iJC~-*Fmk}vfxMtq zubhM}w-!yFvtY)I1#>1BZT)8T+HX8s^g)s*FF85SlQeF+HzUJ4eO%~os2tC3d&4W|84hLiNzqR4xB-7L7I{G;EYaaZW1!VoP3@A}hh%=q##f*?`HB zab~z{QbKNNMxx`ZG?Fgm^;9uz*^aGMaYfC-)=U%# z3=~<#5!W`104u8QRu81kc{w~hqDIt%96?HKWYw(LW7Qx0s8U1|tVkEXnh}|nn(9M3 zM!9|JjPiU>_>82Y@?|p$o_K6ac3MS&Cpg?^7DVa@p9#6Zfx$=v>v6bmzBa+a1>=Y~GThn*i?e;)e{tT>li>yT z{2)yaH-LiAi2ZEu^|^}j;YYw<6c$71TVh4Fk!=))9cTGfK`iLoo!NZ&z66g6 zPe{c^)Yyg@u2O15S|K)-Elh31VUfSAdu8ySR+@i4IBDlEcm8LyeC6Oy`%f-k{`I$i z_3K~%>f6-gW~0h}BJ4f%x+HqUJV*{6am6%u9Ms5xWK(J;Ux31g*3j4+R@Q=MZ*cAa zQc!TFJ$3+LPGz$_dveC$2Md;Z7ABjnj43y+*|YKgPnu0vCd_p2Op3)$*bVNP6RwzF z8}#Ap#CP~5&awy}>m9K7Dg0k9r{(|j#nFcw|FGV{Owv?WI=(a+ndwYC!Zi8>^Pea*_V!g z`ge^LFd-ba)$yh=-E?TaeYz1mW-uuMtKGtfyn!5d9DO1T_ZYee`Z$ab_?Gvnz1-n$iosZ!CG30`3AVI||VS5LF;!Cd@z?M34vXQX~5w)V)b%BZM) zlj5eA*Di2;@^ALS8*hL%<@}7}zu@~ZAURJnbebdlig@=(IcHJCP`l9nG*%FnB8FMF zM64ZZLzxP5t@|NejG#GI?&yxso!t1{!OQuNq&)KZ-&_j{$g{d<=kl13 zOTzxm=J?W9&s9i=8hT;yfcfUFA7RI&#T5uaA%`W-j8hgJ^*k1>4?Uqh;xbC8^(2&_ z0H3(Fz9{?H zH^O6WamahcsqmzatsGt0DixM7nuItWK?h>E3N=pys~G8}|7Jqkl!>mhAI0NnwwS@I zNY9T>821xfM06DQ8nfN{N5{X~1|pI*KY$a+Lo)yxMN!xPPtOzNC}>nL`i|oSoj6o9 zHKj0n(xmLd6dodI_D{<8O`q;#iS;+UbvicioG^3#^l8?SrPD_Jo9&Z@y?*M#e+cck z_neU|+mf5Fh5r!SFqp>I!ei~>kZ&~Q3+Y4~PMya>`9i=};FSzHLYYJM@WFqYoHOI2 zGp^|@7GU=qX$$4bF&6h_g?kqC(C`8t zkfG;B#}vbM*b~@x{A?mD#$Rl7zIh)X!fn=~6|F~=?`<7uT$pP6`MdGiz9@#x{1bdZhy^dm zcY*&bpOfF@5x40Dhmt}=fw_p(Wuf=O_IB3$4gNIz1H2y=hT)9e;QRf%<0IQ%$j@y& z!W>Xnj588Bpl;Kx98gIS9{&GvrYBnzeFcf0*s;Vq@7uh8b<=~n7w=oT^uCL^4>mbI zN-3{hIBWX!S-yuCLHOXg*KxzV5wRZq2D%o^@5EUpmI=_PK+VK{nQ9-S6PP!Us+pcv zK6mQWx#ek0-3&iGqioL9sdLI^c&t*1@^Qy+Y_lV_gU&SLPo2m4c>02>*>kGP)6>hV z=gh8JkiI9B#~FTT&WeKMv-xexsFSq;prHg zShx1p&tVG43hw#z7?OgWZXa2)^jckUy9O!QTBq{l5 z^88iv(wCQe6OyJJOPRlFF0aG?c6@T-riE!Z-gVMcTzGJ7CRN-6Tk&}KhZq_s7+(zL zH6}RYZ_8_xhW^R27y0)1(g%|lgC@w#H~;1DaMshF#zbGPZPnn%Q|6`}J~gQ{H~hoz zCyhTkdB*n>CLWzgm4za{684n&k>eM}I78nrSF|w>A0Lh=IS`7qzE#Yu#CPShzhA+< zwk?~JVB)B;D7(|WCf1wz5HVqywdG!DLpkpG;M%S0cwySD>nQQ)Iz!jl!aSi@=)+#B4n&fOrNVOIl3TB#WZA8~z~#b9VYP6b zaGNOB3mb$@!e&uy5w;53gzdr(;cnq`dWTM7m#|ydBkUDEFYMD>y`;A~AUr5MBs?rU zB0MU5S#NkucwBfwcvAR^@U-xZ@T~BhuwQsyIH31@U3Fg6oBUYimxMo4$rW7(^oGBc z1l|(^ypS#EG}wYpwV=~r3px$9pi?dAG}wYpgDvPpMgoy7 z=)?-*EFfFZsTOo1a=~l1pi?dAR0}!{wxH8s3px$9pwnOrIt{j<(_jlajV2*m&}py* zod#RbX|M&I23yc+umzn4ThM8+1)T<4&}py*od#RbX|M&I23yc+umzn4ThM8+1)T<4 z&}py*od#RbiTx;vY(b~N7IYeHL8rkMbQ)|yr@ZWhzwo?}5{QNbh?j(vKr|$99b;l@qf7P# z<8tumk~X@ejmXv3J+vn-@#_-5F7fLUzbV0Vqf6T8GN_F%X`@Tp=#nV0Vqf6T8k~X>|PnYEBl003Kr%Up5NuDlg zqf6T8k~X@ejV@`UOWNp?HoByZE@`7n+USxtx}=RRX`@Tp=#nV0Vqf6T8k~X@e zjV@`UOWNp?HoByZE@`7n+USxtx}=RRX`@Tp=#nV0Vqf6T8k~X@ejX3WYvWhjF zLYFY^*0U%{yLAPaA|vOmhf%W{EqNl;d{d0>(>v2 z9|}K0c^ss%1sH`lkAqBj?Gnb~o;c_>FQr0B;p% zltVaQ4Ys@6V7t2ww!7P4ySvc~_$%Apjb1=xyT@b9k_DtSi-(=& zwM)qFY&;~h8_1DTyewP1k$h_pu2Y0Fj1*j_-MR>*t&4~Bc%3cGfz0C}LzZ}jOF%as zmW{YvSSh^k)|)7~A2N(Ls#NnDVYPl;tLt^TUa#v7!UrLNc;g{mZ-nl_?}hy1A%9*! zjPF#uQ72xuiHmxnUnM()JB43X4GsErmr5FiO)8;9jh97@mqm@2MU9t5jh97@mqm?7 zJCf5*VVAI5*dy!}J}-Ppyc`f76dn>D79J5E6}~JyCOj@YAv`I3Mfj@T|Fo{p2+s=7 z3HycTg+I`puL*xB{E?8~{dibfw#!Am;g5BFNqAZJ{7mInRPtL%<}KmdlGQsxjsfDa z>oK+HJt4;f@z6bL(Fej0g&*lxjta0e4Aukt)u8?~^h#dG2wlQhv~n6WkQlFfJi?^cTToJjnmw>ftf3gP^*|21E*EY@FYus85NVM-ut=m*FQi5C7&~rxfIEc^ zD&M7R+9(ff6z`{Qd!*YQ*eG68w>_{?MC!H&Hj4Oy-e<3HpYTOtpK7Cad0@MU0hRn# z^}i*g?efTWd1SjhvRxkN58vSf;fF%nt_(2AGo^Kz z(z;A(U8b}y6JLbu_?23hDXq(t)@8!JT|^1BE)&uwQtL9Mb(zw-Ovs$&)VfTAT9*l# z6RCBXu=zx4T_)@aky@7tdqSkvWx}2isdbsK_NRcb?O7+a zE)!!OzB9Eh6LKR`>oQ^Ic}=aG34XT#WAW9P3GRsTDoNI_DMDKHnc$aq=IEYfDqk+F z6jlk>2&;u_h3katg%1h8ENoV7Ey7k|o3LHjA>1u|S@$0k9v7Yvo)o?!d{uZ_ct&_u zcuv?aJTLr#@HOENg+CGwh}MsFeMxv(ct!X-as9sV54bZ2a=QYgR^&)4av(QedxXux z7GbNfP1r8%5bhQZ2-#9OYMmUk%N3k98HZj!2fhAHV1_VTm?!iKm+8*s!b;(Nc-uMf z3s}QC;e+Vub1)h?1>B^P8eMNw{q@2IVUzGV)!ZrU5_SuFguTM&g)ghNW5VOY6T*|i zSA?g9XM|^k=Y;*j^TLa&?Z>*lB>b65uIT!=daJjDzZZTW{1BLHI0oMVI)yGFM&Br* z|CNgo4Xog&fP}%4X)mX7al9RveHvGgp3SuKdtkcwX00LO(PY z5+-iM7cf^NyD%VwD^K~* zx6PGrn+u!F68g5eur`ziz587GQ@O_5dgph9zmuHb)%APA_fJXzX2S=u~V+B{j>JXzX2S=u~V+B{j> zJXzX2S=u~V+B{j>JXzX2S=u~V+B{j>JXzX2S=u~V+B{j>JXzX2S=u~V+B{j>JXzX2 zS=u~V+B{j>JXzX2_2oQS+B{j>eDJ#gyBftp0{Mnp7_SnKFbA5J4^RIJa2fPJANoeD z6jlq@37d6)i?CJLCTtgW2zLu#Qf&u>2Ze`(hlNLkM};q|=3~O+!V|)i!dHZ+g=d6k zh3AC*!t=rb(S2QY{#YfKgja;W6W8wx|A0Ha(gd$G!7EL`F~!gXuQb6cP4G$+ywU`( zG{GxP@JbWB(gd$G!7EMhN)x=&1g|u~D^2i96TH#{uQb6cP4G$+ywU`(G{GxP@JbWB z(gd$G!7EMhN)x=&1g|u~D^2i96TH#{uQb6cP4G$+ywU`(G@$^t=!#JQTSTN^Ss=f% zKz?O`xGTUY?jp*c)35Xd3*-qF$P+A(Cs-g)ut1(*0Y+K8f3I+#@I~Q8JxkxP5OUrE zexbhjh4AC}Yl@H_T%o@Bg&K1fYRp-PuYVEB>A@9h%vlJHjl=aal`j`o z3h%$Q2IW<%ZH=&6E?%Ag6df}IK ze}k@@gd9;6qD_e$Q52$0iS0s;C<@W0M2=kxHFho3*tJk&*Fue53pI8v)Y!EUF)ng< zKzLAiNO)LyM0iyAvN$>>JT5#TJSlud_^PO%*7X_TS>ZWhzwo^92fFh$;SYsB5^|JM z2)~SP#gTI%EH+!@lJK&AXRSj!~5_a#uj|iOdm9J3$Ce|K53>8n)xiQ8C&ov zw%~&;_FiRL)@L|+JWNg8Q)0K#fE%+2$ z@F}+7gQl^Bu?3%E3qFiGc+J>?4;om6*gB(I#n8YVKx$yIG_V*N$dWjGeTt!hyp9)A z>x!XoEXhG_#n7ugK#skOp;ttXy^Eny-vM&$U97QpF*N5Qt{HJEhE}lVdLgxHo(uRA{wekf$C6{FR5V2w4sp%QsRCFu2U;+o!23Hm#c-cX5J zq(m)Jq82GZPrrzAwn&Luqy)WqFRtkgmB0swI+YiKJR0sg|Heur|uG zMDi>_UtkHPS^}x^t>_JvKw?CCLnYAj^B8ecw@YPROQqYT((O`x@k=4YE%=pR{8Cxh zQhf1u;5tP}Juj7)gs2jFN-5-g3P@k6RNwtlNSoL6m`c$LSlcq;a$%+Le$`*4I@buR zRlZi&>vX+d*Bfp9IQA=e}OVQTki=J00+L}nus}yZbq~}$N zwkE!$nhyvM3J(bn3y%no3SSl;6CM|y5S|piB79Zve_GdPglC24g#E(v!XN0)*MvV5 z{zyoRS_+Fwe(A@RLVtLDNqAZJ(3>lT7O|XuT&euHQd!he_03ZBP3i{wW~usSsYVN> z&@|rvfsnJerLw4{vZxE7R~NCrB=u(j^yfN|v+WC@ImA4nSGWv2TP{EkB~}Wnh3kYH zZheIEjnMW5=#|86s<~d+AZ!wH=63;FipY8M1!yTE=gk+OrHGt2Uw~doTE~RPg(rk3 zg|7%t3(pA83eO4qh3AEw`CS01vbIaYpQ+@Eu79hydQ13w;RnJGfn}0OnPgHXnUqN; zW#~uO@hj)J%ODdXV+&=9EtDy?PzIf32{|njr)A=_Oq`a9(=u^d22Od;F(KmsWr_oo zDGpGkI6#@=0A-2;lqn8SrZ_;E;s9le1C&93_$=c9W#E)ZPRpP<*D)K-72%pkfXA4a7tv1x*YuS+ACy?x?C~pa>ZN96{9YP2gjNjZz+ck>;=*S zlq*JE4ox5x#;D6RYgVopb-7|G<*?W+XDp>$^JwMh`z+x&zZ}vdGDckv=@A*DE{F7p zj8T^>MqLi?=?bnHqb@fXqb`T{$M@k#yIfS;h;d{c5 zfJ;GTFVHEZPrVfF#S$OJR7)ZAE5LGHGdhiZIfR?R=~BJJQu)qHA%8yQ7d8st7QQ2V zSNNXrBVeWIR*G(=eECYztrXo#(XABSN_ps&qFV`@e-Y1;_e#;N6x~YEtwfu$X40*M zoQb4c2{{u<_db04N`cJcxes4GVk|~$_u+d-tW$|!xWm|rlAXd`!bX+9Eqq7#J3aNT zuHO^Buab{&y+SRxLM^xg+?_%RrME&YxI$d4!27eDEw}=@N@NSJfR+;3f-ArgkuA6a z91+=qE5OkyV-+mJMIdABt6&+3)j~$pSE0WX85LiJ@dlAm@m1*W#8-rjhp$3^Co&$s z3jLkPc=#&xcOoO+tI*SljCEIuyDD*4CGM)kU6r`25_eVNu1efhiMuLsS0(PM#9fuR zs}grr;;u^ERf)SbqOwL*)`-d)QCTA@YeZ#@sH_o{HKMXcRMv>f8c|szDr-b#ji{^< zl{KPLEp4opHdad;tEG+A(#C3OW3{xgTH08xcc_*&R_h(ArH$3n#%gI}wY0HX+E^`Z ztd=%bOB<`DjcY}Bt>~^5-L;~-R&>{j?po1ZE4ph%cdh8I72UO>yH<49itbv`T`Rh4 zMR%>}t`*(2qPt#R%zF7R>oG!m-&l{a3h{vOpzx6Ju<(fRsPJ_m$LH%cCf|sWfES0H)7n#5|5Byu8sO~ZPb@*qrO}l_2t@#aTo7w5w;53gzdr(;cg+nTpRV}+6YbN zH6z#?_2t^AFV{wWxi;#{wNYQLjrwwJ)R$|czFZsOkB}n2TpRV}+Nf{VMtK|?gB<+< z_iO@3r+{wZ?}YCIH><~OR*&1P9=BONZZkN#h+o;`Hmk>NR*&1P9=BONZnJvaX1piw zVUOFa9=BONZnJvaX7#wu>T#RZ<2I|u)kw}Yl5>sZTq8NxNX|7HA=F6DHIj3Uyu92K;B&r&fH`imzIYd}_sAoxG|#v{4bhCG@1~&{Di+oT^To*2!u+nb@FcN(E5BU#*6CY-PB2*b&_YDy+JB zr|iBuW%t!7yRS~!eRYsO-;lYcb&x-ixu$iHKashnb&x-ixu$iHKashnb&x-ixu$iB z3)R7kc@5Vbh1Q`hSbj;!QD`07f+fr~t&90K zCU3#sW6WpU2FuKAmyr2v+t8ZCc>T(Jwrz;RuLLrmZ5u51bs+QEwqc~oXPM8o4K|#= zGM{Z5tTeGv$b7bKXcr>$*|wowi0wk=vu#7W5Sh=m4ZQQ3`E1)TzrdQA&$bQo3&gio z{*I9OY};V@c_;JPwt;JwFrRH3I6Y<5i_>~>S}#uP#c4gX_gVZ(PV2>KJv5g0lhb-} zS}#uP#c91btrw^D;KJ-%*Ra6dV%7pL{&v|gOni_>~>x*eQeH@1V*i$KmKZr9g#JNV@_~g^UtTk3W4q>$wrl=qJ2+)IN5$Lq72Xc6dF>Z6XJb3K<~_{W*bc6V z%-Pruu8AE&=4@=&{LyxB&1>dtY}fqJcFiAc*Zk3TaLqcIv#}jq^KIYNHFGw$gKL&B zXJb3KzK942MSj^Lzig3Tw#YAA#4&LeYNIXk z%NF@%i~O=he%T^FEc0IcN?YWYE%M72`DKgzvPFK`BEM{rU$)3ETjZB5^2-+aWsCf> zMSj^Lzig3Tw#YAA{8K$S+&umo4(k7Wrk1{IW%U*&@Ge zkzcmRFI(i7E%M72`DKgzvPFK`BEM{rU$)3ETjZB5^2-+aWsCg!F8F1O{IW%U*&@Ge zkzcmRFI(i7E%M72`DKgzvPC=4g2=K$dl5ZCejOMGC9*|!s6}=_s=TK~*eYxjwhKFi zyMMlujm!!H&Qr#t~?vhk@NvgXf)m@TmBWM*Nrpd8KqxyTJ`g$rks=qg?zc;GCH>$rks=qg?zhegry*c%& zQT@G9{k>8By;1$WQT@G9{k>8By;1$WQT@G9{k>8By;1$WQT@G9{k>8By;1$WQT@G9 z{k>8By%91e7aV&us=qg?zc;GCH>$rks=qg?T^iNj8`a+%)!!S{-y7B68`a+%)!!S@ zf<;D?`bCraMU(nPlln!I`bCraMU(nPlln!I`bCraMU(nPlln!I`bCraMU(nPlln!I z`bCraMU(nPlln!I`bCraMU(nPlln!I`bCraMU(nPlln!I`bCraMU(nPlln!I`bCra zMU(nPlln!I`bCraMU(nPGdL~6{u#_-Z3d4-MhKe~A#8@OUc@ycgw4=WA|r&&&{bZ0 zg^Un3D?-=|39trcu{MKuUNb`241akqkP*UWNPs1b5H>49*bHf~gxOZjiV!v{LfEVb zVKbz}Ul}26hGvp(r;riCW@sjn5yEC@CXo@sW<>~_6(MX^gs@o=!e+>jwJ}22tO#K< zB*_v+2%8llY=#V3!VLUoNRP-2{ANW6n-w8!R)nw_lEnPFWY{7Zwn&C8l3|Nv*diIW zNQNzvVT)wgA{n+whAq&aEvSc?z%7zti)7d$8Ma7^CGB*PZTuthR#kqlcT!xqV~MKWxW3|l0_7Rj(hGHjI$TP4F*$*@&2Y?TaKCBs(9 zuvIc_l?+=Y!&b?#RWfXq3|l3`R>`ncGHjI$TP4F*$*@&2Y?TaKCBs(9uvIc_l?+=Y z!&b?#RWfXq3|l3`R>`ncGHjI$TP4F*$*@&2Y?TaKCBs(9uvIc_l?+=Y!&b?#RWfXq z3|l3`R>`ncGHjI$TP4F*$*@&2Y?TaKCBrt!uuU>-lMLG=!#2sVO)_kg4BI5bHp#F} zGHjC!+a$v_$*@f_Y?BPzB*QkzuuU>-lMLG=!#2sVO)_kg4BI5bHp#F}GHjC!+a$v_ z$*@f_Y?BPzB*QkzuuU>-lMLG=!#2sVO)_kg4BI5bHp#F}GHjC!+a$v_$*@f_Y?BPz zB*QkzuuU>-lMLG=!#2sVO)_kk4BI8ccFC|^GHjO&+a<$x$*^5AY?ln%CBt^fuw622 zmkiq_!*o5znD!B3DK{hZ=}n8Sxxy*kSB}{I3J)W$!^N@R~D9 zd(aj{df9t0h9T0+-h(j=u~0}adyl;AJ&^V(TrW@wz3e^mviHc#-UFGlHhS56AWtH_ z>^&IC5b0&_!AOQkFMAJ0GDLdWdmu5^OfP#6WX0>Ny1pj7E~J;e2NEOF%iaUI@tR)t z9*ksILN9v{Mlu(TPI28St~rQdqDXu%AW2}L(g-&tZDXu%A zX)I@Kp;KIUitA2s-6^g+#dW8+?iAOZ;<{5@cZ%yyaos7dJH>UUxb76!or*1VDz?xG zJs~Y}-6^g+#dW8+?iAOZ;<{5@cZusRaor`ZyTo;uxb70yUE;b+Tz84c{*InYeOI&w}>n?HKC9b=~b(gsA64zbgx=UPliR&(L-6gKO#C4ar?h@Bs;<`&* zcZusRaor`ZyTo;uxb70yUE;b+Tz84XG>uzz~Ev~!8 zb+@?g7T4Y4x?5a#i|cN2-7T)W#dWv1?iSbG;<{U0cZ=(8aosJhyTx_4xb7C$-Qv1i zTz8A>ZgJf$uDiu`x47;W*WKc}TU>XG>uzz~Bd&YIb&t625!XH9x<_31i0dA4-6O7h z#C4Cj?h)5L;<`s%_lWBraor=Xd&G5*xb6|xJ>t4YT=$6U9&z0xu6x9FkGSp;*FEC8 zM_l)a>mG64Bd&YIb&t625!XH9x<_31i0dA4-6O7h#dWW^?iJU);<{H{_loOYaosDf zd&PCHxb79#z2dr8T=$CWUUA(ku6xCGuek0N*S+GpS6ugs>t1o)E3SLRb+5SY71zDu zx>sEHitAo+-7Btp#dWW^?iJU);<{H{_loOYaosDfd&Tt&;P;C0g1CD@+`RzqSi;QS z7w~RGX7;{-cOx>h_XWHgk(s?O;N6JK?0rELUl5fSQ2!NUuj=2c`uD1SthH4+>xY*n zWc__3u^vdsY8F)xS^m?^FHzRR2D`|31~fPw&4^_3u;t z`&9ov)xS^m?^FHzRR2EJzfbkQsQO=2{V%Hi7ghg@s{cjR|Dx)DQT4y5`d?K2FRK0* zRsV~s|3%gRqUwK9_4g?^uMbp;5anUsX`gcQ`ap3dt~sOB2fDmwRHsk5d40;w>r-x3 zAI3SSP|i3{A4WU8W^P`ea`XBy+Tk^G^ZF3gVQtHV%+2dVRENmiyguYS?*KA4uMcq^ zmNPf6578c8GdHgfnX8WjnVZ+AaZw-U<@e&6xp{pWBlTgXg{TD6N@TWkAI4PVi@AAy7*i3M zo7aai6_L4leHc>_nVZ*#*b(ud@R0DZkhyt%h#e7`o7acf5s|rheTW?qnVZ*#*b$Mr zd3}f=@tV1LeTX0tnVZ*#2ojOGd40%s=AF#V>qE9Pk-2$&&$>Nn-tfn|W^P^| zvYmO)&s5IbygrP?h;Ip*H`}M&ygq0Y+m5+;eag-2gLbimxp{pUtr3}<*QeaPK4@K$ zv0t`sKeX;5t~qksFI%@?wr;<)eZRDQKeUebaOAdMwr;;{-G14+{jzoYW$X6K*6o+A z+b>(UU$$<)Y~6m@y8Y-ctcN4F{b*StM{fJkvP6#D_M>Hq9J%d>lz7dN+kV-){jzoY zW$X6K*6o+A+pnIrU$$<)Y~6nKvi-7k`@!`^<0Wu?3djtrm%u5J`8h8sx8x;gFRz)O z^Ag^f$o!m_FsdgqKj$TIL1cc;OQ1_+e$GpvNMwG_0Z}<1DhEX6fT$c0l>?%3KvWKh z$^lV1ASwq$<$$Oh5S0U>azIoLh{^#`IVdUzMdhHV92Av)h{_RBIU*`YMCFL691)eHpt9FE z3Mxc;Lq|c2*UYaw3h(j?kok2-)l-h@9gZr)=cwM{sQS)Pya}K33z_G36m*Hqb2|#U zMCQ321>L>IG0{CHy2nKKnCKo8-D9GAOmvTl?lI9lCc4K&_n7D&6WwE?dkp-tX3{+- zy2nKKnCKo8-Q%KrTy&3%?s3sQF1p7>_qgaD7v1Bcdt7vni|%pJJubS(MfbSq9v9u? zqI+C)kBjbc(LEu$Cq(yz=$;VW6QX-UbWe!x3DG?vx+g^Ugy^0S-4mjFLUd1v?g`O7 zA-X3-_k`%45Z#lads1{yitb6#Jt?{;MfarWo)q1aqI*(wPm1nI(LE`;Cq?(9=$;ha zlcIZ4bWe)zNzr{3bWa(tf-aG^>s8hKsvb?pe`2E4pVz_pIoi z72UIsy&$?5ME8Q|UJ%_2 zqI*GfFNp31(Y+wL7ex1h=njA`);fYNk+WR`icAhDGC82gugl`SE{pd%cw{*(-s_-Cq{Vw3bcwWh7Zv}!sQBka z#Xm19{&`XH&x?wGUR3<^qT-(y75}`b_~#{Q*ClD!C27|sY1bub*ClD!C27|sY1bva z|0QYHCB6S8Y1bub*ClD!C27|sY1bub*ClD!C27|sY1bQ|yTf<`bcrru9CY9f&|L}S zo?~x7Pk7Be$KC+li@+LToqpY>`|E{%mFy7i6gH@Qm#!OyO)BB8VsD^jiN96JTf(<> z&pX0*h3^S}uU|h9eklA1<(Jj6m({YD)v}i*nagU~%aY7xwd`fJ>}9p=Wwq>Owd`fJ z>}9p=Wwq>Owd`fJ>}9p=6}8S4wayi_&K0!|R_nsfU?n1Y7FKfTnl|T(-r8tL?5rXNX*FcNN+~JPKCv%3>!XEt;1uz^OjHb2DL)}pnV2UDy0fta)uG1B-`tHk87O6_Ahojy&iP2HKh z_ue{o#@=@NJk`GMduP~Pexj?ZWz&V{oH=`c&OP7H`OdlbeCK<`pMv;P5Pu5dPeJ@C zh(87Kry%|m#Ge9mo=+ry3gS;e{3(b(1@WgK{uIQYg7{Mqe+uGHLHsF*KLzopApR7@ zpMv;P5Pu5dPeJ@Ch(87Kry%|m#GiurQxJa&;!gp(#1@i21@Q+_IZ-Z(KZvV`mKVjJ zqWFUtJUT-CDT+Tu@dvxI!1<#1Qxt!S;tzIOKy!-X5B#H5Gxet^{uITZqWFW=C)G*) zDT+Tu@uw*M6vdyS_)`>risDaE{3(h*Me(O7{uITZqWDu3e~RJ{W|V3t^`|KQ6vdyS z_ygOov(%rW_)`>risDaE{29P#vcn9(svky9FYy74Cd}zOJpg;oe4ftIgK+@!w|3<8 z5+A@=Q$$WL@d1p>yo+Aq0~mdHmR{lm7+;v*rJNp&1F)9N?^b?~a(ammz*;h=@ALrX zUA&7Pi~|^#S*Dlx0KSqjrGROQN(SN=u@&BuY!7v?NMPqO>GROR%DQQ3EM0iPDlNEs4^SC@pJ@E`zT1 zu)qA$UIuk6^GkbKy`Zd7xU9ZVR$nNqFO+2~%JQEq%YTx)1ef71`cIbSKUqdkIe;?v zZj{kenA2anjGn@rU&zZEPsWH|GDb}1j1yj#|72PIlV$l&mgPTLMvr3)xp$+C9><(} zH_GU7%#SGN-i}W$(3J#TNzj!9T}jZD1YJqcl>}W$(3J#TNzj!9T}jZD z1YJqcl>}W$(3J#TNzj!9T}jZD1YJqcl>}W$(3J#TNzj!9T}jZD1YJqcl>}W$(3J#T zNzj!9T}jY|%{%}~DM42fbR|Jo5_Ba&R}yq3L01xVB|%pbbR|Jo5_Ba&R}yq3L01xV zB|%pbbR|Jo5_BcOL0B8a1A?7l&Nt;j$Z;=n#=;te)R;3C)*z(De64cYoI$+%S?>mDSeH`SBu{?+|h-JPV4?kMLc15VB+We%1eB<&3dB2#GNN zBjq1e{(y464Gn@PJj*y*gL*R>1P548Njcwn2Vs$z^PP7PwupH}XRFE?V|fsEX+7qA zTnF@|&z|(zlRkUWXHWX`9+J>9Z$&_N33A^x2a>d(vl5`s_)cJ?XP2efFf! zp7hz1K6}z`9+J>9Z$&_N33A^x2a>d(vl5`s_)cJ?XP2efFf!p7hz1K6}z#Nzj)BeM!)l1bs=+mjr!DkUPwm;a*D6mjr!D(3b>#Nzj)BeM!)l1bs=+ zmjr!D(3b>#Nzj)BeM!)l1bs=+mjr!D(3b>#Nzj)BeM!)l1bs=+mjr!D(3b>#Nzj)B zeM!)l1bs=+mjr!D(3b>#Nzj)BeM!)l1bs=+mjr!D(3b>#Nzj)BeM!)l1bs=+mjr!D z(3b>#Nzj)BeM!)l1bs=+mjr!D(3b>#NidK_3S^N2S)@P~DUd}9WRU_{q(BxakVOhK z3kqbB0$HR$7Aepdm_QaOkVOh)kpfwyKo%*GMG7!4LQFJSq(BxakVOh)kpf8M1kTbT z1+qwiEK&f8@CYqZfH_h-a$2N77AcTL3S^N2S)>4SBtC@}DUd}9WRU_{qyXI5i{rFN zfhe5hzPSkY{-qS;_Yv%!jHgB8sN zE1C^fG#jjFHduj{vIfouE6`HroDEi>rOY|+tw2kebKYBlCa}zTZ$-1gie`fq%?2x) z4OTQ8tU&H;Cuf5d%?2yb0UqJJw*t8zHdRqt6{S^CS{0>LQCbzHRZ&_MrBzW{6{S^C zS{0>LQCbzHRZ&_MrBzW{6{S^CS{0>LQCbzHRZ&_MrBzW{6{S^CS{0>LQCbzHRZ&_M zrBzW{6{S^CS{0>LQCbzHRZ&_Kr9g-R)iqIC6Qwm#S`(!;QCbtFHBnjsUFIFvOGWsO5w<51Q(lr;`zjYC=EP}VqsUFIFvOGWsO5w<51Q(lr;`zjYC=EP}VqsUFIFvOGWsO5w<51Q(lr;`zjYC=EP}VqsUF zIFvOGWsO5w<51Q(lr^r)8rNlw>$1jm$nmhLYbB))2_8q8`-bX}9dqs*szZV-bKg)M z+PeceS5oTGVMLsS4(~(Gm6SU4mN~zC)?t~MbFNs2?D!N$7OKlK*R_&T*Gftq(&TZj zq|{}r>yRvuaNkfJ@?y?CFLlU^Irk0KAus0KH&oY3N?j`{b*-e-wUSatFW}R;l2Qlv zm~$ni4!*Jel5*Pcx@>q|HoPtyUI!0(O;tG~3)N-AjaeLfkN|-C_kQG28EEY0{f#oQ ze1ES|J`ei+p+d8QDzjmryJ#|IR0;qa*Js*|Jf){GYevuHOl9kIWZzO^WXGI z&&O_TlxLU)lP_p2i z7_n138|6u6_S8EY<@3zVQ}1n*Cl9-33XT^V$ETY4ElV5a7PF&eL!&&+w6#3YD4%Z@ zwS2u%o<8MRi`yvAFm1Cw(J0R}owL5xD9?)BJ$r4VJlm|DbF5LGYo^T!8f75M%=zK9 z*}mPmRCkYKElVu7*0il|TZwG7)v?=hcHf*$$1|N)dwyr!-eYarlS+2(NhPfQl+$Bv zP1?!au4JdRIh%2;8{@r6YjJzr$u4fS+Ea;S#>T09rZbtdoSvk$?fQ1>roLn*y1H?} z3hS0+&Q4`B*6P;Pt-N_-I-c0sd~WpE=2JIVyui{G8`#j*Lw^serfu!(ty`0}lgwqV zK=V^}kCnx9?QA}mNb-)AszLXrY%6X#xp-%?H=f&RWxLKwa%;0qr}E+y)(ll^$H9SI zidFU{yW)wY)fMkerFUDMNjue@0drEBh%@=#UNDKAC)00@=j?d@%8oes*SI!!>Qk*{ z5v#4T*hh(n@ijGcwN`m#rPd1hFPE z^K37k-;wQv<|OZQtd6{6_3O^gl--w(?~Wddn!8h(c$$n)IrhlA)A3w4m|>^(B<)sf zI}|68j@x!Bf$RHn*}iPffx6f$EIivuCGxl)ZQqr$QyuAKlcV{*zGN-|2ClHWQ@fJl zaysciCAzY?UON&*DxR}?;q|4H$<9+tg?$)r(r#Ogo)S?!>`{ zRMXk)POCS*6Z}o?N_Bz{x(R}2A?`%V+8?)@G8A(t|D4FSu7-1)SQ!8^>b}1@`6HldWsVv$WQD;ZwN(bXsS2CHVFrn4` zpwsDD0amBLB@yT3vN&fuxqQOO=b#F?EXe?!PP`+PPB{@*sKVL2ok`kuYmejfZCJIc zzrP>7p-+~fHIeOIb++S8<+WEuo#b83p1kU3u{q1m_L$|r7;|JbA803XsXoVUwNvTV zY_5CNO`F@7H+gY}bLLva2I<32{+vmfZqtJ`N(@>m@68bPvIE(N%=*5$)bHZajE&dmBT1#9L zGopsNz73LVwqr4Bi&`1=ut?6!)eEi%mm{gMcTtM$Ar@$-^vDNlXhb{Pn?}ksIAi0= zsBiV5L~UZ9OX;fUjs%WpP)8a^6FQdx=Pc+K`Hgr*$ax2!Ozq`g7Ro(1$LF$Fl0(!c z%iMuuydvt&k)~04eT}yA>7=z^eV2VTue(`GM1KeB?QGbaq`6a1>%difYX7ijcH(;0 zOKK_gAxfh*cdI^fqp9(17rA%#XS1#xsE;&*I)j(Z*5oE2^KoVvppL z$t!ZyHncVo-8_~Mw^)C~_gy%~Iy&$-xiwNp^SF~b&Ym4u>fZ+TCkVWw{KPfA6 zdS6A{HT048_=IRI zVBOSIj&n`z?ZlC&B^i|X6!MOJC=2a~ctajhW;y(idQGH9EO(C32x>pA&q`d$C-Hn_ zclhg|)wE1(c^1zZ;_GnP@$8UvhwLEjbr))(l&B%>nNcm|2I5Jf{vOGLTFvJS*A9*! zY*Tb!^j98KIiibKMw;7{23x_a;?PRgMHvs*6;c{m1@>B6SN4NeJefM!2m7!J|NHen z8XMRrB6~!h(bn|hiqT#_QsNxFSBcSnvFevL$5}RNYBAZEVY%r~zvuQabR3(N&(p}EjpWG+VJ^;bh4 zmta)76sU-=0RrM>pm@2t9CNM}=+mvBh%@3fz>``Fl%RD$fFV-G2F%jlfQaT-<6GyO zU@qyZJRl2EGY%w_nFxa+}$X=&-k7X7^S^S-lNWPTy|c zfk>b4GCNE>b{=*`-EHnMUo_Z-Z0^MuoZm4YH;2qaF?@lFO+ieU58?ZJ&HS#x{@&PB z^Bwc==0WT^`496$d};lpc>?~X&zL_&&rO&Q!UFv@dgrs|>*jCZOZrWCZVtkZeA|4> z{H^&jNa+XW58&1GocTM**2h<>`_1i;;!gC=H2U=?Aj>;s8*Eq#2ez~ytD|>fG~5lp zMZ`)n$IPFY_n5urz2>*D3i5sPRIDX7&HRt~QSAKKbo2M-1@o`58L^q>u=(@Ytk`Vx zJ$TN1J~k&dH}xe*hR66V~b+1j#;rwVvA#!PQLLi?d>i3OscKznzqL8rm4O01YR{~ zQnc!CvA-*d94r?0v8s>yH8=dx2aCDTrvht{lHchy{dlfrvzZ@h6^cP_pw*~;$) zvpQ2~ot?7v*Nmv?Do@wLRGgDY}}rH<(GAHn(p#v(s@W zgFZHy9Tr#c{7^Y&Chf$>FEd;De4OL?DCZYf_V^fjaqNbS?%HL-NlVV#dfxL>rce3u z)OWVbpZ1mWd!}!ko}Mvp#`k6}of*uYH~ZL}+}s6oZ+}^F-olqZJOBHyIQpvF7F@L8 zkqh2?!PgcpSa|!wqYMB0!uAXIUs$~8@{8`e=*Y#JF23dBgNrsSI{xaa^}$P8FM00L zNtd=?`jI7Tm+XDb<4bS2Y{_LmT2@?s$~g;@_vub>Yc$-#CjLfHyBH7ZPH1Z}T9>#>+MkBYCTH~V! z82!KK{YBp|dVbOGi(X&!`J%@c_qT9&3w^!l=|w*;dU?^ui>r3@@1l1XJt^qfMZYe3 zbNPW zrd4#Vq0<|fzQFW|pg#n?A?OPcwRoRa%<23423$kGUwZx0=a(M8cOlX1fj$rPc%Z)n zy&dT5Ku-tyInc|2J`T^}Ui$SGk?7M)k6!vU(5r#Iy!2?GKLfoP#wSmAYVQn32u8w~ zg%phx`%aD&#Qj@@L{uTJ{YIn4ajpHX1npe+<*F|+{)q6m1&Qc>#P+)ZT5>b)C92<6 z93!G1@%)J9M=U=g`MnjtMDZhr-`nx~4p?f&vmkaKk^30Qf~bAO>?2|y@%o6)b{7(n z`d)nGL5wG~jqAc(73P{SSA@A9Oe{Vk@ezlQD15}=BLW}s_YNTudymL_k0TLv?+6kR z_lUPgv^`?&5owP&dqmkI#vT#&h_6RJd|qhFfIh6LNF!-BSJ791fxMP7Q}P-WdtwA z?_wM)MzLb#E)Tzq+Qpb%jM&Af59>~`E{EkgK;5C&0DT7NG0@Z-`U=offPMn>5}=O& zJp||9=5LukV@&h=VtciP1L?Pk{5lx6I{#@^;EV$Os zm42@CpKgKRrG(>L*{21X4qNF!Gx5a~iBa1avyBnk7_W`d+8C>ik=n+Gq=@%RE7}hI zX@~yoz|Oei=HbLn5|3k>$4{5mkOW(p!+;iqwxpp zqL)wRQ2fkd7e{6^9t{M2P<)64Bv_y81MJ zpFtujJaKXukA)Ff>NqzS6rC8>BTk@4oItA(eHH0$Bt}zWEG0%#VjLw#QKBYOgBd?* zHDvr0EZqyx))%0yFF;dYfQ5Sjd^iCP6DDkS>j<48n)Jc4u-iI|U1A`$QL7}8Tn#3Upl zA@LoFMo26|A`udYkSK)2AS43e^}=H(8auJriNvniKYkbEj!V(XrAU_}twCa}qG;@7 z9|ZCoP;J=<&oq;J8*EoJ1K2Bc_2!!Zan*E5TgY#RuCfv zDNYccHToIgVQ`^213U~a6w#08f)ml~o`~qgLnj(KvCxTx4)4$rvwh;9kB?s33Z1@1 zXywEzCsH|a%2z@@n;=UfloOwv=;XvE-;P9Fa-xzGlbnd;#3LsfIkCt;iF-bU^bpd+ zNRJ>rigXa^5bh=NIB~~`I!?@SB90$LBHB2y#)&jeoN=Oz6Jz|VxR3baL>DKvIFZGP zD^67L@xkBuXPNyT$GCL-MQ5@^`X#s=ZVZsT<#aM&Ge!>+vrK;ZQ^bdb(@&mMBFCcHqo{Zp)HRgeH!U;q$iM$AbkeU zCAv1TwVy;Ht~OD%iK$IQ?JppG5s6sZwCTjr=7{_>&Od|n4IGPRN*tZB+YPB{=ZTn2 zylkRnkB!Zrm<5lgSun;n%#n#3J@n4vV00QBOTbteXx=HM~vLWhHj4B zw?N~fca0)?3ueWrxB0HI8-EYIXK<B7M%sdO9TFojGX5f?FK)%( zjJ(LWi;TL+n2U_K$afINW?*Cny^DbVC+9oTl?eHmu@(6xlyMcK_tKyAMfB|Rp--Y7 z#!P$&>0zWtkRC-kh{QOFk0CKeA|oU|fpi3ku@M;=k#P|j74dUOjEKm1h>V8FScr^- z$T*16d+82XTh5_&z}oImq=awcZ$?QtIfpu_Ywg2yt$pMi3fJ(xv<(u8-WksPJum>* z18_Y6rvq>~(4KYfSZBP0Ufj#Q>Wp;oZlo9gRv3T-0XPtV0|7V?fCB-j4?ukY>H|<8 zfcgN`b7xMp`<$^0qAz6Jo5T1rj4s32GK?(4wx7A>zx*$mFWt9ic#=cM7+r|5g&0|g zIJ=Ai$(TYpBu0N^>_b}#t>ozA;u4yk6I3(mIICN9|!Q|U@zWUqR2A* z#=)A2V#}JN?;XI(!u59{m5~_FkJ0=X%a4)##=gdRuv)}@C+a&f-}yBSUm#H?#urg< ziFr%JTVeolA3JwK6X}*aNVx}*7`NR0GFChr{tnM~cfPlu?S1@g@8Zq(ZoYGmO}oaX zma&)L*w;7t<`}I6fJzISe|m&l@RFe;jMwI`^nP zcSeVab*|B@bDi5OM(1|x#>cmtiT*H}{xA>Y$r8LZEx|alq}$9 zm$6?#n5eOcb;F;3wQoYc=h8~)|4*%c>Ata#P4D{Y{p`nHe=PVHz_SdAI6p-BIeiZl zeGA|@hVw-AA*K%zeTe5nG@sr0n@B#y@ga&2_d7-VoDRV6ggyukd=TKlg+$aIV)j&# zh}T23p0VNK*mGuL4*SSBn8S{LU#tlV{_p+a&h7P=bGvmDD}AF`>6_rzXt*^#cNtH} zcr-Ge;MQokH9mX9xjlkSwC-n*12NHiN7H*>x?e(Kh;udtdjMu&4?r_!9Am;UBHZ#u zB)Dc2xYJ|6G4>ndzWpj9zBS{$z2#(_w|8PM0b_46-XfzfGLG6^h@|#D#C5wHQQz)G zl(YL0%ZyRXK7t5uA4M#*1Bn0jApH0~f#`0ZG7llv*&~Q_b`UY&K5ZUHytmINMjE4~ z9RnKpmk}xLtB9NS4C26j1M%Lzjp%L##8?|pv^DOm_OMR@7&eL`2jqxG%&zrl!|<40 zi%!PrIuB8}CgHDU+%6yrAjTdd>@g0RS*mKkl%!~0yY1p_#A^YuSIOTJ0M#|n)?o-%zc;9>2Plh(wc;PK4Jn!{}hGn Fe*xhL&Wiv5 literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BlackItalic.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BlackItalic.ttf new file mode 100644 index 0000000000000000000000000000000000000000..5decf12973e90db8a9014fe9d42a67d8a03f9489 GIT binary patch literal 111616 zcmeFad0-@9jlfOX_ZQw|Y}A>ekYWcC|K3ZLMA;TizvklWcj#8@4gV7%+sz z7z1WAOB_Q8Fbp9e0|CMiNHQcZLlTCNgaBcHB!nKW(l8k`K_ul*O zfv@gXRk!Nw=hUfc#u;Nq{85;vbIIHu+;PSq{}g9^PyfOtv1LEVVtnV7jCG9mELqmR zJi1iF_+#&*m|@|Pit68d=d$&-1kCS&GbGWPDl%^OBW&wBs+ zb+jMG`})mzkk@875BHvE}z$k23bZ`q7vJ8|L#)HeR^V>-49xR98SMOY(V9@G8-cbv)c zf6G@g4P%=98Z*k;)U*5ydxn3km!;fHNs<&7L{dc^JEe-YYqpQ#g5;q^xJ9^o0K7R{&biu;X$IdqO$PvT;b7_nA*q&+Pn1>n&`xs@-z!8Ct0;-DbCqA7z=CcxZlOXQa_s`nf6U6HJ6MhU;l#IlSxmA_tW~O61*k8i zZDM|u_bZvKNNJilL-nN(P|q^)N9hgLtIWgL^{h?v9-FH~Cw_?Qx$?n@Gk|5bG{E-b z`!D1B<|OQQ;2Ouo$2cFtF+^qL2T*pD)oXpMTRO@P$}g~;cz2j!k7seb+a}uq$HS~x zI>EN$xE0SnRVtaRd5kTUn%Dx|Tk!lx(rfGh>Tl8fD?5qf0UZ0~+KCSd?lT?QCnoM9 zTnIc6E|LfEU?N=LsG~E!)0x5p;bQ86e$CN5J&_Q&Abcbbfr}Gtv+^7Z3b+&O&p9;T z2S)-IgomjI@SqX6a87)Hv!aB7uM{2#7gG<=s**YJ9|9MIkJJHNDD6xpoCvzB#P^?I z)dKezr@%e%t!O9Cf(ANheDn?7J*-;mVLqZU!gK1JqAkKN(b%-};fcQk2Ob=qIJV)~ zi{l*}_u=s2n1kbh^4bL9?H+9dyN5r??#8j7zd!MTtYvrO*e`1*KEPO)qyV*`0TcnRCD)Bt5>0~$HkilCn&CL@()eHj$A5Z)h?+z<>q5j`kv22|D6G)s#mvPA^{_c?E}I8E(aZYS0=AI#vqfw% zTf&yIWo$WH!3NkM8)7TjDz=)fVQbki8^JiPX4kN5*>#Y}cd(P}8|+?oAA5k^&;E)1 zGy5ich&{}{#U5pkurYRuJueW0 z587oP+sZjR%{E7zoo4T{3AT+LWdApNkUhgLXY1JxHqPDvF8&wW z&MpDw*0C$tRqS^5Gxieu1ACACiT#=Vk-g8p!xi>@_6zng`-FYO{>HUj$39>evHxU$ zVgJppWJlRo*!AoPyOAAZH?bSoZR|Kkcq==>zQ(@Fe$0Nue#g#dZ?U)8JL~}aJ^L+t zlPP={WtIY(8eob6cbBpWuH%Kgig)rQd?g>@m-3sX|4aHe=|AM}dCVTW$L;ZXf}ToG zlc&@3u-E4e`Xry$m+Le7>^`?I&O2l8%zgWpZ~y$QzrXdjxBmRrpWgcY zTkpK}%eS6>>+5fw{7usvC$zAuL{IP|-kpa(GfB%4YEI#P)j5W|z!{DH2ETd~=bgYzaGrBxum2^=_ zCBD}`;MwRoa%99amf1frj3*v?mq}OkbX7m>7#hSApJSy`O59~nNSl|qp*eHah3hCLnl%rLc$ ze~SkEo)+Bt$BY}C4zCwI&j^p{Lu2~#$XI6Bb_w zM8k1!C*F?n(1s&XzsJ*Z1g)4R-+H3ry=P1V(&8b{*f3!_zG&ca*`s(IkIO;DKG@z4 zOzJy;GEvyyJv^rA0D6W!7@tbfa>wwfe@y8Z83n%Oju8j0hX;Xv6dS>J!8!i!kp_n! z?Q|1P^c|utG@&+yFMvjI17L*4G(-$k7xlm|AY8OA<1hHc;r9+swg{A%X*dw|W13)c zIQ|xlvOqi@)BD@;uG{pJ(H5KVM_<1o)&PlN-HUVOaf0EKxgLS?Z_DK zTJK+{vX?&zPjn|TW=(#qBL&c55+E2r3g))3-xH;gcY}Fa2BW7kxEaJ+n0^enPd>J% zAB)nds?*9i@W}#|4#0fCyD2(m0PdZi^V}6a#kkotmWwj(@K`=h{_vPFlxlohzk=a0 zQ|Jijg$Uya_~A2s2dbiD85lybfG5#f3j81>u$w0edRIs34WH6O0;Fj&1*9*fx}JZG z&|&aX3U0m%fwY7uF3^q@Ys%Tkv=AF{M=7wYU?{6e%>t#^LqsJzh_L z*?Sa?(7dkXFqU{q^L==uZ!3<84--#`;%~xM#Q!|bpOl`E-%#Gvyr5OIaqU4}wr-v7 zF5NS_PxV3ltr_}^J2Dq%zMQo=>o3`@*?-B|o%6n7z;LDE3BxY0j{14Ame>ukAIIKrc&}00xV7=)rc0a4 zn}=E!w7k&r>8vYf{k?T->oaXXf}?S$Bizx@(b>`8v8rQp$KFnJSGcR8tFx=WYgO0g zuDxA{x{h{xy2ITK-JRY2-K)Acci+&nyk~RIfu5s1Cws=`*yfy`tDS3{>z-Raw|;K> z{CT~rdN=p(?LE|cwD*qQ`+CQEpY0p%+t+uv@2gKJ)18(e#EcA`S)G%UH9#J?R?+)5A2q9x56JpEK6wyH3i_Y&0@3J>9}Qf zysdRsOLJ3wZMeMHSLDhE9cJo6^T%@g2ja6BN07~pzly{W(_u1PCWe1OaxV3XhORO) zv<$wYR-0AC^m-j#>p*)Ry<`5^8Z^?8Y($p0B=c&i`>k?p}q&~7jGlovUSA#U?5)Ua8$+v!FYv3b87qtE5E%qI4=;}7L!^}|E0J!>TpC`i;LT$c6+pq z@WY;v56eq6k0KgTz;25hv$7ELF32j#&&88WNUhXZ3e6dyJMO0b(wH=|B4bp{BZH>i z$6y1=0^)@z<5$a|crj|x|6U9`gmM_28>1Hy7QY5(iP7+b1Sl#_)lpg_$b!o{1NZxa z72M>VyyR~dM{{dy!ez3)SUNa)t$8%@yOXuCSnWyfp1i_P@r`Wo+V?QlR@TlN4$+lY>xd6CU52ifWoR>MiL4+eARZ7D(zDzweJ+Kv5OUIFW^oE?G0`Vbo*{>W zdi^XrkLSqQP-rAbWDe}oO9OocGbr?lY`AcOAb|`)jegl6hqy`Hw(**nKi0~dIoPQ$VCrdbagPQ4F0e*H{RAgcMla9|H&hBALiF5_EZ$>jhWn%_>Hr)FpFRB@)Q=W z`sAWW8IMG(6MOjer5;0e;#d14<)4UGKmP==JZU1N9M|qeOst*F=bPe&=EnNEl7QP; zXv@?KD$f9xn|gdjKyi0lI2S;OYY>iPvK!EpY5@}lN(D#(ZwO29c^w!6e61+iibn_h zW&NMGU{qVk`9E(V*$0w4|A(UxeTaAcqact;j`;x!z@-?#!O5!!sSvGbqH+m{g5uPqVC$$^GTJ)tx*r`Z)K+gGkw+6-Sslkcj0i#-s`=7){d{TB@l{qt2zwdXrSFPK-y3qYqe!0j+v|b zb}b(L_R+zNuh>JMYTWYH#q0*qoZL{PVw2IK$PGAJ{8kkulc^9PUZ-!1!SCRzC3GI+y1f31lU99CA zO}56P1vU9m4^;PM^-!KFYYF&Ttx+o|k*J_y#=43kG!cCmD8qL@Q(y0hcL9yC2&8JJ zfi%%*VIe?6k)aWsu~8JsAR0(@gL)%qfW!q*OZu8{PjsMDHF|;BQd8Y331UzY|Apmb zW%ibZ!g|UIQu6j%Day~oHdHUk~LVhG!sB_I-J6fWPFPJm8!G=Pe zF-sk0N1;pXu=z7J&qJQ{uutP=L}}uoGM~q3H)Ln%STk?dljd*(4;>oLrLNA}B8x^V zmvBW3fdaD&f$nNh03chegLDNZWN;D`D~CKO0xHutO4@Fl{f{+8l8IU(!UCR+8Z;E| z{`@wmAHcCdGYA|=^aI@r)HoqN)ebf1)v2n0%r%`B3ZO)oX+Wx#*9$EGqs8O}+ADzE z6#8Ri#Q^7KHz=V#hBwliLst(*p2*L(+V#HWzPe(Q!^`txHjT^mOVh^Q|4N)Kt||2z zjRQa0y5Yo@`ijN7+nv_dy$>YbFqXAf)Q(0IXId*X&)2U!(BYR03bz*3c9)b6)FkfQ zahbz+OJY;vhZ*J~tF^hUZvA!3d#^fwrFYha^(#*7>pJstS!b1_*vB{29RNN#*+KkG zVFxXY(|nJxe&m$(QvmXY@gqu-HIuY_;zjCn;$yVI{Pcz}nlxaN23*>HnQF95HB?Zg zGx4OfK^tXWri&|`km*VTXBMya1Sp!-kVuy%66JJzw=Qdfx%#A z;1Bq&Huc?X3w^g1GFjN0ZJZ=?rleDEW37^rOP~K;xpDe;pa1TP6N%Ro?<9Vk`tGLR z{x^p}Bk1gvYver5N0_PFEa2V18XR^3?-KBguPPEQE%q0g^K!HGI#|GPc?4|98o?9^ zhuIkq%}@wU0}r5E`i8(1os*VytUhMoxtugo4CW+((;BR6;jmqRB3&ykNGU-#6>%DK zNfP?J-=fJicuhCd-(W5=2fYWD9>{fODU#)=Mb5}Dc+K>p)NCrw-@o`ko+FFox<#&e zwA^p7WUkn=0)YgrZE){UrX?r8P@k_Kd(>Q+Z*XT0>|K$St0=kIgXgcnyG(NyUQ(I^ z`n-nSuPj&Y#2n$?xDijXSXO3+UZ>R{a{{I(WQ#Dmp)Z(*%sr_NOsb9@7id5#hJ8+F zuf`D%Pbnu17y^-M=BbVvl}BMJu2qdZug)v`O>nVHa$Xg`(3!Zd>f`FfQ77MBt=yT| z{c2(tKlUoWfj;F zjI@UfJZ)=c)n{e-BjHS6L#buV6DzY7)pZ4{&)>ZxQkiAU$t$gCE0vv*76F@8{5@$G z@&aTQh-=Alknlw$zf42D7!C8v_`C^YIl%w!Nn}f}eT3(>iH|U&HV68}kx1-o0T!; z+we{}rf(ry#FsN^0JQ>w;$viL3vKz+?2>4e<&gA{b)fE2oukxY&^%U+f)Z<;_)s|j zon&GqY<=8V0IgKyGM5yTWMwcDH>G_!%x#k?0?UK+j)tpth&pC?XyUmHmkd%LFQL6K z{>f5!kYXs|txG8ZZ)}B1YlWhZLg5?W$Gauz=?xF;o4xLv?_Z^!|Cl*z^ZfFn>bSRc zlQ?UhpLgrqxBfmc_SW`!x4m`i?|J`Q+s}CWzy9%kTaPUE_TT&QH@054$cxUt0J61d z9>YBOz47e)yj(+0wjK&9?Q8q9KnM~$i2W1NroxCz)n(|apVb&9r zQBHwh#r%^Ms2(|06`v_gDv`RRqbu%O5tTtQr z6!AB^*UfS)SWw(nTbg5zm08Spxp&<9xaRrT`ooKcZoB$md*T;)#%NH=@Xu=>cFcD0 zhuXGn+|V$0X+fac6$&bjZC~F8<`6V~CE(M^o`_pGo7EhvtB6Lz#Xh&Qz{EOvXGV&b zJL2%9Gr6KE|;g z7@X1|BrhNfVf+(pLgF<3Mb&xDjMr05R?ujL#t4$FRp!>o4J2uvN zXOF};Z4CFFcj@(WH=o=+&vMk{&o7E(c-Qnb4YhhKZM#-FS6(#7y|8cIR=YV?no*E- zmutr@1n1QkcP-qvw82<@)21ayb}emmM%LcEv0ksWSywD9>snn?++1$`882#FQa^vu z!lqDAl2njGuH=CxcO%x7huoB}#|@T(yxc6(MF3u!CfyJ=3U`C9Fj$HdA;^&QH9&-^ z=tj9(3ap~2N(hq@`FRE;>uUf7?| z^4tsJjd8F1=5d?sbFC;#d{j36w5w9ilFdArctXj^Of>O}rK*3jcoW~^O9Gzj0k8l~J2I_JniH(eA@|w^~ z^qE4T6eWTUE#d_bP{f@^3C>!){qt(02G^nuaA>+61*wxnSqdVy)CQd}ZlWxM?DxWR zo*E-f`Q9pFfnBw_5|dZyRSGM*D-$Q?m-YJ3`}%qH!w>%cD?OKNS>fB3UtZvZZj-qqB(YXauPgkIaS<%Y$V{p!x;uIl!{C1#_i#8bU^Tl2uCJY%)= zD~u7e(hhj7fgNo}Uebjm!9r!;B5MIOke%Dp)KX^S3QRhH1|wjA6s#IWt`tH$%{8Qg zA-y7MS+p(HqJjd^2o9!r%nVGXf+ERes^0-egQOS!sE)^^hLV0a_u8%T!Mk6-Y{$bF z%-XY)Ur{(z$1}(O7+93}=fdjw)%7EDLhkwnmGx`7O61!s*4(gW_fPH^?6~m$b=Umu z5P#lPI{s6GA(0oIU*{^DH`-j)SMMsFy9sdMl#{0X7<6M{3**r2I9qaaGIUBxI+=-L zK@#w)p{P&*VMExoa4}#6kgH8^p^s9!d5YF06IFGYLD-;i@~L9Vj}01=VSI6Z+O2pyDrWcNbf;A`PuBd=RlL;A#}I)C;p?F1s;qkJbBq zoXu{lpBtMS3Hj>$b%<$uxi>9SqxMV*>c*`H`Uqn}?7^V~DN-;&hwh^Ph+-fUnGy2p zlNE@B6~PKqs-ieZ2IM@Y9@STsk0u#3NP3MbU29>SlNKsTiOQs*VLInt(w_J5#qHiX zyA~{2+<*OdcdY%|&RG{-v~&IPJAW}eYp~g6j`UQw4>i~dBHf2(_lI-y1I?lOzG`c3 zaZ6ro^!nvp2R8H-mK|QX_TCFSVr#FMf9R>I^4mwZpSq;;cft0Rb)_8@_5jW$?UhdH zhDhh);-bc|y?9nX5*#W3TnTw(Ot}xREkb7A?vy4kw1N+ccu|@Uid{l#!p9~~z|aw2 zN$L!W%?Je!^F5L*1{NS42n-0w!~RGL13X0F0KAa`9!~-KZO^a(1M{UdM5`U5M^4x~19lXt1GbdEHe3oz3s>Y!L!7<*cuTYbu zW2y;i3BKP<#`?L_NuM#^hri64m;U`T<~@xSzR;@}s}mYyaa`Mp|2__Z`rThc9( zz;P+g<_6M_aqpB@Q!FxKEi!CrHsl21$47aZ&&!`E z*8rD@Q$Rvzg-o0Tl1BK=Rt;>#T+VNo*EnRSEAfhBme&)r@vJiL9M6*8<`4ebT4K1< zVAAXJ4R={f^~$gLKM5My#V=FZG$Y^?oiJ!#)a*r8@fO}5_pDmU+332J zTUKpZ+~3_ftGTX*?1TanVy8oVD2KFU6ZmCGAiZEF+s-ASgx$wcs z_yeV50L(ry6P6z+7Xty^lNL%+Z(IwM+`Z| zu9B`=cWld@BVT#*?xF6>pFDr={xw~ed{?&JrLk0BaLt{|P9`27Y1w|)Gr!(@@b!CF z&$;xWM5ifG?9Ux7D5zXBFZyJTE9#vc3$_o{&ANR5dHqpsc7Ar^>XPPypu1zwT?3o$ z-rlh5hl#)6b>+Vu?#{Kj44FE&d6BoF+`92!xc=UQ|M|0T9_Uz#7!!P6jjq(pTtN*Ecqv>idx0$|Wc)8f z{1{}NMt`=vMiWWoZ_A38Ofczbz93P$z04wkS+~pQ^Wu;(7`WGnQ(wd zG1^Mc4QV;&*~0v;NfrlekzgWZ&tye1Q;EY=U4}}+OcfEt8k2XLuPgbpCLP?8q(>6s z;V1aVmwkIrT~Wu@`TNfAyZPr=-VlAYWpRx)zpSI`=@Xc9@huy~;3@|%>22A$rqAxV zX48g8ub40GNL=G@TUza{4-~v+sT-KRr~~~+;0HEsLi2r~;FdU63x>*yeU8H19KDv+ zAj+GvzH5u%KO%y{D1xHlkfp*|<51cfax9BM7x_hG#$tGru3F3ISCauAnZSceLa_TM zYf~eta0au1@xX{$;rgfeFgX>9XUVYH1F=O-r5-4iqFD}lF(5*_9HCkZ`LlXBw8l(|3vi{czA{m>~HYp37_6f#Ia19KBuEQE2*^7_#mPyKw)_{UF3**E^-p5=+h z$`dFcIPgEwt#INP=G=9lqhG)pwzi9Tns9dW~y zQ21m7f~*1Rm>SU5ka?idi2j3h(;>ik26N6(8P86n-YH@)j`;Oc`|X&M~U0dplj3mnZbtR+3A4&6bUrtqZpFfGtoyApM+d1N8){z~M_ZK<%V>qrQz(E=dfsk@QqrO<8G*u_TITN%r_r z%W&9v(CN1D_j()lf90md*SvlAirB^*AAND>>f86PDc)KfaX5=x+j_!lPwsB3Sib+y z1*Q+|mS@NBE^7`N*FW;Xbr=2Snd4gzZGd;cS;CCaIErTQai>Wv!?VsiRw>fgPcHgf~UnS2k?=kGCV96 zH%y)7pfB=ciKidqbCUEl@$$rnvJW?A=$cHkDbJ9TmGtI9&@XnxL}{*61q(=r2t~vL zQr?^wB}Awmq|QNOR8ke1$%24QNwN&W+qK{U%!DLk1?hsxNI@$01*NK5IW)Cw@=C~- zyz;4ibsOq!vdd#@DPFWWe>d-zvJU*{hQ4gWzZ812E;}Yaf{qE}heNi}{I8f7kuWbp07RAqh1gSuL%CXt;vvK`4_MA_9iEG}MqLU6-^FRJy#%HNBrQmTzftM0 z&*wwVIhEX=sJB)-e6>bin|RAv;xKA|ms3?fzc2CZW4v2lZ7t-#FR_n*tEkjqs3;v@ zrO&k*B<8Y?9|J@LY-ECshRuoV#pEMP&x)IX3qeH~FQhLS3~eF*P?!r9eO%NVbiBb(S z3?>T#CiH2-0vYz@Gn4|%fe$KljY_qXzVyP_BoHVT5~86|jPu36ZZ_!u~s0@MUQaDobyY1FJur;%7GN)Ne4 z#&HT1{Ahv8YRuphl3rfNJx@FotTrZONh8tNAJ&|bv&?yC5BlRyId*!X#Up>kS!+G} z2nGlGAf5Ltber zrJUfaRJiE<+Io&k32eTjvi6?=Kx@4~)a73^qIUYm+X@X!{ zL5v#Hdo&3#OD#<(~kN2XW|wI@+BN44p1tdAOo2&nzqe?29>K|QOPvv%Yr(j z3a0T&T$W5cCV^I=mc~<=kc^^g@EtY5n?jzU3B>7Pr4UdY@w#OD2rxm!s!r^e)=Mg* zDb#`Ryp`tNNEP`_!sr*l2>y5nQOYw{e|LW@wD`hacU|r;6K|9?WSz_k6lcaRq}gFx zO<%3#8GlD}s&Vw%{zbEZ^ za(T;31AeC+^D9zXXV)N}r}5A_2_hj36LY>8yo}skyda9uXaq44xr4CO*|?_9uSLtA z3F4rvFPMenL{LdFprxq_x}Thgs|Pr=G-IQNY#zz?+pN*XdDYRbs5LTw&HA*xskbte{fOj1sj*Tl;rDQPMxu-!+iq1L&`lT^2_g80jmW zmN~g|vcIJN$ri&`IqVRD$&|(-;{XXBc&R$&lclII^%tI%4C@kP|GA}-y%mA7N#BID zm58`Whh~lTR%dMG-COg|`{wViIq>{fI<=c|CrRgXRpS8^`|D)>Swzi9EWPgs`oPBzsz{Mf#3lv6Q!|e8Wb~xnsd5cWwZyFP}lEO?qv^?eN z3G;!-18!}q(}8L4RZmcq1i=us5lInBYDGC%4#?(#m?ReglVcJX7vc&L46fk0A6-&V z4}Wli3rQ4}9;c;1wX&M|)Pd79uo`cJX!9Q83=y}Dm`ay&y#`*M)mqkDUZ>fm$x?Fc zNHNTuUB;#HM-s1HE$ij10)65{;tkEI63^NHayHvsj*2A#Io}bcd;gM1WO1>a?+n5G zy2DcEa@ASRg3}lc_&}0#7l%g!fJ}K zRf;koaR3U+LIsL&IUuB_8Cog{XK+CWDrjoFxFtyq!xI*l-^*W1yueF6j*RbVvf-c` zyjH$E;oxf%Z+eRLzg9Ao#B-)aw*7$z=s< z)?v(h1x+6WO=Bhmxz4E(o3qJ+SF<@&=17V@Jd^JLI*bNG!jOSuGzuJpG=fxw2m^2c zjlo@_)<6u?3Z})2Ngc3C__V&vD;ISop6NC0xfD!iFz?6l%Z47FA@{`2sFWuMZ!ukGmMjxa|ZqUQ{sElUag7cvmqhV^I3kTUI*(*^lu03fkOJ6fE2AdNcA+2STpXM z`fhR=8ajt=Q(3ilGG^DvRe?@d^S~_c@%s!)m3Q?sBkll~wVK5DbW3)-%1?U&4z9IU z(b8GYMkl^1jUnGLgYq5GC(6}K#~`3ePza025Q9MCn~+;PBneK&XRMsOfzeCrdJMet z(uzd}&Exfzrx(Ov(M-I8F|Wax^Vo1alhOe(HzWzZqVc-3iTYE1BB^XurNNBEpg~6^ zpDm!uqjW(bjKrKP5`(d-i6T?A^%R`)x;0Vn+Gj?Jf;^Ak_kLp4zq>=4cZ%(BOm=_z zEsWwQEVLoei;-lyF+UIfbejGl(}{jTuIe0c)-;)}k~Z9DBIl$`R|i5XkU%RUAyk#= z1e^*^lLyFY7E5Ppl%aPW#aRdQU0Ip-{QX%0_lNw77iH!s_^YSMf92=CaJ z>=^$g?6VANA2V7CrnfTEP{<`NfFuJKvwWUxUwsCqM}54b;lef*?L&$e31X1BC0v%Z z<{@v1@fFSUF4reU3)ev^G8bY}6N(G|UMYJoo>yqY8l2L?Qi^OR<2bYyqr?h_l%kLl za*q(>g|b5A1@Z}>lO%HyjdAMwy)P+_kz#>`$Q7m)JKOMu@Jv-0hsGka6B9$}k16E4 z)O|^Dtn)+XXo3Zn3v?ZwNY@dIc*(MyMWS1EVPH~%WrUTIazo|IA8?geGvX)KG;Hp# z-1MEq9rNy(H~x$--dLGmZ0x;cs4CA9$h8+2%o`Yuth|2s`tj#>neAu)UNf+-gBNvP z@YR9p?vR<_8-l%Erg@#<%jd-{g*L`~9)d8QSn_j8+N4*!RFX&OhRl-WMTl+#wjy^TocR`tK2v_qby*=%XCbw&j zw|-@Nph@%k_)SaKMuuxaNnW#E$=6$i5O zz7scu%7VpCyS0F_angQMg%JiZ$xh%v!aO_8Ymw;@B zveGyUOsOx6#ITu*6Kmr0060}7u%*65tt73yKze#WkUT+b(&xe>a;_jR^X|CCh436;7Ucio|4e->`>a)E1(CZ$yzmrwp%k;lPsj7h%gSoX zYXbg4Yn~wki?EY+N;C|PB~eC`#Q-O$vYHm@Q2+%11UrB(=sGRSh#f*R)Di@QqJgQ^ z6%rNB%@LN5}gprA_+q4D-m@8)vGhhY2FYS9s#8Miez&6sfO$R z{FpSjqO2uS>@Bup0aJf$%g#&Yt-5RHtU%Z3CATeIa``|sackdR*U0{MYpHDL*|#!o z+`7(Su~`hc*{kap*4Wzi+`E3s$?GmyT2a|IoPF_mx!#fpwh} zlu1Rg&Cjn$WG#aGGgZWwXh{_QvCr%}fb^?m6$%}tzeTu5Cn1rjrb0EzKoNqFPJ|DE z5Za^w%i_hNIa(G^30W3(iXTh)YIOYF)%C`CotIud%kJlSU(sdt?)&PHzuE27M6G=* zv$d}vo_+SrBTaE7YS0!rbjpF|!DAa6GBQut^A>Nc`X!(%PkcM^HKhplP7Lc$hj@S7 z*4VIO*}}frZ4Et*J=Ikek$|7FEX4|BJ0Ra)&ox>v^sy64O?GEs2=EVp0Stm+IWmkQ z$Xo@`*J>vzTd!BgM@AqePEihH*YuVk*|f5vt)98XFKUd~QOU)5er3OiDPhGW43z$*?JT+oxu?B1FYO#oLs>S8i0jn0W zyOJwnkc4Gw;Xr>^c6X-m>=ji9&6* zMz4p}XRfKWh1B(Q@YEC|befAB;#li}Jx5(wzbwUDD0PT3K(Hc2(Wg464yf*I55lF_9ybj3NP$+IQCM8D89g#vJ2 zOqJ<^g4-}ilbt7lil9NVB*MA0{6OVossx@8Rlv#TT4!3CoomGcW|1nVlS5DP`nf$P zmo}~ME|sMPi5C}0QZQK5*%mW)z!H0S!MyTC`}&MQ^Z0h@mOMvxeR-gBxOw~y2$UGa zc#-C9(5IE%Lms=?2+KiuVCjfLAw+(X4^4<|Cgq|?!BOEXLJq15GNmF8q8w%Es9?3> zUifTanaS43;fzBqW2_{BN&JaIh|$s&VTw-h`jg_!YdUugKmWtQ#7hVHHcxGb-yg4X zyKCb9;`W*%gd_f@$0G0X}<$-D$qx|0csEKj$#ta6Cst*H6dw95)s*u@bD)~i~g%N=JaZkpcyjplMU0X z7LA&+z3^{(9ho$7rP}6XL3QSmq$5>P=?j+vN>hbC>D^=s0wq*_24sJ{G$Xe5@L;&r z<5sYRTgaKGxs34QBkNLz4V z)+kdiPtF7SF{?xK<Gj@TqyRT+A+!gpjlLc;un=u6H(}LvI6ZBFR~&gD*_=iWkn>3 zRb+oqpbviW)X6B37aPI6T=}T1o;4s@{bVX@(*M1Z5G8Pi5g0C(EHR11vDrJ*RG)C(EXY zBRHi^qK2u(&^Z$B24WvoKu6Lo(_{eiqx9r7v+8+>-T;7%QeomKuO%|oLKbTwpW%5T z#s}Yn#ti|jqp$~Jcra5mn6V;Wght0_K~!iWwcCu?bI3)x6|lGHFX``d<@Pio?!WY& z%KG-3`v>;sb=|kAX>CV&BOjCbgPFUBR8Mo$66uv2xCqpMI#OR%0WcWEpygf@u>iRW5}oU%IX7MW|&c0RvBCsVvnZAWd)vGB}}2 z>`MdSQpLgm?7aQeni|r;;#_T@rYgprWEI-EaB#1*cAVOvIG!u z17(?RhU$>E#CXYPowNe2>A0L~Nb+CTE^aKE)g}Ixt+;(>+seCsvTMchopGFBZQFj+ z;`2w^w%xpV=lb`Wc79{)kv~4ThR%oo_|I!;yc1^AB?!3fS5F>%tVA_h0T9=>as8fi$z?xxpG#U859sSBeUQ8>Z5 z=eCmmYW&? zkGM{}wPcdX7GgTo*Lq7Usz&KqgKI12n z6Lfn^}b^rw6CVz3Bi^VGa(O@&1OCpVdu4Zq2*PO0;Z|mOsH&qQU>$db70*=Ds z@}`RRxVOG@PG`NhZp(?yo4-*f*BJARR%2Z`GNKBLN}Kv)3$EKV%j~Og>^56%PFr(n zQK`%73^Ximnsazdd=5>Gan?KWp){^(V%7ZOcwR+>;9N*)jwWpKM;uDK{6%tsR=WDYiMY>JADma z>1V!{!f4eO*F*%QW@>FUOh(bJrZ2BZBg8*gR;0yYZ{UtgSQrv<}DN%ER15hQXliY`tMl%Wzl8J34b2+p;= zD6os22*}(LmKBU1VS**|x(SV*>17b^P)#rzH*Myck~~FfIUzY9M9Ap|hJ_)eF7j2) z9})-k$uzD^ej4r-1HmEgGLxK|tU@tJ!JcYr5`~`BtlG(WLS)DD zp9s6Fs4I?O1+TyKbG|es&naZjqV+<_Jg2m_qC6HFs6G9j z)EF8pR(&v8jFxiL1L+dHN0qJw9-UGLBvUO)gQzHW zP2!(|9ikRMgPS%F_+z;I4lA9x3 zV=Oa2qOWjV?J1F4bU7M>C;w)B#PM!o=p&<5(+fLJZ`A*&Ao9MFTb(NLFb^PbnqBDQ9IVFuHWU+=VMcDdR0ztPq&r{gJ)VmKD&?UdDyWvdBVI;@0K)%Cnw83Z z$vmqzUOzR>3QXzu@}d9aPPZdtk1kJt*j|eD8Fz3g@vhsSak(a2`?R6NmH0ra=D*1^ zCqBus<@};N5gh-S$HHf2ne~Z36?lO~jAJf*0fLEzZHenGW@NTYBD;d<&ul=R4SEZa zrph$ffvFrT%anHn4m2j-#$EJ65Dg@a$gHAxMDl$y<3!ABoRd-o-nu`p!u$ST6BAtP z^=gN-nR2!>=X=>v+v&tdMNa;JJm#?^X1f|)u4Whiu9ajbpEv`$y%zn?W&7fpv{IMS zP}4Z26^LYg0qR01lNiN_L^_qqV^#qLJQtzOWKlwE+zaUmo`Tf)++?ey0fQXCbh4FK zzDRN9C*u4L=h;v5B)H@+B=$L_zsomynhM5Wc<)kEqh0EFPkc2Sxkvkud(_GH#|kqFd(Q1EGB}7B*Jl(TC%Un(?D~?tG=k{Oso9G>RJ=R&@t87 ztQ8x;U`t(!Kw`%zOh3uVT~dUuRkO8HGZw>vh$RrU!#}Csa^LyUJSo>)pl@t}B`V7r zjWaTMh^cRcX{j^BbBokSK$63cxwoHVZ~}bd4`ahMhxqkeibN9i(5b{@jdrfd| zAhta={$I*>KeJg1#)&=0hm`-q3YR91U7)HeXik>a-3tGgJdtR9ff1muE1{ek1PstK z;6xo3tyaK4iU8E0|7LaGgZ3Ez2WlDATC}hDKTs?AE&9EQf1p()?9}tV7n$7uPU_$4c+14(T&wk+FLw3R)1yNswSr{cmAHc)?EDR z*Vk!}rSuKsR>dLYbpT}V@z^s>6N$;xF65-fG5b>K#L>`d$ro}d42!ms%EYLQm zkSlf#r>#s7@TMgz>YRycT$95{eqYDTZGfYpSZQ*9T5II>szOfXF^YJ2F_S)DZAI2k z@5y8gF4+F|1;CfY4zXvIrOIK*!5F(So>^O6Uh1?%W|E~zR9%-#XhXUK^U@CQ zv{X`Z=fG@o7Fi{Z30Xh_V5M9)z=cdFv&eO8`;vMvg~0LzNmK_W{6H<*fyF~7B)tKU zCj9(INleUYSgbLtQ1DuvRaZhjG_nRupo?N+W9`ZP?LM#;+;!r3*{Yh#!O}bLy3=a6 zTE2SX_Oeyg;{Fb6;k&l7n8(vVKXKCFp-p$Cd#i>@@4WR^i_Kba$MM_CR@dPEj@xi= zF&{sEylhR4rzu=m7;f_T)HBgJ_Vl5BR~}_P_Ey~H^NJPJ_zevTyU>aj@^79yKRk zaVB1MCSJ1eimb%T(j{^=RvXN%SzcbgyoNvJ44r-Ho`JjHd++W6L64I*la7^7-xCY7 zhZq%LPehY4l_{T}NCh@jfoeyQC3W^^pPr?;D8yMOu9F|e?-umn7hZ3V8#-o3!(}BN z_p~TvtOtR@WqnOnFnKY8k(7o@PU7U^IdUn1(J2u{WN;(NV)mET{L;Xp5E!86^a47C z=I_)U|LE!TWpvoss(#AmfL5_#I%Q~}AZDFc8Jy;Vl1P2PU*pZ6y>9oq*-O{D11)b+ugj=gyyT!|)l|{k&ZFg^}UAt(ub^Mu@;;XKzpF7$!a9f3EN&VuZo0?3%sAH$uO!3J2a8tCRYvY2IH22bj@mCm_G7rG}t(%LlN$8QyP;kSf; z5VvzSu)KF(ytTSASd3p@u^RKRFHadSOG}42X3U+yLer2fk5o&f=Yxf5<00$~nx5DI z9qHADn5iF}&_XNXhptFw>U2h(2U~D0{DP+N6IGHHi5}pc85*UZs3I7q8l-j++9cwf z3|giV!i4T3dZjqH$UP3In`?n|#s0p^6sasW_>upfZP9P6e{|1=Z|rWJbIF4vdmgA+ ztSdB|UBz|b4VxU59iVe0S5P=kLFEq^@q{+WVj1wCTGK93H8AVDQ8* z4qW`JlS5_mw_b64@qu5Q7?j-E8C&M}&AsfQbsN8VNmqZ%_6)PpV!Ud1%c@pSzS;Qf zrswWQO|*FbbDK7%ufMzLvNyl6di6KnylmNtYj!ROt-1d#qRoSHyY#r`hgj#=z}w>X zXapIrRgs2hL$S~0!0dG%vX#O-EOHCUvaI(Y+a5m+KuJ6Jb&CwLX0S-Jn(N_&BUFqV zT6BTQQ}~#KBUmw{7}Y)AW+iJQ0fA~0LMY|qb6bISoos~6A7Yn|FKGk_#X1qLuE9um zXj)T%|KC+fr_2sqh zER#Ghx6om7nlcu27cXd!%Enx`H8&?W+nU=^SK(_}6xHSE5|>|%Ml`~$>~A}k}WEsRJO341xlI4NzIVIq5`2thU4&+&5}@6__*Rl)4cE3wVAK2Ot+ zUqsq`Y=&o2PJkZ^8+`_6-fwcP`V5QVH(BP)3R{@p{5da3Mq;l?>_ZWjvtWHPwtuCAKwJ@l>^z#Py%12ty`p5UkSqT%T zwTu7Hep^6hamYL)WS#@Rtv<+gam(O}g?)2-s%Vq)@?f#gL$Nx+IYhRzo4BIKw)u!% z(0U{aUQ}Zy3Y&2W>4Yr~Wp#@~9r*`jQ9{tAj6-hZA}N>D!kn2J!s>4P*gR3_OijX` zN>VMU83Grm7EG`}ZA!#b0CdneJW=XdB|bl6gZSA&!3HxmnEYwK8D(O9%gOTX4mHDR(KN=i(b7XEiDIg zogs(4#DN$F@Uu;MT>63LJZQfE`R`I(DYe?hQR!(A?k;Iuo~QX&VG}Hw!6vYxj6l;A z4+DZ!DE=?;A;d4yoV!cx6wL$$W{`F@th=hO@9Omp4ePJ&>$_@Q!>g9knAaOCwWQ9< z+Id$DH#7`iF>lW0!;Ou@mv?&`LpEEe5jFw+!eX=F!(!I2Y*s$P!p>awB4w*ld>409 zwrvx>FY$4uo+p371m09R=m=&F*|jjqF<}eS+mGo+qv;3y>Y*6_q z@$jpOXL;wVeCgS`U!!r1XRCar^on*r5;_jiZqOtP#P2#(@=6iOq+baOMbVwBW7$GDV5)5_6r12!W{IjvWxZ;lSWYM* zHclKcgg_eLl>II7lCmtRoA6r*OIX5^-TgtZNB{5p-i(@M$7J`v8$Lb1dGEY?&pr3t zbI(2ZT%2}+bfM{~a}#m?WQ|!PDdE16#g#bA0UiuzJQk>7BfzII^(+UB?vR$5r!bg- zH7?}&=PrRYe+>-?6?hMO8W-d}|4co}VfyT(lC#4!jOxhpG2x$=Q{JSe!zm6nUyCob zd`U@3^;LVy%Qr7s;Jy~qH_ZDPv{eqr+2;EH^Z^5nA|J<%V6 zuS}GK4&~V?W4gi!R#ZDnP}%?0gd(Ou6} zM!HhH-ioxsW%IB`m^|pKGw*dooWC_9HoRd;VYcnxKlm>%HX_A`Cne<1PhOPx^NNMe zaHr!pXy?u21tC$`#~y1usCGsq*Nii$Xv3sJk18k>eZwqcO=zAo3>+K#>8q!Gl0WSs z{HUjpBh`s3&0+bM5f7Lz;1c;`EKehB52|(E#e)i9u_DbK*!y9&-?7e~=Vm*!knPV?S zT`_hC&V*{hA|v~TTGi_R{I_+c)Qq))_1X0s7cAIRpPgO5X~BYx_1U(~B^zq9vT8S! zlw8TbOrZi&3I2!8uOL%Hvhf1**0u>Nt$4M$;BR%?&E@(^*H}1WB|G% z(TgJlsO<8q$|n3Y+6A#AIx!|OzO1qCnWU9fg{yYf<~3#)IHO;7B}K)>hkw2)etBVj zV{u}bYg+`2C)4;o#>dZwbbvEs7o6|37L~}j@Ej(Dw?lLw9!8XChur5Sd5&6XH{vm@EesVE9_Mul(v-udIhD5=f(xV-_w4pB7p%xFP6~CtkiY7N#+JKx zl;y9wY4PU6?PdP#8?W7!TE3=)OTDP)&6r!>fVpKnc1mDwIX@{Lc_MKJu*oyMG0(-4 z8)m=O_3U?TaSs2l+VUe@{bBJDF|OvYc%_gOxNaTI#vsPh!Y#blIlp}D^)1tG3BBs$D4A~ zY+;zK*dox4xM4CZ6mzxEh|rJ-IH^L72wP|b%+^TmTR`7MFM($}n3)Poope<&_Gk4J zI(Q%qLvL7USb2~XEm@;tIzcPe4wOk1k^mbBeK0&2A9TeOicGVCuKm|jbPzKzTZ0)k90g9a3!V|3 z&C_gfVpCZzyBIR_;U88H!=a*~W#+H4uUPnT``5EJRepS5bCf+Xra0#D82?-IQqeBG zXFu4+ZWuSulQ7u}?Y{}}eCzWq-fZU;3%wr<9EeI98JQb%Ny|hYOFfM zqv>FrPRNGSjuT%k*>DDBgNc>N5=%7Hb#3aekdWZf1RG{hoF*lgB8ob2xTLuX-9WPZ zJ1HoeXAr(XSpEv)keBu;WD!P^Hj}I?)Fzp+sIv!FP+BhF31o>Yo-95V8L<72e}c!3 zPZ5`Zr(nwb1EK z6t93_onJnE+GC4K**bOBlb9HvV6%Jf=(u63)LFXd4#?bb=hM4MUt^1JST;WMJ{ zcGE{X2U`?pekvkhD(;!(Qzkr^rrSHSW*}p@qe9)R+GHieT@XM>(d?C-s2;1C88NS^ z>+-)B)OVNpUARA-_Gn81Lbf#|1lY?-89x7)RiPQ!#5Q#i>@Q9;Ep_?Eq@dq^p}IWR z_2H+YwqIXFo!VafP;=A|UZcXr|Jlah@jq;P2{M~&_?VHVvYh8uOgTS?1}x6cv6gY6 zKzM34W0c^HRB#+O2_ry=Gfij=1v3U?=!<86jV3i7&YkkUlk1l_b7!`%Oa_wiMaot1 zTci@0dpPOgxAMp$;{#WICc@kkXGRs-UecjE8~*01(&A;!YinJ_FV4p?lk#D z*8lj-V59G+RTU%^t>3%+%G;W2%geJq^Th?L>ME+2%&)IWn3tGk|MraFqw#U;EEEh= zd6<8~ZEJ>`HyFk&_an{T$@?MiOg!(N`h3WH6Zd1L-VcqOxbK>FzhmOQ$Gk=Dd@npS zZz(5QlJRO&9ODAuE|{E78WYhl74bA{Ia9HRab=s4CODP=u0X}|(V3-um{uGmv*1QL zWn9txuM514DFvEGtK+kf;ps^PP{)RTA za@hy|LC?g0i2H@9lj*^titR;5M#lN$=J7QDKJ(R#^Dh6Uo~WgTe%mc(Lwr#pW~ct6 z@A^Ogfq8}hVW`L>?2ZHylE`XAQ0CRdo-=_^~cqPlX?g8bZ!w8VJK`mQjq5dY{+ zSvn8%z{XlvI3#xs6ePxD?Ak!s3I+rm$bgkpWiOesv&@sOl{#zjDs)b$3=wv`)ze8a zHfdH;TwQ|`U>ZqGTP6v@RMjxD;=>X|ZW5BoMN?TG5u3+>;x%pfu!JTTdNK51xZ`}* zDj)v@SL>XU^I650DTmI?(^)1{?I7`9P%mrJYrYN?0)#=gBL%_C3xh^wVhGf)2Gwpi@=D?B}|F?UehGQ|>QQ|F@oZ zPra{xZryhU?#DtIUL`ukpdVs}BcPk~SHS|kZOZ+~z<&hE(nYQqqJYF;H$X6y z2tluOM8Pn|2@X@<3)RwXHi8GNcld|SDEQ`r&!g9bz@Fz)n;gp)y3H~3Jo>6A_GTWUv3+J$P zE{^RJCwVB2|Ip+9k6Y*BSncV&Q~H^KC81aoyi0sl{(H3pwHWpPqqE+RoO)mFV?FPl zcAxs+x*s$3zS_;Y@8W%MYZYSXnjIg-YENjBBizYz_H3cyWr~Loo z|I8=N+x>5yLUG&dKllI8e|p5kvC$*u6=v3BwsNObB=MrKL{lSb;OME$cr+mHn`~-KXCBC(WJq+fmvS0 zK&|RtU5a#>C!S1mNBvPZ7x8CND{#D$r2Ti^bab>cvAVRb@UOsM~ZtNz9R z4+po|em*Z1hYyr2yejW}UAB%NfUGGOcc>k*P>rUhOzp^B)s6+vPH=p;anI0I zcl^WPCcpD*{uF69r{;|-m)F+!G9AcTZT@} zxP}dnWeqsJ?Y7aj{QR0_HTikfORDqMeEhzRh0W`h%-tN7KW}bcUP*>0Yu=psP3w@T zZ}Gat#Vgm=T!mG&ol4Bsz0OK#{N=P;?s>xb4@<7=T(o#wQ)yvwT5?gbcg59B*N^P< zawGDsF^NfONimrv^K!~dO6!|zSAJw=MOD)R--_jXKeOuGbIRcs6Pl82hRiK1X?^g} zTIpcrs&#$`f`(BJo{**Hr-Jt#Yp2}5-9&r~`V^jb#5%t^@%%5R+=s6FzAXK&Lz-O+zjL(2lDDo{JTAED|8V1V%U3jvICco`)z+;3m1o_9mnPecRSvxP| zQ}D_Jzm{i&<6Ge$_FGN60-te(SnY(&{F9Pky6i5?8-UYa7hddZ2oy){P{#?TVx9)Z z@{Z&rkW)EAYphe&L>ySpnzZzl+$$Ky=YX$KVG_zY!YB!@`y*C@0el>%tC)qv%Dd^f zcIp1B7R4-V{>146_V$(wvTq(M%Wk>m`bA&7H?eYC-;*D6+I;2S#g%1QX$7vLkNohq z8}G_!e9*sq`)!ShTXL6H90qRy+X zUa+h!8Tjh#lOQRshIIf7SObIm193rl%AZwmIUV6M5+Tsb+{Wcq4fndX|yE^Drd9NUZv zg(xsocj{boI;jsa*M$2gIF}soMHQ+=v()1;eFVJD8D1x`5@Md zk%O^hfoV5=h-9=rOv9F-(=)pv9u!Em0DbrSFyP^<0?mHx8`>osrlHIE1Z<0qw8f2AG2q*bFw6~3*<_028RhG8K8I(T^~_R) zf$$mIjA#CR$}_hc|1j$_e~{f{(fQ>?pJ92dXI{PNGvA+h=9b_ywm_L-8?_rljxCN8 zxZ+82i<_dXljM-a2rY@oy{7pno|bztqM%loI>-?*+se-5_~4upHUv=%}{x8Xgtaj)Grg|VRuGu z4W4zuJa6MTmoFKU<1A)+!yWA3o;d4*5~Fh`GXC;e7ii~+TzkO4i3C&TDF?E{obn1p25zod-V45B$WSiOAYr&QBMTOWk zMwf*xEtC;h?d!AtoZ@UMudc14X7jzC4PWEK$*Lqdg20nk?AMf%J*EaVKJT#iy?GRo}WWKf?_1|2bv8^J{;;GI81bxa4r#%jU77n`&xrE<)K; zF<;@?KSf5Z`EO0h#q)6-!J_%K#kJUNpUHDyAqhohktBiROl<~sT+NBJ!7m1Jur{pO zut&}7#MC4p7onjr@fd>~r$osbX^?w@jY?r^43I!Zvx-_&LQ^hHfs#dhasmwoLPHxo)8G6vD=f(4olvMOv2pQSGg`1ew65eT{X&!f_#viVq8TRt5Q&ns1#& z2>wHxEv)E*>akd}(hCDUTaccVen9kQsy+Diu@%VrZ$jkkML{83z3Kd;r|mm4&c9Y{ zK9J$RzSx$YvBQ$GN&UuE|6}j^M?SEGN%K?aG@eaUYpgJrHzn2AnMU1;`V}?RCG+!g z<|d;3YfWSmg1yf6uW!tCvC4VR;toeIkyu%R-XFIZqgoFeQP8<)-$8szY zpiZMQS~`sg*US(t1dsHXHdsxr?$aoq=ITQtElju>*B%=@Jjb>v*qjZkng@1NOrDo> z;h{Rs_qP{RawIc@C+P&*x#EV>@a4CCzHQ?CoP{$E*x7hZY~qq43~u)Snmkzt3W7cl z^EKp3vm342&%^N_V?NrR7N{H1GFF;5gpe}dJR1N_&H1*zppj;ZOrq?V4aDtrZAw;0d0fjB^xvgKL?8=kfW_BcgoMqyMZ6@2%H3g z$M`33wsf@t?Dqt-r|itg(F+G(l}CI?cnd*`skXdWbs`lcgYk;-jOGO^50c59;iLNE3S| zt%D2_Cx284>C8c1E&IHtjLBc77M`63|8E3RDa4ku!1gNcl4b>#=G=Cr>0R>Kf}X4V zXV=_edow?})b^?KzpMVrg6PWg3vJggz_@@&2j`tyo43~NBLi#p^r2*HT(Ep7x1&hY z#|4;u5Z*(t#DtyW#lQjQH*RuCoZ*LXO=zzi z`hF-nu_rwoTk^phEx|-OG!v&xtw=_6JKhYR`X;PObTTdzViPibez;Z`C&P7dEgL5s zYyP-)I%Awzm}pu(g-{3sxfp!PS26XXpJbv~M!3VNsLe@j93(}G?8MN#W>C{+P8`A$ zQ<+1LSQWe~6KO+~havRo^Z$3gd4HOJXR$3UbCJ=Mtjli&@#U&>OVXTn3pt7ma5RR)% zvz(GJ#%m>VD_n$vX&q-2Ab_Uj_R7ty=gi*W?={x=u+g+FDA;Cj&&B;!V@Ls zN)Z*&+KZAlOxe!acoDVZySWjU_?i`!M%!S+MM>iQP@UP^YLGgpZ zlJYP2yl(_a=R}KO*qdMgWHLyVbL&u>l4(t$3D+343qB)eaI_7KIhMpuZfl>pnuLjy z6*3xFJ))U9v9Lr_)eMe5j+a*M-&9(C`1fB8y?W!!C8XB-%GRFwXiM+*1tnMRzU#BA z+dfsY_~iNBH7zxnSaq#$tli#_=}ui_`_B!xCti2wnv`sRdCzBp$0j;V`A z%~x&Q+HmtHuej}7pYOaPf5qa)Rp*}Y-8{G*j^QnBi*J8uXLi%VRNI{g4@Bn|FGxx+ zhChD%Rrt|&N|!Na2R5z&Pdx53-}#7i*%oy65aag!Q#4uNy&T0GS?@&|znXZjN4{O_ zyu3*du;zAVj0owlxJ^D?>sbGCuaUogIy3^uRlz;R|mG5dP zquY(Yo33jo=xoNfEIM<{+3DQvd=<}FbpGXHbQJGm(TTbUoiC`~7M)+sq=WJJzx^j1 zhY|acYrNkS2X5!W;gOw@hJ12y$cX8b_m;b*i=#|41UaqgqQI{D5ChVwofVt~D1RJv z0tg`UYj9U>;Vkc9nB!Q-;7j&wzC5|nuFQG?YLGqzbbx7}4%r-@ z8FTiWne4bHGHk6g0t2#hZCE6{tfsLH`@o}A{)4lXA0MId7AP9_uT7Nye=iv~T8vqx znMei;1|I$eV?XbKp3$ zz>(QjlW2z&A7;XsEKVJeXp+AA*&hnDhm>|@RT&aKDJZY1EXr>7UvYC&ip}-;{2@z-(rmUZY30lF^OlsQrj{+q%U@oe<}AuxvM42G(URQU zr96=hMlxmVA;&e?Ya4^_r!zx9S_)44!wL}c95!X*0k{Iu-4P$5ji+RlRV4n&bg)Hd z?0v4%Y)KIjArBQS*}8Diw&eu{%eO6BxOGXvBl(3nMMXJ<`OZr3#+vl>nvLE?S5~K| zS6{g(yQCyLub6Sarjdnx(f48#PrUK5Cd8-6XBThAEB7L2xN|v`Gt=Cd;-+9h7H@C^ zb08ZmXRoPhVCw-CUztO7XgVLl;_SSO{yyJo*lF{_#NZsz+!>tuZMtT3+PuB)qh*o7 z`8wiW9Y<|%W3DvM_};AfcCB1j$y}^~84eNTwq5cSiOkFhySg4vM8UCLlTRp)c_Q5v zp5k_T8f;L>5L9Hz!qcd#$X)O-DqUunPDY@@(L3?Hn1_&5gz_tWl}J$LL?^hj8`*v- z*fdd?z#`j9)oHWEr-qykD_Od^G`o61-kkUp=To5zmToS|@-4`7UO%s}{<`IP$c2}R ziLKw*PDb!%O4hqH-LZOt z^&>c9RCDWsy&$DA~TTd!d_cW=ee><@_^RwS|B_wAgF!9CQXe7Q+{tI_PG#u<0i{FFY^B!_wWSjFf7H1n- zsVQ7Z)jZ6uu{ez_6=Pyu2Cfto6bENHp>Gj7YE8eQ(osuz1+{ug1{7ZMVXy{XyNP)K zt?Q!cFF=Lie>|(ZZ2E_+ah^j{`9k||%1Lr0X%erY!P8z~cs85cW|Ihvv+Zh-bm!FI28QXs*pO3Vi;nG3Z{R+9Dm#YW3$yJ+ZTz?D(AdRBZRpOF2?KJ zi~TTLBiLNQl3rfJOfTuoHnXwKY+qKJ{SV7JOM}`XFD&b&8u`*?MR>7)%(2w@23Br! zo1%*6=jUePT*PR1Ag_NRb(;sLs+ri*VK)ll!@`stMiGvKwX$7ssL*LxfjmOA5iWcK zJIJwxXXa~mDO{b?aKShD2593m4(JX{>+rTYk;bO{g6A;+Au+l2l1i4%lHpAZ?C{gV z%ZXV}ZSXaxEm)P{Ygp!^&yJo^9<{`&8W(tNm~HWo71cqTE08N2sqyG8Kqe9GEl9x@ zH0&$TB5Xd^>aVpYdzt{dm zQgK$iD{4-N`GO}d&f~8~;v1JIEic{~>fGT!cJ9ZqF)^|B1?CRuo6taeEjK^cl+e^r zRZ&`;k7Qjb$*~?Q7D`@6wp(3%G-{9#g%P*Li&Yd~nJp~TLAxg03zpvnM%j`Vp@CJLFrHR$2|}i5ux)E*FNbL0n@k{!&m()(40@JyXc6in6f{R* zQD%^Vugx%!oQQr9M2o}8#|2A_o-IK_P6t>L9ui=QHQ68`m~Jgp z9rlWcaz{JvAOI0#Dgx|5SBGs;GOz;0!4r-qCQiISIU+WdpPFCYUpLEs5rB0 zslO-k(lXPt)V$MrB)Pi2F+JK6pzWDU8f%l0ztSwXrSG_uAf5l+j-*mc&isv(DDyeW zSz|H68LY8vr?JkgdrMjwXi1t%()pS8)5H zL8n#1nub)(m|P*9Fx=Tz#y(o(Gyk15bF;Xu;4j~KV8({=oWJmIwo@ql-EW8OaDEHC z%0|}M#fbF0-q>#rHKlcS+;Y>kJGO3Fzi!2{hPrZZ$$ah>v1XM~^m;S9A?DT~0t3~^ zi!ehYP3#BIVt_Thq@nIfcbk^eAAWCb>!x>#=Ym&X#=BT^h!g>Iz#RH`ad=-a2B+>K z?_-k#a|c+GgzwKrgHCd`^ctGG2zU1~SA4h=J6zCFIq5(<&RR26#>qUc*{oHdQ2a}W zbL%8Ax6AEx%}NZLC?mrnFdOEINswLPZqYQ{hAYIaoejYx*rKiQ2wK`RoCBfOx%B~` zh5Rs@`&{}t9(fb+QcDP@Q?WZ1-`u}~X`*U&9$w#c^V)*f=V#9=PV*FICl_bL*dFzi zz|Eks1NqA^kRYJv<#h3Vvy^#5kZS#<` zDuMR8ErIs>?75Iddmi<|0dD#{j?78m8_WTs;qHs-lJk3@Z&6W4VSn0{BAt}v_@!fb(y0RbeT zVWHt+%*^VhUzeIM(hNb@59jd3t(BAAE(`~bK$*K-F)oE5vA=D)I8Bt1Q%+F1DD^NG z^V~2J&Z5jej0d^ya;Sn+ZYO#eN(rqUVrgw8my^Cg5_Ktn|cRqY(_lnzhtVzBjDkUizslW3o z^Kbk@iTP_6PCvHckzb7S3!i{@_SAt`@1ls!K?Bw~NZzKwtT!;g*4 zT?nU*&G@W+o%2@6Ru-oDziUd$&dx5%R))0P9PY)Bk3sg1aM^rp|FWcLQqf#eTs@aU@8XfrAHSRl}UeEP~BP5w|P{5VP`APjgRa$5zQf1XIb* zJrSJ{6U;&O(^yE`J%5}#UgI%DoF3)Bi@o zK-K@L=u2>XHEv;CTuI`qiJ|8oFhg$k|3`d$LYx_vQaQ)}XWMmQ326`do6PS%hytNx z&Nc9nRT*DZuFWa~S$+zT3o0Sbg#!r!u^u_8u{1Xr$pGoc90AKY7?m`DDWz$^nMB4G z2cHFL^htFVJP12R8&KH!_zK@u-pvahSK?DVjW8hOD-D<~`V?H|e9KC7fHU5$q`_8v zU7|gc@t}>!$fY0~6U+0K^@5oS`+{w7Sfo-u9r_x<>DYs+^IeI&|U73W;+wI#YLcYN-;zTxVdhuarlyR0zm{J)jvg*(6S zvAJ7153lX}f9_j1U;FjZ+fw&^p|}$A%RRH}oZmJUVSmqkP1u!JU+Z07wtPWJ zQ30|Gd5};h$kQtLuZ&C+j;)Ea2k^f9SkhA99PLjJjzM>F(m?0D_8c@d&hjQ2hLVOi zCurb3lL=qp6blj{9Zc;wP6sA(%)val$;ZkBfLx4LNQ10)E)SQ&X=bt6+%kXbHMzls1+AfXquTOVu$VdQT9;hxk1U{u{RXBWSu%hbt~F24@a^ zu*UY2IrA5lCnZ%ZDxQO;YWF|sd<^A^FrHLDnwE8Zq8}y7R)=1&^3=)?i)8{v1-*sh z<76i+Pokr7f|5rkEq;W>|FoSQE0Y74iFqh~#s4tjvy#~I4ZgtDBskpRK6TJjiovi5 z5&=^&n8X$R3<9!Q=c}_FGMU-UQWy9VgGgW%NC)7vwmD3U z(gd5C&)`SU#D5UosZS_#JVq>-ESc76nc-NC#Ox6Rm2-Z^`3|!s(m&UBB;$jlZp3Wa zHuPNg zKAaR$P=(!GsmKf*ZseQ!it(k`)y&11xO6^N&Y?@N9}6M{g<@?Aa)pFL?Qqn~)+JXP za=6i!7u4>n<|5=h@G|0Iz!?KEce2AEv;iVmfalr-hE2YP8JUsCc@$~Emf~MaXXSz) z=#^6^2H0X0RP#8>WI|6RWI}6M3xlC)cKdDKD;pQZr8KSC;;p-J-TcOz2UdHpY|@<; zZ{1B-;LhFWzgDs?KXP7LZbD*FMy%IX%RgnAC0FD{Ca34TJa>LgCQlq%&~p3A)}yyC zpZND?{Cn*7`LjO+=NKg|NS0Pja9xT_ zOhCFRY5CBJB@*0)?l->`x9qx4G-q$l$+U$=CwhviauQr`CvWcj)Ro!IxfzbIIrHMn zmlh_u9ILl{>e>oV+}}kc#Ye>#)EAt~zxm$l7kc9Fj82>r7F)EW6l2q{xxtZP|8J~U zRvABRN={9|f~t3ZVO~y3RcaMIu{h%gCxyzwn~xf=hS0$pf{KepSINZj%L}t?A&vzw z?L!#ufH)g+jWbo8HwY<0hEv$iv>I~Js{+X6i21+R{pQT3io7t_!n>DO+<0wUQTCF`ywEr=Y!Cd) zp4o(dS-*XxZGP60%KXrng`Zo?C+(k)j!OvrdSz)^PTHJ=r0~aU%2Kma{hy1DPY8Xw zyadC813w%1 zMza6qYs`5KNxX{2$|m$ z!t(|(18z!<4Ks1fFqjBNq6oO)Fv~7&Sn&%c>`?5E2u(ob>3NJFG@Z4vi(-`(AmU7&;I!6=)?ojS#h@TqAgdNclmw4VOh2q z8|?q;cpD9+vQU6kmc&RbvUAfo|CenQ35o^(u*#B)8poPg2Cd4itjf#Jwf1aQnfANR zy_{+5i)5y-NaKMb**@6t8}kSLo@vD~T_}$KE|%qv@n;;>Sa)@TGtEutII!|* z?ebKHxt=H&4zNTAm3f9@P|aB(&skG{o1J@_*_vhHX0|iOsAMu){k+J0ltIrpn`zq04}*QHg=om-J+o;IKKdFPh1W0>Qg^hX+Z zI)4SeS!Y$yd0@r1bDtw)+nI?AC6prr({Jc0+%&DTD(tak_S@gJz3Yz*ed#?+`%Gie zc$lNb`5Wx_+SD|Mxxy0SBXFDn+hfA|t4hZ*HL__l!G19NkQ2$mXoS*ALPB|3Nm^{5 zxMQElj8rq_bq*IyLUK_uSQ84;v?#Dz*ts-OfFK153?zhK2M?$9=V#`vNa3R&rvO z_GJ*@9;j=l5`g(dvy6L7!B(2w7f`vN1Ptq_3X}j{m=fDs>l@u9)`b!&GGE#>Z5jYA#41U+7)d#(WxcyKphfI5)8e;NwYx_B8FtdvX zvai3iY`Q@qe7Ud-*AnpbK>H17N(?> z@orhljDM3)T_JIHTgW%i4woNubHvt>aQ>cqm$;PCx$v+OpN(^cMLM$;{Qye2J{L--hmUmttkw~7Uo0R zzeK(wIvTo?qAs;d-H+x&6Y?)-@VW5OTts|n7<2~zus}I@LOvB15sn3V z@?_midCaNtITK+rinfJKv(=1h#$ioZYu#Z+`Tai&d1op1D`1DiQWObg`djCF_Nb6| zA%6pmsl`dvE*yj$YsM<3mb+Ex9Kp1>faQRgbB>H}bC~2`l+02(|BC^(a32Q4YZZiO zK0a`-{hMZEO~Z2Mx5KKoecbup4ZGsvong7DStY)<#prbyPtVzI32i|=AbVW9rS)~O z=-F91h3yuE$L7+_m9nrgo8ht{k7PBJrlgcMWaU_Q!7rO}*7;l8J)s@=&i{Vw?AhG< z4aKF+jk&pv&85W~>T{0-V`oDiE?rxZnp&~8w0L!SN=o_a;;FH-cR9!Hb3)$3T<+8* zVo!5nB3QAX^ghyT!N7uhY*Yqe@UL2vVW`NRZUv4`yaa2KdDmxo2kwQxF3yzAFngG3 zT}-O|i=laSSCnQoRxg+nGtd4|Xnx%lC0R|?B_YqwO{v`4lpU8Cmy%l9x;Q&FQ89lu z;~4ta*^oa$PsbZKHN_xlpAi`!8Hcmvph;-&!v?ncKI2Ov{gCGWSu`nYfa$t*Tv}#8 zE#VNXYk%TSNKBsd>E8Id5?itVzf%@v9(yXep*ZAE&$^-`oR7}Sd^Rrr(IgH@=!5S# zK5AQ!y^C%G}0 zSGg$8n|I4C&YvelgwL(MesiXW+1f$W*zsw@oD;u;jqgj-83JQSaj7ywxi8C&PoNiwlGcJRiaT(-{ z%OGc5207z0$QhSG&bSP6#$}K*E`ywL8RU%1AZJ_#IpZ?O8J9uMxD0Y8!pI(f1(+u+ z5_*N@!ezo0!j-~R!e-%S;Vxl^@NVIta7Z{T91)HR?-hPg_@MA1;lsj5gkKUqD*UqW zxbTGVG2uz!Axc;Thrggg+4eNO%^Ah<5PAtsdl-oVXCs{Kh>|V ziRSCVKMLO!{s}k-t$zv_4H=kYc!V*!lOwDeuf~1f_ m_%pydy;VPc2G@oNm zguTK(VZU%dcvv{5cc0hwPj&q>(Ro?;ityi5hPQ<82;ax^9<_x>ZQ)T{cnr3M2fNFO zYzvRUw(zJeJZcM%+QOr@@EB|hkJ`ecw(uBi3y;CJ@EB|hkHNO^7;FoV!M5-iYzvRU zw(uBi3y;CJ@EB|hkHNO^7;Foi0tjw<47P>GU|V<$wuQ%FTX+n%g~wo9cnr3M$6#A{ z47P>GU|YmsbSeOb&_-!Z`O5-uD9rVtFBv7yBKhl*e1Lh(jEie z@+-Slsy%vsuaG)3#^}`jeZ~e{?-zbd)DGyGgSykDXAbF3x60om>=pJ2`-KC-!$NA~ z7_=9W+BgR7MWi;4L3_gpUbN3Lh6fq4J;B z^^?Mw-i@aMwUbpLhX@5R+Og#RX4dQ;bb5Wb~5f7Fxj==xn<|4H~hN`-A$C}B3F zl;{#hq9oadTh}qd9AOoDbT;}Uu@)uChW0oGr1r>0uOv3<-5tW+daF~|CF~aV2z!Nn z!hYd^@UU=9l%Lo2PjyY*l5J48WE<2i*~ahn>l?y1g?|vf55%er>WhFbp<6fybaJ3` zo&n|wi-aYR&m3qT-Y*wcfipQqHENNA`trJF{4lT%8Y~Aj<(;cUtyRx&LwR!0Ur1q> zaJRm=N6+jPcIbYm?(c(s$T9W{59rr}y6)1ihjiy|JwGTM5)KPTgrmZHh4-nP_X{5o z9ug6BIB0UnNaF9Dy4Il^vXkFZzRC+rsv2oDRN z7rqZH)ks~cF}hS^bSWhK8QjlCuP=qJAQlO|!gAqil&utcU>~p*GE=H?vlM!O*Squ# zN6b?66jIwO?9hFVn5D2xc%LIqK{GrIF5;cKGv zx{#woslm~q)Zn;KYH(aAg{{JGy(|0^Z~=N{4$viZ3+I5t3&4TL+ zJ(O63c3A)oIS1INJFVk);(8lKw*}w{uXpLK-J-uo^!ExobiY&g_ld%O;Q{@6P}g1h z^^oq|t>*`YL&9OghXvgDN>^Gc6-rN_L|V_xYouk@H#iUal4|SBsac z#mm*=5J%4{NnI6m?>by_ z_F4t5@_s6GY!${(VwRBx%m#%jaGSs8>AFZr`K&_u`D?jwneMC*t`x2kt`YqWqPbDn ztoxgEy;;{Sy52Ir5!ANox>aA?22ERKY!`(#;nk3kD)5Kj-J?5ug&n%{F}-_0cMb_T zURPne@cRp2ve4hn~a!@?2asPJCl7ggp5g%1fI7Cs{UlJHUC zmxafLCxnj)PYNFwKA|$7*7cLZr-WY@J}rDk_^h7%rtn+BZwonhuF~AO3i8S87xerY zmG*nO{(hso(k3?|hoq`_%h<>U}=V>wVC)q{(@` z4?a2~=k-2=^Liirb-crQy$@bHUUOdWGdQpJL2h}?dA(2eiBI!-pTT*(Pd(bFdA$#E z%jY?-_o?UPjd zB-K7?51+J$PujyL?ctO5@JW04q&<9^*ZVZD_rascuW(-PgGZ6bdA$!FMIz_*K6n&~ zoY(u{Q6zF+?}JB?$a%dFennn$Uhjink;r+y4}L`==k-2=^Ln4bdA-lzyxwPUUhjiP zh@9lS-Y2Q{L8|#YwV6-zdY|U?K7;dmpY)qg^Ln4=^*)31dY{30z0csh-e+)L?}Imq z_c^ck8MNGdvfO+I=k-3>Z$8;?K1e(7a9;0&wDX$tdLN{nNNKN;l-58>@5eR0Pc@R# z8b~Scc!V*+RM?O;kWXTc?vy~k)j;+R09OcC3Rel&jDG?5H|Y6|!e-syr0dPPZqfA? zQQN9(TEaDws2WIA9j^BaKc-&~>YA2t4Wx)A>=E_~`-J_%0pVfc7xk?Ng%1fI7Cs{U zlJHUCmxafLCxnj)PYNFwKB1DF*7cLZr-WY@J}rDk_^h7%rtn+BZwsGSsb0`C-xK~o z_@aJ2tLvBa%uj@D!7Uny1uC57cU&QVR{hXV^Nmny1uio>B`9!26u1)M}nm ztDat~c}lJ3DYfXoe1`LsTJ&Ec=P9-5zeLVcYSCX#0Xa{pMIYfE&Qoe3?au%?PpOr( z*NP9d;y|r9P^)=Lt>!7UknLw6BU}TllkTkpA9&3*jXERR|1;nm^o2UZqib3Yb zfN8=kSm$-J9O|Td>ts39fn#TIpO!n*z8s_UyU`>2zJPzP?a%zO0fULoy-I&ho!sc-9~Z|k6MN#}r` zp}ws{EAW{^x)Ir}8X+_jQ-x6s>)Ir}8X+_jQ-x6s>)Ir}8X+_jQ-?IF)BI=-TiL@f> zpl^w^BI=-TiO=fEZwkL9{I-ymL!B&#I>--8NXwxPI+pmNo}uMX2OY~hFA0Al{3r4J zpM^gczNY)H3xAKN>mYT+f0N9-sp~%o-_o5w>dAL>{jRS6B&3e5hrFEva!jw+m|m~Z zyk4Vuy~go+jpOwiXY0}8e4hTmdX2F4Xjxv<<5#aSv0h_hy~f0PjfwRd6YDi5)@w|x z*H}}pk)?=@V`Q|B3VoHyZQ_HyZQ_HyZQ_H)6K94oIJHBXly6KH)~l z5|KXPMoCnoB&rcJ$7Fz;|hU^(VW zXMpt6E(afYzf;&H{JroE;hVxg09T3TD$!h}x%Mj2TqT;TM01sBt`f~vqPYqjr@6!Ii<1X-=IW3|SP)v$;T+|cMSM$l-T|&f`Og4dLbtFL99Rpf;QiggPT@XSZfnu{#Dl^v-T#iBe@^&& z-FZX!rtlBI_2|V!`jFRSoFdYPydJ%nNRRP)d41Q*>$@IWopCs&;kM4T(L|)UEyFonJ zAf9YMYw`|xvOzrAAf9YMJMunxvOzrAAf9YM%kn;XvH{XdBu_S=m5JoZ2DI`SMI-dm5ut!Mtx=X722ZV=(9K~A2hgR{SReWd_A6mtSR`H=#d}tLPTE&M}@u5|G zXcZq?#fMh$p;dfn6(3r~hgR{S6*EefjbmA>xX~(Zw2B+8;09~`mhc_n`*?mEcyb0v zJ+@7HY#TfeyptpB7WN2xg?++);ehb4@OdG1+BWI2ZQwbt-^cy!(lgtoXSPevY?q$d zE-yY$R<>6z`)Gux$SwoA`!m!8=!J<}#RX_Mr)N%GsklV^-J@PtS?X_K6^Nlw}% zCvB3GHpxkw)vEIcbxev`J3dBqwc>lQzjoo8+WTa?&O_X_K6^Nlw}%CvECAZR#~` z>NRa>!DoziS%dAe2HRx~w#yo9mo?Zfp0tZ6?czzhc+xJOw2LS0vSZt24Ytb~Y?n2N zGb+J>c3Fe%vIg5_4Ytb~Y!`pp#h-TZr(OJM7k}EtpLX%5UHoYmf7->LcJZfO{Am|| z+QpxC@uywE~V2%)6kO`4(5AcR@1~xe~n#vP9%c z^e)H}kt@-=AWKB9MDLP6e;3-9*IbF-C4c@d`SW+lpT7%wp1*P>dKdIOkt@-=(8^~q zw+x52+>P=R87aCOKA{32BSmT7@R~8SyV2tJ16K$cDY_diPHYx3Qgk;;P6~_^-HnnH z87aCOB_}dcbT>*)WTfbBv^C#ir08z6HIb2`yV2G}MvCr6TN4>6x*KgxWTfbBv^9~D zqPx-7L`I74Mq3jZDY_eNO=P6#ZnQO#k)pfN;=E?0=x($%k&&Xi6#=*#oLOh=0cTDD z86CGrI$;mE#5;_R+k;lF1~NKs4_f&dAfw~fEz?c$L#?( zh>VWggLdS*jE>ubcI5TXAVquBj(gOOd(=<&sGsgpKiz|JoOmdqK^^Kr9qK_H>OmdqK^^Kr9qK_H>OmdqK^^Kr9qK_H>OmdqK^^Kr9qK_Hs!@k( z)S()6s0VeZ2X&|ib*Kk*s0Veb2X(3kb*cw-st0wd2hm4UfEfaNP^WrOr+QE)bmslI z!yeSB9@Gh)$!qqYPW7Np^`K7mpicFmPW7Np^`K7mpicFmPW7Np^`K7mpicFmPW7Np z^`K7mpicFmPW7Np^`K7mpicFmPW7Np^`K7mpicFmPW7Np^`K7mpicFmPW7Np^`K7m zpicFmPW7OD;7m2aE3_E>=S49q1Jq|N7yUu6ZQ)SgolOH8~acOKF_%B zefU;2=3V^Oetl~{T7lR6)_#49zGGgq753{}`}M8;;4q)$xAud>M1E^OI85ZX_Ul{w z^{xH-)&YF$lyN{k?tpsS0eqKts2L8Z#~o0QJD?tSKt1k&r1yY&+yRt(yH z9(O=J?tpsS0rj{8>Tw5920ls6a6s~TK=OG&@_9f#?tpsS0rj{8DCa4xxR56Y#gl{L z$wBetpm;(bdI5eVPY#MF2gQ?v;>khr|b*UG0sTXvq7j&r?bg36~sTXviJfy>Mq)WY^OTC~=y`W3I zpi8}=OXcZOFX&P)=u$7}QZMLIFX&P)=u$7}QZMLIFX&P)=u$7}QZMLIFX&P)=u$7} zQZMLIFX&P)=u$7}0tZ+&jw4;_1zqX|UFrp0;!GDfv(7jqX*ncmIV5R0BxyM$X*ncm zIV5R0BxyM$X*ncmIV5R0BxyM$X*ncmIV5R0BxyM$X*ncmIV5R0BxyM$X*ncmIV5R0 zBxyM$X*ncmIV5R0Bx&h}ey%pUp_z&FcXi9()h&NlxBOk*@^^L1-_XyH&TmG(Y`MbL1@9KsQ=NIYk>XyH&TmG(YXm#GF zzpGpRu5S6ey5;ZchPLOg^mld3-_c+UhuhZYvjd6iUe^{!*k9gZ7-u8&MJ>qSTc-tf1_K3GV;%$$3+auogh_^lBZI5`{Bi{Ciw>{!* zk9gZ7-u8&MJ>qSTc-tf1_K3GV;%$$3+auogh_^lBZI5`{Bi{Ciw>{!*k9gZ7-u8&M zJ>qSTc-tf1_K3GV;%$$3+auogh_^lBZI5`{Bi{Ciw>{!*k9gZ7-u8&MJ>qSTc-tf1 z_K3H=;%%>Z+biDoinqPuZLfISE8g~sx4q(RuXx)l-u8;Oz2a@Jc-t%9_KLT?;%%>Z z+biDoinqPuZLfISE8g~sx4q(RuXx)l-u8;Oz2a@Jc-t%9_KLT?;%%>Z+biDoinqPu zZLfISE8g~sx4q(RuXx)l-u8;Oz2a@Jc-t%9_KLT?;%%>Z+biDoinqPuZLfISE8g~s zx4q(RuXx)h-u8*Ned2AOc-tr5_KCNB;%%RJ+b7=kiMM^?ZJ&7CC*Jmnw|(MmpLp9R z-u8*Ned2AOc-tr5_KCNB;%%RJ+b7=kiMM^?ZJ&7CC*Jmnw|(MmpLp9R-u8*Ned2AO zc-tr5_KCNB;%%RJ+b7=kiMM^?ZJ&7CC*Jmnw|(MmpLp9R-u8*Ned2AOc-tr5_KCNB z;%%RJ+b7=kiMRdYZNGTiFW&ZxxBcR6zj)g(-u8>P{o-xEc-t@D_KUau;%&cp+b`bs zi?{vaZNGTiFW&ZxxBcR6zj)g(-u8>P{o-xEc-t@D_KUau;%&cp+b`bsi?{vaZNGTi zFW&ZxxBcR6zj)g(-u8>P{o-xEc-t@D_KUau;%&cp+b`bsi?{vaZNGTiFW&ZxxBcR6 zzj)g(-u8>P{o-xEcsn584v4n{;_ZNVJ0RW;h_?gc?SObYAl?p$w*%tsfOtC~-VTVj z1LEy~csn584v4n{;_ZNVJ0RW;h_?gc?SObYAl?p$w*%tsfOtC~-VTVj1LEy~csn58 z4v4n{;_ZNVJ0RW;h_?gc?SObYAl?p$w*%tsfOtC~-VTVj1LEy~csn584v4n{;_ZNV zJ0RW;h_?gc?SObYAl?p$w|9e+_ZxSkc0|VW-;G)j8P9(=XcAu+GM@i#yh~&}{}Hsy zSs=YAN6GdK0-p0N zdQpymlSFz^j=*Xn(u;BgRuhq4lq0a3i1eZy0k24zUX&x?46ix+J|e5>h^(d~;17SL z7v%`}L!=kw2yCab#-QposCo^mUW2OFpz1ZKdJU>xgR0k{>NTi(4XR#)s@I_EHK=+G zs$PSt*P!Y(sCo^mUW2OFpz1ZKdJU>xgR0k{>NTi(4XR#)s@I_EHK=+Gs$PSt*P!Y( zsCo^mUW2OFkm@z0dJU;wL#o%1>NTW#4XIv3s@IU}HKckCsa`{>*O2NpqNTW#4XIv3s@IU}HKckCsa`{>*O2NpqNTu-4Xa+ms@JgUHLQ9Kt6syZ*Rbj}ta=TrUc;)_uZS?>NTu- z4Xa+ms@JgUHLQ9Kt6syZ*Rbj}ta=TrUc;)_uZS?>NTu-4Xa+ms@I6> zHKKZrs9qzg*NEyhqI!*}UL&g4i0U<>dX1=FBdXVk>NTQzji_EDs@I6>HKKZrs9qzg z*NEyhqI!*}UL&g4i0U<>dX1=FBdXVk>NTQzji_EDs@I6>HKKZrs9qzg*Qn|>s(Ov8 zUZbklsOmMUdX1`HqpH`a>NTo*jjCRws@JIMHL7}zs$Qe2*Qn|>s(Ov8UZbklsOmMU zdX1`HqpH`a>NTo*jjCRws@JIMHL7}zs$Qe2*Qn|>s(Ov8UZbkleW=kZ#(gM1F-O=f z>=E_~8D)AOzD^tv9u__?WR&UsqJy26x+b0bQ41pJ+>criN#}mixnFedM=f}VbnZua zUNIgJod-nc0hQ+g(Ro009uS=eMCSp~c|dd?5S<4^=K;|U5gaE;+xe1;KRV~XG! zL!=FMIAFv-1I*E{jQt+NxKAw6yIx(F3zzB63gJrODj_4d#uULdrU}!7+HSHUPO3c1#gmV;E2Q z3?sP4;9cM|jNlpr4_U_^VXv@H*e~S1tugSB$T;vZ*bhWTaE-x!ATok$4E6(&5nN;N zoRBgjxW?c)AwDd8MEE7)qe4b-jlpw5WCYh3JSW7H!pDV-;2MMfg!dW2H3t6)kr7;D z@ShMF!8N7`t}#T+@_9yZjUi%|$Ox`6_*MAK8I|yRy8eNX5nN-iVOVlTaE&Q~YYb7c zyk-Q~7@}l}jNlrBHNyL^3mJ(qrbvu2MR1KN5@Sq}7-I$_xW-`Z@OegXjlpi=H6ysj zAdNeWW70y$AdP2nP3z^Dw9qkWp<|Fh-l6q!Oj_uew9qkWp<~iQ$E1ahNedm57CI&^ zbWB?4n6%I_X`y3iYto_ha!gw2n6%I_^cUWt^>PetO{Dd541D7?t(RlcLdT?qj!6q0 zlNLHAEp$v;=$N$7G1Tj<@hIwb3dm@jM^&RoQ6pZ{zIs$q1dpnmkD{Es&uE-SQBEQw zXC4J*A|q!W1?5x5anU?3n#V=+xM&_1&EukZTr`i1=5f(HE}F+h^SEdp7tQ0Mc|tT# zh~^2=JRzDVMDv7bo)FCwqIp6zPl)CT(L5oVCq(mvXg(&IkBR1EqWPF;J|>!viRNRX z`Iu-vCYq0l=3}Dym}ovGnvaR*NzpthnkPl`q-dTL&6A>eQZ!GB=1I{!DVirm^Q35= z6wQ;O`2=X5F`fWTA|qj*!0h7{Aftnx039MDVV=PJVjqyvK~G?2L1ZM%6POF|c}BuK zfv@lmBVnGvSBQ*+IjxePR>@DRN5>=_AKCU`d+mxnlG#brJ(R3!6)%lU6-}l`aOEQ>; zm+RQU_Bv;d?qlD5_da`{yU*EYZ(;s|Fz*%2Ucu}Y%wECl70h12>=n#j!R!^xUcu}Y z%wECl70h12>=VpB!R!;vKEdo0%s#>F6U;ur>=VpB!R!;vKEdo0%s#>F7tDUa>=(>_ z!R!~ze!=V)%znY_7tDUa>=(>_!R!~ze!(0N%mKk15X=F=91zR_!5k3G0l^#)%mKk1 z5X=F=91zR_!5kFKLBSjp%t65%6wE=v92Cq!!5kFKLBSjp%t65%6wE=vM6OfJc@ANY zx)C+~WQL&4c!d5BLt5(}!i@a{+Vlb%(pvuz#zD5}`8foA#VhG2GX#Cbn*I+%&{wSK z|1bo7#rn&-{wu1VR!x7QAogZ_gpE?+;$xlxab@go#Uc&93%ULiDP7EO*+R#=eXz`mmfu3 zbdHP8anU(0I>$xlxab@go#Uc&Ty&0$&T-K>E;`3W=eXz`7oFpxb6j+ei_US;IW9WK zMdt+Qj2%;;Gi$CpBs5o(&|FPIb2SOg)g&}mlh9mELUT0^e)z1cSvZiCZV~Sgyw1xrw219@FP&oxtd|k z)eLK{W>|AI!~sCYLD-th=`%8!a`qu?6b0o_G@ zjf!8RcrKxF)Em{PH!4nzYU~>YK0HfKjf&2rpflUtV=^k*j*7OUqU|U!=k;mT8P!?U z^kE(qZAV4hgLs!=a}e*snj`W-jmQTzA|C{vJi-zApl~}V+ztw>gTRW%IU*m_hzr`T!1eRFdP#X#>9m&abZkc7!w!9#05uI zl_RUlkyYi$s&ZsiIkKu8Syhg#Do0k8Bdf}hRprR4a%5FGkkDbQcV4cVR+R$@FROG{x~?!Bit7=E*T#O zk9g!s)$}tQ2ai}Y2Glrs#F{an#z6A7$${bQWz$MVG_NF*Av5}FiZ-=q%ceh!=x}w3d5u@ zObWxKFiZ-=31K)P3=xe9&?bc8gfK*$2^}E~CxqdIFq{yE6T)yp7)}Vo31K)P3@3!) zgfN^Ch7-bYLKsd6!wF$HAq*#k;e;@p5QY=Na1z?4$4tr#Vp3iZlh7?ZLZ6vQjN|pF z=}k8YdwCEwz3C=pFHd4D;BorQOhQgs)0=J*a>|&$_rvrUJ#S=f|x{a>@g|fnG&8U;h7SiDdCwCo+;s(5}qmHnG&8U;h7Si zDdCwCo+;s(5}qmHnG&8U;h7SiDdCwCo+;s(5}qmHnG&8U;h7SiQ^2zUvPXZLDd5JM z{!UZ!x8Y0&+w`}YlE2LqG;lZC^g5f8zs(f%E!*@un*z>+K!2Ml;LMtSn^VA9;ur&BmI3n^T|?pH6?9Df!z>$=_xQ`ie*B2{r}FG(Z!PGHFpJEy|=t znY1XweK_lJmXt}0GHFpJEy|=tnY1XA7G=_+Oj?vli!y0ZCN0XOMVYiHlNM#tqD)$p zNsBURQ6??Qq(zyuD3cat(xOaSlu3&+X;CIE%A`e^v?!AnWzwQdT9iqPGHFpJEy|=t znY1XA7G=_+Oj?wghL%`orlB9kP+z9{a@AW^GmhdkdUy?L#^Y3P}C7<_cP*t zM%?GltMxcb?q|gPjJTf>_cP*tM%>Sc`x$XRBkpI!{fxMu5%)9Ven#BSi2E6FKO^pE z#Qlu8pAq*n;(kWl&xrdOaX%yOXT<%CxStXCGva_cP*t zM%>Sc`x$XRBkpHKnXD+26=kxbOjeZPZnX6nvq_n(D3cXsvZ72@l*x)RSy3h{%49{E ztSFNeWwN47R+Pz#GFee3E6QX=nXD+26=kxbOjeZ1iZWSICM(KhMVYK9lNDvMqD)ql z$%-;rQ6?+OWJQ^*D3cXsvZ72@l*x)RSy3h{%49{Eoa7=WxyVT_au_$qOb+8FYsy7V za*>l<&lU(E^7dgpAPI8fxT;wDd zImty%a*>l<&lU(E^7dgqr47lH8W;CwNXk42?Pv8-b zzcU)wW;CwNXk44oxHhA4ZARnT3^>j!IsVRoQ4lW*;zdEcD2NvY@uDDJ6vT^ycu^293gSgkcov0cQFs=GXHj?- zg=bNC7KLX~cov0cQFs=GXHj?-g=bNC7KLX~cov0cQFs=GXHj?-g=bNC7KLX~cov0c zQFs=GXGxl^B+XWmW-Cdvm8989(rhJZwvsekNt&%B%~q0TD@n7Jq}fW+Y$a*7k~CXM znynl4dJOvz4UTO44j4X||FyTS=O&B+XWm zW-Cdvm8989(rhJZwvsekNt&%B%~q0TD@n7Jq}fW+Y$a*7GG-4DhX}I=tU0$Sk zUWlmAqm?$}KL1Oly~wQcAWMlLE;eQ+Oij@5Z&#K?6G$2@%vi#_?xXRzuj)# z>5KTn5BOTFn?pg{y4Bm^vuYZ=cBrP-YVbGvf)SjG23ve#%Wn5sciqxp-PY*~x>r{& z*l6wYg(Ln@(ArYFrIt6}5b!qdwr;V#0e^G#@$S>B58rO_I&1EQ+lls;mmQu1yKdVx z);+$6?F$F5z&rUP?N$iLL_*PUvyV4!5t(uQeLL)0@0tHjs&g zz{<{$?F-s|FHbawg019-KiFneb z0X1mXSY7R4d6f9#`Awk~bSmG2w$&81tuEc!;*WF&yfOEofZXN}dIKc9-;T_`JKzns zffy109$%!^+KE2Z9PmaW{$^a?84h)Z!ZvzRWTS;=+y3S#t_SW9_#^(NfUio?XlJJ{ z+zbM4wA%a+_(bJ^&ql{+4TU=*E+hQju+{DjcZ7m5i{0NB@U@XLwbu0@93C8DXSe+w zfI>7Q0iSO-4pz7t2!(cA9p2rbukQhW3+SMmz-TtSw%dWbypbvoMI17DBW?h_Y!J1r zo#br^0Z1@pTdko$Ak+nHz>R2_v;~cP!4{Vg5nqRYQ#eFvW5=+){y;=s7Pz`^7ja)# zeb8&Q`g{R06TP|%?`gMh1gZU?l3vaZhj1=phojAQG>ong4)Hbcp0>BiAMo2QRoI0? z(MZr2iPW~+cIWoZo4dNYAPt>T8nw-#j?G6pUhTY*&90Dqs4Cr?k47D>Khk41{Qqbw ztNOr5bJ*W$M`|PfKy4`8w)wW38#YvF@e1e6jo5tJiEU|N<2P-l9TV>shO}mcUAEwW zRfm-Jb@;e&TU&6f3D;VsD;VU2DELQsX_Q+!Y3RbuH(IYVpLBi9OBci zyY50zmInNN8{Uc6&V@Z6!bY6ig=@lq=hyQsylbsW^~sjGL2uZMH)DtxFa9DHhrj*Y zcR&2ix8pgl1kaiWkylk|{MuK)GTwCvGB2lZaTvIR?k~_`v_ooQEc4n1s{Cimly5bg59b!Z>(?BzKou))tlzh`{jM@m9UKf zN4Mv&pI5OYC0cQY{mN3S17`#3;e0dpj5gfo_BX%!(`-+R;?3Dt+5f7NQk9Q;L=!%> z3)0hs-)gU&51048`rA+%=gNYmXS#1gDY*+=tm07vXfBqnY`Q$(Ao*ecb-6~lBo`@L z7T%rQBORi6bNAheZvZ7&p-coDJR7JC+@)vv4EJDPDk2pCoQAQo+aj&0qzE~J`w z@X74!)CCsW?KsEhQl3d6_9n~Rk7K;T)dOx%BlkKhxbo?I*Dgstr97&;3B`T?Cctf} zXeyt1P)}>ZReWmKoM*P+dcx(~Qm@Uvsf%-);E@{D9#6bTy(2%Hu)=tIw`Z^q?Lj*t zF6^x6sb)Pff}_+YE_~98(#a>2R-|aeP*1t<&121?7U8>ee*nh_qX~bLTJ!s86nC$gL=kzQ5p@6+?!^f#r68vA-c zoP7pm!RpZeK_1 z-|*Y;`|RZTrs60zpI;I1k-eZ3JSX?5#RB-H_G<%YZo^k0lYboEFJ9k$)xJOb{Wkx5 z3%OOzFUu&OHiPaI(EQr-R?MU@87@;{Gv)bWv&5VMZ<}S9Ygu7dA}1Vjt|5EVS%|aq zR&$Oy*Q_z;ne&kq^+IzIqSjvw_FRHN>QdzXc^mTQyd4DCU@ph!*hYwWEnbkH)?1N# zU>oA%Uxn!9jO@G}A8^+qp67L#?|c^&=nd$AI}ktdX7g^uG`z*U7ZC#+%x@yT-fj4- zy91xncbT1tmbMEYeeXlGuzL}?>pt@VL}&VtX*6EXY33_tuX)sb$6(Kqc?`2zzlU8S ze`22YV3rFxS06E-G6hpKe_*iJ2idn@H2-5h5AW}vnV%ZWjGAv^o@>N>3xeEiJ_&{N zHxSmpHa{?b3;(7c!dqz?Y6adV=I_m)f@yj4hwy_KH~$D$XU%_`C(MVz)ZGx)0L1)@ zVD0@<6%i;78>+Pnt9TD$aE!sL=eOb0Ghn`CK7!1kzhizEt1d5@L8Mh*Vt#IZ;W@*z z)clkAPxD`%WuE1x$NZURg=eMt348+n((@M2D$kjo)mZz-`ZYWx{=;*Y`B(EJ^Ka(I z=AX^KW7o~|@Q>~@{qT%?!StH%VTXUhJZ`>jzHj~t-lE_3oNay|bHSej&z~}Xgw>9( zVqajldB%JKI|Dy${=#z(yh-Dpb3JQ3=XuWeT;RFTa}jbUU+l3wmw0MCmoB{Z?uLfN z(V)Ms?)tjQ?~X+s-e%aWD`DFELoJwkf;sPNS$ut{Efn-c%QaewZ0fA;8S>Afu>+uKaQOZOaV>gii=yn5kH(QxSW9ln6=<)N)tU3K*; z&3nNB?(kM_YYTfH@YQnSVMU7{*hTyi{k6-ps`Az>c0 zmqJe7YZmOdxnZYS8SvUc$e0pt;|iXiZ6ibUZp@{bm8#Dc98|iBv$~LYw3isq4VUSz zuzAVzjRhY*%{uMHg%2*woW6JQdl&y`$@iD!&-m!lhn9Y8*?r3|U;gbCdsZ%A*}BTC z+Ir^yp0)L?AHVf8=PW#D@Z6`*eR0j2HBD=tJ#X!KE$2OV-cQb7d;YT*G+prQg=;UI zxai|+t+g*+eEY=-Yv(1aFS+lMuhp!nX}Z+9bpN`C-qw2A?Qh?{e%*$Z8|pXw;PU$} zf9ZV+(;JhUmTcO-DX_U_^9!3_s#{;zRM%aX+;ZWTU0Xi6#v2L;fgx_Oz34o9}`9f<7zS2iWw7(o+b1vVJsv1l+dGu{v`A!p)UzNN$5vH zFB1BYd;#~-e}vv6jQPcgU-TQH*9c>MG13?PMd&R;UlDqWJdZ*z5&DSGLxlbz^bVnK z2t7mS7s6;>BPjF;p+5+{K~8S$H({N|_2i;29KE>c!?gp2zWDUSe-8@1@OPrn_l*8< z^nj!P8-2^@Sw_z{`n}QXjlTEv2&X?dy}{{oPmg>0+cP>ReeLOKPd|Hl**}l+0t)@> z>0M9X`T-RB)qfX-K6Kwh89|{Z9X;w#ZkjV+9rON;Y4w?Y0Q3T&4*)%5=odq;82ZG} zBZmGk^oF?)zg+R>dOy8j=mSF!82Z1^`-Q$Q^n9V;3%y?G^Fogo`n%BEg}yHIbfKRM zvxU;fg&r>SZ=rV!eOoTndMxA7G20DS@40qQ&pGtw!bFH2$^<1at zDm~ZexkAtNd9KcLZJwTSNt6kcX~1RlROUqCYW#^yi~I3SwI1|ngnnO-@2T}zrAD?| zyti_s;yClDFpCP~ty7BD;TZi&DM`$TIx9^!q{)Uf*^nme#l$_#l)^kI%#yMbzs!)r z{3y(h!rUm#czPcSv!YPym=A&ZP?!yc639FVibjlYEapIA1{Ch*d2FML zWBM9DhC)AMdKtgE^xBYK8`5h-dTmIr4e7NZy*8xRhVs|I66W-z?=oYzbJd$`-dyqKdN)_Qxz^2< zZmx54m78najMB~+?TpaQwQa6!b6uOO+FaA-iZ<7?xth(jY_4Q;9h*BuxQC&DQbbvb zx9bL0-N33FSajp*?P?#l?IWq4=VSdb=D0id052Xv`)ufVnFu#KGG|E>|zJ~G)%Cjhpf&LuI*HIY# z{F^AxqcGd$3n+|y&ba6OD2#c|i0902`E8W%pfIzgD{;dZONSwC*!_XR22T=9es>FlWmKyS zj|CLweLV5>8^6tV$)n5thS-IEv`euNn5B_98kwPy`5Bp=k+~U}nUQ%JnU#?_8JUrh z`52jvk+~R|iII62nT3%#7@2{Q`4^dek+~O{d69V+nRSsl7nyO9`4*XNk+~L`X_0vr znPrhV7MWp@`4yR6aenUyt|#1hagM$%s^1mWZwiiF^(e3Bi=6omyHWlag_#aH=5m~E zJ*4B9;n3w4^_&eo$Hj}acrx-xqnC026?b28?-h4mZA0O%EAF{^HwyP#F@^=R7czI@ zo%ox13mLiMZu~N1A@dcw-?IC#r>p@|)PS#>U3dfT9&CUVH9(4}CovU^HuDm`n!aTG zi6>DQdxDWCK8x}>6vmuj#0kcmV6=&^qHs^tGbr2-#obWPp)kJ0H&DKb!aY#TFUY78 zj48p05{xIoXcCMi!Hj~;C&+Aq%q3X;o_2L=Jt#`OT8~~;54~!Gy40=p_=>p$JDl#o zSIjPa#q7dY%q~cE1Ejj)P|uq|n_t5Plp+ehTHd%0KJ~Tw>+rRDYsKd1o?~-#Loyk6 zryG*l1IeUK)(uJA2MLTp0%MTC7$h(T3H%Zyum=*@0||^l0(&5VF-Tw!B(NJ2*rUF-tF?_lqQ87qV3=$QCM8zOcF-TMl5*33) z#UN2JNK_0G6@x^@AW<<$R1YL728oJ6qGFJ!7$hnNiHbp@dLU6fkf zF9yGiC=fVf4*dVZJL_ciAxHX7x zlR@-}SH_C*dl*Xse}m_a)Jz3SNEeoBM9v32S< zk6m->O@IAXVo&k(6i-k25pd1yczb)Cc;A7iFnVntol`V=Z5qAtHOdq7j#Fzfue~yU z;;qG;coKT_^SN)9J5Syj_csfNsx!+c-+cbjbLixK=Qod4_xe4FkG>z&U_}(Z{wRzZ zPrqzNjAy)f*YCQa;<-wnYxvRNn(Aslqr+EMOkH1Vu9`N=*V^@;cD+>R`%O1uCAASN zsf}1kZJg&f{j1iKr@n|z#xJ7d>z(rJ{IugguYdfXcyiDGpWN7=xO?7CZn~b_*q^w) z;`nQ)Q?!`fA$$C(e{##wo5w2h!0YpL>=alA5AtfP7shg7B$o}92rkv=EiaGVa+9L9 z{08E*RHL-qeJDE12N4k^fS4!@^~FG6QN=%b2oX>|ig+xH*76vllRSYKB#b`t8AN9J z9AcPsBW}y*;cxLpWaxYju}i*z*erjpcqWW&GJq&HLyS^_$R^lMC#@JYUD6Yn7h?=nge^ujbAUZH&;vgap ziS5uGh(h&y`vI+!;Qhgnh`sywHuFP0iZ2GES)u#b8GY@52EC_ z*ItLG-(Z$80t{onFz!n=;tS%ucn~FrF+CO_LeFxFCr?;j~Pt{_j(XjhcTPaMhqYKAD?Uf4=>Lu=Kufz literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Bold.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Bold.ttf new file mode 100644 index 0000000000000000000000000000000000000000..74343694e2b2114272f38b1124813b972cb592e5 GIT binary patch literal 121788 zcmeFacYIvMxi>y@&NgYKU2T_EtJQY3RquVRVpZF6ms}-x8+SX#7;Ks`jsa6bLhr;7 zLRmvX2_=wlxhX&r!VRPmQb-8x1(FLlV6A@NXU^_wC2Rxt-rwi_=e2#jr#v%f=9%Yt z=4msBamJV#|EZX#Ykpr3t~ler{SJP0JwtQm-*fNy-xxo9Eo1Z2d*(0fSX8z^&G>Kb z1ejsY{PL>b{O!IgaDF%7M^|qd+dl8*TV7#IvkVpfb@iUz9_^2EZp91s;(6J+?d!Mf zT(UF5n7#`zZ>%5NwVh?MY}9`#o@cDzeAYVMCFdMu%=$88Z{EFO?bwAjdJV1v8@BA;yY)YZUSdqr;e89vSi5tp=8$~>W8>#Aw#T!1+v+jfrg^*Z zezZ>tZyDRWolj^#Lixie@7X%GW$n|C-hCe9yKZF6G;jO1UAvppm$x#0@O{SQ>$mS* zyZxB<>kgEs_YVLwDC)fR?eE|8ot4Ix|71DZpW_bu$=6nF7r%cfJ8xo6>>AyB+IfIY zV-nrPAC%KR99zU#TFJzmi9X$Xq9)~;0$`&%+{P|oTDB5nAu%5-WsP`vzUB>FaVDz* z(i2S0n0l|;3fOGrSNAZ)NO(AvQXYsDAfZLxar2*r$@FKemrw zp?#R&gUhecbCsk%h93`;R5MvI-Jw7H0$}SG>=*JNyHItQ72xRB%w(Mt-)`fteJQZ_o{Gw6UPD^OK>=F5bRcxIi+q9dzLQ z5*&wdydn3opk@o}RA0(8Y6rVY-OAe3udu6BXW>|l>tncnlU*h4W)I1mSV+B_-JnWm zS82QO4EHtdtW)(Tb_4yY-FQ~X0;*#yTODQRqfV8slx3)AO3EF0%q`P-}$@6E&UJdQrRe^mna zI6oT);eIO)J;BHyvK46CCz^6rD?Q5Q%Fhd!!-RWr?*OyPepV0orPB4R8%Mu%fIUI) zR-eVZQaSD)K-;fpD`g$p_dL5oeFYm7$Ca!exUUd+C)`gvw1X3Wp|KF-Kw}XxY zV=T_c?=Nt?t|?`;iE*GYNIlT5O=4VVEK&~|3yhiSBNi2SC)`gvG`rAW8Vig=>LIx& zULpMB_bD7NskXC@=qrsq-l3Yse9|#i zL;XYfgSuVl-+$m8^I3q#nP`oE6SPI+OEfm+7h{Yu{Ht;>E5^fw<8~aQI4;D&adfM7 ztOoD619Wu<_-Yl7MRdppwh9ORE&@J@zv#GJ{VwZED`BnD1?+4bS4jUpF$ed9>U&wE z`bVq>=bh@uLHEm8HI8|>KCHS7W3`Nx$;}gY;rb?VPvONkaK3}FiJ0m^(ELlxfi^vd zHs6oqk2tTzaV5@QQVy1e>$`Dm$6>(Hh~pWE5?MLqLve}c!W~FDDa15Vx{x(OI?~xm z{v_n*Ngk!#k|8hEOasZOgUn55dX|A%#lVa#i}u6|y2o!4ejR>@8#Etb$dtDpt*ESS_n#^{fFBxrsHi76$5I?JUA( zunyMAx>z@x$$D5X>tp?xCkELpHk-|1Lu@Xa$L6yIY$0337PDbC!j`b5Y#Ce5RzS{= zvN81I5WARtm0bdfd@Z|~-N9~Wcd}#bo9r(3E%t4854)G$#~xt!vnV^x9%A2R-(e54 zN7*Cn3HCU9l0C)VWjom#ww7&V|A*~mx3TT)4E7P*!!~iw4zuf7jP2qQm)UxDCi^e; zDf@)|g-x){>>TznyPJKFozGUYt!$kA1_SdiwuS9y@3U2yi7sN-uou{i><#u;_7;1a z{f)iJ9^)#E>o3_q*?+PR*+003YuS73EcSQy4*P%|WS6oF*=6hqyPRFYu4G5q*V#AF z!>iei>?U>t`w{ys`xEHuHTDPgI@`zo%>KxJ$5eb2FbjZ9HAaeI><+LAuH`wrl6Ud> zd?_E}2l!Reze_)selI`mv3i^yx5wuRc`7_jo-WV5UY|GQlYAPV(P#EKeQsZguh%!~ zTO0gIXyd2S#02W3T0NL4RXiKD&fxR-5#L~M;>q^7JRVVNO1@ zKlA!yuSZ|+`@_qB_{D1#x21+M}=C_S((AZTiiP8t7G`rT^Ri z{XhKv|BGKRX4tbP>KR?!^?_vRiM_C$w6|+p)pnLV2ny>Q?TFgfx&SAK@yvr) zO5LlYynEGXS7}t0xW`KT$2F?psHgjge~daK-pz8UeNj&?`jB{IR1W&bx=>afj`C3t z`qSA@c)*FjVsDd3wj(G6y zsJhtekMgm^IeII~qYm+G1n=v?TY5&L=dGIT%W=jm{;nwRjIy=|Ip^qhX;d3#o>A2G zkY3MO$C1(F8mXi-ste<$e$>;6*Njr#_&0ah?`grMKWbj<%Jq8D^0aVNR}$3~mqydW z9#0QCn!uZXtikU&vT%6%&0H#`4>R;EnqC~`wu;hdM%Yt}dP}33xGyV+$M_}cqElx7 zjt~J|ZT^Pi8Qg|98p56y)SiGE1rEj;W)FJGJUxOK zq+s8XBR&2e|JbT1_jf#)#ktLj7nm_Db|4-9#M3A*S$m|+@A0%8K`oZar=BwL+!IxU zw0MapI!YrQnLGTD>`{4gACf~V=SW8fMpD;_ArrvOvJtRd@qv6c<27NmNb5KxI)5 z`~t#7?K1ucpXBz~thUHiZtrd>D62S=4~Bcb(#X zUidiUR!h_f7SIBF?50(v3BI0An7OxrP3WzjTrAt3Ncw3a|W z2np=wDFeMLz4V5U>mUJ=G?_rs=TcqImm@SnFEMY6zaiI~GU(osctbp3dJuX(n(d>$ zCx#(N-SyH~QIq2BPWCXLde{vdcxFO^B|23Qj#`ry6w*aB8}$~6vmBfi3&h~I6Bi}n zs4WQ{rV9aGD$WSHOq>yDc{plMf>zLl0Id{f1X?A|2(&sJbtFM+=t6+jiZcSO6K4ck zAI5(T;b^@gxge4r(?P>t?SbIvf}r+qk6OFIM1`Z6q!tcOQhQYLcRiGrE=wg3>9gp6 zlO6w$Jg6$vbkFO;J(X0Fs^d&Ri=Dt<=(6OEP(QDd7>gZOKRoe1&dn1a#Nd6xpWi8e z`33wn=?C%!s{7SXYnY}+vqAHoHl#hMy;G;sRq5_c%T9YD{aSsx{)vp?jA-UgLx$mD z;{xLWVEKgYrtyfv!v)yBt><#wsIEEZoWjnL?WPg~mCMV`Rk{ijr zH1|DMo9l_Zvb;lie{mPP7rAeAzn*W%Z}Wt`W#0FFFZ*u~6b6?C{}NhOpei_4@J`|F zMP)_bDSo)*sqo>_w$gu=T~PK?`I_>VD{3mPs0>xkt9-Mn4u9{gZmIsH=K9*2+MRU` zb>C<(H~gm2*SM_loTgtjebl_9`PP;|%ge2**59<1wXJGbwGX#{FCs<$tHa%SbysiK zg09i7&0TxD4t8D9UEK40&#OIu>3P5BM6a&b+Uw~J_deYFgWeZ=f7AQd-Vb|YeS!Y; zetW;KzpTHhe`fy=2Cf~rb09kK#K4aRULJUTwq{P#oSAdx%~>&L)0{nXE|_z4&h84jml2V(7-9yXU6QeQWMV^Q3u(dCqyE`QiBu3#t}gweaSJ_bj@7_|Dk8M3bt{gow645h zG&H(*%sJLHwq)$k*n?xQtqQL?XVvqo_pRBm=GfZ)b&sxleZ6jd+lJ`IhK;}4^z0e# zGj^Zx`ewFy^Op22N4NHGeQ@hPx7BUCecR8s@7vL|W6zFTcf7wdYiHBWtvhes`Kw*& zyB6$vb$9me1+WL<%Tl>OP4I@mUTbHuh`qh7wWYbKv7x4_xX|ax%Qb-x)3qf7(Un8P zkxp3MjJugEaY^P?jH@KBssPbRGLtxrLztL4m731d(lqcrGL1%`&vZI1oolrjT2ET; zKy)ptnsM@~G_XxIX$%#dtkPsfMy*Ge8|nXV)uGkG4eC!eirVH)8ySf+T z!GL{qXRx*;SXAxzhYeYVyzv586&0&;)p_u9{$k=oiDBH*V4=Si zF)-%L&NARCO|4SXSfv5MxxgSSrGN@*9mYVyfME<|*$fQ?V_-TBh)n^>J`G5`79xsM zy(nG_4R#J1f$=26Ei~B@0LZx!-;`%ENDG6LXe~9`tAh3}#)q4%8m+&K*P7(%qw%`g zc$d)}auhXq@*4`XvkM#YJq<+;^|A41mp-s+)dNeVmQVhad{STNa1_>~HNfSC^5xP` zfXj4vKh{RfdOiH^HoeVc#GQ1FN|T`dTx&)eS3x6iQ$Gl^YFQ-%w~TsGkbElc3IM+X z0N4PE&|h=~WX4Te1NZwv<=o_*JmpIq+F)^@SYwxZ5@+gTvDa@5mzRfcK>*A`VzP6^SysW4o6b$(C^PD-^4s(_#=g zD%NOgPFs+Q7~w6>jWj6G0#~)4EyIC*=BL+En**ZxbmrB>sY3=%YisK2Eq>X+OSnZ` zw)1L>zrKw(b8vSvm#Zz+Rd$N^nhAMjix|+&*iEJIs0W3r%T}f-Qr)JU%(| zshVF|v=w#R+H_3?+XtVYwbdWyZ9lbWD{I$OAN6?UjPbi)sD7Sb8{1IfSEs3YRqO{9 z#r)d*fWbV6Ti1tzyrVE2+r+<7n4hkWJ&hZ&ck+V<^XvyXd2wXcJ>gX~X|};<)&YOm zRgsLw`k>$Cbl7zo!OMjDx;{@H2CKI?Q)Y4mhl8 zQ!;WwDzBkCZJb-Fh(YE*`^pQwgXvzgy(%)VA=GopwyxIQ_iWWmfxM-rP1iTJ7+h9k zQEjBa-+S4PnQdp@zdeH<@vr4pb`17TGnXK4x=T%xHz3ZZLJ$Q zyl(Kyo&D+q*`a?kEvj2;wOVprX|YxI+6DVpEWcy_Y~9x!1=4{~W7v}!+ho`!y&Y;Q z^&9w3t+%3?_(;uKC*ISfslN;VX94_}-E4#}i`W+}80_zeG}Kj=hl>L~lCBz+m<3%J zjSBMDYRN+zB5!J%R!3)&M3@H>xhWsBpPEYn4Ogo()EI{W@(V;TSf5u8@KjiX!k9YE z8jm*4d<`cpt5ONco*43c_L=g!I43q@L@`%On6oii;}k7ES!>j4V@d;T)PP8LvaC7{ zsM3619RNuqQcCoLy5rR)WH_jV=1(FcA}K9sg{D{=Xr;QUO%jx)P|@c=O24jOwy&di z-$+%}$iCj*vzJtT-(FDbcGrY#wor}RU0Yz6Zp{dI9{TjfjG*&T_4(7mpK=KBpxqu6 z;0{&qyo1ZDs+J#|x8U%K>gpAT7c|YTu-PhRH#H2DS*>LQe48=*lXJ6dd;tKft4{_v zNPvTwS0d2MuT?(`uAa?XB391&da5dl3jAJkR=SpT@D3eGV>jrc17e8}4uo7Pja4RN1-3l9@GMo(P-ke*wlh#zEA}km0ClDg3tt}N+QWbHB=jutQ+71CxR*m(Ig0~9y$W(OBOU$SC1#sHN%&zZdBhSYh_ceF3nX~ z=P&Lk%g%I_diiCdrqY{8`jSrZrps` zXy;iQ7Ptp4?-{swP4lPk)DO3M>nr)8nhQupfbPMU2;F0DgyK9xA{4p;;-+gEld46kLIKE4v1g@BjSrC?ZA4{F=lT+EH9OpJ zdT5MX5%u-rQmc`8WX*D|+G^O^zo8>PzhguHR)aNj*&1ori?N*#WZKiLIl9iBe|_uy z{rf+7>y4cqx*Ute`9KWOF}!CW_AGxd@t!mby{AShpvk(OD-(ydfQGEDzRt|E*DTAN z`Wm%%IlYHp{(#eB$RM}qFkIbqCE##?zc(5P+W?P8YH+VeSevcR6l`2w{@?>61se2dv{vG~omG~Hs# z*K5^#)LOmUtlaj6aM$e4$dtPuv4%_ryMEc4WqN}wW$Bl%S)q3rOd;!IkJt)K1_z!j z)f;7vefgT@db`0>{3zjkDZ5)$qWU`GeC-i4TCQjM^faATqek`v)V-2O5YrQrkSgH^ z>p_tvQNuzsXTh-$z!Usy1o?K0SP0)5NSzx*4t-gv)o7NN; z80|W%F2i41>vj~@q3vt#{tdTV1pGZG^ zk#OBN@gbsQ`OqQGk7!6&5Pc^r47M57Lj5*#kA!}c;gxdNrraf4E9Gt+mSl0tT>%?! z7s<^;)$|6h9G_rQu|x8(Z@Nu%c)A(HC*GU5P0mxl2pTDkX!L3E_P>j_XHfTQ@d9v% zlnbT;5^C_`5{X8_VUVHikuLa~G*_U|vO(%KMM^iy4xb}K{j1_q%oVI^;(gU3%!8y~ zof%0_Xj7^LbvWai6W$@_IJ|+l(M%?RLM6z2n$%fH?V{&4VRm^_A3>WIvq>C;e&Q6v zt&*4=IMfcaP-VG!y5gZ)H23l!?%46n(V?NE&+ORo!^`JRl+9XGSG#(!v~+NFZQYt# zWzsL7jQ#!Lk&%bF{>%uY%@+!q8lV z8bgu>LnuiZl2DC>q4?QC1Wk4hsRhX*Mu|FH^EuE$7567g(fi_E=Zbqr(t>EKy;YFK zUXtIu4Q37Lp&Egfa$HMG)*Rc@Q9fr=Q|x;c%ZmA~!txUyn}a`6zqmQy-7u?SWS2u9 z_8H9=7#E#?m-^x6&DSm;I(*LVme@lEV`=c}c{z0s{%FIxHR~H|=G5gb84P)4$A+6W z))IXz0Z()Y-4Gr(&RUx4YRXE(C5V;eSWKiFrX{$evkew>I#;P397$_#2KlYgszER+ zStUV1R8w+VTy-KG!xT|e#Yv%)Fac(qzA7rI(K0Axp_E!-brQcJ4#G*V>;G@n!J*%h znisE&e#jmGDJI8*bPmNZD5$T4P3~~RGH(OBVpM8rbl`_e8Jrz!Zrj}bSbw`CdiG^b(!lJxI}s;}a1kgqbQa%Azu?KBX4LZ-!`z?ERAR8UC*jl&sItW+Za z$kML`6z~R~CdL3m1PG1zO;9#z8*nXQnkLT@ua=3fz4HAJJ9934b^PX>kUB@Y@2yu= z>R3B}RPtVK&5PZ_$MPNf<*&u&d-@BgKC8y>l|gR8=PS%oL4ArPDrinyVDZYo z@0=amS+i>H&inSX%)R2@c6aSNV`*S8yD+D^Ye}SQL%08{7j4{h{a&~cTWdRFFIl_x z-nM+#Qy2HUpm1!Y44m+sEs;GJg~HNPgky;<29EoH<2-mAZXrop77q9vHa+~gJTFN} zfn2VFib~_Hf{8>Zp?N~^5vB>DQIK4qC-4fALvH+mWTa`6x`dS&0%QjV2O&zhFO#|^Zi1vp zc_-?G%MtnvY%8cY0U^LW1d{kJ5E7dtHFi zH-_5hmK60j`h1Q3MJ03FX_P_e7l3Al#28evn-pFP1#%qVHQ;@c*Ybqah9d$b0kWil|A<-H|8sR2sMD(r%rwP<5ZZSe< zoao@^FbJ2b;`*=?$4TaaD|U4CUhweNZO8X_I!aoCvG1BXOa9ECF}V#@d$}>tv9zvX zNxN_Vu9oEyuQa1(;|&|e?m4f2=7A{Czine}tT5XvRoV)z9xp%MygcFyqQqI}hB}r2 zXFFie+$z5*boSS$>Fi|HIDwqFNH-9h#px4POCq#%3J6Fcf*@<>6cF(`LZ^m^*Fkij zjkY54D8?Y!3Ot7$?@fJ#_7Tz(AkvmzG`^Q+~U zd@txn%c>*kamNV5cqD0uqLoA|m>Gz6NS`4>0_{L~ARhpkPKV_^Cyvk|4L&MmKOz9% zKzqm0UK6#~$k1K{_x6xEXClo2_#8OVrTE?FO{-d(_U@>NTiK zV!??IV%El2MGVc2mE}bR0iVSjk4+LkmY+NjuFMsv1rkg}GAi!orJw@2A-+s8 z;n!6-_sbN6Q#ldB_%g-fZzCQrJ$c`Nnncb)qGu=sW+F*F3<_%f!PSgB{`Aiq3+@ zIrSl9AnTmzETHzg>k1teBL`*=ZkyLqTkW~(4z*Stp3zv>K2#TIEVAe1=eR$8{v^C0 zvCavjrc%8Q`SPoIN5r#m0cXpXE?B*A^*~>HYh!&?MPbP8vY51LHlNSWB#pfpSe$R; z>CzG|r$biC2;HewZYbzj4**+I2OCnSsFw`+Na>i-GSVPa^%B#N;SLQ%s|Aw$&_v+H zKq3eIc*(Aug{qe*RU?(@bE-~Ls^)1j6Y-(XeM4GqWa(t({Iu;(R*nXzfoCy)BYX99 z?N@R>f`}?40|zRyJY}K1r0TVa*c4f&`COy&`vM^fU;$jEXg)#A$@LbID`Kw_rgDZbNRXlKe%+(q3z28RzqHf zZ$s>@2frJ8{*UL@ue&1p!uF$F{o}puJFbiAoV68&nSCB#+vYiC^^Zn+dfURYHnuf> zWy{K*qHKHYvPg-$FgvYw^x*6Zp1Y`X^}TOheCNOJT42fx+Vq~0u0=clgI9h3jGr98 zdQ-#35?Xe!x~dK)YYD%K|KsS7&u?+Jk9G3mnTMV|5PO@O2G+Lb zx+80PV(-85)uZPf{;T>}-I}8#)ywC0I65bm-MAwn?TZZuT82u?2Wnm4TeD@yC{1{6 zh+$@6?kQz2M6mj`Aefh%Z8sSqTS|Fp(i>2NVTHKhYIyu)I5d!s0Q-dSK=}x9JrPq- z(vE?SN0S0c_o~yBl~5Jg?kN@!bUTRn<}X$VEmDLQ!~sZ)tf++HpUTGOx&X1g@cb!a zKFRNGT(#StwP`pu@txaZ6AzDVewLfQdD{nzmgsWqj*9*ri`RYo?C$P8w=Sz68R+z; z+xbG%t}VN_KFhOiyMr5_-Lih+{tR=VIM8$O$vyj?x}ZD5S>#Sbf)UN@ph@*NK$96* zZ3Vx$-D)wV!IPA~>PWIP6-X{eq9ktR*>kTE94?8Pu36mEEkS zNsi9jB=t8oJstb-&hb~J!aKR)=}obBBYVEJDfTy>v*}xVBGNB!iGB3+CfK~+k9~B@ znNMCg^Mq#Rg-@b^#AmRD5l6T+VkT~x7IRXf)ImT}52!ff&I{31}+hg=$N_A4Pj34bG(Uji1Z^71K)RpV+QG z_N&;opT*X{f^Oi?WS`R5C6O%LL6%)2ik7q<;mA+63@AX$C`vDSl%eF(5v{v$6E)(P z))k{jge!o-FT>530s|R9%~zZnE1X_6B7i z6o$O{xj80dI-)xa{`#b}YtF-rhN+wDxlCC_YK;WR4-Yf-Nlc_lssUJ;{11Yd0>CIT z0255yc#0}iP%l)%p`5HNr2?e?ftNeKR9O*7fM+7n3JMRzc{*5CS8u|U(TdDW1JVS< z6fJmLh3o-nZj-qKa`DoOTfggc^FP*~dGYllH^)Bu!In)wZM<_eT(>Zr- z#~JtS>zH}q{^z`TT$^XRcKngT=8z@M+*!|V-nd|2Fv}8hnR^dCv3vgy5A`JJMZHMy zz=4P%CFDBkAQ>M{`r^-3?IjRj19Vna)$^sP&s*caaN-c3HJYaFZRS_nK z#9#HI*azcFVjplL0=PzL@AzS4MqVXt#TY*XVtEGbmD${6>{H>>3=ke@Sa{JWa!E97 zz&&~u4#k7!Ko#_ls8o4CKNO7wlTj1+GqDdjIg|kvns{G&6{mJ~A0(bF%aEy$OFSRy zb|M5p=?)4?P@OX6#v_3=GkXCc!e-zU4jLs$Oq7#=2^S6gX95uMry6qR)l5PuF0g{n z0zfD$^R7}I)k>O(;wU!2I~-Ed;DiIF*5s95Z8`J7J#`xz4N{)VRA1aU-0bF=lC8!LY(PVThL@|BtAS-`yUnGV{xG>Wklu~qxUMxvtsM5 zRb>lf|KOQ&F9K@+^5l%)nbDfgi=@>r&dZ0Kh`HTV;9Y27&%46RY6~Yk_c^x8k86}_h(@M79c3aCsX(t0AL&g zN43Qv={GTV0o(8jB1+jz0UrwVP}(J-ALa<|kOhl?;RX|wVz-Ikt25c0=AXVR%dr7t zg(v8#Fvhx7^1DAZJ8fnik4nRyZhv5=NA?=cI_Z-o@-b(d=fv}_{Ct;O?`_XLfgB}C zXEvVry@C%R-?G`NNJh59ZZl-)VKOH1VFWEIC=jHZ5F93Po9GB#r5G2y?=HFr_660Y zJ|#Yk3lNGAIzUskrfQPy$^P+tbGF5-mp(=>F7Xsw$1`O4-OJR+0^{7luakVQY0a86Kbgw&OA3U>Z(=*(7r=o$q z(+&-6(>*ZQ&b((6w6J#4!ajIz+qUPp@s?Y-@wsi=|1I_bw6TLTXC8d=Ow!6oCzD9_ zsO|s;3|P@GG#JtXaFwZs3wKifAcTj(Ag?ZkE5RegQwiyxpko)tAG(6j$y4AHa}!e1 zB}x{Vgb{iCq<_)C;|27aAYzgdacjn3kTAEAPI5Oy!z)+5e57OMr7vCflb`f&?F|Ha zxAy;pkH=*7v95jhtljv)ftfD_yH~e1t>^$FV{Bt@XnHZWE@(T~M>0wgNzZW@GgC6C zgOG(})1h&-@#cW?gkLP)S2LLw$|Q#n>m)FcLe@dl2}By~`*7gggv1Tt@mm9-szTx`MKZ z=s{&EQSZuA7o~j-Xu>A;ix*U)-A!Mp%xR+BihC=bI1A?%=`u*rkLUCYw?Uak$;XEG z>pFd&)mqiHw5?%&qpNYn-u-)5G-LM4rh4=h>r?Q{Ebt7ev*Z?F_q6>VA9*jwoN(%o zJ#(lR{mq7Kg4Biwew)a1(^7s5I?r~rWUn+)ng`XHlGby;jy>>sfK^|9Z7TCe)??*W10=VPv@5WKM?f;3U9 z#gL)ZupFK<*)E#9Nk0=>V|E)(e}wl5;k-ZGc{UnN)}M= zmMHo?t)+25=Wrx6LBHzP{;-}eFy$K@K0ZIK%=hc@NB^Nd=F2^Cv}Aqbu3>qnBlO7< zY9HeFIxpH+#5P7UiV8jXZkNfB;&F5Y>^d^{kfJN}2^vQj(}{LYc`RcWAUsy=Xj^K* z_>S_i^|7A zQs^s?)?`Gy?^4|u>XN_mN%u;cNEiJ}Od7_UK{{sE_(MK!tfpu0ytFWLU z*~1LD8oQRu}OS=ko*$M^^D`il%a z&EYd-dL3Mge7*Ois__@4DtWih8Otk~6%5TP=6|-6XQ>Uc=mxacz+kuIr3MBsIEkYq z&*x%TAVLzNhz1h!eTt%wg^q|ykqrkqo&-?r4=i*{c}9c7{7D$9D=C_+S`JG@B-=nj z-QXN|O7DI8U4veFbG%G_Y;{@a(>Gt)WDRDi@_vO1P;^)9dF1iy;lE!Z+MdZW({);P zT#g1{Ip+`@h>GTy$zEg;KSg}0&xEQ*-sgBv=@$*7fG2!qBE<}-&f~lI^})O&NAiNP z=e6x)&fq6J=p4g4CjNq4VheJK(8#F;{lSzi-Gs)Y9W3@6**dWg?e7%p9l%v_E~5+!BW!=bfJPZI7767! zeuK0c#7bQG@1W>xp*`-Fhp=aYA*JzYIMnjiTd-q^S^AOH1}L6SeSKNEgg6 zRI?tZsiSGB!g>eMyT29{7%#ufQi4M#U8`Yrc+a zG-ykJx(aW3BK#crGIana8KNRoLM#sBAdyCkg+C{4iyAs0k{^k`lC6U1O05NU19E5w zPEi3;Z_#c_>HSPa=n}&wV$4r{Q<_9SVo@Ci&a0RdaC$21>X2+8LXqOOlHSNEKv`?R zB2Bw|_cniFy1igvXi5Eyt#iVyN8fp1@%)yd<|=niKwom}s*ZU=k;dBG%~uWw zXW2Y`{@Q@qKXXHO(~hMrs+RSuUC@awb8c_mc-7*V+2AU2-KWkiZt%`%0OHX9izhx% z)k6m4uws5;#GdP9%;#|y=N6NFLGdF=iMCM^LM7Rg?mT2M+u(r0;6gsY&zvxyxRnA& zG>u_lhR~%G%PGHHL7_`4eof^2CEqBY^o=k*WGszS-U}W^;e@ZddU|2ZoX8-6Dn~*m zGoOlLJzQ#0YB0&as?!vul{n}m*5oMKD%B;EmDzH-LNc;&X%ayxNFZuL;=NRv@Lmf4 zWi{L<$-NB}?VrM394XZ%H>OS{(fZ<#Td!Zg;F7iVZM*JRTRuBdpQG30WA=uf|$ywG*+!R67dtOG>e$F#5u>p{S5qm1O2GThyi$ zB@cGxsoy$jf+gRHf(TMHeW5bKZlkFa#DMnFkH{+_K|jR?6G^j_NIN7_n39=M@4w$#^S=ddfnRVkqIo z5$xpk!GSYn=)hkh{#3>j>r>@L6-KLP=G^6V3oZpm?Y@2OqJ0$~$2_w(R}`;qY*;yB_mr3qVs=kXwyw6t`7cV4Mngiy>I1(?t30?}aGM*L5E(l@m zO;M<Lb_&M&(q&UP zt7__d@fN&Lqhv!Q+mK`rmBL!hU#!sScq`#V^eUnZdSohRIUwY`2yIK@u{-v3s59-R z@k9En_q8mZQR%=sz}}*D+jiBR@#x{%UFSZsck@0I|GBenp32;I=6%~-L0j6*SG#c)obbR0TiiMFN@ffEyA<{$Y?<1H0xQKb@F^ccxSk2@!NP5vqj2H}v zJMtMNa?B~QSS-_m5eIt%#Gc$PfCN=RN)b{fDF_oHNEH_Sz`h`Gqne`M)sv98sZx^* zb`m~yB^b#iDjau6R-3RQ6$@1r=Z}&CfoK+4AExL?p8vYq)kjBqS`iNRhPx|rxIQ*6 z_Zrmh+_i(lm#(U@oRep;l+SAHik_gnN11tI*U0}=S+V=;Y_@`rMqER4I2&FxXT{Kp zfxa2-0bdSQk{~4C#GCYF70_-9-PrX*S8b6bZAS^_f7zYRwFstbskf+7ts%`W1RV^S z#yTC5FOtWIe3M~myRrbj6_xc)uMF@gqpLc3rKhcrWZP#Ncl!D?aCbuL2U8oWBb{%~ zsoF(-!45>Q4nikyBI2VENB(4Qss4oCNA3%<$&4^J6t`Xh<*p@Nd}Ki?E8*im*qB2F z|3)Ieg_J^NWfk4wf9u#?!3(nUmZj@k&-mJ+ruvG;<$KQAv%InM+(-9(<=!0)!?QzW zS>7t&?2*{Thm%Pu&TCqRi15TgQK#d#8iCgiovrNmwoz_J7i18E;Nqz zqTF(y#TKlV*5!oTf`cO?gMqeEGGj3W2f+jq<~1ApiO9*YF`GFH);hGFq?Z;ab$ZHw6A|_oY}bk z@kzco)Fs&q(s#}1-m$qc?0i-)ts)w6<(P1UgSXTpj(u>kqN)0;3qMU zCxSb|y^#tK?-9H&1oA4_A)BT_bcBJ#Cu+ z6;S}KDn?|F{Ipmf3CTjjpdcMKq>@meXk;pkC%kD8Bxn~$XqYkkq#hGUfQv42DF{qW zEk}z_6+|SerjQnOnpVEy-_$}vf3J+!IthvFjd)fel_B0vw1z53rW_~^;CRjfxr9H9 zGykmpOZ+YQI@uWvR_AA)6obF*+%r<0mVS{{Z}ip`s)C65_YyrA)+uC}?zYP!I?lXu_{dz+@K{#(^i1`B#gCRFA;4GeE|25*OCGUUUFC=0hcjg`oa zod%D}NpVrEb!syFFNrdwsFNatKVXJvl{ovmL{TQ+V&yMSw$dS-Yw zekA6i9F}9Znz9JXLK2bx%7dgW7+Yd463)i}2pxz^%tIt!3A>csm4Kt?r<=1JssUasSpE3z zh}ni5L`al;TRyB63%3Z|khOwu9nkPXD3Df1@)@{^``i+EIVB7%$;9;KqzdAKBc&EV zz{M?UpM0pKSWiOHE0fbx!kma(<`$7wE!H&JrKVkvAMEWt`1r0}Ph8a3chM8O&O7_; z^Da2&9F@8M@Uv%8=2!obXZM};?BV_sH{E;e*!>TD^PBep7Y7kKse!N4!3z1s5ql2e zp74hh<`m+NLy@w=4j29~@CI|`!XJjU)$mS{4NCY?C?@IPk<7x?1n)MnnG=Yt{DK8- zsRe1CtesX+@bskVJL!SLoS!V5aI4l&D}35=)DNnCGIbQ0;!}FdQr&5AYY}q?Cp!&C z9Qnki7m7=W)WUG6$>an}gaYDqP5Q(v5EU>KQ{7^r0+VH`OYGn^**>+k?Y7Mcx7gyd zD*i6~VQ~|F7IxsBYj>>d8J>C34~0vtwmh~>b=!1*82BM}Tz(fckPDC4;fOuYMOuq1 zoEOF&r^p6O@rgR%i}BT$?Bs)BMM-_6tV(GlOtzZ zA%MbhPSPz|8f8Fmq>WNVR1JuaekO^4(&th=ImkAnv1=Rjs(sn9N2a)QRMIC8@Sl5YgSLcA$K(mS8Xfi%4^4OKhR(WKr$yie|Yimd)xqRoW-0FYKY&0yK zH-0|eP>h&VA?B=j?oVOJ?{#J;eb$6Kk^AF5eeMr@6Uh{w>A62AFFNUXP8JmLiipVl z`P?#JAopjAUtluzM>zhIxj)hy>2{O3sII%bZ$U}Vk`+sOO6oRTx4L%i@;UBCz1!g^ zs_SbAw-;GTdX}zS+EY?BcIC=V_czH+S((-xYg?7K)R*fiY9DUv-@mll;w#HtVKO`2 zPMfbZJ5Yv4B^{$(?K>A%&uj#)3y=%`Cv^++aZc+KXl0Rwwo1xGq|wKHVm>qi<6*4k zlRe0dBF~vDA<+ZZ#L6U~$TA>Hjy#&k6DM*Nqcp7y0wijVrH)g|LQ16+O~iL9Pf-*k z$hn4G2oz*V6htyPg$KS!8KgrH=_kul9f|OO8XMOtL1)EA5vx+HBGFv&W^(=?7hSQz zn)l5bRi6DkZiszYQRv8bnA7wIU4PxBS=U@7wK|=va(TAZ9(yu6{&Gc~K0~k9?=3AO z+hiN)`d#c7pA+|&Ku5KjGq4?;TAtKVfkT8T;F54d`o`S@H0zKkfoYe}#R%8a;P9NL zlel*Q3qulSAROpZV5vGN5r~f^p|J`C(!6vM5bji=?o%UhD!iUaaC%3=UxMABfguQL zN)1jr93#0O6PeXp&K_`zDT+hxPiAs zl?U9IDNhRCNxU^_wOJ7Oj%TT0G8DF3B1>iR5lhKYF(nHqcjFl2UbM{XR`6hH+mL-uY)S=i^v z&zqVjRp3a;lOjueYMxZ;BsO4MBJH!Tkos#GMy)=_aE~UCy(KrGxjWOAt~F&|s}AKn9((-XJ%-29 zjB1S`?QuillL{hA7nPJODwRT3C(!cqlDS1Ci^>QspT@${+`Q&Ice8u^co;3DJVFn~ z&_yfhTuyVAAp_=RBHPGeGr}>8$x~!hDRUzTIx&(tQyvqE62-&k2Q>IopNaX`PkMM9 zhU9tG$}~*6Ymt*9NTDrhIIM+dVk>2 zr(a#S+k$X`WbUYXPt23A1AV2IfkH6z=aOKsxBsp4YQ3r4CVlluQAr;1s*K1v>SB8%hL)zfYsmyv;>69u z(T}wrG@;X%3M8#t?7WS{4x}@>5xhx+l)v8C-rksL$_y{PWJRssWY(t5?9a%|uoX21 zu*HB4r~Nb2v}TjOcEu%2!vN&hx6ZnJR%`k46)P(T_b;j3nrX?<49}`xyK-51sH?s> zU0>AD6)a!2a&7(KuqMNrxutSs|6t|H6)Ong&&Q7QOMxqywWO>gBMOCtO^jIU?Y5x4vPiyr5bqvK&t`B3-oEU@7jv0~K>ar3G{40}VkdL4j#XD(NJg_7% zkGU2}88}N&H5o~mXDUwzDq7`F77>gf#(?&@B2<@Pi`q5`Xig4Cy|PKJSa%J70YYhU z?*WFR+UC>nAD(0Y3Y!9froxj901X(wzI=ti|48MQOe^p|DDWTbYADjD7uR=%1pa3M z|CY?Hl}iNvmzUGP0avT|QB_Db!J_P;_1f9k=@vWx>)=1j<++GO(qCdsCu#0B)VI_|6|ABaEhu$TVc(Dv^|v$prvjx8Saq?}8KduPnr zKT_fHx{@atM|`s)hHq>^x2A7a>?fL-_RR{Slw2rvBwHa6phPQFLpmGCCZT?is276@ zx407B3N(1r}N{RZT0U__VElJ{Dh*h<)HFZ18yMi?Xwe>OGzY zczcgaHsv!C<8P~e>QO!)0SNlgL_OYm_JmL6R=tf~zUpX|Sb3@6n{B6WE+nHbl{FT8 zE@~>UslJw7 zApPOcH}j+$vZ7*Cu}}#6C_apD9=sN@Ha1k27Z>`yZtOEi-f5MT+zqV}fo-{}Kth%u zDgQ*Uw7_mMtsoiGLnvJX2@ed2ugoO0`TCPo033tJh)SkZl`M{L%Rr}(e2J1;EjWil zv`Pc$C%!1zLg}PRbRDjR!p1zP5y%7qRkCE@7+Cg?&?10 zYEMou&k`)D_O4&YuPexp-B(%C-zW7OT?N@EX8795UEi1P@>RaG;#=qT7tLH*-=5{Q z2c3qC_rAL-yYL4c>%*oE=1{)n23=lhYY|5*MPggo^D3um587MLu8E}6cYa(>$cTit z)MzwhU}JWfc`0SfhQ0eGEMJs)UMBPmSH45SUe1skP#6RUCMcF%dXdgAP!_5HO_tzM zQ~_p(!-nd@j88uZZHq~-uD+lidHLkWuXl*;E@TY zIoIv~M#-wWn$hBG&%VZ)N7vUB<9cQBb#(o3UUgSNL3g#=UEN(!&{dr$-B!D@_}YEn zAW)P*(b^R#`VFVcnRD$qR8>fU4izfDf_AZegK7_Qe|_xxk!+tA>lQ@52d#v(S`_<1 zlVT2Uj36H!X&GUzZZu@e-VFqukHEr?SUL=jLa=Ck@#Xr!HL zk=r=sUD!|`8WCP9KJ0=w({F+}y`NR>pd!&I6PM01n6 zftD?pve%XpsfAF-@Pm|yDiXS&lDO?neFT9|`dtEqAR*I6T@3psF#BPEXV*{e6Ko?SjLzqGM-!*y$f8>dO12RBZ` z?B;n(D~8r?Tsu@Te_>fu<*F-IZhD|`{NJ0F?`|v%G%VTCP+F+^eU<@k9g8=d7e>ru?Dw$+P;GHU7{>tgl2A7VBic9{B)Abh3@(39!VR(2-QrJK5i4WDEV9qMR7pzzEPa^gu!?OoFA~jXC-&PLn0v#p+@r@YTk*&uH zr!CZuls$3a0D@jx0g{9Q078Ht37JU>Y0#%qKvfzI<}rNajLx-Mv+}hx3JU#iRA*DF zqm=>w8`Z^IM`G@Oqq=zOC?3##YTV)Ta1wo7hLY?*i^U}7P#HcCH~YU`4?Yn`jGCyA z282Elr}&tWbp_=~FswplC*36`mFRVw*t*`g|<>ohO{fr*g}Ds+d0BvoRVL`jiT zRFGI3kz87VikPU2tboaS63Z)2(uPD8h!Ra-rxCC0WXmha1UlX7ig@^t0!GT}3Tf;7 zY?m%0J6u-lE$*t!^({EMxxCaD_PK2qr#8Rg&}>SikNroe$=y6yY7WYMnT~+fZB4hA zv=@218-j99U8%v0Z>uy`mj`AH*Tg=^&6_J3Y`Iw;WWT}IUM5Aqb>G&|Y7vpJhz3(w!DJ~Su{6J(1Vc%zpboHW_m?exa-$(G zoAH%SY|40QsjDW%mcIB$3YG(32qY(UVh@2ba`1d9VawnC6`%3={maI%NaMRNmYT0f z&&jDDsqP3GGQ7=YXGp*N5~B9!vB%}}5A7ehC_l5n8GFIYwFcvLCSR2&zdYXvqOz)< zk~XQAK@<7n->9)li^lI!FT0ueu3k1u@2DRYy4U<^x))J{12EIAI+O6LkP3cUn@v%{ zr}va;Iu_&;Dh#wafPR zbf2@lu5S4`op_p?i>IL(6)soB3?V<3vLSre=-1d=&d3HM$ZjKl^3ZW|=h+M@fpE`=|mw$euLiOv|&5y>u z%@;n(SDh$(1Y^=IACy*Uc3^+R^Jr)B!jR7+zK4R{5rucM9(XM&K?cXv@1bD65-uO1 z$Ha|ae4>U7x|-8NlQ<>KggQoolzx!SK&_8E9*ts4ro@*`@S(=kZ)afR5$xK(qG@Tn zC#R?`?>twX<9t{C_@6Vgeqk?knXn;dVWvLEq1J0xo37UE@HNdTE9z=%a$lfJbLVVq zG=;KWv{zPEIs&EMe6tyw7wy`LG2yIVK1W&uJhZY0>3b&iwb-M$ups1d=Qyy}Oe=3q zdUR$q;(I38oL+51+AI=V5D0*_ko=wr)GiDVrfLin?B)2UO*q+N6!5hwA0heg)B##R zC4N)_1j5-sKZ>(K!Q51f3yUVj7f6Jo7ykD|o;wB7Isml5dyl%4aUo?C{og2iq5CTl<>ZMw(r= z@>vb}I+s4%l2PT)4cOCmXF7bgV2RghwaCWCg$?xCEa3ME)lum>*dAgnF7Bi;L~fH& z%1i>mT3mb}fXCP33h!d#D@|Mkp(w9Ky6$6(-*xp-V~li6YWSN=+$|aIj2&OT2{m;Hghk z4+9gdMG-(SWYx4rDc}SLj{y0vLZS>_1?MZJw2JU_JTLb%0qRfzZB-7166xG2aq9e* zw$4!VXi%@+SJOBpRy{wzBsU}A4X-GAzqU&C7RJguQLd(M23pv9F;>{ScFK3%6uiLA z3|M@733QHe2O>yGrgRCI)zG{OraZ@eB|SmpQvhiwfIHL|5-m1ArcL@APl>EnFZtE0 zZ@;?X?lWi1IP>le>SI6qWLSOoC&O~jjBQuXU;2&BEqM1*ejR^VHlm%Fuj1cCi${Kl z4?%W<59vqwrrNamV=1}o;*PgM;jWtx=N~ENHCsRA53_k+fI9=|{<3!>BkQ@WtLeSRzm@Jf!hG z3hN%x8ZC}2ueW!g^m^+^uRpS+uBgZF(EJ&TlXA>?Iq6q-+Xt$>bs<}Zevo2uY$fKg zAm-eXT45Un2wwkWY9XAqLxm4IPd2n9^a4B{(fC7*@CLjeWX z4VfO7j zynNB#-u|-|Ra7iGtG{!`jLx1JGt`fU=YFNH|IGQ}@cc9T`@S+a9J4JP8CkGkWMrYz zhbv&e4Ncl_L92e#%#wI0xT!F$F;(I%gQnv$b3V1blUX+GTyBA zcU*=n=i7E$z#NM0_QZCd>@KxO#RkFohp^vb8gs(8Rmle*3^0c`2W%NCGb^NXZqiFZ*G>G+-#79H4E8*uwHIRE(u9wjRX+_iY!KJ-3non zUIk6LX*Dapyx-}9dLJLf&`IVT*eV&P%oE^dY!rYLyGf`wqq1Xp=(LLrN;QHX(M zV~+K%TNn$)dG;ks1{TEgE}-i{iauLm^cF#fun#71LE;Gi{agv@xj1l#_j6?q)qfL? zUF$6K`7s4q8?5t^il%;PbVYn@VN37tMvcW%-OWcozISjB!A-#-KmEz#Ny)ZbvT{Ct z@HWTDC!R=%U26XP=7BxOXC&n(_r8O+wyLcw)z-6(#pYK^k|XVl7cE>ce_l~xeje|- z#u{9beRkyRL2X@j!yGr-+J(h~1PrP%Y74YCj`y`4cN{1FXpy@xkRMZdqBQ=5s1n(eN@fVb*kp>5bfpYmb4Ob7`GPKOA6ylS(hqO6@ z8CtG=s9spFH*WWv$RgZOKg3>|yZbfetDi8W&x(o7@sH>)w+&XHfa+XX{0Rg7l(YZ0jyh{q*xIds1+IW%XRcB3gd>=_X#OV}lc~%Oiqj6XT8DonMn?$jfK}kt?To3xNhS*H!oVj)2QE-+V2QEoG`M$y;fuq(#$hTR=GGVg z)FNc0jq8oPt$3Kn`vac%BFzqi6+i3=+s5akTH3aU`f$4lr4(jHm=7DqF!@n~@-Ov0?=ZIwc>b-v{P=tzWg|IJL!7lI>H1bu&^uLN-7Ep!4Pxn^; z6$mh2sF-`20}5fL@e(WkXB}|O3eExy{l8b1IC0+YIH$#Z`Hxes{O>m$u8bEgzYCf9 zairOLYixR4$SeL^63n}MUmKgo>sBm3nzfdM7xnJdogt+m50#8EjRo`OxN~RmMBe0a zNeP&lm71k}tE6S4F>%Vnoh}7Yk+_Fzk%_B_c!vlsBnZX1CAd5Q>!r3Z9KkpECXukP zgcK8-yD<=fj)#ZGhNngZ=5U|C$oN4;Ci;tXplv^Yk%OrW6v<_P&tK%QRL1{BMGi~l z$iJw_VX5S4AD^G`VX5Ti+RtC)uvBt>|M`m?mP&pe%CAy&^IEEoHKj1v0n>@E25dQf zQ5bSi=ivzmXgqW&IKsL4^OVdWIuw;TvzCcIb!BPPu7aE$oq5%J4`f6_Rn?)x7mUA6(95yt0!;srm7gv80g!4p*AO_^8wczeoN~mG95DGao~aTztp>1K-V9BhA=b5}!;r!l)$N zmL1Kj>M_B`9DrX<+;V~1tzn!jF?ByjI@M?;0~np%)nhpyd;Ru|DM1_NP%mSdP4T`IDTA+ z^rhZ*U5Zp}&9KzzJ|x|ZWO=NVC-C>K`fhI-kKy;Xh3(c*j!9-hMqyYKz9^aNUINJ+ z`y7!UVg6#+{HQ_sYzzPM4ilpkll7eYpd+>e#Bu#%7n z8}6u#u!KdJ*%4-5gc%ai`?PsWeQ$T~(R%aN-XGSPi_HbrfA4*|xBF3ZW$)2P&0EdI zb-h0{7osejKI;26?pC-2;Z8H$W_(HXY*)^t)MWT#alcDnoPJ)~Xav#Ca!$++v4up3 zW1lWu3FzZIkRL~53^aD!C5I-}roP}vdDz$Cmy|yeH^~jKl|x^rJz%Hzkxgnf8-?>h$`I5p2Yxp)z7i@5Jl z$>l#xgQC&~@a%KxV}3v%zb^e6njd8j%%?v3pLdww?SEc+=g+tM^Zn;StNcQhA7#$N z-~M|lVzED9Cs#Jcj~x*Q3xd-^xvQh^B(*d=8`vH`;Bo=K)fjZ15#~U{KZxq6T9{44 zT44T#DH0ciKk;ci5i}N9C&o%~aHGe--~ru0;P~lqcURbYKeiqC->WaLFpcB5Bm6YZ zk6UE?H}`DZP%^h5J99$n=p>~O)}FOCe@L9kBBKokF(CL#$L zX%bu+n>HRZ(QCbdgXV&-L2`I2I2D;P_$^j|r439OupVo}zRlqBsfp+fbdLPNkE2H; z0LwJVn-&#_~R@?>Yp)Z%5cS5&N+J-K*E@#G}u&3X0Bf4Z^xS=+e< z_imXrr@Uy|<#VTs9aV!y=dn2;W8f!0!+{&6lV{jiBp)3U!(kvJQYMKY#v^}r${KO2=8IR}Zv;5jm~?;jz3qvyL( zd{j^f*DKzPiW(pTj3fsB>)Lfi1ssIyuTxiy85L$kp|eQHVc{4J7+C{b;X3?$6XLq_ zFRvq#U($3V5;qv?Z%}Ofo5ooO*Ie$uW<7QbRsx+^iVd=p1s`!(cm$a-Ogq&n9Zcb> zVW=0fET33klb(DH$m^t9!+Y+iogbedR~Clxc-& z3rmuV?_OwLXsnsJelZXKfF2k3?zQr~=7r`##_-%w?3^*cYqQW?s2Cour_bk1F5eXu z39sXPOjOY)hq`QdM(F^T&BzoJ!#$`oyftBAv78V3&n@{&i%Rqt#R>L}gQ+sFMHLni zOnf{CQHO6}fHo9JPZB35i#}_Cnzj#`Q)3?=Ruz|j)`AAiqQk-h^IboEB-0;>KFmC~ z2xIGEW6_73baI*9b!yZ9BHh%HK?)AgYZ@(J7vhifK|Iq2RSD#9~ zqAYyM;JK~NGS)Y=H1G}mK;O`z`CE*E`TU0Zpa0FEe10qa`5XNCzF$L`yH)-RC_mJg z{~G?_+l}-2EMFdwzr~;Ldj|Qq^%dp#pZ`rD|5fC#x3PSG{s!h_kT?(LnoY(Y78mNp zTEOhwlA_$w*`?E_WK2-J1i!3PXJE`T2Om~TvTN4p__%0Xn9jS?`t}{_D1pHICK#CX z>0iRc1W_Y-*R2HP!q)N>MSiD9JdB+GCTV|+0dBkD`LMwqeq2L zn^oKP)P3K1^NCgSzk2e4^#^K~ES$IDyY5FW|8nx}EgLfD%^W{@$zARntCnV~O&d7O zv~e7@0&Np!{K14H0d1|b=hW8a%Aaps9yWi=pnU3p|M}kx%4hlh{67rJr*8Q3H!vUL zv316N#HMy4m4sM|8%m92F3CX~1fnAF0_~6-AH(hbXGkht^Fvo<;)cda zF*Ma&&MnI+`P{OcpTaH6L;r30__TR$$fC=Y+lFM2haBIDkhLNAU;vO~xXiI7@l&Tv zaZPn`hc0()M}%okLM_k7jhdX#XJ=tPABPw#&gc7Q)O{23k%41+sDfBZ>0A2xT<=5o zgL9SHpIm?6M_xf~>Hs(}n6nn_JNP8R2fpZ^)AyG!Xj0$rGt{&`aLBUuta4Uwj?|1k zRObb7PH+8w$wD3;So*cR37F8Y>zucUX9$))GCN=M`LA4lHPw7Lzr6l2Gy0LoVq<#0 zo@cFH_{>8*S8)8e>Dg)jxbQ*^4;M@xR~A1yHtfpIhnAVW6HfLTJqHTz%<8qJLicsn zk97aGfbRcEx<533i!m^ty6=DfH-qx2$KCng17B2GT*MJnxvT2N2N?%VU|`JoF*-TjkV9YQjGX7(>gtdIbq{-7VgE^W z11|s>_!eT9K@@!81FA-#6>H~OBYuQmz{(>$Lj$cPM1au^{_n_^E@C#=fGt67KIyh-!#st4_7#~TT z-3;By*6JWvVP;Il_DH%57-0s(5)R8rF-NB0{2PW3hj9ro;4{V%5tK6(Brot@m?arY z2o_wk9OfLp01QU^UuPS0+~@k_*D>egOI(=`5@J!+bTSTj*RX}#T*K8LEI>>k$QTA` zUVoK(jX$9UaoPdbg0M0=V*vfAJ>bXo(@tu1B0L+~=JfAPLpmI#PQ`fRGdHOM^1P zF0AN17~+7BqQqEczFsnB-VLRTZ&)^OS>c@7E<~JRU6?l|M1*Od6Y_1VW)6Knk2rj7+g(SqMHRM)P7x51-UPM~t;-Fi)Mh zA={vXxVhA&~7+fsFec{meDX?*wrnh8_X~2^kI2rER~K~u3yP(XxGWJQ&_@qg)!vg z^At8LWjwz2^At8LWx6NkuO%~fyT2M`?1D=JlwrJqYZBF(?2i6%$Mu>Oe(8aOkl-if z#!poy%#MFBat)oqA+ppGcFo0~R3P>zhDRX8o1H4ChJ9t@D;41usTZGFC2j&Z{JzB1N;o7M7Gus;{M@9F+(DK2z+;OaY{ zQld)>I+u^g7#rsw+MEd9`4s5uvnsM}OCNjTQC{>k=n|-;wF{O+M~<72ouF|}$hhDw zP=UK2uuf*h8KQPr1&-bNZ@bks55e<8gLgj+yqps&kvJ9aldgH7M;iODa7~K;QWSh= zCcyWBp%?DoY~=mU5m>zG+Yy)?6KThIAQYcvEE!txCE=F|&euVwDh_@MyOa8#!r6-4 zBsQoRJpdESxks=#mKunmFf$WIhS_9j!{}0qOEdpy-ka9@v}OL~<2@;@ro(#giJr{3 z!@altt0i{r4^v}rvYf^HsMX@ZyfMajT(XNXV#34vI2jdfj|j!BKA>Ee1qZLt2p--! z?C+2#f9ITQ%z*brwUNP%lDJp{2gYR#_z}5eO4m$~M@;VGVPp*3z|Wld zv%M1@{nNgbM%>8r^LgKxnCTjmIzU}rf3(t~?z*(@tH7~@Qa)QK-oW*!G>{_qt5E_=lpjGUgLDcGyVuCAk zWuK=QN*2MdD$~F8VoR{~jieWk#XcfX7BP@11bAXWIdD48K)NtU!q~!J9!3F!i=)w- zKcKi!Orfyz*niI!%qE1cI9tEq`isIM_rRjKE9ldg5)r}^A<|(0g5#cGS)|TCIFUN_ z4M);)b(DFba)@mZXx5qPfnQia}Udv@n16%tB}3l*!lyhP}YLWpIW$BRaTx ze8V);9*(2Qt%?4{AIu?X&X7a|>^ z!bP>;|C0CVg1j?Vj&1RHwmj_lvbAKmg-%??=)dap3-^EF{@`6J_ua9!GI-z0fo{uF z{$)+f-7;|Q`TvCa&@i*1?_rp`K@*YBbN;7m?shBlF?VZIzW;f~GWnm!D5LNBiCQD_ zKmS|f@0jn8Wm1e&p~|o%Mn?JsoWzfFo$R<;U2&Qm;ZBJ$aoAEacJ+nfuO*bG6O%z2WvdkdNa*fN z_gzK8-Z*KPckor=lbT5eUJl_>7A~-4`81ojj{+TOP)&S`Mm1OqiwG`bS)quzE^1}o zi0mw!zsq9|u#QFh8G}xtv63x;F=J&a%=uS#ECjkfF2`Ci4h;2Z z2g&CM^c@VdK-{4F-u=1A8*<*n;M4BAh#QAeMs=TAP1W_2_;v7+!CLViBe-R??v@RKV z&VP`j$<5ZYf=7Guk35#V_`#6vQ{* zW61B5A+6@W+J1)f25|m#;JksdF*yZkeOC}7 zBFr|k?~+1y&gjuO=-M2=-5GMXCB^nJ>QBM>#`ffKqY_Dl&Q;YZ1bC|NcnZov0`Swt zX2N+`Wyd)MAMPL?EJ2`A)2>^DKbm>S3Spj(q3~byd1uDle>NT=TN#5pz_<1HiEE@j8p;0c@z*8hZJ*!vEq!&4N)Iy{wz{ecV64MjK*F#83q!tPO~w2r0#;#V zNxU8NV0(gnWQ+qj!Fxu?SUl=icZ6dQa*Q)%8T1c-r}XE8e9Y8^t11_u~<!tbF`0=T)y{1{)l;c zn(;e*@6wFav170=AzITbtG;*C=gbkH5=YA0V4-*z5$-$*4aE%Jze533Vqh zy~L{2vTRs<1LZPE8+4E8Y#cDHLn}l6n4PupPrb)d=5Hv=xH&z{I(p*VX(ysaO-Kx} z+?6`*^7pLeSI!jQw`5}Ui2Fy5oaweKye%eWH19jyi*Mh{mhah}sUlqKxIf_v_~ z$sQhVbBrGqn>Z#S!}^a^U%vbF(&?db;SsT+F%zffr%t$Oa&&a64p6$)deW@1UG|rY zMvu(FM;%fOQ-}<-4F)tDHRYMP>1p@efs!34I0gl0+Ail;=ihzmCYC(H5tFTga~v!f z;kdoOHEYcD&r`0Me$8?%2IOFQRdSeV;2g;0(eSceQx-{|Qbeadz0BrZQ3 zEJfRB?9B&l*N|uCrxmmLZ`Tog)(p0&1V3kx&aKWgyMD1Rpy|#`GqTS4gWA~6zIX@ zAut-UbTC`++AwTFr)9xj;owFKu4G8EVks~&$%=b)up)?4^5bwb0ZwTg5tp{gF+L}` zxTP#5@5YRIV^Ygni<75}i|*Z&I%ZzRjd`iPe`Ec20@ka|)JXHK)Y#bGq{vh=9=C~? z_wK&@``Fl2YpQt{?N3m)dFHH=L>%<#nm%<>_5^$ff-+Y80cBj+&rVJTVpS$*;tau% zWSm|XW@0fK-(Xs8hg?|$gdQ527%E#&p%-1h40_iFy&h}@e<^H*g6o%p5<)SDGBO7h zhc7bL)rNmtZ}{5=@A%th2yguK`HKyHSFYJk{yPjXw+S>Drp_43&qWJfv*pb1M30-2 zT-;jbZ^D$amg3}`@eXsxwcGN_|CXzfQzCmup-s(8ktzO0wuG~7ziB*S{S&sv44wl} zg3)Lx3K`u$+T@4>;YrGoFI#HQfBT0TV$#1gMTd!hbK#cVYuE1CvT)&+J!{wQ-m=iL zV(spS7A$yZ_u4hPwk%k%Wfv6tMw}16&rCtx*+zlURT7;)n=zq`nG5t=&I00j={sx6 z!08a$dBX((F5?aP1^a9G3r~9;@(WZvxQH<17rj%0%gkUJ$Zh(d$^!iP{n>d#<_I{h z8h)LCp9c*$^xroQJ>?-}%FvuEZx7AcHYB_d0gAja1p$hI8&rn;8;uhNpX7gr|EKMw z)r*~cnypuSuC@5cfCAmuIqKQGo4EkoI85V_Q zEgt2~TLma{Y%n$Ba8Wv)vX%@x&MCsAx6dt}|0&+ZVpx<4fExtf@zBut(7t%a!fU*b zeG~%@1BSa~m@?>7=h$#AX9aMm@}$Vrfp1QJrRr0;!OL}-K!n|ZEN z4vMhxM0IS*=qrn5_AR6jy>>oqh%~>`hAz{X{Ir(MNMvk0TW>&?F`t#Rf6U4!TT1If}I?TDP_nh#idio#}Mld1}7c`Ov z+Rml;Oqsdp(pVe{gva3kmhiBMa9#@Jz&DvQYaBg?Ww9_^55|5U+;xa<4|hM7D+wKCSLwt;_^}nY7n`wK4;A^858yD>FbRZOxKv%Mw^!jBlI@cwO2i_>%D=2I zI}i8bjSK!J;-CHnh!L}RV^wf#3$9PVwkrB~(?Ulkj5Cw`>EPN#-{lP1>AADAT)Bm2 zUV3I@(%s)WwehjPpTF9kI5IkE+=S^RQ?@*rYJQlR+KXii^H63=@1b#BTS`~wWhO?( zg>PK++BY{p{q@`8zxJSMK4{(Zm5X05+qkYGGA?%1xKXiB?p~Udja|S|qaw?avbzsw z&&Uq5-&Og*&EI`ya-XfH#Qqbq>4fB*1_>=m^HjcAgb31DuGSgfzvS=|A^1*LptO!HYQ??V}RD z(-!&N5!s_A#kWVceJ3%=-us{Xj_wWlyZH3@_>4H;h_EaB&1qlkeKj-FoK(^Ks%2g1 z$T5H0JJbBx-$EWHZcZ_5kHSZkXYAt+Z~Vn@eY7#xgP^B?#;D+z=&q{VU8-@h1} z6o<1LF{I5M9G4P?8(=f5Ma>-tx7{`BvF(}Dp-YGl2q}fVoMIH2lS)QTo0>m+YSFYJ#+doXnDSoHrWIfX z));4oTAVP6m>32eh$sWH!;pT^Ed|st4vk>nF|Z8AK!4sMFaiyR%HxjbVW~iqVy;0d z`sf)zgMVB3{Ll2RX~OKM_ZLEb`VL;8<>0W^GI*_Wwkz1MT*n-=yD8ChPF%72u7cZl zRTnSqc>TNUI;)D8KX$I_uE(aE6N*;nX3cj`jg1}?{rK!JuDW4_eM0V%SxYwEm~o#i zFL`=O+|qBpRQI#q?)MuCt9IYD`5#(VEh-tA9ly4D?Nr>t5P8vii>z=Dn6*_dW-M21Can?_XM{ja!m4WyyH<RSCvAh1a6Y{Pc3jpXiZk0dFQyy(0ilfFztyn>q0X}@4fQRuUP7)&c1of$liaLyecPc zVMfS{BgcGnD|*p1}e^Z z5*^r|-`7{rjZI^WcDD94q5lXH^eAqA!nTNDZ%G^QEH^#k3H2AXyAh}Uk~82L)DC@< ziedW;l>{9}rSebEPWgkR;OFNOKknC7APN_QC}#7%gp*xaD>4wv5<50w#=>diLLYG~ zyl>m`jFssQOL%x6YK3;g7H1noB z+T>m47p(7C|A^CQ3Jly2l#*;3_~PbZM`uAw!I)9JSJxPCj@RgoL3KAmb8tb0#TbEj zMN2xIgibRwWF{Pkp`q{@f;j~1lDRN^hIwHq4oJoZdb$xaA-BLdCtCY~R((=g&~F5n zLL!Rx3zUko;G3k(1{Tl4akv5h;Df03J_sqv|0$IGvi*9h58yEQ)=?=1GtSk zT)u-03?mJL~sx7gfzXk>cy?#LJ%u@L!0%!HAL%&+#Qp9T%DgN7@^(O`!RY}%U6T4j~> z0VGAD0Usys-N}SQ9=_eoY35uLw7>qL&0`_7mcx?V(n#v~rj;tUTZ! zV{pXiflul|ey$xHQIvd&QvC4|=Bx-a-5U7Fj0o(7`?6WvZPxbIcb|AODmFAUHtL;s zq992eeDexdFE9Vnn$sIOW_n`c^fBiDnE&HX!CvX5OvSB+HTy%NS} zr5b_jX5||R?K?+rYFsQQM^JmZMl?-AwWu4jN3!YI7JVP6ANUG?vxQ(o>~L@D>Xh686$G9JPZ$(INLhGK#HFhMDjnh?pmZ1t zu*c1c!?G*Fxdz>^7_Ai{+|U$ve9idu?-qUaeEsCxQo}9NCVZiOMY_fNr`~#NX|yeQ z>^*4}Pi&bVVSgkkV#54;=8wJ{X1(z;Mm#~8=G&gbkw57r2(Ci3j&ATB#lwAZK4BRA zUYLh6Fm;k?;_xHPpL8xE;i0ofv@7rfcjJuhE%M{i<&0;YZ~~Hh0plMr2X%+=}KHdvUrXfJ2^)#_*U@r z#lAZG>tPvchGE*FfD!Q1On6|%Bg`({-wv}jJXy7F?~2Dh%)KYQddmmz1lk~{yzPO7 zQGYJAMOi{?AILeb1~84k@7;x{#xv*u^Go36iL#^jIuy;uK7(x$G61lHW}?Y1f^88< zgXr}BpP1oasSFW;-QbWe^ZdwhNh6~!{va7-@jpp#V&-%am{DSpgYw{KH=V4Rx-pDKJ?n!|47VojvF(bx6n=>GtQZn zXdX|WAajYZ@pO;+A$Sd!L9{vXV%C|!umY)S>296yDJhEsj$_zqNU?F8@;%M<4lY=nJ z&w5{r95Esx`q}5A5)#La4E4Phj&+uwM#V-zt=JB)qRj5lOZXn9m4x#=ZA_(5VjPA@ z+O5(TFv)T;BN!AgnK#SQ{d7!5iOh(3`uz_>9pT~gEik^J*7@P#zqwvL zoJ@m!|71CbeEXv!2YAE6(x(NhK~2GGF0mS1yk)bf8Yq$NL(69H5@Wa+2N{W=S@`K< z%oxN$UN72_>|tZXP#j}P8XmBsxnMfbR>OrbqTZp4rvsx8t0&|ynUu41&V&hbmgY=a zl0RWfF#0g`J2{JR8?$p!&g6y8v16SJCucjI*^_6?5bx1w+uG2#5Tkee8ZmnFU^_A~ zegJu}6!ZYW){#);fmSa4`6J(gfp}AbL34dC;q${Y`-gewbH~`R8E`W!81hPas%EzwsJ zv&S|5AaT~j(D$B+kN;lM_-Eoqd@qr^j4p(1F<-X5GK}s16K%KOPAm8XBeLt-Zd{~1 zz;^E+=Lk>8OpcnAdRvk0mC;cVDFqdaVZ7H$1B@*=KWW6VJFx(j7>$;S@ZA86@#O$x zeXD_SO2;cd-S;cxWGJ1b^kkt^=n}f&NwpbsgoPS@6f3;|CqmhbMZP`2#lliyxp0+m zqe|GMdaH!h%BfMhR#>On>xB)%Mq!h%S-4HOUGKICTZL`Hc43FGQ`jXspA?0Ah5Lm2 zg$INOg@=TPMePycQDL|6nD8lKkMN}Ml<>6hjPR`RS<(3umHC_~xv2c-g)b@RWu<>E z3SXB5-VnZ}c6nF$o^sw7ejxk^CEL}ScD1Hmt!YR+qyTR798*ELx!Pc}JY)!kt*0dXJO}oL?v>R+qyTR798*ELx z!Pc}JY)!kt*0dXJO}oL?v>R+qyTR798*ELx!Pc}JY)!kt*0dXJO}oL?v>R+qyTR79 z8*ELx!Pc}JY)!kt*0dXJO}oL?v>R+qyTR798*ELx!Pc}JY)!kt*0dXJO}oL?v>R+q zyTR798*ELx!Pc}JY)!kt*0dXJO}oL?j6{3A2Fwyp7CMD4;UeE}@#|t?sjytQO1M$a zR13EYTZFB`HetK4L)a-itapzHj|#hm$AnJ_dxR&2r-Y}4XM|^k&#APFNy_T9w<=ZsCY4_$tX959`8CS%DqXAecKzBSY!$W%+l3v%PGOg7Kc~7b2%l5_ zOTwS)*Vk3%8^SkL%O&C4!gqx4>DTv#9|%80ek`Q48W`dGG0?8GLl}c+Vxj-Uc>S6o zqi}h=z%JB%j!a9{uFKiGt3Y&z@!fnDXmG-RC zKUew}D*0E!*Mx7X%uB+zMCaQ|zaxBCIUg$h5z2{^KEz2M;tc8o&K}1zangr4=|dcP z^oz)$KE$C%6UlF!^dS!X)*?-Ph?73V8Ptb3=|i0KAr8HmZ&4rO(3e?0^&t*@nfcU* zIP_@dP#@yZubHMk#G$tmsSk1JtwicW9C|B}`VePOAL0z^L!3cO&lQ4Uzf~k1^2{U8N z8xO5uI$qC=_w7PDSvUc+wE?3Dbgys5mrP8aEzD4O2ce zBwnh7)ynrM|3Tc}5N~W2KBUrW^vqV}c=b%Ja_Yomy|6*pC~Oio3%3cktNa#WtFTSj zF6&YJp ze=K}Pcuvy0AbeK5{6x<`Cu%P${k-r6J^!NcCH?xc@?TNwyej;qTH)8ie-gefNxmU` zQ?k7zd`mj^w$kqi-&M|gdh&hY2f`2a>qnps+o3SF!FfTxmwZPW`6({`i=wV`pyH3m0zNA?i5z4G>_0LtW!Dl!UkcZuu0e~ z+$QW&$b*)PUsNELi00> z3BC)!bUl+LoGhG*n;bIG6Zx)7nCIJsbUsSXfE-o>=lD8-g}x=gV&$wsdu5&YJpe=K}P_^j%>sArxR zzM%XUg)b}TEy?Fy;YWCWDx~)!Fvj;XFise+oD5-|uwK|8Y!o&Ln}yqi&kEmC3GWI& zLe4bk^E1G7=+!igd5DvRPN7S<$oEU+FBX;xZ-fn;hS>`9R|!|6uT8`F=QMDwN?xz@ zMwPHhwNweKl~bd1t#G??T7<2_HetK4L)a-ith$Z}j|#hm$AnJ_dxR&2r-Y}4XM|^k z=S15D;d3haqVk^?zNDO&m400mz9D>1_`dK1;B>>*`|m)z&>@V$Y;QWGx(tXBB5(qv zJslE04$Klx7CMD4VV-X}es#mbOoydi11$872No-5k?)_8UMwsXmJ3%2*Z8*M*R?8V zz0w<%t`t3+L`jvfTKOL3Kj@o^w>ArF^y^loz52CQIotJoi?CJLCTtgW2s?#cqV}-p zIU+nN>=qsqJ|*lCo)n%Eo)(@Fo)w-G7Z-%jsr-w|e_r^Ka$Z*Y=c@O0QTvAQP0@cz z_?G1Vw$kqi-&M|gdh&hY2f`2WD^5~`)xx=auv$*pXWT~&i|UkpcFI0GWuKk0&raEA zr|h#+_Sq@>?38_W%04?~pPjPLPT6Ot?6Xt$*(v+%lzn!}K09TfowCnP*=MKhvs3oj zDf{e{eRj$|J7u4pvd>Q0XQ%A5Q})>@`|Ol`cFI0GWuKk0&raFrS>X2`W0n!q`zK(W zFkU$s!l}@}S@2i93|xeMF$;P~EESduR|)I%e7&$i*eGlgHVd~2pHyjkh5Lm2g$INO zg@=TPRq_$xQDL|6nD8lKkMN}Ml<>6hjPR`RS=IX!m3dJ)&kJ7`z9p{T6@G*#UD5=X zG{GfJa7hzf(gc?@!6i*_NfTVs1eY|yB~5Ti6I{{+mo&j8O>jvQT+#%WG{GfJa7hzf z(gc?@!6i*_NfTVs1eY|yB~5Ti6I{{+mo&j8O>jvQT+#%WG{GfJa7hzf(gc?@!6i*_ zNfTVsgk0FDR}dkXC7djD3SGiH*!*0K310$kR8F;UyRb#rDr^(B3p<3J!pHUQPT?-$ zZsBwK^(9~)WWEW=(Lx@qD3N1^JdGLhjPaQJ=V8o1Ovkt=Ph*BW(9HB?;Z$Ef(oUsa z!Ueu4eRoO6gmazSZ|2p1e)zHKJ#&a@P4CLjHQ? z-0s_k^hVXVNjX)*YUMnncWabWE9Cej4{c54_#_W)P2~6_4{c54_#_YB0CLwNY!$W% z+l3v%PT`Z{bgyuqaKG??@SyOJ@UXZ$B0MVW79JBmB|IUTdz3yYJS99WJR>|Sd|FTb zNcdynGs1J?^n#G%pFH^Y*cQ);+KYPkdEpCs{zc(S`t@byzalxmD*UA+{A=Mq313&q zZwNVd%7a!D-xIzs{6NUjR6expMIc90`5H~-L$8>_(NsQqACaS}e6$FWqp5tf2$7?y ze6$FWqp5uKDVD?0R6cspi}3c+TjEA7tAX^ExaBQzqsBs{=`C@iUZ&|SaYLVX0qHGq z8}ydAq17({=`C?XtC^;^#Ent$-9UOv+?b;g=`C@~TjGXRGfi)a8~alK0Hn9XEpLe% zw}!ENdQ02}y(Mmp*_fuc#BI=9;+D6>EpLe%qqvL6p|`{>Z;4yp61Ti1ZiC(uH)cTO zh29c3d|9N2-V(P#Z;4yp61PEbi5uQ6K0|Mb+n~3^4IdYC=q+(W+C+Lw+>kbr-V!&Y zO{BNP4gF{N^p?2c4I|Q9;)XYjNNxOxZ$-X(p%y-=q+)>cg-}tC2shxiS(AZ;kzc%TjDn8EpZ$4mbeXiOWX#% zC2siTE&}N-aYJXw3%w<7=s&5Yx5N$qHj&;Ew?S`-8@@aKN^gnVptr~{dQ05!>`{{RmbeXiOWX#%C2nXYb&TE;w?S`-8(PX7dQ05!@)7ARaU1lOxS_qP zF*2g|&VlxR9Z2n+Bki37?X5*R7T(=C&|aqF^~?k#73mD6r~1B)^a9X72Riv{;9_B^ za0ynI=0F3Pze;$k@Bbi8U77=3V#!rPYSA2M5plDyM)_NnrvA)<{_y!a)mtxY5H<>% zgw4Wj!Y4)5Ug19Be&GS(LE$0cVbOL(cvRReJSKcf*dshCJS99WJR>|Sd{*`TL}gx7 z&hx^Tg|CSBSB0;Omp6oL!8vNdIcP!3nJqX+EjR})$ej1|!#AlCPQF_@7RLbi7TBB^CMiTKFwGfXA$m#`aFNPfEG!i+!A!6acAI6c5SA-{rP8aEzD4O< zeVg&jZA!24?L>MldRZat_QSyS%Hd3~5WS3CY|^_`Le2yWVX>M2AiiFO=xfA>R9cOm z*{U3`o~cz%o%pI3HV7MqO~Pj3HX&z@h0p;aXO4x?0U~FPh0p;aXO4xi*p$Ow;XdJh z;Q`@6;UVE+(Qrg~RM;&%CVWbGLiG12eNuQzcv^Tycvkqdp8S#U$HHfX=Onia!e_cI2D7xes#Le5DGp=12@6}8K&!q=7ahVV^E@{;f^Y0=wCzaxBCIq&Jo z_k|w_Kh&=ufs(n~8yRbvpDLkxNjtGwmyM@PuPYHX3Cxxekr-f&P zXNBiP+XdlsD*2-FpBKKQoR^h;MI5~uSrB3L;hV-<>E<%o<`D1wzEGFG7oR*uM6g(7Gm(~MOpf@Nb4V-OT{ENXm)AaclWA?fUNS}W(=CG@Q^!XQK4!ZSNi;mG27*@^!XP< zl6;;%|6)jzNS}W(BuS*tzZjAv(&t}n(C1%l(C1%l(C1%_xiBfD&%YR70U~|=#gGq? zKL27^e%3{we=+98termpV$6t%^!XR#i@;y$^Do91fk>bK0?4)pXcsz!YasIlu($sS zT(5Mc@;$-_g`0(2gRqFsIs zELOTizpnB94ms<5&jHsfeW&s(^_EBI6`s?t7ldyr=aTSk;XA?)fu*9MR5X;r`|(@k zkcLvxP%0WqMMEik8vKQLr!mUED^4}C*627Ik-d6e@;k(ND5a}|t za+zAW44n2Lhpk+uRxVR3mw^}Nvz5!B+eEf<8MKN!P-0rTr4aVmJ3%24-1b7j|#hm$AnJ_dxR&2r-Y}4XM|^k7lqFYUj{B0r_06Z za&fv`oGurq%f;z(ak^ZbE*GcE#p!Z!x?G$t7pKd`>2h(pT%0Z!r_06Za&fvsHLg&N zD^%kO)rdQ+(Suf~#uch@g=$=(8ds>s6{>NCYFwcjSE$Ans&R#CT%j6QsKynlv0U0) zF6}Ls_LfU~%cZ^L(%y1uZ@IL$T-sYM?Jbw~mP>ofrM>0S-g0SgxwN-j+FLH|EtmF| zOMALahLxgWrD#|w8di#i zm7-y#Xjmy4R*Hs|qG6?IxCLX^hmBj%Ux*9vt-J*zF5+I{KH+}h0pUU6A>mJiZ|U84 zfom`}-VbD%h$|7sDRoX?RpBKI?Bu8s7pCW#QXV!wF9|GfqZwcQ8u2TVhc7#kJ#-zu z=|uL>^^)^?$$7oxydE>|{m7@B*Mq9x0V(J8lJj~{#Wdx-9`j;8LpiU9Uxi3HuZLfS zNI9>EUxi3HuLu1^%6UELCsNMqK|hglUJv?-l=FJfPo$jJgMK3AydGRIO*yXz7evZ= zz2v-Ja<0(mtHR*ut3so%3XQ%hH2SL0=&J&J{T9D+^i`qJSA|Aj6&ih2X!KQ~(N~2= zUlkgCRcQ28q0v``Mqd>geN|}mRiV*Wg+^Z$8hur0^i`qJSA|Aj6&ih2X!KQ~(N~2= zUlkgCRcQ28q0v``Mqd>geN|}mwGlo2SH?!P+DkyjnQYX0!AA6VrWt3l5$#Ci%Kk>Q zBatin8(|Gz0CHu2qt**HYQ111ECchovcFO51sh=pSQ=OMH^L4Oxw5|zZB69L{zkMl zkt_Qf(bhz+>~GY1!A7kYY}9(eMy(fY)Ox{2tru*BC1IId+24q^Beh)F-w1m`L6n7=$LrNIMT?zRR z8O2=*`4Ab!T?zRR8O2=*jUqCNyAm2jWE6KLG>XV5?n=eSRw_QWQt`2sijS>Sd~Bt` zDDFzd$5tvnwh|ghYL5sR#a#&vBr=M-5*kQk6n7;wkjNgU5QaHkx|^6pu?+y zjQrdL9cG%5pPSIWULYesH=$+uDur&Z##N}N`S(<*UVB~GivX_Yvw5~o$-v`U;-iPI`^S|v`a z#A%f{trDkI;C6DZq zM|R00yX28w^2jcEWS2a$OCH%JkL;31cF7~VC6DaVgJ{j!@KMGKGlXueB|V7NAr=}FfyGMK>DPK;gRoK9By1LL6L#sX zXO;fB(jOtcS#@nzU7MjH%wb)dRTsUj6Om?Jo6&;&m33`K3ldq^X0#xYb!|oq5?R+~ zNQr6IwHbWPHfm&rYEa{kk*2+^krk?u6{?XHssSbZmG-tqR;Wf+s76+(MpmdsR;Wf+ zs76+(MpmdsR;Wf+s76+(MpmdsR;Wf+s76+(MpmdsR;Wf+s76+(MpmdsR;Wf+s76+( zMpmdsR;Wf+s76+(MpmdsR;Wf+s76+3tE9SBQr#-4Zk1HGN~&8W)vc21R!McMq`Fm7 z-72YWl~lJ%s#_)1t&-|iNp-8Fx>Zv3qOKdT%E&PZb}B%sh-6oqV-m0WK0Mk=v+sM= z_r2=-UiE#i`o33v->bgwRp0lj?|aqvz3Tg3^?k4UzE^$UtG7>ib^xeXshySAE~BzVB7v_p0xE)%U&X z`(E{Zull}Mec!9T?^WOTs_%Q%_r2=-UiE#i`o33v->bgwRp0lj?|aqvz3Tg3^?k4U zzE^$UtG@45-}kETd)4>7>ib^xeXshySAE~BzVB7v_p0xE)%U&X`?cyLwdy0a>La!4 zBiMz5Z#wo~2-!z!)kkX8M{3nauvUgKNv-+_)>81Lu2mnYRUfHUAE{LzsZ}4TRUfHU zAE{LzsZ}4TRUfHUAE{LzsZ}4TRUfHUAE{LzsZ}4TRUfHUAE{LzsZ}4TRUfHUAE{Lz zsZ}4TRUfGXr#BdN;E_oGZJqqLb@JcVL2q9|4*j=v&{!h)>J752XLL4!X*>=)bL#|F%y4+d610^Xb2>lmE6({@XhFZ|mg0 zt%Jn)EB&{1&{956|7{(#lt}+=9ki54|7{(#lt}+=o&2|T^553Ue_IE6l0y1#>)_KM z(tleA{UOqSTPOc*o&2|TkS%Mc|F#ZNCDMOeC;x4o{I_-T-_}9GHyHJjZM|e$FWJ^h zw)K*2y<}T2+15+8^^$G9WLq!U)=Real5M?YTQAwxOSbirZM|e$FWJ^hw)K*2y<}T2 z+15+8^^$G9WLq!U)=Real5M?YTQAwxOSbirZM|e$FWJ^hw)K*2y<}T2+15+8^^$G9 zWLq!U)=Real5M?YTQAwxOSbirZM|e$FWJ^hw)K*2y<}T2+15+8^^$G9WZNLwHb}M& zl5K-z+aTFCNVW}lSg{BCfG#RL_&^7IBT3 zJ8;(`u3N-)i@0tP*Dd0@MO?Rt>lSg{BCcD+b&I%e5!Wr^xKi0c+{-6F1A#C40f zZV}fl;<`m#w}|T&aor-WTf}vXxNZ^GE#kUGT(^qrR&m`bu3N=*tGI3z*RA5ZRb02K zty{%)tGI3z*RA5ZRb01<>sE2yDz00_b*s2;71yoex>a1aitAQ!-72nI#dWK=ZWY(9 z;<{B_w~FglaosAeTg7#&xNa5Kt>U^>T(^qrR&m`buG_?Qo49Th*KOjuOo#%S zCa&AWb(^?u6W49xx=mcSiR(6T-6pQv#C4mvZWGsS;<`;-w~6aEaor}a+r)L7xNZ~I zZQ{C3T(^nqHgVl1uG_?Qo49Th*KOjuOo#%SCa&AWb-TE37uW6Lx?Nnii|clA z-7c=%#dW*5ZWq_>;<{a2w~Om`aosMi+r@RexNaBM?c%y!T(^tsc5&SvnP7F0R|fb-TE37uW6Lx?Nnii|clA-7c=%#dW*5?hw}<;<`gzcZll_ zaor)VJH&N|xb6_w9pbt}Tz81;4sqQft~ke_UUxb76!o#GlXKCp6~;<{5@cZ%yyaos7dF^^O^ zwBeoNx>HUUxb76!o#MJvTz87= z$HDK5#^d1bWgvG!J`V1f!?^v&K^u{A`;UV*BIEWS2W>>g?LQ9Mh>Y8R95u28#_d0j z@?SJ|s{EZQf2Yddsq%NK{GBR)r^?@{@^`BIohpB)%HOH-cdGoIDu1WS->LFcdPu}Du1`i->vd@tNh(6ze|y^U8rRVJWY&@?NVfH7iwIC zG$UiXP%qPrjP1g{26#yfM#gq2Ua53*e-bUh>VQwf;W%I$k;A;^N5U$?SeOt$jI0(`1F`&WNa6FdPGLX zcEP7dWMpg?_A>BEM#gqwF9VU0v0WI`Qf`cl?Sh_=7e>Z*VSGz!FX~-J#&%&Z1D|JP zY!}A8{FRZhU5bqD!d?cp&g;r~L&(V3F2ubP85!G!xOb)*8QTRtWDX-^yD*w1GBUOc zI~VvXBV%!L8^(Kkpr0=RIkMd&tGGv2aSycgMdWZ~y9fHoXJ{4o$SUrURoo-1i0Elh zyGK@WkF4SzS;alFidb1y$sF14kyYG-c4s-XihI!RM2>9tpxuca+3rER6FIWo1GzEH zk?kH?#XYi$dt?>&$SUrURonwPkXnvx_sA;lfgG5_k?kIE{gUw{xb6WmF7ZilN@T>^ zlZvW(5_--wBi5dTB_}ds?Mcjlh>Tc!5?l}&vGycdmdJ>;CqV;|5o=GPb|NFz_NvCc zs&TJs+^ZV*s>Z#laj$CJs~Y#J#=WX>uWH<@8uzNky{d7qYTTExs&Suc+@~7%sm6V(aldNZ zuNwEOMnpV8GKdmFtQz86l%`botH%ARaldNZuNwEO#{H^sziQmC8uzQl{i<=lYTU0H z52(fis_}qoJfIp6sKx`T@qlXw=@t|rvs2UHd#)GQyplUp*8V{<*gR1eMYCNbK530t4s_~#|Jg6EEs>Xw= z@epdRvZ1R98pCOrfih>RvZ1R98pCOsk=j);aMqTz^WI3gO3h=wDg;fQEBA{vf}h9jck zh-f$>8jgsDBckDmXgDGoj);aMqTz^WI3gO3h=!x0;izahDjJT8hNGh4sAxDU8jgyF zqoU!cXgDewj*5n(qT#4$I4T;BiiV@2;izahDjJT8hNGh4sA%XG4c(%lTQqcwhHlZ& zEgHH-L$_$?77g8^p<6U`i-vB|&@CFeMMJk}=oSs#qM=(fbc=>=(amG64Bd&YIb&t625!XH9x<_31 zi0dA4-6O7h#C4CjJ}DYbiiVS-;iPCdDH=|ShLfV>p6^*iHvtWhjB8I@vi4ELMAfa^&CdXM8>x$@YR|dqJ|r zNnoJxf@FI^vc2&C+PfMsxytJNO~?;~B*ch_{KRVvl*nfDV~h|e5{MCS4Jn{ei*+Zv zlig`%XV&>)lPK0&w36DUwQ4Cfwx!|^KW!Srj|jLs8CYnC-PF4bBTXq~-I=@h4sJWs z-gcg+HGSXr&X5GuwrS#%#7&;_&D}fq@0|CX^WFKr^PMBv4oJ2GlI?(GJ0RH(NVWr# z?SN!EAlVK`wgZywfMh!$*$zmy1Cs54WIG_)4oJ2GlI?(GJ0RH(NVWr#?SN!EAlVK` zwgZywfMh!$*=8Zz)g}wsvgM3sMIXVI zE1t6GDY(rU^Q>kWvYKVcYL+3ZS%$1;8M2yX$ZD1$t67GuW*M@YWyorlA*)%2EPhS! z2{~h)g$}UI;TJ(xvkY1MzTmf9@s!mpLlzpsyK}}o3k_k*8S|`W8M2yX$ZD1$3!PbQ z_CmIM(6VRT3)!+|&$w4T<6cOE+w2+lf@`+y8TYDZ+^e2(FZksi_KbV+glyR}?!_~( zWzV=5&%l;FV@~rLIn8V2G_R4jc*8soAdjj!O2 z9OJSflPzdD#${`a%hni|tuZcJV_dezxNMDa*&5@rHO6IYjLX&-m#r}_TVq_d#<*}okT(-uzY>jc*8soAx#${`a%hni|tuZcJV_dezxNMDa*&5@rHO6Hdj&a!<jc*8soAx#${`a%hni|tuZcJV_dezxNMDa*&5@rHO6IY zjLX&-m#r}_TVq_d#<*-~3+2W!E*m`&Ipr9atuZcJV_Y_RrFQJ$7?-UvE?Z+jc*8si#)2KJi~ zY1#-hZ5Z2J{XGI5W6RawBhW6kT>U))y<*GN-y_f>wp{%^0?m0DEmwb!Ku_3m_4f!g zgxBZl?-6JS_i*+12+(KC)!!q)lr2|(j{sA)T>U))Oxbev_Xv>UUAX#t1W2*v>hBRC z#g?nTM}QGquKpeYMr^tIdjuG<hBTApI7GU?-9tKEmwb!K<3=$>hBTA zob8yNwxpJ;zegZXwp{&PkPHiwA@aZC3I)lqAQ>X}oAywK1<9}=85ShNf@D~b3=5KB zK{6~zhFBA$vna!YWLS_43zA_$GAu}j1<9}=85ShNf@D~b3=5KBK{6~zh6Ty6AQ=`U z!-8a3kPHiwVL>u1NQMQ;upk*0B*TJaSda`0l3_tIEJ%h0$*>?979_)hWLSXSk{8Ob zAQ=`U!=hwZlnjwc7hD%5!=hw}Ydg%lg^?H zi;`hcGAv4lMai%z85SkOqGVW<42zOsQ8Fw_hDFJ+C>a(d!=hwZlnjfKVNo(HN`^(r zuqYW8CBvd*SdhaE!WzNp*Q?ITE?}GVZ8crw3oxTjA6WbA6l-p z8AA`q>u{~j7bJT82mO{uC*D%TP3f?wKijThvYWb+Kge0 znl0DbjG+(ZHM!Pi41SEy$+b3P=t_RD3tO&+E5mQIMtxH4>qS779M z8MecgtKrJ99d2_qTp9A=lW;X$8S-Jv)o^9Vhb>pbl_4LtTn$%-m9gb&xH7DaEmy;p zVP$N&8m^2Pn1yIr)1-`koGojblofeiMnBGN)-)+A^1KYIoUCb5hE?)OxEihut7Oa7aAjB}x49aw411&m zxEihuG>HpW!Mw#@HFb;pkZPt1i2Ri(gwI0TS4qMiG z7za9RS?ggO=&awMyccUdj6+u3&sq=T@MHXzwI0SH8MdtTFb)sKmbD(n;k(#Q z=v&r$7>AVDvettuop+`4u5{j&&b!iiR~`)Wve0=K5-Xsk2Xm$Ku5{j&&b!iiS32)X z=UwT%E1h?x^R9H>mCn1;c~?5`O6Ohayepk|rSqAWkQcct^L zbl#QDyV7}AI`2y7UFp0lop+`4u5{j&&b!iiS32)X=UwT%E1h?x^R9H>mCn1;c~?5` zO6Ohayepk|rSqAWkQcct^Lbl#QDyV7}AI`2y7UFp0lop+`4 zu5{j&&b!iiPiT5V(-WGW(Da0+Cp0m?4m3TX=?P6wXnI1^6PljT^n|7-G(Dl|2~AIE zdP36^nx4?~gr+AnJ)!9dO;2cgLemqPp3wA!rYAH#q3H=tPiT5V(-WGW(Da0+Cp0~w z=?P6wXnI1^6PljT^n|7-G(Dl|2~AIEdP36^nx4?~gr+AnJ)!9dO;2cgLemqPp3wA! zrYAH#q3H=tPiT5V(-WGW(Da0+Cp0~w=?P6wXnI1^6PljTtjL2^IrBFxA|T@p|{Nmy=_kDZF53zn-hB5oPa*?Ir&~ap|{Nm=mz)jy?O%r z@R+HJ)2cYFiqon%t%}pCIIW7)syMBR)2cYFiqon%t%}pCIIW7)syMBR)2cYFiqon% zt%}pCIIW7)syMBR)2cYFiqon%t%}pCIIW7)syMBR)2cYFiqon%t%}pCIIW7)nmDbA z)0#M~iPM@mt%=i`IIW4(nmDbA)0#M~iPM@mt%=i`IIW4(nmDbA)0#M~iPM@mt%=i` zIIW4(nmDbA)0#M~iPM@mt%=i`IIW4(nmDbA)0#M~iPM@mt%=i`IQ8YReR*tO9^044 z_T{mCd2GZy!DIXK*uFfrFOTiZWBc;hzC5-skL}B2`|{YnJhm^7?aO2P^4PvSwl9zE z%VYcU*uFfrFOTiZWBc;hzC5-skL}B2`|{YnJhm^7?aO2P^4PvSwl9zE%VYcU*uFfr zFOTiZWBc;hzC5-skL}B2`|{YnJhm^7?aO2P^4PvSwl9zE%VYcU*uFfrFOTiZWBc;h zzC5-skL}B2`|{YnJhm^7?aO2P^4PvSwl9zE%VYcU*uFfrFOTiZWBc;hzC3mvdb`@x zp|NZ^KUD{&kD+B1o;uKc1}#@~)`25iuIQ`-O>T2VXC0c{gO)2g>(J*7XgNPshbCW# zmh)3}`0%^Ya(=1~1bG(cr|Q6w_hLrAI&kEE&QH}fKULTKR2|6jTh33_q5u4rD?01I zj>mIFXC2tF<%-Tauw%;=opoTxmMc2znxCp`eyXndsXDBKPssVHI{Z9a&QH}LRkoa; zszaW<7c=tJVJW;j=cnqh5w@J4szbK?wyKsH`RcHj)u<0UKNLrG+Th=Id<5I9bH2T? zJq6pp*VsM^}@#XEVF#-6^(7wG@RPo*q&p~nYJ8txkFP=!{eSgt*x;gGN(>& zZ){J&c6Vd@6tix6Z)1C^nK%9M#`ZL`e)_(~_H;9EhSk`fVcKUjuYampI^zqC{im7v zGqR2CnbRJg@nU29bhC8!9gXc-rgQdFjqTZ?+vc=1w&$1?XY9H<(YrMn?dncj7j-PM zmM>klbTOJ`*2b+?dh7Z`EFAB&+A^ENscqJpZP7^QwrGdd7fp9tH$+mAOcn{|C}Bpw{yIH1M)KqQ%pCgRqz z)@7|c`Km;$vw7R#uFadSviQBl16J`dm%Z}mA=g;C;xcPPB$bXN;}_%Eqp5Byft#ih znPf+VCoJaqIy0KG!d5yN?u_(=lbfx?rk~1gYx99#Er(Z$<=|ygVQ`;}@{+xgP2rA+ zwJF>ajcv6$BdKUt9D<3)1F2+sdLST5odVwwPNu?ri#LWTyT-A}SKrmTC=j#N6Txk) z1vly%3wX(Zn`gCSzG}RjmZw+pWD|bcX;TQ!UO{We&I~GoMK^Up%wn(bgx(Q0t z5euhM(GDEnn@sd3l4+<)s>Q;+)6tF$j>og#5=})n#v)CLW_o)g$qopx#p;UQ5|NZ+ zku)@7QzF@u3V?`)lU8>)*^`KGwW!~bSfq=RX|+~EaJX@b+MJH|;3|B~R4fwNjGYZs zV~NCOt0%k}@{QaQ?Sve35`gALI2~weUpUpoP{JX|EjR)4N<*k!-4t(U0vCxV($=O# zESBiQ(*TW3lCp)2BJs{Z5UEH{ba664bE0CT!_inuDvM_gxJw1>N(aN%rbr}4Frn3b z;4|Ib0#QdHB{7#yCh%PHkGfAjIGC?-LXF9ww8jGd_sZfOznN&QIO0{;U)4i*f zEa~g(gEjQZE3|ebdY1gO{Y~XfEeVX|qfIkjawPudqMvq~MaRY!S{;fC8OpY7Qb@;<{k^Yrf^mm zl*Z9vNHPM6hq1j`SKFj-4(IoOLbvrb68fLcI8=hK)s~<1v?)AefIT&}`IO{+6TYEl zSla5rx5&7MzsMP}?ZSD1#zdtN2X!R_&Z%wGpr)=jHGG3)!n^iC|2N{ZsdtB8m*@U$ zZfH-3YO|$#2Ha53Zv<}5=U^uF;3)&^3Q%4o3%C|i4p5_I5k*>u1>T7s<&XjA0q=a? z7%1M5ObSN^cGZh5>JsfOs-uE4IQ=9phh3#&9 z$NSPEDIsc;Wj=;|JR-2Ha;q>Y)}vtf{Nr`s~rOQC>~|9nt-}^f#@EK6f>)c<>&yg+PbM z2e9058DnyAILdy)ULTMnk zAFkgmJgC*Y&!O7E-hf*B%=douHSZlues1qK7yX~P z;TzV8^H#)O>~OqNz>!+e3(Sc=y;uyN^nP7H=6bx>v9|83_2Pebo-tE2!eLNV?azX( z!`sjsFlsRcN1cLkm1$GZ*zv=b6`=GtC>!S>}!AZ1W~_ zjyczyXU<1;-#0`4Z$U5gR?NmE;J9ZH;BJLB-KBKUT^;1>^J{lUNk>2|A;m3 zyRjbWLGuuzuJ@P+%oE6*mNma^?ln)E$FXwZ(a@RZ^B9%A1DM}w{unb3cVqPIE9M(! z2Xdi&$$Tet7FIS4gx(lBJM^Z|IiYhy=Y`G>%@4gfWQE=mS`d2c)OGJ~YnzdYN0%;L zy|nSUW_nM!13xS0;MaFF(TU+7{Nj#u&RCu3O2i|ZXM`J{?{0iXg3sye!X24(WO_XK zxH0%h1s@*{KDOy&=7&2I>2L=xJagMCo4Wh*t1q4U?o2WvU(VwR!@v}QPCLN7+2FJXvI}`5;Co?^#4K1zp3+0{y8t6+j{Qj&VA{;mh-lqmp}iU^SjT_&OdMd z4fB6E-+%KpZ+_m2y=C5lYZjE=dfURcUC@5PJs14zgT7A#!xYWit$s7o?`42Bc~WQ#i%L9 zOfh1L@luSIVyqM+r5Gp0D5*)Q9f{NyLa!Jz%ZORV%NC(ijFsIF{XxAP5Nl4c;uPym zvDy@CO|jAx>rAoA6l+Ye!W8REvAPs%OR=&P>q@bz6l+Scq7>^%v6>WXNwJa?>qxPR z6l+Maf)wjVv3k@bjz@yyGR*K@jQPEbF}p{Z`eV~iPN#2Dkn7%j#~3&vS6PK;4vj1gmm7~{hj9md!&Mussij8S2X31dVU z4*~%o@O~0L=Qotp3Z|zpVVry1%UY%bLGyL9F-7YQL=Y%SylNaW1R;vc@kf{Ib3; ztNXIH?}h{4S6yFL^<_=poALP(%*k%X^;mzEm3&#pmsNaOeU%k_Gay#)W$j*8?q%Io zR_$fYURLa7z247&SgV(ndReEJReD*Ymlb+hpO@8nS(}%Yd0Cg2Re4#Hmlb(gkC)YW zS&NsIcv**+Rd`v0mlb$ff0xyFS$mh2cUgCrRd-o)mlbzeZgZ*3M<+ zT-MEH)m+xhWxdrp?z0G%Qvj;Zz;X&$wN`}n6o70VsOEv{GeGefSkG=)59+G|DQ1^p z)FnbJh$1o>ifvY4y%!bHZ zh|Cw`;*(hrnJI>OVwfccRejM@GYWw*2#i2r`~jm67<<6T1I8UN>VPo^j5uJt0iz8V zYoOYH*k+UgV+VlpEp^I z&{Oz34;sQYE3>mMJ8Q7d1y^}+H3Y7Pz*QccAS*bC`P-Pijk(*Hxs7?-n6-^L+nBM9 z`P!JR?H$1RacJ;M(BPM#!7o93UxN0&1X(-_Sv(6_Jgb_#vw|_}7qfaXYZtR}G3yqyYB6gTvtlvp6|-6~YZbFnG3ykwN-=8`vqCZJ6SF!o zYZJ3FG3yeuDluykvm!C;5wjXGYZ0>&G3yYs3NdRCvjQ>e53~C4`^>Z-|Io|?%?6zT zyPbPr9Y$1E!Cr^J?JjV;3*7Dkx4XdYF4*dN*y(E6DXJ46I3HeRH6-vnB=9^W@I18O zd2s(cIKLg7?*iwygY#V`hU@p>+6fS|oh9*i`oLn??_x+|9qf0p`2_aeifv{qW3Do0 zDr259W+`KiGG!>kJ->zP-vhcAbRXz`&~DHk&;y_cK@Wi*20a4$9-d(U#GGMI;O{{Y zGlUJ{)5i72aL*E`jQcwv#N8VgpB@MitdQ6`NNgP>w$Aw2cVbv_D|9|$&iL`ao7aKn zVS6EHG4NUgY}Z07-UGS@bOY!n(5LbJZ-H(DeFpSd&~Jl22f7RA`~~Q1pu0g|2Ymzd zP0+V+?meJ;LHB{~2ki#!0X+bE5cCk}VbCL>EUvc~=RJY#LC_Fr9M4z*)$!elA>XrL zANyb*`(PjYU?2NnANyb*PoXbE?K5omf^G+W5%eX{mqC97x&w44=udFmS3o;KUj^l` z?-@|!6(2nJFhAT5KirPH?v@|E5T9=YvC8*ye69ekIWP;zt^l$tfb0sqrM(yaxgGww z9VoAWe{KiTE8w5o@s^f`k8X#hw!u=!5Fdz6tskp6MRYy`cL*_k(tW zzK#3t!RG^@2SE>k9tJ%E`YyhE6!aMAanSehYy%+n2YYeN9Par9jvE9$h41sAXRvPw zfA0go-v>PlUY`T~05pbkOQ2@IF@fzWs0KPZeaPe+`N{Z3jvBsrH$Uyb_CtPW-HLv6 zKi)NNh2PzdHzx}gyB(JL2e8ncu+ZmVq0hlWpM!;RpxvN7pa(z?f*t}r40;5V#r5{$yeF_d2pR(I!*hNgG=^s? zfe!wDLA@C~WAOXsR`i?uVL|(0LHirOU$&p5?@_3EhmlKWs%4(q*&ybqWrkYjr)73p z=B8z4TIvGdtC+8&`EC_>@ZkN5d1%+-Jm#Qf23qEyU61pA1;os=%sb1hv&=cmjI+!) z%S;^1!@(>Z%)z1eEj$A=%rd{M-nZ~KGs`lsY#+|qiv7$e%Y3rTCd)h<%(B5evdkjO z9J0(H%lxrF>wS#5G?*=xxnh|qmU&{CC6+m2nIV?>VVND4xnY?ZmU&^B6_z<+nGu%x zV3`e;xnP+ImU&>A1(rErnE{r$F_;;Hc`=w3BY1~vhc31&8wT^e2Jdq1(8~<;G6TJA zhhDZrFBfvXEIj&$pqC4wmkaSe{~_pQJM^+0df5)WTnO)e9p?U+=^{X97|0BxZyiRz zI*fjG7>JAlkx?Kr3KT|xz$m2uG9>>3B>n;M8khtVGn zqdy!*e>jZ(a2WmJFr+gI>5M`;qma%hq%#WXj6yP_kjy9~GYZL!LNcR}%qS%B0wnPQ zBrptX9EAi%!TB&Oaul4u49;H$=l$Tk9~}0B!+vns5B`p~k>6jO(Sg@v9E6z{nQ@VM z75BqVe*}%$kMRs6#oSfQT*bUq%v!~qRm@n$d{t-RYRojuJj45O zMP?CZZJp=vE9^7MQN;YEzj^?*obk!brOaEJ1TkkRGnO)6X&KwhRqBG6r<7SrkKL8$ z!82Y7uXrWA;+61AO|##V_bZCpbEBqd>&m{o(Y@I z!KQPtX^vfR+#&~?%)useu*n>3G6$Q?!6rEtk%LXTNX9h+w|pCdC4GMD3fK+NOFERM|K$PA9m-^lEZ%-zV$jm+D~tc}ds$c&B5*T`&* z%+<(Djm*=?ERD?3$PA6l&&ceI%+1KmjDsL%Wo$l89s8%^X}$wKuwoy?3hzf>_l`fV zkH22$#28hWoE1HiS<&NrKJoZ|x=Fh@d1Gbfp*LKK-=8bd3$8>2(K3u?FGB>;MTj6; zh8}Pwdcc+F0av02T!|iVC3?V>=mA$E>IbV-@yXiJtQ>vxu5^4`!_nh&(vzQjp8OZ* zm+K^_Cts|>B&L&?PDa`sFELUl#(VeVQy#sjxJg<5qRI0AA9r?gTw!v4^hBQ@Ju!UO z(VaD!yxNh?QyyKp9lIH($t(YS=71;lVN%n6KALv?&4V60)G$ zcG|Q6u|;Xb7NrqaltwJv4#XC{AF)Nv^`q}c^wN`vD|!+!MQOyk?Le&C4#XBA8w{c@ zSS^mV;#et;b>dhhE?6V_Bw~)9#3~D}4c&p*v>k{)N+bR#jrgN9;*ZjZRoj7BwH=66 z+ksf5^ihtZId&48{7rMB|E4*4V?HN2JMrRlkMDW$PGk)IQ)KtN3%N$W zhTNH7N9N3LB8TX`=04;P{kC#$GW+Jk<`HDuL?%sS-`tB_oP)?Mnnw;%8yQ0j$lE!l z44$ZOiS<{g4u?FP%uI^vLdfA5LK|dpoQajApFS)X;1$Hhny#{;FZs^bqU2;Q literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BoldItalic.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-BoldItalic.ttf new file mode 100644 index 0000000000000000000000000000000000000000..684aacf5b4f354722926994506d3737ef62f0283 GIT binary patch literal 120312 zcmeFacVHaF**`wByH})>?sU4UJLz;?<)l+Nb*r4JZCRFF!;5dm~VOE&i`io+8Y>~F=zVx1sw~cgBr$P zc>~3a1M@4YfBrvT?Zxl=P=095*5MuVUirdL8PhIDgKw|dbFNqS%{vwF} zx@+mKIAew`lzD5z@a`Qfi#gH$<#?X8Vawk2uNpRA&zSWU#y-4o)^(%=U!0!{B$Q{k{<6H+`Mkrw%F#{V~m^TFt*_@TehzmK6Jx# zZ{z*wpH#MW_<|jhRrd$fzY6ue+lIHUJ8^Hp8;qZi{+RFCv3>Ws)7XjzJbs5U`L-Rq z*6lc^yUBt2^!{0Z463@0{_^2<$5)w}|IRXWKg1pO!i_6;i1X{wOU6QpEPb_Z9+O!H zljtt~Lp|N&iG={^9z1^(&wt4Np*~XoavPPw-wT+I4Ph=M=4a)s5l@e3-@+AVviuwA z8Kz-ObAiT+vQG6ZKgDk6f78p7NiRu~B1`g7#=bU(4b4imf9~Eneay$$N0PQTv5()N zdz?SuW$Z?Ju1K0=IC+_*^srL8L;vwh0j)dOZE_BKPPvMCaRfB~#ac8$R>GfT&q>8> zrBpojN9hfA8J=zA-(tnmEo>#ue(9C5`*E)a$16DUam>cy!BK=`5XUVz+HpKf<#7a* z2)hy22XWphXR#|aKf=4@u@lM&+IfQYYF6Ux#-V3DnhIR+U_DY7TO<3&-qK{U+42e2 zqkRO=a9?wR^(vRK+2Z^pp8aa_LpH2U<%u@~@rw!CF* z4DTHF+*)Zd}`HhUDu(>M;vS!3@J z+^0IUUmN=(&4ri;nv3Ltd8nbez|l`<&DU60Y943~CLZY55?tHGT+n1>)v8$CU zSh;{Z!G6-Ad6b!GE@&Pm9+(Fo%>@oE4yR(nd?n|B=3?T3_ivO>j=fKFG4Y_eP|BHw z&I0c&c>hbRSIj-eDdryUkpIOD(mpnW#z*haJ;QpnHdahHM)RCHr*MnrmvHQq^HpP` zn1gy8OL1(&aS4up;dlr~F^)wzZcrWo-n!WBS_|m=i|j!hm-7D_`zLVfK^#{|KOK8Z zDPwzZ1Te00=AGXVvE@lwv;Vn%h?LHlC1)#AI4CwU{|uM*)`zEx3Ig| zJ?w7wC3cM6%f8I+XJ26tum{;!+1J=ZY=j+WkFdwsqwH~Zf<3{WVNbKKvuD{K*eHnN@d4Y)4zTyxY6kwoZf4(SFR{1S+w5KTd-gx<9rh$w*nhAevA?muv%j#v zaxK@fKeD~-ckDg(XLdQe7Fcr~JIp@AZeX8f*Rz}05sdKj><)G(yPZAHe!+gjcCy#l z>+B7-kNuYYn*EX~ds?vZGw# zPPE$2=kcX{h+lwKpF^uZL#r0A)0^-0idGvZwQ8Qw>RQn%N2`47?_<9m`_|aAV-Jnp zJa*OC{;~7Mc8)C@n~|_3tO@OC@Qs(>_`w@5z484wUU=g_-gxqjkvC?({>tnB{n|fX z`|E4Jf9>7Ze*4-Ruf6ixiPygP+FieB`uQDN=vAVp|JQ&1fB61?3ttdsnRo4ocW8ZJ zgw0vJZb|tF#|`huH|LBf;iV%=_p-&lfX{t+v3F$7oW;J8_!75wq=9}lELq|m$><(l zJ5o%S8QtEIO8QYrCB8Xlv3I@q@Zn+aNamcyL%8FmXPNY?j(*h*xrdf4S>hgHktIu# z@5alevJqXNV?>LC(a|}g?VP)KMAsR47#P+$)G=aTmydFC8J>CZN~wFz2=87!)KxyB zr0%gu;J8)^4SBl{2Zm`d;@!+m{TuPRF^1F|N90goxC?bPWg~pZi}7^!5*+X&(6MAB zldk6BDic@bBU*aFh!pBb_T_j6ejm@opAl{kc+nWzM+qg=arm$o?;g>V`T`?-IQ1K& z74^}Ec(w%Zn~t|k9~!xM_4rthGiC{NjquJ9*7`8#9K$Xj(Umdp5ZZdgVBoCd@X&Fs z6e%Ckm*J*i$lHn63{l(of9~Rdw;7j#k=%9pZl4c5&nO$wM@ICeBgVjvhm3g*tTfHz7b z?*Z{NFNq${;8q}OUivoRK7QMkzAZ|ps-9BDjaS-KJOJ@w-YwA)Bj!H;4EGDljx%nx zjF?cyQ#NA8DNr_&8%Z^OO25KoBbLZv;0qzfVbH^AeaBQqM=~&kpnxagS_=F?B#@go z3Vc^b=_@;~2M0*wWC}4Q}6rN%t*DcEk&!2cj3E+kP5*Y8pZ` zTp!I9bt&2J^au-Sgx!FFw+9?7HK?Mp5o@}EV!9Y{qTLelD-XX)1z>R7g^Nhph%H^Z zj4nj!a`B5wN5wBHT2VG)PZzDE3sJO6{Gy`O;ujT-m5n&kMQi9n6s;A%sA!$|MMdk& z@TZ|{q+aD*U`bEvp<%D_f^l?#Q3rO6Si3<)#X}HM3l@)K`-l|idL$!LmLiWBa_Fzw zj=xJDR*JRV^SW?Pks=dyoPR=#{U`oGmnCn6=0!zfEOA`(_}KgSZ65n`;#N`o4d{&c z#}7-A>{8y;X6o{FD|NT%Ue>SHpUB9~sLuFY#%q~FneP}rm$fY`k^QJ~j`2~`z8q`L zv*yL-tIQ|N@8rH`&9~lX>#)6VUuu8O;dlJZ+2_18kL5k%Vy*|=QTKiM-ux2=C9 z;lixKErkj1<=*#v{k}VV@A&KdSNTu)-wzxO-WF;ITf^Thy14kkl7%HNmF|gDNA{Er zmb3DG(e)L@6%SW#s#;xbuig`@i9J2m@8SA*LuJDc8*gd+Nz)zE zjLp}!tZsRz<(*c2+x2Y^#dG5a+cVoAZ-2Yvwa$5+S9DpsuIPHVyQXK?^jBuy(mSJf zuy?3;OYa4}m-pTyZ1t?yXh!+p>8y)gUS*%!~gcJ?i^zchPf_A|48 z)Bk+`&->r&PYmP?_y>;8IXdUTIVa})=bRtT`Q@B<<~= zyuWhs%4b$Szw+lp_TkHiZx}v0{NV62!!HfLG5nX+%4+-S;?+&76Knd{+_mP|+RU}R zYfr2TuX|~I-3Doce?!NHZ5wXe@Z3i0#n3#G+L%%XIvvUN(29Di#3?3$h({U!OO z)zN^)e!rRX{F17Y{K{ysD(E)(bLQBB)dl%gA)75!m0wUDv?cDB|8mmUE}wJqW@Uf0 zE!;gkt$tuyX((tP+NCjQycI=(k}6-I%$Q>=7%j@Lrkd6H1ywA$c!D@RqZe*;$Z8762OQUFL&N2XKHy{a%DX2ib!(4zXaLk1)=Ry;~T$s;N z#HJQ;o~1~#6+(_Py(rlVO?nr0%@l6tSVq1d50Hu~*lUt41>vdp@6 zhSc)mZwecVozCKhLT`Ps!%Zk%WfbyCo5OhW!@P~_PEj~H@lRp_OHk6bGe43zCoc^h~H}S@urO{~V zo!mSA3$uVXc)AS zP;ShUl$>lCv!eh4;S8?R8467XNuwd^&(up=t+9~c0}RywDr*3ha+K2QY9>{ks**{q zM3@s%D^ZJ7Qh^&l3QuZ+-h(QH)dc+pwF>TXR(pCy&K0l$YJ$2R6r-SDKCL@G#B>?D z8kV8Ws3B|x)2jxoVvy@5gWg1bIrz^snFdZCIwpDpgf?b#kYIpiqoiMOGS-F@d!;^_BoII>IgDs*T4if%;ZHje{Re<8sUrtG3&$Iyr_}j^LWE zOgw~Aa>+&8Tz<{)kJcDFLz^x>-|f-czPb2k9z$)-xf`-t!&@(T`Qpu8gWqxa7L%6`0%j*))RuuDFoo;i%ES|qQ9N;s;k;DdmtKXGvNIbnJ z6iB>j&o>wJJ;?I`1DOTJ3Y7!eZNQK&_%**2H%@D;s|^M6T@JfmE2x9GPQxs30nnl} z8z|f%GZ}#J0F+V<0K$OTfG2shpL{>@>wl~N$@dd8|F`NV-%s?~^eN{b$Pfeuh!*0VpRTe@ zk|O{lQX8R@PcLLelFT$wUIc<7+3m1IWk_|YjT3F@Jlr8zXH+VZJsJpp$pi|Ga9%@q zS~<5;6{F0L?Ea6oMFzjcRz7W@VP)ICq2`{;pV{Nm6uTD}Z~RPEm#M&NDynKLS`=A0 z&{x8rlA>Ijk(^^NGAU;OI81Q3m4se z(Ok_%&d`6F7t}AZTCDl`8HvS4Pf=CJVBPBDS1r=t>0LL(=#CHKkr7 zKcEZOcf%B5En|PwJg<2KKKu~;@ttfwUmmy5>7UUPZ>_7TC@(Gcd!6VbYgt{%!$Wi8F9R-3C8 zG%avy%DRdov=VwTrV#Hvt-c=bCY)*n%YeQqLGOgZiJ$24RK3w?OcOd_qYlKo({(lA z>Kg6GwSgiTgjA_<&~Q|wf}Y5MC!_!pA`w#QR29(%WQkR`N&>Z1G&)m3JC&3E+`8_P z&gQi}MGeE3^)|1aUi9R&a$jSq!;~L(cpFQd(r1mK!moa`D?98O(e$>iz4VmACz?g! zrYNd7m4idKZf=as+1az|wk^{lb9c=coKeuWW_n3eFvs1pn$I*kKfEZ%%CDhfWdl3A zhi>08t&ECIr($z^+%0Rs-k}eaAoBMo&10|!X7Ika6|T_sXjv#wSde4P&>@Q3swe61 z!F=>+IG5_V%zL{1PDLx1az(3nAT6P^$kjk5%u`SYd51}rL8Q=-xS{|#wA%EA0zF=} zExJB+Yv326F+x*dO|C|?MVQiY*0!iiKpqu;M8D7yP)4gwwq(-~%FO)4jc64O&?5k3 zRG{4vTBe$!7Ja&;)=H*@P76aKDw9QFv)Ua%6(Q-N&qDY|r3#=;3bX2k{ULEHkfp93 z52T;0jq!7KzZechQ!6qmv%ey552!O z@uJS`vUJUu8(Ved;Owh+FZZ@x*tp>4ogE)NKfJ9m#;+B|PP9W#V~h zxt5}ny0~I9a0AE^%o@6p*2Ia)yQF%D2mU*)&IrC1H8}iEox{Adq$!jeTKxI#YYaL1 z%&tu{!u)vmZMWapmTR`VGusxNc>2kOHzBCz8+;ByqsOX{i6tu@v%Q9p6BnS z-f6JWJ4sNGA=1V@vdx+)>4e!>SKlh-^8D00i>FO`r(Ad1I}`ttcqj4e3GW1eXq=bH zGo%kS?;@(YQNX%^H5B9vSQ9_?S4YcB!Xcl{oRbZ61llFpBLrW9D$C|%T1BQPgr=!b zK)i!&5t;}F8;hm@I9YGxCLuNJ!xfwW=^%8(Fi8v5wemJdPA%kTA*T@+sbJ^J9a4rq z+he}H>~>4Y680SGI%ITbfFE$jE{Bw{{7qSUI%PV9l~ybw=G&qVF5o{Yszm zdBn5NjpyQyff+J0^g68uSw1jFz^lj@2tkf94QcaIEhtnSJAPo$QV>=foqZa2ylg@_ zp`sFqR4rb0N>F(ers7%^U41&A9I(I>V3GbA<5$@edt={pG z{0@3mapFxrzzY#uUlrFn9a=?7(M+z1b74ReHE^Cq^QKC@Nl#2-M%`+0(Qh$@q8bg0 ztYl1K{RFF6M+n*~)q}qj+rqWpaAU|)&@itqlIxF@W_V*^>n-G*a96bWD>rRgTUunY znTlc^C63}c^m!%!m$XRw2AEqYt_4UL`W#2HmkPop`Ur?HpNuzK0FOQV*LexA^o{T0 zzJKg5d@japVVA_Uq=SetlZ^mliCUrY=5nuu@sj2};jT@+OZx1DyUDV|=O^41Wt06P zUYu%Lz(h_ef)k-aY}W4}$3V(KP+#J>YO+IskKI4^1$mC)9B0~nVa7)@xfm{+&^Pts{Al7hI$5UZW zrZU0NMGs||YLHzMN&u$d9-`*>L&$uZc16@kDhl8v^{PXsg7cURdiotN+G6>u(UoN_)VA<9zjG(o+fTmvh`f97DTCf@ z*vQZS$nXf@0SjGO2Ars2kH>R3iGkM*^M;E_oPS6VO+xlNbVB zg;X_6FbNMy%94cIPtb{+UWrPRSx@Rtx{65xK;tzZQ(B-P8Eoo{=mcgexT(M(qojjk z6!Vdz1HXMFj(96Xy70sb&{W`BdSTh;&uOe*b@9x^HI*w$_$7g2F6(tC!x^$GkH0_T zoF4ziCFKM0svJ{=&zQR}f8+HJY96audBxnNN3J;7k$5oM6fTr>1ub<0jygMkI=*Ae z*48Df@}lu@$Sd17+<6X&o6QEDZ3j$+cbv24rn;JFd07N;%{=&8J9tM%iidZ$!m*Xf z6^(-5=lX6q#hDQ!sJp_<8daKGIiR|-W1i;>KITxJfT(i zTU2fex`qDQ`){?uq0f^ln{10tWcQF(keVA(s#F80sJ;%~D2E3=sa9A+AoKd^2*FK5n#Gb4&)(3orp`TJTuNap?gnW1OV3!k?G4 zM}hn)?wBkE5>;wWDJn_8_msP_RBcO?5^4sD0(c;Dq7*c(su^4`hN{VhVa1EGm`<5% z1W~D#fGDV&wjq)}K{VHx=3Cmyp%17|khp`d_1O2yM-oF#Ge#+=nX@9`^<2abD%czGoQf#<2nyWRTs;Zs6h==g*GL*( z#$}C@1B(&(fxAvt$aqE{(PIkJkf#?IEj(yovcx%ZC1Lav=V&}r6R5_C48T3ojVXvH zi3V)Mdg2|QsxI=n33F3zP*Vgp!d&2@PX?;0u^p29DSwcPxZo>VU6IA7bZck!CAO?s zIe*h#n`$Hd+Ya3}ziZFh`Q8Oazd5h6ZE^eT3+6=*Tom2Z_L-NY?`Y!H@x*hMrVZE5 z8$5E++MbX*+Tz<_HhM$en&tbZuRY(KTPi&bTpR?fXK3z4K4lgAg36hL{yYaHbpbC( zV`I?G6{zoo2nxgmfrjK&nife*A}2b5HCYyION5i@3Msnf-~r&o?CZeMTy`O8OgQJ7vY~^e@Y97*n-K3plE5WI;1a=x6zw|I5_p8> zNL3+>MUa5>nq*}>s3mU_wE-EP(vO5*lMJ+%Y$U&h-Y^4l^0^B_YC5kr{H{xj~Xt?_v|Yip^Q zUOPQf;*I%Yh%XiL!n7=jI`tAnvqukcp@?qiBW%>+eFs7LQiN@@*=h~jUmlR_mevIj{t6s4qr@N#%0%cN^b zyWz{{$8WuJ$>P2%PHbLrWK+{62X}58{QQfnyEpfSz0HF)9p}s{E@&J)JaeegVXv4O zYhBq|XpQ#f)ULjI@TM2bi?3a|{0rxH)U7-?^U^0Pi*DV#`K$Xno-UcWz9lxh#ue(> z*ik;KzEHZea@Mj)sH56b+_^Ls>aO#W-ux_Z>UuF3RqW1`mLzBq@E@ne0wEdT&;i>f_O7jsg^hzXi3_ZqrN59g){wdWAfMrzHov-c zx4j6-%AbWmhcO^6d5VTDIM?tnbi;d)pErhgYh$m)iV({&H+yV_{kU*7*8u zW&IlgGqT|xk>3%v#vAd>px@;rOHR-sS#mA_C&{^uM1V;=1-~LXB&+TWCBUVq1X*}z zD3NRvL7A)f;`JEIr9<+^J)v+Rd&9>n!`02`cb#^3cqv2>dSg6%dFFxvz|7% z&0HVs?c{d>86Ou}_W_4=EEdm9I*}OWB#l493j_$M#v9IH$oL2RN%}s>|M7Ww zxBcXG9r8}=$?K%v__tRSSKR-Z-ZMDVQn&QLO9?=3#rT$F7;2%Us3E~vrM3d2X}lyEr*PDvID7fsGfxiUC+#W~aZ z_s%PIl{K`q)D~wHf2nHL!dX?lGh?&r!Z{|VRz59X#qX&tag_I;)7&;ZtEnmyt?_^U zOV#}yEnRbJ+h@57UB;Y`zIPg>NQeiTG|y^QVhG;A?noK4zPC!jaq!84^*T+Rgll;fZ(1apwxz_hSo^{`#_s!Ga`vzQ4f zmz4oVYmk^$jUsAvIshjCEd}uvBzw`xNA_$#nqI0ljdaJ4X*xq~nrC2PD7E&nZ^&@R zmyI{h&)V;F;~>Qh&@f~=GThJBe>E>Gge;qsQ>#^>DR&@W1M!;)+OU#}{(+uh6Blx= z0u378W~7iMkwgkXQrBCA69bjy(YB?Awo9kSdaIq@wiWwsUJ`1qi8`({XO;TO=e31f zc7Acq;(M;$J+FM$RnP98zJJ|7fzg?1vukoUCjN2nE&m)DYTk0o6EE-B`^p!VPv3V> zqRCNNQD)uXE^OYuAXa>$ZTgIsV0=+^%S9KQGZ57patw*<%R8OrzODW*JDX~T zuDtKtTdw-ybu)9^ezRWdGsPB5nY7$&!WN0>oNS2-;SqUU5$}ihjHnVVga6Wr+-=bbMM-r9aaW_iv8gL0y=^|q zp^|+f0f+lwOoI_aoG3s3p1)YrJo?rZhU&r>rKfpDVj919wLV8@3FUa*Jeqjf5!4(z zxsU%TIH$ULftU3B9>C>Vz{LtpznDE4x7%!t6^H#^TcOS4wBx=-<|2MdOs*`8yl;S! z4*sH)ijM(O;3gdt*K!dJp!hp+xYA@D_zRG0DRj;8+N$Y7H6Yoc-^b2cm`o=CFdb^k~xGy zO>#k0pSi9KFv2(0LgYv-%Cb14EEM!}&+B+QL$6A(k zRtEEpSvi_zD--t~`r!?;>egQSz;`weT)Jt{zckZrwHLPx4{Ut+@>#K^7rtom_&k=G`jJfy1vN9vw`Ao8Bf$lCy?)KQquZweg`f`rA2q$e$1JSqJU^ak zw_3~@@PLim&&k<`0xbLtN#sMaUW!Dq>%e%fg@_}dVby;2O?(9G7wkG&gifiTfK>u3 z^a+g8z(puB*jgn`@3}unym?yO@N=Bcm`Sn{Ky>v$H(3RgP%;#1|?roz_&*>Zb%I~k)_lu`)I;WwqZbtEzfYBb# z&sp?^*RS6ArCluo)5HcR0}pPk9gbO~JeQ-nBHG_tnt3i1q`zPA%|kP?jknnHjo#@y=gLn2 zAc$=NpXMP(;^j)*=q>aVbL;;~*ExERJ8Z}*^^Y#oWm~c&x63hl37{=x zn7k7>r(tX3dXcEY(%DlM%r-EHriXOfiK!rX1b6@VBQ+N!KY14;B$Q88r20t_93lba z<7*^i-pM~c%;lf{6z`^T;3wK+_+0{@bXL&s^XA#1%NxdJPQFa2hsLzc{)=TP9>Ek)fj5A2%VA*LHI(mN8&at zx(|}4+v6mGDT5~kp<$%W2ar8aS#uE%Dxvwr9bvk0xiQ12%gWE;|H!b|T;}gQ{N}lG zmM&p3$2>t#d1m4#V4S<&didLBm({4{5vjvfm!DtflABCsz4YNy`5{-U_vCZ=_)o4c zY;vCL*Bq1dX4A>%QZN-f+R5&ZXJOHV&6s6?xtxZnO)Gp3pbQn3f{;?|*)icEAvT30 zKtCz&>>q!OdBJRpR+0rVLD0E`o+8W&Kn4^;VK5bNfTd6i1jQsVKgCPPq@`R$OH448 z6u9`sW=F13FU2H{yz{L`4tYwAqd$}s3DCJpb4b6Tob=C>-c9z5=2$Ic^9$P#|MK>E;@6JDzr1Z;;vZEjt{B{M{9t$G z@IdJwntpA@uit-W_0e6ei|>B(n$<^lwk$sSTZ|d}RJjHK zFv6?*xwzG2f<$tgT)8>8ldXY^JZ;Y)s)rOBa6gPdi>%lrBn074P`{z{;VE!l3^ZK> za8h+}WWh+3f;6F!STaTGD4GtU2Axwn9Wk+_VHZeQbbtuIzK!_SiT%fS)zAFgFFv=l zfSMbR9aw&}Br&i&43=1Q-Pz89UptGjAmqgTvv;!O?Bu?O1UZSky% z@=!pv-O|_|0i~~rJUCezamr-mZ$d>X3w%j&;tI7a?#hHa6KaSoZ2}=)2ZITkAi>ZbuT8cNH!9?{ z>QnjHdP%)cNX~I@0?AbPTcSLTfLL;LQxDu&XW~7`*XW6;)3{(OPdB7>IWMO zD*9HhTisVN^XhN!YumSFxqrFAZ_X(UMH+gdJ1>s*4XqpMi*{f9#O`TZR}K^?cUvvq zBCM3`D~q;7gT*y{oBK9BbKQJ*bx-6%W3IIzP++}yXLY>H7pj`QW8R7fFB@={wS>Tp zFm{COmHU9(Iz&||FH=YPPn3h3<^?u@g}61eLZKv|s@vcuo&(oaAqCBW^n21AkdnqY zvUZ8l3z-K?4XvOwok`?{$idH~(o{ha4})-23yNxj2MQ&R405FFD)+e)=iZV?+??3$ z(j5EoM-|F{|Cq*cKJ3{xjKf3Y;Ed$APRl&V%ScHs8)-JA1LKux3`t3FdWht~2@in< zDfvyRllo9-^yp!#iInh$$s)rt0G&}2Q`_Q;l5kM}VVjB+%l$p)EpE)* z%;ilv8}E7blJg!v(5^j)E1M4H zABl+sgT1f|jsOO^klgxQbB+-JO^x277y1hZqB<#I2BgM5{z!uAaf;?*PS;W&MIgj& zxF?ng2t`FTh$6Jemm+DDS7u4+bEJ_6_WlqK+5gDQ)tgJL{PxV4_vO*L_cX_Ru9N#K zR@K$5iO7fSp%0f*|1SpmeSrR#up8r9CB?98@^i2fF+GEhpj}VqK2qg{7Dku?FG^}0 zr#zOiV<8?34~mM9wu!Zqk7+zUx)0hH(k^A^?VB}_Z$1~k|ImRpmXVRWQ zTed(xk2=kyhEAAg$ApJO0h6>;-}qw{fvJ&XxfGrkqYQ`vnYp0)36>z(=P9OH64^5- zrsA*wV0AHHhAKj!(vvv%@wXCB|K8=$zm{p_F=v3A5>~$X9an+=BTa@TaoAk!OpIb$ z?l$EnvTZj0TyS*L$@lZkQYTgyjQ%Rm3VhiLSTq3^R<=K`x8@=R4y#ZQ6(jrJngx-E zo}!!NBo$IOg(wrAsp;E7D^sx~cf6kZj8Mc*H`Rn>vj0_UE`{?XDb;aKzy+Q}iwttHd+#?cw0pA>KhQO;bOt~8AkPjRgKfm_r=Qa#*94$Xv?fB` zZ2|r%$SMo~+W?UKQr83|@0rzm>Y9L4%Mqrf>xy!;*her%SfEM&gkT&3`8TeOG-vRI zYr~xe&DY9`KkSN@(Y*f}FzY%MW?2TkRwIjf7ck2t@=6)>1ha9GoP^owC5Tmu`AuRB z$z2s@GUgTQ)RV5!!YsMSz5m($d7dnO(VK}MEO!O8xm8H z-fp@*qtNv%KkulVfy_W(ek{)wb0=OmJEc1beqTuZLb_^f560Ii)>=UfCpiISD4B=_ z;8jFqIW(2=JmOvG0Sk;jq7ra5qAwbty>yjjwA6C=_S& zBh6_{gv2NWR>{<5A!uK{hxSn)&uF+j***kEp*mi!g#CuKSGjz~=QNMGTz@rMDVQO# z@YtW_pD1S7;6?21cut)$ay#Z< zzj0busrTAV`=iUQUcUUHTQ6Q7v${_HtYOU+vw5A|cga^)ZCQ)KqD#$Ve^xRyFCn^C z%6Gz^a{)R0u2Od??l>vGB5BW20!_JBM)tprOBymeST^DuDN~hOY1K1yksuaWiR@_t z98Jw9uOw^@Rbo{o-y~1@CYW_Hmd&c~!#ty6D#r5h6|qWoa>YNOn-vq@i1v{*F4HP) zj1Vh+iOFEM4jLbs3fN&3M*Or1HHb25rmhB%5$8$0liCTtuN& zj-*o)cu6u|-Tc^}=gv63HhxZTaj;|Aj*Gem_Lu7Q;S&C0$>2bz)8k(p>DV&6v`6#O z=sD~5RII#Vc+q`F4lb{0tMdoF@|=d%hx+~=^31#Z-uYY3LGQ7M2sE`1G*!l)i5n?e zjh!zLHArSyiBzdv!btE~1W6?1&QORMwq*)iX|}Ooh%i^UyHe1v_!QOP1;YxDx~Xfx zE&|sguq)652!5&8(OXj?t(4tB`K9*ME(jA+N=4{e?uo4!+SIn>y4A5cH#~RV`p+~B zWH^lG{7`*aiRguR6LS5|T#2IeSrf?)94ZC;kF98$q9UPwbmALfVql36AdmhrU_NJ9cd80l z8iK(5#oalG%|QQG;J zClaN_gZ-V(LjU4Yf%c`|Bik+k)~{alWy1REh?MtX^&|Dem-T&+#(IfW0q2h>Iml_L zXHUm-N=r)WOY1{{JO}LwAp9zX_t7ZmQ^Cp>O40xTfO^%m;vc9;!CaudY6gJmV1Y zU;o!IPtaWh21gJg*VT4XS*Y^ zwR_jnc1!kO%ubKfY%uiI_E$Sww%<8C_l|4#EUb*qTpB9r-Oyq#uBCjTpDEh~{y<0^APHB~u2UB* zy%R$9#JW)C;SUC8ovkKO1bJPmrmTr~QL+T77n8T8f}gN{$~uG#=qK0^RaK~JQqv(A zs2oY?ZnW|ryC8`b^vINpVKG^(8mtMkL_9sF<0Hc{B1L_RuU%bZx!91cmF!gmja?%EHj~Gm zO57^{Q_00%MzgTac~0Ef(!6ZR{JGto&9ho&Vf(9!qEJ4(_hQ!+7huxS$Tivk-t2*F zlRX(24(t(32nNKkg$j}f$o+@O&}zrAUa!YfV)k}*UfR%7_o*#GxzWmswtDIo&(;_P zN+xyd?2TdbJL*qpLKnpjDScD-2)Z!r2k<0p?lskDsX3yy)F7#Cu~7;sqaMIGJ0m8H66#a+W~ z1w(5amUo1tSEDmq>l@p`CEYXT)%9Jyp}DAMRpWwlrx)t9Io{l+9#?+2|GfTLpV`^v zcFl46wfWYv#QUXP3(98ADQX`qpFNmx8{J6Pu?H*N&8_*>U6^Jp5(RSo0dlT@{WYG0 zI|Zx&`|p@YA543py-;k0_Y0~Zs2Z{&2&#bAjTPqPY)N_c&st8bx1BXYf+$rkE&WA9 zcsXHSHY8~(qF$1EG5NkQbLk4W!kr-1qaPHAEl-w(uN+1#=r~ycyp~WM>IGH6eVl~` zPINp`FVj-kwG}%@s7rU{=Ewdqd)C*MHLdIj%F^tA&c?dfSa@Dvhoc<|*rDN-B?G%> zS&D3Tv~rnD%Pqf%hlrE*t*Y zBwL&iPn)_xGB)xmpy(ut3y?4n$aq_1j>aLHLG8qTiSvm_@6Ld zTHpUNVG*sm!IcI6Xsj!Szk&D&s1jI13KC==rL|>?CH~+*=vbQTq-1R%Sz7d-c);Xp zD%uesk_}S;k;Y8fmiYhFIx=bUm1>*g1rei9X0uWi;ti>;2xgxOISa>iGJl2AqE83d zrTW-{y#qy!`A)6N@2~LYYA)r)QvmQ6oqLwVGBOWY4JKb*u@X8Rn$-1HAgc#7>EW3| z)_NGyUEGMeWnxFew5$yv(sfF{3yDe)D4|j^=_N&&A6Ik&ZDR9-Q(FZo!Gi%*qJ2p; z*_v_cjH*R(`x7R-P;3r8PFDD|87~m9NiQ_T{NZ;bUk-)mR3v_9W1gcRhv(#m3x1h+ z$P%_$^0E>?aR;)#o0XUEYy8{enwL&~)o9_LXPTs0P0YAsC}P zuM`_XK~B1}MWRO)*$Sq_aEp^T~4JPpMmk)8G-}dcQ0PGHDkutHtaqi$+Q1v z&Cku$@Z$3DjP`n4{IB5hMdd}k^jndGMO<-IM9$f8@ce`4-~Kskxnp$q1Aq9!(kip2 zxwg1(TleVe(si~_PIGPPz|Nl0cW7=gck)}9y8!#6kf#9_@Z?(rl#<6;#7ruWvpcJoDN%qB8N*4?cSLdsrUc>jwMl( zrej*=;tTr{dLRVsartGy)r7uZ6-S_tGem*{<^XnjGjUVevdagdrS(||8ev(1p2ln(_aM$7k=RMoF?dXO>Z{IgW=gZ%^ ze;9a=F&h%c6^=0%uqf|~+Y8~0LvB*EFiKjQ%SoI-_#nults>PXm%O)HlVgJ zBc)i!nn!P55kZI2O@z^{KGBSMWr>#Kg4tiube!|C1*Hxz+VaF zs`u%M?unfxF@8-6IVU{+MXFB@yW7tz@M#M>Tee>|?wPA9ORQ18P(OTm-v`08V-CLV z#Bt&4F2s@$Xx%<t^7d&y?XwS!dy6T2++PZS{ss3=90p7xS z+959ZwDcDx1BUJkB4%f2c8i%PN@(bm0qiqrU|o=aqjdnnQxgOXKuzF-6oXH(>d+|# z1-Yg31=EF7()HsD3-KBU_nYu`N*Ym_Fa*a0#70k4(VEsHz=P9x?a+zcLS%@(U=&!~ zc4TfzX?b<|k}D#0itG*O{4+cDUY`4&?SaP{C`1&i;7QnQKkRV)_IbNk~TWOioBjZ4r{pNU}SmUm2`9 z=3qrjWMDARFr#lqLtxsrJBF&3&1rWu8wzbUf3!VT(iXA%8)wX#-srDccjKznH`mDR zIoZ}c>-5^fh}T_M)G$!rd&RnG7Jt;e(wvK>ul8_tzQ5d;mmjQ$L+6q;&7Epy^n$VX zrC(^8StTFBzBbsuJm90f%WW3DR%rRO2D&(cwJ6XPAi;Ps1RKPH;N#F3z-pl_1>qgR z&b37UCX_Eqmsht1J4iIp|*y(QmBCm%Tew2Ad-IS13EBNgxy5^W$&UYV-4y0(^5`DY4d)=H0GWf~!#30t?>gbNoFcWdC+T`$I)?Sx0|aHC$P_DkcT3u8$I;|FdEL{RswL zIeROfRUYws3k%H1YfJl%9AU?VoUpWrNu~Ns^*EUm_B~)vaAIvWUqYCTq%{k90;(g? zMwn5WDhsHRLJR{>wOZ&0?u^%fd!>pB19vE8LxJ%?rmU!hK|x0Y!jLnaD&aOxX)jzl z%Z$?cPfasR0?%J0)4Fz@tc~#5PrLjQv_Q$^%Y9uRv~O~G_2;cZap-Kcul>iWlwpEJ)IY1}_fPKUB%)NGRBKfaM?*I%bKW;~kZGQW|ynd^U@SD?RBlcjw#+v|80%UgeH zG$&rl%F8}!&P^1L{=}WjHyZ32iEo+d`w3Wc1^Xipu%NGt=xr7l>}swV>6zASJV0N` zi2!O5I%o<3?a61<2u3K1uykgrcf6)}PEG^zh6vB3z`b~wiU>r)1IpsYAHqKRGhQ&6 zaL0iYrzE4PIJ4VT_r#lt(I2?onuA)MWN>7SW`?cLCEkqjJLN~+meKcI)h<`eC0VU` z(0#@*@4N6;6Wbflq+J3iB{-d9NGm|#!XW-C28+2Pb9}>-YR0f()UMJgfM#uQK?W6W=$!3-`iRljM7xEph>YUMo&u%bR zTBWPMj+W3yA@Zp@T@W`mH^nMlj@%qdY8H}(@~Mi$c$Xkfpd84L0zpKS^eeS# zh$crvj?${L6`g9I5wX88LLh;9k>X9OSR{P2z$jx$6YZ}^J6p@iEw>;BD3Mfk-y|&o z=|Fjvxwi>?sB-x8>ngIPEOV|-*U_hk609ih^5$SutIO-EuhSbnvPM%m=iFJL0&HgW zWM%8&{TJnwmPgE+?%g?Ub5?GaX4T@@$|VaTr8B2RGOcUcnznD>+0s1A;@}!vS#jyC zjcx6Fc5D+cy8)T}bF>CbPV5l!SxyK+b8c{ zMFUv&&>FMf-2a(bqrX#LJZ&c)8t48opVF@Uo>gE6_novxD&TY4X??uVJjhQ_USq)r z09gpZeXte?D#~b7yG{#J@P8$E30%6&N-l|b(NyJ80hMI>z>ZkotsvVR^QAfC=T0cL zj=d>l^@AreK1M*_Ir;U#(Lqgt$7vlbZYr`V z^bwQ0H(%qDj_KRaxt@3dW=**b`H;;#61Prks*TY%=jdBg7IRjnBBggjY$!q8lvWD> zI$CW1s8y=5u^}dwlN%LZFrlr7lFN2d>EjebO_^48r`HFUfH0zf{V6S_YeUN*>yPxc zwohJLxF|@Xs)$G@GPb6ltp#u^=y4E)VFczGrvN&n$W$$n;YBnE4WHuWkD_X4^;WqPT<@!n+OKO*Pm+1=lHw@AdN9d)l^^uIsHMyYz%aNS<^SN=z z9{Tgj`w#XOb+2k@H5tv$BDXQvIn?skRfPLDu@{xNvIl~>p4}YJtf?+7&Ub?dLI2l{2kw8sQ2B%orzbT_ZI2zH5&0% zA}9A`S9rgdFz~#b#Isqv9e;g)^d-KY%i9f!Z%F6MQLLuOF6|8ldrSFW9l?_?Up{mw z@fU79G=z>yY+Sd|vB6XJ2UPvU5Jnguv9;7%1Yj+~0uV;NiH{(tXnZO4m$YEWB0@%J zJ!Vz&A>HTXPZR$<`7_kSyZvKV%11Phu$gQLXvsLeyD}On@q174B-YP_Cvnk0YaZB1 zSlzK18W03~dVwREkiZ&jkCR^MNNL*f_K&Ukv7W&sXF6r6VroZN(n!a*Tuv@n9N#<^ zUTRPnXpnO6KzQ;ZgCi$57;PynZi_gI+U6{n(^j-_m9M06>s{-sme1>Qc4m1T_CU0= zZtl{e_`HSl;zcX*xOV+bLu+p>AAPX0Z)HU!6zyFett?XBFd31HY7bSr3!)|A(pY?c z?UK)zc?TQ%uUy+`@kQNB&1RR!HMb*F8wnOw#0MLfU0>{9+R}4ysG+-I^v0sbin2Us zXGw8Wv^3A%hPjxj+#$WJc}V1DY@f6rD$!yNKnw_z9SW*rVkHPk5*Mz;g8)4sc7}rV z&nGa13uRU0nSgN#F(3+|3YAH&a7b!jsRf^!N!NUZy(orVFGF^FsLEXsE3)(R?4eiz zz9Nb{_=;#OWY_rf)o+R7Dr~oh@$}Sd5aZmjzi4e(+a1A<#l!r=xPAH3{=SZQO*O6L z&x0LAUs@2EapX~*ZiNpHYL!UVMLLl9!XIr>Rta!Hs}X(*ppaf&BAfcGmKN)5@ljU* z0&FH%{W>g#Y5p&ov#HI|%8mbv=90am>HWWGF4;Shg576^9X^LEX^~(fqW7mkF%3C1 zhR@;l|J&{0lei=tQ|-}&&?j+|>c%O1n4O+2u5Jn*QujGTzMt4~K}m{Cd_FgdAfOSS z_A}&a=QTXAd+pu3TYE12^6KqJ>)N%p9J8miJ=VOU-5+RK5UXk{^PilDZISMIX8roF zf9cAhTKxXf*VnK6`aSr4<%+w1dC`J9uH4=qiS%#3@{R?Aw_mZfzf@uw`bE=cO+Rq| zn)MIt@0!)LM4w}IT8n0GZ137QJ(Od&zj}IG>N_s|&6kJD=Il6p*P=y7uh}`btZeSi zYmNe856SJ)othKS*{5+9cU4s)a#vG1t!i4(U*M+fTx6bA@Ct$b(=dZAUMzaZ1;YiJ zYbmOz?mLqK;R_kbsyRN0g>48WTwo&t%%+TdWmRESceo;~>in2SFh$7N;Iv5nOicj^ z`aVr7u=F5v1$yapU^pa_RAQu4@~g-&WwCDp6v?EQKe>knuJL&Xh+r7QNE(rKp=x{` zN;v){H@*d`bC#7?d8W_z&A)bwtj%%RJSDzDORi1pY`Sblw6`W-)*5oN5+C^MJek-8 zJ=Y`8G}?kz>}}WE9iH7*B9~gcj%<_JWXWoXMSTskB9g&Vx9p0QTiyAKB~zZ?>avks z+{+Hijq)R~jY?QXTIwgZ@^tRiC9@rH{$}TiGjep8B>ugznvgDLlg8bSkZ)*Gq6V5W|6hKqNnr!v z`4;f}JRs{#wouBCyJ~6{4)*od%&eKw)zMgAR~s$!dT52L&^u`?t@zA{p7PI-U4&g0 z=rbo7dX3;&`b_MjNz8;09^E759SlFEgL7>CK^w#p!~b8jg4j8=LVW&z(Mqx}M2P>3 zR+4=ouHHNuE-*$wZv>1fA(Vy++DPT#cYoS8rnGY0@mXp+Dcc$T9?VoFW@G9eY1KJ{ zlAq)Wq{Qs$Wvm9x`V6rbRbPKf0A? zfA8Fh65}jf{)dUD@yV#ZZzK`on##_z)YHwjhp^4~soAOQR0nHLAI-&z*1V|@Xw&t{{a8|ojH5Dc~swUg07uBvf zICJJjE9&Z2Tr_j$!4+^SsWJ2k)pu{#S$c1O@KfMTOdFJ*aia`AZ%ev*angTvJet7;Y%`^u#>>ROeTQc z`k!-Nw>C>aNPgdBIC`$GSFh^Uty{Nl-MZzU`VOrjFzs*!g-T8o zw~dvWqqu^v`0?UEUxGPO8nD@)PdZxV_+{X_y92kHTkbY@9WA>XRoZJGvOONw1xYu+ zTOdk{gLh?Bnw7HduSI)G=c6h~kr#{4X$ zs=7Kgt1ve+9#^5n_}dq84*9md&-P2uWwCKjLy~D!mY0>_P*QGIMrtzdC|PVSR&P_n zEnA5Du3$ZLCc;A;S`X}LFgA?ecLjZgPN-NVP~wHIzA}S*mDo+M!8Om@vqwfnl5O_Y22C;x2$T#Y0I(_=dZ0nb0Sj{ zJ#}RzIp>=57G~x7(i7q)=sM>3y6rWc{l?7#;B6Q;;7=T~-oWJe-PQ<{PBtJ7T}cq%p4y6CPRIrEVdllG*X*x||r&EXdz=LqGd zjg%uLl-t@$7%zOvE0#r-Gi+|KY~|)OL@S*wKU67g0EdiJpPF})KW_Qta##f z{sPjVYjJL){8<=kCk-MHUlmrRbgXOgtA=L7(2EKg8MMY)J{WMfpbJJ&RW3+MfV(bk z1<*baJTb0JWYlJJ#fn8|Rd)RO{L9NCTv>~2>#{3b({WlNV_#Xh`E7@J`#aZeE^^ye zx7L)~{_^oyX=_HwoG4#rbXs)!;@4xH|^e2 zQaT;-l)feKKf zDjN%eM%BWC#>xy^I}Eew=`hR|tl-}jCtzu;GZKf!P3UvlYVT0p_)aMUv&a$cwSFre;LoisSQfh~##Ys_7s}n8S{04L7aM+o+XYrDK<^JtGF*!-l!5yuk%w zzWVWF*YvTCHe<-X)b^(H0q~j6*lFFTiqk>9MBlXgR8!$3GgWazuNju+mdnSW>V|BV z{)`6-^N<29<;|L>q7jTz!6|L=*6gJFvXac-FFkc-e%1E#apikce$`1A#H?9fUS6`u z=c#Z$kl%dz(oG{LSLQeGs&60es0?_|J-fb<*E=AfyIF2WmrN?2)|`QG#tTVY1voZOg(}uZ~6}UvRxTp~E6R@L^7|$qUh-i&< ziS8qz>}o8?vW1)FCfrOc1%n4{!(A27Dk5EBkrh~78j&_vB(%#YcolM7Vgz8SH*&d)jWE&@8_e)|mggZ9;&HMX zHpZ)hl#Rj_jZv66@-g+Z0bp|0-xD+u=21D3>WUG^XIBod$>Rl;d6n=Ss?lyF?h)6B zbRxlCX+D=;pMR?T$lT?nr=E3kq%A(SKH;*2!0(b%(90Jc{P?_!igChwOKf~}lB*~< zaP6$h*0Y~L^{STU70YTDQ@hQ~NK1D6BmGl&Z*@~Wc&{4USBdCN5O19K z5KJk|ZtngkOof9RJ0=zDAVH7gMw__NDxE^3ntXU1iNU4Z_-FO8 zmxU9r{Nsx{o)M?7sA5cRlTTYu@q*eJIMlp-f;azt+F~nW>QZaI*F7i6orqPz`khC+ zXW-c&vmR@jvI?`!X`Q|Vvqy6U);^VyE%`YN9{#%XPRY-9W2^0a=-YF)Zdtdwsj;EH zZmGWpCmD<9w9jpyDoMRuUC=&#`UW%FlVe6kEil~?Cz`f!3RGu?ft9=`I;z5mh;&Cr zxFJ~G;qI{T3Jmwih$!5)l8>F)aGM(|x%`+(64vnG^o)@k3zPALq;*3;Qfi<1PyQA^ zfe+Fw9gB0iM=^U;}C7*!%fDXvywR z|Ex7rfZS7Nil{ja1IK^Y8G}yzl!i{0?4R;=!xm$S`xuD(nB&EL^zox?y11Wp0gjD= zSr_2eeDKP|nA>ywd~o!V<5%g4-n_`jqN2%bbaz^UGd6Y&*XXwYnQgML{bYvKd-&Y+ zqKUOT*2xI2w2ITF4vLxvLS3{zRo7SJzp74v=If zH{KZxi?YgLJCUh%&&2ofnV|_z3=3HJ#Ma>=_}Z9g*}Em%@-*q zL*HU4!Nr)9n>o@u9rb1T9B#lnukT1e`+%m{P4Va$*oW%f);e|uMyG;Pmq-~ z_bFbkoOw?q-=mV0`tC|7SVN`@C>cv%PMAH}zP*`C@9I$>vBq z<_nY^^i*g4#8z!~#pNbo(H}VdnZWj+nrHDwHCvYLp0ah>pu+0F&AJzCt$7CRkS$G% z7BU`Bc2+8GNrfi2RsmzSsgH`pF{ag!?6|oQ;dBsG2Xh*(2!a;^ERar| z3>`my>CM!pEG{>u>p>DX&@CUHwa1la&Q=Y-s-+WlgwXU@Ql7F<-kF~RNlFdMFqc}fGPeSWJkrjnUav~T!O96W< zKUo?U%=gAE3*|lE|8m18Tw=Cr(v@eMU%A9PlNn-v^qB`=?w{>`v(PPQr*ub_O)^*D z#6c5u#}$$xgp!5k?te<@ZcUr>wBjxt?P=IAv(7R5>`>0_%1J z4mmLWG-$r{lhUJt>FbgILzQpk_e|usJsrmKt#mijA+{T#>s<$#6KnX4|7?iM;PN;H z5eDJzNYAZ_`vEY7aRl2%m78Y`sF9&t<>QBZFjP*CB7~o4jmN?c-bi6x5|@()?}Ff_ z4kx57H*MhcaM!h+^FrX&!vWidTO8|fPu!*t7n-ZQf%_NYwz%^f?LONuE{Z##JL7DZ ze3uu-1y)@VSZ>`JXZ5}Fv@p&G<*1hn8_yT3&v~bGp0vPNhhyZ`8`w8 zS-zDXHzl2YY^A%I4r*;R{@u~!_yTs(Tnz{y%6ouqt_ZULw*g0(j;6q6X6eO&7X#;i z(Hsc;;Sw{;?6SWe_(9-Ezj;F7)_!w~xvD?#fZ0qM8%bl|aQ=VJ*Ng%z-0RF}o-tl9 zFLZ~ZcCu*qUzi6ovu#mL2|`ig^fmN5`I+-h4n((^Bo(1(pn{yOa1#ra6YBIcy$uV1 zg6~c`(vH3T>2Gs-tD5246K_K{IfL$Dp)Vu4B~+ZHpY=5i7>cyer&)@EghHe-0vXMo zGD^hjdSxAo*TD^#MNPQ92ZJW&A=a3wvy`D*VYXkpygjQe?+Y()++{VJicM5+FqEGkK1EPSL`i6`ll+~9|Jzs-2;*di@+x2$McXHakptcI5u{dr-X85 zdY-6R^N=5{ay+x<`FK2!JCw&Z@vS`|?cy-zK}0juC(2wu76{fS!1_R5T?l!5o8(nG z?tqE&dcEmhD9?~ro+vPycAm&XJ_<`+T8iQzF6b=?F%i5jEqD-@?BWAcgSBSN9h6fI zrB)tn;#5z`Xi~ya&#|N-|Ii{%P6!>up>&D&O}hQYmU(~g-TzXv>YKm)#{F5kziZL* z2iA43()~A%BeiFJ_%|Uux+nNZTY?-G(MDUccIA3rjb#>V}~|%pQiYXQ(6x8rHS+i3x3Gng~4+a&``j zc1kND^=f7+Aq;jWus&6U8H+N<&7ajXyv{E>!mJad<0XyP170W?gY}>Go{hpD#u)6J zaTgZb{HzglL;e{bg_bRb%M3b;$m%`e4J>aE_zBk0R}jA;2ZYXD$^uw|K=#D;L!^SI(_2NNN1iGnT4502;mt%-RuSkAl78^+WBI4S*a&hL$$`t2c`viwh{1ezts?=cZN|yA0}Z*G+D)VVsMnn&+HOrUST(}S149iM^?SUpw7>L86LBrAu#-()#42;`_jr`~+n~UM4awBl7 zhLMmN32OzHw~U?;M=jMlc7NhOP$X26P>G1E5*a!E4@VXaF%%T1qxh)LT4OVc;q^lm zhFF^Xui3v9g>PMoZ|(fFZ$+C?E+Y!UMVsrV?xlOv|!w=G~|~-;SlsIO~QEq%b%2*U=4!^DLQYy zR#z0+{q@!izr$P9vU6eHnw3lE zXV@(}6zY)bsP*4Fk_Ev?5Mar&xP7W(~} z%Xc-I|5ng^dR>ICbYXfK$0R}^2X0op@Rim&c3C~oZRGee<|Zd%9lO$8IkApS#X7bE z>)1tF$F9JFW44v&gvORI>pJ$h(*BNhER0m46(ZNhT*q?6t@<2g9>0!Fu-37kqpZ)l zjy>LIJs6wBI{%n~Ta(0hT*PLMFJdd2zPP3^6!knj<+!NlX>s+Xt?egP#LcvNy};Al zdFke0EOa-|pNz*sPhMNTa$cHa-lSzK=K#gn)|}B2oJ+zrH!%J2N$LBH-;Sq$OLK{p z|F@IU@6?=OrJo&4hyG>$K;=A(^23Z3$M6T=MO;F2&xMSJn=QzMuTdicEfW1 z*3gTbfr%3nY?d9wI(Ne$#s#i;3MT7}B~7U2_gsnRtk_f@mD_Qo<-tN%>KE2*T65{o zhfloxtlCvyz3a@5OBXmBmjBeOJZatHSa)`1^Zfc2o)piToYdI7gp{@3 zNcM_YW`Iw06y&o9l*;{-UVkny$RYij1mlUv8>B zslmtog2rrr)%hLh1g+H7jXz?dwi)4AJKSZHs*XI0_vd^7dD@g`g>g)IY@d*4pYgL< z@*Ey7=eM)wVSTJ`{c+Yjca7&cJCw&3tTS|)GmTpvYaLhPi8qNZYlyaP5=G1xbRyQb z4JD|aw*E0Ap;c6c@#L5(qJk3(fp{1xryIHL(|m@`x4)2dw8A_vr)()sN@XX^nZLxB zUY;GlWqN|`Z+DxwXD=yBOUzv`H>b8FH6drgvG!>R93S?v_r`weh(!1nA6l`{JfR_} ztQ20S3(FQ3=F_v%1p0s9%Dl|Ds0Zdx}Hye%5;HVQF`^}c!k z-YxF*jRo5;%r9gh$#b@OJjp2;NnbvYUxa{?fj@_vdyA{<&RSdY5W(RHTvQlS=_$;5 zxcX}+Ft}t@TwH3b>!IqeZDxo`^R5LYHrw3g=N<}NyW+fqr=^r81mID|@u@gf8hcx; zv1djfH$JE5*=PLcEO|Kgta5%kYaWg(E6>@XJfU%g`X~;K>a#=j*=IaC^;`H?JYv;^ z?zdU|DfioiE|2-d`)#1rkH^X++i=6|v%Yv-xXZ~e!V+q;!xk{hy*l`A@SYon5}tgk zPVhw-H?SuHO`N{UxVQzD1xgd^%8o@@*u)#Zx(6P5GrVLuKVt2UH(^iZA1!~$m57Wv z?V=j&kK{~?iW&dA588N9&6%N#YH(pkp`)tU{9|GJ`bOT^p`e(}fxBJl$IjlhcS=Ca z`?4w!5_9L^nxhjTF~|Fud|>tQ*`YoT@d5U@9t<3IyzM*$`{4rfj)oM|pih=%bB;so zM#!ZCvp^@^C?gh>;Rq*J`Y>c5`noL~k{2X%MrPvDJh}zDBCsOF@3{bk>7Z<3C)Whu zbJ=if0dYr&*OpbA)v(LQc9fPZ{EmpQEvn8>j+g{c7d8}k?rrZ1bp zFzVw4hFN5tu|S@F*Q(0N@Es}@L^(7W%CZwl%lVT!{2F!z}hQ%QSU+iPCTawaO z`I;mS`e4|5;SQ|C>t&sA8=lv=W|hK(~+ z3Z_JC;n)zDB}6!k4#bOtL`6@6KiHX&6rc#lNQicJ|c%Fv2emt0=F6>FRPhxDU z-tn5v5&O!%F2vn!>(i5tyWFiWd4j(Ko2Fd!7UJ>lvhd>cp=o!%rBCp>**pFIH^^7) zA2~h_JBD^~vY>tZu;zNMg$`+MZ3@nEck`njm*qKlU(5kwW<GTumRItCjC@ys^S z6|3p*Ed)D}G*^!o#zNux*s#_r2qsUPExh8F9M8yVYnuKkHJba6 z6g0U;9KQdQ8c~mGp4@8;H4yAIie21=M}HU0rY5wB8T&3o@{mEV=`$9G9@eh8;yYH8ns5qM4sNcAV?2;55O|6EkQz6J9A?&bcPv@_lbn z?zJ0Fj*HC9E4EZ4NA}dq-r&!KncxRF2V^%+)cHTEkrTH}d*D50h5Ure`1n02%dUQj-(AU2dYPZ z>M8LzC+D&5st)FfF&Tj~Z&DHZ8G?l3HB=N!#67{PTOPLH(diI?@va&Kia_+H|1mct z*%D#{zgTFCPCfdUWsf8~GOj-nVc^fa{d@7L;ol83|Js(g<8EKfM%yDO6Q#kTX&c5} zGBL*28p1qLh^ZVpKbaU4ji_*(B9T$|^+cHpj!M1f_#aV!##QBFFnQulRiCa89{${r zHSr6`f@G^@T-xA&2IKLtY4JE!gQI^nv=gESTrC;H>py6`KKt^mAFRK~_MbVPMYiE% zFExC&)1^rQI!+TwNgJr|phtE#c8*mTS*nhkJgcuDO zMuqwN2HZG1zbr2Y|3VBhMit~O-v~cqN^_tLt4xQPEE4CKv0_7MFdxA@25|vFfvYWC zwlKuti2%_-Jni2_ImQh_4R|$t`m2Z%GwDrGWzxTF{!vPI&OkI`SSOI z9hJt!ak{Z?R#AxhJ-H}o#j8JiDG?3^$l$hlDCAkFEY>cl4}-PLah1V0O%txM2lvWD zuDh;3r5$^?(tI{0u&C13n0oY=iCg|_WdBnKR+Vr4%JmQK8vXIIRNMq}&YE2}@2xM| zuy^h0H=k2K?t6LXwo`ZB`ub?^E00{$x%gjBf9BZbJ8$f%Kk4vWm+ZWur*6mLH&N5V zvHx~{gnMsk-(PPA8nRY4GA>Tz`jzV~OMeOCyUa=DeGiO{6BXK5_LqT(&2DI3>50%Q zFl8aO3|z-5BB4BK7uHFWK|-b*D+F!>V8v&*$Jxb&bY1#<1t4NOZ4W&C(1i8(%r!8r zTML5~fLe&2&Yh_`D2>caVbb=wN`n9iH7zj{`=`1dk_|=4p@Rh*KA~inZdp{-XglFj z%G9Dc2Zh?ARvh+SQ$>p0sP}7Y?jBJa)&HO>5R{I(l{4 znp4j{d;YGjrVGBmr*QS6Y};d3TpU|kQ8PE+5C8JNVjWj4dAyLK$c!@nm+Ls)-LX^h z_ykNpVaC2MPm;#L_w4fRwBCz0-Wq>zo0B$L>%CW|zGql|RUhGZ%dg5E@~eXHmHetu z_J{D!xmUhmOYv>4Ez2--Oz{Q7zYY7BRlk#%$Jl3FF?GHOmE&57Z&~HU&QeZ~^XJH8 zmGk@A%8?JHRZjFQ<(#8-Tjjhmy&S{@KNdLT=!MTzff><|0BQ&Cyq%Mloa7D87)tx7rg~_Ty2K^7*ZK);hGXq$QwbEM zL>MZiN16yf48lN-F-n5b3gylLM-MoQ(>NJlX?yI3=(Mob@QAQTXJ`1Fn1g@)gX6MD z*J%j8<#wFriZm1PHcHus`u$H3lI;Z+sKVd2f)`Rs! z8taEj21AcdsvjbQBxRbERaV4*^R3_CeM@v|SQ~2Sah~m(8*_u>GBYvKb-LT*igcbH z?nd=6@`CY!z?5H7eZT6s(Dnn=H^ule;|C88QXcYzg0mHI)cbE+2=QN(6Q8YuZ_x zX0si(moCnkpBZaE<(Z4mSWnOIzd5e7RXcx*^W%u$ z9*noJ=B^ghGMeq=cr#7xi(oyHjO7buqC`_fTI<0iEFU!wsPW@TF#ieP^ z^6`K9ap`G^AH{<@-*cR9+vEHg-_Jx`aCgRB+?*R7X5AXVcw;`~g1sDL7>As!6ZW8& zRWJV0H5)W1%oJeBW2a*O=|uz;d(LcDtar|8H6*DHv1NySFL&w2(z3R?yu7-$veJ!9 zb4TWv7A{y&SUTTXHgE01jEseA=asFlPEW61U6x;2nO|I94q_Ds4x0yX+%Ofl?ZH

6 z<8sVIC(Ges$}U3k_!`>W9$GkW-`sng8LEEoyr?PWC$#NE$06H~oi|{&^TQcq&9Awu z3Dr-7rUHvTIhb*;*ljQYo004n%L5KKqOyO%RkRHUJwuSjSGXC#zv|;1D9*=-El`;& zrWPAi@lh(t##x~-lo5&zcU|}bWtdfsiTt2nG^9~w(BxiVeOh?U(LM2xU_8N<*vddYl?g|^9!77vP){V*5}|E*}_N)@G8 zBh>m4RLwY>6^L~zz zoem$k*k~G>&_E3EtmR?pDYD^L|y3r^EgL`-T4IpZ(#d(sGkFCiv?%~=e}Dqzk; z5g;`zb<|{LDnOTOY3ax567~da>d94-l$U;h7*_U5$B&~NB{>~u|M`r-i>t$nn$K+Z zwPeLR((>l!r$#$kZjQ9Yq~#wi1V*jxsVZvfub88q+Wr9Se00h<`sqKb+3qtnkd-$SF2!mTx1*y zUc`bCXgd}Kn`8eM_#I-Bq<@BTBc_*Yrq5cg%>W(jb47=8#%;++g&)GKv`GGpB>K*0 zr`e)eiD@%N><`%fDq5;;sW3Y;rp(Or%$qscyyiG^JU=~UcESg1H$#tLfQ`Kx_?_(p z^~vP=#m`)kS?c$H(<@`Xa9ql){r5@L1266iT<`EXe`OS#@eR?%MR_@y8Oez;o=K<1 z^J5WP%Jkx1OnO#8!NN_1R?Jk2cisM&WGz=tgIt=L8^Q@k@TR}Q&{3AfVrp&(e_Z&2 zSEhWx%1xQKU}{Z5xls+(Cx`VxB{6Nof(`pF)<89(S0EjAtjziVHi9vqKtjUWiF3IW zdGwxukr`7k-c$@V8c?lil9z75Vav{c1urtfF&%k06wEPwUx61uY5Lry%Nl)YY0Gn( z=bw<>+}My_JrAxqflC&wn7b?|XG!u`<_9jZ-xZ&i?v3yug28jqu^E9XCsgt399vji zZf4-zqyH6y|Ffr?IJiVPkrV8j<>qy?rW(tQ<+c8b1w{qfxNm{+^CDoZk~Nj;*V1^n zk=YWkSTd{2Y++7V;b3>pa7WmJS1m{_wRseOh}sQjEOeia7}Frd?wh3$#>A}tl#+Nd z&g#|K3PJU%jxPx_m6QZk$0~%K-7<4?IPqJBAU|G(egrokR?WKJflp58K-g$T%tuUn zaN#>4RFuOG%7jM*DKk+Nm&MSZ=r4rgSR@!Cc-4d3wC;K!^{kS4*8>Vx6mm|7xX@uH zHi6CEhfM`b=PICE6&zu3kq!P>_b-{>T@|?4JsaHA*TvTsbx$lN;+i%>ra^=1ow{N>)-%4BS zwj0iEY&`ddZCkJ3*Vwr4deA$2?0sjynTc;RV#SMA#ERVPv=pwWq(O2;6^BhYi#s@8 zO?ZS-gXGrkv|n&0jK46_^0Z%q@32+VehI!qW=rRH)a0BgU$h!I2aded$E8w1V89)Z z0s{*@>{;N+s$q~MyroWSw3=yTK^XceYqshC&YpgWlPzh6l)^<>Sv5r|DMd9|S&Isj z4@?VIk@YG6MqORT(y_mUS2!7mEl)P{cH<1=T=TaL8RztLo_+eM+qP_6-_q1jx3Fq{ zS#e=@mbJ=_riFvMHdyPU5FD#B@*_=nNa2`|Y_--(mkPQ!(_>n@1~8l}oCGBUHRwg3 z;a!ZfC>6j_Ov^EDyA3(pEt%zg99)_dyjzETk1Hc&C11)_9*?u21>AFD56;{or!!_s zMJC;CyL!A3h=~X%Hn%^eFi^zF>k@KEnqbTLm$vY&6NP!)9w(w5%}^M2Orydhu{6h> zQbvg85gwHZXHa*TM+cum*H@_Qafdt{Hpa3qWc|*txe#v_ThXB%8pTJ`(rMO=GTG$K zR*ZhN{de82udY~fdQ-uoQwCQrIlZ~y2eoBBe{pim-27x1R8nl;h|bHr^Wz>*e%f75 zL=YU9lKH_U%Di|UUP-Z^Hs$BjS_<@YQL=v?O*4-3cYbR(u7&+l)5+I%)|RyPv}|fg zuRpE1XmM`roTaCltD;jrx*#^eyolLKH+*U3&g(jBOPQ^i*;UR8FoSO1}PsY1$o#IdX_>5!cyiA{jQMGl@{dX_%d*T6fU!tXD*HcQeIGouf^6YmL=ib zVuf-Adj%Z4T;Z;Wa7N+w&<0I;8f9WD*oBLcH6Ag!%bJIw9FAE1cy_zv+;Y*P^#7-o znP`>CdE=i}X0V>L0{qj;4AztVw|aJZqJJ<=a!#6+vg6c5i6LLL_J6EIH>0rSjQ10} zi;iojeU?(eh8`!x7o-{jMB&0U_CA81xo`v+Phm!gBf@9;igk=ro(?#R&22sHN?0Z? z-b0t;3&W*b{Hxu-P;?lI!h#%}-!^MAn+r$-eT{HAPu-qa!^L+uL9Lde6U}yUaNlyBDhVzu2$u`?s&H z-o15uWNda(_O0JtlbGkPYe~+#Z2s#?|&U&UTF1 z9GtoN&xVxT+}x5}1|3B}b6;jgdQv=sIfct3j(k*^8VjSV6B`8pIPk;XV;!=I;EkCE zJj#%Ez)q6-%z zEH1$QpR}O}>|Q%<;aWdIfrcT8oklTdX^1EcS~7KHZemz>J;QFqplXydbPUH$u}ERp z6@sk*Rez9!i18Hz|XvKabB}Hr`R3%iEW!JKJ7qYp81OdtQ2+$oK3J>)*AoO z5Ql2k8jEWdmKJAarX)qV$D={y`Vy%O(px8Jrt@OSWN9}H+#Ry=aV%zs@}l98Z5nu! za>^IUvUrxxloPg0xb93YoV~~ns5~w^cW9U!Ha_?%2USpJhc2$Sf?;cXShI$r6>xq} zw)?E>ad7LLoYcmZP;T8Z3f7UOO?^A6i#PVHI_b)@{EWK1Bv6)DfCKem=BaV3y4K{M z`Gde!UwQ7*b&J1v{pnuw)L3U#f%&GV;q2?qT6VU*B-idw1_@z4+12vmX0a*PKg-bIPFA81oQ+pxSva=73dZSwliqW!;j>RaL8a z@;Ea+-iyFwA@7VO*jO@r*koO~9Nfo4W|n!JMoRD^1%+jXKu39X>MS^CK;xg#7e8ki zSR1em_VMD`>H+>B)1w~aHR7-g)&eEK{?PdMy==+_eWDckpoey1twkncx8tfNt|q0< zDP{}?RPgcu>##5nkp&Nbx)Q#6L+biG+xc{P6 zTlVF^5^Q&zv@yHBrYt5pH8OeLjuX})B1U0d*|J@0=0lRNcGhIf%ktKK>83O0F3$XE z;Ewl)Ds~LDw_pFYp7yf(TCXo=ZbkCoS8%&kY|6(kmz;ccXF+pKR`tmP>#<;;ld`1) zwy+m4{@jpxc1ZYrQ*Iujj7x>rH+N2@v2fW3Ym5{ZZj`Vi#xrQIG?W4Uhunn>y=?8H zqDL@NLWMAEaI2sQ-lAsc;EB`y(Nnhnc<0z5+tm+-dt9-Z(awV(7uuK4X)Z2q!O=MB zfPsH?UXMCQ8uv?PL>iNV>`7+O_L8hsBjlhJzn(i`-16ea5u27wb;hion#ma7xb|5; zV_btks5l<*2U|*L03W!`iX%BNVL52DhXz#)zQfuj6y6?N`-V-gp{dv#foz|Ma3Znl zgOJUsabBNt`xF2Bqrkc+{`ZL^Db9n>e)x;9dHj#(rOmN-19v-dj>bqbF4c}|l7YLj zDDt#V%y#-1UDXnetRL)v&@Ls#@Ku{Gu(n#95zL4oPpOrM@*yIvH`HN;Rt6M-FXKOq zBFb2HTc|v~7~0{%!B`i>m9CSGKv*Qpg5u0gJ2uz+iu>3fZGTGr_>kL%^~v7A(ui;@ z(cwXM?7Ze<=l%4AxO}he_qJa}XU5pV5(={MEePtXY|Xj@>+jiHz@=76N577PwRpb` zUG>$l+p(uO*x<&QwB$&*ijChNKi7*kakjSH4k#roc@<^t`;nbz%@e~s4F!{nfZEJZ zW+08|gGY=FmKh2mG;UPFtwy|eG!Y`fTGi#4z6*TwdH>tVX+B3|xXYasYs-u%Nd5M) z@MmqqImI?td~W8PxWL0j?Zv*vT*q${(mvd*{wg=#aQxQ(04y|qW1Vq#Lq_f5qC(SH zxnl9U+I5xXh5jOcW_n^gqR`_Up6rlRI2NZuw^&sMj}s_!xIY4%3V{X|1qIw;5s;bG z9&+^PU`rV7kPn>qT2gWJD)=(I#}F&g2>D}UECdUI;|llRaFr`xVXCNJKbQIItL!yD=4%kuJ; zm8X|({8HoUEB38UFJGRQw;ca&#lOF~Z}l^&C5yAO7ni2yENaYdT#{YWl&wQeZFKY4C4nRMm*H1iU|iAQ&he$C&^|9-=ALUFgUta^+XB;%Y;E1*V9^L@EJlSZqOB&`n$tzY z0`50t*u1l(+gD{SsmzaXmz}@7de_b!C0TX&S6tapbJea>wr4J_%*SO)7cApXrTi&8 zu57Tm`U^X^+xJH&CP!RVIWH?OD<(0`efh%5%>2y24NSedqAW8nGdeNV{f(MR{0^Qt z-?+n3?ihug@aGLlq0?WJra$YBRo*{Bi)Mt9Hp?=~OaC(Ftb`R-b@SWf%4cU1*d^pfLA5M6a5BdShmsU9#OBbo63 zIk}=*kP!T%I_06^@zft{^6(!{U%csywK-(mI#2JiU(>rt^`VX;wfza0hg#zfhEW-mGV z($SafC4tDa`AJFh)6D-h|JQngJpNiB$~fQo3TSQJmqnwNbzX+@nCE4n?18?PD;f+L zkWol9VPOLk*l{9b-}|=r15vJ@{S8ZL(^xd-QY?d9b5}zwZ!?SYMn>qU1UBbjMWYH? zI|ut&v5;d?P>(P#hJx8SaiWBJE_Ewx)=(RRhY1!&p_B>t@V}!7IGr3<1W%+aoK_3Y zI*iIiZUc9*3LpkW=S2O&Xo`5y&cQyt2BFt+I1|Pnh)xz@m8D0N1nJ8HxtF^v_;E*& z1joHC?^tW#1q+$#0TbHQHGOhk!C1uRT>;PXR%!5-Q>BG(N+vcKSj^b}`F#*PcxOT+CS9)-4Y^be1eS38zPJCl>UeH}OMT^`}y zpX~Cj*wq;9+ilJ#j2v4nZz#kF%*jTCEym4Fh~qs@im^o*>WBFg|HECS@L_<`%?(-` zwrg>{2W+BTS?Cy+j*4jfS}E4O8$32Sa{=DZRzTsb1$@RDkV%(LYJ$9=t#*JxKSLor z_{S~i`bmY%{{H0CE>oxxIzKqME>InLM+B$lDYTrmkdS3`@ua$p7lMvJISwcem|B86 z$3{N82mLM4YVm6WUWPea9XkH9VNyQ@8{j053mctN%Ag#aC_?NS^1?ozS!+#j@jMgW zd@*LF%e?EfaaN7GD9pXQ`-U^tU)=Pad*A(b$q9w0eL2ecn}n&XTGn=D&x)vzR%4op zIB#FsU0_apd}-i1^W?Gn(XJKK&H|R9Z(=CMC|d9z9NV#d@CgV1AnTl{qIvSgSGBDU zylP@a4X5ZZkF5&l(j$%Z1{jJFhCUK5mY6+ptss8p4PzxXyvf@dGSN8R)KeFqmf(&2 z)=%c7$G;VJ%pMUP^%Jib#sunvd&8n^{}y%>I!b|Y!nC_gDRTbNd+k}3X}ey>U2A_v zg0Cz!rNkE>?<+}3E%POqC&&9r;Ww<5)YMX6eAqxrNmhJ(mVQS*=AZI!(&npS>9*Ix z4uSTc-QVqU+orfl?xu-&4qo>Y84%s8n5=P&5RIR5=i+7+yG0G$1D$d-7(dWU~#G08&?*^`i9(vOt(1ZicH z@;R-|gJdX!IeUKdr3-)a(O<$|KlM~rz%;(&{2Th?4e-_|{pLXccbL4kR5u!>O2mZW4flIpVf6rW=#ET_7uC>#F@yD=+kL2GSR@|@%xUwPYNU(y^Z9Vqtu7)#fM zy^FO{ym96%KHFl|f0}1D8A-Di-GhBWk%Nmqn|_{CT@fxFhEHPu-9nV^#^oQ#Mnk)%-Ao1v12a-y?TyQdalq9Um7RwCiVfBz(R|d7D{Ox`wpI) zgw4VhVViK1aF5FD67~xFg##*iP&gzU7LEuWeq2w3~&u2oDMm2@eZz72YO1 zBD`IAhwx6}J;Hm1_X+P8J|KKh_>k}kef>#2KP`Ml_=507)#_EX%y-3DpyHb`@~ zL7KY_(%fy3=5B*DcN?U++aS%|25Iib+LcI}yA9IZZII?}gEV&=q`BK5&D{oR?lwqs zw?Ue_4bt3gkmhcKGG40AkEzdY3?>ibGJd7yA9IZZII?}gEV&=q`BK5&D{oR z?lwsCNFxW&k%%2mEEZM>tAveXuOPii*eq-jwh1>0cPnSN@Iv7g!YhSW39lAjBfM64 zlis~qc#H6$@R0DZ@K)h%!Xv`lg?9+=6y77eS9qWBe&GYc2Zav_pA^We*uvl0jtP<9YmEc$Z zSUPa=*oD9)W2wM;rEDEL3(woeZUgQZ+XLLKw>nk+9+lrE>{fb@(tDNCr{{h>U#MTN z5MC*~N_e&K8sW9V8};=c>bs8%pHlks!WZ@Ht19y~;p_U!8^X7QZwuemukQ;#0LFqo zF9RdS9tFDf>=DL{ZAOY$7^h!zg*9VKknSJr2iA@~1Y9y!4qQ6+Z@_w`cdCRQVV`h7 z?+yxwgu}uS;i&L{@J5yPgq~m2^DkBMuY@lPUssuL2;Wo<-_rBj!grMNp72AI;}s8h z#RFc0JmAIXn-3%pc*O%=NGCp%2fPM(z-y2Pyy5|`c)%+j@QMe#26@0M9`K3>yy5|` zK_2j8B(i++fY%@ocn$J^7o(CXAgFN6h$OB%3Jm59R1GtYG zz3er}173qX;5EntUV}W~HOK>Aj1iVe9`G9E0k1(G@EYU+uR$L0V!ZHI@_-j3Wj-S2 zI5F$Rfd}>h-Fo&2W6;-epjAK6tLHf7NgulvDH+0Sqa4qa^Kp=1EP>KKPSQROw}zaK zXUhCIP?gv?b^)+S*eq-jZd7Tl!ZxL}>v@x&H|zO?v9IFYEqdNM_7a}A33muj!g!2B zFYqg!s{bCl%Jnt2rtI~RvXTMVVl&4=Q18UKra7Z{T91)HR4+uFo z#i1XGoSWj%k3`N*ap*@P=cYJFS5n|+;Vr_0!b8Ht!dr#636BVG7v3SfQ+SW?`>OxF zdcIG1zwiO!gTjY|4=d**!bgRV34bW+JuZAgZFy4pIhVyj8nd>~2%l4a&S-Iv%uN58 zdgK?vmqh){NbQ6#v+>z}m6fflJ2j0xli<5wKqA4SIK{uu~=U2>XNs zDrZnQBpeow2uFnngg2_>C-nTHo`0#Y{7U$;@O72>hVU)n+rkg=7WVDNmI2*Dk1!Te zD;HzxX<)vvSXgE>Bc(#mRl*v~KDn^>zYO$)O1Y3!*8-P}Z3WgV<;1av@w`>}w~hTA z&pY(ITiB^D?$H;!gxyN-QTjP!3z2`XuvfqC*K?nK?N`c$%72CMO5s()tA*DHuN7XW zdVX7Yz3>L%jjHVrmFIEcQ^MzkFY4D<^{v;0uj}h?2;UOEEqqtMzAyX$m=D=?DR7Ul zOV}&y7rrWdP57?xec=bd0`VK}l}8^Hh~Ekf@>_xUtw8)%0Ex$6$#3v!0AJzk3HYr* z{8k`-D-gdG805DCgZx&2IpR4W`K>BUKg%S)6+rS6$!`VFh+Z;^(4sxSn6b4$uP{z2>0?hJB}15P zB;Yw$>1AUp@Z5-!iy*g&&B7MpM&)l6wkf4u&ztnTSD7TzknO?X6jyYLR-ox*#B-`Cgg)$@JA`-Kk(9~3?$d{{Xj5k4w> zO!$Oq^`!DVEqq4!oPK>l&u@yJ?+D)$eu%fqK=YS@al%~TfN)SaBpeow2uFnngii=R z1kS@uoeRWj6^IoBFcv!4JjjY~0P}^#!U|!Pa1}Uno^c|i^gPIc9{{(F{S3H6&%2eU zQ>E=uXolrg|JFkGqwonen^S=kdRw} zOQ6Zm$Jk`bR?ITwZ1=>DPXxT&Vn4 z2(J`gCA?aAjqqCGje7To`ugL-r*y#_`1IGhVU)n+roGC>-)kFfQX)p zv5ylH82c5HW4QAiyi_4MRv|f7AvsndIaVP#Rv|f7AvsndIaVP#Rv|f7AvsndIaVP# zRv|f7AvsndIaVP#Rv|f7AvsndIaVP#Rv|f7AvsndIaVP#Rv|f7AvsndIaVP#Rv|f7 zAvsndIaY}l?ZQ2fF=H)2uP{z2xxzB^Y$c@DAAwE6W?_r4O}I%op!|cvA>puaL^vuu zAiPQWZx-GnJSaRQJS@Cbc$@Hu@OI%H!aIfc2=5i%C%j+yfbc=#L&7KY-6!?@wD1|> z3&JUV_i2|q;sD)o4kdb~~$fyh=S@r5>+Rk5{S3 ztJLFF>hUV|c$Ip*Nx*iwFRHb&sMgA&8f|&jsD>`|Jdmq^YOK77)Xb};nO93Q zua;(BEzP`Int8P}^J?Qdz58w9^}-v3)P$?C&UzU>Vw^o|G<()S_O8V<=g=BZmFeli z3}LpBjg%bd1~r;VYfy7O7YoZEk!nzXrc?k~n<$Of=sPHl24@IlTg`DMUV2NTcJf+$` zt>;3o^^Kf17*Sg*h-Yv&7*Y$qXfxmKH@7K8VYhCZx=<{pz`L(Y1YhCXL_g;XU zT-W=-w=9$EdOvKHOyRoT4~r$AxvuvcT-W=xuJ?m)U&1rj^?q;0f7k?VRt z=t<D%v_ZwW-`wgz^ z{jd~~dR*80!4+%^*Y$pIHT#k4dcW57euL|JzvP==>w3S|^?rlvdcVPSz2D%v-fwVS z?}wF%G~~M8Z*X1jH@L3%!zxR@;=0~%a9!^Qw=;$7dOs|*eCE2|4{j%NUB4JyS`Lgr z$&10IeD(-q#=ebbuP{!(rjI>-mJSn~`&io;&sR9^pB#!7m0!5zp1H`}N$XUk6l&LE(^aSU4ga6&?`Yq;K6U zyhV6Wcu06yc&qR>;Su5O!aIa_3hxnqUp2W`&-V%M7d{|-Q23DWVdZ>8_^9wP;S;LW zlgjh7@EPHA`t=1p|4cObh46K?_YL8j>XEnf{I>8NrMxHn5GB`Yol>iHO0Cu@wOXgt zLY{mBzjB>Y3rRxcI;9pegvfPDt=1{ETBp=%ol>iHN-ZP+^KhL~3kmQLkn5CMNC2jD zol=YO&J?awYBAFJ%ymjF#xIfUlv<2mBG)Ok7{5fWQ))3@egNb;r50m^DO{)2g4a&2{QCtE#5Mu&Ifw9m|ml$3> z$0<+x*kwq`5N1O=UjkbF2$-v1^YvUTq~@>$bmOm8!bXg&CE$Nzv#>?DdaM;G8&zhj zuubXhdfuex&3ZmT&s+3-(%8j#Yqv`7RGs&zwq3$*rS~ZP9N43lU~~}A)w{jQvtKEF z%G0lu0kvXKI3yevjtEDE2ZR@@{40c43a=7gExbl}t?(w*`DWoQ!h^y?!o$K_g|`Wh z2yYkOA-q#~kMR4d|Gj#?Pk6uZ0pWwfhlCF+=Oe;Lg^vlJQ2n1&o~Km9r}g}d@Hypq zUg<9=!cyn zNgt@wtX-#ByH2xqoo4Mi&DwREwd*u%*J0M?yWAmo@PH`P(Z6bGy>o98*xl>$+ zS)0h6;yTRQMD7&VVb&&cr??LDHIX~Tb(pV-+$pZZd`;v|ah+!2I?Td+=1y^)=HEKZ zzpr4&mp0*gtlfyT3D=_s9|h7TTn{P{X%nu8RjCTyM}OTrZn&J>)Ha zrA@dV>p}iXn{Yko&-}Cr*Mt5<+Jx&te#=g=*J%^3$I6jNn{YiOGk>K`xE_-EQDY@&dl%3x zi~_Y+g2GH`(DQc8K`XJ^WqPO5dxU+$*M)Bg-x9tJY*CplDzgP^?N^Y(GFwz;3)WxH z;+bW(sLU2nlE1Rd7Sx=`GFwn{BFkKb8KeQ|7J7s+Sk0}1MnvpXN{{dy<8-9#748@I zDgAZf8^SmB)?0dhTlkJr-UF^d{htE5g&yHn)OHQH;(1`FQhJ2vjEx{=uW-MxPw78Y z{>O!{E9DL0Tf(=2>oJO-1vUwrg)PE1;U?it!kdM+2oDMm2@eZz72YO1BD`IAhwx6} zJ;Hm1_X+P8J|KKh_>k~P;nTurgf9T$pM^TZFGfh3Y{YnZ1xT7~6iqgwADK>?Y!pp4 zVl42PG}#F5Wq#6RBYK%Bq{&9~GLbZC)mK{el~(W!Q}~rueWg`jY1LO+^_5nArBz>P z)mK{el~#SFRbOe%mD#Q`+f`<}%4}De?JBcfWwxu#c9q$#GTT*VyUJ`=ne8fbGghWsjm_Y2 zVk6|hW^fC!S=b_M6K)dTB)nO8i}0ZEknphZR^e^JBf{H-cL?tk-XpwMc%Sfo;RC`4 zg%1gz6h19{M)-p8P1X4w;d{WX(EXkU#$f*4iWU*$l#(lK9Q!>|nuN{57GaxklW;&e z2ZckzVd02yRCqvmlk(pzyhV6Wcu06yc&qR>;Su5O!aIa_3hxo#E4)v5zwiO!gTjY| zPw2Z(>iKEmGr|{yZ>qiT2;UQai2U0?lb-`)FduCLO^9(y$rTO=2ZckzVd02yRCqx6 zgz!z3@Q(03;fF}yE;+MZa%MX?=UJps&TNOaK%|`6j(ML*IkO$}K9O=}yFod#9rHes za%MZ`eIn(|cFg-k%9-t$_lcA<+cEDGDQC80-X~JdY{$G$q@3A~d7nr*vmG-&k#c5- z_+*DTe}_1KhxlX%H2_DrD z1Fa^KPjC^^0qz!gR8|;ua*dcAOL)u`6w80K(gB{WaJERSENE_^sHrOF;utVBlhqS>C zX@eco20Nq;c7Q(o7PY|+X@eco20Nq;c1RoSkT%#MZLmYyV28B94rzlO(gr)E4R%Ny z?2tCtA#Jcj+F*yY!47GI9nuCnqz&$dq5;eiuF>7(^e58a z4}K*=`uptxNA&~g@3#jWRSu-TAJ!R4?^FprLi+pd0fkut{r&cU!bJM}?E!^}^!M8X z3KQw?w+HRzGyVPcfQwi%{r&cUi-@nQ%r}Je_uB(r;#cVJw+F3e3jO`|ppB0jU20>O z+SsKwcBzeBYGaq$*rhghsf}G2HB0ao+t{TxcBzeBYGaq$*oBeuGJa(nyD(CSY-5+& z*rhghsf}G~W0%_4r8ah{ja_PEm)h8+Hg>6vU20>O+SrAW!jjp>F14{sZR}DTyVS-m zwXs_=p<6PcTQZ?rGND^Cp<6PcTQZ?rGND^Cp<6PcTQZ?rGND^Cp<6PcTQZ?rGND^C zp<6PcTQZ?rGND^Cp<6PcTQZ?rGND^Cp<6PcTQZ?rGND^Cp<6PcTQZ?rGND^Cp<6Pc zTQZ?rGNDH@p+_>IM>3&DGNDH@0X9DHa1SiU^MRBJJ(3AMk_kPM2|bbtJ(3AMk_kPM z2|bbtJ(3AMSk=CacPSHkBolfh6M7^QdL$EiBolfh6M7^QdL$EiBolfh6M7^QdL$Ei zBolftQ+x+yQYQ3BCiF-q^hhT3NG9}1CiF-q^hhT3NG9}1CiF-q^hhT3NG9}1CiF-q z^hhT3NG9}Prr=j76M7^QdL$EiBolh%Bi$pJ&?A}9Bbm@6nb0Gd&?A{}4rsm-dna+i zT%jL!-E%-;;u50}Sg+>+{W>Td5)KPTgrmX(!W;G06MBA8&mZD>ufDZc-`b1bWD38v zSKp$Yy%5j*)?V}of91FKqDP4Q)?V}ok>A>j9wG8udqE#Q^ILn-u9Zfwv|;zdL;*XB?o#@6aGqB*DE>DD>=|BInXOP&?`C6D>=|BInXOP&?`C6D>=|BInXOP z&?`C6D>=|BInXOP&?`C6D>=|BInXOP&?`C6D>=|BInXOP&?`C6D>=|BInXOP&?`C6 zD><-V^xQ9c?iW4xi=O*MPwrI|V)u*m+%J0W7d`ijp8G}5{i5f7(R07(xnK0$FM945 zJ@<>AefSnuwi=s#8k>C@n|=5?(>XT#G&X7Z_2HTGb)Uv&pT=gN#%7c(`9Y+%F#P7Z3M~hx^6D18CziV*srq z(%Ly7Yv+KhodZ|}JdG4uI|pR#9FVnhK-SIyv=`cjtepdB^*%h)+Btw$Zw1oYIUsB2 zfUKPZvUU#0+BqO==K!d|FVfmMAZzDUZHcsY4#?U$AZzDw!@w!@w!@j)=A+qV0%iJ0jYSh_)l5?TBbQBHE6Kwj-kLh-f<^ z+Kz~}BcknyXgea>j)=A+qV0%iJ0jYSh_)l5?TBbQBHE6Kwj-kLh-f<^+Kz~}Bckny zXgea>j)=A+qV0%iJ0jYSh_)l5?TBbQBHE6Kwj-kLh-f<^+Kz~}BcknyXgey}j*7OU zqV1??J1W|aingPo?WkxwD%y^Uwxgo$sAxMX+QO>^bJ?h9J1W|aingPo?WkxwD%y^U zwxgo$sAxMX+K!60qoVDoXgey}j*7OUqV1??J1W|aingPo?WkxwD%y^Uwxgo$sAxMX z+K!60qoVDoXgey}j*7OUqV1??J1W|aingPo?WkxwD%y^Uwxgo$sAxMX+K!60qoVDF zpyZ{-g=ig-r#UV}D~LSJaUsei@-)YVc$di292erLxUpHhIaY?Ywv8pc#_p!O zJ3BM=PIr@ex_w&H|L;GuNZ@ZCCy^|{GiR^v+lf%B}PZTEb6yKIgG*3h=gl9a5WZP(KjC2MHg^)yAv8rpU}O;NIjwq3SD zGH-Kimt{B}@?ChFW4q_e+hreQvWB)@_Mv1AZM&YGzAesK^y;u)9oDPEdUaT@4(run zy*jK{hxO{PULDq}!+LdCuMX?gVZA!6SBLfLuwEV3tHXMASg#K2)nUCltXGHi>aboN z)~myMby%+suLE>guMX?gVZA!6SBLfLuwI?ktJ8XQTCYy))oHyttyib@>a<>+)~nNc zby}}Z>(yz!I;~fy_3E@at#4)~m~Uby=@2>(ynwx~x~1_3E--UDm71 zdUaW^F6-50y}GPdm-XthUR~C!%X)QLuP*D=WxcwrSC{qbvR+-*tIK+IS+6eZ)n&c9 ztXG%y>at$l)~nlkbz84)>(y<&x~*5Y_3E}>-PWtydUac`ZtK-;y}GSexAp3_UftHK z+j@0duWswrZN0j!SGV=*wqD)VtJ`{YTd!{G)os1Htyj18>b73p)~nlkbz84)>(yhu zdaPHE_3E)+J=Uwodi7YZ9_!U(y?U%ykM-)YUOm>U$9nZxuO92wW4(H;SC94Tv0gpa ztH*lvSg#)I)nmPStXGfq>akuu)~m;Q^;oYS>(yhudaPHE_3E)+Uyw%m;0vlh4DRD$2j7{8a% zc*-^4_cB_!;TrIJ8QBmm!0%;bLrU;_8QG8${9Z;jqy)d0(enc(_`QstA1J}^W%T?& z`K(Ludl{|LP=epfXqAQ%{9Z<@G?d`?GFqjf1izQjDh(z0y^L0AD8cV#gqKEl@Ov4p z)lh=p%V@2J68v69Yc-VM_cFpuQ-a^i2ro?uelMdn9IhF34Z-haw30&!elMeE80rsx zFC&aJCHTFJFw)o@{9Z;FX-e>W89j|qg5S#sHA)G7FC*+I$Kdxe0r;gN{9Z=S zEgXa2%g7rOf%5%ml<$)_ep@9^FMW^wQ@j)aNMF=P1z(UKC} z)GkS;1UI!yk}1JW?Y7L_mbu$9cU$Ie%iL|5yDf9KW$w1j-IlrAGIv|%Zp++lnR_gA zk7e$$%srO5$1?X=<{r!3W0`v_bB|^2vCKV|xyLg1Sms{K+-sS8EpxAB?zPOlmbuq5 z_gdy&%iL?3do6RXW$v}iy_UJpGWS{LKFi!^nfokrpJnc|%zc)*&ocK}=03~ZXPNsf zbDw2CFPVeE^O8vkLg{(UK3-A@4(fTy;S4ya=QY20S|!-9=QXpS1PArJ<^o&~4(fT` zg)`uwp4VL{!9g8x%@4Td2VC<5uK5Ai{D5nIz%@VMnjdh@54h$BT=N62`2pAbfNOrx zG7nnjLCZX7nFlTNpk*Gk%!8JB&@vBN=0VFmXqg8s^PpuOvdlx4dB`#kS>_?jJY<=N zEc1|M9$%)^#> z*fI}W<`K(0Vwp!Q^N3|0vCJcudBif0SmqJSJYtzgEc1wE99Qsmf3Ha{g&Bpnf;d8Z<+m;IiQ&K=fQwhvlA*oNew8PaR&6ufJVmes01Z7 zpplUh^vi(8K}ygs1BzE%3HoI~@rn}k%Yfn)CFqv{#VbnCF9RBJC_%prXvCoe{W72t zhZ6M5fJPij&@TfTaVSB*3~0om1pP9gv4#@#%YeojO3*I@8fz#)zYHiga^G+I81&14 zMiWZVF9TW|M_*7<16mKK1pRW`ckNL(Xe8%B`$c$a$?M=e3%g z*J^TJtI2t-CZ};$s0FXp^tPVR+IBuP0njIIgROj%f3U-Yc)A}7k6jhAt&#m zWZxm@wVIsQYI0ty8T4Aspx0^!y;d{mwVFY%)eL&AX3%RjgI=o{^jgiJ*J_U0|Bu=K zkJZJ{#CPo)#@_oGwGL~&^2u?pY-`p`uKPJ z?WcSOJHIG9BQxs~+rB6}P=_&>%VLy_$S2$iC)^4r+zKb$3MbqO zC)^4r+zKb$3MbqOC)^4r+zKb$3MbqOC)^65XH}tRRiS59p=VX0XH}tRRiS59p=VX0 zXH}tRRiS59q59@g?WZ!U3O%b57RqOsRfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2a zg`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~ zo>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hg4 zz3-77m{ohgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfV2ag`QP~ zo>hgORfV2ag`QP~o>hgORfV2ag`QP~o>hgORfUSr)QwqH=vh_hSykv+Rp?n&=vh_h zSykv+Rp?n&=vh_hSykv+Rp?n&=vh_hSykv+Rp?n&=vh_hSykv+Rp?n&=vmc}{B3_Q zRklKinx1xsB zMwGl2HKaD8>3WchQqGmuxmK%8V-}5YdGv04!efKuHmq2IP4k@yN1KA;jn8s z>>3WchRPkNdgfh2<>Hb?dDk%S8Y;_(&tOBLO&yM}q! zFz*`XUBkR4#W7u>nDY&lpnygd$0$KOjv7HRs%XQv zpnyg-vcE?q2#Qh7p!-#VcpTLX`Y%+1cpO#4Ljq{PQAIpT(14@r%akASWf(9Hlf?`xrlw%N&qef7S8bL8CPyR+Q zW*x_@o{f|$E@R+bsV#f zW7cuZI*wV#G3z*H9mlNWm~|Ypj$_tw%sP%)$1&?TW*x_@N`%G&$`7~%Ej+HsPYGIhTzv-YO3=dNioKMeg~t_RIR-5}uINe$ zGH_f`mRgNk7tq4vvNm=jfA6^Z3uizJkE_>k3|e?xHrLxqwt2xeFWBY<+q__#>n&(s zgUwmnx=AHAFWBY<+q__#7i{x_#$T-j+2#e?ykMIbZ1aL`Ua-vzwt2xeFWBY<+q__# z7i{x_ZC3w}n-^^Jf^A-~%?q}9!8R}0<^|ilV4D|g^MY+&u+0m$ zdBHX>*yaV>ykMIbZ1aL`Ua-vzwt2xeFDNeMr8PD$*yaV>ykMIbZ1aL`Ua-w4)R&J1 z6Y9m3WGkJJ<(H}?Tj_+NE9I}cT;Y;zr4#DWcc>&|?S!6Ye_tgTYbVr~IYYM62|dkz zRV5i~ClrnO71>HB)C$NaTj_*G4bGFTbV4n{8M2j5s9iWFTj_-2GbPzdClsG4$yPd{ z_)JN*(g{TX?oPJS2|Z_0lC5+?5u1{1r4zCbGRamtp=iKe$W}U`I6z6Z(h1p$Z^>3V zAuBD_7*8B1+9!+l$)bI-XrI(O`TiE4WR3MEmH1@QK3TL+7VVQo`()8RS+q|U?UP0O zWYIoZv`-f8lSTVv(LPzUPZsTyMf+sYK3TL+7VVQo`()8RS+q|U?UP0OWYIoZv`-f8 zlSTVv(LPzUPZsTyMf+sYK3TL+7VVQo`()8RS+q|U?UP0OWYIoZv`-f8lSTVv(LPzU zPZsTyMf+sYK3TL+7VVQo`()8RS+dPbwt2}mFWKfL+guqCWb=}dpR8!#q+@Jevdv4j zdC4{}+2$qNykwh~Z1a+BUb4+gwt2}mFWKfL+q`6(mu&NrZCRxkI8b&RC_4_69S6#e17*j7vg1J6aiHutP<9+BI}Vf` z2g;5EWygWC<3QPQpzJtMb{r@>4wM}S%8mnN$APlrK-qDi>^M+%94I>ulpP1kjss=K zfwJR3*>RxkI8b&RC_4^J`k6=k6MFuc^fS+-pLr(br61NA-ej4SfATHQb(4PPne;Qy zq@Q^v{me7zXP!wv^Gy1gXVT9+lYZuzln3%#p6e#%fs{PgP09l)d9It32U7A}Hz|MM znCH4lKl4obnP<|^Jd=Lrne;Qyq&$Hd@?1CRXP!xU1!s7ZWl}!yji6#5sMrT8_JN9h zpkg1W*as^1fr@>gVjrm32P*b~ihZDBAE?*|D)xbjeV}3=sMrT8_JN9hpkg1W*as^1 zfr@>gVjrm32P*b~ihZDBAE?*|D)xbjeV}3=sMrT8_JN9hpkg1W*as^1fr@>gVjrm3 z2P*b~ihZDBAE?*|D)xbjePGHyFl8T@vJXtz2d3-;Q}%%=`@ocaV9Gu)WgnQb4@}ty zrtAY#_JJw;z?6Mp%04h;qHwfhqgIlzm{zJ}_k;n6eK{*$1ZV15@^a zDf_^bePGHyFl8T@vJXtz2d3-;Q}%&r>o{#4r>*0(b)2@2)7Ej?I!;^1Y3n#`9jC41 zv~`@ej?>n0+B!~K$7$<0Z5^krd(HoVJeB)^XZ8 zPFu%m>o{#4r>*0(b)2@2)7G)-@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe z>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O z@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkV zrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVrRwpe>hY!O@ulkVWk!B= zPcS2oqGa`ZMwb7EN>;yT6k8}k-OqUSdqxq4V{(kl$j9`qomanS{OGNWk2F*!zNRA; zB*(~%e4B4s{hpC+DOvrVkylf)`aL6mrXkN^7vm9=BBO9y{Y zKb|A*lh4(UFH$z%KdK+k6_3KP`tikjf9F5dkLQVJ;^q4B{9svRVg2}$;M&N0>&KS{ zZ-_ivKVC5BrAWMfd|7bq+#^TymitRF87uD|#<#T6HsEB@QaH5ae1 zA4975$@=k};LY=Xw|;z4@X>jHR6m{@MCbi&{rKYGL-XHMKb{xdI6q!Lo*(@7{Mp}L z5-gkl*Y)$41~*>v#`^Jsi;rBgyncLHuD)M)h_q8!Kv?`NoRWojCO~+f(i5Oorw6?6HF%m87qnnb6)?^~BAKx8Kq@$?~ zt!-+pR6O1s{X|F5^!vN4g` z)D(NNc2h}SpJ<6SVfaKk_3B?Y#ggk~j8x*Ocxp-X5&2U?Q!JHAH0b(G$<|G+$+WyE zwK%GKrxOirx?XkPoJb|sHpOQx+O}y^JlP-vE{?8GY>wN?P4Tq+VqI&pIaObH%{T`=|r=nP|Z|RJibvU>#f?<+PX2?9NQ@S#y2M# zWe5LA4b4F;UGv^8vD9oE+Bh`wV*Nn&O3SG0H(=hzRtafoO-I+YHZ`?wQEk*3ZAok^ z8^v21YlcY0n-g~?Tj^;yMmm;gO4(&q*P3>zn!5JESae-H-b7={tG7tc^oGSUbwXCM za_MBNzDuQ(Z4K$Rq+B7{iW<^09b21dN~CL6!G&AfQZ4aRYRQIldehxYmu}gzMZIB@ z1IChu*5;)@>in$prk2(^$;W5A_R`lAif;Q+x4HfACQ3zTZ86<-B!3J$~MKwG%h!7wuz~eH#WV%d`3bmuFl>r>79~^qewMHwo%XOcX^xNLce6cYwqJb2HsP*Y)N9u2 z@2t1JS}wo+@!HS}&+G$H-?OF-z2jlE;cPt?Nm{LzwLV#E@!Q>RXwO=!(I06=`czc9 z(|XvUO`6wqr@l@4wA3w=(v`K|xJgI&6}>d!t7^Y!(D@e0nC%(VV!fm*)r787Y7LeA zf;;2q{41*C4f>Az(zmb>-V_Z!p>teO>;E-RqxCk`>&o5Hb&GpDy}Ql7MoLZpwUXOd zk5KX83Eyq4uHvp+&bVizu17A~((0!*t<`zGMoSxISM^9+3GDIKTW z3Xjy|Q-klA(pe%&O+L1wZ*pgBg+)^V@u{Xa=NfD+(R6KX6!gK z_HK~`e*Nlxc-nJjdos1-4zP)RBEjr>Z*p5EbD(|S-1{=|4N&R2z zH8nrtxbamUf%g-A?$njsiSKK1hrf(EL?&w9s{5R_>zQrGx2Ie8bQ~mJuagv7X|`w9 zq+kuDO_BT!ZV$Yg`<&?=j3m^l)}w3xYLixJ>&2Bd&z)@zYQa@8c_p%F<1>8)O>0qs zUQ2YPA1u+G@xe`s4@>p`7XM!x8|V|Yc!bS}HO;!>XTAQ_EzWqq^i{F<<3I4Uvh?rm zspz(!SsR|q&Yfo|MzL47S4!=O7i?0S)A~fQCjBM)tyjxDq^ChhtX}IEKi%)dVI90Y zqmSOeuCLR)>QCfNS_Ogp{UWW|TrAG``N1V(yI!DGo6Ch-Td36-@nebu?~UThdQb zVi$RbI3VuQ8t2`5JbRDwGrw1>o9|PAe7_uQm2%PEr+0Gh*Tdxl%D%cL_)X& z|5%U64+oDZL*}D;r28kzDEYYZ3Vt;Br^-|J@!+?ESmdJMi^?eEo!Bj9E{Hs9k%tht}e--?%pjU5E{B7_zfz~^NeZnUm3-+s{ zHUytn!1<5rj4uTLAvh_V;J1VloKV;hYAZMu{983jCD=PRNo)kJxxk!Q|!M_RGgHH$lJop#d#rj^*ADJJy zB=~>9_am1^7HB1GB>3ydWs%E+=YoG1xgxSK_#Z;U{QJloB3DMPid-!mj8GOr5&ieb z8-xEEycGPm;Jd+p4!)!I{hHo0I20TXc+=ouK$eZ1-mBgd{6+9*LS6r9}=#Mk!vH@MXry$HF87bZIK%zzZ8i^Zi+05 z+&uTe53gA>zpW*)Y}q}_>VH?wYmPN&F1k=t_C#x=mXkD1k2lW0r*(a6OMK(}SpDzn z`rml%@4N?N4Q=W8yq4OZhiiXQwLg#7{ygPB3m$K5O~)D#yx^%<4t@6(_r7cH>b7L- z#jD~?=@_S0yyG43y3%V|n%FkS>OWhbjBSoDVL{=F#)N8@N~HX+%W75k@dDq>hi_;| zBpceA*EPkTsC}i?m)4fr;o77o|2|y!N?rWVOOu+b*RDw?ni^}@T(zOCWqmB!*4z|p zOV_@v$x6kV(q1i{qh2=u<(JjVBKr3N^_2&LIjinl^GL9;DVA*Rh>viUmAo78${i|f~y+~os$VEMKw_p6o#owFv+$EbYz2wrV z1vf0%f7!0f{>$Z`z2ea;3JbsdhP&Rd{i?-Ree8|5T=TIvUH<0WTb8|L?ApJ)Zoze{ zuKV0|L)SlW{pYVAe(RNQec-J_H+=4fp|?G7diAaU_gBVl`^($=fAvdueD01Tiyv70(w!|!f+gFR-m>)3rJr5ezqGvk zk5{Z*(XwLKijlY9@b*XFzT@q~E3aJnz{=08{Iiw+``5nqYvp%*`JJDCXa76@=B`iQ zHF($e?>_MEMeqLnyTAXQo?l<_-o?Lh>u(g^H*(KQ@9(|$u6zH_s*cr5?z>IV1k?oB zDUeg(ra(=xZx2#}J$rWS$*j0a7@hm{`G7v)bwEggj{+S9HVR}ExF}FjV4^;w4|pih zP+*}zLV<$<1qBA`OZtF+`m#P>(Ff!cxF=9gV4grcfp-G!1l9?p6F4VOPGFosIDu~h z-2}Gjm_Fc|KsAAB0$l^P1~d~`CXh_vm_RXsVLE>`zf(IopfSN>g2c>g?O)q1a^jN_pM3aa!zUL$nefSjPZs<^$s_|l`R~7_V{+f0zwNcmyZzw4Kz)Jv z0`Udj3$zy)4-g*UJ3x7X@dDumz6*30*e;M=;JQF{f$0L#1)d8u7g#QkT;RAsae?6i z!3BN`^cL7HkXzukKy8890u;hJ_0bE}{m!+OTiIsSWeilR6LU7Mxo!Zo#(&+ZJ3~Fm1uJ1s zDGQz~ShC>Af*}ijtZ(Z3T10ABL~1uHRxK*En-2>%EV!^>!h#127A!chV8DX^3id0w zuVB7{_X^f4IIm#5g70cZ_kivBxLWbs>LJJVRt>%6xO#_pp!Fg140&hBIz!GGGR}~1 zhHNwBYvx^T-qa?`3~y=kjy7*-^L{pOXY+10Z)WpeHg9F~PB!^u$R?B5hfFf$ktym! z4jJCT7XOy^ut5QU0RREO{y)3_?ES+o!oEMd{_Od~G|hfLyZ!9-v(pck2)q33@w3Cv z{yw|=?CrC&&%Qpp`t0e$B+Y(4yZP+pvy;z0KD+qr;j@F!{yn?*?A^0-ze69GLCBQH zjy?PJ?AEha&rUu2^z72JN6!vD`}6G1vp3JqJp1zO$}f<1TUD#As?}E2Vyo`HRlnS- zUvAZvTXp4DUAgrvY$ZlTax|||Z(k#SX;yC^RBst*Q47M@2#$ZH-4;eOOxR7BOgI^4GF}THG7K2v|Rx#x_mA~}MTerzux5-<# z$y>L{Terzux5-<#$uqw$&-}VPbDKPKn|!NZzNL4c^;VH?O|6Q%xKB(IEskVKpZJ%n}r`nR$L2Co@XSj=DE{3=GF~t-(i(xE=uNbysxQbya zhNl>oVmOLnD2AUHc4D}RVJ3!`xI-T}iD4v$j~F)MXZ3-J7#?C+hzIp=7>MB?hJ6_B zVVH;E9foxn&S4mb;Twi+`0R^sjG1xuocq;t?w23MTSnAN zM$|(_Q^36o^X^YGi-2Vpj$Igb;n!u%Wt?62N{oY7_jH_VR-9{A zoYP90#z$fuJi4&x^3Ep=y71@1o(p#_%(?L9!kPqmEsVGD-NJSY*DXx9 z@Z7?33&$-CxA5D-ZVR_9%(n2_!fFerEsVDC*}`TEmn}@T@Yup)3x_QXw(!@&UR#T) zD`nBI$*We%t5zzmHp{wSlXtDuQ_O>Uv+_Yb#XPR3n8)=L^SFBT8ujWmuf$!LX^FkC z(!xpm`eN{fr`2DCr_~2Fk}g-T{HjLNyPSUvNwdgNEt6St`c zKBFG^jC$ZR>VeOw2Yy*S@UVK|VfDag)B_Kz2R@@7cvwB~i|T>OXCj#}t&(M)?C)@_ zlC>OuRoGSGR)tv=UR79C;Z%iD6+TtiRN+#ENfjPdSXALqg+UemRM=DDPK7xY-c(pq z;Y@`w6~0v1QsGL4DHWbnSW@9gg&`GwRM=7BMuiy_UQ}37;Y5WI6+TqhP~k#_2^Ahx zSWw|Wg#q>4dIk|Ih~@$0IwR8=Jf*OdlH-gFXXG~{yBWF7$ZU4Ap3->#{#O0v-TPV; zKB_2uR6bDSAtj3$In2ml2LCA8%g9|u<}&h@k+qDRWn?TPUm4lT$W_*?dy=P&EM?>< zBSRVa$zT^HHyN49$V*06GIElUk&Jv~WFsRN8JWn)Lq-;|4t>Z#M*cCfkM-#DtUkOU z&-?M@93$fx`NqgLMy@e3jge=JEMw#tBf}W^#mFv3ZZR^8kynhYV&oJfqZs+b$R*y7Q(x*~7>kM&>Z`hLJUloMB`PBVQQV!pIfIyQ{oQNtQ6)U*ml$ z@`I5bjND*k1|u&RS;5|_7TT{Cxm7K4Qmt`Pt#MN0;Yqc`Nm=xythry-+%IdMl=b$@ zYWroGld{Z7S>~iHb5fQ$Da)LcWlpNbCsoUns?C1YX20&bUw7QEJMPy^@LXI?Jbz}l z3-zS0IBPD#4uu;NA2@@qel(103K?wupRjU1#h({62ECv$NQ|5M!1xB=8*FcI zy}|Sb&l@anaJ<3r2EQBZZg9K7>;|tJtZs0+!RQ8`8*FZHxxwTHj~gs*aJa$X_VcOx z&qvDZZ_C&J%SCE=7!Dtk_4BfRUe?dc`gvJDFYB{!keBuIvVLCH&&&FGSwAo9=Vkr8 zte=*r_4BfRUe;&NATR5)U%-m*WAdWMyv1s`<03`6<=>lxlcNH9Vyno>C1@sfMRi!&9o^DM>vgDbGsEvy!5B zZ}jhf82_KOdd&yUZmXa66|8=4j%jD#n!x$HXLt7Qc%8j9yWqcP4?5y%jXSF~-mKPm zvsze?<(h9S*Zli7VL_OIuh#gpTI0`ZjX$e3{;bycvs&ZNYGFKX(-^c`IE>pg_DIIh zP14!xxj#Q0FGS3<4d z_k%^+Wp30ibE9^d8-|bbfb2s8?`&#C^SW{ z&=kEwQ}q6v_KaV@B`!P>or_OIf4_*IU*x-;y?YF2Z_Uo%J&W^K^K<{b$@91E&R@;X zeXl)xM}Z5r{kwZh{p@Y^^EZ~9KQr)%P}>&^&3&2B+_Sl@$X!L|s@v-st7fxR{a~)D z)y_`!kCc~cHY=58)AejrA5#XXCgp%4bs>oh+nn#|ca-tzUn>6;*{PmZHm2WK&Ly%f zbtw~7k8(EcP@XEyu9Y=vm-12V3HB-%)$`8ZL?)*rLBBFLDJzpQISnd9)r-nUbwX&Q zA?2TfBaK{8VqFr_Tx=__YBIgf3EspgH>2Y)&C%L{|XU(~H$B(;{-zAu(!S(ap5wq;qeB`>mU%e!pL3q}}Y3^?Ez zhd2g|AuNU%h8TvJC5*5LA%r0b;}C{;5{59~WJp3t!gvTF#7N!0@2Tom%a}>#z0Z4} z&->$DsZQOhuD;7T=bn4+IpXGjA5B!|5oJUc?Z`SVF9b`MzX2uFf@w|8a$cC-T{(Gw#D>#ZWc5PU_YXtYrs2|TW z^@ibV)_>!=eXAHNevz^7@7p-Eb@Z=SKm9w#4EVmMWaGNkLldU|K8x>m;`yqLxM9ju zp$zUIuCq37-91|R$t|BU#^<8`o-ONkZhLCMQx_Qf6Z$ax-thLdt6zNVPfoPw4m=av zx_Wd(DCB>E?^FH3ZL7DgD|zHlFXIM-j9Gp+vVGU?x_@5rG~;&a858aq*|~0{_WNaS zd|!d*cQV2y=RNuT8$SAEm8s#+%%gf8ci5}94^Y3@tM3+#Ci3G4)oscPxYRJ7?jqrP zs%PU%(B(H0`H3=hn^cngnf!o*?r;uvfT`FT(28neOp8`C?k@zGApD+PVj}Q9D%$a^ zTRsbCnUniiE$}8DNg?pUNyfg_#Rlg|B>?QcrmK@RGxiy;oEzWE9aTNcoenZ~JAE#k z7l~3q#tXk>WpsxUcO&Xu!!Git**V1_HjLv%@ohFFcC-E56lVa1ugV`gWBC2R!c z*Wvzg;UN|fkFtQUfaOwN7-b7kZx`Rkg>fE5{U=knNB#_sE*ylnQF=!B4LgapH7Hl0 zEqAazLW6|2rwI4by%J^@v=Y7c;PVk2+wlCGR5$R~%&S4S5_S;x&+zY{eGTk+wC5q| zIL-!v`&No6={f^jnlqSJ2AUS9iAJvHE)Y007_5pzIeV=^1>GEHG7!)VRx@ zrxLkx`BwTVdQL7PTuuE+rB2+ePq(0eu9FE*(SzZ7S-3-{OCK;j`&6A^YNk%aF=uE1 zwM?6sWICn;)H6Mxff)de%m`>=ro;qhQ8S>0Spcof3TR`t#AnRT?0^pD0CX}Zpo_Tx z-OQc1#5~Lc=w)6&AM*ibuna&y^C$kw0xSTS$ua?hEC?84p~R;w%))>X76Hs+S%BFr z8!(6EB>uvpEDD&*asl&L9$-Gp2P|L(iBDLJ#Q+OgAz%?J0xV|5i9fRvRsvYcN&(AQ z8DKdp2drQfiH}(&s|2iKRe;s38nA}d0M@eF#GhCls{^cO^?(hm0dNMJ0oceI6CbfA z)&$thngM6BnSd>E7Mlgw%31+uv)O=ctPQZ8wI?pJ4%PuUhs^<;%jN>kWAgwz zS!d$E*n9~tVDph*$QA&0v4x2b*&@~j*v%FJE@s_;J!~;xFY8JCku71pfJ@mDz&^GV zu%Gn-E@SrtAwhC}H8w6a#Rs*hOYZ4!@A+{E9 z9UB5%&(;BMVCw-lvJHvfu}y3v;AXZ7a0}ZEILx*r-e+6cFyJ<}6>vM-1~|gD1MXlW ziQhuA*#WqV?F8J-b^%_+b_4EVS0#SKu4a1xN7>bY*RWB*z3dvmYuVn!uh~9!E#P%* zAK-p=9pLqBf8sr8GS>s%zzzW3$Zi0}!b&&}fbU-ob7M zyp!Dlc%0n{co#dKc$b}EcLCnbP5|B`!LPHs6YsEl**$>wv9AN(&+Y|$fZYdplHH&9 z5B4B?0PrDp67U=BLBLb&A;5>(Hxh5NN7yOAe_#&-KFS^e{3iPcz|-u}#4p%m?3;j( zv(te8$Q}cHf<2yii+zjzBj6eK1mKhGTYyioGk{OCClmk9o?%Y`ew#fF_$+${@SoVX z0ms<0i8tAE?4JP7vN6DM_8j2z>}=xa>^p26@CEif;CI<~0AFM;0Dg~sH}Ny}5_=Kw z`|NvwFSC~b|CxOs@D=uQ;@{X0*gpgQki7!>S`v*pCxGWv{c>0RNT!1n>>^Iv}n9&$BlYZ?J!3KLz|5I}iAC_HTf1vY#dXmHj*W zIpACDO~7BUe+PV=%jG**olQz<1ey0A6740RED_3-~K`A@LLTpX`@_@3CJ2 z{+j(K;BVM_fWHNNjlIu)4fs3u8^90PZvlVL-cS6P{ek@s@Q>^Rzz^B)0so8r0q`RG zW8xh9Z}uVJN9?}<|HLi=e$4(G@Xzd{#J{jl*q;FZ!afH4l>Hg-uk4e=tLzf{3*cw$ zQ@{!KSHMYj2{6t+OZ*aRSh+=Z5|(J7%&3W6xAl~B(WA`cZ^6qWd=#Pc`{YUEU+ zs8R_ErKnb^L=`?)DK&UVz*p&O3Q-i4A~bwnEg~rtxUE#+BnV0>5Fd+z8s8@%eT2rp=~pg|LX8?~AW z(Wuqb2YjlfPNCnx!4zJ^G+sm%nn<6^1qvt!-&bf9gfQd;!Y2w&R;NLAs0&FgC$tC& z_o(}#sQElzrqBaA0l&bDTGUB+QGOmTXuFITl%~?7lA~5j_;c6Lk%hw zo>yozT1qM{VF&kQ9LRW~ekN~Bp+}9H)F3?g+NdMEV35!sFi(#IqV2#7wFNmNxK)Kt zfY{Uli2<0z`P1-XFsZSO$LLk-z~!JHD2|I{0$$XpLxpg4?09`5u^eYgc48|cmX3RFn&M=B?=~7))&KPAROm#89Cj5cX-2*lSWJ>9^dm;R_QO2CU&#tZ7vm~ca_)gec;Myqj? z$rOpr=lPV`!WKK@jM2fudSrK>4BsM1`8<1$wK~C95-{1~3njUZT)c+pugiZ!|vt(DSfWgydKc(K?d zyr69cJtjMq79%0qP_0%28Hu(6FFL&ePZ&guHj}}q1#Ptkty!zpVKi%j1425`NwcYe zFbe)gTZoAyyhuIPh(@Ja2fU~tf<%-Jc2Vi|hGcc-G+qowN?Idf2Va%(0`5eT@Io2T zM1rUqctN`qU`3711PZAzNazoGgq##w4TLT63rf@3fEO+GN20Y{J45r+Ng*Qv|?gb!)}Efpq0 z0*I!iaYnKM_@)7YA!Jsn^-43C1b88oLU^P9zzrpfQF;nrFd0ph^d`cNJd}U}Gpe8( zrsR)~u0cDDYNJ}ORcJ+{)?p#xr^6T|T!Cnml%h@xp@QyFLkv!Es}7w2SL(F}74=oe zWKN}LrGq)#I>HOuW(FbAZj1yXqV$h}BO;@+04-*N-fUKC4LY0IqPIZEm<)Czwo0j2 zE44ZZA5;p0h!*M|1{T_aHlr=TH}xBW)1uO#FjN9|(m~E(nnV9p#1;mF%|sB-D=lUV zCA~$$4yY<63#yLo;#-I~*O0&*wMN2d^(($LK!lb0vnPt479R@e3 zg1&&(M!g;wrNq$ubP|=!?K8kctx_9}Rx^|=tr2*^MJkCRa%#KDY_Z}As|uXrwAzd| zlip}GxeP`#7z0CEXV4k+=pWiF+NgVAAcM{VX$=trd{c1{oOZR=sIr4eFhd$Js35n| ze>HXAWO7=hr|<=v)keu^vmzOd1{n=DNg5Mgr~)Kun4w~{$$~>PsH_H`!=Tk`iKFpn zlm#{*unxRXTZ~4t4^q!)v4PZPqrprZYcw)YpXRnyV!nV8cu{N2X1f(4L1)G!iVG>> zi%O;0WY)MW7MsItcG%V6cDLPWMjy;}i`QhfVyKvPYJ*V^^kJMS4N3>q195LO*nlj^ z29v0!;?zd9Q=>Plou~vdgHVcT&StY~B<`?yY|>Nsg2V2lWOCY(%w~y?3K^fLxrXo;RU8h>V4Fo6grqXYQFC91FnAoa}XkHu;=nXFoL&}?Q# z6F!w@Jn2i!A2Pw+M09i7p-kv4qDCYlQUW`xR5)whR;$B_C!A_NYXGf8B7MN(P6NflqR*)6!Mz&U>}=-{!(}W z=}b=G1#LlT_8?|hi^FBH+U*vzT}QQAm?`-%&2>0fFv|?Q5ZydZC{hL+!~iZRS;5C( zYMV{xvpZZKo7L^sm>g!m+iUaMEjG73(`vP2c-ssblf`H;Yt2BTN#&t>3`U*Bk)gA=ZJ`Xm1GIJcToH%E1+nKaX)SiM-KMkJ)oP2{ zZ@1eZs11-mW{Vjz)2Y(YfY8~rnR>HBpQ$rCFvr-PP#}yZV89@a8dumy6_SkgXZR^O z{5~XkC;<}zGZBi$8Q~AfAwi(WW%Zd|HnmNgVb2fR%{H^cZKgj5A(@iSVfO={C>o`? z^DrAYd>I%59*5mSBiZ3#Hlhe-erfX8X<2@;18!FX=oa*A3fNxtbss)aDx;Lc#vq)3&=WgkCW@ruj4ngA$>uX=8$e#O z!JVNum@GE*-<%<({1BaJ0?vwLQ}Shpk-R>y)PHA|o%o8#j|wRHBMcUUwGoNp11@GRuudjV~1OWn^Z0J((7C(C1?=4=R?|AJha^ zR^x%+-DL6mbHX~a$?n%!G`NsbAm9g62mF@2%wSedz@L+2as@qwIl2DaOs_vXvn0bG zgxK@jjV_7%?Se zWo222EiyBUvcNk5k|oicTuK?agdM*>Lmp?jPU0sTXT)7dehIp~u1t59Gt;Z{8gslg z1wMz@;SW0L&kwmTB~ykk3cOHT{Qgi4q@F)3$DbJv`!m9}i~w#jj}K2KA4iT=&F}#) zW@~0-8ReK6>JJxU7Cpj?3f56q2bmQ@_nVQ_SiLT4QDhCNh&hh*4yB<>W+( zXOPOGK_r@U^79HP1q%o}nVHh~@^}i|#C62!gk_{m33@U-Ay3pD_USWBdHxwiepiMo zGvcPdpvg>VhT0JD=Y!9vEt#2F4Q8`8Gbb-Il${+6WZTip%uMF<({s|(1X$fnKVy)X z;czThZ?U+-I-3p`sbnyOLt%SKR(5_Y5{ktvzU)9ntSAiHh6}Q4LYU3$maxn0%k*aY zt^Q1d!DlE$PcmH|d!{eX9B%vKSGp$yAIKMEQ6^(|1QD-QGo6Mh?e3VWWGn>^JMi`IX6^)h^869?C zRPWH^B9*|@(Wt9BFTbQbH(Fk9&nyTxlvhU4hiGYDb52fy-DQt@ZJAkttgs^#F_|(= z73f`-*YAp8oMi?eGjj}fD$X9ZRXH=Fjw+is3e6#sYq2>!86_npF5m{Kv4q%zWNc-5 zC8cO(DN;@}Tk3yiRe-Qd#3cM7MJ1RS$;{6z3FL=O5nFkrvo6aY@#ho-=r2kWn3Qs| zD!^wb8tsV9wc8ER;__%-QBgFz$df~jW8o}32vtU2g4o!+-fYHHUJ7vSGwLB`uyR8m!2SWsK*jFjZes%BXs$o#&5cwBBO%C!n9&tOa^*N?crs(28BTu;Gh}X|-Qmf|tgNi^O59O2yQ&b0 zWNdwH1Ep9)HBv!Ap49(HLnsG{_=)g`6q6v(QC2cbc2iN(qnyIiJNWo@jeygZgyo`J5$Vk{>Q50Z8we}Te|1o;qdhG(2o2JRro z=P)G?BLt%h`4hVMeBwWU;|s3^#8!z+i6|>IeC=BJ*!A$O8{tzo!4;3K^izRnZyR(=DX$y4w`J`5k^H{owQ4R7N=!oTv^DVWehFUIAHzTR zYxv|ofamSE@W(yJDd2znDLiWMrm;V9N=^k2+%@pg{Q-WrgYfL$1i$WK_;ZiKk9!+@ zw#U)KJK&LpHx~ZLU%>CT13tlb;S1bL-aq&X72F`6=>axHPzn+TKIa6d;yhd_B0&~& z%emFue(o6m1O7++e+VxI?Llua5DW)%f+fMaU~BO4P&kwm=EKUcDQpdU!w|#aj__c3 zUG}Rvn?BTzKK$8L3c0%lMt0!`?*pr(@GtZ zO65>0m-utyKNBw{UPwHVxGQleac$zN#E!)BL`U2ax5t%}Sr^{8@RJL#UHI{ZS1)|; z!gCkST$uCj`FH>IoloBR(>uR^=Yx0t^PLOtoPTHRod@5!{}**{-K#{*rqt5^r@{Y^ z-~V^^sBy4^qEp zB(KNVi=Vr}vCrRVPTl|}PzEqDdyG5Kg~D)(gnV=(5{iV-&i+=^t%=QB+&3F74fPii z&I=&BIK9LoD^ljWh#34A?rJUzQ4H5%AgK$!%M|<&_c8Y+&IyT1cMwd$@j2W} z+yF!&i6?r97gs6P30wFb+|}|!XCaLgOjUr2WK7_89^{i6vxpUWWBdfg+A=euZDH0y zI+gsJKuFjJ{8{0s!mKD$>{C1|Hi#qQBjQWq`*5I+Dqm5Rs9sfPsZYX)-Jy9?+onCN zeNSiAwdi*1>*bzh_u)_?fZFxYzissm^rF^sH&ZywQBj60@AP2CWBdO4|{8(B5Nz z#QvV6%kik=BWJ5~v-6|Sh#ZfckDSjkW}V7z%YGrJF=u16D7rhhD)(Go zO{o>)g=-3bSkzq17r$2WQmMD}wlco#K)Jj8 zk&4!ehblK#K3k=zT2}Q^)yLI2)dSV1Yw~M;Sf{S%6)1mdsnz8JN%J>*u={ z>|bzrp?;xzVb;Qug$)buUHE91xvQpYq-(V6m97sLbuK!#=(TQp_o41n-DBM!EY4WG zVDSq*MLqZSs(X+2o?X(lbad%cOMlg8?)yXk=4Je{dzQVnJh*)0@`KBtU$Jq;D=RZr z9$NX*%87x-fq{Y7RxMaHvg)=~=T}`EG!E7bt{J?4@P*YGtNT{pv-$<_72>jmZ-H~7 z&@QT>QQS2Spn#&GC>VzdBS1-^TovxsB6k+*NG=m_w&7f4vDS_;Tk&&XM8(Hrtjavb zX1q;9Vs_sct0?w8hk|sC{mC0ubfb!ijs0gaW=c`aICz`Gd`MM58H4tt0H0TxpM!?O zp}-2{>X0ibN>_YFvV~P#d zET1K#a(+owS3^-=p7+}8GGh6Kb)6Nlwh~W9I767Y-4O`T7ZqQ>bcjM;rIuezT;z5F zj|OOV=$;*FA7M$4vt7cH9#}%4Jvya)9Y^sP(*s*7hoobqmwVk=69{AuV2wMKgKs)8k6s1 zg+Q1-Cp^WygZ8SSnXVpVRA0HLz zn}(lEx{*2U21hqI8DSC=>ga}!Zj6KHNUtGYb0cSyc#WY;LfA^xWu;C~y8pI$2%v>SeI{Oy|fe;GM(tzc4b;FfHFH*oOx#&_3n8sp@3+>$l% z)7-gu1>7Cnx8kj4?wnr9J+IVr&zs{F+&PWH9`9A^co(1lkUw+-uoZ1A0*rcr(r+I zzY@Dj*iVo6ajb55tZfMUw08w_8qH{^3_EtfOf%6eAFev3(JqFI_-J(_has;hw}IU& z8u=!!qMlO)IF|~;93Kk-0n&gsaX>8xSr8Q(1NR)GLfD5kYxb5dSNq|uv#K}Wy#`KP?o`wIn_4|9zBW`b*-*9Y zswP*@4gG~?Pw}h*1jTrA3Uj>t&m3j*M|xWJuB_#sH=pBM+LX#@Ngh9WjjOzKS6|Pu zZ7sr|%>0S&t#eA8lO;m)rZ4k0#KB+BSN81$eMCgpUc~;IL*T$D_Qcq zqiEVFsiYf~@+fJ-*q9?#8ljPd+!!24&q1ycohp%AEK6h{p9n#;A|1_k$bp5yN*>|9@4x4ttL>s((~yS}r~nb$s0QMs}`FRy)NWyL^y9zR#q87Hy; z6i5Emd%L_&L-AHZV?CE+hLRTlEN}A- z$9vmv-PT&O_Tc=y#(YO<|K9k5*;{U??>Tne`eV5LgqThLLSKW|g> z%Et!cHJuN2sMYhHUK;-`ub!-3H$PUq{N}!Shemom1q&DUl*}4gRP@>FOAqwq70ex~ z;ePGz*?J>cL@-aV3(`Ch7{?_PQ7}Xb59#@8nuwPqds?RBOFvAQxevq(;Gia&<^@cW zBnD6trXON2HTYMA01zRUDDObtfjrGUzPF)WTk)V!fJ*FE7v^~rC!?^ME)Wd(&cTBS z%vi9wIU}Qa^8$ov96ZR6{w}`q6@=^v%B$b{=}&izod4-tS0kKKA-)n{fi?}JO}9yH z@|{I{L==zurMgj{8Z}aVTm>J^sjO(?WLcx4i|Q&XH~K{tzR#UPg(6QCo*&uqQ>u`{ z*k0kjLA=DVW5WIX5%Es zpAoEz3}QnyDyv!l-g|mDv9xpx5vBN;KBM?gt4a4BTFSvH^gLE2`!O|FlM<+a*^D@W zD8SGsCC=K{VONrNCrTd)xJ5HHkF$nmUQ5Ukf{8Lz8M5%5+{^I>d%Tf*NwGhkZ;$74 zZ`!$^p`N`7D{N3Zp+tqpsSat{Pw}sV#<4>l#{$N2bxNm_3Ee1El18~Nh#QM{@Jnd3C3Zbr!~$?9a1lIC8l&V)UrP-l|#8do9 z@gz7{2d+?|EyNWrBQ`>jKn@B9L=7K6uvrTN{eFd=sAyA9;v)sgIGT^vjj>#eygVH2 zZRF8m_4l0 zG|yR86?_ry89B&LYXDP!BWG1qEWG90>(+hymW8Raciw@=1_vL%VcxtO9v>Wh?7%$! z`LXz)&h+-4;S6JAoZ-nOOP-AXY3vzJ`PkyckHs%N^Gy8G>F(~+9N`svqA*Tiq&)zw zcj-9k=s-X5okS({Q=HOg_0$D~AWiAwX1ZaP=SUr}Mw9gzGow!^7c-*~UpIj-vqKgP zK@OaQ-CyOzq+AEr!}Iau2<}oSxx+@TbF#xOnvH&A{5b@)aBD8zA@KoB016&-C}Qn2 zCcs8g6*MMFre^oF%mqbgnPsJRS*cymp+nRXB2-w$v%F;DRhW*-N&SRsinf8VlasXy z6Lh1%FYCBZ5d;8!A0|M z%teoCfUX*>iO^3pc^>YVpp6zz(?G=U2t%yMK2)aO+rp?&zDxVU)@)$QPr)uwqyR0%}wFzISUqq zdETHm*3O>Okb}v3M#sJtm7G~9@4sg5((Af%F2flQOFdJp5cfi5bFj4}wFGI_m8Bv{ zN17MSmyf_qu5k9TorC`5UzOKsImz)r zWgPRV09OVLk1SL{EoPv)0r}D?K2GYO>G753<8k;#I7n<#64c1$NktWb&KRy>7Ata@ zGM%yH4+)Y0A=7}Qk4l7=RV$gxl`435h3D1E$ye8P9%|V7@b;R{1K(U(HMF$DhtOeF z$)X)|`cICwm#)8WOT(>Q*3EpMxJ^_|{+r!8W9!{3wmrV5(dy5(tCjvNf9>{%xAY#} zRByAZ`2{39PlCU(YaZ<>XANYkGeO{k9 zOoNoRfMTMSS2ZcFCH;~gTy@WIeaqFSR>UTb}W$sUI;j=_;^4y%Ot15fygYn`1<69dW zw%opC`LXrY?b{C#J&%D0Y5i@aUU5WG^h$*@>?&A$Xp=daiOf^IN;4d2PQ8MDCM^Q0 zszX>CE3y=m9ZItvMoDqvxLzF9E7g~t(2G4PEXyD;1nk7SC`>>GMxk*prn(~}Ay79^ z#UfJOfn;usMZi(LQ*}>YecDksEh1@glGL}8<|AGu%Y>*b1{6T3f|e|{q*#y@_yEth zu72>UnYDx0wYF`W7p+`-bj9+ot*y+Rx3#VHy209+S3S6T`HAg~(U#s71G#xCSM;_- z8@HcWzWmF}3(E#>>FvE`psaBDA#=sxtxNlET3(?uH1=(8>bQQOx_aRHj;8H>jRsxC z@|*gW-a1%eFI#cbqB+|ZRR#@)VCAB1a~9pSqKv;#y?jq|+cite%9dW!*1TtVHOW(+ zy(rCJhoA;l5_Z645_UW|n)3WQn6-#a(p5ZQRDTwbSmgDXy>vVY*4ejRoYu6p_?!R-mp?dAD zi&vl6RK>4v*nDhB-yOpZGe+)TUAk=5rl!f~MUL;8yQ{vkw;{+K?ETuN`kHmO^)5ZK zrm}VOP4Za6dkDs$xwxorvL-~+8Ej>*%hJ#KdP>%%H6y};16Y7sh$laqdW^kRY+=;Sp-CLyNTzX;nl)bY)AZS zrPUvTo25Q*SbPzK7I9H7X9mYPIE9VBNrx^t^^@1x__w$$oleWOVHc60Q*vz@y)J%) zR9y5Sn7GK_Cdrj@(z0bMc8ZruX>63rW1|3L!}h;5HV54^=Ji+3*xg@MI(Nyua!zS3 zg`K~&tb0ps`^NSt^oD;)5m02F(x@vsXVa|CZHt?0>#`nyB08h4v3tv$#x<>3xh1*c zXVockqP+(acJV{e3)|2z+c6GRM}S+OCd7@%8KoSBFd*ar_ZH(!rZsRsaHa%J$iBQ7 z`E5jxYH&e|^dPKjFd)%a=$$aDr5vqXh*`!F6~MtZN7Tv=W1&my$fV6eL8_Br1P@K0 zSV?eNo%pPZbgN8G31OO*Ln?h$7Fq5{tYkxcRNExQUJ|p4qstcZeEIQZm7V2oe@*ws z{d4kq1ARulC%?+yyk}X}rYC=U{mLiryJ=PBo*!}gJHM9Lfvs|aa##G5`|gYX;kB!G z|A159x#W@C_w|?63|>F^=e)k|c5hE+O~LHZweu@8T!ph=7+7fV8Fy{YZt5+q*|llK ztfC2<%K&*Lkt-3H##RP$G@CMM zzJTrlE(wEUXtWhg%@#>J`WN+PoYofLA7VFJX*eaFj6)9gb*$~M!vLQ-5cJJ+CoO6kXxmuxs_VtRX5I^Byg z?!!UrbT6ov8uvsL=xgYL5;N%~`?Gi2JbvnFhWdT~C zLo1+sBQFlGdhElaaXt6((GMS6n}3_mrmU$N>-PxRv$GAWBRbrLHYbW($yN^ULe zL1YsOsX`V-c;YwwLz4qS20!tdIO?1naZWCCqVi-r!pLgaJh>gR6_Qp}f1@2qwb1}F5aT$oLu3Yq;Z+z&o+racZ{(zP_7(@9;;q?4P1u$W$(=8>)+kHp>yvK{4nC83V8M;s*Ax>oS8RIZniHQqF|hLV9~HLj$}sn|RvRyg z)aE)RUVfOQ<7DmN_=nw`VSl!BrYa`64#PnRJH~` z2ZGZb)$6jBp_$^6v*eXe8xn-J`J{)i5{&L;cJ z*m&eK@NZzBm3p$vv)l{7#K(a<|E(5X^?jB``i6Hk#G^WHUO0`oLSl z8^E#1DrFp#hLq}0k_FN@P7)8Tl}8L&?=XzZIW_<4WB_|4P?A)pl5#=z1HuXBOB^9! zDg%6(LD$IZ-lo`}45q^>j0}g8?;M}2@Hug`26;^~Z${pXd(YM1$y+!(HvDokMcN!MDvH&Y4vBTxUi#U2Y>q9! z?z&5_h@*ICfGq22jN92WvM+~x&a@J;qDK^MkXl30glmy-z~d7hpO8kPfmDPr17-x= z6>yi|T)HEY$y%N%vYxwn_XYYSvQ~Yf%Yr`W~HUILL@wfTD$w$S}S6*Fu`{o9F z{f5I`ia!IbG7w{p_LrjVG&7SkT(=v)XD#$xMm|X>VCsUQYltfin zJ*G6yzd_aHsGIIq@lBDLYzs8niQHK-y3*vPAduAj5s6MMDTwr~zxaL2=s&E}VnzsK z&%S!{V~xd;;dqPlZg}{rrgvVCpXX0at`J90Khyi=!73i_QJCB#X!zYaqgt?+F28B< zV-LtW$_VU`G=^K)Rby-xu+WNQ7Ftz@R@K38p_jOz6?YtvRmIc#+(ew*G>wzJbi*ra z9xXr_X&!PsOeS(;tO=bY4VKh+irkPqWKxhz(g>$a+qNZJHww+wxKC*H_G72WQrfWmX>bo{o=e4ceylwN!w!E^zuPk4G z-)zOF%Dj@i%D&xAi-zZx7M9K5(Yxf%?aisEmuM{NY20*VVawp`(r75Re9pSrv#uSe zY3Y#hl#B5{2%b@~nd2C~v;`tP-(I21C)q(76KM^elszT+Au#olKUXn0`H_3_Luk*J z?ibfMQ4xnXZ+)nE3-x%|;`GW#J*7L-`bVBw$f29&zbo{_^fW-~0U5R>dk5hY!d_CT zU^S*JOu!d*JiV{Q-F9&Ns;kBiwz*sOJ*`-D~4cTI91}4453Vi=*00 zZ|ks^)1ecyw3lG5Pu8v44E%&)#ra>?eTB?Qb851Tqz3p!twU3tF8C=Z%qPO-M3oR` z)L!mx*lX}MFYX6;6%j6ffOi&YxVzE#c&j~LM6XAR7fHSNHMS?=U-W6UmwxT@23*KN zp=h@0^|nhdPW4OCCCQ}rRKKpUO(d0`FBZL$R_Y)<79We2%P*YGgTrwv+Xn z5687mc>1_^HQaf$-Wk{N25fKU<62G?w<^?1Cyy8UY88{)P5h0bW^(CdsZQXZL2j9d zSG<4+Xgu_wy;iauV?84c_On>>B9H-+GS!DGG|{B;k?uo!`je+Rw0b&k@N?ahpV*;` z{akHQie@$Ub5UdG7f=2pzgWmtPv#iNuxsGoBLCSDwCNz)WMu2edP|`+6m^1+rewFg z-Xe)U{chT?a|Iu#9X+(DBH2abSue{ja{6EqF8P`K&>PH|V^g>!nhxStKoHhR8AN0z{^~%4N;Hi&EekCTyW(+e>p zcS(!gpxEDosIg87hb(?cuqVuDvjLc+UeQ7ojxa~4Qm{|_;i6NPr3dgn}h-0iCM*$=< za0hm%gG82fbehFw=}hNR^wR)VshlRIvuSu{GtE@2MY0+4JV7hb>Bc%T!P3MzPUfm) z5I{CcbW3bVW;tvquIN<;4Fv{*!3aBJ%^W_EMj(e&wu|O>+wr z`{(cNDRc&Nf=;EPv#Vs;4T~m66~U@@5LEl+>*{-}eV_`DcV~Vqyegi=M3qH)RyOcP zx>h!@Bd>}`TOb^g)|9u>vIKCK)Q+4N+%4nVUwE~8_`%IvAF9C%+_-&P$6K54 z-?-t#y0UTc||!ie)Jj&cbYW>kVhG-Z_47PHiF4l=?IRn%dEs{fK)Ydg8E8jfX6vBdA6;02&8G zK{~tX9vVJfYfjSWZ%}c%_=PJ6yh0SrkUB5%JxRKhb_j}Q!$)J0yf7449!XJ<#>I4g zNO8e9DyE5z_#wpw@{A-~KcxU&iWO1fg&?vE>vD#0A*@0bf`OYi&%b$XjY^!<^L1P9 zTCw=*g?YpimRZY(YvG<~AfD*^%K8}^{&y8CfrRSe`_|*VQ(oiV@#|Y8-f$G=xZ7`j z>Du9^5478BHyrC*b^B0-B#pyhlm+6=5MD`}8%=D~Oxbo%wm0vT?d^*Av$RYkm$WR~ z31Ou05(AKdgqC2m!1iMzDYryvH$sXDC~7{3))Rh&`-CiSoYJ4kZC_LGZ*<^2p4#G~ zivE^tZXo`Ua2yfG$9t~risFS~N^@w=Rf~_?CpMFhX&`<`cmi~v0f*xT_UJga7z;^v z;#%ZtC7Dd)xnIhGqp>-edPuf1c@N21Orvl>N^)#1n(hX_kT*7ck7kIoP@q$H=)0Sy z{8DLd7)L-hCwV<(b374$9GiDJvL;DbeGXfjrKJ?qJ&JveVBIJ$q%bXj4W?FAq^A_Y zxlExV(h2bo3i%m1l3iYHO@%~oAI#j6|Djg-a$#}t(!HH)=6do27R1RNx^aEujP3WW zUVCC=<<8YLvn+uEU+bKrrF*$QRvU(R_RqKjd}B$>$fZ}&F>hj>bWLloKb6!6+}(B zhx%vl>Mr{1wVGMkM!c%k602*=FYj;3$(ysDx986vo;h=Petzl<#GC;U4?{+|*dBSb zr7Sh6S;sXs>yWiZpPY5{pqA`WO3CQtY@8mGY2E}o(|n!eUTFfS8QCULLYiB!kIP9` zMk&Sw)5;llxOdHP?Kd8DXU*Hux$C7lm_Rm`Evn0W>50iB{O;}>mK9$+JV_opGRBh~ zR)7V38EG!i)1b*pp_md!@yR__sdiqm*h;fcvYlxyo3s+LYC!Kn<7{9T$p?9NxU)I+4}3|EXb8LfQ{J zJv{u>{x+#!XW}OWxnE)SkEEH&x@zQqpdeZ3FCPUqiGrlf>VOLy&g8q&q4&XQy}yE* zSB!-uepFLyzO*4&j=i7=1h~miF!8)BRFeFjoW(7dFH6pV!Y$(?^1|fJZQSs*MM?aG z*kC@p4tgyuOTIPvXR+q8MTtyv;AR9gCmsIlX&s&er}7dWrt9!LdQLh#satlO?Z716 z`yze*3SPKE!B65Vjg7yh;FITrTn1ALesx7Tce#Q;LQAwM{a#^=-w0$hJS4Bsg!7kP z<}1@m{!#Np1$6w}wS6faUy_sj%fN+~4N^F^EGNl8eK|LH!4032y6FM?H%BlHSXz4~ z2dorw=cJuU6mk}!^(N8N(b%(PR!Mgb-rtX~nC!}|n;t60u#I1wvtvQ7-HNwl;|;2h z-#@vJWD{)m{99;qBgv*F(4!d#S?6h2L0UpJp$}D{Sk=_3qzZR}xD&+ll#fhl;q@eb z>!+6)-oC{rps zKL&j;vwm4iK}k0cSllDl`9|6n3!e!i@`7OF458zKpP2|!Ofh`v~^@F}Fn*%i_xElMFaNk6#EsSv;$ zjd|{7{3HRdQgAn`bjJ7+t8iW;PVCoMwOW|)Z!}K8ghq9XJB7Ef|62O>SLEyhNxs`uLcoouaVu>9;r6CHB zLo>iHV;Q*%u-CVdcGeEL-GQSBqZw_%Xx2gEv}1gmaW+HFBf<%H$F_hd$z`YUVnvEqgGAzbr_gA^h#$Ejd~QnPlQ8H3o;<*yjMom_ zAv>SE50tC~WZ$#noQt!Fb2ZLn(P|*P(t1|*p3uBlC}DUeaukgY7EEHV07e&}O>${Z z-?2j$d!QLctmHOE$#&-e-nkWNgcfzB5bAcP5ZYCgMreuz+-vn)zW|?g`5sZ>$*=zc zd~O2?@?Ca!ex1zcC%Kn}_xU%$OxQE7g!V#vPRQ&QqFo9i#v=Kds3XDIaNVhG3GowrQTjD8lW&N6A6}A+ zjR>goO#EZvhl;nbOs-~M8YeAEa=@i(O?t4>;^m5YGA-$oVqv<{U_}iSMLrJIL5^Xi zAartlNGn|Ad-+a;$kpdEb9|_2*s%LhE0$@5?U(0b99jKs-M*^x)1J&7t7$2@5J~0s7^zhCZI-%{r*lt=u{l@$k zp(bCc@Pz{WL=Bf!kVS_7EH`)2%zv`u$!l8#;fL@F$h^@7TW$wzyE91lY=kT#{j(9x zmNiXiQRoK6v61!}#0ZijTZ6dD!6)>}BUmFKqex$>pVG3DC{4SClP^`03@#yzq-;$ zvf|zyO<4_#3VBYK)m9a5*m7rI{000ZOZ=XS#VzGFp3{mdr#aTVq>fupION&0oLP87 z5yR@MnzhsJV7&DJM-4iVvM$hD5Uf~tk~WDQrob1)4;CQ@X_E(hkO4~e)s`bC^}0G* zoivkFyCf5^Qsq)Xt-t~*s*1woTMdRuM$||)-b=;#_Zjai+}+Z0RpGtHd-F?5Q`fr+ z?>F9`Ut%xq+0op*v$wRgcV~0+j-FEf{+8W^_)dOlNj|<&cvVaCy0|1C-zePGLQhTm z7WxaB3!YKHo*87fjgzeeq@%qV8k}W23CUMlTN3*Rrg-9th~vv#$z*CshdaJ2M*$)uCr_EI=Rzy}j zdA1_z%BxITTZ>cuPO1=7vlnUBG=tF`HmQt1F{uO(olJ}h-SBNMz?(x4kdHvX79C;< za*NNEa)fEwLqT!R)e_D#@D$<&yKz-XUT$Ee@WPmm0|psMf2AU4;S^$%WGS zEh8PolG6CH(? zWwwxZ%T4!2W5T+OPh_`~ypK-dv^wm3a&KKyRME@tq@Bx(5&WQ=QW2Q7Xs~Y81G{F< z-1G2Id3Sqr5I@tW4!3NWKXC6zW8>E2{k8pb8YgTcFL8=H?%)(Jjf}h$pSa_W_{2*i z?&0x?uMVEMXaDlj(&hW_d2-d@nY;HdE9DNLPH!w|ZQONg!_cX#W*R(EkCHs$_1o`X zGj!k9I-@U-Tk^TWqzb+|F+NtSBLhl@P_op)1Kw z6?u&2O9aA8$0TV>@6Mvo6KS*}Fhn*#Nv^<3@|r`9s+6}qa)!W4?wK;x?ALYuY^ri*Y@PEJ#ik8h42 z!5i-LoR26M&JGm^jNInF0lXVsp)4%ivWmveX?B?3C+vhHDVugnkyjP71-O;ol_Lj` zx{;H&;gQ`jWs#nRN-TR{3BojFH6t@wfV2`33 znH18MvN2JsRjIwha+H-#nr)sE!p@10`A6d~axwb;|GjtYD5l204T8E2)53$q7b%<~ zdN(Nx5S4`2W)q$%1}uo&S-gP_KTaUc4UNg%7%N75+ksgv&WonxL~_ecT3bs8cgmB- z0;%YB^aCmjq{HR!#)(RDf)=TDlD;Nwqy3x1U&Mq=?o_Ncrn%X;NR%9f6*&dm(EpVY z|Camwm+#D-yS@>>X2dP9-Z+Lri(G+GKV2?FjIrukCsWW za|!KEan-tx+wIQp+9o#dI@j*!cmVOf?>kkh0tw@8_j|wh$8&PN+UzQwb=KNzue0{r zd#~-r>=SZA+DmQQ@NVav47{AsoDAnC%vBU_Bl=w29?yp0JWjH# zK;NK;9C}CJ=p2@fnfGvR&f0ln#>`urll$DZ9-;JneJ=RKH{ z^ALabP)_8x_!W71(kMdytEG51_U6iI_G)YM9>>t+#zjszhUVS}Yr{7uSi>RNDEx@s z=EhuDjHE>5!|KepZ@u!cV`*n`BGa}cn!mWxD>#?8-tM=Ja?Qnx^E7LhFr8;>6hDT2 zk+D=Rrm)r$vNO=7u_7M5%}JqzLIqviZ{*5xrA#Vx&Fw#S*2IxB3i5`0;lT8-%XMW)Zr-%vqYKjdE}QAL zjh->#Hp^!G(C)L1!E??q=2*|k_qNq$);?FtEEVG5ZUvTS@#%-*>5-N;`1DySjYZv< z>-f0N8?!P5VJvBdB9J$h4w%LS;0!aXWN!KJSy@AGOUoX-Xn9iJ!U_3B6K}_%nK)q7 zX74+CPR_)66K@-su_&kXkvk?#Ng7!&ey|Ja6L4Oz#dE*W)5j&}jJd<*zIRsI?5rV( z4GePF+);58vGpvY;LhYJV{hwYUs0Hrmzr?fDDP0WX$A#h8XZ`-c?SBgb(?q_z>J5+ z;=zG6EDxH9W4mmOJ|eChJV8|TmRQ zyr=CL2#*q})Cr*|xy?Oy=MFJGYux+k?1N4ih`rgA3vK_D5t2jma@# zFfNaFV0X5`lVTs@h7+V<=JYB$w%!`dyqXc(yAQEvPuk*07&<;VZ^q!vStCa#B#)kz ze#d}O-eGA)101f-4jk5$HGas*+dR%q>!K0{j~;U8m?3@c#8=|&71@|sP$G0hdNEv* zY|Wb5A!qye2n%N|!7=#m%ZSgWLyYW&n9lE)^yYrYD;WORop1Kp*}2``WUEMOwL4;t zTrFZ0=|Ovr?HT!%sm9{)d!gsKdd3W_xq8G5g0czs9?M&#JCCm*o9{L~Z?2#Ez>MVN z84paI_Q1^KCx{AwvpEoPI3By6dj8`DtnM`FZ!KtG^jp_;7yy z+BqXf&RLtE|8OBDA=oUh!S8z!exLRZ(nI2rA~a$&{ni>cwy>4OAr>{(8h%{^t6B<54?bcqfaG>Dk^ zq=QbQ%aQGHC5P^poRtK14<%ni;=t=VKwl+i!fdJIofqBy{+$P6O`G{hLVvUKm^t^G zFRtqz=Wyt%+uq03EAB&g^u>!VxB1RwXPm2Zj`?9kzqwkB1dwHM26G*I2sw9Ka+c3u^%W?J8EYP1d>Ko6hZ!AXC;-9Hb_TWTS z&shO`W9@7LdJD4xBJ2xM%#_^w;xkkStB-cM9c{R}tCrqoINni05tl?XLbv1u-L!u> z|75wg0d2;}&KGS>nA_nQ44B)wJ~!293U;)$ z0%aoRcAQ;tBS!&K`dZoR=&~|o8{sS1nvk4oWoG_gF*((;xz{D9DtvV2a4aC{JRX_` z`uO$MkA#v_IUN2_aw;Y#NB$$%`*`^z!j0Gv>dWD+l|hTx zZHIj~*DpLi4*p5Fx1Yl6fg8812sXEAobHKQs9#Hoo=dYLD!U9vjxaG!fY*&f=U4$JvlPKTSrg~ zlNn^x+wy>|AU9otzOc#T;d71*>iDFd=aG99jqTm^3AR4H?ie$8=;TRRcMcqWo5xJ( zJ$MX`;LOT0zq+}YMoynF2z%VHcO_xSr~$#^R~7Z>HbBO9#oY)Cfg-gk7x)+v^C|xLv!dn8FUFmlom#%n^K z{re6Zha*0R^$mU6-oClGW(>*1NtvmcLqeaCe~24=^M`X8zUx)cKhs26-xNYb%_wF=7U`h>>2oHq7s&-qBPMGLF8Z`o8CfM*l(8B&RShD z8m9*6%oRpsvM1TLMZ^V?>ybmIE8iVvpQ7#3J6`PIn?@1JosXO} z9Xq?y;kg_=rNgrl=dHdW;Gi6Nj+CHpGA|_GZh4b}VH`*=>}G`GtTZsp%uI=KaRJY# ziF7zH3(lEvCYdwe?D8{gnpUN7owd9hMrOo# z9Mi)QEMDu8kNB+K<_^bMywveBH=mDuP`>zyYfHL>Sb|8C9FqzLtXX6k73Cg}(Qj4%R9nx6_?SgJ_U(5rQb}8c*0|$0Fx3Hl zOZNu;8jo{hyMFa(P}T@EI~!2$1OM4@#_c)SXTk+*b2uWaNlfO6B?Xx4M!ed| z367vi!yt0PB`c?=mEZG{b8axVCzb>U^Lzf@wpXb=mFCm-x{WD5ul_Lc>QZI-q#n@D zed*eYewL1tD1)sMboRn}5Ons!6~QbJ;fjfT=}nAqn^IYk8u1n!#fni872{bk-tr(V zpW9kr(vzn>8n+t!?Vh$1L+Wm6;Os5m;%Q&4x;{yqYeY}(^)GtN9LHFka>uEkA|sjk z&mrk`vu)vC6tV`E1w*{?U#BI(^B6|&7@puTgvN&9Kxifg8iwrA!?5gZ7>;8eX0+hi zkLx6^H*s~~x`gXXTzyvmN8IG`|A?DZpoc(xu_1wsMWHYNS1PV-T(fa4!?hOIQ@HAJ zHRIZc>jbWIxc(8>N4WliON>RKFaTF7u54VhaV^8O7S~g_>TxyW+K1}|u5-Bl5!Xk! z{(`Fy8H++;0IpPA*|=uoT83*auBUL-<7&pW57!A?=WzWau8(m21y`SnNU!2M9*ARG z+GXVJ6}Qag7kmkP^X}fx@0QZ<-=}}po8tf1zo*cuw`_HGtSJ0&0IpPA*|=uoT83*a zuJ3e{|1kXvz1zR@flLWq?|<|7chEoi2mf~cqYr@-F3f)k*}rbP=EI>UPAgho1Q&!^ zV;#si8qytzYb378xC(JC$Mp!Vr*Un@)q-n3u9LXl#MOc860R?C1ufwByoqH2zvoS0 z0hw)*LpLeUL@3WhJmN$s&qOHCL@3WhD9=PF&qQe8MA)5)usaiBcP7H_OoZK;2)i>8 zc4uP90)Ee%SQ_{}Z$b+g935COzwc-T9lfsi4L99d6T5uJZ?1e-V+g-FWDgl1oM_B6 z{}R&2vGg;>Mz|))tiV|{;b7m*91kp6L}Ow;#ClI>Lrb%vrPS0S$DxE{gvG_K9KT5#>hbrRQ`xH@oM!u2JtpsoF$H?g$%d)@?E%$G=R zNQ-l!#ktVpTxfAFv^W=9oC__^g%;;Ri*aH)u6?*p;5vuvA8~zz>o2&1-sbnbiKWHg z^Cr~dn}x~0qY~Sm?>-PVt8cBlHx87q4F9fbi#!CT+urU#?3{bh~F?cCJq>t)t-ZtP{&nf^YV z8_k-aecy^)-B|ht*K0C!{c^_a62_on~8=y_*Ubf4`H{_q?34Ij`GqH4u0Uz$pKxa8|61voRXA4(zkg|Z zR(*5&u9;mqzpY%n8lw(FuLzFsyTuBF3;$qLto>O15g`nXRU<||eYw~YTX{m+Pgq3i z-GN=>oXg#k@P=YrDK|~VYx`c$*gf*q<1^YXcKO0@_wbBzeZRW(Gt$>h#iUJ8j=@da zVOt!GVoHu&k!$U63;Db^cu+X$uLo(`-@eXYithfjUGC9WGj1wW^%vz~c3JNb`kpt7 z?gS^a^wb0K)ZC|dvvl!s6Fw(hlYh2mUuN9B^6rem zGaoOW``n{b2NtaRYiHf4*(DRF-8+9u-t@GztPz9mO!4-V*d=E{*04M87@0eE%*^~L zb5|D(E-FkPz4~Wsuk^Bi_CWK)nP{kM*R1@#&ds(FSXFNzAaNJ6zV%f9PV|3Q)NrSc4I(D4mfbxR3t-1&B`2gPOT)+6(jXDwDzdnOHF(V?` zPq%n;*e~WnYnwFvG)5~nCAvHfSC-i@sD5-Jt(mYHC~>rBdCbdI%Ep6~;-Pr7!~A%b$IrHAhb8GJR znsvoBtFv9UJrfo`ZvUT?%lEExM<+yIm-zJb;hAL%CnxtFRPgZJ>E*=}9ZRoEi9CK; z)q=Zy%O`Z^ILFRkTQGff-k^*%^^0w#dFxtMuYKteDkt`Mb#7ID;JL=Htn;GhqwS`4 z&8N?U&?4v4r)oZZWP}G6w8-I>oynG+88M%p!-|}U?jMe)Tg&4MrEr7LvP_J~-CH&+ zv0%&2M0ZU(pMm=TKU$4y$rXXhG zf}T?q-}8WX$W5ox|H>Z9W#ApFt()DF7~gl@1Ul>j^B8ZET__CNg)d|mZmfUOh^(hw zuzvrC>+0G6t@_7;^|R5y<8}WxaetR_*ExKEE{@$W>m%x)4A$FGf7;3WTfhIqb@jZz zRsR_4(MAtm`@(+2`6PPWJfrM1927g8D>fkZdE;w3A^o%gl3A-9=&-Emh2Pu>EwVb~ z6m-lf&^Yccy}Qd=1lKp|{eZa$r7*$F2^xN~)$m$4kM(OfnG`GNaYRWrw^#NyLrW%b ztVAgJ!Z>?s6#ZW8^$uA{SGvY$B8u>;BRv$2zV*<4O6dh6xQ zXuwUJQFUXUYJGEK-FvMorat-eNAExMqdCLoJh6Dg>;GlL=xyJ;Tl}-%KArQ_{rNL1 z_uR{kDr$>YV3418(x&5B3%nct$d`LiH(pa4;e>L%GrsPz{z)UUo^5CS{twsH^Zr)- zAFr!tn_Bgcu^tWhr12&8%1uX!D-^SMdL{Qh!EZqeaeT&InEl_@o(630M}zX9YA(0q z+$b9z^SfBH5xF`x@>t*}xkJu;A+#1Y^l96lXqE+6yEJO@mGU`WoxfO z$Oj!jYc(L^#T3m79VN;n4x#lu;nep~KWqP@HKeq%8Z!}?MwDhEGJv`#4+6S1YJ^& zHtEvxpe}vZWBrpxWIc7s`u!iStEbLb^^XPXl^;v@FVX#D+vQkNqoyCe;S!<25pSH}did}gC+Kj7S8#=2FxHM1 zWaGe#gEO04bOHs1v#e2nu;Fe@ZW+$G-z~LeRCGAwez(+?khLWX%E*$%V?kLYb{=u& zIiJ=#&WBH9fdIFh@fF8?e&M{f-QpSHxfckGd&`3QDcgvJGg{JNy+*lR)mp>JB?=t& zBTWxu9ok~wwQ!p*OnYh3IS#M9+ZT+QzWnyI^Z~!_Itmx3;bx2-e7AS#*ue?k zT-33+(RLh*i-mfw+wYh)BPlN!Fbb1Zi7r%cYr7BvjI!pG%851#HkVsC-J zc^7OPGMV2E-fz>h<^`p|H-?oL!dgbb-pS<@bMQ&`ZBf^oA-GH--1gb*o!Jr2MQ}_n z`4sdZpK*8~L62njs7Aahi&J-0jtBis^Z!gVKNKtFYEuj_s2=Lq&yGtM@p>%B5b zeVDmxqwpTMf=`?+h!lDAp|`07EyhnD+ z$bFK*abR~{Mv`GHY-2BBYT9rwMvw!vZ<8}0*-F8sHCi#4+|?wG{7^FtOdUVq>O6aT z*NU-~VTp%iJTxagt#{Yz)37L^HV;CNc^1P=Bre%^8X~dl>6o0<>dj2AWye}l%g^br zH_#~r9<34wCGfE!t$DD7%tlq*rPsmr+F`v8Z_ePDr@Lt8qt05EJP}WpDIsw;7ThI> zhG)^v>OqZZ4#K{X5>efFN<&na-0YzNj_u=+0Q(Ia-7j`vTyB?Ie!6HB#yt+t z#OXz&`%M^ihh;ead-w#0kcbCojUU;^G-n47Zs>ljLwriops2Xv6Z3}2o;co%INAYx z{~nt8F>)a4j9Bi~q}vgCe+OR%VM&H#Cp7%Y@gEPgGRxy8xEHkD{u%Teo3?H|Cz~h68FJ0Z)-}dMaqNAgn581x5o+l3v^`(>VOk`lLnL|MmH%PCbFB*$AF!>XZ}4ZWANyz6gNb+m z+5`7B{1-gGfH4cpFMX1JDFoeg?O&sLuJTam+}~R}4ktmIxqp;zaqb_r_ItYVFSqtC zx{M@wVp({0zR$S}JPGB{9#MwrM@PKhyM^?+1(d=o(Yv+7X}GIAg^EUlVI+8^=ns4} znvf{{i#tOZY#O0|v3`QpS0dKSYUfwv8RW?BXA4dX^h-<#P6|ZN=rSc&-X8GameDKmV%U|2_-~d~3UT9jhsOiE+-`_VDci9#5^UBw2X5N1?bnxe_+W(`{ z{QT;S>(2f>Qd)Y%l-%hD|EntxwkHQMj}^v$v(5vtVm7hRlBr;rYw;b%5|kq2G*cnz zVPKe^7t5g>d9f%jM*U*cGgh;z%NBL(LET=u;m}M_{^8(FWUOWhq#vc02uEmgL6WcA znUeiI-x`m>?)a_^co@ecaT6ji484SceVDumM`8Ya(ethW*t4n{v&!5;!ZW(u(^ho2H)s2r%4rPDOUb|)Gil03) zxqB9P`Q2occtB0~0Ze zoQPTEM9d;5Viq|OgcC9FPsA*8B4&{jF^ilSnnnJeH?d}szvoRbi_Gcq;3AJG6b9f* z#l`>4#jugYagx?xX$7FM_eD_`U|e$Eb{lfi8YJ-J#WHUWJIoP1w8gK zD%t$DeCFLwDK+ON#>Sk*a(}JpHmCmk&n$JFiQeIKVq;(D7ysVFOD)~E;Y?AyPb?jO z*Z2i=+#Z|Gb81b!x!f}*xV$$pj^+g3#)^6;kfFp z-@gV~TEFjO`g;8RKO6WxdcXC1?l-v;ojfSeZga@Np(mX2;4dOanw)ClzF;c^(pSbi z5vH8kJqB4XPlP$Fi?fj|zUCdPtH%dn;(PyKg z&PJo1g1N?QE`v!a;afWz%#XoOKVunUhVU~6;9~v{C#36C)*ohwVP@2Lj3{xGL)W^F zaOSX}GKL3}ry&@t$?#kp&18g9$}$nOIdF1O#(>1cv4vTgbH*kn4#+5SG^7+1k58ND zO-}aCOB-KYkb=K|-+8-P1V1*GSpXOu56e1o2b-N4o+B)SSrqE}&Z6L6Rs1#jnBVb? zdC0j{`%!0yN6H)@Td^)=fU4*8hK4?G z*deNRda?6}$&l$FBi+i>$1%qZc0yzH0eCd4*N|n#n;@O*qD%w2Mvvy9(4cY1xa@&( z-3Qt!Qzwn;)hl9vt!J6+_zlj;TY!#-HAvj%8;U&-;Tj}sn+b{DY>nWH-?H}4@lH?s zL#*~|a@5%#hCW1N^ox3N+Rqe`W$=E|vTrf%cB zTRd#yqzp%XOw4ZwUj6f+2{Y2}TXHcf#(vS|a$lKlfBmX0V_y2eC>)R0 zYsD&CXLRuV<`-<^> zyGI;_#vh!&fIryJ%1KO(g%(AlS(WW8co3mdb29U2f0b(cc;W|-?C-GI#*FKQY@Ck5 zJH2-fo1Q=UHY6=E9eEF@4;?!w+UDeRnent^hVhB>fJFm=Pg*h3FgSQ;AGT%(qLlWD zDegw7bm0aX&I8{@<64683EXn=(F2X_??&V4o033hhOEs0CRvR)79vwCG;SiU3D5*P zG{FvCv(9b_Su;+jkHo0oI_HJ`!)^@JIG=~aGDp#^B|YG~HNd+!2U*y=zPZh}9CVFmL?@VkkdFLE^EbR_M*hA0-AoH_%ARSQ?c9QSq!;i`c$^zhkn9V6%<^P7 z`$vz4z9>%xbD$jZ{#d@FD^}Lcqlol$xaZqC%G85DqQZ0X=?<7bWb)5&+N~v`_TlOM zaiVKHG9J+m_KiiMe^ z_%GYrHY~mf^Oa`Q-;6Kjmm?oT@yQdjSWf+JJYl3CTr<<1yMegPFx-+U7)Rif-13~m zp14h7n0R=IXXh}?xg*Zr1Lr1ACFtDN#s4-}v{})E6s~*>`|s>brXb9JLNVIjA1aLV zRPHyQ#MwYO@S%{K(TytjWIXEwNipeY+~5tF_oqx*IBxu+{FIdZMdQaUoRVT&8u>4L z3zLMkPL91s1^hhbPl=S9l}67479bckj3P#-A`TJ0j)O z@SBvM4o#`s4~0sdqe7(#!I^a)Ix;AD_y|8K|0u*5{~SF7J`nREGI#qj;|Io%j6ZXx z%#QY8gposbrXM(sL75%FNR}p`G()8)QMzBH@*38`=Kvt_sVp88}mue!Oz&b;c-lI~g6 z5tfI|Zrnh6f%i|xv-X_(hW;bprLW7=r0jX{Pj-Ji2F?k;_f zqAo^71fqh=d7+#WCgOmJ(Ix|W$GbAz#aX%Oka`KWstoar`Nk)wjbuDK7slbVE!;ga zmqFE8asBc2`D<4e zr6LoKv;XkyyC0tV=;0q1du*GXF<1RIo830C*VTWHyXVKhcyvZtaZcL6DERa##Sc6& ztNeJ~qPQc!vfFG&>{FlbXj+h%mX9Ool>=wafByYuwIA1BkiVuiS!bxXI@u4-NR+{xF9?g_&-?Z*mn`S)p^M9(W{HLEkG-K1R z)^+xZGcP^x%bL5_{_?|TfArBW*WO+8%LmL$aptJoR@VNi{KdcvGiSaKc(MFfwJUGy zY>$gGo&8ok_cu@c?42!h=4^TAXHWdib1V9FeiMiEuh5mIYhU1)!51*wI@7?+1^XgT z)MH#|7Pt>()g6j813U)--+-IpT5CbRrbUeRBbNv;Xf#SvCXw+fv0L(>J-T;HiKbO8 zR$pT(%gB`gm{<$R2e}V#TrT&;5_23P+nB8+(N_3P$uP&7tM5CpbQ1~6 zpZSa|3Z#~6&0L}MJxC``y|c6*ZW zv5!FqFZedF7N?;dtO;o+?&ZS8{_kdARgX+kuXKFz;lQhF27ZXi;;$yTe#?sva`+kh z81r}VIXw1Mg zyKSHo=U)9b4&$t=PsSoXoe=9P>jkkvOv}x5#})fy@M?3ByKUo1qX=!g5LXc-XZaua zH_FNHTEmTG`Kz~K;K34p17R_zGT*JiK6n~k%Zfr_B=RA7XU60O59XpTzp4av7#IbYlO;5jf?%0%>_fN^cZ)Qr$%=_}E+&?oV zRF8JNwjT2@d9eK>jp_7-a9$AJZ*lmHmelAKjq0-I;qf7ZMaJUi6>dY2*?&3!$r;h7q!%0l;Q6neaw;;=17nir}@u@>6GxF$88=3dW z!t6Ll4*lAgSf|t8Yxw-9i@$mOzUP*XL;y0X*YJhatD#=+;C#tn*nJokj<+Jsh;E?) zIli7~Wo*ZRWeRUk${t`Xo8m#)sf+{+w)I8)xqGcWdi=tHy>4HTk@3L&YbK;GKzZq; z%!lr~cl=H2?Z)UNck1}majBut&W=zi^a)WNH7?mNIv#|J@ErA%E-a5Mz?)Zk%5Wx2 z);f+DWb5>Fea9YPeMi-_GFFFboT%x?(>r*^tu?&kYlH!Q>sIvSxB#jbK4b97<==Eq z5}?U_llo@ZVKa0k_f5(|ipQho@1N}dgqhv>cje|UI_GZazoGMxS@OfqN%rYDf9}1+ z&i|Fz`MxwSoxWGA;s(Uw|F)XGS4Y_1!L{4m5E~cMdCC=Qcf>k7Pq|}b%?(%2!}Q=B zJO^mL7p6(`V6CvCd_7>MN4( z*mlQtz7QMhHfK3w9rjq4IV&bE_R3_@#5s9|_Djxp(R9ew##s&Kr?o_C;=NDN_9nM% z2Zpw+n6|Zu7pDftn8`6_{{fR|oKsyb@=N>{e*l|pAL#rkJlv}AoCIegs3Zn#Dc@#XaAmFj;uwYFkUQ}Pja<9k&4mju zC9-nM@Q^KQXCq{RN2I=SvV)Jx;}SFCH34gF@32n%leJ)6j&l^h-yQc#M#-~x-S4i*delta)~dfU_|a z!QgHpkcY2@X*S3JE7&N3%==$lIsM03aRW1cl(VF^WP&-V^S9!E{;K95%AZ)&wcXrhWd)}#NOaA$-Qlv< zf&4#pexW}!cNkMpRKaLT5@o%j&ojGiTE#d(!@@9j18*R~vF|mJ( zbJAopXju=W)8iDq%O9Ge$NaqWsCmd`<%|CR z&iuUVRvDbd`(#(5&E{fWr2qIiaaWJYZYXn`Q4O7ZTKXK%6(rwbPMmHacY|U01O?zc z3Y|cmniiS>56^@@couQZo$mN}bL6|289pA{C*Jjbd-R*07y+Nb#BQ|bv3PCgP3)2x zX_qF1?UHk6gkj>1a3`beeZx#hUSk+>algmAIOf_KVDHW=z&_U|1LIXrP<`^X3#ds^ zd4$TNgz3Uep%-HSCxYO_Joqq9gq~TRaqTQ{*0ooFvxSAiV&P)pI#DbaRtl?x)uLD< z^b2c+b;5e#X5n*sh6Z7yuu0e~Y!Pl1w(8k->Zx`KcMJCj_X_t3_X~fnCp;iLC_E%Q zEIcASDm*4UE<7PTDLf@?({sL|d!E&k{95(rguheG1(gGO!Ve^Y4~2hHTU-`?s+!M) zp9{ajo!x3dw_4Dx7Idox-3D9GZLkI1YC*Tb7IYhILASvcbQ^3zHzJvNK(?S87t=(r z1>I^vw_4Dx7IYhILASvcbQ^3zx4{;48*D+h!4`BIY(cld7IYhILASvcbQ^3zw^1i# z3%U)qpxa;zx(&9V+h7a25gj731>FW)(2e~%M7E&YU<aeT4BkD`Mvt`7BW?6Z8$HrSkF?Pv zZS+VRJ<>*xw9zAN^hg^$(ngQ8(Iaj2NE*x zw9#Ww8$HrSkF?PvZS+VRJ<>*xw9zAN^hg^$(ngQ8(Iaj2NE*xw9zAN^hg^$(ngQ8(Iaj2NE*xw9zAN^hg^$(ngQ8(Iaj2NE>?_PPA8V!!7g(`&`?=AQ1GwH(HH2N|-Lp6lPzW zk9w~#2Oe~9Bk$T~V1a5@sJs$-(%UFexlDInr#qJmD^yddvQOnIm7ml78-$I*CSkL% zMYvVisym-m`FFyAYCh0?J`{eWJ6{rhEc`_HslNS8__^>4)b}x*=%;<4)t7;8l|91V z_)Q-pUYMY7Q-qX5AIM=FFh@1Hun&D8jWxh2kU$^Egx{9wJ{3Zruv)*b5&DI-!a8BS zaI>&gcWYBQpz=lCxn0;H{7Cn_B>a<}^JA4i5nfi!7b<^+`^2l=Fou$DVdI6E`o&cXE4;X{HCBROzOly>2^afuEkjyq33x6&=AUr5MBs?rUB79ZUkE(o3cwBfwcv5&ucv`=FP58IM*M)7uH}o66 z^%7ud`Gn_$=k+b$eF?C)tp7mxq3|Qg>XPtJ(vy!>{zQ0LHJ|F2p9wz~exYx_!kv-W z6?P+8mM0mOhvhiXN;W(y_ttOXg|t7(&@^H;v@03?k-yA^CM2Ujz5<*gEKvPa;TmC? z?p7i632B9r@vbD&3MJ!RNu(7@#=DY8E0m0W$2-#sC8Ni&d{Njg>=1sWdtMU$Nl*K+ z%AW`?tL6)pX@zi@6|7kb_$7LTeN;aTPn&{1#ovq&juMVV+&u-oiS?PnY)CT2n2bB8 zKn}zl{VnZM3hWYVRtQUkWumf9e_JlBP|XHNGR1g8SgHDrD*N?7HV7MqO~Phj zi*T#(CDGa@d|9|%NZXYH+r{VqoshOG1-itV4}~9z;w9n7!cT;s>f6tRp9{Z0{Rmhm z;yPiuuu@nh{6P4j@KfPu!q0&?=>Tn!Dy>VE)}>18Ql)jNuzqLpEwwHc9^GXiwJud! zhm3-dGiH~db*a+2RB2r*WX^hOU8+H?OU1j7RH${S2DL5~9vbgMtxJ{GrAq5krFE&& zIwa86x74~+X&8WYEbKtP+Lf?LtSQ&mugV!QsMJl#`=vI z=uDbydz!3z8n|N(t$Lb4tDc6~?_gkx>c?J7L78LQH2I=w@cGS;(xG9@FGKrpbFuGidSB zGO$Ljq!7IM3Qa=egl!?AknjRkis^Bpl3ZA#=jVl3K}$aln8v?-C6b}a7C z`&<^%29AR!UjQaUqsF1v6GsWtg_*)xXu)wBAB{sRusjDkHV*PXe zK_!W`pkegs@We8&&q{+bY#Or#mzV8--26W?_qPtFTpn`*S_R z0pUU6A>m=+5#dqcG2wCH3E@fMDdAb&^Vce$6aG#$7gP?2)(3jR4}~A;nJ)?dBsqVq z@+ZQ}s`*sE{7m?{@C$sKE=!v(OPelBn=VV6E=!v(OPelBn=VV6E=!v(OPelBn=VV6 zE=!v(OPelBn=VV6E=!v(OPelBn=VV6E=!v(OPelBn=VV6E=!v(OPelBo38hJx-4zF zEN!|hZMrONx-4zFK}(x1OPh}VdlqF{+H_gkbXnSTS=w}2+6-CR3~)CNC(p(UX=yWL zS2N%nuR(bR?vMfN`bQx3EkpX2fga5=^({k|Geed$16=S9w452>f=J7m0WOF;b+=u@ z-NHS>y~2IM{X%L{2Kq9QT9kplOr#cNpf3}tMH%SJL~2n6`ZAGPl!3lXq!rD;2%TI| zmom_!iPWMDNQt~(7Sf7lN)s}r37OJ_Old-VcB11vn4q{Mwg`Q`n?z~DhC8}8so16{5j!#=Id`jO|s$3m=+5#g(P=A$Yf6CM|y5S|pC5}wvCUlabV@O2^kSGMtnD4x|5{#w63Cp@p; z{7&^3RP%u(^P!MFOg6NU_^I$S;pam3$H~x;vp{+^ljYS+hHkKiWBJMQY9>R%EYqu* z3<(qI)l7zjiS%kF%d43zuVykR@^18MyoxP&Ma8Swf>*HxuXNH2o!o}sP$#{j>y;Pk zl^5!T7di{|j2L_MJYMx6uX>PIu?4UCkyri5tJs29u>~(QlXor@GPdAVY{4t9)hn;n z3mePd&};R=(y~mi)oU=e;DsN>zoG~0#Te=`kg)|XVmrjus%LD$3oYgE8C&pT-wA6N zTktBj;Fb65Ma+laGPd9~7+dfn^1~YXjb2IED+zlgVXq|Ym4v;LuveDBE6d=OW$?-} zcx4&9vJ75X2CrfZUd0x?h|`kF9wB23Uc_mM`-O}xc<~k>GPdBwTY$*ef){TAB0X&{ z-UTc(w&2CPfXLVa@~R6NTky)$_R7=t%G37B)AmX?ym&|OH?&S(#TLAZEqLX1du6Y@ ziY<5*TkygII;--3k!vF^;g9zFBUF^ z&g5Vl45@IGodc~PQY&(x6~rfm9A)P~A6P?u$bmkvrdo7sgnnVIuufPn+$`KF?sf@x z3pqEGqiB4NqVYM3#^)d!&nG`1JSaRQJS;pSJSsdUJT5#TJSjXSY!lr#MCI42IVZdz z&R2d%aZ^=!2qwOS5ZjWrz6=b+Vy9MR{f)pF2k9X#6uHY8W0p>R8ywsXFMkltwXF( z%?3T~6T+wTOU8Nf(1XZ@PrqTzCl5V{cdHTlg|)&uVZCs(kRz`=v^9| zv^9|t?+eWo1Xs-QRFx-5Bfvi&k4`#Hyq97L5o<=I9MLEi1?9Y#k5X&=$n+)$0~m! zysR3=%JQITM8?YU&^P(}ukh^@^vzd*)SoHRpDE~}tfA&ikav8s&)yh{4Ctvm|U-l|rZ~1(^<@5EH&(~W%UvK$*z2)=umd}^{$(Q}f zm;K3?{mGa8$(Q}fm;K3?{mGa8$(Q}fS2QMH_9tI&MiR zKr!k9y)g?AW9h(LHDlBT;FQQ1bpc{pBZ28EGe%v2(akm>W7Gv0!4Vmw#;ObGQUS(p ztXUysjJg10w>3b%Jqz^qEWkL9HH=XgC`MfXi_LEtqb|Vsj^Fa_Spew~8KW+M^oWd6 z7eIPM#;6M*JtAY&1qNf(1qNf(1qNf(1)5(gfK2!s#;6N02IO<{?N*?-TLDIYq{tX` z0mgkq#;6PQMk~-8tw3+I0*nFIV56)Pcb)+m5`T|IQat65Ow-v$-!Y70q zg+Ad&!b`%Bg`Wt&0L}!JSAcF|9PT+2v{>VX{AWVuUjR89I};;ie!D_7tMs=eDz8y} znf|Im=o5Yit7$D4$XYIdWnh`sasey@k(O@ocSYi^NZb{PyCQK{B<>c9%0f|DC@Kp@Wud4n6qSXdvQShO zipoM!Stu$CMP;F=EEJW6qOwp_7K%!-w6R#dpjg^iENv{7HWo`8i=~al(#B$GW3jZc zSlU=DZ7h~H7E2q8rH#eX#$st>v9z&R+E^@YTqL@SM0b(sE)v~EqPs|R7m4m7(Oo3E zi$r&k=q?i7MWVY%bQg*4BGFwWx{E}2k?1ZG-6a^sY(@f5`glt;PFVt9T#>o<5sE1tx}I$ zr5?9RJ#LkHT#4jdA~}~x&Lxs_iR4@&IhRPzC6aTA-mq^Yfl5>gVTp~G_NX{ja zbBW|!A~}~x&Lxs_iR4@&IhRPzC6aTA-mq^Yfl5>gVTp~G_NX{jabBW|!A~}~x z&LtXam&)@gmFH6`&!<$LPpLegQt)-zCD6ZTx(he|A)x6re*MOh+J!0hSn$gg|)&uVZD%R zP0JupJ_Fa9mO-9Gt~D)#Jc(RuS_XL%xz@BycB4#oqfB6qEX}LHp7pLXov|OB)i_>y( zS}sn@#c8=XErItloR*8z za&cNNPS=Ce3&whJx*nXe%#}jx!7s~Pv#}oh64|or#qWCXy8&gc*;udnqxG6UTCe$| z_288CT(hxW^GEB!HSfkX8|%R}k?p%)T(1|`>&5kYalKw#uNT+rHGi~TT(8&s(R$4v zt=Ig~dd(lL2iLqO*KDi@*L+&eB(4Y7#LKGTnvM11xE~KS=LnR+Zv%?SSzd()(bZaTlH6MDhE{l z3gst6>j}|%0$RZu(t1L)7=0dzGHE>_T2G(_`5V%D0xd`+ttZfeMACW!?ZUqzttTJ> zmPxBpmZwtvu~L?&QkJJumZwsdr&2w!Qa!O!mZwsdr&5-uQkJJumZwsdr&5-uQkJJu zmZwsdr&4{eQhl&eeXvq}uu^@nQhl&eeXvrNr&4{eQkJJumZwsdr&5-uQkJJumZwsd zr&5-uQkJJumZwsdr&4`zqole~Qr#%2Zj@9vN~(;Q?o)sFslWTw-+k)uKJ|B>`nym4-KYNUQ-AlVzx%)!snhrHslWTw z-+k)uKJ|B>`nym4-KYNUQ-AlVzx&kRed_N%^>?58yHEYyr~d9!fA^`s`_$ik>hC`F zcc1#ZPyOAe{_azM_o=`8)ZcyT?>_Z+pZdE`{oSYj?o)sFslWTw-+k)uKJ|B>`nym4 z-KYNUQ-AlVzx&kRed_N%^>?58yHEYyr~d9!f3H%%s8YYEQopEDzo=5bs8YYEQopED zzo=5bs8YYEQopEDzo=5bs8YYEQopEDzo=5bs8YYEQopEDzo=5bs8YYEQopEDzo=5b zs8YYEQopEDzo=5bs8YYEQopEDzo=5bs8YYEQopEDzo=5bs8YYEQopDMr)!LA@JRFs zIj2^w2w^pJm1RZU!Uo!MdhJMM=FB$qJL%(F`mkj-qpU!Uo!MdhJMM=FB$qJ zL%(F`mkj-qp4$*@*3td$IFCBs_DuvRjxl?-bo!&=F( zRx+%W3~MFBTFJ0hGOU#hYbC>4$*@*3td$IFCBs_DuvRjxl?-bo!&=F(Rx+%W3~MFB zTFJ0hGOU#hYbC>4$*@*3td$IFCBs_DuvRjxl?>}7!#c^ZPBN^M4C^GrI?1q3GOUvf z>mmmm|c_$*^8Btd|VyCBu5juwF8(mkjGA z!+OcEUNWqg4C^JsddaX}GOU*j>m|c_$*^8Btd|VyCBu5juwF8(mkjGA!+OcEUNWqg z4C^JsddaX}GOU*j>m|c_$*^8Btd|VyCBu5juwF8(mkjGA!+OcEUNWqg4C^JsddaX} zGOU*j>m|c_$*^8Btd|U*gT&St&w(Q%XVRa;^AkBs{v7U1{7}f*-sf-!B4>NIK>ini zjGSyiE3nK__7=1S%N%8I(I|V1e3&irVYWc#8&JkxNZ>F4dS{%TsMg8265dWt{cR4gSc)G*A3#jL0mV8>jrV%Ag&w4 zb%VHWP;8+=v4sY4-5{qc?iD6SjDb)&d$6xWU7x=~y=it9#k-6*ab#dV{& zZWPyz;<`~>H;U^n3sCB(9spb(6Sm64y=Qx=CC&iR&hD-6XD?#C4OnZW7l`;<`y(H;L;eaor@Yo5XdK zxNZ{HP2##qTsMj9CUM;)uA9VllelgY*G=NONnAIH>n3sCB(9sqb+fo`7T3+;N| zi|b}_-7Kz~#Wl{(LceYn*UjR(SzI@Z>t=D?EUufyb+fo`7T3+;N|i|b}_-7Kz~ z#dWi|ZWhlSg{BCcD+b&I%e5!Wr^xKi0c+{-6F1A#C40fZV}fl;<`m#w}|T&aor-W zTf}vXxNZ^GE#kUGT(^kp7IEDou3N-)i@0tP*Dd0@MO?Rt>lSg{BCcD+b&I%u3H+Wl zUIKR)fZVV261ZaxSN6VyXCu}Kxw7{qJR6a-buZ!Bh?|9NLhe_32~>!jQ`@HdWA8g^ zw(0)Z6{>pPALBV8@4pSa6M6q_y8kxaf1B>V4P3LH_ur=bZ`1u>*8N}B{a@DoU)KF! z*7Lut`@gK`e_8i`S@(Zg_kUUUe_8i`S@(Zg_kUUUe_8k6uKRD-{kQA>+jal#y8m|F zf4lC#UH9Lv`)}9%x9k4fb^qb5xF+66|0^3ORmjp#cF3F*XFfC zANc%So7W1Dj!*b&{r;SgYx7#+vo`Jc^}Sy?Lf;CIV-dSElcFA z&=Kn-qOwa=c8SU^QQ0LbyF_J|sO%DzU81r}RCbHXZc*7S zD!WBxx2WtEmEEGUTU2(7%5G8FEh@W3Ww)s87M0zivRhPki^?8R*&`}@L}ibt>=Bhc zqOwO+_K3=TuJqOwm^_KC_qQP~eFui$W0u5;UuK6M$$b#D97YqkNozHUEy3d>wyw;#{I z8m@EOk7r<+>)iI^N%&V4LauY$54uFIbK4KPM6Pq&54x`)V=Cz$5Zwc!dq8v#i0%Q= zJs`RVME8K`9uVCFqI*De4~Xso(LDfuc~8d zMfafS9u(b!qI*zu4~p(V(LE@-2SxXw=pGc^gQ9y-bPtN|LD4-Vx`#yfkmw!~-9w^# zNOTX0?jg}VB)W%0_mJow65T_hdq{K-iS8lMJtVq^ME8*B9unQdqI+0$4~y<$(LF4> zheh|W=pGi`!=igwbPtQ}VbMJ-x`##gu;?BZ-NT}LSac7I?qSh=6?D%UuYxX-w(C{g z`7)4e3tz>ZS*GoJ75604cD*X?eO21~DyXoAw(C_;A<}le3Mxd}uA}1asJJ^S?v9GP zqvGzUxH~HDj*7dZ;_j%pJ1Xvuio2uY?x?ssD(;SoJLD^dE*%wjN5$Pyad%8~kBROv z(LE-*$3*v-=pGZ@W1@RZbdQPdG0{CHy2nKKnCKo8-D9GAOmvTl?lI9lCc4K(_qgaD z7v1Bcdt7vni|%pJJubS(MfbSq9v9u?qI+C)kBjbc(LFA@$3^$J=pGl{)bWe!x z3DG?vx+g^Ugy^0S-4mjFLUd1v?g`O7A-X3-_k`%45Zx1^dqQ+ii0%o|Jt4YC#0mMI z6kVjQht41$qiSfKPKxeH(LE`;Cq)-WfI~Mvt4b9OtvX9*`~;3niO_9kqMJC%6nQT*JvQ3f6Hbo}e6q#&OWU@_>$u@Xvd@9a%wJ9>$2A_>JAE@R- zA!obVATc6myV@WzB6oPTDKgon$YdL2xW;$`GCT{U#d`xXB+}x&A&d70xMrCa?+tKD zq{Vwf7ViyNyf?rjYiRM_09_(2-W#Axq{Ta{5!P9aR?cd)a#o{~vl@wUpOr^_PTF-&+I3FabxzuKPTF-&+I3FabxzuKPTF-&+I3FabxzuKPTF-&+I3Fa zbxzuKPTF-&+I3Fabxzv#7U*s;-U3~sN60AdTcFDt<{W!Vdh!;ivxfWH-U3BpnQ9pC zeM|hl1-ksr2DH~(kRFi{;I|+{mVNq`s(OlTu|#=Q0oLVq7P_9AJB+Cpb>pQBl>{!Euay7KqLBqM)U!V=mQ$j z2Q;D&Xha{-h(4eZeL%bI0vgc=G@=h+oyK0QJm82vpb>ol>oi#Ah(3T_%-et*(FZi5 z4`3HF%N)@MG@=h^L?6(IJ^%^uTaM@hki%vmNAv-W=mY8_0qIOYBl>_w^Z||N0~*l> zq&WeN=mQ$j2h@)O8qo(dq7P_9AJB+Cpb>pQBl>_w^Z||N0~*l>G@=h^L?6(IKA;hO zKqLBqM)U!V=mQ$j2Q;D&Xha{-h(4eZeLy4nfJXEIjpzd!(FZi54`@Um(1<>u5q&@- z`hZ6C0gdPb8qo(dq7P_9AJB+Cpb>pQBl>_w^Z||N0~*l>G@=h+tq7&f5q&@-`hZ6C z0rjAOdQdY`feqFU;rTI!-&>Y`feBIHks2ZY>{auM<;a!<-d$e(yr$UP|+A$cPAq+EpLiQJQN zQBu7Ksj_@d_&YrbciUZrJo!}IZFdo}B7P?1Zo78Lr(N=CmwehKpLWToUGiyHpK6zU z+9jWM^ro};Tgs;$y@p8nv`aqil25zj(=Pe6OFr$APrKyPF8Q=eKJAiEyX4a@`Ls(u z?UGNsFIlu|x9dkbF8MpAN~VL-Og6d^#kb4#}rO^68L# zIwYSC$)`i|>5zOnB%cn+r$h4TkbF8MpAN~VL-Og6d^#kb4#}rO^68L#IwYSC$)`i| z>5zOnB%cn+r$h4TkbF8MpAN~VL-Og6d^#kb4#}rO^68L#IwYSC$>#&SO(q*3C}Q>j z-YG0|mG}p+>KlMuCH{e8Wgqm@qjENR1%HY{nwk~S=9!;&^EX~U8>ENR1%HY{nwk~S=9!;&^EX~U8> zENR1%HY{nwk~S=9!;&^EX~U8>ENR1%HY{nwk~S=9!;&^EX~U8>ENR1%HY{nwk~S=9 zQ!?(6=Ouo!Df{29oV6QGNymQTC!3OyGHW-Q8VlsC-DqkokP|Q6bo?X;6suJxezNKK z$)-liQI&6XPP}weBZYjobK<3&8W-fO-DqlDkP|=IRG*OF@BH1)4?BO4^9P)>cB82g zM9$icrbZAsYd4x2LFBC6XzCp>ZTpb?KvPdl@{c(GsPm6G|G4uQt zdVsYXO~+3*9Y5LBcw`T2H<}uc z)?i`{Ce~nL4JOuLVhtwNU}6m>)*$FbtMwZI4JOuLVhtwNU}6m>)?i`{Ce~nL4JOuL zVhtwNU}6m>)?i`{Ce~nL4JOuLVhtwNU}6m>)?i`{Ce~nL4JOuLVhtwNU}6m>)?i`{ zCe~nL4JOuLVhtwNU}6m>)?i`{Ce~nL4JOuLVhtwNU}6m>)?i`{Ce~nL4JOuLVhtwN zU}6m>)?i`{Ce~nL4JOuLVhtwNU}6o<*dxu@BZ<91qf$8c8lggT))=3$N1Bn=DC3c4 zq&0Fp(u_TlFpA`nX6%uK2I2j9q#1jp8G9tH9CgijB&~sSjz^lYN1Cxmnz2Wku}4ze zneT!}nvq7x@kle$2ss{U#_wll?2%^dk!Jj^Msq{gk4KuZN1Cxmnz2Wku}7M*N1Cxm znz2Wku}5loHrSF?>kQ8ZTb>QJJR59zHrSGFbChqyE%!sqv%!{UgDuYnTb>QJJR59z zHrVoPu;tlc%d^3jtdtt~I^2?#lJj-A<=J4%v%!{UgDuYnTe1X>GVg79HrVoPu;tlc z%d^3jXM-)z23wvDwmchbc{bScY_KK0OL9xvwxn%K+P0)^OWL-iZA;p=q-{&uwxn%K z+P0)^OWL-iZA;p=q-{&uwxn%K+P0)^OWL-iZA;p=q-{&uwxn%K+P0)^OWL-iZA;p= zq-{&uwxn%K+P0)^OWL-iZA;p*q#aAzv7{YK+Oeb^OWLud9ZTA=q#aAzv7{YK+Oeb^ zOWLud9ZTA=q#aAzv7{YK+Oeb^OWLud9ZTA=q#aAzv7{YK+Oeb^OWLud9ZTA=q#aAz zv7{YK+Oeb^OWLudsl9P(Z=Bj2r}oCFy>V)9oZ1_w_Qt8bacXaz+8d|##^9oXZG<;Y z?Tv-Vq7j$c8>jZhLMYLUD780E?Tu4=V)9oZ1_w_Qt8bacXaz+8d|##;Lt=YHys{8>jZhsl9P(Z=Bj2r}oCF zy>V)9oZ1_w_Qt8bacXbem96dxy0TJozNB=e#~I}y3w5PI%B&meN_XU}8|q4flvy{_ zmGvrC%wJNvvf*PY^ChKg|J;?`vWG7zU3q45zNB=eJFW$nuPb|I4_{Kc{*uy_HrdaY zl&YXA3oO9oCwxk`?FZIgj2A3~u^~&c3m!B*CI-kFM$rI;7Sx*~Q1e-3H>XpwAhF89@SH2*3c;&%f zd1bKm!l!%XRpPz7u2&YD%&Hr1sf-`27Dq3LtLIC_p&c}PGglu!GOONATW<*ODb(tPYWWqCr&t>eD{4rsGEp5WaM6Z- zb*`aU3-e*UnjbEV<*WO{%D(69hJj~v%QOF^J+7^mS7%g<)HGh$mmeyG`|@MO(!p@J zP%Dm<)lbE8)=3j%W9l!IK>y#9uh#OD8}{bu%HFxvQ#dIfZI@(1gxc+Yc0L#l59Mzegv=#|zaVb>RANq~tGKPJX>R2sP zL@{3tNAuOOO8H=jxfe=>5qf4Iyh$CW8`m)IdT~s((9Bw?P}r}XJ*}21mHpvZe!u#+ zaG*G>e(*(7G=+RUv)Rdft*=9O4oY6H3)EkAb?V3{-8)=SCFM#z+*c`;DwArBv@ubo zZ`DVI@^ID>wZd3&L$$)_!Z7OjVyR|JRa-OZYMHpU=zO@ZP|%nf;gm_qSsz`mt}d#V zEL^=>(Xm>+Ix$qAsLB+o6~vI7_59vqsaVf?1rx4J)XIgL)G=DGkMG#HadL8UKt^pZ zF)&ma+xT4j`_^0An2nOR^hfl@Q~b~7@9%%Eey-bG^DpC?!u}0wL)GGVy*5xQmIf-- zk&Som8r1OWwdPq4(*J$$65JxFk#Rv0RD)tL5{&BOWvB<*kcc}%J@7UKo0T^7N}IKB zug(p1)wNrU9DCh{=A?=yewyyfa;4ba2DOH05 zJ|h%Rbw#ys=Q~uxnD&PHBsHjVT}Rf5(1QA@r=at=mOD=P&eTJDMt#-Y0-YPw-*-wT z&YfNN$u+Fku{Y|Rs_HBH{-IlwfQVK7P%HQ`++E?cXG#fE#rEJ!)-Dbs}RqctuZNMeRci zXg%xAilnK!Z~Lt~^-ldGp;}kd)p@15uF6Xj1!;`F*za2R`N+w=^8Ku1Kr)`rdcNP$ zzOGKRt)>=bmV#aP+l0jXbObvJT^iF-K}6{<4Z(fm%rdZ{Ln_y- zh21^BG~_$hw3pFMZ)bhQDCExc6+K!D@JpH8>>F}#QGeF&2egkm_UdnX>tq|9(3RLY zqdBucYC|SG?Fn1vS^#x8bD!@&rdnr@2y~6Dj(R)hw$WdGZ(s2JNBlRV2@idfYCLfd z#zJO8$U%v=^n0`B>kIZ7r;gQc&!eBKEC!SbMUTlvUy`^c`cUBJ0TdhCV`PRsGLKO=d@w zhflHytRL^QL1%I&j%Uv`wmb>&OtieB`<&?4*}CKC3GJTn(Rk;5ss%0eM`l(Fy&*^{ z)jw)|VAb4bwsr8#piS9`&i5RFaf3nVb(r-M;`@ZFrdCJBgU_P{YUgkqr z&siE~WM|JTis#tL`l?Bf*ul6ojQ;UsC2jG4Bht*Bng>D{cdBLlU|06-|Cuv3y@6Te zw=luew*)WBN+;*J7wWCaBAs=P-u)~ImIll8-se0;DXs|4*BhOc;vyDh%@uk?iCZ)H5iu&hT*6-yT&qdfdKt@rgkvJTMQl!6 z#V)i>j56Ex26cy~X*UWF{ndJR`Wm^=rKV8#T52Nny0!D-6~*2R|+3&9?-5f_&~At+Kj5cz5u}fmSsKhlBs1_gKFc zd?NTrZgKGQxg|o%`OkWv-wA$E@39`pEe-xY_^055TEp_cga4&>o*xQ6sdrjm2!30` zcqn+k+|hs4Q2k=?rQp9QHuWot?3|WU`C9PbgTD-ZM+*CH@E`Tw>+8W^NzF;{k3v6q zs}#Cl1GS_<{_9ff+oWm+9gpDyGTm4Y=0kD~?+Apwq{#W-2!1wrXYj7z-|73ycY-H! z%W~%i|1bDn?!4Uc;ID(Hg8!LYkvl&)8vJhVg51jB+ls{bquhnLRk@3D7b_m8sTEI8 z2LB`Xg5Yn1Zw7xCd@J~y;2*TU_A#y6_=Dh6ieY{{`2FDX!VUVf;61@_1%DBIHu#g^ zGr85l`}9`$1Je1!!LRBI$w!4?a3uJ+-t#>e{BrPzxfcbW3;s0s;@q0tOLA*-m*g(Z zU6#8%_tIRLyCSzP_p-%zykT%~*+jXxY12)cdfS~#$MQq^y}D9A>x-3Py=Kx+`NHtB zn<^ufa$*0nd~f^O-nNi!m)?;dny43+mb1;>*`}6l?#(ubyjgzlaHXCfqT=O;ju(CR zEw^01__Y(&%95RhQa#VEE!(zTzsm2p^xJnV-@9z2nmB26HXR=dN?Uxn%j0&n^9#WvkEqv-3um z-@LrE;^GzGKL4uoXI5Uk^3xYqSFKs~){CCJc<7JOrzT@&^FKvhKzhdBuufJ^3%LZTe z(3M-SeCLlmde!YOzw+hZyZXs%9=rB^uh{pB_pjf!{+kN z_ib6X<%`#?yl(e(4`27KtygU=ZT;*kSG{uYD<9vsblc#z4{rPJt8RYPgRg3A-@g6l zuOGhtH?RNtj;nS&vg129yynKnzj@@U=e>s^cAsJL|zehMbs5BS43P9 zZ$-2fkvhcb@D+w{FhuAOVMTlu(N#p|5SK$#4ly~zR1r}{JQdMY#8MGSMI03|I7HwO zK}Gx&(Nn}uP4gvLiKr=Jrihp#UTUGY=F(ew%IP~1Jms*I!%n_cX_vmM+^PgJ^<7H4 zm0;t8iw`bun7rZfhQ<3~rBCQM7}Ow8KdSUerN@*WR|0n$)M+rML7aX<3FfQMYx@Ny z*!e)2UeMcI^tQnf9Lr_@L~jtgLF5LJWJGNcvq8iL@fyUB5vyU25tWJ3AZm=5G2%0b z&LB2}$P6OIh!Z19j2JQEF^I+>7K2C(;xLH9AS#TQFe1W;2P5`^$cv_~jg(@gM2QG6 z;=hRgBKGU${whzL1<}RC7GJ0%#1&txeZ*E|Efy!1%ES`is1Z#ZF{_D*Atr*D_+g?b zh@l{Yg7}HUO02ABT|M!_L`@JgL8LHo!bAxZBTR%a@xep~6B|rqFmb^|N1UB~x?gi# zc(0D>d3&Sgw>PR!2W1f;kqoL|kC{ghE^9ah8SPi9+#m59B!7R@@6>|Kh9eM$K==XQpe-C$Fa!Ri%5PHt!3oHUHTVEQd4~%SCO}Y@VF8>_n$)p_ z+6Vg|XsrKMW$;n{z0&WO8(3g2E#k}ip znE8l`CaxAvKH?FHXoHOpE0#OLWAP|ADMO&f|h&|Y@tBE@x>LBwp*u*hM8xU(iqycdT zL>Ulcz*3y3bbPy2{0Ag+L@0%8h?C?KAIXaZshh$J|o1V0h%M41QT>5;{M5jjBI z08sYX=u$JwPuf6z@4?CK&hd`TE4at$Zuzdrr-|-d1$aV z+K+N;sI%vPuUGG7qxooWG#~Y7W)w3zVUmTJ{(dF6l@BYuN9h5j=bFo9 zqw3k`bEl4~Bgf};U)KGY*D-P!F4I4@=rM41`hPRpD9d>uP-C=fz*Bw@OINe#j#M-56 zm9{8tRf5O;dL=mAVQ`1P9X4&av|(t zJM8Rmv%gp8KBxr#&_haK4}m=Nuo7JCpHRIpXv3ckdp6wJFlRrm1Zy^&*`HE^FB`UO z(175`h9R5vZE$46vkuET9P2Qw!>0*R_v-owmEiP-(HlN**u3HLhRGWqZ&V~Nso^DvW;pm2;`!h;^tn^tWTaoHIrhCE34I}rLwf`&n z8!m2`xZ&aM`*|3+;opXRdwzWW!Yue~ng#3Grup!B8fPbdv*^jM@dx`f+|#Vly;9o^ zdN%CTQyIQB*w)}$gKHYLHMrJbna+M|^yZhUx2^=Yhv%2tX1_CpPOti4lfGXGCTV!2 zVUdPI`a`8tv&;CJd z1g{aa#z`IH*8m*K_h~=B3P5NCpAmFMuo*#S1eXz1#?#G*Kw$)f5d=o?7eQYHdlBSC za2J153CzVul|HHTm=aivAT5Hk2+ATDiy$n5uL!y#*oq)4f~yFsBAANV9BPkjY>$x_ zvU${rUo)^9!)*+DBG`!_CxV+e`&SNJ#-Jr`l17dm*FeAb`!ma38XdPPy-w*arQJ$k z1TbgL=F3O*tU9V5JgS~MdfMLkgsuf80So{T0Ki9hOzCl@-&bPY|EH8bt@MOaCgm|n z$@?Z|iXhe;)$`=2Bsr?*$Wc8-i$R7tnhqr3;jJ=L0eu?|e%7yQ)-I znoxR&639eNrAR4O0+A?HTCG}+s+Ob16S_d#>t)rT2J)5<#6a)@e@bV96$nxw=rmO& zkZGDqAgskoU<0N~^Izk|@>=47Rf12q|CSOaU3he1(S<`723`1bVb6s-*KZcJg*Df2 z7PXzPK6|z?IM=cCdG#sdh%q!j?V6uj=3jsFU*iRSZt=`wK61MG0$;E2x%k>Edv7xy z=soSSw;8i%GyR#&>E3X_5<9mU$T7{sPs~30t>Nv+V#)EOTBCL2N^rlf)>HLV|Ng_+ z)|n^une%j5_|7$#?_6j07o#(~b!W%Bn}zW(m+^41o+lZ1CTx~)S;CqL<05>E@MXea z34i6gl@2SxTnTR_td($9!dMAk<^0ujW{-mTlXJmR=VGa6wpBcTf1@o(cJ_UhUeMWs z&K6=M{-vT>&W?HTLMxvwlJB1vzqHVo^VgR@d_2zcqlV(bcdWDEJJ#7T^5^HR`9dwv z{(WhF`epvVAS~1ExbTP0I&n(Pg7hn{{(L0yX`}}>(k%eLz@fM}+_OLB;X?y3pM|9DGDrXIfVjJR;1u-wGZT-rMgPBMr2) zPm6E-b3#h{bK$0aK{#+<7T(*}gzokYVXRFVZB4voS`#FeAYrC~A}1z_9%h%YRZha} zy8Jj!*EvGrTBN`FxLslg5XPPm_P`+vu5!M;=M? z(88Q&_+B9PovZc#YkGUv_)a;Y?qz4aT6e!WSOKCOSaRUV^%3NR8$Xs_Jtqk5E@=YNX=I@Z8Ix6(%VHs`?3k4rWtJ+ zSy%pXq5{_^@vEMWs_C6;w``CI(aa%4ys>b_g4L~;p7|{yM*Lp5xp4hZ6dBU_5)xp< z{h^CjFIl1KI$|fpFBZ>OyJW%I)oAy{`|y0CTeAG##o=53wuX?vc0wLJ-M?r--`CIl zZzb+c#rL`WXz=-=3D>j_pJV%13=Q9k-n@ViPKWokFIzOYvVK9&UkP~zUoTm?eAU7Q zjaSwPcz+`9NnNpEcr~BKHRAUpxFKrgf)$Hid-oq32-Tn;{)wwstsN?Ob5tIUf%H1fJuM5%S$;($gS60buCf=0^6suQ^Sdyql6iDD`I1W{=W%#* zH^@1Bw}%drT3~fC&ehy{=LNL&2_w{qb2pA{IGS+m#Bl)a6z5?aW9)wRTOozKg3o7g zKFn<;o5Y)BP+0D~EbJ%8L?3cg+(wQG%{b!mc^IEplVe;6d4q2y>B3Q*Pm*Jr_4sZj zj&tOwkWAhXM{yp)cQ2C?A(iYG>&bhJ01 zvhz46kW;{GHGhL_;5$hx{|8dfFDA`+XBA)Ve4GE2Y@nyeUV6wm$QO_y%!a)h@CT26 z^Y4&${tE8H@4201kdsI@w}GtZKO*<@b4a%sO}crL^D4XMvxy1s?dCekO`OfZL7xlv zxITp=9mjPXC)qvxK|D_&dobIExgK(Y=P)%rE?M; z(K{u`MFtJT;B*i#;st0VMnG@k4QL`JKp*1c9D`=?1@t3+fd0fEFn|O&zb0m41`H&D zfI%b(Fqi}bhL8~FZ8C*S0SqOffMFyIFr0(~Mvw^SKS?Bs1e{8y0!EQ2Knt-rzar5j z8Zd^$0LGG7z&H{I7*FDz{~!q@0Wgsy0w$3pz+{pPm_kyVUy@Xk3YbRH0Mki2U z{+(Ef6)=-z0%nmcKpU|EW|M5^7bJ(|0OpchKs&Jm=8-(We3I|{8z~?KfQ6(Gu!s}^ z7L#JY5>n#)oRpGMz%o(>SWe0TD@cX&e@P{&1gs)efYZn{z-m$rSVL-@w@59i1*{`= zfc2yvuz@rHHj+l?|B&f2Y$DTfJ%cm>Hj^37&qxbt25coQfNi7|u${C4&Lr*5zmg6z z6L1#k0PG~Q0J}&hU^nS->bwC-VS%$b7&BqzAB1AkI4$M9B?IB0l12+ z1YAv40j?pdoqvM%UIVz63<3_3wSeo$5a4>U&UusEL)HThlY0Q~CBuLl$i09Y$p+_t zlTBnJ;AXN3a0}TCcpur~{0Q3mKEV6QR={oKe!%Ty8{iJI-T6oI0NDY!lRN;pi|hm( zA-ez{BqPp0klo}#z=z0gz&+$4z=z2m=YNsCvGJWsw2 zc$%C7{0?~@@C9<(d6j&Zd(ZyG$@iSUBQKG&fZr!C0=`UM0{j8_ zKHw;M*?EP$LVf^vj*J4HC$9irAm^OFB|jwR0beB-0DnY&2zZga3iulNk@GTnom>R` zF?kK}4e~nRPson}-z0B1e?xvseggOwc@yww>j{Fwz zD!Bsq0r?%^HF6d3_v8cTyW~2#2KXWQJ>U&;9q_-%hk$<|H=MsBe@0KX<*0gjP> z0y@ZTK#6?q{26hQF+doQ%E9ks7AF3MqXk!7JkfBlUYP<=zhNKl{O7Wd?`)s=nTI_r z5)CY4=nv=(FX#(z=m{U_2S4bA0O*52=z(C!|0$6BVdzB!}n-95L2zgr!Ia><(S`N8d33)mVaX@ZPwhHPwwOl*fN?0^jHgzW2v%$oyQHxDwd2eOSo0_?(^e+YB;5N6*uFw%5O4?i8`V%PIO<;T+^6899gtMpA*XgjKJ9~C+6x(U z5F>=G$)pSB*9YL^HQ@0N!P^@cH-q;D+Jk%AflU#VBB0$C;-p$Sg=W$!+D2#71#}DD z&;6A98TWhsVw5>5G%7MGIx0TO8dVTg6?NJYZHbTOqBYSz(f-k)(UH+9(Y4V%(Tn2V zj$isU=XBzk?5R=Y7=^WqrzTHvPQT+@0&Iobx8DA{g-IWn_hO~7q1#IuMoGI%H8^2uC)m4D! z2<$od32xurg(nQCPrzAj%5dN&F|{G;3?JXz+0uDtYgO2pvZ}5yizRB>nTySxXD(KS zS-QG#mu9@D=<(*IA!?ts=(8pn-|Lj8v~`{-3p+!)cJF4-Z0n4%oY}g2ci3)>L;XBT zF5b~V$(;>lY6CEVX8;q^M(NgOJPfB8OBid2vBX%=&#o%GTc6s{);SG5wREL1oTor` zQN%vD6nYM7MZWkE;pxxmJv0_tc{3)GF6Bo=;QHtn^Z^M(d zKd1lFaLVw7SGU(&MzgWiIAR?0F7ck{ecYrorJMGeKJuyX8S(ktx7+uMpU$t(sMR{!u%kp0iY0hNF|C_eEcc zz7-?H9FG}|)x?&>?u{Lb3ys?mcP{R7d}w@a{Gs?82?L47#LG#kNqI?CNzF-flKPW| zlHN}qPTrBcFZoFF$>f)kFDAc}d?lqQr8cEKr6*;1%5ch#l+&q+soAMzsg0?fseP$0 zq*bT2rp-$mNL!z_Ep2c5;tb!6@QlQa?2NLE#*EI4zKqowpJsez6|BD2aBHG9+d63d z)cRGXkm;Klo|%|=DD!w$Xx53Wvstg&vTc`aUuI`#_hc{69?mi5ypi*6&b6G6bH0E( zWy}r9jm@>@7UkCF9?yN>uCbf!P4+?isQs(F)V!X&H}bCJeVQMXUzR_Re>VSiK}ErV zLStc8;hv(AqO(QUin-#GC7P0LrJB-$(oLnWmtHROEjv;6WqDQkNcn~GTNUvY1r-M? zzN$1<##eS%uB;rXJX85r<*h1XRcqDGs+X%SgRc-vhea`yG4!;~QIeez z_6qC`uaYjcA(u7e60xM~95_Cc@G0lPnH1Vgz!eJs#^Gv|`-FahN8qXeSJq5g z!rQVUxj?f?@S!m|*(E|wb~+amZNiZdkezGG3JNr9Vxr@z#m{2LLH+zwbIaq?W|k$y zUQ@rm!(FtHBn=3;ZMDf#!$^b6~i%hu=K5-OSG%dtO-L9~SQ8)a?;7f(+>QN#`wk7&!2PWtQX` zKVicq9^(&W4S{U@qr~SL#>AVbHl~EP2k@Q)I9#m@@%Po}^?I@Ta$HzgLPA(roH*=w zqx|GOg>#yxr*cKNN0rt%y!%W3ESHRT>tG?q{mXaj*}L_uGwi)ub4+xOJ;3I=pe3

Z=%$3AMJQjIz``+vbDT- z0DVrX@}=+S_4I;9qoEgkrEGi>v{J3cC{-Cb79H}Z7nmn;Ncv2O*R;a=u7OqE>%wLj zLrs_m@}gKnlt+WgQ!?^mK$LhHc`W=65zhoXCJYuCFm)<{k}!N~lBbUtoz5lLODN`$ zU<*j+F@d;J3Up{AX|NXaCS6G2BY8|O&WD;)D8=MT;7fRFj^u&^Ogtx6FP~K%DTsoo zF-P0#7gnq-T+w06A9%7SlJ_!1E!bNq@LH{3cyeJ&&XVGd3rov4oL&}hGSIK`<_r}N zE_!aT#IYx%c}d=)+4~me_)f{FOc8i~N_<*;D0ju2KCQQ=ex$#QJLmg0S5d9e1cX~6 z%+zsjptX8&W7n~J>-oR=a^@MfKi=orSyGNOHe+9@)k zb8ywB$S7bBnB*98nXuBT5-Jc#v}KiW4Br$?NB_-z+-cj)RfQQXg_f-LRmJHoh0#G% zbL*1x7SG6-np>Y@U)+?zmFNtnuiq5COhV7Uy;&Goc4SFbOwF>Iful=oF}2HTs}@yQ zG8R6uq^hqXDr3Pxx>9$0pN{VPH@5-JV6=I_^IqV&2)<#63&SZ4T`4O5m}q0N8q(M$ zqyx=C!L)?hfdR-oOv?BSYQjWSkY!J&3}=kl7@q9-ihDa}?zBX`sGVZ(E~{BLGo!wW zZpyDW@kWDJbNQ#fdN19(X)Cur(o{6qnOnN-k>-NJ>^WN;U)npCW;HytaUexn)x5jE zP#lS!)?2LAPn}V1wRWtpZhp2!DwuJ6nz7;REa@hv`#OJ7Luzu%y2kc{8|Q{KJUD&& z{c~+!pJ-TJAD7awFpqu|);;_P8#iTgmX^qJ*6bR!Tf%z?RhKMv3sL3w=bgS>iFgCP zx)&_6KtMjlni;?*SR@TJ`_OpCID%dNq&0EedjSb~@s#t@bkys^vfA!#7deeMdslZV zeY@?uFPv=T1bpVdPkWwjKK%4IzyGr#o(jC6-E`|K=_~Zt+v!X9jla(eZ)ES2CpJTO zDGl;x+EkmsKG{n+f4U(cAwTYJFN96|-50(!9WN9${P(3}$_w9KJN`n7MM;LEbNo^6 zl=wER05--*oaJ{y@Yqe%hcXFdPvQ5w!4{m9G5 z*QnF1_g^oHB6PjL<5J`0?QPO(#g9HR`udv;>|2c%GL2nmMQ<-}5#O>(F~L}3d? z5rN2rye28ndLFt)3&G0ate16-MQh<>0$_0ja7PR18=O>BU@nlr%dZy*Tcl*Olt{0b z>18~#*6ELE-Jl%1Q4JzbgMi1ZvAfIwZ31SF9hL#JXzDFtVKJ399<;SsLaARwNK|%6 zd}93cM{?07ie9OO^+^F1*6+n!1(moCXc%ww8!Hm%yTG^%-5j6?IB9_EFr&2^k?^Ah=(cQ4tj8v$$M_9; zYy_8hgF|3f*eR%(L8*-g6(IiFk9kYWL@*vlUoxGdjhv&_EczBp-xqWO?Y(_~1&%0{H?W)?+4jqxJw3Z>;TnrTwdeOzJi?Yq0*)YS2deq5CzV>=YTj8*EHNV>(Ol+ z%N?I`oWY~V2<}4^PXDE^?h@FdG@Tq(x%<3TFj!CI@FkkwKLjw zEh;f+ZLP~nI*zQHHhPlR*R5|)Yh1sts&r*b2KD9h`*ye2FRzaF7&!-{i`mK>z%ypV zR@ITKOycGm4I8;e89AG)f;@5ovW3~d6z2dYV=S=NWg&y{=1`j!M6^JLCUL&fpK^k7 z9CcnI$Jd&oIC1PccZR;9GfK_$j40~((Pp#X*g8CUC+Lt0-Ib1LuG*V4_VP3j6UdJ> z_$j@a0y+etH|H_0DM^(3l?IAH5`wq=+_O=Gp2=1v^UP%9C&3P1Owr>CqiM7W0Tv;J z^LD)beB%R!iw`Zz>U!))i*gsVRZh`}T5Ve6in;~gf2b{O-lKhmyPAB@a-HI8ljD-v zFMICx8Jk{vpxQ4Y-mDiRVk647ymD{-#;z=XvyKCbIjjoZ;%{SIQSdXzZ4tNl7$w0j zTg1cUvdeZD(>k(w>tY_}OL8N#9_-0#+Vz8hwp|Ny!t!UA)2kYdSqiC|9T7Ee^?lMp zYxn&v%g=18%Iw}cW5t=xReYAc=Yghy7dBPddLQo2UB2%AdM;Muc&BM|L0)%hw3Ih} zdrxlFz2EF@+R|-p+H^#o7l>vP;Q;#W=kB$Rp=GmIfg7O|SH$Cl<-tlZmJGOyfHJa}wj`?k*XjLyw7 zidVH~HtcwDaqp?kH8BN^?K9(37ccIqPtEP!{X*ZNB{?bW_cqOWVp%~#%SPYyjtz}{ z2NvafdE1+M?K2);TAbOwrmSYu!YY#?W5$|>g-c=3*!l7Xhwyxs?<=MS`48D2T8-VmVzV~<9dVVoaA7-mBh%o-SGJxp|Y$TF65 zp-Su~p4msPK{C$ZdS^Z`$2xt-nT0d9&CQN1n3XSO@fzNI;*+O3{HJ!W*g$t%XKk!s z@U4wCI5+lx`<^mxarWG;4GX_DT$S7VU|Z?ZrGqt&3nG1&M!zu}m)lulp)WPuHz&Jv z@YsTedppt_?l~a$9Xgp>`B7-oV65V(v(&AX&q0_l6Ap$41jC&g+A{(&uC4p;RNMT5 zasACPdxVzB?_;Y*>ibmp9bCxbkO=zXeHOfrg)2PYF&?m(V5z+7dg0JylZ9WezI*I< zcQaln)?;G%*M$)HZ_J*cP;0V%Ottbf(87OU5gxee^gOSnG|(~A7~&li#Lf1DC*IB- zr$b&|2I-u}i`RNf=k$6GQjw!WGH%asI{r((0z=XQyKc)!i9cx|-xM2(*-2;lC~oXV zybQT;Gc8c{@nQ7u8{_@+M-N&5^zdn*RH;2afyU<)QG2$X^3RU_6CLE9mpkbACOXKS z<_<}F&_P-)caT=A9hCMkzTM=!#hsSttj*20nT&5U6~0Yj_@590vzLf2MSe#FY}1s| zhK|ha`L!vwrn#*}nsDDBv7mKsQ+7hdENf+7b)r__Z7xa)&M8^(Au;9i3fk`JswgT- zIQ>FWSy6e%+7|n)qNv1-MB!_@i)lDy6qv>RVkm5rRgf;{G0P~{3z?p1!4=co=V9|x ztR%84W@+}xSJ33318bX&D;=(288Pn=Zh`6q3QUzFAm(zG)xpWq$Cj1Lv`R2@3W7a< zAqNDxILuRfKsuhJ2rI!d|_bj z=(ir}FP!ttmCZZu`%BZbAax3|Wu3(Jn5 zwxPeRaH?Od{nfhCq^z|AkvY{#g&PJJHKh3XNN1)kijB_*Gc@dd=l%zNvb{WS;E9VL z-GBJA=i2KUcr6?!o=%@W>swzO-S+37JiW58>cL-(Y-~}9(x#s31tJ71Y%b_*54ml48Krtw+nHKN|F9*Y@4VD9(E9gEU z(qGTt>zMti=;h13X_kt(gO_=c6Ahw)UXoG`;_%o8zQ`-U=wmfz9=Ma`-QQL8)6T`xBiX|5lr(DIySdN{h z&F5auowvEB;hxsivf=NnkUnjv153U!Sd=+?N2_#@R;+qvvGw`yNpFe6Pd(hQYoJoA zu{I4<^d4Gj=Po!pvli}~U%9+7$y~i^XZa2YTZ&weTf!~OH>=wo3T3k`)WaU~WevV; z`kjZ*&S5N!f3>*sl1Jo=ao}07heC0cAdd)~$oP2bcx=NzH0lS-0!t+l|q=6&h%E4zMos1^O;7@fo@(8-ASRKAOMv}`b1kI{*& zK~#i`7X61j!$?G2F^>yM(#(7;1Vzz%IgVvvw4wfD)Y4a^15);B`p!MC?Wzl{zJGL$ z)OeDnomRpM~Vp{ox*@axB>-##<&bDDr|0q5wKz~U!fZr)K@#mzfz zb$1@tuq)Qayg%5-=${@}ut-_|;CDk)@UGC=ID5%L z5!M<6nQWeo&e%TKpPMV)FwlyE>=hdxYTf+iL-hl%QSalm>lU`ha~wh)f$@bi2kW1f z#?CFN-TA5z5SJ58Uo;pbYfOG((9EMB?*1Xoy0R`Hp*Tt4#b8UKC3y9F(xvk|uYl8J zdO}_>dbYT@Ohus^r~h7L35*Ys^ulJD9#2)`6&7F_VHJ4H0XCr{q+@JDN66`rc7A7j z2xfE@7DKwZ6S(^gAZY}B;N2@99D5+<==iFWTOL_6ZFuH2Jjq3?bm-li_~0>9RBO@w zd-qIHgsNVq5SuA%&VVmWd zh7fvW?Q=`4K0X>=t25{l=RLiSzov{ucojZlv>Tt37E>nSGk}dYK$*s}3Yf|orYiVk zK4k=Yi#{?_mYFFCK+93KU?@viEa~Vv!!ym93WJZA z#&JdC5u(#N%Fubd@fegvBXBB$Z&j;O zC9)f*Dv>~S*X**hiEKN^?H3%Kr$d6|i7P)#1673B&p3~%4cu*PS*Whk@Cs)oS#- zR7{VXPwPZ2N8h9c2u4=vZjXos8V&dLRf9oD5%uEjH^pII{Q7NK762FW90@|cl-ij| zGH;S-R-=OM5xS+K`V2SKLE5Zf3bPY)1!|sZn29V?v|TH5e`dWEv|2|HRr)=wyM12t z62-jRBL=Zn6a*d5`is6Izux(|$YOJWpxe0KPz9B{FYei(NU1PcF0|D6 z;rJqmYR54R(m8NWIX&ksqv{`}~1>J2Gmvy}WAg7cVa2(|;uW z^0z}Xk6eFn%k|Mm`*LPJ{o#WG+ow?Mw_|(Q} zqvyCz$4PPcli^W1C*v^!@xt-GOkz@R);Vuw;!Z&iu(AaG z=8dZir7z4Z!X!<=e05vMcSWbY@8J#_Yw{7LPbwa3{tpm4^2w`@rc0Z2bTBIVKgTbd zl2agOTV0&|f8bZ;Q+1h57Vd0;7gU0BV+*@1JjxKyhCKoC%+FIrQ%r)31QspLfU2db zqpwff^!#EUZ+gO4XV6G1wI=`2fHx_(gXU&zt*TuJBK7KtyyzK*7Qtb<^gS zr>A68E~uGvd}E!wuBw@mkeV=M+PbH^s^*lXC1q4CtZjT~ptPb^9{YY!VLfQ6MYe`Y zr%5tNC9NVtF*?Qi5RJ~iuiWOx1}kt1A=ZJ6?gfyqJmxIZX4aLzMB6?pzOj2Yem%=uhbpC*l2 zosn))=jLAc-tayt)~w*@%hAJ_Z9WE`c5oWzF>!}Py|1IlEDjrPU-Js^!vA8d;WjJ0 zQ{JtG#RB>GuXVtrcTchy)kF)oQiHeo3YP!Tp!6=l-8*+zWrZI@vC;;uPh+$od$ zMMa&+RSO0|kHCcbF_hDbzK#oK=_`&yaMAICG8*J=;eU*VjVw^P7Ded1GM%3e|KGmI z#^`(<_^rSg!;sIQ(tMI%sOEj#4ZrG7R2NJhk{%`tQ_zahqE}>s8W81zrN_-Wtw?7= zME*t8Yy2I5r%wmzG@P`a7ai}SC5ZckdswG)Jc{LsevRN5a+nPQ_pYdQ6lv78N;rbT za`f5X%@dRClu7E(twI#3gYVYi4kO zEfBdNSY8R#_Ff({UA=V8$bGJPS7ZEVyAf4@6qO`rxp>jF2FQLV$LttVm=IrY@ZsqJ zoyN$C$Befl1q_;^hRFn?U6*zBdFW><`_pXg#}%*$&MstmJMl=|;bVe)ufBg(CrFp2 zPmP+>NUZs%9P6csm8SB_oQ`tw+=R4_Yit3Ir4WHqOphY&;R>kR__s{nTIplaz-zsv zk9ob$M5~Q_s)^n<1bCT|@hs{&RFXQ6OSidAPG9trt*5fyqmRIh2#j-^1V<`&D~QRw zQ^HQ#3w@%4_pCCrTfSg^vXB5<1AGHk{|1v@JR*+hOrPp*GrOzW`2}Ca-+*pSN9Miy zYgIt%$8A{kaqju=Ugcn63&s{fU<*Z`T7bM9WbL>O2TY|qf@IwL8m(xJ?_IN{vV3-a zSZdSq`yXx0?M`-lUbcB~adKWck6%p={xh>@LP;ngS>hkE>3bqns zNyHT*pq>=+3=+vcJR1^ZAaAhG@9wl>)g&&euzl&KYU}iptUyF8wc&Z4l?#p!S6XUU z&nQ~Zke3vy=Y^Mx87Ae)yq#W@QD$Si=P&E;X+I)YZYp9ld#BiRp=9nCcvA z;=bUIsdO6WJJt7ak7g3zxt$RgjRMDMWSPu%pqd(<1ve_;S?(`7A#(zewl;J;o;*G1 zjMQ1S^`3#`co3<{O(Z?IulE~RpzYqoi1fgs!nRIs>Fpj}#ilbWsm(SmHK3sPewj!z z3u0`|7+Vzo2drM!_-s&*`)FU3RsXGi%GDxqu+G}Dp~4^KZeNW7Nim~ zYp}c+kiaq|k!->Si55&PX2AMDt^8wEJZ6{h$YX|Q0t`6~J-MN|W=ciTkQ$rWF)h=} zOtS?3(AeN@oq)7(o#tTs#^wYsFJuDxS|AS&BDtJ*zAcUL{h&oD>W2E=5>8F912xXW zrJx96Fy(`^UnG{Xs|Z}x%2%^+l_HOZrP?h}$YT;g8#tAUh3zt_SxONC9pf$&qA|hH zVH#~rB;{FxKstt}tY9*0oXJGjA__9pxOeE(^z78guq10zSn;aEb80tqW>p}MF}eoX z;adNw(A0(2{CO2|X&oDz7L#VFMw%#w7A6J8Cuc=P#l}?j zmQ>!iu-K}@l0nqGu>-O8^muP=lZg zzYOy@+`Urp@1?EVwpFAp3(X@urpj2h(8dBGxjES~FKBtl)y0WR*4ZYQtCK=v zd?1f?VPVtf8ukvjyY%(e)cV{=FE5?We^HCD)uVSn3o3I7p9i`{xap?KRyQKtabndj zQ2hd!0g9ozfkZ)3A(QHi?Wms` z*o4&b(x5Y-;;_a@4{P;OlTj4Bb&^id(d&L*j@#%VmFd`uD}IuFBOB|CZ}z^x9&@{g zu(1sy?sY%rd@<_u)Sjy}b&t)9iDNGhajZsO-FHmVJyGl@QA*H6j&^3Sh76@41i~Q+ zY&=TxVe+9%SX&ym7&J)sV9_X+_$~9bvdYgslt5;%PvH2$^+>@=N$6d@p)9i^$xkE3 zFIv6cZmUiS(1Yjoe(@#gxocM~NuCx|FKT>Zi&D3J&{f7?(Tmcyxd#XGBkZl&mb&CQ zyJx3OEu58CRLAB+ZDDq^Jv@E>fyItjxS`~_C~Lhf^v16p|E=PQUj#fwx#OGv9#50d z;?4qN0$(u)Ct$!epV?5=39Sq@vHzZ}Wy=@IQ<@jL7na<2&$1L{MEB1CH}WS+#wC1G_TkEqQFt^n)X7+pT&1kIim8I5O03MW3srL;POgn%SkZ|8uTXv8^4q z#NE+k1>1_D8jO)ChH4n|T-}^!LO3WsfxpvGtvU`?%Sc$fep`jxRP8vJT*l?z%}|vN ziDi17)YA(q+-~ef5=HAs-gC%`x}z+<{3}*uka~3s1(& zL}Ow_F0Jsih3?{7oDd8MEzC(+uzGXFozBH3I2ZYz&V_VHXXK4q?vFjs43^#DVQl>F z3i^`?9)>JixcwMcfLm@(nlt~W0%YEW;yyDW0ZK6^UhAG0#-!?VD^in%r?{CgXEN`3DUY?lVv2nV!p~x1Z z(FkIAURPDsU`twJdHbxk^2E%UYs#muFG($uJ_FQk9t$9(-;T(4Mxwf_p&>`7*0PF6ysEHIiN57E7h z$*fO5*qj=i18`2pK&Q%_WM^g?eEghJ3IWWjau8EAq5ee49JFO&37v7<1=K2u4UZeS zXR$;hYO-h+C;g&9)Ce>nIz23*I4vBD7@Va)XWI1rVnB>Nnd>*;%iW@0>Nh(MCgsKk z2=TemzM+w!f{>KMc89tjvTF#{j#2K|uR6!wvqFtkxf|RGzN$J?Cz34NH1d!Fc(@BN z64=1lVhlX+95zps8S^nSnH2FFv|ghV(i8iKRnf~|a_q}Vzh_(V;In;P$XF`;olWB0 zL(2;uV$zpejXrn7R@i_(`?+IP>Jpl}i)y}tyTPp|SPqCBPxA;8(ha`SEo8`ZZ2uY_ z@4Te-Hu9JB;@B2LfI%PN#cwmobjQ2JGX5%b>v;Tf5_%>fPz~j|JL8U~s|ZYFypuRF zehC`}D{^o{Jp0MASCrTd*66wo-uy|9qgn&q%j*S^qi4{4K_}8}S}&v2ZqRXOk;)@# zrR5^l>n@qbwjdfC5XA362yAS~E6|`1Vj~+%HSqg%CY_JZ*lK0-2JF~D5VE@jfBnuF zrh62VY?euU;Z8PWxnU42U~hR;EQE>mIW?tolO!3v#V?Q;L|a9@zqF4=8L@!#881p( z;Yj&%diryn)WC~8J*AUuj(-~HEetADWV=v+A0XQ|p|1gMeo(^>?!Ky4fxAKF7>IiK ze!yjb!V*EQp!VxJlksQL|1zGqjodk~#AVbMNhf{jz5I_gy0M-9W;0#J2_`<3ok2wRC`%7m?OK|sI)pk_I8$@B>#mq@PAJA$}g&aqYGxlbI=3fw0C z7aILohgpNnR{peE9yel^xriNBVGZUyta=Lnmq}HYX%;MBv8)j$X)#2YI(F5{U|wM% z4P=YFiudP{b;M*2m@ZJOM$5RHO(k4hMOFl2jfvIsaG7N2b3vQula!s658>5Y;mb9nyDg4m{}rr3I{W9kfvO+$^bGg_LWi)Q9W3PMm^ zwxwjl#;uj<4Y?5pT}*LHM)juQdt`dvL|U(8LjS-k$$IoysBnh`_& z9QW7Dcwl~uK^}cJuF~YIX}GGE@xZF8*l<(i>MIX~sF}aa`UPH!X|`Rlkd-KnO$$`f zJQosB79?Xq)QD3v@6eh`m)Y*H6!XftkrBN<1i@Y9C%7%x{?6SYV+i3P$hc8sy|`KvQ#!7rDzcm$^amnOYGj; zo87SIr<-C?`5E86GhKt~D$Ufwxm8cJ-`kR^;dzepubjQABo5z8uV>ABp#9*wA3jj) z#TBhM+_U}4;h8sm|H0=aYd9{<63LC_(YTZt?B*Dl78gQq`En=c9_Y{K__vxLdzbNg zI+i6`5nC@rHoH3HSf)E-J=SX7e)4%%FOIRhVy;G6>acpPDHwAB&Jj4r0uwex3TaTm z0D7_-8ALr|u#$p$>==d&HQ!dw-AhPk;Y$R=EP;F@@9nsqt_e?N>7@bupg}Wc<>JaS zqqXVhkX~~-(W`do>7J%l)6-2@ebNd(NtH_)yB}Lw<(0^pxdTRNr>&_l&7Y$NQ5)nN zpVwSKH|UJCYR-{0rLjdVX_#uU)w$6{%O3BPF0geXj$B8f$!+X^7Xz8cR%_trf~HLJ zv79NJGS4AM6YLP?pjxm!7^GxToM0`oJz<0-XcJInX;nhaG8P;U{ zB5iF2yUXKOjD{yc!y&|hqOg~lN<&q?OFZ}Lhgj7;_)OY^YfzYBD;^j))_M<$PeU@!e#(28cqCv-C> zZSxzA9E@v(WUS*oR@=B-Rtal|ddweBd1y7H~) zTu5<0MUpdF?$AgtIIxPwemm$K=Ig=Zji?1La$%^Bae1AxNRFVi>^7XoEv{6ABwQ&| zybkP)1w5uyHB5`S{Rb8eas^2}Gt^vegj#vaSO$7R0QcY<4D@H{ET#Kc-odWYh7V_N>a#_yy7aL zVvlfxs}h@_DS|OK&avVJxqN}uZ2EvLSlL7%V+)TUqUdow7Q-Tk!GSTf)^#NYsqw_% z@wg(ZulZbKMC{!PD`Xz3%vF9?H@9%JZy6(Bnc^I=wIh}_d>$H%s+q*0=rhaC8zp5R zU%f1+*v=Q73Lz134E9)bkky--`>v8#_6KRUoC7MbVqQ*zSVL?)r_OS=AjWc01Yw7O ze;gNC+0s)m|CzPraLONFwK!0O5=ky8w5X`!iwmcRgMkHLRxQqT#_tQp~np+?a7D0V>Izz;$< z$H`U^=nwbH9* zPVkpr)gZTnwcV|m;g*uOXg~iccM{f=t45e*Ix}&}fy7yLaT}~kN<&{k0k%v?ZCF&`{#L$=>9H!( zjJo*_@VO6yK}x=~Nv1B#Dq(&ZOZ)rRHS{c%g*%i(f5J(HIp!Rxl%ucZI9}%ub7PBz z4yo15DqGF;g)tM{K|JvYHoDrWsYgtTSw$?TlU182nHnsop7{!j_oEfD|BJfUiv=ZH zaV2V{um-!IKrGNJ(WTaiskUix(*Fb}(oP+vQZ+KSX-Hf}W_V~y-qeQvDT2`uyhT$V zkXW3Y)=*Uz{iUFjOM6&sA-c4@CMnJy<2SR$z;*O0bL||zi93M)Rmgr?9Qx-!-ao~2 zwW2L!VoyCaHd}XMWlwU3gR)i$1648KTs{9dx-=s^BC|BQp)sMN+g8$;5`f$;j@KZ& z%NRGUFuOHBA~2&Nhs$coj|@q+PiwRQiAfciQ#FRRqO=)B(eR_fu*ri+ z1^fo zge(|`8c${pn?(5g2+>_{r9&J0FE-B$8b(wuAbwWQlAL=sfUFw5DZtyP6OJQ1w?OZ& z-}>-|W!xuYsapNHtmgcw8`k(G3&VabD%7Gb@l)`Om*-aPa#Qo7U8|?wX&i@YPMuOy_ZX zFwdA@tQ2Z8*~r+1c`?!PH)DcBV`D>uW4I>e9K+^Ih;*3d;t^BHxa3eHb-=2!1(#xy zu#zU0Y=(zo0?BfdmDk%mO7HEt@q$lSa#T_El(eGgT;H_V!j#}CDFxUr!e7uxS4_U9 zVp~{DuuWTYf6uw`EYd5^uD>}-D` z>=|OimQ5D;5>474^8!51>%Q&Jane!#AU7Cwl;;g+9nH-DJ;4_sA#(@lz;;2MLB0!S*eP~rV<{R0g)ViBYQ?}SVG;>%A96)9^lG)D`Tc))@7FWRz`

e}%DU~-VG_lZcG;)j*PZ2f)7mjyo7G+vojD8Vwjv9o9fuuKcXPe42U!0Y_59Gv z>;b#H=LZWHVz~%GV?@RS`Mb33*NEarh;70k;B=Z(c@sbGM)HM5M=J~ljt`&}SeDiZ z(q8ueUE5K5a})91PH_`x5eQ^hv2V1BGj&fNx89z#cvawt_mPdG=Wz@(r zjwvLzZ;G2v@g=^IOMAfCWu0TCYduDFeC~=n&vvp}@DUt1AsZ|d-_G&>3GQBlB zvBOKB;5f!@(KrSj=cV_wdVeG}RNUUnujo-@VOC{MKrT(JdgR{YN)bj`-V;!n(47$qzT2WBp=Ot{LBCmx$( z;}!%9Hjh`WLW0S`Dy1k|NqCiOrze;hoY}+9$QV5TK;4S*LTOa6c@|2qRLiP4PM^ML z-Od^D|I#K|#mzeU`v*r|b<`TcvyNIWx90S$+IrqZ(*=8FA44p&MCQvxl`j`FzMRx< zq@L}JFO~bfC$uyEQ`!w``w19oXXWR^{U#c!XX|Zv{u`jd9*=gT+I}4EJsS3W<$iCq z{bjVT)Uf9(?FQBkl2t=4vw9R?*wW(>^-0lKcN)lf@Q=%(n{r1?AkUD_J$UW2M>Ap%j!W_{N5KY+h$#Tv}|c3C>2lT*oNm ziOpLkH?G{Z-8iA0;ZM2WdqO*VzS8bLp`GDXX*aNTVCWz<2;oAOYLn|RA>{o*IIW&0 zV3!a*6~d+Iw9O=)lIo50`_l9Nw4I(6qNFX-CKKH*Z8XuHbce6Bk#5KHc>J}G!{R0p z>ASGWirkfiljg1J`pXiBO}}J$`mx9fl4)5mOeO?d0bn{y3HZth&FX>=Wm_|*V~xNh z#APFEFcMMo@iNVoFIJury*0)+s~eSS&B4*CLwax13l+6r&#S562g}c{RO&W`k&2SB zN6JqRcoc8ePWzo!{9?w9hm{J>rn>XS-!@&79v}H_qflJiBv*1S+WvmS*FUbRQHnW1 zKe>KPreB^)KXCY6+Ktq+ozYLZ-+Mwkqm$BZP}>h+{w|lFUnD=@NX>sHttxgEkTT!S=H;#;eTI6!`ZhL3>X$x`MJ09OTK;146FHgi(0id*BjGY-yUMk_Jp^Z0uW6o0*e z31`L=EPZQKc6Um~MKVG`Ec0$Whx(4?0Ys18dn{vXDaJfKV<&S&O=e%dE z+b`~nFKbJy?Qbb7ueE06#7Eg$Dk|4^WxLk`tgS0c${MYfghHEbdPV8e_ zPc9kjVR`5Kv1r3_3%_%J19(KPr4dI!^D0JLQb{Xh-np}VJ;kcx`2EA<_kTb`$J^(L zP2=r<_!sR19_>});qm)#u;*hAS7I-SHrQLuuozajE#OJ9jv8iy)p#V2rLzXl{b-|E zL$qQ6V_qX)l+l*uQ^KeKZEJ8SEhav{VWMOX)g$q55 zkci9sMaVp!Eiy2-TZx#nz0!=XA7Li}wic?yp@dnsnI+Lx2X8&kV`;d4pdx>6Lw<6Y zRwHm}UEMv|l>^gLHAZXs^ycXn>&(*F25gGsZSLDpv%Dcqi|r~J4$Up;vIhwv^*!sP zXQf|CSElAoPp{gtsLG4J)VyPHrRn6ydrPOg!rVTXPV|+q#+KXpwXwMJ^o_Zdu{2HOLIeEsK+L|@Z$x^)G@PXW>tPoqz zu6Axt@tR}3LQ++CPI7r#2*?Gjwn~TP`krR|9T3bH4+qY@0N=nU(clq=a@$GjPdrzC zn8sD&+paxiMo9xGq?k*tonsVpDRX>oj+;wLI0E7ti|@?glg%ZM@*rh-K2qMenT56N zxzIxHs7z-2z0?1LvLVnaXZEa_X^H>RTpBD~^3eZTQY3JN^(lU|ccQt(=9pZIBhSfN zWlrMnrrfQ4{e*TlCzboz-&t|pA1}{IrF}qc$L`P6EM?a{to zZJ&?!zl-eo%Kaax?F&GvDf07`_5s!o>a{z+6P`flbE< z5LQhqNXL%0$XbgpWmUs$yIUX1sKjg{g{GK&plL4VotDq?$Clh|!pVzKa07*X1rIi0 z6XfZSmp_ISF<~UF(LS|s`1>1bhP$##)_rRrb6{?bk3KMahV9VuS3iu_rZumhvE-TM zdDgbof{oJ&k7g8jb6#3gk?jeQGYEU)7v1;tyeFkE-&|u~ysrzJTg{BBUfsO><;T~j zKKb=EY`W{6zpkgKbw9lLvEKa1t?^NYl0;Hd?8(2_q;EIb3Ra_+ad8||%fdnM>_ zw{}KPcl(C%`x!mm?dRvOU9??)wuXV4ynm|WWB0{6mB0?iO*+pt(NECO{O#32JV?!bnEsh!L1>*r8f4A;s zehE?h|COQadEj&NwLCMW`eRxFL;<@R1QGG z91EhyYX(ym!{*wQZdJ11YuBaD616(t6)8$OymWs`5?7hDYMPQNPYYP;d{VsQLYpxy z`9b41vmc+Q9P z{P*>vZg2I@`cWn2iPeuXx=blFyu>RCW4%Oz#p3?It42b6I;FH2|T9GN)i{dSj}QCBqF z)}H5<(XxK>47pk$iP#2GN+e%NIA_wy4{c2SLtC(1Ah|{^K4*MSIF@%UCoa2phwDee zKxjikUUfuT?i6{SIIW)T6GvAD+OwidtdS`Zeq#@g?-?h3E@(o-iwon*?PPKThqG7s{Eyhi9yG8Q0`DF2ZapH@Y(@1Lc!uq% zmVm#3HmcYwlOj@+%oER$G**WvaSTgQVVnOdu_@$R0l_Sq6Cz(tkqt>tBx92}Wg|8u z@yCqw5D9N)l3X%lv78}h)X%002A_Eh{0B6aIFH@+}rjJ6p(!)khKVcm}N zjG9*N<{5SPvVT@JX>iJrSXfHgwWaPZJR@6K%=uvonmI|HWx#CQTK5=bGg#h-lPhuY zPe?*WNNDK9!r#dS!pM@W+ff&oYqcnoNjtGL*u_qkqU;nuenL5L$mF77o^R^*H6~_P z#LII{xOQj7Ftcr$Jrs^LSC75YCix+1Aq}txaRCQbF0xc=D?tOcuP5PIJ!gP>Z!dS< zvC4pI5hI@AT7;!Y>BVLPti~fiizQ*KY}sfW{XU8`W;Mt=el@;@Ka8O}H!p)h_7Agj6#HjAvw!g4 zQRf#rlQ@DPXg2=dpgL%EPPyf@iduJrn=vQh>F#?Sa`4<(a9AsIE87vAc?*gs&)ShW zz@j_jQ_nKK;e)^8vjyYN3QY{JQh%L^bELI!eVpS+J9kNN1Qo=rJ@|tqOTRr_*8BX; z2l`LkQz@3WmkfSm(bntVoL{>3xxQ^59-litC+X$E7dMr+K6!Q5MVkA;JxzOmzKIKP zT-<)?@#eux(tAJL@#_OK*8G||zdZhq?-$}L@O{}X)V=t-jOwr_@tm4C=bplDS6BUs zxB3>abga!Tf0yW79LbHc*1#-i@{qK0gE2g09a8UXgU%kK8{X@6SKT@n?P zH-G=ncky@eX=~RsCIvUI+S4|DWwoVd%L_|t2dblkoBFqo{i*Ni)#W-dykekk(eZU< z5#{~-^KB0=o96Y?e?F8IYVY7bim=tDM3)!at%*MI33qt0`O6N?pLb|kLH@jr6-U21 z-JRX@Kug=sdA70GS%-hKW#--`1>GnA=kem9Zae>0)utDg1(h{*rA3!nBbdF$_O#kB z^D$fDXS%~z)*W)KnyfoISUYsb9@$=#_rTJyxS4XlNsVQ&``;3o9jDxX4SxfZ*>_6Z zjK$NGxS4^)&CrfWi*QJOZ?XDb*z;&NfeE7J_s&({dsu#sa{mQ9N4ejZ-u-^|cYWD= zmHSygmHSN-?q~f}o_~!Tl67K`v`?rKcVZc0yiUzMJC#LP#gJgS4}FK8V>^LOxA!f$5o=ZR^{-mI=pJV&B zvcK^w!i6=6w3A1N%#O_YN4iiGAMZ@O-k;809Ic?gCNpYwh%I@b&8QMM5-H)$? zkmM`*!hHFaw!*%y|C&nAg>wVU9U(fyA&tcu`x%IHi1SkA3tQ)m4`dTTHwnqx!jj->W8O zlAimSp69;jm3h~|o#*;pRo8QwC8tm5-hx9Pd}wp_N51X78eY#hwDM zU-JB&d&%S1V~@9cJr(**+_zLWqwqBAcCm}@A3g%6exHlo+t-Y~^Ru75bM!Uce~0=L z#_PupAKd*nF5$CjqlOM0mG;^0zn5RtU2r=6!mFX#s>$nnRwFKVsJuoLUO7;fj8}~O zwUbHrczucSJUN*5ol)4Y+(Hrg22Cf56XLQQtHN|BU^tnOxlI8tPu5 za#%Z$pF%$zH=)nK*ukH@?S>o2-9F~}p$e|oYhdh<uT2v;51psqX#_aqYTX&NQFy@;wV3J=UksfZcruUe(^xC!zm8^c#@W z<%A|rG+v;EF8=D`uX~Nuxag*yx4Q4?qq^Mq>4BJa^)PPh;T>!}q;w~3_ZB;_Mn}tb zI=?|@ZglsgkqH|z_=A(^Vx8WoYpGA)n|M!)ULzCwe5d%@;tMx?G5)3rGjF+mq_&ml z-RH&|?q1UGiw%ACHDi2y!tZ9rzWz?kga=Zu?X7(!1}s?`bD>XMU+hQB*x1D}ULSd{ z|LE6aei-x4oiQ`z9xd;qv2izi(0#qW+3UCA=zTxyH9NE_ZkN0_T+h8#CwMJKXODO; zdli{P%fO*GkH0Q9rq3Pe1LTB0JLUFU?!V`*>$M;p({F0Yq+5n-tJ|2U9l9qpK5lzg zp6-p%9r>(jJvkclNFN}O2qj;UY25br&s08b7Y8fO^jF`NXZri)x#5Z|zxw_;TK6P- z%uHmztxNi$A1wVfzn_vHUh&`$ASmI3%X6UDJu$=KEn1#H-O~p#r@&tCM`zjD?XKT`hOug(1NHYhHB$Rf#>v|ZUzeLxZw%ek&)?MCGV1!! zO)ZKAdH1APIo!p^&IsMx|H6)Y7WUCs>9Nc1xv(?#Ic+-_`ngm-=ECs!q_}sEyfa?k zT*Ul1Ce8LN6jXPWajfRAU43xZRH>(oU1o(c>TSAS_;@i#GXS+}m-Ysg(w{u_)?a^E zZ(nM^g&(fJx2g0BL*^(?mrG!OP^7p?iL2vB+^l6Ui8EMBkrUU47Ol9jGjyd`alJzq zc8-}CS`_Nl@4|nbh=4OL?2C`9h#e|Z(<7sHg_Fb5g|A;&-b>$L_lvtQLh^?GMSCDy z-q2r!p3oZ4Wc8W0A8}f>MPuLPh#vZjk<;dl9k*cm$dS_*Xd!ai$e6{K|4UaTyJDmC zD$oLncD@I*+bge0Ihi!4Jb_MiE?|PFZqPpE>Z~lPvrC2JV>ew%Kn~rfL&W=^@#gL zzl!=|^rhe*7Nl~2FheY?76bR`?^pD9f&Q*_?{vjhT9-B&?ta(w2M4db`S;}Wrw(oz zvu(n{{HgB=mgyjw{=(OP|5WiWAO8d5W6IYm_*&@i-{&#>F7MzEa0gcVyr_(0p3&I6k7i0;8uy;Dd5=5m_&Y{*yFC7nOa6&b_fT1< z(Q2QsO4sl2SrK{9p1;$qtka^(>J93m--VDVo#v~({|WZOG`qilN@uK|^o zB{jsFrqmcxx9HmEb z&1xZ_|DHK z=Rccucm6{&$K23cUoQ7bS(;rk>&sgUr@b2U_c49@?ufnX>7Ullb%2gu@z)F=J^Y#n zzWH`_pZ<5Op46xRwUz(v8~3xtoVIGUi`j#J^ON=04M~68%THosZ|tmI|H_={Ce3}j zYUVv`zQ<>_XO7$bxwnHQC%a`2y_y{;v?kWI&wVUg#HU^}s<*#F7?B=(AhvhtTKRa~ zJ!E?9g)^~=i5a{9t|501=pFl9%s2yO(SEMtjJJnBR;Hf4BO9FRb75*u2f(`07Kc6IcG# zLnAL_$N{$@dG3E+J!QfprGN9n;@t23)%=Cu_|9X=p@RcLx89Jo=^y{HWbaecM$F3o ztH1y97dI8p8+ze*?>Gfo8$9o;TUO@m`RlyM z?zjD6f;MhIt3Cc68v6C{sp;uAmX*iF4bDq_1tX?p}&p6sz5RFGYWN&q_m&21F-L`tArak>>m+k6#L)c~Aq9???+#024 zani1M9iF!(xV6wG?7cN2J?^oX(?7ZPC-1Bfobn#$=kJXFp%3{$Ui?>;!Lca@_q-2& zPZ{3-k&d@x{|`Uxrk?$q`znB#zTuBci23cQm=U3O`uDmn_P32%#)*yTeCMCFprZo( zZd*=>Og^y*1bpA2Bt2)A@dLKYh^|Be&sgp8MUU_BlQNb&aBiy^A+B z$LK&a`U3r?5o%m&Tk`lGEC&XuV{{jrm`Q`af8k93(CEIsV_u0>gbevA^oltdKcG*{ z5BqCX{hcTJ4eBGinb;>jR||k%2VSC0LSKmevh?9|`VJsn-}~5a->W>)&-(AAF?b0s zK~><7_>=W_rvBcpzjx~IgRT~>2kEo)XzS={9MN|)dLzRovt8|iH6!_&YI(QIUO22_ zY<22`GtxeD^PG80Qg8pW$-`s&+&O3Y_?~lP9^~AgEq|wE+@c5Xzxgv0rrtkp?BaXI zYk%Ridt=JSExu=5pV%8G&c1cr!Y@QGhf>Gfzalkt#rA>3(mqC7qgo;hV89%6?w<uC9D*YM9=*D|%GOE`i#-)$b74S3q0%Gv{o{hbA+~OPi4^zN{<;#|iPhFt&vOCjO zEPbS3_xUd^Tc-2Z4@i!lj}30SDPh#OQDaAS|GjXcJJtPH8ud!h9NXDzmD;0q%==dx^-$Bwb?dCy@UN$3RkBGrH9S{BYza9Fwp>Z)6 z-umm%)|d

xOQ+@M278)i*DUjhz`9e&OdsF8pf9gH4rBEF)ZExZy{^@J zs;gOvk$;|6bos(s>r&qT$-At`E$GHj$WQv7`rfW+hW&>2i&@&I_d5&kiTPRVJGWdO z)3BH3R|n$yXkWdecaEsHjnQ0UZtQb?3_C!Caotrp&k{Q8STs>sS)!IKm?RCi2=>OL)^bh`A&r;MD%^5xGwRXj-TAt{L>A29p_m6+Ak1f@K zYX9R4>TgG@1MRZ^J+CgmqhfYXoqco9XUF|i*)}u-ZBS(4Z_elML=DV$m$Bi_l ztMpA-(Y0T>F!U=pt$wpMF7CMj{XVy1-Mxt;ZW`8CaT5BajsM(NmP}6^7`y#lz;@2(yX4sNTtdH@kAH1J z#+q^RMBYBGFzvy=%$%Xvl*3{!?dBZcf6mfPIa3ltzxj)}f>7V|tZzO%$NC)#mS3m{ zj$Yi{RY%r3*U>e4($N(I=d8NW9J-eKHY=v$w)kIYe&M=Q$HRStySKuBJt?uzq5i%5 zw#WY>zR!>2Pw0-AU}yaOF{|RWucjpWusu93U$nn`50B6d-3$0Vn|Q?kMb}dPrA<6S z!G`#mF=g@ZA1A#g^s8PMhQvEgdT6@#C@Q-oL!T~v48?VS+FW+wXMOwj|Fzba<9~4? z{>Odv`A+aH{bq6e8)_|HhqaG*G@61vZ^o%@43I0JwJv>vVzI|2#BNc~9uxY3#u7t* zH85Utf-ND%Ee&mni+vp)_bR`z@{1=wdwoRn8$96}eUCe0@30*|8P+x^{*9eGqxVPR zejW3O?jOwk8cZt}-sITvhZib1z-YBzYcxye>ut)t3&+nIcU|0&{;T7Dz2N>K*IYgL za}QiMZf43Cb5!4e!A?y92ZbJ@-*p+nuQ$5(W5t-5T9+Z{6~-h0&j z@$XDpy5E&_|9#IpllZ&4-<5R#eZO}md*g@bTbRvSHMI=C@14cJj+xkJV6VZ$Zo6UF zxZ7{P{+bbbXECVPkmTF0|E%6w#E<^qcNV`^UHuY$NkV`7s16)Lw|kYb4{cWLb-$pv zsXGz+Q^))KpnrlOQ7inei{ZV#7OIMSPNQqf(O*4WwD)Df z7gH8`s(-@ZVS{7z-S2~O&kgK%vo@d8_rPwF&LId^e>n&xO8=GHt=O|JGcYf3GM=41$Tpcz`fu;a6fne zY~<eO=LvA05Sa4>#c?*8^91?k8qIk^V9pZ)bDj{G^91eC;+)NSLSW7l z0&||A=%p<~$)V=Lvy1 zPYBF;LSW7l0&|`anDd0doF@e4JRvaW34u9J2+VmxV9pZ)bDj{G^91!bMsuDJnDd0d zoF@e4JRvaW34u9J2+VmxV9pZ)bDj{G^M1jIizkG)fVYCFU>bP$#Wr1?1>OtJ2Iqqd z!5r=^0G|eHz>Q!nxCyKSzXd+WZ=VNW0AB>Rf-iyFz?Z@8;0|ynxC?w0+zsvl_k#Pt z{on!c``{s-{wC?e;Ey6Vbp# zG%yhjOhf|{(ZEDBFcA$*L<1Aiz(h1K5e-a40~67}L^LoF4NOD>6Vbp#G%yhjOhf|{ z(ZEDBFcA$*L<1Aiz(h1K5e-a40~67}L^LoF4NOD>6Vbp#G%yhjOhf|{(ZEDBFcA$* zL<1Aiz(h1K5e-a40~67}L^LoF4NOD>6Vbp#G%yhjyef#h@H@Q&NdObUffpC+%!rGJ zgtvgVf~jB{m@XZ@D#!pQOOvmXU)6fy49+Ye{fKJzs$iMMWLE__{3@6H^T{4}uNgACS1RPi$~n0E1~a0cgdxhD*k zf@S=+9IOB0{)496SM@CeLQ@3?*zK-3qpGrX4)5e3HQd zL-CNL*0)$_9Y{h4k^<{MQeYiO(mvxxOPYiZBn8%iBy=DN9Y_kS14)5(APF5vLI;up z>p+rPqVu;7Bn8%iq`*3mq*m!O)`29oO{c8`Nr81BDXp)Uq z9Y_kS14)5(AStj8Bn8%iq`*3mq&DI_tpiDcbs#CQ4kQKEfuz7XkfiqFtJZ-ewUotr zW1`W7u&?qNB+KozERFCgF)&D6Z5Aex9>hI2s$Uos3a=bCAlb34!dc+G;B0U%xy=LTb7leQg`^jeUJO1AE>X=6692|!;1|i?{ly^p zWxM=&lsq4F4>CyaGJU>?G8cnSl3NM)tmRB8_pIYg84{I)6<{S;1y+OWLHA9ARF6jY zO@maAM)ysFRF6jYO@m}z&A{{E3*d|3R`4Zo8~8G~9ozx#1b2b2g0E5j-K6(`d%=C+ ze((VJ9q#-t_&xA-@F46pfQ`uVeeQQ(Hb~akr9BKD;ePjMgJhX~{>Pko8~h39{|Wpl zcnS`iz|*kW44y%kT1dBoZJasFo$aJMNS_1Gt5hRosf@N%BV?(Z?yske2og!#MvagL z8q=k9Bh+$zb;`w)!l^3Z2-zs(49?#Lt^jk%AqTW13nAdrj3+Mb9t-15bfX;90N(JSQB5rj0_=Mxkk=(6mu# z+9-|I+H{XKZ4{a|3QZe@rj0_=Mxkk=(6mv3HEmR2P1E-xs*zFJch+c48>O+C^RcFl zLeoZ}X`|4zQE1vIG;I``HVRD}g{F-{(?$i>v{8XIZB$@Q8x>g7Mg`WiQGqpWl*U4B zj=?5vNx`b8V9!$|i_hGsds1Z2jl;ESnj-0Ze$2&@LeDo-7MQi4UK9|oTU%gD1FtN<&)DzF+{4|)ca!uT_V@n;I-&lJX=DU3f;7=NZP z{!C%~nZo!ph4E(!Jl*r46h@&bj6zcwg{CkHO<@$85`2d{zYBg3d>w40 zRGuHDFgi_Pbea+z;i_jzDH@T^5!#NWXe??xuV0N3=O=`Nz>#1XSPoWzm0%TE4Xy_p z!Sh0WldgIhtKQj|2oBWfYpil~Fb)RBY1HwG&X|F58gCfWH8UNj7P>+>S@vX{TId|%49+aM zSfcbJ+_{XjIT@!>oS&6P{`sIe8K+U4&lizHF<8RYwWLeAx{fnuX`IFbMzb_d;{l^t z8mIAq(JYNqyLNdF^7IDKT#b_rG)B03iaeXZ(>$daYyn%rvs~=}&k40+B>haqj%fx@ z+C63}b}SV;mWmxq#g3(7$5OFlsn{`nb*nO@V#iXkW2xA&RP0zPb}SV;mWmxq#g3(7 z$5OFlso1ep>{u#xEEPMJiXBVEj-_J9Qn6#H*s)aXSSofb6+4!S9ZSWIO~8&#U>-ez z8T16~*aWQB1X-;W`W*aj^?DOzwT$88*Py$sLV!NqzM|c zIiKgj7r+<6t>8=GHt=O|JGcYf3GM=41$Tpcz`fu;a6fnew9T2I8L^-HCU_V;3VH=* z0`uPq%zP(cZPKXmG-^DJ8c(C=N~6ZpsPQyvJdGMpqsG&y@ib~YjT%p*#?z?rG-^DJ z8c(Cf)2Q(@YCMe^Pou`usPQyvJdGMpqsG&y@ib~YjT%p*#?z?rG-^DJ8c(Cf)2Q(@ zYCMe^pUC`TA~TDL%q%7{r_QBFMe6Lj5A*(ox^#rRi?92lrFA(=ac-_>z3)P8l|g#U2?aM zbXrF`ts|Y*kxuJKr*))@XXj7@ZUk$=O<*1PE$}(Y{5<#q_#(I!d$cYr&= zUEr(WYm|96={?|Ha38oIJOF-&JHHEl4}2Xwh`bG;TU@$YoNM6_rG1n1Vekm||A_NP zIrC#Ue;fP>-2M~zQ_$8w_zGd4(PY>>`sRXQVtbXKdOj0cvJzAKgS}=OFFiEvw^k`v{+LzIzg$!o&8OrUD(w@<0Fr&{vdo!5PXP~_q zdY13;j6Q=IeTGJWbCveWZHCI=tDezk(C#vr(Pz;5GH87n%;>dluK8ewwAbhveTMYb zd3r{lp;bzs@r*u0Yn4uWMxPNZ1|J4JL&;!9pTRsOBk+tqgBG2^j6Q=IeTMXQv(CGX zXE3ABU`C%2ct)QgO?J+n(L2J6&v-_kA+7cq&*(G6r_nR|4Do67j6Oqr8a<=Wz$LLZ18??F89v^=W}KO>4l^hkzP#tVbZxg zJq#9U^?kB5%J?K#*OD&fs$1n`TIFO~GX1P_BpxO$ZI zkHNRW)5zNlo}orsNVkG*oM{Jbd8RN=nZi6}3iFgHvNi{F-t&|xjMAqtN}s|geF~%W zDS_uHQ?ydydpu8>B0FI8JY@>=lqs?RLzMPBWr{3-(PQ!{vH(8sdCC;Ebf-N}nWFaV zs~&+*VFW&f5%?5F;8PfZPhkW;MeW5;@jPXU+KBJ>*n5gr9-NQoDO05F&e`*nDbjPJ z=P6U9;lAp5$`tAL0qIDbdjF}?>h;0|(uv?zobkHEROz;_4gzlkhk+hBOogkdvc0~? zGrOrUHdQ)5Nomh+ro!7)>Hi$1XMy*Ev%&i>X6gJ~a+n9s=llZF3rQ~`y_odFq`!Fa zpnl~U&{VPQl6d`Os@OJ~?Wtnh=ZmxwHC3&{_$0se>dI8vTc0WA9m}1)YnwCDNFr4_yYJMxD|W}+y=f3ZU=XOJHcJx ztKe%qeK+Yn;9hVaxF0+Keuq213w{rL9c%=@&ppBN-^Exw4t#7MvxI9m% zp;yz;sA*`_G<0bix-^Y?pQal3{rRA4e41L8&#VJoN7JaIY1Gj)>S!8uG>tl%MjcI~ z9ZjPhO;bB^4o%=$ume0NoX$vNI%ACKj4`G&x|q)BV!AZEP4~M>($^Hs(q)u8azXM8oe4kLn|IdLazqTkUsdlSA%D0Cg`hP z4W1$9jb06&A?A%<4W1$9jb06&A?A%<4W6MdwTxa3o}t}6j9v|%!RTcMqn8=dBH!=T z;2D}Z`l?rhXGoWfUJah1Iiu05!80^xG=dQa$}1 z&2xQcF6YBwDR>%e23x>Z;cW7pO`fwg%Wl&d=Q&%mW~ZI!Z1S8Ac^=-Y1(pSLpG{eX_u-gvH=m&?A%kWHF5HukX{S z%)fGfeV=+Oqu-6*CtFdZtrWdF^Z=^_53oM)09x??TJZq${Rf!uKcL$8oyFi<&}-KZ zP*V?3Qx7nIe}MV>1I*taVE+D~+V2VN#5fDQ7n}{w2N#0RfzN|4fG>hu!I!{o;LG54 za0j>(+y%Z0?gsaOd%=C+e((VJeeg~2FnClbPbMjkEhJz zDf4*BJf1R-r_AFi^LWZUo-!Z(oR5CaM?dGIpYzer`RM0-^m9J?IUoI;kABWaKj)*L z^U=@w=;s3RTtJ=+$a4XCE+EeZ|lHE31TNcS~ z8?7yiWVemhmPNALMr+F=*=?h>Ws&T*(b}>|7TaiTStMI+bdS79ZOZ8WcZo)QZ9+@5 z1c{btjOR0cTeL*dbqZ&J_ky#*`Ji^Z)K$L^TB7liu>!0Ft3bbbT%wtU@j32)9()0O z5!?#C1a1Rg2DgJdz@6YO@Kta(xCh(|?gRIO2SC5&Tp~7H&Nsos;8DUWuDjy~i1U8b3%(e=BG`duce z{VUh+GD&T8{VtQ#M%V8$No{ofE|b(o*Y7e(ZFK!Elhj7n?=nekbp0-q)JE6uGFE7p zQNPQm-(`~B=UuTx;ax8;oAmNR}^&iHM)IPpERzr;`FQ-cT>Kbc1h;}O zfgZmtXZ*ID@!N97Z_63KEoc0;oblUo@#8x^ep}A?Z8_sNMV#P_$8XEUjM3w_<>JTb z!=T4+%Nf7rVB2%hlN>C34lD3E*!di^B?oQEVFf;i75E%h;B#1k&tU~VhZXo7R^W4F zQBMRp^b0xk3pw-xIp|Ujx|D-1<)BMB=u!^4l!GqiumYb${pPR&pTi1#4lD3Etib2c zkL1vgp3Rk37+(ccgt;y*QuG)JxSDdfV&gF4R=b=k^(j}+u zo0q3rC=z;1n1@E?p;39#C||X2UY<1SfN(1L*f%dv8s+o$&C8P(8SR^whZg0bMR{mZ z9$J)#7UiKud1z6dw8*7$FOVlKa@xLmdD0@Iee?39Mb6W{d3lUK^Q22o+cz&yQoGC^ zf99cA`N)`$jQPlzkBs@qn2(J4$e53e`N)`$jQPlzkBs?hHAjPdWXwm#d}Pc=#(ZSV zN5*_)%tyw2WXwm#d}Pc=#(ZSVN5*_)%tyw2WXwm#d}Pc=#(ZSVN5*_)%tyw2WGuiY z6d+>(HlYBUP=HM+K)M2?E5IfcU=s?k2?f}M0&GG7HlYBUP=HM+z$O%66AG{i1xQ+e zqyZa0clzu9kxpU?o@u zR)g!odVbYNIzsxq(#1Thm}eEMHhsp=D&|>U86T~*pH-|H@l`*oST$nwvx-$CMn9`q zHDdI$ip7u9epa#MD$>6Hwsj@6krM1c33i|aJ5YihD50g4&{9gU10~pj66`<;cAx}1 zP=XyO!48yQ2THI5CA5wbT1N@3qlDH`LhC4@b(GLLO0WYZw2l(&KnZrB1UpcI9Vo#L zlwb!+umdI7ffDRM33i|aJ5WM>w9Qi5W+`p6l(tz)+bpGRmeMv$ zX`7|A%~INCDQ&ZqwpmKsETwIh(l$$Jo29hPQrc!IZL^fNSxVb1rEQkdHcM%nrL@gb zjdCrK`|DELW+`p6l(tz)+bpGRmeMv$X`7|A%~INCDQ&ZqwpmKsETwIh(l*zj!|TxD zb?ERqba)*)ybc{+hYqhphu5LQ>(JqK=H4zELp*P+Af(BXCH@H%vO z9Xh-Y9bShHuS18|p~LIY;dSWnI&^p)I=l`YUWX2^Lxyu@yPnNMhStfZm>wd3KmPzVELa$GjN$T}N zuTPe-K3T?kNEz!PWvow@i3dN+>yu@yPnNMhSte$D-s_WPtWTD)K3T^4WSJQARj*H$ zu|8SG`eYgFlVz+=ma#rr#`yu@yPnNMhS;qQg8S9f};?w1{w`v({FJ-Jxma#rr zCWd|W6jz%-uTPeVTcg(}%fzbD>yu@yPnNMhSq`h^uv!kQ<*-@~tL3m-4y)y`S`Mq_ zuv!kQ<*-@~tL3m-4y)y`S`Mq_uv!kQ<*-@~tL3m-4y)y`S`Mq_uv!kQ<*-@~tL3m- z4y)y`S`Mq_uv!kQ<*-@~tL3m-4y)y`S`Mq_uv!kQ<*-@~tL3m-4y)y`S`Mq_tooKq zV^;*_uv!kQ<*-@~tL3m-4yzTgS^=vSuv!7D6|kx(_o{^oSgnB73Rtax)e2axfYl0E zt$@`ESgnB73Rtax)e2axfYl0Et$@`ESgnB73Rtax)e2axfYl0Et$@`ESgnB73Rtax z)e2axfYl0Et$@`ESgnB73Rtax)e2axfYl0Et$@`ESgnB73Rtax)e2axfYl0Et$@`E zSgnB73Rta#)k;{cgw;w|t%TJ|SgnNBN?5Ig)k;{cgw;w|t%TJ|SgnNBN?5Ig)k;{c zgw;w|t%TJ|SgnNBN?5Ig)k;{cgw;w|t%TJ|SgnNBN?5Ig)k;{cgw;w|t%TJ|SgnNB zN?5Ig)k;{cgw;w|t%TJ|SgnNBN?5Ig)k;{cgw;w|t%TJ|SgnNBN?5Ig)hbx6g4HTm zt%B7mSgnH9Dp;+8)hbx6g4HTmt%B7mSgnH9Dp;+8)hbx6g4HTmt%B7mSgnH9Dp;+8 z)hbx6g4HTmt%B7mSgnH9Dp;+8)hbx6g4HTmt%B7mSgnH9Dp;+8)hbx6g4HTmt%B7m zSgnH9Dp;+8)hbx6g4HTmt%B7mSgnH9Dp;+8)hbx6hSh3Vt%lWVSgnTDYFMp?)oNI+ zhSh3Vt%lWVSgnTDYFMp?)oNI+hSh3Vt%lWVSgnTDYFMp?)oNI+hSh3Vt%lWVSgnTD zYFMp?)oNI+hSh3Vt%lWVSgnTDYFMp?)oNI+hSh3Vt%lWVSgnTDYFMp?)oNI+hSh3V zt%lWVSgnTDYFMp?)oNI+hSjIV;fmmCNoTZgz|)e#=r{gPD^Ft+=y%gk>$gU~mENEl zIVAKt`3BXC)AmW;pxSZTtK}OQ9c>W*MM`II)nD;!5c97H?UTGg{QFn_wqgTw;SJ*4 zIr!U(4Pw&hwbl)clr}I@+Q3L@10$skjFdJoQraM{oTpbdHi#LgkAcU*6QIAX*dTt4 z{n~-Z0a&1DcO~|zgxi%r!Cgj?LT$_+<6LM`ru1(0b z3Ar{Q*CyoJgj}1DYZG#9LasXGsza_ip}bSeOvjQ2sV?CzSAY`d^FPnozG_S z*(@oXc0QXWh0*zJR{4$2=Na;OhJ2o(JkOBNGnD5U@_B}Qo*|!S$mbdId4_zRA)jZ- z=UMW3mVBNipJ&PES@L<7e4ZtrXUXST@_Ckgo+Y1pyy@zd+j^}R*qg3iei25$W38tr zs@KfgX?xSv%Tv^7Z@PMUJ^4<19@eW2K64A{TS0r%>74=TG|=93^;-8Z+MBLk>mEjX z)79fmS1*5N=QE%4_NJ@XdWi3_H(kB_nVq&bUA?@Q4+?Y0+1_;Z^qBSZnDrVDxK#G0 ztJjL%XraC7>hY$lr$4R7o337K6~4!PYrQyh&i1CO7l%fB)76VZqrK_s#i7xjTJ;(~ z82$ZGy~Yp5O<*19?~m%W0^>5 ze3P`j>FVXN?5p;stJjK+&)A!;ULMOvd(+j+W7%kLx_U+<^^8X9@usVnZ;bi$+v4y^^;+?8+T)gb#x3>I#`VD#tk4!|W1G?*y==h>ZNUm{kp}v_-}P_7 z3T?p(ZNUm{!3u4`3T?p(ZNUm{!3u4`3T?p(ZNUm{QC&M9djf1xT^s$Tc#G=V=r_e% zRM$q2Ubcugr#*Vvf)(0=721Lo+JY6@f)(0=721Lo+9J8y6baA%QQIVu(Y{REB$3nh zW!i>c$2OJIY5PZQQ#pljnBw+)kd`$#Xk-ZYR&} z}kPV(GIp1a6%7kTa?&t2rXi#&Ic z=PvTxMV`CJa~FB;BF|mqxr;n^k>_j5^HA`b@-%w1{2KF)*O+&_rhI(Hquov_Rj2;ia#$4bv<^r$jDL&&--)nk`(WBYjlzcZO-%ZJPQ}W%Ed^aWEP04pt^4*kt zHznUq$#+xo-IRPcCEr7yd&qMSdF~<4J>$APoDe9b3b|RC(r%lxt~1u zljnZ&+)tj`)n7RrAW!W^rhE>N=K;!jfIJV7=K=COK%NK4^8k4sAkPEjd4N0*V$%-N zs~)63J%}|sh&4N?Hv*l(LG_GAd$t_Jv*n=rL8tB6au9oU5PNkHdvy?dbr5@X5PNkH zdv#Dfj_ zLG?98d$t@@Ut_dq%Ry}8LG>w4+jHrl*8Gk3Y&l3@a1i@{5X*lMtM~>yzX8v0!1EjM z{02O~0ncy1^BeH|20Xt3&u_r<8}R%FJih_Y4e;Cm&kgY00M8BZ+yKuF@Z12;4e;Cm z&kgY00M8BZ+yKuF@Z12;4e;Cm&kgY00M8BZ+yKuF@Z12;4e;Cm&kgY00M8BZ+yKuF z@Z12;4e;Cm&kgY00M8BZ+yKuF@Z12;4e;Cm&kgY00M8BZ+yKvw;(0~TD4vaer_jhM zO(Ux`jjYl%vP#p)DorD+G>xp%G^(G~_?1`n=yMG_p$5$SO@Et2B+OUtje*g+^9s8d;@jWR<3o zRhmXtX&PCjX=IhAkyV;TR%seprD6Ov%6dGBjX=IhAkyV;QjExU5<~+oh^AMxTLyRO3F)lj9xabgLohtd4QX#Qa||1g?=7|lP7<{w7$52N{q(fq?`{$Vu#E#+Ahyrn#i ziJ;e!-cqgk%w*N$Th!WHsx_ZkA}jY6-vPa)T5~#=^Ims)3yI#+bA4x#Sb9q}W%Nqa zTdFCiOS$Ti^IP!zmUwnP4WPMw3m)ErhqqL6=hh6ifUTg%gm1ymTkvy4vK$JINEV~} z;v;C+5wz=w%IP!ii;vJ3AE7TkLSKADrSf^#_z`OSh@R^+?u(CzF{At9qtwDtYT+og zaFkj&N-Z3v7LHO2N2!IQ)WT6};V89mlv+4SEgYp5BFv{E%%>vEry|U!B3PsdIupSz zMVL=Tm`_ERPeqtdMVL=Tm`_ERPes%=U(tJ0&!^oQxWD< z5$017=2H>oQxSb1x?XpBJ{4g;6=6OVVLlaMJ{4g;6_JOO_6|U|BWOZ|`Ba4YRD}6d zg!xp2`BVh0h%lduFrSLh3L?y>BFv{E%%>vEry|U!BFv{E%%>vEry|U!BFv{E%%>vE zry^?Ume=#C2=l23^Qj2)sR;9_h^(&V@_Z`7d@90xD#Cm!!h9;id@90xD#Cm!qOU>C ziRV)h=2H>oQxWD<5$017=2H>oQxWD<5$017=2H>oQxWD<5$017=2H<_X6NboRD}6d zg!xp2`Ba4YRD}6dg!xp2`Ba4V5~00Bm`_ERPerip5$017=2H>ud<5GP!P-Y?K@nO| zg!$Al>DyMtCHL1!$Iz=|Xw)$@>KM9oOm_YiUG+Trm}=bj`|G4*)c7>keEF=@@l% zj5<0-9UY^Nj!{R)sH0=l(J^>9hSbL-k$>y2la8shMt_}jOy%4f9H)fGDdBNSc$^X* zr-a8T;c-fMoDv?VgvTl2aY}fc5+0|7$0^})N_dy8Jm!?2^pJ^u?ZQQkg*9Fn~<>y8Jm!?2^pJ^ zu?ZQQkg*9Fn~<>y8Jm!?2^pJ^u?ZQQkg*9Fn~<>y8Jm!?2^pJ^u?ZQQkg*9Fn~<>y z8Ba^P6>9VLDLO5!nr|~H|jZcxj7?%c~R$pMWzu#$D ze&a&W{(h&WnMV5npO#J`i)JFUJotD%_`v9Mo1$LhH0X{7YY_z}M zX<1<7OQ8MzPRjxtw}U%C`}>`i1vb74?gs7ecUrdBXn()cvb{$86rC2&e!6{tPs_R* z4}r^T@GENAQkd|Iu>^4j0;v^ZZO+iK36;k+5no8i0}&YR)9 z86V4LIB$mYW;kz#bA6w$GBm?^Gn_ZWc{7|h%U;dVRde19=gn~54Cl>o-VEo>(lnRE zoHxUHGn_ZWc{7|h!+A5DH^X@|oHxUHvwA(3#GE(7d9!*wr_FgYoHxUHv-&%qG3U*2 z-VEo>aNZ2(&2Zif=gn~54Cl@2#r!LC-VEo>vP+iEoHxUHGn_X|w|&N(H^X@|oS$L8 z&@=28dWQW%&xrZO!5LZCLqhKvdq&pPm_zw=o!_5^Y?zCXJnI|oA(PnqZ;uU?-zPT_2RVm3q2$IZ1jGiXJns^ z-Y@iw?6cAPg`Q!=dq(3-KiB((o{`1&`5%EE{hkp&&eQvao?*YxGwc_7hW$d%uwUpI zapkMtFZ7I9TC6_aI@y9wwxE+O=wu5z*@8~Cppz}=WD7dkf=;%eliDXjb<~1RwxE+O z=wu5z*@8~Cppz}=WD7dkf=;%elP&0E3p&|?PPU+vE$CzmI@y9wwxE+O=wu5z*@8~C zppz}=WD7dkf=;%elP&0E3p&|?PPU+vE$CzmI@y9wwxE+O=wu5z*@8~Cppz}=WD7dk zf=;%elP&0E3p&|?PPU+vE$CzmI@y9wwxE-(aNY{%t#IB7=dEzw3g@kG-U{cfaNY{% zt#GbgImCG@oVUVxE1b8&c`KZ^!g(v4x59ZVoVUVxE1b8&c`KZ^!g(v4x59ZVoVUVx zE1b8&c`KZ^!g(v4x59ZVoVUVxE1b8&c`KZ^!g(v4x59ZVoVUVxE1b8&c`KZ^!g(v4 zx59ZVoVUVxE1b8&c`KZ^!g(v4x59ZVoVUVx8+M=#JD}aW)dsakvh-g&eX0d%k4eyW zpbb0Frg5Ot9=&KM8_;&34LhK3kvU^Kps(VzMxk%KWCz-?18wXZ+=d-!!w$4z2imX$ zZP_8iKpba}9zXP6VJJ5z5Xu}S)VF%i<18vxWHtawfcAyPA(1smoV}+p&JD^bv z(s|$DHtawfcAyPA(1smo!w$4z2hK9)IV;W7HO4$=8S|W#mKN!Z$8~3=pT6pMB4=Ud zEMuOtjCsy7<~hrl=PYBMvy6GpGUhqUnCGlC(7*M2kh9W2qu+y^l?EF99^|Yv(CBg9 zS?Pn*9@m{^%yX78&soMiXBqRHWz2JyG0$1XJZBm6oRwC%%pTXBl@7E8?dU)|I?#>| zw4(#<=s-I<&`w{_jt;b=1MNuKjt;cb7qp`T?dU)|eL*`q(2fqYqXX^eKs!3njt;b= z1MTQQJ37#g4z!~K?dU)|I?zsE(2fqYqXX^eKs!3njt;b=1MTQQJ37#g4z!~K?dU)| zI?zsE(2fqYqXX^eKs!3njt;b=10Co<2RhJ!4s@Uc9q2#@I?#a*bf5zrFw=n!bf5zr z=s*WL(18wgpaUJ~KnFU|fev(_10Co<2RhJ!4s@Uc9q2#@I?#a*bf5zr=s*WL(18wg zpaUJ~KnFU|fev(_10Co<2RhJ!4xB^AbI5oO8P6f(Ib=MCjOUQ?95S9m#&gJc4jIoO z<2htJhm7Zt@f%n@Jco?ukntQco(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(C zFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+ zo%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA z^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%AoA^e>(CFP-!+o%Ao~rB^G0 z^U^4z*S*h+`8MGQ(EiEiWm}Bi>*KsEjMLuhZ`Qrhd@=dm;ArDHzh zouALMGI^er$@8)^{;k)&&#Ok9_Ff<7WoL|D_dd_M_j%U6&#R_<-g|wVmzMgf*S*in z@)*6>$9Y*EqxbqaFUw=}ULWUWd5qrc<2>u$=UMkY&${<{EYf*aLC>=adR`XE_j|98 z^H`+wV%6y;(CgmkrO!sMd!Lsk8|_PfUfdeJ*N6Wb9(tDeOHTi19gf9h?4^H2(=m$K z@PBlrV>MIgzQ33Dboz1E`8aX@%dT{MFgVn|E8RO7A96TR|JNtDD)fb}bYG>Hccl|z z{w0*xmF^c@+w1+qb12jC3Ew0GuNz2o>QEYS@=}) z-A`p_t$HeZW%85RMUN-X&nnCcKasU6c~<_KqT~lN^RkkM&&e#xA3ipDPWH;IHHErV zyk=EaIJxNYtmFmv%}M@3LDrh+-CZ}_p1e3KT$r7|Ci#xBcj#yO_3X^-aBlXRtmONO zGIO(6b{8R9g6;xL=GNqQ-85xe>UqBwion=(!l(FJh5@lxdk7laERhYtjRcAqdQP!HG z>`Y%+nZM>S*GKl6)yW0n?EG+ck$yZmIlCyi@bUcO+*QeiSy_3>Un$Nmk{*bwHH8Jr zbxqOm3jwHLd*dj6yNtE5<2UoA?0w74kwNq)I1yRaZPvn2XZ<-9t3O=hn7&Mqpv z^4GbU;ngCeF#D;j!m-H!Ph=Nn zKbo7>&1i8!K~{LB2)sRcb@mfku$-G!B$aq9Kb%(>t%&T*aPs4s;k^7cCCP3AS-DxO z&CJ;3&xtraxX=n;l%1zsT+G7UtgIZJ?5fq={QR8cyv!W&oApHYD)GRNRMAdk7DW~K z$;`s;I)ofo^6mP8_$m^qs~mM0}=(c`y^>TI!ua7E#KT`MdK z7q2WT4oeln`4&TR7G*w~ots@0WyLC-UtG8*t5DVPcu`ToNt z<38woxAqo}i?)(4bvN&E@3BdD{C=A>`hy;m^1sGhC3iotaAi2Vpr~+cVRr7={P5~= zUzjyV&8w?4?{m@ociWgQD;IoTU&*ZZ<$^>r(?XMM8z!tuc!I>vOR z?$EhMb#JonD$%#8`no>I4AyAJsbodnF4n#jnToyol>T+MFgwW775`nSGf(Pok@8Pg zT=Fd4m8B;>!5zt3CC*nae)5CLAx~$M^$uf>(nY#5T)Wddf9I2>`}|u!v6v@2AD8EG zezib5TFueFzaW`>@8x-4nZxb6wpjOsm0vc`PnN7>IsCNfvy-(OSEjCqC26+u%ToSD zI^%z>RO(6=F6ZFg3{2MZJ~-FpEAsWdQSR@!^qVmsT9WsdWW1umPf=bEsoaGst)*R~ zDA3WG%hoy9hwDGeYrZ%Q!*X{?Km4iPcO{FBLgkdHqewYqs(!LmkC{s6@Px;>awS{8 zPiMwT_7Bsk-*>gU27Ag@s1il>$J*XqCQJXAu2{R0N#*IPb{^5cEQj@DHFa;Tvld*g zZ^e?+8fz`=ZZF-fa_|+M^BqxZ5Y;Q!UO`t` z{dCLvByHcdQp~S=YUxqsyQ<4xWd&d5X^-kIKlRDWp1DfTalV$;wcaCXw9Kn@eGPJU z>$l5g_CEO8&MPeGqncqIdP?a+YGGlQwOYv&3w74k#B4{oa*Onn&6OD~3~a5Ua{Js$ z*mC|+-k;Dp=kciiZMLq|(PI75I_{Po)j;QFnQVW1blJc4eiFX(F`l2NTrY1Cu50V+ z*VUOl?w`7;jPl)y<&fA*mezIG8 zSLsZ&Bx{uNQ_P*)P`EZSAy7SeZ+U>E?w$6_!7uQmE%Z%n?HnhWv@_(HAuvYsymurXn50@$0qND#R zmQ>!m!%}r?Zg*|C6uv7{TIsx8$CvAhC5>7Iw_5kCZU@#Fk3ov0v6B_?WSltk|6}>J zTSe3&nKfIRJl*kcz5mKOcmF@`3hVo&_l#b~{Q;w-JN_i2q|yIoX*^E*_>8UGk6l?` zg{nvEL4j)6^=~_ttG~8?t5q{!(CE++l-{cuf7ma(_5a=DxGP6oF+p(gypGQYLs`pt z7lf|Xic5?lYAcYvyyoJA-dgSHE1$W3iU6G$4A2Ua;$tcX-e9d6U9CK>39eO)>+2MO z`UXY39u|C7wRDquD@COXZdNR^QQ{#bxK(4Z+od;SC8tN)sfy#0rWhl4Dq6%Ot*}nk z=xwTYOP;Q^)w^U#XG#z6*1oi}f_pU@yf3(4`>xIj{!F9hFKA3RPb2FE!9wjnxmY8< zhqeFWBid7OS@1>eNB5;*MUWYa4W8F72bID10(~csTewwdj?>H)WarQLXj|!4HG~ zCNISw$w%>w?2CNHg8wV{FRHut;IHK~bu9RaYP>c0fA!VxmsPhpYO}d&?^{&EUs0{Q z{kcbeLR#FSKKdzHiM4_DH<3sD{~7$J;Ln4<2>w#idSh!M?y>IP3}D)b1ONLAAao`G??j`G0>mG$i=C)|cy4=idtcR_}gZ)OWp` zgO{{MSQBgv{%dGx@J7%Ox+ZjO=rf_~Lf40G2;CSO7W!-`IdoHKcxXhg2N%tm)4O<0 z_W1Fi8{hT!?)bdSm73QM(DXk$f0dS~H094))%$b#tMk`n<@C<%`g>2;->m50_y;pr z78hm3uZjLy5dBja{qsol&r|$Kcw|+6QRYf#obc48Bu`KMd`7Q(io^MFcW31mW%^X= zop)voWPMC?_Yz4FIsfc2|SGCRV%Z@D~t0U%gy>~ z^paL`^4CO@kA}67KytvPvhdHoVa@xa_Y`I4u8Q81^my@_)tTYqyxh#$jvNTqc+ydja7H}dQUnO#N=qDEf@d}(KTO> zqE~;_;&rA^5Sn#>UxkBTg_>hd#@6-P5VtVySMjg(d7^KhzQ0PiHeq|e7y2FVUy(RJ z@s|UhyDIIfZzPRQdSr0&kVmfWGxYUqZolT_wLkbw%x9*4rs^|CuA6z?`sW0lX4!ZHku(Hn%Ngj~A?WUPG9UFdh#I++H9r3%7vu?iY=AYg2#;C2Mzn&7l z_2Jv5-}d-zzq$SEV}^}+W$etc$Hv8vn>6mr<2K(h|Bhd#4oiJFbwlcr3Gox=OsJah z#)RLbrKPP&+cxphiJR|SoIW-EvGgsIZk<#xY5U|AlaEfBI%WIRyQltq+KK6JZU z8=qT0^ZuE?{QTCt@4EYE_Z*WYvA>4Bw(PTIk1hLa*;~uLTHZIzdp~)n#=GSqU@rmt zXW2W;zFGFnvX78GgzS@Lk1YFR*&EBgSoR94(qS(w`(W7v%l=pPzOwI?J+HRvu-BFS zf9(BZe=B?b*zd=lR`#>9$B+Ge>|tg9DtlMix5}PX_N%g2m3^x0-DBS#dsEr3$6h`5 zqp}y3{dw%oWB)08PknMFAES3j_5-ySsC__B=&jKS)o+{Xw@vk{9m;jg*RfECV`e#; z&eJ+-bZpe&=(U@4)am$^j^}jW^EzJ8@uH5cI$qM@9adk~;ob4QH~vl?yL7y&!+WZF zM^*2K@7?gdm#TMC{k{(GqWY%(9@gRgQ@#8BC%3-F<7eO~<@PhNmx+B$>|tX65__51 zx5S<$_A9Yh348i0ZGRGblh~KU9%c3?vp1Q2$?QpHKQeof*@w&?WcDAk*NA;a>^Ww? zF?)^KXUyNC*k8=vV)hlYr?LO35POC=p0uM$JC?LP!|WGkudrKqOKx8fd-&SF z*Ipp@0U4xoBXvYeznM4UQze1DdF{(a3ukHUIZNCs3cI)? zD!0x%ewX8MJ9d{_zTXq?y&${WdXLz0&JB9*h-8pN9b~VE=T8bY_3K6yI9A= zI+lpPM|3!Du%mI=QaHA@BWpVfm#v0lYCEE~qi;Q_-#GG?<8C?XmSb)?;+ErWIoejG z4oBLm*0Em4hg+PjvN&61akk3hY?Z~?DvPsK7H6w0&Q@8Rt+F^s^SXe*R;W${1g5?-kj)3Lpua17@*jH^zJMLAx{yOHBBVL`?GaTvp5MCq+`s-b9 z{N+$j>nKv&Rstwi5T=s2$9gbsgW zQQ+_B966*!|F$PVsm|Gpz&-@_Ah7>{y$9?&V9x>j4cKeI z@j)CN#IZr5mML0ahjiUu0#VCkueCNwC$D53_6)FJfV~1bbl4*xL6W&tD^#i#Dutge zpMM=qI{a-{hYs&f^wFy!_lTQm?a`LLSuOpLTKXZi^dV~HiZHBLgzp}=IWn{3GJE{y zn9Lr-Ez(~{V|FZNM|N~vN5?#M#8byRb+l8*I{jnDZjP}0LE|^aRQ|3G$5VDRWk*@O zd^~qV=RBr!3v$bGt2wWG`b+W?Y8|#^+9OhjcQUEa;ayC;hlzJE@%|;=y~KN$+$JkI zM72Fc7IKK{{D8Fi6>0M;(q=`m)sd#-KHd3{{w~qqXulc#F2>Qt99zth#k@C%ql!7E zm?Mfgo|yO3sL`=eN3D)cI_h-zn=i)?bM&x7O8-cQend}kykdXR<52PO2|D zslMo>`l6HSi%zO9I;pWfaQFFL6faZ>%zN%cb~)eoIiKXg+4(8;bAa8je+ zlj>_uO8ZY(vFPlxVYW(+ybQ?54UH&`@#0|Y290+!*OpN z_0}E79pTpTZ5`d#v27jM)^Tke)z&d>9nseDY#q(k zv1}d5)^Thd#nv%w9l_S|YaPATv1_9?b)*{`H!)|pN>@jBaBoZR8KmW{?}1i9h21&Ssjnn z{qc>Ob2$>L`{gm}e;k9=5m+66)zMcSd)1Lw9d~uU(vG?6h^vmb>S(KuwdzP_j$`H> z>%Eh_BdmG{bjL9Ju)f~WR2@szkyIT=)lpO(L)8&f9Y594Qyn|iky9Nv^;I2?nd*qC zj+g3asg9NENU4sK>L{s>k@`Iyj*sfGgkz&RGOFXEIx4DTqBhPXv-Z9P5N4;CxeEoZY{`$Lq?~>*{(!4{O_eW#=qUUyx&Z8r*ROy8y z1B{kltY^gTxT4+%%_Dd3f#x01y#JYZKl9#a-ucY?o_*N(#`~Okmox8i_M(ohI$qM@ zz0JI{*>)Y?)oiDZT{>RX@tX4VxA)%3%=?(_)8ReLyn~tdFZ1qY-n+~@mwDeZ?^@=u z)0_HxScku^_lVFtmHk-9+d8~QnRh7j{$$;=5XbrSzGU8&%zKh~M>6k6=Glq&BI}-^ zco(wkRYO}7w{j?mBdfR z%yxk0@2_b7{tCN;BsT0p{HMnuJQHQ z^HplMt7OYpVat2$rPk&y*~{qKToUUcUJLO$NcSp2_c}+B&K2wM{$*bC=w7XP_d3Rn z>VHni_MDLIQN&Fh^L02<;Bz{j*YSdm7j$4F>++BP<#2im_Y(ge?AuD(I@&UhRsYp? zsWjcIY2L5QyOnvbGRNTaK4spe?88>hyepaaB=e4B-jB??k$EpN$Jp~eWZs3$dysht zGVed;-N(H5n0FrYzGL2X%zKV`$1$(KdABj|HRhehywBL>rS|GuoJuWC(s4$IVLwRsN5!p^vZ3pNyH@AMQ>4$Lqjwy%{djd+j2<87{&f z#W6x0AtdT|UZl6huXK6u%Kuf@y8TBS55&+X{)`Nv;tKf1lZr`-Op`=b1#TkD@(Tk^@6eTVebOq{;f=%=qWy7!;*{!-puDy3^z zsqP)6-n*aFJ?tR$fcB2+-Z^T~r5&S|YnP^6?bGCa2)zqoF?%wVYFDN*?Gfc2q^h)I z($m@($vYy|YPYC5?W?p|dr3VjKcX#)`n_HIDecsLQLnMbl6PC$ugJs)y>pUwTRNm& zq~6k=QAg!%bWD3h=^J|XYiiaGQZ4%4!7)1&SwcHeX?OgteSaqD*_ZG8Gwjk{Ke5`$ zCr1D3-up*8q-&op?b7AFjDlOh+jFy5X9lU@q{8BY!eBahch`o_>fVJ)dryV5bC>rSiqWoN{k5l7 zOfVI{+(exsX+7$IsvwE{MYL-6V z?=a37bKsA}{H^mk+VPDu{^o4l4eh;i=cWGQR5IfSf5+JD-u8J5nim$$ml^+dHHum0 z&MPkc$&)94gU=^WerVOE;Vu0?xc^6t>6W6w->llT!>{`w=@>fLgZD*iwyfQ>ZSl4U zW2RP=`Ssf2?OT|gC87PF;=Ot8#!J@xc-^5RjJbZm*k8@-Muu0PdHgT;qWuEAuUv-* z)~{QJ@O?GDXRh0{V~@9d(JvVj4CrtEMI+lTjy&7^GUNKwjII4}9-*HKAH?@97&~--l@|*R~@yGp)-A3=l zk7TS4^D{xpL4UFT_?3XxK6bxwn!PPu%PMiT%b#b9Wjm|kkF&RhT((!p9sdX3-;Q_N z`AJqP9ALw^7Ybh*KZR#=as3)sF|K8}3URgKT8HZ;T>ZGdN9A!9Nnv(Bz8}H;QsL+9 zp!^dyNBYn4*QCeTu=IVlT3(NP7?+(5%We3+g$)ap?0`69{EYN_woQD74eK7jyUn;> zV5_BdY@7T%?hoVL_n28~Wc%bscB}LUwqL)P9gt3pzbGAHmq`1W4RZ+y&#{e|&tEWx z9|=Dke^97qbHoo>iR5E*#g(jHN@W$|-K*4RP z0bK@bN4a+KPpnEZvs9`tyn^pWW)!}_R-mmR@p;xIU(fo)ljCpVbDy}FiRgcZFu)4Z02P-4EO?SzU zvJ6@aT8GIO)?ucy7Qbad+>6Dt%6cj5Kx;AiLjT+GT}Nv%`J%Ou+$>AEW8UK5u=ek> z)ympqp41=pA^x7F3WKbh=0|I-e}}Es8CVhF7_GB**Kmv0mvHQy`?XBQ8ua1XO6!H| zW~`AD_ZM&#<64L7F=@~EU$Jg?%70{c^26*UTu1m5j0+F5mvG%FJUsqWsem2B)r@)l zR(_Hd8s@Ua!a{Zk*KVO{+=u7+axr^AUdDV_uO`_v{ylk+-6{P^!L>)EJ*->$BbzDw zW_%yYK8K5Fa51j+_OJ^C(&jR4HA(qLqST@UHxh#+6voI?FFDzok ztc1;ArL2sVvkF$ps#rBRaxJT4^=u|=E`DJIS74kF(FSFR)YWNjA!!V$ZN=*%#S!?0NPj_A+~keVM(&{=~Mi)og^VXaB|a zum{-|b`hk@F1CSlb}hS`MZuv3F0!?3H~R-W!#-xeV&iNh+t2=+onSAr18fz$n2oWw zu@L`co7ko71IVB&*&%ip`!;)%{hIxTz0dx@e#?HxUf>dYjlISG#y(;nvcGa2R{78D z683xcNA?$XklnzpVn^6v;LgqL7Iq`MgWZW4-p-D*d)Yng>+Bu&3$~TL%id$B*McX|8o4RW;diy0OgD-#`7G({G;s_USiHzjpeC)1#+5-uuCO-+TA(@Ba1OKfL?? zyT5$*^t(TJ_xX1peD}V0YTrJtgI=YK^#A(L{}12)Z{Z8VEby-$^$)EHjk4Z>k-@@I zjtBnHS9?dL?8T!}+meAmD3Ee^z(3mCI}jL+45s);tLanq;Glmrp>25eXfAzCX!DPj z(1#K#@oMjYe~tg};bH%%v3FnyPyF=GNS`X{Q{_;~(BR-;$|wsD4#xUM=R(1#KGZy_ z!^P-o8P&D)4UFnr!cPOkT85fOJtL_oCl=tHA6*JhQr3{a z?Qm$ACZqJtQfPdm{uInX>v2@f3JtfSu3Rw6hy0jNODDkrA41K8qelAHk8ehND;(8P z2ctq(b8IY6CE)W@M*JD&o{%4np?#E)vYHPc_M`7nIX@5@<-^)%%vPz7Hk5aR=&v2U zv=5D5v2tQAPch~UwT|+ZQP%J@=N!{69Mu;v{}9@G#$@8G`S8$FIw4#*YAC=%(~!Rf z-3(FN_`h!;O`J%!CS{p*uPno$JJz5I<^=Mry zH3S$8R~L?23yQq;g`>7<-eTsfP{LmDl)yY${vv<7f($}d$Kk{6q4v=5%26I_e%i*l z+l3AsSQZa}j{lXnqdYuvxG3cJ*B?eJ&WX4FBIUh*R0eACuzz%jRyxu*@Qmn}{3*|f z*^+Otxfv^IXu*;xg+sH3M&%YP&yXMUQ!!d>8Co40m0E^ZW4*Z(ycrmHH4b+ZdM2Y3u9#qM?K2yF)|?r8#aHS$X^eNR&hlG$OQ0o zSr|+Q-VTrQwpF2(DtU!s@WgNmN4>GmS~P$T5d*;lG?*t9g#1M`^I0IC`oW^761WS< znjC)&xKBLx#UCrBwW{ZoNkNxx6%RmsSa)a9s0C}E`U%g|3Z7!zL`6%LPgJz5VALBgT25b-q7}*~Dq5+0qM}s=_)}dlTBUL> zu%s6Z(6Cqe!8lsMs6$&uU2Pzu+#v|51p^bBb>H}&1v@6n+ z((lWVGS*}~obg@1(ZAS#ng7YahTxizA@o7!eOXJhugxjRc`V~Q}s&9ljQCb_V zn^kv3-2?US)<Av-fxWqf_d%b*6Uac9wTWI=edux`ZxEm#-_ktF)`3tFvoM_dxgR?k(N>yRYrO zdycEe)|1+k+f&{X>FMqn=-u1*-M*jp{jTqC{jA^IpVXh(U()}>{@?X~JkLBYeO}4D z=6Mgye{}xy^WT{N)A@g1z!v;s!QU1o4ICdhG4SHxyGxRm^e=gSsb^_$Y5B4{S4b;t zEBq@8R@ATPS+RJ<#ua;39A0tfiW5U?hMpT{!-nCF!^emJzH-gVk5{c+U9h@)^~Tjl zSHHgcgOP@j8%KV+=H+$5y2!d;Y`Aj6;~Tzzkzr%e#?zZ#z4-Qv|Gati=I?L*aLdZA z!L1K%E86z*c4>R}_FK2VxZ_*9N_GwHI=Jio-NxOeyEpDWvHKr;3ij;U^YJD9ms|~d z5WXz&46rE|Hd{R`i)h3XX>6ETUsqdGRZ$qu$qM?N4xMDwhr32s^bSN?U|BPs4u1?6 zL|)3cBygz&XeWqF;4lthVj3iwJ|!gR7%WDe&XmCn1{k@SOs_ZV{Rt^uqZ`pw)AUX0 zV4La^7#f(a(Rf2vz2A@$>HHtHq1VF=8j25!#ui8z92~6R% z*M5_*11KEYdiAN3oA=Pl6|jH;OT`Gh3OqN zdDXe8reyP~h7wP1n%$n3>nUl7J}ACiW4?E3L zMsaR-QFTsPy~E@1oIO(?*H+5pWMu-ofBY|k4r`al0_?Jgg|YNh zmjmAt^*UKwuN0JowUjAAwZl3HSTwAIC_12p#MU7h@6a6CRM`^++@fDhi3HDiCt}qB zH?0wBDhZ@8xr&!(~Ou(o}5OlM27MshwlZ&!mH|uq0pfJT(6m&X+MZT26 zfKxs;_SM1#3zwFcFI~8xP-yu0Kk?S(Qr=Q2#n~#bx5c}KZ_0PUYvE>hL>wj)eB*AD z+it}ZqfXLk^G$Xo06%#;O^4F!4!U(@OZ~Z^k@9i@YuZ8X#)KxBANRvKd8%x!GBnp+I_Sa+23$w_3~z z29evfxffc@f@Dh+u`Ckio}Iw;dQ*ngB*-#RqR}Aebe0T)jG6i6*y?RY3s*3OeLvvuDdOa$icTa{N8QI$$oH`u`sRY@W+Secv7WZKlB)~vu@h(oGVEX zZDWt0+3+zx5gkbJSj>D`^zKjwKas1q8mo9$d#aCLl;)2P@DoWcQ$qA89z>sYy6NrZ zTnR&ntbN=rt<94gZ6=U}Blt zY$EOddIKV{wGe=!HbgfP01D>FMLefUVe?*RkqG`TG;+cgeLD9lWL+fWi0L9kgkS~A zg*h*$Ck-NZr3+rCMdZ)#eyMS$Gu;txTH3m{VfV6{=KW7?PLLB2HNSvbGDvpG^-Iit8BKQrh{vRPsh zKNag!LcVD|@xW~I94F`v^hpo^K}D(nuM!d<@H2H>md&zX2mFE$Bmz9VP(75V$~sz2 zoz9{2>rt2Rs(RYGlB7s5>R83+^Xe0B6He6t^`Vyt&`+S4;3Gyn-DqUlI%xoI8bG8i zURMT_l64nq14R-DnY4M(bOMGLGI3x@C|D#A8j)1g16N3wa06G$N*e?Pvs5g)KuO`J zbwm4_s+YH9RW7@97Vg>CxHD&@=C+q-xH4y?<+N912)j*b-u-88Fs8XKlZD!${Y}-& zV#SxWW?iiouZR_|%#il1x_d)a-ki;|R^4+^bzaYw*`>3KJi*TGeKXn$-GTP4e1XaS z@u5U3KeFnc^(c5T3T{*jwimgBo!k0m%tFE0+aMQf5Gnbd{209aJ-j61;;f^+v?MPl z6mU5bO{|$W8%Ro}V{ID2czJhMQFf}V69w=s0WwuA1x8`9GWFo$z$g(E3gOKq2^gZ& z#lK9jo|&J$8E^`v6+%)b%MMxLfrKY@(>Fqc0M4jrql^Si08@0jSQBoUFs1pzwRMsV zbO-_YBxo6ghFTlcR6rjSR-|&Ka$+Y?GK(O(2tzzxV22{DEL;x(RwNWF1ypRRQgl;+ zm`+(~Wfk5CKbWOUkRyE9?u;b2d1(1> z4)kBUva({?rL%LgYS!N#-5Q!Xf5wUvv!c&z-zGm+(6gaI)X7fH18LQTso5<{%4_yC zM%OkUX?J+GzdICtOE$YKdl#*lvE<6Wxi{=w>TkZHvHzA04QF1dUR0m4a27w=@Qk8) zLT}@@DSF%72*t4!ZB5iP7B?sd%9>J=w6B<^7RgYb6ORE>un@f=?1(8`k}Bb+QL-kh zR!XaTqdybo=@Jpc(nln>iJQU-n}*bfoG13~6RN!F@bTy^U}+9ZN`8vYVeZSX%Xat| z+`hBjV77E_>&fFUbl(5K-7QwL-K{TL_@(E+IPV6Y0GMYyR4m)gHutt)eh@u_(T)Ej z`ZNArtv{2S`XliGRRr1xNe!c*SImm42EoB=ENOYvUw5)>rTjPbVuz(Jq~8h-jTMX2F&f_Yd}APpp}vH(3H7pt<1 zIRVV8&WIEzeFJZVXw*SKW^kHZjtX7AK3OmrOg{U`z{$+a%=BBzZn1d{2F{b`Cke&` zQ=0vx|76H-PqW@qdW$v5pyxbE9R8XkU`=!yS9grKMbW*cW5ndKC3$sb{eOJT8L(U2 z>KnmiS~GjK(PeRY=oMyzA#Z1=q$cSI;+i`m4m>e2lQF>nV+h$EP=&#N6axTqipivW z3KgJ8LNOM?2Q(mL!d9SrKu(DiOe&|SQlx*XN~da^Qh5}n;yM)}1Nwj%a>6Eb3O}vj zciWK*v(wBrb9O~rejCO*ELenk;Q=tQtO!^(Cae!fknDp#2qrWg z8Y1+XS7;);8r{>9RCZ?!CakeUPMQ_MSQN%>0<-t4(=CX(tFZVH$9E@ zMSN5%uFOwV^tGxf24^8`#uQ&6*^q^>FoVvE&o?Of_^I(n#3K0#_!<*A=a>?hlRM*fD&qU3QbB_vc_(vKpTe{N2hA||(Mu63KIF!v5`YQTU8yp(iioR^6} z@xSrPeU9im4wp4aF5o}B;Q^j%8xs$Tf12}aOQNBRZ~gdp2MJ-3AHk$f;6yolE@A^Y zz^mr<*b-SeFOTCxVF`>`7`+@C5v*G13Z*d&0pv&{!U7YO34&QrRBU1h;qxm|X-tAp zW}=E!06-(<7bvZu4jDyiM|1;YQ#hOI5)<@LNXi0aGDCO(NTGIi&gv?R{0EAL!GosOsyCXT9ws@#-_QZp@@KD{Zbsnatkec6**g{_WO0b0;56vxj0Q5zh3GgzS3 z7BxwB201&l^&v$@H8>O#*5gfwPon`uk0ru#oxfB+pMU+z%KSN-TK4W+cLG#k4{wo$0rS}|MV|(SrV8i^Ivj`me#;`X+yrz zw;~pg+h#S9ti~e5X(Gdt2=>6!fzy~Qx%J=^iWz~R0*y^-#Xzi5`8j0;0hmw4h(&~B zttrJ6>5sC2Ay@~?64~+=)~}&Ulq)Tv15Wx5LQ|}(L;Qn$G%8>Ao_YzRoYk$ zT5Sb>&jO5!*y)I^s4y=Fe#9h)%|HTF!|Xbl%e)|rv3kHjfZ8J5J)%TLE5?WslN+79 zf52>5&l24A3Kww*im|O2%b(N)s&OI*aFTdq@dn()h9b@XQeEWT5(aB+&{zm;gu#$b z0dbOZ9Xhk>go)!XSWJ#HAl1udRneO5o0qP?cYXP?``+5wxMf98`b>AKv$$nN%e?DX zS7pw=xT|z~>)L-89+u~17Dq2ns#$$q-(}yvd2Ui(WqM~)Mpj1k$dQFL%UUw+jtt>A z03@(=fOQG%lyr!r`-w{z7iNW$y^z}JJUxz)nWw#|_KNm!p1&+mhFC)e&xp&Eq9lU=F`aGz zO27rHFa%jvM+RrB9>c`A;T1zxJd2C$f>3@99^BUOh2z7+vo9ZAzxd{n%ImM*vA^%8 z*H`siwz#CQdsRjA-W4^OvsT~Px3%4$Ry$BPdvkY=uV&Czw){}vgKy+z-@0<(*w#q- zl6|wTdZjRQ_s;bvb~j#E)W2g^WN}SOX7}!S6^j}}!qesR)|3_Y)CCK>*VTr5XJ!#C zeh)acTUm=4>|Ub9qJr#9g%$z-30h2}Fb5bkfCvvb;Z2;hpf4$kl17WcSXl@XiKHmR z$V9D}l!z3@3V~pu{!f&|XjHC+hj2+jBE&(=C%N_rtP?0`QQX2YM-K5Yp`z=`p{o9y zzPe@k9qX#o>*iNRS6NHa@8kdU6}e{K!h5q?SJZawTU>T%&)mxfON2QkOApOo|D|hs z>NeayF#FP7yPBgqhgYaitMnBX^EYZ&v}TnK?(5unWyRuMfEn3X*Nbl}cE{0(QS;&| zbeIY0=L2wJtlvTe7{k+;wLw1DB(#DES6r|`Oeod}1) zCo)8c%TG1coEI|PR$s`L6BEue?gUl@+xiy3A_@7)Cn83Yn`B|fVUezw%+taH);8e` z!6Q{EH4RKqM&n(dSO&H^Vu)E&o0twZU|=e2;?i%DnLZUlMbnt=>!$)~T036!o(Cx` z5xbwgFTN`+f))n<7}Qf!*vW~P%DCX=kyUn~=O@HUo8WRqL+)Z<63RSkwTkfHjui@D zNi^7+(KZq|&1M2wQ@E?W~$Y)xW zg$tgjEY(X|#l>gNzCjb<XGmTlhO=3m&qK+9W z`l|cuauSn_*7IWc-n8;uZ+_=U-TYmP8tWqAyB{s-Y-*UjWMSWkrA{fEu%?Vf#lfZOp_)6B3A0mVp06hH2Mxk4P47;zR z-9@o>6F#-w1hrkBATlNDbHU~lQX&KYTFb!d1ds#78Io^5ZRBdoN>(sCNAvA8NC;tj z5%JdIOXoOwC{6$azSNV!by7@uL*@+hj9X9g_K?=$Qv@`QQsH>My$U zi{IL`^E>w}ZrgP{IwPgNwmRveP+rHC!!@NZcFyT-3)T0R)L*u9T~8rc%F*)f)Rd6h zFbkT-j?rE9JHH=2{lt;CZ|iO-(MwKq+3fxm&x}8C`R~8+$j->zJAZum@*mwhxYJd( zsDY}#$SV!J`O!J5uD&F5wqfSO3=x|gx4v}N$CP)&?)H=FeOFNq-8^B z3|%XPtda7Gk`SDvk!qG?ZmcCLgjeJ(jHNt)^q`DDaMF!jO+}N6lBxy`wiFzpZ2Af@ zPg4L+rW`S#BrfnW9uUFEz>cNkHz%jcJ!8*5oRH)8C zIa1_fXZH$yzUJ)g79aW%*)ZTT0=T%K+2*qsA|AJ!vHaYi-<{!3Px9coQ{+l)j$~ee znLJN`kscgPQ)w|l1YTG?_NwEGSDNCy#K!VtbzmPO_e;^OCTgpyI@N$ggg#sLsfEc@ z0C~nMDGI)7^OQLQQ=A+o9#E9l>`<0!BW8#B@KgN6mIv3BW_51vJaA?E)vsOhtw!#f zyQeqziUZOA{%zkSeYyLu{Ih(laNh2Y$c~lW-n3h`ta@Zmvv5;X&hNRnZN=7u;W-~TIa>{z;2-iy`0w6~VCOI8!X`JuK3oGt{vaxj{CazubGz_F}SRb+_p`N zcD!->g4(q=-s17+_&s{LZ_U=FkNoPomw4rS`+TLd!ac^s+~VA2U-<_Dki6t{N}B8?$TMP(;yAta!84)ESuIR;vb ztPWZ@I(DZrX3(pg1$wPzKcNhS(vomq(4XY7!(+y3d2O7_Rb@kQFrpXu+GQP5D3K>J z;e1fD4Zz9ChF1`XC>Z&Yn%-71O?3$xhy+@LKZpQB;(JnMqK}aB5Knd$iCgFGvLAoHkTE2L0M`q4{*b&V~%=+$@%I#O&*nj0) zclK@nCigxv@7jw8v+9j*i{0j_=-SY=@7uTa*KIs{jmeYY;;jyg(QKSM_OqPY9Otsf zes}l}wRZHAl(>^RG$JHFgE*4F#wr(T{b zyfpV^;l{CT$WpyjxC(PTfQkMQa}-%$JQk|ji)NKwDZZ_VNTy=fWUAariDY6?@joFs z9^wVv0%{~Pfd2W+mruQn_VHr;%=iaL!Z-$v<_qAGZkxrF5VK+_FUtpXqudD+81u95MlAk}^t4nTNeQU(nr9JKJoq`~jwn%30U=V77fAe~5Sb<^ z{L_^pK}_W)MF;ZLa^$}w>Lp8bQnRrN01X&YN~9{*D8w_EbSYfB@B~t_nH;Z6Avma* zibeyWuhfj88Z>a^>nJW;)yU>V!8yE$Qcwv6Zfp(}y7>p*g7o{xUUz4?l0tSq`k*7( zZq`MwwdI8S`d&Qsk{EP)1;5WZcDpwt!5H$54eE^61ff33Gj_3xKSYlr#aLvvI$}_g zAXq%}#)*{!HV~*uU!9z0fLCx?PrOp|3{qoH6}%sh94% zPZrIKO%`PLMa&s#sVQ!U*<>_K$P%weXp|n~ouyEop=~1ML!;6b(iba4nl&P+ zfG9%2idsn}D8Q36eTgtcrJr7rVhjEQy?^WI9|J~R`N&h(C8rs%75i`Q9Cv<> zc*vXZ@meY5DoQ?kSvV{nOe%7nd0Re~;61xffgxa{@XRE3eZ-8UZnqgJD^MRbEO%QW z1t|+1vXEe+Ah*UYC%ptr=p`^(a>%AF=Y7 zBMDhep+j@3|8deQMQDD4&S#04y$)4aPR+)YZ!BMN&13&|(ZRRwn7i#8-1#7Vc(r=% z9m{ro?Z)0}sDg?XSi1M^7j9oyz5KD?T=ykj_U`@_Cw_Zm(^LCfSB(Di?oFfnTb7^t zCx$K%50lno{uZ31aBIY6wL(Wtv0~nMk|@Jl6t^J|K|<;VRsoaKA?Yy&357r>sl8CT z@D^$B3Jl^k(3z_H=2EZlT~8{c?A0J>5DP;Mx@$TWa9T5}LMCvfSlEbP-2CDxe*Lx+ zn<_hxeCN=P&hIX`a-b;Kx~@&|jr~SGR=N6ygmYt)Q)4A0zv88V3>BYHg~uZ+ znOfUQX#f+EeS%XQn($SVa_~vTIDwU%XX&gkk?sEIE`MO!eW3*J&q=itD)9 z7M0GSlp;_`fY2j7JC0Ytg2|geGGnC?LyJYF*hEDtJIVV|td_-7k#KEN4JB!pAc*cV z(J$S}2~rVj9ez#7RMr1+!FrmooP?x$FeT*2LQuxhH9N$2bpl&2+4k6`it?3*7x~@1 z;?WuI=!c2Htm4)$Ex2;9@Ve`S!Li5WV`)-pN4a5fouh0fBz`(b5S9a@KoW9CD58X27My~4 zWYQ@Z4d_fU^=Eu?RXWdtmWFUOR#CO|Yd=$+PmiiYwTPMXIyE=s9K{U&L7keL4!7Zb zCYQyYT{pimvbrs^q-SK^NKeVEt6to3#W$Lo4M`SfLF?+Sw#{?$OL|tVU)56*+4K30 z7mwCRFIlXiyiji2(u(r-vYfoq&UKw@p1rnrWZ|I6Qdm`3(6gzzs-rY3yQFjD+<}Mo zch2v?d?Ed$W58uSB7BtZr>C48%F~>Xe1vx*bY#Gn6xVZg6g4aLR#1uY#0x6b6dtMQvays->6j}zc>KlV(M8y? zcJCQUI*ZfR(7>(OPmzgvq|-b&^SCW$y^bMgU}7GmrjTBWF5_4cm*9Abq_#;fvGSS( zClyG2sc6|4q1FVoL^FXIAwqbg{`~F+-G-Mg62zRY&9^mdI=Wa~fA+3@Z{0I6`@qv13XAdWs4LsiwSVypn*V<2 zFN-jL2c){eVYgWTOiiXc4T|o9NvO_4sO8$cCtfMa++@AQ9~UUpWhvjm@VyN zIQcj`0MvU8<1b)$Ma;+@3kEWrwn<*&q?}}<0Ui~~n^sgX!Y8;mw27SiUSwDYQB?dJ zDmHq~sULe!Qwl0CK<~s!NEcIPB|#}w6*5uN#p3hx#AgWY?A!^*Jj6V7;MU}H?34s; za3iwazhKBr3MZ#a&%n)Lv>W+t`kbU&$DTd;RZ$l7iTY^q3HeyE>#Wg|>-2d2^*-_M z_Eh@rtM&V9m2Xg9=i0Jeu58;GoD{;xUj*Hf{p(|oM2x;9yEV}SeMDPvw?#q1balz6 zXsg~yFNqSS=&ON=*D4}YBe8NCzK2l;L=giSDT5-JT{K-rCbddnbkjt40>wMLJf_tr zKz=}-)#*vG=YNZyI_Y-6&61GFH=5km*P)$ok&zQqk+vGnOnRrL z7AxADiZ70ddg?pE6%RdBEO`Yn&dMnT<#5EFQCThvF|`f#}bLMeF&G!{g~4W{h15VpX*av zT)uyP-DBrwyEDN~v)DNPh_F@5Cr6)@BOmt*srxPLjB?qr2}U7zuI7`gRwZHO#twhj zz}L@CEj7qb1k*mQ3Hm{Af5DvcFeeMEi5QU~spQ{N^gQQW#|F(x!GD^Sx-xVN$Vv=d zBxqvSEBdLZ`W_!R9X*jCq3wE|7Vz66D zCyC>=6Mj>L8Iq7i=}9}Q!C&Z=GCx9lg>f4d5dcDt+3Z*VLR^drku61|MsQ1~S7Kd4 z!#2M5N_&#w^+c!M;(g7Kxue78hXhVDwkQq45ETy|A+9h15!- zyht+f0m7va^^eiT{cGq?21*HstYcxzi5)wXdCrlp=MO;NOQ6gIgjyxUT@&InO+-Vy zf`F(loCzP#Svd-zC^PsVBh`4(Dp!)}1^F?T=R>nq>04kW;~$DAAv=_)slnKuZ8D6CKcxz0W>)H< z4v{CU9xYOLfoj(Cszqw2b_A~$WFfiBp{rrMaJu0;6k+nrlDdK}>87#YfP!(Fk6H~+ zb0yLYB|d18+%B>clPO-8}GmlR$0uMHN4}hw!dKV7}{LG{nzqqfO`So z8u6qc5{i7Nf|LS0Nm9Iss+~kTsSEugGQZtikV&OyiSYSr79e+JK%Ix!&jisaVLJjO zE!k(Ur0DS~AD9vA38HtJo?tGC*rcfT#{>ZtwRppYD`IQn)QU$4O(yk-_GJMUBBUi| zh>exR2eDtD=7*#^+6)HcxNcGng^s7M29S}w)%v71C_JHhf3c|^o1r0fVQ#?PlAQyF z8sf+^)QjolWT4|T=01IDAbVhFUFCtBgN=imu9($#Requ&Ii3HqWaX0HG=KJns`91X z^?9C!@@r$|Ge>6Sy!>qc!*?85QQ6wqo?rGDEiOJ!h)`m?fdF?Lkk6M)??jQ zg5HYR%MnXqn0!oLc+F#(I<(rw4#G}28WA86kTOCcR@iPD=F*B|(+FX);(F3n;9sc* zj}$WeE2r-W1P)F`pqC(TRd<8h9rdb(c;e)Oot>VkFL_7JsmuLsT2>S9<@{_zSNK=-~lNBEW zk--cP9NvC-Qz^_XQSP~zsA3`jCu<^Oksz#=~wt$DA}34c-2K!SKg%3M(4h8+o|WGH6_DK z=B5R*H&o8Oe6VC;rtht$4PAL({$l^bcOF?!FY0 zssl}I1x@6$8uom|RuB%?6x8Ho(GD52QISCk7cAi%Oi;;T!1RHcrL^}N%Sy3NP=%_A zV^NX3potS~S^A8XRBs0MA5AS!Zcpfi3Nu3Ez!lO7A!va=iq0QPcqjjx&IRab*dHem zKrvm&BJQH@L=v}F-hB3JeCMu`uDZf(zs+GSC>vh0IkM>RP2)Cp1^$ zJgBF&ao#yLDUsS(HHu}^VB^(566gz4#2f6ELTUm9x9~_&u_gpQ^e~uKPTJyJRaQlE zKxJS`Vwshf>G`gaB74`YYgS`t^DSmm)2hom8p`Z~*OA~hhdZjX4dyYsIDGci?{rCv z5@m!S(ApSoLJF4{fM9+>tqoN ziGzTqn=Lg*1gA}s+Exy(Am!X5QwpK#G1QK)@OUYkwh~*xW66V%PhPT@tni7FRu@Yu z1)cKpY@ooT^mnm@dxN<_Z{Cc&=DnvjExKu>s{iUI1~c132_~l}dwG5BNOwWSnmbos z+{c{;!Rfp#!5F=)vcD#Mu&1)WI&Bg67!8#x^85GnWM8tmdDEP*@YB-X*82L!to+v5 z3u@ahUs;pcysUcew$309F33yDXwLJcW+M-5_Vt^Z%j@i^qQ_Sg{dV!3p&0{<3p$sV zEnXf?_Z7Ml3~42e!P(uR+8&~(xj?Sh<<}6g`7i>T821#9%aTY|WZVnvS4c@!;y`>L zgG|r@v~}zvrr5I;g|MJN`V;#nZ+lML1$qd7bLq%mF?i+hp2FsVS|c?F1!rY{f+S`dhnV(gNE zdg7fWl0PyM!q@WMD=+P$ate&`MrBzX%0*mGXs z#et+Q@uRaQ@gv^gD-5|@p+cXpDCBm9iWQiQuZ`Z$zXq7NST5&;Wm%z=WPEek&6Cb} z0@Y$&NvVQ(r2H^-n>aX>#&?M;kuWB%bYAI1SaX6fO=*HxDAx8Q5fbYpR!v1>f?TX& z3LO%VU_VTV9j%U{B$cRbP8386L@bAts;EeZ+LHx_3RFcSQqx5s;47=nhw(L68w$JE zw}eWQ9J0ltx0~AAjEDa04i$Qn!UXhik_z-Qug+ZGQ)n~}CF*%cpA?yH0XR;aXX1}Q zLx@@_?hH(WgeL;CvJCx}&@+}~q7nLqicX^S;M7(jSmCb( z_GKyU%Syrn#W9N1l6cCI#{}=b0zwR39Sz1oQa@H%3$tOsu?iZ|PpbGyIVtKYOp}!Y zS7|IMg+IL^!{xK_xwiDAd!v_F(~vD@;w8sCDW+&NF*!9@H~Osn+Sz+ecD~5wif*^1 z7|niX)NFI|`(2i3Dxl4Asz2i|;**FoFX${7&2OVBIylq~<~KQRkoBP@P)$6HMR*7$ zu`3v)LEa}=t#GN~EI{x?stKQ(;#(p{Ht@`;XXMvDZX}xH*we@4*Pt(y@cf7ePf8fF z14F^I6px$sD~ep%*GEOb9meg#&*w zX)N@CRtYOh;{cUH$(A7X5l7Z4;gwnmP6Fg?z#c;#N>L(0oxCRJN$K`W2J5YT-`uqI zQcX-Zm8@DiH?t*8n+S=C!mq3CLwq~S!k3~LPjCMmn6$4mVph3fFZ6Es9D|FIyCGy5!P`k$ zIp5a~yd+hAav~Bf$7ihOCO=6me~D<}ylMb8^4%$(qWZ@seCDc~K2kMxd`gYU&US?Y zKf&3~RmYN0fkP-`7MkK@n&NPmxA=W9RO&*#i&vJ{pX+lkSvG%mYN1>6xkpcCC5tw@ zMc_ZGTi%j+uJ65m!)=TBs&jnrikuaGAdW%Xe?y7Ec^UkM)LHBkO zY#ri#!~$ZJ1inY1b&XYLol{U@*6|!c7gR8%uqIhATv!pSk)m@OMc_~6)X;7xAvG~) zMVwCXTykgQH}Oaedi5}hU?4%>rTQW0Elm#&=I8s13xU9mpN^r=q-{iH z|6)}oxDcuR;DrT^R?109jwORHw88OtliKM=J-DMlu2ij7EDu%vJvnzWoU_;6r2V zkmP`#HkqitS6WGR*I4%bT-50rw*0r zawRp3oZVOsB?X(P2%!U&!&g>0`AWqHQ#8D!C#~_Ry#pCREQ7x9>l+l!PyA?Xzbg}- zn9`+J_6pXsrqnbJ=Ns=kaOm!vp#lmAF*y#;DHDGVIA0)l3-oYK*7-#47U|FD z`D^vGUx>p4u+{Uq}s2KN_U7Kd8}hQvN|&}JFEZwaYT3<{@g0h`@#AL|bSC6HV3CUD|u;6y5WIASCZy2U&xzYE4P`5(yLOY#_a zPX0~}pwqmav>zcjsjjN{QzInI(2T11r$q9okP@OLXA_BLjE5W^Frv;$?~0{0DrdHP zX{&~EqPv>kB_h8|ISOdqU+;I>^^eOY!>>(_#0R5ya?AZLkNzu0Q}mCFsaI4olCs1Zz2DZ&&;5gYMO)KuP+Q4eH+$RV6zl-ik1MF@!iA;1TIH|h%jIj5io z28y|mnSL(*)VuSpd?)(xZEm;pIb;AP*iAfQNV6V^em{@jCcfadja})^cSG9~F1I<= z`9kXv2QgnOyCh_pZ|M#^Sa&pJrz|Ip5deGtLC_D z>1~_)Ty>50&N*wF0($$B#`b)ODk1%@^J zKJiB&g%s9KX9Fa897u&#GKEuk3N%eR-9?6aiR_39C}=T{5RMLn0|DT`BZc(=4dZZt z=etbNp($furw?J~G)v*-rVf5{R@<6L`I;3AGu1C6P4q<=Sum?*OK*WcCosPq9|{9G z0kn8~^aTGC{5gp%z%HdVpYppfgb69}g+QK03@a$=0kqIuIY~qp3SCYLF}p;HnFNV^ zNbfn1kYhDsl$?U&KuqTa+~v(X}ox3}mLtq$Wl0S9sFnv13$VH7##TzFxO^ebn96b zCl4DOr7^h-2PvGNw0To6i6sb?>MHR2L?93HhX5ubaue`bIWJ!O$)f*dOE|{|$H8=b z=Hb9AD=;N8Eh*eA*wWASVp8by5A93K0j&)2~zfcmFj*<#TTS z-oYUKB1K{Ur6uJCyTzOyo|%7JWJzPb&6AK5m^ZY(GC)5|acswiTNhuqti+hmy7iu+ z%YJm;*DCWr%lurfNS6bIu0!8jHTSf-rZ z6Wd;+DFUQ>Xil%n^Xr2RL3k1P&S@!L8@h>Rb2WbU+KLN;q_E1y=tkC8`=_-46BEWi zxJ5Ps_>5Da9qP<6N z#l1p?H#(S+P+5{zpC&w+AS8Oz>}TsNp_*`tF7tB+yxtlx_Z}GCG=JYfjibxuvLqSo zq0-sqO&9f*8T|amdf^Ux+BoalkgwBsB;q%0wiq*tTZ(wmEJrF&SpLY~S=r4?DhiB7 zOG-(mD?E2gTlDXJcoWmDjzW$jS9(?8fm_8)d?jLEnr1L&_d7@)C#&Gua01f z%!QmP?4ckvsmiMeY@Ob#&rz(Z9DNSNOjYb>Ibz2qA?6=QJGSJmf_1euYr@9{@5%@U z(vB`UTClFBW~AWQ;-eXXgQ14L;^KKTGc#w-D=zM92ni3wUIhc`$53=FRlRE|ic(Yb zy{L~$_Z1cQH-thB{Qw`Pdl~5Db(}vM&EFre&sPw^?P3zyS@UjpRJq-B(ck*o~U z7sNqF8Uwim%J49NfarIgvN2`aa-jUynr7g}st`1kBebWjh${G1H7)j3rS_s$0VU~i z1m`&&;+HI-z@ca5*QL-s-H8@DQS;p03RD}@G)l}!P6!YK&Zs4Fz)!4DBS^tE=n_C1 zc%rmM>==z1RdR3!&ev_BAJRYC9$1BcpW~I$H*QW!)xQO{lHhgm6{cX)Em472nxZEY z`9gE_@tn`+C?6A}CxtCyj@LEzZ-Ls>)H=T~)9yR_6YOb=euX!!TCd`BT!+%L`RANl zr^eeM92Je6h8)+4;rfSg3`~9nb%*As6(Q{zvXNBEGJD953mO*bSZ99|{rTBnqbA6p zZu~0oa{NZmEc_PwT@g!bb2u+MGb0VT{}VYVRkPqNoZnsNA)12b2&u--bs7RK2y3!{ zDltK3r&RDr(*)KIUw4$Gxc;ZgY( zR_mU0Z1$4=P1;sHXXie6g58ss+A$mc)3T1N(+Y-7_3=27WV8 zeV?DB`q!0O*%82@P+gDbj`V> zKb)MF{Ncz;pF@4L`#G&GwU5DvZ`v`hP}#vTc=aDnjTFt>bF)Cz@esX=)>oUb8=~J`6Y|+no^T+?GfZ>Zm~| z9dy%<=BGp8l>{eMNw0)Oi|7#%H(ro3LS`?VcsZr`fgr`tE+pAqf}C7bQl8P&pSAGD z4KmLy36^B0TP-%pUb&~WptTr3git(Q)Sj8xytF1cU!0xboZ3>celW$1v)!WqOg0&P(SKSJ z{niwIXxhibZ#jE}H%M0DG)GRJC!)6wPJk3Ro*zilJ2<=~$#@Xr*S>Da**@*5+*@^bn;z4DIo z*{#hrRh1PbMVUd5%b<&M(1r#M{y@n^ddkwFpPxuD$O>CB7;(-cv5QG(oPcj?+AN(f zPv?~qp8qdeaZmi5Mg7#VK$QlPt1Nt)QN>4sHpuoOdDr%@wlSTK4u;#Mwxij9@SOlU zC0Od|N2F8X1O*jBbc)8W{g@-pPo^CLpTtK68A_P?gC=y^G4@B2!#$Kkkr!gMVZNN$ z9N6cJ8q3o@j}-K8y8-O;A(egp_Ta(aJie0u<~a9%{?Usz*pm`}d3(V2jf7-h@Am3B z#cpSKR{25UTc4G6j-2|#>F9mp{!8~RKbUOHa7Ld_=0%poZSLIK?5yfc+HJtu7U{df z&2kf@_-FrJrpp9}W$e##(^e49jbe_NEI+R3H}j^^Z@eg@7*LZ;GJ9Ob)!g#a!e3Q! zr}%uPT30ug4eV-d+dWWPIFMe{Lt59eYf)+GqFpV`I~SFe zE!x?Hw;4*Q&Z>-zs!oLul(Al^OFD(UsMi0-+?#;MRa|Mq_x38a)RJ0@Woxx|Z?bHu zwX`Hl@-8nJ%L`yz77%tMBcWi3utY$sod5wNu_nWW-GBojY{MG150b%rA!IUHm`TV# z?EHbimze-|>wDk#cDGux%#xYsfBwnv>bm;gx>e_%I(5#eQ>Top8Qn*}HU1TqhEaY7 z^6KIkXfDbN=Q3?Brka9|hHla`o7c?)e&wVH%IWaC9NqgtT zXT`mqSre$uDP1(b9IH(6=h7SlEpE5>+I|XJ)EW<9HoO0Qf3q_ z%2>R3n{7$Mg3^Wab3s@CMn4XjGcntI7ssT8_CSNuFvQ^^4SO08ev6PL@Q?}Hk&(7! zCwR5Pr=fA7nhtxj!gkx=60%dzydxn$*Li1fJTd;`8CXFx4PWps`;+!h;CZ@oMKjW?#^q^2{aEpdcO098$PRc{_L}A`_A(1mmIhK z2Nx{Id(r+;^GWk5+dJqh=G4$xg~vR95JP+F0S%++IAbWcdd|$5bEB5`KWbp@D6%UiF9C_`ZL`E7)N*ZeV0S~ZTWkwg z6KTq%YO^QbX!B2V9|u`s_&&}RsG2E*5H}B!PSgp)mmcdj$u)Yut=su0yv;uyRt)wJ zU?wQ3u87Dv{G)26Dk~^5{bWAt3N5{4j`0`2XxsKz{v-lb?uWMC&+NxiGy_6yhyDMp@gigiXL zcAw;>LMV<{tjB{EVgy%n4^wiarx9 zP;S%vb?wfj`HQxGtGTXiX~Cisdpz5>Ep04cIX|_@c~{ZOQ|mVk?kq1_`HlJ({5|sd zzTNA#7B6qBS+_;~xCr*+pC|0cqO@e>6rGQ?dmb}dor1GsOYFF6#4K}k(eG@*_bb!A z4`2f6xgz61ovdd%}h!+-819jXPIsDOe-4mzG={yO_t(8SNwis6#{OdX(4jKa{CfF8`#_l+` zBM#mzHku)2tVKbre-+GG{A47F@(WwLoO5 z!&j(@AKq3uxqbNXn0nAq3{(chVT@y(asiX_chl5b4V-cAH;!uKSFhQV*>rkzrHJ6o znOdm_3wj<%a*`8S@zH9f+{Sjq2xYO~Ukyi^0K18hBTKoatg|}c#Y%uwDeHJWcL5Li z;z^uVq>u7`O&yF*##L1~j+_@`OYm+@J9kF#5Rza!%>5S~9!x9CUSf*fBpYP_F zO^A;kvwsFh1mAndOkER~_~RcZ#W$FTj_jPB=G>8;dt@kjJU^MTU}o@fSYST`@3n&W zVzK_!Z2ntQPMoKC^{SOCmNza5)RZq;FfS)NJ=IekSIwB;2=A?3R%eSbE3tHv0?s1q zVW^PxuyGe>n^>&p46z;}+g!>}fYU*^z{6!So8$ntN`{Z8Ts@^m+#3UhP5k$Tl}1&E zeUsrsQ8xbl)p4qV4isr6TN~lSEmP`c<{ivLU$v>z)(uWg+qAx^2*1BVM3F+>Q; z46ONMv(!`y!+vsvT90KEY`%m&Wy^~X@nDgH%gA!}$z~CcaK}n5j>C>vMOs{>qpxTx zcbeBs@ZcS%?8>cJUii3WGPx!hOl3=E#LnL#qyO0wO;~Mbo#m<{0Gq)JqZ39ikS()3n9k*`v%B4+> z4K-C2i|5bH+>*6rvh?)PLa2v8Ib)-l;LSJV;>%1=>`A5(BO&U{F<^pw6XMH_*f^xE z@<5n+VmywRa*S`BCV}HJilO|(7#^5o#fec;)$n>Wqb$T z2!C5)5_Wz@#CaTENbCCCW4+LY?0GJ4`LTM5$_#IU+skf#NryvXpIxMYzVPpSqb0Dv z{Jqxn0E$nV9^x~b2BvwjJrN)BOS&2@&cEdKaLiaT9x z;YYX94@_9n;gM&@;KMZFjGty2*f%i*5AUAV;7;&YMVs4AiAaR%h)Y^bd)w|k_B0VQ zohiPcJlYUnRD{H4_E=ithflNS5!?9N!JBNmv8Z2y%ohLDlu%Q}vk#GzGJM_`6?vRD zhR`d7F=3K`2vSTL{GeR1>VRb?5ab$QjB>r3Ki#0AHvo;mg}+5VE5CCz6oZTaTr`pT-po9-%IR$H_D zgu1zn^Jn1Du{1}@Q6XdFhjf8^$!{@#e`<<-d>I@11o2FCyj1 zlgi(TlzXDf-KCLopUFjL+xT7ZMm+_+A=#K|W;CTT)&s7Q3G>>BL`eB@x}BK~s@rky zD4mZn*vE^tSzKvQvp5yy8JT1AuE2gj)|@}Im;W}c6E`5pGhl8>yn z87aXO+q~2xwL$lxxZ;^toBw4VNXYTQ&JSi?6HL6`{4S5jvZdJm-$Je>Ay@eib+*%5 z+nlDErm<>8eO(pe2a5`3=cK2>5?^bs)p{h?p4MfWb_a8;EQyc9Ifl&$;Bs*7+lACG zRMn6$YZ3Zx`Dl>V2P26y3YWQaO{Dr`nw3H<1}DWJ{Lix4|Nbh|rmK=tVbf8qG>>W} z)|lLwnoLZ`(=`_x7^yCX8ylW>kN;XVLkD0TMaOu>#6taXU#r@Q(1OSdB4oDK>rebU z>qD3z_KZ-XnK3aKN_25pMBpE-+spKDMmaeca~V2BVEP1Y+9t)kIFW5}Rp#drU&x~F zhb~!m?31*%Mjg9#;ve?Un9grraaz^E~osn?)OeAr<}9OJ)!awAk;jne*x-uLB8S->c0#syF02})*i~w!u>C~ zSif~YRHpF#wgWEKZH?)gm`lFME-k7AZ$%` z!!*N(bucWM%OHx23k_75?er2;&!d$I?erh zQ}(N|N8d(#5%KG1}$EBJ+*<20F7t-;AQ0bLCUhmd8&j=eM-(_f9Hj{Z@JM zq;h^^tK7qKP^-iEH%9AJUw{hPV)?N$Ijqw=62E;Iasf8KJEN1#L;2{{_&=S+8XW@v(BZ^ zD%xy(|Ef&*Oe+yQo`ji<(M&MK;dkJn6Ug{7Syti)PPNIFVnwrLx~H-9#H1~#;)|Xp z@A;>B_r%i>d(Kcq6~prQW@MOzdbZ@NK8689wuFOSkMj?;G|j3L89K3lh{?Sq(-0oZ zEf~mlZVg8Z&MHe+kpPy1*wl8O<8N21(%XNxMT~${?N}ThfEq@3; zc?)OeAC+}J1 zo=~}Rdb|D)%Im?3ZftF;$6I56Y?_abkKgZ|PZ{(h$j~9lpiJXN#0WJ%yd+6|+bfZbB zMb*oaaQs8BJcLImwkQEn3|I}R2%qqRBQyT%)$Tjbt6F>ID?_j5;V7w!wXgDom%W!e zuBbZgyIaqHa^L#kht3;J@?}6g@+{==`Y6*Zgrj|Nim7xX4yT%Ft8l^l z1xBV?K}J5Ru8EMAs_CBR{SFtFr|@qF~OO4TZ?pCS#bQG-b_2!1IS<}pHXcW^L+;V^ z|Ec=Ytok^5w*0;AgFFd04@!JoT;v~)+0^1W&z$;|>o((YmZ4D?>N@0E^uLb%qIkUM zdw9{#FM3g;8Skd6zd*ISV<5tf;%Lenwm2$s1xB310XHH3hC9Q*dF&0BN7}yVC0I}m zzo!@;d3Q|g-|?0Wc+1KE&9}tqWMH^RBC~j0oFy>$2c2m;Yx*~MY&gNZeENQ1Umtck zTH*%>or7s1)4t?QadfTW|0cxKGzoQajyN_GX@eycfJ*fwcPwVs-P|OkoL1J|b8aq~z3udK7Y|+4bk%$JK$9_Vtl!$WXht&P zQcnEw*&P?ps6QCo_pLk5D&4TuzjK{G*8E-lH`bKL_a8WI&N_#^XxX-kK*!cCi z(@mk&y#DozXLfftoLDpKqHnFf^t1+N?wm}Y`zLvG^O6&)TQ;7ubxYfk*PTW6E#=KC zc@DJsN$Hjgo85&KO@#roa08e@g{Qyndziy=yUVyJ+wS(KI8tqmx8f@Q=+P(s>q?J>hTO}u1>@y=4 zd->Y)*Oz>GqV=*ZTTWb@KApYZ<5}K*<(4nVzh2Q?nr^R;veq?kDu1`;*=B40H4aD0 zFN-R_(D=7V`T3fEt^0o;RX(73)+#?YRK5fQ;wshi66$vu%Rj;&%;WHW+IB~kU-+t3 zj@jJSruwb>e;+C@L-|Fj-zqj+hit;6OXus~{j%Tjgx}$aP3oE~Kcwa@wfeRP3 zG#1yNb4APYbJvtuv|kMc=t<{Z=tM2FO^iQb4zL+9uubl_$uz-tQ!YQ}0o=1m_bfO5 zs(Wl-aLU==Ya$P5NdF8ZV>YQMFUX%61Gh1HXC;J(V2l!y z^xc!?u?}j$L_#_`Q;z&u7%E@80!i~w1w1u++6qFhj$=1Nhgw)_?3zApv+X> zDviC9LSygnQR8#!J(Sy1$FOw|$DUOWW%%^>a9mmUP@e0a@VG*Il)FalX;phJG#;N^ z5B^nz{5Eent+R4!zvQf(@If?Ra8?ckbyOZqt~_#S;;TM*R4U8p2jR`N+2Q+`_KY6A zS8466lXkQHbKK7=rDma`` zjMSGr_vUX^3no%uM!qw7!TQeUhQD)|7qHIwOz>{U|ANn|#8_nBORabAoWgv|caAw1 zdB=?svqV}iLrNEwV)rIJ9JG=#6~{pOf^5#XTpV%-*Hx~Y%Ubxo5RhbQwU8gWI`o{| zh7%TW1RB)k^64vpRXOoE`GlSy{}(?FJCqM`r8?XYD}@7RtNYe54)E(OsNE}eyk5N!3a}Hb8jpv zWRmnqg)WP%(^klx?=sh%OyL1-6-rB0HC;(|CWgT2g*ZM<+XZQknR%f+VUF9p_T-#x zi`H*CVHwhLJ2xD8^tRZd^!>J{pEOUNkyctfbI$Cv?9{l!ubb}=!s(Wf?frFpQ+oEQ z+Q#$d&Pp}gxJv50;j^>i^X64#&n|Jt#@ODqwPY+SE?$mfw3ui0Zsl3^8>?)MO&L{{ zI0mJ@a#hu;#bt9!3iD^q04MoPf5d)jD8?FXT{6-yAvGJ^fgqLxdoqx^8N9=zWf(@u z0Y#N9IoFA;ol$&6#vng_tyG2im3WLsVFryHoD5cHWE@$2 zO>|`rcI;S{VQ!C)bQ9unN`+h!CiAcQ;tDbUaX)oYbTf~t*%pZd{QGK4oYYR%*3>dx zv*1d_ij)m0TEfJ`AaU90Wx@9ZoA8rDV1OtbDq;Gu1M-p{#oAVqC!LL?ebLHWYmZ`Z zD&tt8z^o3xs=Xo1ymrprLF2wS)m((myb?2rYeXiVs3HCQz zk3M4#GWYcHj~st<{S}?$B*JxqCuBGA46;tmxvN5R?mvSZQ93#_yHg>HmqHd7nZMwE zd#pw=Ln%T(d|E=l2r4p*v|E(CAK;ilv=7z}t^6MN>R8m|=&@EaagD?|5X!Mwe25x6 zVNPvA1+iuh+(b4=?O1L%{j!>jSj3Hng?pGmmmIsESOae$a~`8<6MR`WwG#V8E|5sG zBGq9nHPpLMWHdwMR(_Q#m`lju({KQ?`{2TGpV(3g>~&T>a0A{rTGAF115Ob6C)Wy&^G( zdSR<^-zZ)Hjfj6NF((I9)cmbfUEGkYla;0%X@;bN;WWE;7%!m%&1`GJ?6M}Xb>!so zi9^heI_T`U{ae!J7p7Y?yfgZQvk)uQo;k;?Kli$wkyFizjym{k<4#|E-rVvmP5q8- zQ%*fIb)L^&_z_9?BFe;SLGI#kCxLkIFQ z3x@XhAuoN#w{aeA61Sd3b|_}WVc_CZFj1xr@(==$0o#*uQbylnot+%I$I41s6jgWIU$`pPn1@80_?Tu9mW-Sn(kbq0DKUw12Rbo^ol1_e9$(s1G%*$H4st?5#v&Pm{|V4<|r)wKy#?0a?!^>S^Ox zT?nTWJ^Dwqoj>wCl&BwN$;+rgs+p9i8m*09^X=Bmn*s+I_6$}txdX`UUO(%G4fm}& zn0agKeOrEL`*n8Q3fs4jys-Anytp+-;%pBf=!W*~sW8e{YVCb73OMIkaUzyqiasaH zFLfaZIC;*qVZQv>{TJr}-|#|LyhBDv4jyfq?oou_MLmh;NBwI`J(P0{3R&_6 z^VKQW0u&?PdWTf*7pCpcJ~tl ztImG(^Zn~CYu}tR`|Psq{hN0^Jh%oY%WU5D&_Ht}HuO*3m$csc|BU>TS@p&x#jDT2 zezhYvpL<{Liqjqn-qe1uclkFSJOWbKjfLYMJKw^53){!oYJSi(yLmP3pVeENw>HQI zTC}jZ&{}t<4HO^t`cDg;b(ra2Tf9jH+T{@pMHz_4?LHVg?b~Rz8bmc3TwOrgXck9(px3_<naNDis( zIIFkudp$*s=?TYK*+Owvs5=QEJNKwfSf$c@gIFz;!}_srQ=4{5OkHSPJ9)kdKkH6G z{noQdX7sa9pxk=)565~|eX^cSnDi|BWIg-3F*f#M2k$1}S z3Ozir0lLC^fU*`oC~)_r*YQz|p~$OP4>J?ghMvN?&d4N>@R;z^jFLt`o7y_mXP-u8`Wex~h;0FM;i|Vg)DK2PUAEkA3--Yy@&9P`#so^jSZt>3%d_ z?L!$4heWMtAI~vCxz#?NDv*oQJG4Ks;QVjJr8rObrVO}e#C`L_o1NFixGqacxy%(4 z{7hphltTy%c)naWV4}q^96>ycq0FnW@!Ua$z#^GJs%sa}n%FGtP|U zJw!%Qt0~ZN$ynCPZRlnu>B=`CRsHaTBG?gg-ZVFb)NG}00M8&RxOEB!a!8xq4JTC1 zwAp&>{$(Xq1*wjU-Nh@-$^i$F*+LF==7G`9W=HpOF>(owXZRB5NJj)Xc-DtV-PmXrmTIau` z{#*mOlX9|{hXxsLIpC3z#(hu#1QVsKX5rsPC_U(;1LDYkO; ziLF~8taP*m8y#8)!20~0Y3`V=msX5wly@5rzVwIzY;Fo$y_pM}icUPrDU#n*TaJ_& z5hu0!cedj`+dn#ovHSlu=48kED^9P#DS+bJDb=XzsWQ28jQ>kavcogEH=+{WS(Wo&+k^aw}|(Un8GT^Y@WY$h>acNXSav{G4yLatkHJA-9lH45iNC zcOU;`{Qo$vMUJ67vruzxo-sQ!BRv)09-acHHRsO3r@|gztpDX8dyHlNVK#H&7z-bEdx+_wa$xJRQ=rsT?2kei%zr@25~Nx9T^Ly$kw&Ihw*|A+S}70QQ?v zEQBBA`#3Wk9iDh?n|5I*t zsq`?vGqvQ{grCy7s4oKAjlYg>^0~fAbo-9+U5?Sdr>8c?{O;6}V}8J6x6U+f2;OM_ z%=uHS6s>GZD1z4^V^%Wq=sK{_3Jru)bs?gsA)sD{DOsAp(;EAU7Uw`EjU)yoVsXM#(dxIs^GQud$Y@+ZJ58BF(bIZ9`A{rn_)V<8R@|lhd+zM z|G{tZ1jhR^e811}{Q~Cinq~xQs-eL#$2&JOTHjHtHvEpYVJgne!wIx=@@?>xV%6H= zh9!o87W9Z8i#|+L%Q=`|*X5ewk`IVqciI}5VZZW=tFgRD{N^>&wLvxDeR#F?^{3Wm z&8Fmp71KU1o?tVkRATKWM{VpLcKTo^IOadZ0$BX9F3ca%1hI@DRtBLL;*?Os=r?Ap zAbk2$>x92(vsGKHf!f?LA@WAmhLnhQ=tX24#C(%!FulfDJJqp!!D%I-wVKL3>u70Y zHEmM0NK}C}!)e$o-w7_;XrAk`FPztS)#^Np-Hrzj zuFfsaWAJSI#^BgdtXGneI49xAg|#_l<}6pRjO=H=YWKv&%)#ctgp73CcQjYOZT!)G z$o>+vL7W#A%6Yf$e(rBc0B@12a2pb1V(rE{FG}N(KSAy1pFBH#WK&b&y5nK#@^%B51&zM+Z_JaaU-YK)tx?qAzV8C7v}=V*c5n5>Wm*)87~U+GiI_K6PhRj za>A-8^hm@rh8LHTC;x(tTwxtGo4=^}1(WWv8k~usQfk-i3U=rrt2ajyJ~5MC;L3Vi zsC%JP)_6Q-ccBsSFfx@+5%*k|xwM{-q0g+eBqvkJpLhN7GaW4^Mnd9L#W>ZDfRL9_v+|u+cp( zFBUctyr9Yrm+FoLg-vx^xTh?K$oV5%>dWp#4jODwRLqTdd1_6z*XvH%v$Updc~RBQ zzE${JJd#$pIBU*oe{O2w;_Q;umASTy;pN_1xn+SDkiKd(GSpUCrgq3uol7{btMJ zm8EHUtIs#L#`!)Q@+O*BoOaVWxbZyP*kRqcdSP1r+U}Oct8im;_ogrTUGfik@XdGa z{|LV!Yz12~ZH1$A;17MZ1oyOkkQdSXUAVqvENV`h6LD$+#AD<;gnf(EQu}G}$;BGW znq15u7g;mLK0T&1K=M4xHs@^5y?fApkZg%%SfmgAbG}V08E{)7c#zJ)#);%dp(J9s zb>8@29M3?OEHkfY%2~Fwv0+KQB{z_LI-mMUS_-2@O+)g7UV`<=K5h3yY;bAIikd{y znixb5GP|~y{$k43c+&;(5{um(9G`N#pz#>mG01t3iNxbc_C%sN)*ib~v=P%gW%My? zkJOmv(c%>c_~!p!jUFZ{D~Pm}O-3%erqjMkt@spP9>#}$W2On|Y{&}cj*nxR%Lr2? zX1cd<=N>0lc++`sl|1MRaV7`?M5IRKQAuTKUXC{B)B7ux6}hnrsw)sPy5)+zi+=b* z*U$rX%i|Lg;!-n_2ntlxkmQL344HFYD!hEv+hb z#H={u{7qxOy!5oS2nnzm|7c(1tODO=!_oF1O*3Y9h+>|6FI*O5= zOFr_?NK1f2!$~K&lR1##6tOl!#Kth-4I#hy@SL#=Lj|TZTz=h(qn_0*r~r|jAhPuU zRO3R{fhyp7LIBvrQ|=fz>gVCbaKkXC53?^W!txXE#larf@n?&X^#Dy5{uX{Wj&w@_ zLTym_=uPG(N$Vt9xL2y}IF%I#3Z&thpRPoii3_Uj&&D`h-k2w2eMx7oZeN)6N>a8j z%hR{;oYiL~`J8|9-d6vuy4w;Q8#B|rGreX-g6qfwX7}pgeVLi&rsm+4whh>nc1AGW zeD@5r0J6ck6u!JArVpNZ1FK#20c5zCojY?zyeE>0pfE3u$`IBI(0nwSOH7zGHNh%3 zb;$EY`H>&K7rn%I)2~A{rGujiCx%T9#o~$- z29oW$$}QhJr@r#kkxgg(=+fqS>(6cS2g@>`N`h^^J!Ad1HZ53mQt$QmopSL@S8iB( z(H&>bFfZ}g=VY5dPG0-1ySlc2=j27pE`8$S<9fE$CIpYqPERaKN>2UBj4c;lv*px# z_g~O5fBoJkySkshsbkgyr)JKEd)HVx{)r>oc^6I(X*Pb_l!~2cOZ?51&D7Lp=cM?M z;fs12$4505PmFwsQ^?tgQ*p?zmPEyuqMq){<**59PReUwt=_|?Kk9LC1Nj-u49B5W z(d38Wb8P&|&zbldM!`e{iuQ$p&4FQgtLe{jMYh_}TgGvLArne}PgSJ2Bx>Uwz6rAw z|FC53aa$Ixxu9i%!!hf;JN|87^F>=0+H46YU;XG=ZI|UcW8t4ZqqSst^;~b9FDAYA z{L{D2cFbJ3rgGh$*4j854$Tf^&dW-u>G=L>*^PNW58n65NZCo3Z1fc*fAi;~Cv0lT zUy`01$oSq>sk2h!lRw{A-FbI+>E@=AhFxPPCS@m_)dgSBs}KgyK$h7t)m}L1bQ*q} zS(pd79H-fsrV1Pknv}yCJ|Z_*OLd_eFhg@yEc~#3qu>N@hbv)SAvgJ4#{5SD{h#?f z$@Z%QM=rP9-*kGN-kEXE>pmN|zmgu9ofm+WM(K2I@Gj@&XmgzLuw=ue6EP$k=wC>e zbp+vNoPEKcTGKVu|95TW6?z#lA=paZ<%vLCiUz`5<9 z!y3yf^T2VivBIg`A@L2H9z$2LE)Y)TF1Cr}axbWMUhaGHr3YRNI)C=#m!9xBuiO9W zt*)K?Z$JBrvxyHlvk)VginT3e&!e2z$`<=LJ0bji*f#tp^8x~nq7bRn!(RXF(0z0v z;MXF2(C`CvYc-XGe#aZRKE#1D-2s2rDkh_U5!nC)e?Oavf+%kXhCfccPXm3VlG?hiI&lB2d^$8Xq|I`i5#xwSj<@ZI$w@iSc0gUcuT-M6^VeQV7ler>{sLV((49gaIK~Sq4a*{r z;mzS#VDNhAaTC%Q{|}vk55Rh6G@Xm9{|M5Du7^r=DohbXNPO7NfvAm?Z^;^p-j&CYQ$#E!YT~SiKv**Y)dC=T5 zlM5I4^NN=)&VsdO+g!A4aTe{dygL3=G~XZ0t64X9?z)=1IqS||y6MVumgEKa?*RUN z4*y-hKc{kKNy$ooZeINse{pSb3jdY_ic@m^EU$#j8{ZSW#r~4>fRSg6HhHqKb2ly) z2U$e?& zdqrld-IJW1Ue&T>L6T$nj~-1(Ix#uryxpIFcIN(*OT9_!T@ms}Y74gc~a;kU}uPTpZZ z(VIFeu4B={{5kmvX&Le7R4hi$jo^LWw3%_c%1ZO*ir zsaKn3gm{mN7tQyt>bvTr#NewJnO7tQ zE64iAf`3jjH(nInZ2!(DpA7tb;PByrpOZE=W4p1@{-)z9?0BDLENF6Z2N10KrkvCi zN)AN4g9E4skdAmYT8vIR_+pcasuTZVxx%SMu{5{Ikn{)a6^XVP8Nt%@^305~RP*LE zpP6`MUW47~JN&sl-R!wIDKq|mdlFpEgt%AZX3*HW*xVEJjIcfDpgsS~u^)`6_K+9V zo|)-h@E{X1@c#>}W?=;5A69#c(D4*%aMeZl4^HhOEh1J{oA&b#f9|t88x9|0v&`45 zW(7}WvuwZKIAZ>1aAcY$1&7$4?~U(s%yfPX9U|3O)TGVwY)`%~!Q;ZNd(eZyPi)1s zG^&U-3y@L5q;iRw7xT9Jd**PjITGyY{n$*6Npw0BV$GSscalBM#2DL?_R7QmeE4O% z|H$L%#mULV>9&=&RSODIiVk3$n&SDdpKNR)MNak z(1gbYAIy$G`wKs|eH@H;|Ke}3DNUnc++}~n`8Z~y+nYi$g84iXDFMD65MCNT&pBC= z0cJ-qo*mu>lRIQ64H(O<-2qSy3ZYHo$SOI2=r5fpvNl{%r23~+0{00&B%cfm*ywsS z?Q?L^6#UxHLLK0CL!BLz=$oJt&B5Q-DVkIWBv}x|(0qhE&umT$GkM!K% z9_%}ldD!-yHpe~cj$3o_UG2#wB?VreJ`4c10ww)*18F>c0CRxya(vTrK&f~NzFLW%q z1ZROFz!2TQnxMFZeSl7bOvE@&0{%8?_S%-CT>z{-RAR_IR{VvPc)waDo~@sI7QM^_Zp zKGcD8dsqi|)ih3D2aF2C?J&NiE-Upm)yx%NTn$8B$n}BFh1*xm?}ctk&YE2MY+4(t z27Ao(l|wxWw`QUmL+lKxh@Bj6te}ytCsn2}pioqMRO&&?7_TF*FN8ATN<`jv^P;nq zSMVEiV)nZ|%g($0)YX?)Ui9OG|5$qR{M}b4y8fJKKlSj_7ANPmRBySqYpM6M?ao4n z=bDk~OU1{lgQI5o_>Ukvmrs$Mi$I)2ib>o@l`u)}>Mz(F23hJv>&)^?cC~B@zGcGo zWg1&u9$PH-;l>)-O&ICO+>IkY5LL^g>hLpyVf!y(N0T`r#cRbrel$SMb##*wD@GI0jvO^Bu-s$!uxTb8A-0c z{xaVC&#_)wuWZkm_(m_feh-7Pu_=Z=U#P&e4oFuY^jHO2M+aZSb2LrxHA$#12)T>b zR@hz~h?^DDePwKBeE)wQaCuzr_I9@mjvBsm5bu0b?_7x$5zcCHP6&5dC46r(tT9-< zFdM=>Le%066!OJ*yB`A7+AD~#YQEXcQ(@s+ho)0ud-FdJJR5nr>-Vp|YP}opz0dhK z+vBd+!AB=Eei~`1Juat_Vx}m5ns5FeiIQfE=*vV%C_H40-eZLHP2cRXcbewD4ad8> z+zZy6;rv@$TS}TM-g#O>y?;ynZ1i{@_&mp*g7$$oCeF8`T&1NkNmAISVOm=b0;6Zm zT#%QNlDA;yECfosuE)PpQ~9q2T*h7iYTJz8I}h1TaF^mexzw7X;-j1La0C26mfvwY zKY`TTDQoM|@z1}{@vkVRO-dWIc!fV_TR8sNwWnlRSw=?LvXbH^E~hsY&kqFVhvT1b zz)s{BT)%*wc0c2TXU<6WVecUq7hs*qAEx6ap$h!}EBcq8!TQ2eqJM3fIdh$D&YXn} zMYC(l7pCQuI8Sxv;$L|+<)yCPc}4S9S7u|arnG2Yb7gkMY)DLgo0l-Yzu|fxGBd?E z`xx=R;?)1KC|?aAOIVl{^t6W#4W09ggv`{<*ZWFx&3iue<)rR>Jaul4>-`rK;vY(# z`J&eg1WURdedfo`XRw3@PBM*n4^|buk|3O?6+OuiBK*z;&uGD~k!zjNq?e|czxKts z)8`k)=gh3%>3k;9 zb+XC}g#n`q<+TP5V8LFdQedM>R*c_{>s7+l!e-$n;TGX8)!8ZR5%vlDRr7#wP&gzU z7LEw_3UAgMZ&7Wx3U3qMF1$l{r|>S}0pZ=kdxZB24+leE3EvgnJ`jGWl8O|{<{r`9W02+^(cEK@<{pDI_ZXzP#~{r;25IgwNOO-tntKe=++&dD9)mRZ z7^Jz!Ak94nY3?ydbB{rqdkoUtW02+^gEaRTq`Ai+%{>Nb?lDMnk3pJy4AR_VkmeqP zH1`;!xyK;QJqBs+F-UWdL7ICE(%fT^<{pDI_ZXzP#~{r;25IgwNOO-tntKe=++&dD z9)mRZ7^Jz!Ak94nY3?ydbB{rqdkoUtW02+^gEWsb3dVl}EEdiamJ9vD72|K<*HyyR z!e-$n;TB=L?(7oo6OIbUgx3nM6J9U8QFx1v4)lrxz2ZQxIM6E&^oj$$;y|xB&?^q~iUYmkK(9E^D-QIE z1HIxvuQ<>v4)lrxz2ZQxIM6E&^oj$$;y|xB&?^q~iUYmkK(9E^D-QIE1HIxvuQ<>v z4)lrxz2ZQxIM6E&^oj$$;y|xB&?^q~iUYmkK(9E^D-QIE1HIxvuQ<>v4oozh<9iXX z;t_gQ%U*8nI zC45_Nc}Mu3@O|Nj`t@VsC%`1o=O8e4{AHj=*Ir@bIM2!T36u3}p|E;)8R}pm0byEF2N;72d4cp4Ihhy8e}F{!uNFjzVHK;d?fr7_4vdCKJkFhAP@L3`s#q>0iSrlhxjC3lLveTdBBH^r%N0yKWeBuG0c)*9#toamqz=x5@`pE-6gFN6f$OAr%N|ulZd>EU&CJ*=w z@_^4E5BLo7fX^Tg_zd!Z&ma%@4Dx`_AP@Kq@_^4E5BLo7fX^Tg_%KF@S9`G6D z0iQu0@EPO*AI1xRB@g&8QtA+$=ESU*3?8@==+U)Tn22wk3|b8XeY#H8J=x>;pd?3_ z4_TEgIiCy(#u_N?lR-~n>G(N7%KT(dmAGR3yTDb#)xu`sM%C6L+@zAty56Get-3y8 z{3<+qlCHOnzmDte!dBr)pbOR9lbk*`tzP z-P5O%e)VWTI4B$v4hu(wdxe~vlJOmhoSTyI9f_QqlJOmhoSTv%T}gpkg|`WB7v3Sf zQ+Su~fbeeNJ;Hm12Zav^f1>t3sOyJ>4+|d=J}P`n__*$TLinWcDdE$i-ZR2y)tBdV zKj*S!NMpA4Md8c3pEFuABs0r@p)c}F;lGIf|0?{g@J-S1E#cdu>N~=B#Y^w$`hDRC zD)~@%ex&PUU@Y@G9xW-rh~{;&$_s_n<2R!uFn$PFH~s{$ ze*AvmlJUoZjVf=_v!@6puaM7URYvub`;*RSdNS9;5@g})KL ztvcTkz9)QN_$i*k>d*LEphxHxCP8WyVobdXEEdiamKqHxDc7}MSdH1I(5OK#3en#y zfwho9$}yGP2pR@4}~8KKLM7A-%7-9CE~Xd@mq=b ztwj7*0*UuJ?j*mJh~E$?0DdbGzmRgyjaJW6te`B)vBi{A0h((zj03e-Foa+|nX*eu+r`&)#YRI*vuTXelu z*Cz=t685Xk0pXxbhO`bf~sns;yJlrSfi-_o$>-*L}L)r(Z{fW5R2N*9or|-Y9%p zZ+S-eyh;uU-&8$s3Ex)D?+D)$zAyYxzkV$I1XzYVDC0nn&?}@aR|X2)4lEYV6P648 z!s_uF{2G9iD1(GN8(0r5t_)+7CEM_g%0QEQfYj&9phd8@4%JUxu1vaI8FV?8cdPsY z)v#Mgy{^pIqw8M%O6{%;+8ys76^;q76<#O2UU;MMWL5KTiy}ACwyN>?XFDPU755yWaY%z$8p&h`{j~jI4T>wR4zGIE;&{%IaV$?RxUYK zE;&{%IaV$?RxUYKE;&{%IaV$?RxUYKE;&{%IaV$?RxUYKE;&{%IaV$?RxUYKE;&{% zIaV$?RxUYKE;&{%IaV$?RxUYKE;&{%IaV$?R)HQ}i0IbD@#R3DFj*yq!cu(M3P`O# z0apoE3!8}8C>#kot<2|vaCetmJjzPMjs+^;Y0*BAHe zi~IG({rcj5eR03OxL;q~uP^S`7x(Ln`}M{B`r>|lalgK}Utip>FYebD_v?%M^~L@A z;(mQ`zrMI%U)--R?$;Oh>x=vK#r^u?etmJjzPMjs+^;WQDJ!E=_C=-ai%MA*m9i`< z(U(IA5Ud&hHIP<7B}OZent7!(^Ga#vmD0>BrI}YsGq03pUTNHM*CUf z7p@pD!}TiRYGJc*?f6QRZ&aNv!c8jQtm`eh-m2>p!1L9xkJyH7<0k^QkAEAuV|+WX zRqfn4elo7x^~PN)=@fRUGUn1x0YJ6WJ=j&>GUn1x0YS5W|85NER zuN7V=yk2;t@D{cCR^e^J+l6-s?-br8JRrPVc#rU2;X&a8!k?(k59<0M;lsj5gpUdz z6F#mxpAbGNd`kGVX!VScvwSr?QT!IqtFMUs1^~MDt$?|3$R@SK)7k zZ;FO*38@=Y!)HbOP)H4-8nT-BiICbt4S4J~Kxzv$;2a{gg&KSXBDIAYd<7!4g&KSX zBDIAYj4vX!g@Ek(0BXAu*R<;c@IDf0*9T%&<6fW zyFQ?C7m!^a(C7jMVu`T+bbyoYvu zz@S|pfY*g3wCe+)Cy{o20Q4l%t`C5oMB4QMNsoY}M?lgeAn6g1^ax0L1SCBIvg-q~ z>jUtbvUjxW1Mr#>Y1aqfH6_xn55Q|mq+K6?*OW-RJ^-&Nk#>CmzEfV)t`ER>N~B#M zfbWz@yFOsht`8Wr>jMVu`hY>ZJ^)VjSdu0|xE-faF_1 zc6~s0eZZhyA24Xw2MpTv0fTmZ0A422kam5*pj{s@Xx9hel_g)%t`8Wr>jU6+me8&b zz(dPx+Vuf&JCSyMEx5E6|BFS4Bu7}Nl2T}rwcx$$ zfUAV7h0VgX5*`rVExbo~ukfJo0pU;7k_UDD zknmyQBf>|8j|m^wolgj#6h0+L5div{UM2r_{+#sgs>j zCp)DM5`g#6PN{M(wZv{ULZeu=bG>M(wZ zv{ULZUY-TgPN~BfVF~S&I&k}AK-wvF;C9wbJEabMPNbbu2M*`2v{UN9+mC@qoRI1D z;OcImN7r6q;yAnmpvGFDPuI!1Cwu$~l;jBWp`F)*R*wS<^=q-N=LxAf)PrvP)h}Fu zkyQ`=C$1JY3)f;ss|WwH<`&^5m2cMd7F}=E^$EH@N!L5^9qU1D*59Ev?^0_!gW6&@5mApD8i|DdiP5Q;(ZwcQPCEpRgE1r2z z*Y68IP|1h7^CMkV}jZqTgVpjo>?vvz}K?FP--4VtwZFl+N!t`s+5 z)+TbLxB;^^kt@Xwn6-&qDQ>{5P2@^(17>X^SBe`jYZJLr+<^I-$d%#-%-2M&6gObL zCUT{?L9=iJW?^1)rMN-!Zv*DvH?ZPMpKzmm!i})ncuk*hBdGK$kUrr?P>D#Na3g5N zYx;y6VF&dB=@V{*Wp^czKH)}Kc4q_W6K;fzeGy2Xa3f^wAA$4`p#CTA9B`D16CSC8q9JCVFF3USq-Yx7EzAb!5_@3~6 zV6*CMR-MhNvsraEtIlTFUx#oH>ugq?&7dToVx7%sIgxcXqvb@_xdt=HN}xyR6(+)( zTZ37H*rAec;RVL&DA_ICBkWcA+roE*@9L@dbp5{Y1C@LPT!;2Q5A+DV!fj~nI&j6W zfgLL87G5xZ14?!a_XvAc{^<0qxcYTm2kDNS-45KMR<$wR^e^J z+l6-s?-br8JRrPVc#rU2;X&a8!Uu&92_F_dB79W%nD9B_3&IzLuK+iSCL2YQjrf|+ zql7fsD4J{(O*Y~?vYa&8D4J}@*TUzv%7QLlKZ)wq6TJ)9{y=9a5bCdXUllXI!_;Zu^ zbCdXUllXI!_;Zu^bCdXUllXI!_;Zu^bCdXUv+CTeIybA%&8l;=>fEe4H>=Lgs&ljI z+^jk`tIo};bF=E)tU9+s=RX_guls~6AP2UBTZpTL&B9H>Ey7!bw+e3)-Y&dDc&G3# z;Q`^@!h3}G3J(e&5I!h;Ncgbu5#gi4$Ar%bUl6`1d`0-K+Wdj=Bj7gZey;)(G5>Bu zkBG@CDHN_4e+wn6gsX+k!cD?0!hYR3ARH7935SIv!o9*+fa3#7O zl9|Yr=yvcDkt@;d;3XngqT9hsM6N`)%b(vae}23C`R(%Ox67a3E`NSIXbX09Ozhk=p^TATlDi16)C5L~aMTg2;&64sZpL5xE`U3L+zNJHQo0 zM&x#YD~OE9?Er7^ni07j;0humayt|c*#YgBePKjyhvFeS6c5<}jh7{i$nAjM%WFpD zc7Wzvk-v}ee!D>Vmw}A;+XXHnGTv_&=uc$4-!9Of$aue9;HY6B_uB=I zVmagec7cnCjQ86G3iDaU`|SdSiH!H#1qu@x@3#vSCNkb{7y8R<#{2C87qMo>`|Sc3 z5gG5d3tU8Gyx%VH60aHWw+p>y3FG~Cp^q;co$6z!`q-&HcB+q^>SL$+*r`5ts*j!O zW2gGqsXlh9kDcmcr~25bK6a{)o$6z!`q-&HcB+q^>SL$+*r`5ts*j!OW2gGqsXlh9 zkDcmcr~25bK6a{)o$6z!`q-&HcB+q^>SL$+*d>|JC7IAAnb0Mf&?TABC7IAAnb0Mf z&?TABC7IAAnb0Mf&?TABC7IAAnb0Mf&?TABC7IAAnb0Mf&?TABC7IAAnb0Mf&?TAB zC7IAAnb0Mf&?TABC7IAAnb0Mf&?TABC7IAAnb0Mf&@GvO=vr`Zw`2n19Cb~Z&@GwJ zEtx?7>>`vwHQ%*c@7j$o!h86x-S{FzzH2wW2$ApF zjW5Ed_^#cc1F!k69?5|oyzymRQ`YrJ4)jP4^hgf$NDlN!4)jP4^hgf$NDlN!4)jP4 z^hgf$NDlN!4)jP4^q`%rpR%q;a-c_Ypht3`M{=M?a-c_Ypht3`M{=M?a-c_Ypht3` zM{=M?a-c_Ypht3`M{=M?a-c_Ypht3GkLbBa^xPwQ?h!rrh@M=ln1j_X(sPgKxkvQe zBYN%;J@<&7dqmGYqURpbbC2k`NA%nydiLU7Tj5*h*zDEV?A6%p#oJlV`MOtQldB_( zaLutvUsM&4^L4MrX0OI(uf}Gt#%8a^X0OI(uf}Gt#%8a^W-nUKnmJ$hYHapuZ1!qw z_G)bQYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQ zYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQYHapuZ1!qw_G)bQYHapu zZ1!qw_G)bQiHG~d!+ql6KJjp$c(_kI+$SFH6A$-^hx^3Ced6Ih@o=AbxKBLXCm!w- z5BG_O`^3Y2;^98=aG!X%PdwZw9_|wl_lbx5#KV2!;Xd(jpLn=WJlrQ9?h_C9iHG~d z!+ql6KJjp$c(_kI+>bu4HTuyzBE6mc@^<#i+u1K~XTQ9i{otnt{7P?Uzr3CO=r8y~ z-p+pX`bu2W+u4s^pADq9vtQoMetA3lgy_2SnQe(RM(z z9T05?MB4$;c0jZp5N!uU+X2ybK(rkYZ3jf#0nv6qv>gy_2SnQe(RM(z9T05?MB4$; zc0jZp5N!uU+X2ybK(rkYZ3jf#0nv6qv>gy_2SnQe(RM(z9T05?MB4$;c0jZp5N!uU z+dg;}2SwXK(RNU@9TaT`McYBqc2Kk(6m17Z+dg;}2SwXK(RNU@9TaT`McYBqc2Kk(6m17Z+dg;}2SwXK(RNU@9TaT`McYBqc2Kk(6m17Z+dg;}2SwXK z(RNU@9TIJaMB5?Jc1W}x5^aY>+ab|*NVFXiZHGkLA<=e7v>g&{heX>U(RN6*9TIJa zMB5?Jc1W}x5^aY>+ab|*NVFXiZHGkLA<=e7v>g&{heX>U(RN6*9TIJaMB5?Jc1W}x z5^aY>+ab|*NVFXiZHGkLA<=e7v>g&{heX>U(RN6*9TIJaMB5?Jc1W}x5^aY>+ab|* zNVFXiZHGkLVbOM2v>g_0v6l<7WmvQw7Hx+`+hNgmShO7$ZHGnMVbK;59FVTVqV2F~ zJ1p7`i?+j}?XYM&EZPo>w!@+=tVX?&t4qV8?XYM&EZPo>w!@w!@j)=A+qV0%iJ0jYS zh_)l5?TBbQBHE6Kwj-kLh-f<^+Kz~}Bckny_;y6J9T9CuMB5S3c0{xt5p73A+Y!-r zM6?|dZAV1g5z%%;v>g#`M?~8Z(RM_%9T9CuMB5S3c0{xt5p73A+Y!-rM6?|dZAV1g z5z%%;v>g#`M?~8Z(RM_%9T9E!fs&UR`_MZgcXRARFNl4@H-&Erxtn7jo+WZO$9{a5 zp8@GZ+mElqYx>ak;~VjsKD7PNporYfu^;q51mtdx{h<49d{VTnNyE*pDUfvJ- zuul5W_Jck|`q1`6cY56zRli2nuTk}DRQ(!Nzed%sQT1z7{TfxjM%AxT^=nl98dbkW z)vrDzsA(BG4*Rq{Tfrh z#?-Gd^=nN18dJZ<)UPr1YfSwbQ@_U4uQBy&O#K>DzsA(BG4*Rq{Tfrh#?-Gd^=nN1 z8dJZ<)UW^B-r0c3Rh{?!4(J1f5Ff@EFov-p7>tmFkTHSO2^J=gRTW$#F_ zr?cri*?!pl|Nb+JBryKqA&F#3diLzyJ9plD-uJxcJ@=gR-v7VPdi7baKI_$Iz51+I zpY`gqUVYZ9&wBM)uRiP5XTAEYSD*FjvtE7HtIvA%S+73p)n~o>tXH4)>a$*b)~nBY z^;xez>(yty`m9%<_3E=;eb%ebdi7baKI_$Iz51<}m;~gL{no4Bdi7f`F{k=G{j1-4 z^;@rg>(y_)`mI;L_3F1?{no4Bdi7hce(Tk5z51owr^8n9ji)@#6e4Op)M z>os7#2CUbB^%}5V1J-N6dJR~w0qZqjy#}n;fb|-%UIW%^zuL0{dV7&&c*MRjJ zuwDb!YruL9Sg!%=^{O<=2d}FBly|x$$M{vwV6rYzjOxIr-^(b2nq%_!GRl|Uu9Ez{ zj8^@rGx>WNjhK|=?`5=N%6anlGFmO8B!4fX@sw-G-^*yNg=@&)%gBakLH=GwHl!qf zFC!aLlE0Uc4Jpar%jo%mlKj1lo*yX5-^=Lvfs*{aj8WNtN*&_cB@);h6lrjGkL4$=@4v6dIH_zM*5D zUIrb71|5aOFXQt>*Fi_2K}VrMN1;JSp+QHXK}VrMN1;JSp+QHXK}VrMN1;KrHF9`* z8B|+S^7JyOwx;CiWl(KR$y6+w z>Girwaj+cI}s z=5EW}ZJE0*bGK#gw#?m@x!W>#Tjp-d+-;e=Epx~+hb(i*GKVa4$TEj4bI3A>EOW>* zhb(i*GKVa4$TEj4bB|^2vCKV|xyLg1Smqwf++&%0EOU=#?y<~0mbu3=_gLm0%M^~3 zEFkn9m)LW!W$v}iy_UJxGPNJ*Yp~~D%iL?3do6RXW$v}ieUdpE?2}AN@}Tx<_VK1l za>MpX4rj=N+Nb%&uc#z9Y@cQpl;lC}(_Db-$%ERbyKsg)sC~K%C3#T$UGx2}`F>kt zziYnVHQ(==?|04jyXO0Cjs33qe%E}zYrfw#-|w0qu*?INdB8FcSmpuCJYbmzEc1Y6 z9_?jJY<=NEc1|M9VmlwPosZbgM{MUKw(}9&`H1a&#CASnJ0G!~kJ!#fZ0D@)oVA^^wsY2Y z&f3md+c|4HXKm-K?VPopv$k{AcFx+)S=%{lJ7;a@tnHk&owK%c)^^U?&RN?zYddFc z=dA6VwVkuJbJljw+RjLYc)Bq)#SWZlk-|lP9r$A zW#1v^wVIsQYI0ty$!SdIQ}!KlUaQH;ySO|14mo)jCHoFJuhrzdR+IBu&8XLEM!i-u z>b06tuhoott!7j*w*{k;Ny%ExsMl&ny;gI~{(sE=f6V@W%>IAO{(sE=f6V@W%>IAO z{(sE=f6V@W%>IAO{(sE=e_S#X!Ewo?yxQfpdIRpb+U^;Z4=a!5xZCcy+Kw}SRU_kZ zwc58-{+y57{jCmvtIK85XVTyOMP1Y5@&%v&1s}iUPk+&8u=8=*8JSs^*!H;WKphG$ zCw+aTq~xurF|`pTZ$*u%jVO65YD{fJ$y-rlvI8Y=MU6=# zzRO!tW2!ABZ$*u%o z8jib$&yM}q!Fz*`XUBkR1$0*5oJgsO$Nyg)8MHNai9#3mr&<>Dh(8DUpcs#8c zwBof!2hNl6cv=yUl8ndG>dSnWETGfs%amk1o>pI`B;)b4`Z6UMkEhiyI40xqv}Vmn zCgbt6X3dmjJf2qkq$K0$J6rU6G6c`7OZ2zIu@*B!8#VKW5GHW ztYg7C7OZ2zIu@*B!8#VKW5GHWtYg7C7OZ2zIu@*B!8#VKW5GHWtYg7C7OZ2zIu@*B z!8#VKW5GHWtYg7C7OZ2zIu@*B!8#VK#6D)L1}Cw(z7PKPB11lj=LjBwKh=K1oTo@T9axGTBFy(wdTN z;Yn#tNw)B$w5B9mcv2AQ-W4HrT9z zZS%5iUbfB4wt3k$FWcteL9Eo3*t~3;mu>U1ZCmu>U1ZC!<3Po6pyD`CaU7^P4pbZmDvkpc$AOCDK*e#O;y6%o9GLbq&$K-AL@@1V zo@qbxOv_83(HWlWrsbb}%5&YcpLwSJ%rot0o@qbxO#7K<+Rr@Ge&(6>Gtac2d8Xxo ze3$3CX?Y+e&vn!CKuVtLrsaW@Jl9RjA2{Z@Zraa0(|+ce_A}44pLwSJ%rh-dpoTox zP5YT=T3*2!p6jON11Ey2eV}R|sM-gr_JOK>plTne+6SukfvSC=Y9FZD2deggs(qkp zAE?>~s`i1ZeV}R|sM-gr_JOK>plTne+6SukfvSC=Y9FZD2deggs(qkpAE?>~s`i1Z zeV}R|sM-gr_JOK>plTne+6SukfvSC=Y9FZD2deggs(qkpAE?>~s`i1JeV}F^sM!Z< z_JNvxpk^Pa*#~O&ftr1wW*?~82Ws|#nth;VAE?;}YW9JeeV}F^sM!Z<_JNvxpk^Pa z*#~O&ftr1wW*?~82Ws|#nth;VAE?;}YW9JeeV}F^sM!Z<_JNvxpk^PKv5qs=amG5% zSjQRbIAa}WtmBMzoUx8G)^Wx<&REA8>o{W_XRPClb)2z|GuCm&I?h9cQfL zjCGu`jx*MA#yZYe#~JH5V;yI#KKKKKKKKKKKKKKK^V8{hn33P=YZs zE1%>%tKYL;{hn2O@hKQ1v+`9wW%YYj@rUcd7@1Z4p#)=OR`G`tjFDNzA4)JrX1)47 z>(%dBuYS+Ulc_DM-?NHKl%p=e7@3uC^C_#}v$8EEtKYNoYD!kWXXVe7V2sSl!jxc) z@b9)rC%ixY_sc39$6{^{ez|#knOK`&ZXRDQRON3pkLQUKU%0k;d_}Nw;qK<~mBDQb|DbuiX#U}af6_d@Dp+~->&@fELF?70 zn#Wg1zOv-8=JAqX^)=sI)7AY#GO?*G9lg8dp6IHT_piK9#r@F@FGSNXe6FiK*4Y|e z*Rwg6dNKOgi-~yai;0%#)xf5}u8XC+mM)L3OSHs0 zQ~IcdNm{x3k?0rWsdPNqd9O4`q}rlgx^=3nC)pC`EB7^I_}ht8 zG!{)KW3BOySaNf;Yva4By?m}(Z@0(W%yUL;Dkdu=6Nv1NZ;Z9XqZ?x#iS`$wt?^W1 zQ>P4+=xkW0r=vrL!ulBgi?L)Xw)MUZF>KhpHu?6uM(=KzJK7P~ZK6w`vW%sOY$$!t za@k6%CE}^5?A8)X#y9q~>+Tz3YE@Mx)ulG;?n=iy(}@@#v~+cD#QcfQP0{XTqAQt5 z>&p*E6X|HGt*fWKHJXaYJEG6^B+_bZ8LczbEvcR9rO~ZzYTF*_tNU;0YL)lIpHD|O z^rWL({ms@ys=Gb*LgS{AyeZKcYsc`3bn4u1x5tv3WQ?{uQ2N7t+FTN0_nhW7ZJMSHrtETP)ep)%ijcKaaP^H({CO(MM%C-8h9;rxP8LLN!zE@%Uz)Y_@89SJ&of zM{Kj~8{d*>l^y&gH8cmYbi-e_#!_=_Xyeex%k%}=D=njLYQwy(T@upSm5y%gYH#n_ zs@kYEdXm^yHi~z)HVl!9cO>phcG0bHjC3r~p0dlTt_|%{4R!59%DubwXCMa_MB3K1-#OJuT^;q+B7{g&NW`9ovv-Pox`G!G*heQl0TsYI$2a-Tm;2 z6^i0c!6x9H4P{Z31MH2A#E zr}UEyw)l!@@VF#(`p!>CLWj;qwbQUp$7y}CR0#ISM^0SV@m=oN<2xgV`n365PYEAu zo&J7OI&tmUvd@*UOrJfiYm$e(q(@LRzKceq`Q8i9U9`)`F?rpX~Lg%n7E!nV8m#mYtz2@q1-#PV| zI~$d5DSb1hpR~RalV#&-ftZdrTjEB4@}sr(@^@J42l>a@)_kY;e6QN3RL6!d;JI_P zME{NY1W$?js6(H&+h@^?w%(-gH9RO`4>{vIJ<=TS!=vVWf6n8-Xq#}?t?CaO^n1<^ z&y~w}zrQy0ud}^7>U%b{!SA0^+s)NusiZY(+30PJmcGY50>5gs8a<6xq_;$+JFSNu zdZc+nck0`&pU$RbQo6Fy&$@MlKhggZzN+z!7M<^uj5+V87Mmnph!MI@2pKB*26x7* z`75g9Hhso@>7iH%Z;A%b=^R%ydUnIpXua-cUAa5DZgoGV-}d<1NNMQ5L2_H0u_qop z@4Ic#Ror#!S@&$!^~gnABGnm98+G1fd01o4wT79g=!>kD#sb)i(d`aNV%iTs)8a{+s+ay@?q7s3e}b2YsR8 zL+HT~b(ynf%HNMWioCP03av-~i7>>P&H662i%W}yBT!>BnA4`wqv!6;sBm_C-6{!u z``mtb#&hO+GPUCljd20lcq(JwocFfsOrs{9I^r(ajy}{S?`YTt8_{M-{crS|h97a< zdX7in{X`#dOSluCH{uSz854+1)VxdgIb+we+m27qwCeT4bjlX)NRoZ%SWy5plT7z0}RZL!qEZX>NUqRDGRG`-qUFiqQ zb!U9ATk&Cq{%`gF#@IlgXv8CIMy%=36+i0r=e9T_`HFL5@3ZfC4q5SM_PlfVkE{(( zTo=w$5~J9;?UhnH;sxDmb6TG$)~??~zfEeHC-s~M7uDPS;)nYlywkyVXZ1rY{T}}! zAJl4wDA%=OFi-hs3xb8g6=JAfq}7zg%062n4o~r1ip%Z;;=KA`aAWYH;HKc_;1;oY z-x_=*xJ~%p(cq&Rh3*g&+E0j0>|@gKp5Wtp%37vAyj&XaG`vbYGpofC@}S=7ct~rN z59_(?r-ZW%I`7XYLVj8v_Ly*29}j+32(O3`Z75t_c2L@SVt& zkww9O3MPX89=R&AICwqymyxR@OM*XACd+R}u8CY5xh`_O@>!HEp)8>{BOeI}7yR8|C^#DYuCk|pCvrpZ_q9?xpf-Oc z_!aGq!A~!0#Ive>=~x|_H-szu6%T5^Y>#5I$|xFW-ifeJkiyvWg*SL$BTS3A70av zNVfEJY;2D|-}p!iD_xz9!wpHz>wUQ7t-AQnE0darH?B!1+FKjfT-Vmqxha1dDj zq#GYLWTj&5^u~z#-F3mj?|xUkETX>`sjsXJE_>|pb?bvA?Xh&H`q?}>t*+qnGspVo zX03h&OI+Td&-lDivWlu+uQOK!k)OTZ-%1AGjubDOxO`yV*XOUF|Lp~@U$N!NE3T|9 zx^>ZSUiI2lf3WzgS3iAqamlY=^UyV4zi!!e&wSv{8=m>#;u~`xTKS>EO}}^ZqMIMP z`Q@9(ZdrTF*KQgA@U!OcGPkr>orHk)aaL4EFc;(L3 zcYgUNp1N__wcf{%ig%Jb9u1*>nrYD@$`zXt{7fXx&NQ7 zTD_`s)oZIJ9=P>^rytnpThWA_cyge~ zfFl2i>?d-c$b4e&ot<|Om&kY`--&D|a-GO@BF~8|Cvu#~a3a5n>?U%X$ZR67iL54a zn#gD(pNVWHa+%0vB9DnICUTg_U?P8s>?LxS$Xp_CiL51ZmdIElUx{oba+SzbB2S4d zC32L=P$EBx>?CrN$V?(HiL4}YlE_FRABk)va*-}x&F|BW3|W=rRFYAd*B(q>?fa(M z_f560P{s8F5(u1j+uGeqhN0!~WuJua(}lCx46VEpoTW z+#+v_tSxdi$kZTDgKRBwwaC;WPm3%qa&h z0fF~O^Ex5FZ8t`Moq6IfL3|jDK!JY+o7R*`jX2F^TXBLcE@MXc4 z1y|Phk2t-GIK7HEy^1)!ia5QBIK7HEy^1)!ia5QBIK7HEy^1)!ia5Pyz=Hn@_A9ur zV7`L)3f3z)uVB1_?+UgnxUOKjg69gBt42iXRYcPJGWxs`m3qx<1*;XDRxnz@X9b%T zTvjky!D9uB6&zMDSixTfdllSOFjv7_HLH8T+I(EC_=bAOalIXrS1&oP-tmT7>kaje zjCzN-jD#Kob_~cd;KqO&1MV`2G2q337Q@@tylc&y*1TuUTh_c|%^TLdU(MUqyju+} z45%P>x-n_Hq~mI zYPC(Z*rvO0(>J&2o7;5dHeI<*S8h8GTZvH-1kH8o?d#+(FR8bWs<)4-x8ES&dC6?c za4o~M49_ww%Wy2iunfO4?8@u)8)jvAm0?weqY;Ki_!(hmgqsm&MtB)vQT|o^z@Q9& zGVIB4C&Qc!Z!)aOa3;f;3|}&A$#5m_*Kc@|59$YwWEhg+M}{5wck}}@GQ7y}CH@Gjrz+eD_|7%j;h5HNUFL=LT{etrg#;*s= zObjnEti+8`f0t^zOSRpl+U`UD9HgwAdvrc1ep}(qfnT*fMGIk~Dcqn(UG$dfL{xx1Inb z1O8yxgW(Q7`w8Iui*GCBKU>su)~M&Kksoc5A8k=@S*s`E3H6o<^_B_smI?Ke3H6W( z`Pdfu*cSQN7Wvo~`Pdfu*cSQN7WIk=^@<7giV5|K3H6Ez^@<7giV5|K3H6Ez^@<7g ziV5|K3H6Ez^@s`ehza$G3H68x^@s`ehza@Y7WIG$^?(WWfC+j3guH)^ynl_ne~o-u zbv^IKiyQrHG51_C_e=qYE)2Rq%q#-7T)1*!%7rJFF_&?6<6AKfe%v#0ZlmJdM#Z_0 z>CWKdyrkX%CQbtp2PRy2aACoP0~ZEd_-|pqh5HufTX=6_y@m4@##{JqVY`Lv7N%Qx zZeh8F;}(Wn_-$dgh1(WpTX=0@wf%na5*AxHY+{4s<5cSp$da4 z{Hd^~!kr3pD!i$%rozwxB0p&Hpt!@83i>!m;IO2^kqSd9{HU;_!i@?uD!iz$qQZ#^ zBPx8Tu%W_*3KJ?ksIZ{IfeHgE{HL&=!hH(!DZHn!p2B$w<0*Wnu${tn3ezb(r?8yD zaSFpJ{HCy*!fgt(DensM?i!q?yf4K2E3lcuWeSt&h4l;~b`R}7fLR7&8F*!&m4Q_T zQW-d9pp?Ne3PKrg((@iY*kmA+@diDpWUKW9A{lsOppk(^1`-)OqOgd9K?VXD_+y}t zfjtKD7`S7gj)6JWp?iWi2HF@{V<3%zGX}~S7-JxefiDKS7}#PUi-9W!su-AJAc}z} z2AbG6^aGL@IAWlPfguKh82DkJhk+diau~Q_poW1N24Wa^VW5S96$VlmIANfKfe{8m z82DhIgMkeOG8njEpn`!31|k@5uJhhHSYRN5fdd8#7#Lt6fPw!7`WM(=Ab)}T1?m@= zUm$*g_XXM)SYIH0f%65*7Z_hP{RZC)bgvJqg_!N%p%yu+);OxxII5O7s+Kq^iyoCV zhh)tmS@Wo@HzcbK$udV}nWM7IQCa4wEOS(rIV#H>RgI6TmPb{aA=PF`cOB9lhjhmw z%>*yR)x?WucDqDRimz)P|GF_ZKtlry4J0&h&_L}1vkL??@XtU$1N#i*v-keZ>lHV| zh^ZfVCSjR`V-ki*_$6VNgj*73Nq8k;m4s6gMoIW2VUvVQ5+=#(RQplYepIUvqk1lT zQ_o}Ls`aR9J!&)((80h41BV0@5>UZFAOU{_^bxQ}KBD;ZEybU2DgKB#Q$H}b!P^FF z8=P%0w!zm1TN_+$Ftx$c21^?pZ7{UK&jvdi+-xwj!OI3K8=Pz~vcbm&8yj3~FtNQq zb$@@Py!WSwAo9=Vkr8te=fd&Q^7)W5?fPn%A1{ern;D3Ss1@;%nU*LX$`UU0}h+p7+f%XN~7f4^= ze1Y->#uo@*;Cq4Y1-2K+Uf_Cx>IJ43h+g1%f#wCq6i8m+c!A;th8GB4;CF%E1$NhU zs`)9^oV~fds`)9^{FG{VN;N#C8lF-OPpO8dRKruM;VDTyB`K_Ov**QL*Qq}z|DUsZ z!w1f9tDo@|tbSpRY3JXXz{R^~cmD2poxe4^ch+mXS+DVCy|d3A)=U=m zFSx&8ZG%S*7Bx83U{HfU4fZs+(_l`6Hx1Ub_fOLK>$&frj+Y|l`IjSb@yr!3Y5L>0 zyM3umFSY5V+>Aeu44U)rdG=C`esJE?B^&)<8~y0HH|OU!F70n!i2GaTUk`onYvdQp zH!s{>jEkj(=2q)3ygicl-a;3y&KJ+D?uXCLe(!#;RJ+Ux?J_5{%bZa5M6YscpHWV2 zgM}FW4%j>3?tr-i-VRth;Ov001HKN}I^gPnsRN!4SUMUx>91=?`t@cmdatr4dbK;9 z(C&0XyVD8nPA8O2(W`8VUS(7CzE69`@7)rYo`^2QC!#;wjGrIpyPdy#4CimnF5W$h zi&ygt|GmkJx9u)o%`befJ%2}mOSb*fdrSTNZS{*cmRvkD@QAXu=PR50DrIxeVOxP+ z1#;Cr%9RAMY7VXHomf?$F*?;>6fV^qD%BU>LZf;{2vF_9fC9S^w5=ZFJ-sBvr@txu zDbT6@j?kF?o-mg{Tj~=M)qpUYwhO0fr}B&j#n8Q5SWSC`MYYfPO&~cP4u*x?Bvd9L zIgJXT>bUTzPAVH|O!!k`b~6@KQRq}9<(XGt$1uv3FzlOnLJ#TQXX6Ro_7;ZF0;p6*oeDVL8mk%rEo4uL)t@jbyb;uu7+ zD})_(Q}gUizEeb~V2x`(r7J!iTm|A4SXba&%^_R~*D4}ZFz|~&fnO}VuFHaTk%cOs v)Xy?W{sr4NqE=iZ?5*d7u>}&=9|{HQ6zEy{ZbT?zm#Mr#m}QNBMo9Yq>WN6P literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Light.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Light.ttf new file mode 100644 index 0000000000000000000000000000000000000000..a958067a86f46b4b82b6b1ec43fa83f5875f3e43 GIT binary patch literal 122524 zcmeEv2Y4LSwf~)&?QORAzS<(~s#smJBwMy@%aXfgS+d-Fuej1ovyJIsu<2k7n1lqw zBf;1}cnJw5KnO{IBtQrxKoXKbsIjfx|L@G~N-|FJ{?GsSzVH3N?~Q!U-kqJf<+OXw zJ$J^8V~p8>6l~EO8hOyuWD6 zIbrsZ=03(sx8Zv4()G*MsCsX!V=R3w>e#ew!KU>r%G_xGMf`49wtD;0+tyw%fwA(Z z8T-vM%NMWNc40-=M#hY|-&3)C$%4hFCV%o<+>2{i?Q)zDSE%tDcPYLXEnjoawlUMU zbTG!J(0ffziw`f84FK@v0rTcJAX3c_a>xEK<4)>$KEWCEX znkDyL|H4a*J8wB-mLINPx9Ob5H)sEraaUI`Cfu@q!r`%l{8@1mc(=^m7@e1l_kO?YP!0e+tJ~8~2$;;6;Jw zd4<3WcQN+R6gIz8ssZSn?NcVOk&K<>RUO$K+_mcOa^DCub_4w`yrVM6*$=5s^>>*?@sI=_#oyQ_jN>8x$GNZYxeD$7SO9JL@vK{T3E$h;gTmFU2cI*A zEbHMfWkKN+)~RS@2hs1FxYu(p3vWo{cuG~r4$^tROhp+!=^igTD9mQP{PV0D=Pwst zW*+7DnNzr##ZYz%dsqkB9l`f-DtxX$`&SldkMf;>(fQ9AbdB&wb_M#DR83?v_&eE3 zVI{j2zaJvnOXtQjyI^H~IJbtsi7fyu#PvU+wiO?!=-*0qM0qXS zCBZ&69kefz=uWi%8mQ}Xe~%r0enyco&-1m233*`EAWAMFci?Qo9Vm63*tu} zzz+}cOtFhSOLYH7pc;?!;05tvD1Z-9z^&Y`a~}adRaCIv0X`5fh63o4|9-hd6QYaE z7bo$IctYc*_GzpV@1J9@QhR9QDMblu1fLpce7NtR=HD>B@5pTspGnrFPZ|$oi}-uS z=N`5NJP7B(j?Wsvi-2u_y?_MZJjG3{3~k&1xw-**bunNq0eF2efIioPo}@PbE~uQ( zR%l*jGx=5QR=^SNlUyx+3n_14?aKGra+J?ix|v1U#U=t~;`<@RB9=nAL*R3yr#}La z4pN;b0M{{=%VNwy#cCErpMC}q@-PFRj{^*OsKn>Xfb#(*fR%vv$)dG!@-czqhEpj) zX!ry!F@Z2QVZsEijjN)Q|Kvy)&P%uB;;$X3L^|5I30!nSVnR8``7Lw?SK^j4u9vSK z{2_mTp_;e#f8<&uJjUvWJLzE8m2A!kp^JbPwr0!oWL&T0(LWZ?gaBN53rYcfql#e>}P)901M>)&Vnom9AY8hFbe}mSS0rq=IkhN zjKzS9SP^iX#eownk^7P*SrRzKQozNm7`TL$0H;|x_XW$a3~(tc1ukP{z~!tw_c^Oz z6~M#TFyKm730%dhfU8+`?lV@yYJh85EpQ#H1FmQFzzwV+_bF>+jljd%aNs7^1l-J; zfm>Kh?r&@a8v#6$jRbCGt-zz$sN5%PG#d@v#@c|#ura`6*;wFlY+UYR*3R02$FuRk z9jpVmlXU`5U=wnGWfLVliA_X#GMfZEg-y==g-vBsfTyvkz|+|@;4U^Dcn0gr{h4*M z8Nf4HH*gP|3EazifM>DZ+()dB%>tgy`he%K*}!wzoZO$-JT@12KAQ);fXxS9$QA%E zVheMBWQ*A%;3aG^@KUw}co|y?yqqn|{ei7u%Yj$26~L?5O5oLORqjK!hOGu(%hmv| zV{3uevvt55*!tWDY$MwMyoqfDK8I}r-ptMc-oiHL-e+6c7T|4cEAV!<4R{CJ4ty@# zk^4P6kDUvAK06Qi0(L&|h3tad@7PXuA@D_PC-BAWBH&Bd#lV-cOLFhA%h;vByVzyG zyV)+_J#07dfg z-hoGRJ@7tu1MrP(A28-Q;Qj2T+;7+cwjcOrb^!Pm3E#?Y&b`fUW48d`&Ta+1gWU#v zC%YZ^E_O%mEp|7%6Zjyz3-}&(H}D~L5cpnpPwq{2A3FqmKf4$BFuM=<0d_y|H`w9a zuh}=*1HccmZvcObeG~ZG?7`fx*hB1Fz(?4(fgffM0YAcy0RJ0%IQL8TD0>9>JM7

_@=QvuA-{V9(`#&VJ0E2Y!*g z0Q?gBG4RXmMc|*XmvTR2udtVaf69IW{3?3|7~g<@&R)&E%6`Fq2K*ZPIq>W37r<|@ z*K$8)zhtii|BAf<{A>10;5XT?fZt-j&b`9kW^V%jhP?&+4tpE;x9m5-@3MDtKVk2& z-va-Ry$k$%_8##2?03K)0Kd#WWWNXg1A8C%kL&~BKd}#UFR_ob=H5ed`QosO}Dkis#4oTMwOlOejg8pgML>CZ;$Ctvv^C&5_ z=ptyN)(A?qQmfI>7*uMN4!@xy6=*<*L>DCwY7t#93Xqb<2?9`cf=bY$6AG;YUB)eR zs{*vv|N40@EASkQa1SrPU0f3;HAd!>H6Mg-(s0s!EC|29rz|>K8f+d4s&j9VHCrsnrTS`lnT^wOWirrPu0ktqQ$15VO%1 zBpIDhDbP1`j-&`ICQ5@l_#IVJRZuHE(S;EGOwB2j7{7vsuhHlwy5O8btJTq=)=AVM zNu}cqx=8Xxzd(LT$4Rb@dWkL?CH>_U5W1a{uM=rdP<%)V=mZX-BWi_#hyY2E^^AU(D^zL} zM%1sAkW!(6@If>5dc8`fg9$A_cyJi>20Anb{D_k}qK8^-r2b1orB56Z9nr8_2aVQh z6vRJ^k&GWnH2%;6RR;{&23@ExT8+*Eu4pj`iRe1mOEk-*nsGVZ0bpiZfi6Y}IMD@) znkS0XO(2yCbTNQ(1{iaVXfW!GFfs<688t&NpweV=G-#A&4I|x6T!fx!$Yu`EMIwoc z=mN57VQgT$2k9b8biwsXqrpgr)=1QmdQW5+qzg4LaDY5IjUGCu&?*gDt4T|Q%F~4^ zqXTpyqkpp>2e@uv173f@}koj4X_lDH_%09AYlkK(M7KZ zF?2?w651vjO*-&aXV6=-+N(}{5YN1as zL>M{A3=T7qfaFhUG@9tpnq<0=b;DtjtTFLFPZMcCXc(5sppoce)Y?Rv6m)u=gYr{l zIM79{33P!n>U3Iz9fZP3T2Z!*|GE(nGmG(hD#Gz!irMH(JV8v23(kYP|rBZrij zRayg(T2DPR5Lq-BKhXw<)ktmP7nNud>ClNp9ke0SL6od9jguO{p_ee4hGao{A-5)- z!$QVS(sTn{v;3ii&V!!#Mhtd>D|(CvQfa_+i~;KPOgC_`bPsd54WNr!V=$OSbW~%2 zg+NCk!jcpd^Nbpc$tZ$0X0r;CVl!I|7Ng!EnjH8I+HBCM&_}%<Q!dF%c|GvwWNbYD=>`?waQ?yfG#jnXu{;iv|zw^(5BH~(nw0nz~TJ0 zbiInXeMT%%YqTbl)q=@RXToHGFD6NpjV6@}WvyK_TdcUks)n>Xtu~CoXtIiKlSzcs zLZuBxy%Ba2Lp7*uWE(&cqrpnDrdFd$R06S3+ckQV#*W4yPDT-A(dsdNEe&53ofhdT z++efX=rGx=IB=5aWq@=Nrp{9XI7|`-|I7vpBv@rsTa7+D89$O}{Fz{C=+LN5Mi>>E z_b@QC4_v`mOlGqg-?Y+5nb9O&D&0Zzwl9b@3XGuH?66^e)0;sTd=W*ni2KYCY6!H` zVzD{QqTQ}BSWOG|{m@ zSVX#s_~x|32{c$>2GCKASQ2Kn8lQT%&1wg2oKCILCVHJNi_0on9JYYPVugBJ^cs`d zXco1i8N#7<(eNPrX6TuTCMQ%$BiD)=mk#`Kp)nXBvlV2~8ypV1UXl)*&n{hs8(dBo z9cGsU2l_(vFqvFNA_H-i8o+^0;xL&_R+HUmHK|3d(;Rl24WhwfHPW926p`qnwTLdz z6Z(iI9AUW97KhVfBcj{&(mqLh+;P%?Qc8ksB2-|FSsJGRqHCsfBSqJISm^EG+9?Y7>>=w@(6lg)0TKO4<7ICMIj#RIy)ETIW!5x8P=d29}+(`I!VX{c5P4$Ifl z^_ZU`aiWVJbn&<(y1+-m7rWhNr*48Sc9||7yUpX#!3qRDUc1*}vAG=)yWOEP=xj!v z*(zEsdW%(}3t0uD$zUbA(BuSCQ&ljWUcG43dnLN)tPY}!=ytmY=t63P>vdj_L>Idk zKf2LIfi6S`q6;;ELoz>BvsI>xRb$n8tnq*qbg?@``jaZ73PBeyQA-4%!NBf3B; z?KYQD8Yr{caG5mYNjI=~i493cgUR6tcr}=;9q=oS4v^B}BqnOLD42q7x7Y7<`2Bi| z+ZOc)o#3t0=Z-s_F1=Cj6!liS1?00q1gzR14No*1?N*-!#M0}XYH8$pt3GHjJB&dz zVle3KE}hO`GJ^sp8ot{d^^#GcsV3kL(%}sHaG(vD3_%M~mzYWo;BZLTYPY&=UW?17 zwd?)%;;`LpGn1y{&q0;Zp>sL{pbN}4hU6)Mv^so#huh=9HxUDLI+=aoV(AW6QsHDw zV*=kI0nBd}H_Rh3Q93+sozCrXn`1s-Fzj)M!bY3lkqAdUQJ>Qj@)dhLKBH*#SPXU- z)XL<*P#wCc3--Zc6XFnd0$(dlt`+@i~)*SqvZG(4-_>~TgR zbLfj#D^gW3oN>|a6XR$E(}*WvFo_m>BoeVm(h)2POIP8BqF9^`U!17pCy}8e?jY(C zH>m*}J_$QL&Y&~w@VoRLQ_NG9^w`~Yf51V1zWh{fGC{T>XE57nB2*1$(HDvNf}xPl z8^XwaJ}>il!4S;+H2GsPXO;CHm4rhv&?cS`T@i0- zA{9)9y@7amSTGnCtzy6~x_vI6*X;Ef3?4(08nQdB=nGhiz65nkNin^cSGYq$A)@LC#>F(2rQXC>jDqi9jS84fvxr>RXWc{J1dh0N|6= zHe*|e&SDRRisJ^0*%^Wvut9voB*USQ(TI}0G!{z~heN4iv!}>EtT-J`NB!YctR@_e zLYqSlvp3)g_$~f`(daX#sUe5U7VxG#UN>xJSZATC%szA4>JD4eW=F_sH3y<5(Q0=m z5(#@uIw})H9Fj>&!_<$Aqjf}-l#9(iTI5Hb8(=lJmB)X z!q7qdg=B+GT?nKhXRuQkSiIR{F@=)FAxLF77@o}ecd_tIY!b;(CG zR0g`hY-3cZQSf!67!RZp-<;HHgoPrwQjS097B;#whHX4fPcm6m28Y&{G&+s$`s@*Vtuv5x*4n*Er_)|kVzoIvfr^T94-G$^ZYd}6ARAj#RYOOjW*ClC zDghgWqc%t*Aa0@oI+7BO6h+dJ@?de)Tx72*>TDD$*1{%ha=@mB$RtCUQIT~^4qBhRi!e%*+?x`=$b1$lHE^5+iZ&0WZsdypshAwM2K zUOa?+cm#Ry81mn7pXyLlR?q|OOBmR!8^7+W4Eku6zGGtj_LVob~$jSW?nYRy+ zk9(X`ApiI?WYmyNW1n&=PK^xQcI4UUx6@xz{3(do^;lH(`YPkdZ|; z7Wv3uBk#8XIlY$#EO%AE{8g) z)-bz^Q*dt7+R9DiW^wbmZK(A}sPzrhY74u=eoQ!2Ys1%SwG63su~aLETDjckx%YD4 z&pnmmt$l9~2{-SqYedj0dy!_5f@4WENzrXYNJ4fCb|C^ux z=BICe@%E>0|LN^NzWv_Y@4Wrgj(q`d|9~_tF>2$TFQr znRZIg!yI>Y?@=yy*-_ROcpTP9m^ZidDC08W@R${CN4WX;!e?-zB!ZHV36DJ@#K%tS ziS>r}hWCzNyf-{HynMmpBZ|26i655i?JW-`q|rtwzZkg={;l6(@1YA(L4>?#bF;U zpXQEXT9FFhL*X1))(%+gFce9X{vKwB{jhcOVWUf=GuTYQ!Hn+1=9pD_w|S1<~JHXG;T3|WZG#uX8NNT6%U)2njf*$Tbr!6 zS>Lhw?W63s*q?GtaXjI8-?`NJrt5w8SkG+F+dke`>-&}8?ceMFU7#|sGO#c3?Z6vB zZ?G&lEp&1CmdL*7;n>qfE92KDY7Q9SxT@yw>nVqjmVM;Rl-* zH{I84Za&cbM9W<*AC9n&m@?wxk&Pp-Z=Ep8J$mKnzm3ke>Drua(YCU-#Dc zn9r~w%P`hGwrFg{*ru^hjD2qG&&R$q_M@?1jZ=)PZeQMhPW#UGE87pW9~!Ue7}+tQ zqo-qW$NG-*I`&MsW8!NQ-<|lEi6Rz;W(Xl0|C66pUuD7GI1s%Ap^I2;%OE{X!BT3py5mCA4~h0;-0Yd*@F-z4!L({q$nm-`;aZTgnp z{E1pRQOlGqy~m&*!=wt8P>pc@=Eqq*<37WU=Evd5aGzBS<64BO${_Esn-n4!OD0+r zHPvN&ENTKIZPm3^l}?9U6^kagh$T`7;8c#Prg0^;bH*ei!y2pNyslNnhldTXjQYz* z#L7mM`LJMnZYC1WWWte5_D12JQ*&ZM->G{QYwcJv3=N-NT{n4nX)5X2xFb|vQc^Rz zyr@3ua0OiYQ_qCU%EAD}9VfOIDMyf2@!0+I33n%GWrW9e_i;FJ0-QTV`WW0i6LVXv z4M&-w{Bh{CfPtxA0hHqm=%hwjU0$FSBhnzQ8=zHyP6UWnN15%-Rv#Ql8=OQNm|_D{ zY;fpoaN2BeoNRENY;eKL_-**iF1TRwmR~ zgz6SPPg@W(!JUK6D?%%PA7=7I?6#-}{&duqtWoanf2MTG^x5_Gv!_of<(p3YsPLOT z;xW~L29FB&@x`El4xa49qs)mBx&Tg$Qj1Y)rSU5;eizOd-h3R6l;X30I&wXY99vOa zda1u^6NlcFbC$?pkyC4VEMl5@Ew{N)Qtr;ac{3LJEH`sSgC&_qcn(6*g#Oh+s%|Z` z8>MEVLnxl06Nw=wI6A?}ERY1+NGFVR;y6q*`TwK{L6kg_1Tzdzg8|d0h|fxVy6_pq zXHot$gHI2>SKyO=ugiaLcm<;sFw~mrI$K0AacRy*-9hR{UChDq9CgR+mqZ^sar$ma?iaud1TLl_dI6Tu-T@>(M)iNv8n3qxEWX7Lca zQJ}4|j7!$RUIY~`8^j;NKY}BAs)L+M4GU7nCxxIAhK3h8B0dK@lN4G6&K~4lHj}^y zcRtnbGnlo$MD>`S`f%GtOIoUz?3<_ML{pJ|$$=40o!O8aF{d?9K5u46U8r%*olEtc zXe{FHsO(zP6q<7Wj7a|t(~1Xkf(Nmy2l1%~dyYMbB0Y#4J%~p=h!8!H77t=K5B7U{5CeJ;MS7Td z&VNNE8(PJG*%S3fn(`h;bchi|V4=HUp}Ro*E?DR;NHrdN04xJ+1?&dw2iy;M4Dc-A zb-)LJF9A}g)hM_CNkAQ79AGA38DJ}5H()>De!ydZX92GRJ^*|PFjJ@1D7XMgKpkKl zU?yN0K)n&f-h#p|0KXAd2Qp9cPdY&pf;vCLIw1K~l`XuaCLD~-e{>=Ljf!cjn_AXP zDJz?@rln=|)ba_j=BcHnQ<`G2rYWVRQ=4P_5|za?`jp1#Y*YNIV(MvEmraN@;p(Y$ zwfw25nt54IX=%@8GkbRRmX`MJ>Y2E9TqH7X?Zk;|#zrDz*KpTpbSJK`a#PN@ZXI2> zj;;%b$F6~eUYYw?*#+Gg3AcJ~!NQy-uks`-?V<(Y7zoEeI0nKo5RQTR4Af_!J_Gd` zsLw!s#P0GW%P`5pA)rYXM08bafu`h&JClt_15qvz00UE3F>I$%;8N7$0oaaxTi{MG`zu3$B%B|N_wp>@ukw$ z7hE&B^ZHHWs%M?oK5ksq+)J{T51+fKe(d>c`V!e1m2%Xoj+AnL*`#Il*ra68d)t~y z;-hERO}nW(+unZLc%wM?*}m+X8q@RDJtK-L7hE-~{gO4^zA5{=$8PPZJo(Fs8z&~h z4U@{bA1GD+N%Pi1e=+BCY9-D2!Q=RBG3vk>y*l^|$pYS|k@>*>k(^K9j%{G%pU9Hp@?B*xDPl#TN z)gwOXc}lb!v61(pUs${r(X3sQS&Kcwf=;uxbS-kq*f8)+Vg&3td>!t_qbvohPz+#iq716&ARs#Wj_KJhd7e6yf+&4$?1K@P zl7v7h3xVvH@Sn8`SagPivH=Ax756V(_&y+3`~o`Wr)FLh{0uuk>3&ef2u?z@_d1sBs!_6 zAo&$MNqZRw&%)Zm!L{J5U-vB(Bc|+qe8q~RdnZrcdvwK$$M;TIJZjyI)28iPKWfza zebc7hxNa2x%(3jpkIbC;2xmTaj5AXy`|+^{KfATP{npPO{MM(pjvIIDrw|Fq`WKLG zlkzI8c#S^}+b!S}84S`A1>`|75N!{Jn2-=!su)xRioz*oFyaOitV=v%sjlNNm*Yvw zDzY?O4L3%}KBqHTv;pqs4z8v@*`YWun#lf1Ye;b`PCVHm_2nY;#R~bXWWOQ1CXgSF zzK~t39`L9K=gE9OY$Ss=lEKHZd_esm0hahol9;EkR-!OCuR*~LNCD~r?SLM@a=4*>VZc$qbAUGh9|FDtNSxQ8;0B}s^?-Ij4`4Z98( zktRTRI8~8KXMl^)oP(vC!di{w3dNEw0zYf&4eLh@>sr^G9TOfC;}@B2r`G8;+YTe3~qX(iT2^)3zfhvtpv>=-j? zQ%6zp_$5s-PSbbw!YVNPqTI&{CurWz-6+!>^C;%f63nMcDb_5(N(AHrWbOFpJg^cE zti*%k2!(jWGsHM6_z*AXTO9fphrY$3Z*k~b9QqcAzQv($ap+qd`WA=2#i4I;=vy56 z7KgsYp>OemzMXv~d3}o)^bG|>A|xq|)I*XKET73X3kBI`HG;{FU~(gv+z2K&g2|0w zawC}B2qrgz$&FxgBbeL>CO3k~jbL&kB&D$+DQ92FX_6A;NMNL(n__Zj2#=GK=PLSv0bTFIb+qGOGeGw-B(&X|MpF@ zubf*^*|olT^!n~blO~{63^R6+AeGMA)iY*YSA!UM?DCm6u5NB!e$hy?QfIPTYZ@9# z{Y`T=)wZsmT0Vv^owT~Ob8UMx)xM;qAX<mdnUoImoYxz&}fKy7+0kxt%?YJ zoM1G4*xkQGGz(h(*%{ru(0@BWmwUHbZ_KXbZZhi2g$KWHN!U-l0-e~G`&jr$xf@da zXW1qeNxe3rkzoTmP(~dp8xqJ5)d3B9SS;OC1_^^}1N9+o2o^m-2tgY{(1sASAp~s*K^sEQhEPEp&c2eoHiQb=fPyspsA3U8ns#XU zcu?5n7)v%yDs>WTZ9nn_vTVlaZFOr8Z)lu!*&~aGubew6=*PCrVG~!3op$w#;iY|7 z%x&1&-m;EAPdV4_%cd;ihz+;RUjOiUqa3j^cTx-%1#1@HFlWNfzACHT#&4qeh{uz~ zA1hp-y&ra@iBdKq92@fFMadqKlP;I!d7*NEA3EZPPIg5cZw{JRIbehoz$>CavIQ~u z(D9gf{+zyB){Pi*?t{w~9ojsyYd&|eCEAsp6{>a&KbZaLuvr&R?cTefx@ykONj+E0 zuM{RVt+{pn{DWIYjokLFHPe53F|Tp;|FXC});uOVXY#HEwYBpunK<>5zG2M^&Vwvn z3>_%Pcq}j_`3XxyJ=MrPWzGp8t5EBm)Dx>w(D|%76J8ki3 zPnzip!aT{o5hV4#bVQMnF_!uS^%$lGU$iQM!1Qg7dFbP3=rw&kS=qjLH z_G0Z2NjvJYLnQ4GNjpT+4w1A&B<&DMJ4DhBk+ef3?GQb8|To0@j6Y^$EPYwFaklj0>)H+Ob!nOYK`wAEa@^x9dIcFbxLtu5UvnmR9C zSYN;J($1z8-7QwJY1WQOv#woQJE3&?IpgM>*AWVJoHu9OInzt|7lut=+0eXVQYJHL zMRUW->4*q^NHv-B+<|N9x@hM7__2)~pAUD)MaS?Z2GIw<{Wp((j17&rf ztPYgbfwDSKRtL)JKv^9qs{>_qpsWs*)fFhK17&sc`pA&QCfRYI#U(_iCTZ1GUNDix zns1(Y!>Xpy+wNUB_x24VT%{w6vsa1HZth^P%F%c)7p?3IJ@uGjjba$-?O-G@!}Ot{qMN=_L9!n$g$iF6QQ4#v(E3FbpFh;#<`n`HrF9O z>JXlVOvl)zgAo!NV= zLfh$)7L8TNkF}H?{6}N8B4VQPx-o9I6g?efVU)wt`N!cs4CZa}tHE%S3YP6COXFUL zEGG_-#{oHUKu#Qx6TGPgune#jup6)+a6jNNz_WmS9O;0ZI3zi-oj&wJy6=o|`fD^% z{^RIcSa}*b`mO&g+UD3@oL0D6QG>a@^cX~hVr^RXfw)LsBrQCcKo$D5(kc`u8Fs|p zvh`D`vDzoCqTI#*#US>-9!Zu2`C`$~Z{;85E^5V7GT9F;cw{B}0Uohwm0rNa?&IDS zek&}2B~-Jz!3dwEkYX1p($9ZtherJ5=<>9nk&pc;M7d8Ge(Hw=e5QlDM2<&JVoZN1 zjLD2H)0ouw#99n;lvF>3JZ5}KW5UBjxCCR8eEC|e93?qebIx(nVB$+cDSOn?|C*Qo z3#V<>Td*CYNx^x<%0m?fMovUQkLt;?)XSEoOqQ53 zNK6?drVJ8O28k(y#FRl|${;aikeD(^Oc^Am3=&fYi76{cOc^AmOqQ6_)5Ta+Jw0E1 z+PXx<*EV&2{n+#7)Rnh)jj!Sjt;&jV)5lemw9l;?wO~|2Evg?rUB8qDUuDu&GHJuu z32Ud1sH=}2`lhnDrLn1V;po~K!$Yxj%y4qWX;KCvf)=ZDR=ky<3cKzWknfnr>eEQj z;y50B^OGxymg#XB(N(Ka&&+fi-^}1V3VA#8G}+ny3CIf%sOtEj1uwxIOLUs zQ%{l*$I`PDeCJp7oi1b)3k&-Bu#AIWWOXX4Dr?CH4{<6*ELxPHV7<1eFx$m3t<~Ae z5XRFYc92(G)6>h>Up1|MTCK13{O_JqGbi3>&^zN5-iGB<$`{=K_W758{`i^=-{*wu z_kF$?596uC_1RAk-J5;)=R3B%$eC~5^~IAL8kg+pKUp+!T#I9hyDB>ChGh-*)bJZ&>caY_b$2Y>_ty38E1$~#{q~2mpMGafTdUF(@0haU zc`p9M{aoUerF;Jz~{#u2!uczvYI`)R@Wu(H;+bDNZUWKko$5^InUA zq|Y$K-yP~gNDBgk9@ueIA-m`m!y>e#FUZ+hyhAF&K`Y>fDNar{S(W$qkH1f0H%;P4 zFU?-d@5ufJI}PwpG;p_Om*DZc-KWmwe{4y+-D#{J;|(TEu><|G!v!v3mmf#>0RZ{-#pf2wN!mA%>9xT=L$^pwoa> z>qoEZOm$XHTV8h!UJA(JO+FthMc9f;ZqsoZ512J*De|Gn;8=#boD_#dC=Q{RH&Tds zQP|i@t0NIOsu7r=2uw``F>eIw5kbrwLChOL%o{<>8$rw)fnY=s^F|Q!MiBEx5c5U~ zG4I(|LhE!I^e|nBl+w`iG)!C?CN2#VmxhT;!^EXw;?gj2X_&Y)Ok5f!E)5fxMx>NR zq?AUalrBU{XJ1J^Qc4#hB@_@T#i9FBE^2V0j+ay7FbJ~ROIfKFPVt&foysgf_lBMu zK7VN8lE-qlOx(F{VR=Yn(fZTPU2Df)^u}#7yAS+i`-H8FyYXVbzo^sYoi%}FPjZGs zcXPV$t#GABmXsPCp?JvAd+(pFzv-iUX4+GYNd;aqNxBN1P;Q4#7_k1i+q2m zf;C+)W$O*XAWgg99^i~z3^!E#69~yysPVE zsOzo|NsdXUqv*e$&5&0JDDO^M3SVKsgFIu+PfNx~OH<)-nEt|Q01Xmr1BkV?D5>S% zBF{m&4gy8A-^H))-^c&q)Dh+G8U4>p?|)- zP)?xi!eA?gaMVx4@ei@oLsupYpcc)1@_Ga$NL~&9&!=!-2iZOVd}hM#>Uc`XAY zXax>09fFo2guuWgJ3y8yuYp=B$d)P%OO=MDO2bm6VX4xvRB2eMG%QsbmMRTPm4>Av z2PzFqm4>BC!&0STsq&UVgMu570@MTA0X=}_fNg+1fCGTTfTMut0B-<31kmc7G}qHw zQ!_Tx4H^X58ITOZKsGzb3zg%yEt^xG{a7z@yK6RHd{ghu{oh%<_$a5oXX@o!mX`ap zW;_Yru;BXTd*8l&M)$4194!XZKJI*zwmz$kHzpmDQ8>iupIqilk0{QF3RR{e(R1jd z8*ci`y*;unDV>roT|_(RAV&ZOS(10s(GEH}Bl|dcPLM7&B#69N?SQ7KNOn|1WG6qV z51NO;X)*5@DCibEutB;=Z`0)=T{P`u_gTz>snJrUbS^u!ciA#w%Q8%5v#>XAHNTH^ z4x+=&MSlfWPWfv&_fW7)JXOmN>B(TjQtegT++|QEs;4*iF@Fq2FMCO@$30{&%;zZw z2QX;gC~c6J|Ns0x!Pjx~2Y@dDdHFy4O7ik=E66_z1G`KTNof}ZxtG#h`h?$Tx48(Y77-UyRu^5gvjc&kChqWw#She@081PH^sbuP#5 zy+z02J_&GX$OweMeY_J8)= zlRnV~MiIYzVYocf87Iy-2UfN7)7D^rd_+Cp5Q68kZ0KN~zJqCY%qC73L_wk|REtt< zX)c=NoDNd7N(9it4pFZ%YWR%CY#KL9=>M6?Yxao!&j`I^O%@G5oV(2*Hit~Y>qgay z?TYVu1E*qMukd!jcd|pdTV*_zf~d&jm+Xj*9ilaPtWN;!7&EQaTaXVjOJfu8jdqo2 zVPRC#8H&0UxR!Px7*Hk~MA0!t$;JUHoH3i9;ewpuzYfm#d9s*^aAp!akcEbxsDZ7) z2Io9AIEBfq74`|UkP<(&T1>iSlX8zyF&P zhr{&$ZBAVIH2I!4e)Y(rMUQ-S9?YT3mpzsJ z{GNRu9hy1w&`0}j{L`WC?n8ef`RB=2DyBm^3SJj3Q*)XEykba-Bi`Ya1F_F3v8E6l9K7NcA;ztx@uZ;fd zfG8ZQC>*LN9I7ZBswf<)C>*LN9I7ZBswf<)D2Nn=LluQX6@^0;g;y3W#E)lR3B`{l z^e|JH*)w2b2BXU$e#{_#%piWuAb!jse#{_#%piWuAb!jse#{_#%piWuU}n!?X3rF6 z_Oq`fKeJ~FGdl|TnO!YUiPDnOU>JGkeh=l-=_#Aqx%J)lup#^Eh$|=k2V%bJ$vZD7 z&2G_~xUpXUe<1F%tUnD|cY*lVB1;50q4R=-L5 zhwc{o7t)`%;)9t1dJ1HyI?w{eY3e}h!?Fv3XIdmbs2Xc3q!}wd|6BcveRJG4?t@;l zOP?KXNftl;#oQa0)&A(oY(KxVf2VTylaEc^wWL)idirm}Qf!OUI-#^{OUM4}NnbeZ z0smNd3i{H_-F=j`VDuvZ4roh8(iWKx_yrWG!8mK6E%JO%(V4u~U(onQQk2Fa8t?l84H~GSIcjK*8k(bq=BS}LYG{rcnxls1sG&J(G^U2; zsG&J(XpS11qb_L9*;hiELyimnCkr_yOhPD<(qA3$IKWK6GQd{AZoq!P{eZ^+&jMZt zd;s_okoSqtzLLD=Bnz5@0%?x)+(CYkMI~pc6ZxkUWU(ky$-A<#etUt|Vk{oJV&cTj zlZ%@dU%2bS#m&v<9A16p3lsc!D#4$s@0j1*b!lHk{u1qr^na_ebF<#p1gXaR`N8RF@L?U7t!m6zaspsaVwJ z-nAL@R_?b-n`uh_(LUvF(QtBQS#@njag*MBV!JFW7Q6`R5ZX>c$^Ti~`B`_c?fe67 zgC_=~uY4W(2eKr;7`>yM+Ca=eZt{??Tnu~WvGE{gnGw)%OXx+`IyHAKmgD_2h-=mK z4p|kqL~xiUWk=7>&c%CGHQ6~BkMHDWdzr^mW>;K+x9=G6E#q;QO5YGxyy*7%+$XC+ zUyM<4JI3gT@yPe@j8*nC=sW1y=Wof!NYaqB2rMy*LKLKxr-c0O3ErG_FEJUF+_&)# zZ0=6HNOED;#q}>SnU&d53SG8CZ8gl{U*jJ(X!`eQL=8VdW9;whk0Ua=QZ)5nr!}L` z9`yMp^x4ijXp1nm?m&m-S&zf4R~W|`k>we>H0bKd^O)T8A@t|3Sl0h}FXA%pMw4Bm zv75MkDywN0-`;75a`SrmVmA(fs$T z%*G-bL+&f=TmGT4uy2{3X`+lNp2?G^cTI6p5VgErsdxjV2( zu%G(qrM5Qdx^Bhg++O%6TIQ#x8}Jf>ffbIyp1~T?ra+9moO=YX;<~-oVA1?ix!+{{ zi&{tj(-n{ZW8!0BH0FaOtK*(N%IYy|GyoEqIVfsDAcAoTI8%?&%Q5@ol!eAGKKw$n zj19k(eto@2I}qRGyCctOv`Kg{@pK%t<&blxfG2|KjshOZ5potBArxds$O%Wt2}j5Y zN5~0B$O#+igd^mHBjki5X$AX5vgtWUzi%1aRplzw2fFjr9!cM?~SR7 zlr=DEO4YpG)BCs8cuHG}I6)C>nqE^mzMLMk!Jetyr^271+jbTs`Jy-?4xq?^L4Fwg z5qVXNJnA^kY7tLR23ITT97WUe3X`0`iJa-X{0m7N8lqB;3;SVY`NIF&COg_F$nxcY zd^x}w2jt5E`Eo$M9FQ*uq zhkW@VUw+6J&6R%0mml)whkW@VUw+7!AM)jgeEA_?e#n;}^5uto`3v%O_Lb!23%eua zRruPS&~BuVmO1Qu_xBb|$?)Rv&MxC?oEaQ>)ouX*gHhIMzZSbkHjO2BI}7Tq`lBc$Bd}2>$OO0eBW`gGj@;2h=ppCF$4#FIanMRJb z$u8KKRk90YKje2JP|^|$P_LY6AM)BiC@p8qL_-}T$u5%tv?ncJNw$H~o_Vdr)L#&8KZM&4;r2tg{Sa;o|vXtQ@iIY=Usd&d<(;acI1vM=}oH+h?uJN~WQ+ou71K z>d2*iym7|Z0o%aif8hF5xC^!+jy24C2G=l^@V;o(G6EThU_Qaqd61bjzNInK&?W_1 zvnkk+ybugZMLsnS|KvC>2j!>Q%8iK)RI@fk)bTB6F$qUxiFFm}iwRzM1t0wN~t<&sRGVnlV%7(Vk2)Dpl4aLD>)0-mP=nvQMjuq85311z)#!t2^g%WHAQyd5 zjXtPGA5^0cs?k?ajkB*rRt={M&y9;%e392HvHuZTl3%=}*BQ`OVd7i<1Mg8$;B5v4 zP2!{-gk=LWHTTEXb(x%hzdu+#=i zJ~6Mhee?7(uX|J|UFJ}!t)){(w`}aGNspgjJ9%TsGP1!@R+=&w@9Asb+*Nk+`SOM^ z{`&{5m>f1dmg%euM_ao2viK;x_h`&%1kO@mcCQy)Nf}X{(Kqf4Z z2@7Px0-3n22LOiw zM*+_P-T-_EAekt5*Fm0=_Y}LqvpzU)%)@J^oj5hqEt=J0%vx+Wmsh{= zp9)BilgZX8$a8^tmy7PO)f&cY*yT@Ac<)p|c#oTD4beHgRysnT5r_}tb1!GFk;Y8# z>ACed?O=orBCBJ?r(GH|t#{K-r^1+H6hXv>6xln z_>YLf(KAZIVdzwlO`|CbuQ`w`B28I?dwTL)Ck8cVa5rE+(i-X%(GnExqb9D=E_Zod z`?M`Qc+nF?mNS%@JR)}u{!^N+?0B73Z+05Em!_MX`s`ebKUg|n`OvA$H6nMe-jtoE zv#2yqV;29D2luoUpXf8$gr|T4D1()QYpn(D4a%b|L68{bLno$6x61ZJ`E4n7#J*AZ ze5jD-g&0Z{MaplLlV35G0X^iMDfHA0UhOH(Jw{wd&&bJn{j!1iCg1KLz4CjY22bP( zIC$a=Ta?eA4=#h{MNv9I`>z89;}j?uClqAk6o8Hepko2(SO7W}fQ|*AV*%(`06G?c zjs>7&0T3zx9Sgv&1YlPJFiwGjaXR}-D0WR@X%hwt!5}>wf=x%jgN6$J{ScE??Nw+4 zqdI4luesP|ZS7iA-LYkQX8r}6tLKeR&pT(`)V;OBd!B2H+lKir+|V*>cwpH4D`$~8 zyZ+`x=lTvRU3bfZ?tZ**Ge1Xwr&tOGS1?Buc3l+a2$wWR4CN*Mj|Xs&R*p=VG4K?? zfcBrk$NW;{zhK+YB_!H|F6|DaAS}NxPfG=vOEz%H1}@paB^$V81D9;zk_}w4flD@U z$p$Xjz$F{FWCNFM;F1ko%I_D{px_3i0QG=&Ko4L!U>jf$-~iw-;3(iZz#D)M0r@F} zIE2-hLEg|LLL6!P&bq;Q1Pr*Td&NJPM<^D57xbpRPuC5;4}@YYdLKw(HycG&^12

ask~-O`^ssB zwxD^kcP8&1J|=C@c1W6+z%>TQ3+)4>_bXAD6dfWVXK3LW(@|cA)B`yL3r*V=dB+6p zJm-*7%7vK0NTqoxa3(VE(9wR?7=~%l6l5Ie+#BEb-M| zEeXvb;k^@2@|K>Z@-p9~3F|$l=3tf2G_5_q$|ueDc>n)rFtuOF{+hgIL;Ea;S{iyI zFwCr!75KllCz7j0=7SzuYNbg$KLKc^2>=t51_d`D1*iwK19||<0owq300#hv0Y?GP z0p0+72>1$+j|0!XlENfjP|o~2Rpn5y(js!2in}(KPKX)>i^>_P2yM8oRCv#1d3F2c zHtQ%e{;$C+FYU)}68ZUuPce@-ao@zdq+z*f4_h;+Sp5nBQIWh`jrOlOV5_U~8N@F^ zT;%|T(nIWZ0~z0jAz7Ef{cG|wweq4%18)1DzmrW`F(td4fJvqQ4kQ7Snt(}7z@#Q% zQWG$#37FIbOlkrqH35^FfJsfjq$Xfe6R^wq^-(nnEwpgc|A)Fa0gtP=(uVKtO;Wd7Qfptl$y(Zyti5Hawc3_!$u^R$#k(yW%wih} z836{zc4h#B4I~p_02{&@_ASW}8yh>2d@OZ!ZmOyu+DVyzwF^QhMU~l7` z)h&4yT^l!T?5ZeVeMRr){f!xLPU$UdTHD&PVQwzI+KjKtmVfz-wO?znZ%W9To;5wN zps>6d_W=0o`x@tM?Wt&;Gcz`JM!^jF46T|E|J;T3z0EaeEuI~iqjgyT=V`v`oC{I! zZEK~?GZmH-!HDHBPXi><4j>6cq>(v(5tIb-pzv(1yLc=Qt7=QVo`qJ-LMvvW6|>Na zS!l&9v|<)oF$=Ajg;vZ$D`ue;v(SoJXvHkFVivkWK5FT9?esGVcSTl27(@h9q!Vn; zvKgtB!)Tor9IwYV%_q*e@avw0M>0*Xr_>CFUQ8>fnwlRd%*4IW*@c%RZN0?yP`sxg z-aI=lA+)=FWPMRXVRBkln!C8TT5Wm_Y%liXc7Y6Y`oy)3bwb3_Tv#g^H|ES3&6$=B z#t~?B+_JfiaKTA)0SNh6A19Kxgox z1qV9AfzEKCGaTp)2Rg%n&cH3z)?UZyXAQWu69ZL~m9wM@7R!#m=b*}|5GDPe0eSUkae zN{53|=;esVU@Vg)o)Ai3l#p!yBkrbm#>bkTm^6QSjEQSdasBr3*zAR&?=DP=34M$! z>0vY%`p}i!8m&@shCMSq{rJ13#c3rOc3X2CI#PGgTV>C3g(!;aB*_DE5p z?ZT0JY(KUiP4gXpa!H{t)!w;8b#H+!-N&${>oCqdN;iE-jO>$n;1_oW{w~+bZU*EA z>zr3Pczprng&FvyM8OkXZS*e-KY6${i^?{bZb@xOH?a{*ycGJxt_d$%srPNbt_M%7 zS@s6p3JE)g;zkEZ7Xuao2R3i6DQGU6 z9^;x`-c(StdCNdu<+8eI@t)$6&P`2qn>TGTOw$#*+w4Z$g!PeOd&e+|hB=7U|6om~ zYsnJlZ$A4j>bp7gnJqKYrf5$!#Su^s915!~)6kYt+w6R_A=k@A_;lhkh)?cQHnUBW zke}sxo))w;mph94$V_;qmr@oj#fB@vb`eLt<^IpwI+DvR`kX)$b0aY9l0v&kX=rqF zSEMnM;v$WiX*FhMq%q@?B8{0|go_V@Md{|#C$?qXz!tP+Q~7jP%=EHmwB_c3;0bMs z4zM}`)P%Bs)qKK!-1Y(XW^<@JfY%O46E4&^m!5!}Xeio%sy5YOT{+DNV)DYyjO?C* zrs9mQ8I7yzs?XniR!Lz)afaDBqj6_BM99IQ$pK4;J7k2*5cVSM zM|cR~Fv3d+)+PWq^Qz(Y3|EH0QH<4TSWKB2w#bbke^=v=xV`b$gzmN#M(+z5`I+PQ z{+a~bB$A37MQT-#yGHHyHyyviLH`E&!@)%`GI)*DW0I0OY(^dBxl!L!VSNB-q2(K7c57-9zVwJBOR+?)dISZeH*Zzj9Aa zCaj0za%-2>!4GAt-xC|_$jn%%RV_YL9F26^Aa~dUQ{x?PYJu zf5q09a*xi_y^(mTe)ymCMJl$oSXg z(YO*N`W&-cU*0;#^GJYAK*)?4e~;*abDE+ zn3l#79V7N_P!TpfZIFZbCK-}2SRhg(x@g)7q~QskNTx=~vI7F&r2niOaZCCjs1~;v#gQd4s-kM)r zlz&?l{%*$K->AGTzo?^R(Z;&Ejf+c47V~paiR~^vT6LTC=&j+O;_o74RmH#S&RSGb zvIx!ytzU^J!o=P&%gHn5e|HqL74cpahdCola|ZV`=o6Kvd8Um~@FcGYVNohd($NFs z*0h|VMxpI>ibe)4=-A@iWv5j){US}pCoQ|DlYny3ToQdFyMHhr;Xf#Z;4Z!<_a1Xi zXwA}Wuem1H>x}c6t9i~PwAx%7y3xEKbmN)Uhi#L6de+E!srZrKcB?1h_x z@MUbQGmDPmQa3w96i%R+U~p+CcZ=sDWs%xvm2&h*vv<$ulkA<~L zQ}|nJ&h8)ECtN_*v0&Wpa&(W68Mq#>u+7PVPk1~bAD6zn)M~C7dt&(Tyi|UW}&~Vt+uS9cH#Qw-W_>`XDt}7 z!I;_DU0!`gLq$bk!Rn^Y9R&p&7ti_9lG!yiBaal#t0^rm$(pgDsdQoO>>__gVL#;o zzvF;yrgJ6tyo}c9o>$cW{Zk-M>Z^-Df2rUcG~Wq-qd>;;(NCP8VV;{U z>VA{d?ZBnBr0xQIO_}B>L<5KD{IJo0;zen7(yemyNxbu|d9N6)!iz|bQe^{v#OZTB zsJ1I|Lr)j91YKyZF0k${Ec3dcCFp{dpbJ`pE@%n5pe5*nmY@q-f-YzYx}YWKf|j5Q zT7oWW38;em3p259=s9&J;Tw9oa6?ZQZs?(s^C^gG;aiec;g+OTkz0~hVZg6~NVf_i z-72)^D*f98ybNJ4!hVE@5Dp`}gz!4Ty9l2ls5-HTWFpK$s6*&L;J-}>mm%y$*pKiK z!eNA$5MD=k7vVDmT{skrNG8H8ggS%{1peEE5JUTH2#!z9#jMtr8zqYM+@0V(7 z`Y-QXzTn3oQWRJL=R`8hq0M~5GIpMME`ySKFSl?}hHIz{op-yt5GvnE9s583Gf zHU%4$iRMX?zVX{>Nim1Kaqjp-F-g-BCj4bHz2=t_-HGv@(9cujVpBsu^Tgv%bH_=O zxgNdG?6v==?KzOsbRJ=}yokc~5M_&r_=)8*g2E7`p8M=gJtJwh=R((;e*XUS?v-(j z@$eidUKSclZE>{Pvg96XMOP&@Tnm1_L@{u6P(0<9dbDGLWR&J`%(8>0&1?e79rf%z z$(c@AlchBdbqZa|x*ahL9CQu0fZ+YnQqSjt*XLrSrb6YnAhim*TYQ&cs(6Yz$=_}BVGvx zaY5eB@B7M7UH z|9sBG96}(%N->93QEUUxS}hEIIkTOY{?FjjpuZR9o)IFP#PR$UD~B+iVA& zw0ZJV`j6aCMA^(*BU)0K8+(}CQ{s)N)*>C2pkp>kVPz>6L|j+VnJtN&HcYq)#v+kC zkVsyHL{9%Am(P$%m_+`HAU5x&VEV1*?yJw8Y5XRj#7V5D-dVIO#^3aw=p$p6#7n!#l&*U}Spr0?< zciS3VD=|ecu}WaswNh7FKDPdv`-#(;S)3W06!V)Yb-~6Nd4ZX}_SzKFbZ$7;s?%Baowg>_sl`}h z)yZPM6`)Iavj!bkpmu(=uOBiDYdUYNrcD&qo4C?EimF)W9;}M-uAZZ4CKJm7sfSg? z=mM_HX06~LMoxpy&e9g=)o9HI8B$eNjn~aSqjp9|F;3i}Xm_OK zH)`HD`AIgWmb7>$^4ZmzP|Ytowd`ZRk!AQZMN9h z*!WomQ*w#}S-F9N)JhvJXRXRjn%9tOcSPFb$Bt`kPOQ~+rkxkDp8QO^8N(aRxD2&9 zUyt?02k-D?W;*wcxMMy_#%_*jTqC=qH;t+0Cd;B>I@*sXNGy3UvaibXKd0VTwX_Y? zw$R%hd5`6DHKJXev{^T4zcp;}8?{CHf(_X4bbI=Hr{N7)PPczyCf0O&>P*7Ztpn37 z97>#ggSOC*vn|{~pRiB6@R4)R+FjtZSEOc4+^b!+uCt?LRetDjda4tfwd}_^qw^il zJ9!~@m(>f@@Y%5fusoI0-hkIc$3ib-?TyDGC1p&`5BCtp2z#6gQCbjLj&$-U!y!bj z&~QBepUXpsSDbg>a8uLpedjs%^!&l=JoX2#eS6(mS9LDCVqF!oxZnKH9I_okc~a;X zf>NyZDtH}@=IaT}`2M7v{M59R@)oJb!W1wAJf#D%)li zb!EFUs{CTFBffe&=kxEVaP#?=F^4vs+|8gw;b(YmE^ z#rwG*NsbQZ4`^J2+Kp;oEf136222=)r{x~K({X)ltS2V@wfesgU2Q*Tn^N!UT zg22VKmOb3o)L@lZH@=d5ak-|hTZM%S^xl3uEc;r_l(dwSCH``nFXoU74uCwaLpbsO z+k_MTzB)0^=kb_@9bx|t+iG&nbz$eeiahD6Q@ zWF|&W0Z#pum}z-6JTGll7o0GdoOHwE)Qz3=9_2Xp72jY>=xBz`Wo~Hw<5Lrcnj_X8 z`lUJT_^&-VzFGDe?yS_}-{&Vi_gvBp^Yy%Oqwvy~9Vloy3S17|iU*5Q>&8DyALGX=M<|{_Y9*efH_39eKQ!ymj<<(@ z6`3i+ca(q+hudx;+iu~w)}3_xXda)KXSFUl6{R(*GEJjVt;_Q=2^jvCQnL*0`e#dW zC$@M>w6V|qlQQ0-6jz!p)s~U4^Z30J`r+wl``cdoQ_|nu<`kO=X(wk~=Zu^c=@_bM zITo%*&6XLh4CIpS}3( zML(X2U%Irz!QXyqOp5GhGxv|{h)Fv~ljwdmf3o^Sx^G0!K+%k1Rw6cC#f*#qGW50x zt8N3UZi}$$Hn8e8uNc?IHn8e8uNc?IHn8e8uUumJKtTyo&e%P^?JY~(YEWy ztzPo4dGniVzW7EQ7cbB`XZ!WbGfuJAxhVF6@0qqc|MYD+F(uGnOf#2ESQcSS>;4&y zX*$2>m|mkXdSZI~gmjK+>v^wv=D6oMcCB=1M3oNzsphT9e>U=WnQ_$jZs_Sj6FZ=5M9DnT}yv2{{6n*}!fv*Z4ZbPK+Y@aOOUXiSc9d zZ^UCE?Qv>LKpKy>`n1Q*E37gV%NbiqPqHwHI)$Z~2EC?oK-uuq$URur)(&^X>0-r; zZ|J^AtH)ek5|kFcF(|KqCZX1iIJwY9RlaWB6?B&F4SL;~7QQp+rqDq6-k{&uZqt=P zx<1JEcm}Ty8hL8&$OF1Pi0z1ea;Ce;OVJYOzhv`wYG3*FSNm2eJ5HH z(m9`}kCPCicE>amvTi$@M+RCHVW5au473PzR0Ps50`DsV?<)fDD+2E;0`DsV?<)fD zD+2E;!pn-l`-;H(iopAdz(9*Eh82rQCc-R)I)n~{RS269E<@Ohupi+egu@6gA-s<8 zE&>@S)e1Ec23i9KS_1}J0|r_H23i9KS_1}J0|r_H23i9KS_1}J0|r_H23i9KS_1}J z0|tsqEG-6l`k90oXibEHB0>hLaX?pkQflhnz_4)|7l1M8$<9=qI>5#bw)dR@?D0&4 z`3-K?((MKpz1V%FcZP5FQv;W7#3cvYU+o==Pfo49|D2&e=JzkRz2E-bExhl*F}$K{ zBxAv&XOFw|pegtrU*hK*%&CWT^FeFN%}ELWu_5&Sckcf09{X>Cjl2P2|3^K?)2nNA z2?EBId`xTn)P={-0gZFA zCUW;e0yb~Zsge84Xa#2jbBXvhv1|gk(vJ&sHm+EC-j64hBNQFB*^jP9!^a1;7s@LN zQ3x%!Y@j?T(7Dfc@*5b=HDe}U!C+1cz2V#w`t|rr7%blwFXC=yzw=gOvH93hEMV*~ z72~UL5)TZ6F)#v1yxiL@!KbzIE`hXTowPnRQ(Ayu9* znr*hrm+xLvR^HyzUY=XKV9|ow+^RKS={)C##&l@MyakP`TN>82N~EAyx27B%)Zv<>%^jvdo$>M3vS4ir`{ zX{qdJu5atDo4%-}xMbBe{l~NH@11kcPy@!9eET~0VVt#bJi#vdUp4+tOy4#keb3nQ zKcA4kc`W^n3F#}x(zi@VKQfm7E2e|A@m}W#7>VwB} zBLQNM%u6wZP_i)Oq76IIhMj1`PPAbs+OQLC*oijmL>qRZ z4Li|>ooK^Ov|(qY4NpIla2s|;+7J=6A=yuFg#GkJ*bgFB8}_35y{LXKs^5$1_oDi} zsD3Z1-;3(^qWZn4elM!ui|Y5H`n{-rFWRs-!hTLalPLRvVSd;uJ>osoW9Nn&;QEx8RZ8;Z^#vNV^8J$i&s{ecXeFUQ|Yp;nALHP{aE8g zj|`H;GA>83GV0JYQ+T>$nt#%A}h zE+9JC!-vB59qF$l=Uqb#aqxDDlz{SfKDb25MH`Jac= zk0JddC-b+`w=f-2>*~?p*soj95_d1E;Sj=$2>*ug4#Mvd!gP50nS|-EHbRGpkPfwr2}L^{XwGTj{U)`vCk4I1 zelCW_!z1J#uYOXzk0!a!BtnUtFk9HtlDQj(O;?Q48wk%@%g73u{rr$jrgp1aNC7%I(3ow7H1vaq{}TDt$Wz-%i0E zS^$-{kJF4ynrWifT3FMGu8N>!HY+lnAYx4?voM{^(!V-j2f`|ZO$e7E>_ym*@DRdb zgqILrM|c4XYD3~Fl_ zm!i8$F^o$wC`%!km0}o|Vi=cV7?)xgmtq)~Vi=cV7?)xgmtq)~Vi=cV7?(zd@#$w0 z9>%a)v!q)@IE=?!<65c_%N;If6qtU&qd`m^cF#b!H`iCVr)?o! zpso6P?MhEdO4af2msgmdm2O+Ide7Q2bMxvwYs!{|+$-&yTc6oRk7!E=eTfHKfA}}_ zidI>AF|Pml(Wd)?wg-!6w_J4Z$UDu$-#q*K7mci6ps^<39U6nH!ebDe8DsXu^lirY zbdEvm`JYcn=UB7Sw}jK>k3jjaQ~ukGU*I$Bm(BTYSTg3C-;<0$U7V4oelEN26<6xh9806__-W|kwoz{?*W2@*%durpmUmB*cW;iNXM^#RiNh%B$!1uug zF#}MK=9JJ!dqB*+wS|6c8Orpc+VcJY|1QloGdJv{#JSLIPnyzKenx+WzcM>D_Q8=w z4`3qgvbCOTYmKj}E}UC6r7%13c#Q4KpV{l>Kr10dxT zAz5$jh|6inLW~DUpA6q8yLCC_TJiPJ4eQRT~%&s8X zf+)x;jC0-@(rR>>-?q-hvTR3bNEROFGce9Ai+}>O#v+Vp+QQK~b=lac4yy>G^JCO^ z)=}8+N2P$yG(v2#9wS#f;I8J)-Thy%!;(l-!aGr`s96Ph`u< zE*wdzU9hY;b#`HP^I*P;Ib}?~VUI_4p0v;lB%EMg@Er5O1=0@|LSWjr!cGvMg zK9~Ft=h}Yq(-u#H>z_ydW2J4$IrCH8>uqnTEI|mR(;<&0(PKj_%3?_qu_yz}LOs2F z0;-?T{^3l#4VN5zdv%p3(b;$WBil!70%@^*wr${XKheHE zZLO?*{dn_Z@jh#vybtNtI(eH(*Y7s$iyw=vb?(DDFkt>RdWM*G#k7N?q5!u+iw!ru_#`Y}4MNKqcWPu-T`%f)>v z6I7D1wUO!N_|by%_ujjH&oA#@z54E7?pc5D-t!CW3yyzh@t&tI8h&Qak|led8NTT0 zJ&T=HBhUAaJh9yD>bZP%`MFP820wU$yG~4{y5p!+Te*y!S)& zI`lTKm6(gFpl0i~?K+B$FgrRmvj0`5825lX5u+_eo%X+Yca9aasPYUD2z7hh_v#&+ zp~4HcC=UsreTybUx4FV>Czpa~t|f?KH-u((n7McnXLY1!tI@O7=-F!YY&Cke8a-Q$ zo~=gDR-b);tz!OTU^R81@)M@Lg+ z=0e089ZgV-G-2VUVx$R6>n12hnxGhI!pzkK#YhtrBTZnxO;C(9K{3(<#Yhvh zD@|6JV-d+jn1xV>(1EZDVH3h-2zwFsBRqs~7~v&^*Ad=Dpmv43O6`#n;#jpcw<2Pd zupODVBlC7--j2-Mk$F2ZZ%5|s$h;kyw-NF=`oTLl zUjJ-y>Vp2uM%MJ~=qV}!^zQ5}D(c;7Z?X1|R?b>9asMcCtJlppUUz%MPyKCs=5INp zXtK9@`vuW$Bg_#i;ZyY)*ZUY&bHG_4ADfnZyc+&%k4ZjW!E|Gr@jcBQ*7LMcv7S#b zVTFQxtmmn(v7Y~haj()X8x`8FG%A0$8BqE~n3J!QTu%S_eD5Zu%a^0xyFUEhgX5n6 zHS)2ZPcqLR_xxQ*x1Rr{G5&d$(|SH(!t*Sr_53gRJjU|2(0=<{ur1T)y?)=9AkpdLmm`OOQmu@5f;m~9UJ1?25wlDU%jEL)_vv= zvfs?ic>T%z8vd1qi_NDV|F5&Yx~`;RhBE}|AQy1r}59H+ts!+95>iz zLH?+vqa3;jI{%pD9hWL9O zF%GBgUT4gw6Y};NEj)h%bvF9VgT6`}>#IrDKT#KUmU%Ocw`plvHQk1@%(NoQo6(9l zdpx&06JzH6bh&en=U%V(UY8T^1g(e9=G$Dxg(^dh<9b^v>X&A$oOmyn6SU)mh7r^O zktGAA@?j+j_upfB#OO);@Ej9eL|Qj;lbp~r+=8i&xLKovM>Bu^+F;fK->i8R74wRG z3$lZ29oPHY)>IYDubMiwYJNf0nl_kb8$WVU21!a8NQMQg`U+gy|hOH>g6E=9v zT_;{CPLZoXORs9_dnWrCzzLn-;hba!%0??#s|R=n z3_UR6Tmp~hL&ZSn3^?U?Sx$LNUS3Q2lquF{PW{~Ks=0Hks^>b>^BYUDvPv5B^BZPo zX3lQNXF7uV=GxG=%-3MT2?vxs4{5DoPoO@C_Ev#7icefdWsI$o%qJs@qba3zQ!6K} zs%JLMneFqATTPR%6grODik+MBe%P`)sA~p&a`$H{ZCNuYP_uvGt2yen(>3O`)7)1w z+iXZFm@_lCVNP{+@oZaDYT=xjGaG8Eo!F(xZz;=$@j$RN90B{;i8JB%K!&G!c{NYn z(pZ+G&S|)zk+V9UF>BqE_UDWe&d(?`mH{+lE-&7X!{uhr zJBXG)=}ixxGxsI(w7D-4 zB(_P1t)gbumPp|M=e3R%#-ZRes@6p)+=)#`+owZNONXGA4j~~Of?7HRwR8w-=@8V? zA*iK8P)moPmJUHJ9fDdq1hsSsYT^6QV-U$e@FUbBv?HuUI1k}cggprR5FSK0gzzH5 zzahMX5Ej(ZBZ3+t5Y)JaqGPmdHZfLvx+RR>Ch4pMmq%1#Jiyl^c4?~}7o{XWc4lby z;O6OpOsCTuHznii|2r+!{$_qc`tft@-xz7S;NrLhe}eON+p{yhn1#{qe{Y*^f53Jw zn83+>ij3cJ{Cj)K@!#0a1q0XbocHN>UX0v{JClF!^!?%E@N-uFryw+yODOO?~2N7GWzXv&Fo6;|ar6CJsQOA5QLZ%B5<#<;4_p3~42 z8=HWio5lr>G&9@zf|WP&W&X^YwgJkUyI-yt9mJ(?21WiW9eGcQvGR7lFqU_$tLmIN z_0haX4Ko`jfmQC47NnlOm(~uu%+3=PkR%=xIB8+K$-)H35~D zASDlD07kUG`=U0(E<7*1RQsL0A%FbEt(rYn<_S%WGNY|+ezocu=&-8r&s2a_VNF;%qJy-Qxq9AeRt><`>&n% z;{^1DmOlZ`KbB2E#5RC?kG$#A1?u3z5ZZDx4x53nz%a>Im4~ZT504;NH#Axsk#%4?CDjh8?Hb={Y>tmjX`XPx0m6osrS`tzK`&l$;E2&$qfVGDBB- zGjgV6ctgAGxBI5p67A-jUTdeS^ z#`esNNi8xme}*pytrVK-^_p*@m2!OWjXuq+gwN%jn3*99SpG1^W?`BcS$;9#jBtWq z40Br9vMr5GFfuG#Hqg|#Wm%c6uW5izi162Drfx8eLw}z+A^3YDLH>JF9&V!#02QX1PEaS zp&el*!g&anBJ4rfhwvc6A%qtZyzA#VVczUC-bS#kx4Ni^-7}%ug#~}|&&?ALquT#v z;@_dPiGO!aIEXstGhFsC6aPY!#b8bRaqO2NL(#u!1$6SOi~-|sZ5w!FvqSPTC20qx zNwn!w#3Dzz9pMuSmm+PWzJ+Br%z&t!nvGwsmIPK2jvY2uqb08x>xHQErAZVYPAF$D zz{SAWv4!Z?X!wcn33W-db209?Ps1BMtqTP(<{$&X3%BLND+`Cq;oi$yie_Qv$%2k0 z3p$o8=vcB)?JVe6vY=zhf{rB%I+iTxShB!)vY=zhf{rB%OVKPWMRlnRZ-e>^GqDbr zpE?sBF6Sx!KGuLzTp#GK553d}`s)Mz^@0BSK!1Ipzdq1kALy?S^w$Ua>jVAuK>+K6 z0M-X7u8-^I{|lK|zJE?#lCbZeKDd$SLt`H{=Azd(y?WSKjL%_w_Th6UCB74uVlgME zT(vaiZ6sgxV8It;WP7BdXP~ipki5fkWOhbgQ+H|Uvc|l;#$~0Y-A#G6b6mcJ*5k3> z^ft%OD!L~;U3La9Ju2@pU+_Ih9sV=TBX;`F1fS)agKI8vEn3?B z39p$GU1XlZDJJs6JK#6Qd=>9VC(d$>;UjPZ@|R!MX-C46KHOrW9?>J$(Rl^W+qy&O!B_|Smw3CtTq z&YO)cTa0z{FTG}3cCaRBGjjHoUe0qcUsDUl`I@^tj9YWI6`zgt*+{1i?E=IXgyXdN zphY^C?@7bW~_K8kKF zIM_{ov}rp&XW+Awk|9)qGWEq84W_?vh|Hr9SX|}h($`Xk6_qbM_}k=0G7W_Nc{SBs zmDJ`8BaojJ=Z-7L?>qOhg%=*))0gngJ51Alr~S;`Ke@3hWA?m~JZDVWw1R1AEnhyc zZJNhdUX|ugofhxg`Ms~q%`7M>$c)P?TT(N%>z1Eh*O2N@tE}J{wHY1u4yOxaCkGSY z9hU7D$;i?J!7DOi*uvqcl7?i45i7ljMi&}{Hm<2?lw`z{5$7IlR0Dh}ZA6rq!-h=J zgz#-tNTACudgI|xqL(9cPWaNaJYOvxL(KHsGkA;=8wx3KeuQXVjr}!e?7ukU+`(q& z&trWaU+gcPEkSo&%uhorUu^$J`zJ|Wb0F3+^1sZZvqQU+lFTm`hZfjc9I>IB%*z@^ zj@uj!2jC&%QaYQU}!~=1}198Lyal`|0!~=1}gVK8- zj(8xBcp#2=AdYw-j(8xBcp#2=AdYw-j(8%P@zc+Qn^LseqVC?Z_^(Dc<@zF?E-lM< z?2Gc6pxhekniq~58qCMwss{`g`$pd7vf`!}hK63aX+`secWwxIe5vL?p7p@?wsXGo z!Ja)IeEXcX%N{t(d@0puo}aq((tFPP%J;s~(gHZ|o=caehHg$x3j9a}?91nOK{(KC@9dU_zq)4qM= z#!BwbH;=Psouq}1E(k0KusmeT4b=Y^cG=5GRFvz=Asm)NI4p;7SPtQ^9KvBagu`+O zhvg6s%OM<=LpUsla99rEupGi+IfTP<2#4hs3B@3if#64|MQBG@iEtjmr3iZv_8~lo za0uZ=gnvVL2O+HDE03u75aBMn#au0S4&x72kg}lY=5dQc|A{9oZpd$KZJ)LBnlr1~ z|L&i^+I`iAnnk;xy0B*BinesS!!&RCyUHbX1@0J+v$N-GLrYWLCGF=dIP13agR>T$ z>uk!*OZRl_ec>z5g`W8Ix;f|Guy*(#Z&{HOT-h+Sp{6wHXYZ$Frp37bSlE8m_qSJX z>?&XMH;w(K*3&wsNYJSk%$Gy ziTJIIXg(&DA}serZLq_-5i0@2JKn1$q$uR+Ci4}8rFYA`8mH?gXN`ROte?Q4<>%+S zZf4+_4wH8?JC36rlITwt(jIqlFeH*twzx4}%%l>9MYFL2ST2EhmVmY^m}}t*$V{VS zAk3U`IEb^-asMCx%XZbs4oA`-*LrOCjBJQUQI3C@ef)!-{Nx0CrM=9X!t&f_`?CD6 z|2eu`_+CH$9L|C8ceB9TpLQL>UKOuhmz7Z}g|1Xf=t8kjU2Qpm4#CgB^1#8z@DeEFBBMWCQncpyNTEqM$vuAhK=jPUT+8!zC4CdwrJ4;F< zUzypn=C3R-U(q_NWZ6aS?ZeATX0@&?D_hCGhuhmPT2|6kIJdX7v~OB( zb2(?FpJ2}dzN*^1JSyoVSpc!7XYJJBW zJuTlE972isj>}gog*H>zBeaYh+#n$C*IMQdR#se%x$zJ;1}Hew%_tSr$ry1dxhd6l z@HVU-a_xC3xc90y_W|=4m$YAOW`thaWZoT`yRBne=w-8SQ>e{;j_C>g_u`Kihkk1& zE`}!AX54Kov;UoADTMtZu+$rPS~;1enr)~@I&vDq|j zHM#b8N0PlhTcNKoEv=9R^r~1N*?u}Jw6_JqznK&p57)A>W@2oz zr}?a8#d>+QIPy2AW@da()2sWcvM($zyw)QX~%tJHiyIc?azLTXYm6# zSHfLn55U3zw)hcG$Xuqfl?})UE`DNG;K{7Wo-r0xcp?Y8QqXpf*;zz45AX{*e3`U1 ziCX({FUBGpYooz(P|NKFCy2V*Co36i3IUhm-YiBvcTead`^B$LeR$4!H=UW=p6S3n z*Cn}kK4xp*5X!Odh=XO!@^ycIUaiMn;g0#{13kwZ?YoX&8LsCY&by77W(Vd$)Qets z^YFg$^~}fLDX0~6O{gntJyS8u6IF!gPqJQ~RL>O7_9@nEKOObtir6~M{4Dw`$)7%?_924;MI>+G5LBf2C_)yZY+2&{xf#(fh$ZvByn0kj6t8M_$Os97j&x zFoGo@)ov*el;T_o=}FF{q!|@!al6jUIh}Lh>zUi}=y$uzW!?!cn@14sD?Km6oOJH z2)VIOixC8Bp^E1V?qSO%zdk{49KDAPyM)th_a~%J!!>NyHET)J(i6D+;= zY%bRhr}IVRG$C))iL8%&jw^#y&OuOVgirLr!i={_ki$mo%;FcvCdb^tSGeMCk4cGL zgjc*AeuXneuP}`&=kIOlC_C=A=I%S@XoLjhAF&|7nR4_pHQXL>2u#zIkz?@QuqcoH z%xcS)syfwW=I`7#w`aqKp1Iqczu$Updv|yHSr@Awuej=P{r0axPk*MZ*bdl=`Fzte z5)v||`+PGp6J1}6{1vttL%ud+m-7eak6a_j_x~STv0XW(O*3aUm*(V@HqV^dRGL#0 zu@!Um&ul2p%q(u0nO9$&kx^WqH{MpP*p*-_aveNfTdmuRXPa}9XV%QjZLF)wDK4?q zrQ`=@&TOm;xR%wHJwc3f!= zI{yLmb#k7DYsJU$wB?C$F^Sp9m!yi&MZc$M&K;U3{$;WaA5O~RXnw+QzM_X}?m z-lejAQ>D6Bc%Sfo;RC`4g%1fIRtX;wJ}P`n__**1;Q`@6;giBc!o$KN!e>>^=alF3 zD#;5_NA|9&{V* zLASvkbQ|nJx4|BC8|*>1!5(xQ>_NA|9&{V*K@a+f+VMhRv9L-Q5H1{j2j8{}JA^&L zKH)Wb<|g6I!dryd`9^ zUo-j&aGl}<%6U*Z4+)2rvR(0=itkeV8s&eJ@MhsH!hOR1!rO#*>5b1T{<82jrM#tl z-WI;2oZl6`FZ@9GvA+F8cue>y(v#2{^MP@r{|c5YT+K?Ug2HJ?ODZNQ~aNm z^S=sT7rvuB-xa>6a=x$l2f`1P@~PsVBOjmo-KT!{8SHl-#_u*D``xF0_hGa$&VKh{ zv=UigpZeX0`re2*``xF0_u<^pm58(7ed>3g!G8B)oHA$jyU$?1`!HG=XTSR}W*KL{ z`!EuT>~|kVB9Z;>!$>5u-+c!A-G{NjIQ!jau-|>4eCES`_ZjSWpTU0j8SHnT!G8B) z6!2U2yAPv)$bL_T%u)-C8@&hUR@^I09BoHR5_&Khz0Y{Eo|!s&2=Qscnc!Q=Xt&pZ z`TDj{@nT`==n&GY6b}g7MsGsOLSehGL%3-44Wus~-2q&toV$fR`nFf`KE;9RnG6pKEYIrEUjo-EWu4;dN2x#@P+bO9iy`5#QZB|>&Sc{f;ibx9yT09_l%0BJ zmr|}!y{;7Q7G5R1TDV8JS9p!;c$4sE;Vr^_!u`VAgx^$M?iJoAykGc$@Im22!iR;A z2p<(bCVX7@gz&p6{{h7h3ZE1n5*`*F5gyf(-xEG9d`9@J%Kx06d0r)aLGc%bKhiTV zEBzIvyrq_TTS%{P$D9D z9`kG-#wO#5pz}OXATe3bV75_l^p;A6o{Bz`! zk6Nz)x`ke05~w%dn2BfdF{b!Tp|Dt33YT5^7)?wM2x~{bhIk!v&PO}k1FRo?9@sc~ zF|b7`t1$}l!I6jqddr~RG9(;U%EjQT`Nk!}?MmOF_)dMhODWgrjW-Ez7TzMipnuZy<$K=NHvs zCs8S+I=`sSFRJq!q&mMrs`I1GUj>rt{NVXSQk@?X8j)1zhlEBX)%hWz5lMA^aC_!V zs`G=-Gft}W8>Bj1I3gs~;o=b?sm>3c&lFOfAMy`VNOgY5Ja1r^E)FyUAN!cgicmXZ zvQnmka*Dv!i8G<`E<%0zWa(%ba3S7R1X+~WAzY>>yM;YU=~cW>@#TuI5?(62Lb+Wj z+%3FHc(rhkaIf%T34$AwP_zpFeCD1K1*r0|gNu<(fRsGj_u@M+;Q!e{la z7xc`F!XGL96~*6E%X}#O98Z>_-F^s6#Qa{0b|WS$C0}@j@Jius;Z?$`g?og1h0hA# zQw|>rKSv6DyFzv<)2J`gs4s&A@&-~k-pe%J%g_tIM!a3vAzTD5SB7-~)BA)gG1AL0 z8#2!|!gazyLmJfs{vb33qcvVnw<~>z;yd;2E~Q+fd~OonEWAayPq<%r zoA54`@L`qV5#gi4$ApgypAa4p9uz()JS03UJR*EvdA^|di^7+c@`~cG>0NKBgl`Mq zQJLQrzNdD6U-1uwA1dWzJ^6|7nDA44TP03gB~DuB0?BEs#A&O=LO_%d5G4de2?0?;K$H*=B?LqX z0Z~Fgln@Xl1Vjk|Q9?kJ5D+B=LO_%d5G4de2?0?;K$H*=B?LqX0Z~Fgln@Xl z1Vjk|Q9?kJ5D+BT z9mHGi0aCYsYaxZyEd)W6`+(Ff1o2)zL)}6UG)bgxAqdKR4M^QW5R}O{bqhhrr9(jK z7J`tDh}10vL77DA7I00aa1q8uP`ZVnbPGX)x`iO5CO$*mLJ+bON84x`m*03qh5PDi7 zbqhi0X^GS=1fi!TQnwI$K3qfdW8K-U`2yHEqx&_=e zCZuj5Xi&EhG^kq$8q_TW4eAzxpbeIvx`iNUm?flcAqd%zNZmpZx-6zsw-AH`xDQC( zLJ;=LwLt0?a2u)Ugt~>GLESO!&C)3E=_ZLE)3aL&C$tBf@9(-shC(3rcxW_=@l?mH%xa zd#zr*R*zm|+p^c{)obIyAYN!FD_y|(C8fwsLr~%`baju3MFlLEd4K<+siChge zXf@QJ)lh?0Lk(IDHE1=|pw&==RznS14K-lw@aT=<0WyDI+y#SaRf z6dn>D79J5E)sx>7J}rDk_^irLj@k(NVF_Q*^Dhd2q-VIAYXlXsJZ}l#7QUml;&JIl zj7`$X`-*=c{7@+$>&Z`q$Aq8i+t2Y{INF1Tq)GJC1o}CGc%iUZSS1Vy7eW%iP4&VK zVUMs+xB~jICXCJ3fa`>V%6Uk*UARkljdHt5c(d>p;XdJh;cdc)mGdLQM}?0G9~V9$ zJRm$Md{THwcvyHu_`Gs^LGc%bFDvC0#otn?-WGl={6u&R*o-#eO?KSlZpLULa*w+i zKNF8+x_%q)^9d!%VaZI6(xK3d4SHNq76Ej*H+K}iKu14Fof%_c;u2XzK>BGW{g_j6-2zLtK z5xy&YU-*IWQ{V!;_&`;9X1!f=etwn|}ywQGBkxT|N2{Qr4m`7N87_Z&3Px zel;xIDSSuxuJC=~2f|N*9eQtv-rIq-{5weDdpq>r4!yTS@9n?}o!|1k9eQtv-rJ$~ zcA($+E55e_eM;neJJ8NVzPAJIOyqkPVeVT3bPK&g&U%Y9-z|a+#&3s(7aM0Ieu;30 zaHrDW5xy%VCtL(h$X|URBqv-1NpcDPu?Lr^2bZV^m!KB>HG6Q0dTn+`S zOSj(At+#aREj^;f9#LbDsIf=X*duD}5jFOR8hb>IJ)*`QQDcv&u}9R{BWmmsHTH-a zdqj;rqQ)LkV~?n@N7UG>_x9?&y?Sr2-rKA9_UgU8dT+1Z+pG8X>b<>sZ?E3ltM~Tm zy}f#GuilG`2|@F{dT+1Z+pG63$13JZV>xJ^NL}J`$SOqY0GC5nAyNmp9I^_LI>6aM>u zt;GyW&z4jKa@+j$+zPh>lKf^&(R8>6hfwFUhB0l25-RpMFU`{gQn8CHeGA^68i4(=W-VUy@J1B%gjsKK+t> z`X%}FOY-TLO$X5XMB17TpgoDSH61{E5@~BX zfc7NP)^tGDeFL)Y8<2J1fUNrlWZgFazVR%cp{?nFtosJg{wyJFO$X5aMB17Tp#6!o zH61|v6KQKYfc7WS)^q^vPo%Bs0O*S4q^;=y`hq2)t?2;zf=FA_0rUmqv^5=o48|6q zt?2-0&jX~b=>X&|rqI@O0CE?Rwx)yN$@77v6kZL-lnhvR^L#pYJYC5Ev4ymR? zs_BqwI;5Hosis4!>5ytVq?!(?rbDXfkZL-lnhvR^L#pYJYC5Ev4ymR?s_BqwI;5Ho zsis4!=~mSARbwk^`UcRgI4y;?qP|S0&Bj*Lmzb<)@`be7*oykT2Bgi#R_z~c)&9{| z)RgJ8+1QF%m`IzAt*AATHXB<}YyOHh8(UFpB5gLdqSi#(Y-~lXiL}|+idr*Hn~km7 zKiaDOqpjLM+KO5;PwpgcMXgy{?j&wSt%@Je!u{}hV%*-f8 z@o0CeIT1<qd@5z}c)wk%ysqZt)#rFOdNb#>|U z+#|&{fh=jgS8eL#noqyy@V)>0yodR}Z{GiXV&tM2xhO_1ijj+AnZ!^-G1G(Y~_AkLW&kuQGky z$*U>GG-HM_%a~*QI%A$s4Rc)JcuvP{$ZA7Yo4mr$SXLXd+K|95t+Q~falK7I2onza{JgSCPj#6DJqccxCIkuh5(@y4T zC-bzEd9(|~Y|gRmWS(|1Pdk~Xoy^m&v-LdAvF&7@b}~;pnWvr1(@y4TC-bzEdD_W5 z?PQ*IGEY01r=85xPUdMR^R$zB+Q~faWS(|1Pdk}sBdDr6Rp+@8R5ya^Mo`@dsvALd zBdBf!)s3LK5mYyV>PArA2&x-Fbt9;51l5h8nv|?Zf+X>tB;J$6dy;rh67NakJxRPL ziT5P&o+RFr#Cwu>PwL#R(rmu=ND}W!;yp>cCyDnY@t!2!lf-+Hcux}VN#Z>zy?j=_ z_DB-%N#Z?8yeEnGB=Mdk-jl?8l6X%N?@8i4NxUbC_ayP2B;J$6dy;rh67NakJxRPL ziT5P&o+RFr#Cwu>PZIA*;yp>cCyDnY@t!2!lf-+Hcux}VN#Z?8yeEnGB=Mdk-jl?8 zl6X%N?@8i4NxUbC_ayP2B;J$6dy;tXATBzHiw@$VgShA*E;@*d4q5Z1po6&RATBzH ziw@$VgShA*E;{%|?jSBYh>H&5qJy~TATBzHiw@$VgShA*E;@*d4&tJNxac4*I*5x7 z;-Z7N=pZgSh>H&5qJy~TATBzHiw@$VgShA*E;^;@BSEKh^ynSJPId@8*&*zdul`ui z_!pc`d8tS55O&H}eSABkcL+P#A?y?aPwUt_gq_k|*-%>h8SfBwYNhPaJA|F=5O%Ud z*eNvpjCTk-*&*y?hp>|!!cL*&SG_~nDbKWASG#q}Gd;T6ty7-q(baC9@=TB3A?##_ zu#+9aPId@8g`v;NJA|F`6OY~@>|}?qlO4iNVQ7ioA?y@-9=$`@$qr#BJA|F=5Oxa5 zM}ia>rob=-hAA*ifnf>^Q(%|^!xR{%z%T`dDf!Qnn#YyEDKJcdp?+7cy-rob=-hAA*ifnf>^Q(%|^!xR{%z%T`dDKJcdVG0aWV3-2K z6d0z!Fa?GwFie4A3Jg4AWqk2E#NMrok``hG{TNgJBvB(_oke z!!#JC!7u}c88FO%VFnB{V3+~J3>ap>Faw4eFwB5q1`IP`m;u8K7-qmQ1BMwe%z$AA z3^QPu0mBR!X2385h8Zx-fMEsap>Faw4e zFwB5q1`IP`m;u8K7-qmQ1BMwe%z$AA3^QPu0mCd9X2CEEhFLJof?*a6vtXD7!z>tP z!7vMkSuo6kVHOOtV3-BNEEs0NFbjrRFwBBs77Vjsm<7Wu7-qpR3x-)R%z|MS46|UE z1;Z>DX2CEEhFLJof?*a6vtXD7!z>tP!7vMkSuo6kVHOOtV3-BNEEs0NFbjrRFwBBs z77W#`TiGcGhB+`)w=-q$92n-nP&~-Wy&~Xb^mj@Q40B+Z1H&8`=D;uqhB+|Ifng2| zb6}VQ!yFjqz%U1fIWWwDVGay)V3-5L92n-nFb9S?FwB8r4h(Z(m;=Kc80Nq*2ZlK? z%zBc9MX zd-Rtg^d=xo7h#yGwX_^eVecS27;G%I?yYj7P7syL2Vv z(W~q(A?BIA%I*?YKK7jvU97UZSY>w!G0*8$c9*VXe9m5FcL_I-US)R)D<6B6-Hq1W zXx)w0-Dus7*4=2`jn=w@jrUvYZnRd_lCu$8}M(b|0?ndiw zwC+ahZnW-3>u$8}M(b|0?ndiwwC+ahZnW-3>u$8}M(b|0?ndiwwC+ahZnW-3>u$8} zLF*p0?m_DwwC+Lc9<=U3>mIc3!PY%!-GkOWXx)R>J!sv7);(z5gVsH0-GkOWXx)R> zJ!sv7);(z5gVsH0-GkOWXx)R>J!sv7);(z5gVsH0-GkOWXx)R>J!sv7);(z5gVw!h z-HX<}Xx)p}y=dKw*1c%mi`Knp-HX<}Xx)p}y=dKw*1c%mi`Knp-HX<}Xx)p}y=dKw z*1c%mi`Knp-HX<}Xx)p}y=dKw*1c%mi`Knp-HX<}Xx)p}y=dKw*1c%mi`Knp-G|m< zWRl-cx_n~zkTKA!KA6oaJwL0`Fu2oeh5AQ?kKD6#b>pryZL+d`Y?nCQ7wC+Re zKD6#b>pryZL+d`Y?nCQ7wC+ReKD6#b>pryZL+d`Y?nCQ7wC+ReKD6#b>pryZL+d`Y z?nmo>wC+diezfjK>wdKEN9%sH?nmo>wC+diezfjKYjH;^&-9~pKU(*rbw677qjf)8 z_oH<`TKA)MKU(*rbw677qjf)8_oH<`TKA)MKU(*rbw677qjf)8_oH<`TKA)MKU(*r z^;6RKdG()nW$#nc&ZF;FdP>@PbY<^TIyaB5?0rh-=FyeCPwCt|y0Z5vos~!bYW9?* zcywj&Cg$J7{F|766Z3Ck{!PrkiTO7%|0d?&#Qd9>e-ra>V*X9czlr%bG5==f-^~1* znSV3$Z)X0@%)goWH#7fc=HJZxo0)$z^KWMU&CI`<`8PBF7Uti={9BlR3-fPb{w>VE zh55HI{}$%o!u(s9e+%<(Vg4=5zlHg?Fn^xfyu73&w8!Dvygapec}dj%l)jxCG`cn~ zFS&k?YxDBd=H;oa%IiAk5A=*{^YXgd@v&?3^3>+#b+zMT*XHH5tE2A*?do_=*XHH5 ztK-qNd3kE{^3>+#wa??{U7MHJZjX;$o0nJ3^S3m*HZQO1qD>lIo0r!w)LO0S8p+SN zHZQL$3V+JAd3o&+`x)2f<+UT|(Y1MbU1|7L*XHH5SLFA&HZLz!t&3~(@s&@7} zU7MFzwX;Xp=H=xN35~AJ%j=5HXZT&-@7lb)s-68F*XHH5zvO3*GmbO5HZQNbS&yzr z$y1w`S4E1SaYagAS8M*%45MrF@~TnstFFx(AlD7Z>wc_bU%3sC>jubm1MbpzzO0dn1dEbDoEbpyh|XX`7s0dn1daPTv}avPA= zKMtOe)`vB^!s;1m>e2N%&rnX?5x$V+9{6wSc z>vriJeC+zVT{;tg%5`qLB-f+s+;&N>N7uRSl3b6jbK8yF-N@aI+}+6CjojVH-HqJc z$lZ@kh=%Ddyu;a zxqFbi2f2HYy9c@Y^`055?;hmtLGB*p?m_Mz1)-HY74$lZ(F zy~y2*+`Y)%i`>1)-HX0^k-HbUdy%^rxqFej7rFb8yAQehkh>4L`;fa2x%-g254ro0 zyAQehkh>4L`;fa2x%-g254ro0yAQehkh>4L&r0s$;91G_=tz84Gf!xAZQ-+;*~iXZ z&uUJO&Rx&qz0cyk&q|7)aqfCnQan0$Ju4|5ox29nZV>GT(QXj!2GMR1?FP|q5bXxh zZV>GT(QXj!2GMR1?FP|q5bXxhZV>GT(QXj!hLAgi+#%!+A$JJ5L&zOM?htZ^kUNCj zA>V?_ak>da`z*5KXUgYcRzCX zBX>V?_ak>da`z*5KXUgYcRzCXBliGu4#XSN&%>w%kL=RZTa?&Wfrfl-xte zRZSVk&WeYSdkDFQ(Dx8>4pGdV1|9{p?AFgugO>`V@`Gdax8;z@zKohm{R{>|eWv*_j+>XL6XG$zgUThuN7NW@mDkoylQ#CWqOX z9A;;7n4QUCb|!~)wdS)r%K7`(u3=rX`5D*453@5lEW|9)zjh4^F^~SWYnYwMVRj~m z*_j*`hK~f#3B$u0o$;O%h8~^qo+INuC#`+#jQ5;0_2`WE92xI9GTw92(a$*JJtw&y zo$;QNT#wFpN7?^8%Kqn3_CJrZ|9O=C&!g;r9%cXYDEpsB+5bGs{-@X><-;R**9hJ< zf_IJJT_bqc2;Mb_p4MN;1zv= z6@7sfy?UVujRGtB0xS9gD|+>*(t4-BioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU># zzQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBsUAOto^u2=L0;h#zQBsU zz>2=WioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBrJd*mSC z6@7sfz4jD2_KLp1ioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU># zzQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBsUz>2=WioU>#zQBsUz>2=WioT#)kp`W! zSM&u|^aWP*1y=M0#eoTHf z6pZ0NWAdLvI`-XmWAYr2zT0k0KI74M+l|RvJo;|CG5Ll^-)%Q0e<*4Eb?xGg$@(6B zx80cR?$LMKjmf4SeYf41EalO6+l|Rm9(}jnn7%bU`fj^1;qRG!x80cV_vpLr#)Q8| z-)%Q0~A zir`ZOpCb4a!KVm5Mer$tPZ4~I;8O&jBKQ=+rwBep@F{{%5qyf^Qv{zP_!PmX2tGyd zDS}TCe2U;x1fL@Kl)$G1KI*6^R7>Df0-qB2l)$G1J|*xeflmp1O5jrhpAz_#z^4R0 zCGaVMPYHZV;8Oyh68MzBrvyGF@F{^$34BW6Qv#n7_>{n>1U@D3DS=N3d`jR`0-qB2 zl)$G1J|*xeflmp1O5jrhpAz_#z^4R0$MtP;PoU1{x}G_%?-U=qO8mI8`ePbh!FXKx z+^@QJ`nay&R%mqX^l^RHOlWkK_;GzNH)wPP<8gia_*GYlAJ_MbM^}j-SGM#Fu3$W_ zZ0XTe;>VROJ-SN#xU!{3SBW22=JBzs#E)y2%rm=6{J3_>Ji1E!xW27Cx=Q@GzO#Jn zD)HmWEq=yT;>VRqUNX(Kj>pk-98Jg3bR12`(R3V5$I)~gO~=u698Jg3bR12`(R3V5 z$I)~gO~=u698Jg3bR12`(R3V5$I)~gO~=u698Jg3bR12`(R3V5$I)~gO~=u698Jg3 zbR12`(R3V5C#2&e%DldJLtSa5^@OzZvG3iOP!znV(f4jlC>DJDK1ScWF`-!S=zBNZ zkHMqsCnu<%)LompTVXOURv0xbsma$+N3zn7H?$JE9U>OURv0xbsma$+N3zo5984H%NU>OURv0xbsma$+N z3zo5984H%NU>OURv0xbsma$+N3zo5984H$`Gqrby1PqH$a6at>dJ(eexkvy||EKe#Id32BENul9a-D7!DXn1swWijgr?F#-} z!JjMma|M5{;LjEOxq?4e@aGEtT*03!_;Uq+uHerV{JDZZSMcWw{#?PIEBJE-f3D!q z75uq^KUeVQ3jSQdpDXxt1%IyK&lUW+fdZ*|dZ*|dZ z*|dZ*|dZ*|TJvYki&k}}6HDRcaiGAC>LdH<3! zCqMVAzHeww_Oe9ZH#8@EdGvilbF!C5-#0WTdwKMILv#F+GRH3|bNrGrrzr4Q`InSA zq36-Rq|6C7&+pDcbBY2>^e-uM@_C1p++`qddmcNUscEIcBPv+F`z;MUV&@DKGc z&z{E%^soBydD^x9*8K7L>Q&r5e|&*{PE&oS?Ij^mC*`*`%&tDR( zy7Yg{A72{EF8R{@@si;7H~jhh@nxdC7Wppoi&^HfYd_w)zC9LQvo;aFq3Oo(ZOd+5 zcC&_C!zJ;LwZLy|^KXEgk;Iq+qxG|iFHLi-RYm7Y_Ze9HgwO{%( zX#DIyeJ0EnZxjZxsApOqS>4za39oKk7j142uZqN@Ygz6 zjT>%W*=Pjk-y3^{4Q{A|9bOlanDBKEF~@bDvaaflO9hZLibmpLol#R`EV8<-S<+WF z%BDJ*c&jY7zBLhPNkkj{LQ`wYY5|&vwyX)Sk40N!(S$y{JRD7g<7->nnpcJ6k;uC6 zSKFcqnOa!2#Mf)qmc(`84QplDHlMHLuWVf<--&!J5nkDr2yft%tD^Ds&5iAKp_+M3 zw574xct;cQQ$O9@7+WJS;?c(=@ulI1mJ*5>Bc4LTcHqb+7^g;AtsRUL?U zWL@;;SgV7|j*)1LHplT)ooijYcwJpQx-q;u5>cS6@mn@X&&1lB1a(v>pa#-5by6%== z^!$SN#&4-d$(I*m`Ic9tom>Crv~$BR5_99fN zKPa92-jnA(b%vYt+9P^TO!GyNAC|65d01Lqc3o~A7oYbUNwv-~Njw#SllA{u?Uzf| zi5Wks&qp;wv&I(A`T@<>$iJI(8NGn}tuKG(W*se9=jWgEG7$oNSfBj7=8J1K>(vsx zf8It>J!j-?={ka~(jx|*3+HvRjD_dIk{Z|N8udu%{f)vsBKuhXN11Omubhg6b$vBo zSo$}-{_3CpdFK|_8P)y5Uc7Kl)^)XBvDbt-TBldl1WNz19=7`$EMRZ4El&2MHtA_k zw0AAU!GiaH9t13PgJNT){x10Bsq^}?uda<_?PO06BeSlJW8fhnxo{rWy?mDS$g5lR zMxw(WRJW0%&Ng%8gr&P}WgP6cb=`fw&3d%VBNNv<>oK=pNA?}ZVw88)KhdP;TQr9~ zwu#qTgj`tOWW3eXNTWYt$@X9WE3D(Sdd+f;uMx8EgoCf@IlrSG<#oTZ_14dytEF4l z4aBsq(#EGxSZSr^T{WMFBEi>?wo>o1)D0)eTqQZ4*V@|ZCp4{}^BTS0f}RWh?ej8v zzgV{Cib?yrXV`}x*Kr&xJUpL;nvfXRv&PG4*RgW^S+cP*qVd34sIIr4YXU9LU&sA1 zJ?A-A>fc7|R3B~AC+*{o>RSG;U_vq5d7=x$UXW^9$a)O3&2Kq(w)T zV(c74t@4gKHpa*{i|PM*)YSdR$E!~92z$S?&&_(LCHeLGx0wGr`#UrF%v&Yr1gf2(*2dRgXU{d0zsF9sS6p_qAFP*! zZGY#nX8m>kTO-RnsH;9x=DpH0ez{LB`2UG3Bkk9m$F5EA(=W=@Kj**Do3$fyp5Ar7 z_H`Bo7Y2*9gYkOp(_9=}q6)+%;u#h@uedkg6kHL!Ie1I(*5FG0=6-eXw&0rJS~2;( zLq>V0zMS4Aj>mV4E%Cil`^MmXy3o2wZn9Kr`GWa2F;Lwu2BJGu^Kh4TN0;l;>?7*T z{!#6VeoTq;9=YAU!6yX3{p!K|K=3K`EnX4)Jze}hs0+5guM6adf``>f_7PpqeL?+K zzo>4fzY+YV`g?vkXb2iZ=j#rtbdU-DRnV(nnX|z^(jL|3;P-=Vp$mdLze`95d4eKrJ*IkU#QCF4?}MVT^4#{=yFxrsP;mYR(~FPQ}7>y9|kW4KMMYR z@Sk+=?00lW#{S@d>XQe9q2Rmf2{f$E6??Q7_s7BE;EzIA1mDz-Z@+B*d%-`|FBsd^ zonVvhZu*vX?s|fM8G1`_B>2~%w}!3^T@|`I^tRA7p=(2L54|H44!tvUUFcmGeEM@M zRxEC7i7s1q_p4C0e^jTUTidN$d5OG=u4!$FJi54X{_iK||3>P6 zFZ^_4Q(Gc(VN3nbL-jxL`kyb>|2)p0i@vz3HPP7Qi7$Hm!N!j z&51@ob=w_xeCRUvue88j*Es*NHL=FWB1^rqaOtY3&MqE}^RJ8Rr_S+32;=Y#P0?6W z+q%`wk+0QX(l$(MOZ{+VOuGOaE_wM}_~+|mTC~^SlZZC2s=w!rYuj4ZG{)N2H8-{; z>Mz#kiZ?bV6pSIo-F3m@pZ-))7Sg{jQmlL`IPc#3Ry-UmX>LrkD9$c$(CQt2{lu|8 z`KWftf+dVs=rzAyAH75Cs1GTUL!WBlQ;!9;^R7Stv*-VC(M5}nT=-jyuXx??>(^d% z&qd7_Uw-jlT=Jevrj}g3cOl3=i64it?O;2Yuob z_xjtf|Lu40eb1-fd;NR=`i9bt-+A9R-@p3(-@fUNn|^q6=h7RNj^2{EW&bUIwQTva z;_`MJO==S&A-hBHXfAF#ouKeKO9T(oQ;*KqM{NAAkJbU7sl4_s#p? zcmMZ3x%z=_#baE+A3F8xvt7p zRj#RWMV0HRw(H?qDpyjuj>}XdS5CQZ%2iXYnR3OH>!n<4<4POX z*|^HaRZ^~za)p%Zqg);3+9+2>xh~38QLc${MU?BI&Y|^M(9$=ZYMsr$VfGDkZOd>Urc zFqejzG|Z!677cS~m_ft*8RzWwTI_bSeiOV{zX)Ee-vgZ&9+MrPmmQy%9mTe(hbuB% zf9v`%*JAiy7*~e5F3eS7t_gERnCrn@4dz-fSAw|?%vE5n0du{Dt1Vpp<=QV-e!1?; zRbQ_8a>bYLgmJZ(YrS0Q`T_xcf30FwCKEl-zu8nYIgzF+)4eVNAR|2~Z z*j2!;0d@tj>mXbO;o4tUK)C+F)emPUrjP16*X)%~>-+XjUE`X=@_u=QyVKk+T%Xpx zH3wh`G)JHr0?iL-c0h9jni zp1JqTyk`bCv+kL5&)jY1+cVpqx%SMoXP!Otwasb18x;XB%342G1iYv_vPz1A7iF>M zWv%CBE%DXs;Vwe%A>__r?vUj^I_?SPj$rP(?QUT11?Em*?k3@067D47J`(OC;T{t1 zAmRQI?jGUZ5$^eAE_5@YyW5w0eYszRyG6LmmpetcPlUTf+(E^G>kV9O;93J$8o18D zRR*pxaD{>E3tU~`+5%S=xURre1+FP@MS<%HTutCw0#_2aj=)s}z8ll`V!D37)dQ{_ zaOHsO23$4ZngLe~xL&~30i{m2HrlAs!+qY|<;^|b+~Ljr-Q3;Hz1`f|?d-6W`GKF5|E!SztdRda zsc1i{Xg{he@wdyDo>YXJ3w=mYJ*21}QZygc-Ec=0%|nXjql)GsMe|Wb@li#mddccD z=7}{+tT|%M5Nm!|v%{Kg-dyu$nm5n9S?0|#Z-#mE%bQ)^-126YH?O=|<;^K?MtSqe zn@!#(Y>}F**C%YNh&Btywc5|_tiQPQxW??r6yBXNczi#$*bFaI{knczI-H7fk1RijE|pJzLq2_teEJ&s^f%1iS^cd8`?BwPqH#7M`J$f?-&G>D;Z?k=y>)TA<=J__u_e1(?hVRem zui3r7pucAJHm|o?z0K)uMsM?Zo6Xx?-e&SPkN2zPX7hHNwcDKCX6)|M!))E=>NZoi zdAiNgZH{g;beo^s?A+$&HZ!+*xy{OLPHr=DKP$Or<2Dz!nYhivZ5D2GaQ~rR`y)Nf zzHRPp=XCRKn|0fq+h*K0-?rJd&9!Z&ZS!m|qfi?@YIiSq|ZT@GoKM!j@Ge4X6*{sjzd^Y2= z`JPX#71Uu@=T%=Tbm@D|clPzJr)eU)sTkgczx3xs<>xTm8#I=cIV zyE&R?**5oejk`E5T-($$YyJABzCLY`A2i4h8tCs}E@d+*yH}$-HM&ouyEM8-qdPRZ zn}d5fxRZnXIJk?0yE3{bqdPLXAEUc5x)-B6F}e?`%4f3T1`BH;?sX@NfK<5Q_Qgk0hcTsc?#e;gdf1GC%SK< zyC&AxrM`x0kdHOcS)qO%rTd@t?{PicPr>~W-5t@q#qNygzKHIM=$?qPdboRnyCE)< zMTX`ra7gGM()ZdSeWxALciJIE->6U@73!lxdQ>Qn3gP-4?(UD^?g;LU;LZr{i{P#Z z?up=z2=0gAZV2v$;7$ncgWxU*?t$PA2=0I2?g#FD;LZo`d*H4I?s?#j2kv*^ZU^pl z;7$kbbKouq?s4D_2kvj+?gnShPUf%f>RFZN%5CmOJm(~O(u+cevzxi-zTX`W59Y?@=!44a4a zFuSI?HO;Jfdd}nZbnnkV*pee)f9`IBadyH@vnxoVVrRFC!JE^%z%}i=uQnQkplhll)<|8#5skuna zL~0&VvyhsD)C{ENA6+<`IX!=Y&ZfS%van}zh0f>n`qr7J^_lbSaPD`m*YZ2pnf;5= znSFL=$KK7kcz7-GaJjxu8nkL^(Dz7#YCY~#t;c=(UGE0fdfcb)kOqB+H0V2|LEj+_ z`VMK(cSwW2L)`oP27NEMW7-Y6;@2FfZKg9j3QnJ%=REbbcBI8>z8>dSV}|It-?6kif1^86Zb%UMfC;WS8c)fRacNu?TVUH=wSvR^Z%Ir$J{?={xR>5S$}-LQ~f@t zR@I%fssszYg2JwoC%{kDGkkvVq_d+I$xXXZ8R*AnQ?=NTe*`52P@3s8WcMh%Bg4Wr2m+?6pzZM&xL+iDmb#_L?nf(oR?(F{0 z`#_wF-q#Ynzq&giA@w?2q7F350I6@9JIU3=lTh#3b(hZJbzHf???5HdxDGIRnGn7+)Hkui=2ALh17Y^J;KgY*S|~D6YsoWMQE|c2lco~Gj9av lkgWM}^|$+~Z0l}wf2K}zKXQjUeKsU(nZw}<^##;_{~Jhi=h6TG literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-LightItalic.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-LightItalic.ttf new file mode 100644 index 0000000000000000000000000000000000000000..5e45ad9a6c943fc034f8f177d07c552e5fceda77 GIT binary patch literal 91600 zcmeFacYGYh`3F3+dwWIKbUNuyT{@klQ*S5f)O)pLS+a^HS(2?{%SG-TcN^U3-~u+q z^ll6RVk|=ZBb0;?AcQ~y#5h0#A%vKc1Z>^i`<>mD?rcGRzdzphzt{fkvwL%^-I-^e zHcy!&ln@dGpdhjJt+U!4h8MmjG;$>&4XyRSSaM!{7a?XH?hjwMa&(!p z=QbB1rg%JK&FJ8ol_Zvg;(a6dUN<_nX<^p8>;FVZNCzSNw=7yPICAm!uZD1M8otk8 zga+fdAse6B{qc*It=-6#FFj8Pr^fp_mM&PmeAd~vTL`)1O+rS$9$PUySaEJaINqOx zd(xH-Zd}QybG`Wcefay><%7!>G`9&`301xbBq&y{ShKe1cYS9G4gDn{{Lz)G7p$z> zJF^qt;hAJLVYs5<$DNv&&(AZK{EKK*cn=}3-aG(&;rwC7X0OhpQxm0|a72Sc`iH+$ zJ>%&jL>-Io-%%6%-M{7U#1jo+&j#E{RAdBm!QMnj0D28PF+h0!d0;^Ro;M1?xHnWf z^QTEA{Z`F$MxNt11<&!v33E^742lN;#!i1anx`(lT|niihWeYz2m)` zizM6mw@C?qku2oI-$z_7D#Ism&?@8p z5nLa`5rgAp90%Dw{87@4zO7fzBulxa<|tEr)(}T z5B>+{VNjflS4b7kjr>{CI5iJ!F8mI>e+NFtigUr{WAb2gaRKkfnT?x&gOmt5vYWk+ zjg!5Py@P*;WN|r|L(my}2ZYXU;R4BLG{)w6@;pgfY448uzIIb1vE0TcT zXb!Gl#^J)T1;;NGCEoLxx9f#*ay?y6Uc+&eUPbiWD0vOXL)@tMw~92}m&SOB7J@H| z)UjkMS4(cfv7Nr*)nUBJf{i>XjFBYp)*Qvt-rorw1xfOcXBj3@Dc2_yk9ktBNmLmb2bm_(8QlSwjQ3P}M>C8^$jlQfbB zm`>6GGe`ztCdu^vi)4{3z-*EYm_u>^ox};4OLD#6l01?Jm{0NnUBm@gKneg0Nul=} zQbdXXi%BtH2`K?AC8dC6q|Ey@DJSKC6{G^Nl2ig#kt*+3q?%L%){q*&T2c#GN9q9U zNxk?eJI1Ek;kcQTI*0L~}# z00+r@z#%dSI827TpF;x<11=yVfD6e2z)`Xga1j~x{*5dqivX99#ehr662LLC)cYA( zM#cb_lVyM_$a27yWCh?VveNr0wD&5&HDop5TCxUk9a#&wo~-l!m24pE0XLEjfSbrh zz$?fmz|G_e?_bCkvKeqI*#fwYYz5p-ws}7xJIHpxon!~#F0vDFH`xVvCE4x$m|R7! z1l&We0^CdX0PZ7u0r!)A-jB!uvLEnjascoeay8(!fIS6=|90EK-4tqZ&w~!-%w~|``kBaaZxz&4?+(wQ9-cF7I z-a&2yyp!Axc%0nf{S+zEI$ISzOaxeM@KayQ_8fo*~Zz z{tx-N_Z{*AIRp3$@;`ttk{1A9BEJB9nY`%zJ$Z$^1o%txGT^VsD}b+(UwYprzb3x| ze2u&c_#5(Tz}LxZfNzlBcz;LUB(DShmb?M@7I_m8p8($`Z+YJ$zbC%~e22UZ_%8W9 z;2+34-rtfxl6L{$BYyyVpZpQ<1M(i=pUC^(H_2J@0pN$^Pk`shS-?M&4*@?S=e%!_ zkIA0_KOr9h{)K!D_*e1?;HQAElh4Rs0RKk*3ivts6!7olGw*N67vyh%{~(_Oeo6ig z_)qc$;Cb>7?`z~M@+IKc&MZWg_8g}S6fd3)i0)9vS1^7MrxA#?Y zf&2&XBKZz*f_x9?CKmubR0+7F9A1?pL zUEc76pLy8B0#U*;hW>!w&_ZA6p(l*c4<_gZGxR|S^nexeKMZm|0=?i`CFE)~-QO3o@`9vac61uMe_r05WbqWE+75*bAP&8oYZ8 zxbGft+P&ba`@mBVfqxzb_dEuEIRS2Y0{rnbxZ@dc!cRf<p}3H0hd@VSSqp&aEQBR60MFJk6C!TgLtYW)Wsdm8d-7*f$q-ospc4=K47 zbTI^Zbrqz>Z$R&V0gZhQO8OM^^(<9@pMD1l0dUx1FTgrwRHIduT? z=?2K9>mY*;V}u7GVIW<=U+;sCSAoVq1Z`izs2Q}cp!0E02e2t%rU>S48}U*V4Wrq# zhPKnWbdYYNH*v3UzvBMHpNS2Q4UdhEjf+i;&5A9Gt%-fq7H3P0 z)VPMY`Ed&pUQJwlk@I@-O!m}Ra-1q?D4tqLXVYFfpKiocU&d4afTx;cLt`UjW5uTy zUiMUz-&04#r&2tXdjIA9*!zO_dG87D5$`_lX74)hD(_rxgD1oj>`}Vo&%Jf-jdQP` z`^~vm&;8H2XV0BH*ZASvAO802zt4Vi_U~suKl}07b7$W^d+O|6XYY8w=)K#NSVxOJ z{eK($|M>m?7QbLdlGb#JXj;3Up!B+)Q`CFaDN+;lETj=XZy@~?+!L{}wTo*`()swn zrJ*6khATcTw(caKP&d2V-V=Ku_CVvvf!Mm(MS~+J6$#=QUo1G#lNo!Gw0AEC?C7?g ztmuiDx?IrHQ-tRz*mLkFxcxv6p0GrI0?uMnrW-d2X-%;w`NY=lw(gTVY9dZn)bvEy zY_YW`&$M=*JW~^4>*>K=%Bh~B$6FVN%6(R$&&m{hua=(D-hHwn;w0%gaDY9tz1wa( zx#Pfrhyxgh{P`3)b6Eo=mp4?%4ZsAR0Zi1MqB~mgFr4hR2-aY?*=^`&PYvF!No#8F zu0>C6J?RYRsgPY1z7H;yo`zZxFMf`TTOq-QAdgePNb1y|LpyAMoNa~#w}~w<4k!fG zY6#;Bh<)iM4ubSH2(md4_N)cZ7Vwvfg*1L!GkHm~IO@DKAJDIyg+6b~!TDZUjVg?!-#;WcHB@|22GEmFOp`c}PM{Yy=N zW=L~`=1I-DfRcdEwE5bj+6%fm-Ico2`V9R_{SErp4OxaR!!yPJ<3i)3fx&^R13xka znTAYv2L%T$4|+1_ygA&QYwk5)XTIBfCOAI$hTyM5dPCl^q*&gv##_g%FNa2l=7*jM ziws*Hb}qajd|&v#BU&RKjrcsWFY>9#@1k;}jz^t}j*sre|2txWV~)mLh#iYPV2iaa zj0=q068B=<2XW`^d+bN;pT)<BaZ*(n1lOH$US>`J*V51t%>1F9N(z`O^Gfro`obgu1*^JLK{+-EX8ZyH(Z^^tj^JM08 znZL|@JM&ytQr6L|`?H?RdOqvbtaq|&vRkuX%jwNon6oo8-R*j-Ah2L{!JdMn z1uqtyFAOi7U-)q0*F`NwZxwx4JXA7JvajUHl0THLFa4-&pzMS4!1CGUhsz%>|D#%PD5zMGIu6>TuvrwK&f>sl zVU2L#;!kl^j;pL}TE;tbqPdV@gThGdjtp8t^K#1+dAS*!Jp-(TynWfwc+xqwOqrMB#%Y+GbzxjmyQBSK|RZBDbrrlrN&(maRw zdnWqr{M?EA6w8C-BTX^I?YXX5#py|ou+<$#lbWN^8ObTR)fw>xju2~b z4#gc8HpL6*D^?I+(bs?nJ*=_hNgNP1Wa5W|DAo|gaBzy4Kfw5S1Fy1|@h&r;TgJ&l z#jq0TYjsMU!4y!YP^#2I-Rp)hTd+AU%xDaYGduExz3vy&Tig2z3i{ex)47rhFHe3K zYzs5wF=y(h`~%!t^d|roW5SR2N6Y#H*F;$l>x;@j@oI<5Z1Y{x1@YkuqsgG-0upJz z?^@XF`QT_^P*C7e8t=Pe(u0GwNEEB_?jqQh$0pxxW3RIL;Ua-GB=|K@)<7lXh$N(E z4SI=UocIQh1;s?+4WS~%kU+@sH$h%F8*z5xY{5ASXS;k(!#Nb6vvFqM7t5bZ-((}k zaPxB6cnvg_n(c9Ux%uVPX|}uai>bMc7E|747RgJ+JAs{43UUmIq(+)xGuyb&4mxy! z{2tHSdsGpD$p?QLPO0ksUG4x?@;m#L5vHU=H1%+@&dBfoNGF5@kMH^@lGC_vrfIu9 zZ_{y4twFES&>K8sAwhIJRG|{0=-z}Fdf06C)X?YjI+ez=EIu&MvniZcDWYoWUW}h7 zt34h?m2xgPs|GT>W)i#63{}y7$dpM>q%;wkx$KTy8M|OGJ)vN=3ZOyApbi(fC|Y4P zXYk-JuAH*5tD>n@1-{DQ9DFnn9^{Oa;edks9DEs1gQGdC*}&63?|7mtMr+ns<1#Bd z3s#h@?#VA*eeY-#7o@kxja=sn(;0R4;_k}fiY>#XHQRo&GM;@yzfNx+%3s=Z?NF}! z4M$CP&isz;U1>(;P-~*WVoS1z@!Zbf%!WnHEjO&JbC`seX7fvIe7HLndp;^rOmr){rkzWd&$)hDeomTtUx5jv0a6Fj0=>LjjPZ8B6|e8d=1rFcZTy9{@)o4mV}-JKMk!S1d~Qmh)iZBcGw*)`0sW*nP#) zeHi~t?|H>z!V$>sS>RAv>}N1^WyttrB9F;)RUGKbkpccQK)7417{7~=oPnyqg^8Ke zfUhKUxiXl@=NPduOu6tC_j=i)8Ogbvf;01qu&k#1(glr4WyN$br_#Xb^d*Llnt#j; zi!dC`9J^vqef^fc{G#DKGqbbuhxU20GG@%nDO zYR#mtMRzT}0(3^1%%uxNnHxMgdY=ZkM8Nt>Rewp!=#`S&Jl}B*!oRT2)53bQ0`jR@ z*=ELWOw$>u$fXJw`=l~(+&=?tIW~nxm6}@O2nvYK?c6v!QLAa+){#nInDyWTcQt6# z8l57n`aJj%X^1WV$heQ){$g`e%br8zRhRtNwWOaYLY1 zp`hV8;hZKwZw-7l=viY#P>|JdJnFdK6u|Q|g5ULyDLl|%QZG+ku2J*6TC+TDxh6Qs zV9^O`;oWzFB7;mpVp{-*=d-&EfqJtR0{b1{ZU>?aPQ_IiMHIXkV*FB+0z7n$3c7~F zStIHio65%9%`i~R+-Vm*srJlrH5Yi=H1tG);wn#Ry{DMIR8N0_XO??;crG4>6q({8 zE8`-o#6>)~$R(RS29BYCF$mBG&MD7wq-KUB6~qM!T#O@LP#QG}nVt5W;;iJ(+0C&= zg+@>(6wXNF5Z)1KZJ0~p!nuvmEPC`GQ4EYh!Ke-0T}~g>cxH1OThLkr-}<-clhM~F zpL)ikOzhL73B!!BBGF{AhZ$WCN8Zdy`^1q4>jX6Jea8DJuMqBor;E+M3h!t0Zx!_m zl&?i&3rytxX>vF+%|XKNLC`S*fftlf=z-A_;P98G?_gCHZM$er(U69H`f6;g! z%~QLR8Wj6$J)dZF4!Zclc!P*vtQv_T54g(yFPI8q?+udPYnZ}RoFAq@UJ%VrTTY0| z#yAr8_@wPE8jG1|;C|h-d$_Q8!QLj1Cbr(rEs9o6tWr?DhO;$o?afJ_xv;Qi-MqSB zrNy99WLW#Q9TSeEv~Qg~_sHHIHJ$>s+LmY2TGaIO>djlOYN;NsjCC}QmIoQBs`t7f ztYInQ8Rr!x7)t{@l=39|czV%T!Zz=ReVnOmgb6i<wvHyEA0HRyd>6Ixy;Py12E*U7J96BkMl;9r#T`p|tvin! zqJPfO>OG6;5xq8@f9&~K$HW_W`Y7h70D3RoH$Q2t18II{l!-N%q#mj8H%a3Bq+x#G zM+e25d^`&7wDHUyW$QlCY?91VQU6Qir*fEWiX1*7%I&#v*V55rqt3avzOt-nQFmiR ztj?rQZy2qcd)KDAq>i24%Wo_g=Qa!Tg2O!VG5LdgTDQJ(U`DV#J@clOvb zyJxr--P~8SYQy#hro7yLNNKW{*L%`y)^=ugGIwCo>W&~tdKv~>PDS6Y8>TWNeo$EJJc?&(QQ zXjoF)eq~>dt!`;xcJKCY5Gn>&%9{mc>;I?_O0h!#VG& z_E}3SBaCqctxIdm7tToHeqGqVzKppGa=JIv<_t8XvN3ar5)ef%#vF~<$rLU4YvKTg zSwFL$(W^={<3%%uSx}ONE0F{@v-QdW=d1I$7foEKfxvi_+nziup?TrNsuj{H=y<$zR`>cg)Ol(fBYM{?ouWCy# z9KF7)daNm_a`7Ii&(PDfmwyHNCI*sEmJdEneHvmT3aS?B1wvrD);7xv6v?4-i4I@* zV+x(GxkS5jh~e{e0s0UIPso&>_Q#vJAoWS?)99;1?35Lq`fujVrQIv}A!BESe>Z>F z^5IMTJ50%ARKvf4+$pnYi%{^9Xm3-MlCg{m%M%MMOvXS@@=~|X_SS=Z zv1a1sOuk4x@e-F>Pq){zIfaWC{W~$$zaX@*{%NQS;u?gO=%9(PkC}SrADZ|W9pswD z4!XZ*9ps+p4tTbsgEUm^APti{=-Gz;ZTEh~y$>39z@sol<1QvWT$1!i2aTIAal^UF zgh}BhI^ZU)J|?RZw@1~s_2rh1Hl<`Y_q3I$V=GLG!j|6VoY=ydX=QyCNdY=l+-2UZ zfC#4}G_h{5xP5(hWl34my$`3=mX)_IYRGKLi?pZMbr(k`Cv3{UHRufzjte<(bB}?> z#?f025lrSEYQa^icxA&CSQu^HxYCGMA-EdE6>KXA!4kIGkXM=tW&*$wG`S|1$0!Oa zXHGsd5n`xP;k#SXPYG;MYR&C_avc-0Dz_m%^nJupzR3uHkkMY?me#x7DF@liy==LSNpi2;W@1?fHP|89iAbrQP?|i1^1>Y z#i|Sow;&6RM?{v{w0mLZ#ULg!WeduFL!UkE>)klk&=ew%*@A2pU=eK%imPPN7Id0z zvYCP9q-bqusVyg8ocaWtsGSn+w%sS_riBNGGNGXx58PC}{h2ji&!9D@UrwI2W`^fQ zY8||;FYVAV&*#G4lv%4AYPKwB46+{CG<4_667B)_gHPXI)L#|fP&Ds~$_?8@e%=jT z`VDw4(2|AFf5yN;wna36NI7HiDIuoav;{2DJMx#emqmOva=3^C@*9lXk6P{ znGvPdDC`-FH(uR(#Yz-53xwP(A8@Wfd6JMR+4MLv#Oso5`*?6D- zyEQ(H$glFzrIMjYDcQijce6LLcQbojd?Uu&ts~OA9%^^56JN!~={=7K z+!4HKiU(rYqhtKAAHo_!q<1lfWSZs_37Hya46YD`!CNH(2H$s9E;9`gk&qY1epKbi z5PW1cUcF+dH$Ce=7RqyUX?fm?t=G)n{+k_g z{!o9_6^~XLqf;X2PBX8yhIj%JiX0(5cYl0foI2mzU`?w?b{G|k&}dsk5D4ubk8FA6 znkH#J1)DgZZIe_cqtJ)bX%p;Ye%bg@Fiaq^hOG=Wc&g;zumQ_($6!@$b}H74v`_q@ zedNT*Y(8oB2$;495tgOgA>4f*rsf&+f%ipGIQBr!57)j|GLdI?Qq9O?BQjlByyv-p z;W`vLN$!wr3Hin#um=jPhir)?QUaRHCWaU~-k>)n{Hgl9IDBM83t>I>k zCq-inj9wC?;9!=0UMGDP{HEWxD>8BX%xrb(?xHW!h8lPibF@NoH0!r2|+ zY_`C$7`TiEjG9?s@ZrZfXt0VQ0rmvt(-kVr7Pk#f`Pvh64xw_veIPI_FkItV&L5m} zqQ+nn=s|je)~d6F@}KCH7d9!L)kYX5>|tU2x#-Y~b;4f3FcB&DU*rcf>>0T;GU@qn zF>O9&Cy(zApQ@Ih5y%DRon?mIrKLpOy_Q69nTi_s&p5# z3}ITu6BjmF6mOIu`oa5^unO{t`RS(g!!#d-kLo95Cd>~YKrY!O9th?ptu0x> z$x#zYyMZa7ELJUh!SmhGEx)|BdHMfP)va59#q`Dc2S#_Dy{E5Y{r#g*8FTrpanI}T zZS1-Gqy49;^L<==eD!9i!bLB5zIb%=O9z@pU!Z2zZ^kc7f9PPTPxYH;*x~&M!WX6- zhX$k=F_Wx3`prUWpb1R9jfJFP4{O0D%%hZOr}cHikI{}d-<+}U%=();&JP?}T6E7n zT(SElVej}uV?Wv1z`5P+B};DV+IK|6q34$(4kKVCO!Z}&w4dR(Q- zIAjY_(F%hXQFM7qQvHWenK!t{TJNIclgYpafncVWLqysHe07LnuRIuhxXQ4Kzr+NeqFNs*Z`J5t2(2N zo<|I}g!Y*q&O5TC;O^VFo$l?z-g}Pq-MXehXAE^84dW^-LEKN>H|NgZ*S=#LUg|)F z!b#9`sc$BV7*!PcQH4(`oFYZQKYU!6iEvywq>hUChZ1Fu4yEMSf`Avpt`d!8D5dBi z79j_LI5j!DZlrPkV>_FNyHX9I_GEi#;mF>Wvi72+q^$bUrnbXt zYMNwUF}PN-2Xmt$uF091CRgOClEffJ1+OCG);Ez(#XN~}Y(udpz*BI~@I9XV0AX*( zh2IFy4&3<@#9tM7el#*f?as496N538R zEc%OefBt0urj37^`10vVtdB)e4_&}CfanUeZ=Yo_@-$Hh;5B9~R}UX>i@OMBg;9HP zI3z1PJS#+TyViJN6O-#ZQ8l*>?@#(Ka$SxQ`0z7LQOPL)K1JnVH0qG#I(ld|`*rZr zPt-21%;4a#?`(c^))&1I8HP)4kKyZN6+2nM!=_)lnX$Ttj5PA(76rTHerQp$N%(@}& zTkhrnt@~-19JxX6)oxXwntMR06WlAcdI)vQ3*(Cu=yR}-E~eQYW`<-qj;725pL&o~ zfz(Ss)N`Ya!;PNZ-3FsTQ`Kr-9i*jis)7vdT)q2Qu7NK%Xx$?wTc9b{#NDQ48U{6? zqJP)uTQ5$dPv2^bnUah**?L#jNTTx>CXpDzvBC2za4OYA4qu?1KxULi;NP71qgL2! z(-_njwXrU1$9MfL=?r5h7k!c^^f5douRNoCTu44J0bg;wpzjLw6*Y zq6Fc-_zS5)(9O69{ZOGFOgBsYV0JvSNF~n>i&*k(fJofITINHV^uFhh=!RkZ*W=;B z7vJmcx!4EONR(DO@qqgJ^SY^|lrLH3@Tr^t7;b_dsrT z?~c|v4;o>n7Hs{|Da?3l657OLsfCH#hqh2 z8#=E^G4qBXjuft0+8=KZag|rw%a`@kW`->k9-sJR*3Ld>&fHzCGw(cf#J{A_!AfoUA!~qw=?eC*xp}C7gueV1@2K z7yf=8F=)aD!Ms6yRNlO~19@HBJ5p?A-OG12X3wh1w?=Ao0a4j4#T_>;Esd!hs?O`E z%ubBZY6C)^DQ->+EQY~3>)18xyRyypoEV!nHX*k6mRH7V*LP)Ee zr8V|F>1ixn&E_R_N3A?7ptRDqtLEkA^zCYEzVp!Tp~CuluIWNsMfuu$hG}d|g|mC@ zt^*Z&4r4rZ;+%X1xmxPWS50C(ljO%UvVukTPh<8XNs=k3@D$0x5L9AzS0t{aB)TMA zrHjL2J}nR!SY&cmE}gmrMtG9@oUgMK%s>3*H5|8hUtVXmGbu`^(^#_m=PfL1-`Ne1 z@0^wUW;HG-kMw-qx^uWXaQmqpv(k*_w0b@vc}7)nw!;{b9DL|OYkX2XW+}HR%j#Ni zV{g+f*Idz?n_OByTC?gOHntezh)a8L$?G5 z6wO&)9$8=spayMHczRoTx+ai@2k_e_j{MbPR%}pn!BiWyt#fBrsx}}?tB$T*)U+8{ z3xxN+d>`a?rX=0kCw?I`OI#SIJ`ko#=PJlz3-A z=4CWw77I>H=HFRZLJ@{B<@$$*#bRZ_a3dDC=zKwvh`5Lot#=D|fkq@{ zCWVJ0G!a^{_MVYhyXWOL?R;b?uEuV%hQ=k&%`Y6PPs;A!H^lH^%4D|KBC6FF8b#tYIP@Ov+QXyj7^|X1K~l0#NY_PY(1Y z4K7_-xN-#*0)irf2bz>K+w)g09*D0L9(Svo*0rVFuvZKB42YwvbQ_s@1TFEN_pvJdcvLZ0g^1zacax z&=hSo7_8Bzz?e`2|M5f=|1q5tgll{k6cihVvkm?6F7sSZ51~K7kO@<(qIgDu@qWgh zuRr7PpiFvMt`WkP_~VhL1tw<(6EcbcO5jqtlL&(XelmSwOHVgA!9Ms9p!PBQAk!9fg%KjPnG zInZ`9UA-(J$YP|o=`5z%oA&aqebH))Dytp1jyZ2W@BV`EjffNe zI^e|S^YKo@iEQls7ZmuLQ7je`G0E&~v`o}bV|R=!E-HC=`P$+YEB*MrVD-|0_)<2K zbF;S2Nxx~I#+ozt*xy8kU$CTb@u7bA*CM~yLkAy%U1Wkbn#vK7XTsM}AGJzOfK!BN zUA5RdW-LfJXC|q2O1ev7S^DIh>leDN+g7x&3r5?u8(MewI~#UCHO9`3yPhhWd*m0R z$4?~BSg>(V-JOp&6)ZV2f76E#FDP7m%fP0yk3eEVCgpgJ^FIM@!=c^h{wT%$7M{N96_3F9(S~@>S_%b=36aq?M#bN7-{4a*LL>XXoZ(Y-1SPexU*@%_;janNdnI z6P4pEbOk}q?8jgzKqc(QWZ+V=A6+a%nJvsg0&I;g209HWDq)5)GrthcW_0s7s*r@5 z-NC}`Rh%IpBa_CeJ?Cl#rGl1b*_?@p5-Ithq}7G9`yWsS#TTY=dFEst9nly(SJt~< zPtLUkDk_UY!a@WgCB@l`4y}fqxeL{eaXw4mr?h2xFB7wGf~NVMWQGvQU5*a(m>9A1 zQmjN?&VcaC6iA|EwvTHi7_(wvW186%ojkm3ZP5zZGU7jW@6AkFxU^vL&3&9{A_|NU zF>6a_`px?^AZew|^u@^hq+8-(;B1-ri_1a=%sx zoIZqJE10$Q9A<* zpUm*Z4P`XTD=Z*U^q4Y#WC(MZ!hLtSJ2K9}C*~ph3emK#>M&uCf~o^Gv`cM?x9~R$ zJf}1S&^p1St@3o$7!|h)Dy`?ZIArHyN$&$%rv6^LcOAbk1%pgNq&zg&^dY$lF z6nw>^@}k3YGqtwrjl$oR8qbp|qplT;p*K`&&uXKNu2O3}S?+&mwe*)pou^H$6ZL!- zdEJXGm>XQR`H2LF%ZY*6a{Xprbq^G$qCimx#qtV2{BQInG(oSrm;mApKoo zWAWMzC0Cbp?w#jM(rTSu%ZsY6EKBdGbLy25$$7D*>o;t!Os>ib4+!8iCSyWXPj1cT zb!*wUUiBQOA;LfWZQx60&1tf~+SDZcET{OhGBC@I+u7SEFN0!6ylHrgej{xVVVSDPq z{bB(=t5=@pm6Ii$X!Dq$(892yi$J}D%ZU^=UaUK2<{ET$;v+T60G(c)tkh^ULUnAO z!z|amc#d<4zCvC1dy0QKT*fdvN_g|ok7Hh5p-`Mdgty4&<&b5#kBQ}eKx|H1o=j?2 zL7GXwvQ5dg!KyT+L@}vylLyJOicQYcbzmsB`MO{4u(L|cqaJXr# zF-5CYhJ?@PA1jK7Bj5gYa`Up;5Vljr=K50oOGL4bwx0?1@`{Tfe z#LdzQO!Bj_nyPS^6(u;w;G77lk|#+OjF)9DA^+aV{5W<*0#HH0Rdz<>h6|(~o8!O-N3*-cjWe?)W3lu$ z+kgryOSqW|vOPfw_V5q13!ovZTPXrwEYo*Og! zGd(w|=yIdyCT0bb_;ca<0?&53vtT_s<&(=QpLarzT1)yAlG!9l zXC|K~{_S~r;y;pn>Gp2rhlIn}OR2}V3aDb#UgbyacGh5*Oy^X*F&6WFid2E7*?Iud z`?6Jlaxz7gC5Gis=7m9eBZQF;YM9I(Kmm#ZIAULbSokK5K^v9b=*pj4m5@}`+1*){ zG|-=vlhePqWAG{nVzVwLx3#Qns3yK~*^Xt6Bdbz!b9%Qnw{OmJAFvfPw$6@ksgBO6 zp3!WdKU2`@v1+gvwWK7MIn&aem9t#~2NL5ti)%LZq7 zACS11ek0B{7KppVgB#5uG%b5{MO4rT`1ArzQC7X)8f6NEkB@d4ENF?g=(FMiqb&v@ zJTS_l*IS~P2M~9`11Nuv%f=^|HP~D4Yo!tMmWiFO27T)VIUC+b%C&6fYA0uoqS%n} zF7jK!5o``?F^6qpjKGB}*%2*rvb4&X^h3)sX=Z_{i!$eII`~Nc)!#g`c=0peh`RO| zU&f6Hhp=KSg4HHV3!fi#97YQVf@cUc;VMr=U_8(kD*5l@5=+IEp@cJ3ALr)fGD84b z7sZDV3DCi)&EQpz926>xp%*ShtIHj(ip)v0B+tEZ6xjJb9zFwuR$;b|j$+o35xNKZ#461uKSi&u8!J3&KnOzyrYa()c_70}x zC0{KxRb?cjqc@Q~+)sIyGlDHFK)2jv)rgCVW!bR&u^52iWuz$Kyu9fqj_M=z+E-05 z7ba8r7&+}i2U0^a+N-Kcihl4;&?{dI54dXtQu9B$RM}_~5 zxH-na5wkj|Cy+t_iW^BTyBr_uLRj z=V|p7gLC^>p3`c@Cy-_FkR;L^up9|-Jpv`QiGHW{XoUC*wB5zma2JGIAoJKxeKJqT zizYD=hwURovwkuil5K_KD}9m#-{s2xuB^6YW#!A;GBewlzHiH_jW6rW%IYYMk1y@W z%IYkOS1d;lDh(6kY~8)vRCto0as z{@-fb+2W3SHitf;@yyC@&i1sc>4_ZoyZpoIi7v%<&ysr27(G}|4^M>FLq1S)J%1&4 zi?RzccM22fOuVKuP3gb9W1Wi^(JAgA0r78S{EyOPwj+WKwNMFVa&fYfS%AowKr!YA zNwv<%7-x0D-_1#8YO!#X^Ef#CX+T_QT6nNMGrX|ZsxWAke0q{k{nUdS;f(j>9(L8ZgxX-YLua>IG8H48gsCbJjO@^75ll4AJ0oceVn+abaEY^ z87;2I^r2Sah$rw%6RS4}hri-F_zB_>wUH@&n#)Me_wp@uLW{CzgbT%Dc(tU43|J*B_VU#NPru+K4mxm*xC@CY* zayJ}u!-B!QY|~IT_s@wat0tz{**$kgP0DP$=cncn0nu|d=bOA$LN4rHGrWnHjtR6n zJtfl43{xDFkqIGJ^U-+cxaZV(*RsBw7Zud*cxt(@clHIn@XZB1zbUd|gv7N)jBuqb5rL?DDo0~G4a5Jg@uG5XR{AIzVtz?k3xrVjNyw4z+CT zst{LF63^sr6|C;DS;Q}+wE>CN7>1`4Tfz_P)ysDF@KdZJ>Um(Fk>ocZNsY#zCU2aY zfr%qOq1CDLlAd6_Trt-c1aksY z%oC?4NgO#UfA$>Yis8phg4HoqyPd(TkPImfQvjEx;0wcwJ1DVyC~=|597~t&I>;4A z)wK5I7LPWkW;gY=7OP^*jEel3-A&oHf~Mrs{wfDjRQNY9E#E$e>TPR6%~09wwe6+( z1qt^)l3HF^*tDQNt2r+sJ|$iyC|WNo-}ZW?I%DPM*gu=??V~~hcLjchVS2lcqDWz? z{Wnwh>o2+gsj2p$OWI$bY7e-i-96QAV(q}?N&L3YUC`}p4~;2{MfM5%q=g(g_K8bh zL`ZS~NUi{1aVJaXgbIdmU~%Qi!cr5AWa*IPqzyY)!dOurahte&t^4=f9G$z{{h`OB zvKVIa8~7_OJVU|rsH>eZWn8cn|(E*vaRIny)UfE zb|2udo@4TBGH`#27|_K`$@k=M88GMakCYhuvK(3F9E&o*-hwU5sr~GS%+;rM*8OPR z@sO`bIelc!mCeyVVr#5c4jljBsvoIJmTQ;O8}nkg=1Xl7>~FmrLabb*wIoaiqcyBO zexO}3;ns?Tn_R_5itkCnn&1@%hNqCrYYO;)Lg;c9eU`uU#j%??d|yO7?u| ze!bj&9PRs+?D$&|TUnB)v&SthJu!V5@#=ic?t*Ycm1RIsAS zq!mxsPDJFp#JWk$t61M9&R>B%f7mPk2ikSizn#sWbie+Rb~aB^dw|@&7yNrdd_I0{ z4RoWUi8yokN2;lFJpPSr{A~vvC5Z{?Q&upwx=7H&q&Cf**h~g zqqeO!BY)oRnf=?c!gMBGjI+6@XrL-Svtf2aX5Os+S$US+j?&7_!?n7VQp)!3P{mzA zbG956Zb@(K%cvV^E-9)^O?EmGT^&`;+xwi=`8MX;Ppa+DE2zt|r&r|_%&so2?=6q2 zDNL+df7igo6)dTHy#^tud5`R1A$!cfSeqgo!F<-Rc_Y5l&CFpQDWLdHgQXd0`3vE%e?Ts?x z2su>aYmg(AKDF<^CV+omjsRrgszH>xY)t?!2xgbXb6nyTi&oB_n(=P`8Rt}TGLcxw zAten@nQh{3ymE4>b3?V9A+dadp*J=x&_B?ao4CE;+j{L)GnZ6GMHI{_ zY1%qBU(t!E+T!KNkq?S&Y2CPV$wm(+IBJK=GpbTUu#;*lmzqC(ZI|FEX-RKjslDKx z2G8wcolFaI{$*B?BZj_d@Yyf&9Tm*ht&jpS%%G7LWRpd=*xeW?&z?f`l&eFGmNUPz z-K2=>{;{lCQXm8AM3 zobddO5V{V(_VvG$+N;o>Ao8tr|NC-#Bid`k=S%HNSUa00@3;KD!Y1%VBP=O-E^TZs zZN8vdg~&)Y%wT~ugQ7PD8wiPKL<7X_Z!u5c0*?86{i15QEIi;)@yNK(fCtbZPA>hs zLVb;MeT`M2Z#!0fS0Ep-BefwnvSP>2wl(h@$gAA+$l~nz9kmwP*ZD}}-LKg+sr3tL zdas?IlhQD($WRL!^(K3kNomrkqYb6beNjqPfM!L~!fl6p?(}@~;_|{p2j?#PpPM=( z3cE|yCiPu^ZMtb9&FyuL%*t-qa^Jwr&0QG`hsa^)uM?I4w~X*ri+jHX=l%up7YTq?JK6*m#}uo#2w@;_OBhl74xn|!43+; zEbyt!9x~y~Y{|(zQ`jD52v4$fP1)3!){m2)_A@VkCw(X|G9e^B!xWVm9G})b`5__1 zp3c2cPdA4oMg?ZuLlPp4neHCH4~#Z={7&8T{L=~xqTwmfqEj~1f6a;s1d*`JSx^$L zq@53hI9BN=TTfz_r;I1ocN%P^iHtJD3?pViS?I%idg}BxQ{wj2be1Vzvnst*7ZjYc zE;$Ve+r?Z#@%eq?^Vj3|mRKyR7(V&ug#TlWrOyfPUmWm5HI_(UzpTa*g|e5| zSQh`Of5OHk4iy&02 zyO)(&BHLgpjU70W#>{Xbjd_VQX76jB6Jo9k+xdMehku%zYMN$|JzGAFFQ>PPek<5* zkc!M(#WHt-L@QEY`*A@Ei7AIL*&V)Z&zPPTGlk_1(5OnWTf+xLwxw1zg{9<284L=x z7n(9e+zXA4hPg7Lohjk*VTOq(qU8PVUsRCt0XQt z3r>0NU)U}!)oM*+f%Fp32{Erf7g_yN8ddfO`!wpbVLF%;7WWKbKhhx$Q`%aDElpTu zAp4OHwrIS3z?YYE@^;_2;d*yXW&ZPNlY@^)FNjtPKTt=!P95S*m2u$7x~!&H#)Q4X zl^G-i2GHDT1;*t*oY4Hsi;Y1m;{I#O&ml9|I)bey-WK^%tko6yrcUOY_kaTCTR9=_ z3**4A@j%8fr|`7&rfC%9pYP-&m=HY9B5F1!w6K*UaLU{+*xLkGVQ_9R!h!YietbkFf zSHzrAFel-6V(n{&zLU`}hi-f;U;hGZIj1ZEh*Sw6CYxCWX9B`gPC7~tsyMaQv#mzl zFRS524W|xxa_%tq*1M$v2IZUXcRRV63oEpGVSxJ!dv`mCrT}`x3%w|ulF?fOFXNCTkn2iP7d~Y?3y^wecr|R5`He5xXzdS zLps?%B-u>NHj-?n^~`3%|J~kiu*LBa*b2GWLq*1d%y&L4Ok0A>yz7(gK0L83a%uBQ zJPpJt?Q+AxTgKRx;ZTZxu_cCNaj!%flF<2V@APTI+@Aj@0Pi(DT@Wel_o^#{sHfvhHYxH3MhSv^t7A!j0xAC=u z9gKw~7jRk2=Fapvcbwh(Gn)UWEAj@f?xLgaCpNyYziH{qp3fe`MdOkeX(+R)^1a^( zuOm)SfW1-seZPGoBgRK_z5;6*mp+?ZZt#`+AS(|emjoCq^C=W@!wRo!#VdxrSt4u8 z=^6@^9H*CdE4X}-E3awAVmA?0lFcr%wwTtT_*Lm(js5>&?_J=lDzh~2eR2Z=0fHdn zjR**W+zdeoAn^*QlyVa!#d+QhV|>vYHqxfYl`+%vJ751N><34$?;p~u7CP_i|DSlz z`=ZzXl`>iS`YQIryiXS04@>lZn9gh0IPQns_onXqY8=yf-r3;3&iCf~)=*CL`VUo3 z^!kCJi?9Eo&PT6zzFprpdcF7UqSyET%=NBk^!mS2zD`c;$lule+@D4tP^fx&#YE!{#MB4I&$5dBuBSUWJ?X^^H(iCJ{hfIb^~_kAh8 zfA3ow7svf^znA*;dnvwGr^=U1L_=eYV%y-Ap{_7on?8Ci zs@KS;Z|U7HZbR>WFZLan(YRP4_u^je*YD-NowRGWzgbLzGLgFOFT{O6CR6turs1`l z?=L*wzBu56-<^@lcn_4-^Ry}2hU(r?(n}7Ztf_ZT91?q5Z2y!gqsM1lKQ#WfgpoHr z82A0Fr_LL9+2unAU!8XCrB_Y4RqqtuK1TNsrN*5NeHdTc?Xwc~vTHN6or^*s$wojT$v`{AHJopE=6s z^?}1_=YJGhuGYUoZ_#&ic=0nnSHn8{`FYxf*+^(k&lKe98)gr`XkO7hk+}A@8IuNG zG(k|i703M~W^Mdx-P6w@hN{2XlO&|w3$=o0LiPe18GVZ(bmF>+z0%``>1CSXH%yQ_ z_2gbN;{1-$@YM0+;<~0y8Z~?3<=0$y&5Q}7GA3Mp%@}j}mi)N>M&o23+3T;~nZBTn zl3UM+;uHqSK|uOzQW|}QN)v`D*Yr4jg&Kd|`;xw6U+Xt?Xy~TD9eC-4x08n2|Eq7j z9KhrSHqah1p{};B&bS9P*SY$_Q`IkwJ6~`@x$r2F85Pb)+e&(YHXR#61`nGdTIVZ$132^GlcZFL>mt$%FgE_fx!u(o2>e zh>N*&aO~fV>ObV;Rk6>0GIMP~pZ=qh;-8B-a!r!LUIc#>GdwmYW|ctj}F)bn-mw|>=ial88b!_w$=@5YVP3z)x@g^BuhX^d8TU!tYsjcjV!e{slQ ze1`vK=<<0(6XJW1opDJ_a@@#iGauM~>%jP4dRga&$1^64i|aKoK{V^$&%_N4EsuXo zURN$t6RD^UX=^5dyiGT%@w_Rfn@kJc;Zl1g^d2`|KGDhXZ>iWH-r{2W^ii=x$6p%P zYk-CwfpDFf7Ur}mIAo*jekbi791JSp=zLbHXzmt}q{%($j zeFbqb!E13tW3u2)S>RyqihqQ;YrjC2nuD{2%9-a20$`(FG@@_PI<SC+CL`o^7C<@3{6Pr7jruF zaa4C7?XLHY@>=S)<)1NfpIyj1lu+~y4v)ssJG?JKJ6RH4 zt9OsSN+>O}WQx2OWQ#OLtAbwMAJQAbfA+w6#o+r=L4WvA==zk5)d7 z81Wg4ZC<-wc`q!oCV4NQJC9;C_lUxgi^wq|(a`~TlY_S@ul@92{q0V2;h&oFeKxIF zsO7V+NTKG7lYd;CbZpFLJdi&9m*2ze<@}Jn>h+F;{qdvuA#=1ZUelv9*SqHb(j1Z9 zdbh%5tcdP}+^iw_cPEYX)2oBQYB6+|{)Y8;iT)OQr2E{2symi%&l9YFdNRpte@8+8 z>d7W!KD_avLgnQ7d_KzioxM_7EcN$aEg$8>zbjv5$nWrk{tO>pTmFCK4W7@xuJaYI z=Xku7UvOyOr)7E$UT)b^}t$49N=1=Tat(_KI^(&=_QJdH^5u2?k zS#(QptiHQV%6hH--l4xK`g^A>zZP)OC$6@I6ZLAFHtnLX>S{+SdJtWEeEJMrONNp1 zYzR#oIsf^qzxDh(;hVpC|D7q=7-bL{ zG~oP|X_?=BaQ4ct%@})SA4M}6yCSD}&e~n;X1$Q`TukrYHL)uy{^CE~Gj#kd<3`2D z4;emc_>h}R_OH9DZ}PYYCSTQW;CFud2e)0OR2Y}_xn`nLVJxiqO;!4&2giAzba(8$ z_(5uitF`xYUypU@CjP=M$`^*13v1qPV{jn||DTFc`+$rxWA56~*IT0@Qbt}fEml6& ziiI)6o+%nI$Mo_$1tX`${!F<~V|&M+iBC+t@s3$H_W9p^k`o8?dT!dRInxpoW8dtx zKjV&!1HI$=DUz%HA6nZx{*$`U&&Qmv955hMJofypF&Xi_lV*JK4>9pGq!ZU^x;Rto zgBf~e*j>eOwpZgWdRw)7(tg37UmVnEoSNU^9ir|`PPKS2m@1KOlt|a;_3P-HEYZiX zLu2J39!)i&hqKX_R`m{_Owj-W$@Yr*>+!306y1K?Wr}W{poIm~Bs_a8r{_4I?f^zrT#>;NEUtW9b zt+$W90ITPmIcx__;UiaL+@$s); z6MOlzr5TUD7`~}6{-(=DUfOr+s!c0yx$~{_uXp~(@rxh7d(pE`6)u@{#k3_e?s<9X zvo8+0Y)JAyjGj~R^KYlEx@Yn?o;m!Dq6+D9mmbCIef%no=>0D2Ab-K9@ItFc7h#ic z7^^gap=;!OCL_};F8d$88S~zQpL{d+sq-h}ddKOxcYM{~|03=W2VQ&WrK4s1LcxB8 zqgt=~^p#gsH=$qH2kGuY7oIqFTes*5(Hq@{jh99_s*u-!iS8`)2ESo5a$5ZQK9OI3 z{n#hFfBE%a{zaeoss-n=6Sn%ZKx@!;)xrIC(1qv8U#P>E-_ma?#!H=jvuhL{Tl?mE z(X5a1ZD|&#I4K|B89Ed9$)ebOiU07Y@uB`P?|$-e@0eI^(tg}}`Nu7bMk&ovYV3rh zelY_TWH&e%vw?Rszib_;H#GYw>sS3;U1xvK#R>A(ys!sxp&@=EXQQ46^4G{5L}!#r zI6!>w?&vcyi@vtMssCVgne+hzW1fyzY?T2qFU1e;H!bFk0m(4~1`p`-$p@E?9WwH| z_|pn8EiITIx;$=wY*{dd{C?B)?#?XT#=ApN$L8oeoZc5m6#afF-!JDo62o=+o2tKa z+$7qpP==@Or#H;$hW2!d{xO7io%pFkhI~t-$u>O{Tpb(xhg0s&m~!cec?%wx;ujOA z+_!d?&kP+gS7&axFJn~defgjK!F6}ueoM-b328T9H(|j|qlQhG6_Y!8;mi>_7hdwSE}b}W>8)c%-S&-H_mqEq>c#(_U-pe@_l(Y1GGW4!n@5kCn|0H~ zIg^KtyK~iy3Hm$w=Ea5<;)zFHZ(D=Us9hd27lvwBR;Rr z^8;q~zK!01k8T}_+%dlU)w}}rW#?nlhE17pZNGjav!_qVe0cf9E2fOUwqO5|t7oNU zKD?~g<*5@!_v<@y^>qDf`6PWes^5T7t7lEkeE6Z*>-r73y#Ms;Cyvs|Ay@Rjal#}W zoqwCN<9w{60XI&VtnpN2Z4cg$>l2r+dA9Y-u`Z(S^6Fu1szu-W_sk+u`qW>4y}{#9 z++KYRl73yHtS)|db#d5-Uxxl?^_=R^CB4tTR~34;&-pnucWgcXPVdk|mFH*2t_&re z@0k11-1BXrfpb3+XO9I7Vk2?)YVYMTc5}3mq#ZZ*UA@VrkW+H6y^!$FH#-=6MX#9t zmwfW4qsI;&l^hdyxwHP=d`rxk#7_pr{3i7H?7o9~pZ{opx0BAd^-osvzbh^aefyIp zyFV$$<$~BZ;uflhMepZV1Kg{$a#YBQOB|C&5wPqqa3P7`%1;LMi8*u2$ESSTn7Q2c zlaGDdm^T;P8FShBr+mxM0B#vl?rLs%exvXAT-T###{#lWDD;y;QuXPc zVD#xW;Ln9N-5T0-e(kO2>q7H;_lb?`(>wIF^KU3)n9_;Iyb^o!$8Uc8X6((MEFK^) zg)0Zf?1|Yk@Jb&^hEUg2=lcau#Q&9K^ZZ${iMUg&n&|QNnD+Didj0C}CVLFHxhp<) zN&E}a&RcrMfbK|-7v`MZLyzVc4i6I2UV|-C-&`K`wDY!>V8Oj+N0z(+C6@KAyvf%FN&Y2-qH3w z7>rPj`$~8H-n(B(j6N-s1YfB9rHY3)GMYk=Nl<9YMK$l;_ttOz@q>5#L3-MMe)#1{ zt0&*_t^1~_m3sA7B<1Q)tA6VP)w#2i{(f!z{FuIz9(dxOTj!`Ai_d>I__*uk?)I_f zSrdlpULUWWdC#)*jiF&~$6!N3Lg?4>hfwymi}nsLiH4n5n1#lnL;4=LvtR!{XA+wG zBpvJ3TQ3}1*PcnZF{Uixn0_@>dneHz?Fd}XhNH+GlHL7xh+B_TQ%wWvn^S@Q>hdZ154;`A&{OjJmjwR{wnBE1@@19C{ zPtUYnezK(Vn`x@KtoJ1M7QJLn8B=1On%gTmzA`2*6dV6)uR*=%essU~TjI+!C6A9S ziJv+f%|%AByEWQy9bsG9@2Y2@AO+1&RZGQ55?2X z3DZOWE8)ZLJ)y6BR`b8~j3zlb8Xh@0S8PR7o83`*!%p7;wW#eX!7&&9y(4pgIjJ)_+ z&5nfrG1Uos|4GkHViHDA>XjBhbaYzE@F|lfTsC@A!nC+yWAv}Ii4zj;op$|*S>uPL zj7~`($HBEJlIx^`OC=&z*kATe?l%33~4NK zyuOzP_Zc$kieAYBhTj+eCqojinfbu23VkSdd0H_D9y=3+k{5g<2>SK?#r_b3BOiqrh}~Sz*oT?;A`Mca2L26+ylN2?gjUO`@sX?LGTb* z&)whR_-*hgcnpkCt5e9*0G@`oR`4um+Bk0KxC1<=G85rE5zZ6gJQ2bc_N%A!g(T`C&GE6Jb-uUTXUWmnDfNIoF@k6JTWlmiHbmAH0OzdIZu=ijM1DY z2If35Fz1PZIZq7Cd17GB69aRe7?|_Kz?>%r<~%Vl=ZS$iPYld?Vqne_19P4jnDfNI zoF@k6JTWlmiGev!49t0AV9pZ*bDkKO^TfcMCkEy`F)-(efjLhM%z0v9&JzQ3o*0<( z#K4><2If35Fz1PZIZq7Cd17GB69aRe7?|_E!N{%?!qMP3FcnM#Z|`cm zZ9CW@R5nTV)`8N@-wG2sP69nP4MaZ&Nq!~u$I#5IgW7rJ|!OqPk@b-*#z1a4Gfw&ZUJqV2BHrG zr31g!9ML+Ej1Fkl$gy=G868MQ2a*HpK(gLEGg=3d1M5ICI*_cVX}LPK4kV)k$$@ns z868MQ2a?f&WX0b0y{rSt>WN0{K(gKq@OkS%a$p@uR^Rlobs#yg4kQQGf#kqCkQ`VC zk^}2Na$p@u4y*&ofps7`unr^#)`8@}I*=S#2a?rCT&8s(Ij{~S2iAdP@nf_OB&)yp zTkAlwddi)esm5#68zddrB~0Wv2^^rd9wbY(Ntn#>Ag;NpYmd%c4UW*W#X;ElLDCSH zU~4}}d>SWoeV?Oof1bHKUaJa7S}Ed&>FW--T0IKGeLrCmSNZy(_J!LAQ= z{1CVtd|3T)kXpfa$)Wza)I1OL2r?)LbG}e}oP)gL7p|wYBCgrMnPRRf;Y=wKm4W48 z1y~7Ifg3@OO@q{qMvqN{)Q(1vO@q{qMvqN{WL?d`i{MM(%it^EtKbgsHE<`m3)~Iv z0bd8-p#FO~-Usdn4}b^3L*P%i@~7a>z@LMMVXqFXN0zs^-ecJyS!37sDEKbddqf)~ z%k1;NqDB4!{5AalCHNcg6dX2yjj-ATo<^6NIc@=4IdhgP+c<9LxC1<=S}6dh^n9eW z^h04H$Nf~3k?PStKZx_Az-e6@btYYV=ObmKekGixxDg{|qxK0iIDa$0{RWsr31P4p zETx<>upF!aE5RyoBUnqx^&CeyexJJ>2Ty>Fl-UF}gDv1W{c4otS}IHglfZ$pTBFpb zJ`j!u$AJ^{Ui>KaCZA6Or)l&V6-<{Dqa^Px;f$^$!dbF}qa>-%+^-nwqhzoAtB1Ni z5-#U>4Vc3nbGc(4n9unz=L@^Oq3hRyMSQz~<6^!o;mng2ct;oDQ(s{w4}?oD7b*aDvA+jg)+I9j$VPnZklfkj{mcnWL) z&w}k>hfwdM-;_aFdZk@?>Dw6eZ4CN027Mc& z{VD&}`Zh*mgiE%*jnP1PT(fT$W58%Jp0b*!ZG zl@q!q3U61*V`aCEbHRDw0OF5=8$j+bzJAIA@X>%mgWECb8I3a}Ea0yly$P{NDg zOW@1kE8wf(4)8T_C%6mT4ekM72jAfCdpX_*?gtNm2f;(&Pq^}@;LpIHgZ0$vEv|VR zJPN+cx5qd>4WF%G8+cB?njp?k2nT_qz*4XbEC(yVO0Wvt2-bt=gcCJV4-+PWN#H=u z!6wR9ydoS8jssJ{H1JMo=0w?n9||ArIwpKbHesUdfRER3O%A2yQd%CE&-pOti#Suv zaS6vy^6h4D3s?(*QP7aue7Lwt#2(wjJycY8T{ulh>nQ z5;(AHl+KKlt(znUjN`ymFb$m6HC^Y^WhE5DUG`*>dgx8U49+~*^&K5Qq|t4XIPvis zew9P{xs;y==5s#G`9exq2Nv<|29AsQwuCcJa{Xp-3s?HLn7h}3M>zi; z7~$Jfl-U3_a+fBs8EgU1@@+fVAxy=NrDDfYv16&&u~h6>Dt1hxiY!Aac1-y%r7fx0 zu~h6>Dt0UtJC=$aOT~_*V#iXkW2xA&RP0zPb}SV;mWmxq#g3(7$5OFlso1ep>{u#x zEEPMJiXBVEj-_J9Qn6#H*s)aXSSof*`31Y4QVjM1VrGi$m~jwiMu8L5vQuQWP73FM zbHRDwB5(;<%JpSnIamQ!f>q!~@CB}a5qt@J8GHqN72E;72JQrRfxE#y;OpRCa38oI zJOCa94}taE_bra!29JWrz|%ecp5F9MvJG>;%T&a8ZDki zi>J}zX|#A6EuKb;r_thRw0IgVo<@tO(c)>ecp5F9MvJG>;%T&a8ZDkii>J}zX|#A6 zEuKb;r_thRw0IgVo<@tO(c)>e_*7OIQ(0e3WqmP~mBmz67E>ilL|*gL#mrPz0aLZ| zI-z6F%%?IlpUTX9Dl_w`%*>}UGoQ-Le5&$1__xo3&wAAMVQ1@fz-! z%b7edpEK+EZ4qZmK#$kc)V@ZK*VEL#MvvFi)V@ZK*VDwaW!VgF0jt5SU=8>T_yTo) z5qt@J8GHqN72E;72JQrRfxE#y;OpQU)Ojz*`@sF+0q`Jr2>c0G{uKNf_;c_uT-AXd z<)>*U%58Ck+P=;4QSe=^e~(g1+r)vf{N5|g3O;;WKt=IMG^t*J{_38A!bb4Pp z>-u!o_34@)Zqt=s*QZNwU8dLd>DsIG8L#WpwPWdHuj|tTuj|uU*QaZK@}Z8su1}Z7 z8ojPhr$?u=u20u|ev{64U7t=LPiI}99(Y}!&bmIGb$z<_TYQbz_344v_37Gm@fok{ z)5WLJ>-u!@Y4o~2U3?n7u208$q+>nOu^#DIk94d@I@Ti{>ygg7KAm-ax^_)1o!9m0 z+BG$LU7xO9Q=`}Q>Do0ldR?EcT~nji_37F*HF{m2uDw$qdtINdy;Gyt^@_FudR?C$ zcwL_!cwL_!cwL_!cwL{aog%a6b$zpDwL-J9=H8&bmH5@VY)7`(iy}zS8UZ zbZNVfy{=D}mhRF{x1MDQ`>5m@(o!F5pIbPf>setkIEZhr(kf<#^wT(sGZQqEoFU!Y zDVzh&1?Pcxb?w#p1zf)nT*Uds953PcK8}}my{;=C;5di7hrvSa!OxIJ8Q1ge29AsQ zwv;-Qf#qNYSP52v8^IU2*Nfmw;LG4E;H%&c@HKEJxC`73?g3v1-=HRYIo=2E2M>S; z!9(Crxbmmq&%mF9_0;Muu6Y|g3cky?$2k5KocsmYh`deUX#Am!tnJH~|IbNsCl(xHMuTy49&y8NE%#?=vTdz}QO1BS5N8&XPnU)-372 zaV|IyysPW$I7lMm8znJ4C9N)+BQjQVOOl)o9=0#<`t!5Z)x@CEApBKQ*cGWZJk zD!2oD4crOt0(XOZz}LYysQ+G$_ksJt1K>gM5cm_W{3-Y|@aJGX^?!?Nj!?t5IX()$ z%Qf$D{upO|1^xy2YdHT)@HgNocxwO~VX_H4jm|W4+yb_8<}6pXaoo;v2Y61kx=H%B zLpVZS>^DiT4hctt2d&ir+SX zXTf%`LpYn6#%$&ovzcQkUxUV}*~~6x%ffq{@sr}&(r}}n6wlU-!ssW(vzZ~xWazx9*i*&4Nteo{PJqqfmcif3!oHu_2NY>nDR zKPjHAQQPPz#j`bP8~vnsw#I9tpA^s5cy08P;@NuEY4nrg*^I)oH46LKPl{(V{?69; z+o&hL-V@GXPdG!XHXnOWI72LbAoQMahFCIsPdGzd`Ph5H8CnNDE%csnhE{gFgx(X* z(8{hz=sn>K_JlLo6V8y0{YYoLC!8S;jouT^kd5^ny(gR@R(;-k!Wn`0gfrL^&XB$J zx84)Z(0b6{dQUh*{QG+E31^6ZqxXa}#J|yd!WrV<=sn>Kt+|Ze6V3>{C!C?xqHF6t z;SAYiqxXa}#FEi_!Wpv6zL)oeGqiH_-MuHAp_QZ2d%_vA%>LGU!Wpv6zjZn&?V8>p zZjJrK_8nr_$2W7lOk>a;TJ8FL4(G#QG1v$;fz4oxa2{pOqs)1fIgc{uQRY0YzaqNE zWzM6_d1BJPa+&i~bEC_gro1yel9{k7onev(9cEa=OXlT5&F3Z{al28EfROqq)*b1`Kurp(2Zd7tL|MS5e)8h)R&<%Dn!I2W7; zE&`W;FMuzCFM%(EuYj+DJHXe#o!~BTH@F9U9o!4<1NVamz=Pl+@GbCd@F;i;bpN_f z>m8%})PtJ)eIOj5@%KSVWE{kqQQ+-eXLM!`I2W7;E&`W;rCeDCmV*^wC0GS+1Yh9# z7r~dnm%&%SSHT_NYv4|B7q}bT1HKOK1^0pb!2{qy@DNzfec$5vZSW{~3_Ojztza8? zPS-yqPCgP2kj_6OPK<*%GYTvP%fNE50;~k9z>Q!%c$yMg!8Y)m&M(8xEW^$$(`+H4 zGqy9!G+Qv*&MecoZ?v6Rrg7hBJF`sVzR`AOnZ|vi?aVTb`$pTDWg7R5wlm8#?i+1q zmTBBK+RiM~xNo$bS*CH{Xgjk^BfimgW|_wNh@v1`PnM(k%hCMh=*e=;{C(bfvK&2G zE?InRJy|YUjMkIo+RgBl)|2Jh%`jR|mTNb|Xgyi3-3+7kWVxg^T2GcsYNPdJxuiB) zPnJt+qxEFDq&8YlmP=}*^<=rEHd;@XOKPL_WVxg^T2Gd1=fU^2o-CK_M(fFP$!>J7 zSx&E6POn+6J%JDO{3TA^Vm<_IAHn@V>;0k7gE0_(gU^cjd+29Ih zgDaQ~u3$E}g4y5-W`ir34X$7|xPsZ>3TA^Vm<=jx1vU3W%!y4J!6GD4FtdX|(yr1B#VLyKj`}u3w&tJoS{u=i4*RY?z zM)uji^^@o|vdk{QPomezG8_FQdX03+=qJ%@q)SFWiC!aJGWtpM8us(ou%Ew%{rolT z=dWQue+~QjYh>qLrk_Nwk)1dCN%R`_^K&H8GOg$BX_lk;ZIRGk&^eOG=k1Z3qg|re zLVM)qXjM8%XfNm->A)`G9B?jZkK7#TfYBbgIhw(`Onc#b|3>@!#b!$$l2<%(gW{rz&qu+jd0xsun%_V>$` z7P(~m`{hcDjQ01-l@=N8@0TlG^0EE>a*;Y0d2=P>ZxuJsGUg#;9x~=3V;(Z*A)~y~ zxY9D_A!8mg<{@JqGUg#;9x~=3V;(Z*A!8mg<{@JqGUg#;9x~=3V;(Z*A!8mg<{@Jq zGUg#;9x~=3V;(Z*A!8mg<{@JqGUg#;9x~=*6Y{YM`PhVfY(hRZAs?HNk4?zOCgfui z^05i|*o1s+LOwPjADfVmO~}V4QV*n}|c6~-onu?b;pLKvG6#wLWZ z31Mu4_HETi!WtKhwh3WuLKvG6#wLWZ31MtP7@H8rCWNsGVQfMen-In(gs}->Y(f~D z5XL5iu?b;~6uygXLKvG6#wLU{QuvH*LKvG6#wLWZ31MtP7@H8*Na1U26T;YpFg78K zO$cKX!q|i`HX*E$!dKcRgs}->Y(f~D5XL5i(V{S#6UHWl(Vs9jA&gB3V-pI+d6u4? z3<5`idXl3v+EW+KQrv+;G3?_~zAXdG!3wYvtO7TJwfw4{;|Ry+bi9sxt>a$n)S5oy zd#&SM-ex!@gMc9EN>_8EApa?rqgdHft4isSrim(Gk*nuMKKoNGJ2s=1P$!X-B|(Zh+4X@VNm#H^Aox_}l=W8{l&Td~Sfx4e+@E zK8tm)W!hW!NKs7REQZ5k-QDLsUKi6hi|L!i^vz=WW-)zJPfet;#q`Z$`ereGvzWeF zOy4Y~Zx+)xi|L!is<}({cwJ22ET(T3(>IIho5l3aV)|w=eY2RpSxnz7rf(M0H;d_; z#q`Z$`ereGvzWeFOy4Y~Zx+)xi|L!i^vz=WW-)!Un7&y|-z=tY7SlJ2>6^v$&0_jy zF@3X`zFAD)ET(0PY0YB#W-)DAOy4Y~Zx+)xOVHsGbhrc^EjFbhrc^E{-t8=9x3iSp&Qf+e zOWEx#Ww*1G-Of_U`?Rj~ZfB{a-X-*IXQ`xC&y>7AV-MI;b~{Vi?JQ-tvy|P=QnBGX zdbhKb-Of^WJ4?ln&wIDCl-)p;$b~{VOuwVtw-s<(0k;)!TLHHfa9aVl6>wVtw-s<(0k;)!TLHHfa9aVl6>wVt zw-s<(0k;)!TLHHfa9aVl6>wVtw-s<(0k;)!TLHHfa9aVl6>wVtw-s<(0k;)!TLHHf za9aVl6>wVtw-s<(0k;)!TLHHfa9aVl6>wVtw-s<(3AdGSTM4(7a9attm2g`Lx0P^P z3AdGSTM4(7a9attm2g`Lx0P^P3AdGSTM4(7a9attm2g`Lx0P^P3AdGSTM4(7a9att zm2g`Lx0P^P3AdGSTM4(7a9attm2g`Lx0P^P3AdGSTM4(7a9attm2g`Lx0P^P3AdGS zTM4(7a9attm2g`Lx0P^P3AdGSTLrgOa9ahp$_6RBT?MyQa9ahpRd8Dcw^eXk1-Dgj zTLrgOa9ahpRd8Dcw^eXk1-DgjTLrgOa9ahpRd8Dcw^eXk1-DgjTLrgOa9ahpRd8Dc zw^eXk1-DgjTLrgOa9ahpRd8Dcw^eXk1-DgjTLrgOa9ahpRd8Dcw^eXk1-DgjTLrgO za9ahpRd8Dcw^eZaq?pVLo|JS(zs>Qaq%itzjwe;7(Qk7+soxs?Hpi3tZJr_sdJk=r z=20ICy@$4m_3|dQk&nHHwn;N6qu=I`carvIH?dycB>sP_W4}GLNv+`X-b35OdU=yL zcM0A@+axB9-b34@*_6?HXqz;fGI|eflV(#!@1boHS1#Fab8HebK7OCO_-&3&td}>5 zAD8Jpv`ym2=smPenmc_MY(}ol$h8@{HY3+&Tw9TAD{^f`uC2(m6}h$|*H+}( zidr+KOCTk!ve*)gV_5a@8PL4RX~WR}FI2AXg1?)gV_5 za@8PL4RX~WR}FI2AXg1?)gV_5a@8PL4RX~WR}FI2AXg1?)gV_5a@8PL4RX~WR}FI2 zAXg1?)gV_5a@8PL4RZZJ5}gQsp!yp}f%Y-}f$nZB2km401Kr(dALAeB?ne6<|3KxO z2%e>!XDR1d%6V2&_`J(`mU5nz6h3x2&r;5_l=Cd*JWDyxQO)??&U2LW z9OXPmInPnfbCmNOJmox3Ikouj z)vB~7w5MSIy;}J(8tuPVtC47_(EfY1x|gr9|6VQrd$suQ)oR4wr!)57tJS#gWBc#b z%6EFY(EfY18uyL%->cQ$h|&Igwb~mo+JCPW|GipyP`iBl@72nK+Q;_atCa_}kL|x# zEB{p=+kdZC^8uG^|Gip`n69n;_i8mC@Ok_1)oMRa@8M{-%xM3;T8*c^#{PS?+H3JO z_TQ@&hnB+rd$r=wX#c%hacH#vUadGZ+JCQB^9Q5-_i8nNFxr2wR`Um={r76MOXE7* zf3H@%G)DXH)oPc_E->cPLjgRfWSF61m zqy6`4wO3=b|6Z;9rG2IS_iE)YZM6ShtyKv?KicPGIvtuPRiU#nL8$!_EcTwgp%G^zvyD4)w_1sOFyD4)w zW$vcT-ITeTdhVvo-PCh8W$vcT-ITe9GWSsC9?IN9nR_U64`uG5%srI3hcfq2<{rx2 zLz#Oha}Q;{p)!vIZ>UV8{h;2^>Z4I;->^4Sj?dT+>J6N%zc!(k23dB=03{YPnr8Eb3bM7r_BA7 zxt}ukQ|5lk+)tVNDRVz%?x)QCl)0ZW4^ZX-$~-`s2PpFZWgei+1C)7yG7nJZ0m?i; znFlEI0A(JaOhxDv|BBBET4R-tg=6=ugOquYG7nOw0@w4cHTEE79;D2JlzEUc4^ieJ z%2X6Im2-$P4^huUlzE6U4^ieJ$~;6p4^ieJ$~;7whbZ%~Y}yCGVU4O!2<;_xSk}yE z?EP|BBjXvNy`&CnWHj3Q<*>#Hhh?vf_I^1mdu6ou%VCW;zTVz1 zhc)6D?fr6CBaYGDFNZba814OXSR;1ijnUpO zhc(t1?fr6CV~UUM{c>2NiP7FKhcy;hUVBL$mgP6v`{hk|eiNSGgy%Qm`Av9!6Q19M z=QrW`O?ZA2p5KJ$H{tnBczzR}>)^Q#p6lSb4xa1axelJ|;JFT->)^Q#p6lSb4xa1a zxlZH42SFV?*THigJlDZ<9X!{;a~(X_!E+rv*THigJlDZ<9X!{;a~(X_!E+rv*THig zJlDZ<9X!{;a~(X_!E+rv*THigJlDZ<9X!{;a~(X_!E?QMUK-SkXQQ7x)U#Jp&t6SE zdo}g!)zq_BQ_o&aJ$p6v8fTx@^?vS9uhDjw(9a#}HQMS4pT=3A@pFfI_G;?ctEp$N zrk=f;dbOSJ=;sdg?A6q>S5vRn^m#vbsAsRHp1qoS_G;?Y%Kp~R9qQSusb{aIp1qoS z_G;?ctEp$Nrk=f;diHAS*{i8%ucn^8ntF}kuC1Rt)U#Jp&t6SEdo}eM)BUZVJJhpR zQ!nlE-TmC5UfN~!bBB8NYUP`hOJtKZ^bzMgNbY|3}gPqv-!p^#2zsGcWjs z$}}c{1G@@!oUW&tdh<-rc7H+J{X%W$GY`rV{z9!55iaLAhhOFLt2{8wnZm9zU9%1> z;`|1Vi}|*MGv@gh;@M@^f#&uX;=y%j02{f!32X*iz_WbY4t5CNl`Kbu9+BUbEJlyW z?=m94D^7gIBl5e9$nP>DzsrdHu2}MUkI3&bBEKufe8wa4yJF1f5&0OcaEw+sMk^en z6^_vg$7qFPw8Al3;TWxOj8-^CD;%R0j?oIoXoU!?stBv92&<|HtEvdAstBv92&<|H ztEvdAstBv92&*bZ^wA76!m295sw%>&D#EHtaSQm?tEvdAstBv92&*dj;A^fPVO1sn zZq4T-tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+ ztg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fc zsv@kaBCM(+tg0fcsv@kaBCM(+tg1Aph6k^zBCM(+tg0fcsv@kaBCM(+tg0fcsv@ka zBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+ ztg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg0fcsv@kaBCM(+tg7CZ zzU>I!=dGysrB{b^?6;!cmqr==R@D2l_C~)I^}br%*ZZxg_toM)8)^A0oMcWJQhk^E@T3HrnG+QRH>L0T~;Ru>lzykg)+78<4R985@wX0T~;Ru>lzykg)+7 z8<4R985@wX0T~;Ru>lzykg)+78<4R985@wX0T~;Ru>lzykg)+78<4R985@wX0T~;R zu>lzykg)+78ztQ`^?A2iqqI(*QpnXPxqRNkYE-ZBvAu;G#rZPX zR&(A2=S^_l1m{g~-UR1OaNY#xO>o`>=S^^~H^xm;JgXW zo8Y_&&YR%83C^3~ya~>m;Jit?ZD!1Q6P!1}c@vyB!Fdy$H_0x^pAXKP;JgXWo8Y_& z&YR%83C>TeFW(fLRxdU>TIp#qf2Yt9YfsC%8pnaDpre(ZR*$|#=!mtaHJg>6w0iU^ zp(ECw*8K1Zp(ECw)-3U9;TnGBXr-ss3NGK#N>9rsyEI2DJ*^h;8AmHUt#1o+#qob9cmVGulTIp$70N>rwN>6K^X>_#G)3Vq`M=L!oeq5%bm7bP0@Le3O z^t9}N(a}mziz|QYXr-sc(w!RPt&`2@WHUP1j7~PAlg;R4GdkIfPBx>H&FEw^I;qG7 zYPDu`vKgIhMkkxm$!2u28J%oKC!5j9W^}R{ooq%Yo6*T;bg~(pY(^)W(aC0XvKgIh zMkkxm$!2u28J%oKC!5j9W^}R{ooq%Yo6*T;bg~(pY(^)W(aC0XvKgIhMkkxm$!2u2 z8J%oKC!5j9W^}R{ooq%Yo6*T;bg~(pY(^)W(aC0XvKgIhf%6tPZ-Mg`IB$XT7C3K# z^AaNYvvEpXlf=PhvF0_QDo z-U8<>aNYvvEpXlf=PhvF0_QDo-U8<>aNYvvEpXlf=PhvF0_QDo-U8<>aNYvvEpXlf z=PhvF0_QDo-U8<>aNYvvEpXlf=PhvF0_QDo-U8<>aNYvvt=NH9>_97apcOmNiXCXh z4zywiS~bghCur3y%V;~$iXCXh4zywiTCoGI*nw8;Kr42j6+6(XvHm9g%66a?JJ5<9 zXvGe+Vh38W1FhJBR_s74cAynI(25;s#SXM$2U@WMt=NH9>_97apcOmNiXCXh4zywi zTCoGI*nw8;Kr42j6+6(19caZ4v|`-vne&`w&U2PI&spX?XVHYS%z4f-=Q)d3oJAkbN(X)$w4noS=s+7f z(1s4Qp#yE`KpQ&Hh7Po$18wL)8#>U24z!^IZRkK7I?#p=w4noS=s+7f(1s4Qp#yE` zKpQ&Hh7Po$18wL)8#>U24z!^IZRkK7I?#p=w4noS=s+7f(1s4Qp#yE`KpQ&Hh7Po$ z18wL)8#>U24z!^IZRkK7I?#p=w4(#<=s-I<(2fqYqXX^eKs!3njt;b=1MTQQJ37#g z4z!~K?dU)|I?#>|w4(#<=s-I<(2fqYqXX^eKs!3njt;b=1MTQQJ37#g4z!~K?dU)| zI?#>|w4(#<=s-I<(2fqYqXX^eKnF5*AY%tIb|7O1GIk(i2QqdbV+S&JAY%tIb|7O1 zGIk(i2QqdbV+S&JAY%tIb|7O1GIk(i2QqdbV+S&JAY%tIb|7O1GIk(i2QqdbV+S&J zAY%tIb|7O1GIk(iC*w;e5_K}ZbRt(L<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e<4Y&w zODE$?C*w;e<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e<4Y&wODE$? zC*w;e<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e<4Y&wODE$?C*w;e z<4Y&wODE$?C*w;e<4Y&wODE$?Cv11Za3|wSCp>pDzH~CabTYo2lU^+i&Pk(;-u*r& z=6@?3somgnvMol(7&*u8_c>V@A3Mg#IqBHbLhpW`lcwzwdiVRBG)?cNNXLA}yWi(z zZG63BjGU9T@v&o!oRbFnj^6z~r*<(q#>hG8q|bZz`y9L9=hR;Q)-guTNmu=?cfZfc z{`h*w7&#~VV|0v>bFx21#~3*$`(t#Bk#p>RpJVs?9J}A=q{*(WcfZfcE*X!2jxlmh zy6tbh`+ZK_8om2{PFijB?)N$Av(Yg|&WT~8V~qH}5uxXm4J!KIf7GAov9qN8$L`}8 zWfJPN>I8Jf--|Ie(*ZVvFqx(1^7#MQCbN|;Xm>hCOJpb1_7!Yz6G5^;` z$M9ulrcCB)rgl92=}k_)+(9T#(XhQ1@|su%K6J_i=*Gmv$fb z3ck^+=eNCst9!?EpYNmNlQ{0~!F34Oz z;gL+U+I?;K3+-}Uv;k6bvvix35sN8fgo}&{Ja(dJkwn>91u3f0%FJ-qqw8{X_eV0- z&ZQMW|)+Q(Az!`XS^>_Yu`MoM;JO2O*9bvdh23bL|t zQ@*t>yHL$9uGSXhtJJlHBU09{R%@?weRcmw@>WTovc6rI^2oZvl=b{_RdzvsPG(W` zrYiZd?6sLW<~zHv;IqHZ$qYXxG77T4lT|P=Wr@^jWlm;6LH0^rpC8W4&kGkyi3-N2 z=-!3dE7$3I)&248g6v0fvU(U@m!F>%UMT{{r#zPZcor<@WEDyu9?c8q7DO8&J2RZJ zIy0P`x3(z7nxB=E^_ZENm~xAV(~S$P=Y`q1D#g_-$jQoDqm$jOnv<8eCM7p>jrh%a zJbRUR;74j`A7mCrRd;=6K~Eb(jvINrejvUIMe1X#P4B8a6|y$3Fy+y_oSeM%s*PG> zUD(`;qpY>7qC^yADn6ot04G}{&l-BJIK;E z{<~6V*6VMf%1=?A^ekPKr8_>(6)AcXHczGa&iAN$tPaaeY?vtHp}8HDCX}S2Fq9i_89O3FGzMQe6{PdD+}QMeRFO<^?JvQ=dZpHdC#UrB=(- z@fym0lyCld8ZuE*{$m>SyT0vduM2f6P>rJ6V%_ekljVL?-&mJYILg(xibbM-Sq^K% zW3-HQ%x!eBcCC|~)=%qPPw(jI6ZgY_@48++<`Mnv(bUhD>)-z4(zpj+tp6$8Gb)XH z#$qwmQxC_FjMnnv79LBVv1Ucv$bHdm=Kho-+1*y=VVxw8%I^B+=(Dz)nF3uI?TPt1 zvL3mIW^+~a7b|sst;*=>5w68!DqV3Zbe-aI2>lD+*?R4NrRaFIzVm&}uNkuLqy*p6 zIbRX&`%%4e>*aUX)pxh7>*?ukm3933LMuI@a#wX*r>x-H-0cxv<-4xG=$@-|AD3%s z-Rc)4jn?@weZLktd-U7&GJ9WrZQ4t+<*1+>DFZrikyI~M4yEr{8Ua^=40 zJDV#rS`gSaMdkLnm9XXVqr5+^b1vf%{o8DPR!7(Am)3Fj>8J*}G|OabdqJ1|+d}=% zS3b)9b5-iaJ;H5mU0u!JTUqI%@xRiDuaYrn0} z1YPMn`TOYD=D!|oY?)m1Jl*F4uNSwSzrE197i_ex^P?)ot<=*qqotS)#avPOt7#8w zweNGWc6j7)ouWND`mc48st~z+rF(har>)^y_^M24rOR>~U#u&ZG-?&xYd!9{A6R2N z<0w>VGxS7sk~sALCh}|dil{|0YqmDIy5gUE{b$?Uqy41MSl_RIVXiXipD-u7;a_D= zblpE&8qdo9?aZV+j(xVh3e=9)gM78H+uwF9M}KYq9#hNQtGS?aV0}?D{%ODL(f|1> zw`Vqcr|#7=Z&T*)u5mz< z{F}1xFxluVLrfUy%hGuND6#sd)c293s&2E(j-mX};bAq{wJbPzwm*Tq4 z55A_^@x7YIEz}Hpaj--&EthJR_kbc+KBTyX%Y%m%x$f)1H-gMiZ17@G9#jNB3-oSa zP#Jtr`&-WiuLUoK;)16_@j+SepMv(FBY0Zx1#Z;-)&B@S3ZB@JQ4gs@P~TR zbtX6z>J{o8d=i`w^$8^ge;J$%{wCBn)GzpP@F$_9Q2*dVdD#3UG$1rElpGo)4;y)L z$b0F3hAs*Id+=AmZ-c)MeiMA4ox9id9>f0NK;SnS_62V%5=Xt>`Q8=06Z~9W-9HTt z4!)}$-y6s{Oys!It1pwU_s1P!}2+x-2v-bb08C(3PR9lzV=7 zC?#}FXhdja+&%ZrpWkcU+U&`bZ<*Zv_x6O`%#~Wa_SYIeJ8zY?pR}&eTGi{8yvOp^ zX07R!+5Pv9?!Q^lzX|tbu3T4`m9RGYXL0mTLG;f<(LdkePvS$X@(MFoy5Pj`e0s>; zQ*TR;yJKBAFaGwdoWe|>O1<&M^nvVsX(61O+5NM}!kLd}P4o^#(yDCLt{}UBfAx)4 zo#RAq#^HdK+2NJzav#mf`gZgyZP(|Lhai;y!v!VRp`{=rzf! z*R6dlGrTT0Cv#n4^vh^j1(`X8>Wm@vyOf|;SC@KONdHb$U%4xYxqZ(3B|-n3%)+(m zXL0Vdy29UIIMy%MXg@9J4-VFM{yvJ{-BqvGnchKY?jU{@4$g#{Vot`^#BGXS5`QM) z$Gso#)4NZ5;+2U%>bs-wf9tm~X=zeZ|5pY~AFwHTeDaD*Mh#vuq~E3WLnjYyxa?QM z5{KPB?0duBzx=Mtzkm7hD+XS1*A?$y`MoROzv`~5wY!%(72bb|K9Zn$KN&nuO_UW7);zWY1E{plQvE|G^zE5 z7gEzw*QV}BJvrsdDNCn3JLP!Vz_h#4%F}+H_IFcXpW1rkE7QI|?a;Kpo&Lo1Bh$~% z*gJE?%}6#iD|=Ykzv>lz>|13oAN%;&tI9rA_NcNymA$F#OJz?g`%&48%05)~pt3KI zJ$dXqWzQ-5P1$S8K2!GIu?L=g?(8dNPbvFJ*-OekQvZG>pP(m2_V%=|r#(IG=XpZy zYd<@C+1ba=9(MMxYt&O8`+M5M)Bc_I?zC^GJv;5!X|K)`YE%2o*=x=|bM~0CzntFw z)5p>G9edxA_jl{#sQZq&?}+=3x9@2Cj{Vu;GJBNSpUmE5_93wciTy|HMP?r|dyv_G%-&=69kb_{{l@GqVqXz^jM-nz z-eUF@v!|H-#Ox(zA2EA~*+0zQVfGEPXPEuM>=kC8FnfgAAI#oh_64&inEk-)1!f;G zdw|*h%idr1{Tj`)aC>~%kJnzjwm4C1ql~#aZ{J;e?%HqHUc2_$wa2dgb?vQdUtN22 z*q_7R9QNg~Cx`tw?8RXp4twU>FV|kV_Q|zJuKjWCjcZF_Ph9)q+9KE**i+-*KDXb} z9MpY7Z@KEP^MpA|m~(%V`CI3m9n3kuof*tMf0WMk^nU00zF+~i$pUPX1=uDFuuX4T z>>>Y`vwu1FmotAk@0YWFIhVIHemUQlvwb<&mo0_!cRS0Mb9~uqIB&PJdpT#fGj=<# zm$P~~rMC2#n~o{vrQIfn=H;YS)6UM zINM}#w#njblf~I4i?fZ)T+YkotX$5?<&0d;$K`BX&c)?ST+YMgEL_gP`cS)^@b-HKYJZRFc>wk_w{a;7ck*>aXG=h(8%a(*pm*K%$xXV!9FEoaqoPAzBD zaz3qdx`(q#zoS@(m@)%F*#w}5>G>?vSB0ecD9N5CEe_7AXkfPDk(8Q|O_&OGA0 zBlZZeKY+af>pE&M`qn$624XFPVkV`n>du4899 zcAjHrIXj0xJ?AF%oSURa zPf3rSQg2zR-f~jC<)nJcN%fYK>Ln-DLrzM^o|29|B^`T8I`))w>?!HkQ_``g)GJP^ zSDaL@IH_K7QoZ7&dc{fgij(RUC)F!Xs#ly;uQ;h*aZny#F)Z+}j&d=-Yyw1(* z%)HLa>#V%a$?J@~&d2L)yw1hzOuWv+>nyy^!RrjX&cEyIyUxAq%)8FJ>#V!Zx$BI( z&bRAqyZ@NIbaq|m)^%oG=hbyqUFXzwMqTIAbv9k+(sd?X=h1Z*UFXns23_aRb@p86 z&UNNo=goE2T<6Sn#$4yib+%mR%5|n(=gD=JT<6GjhTOxF!`X48Hg&8R-6*XZE3FzU zyZW%$-6-uEt69t(y}3C@vzRQ+VzM-g$x^SLuUQ@iWTx3;~`dh49G|1ul=e`l-z zf0(V_qmguudZpgW*I#FSbymib&gkOcy)ePXLogOS7&y0 zURP&zbxv1jbag&gXLEHfS7&l{6njUPcMexaMR)#IXK!`xR%dQ?-d1OAbpgRb&ghNXmx&8XJ>V8R%d2)URGyibxu}iWOY7PXJd6PR%c>$9#&^z zbq-c%V0HdgXJ2*hRcBsx-c@H^bgaAb&geMSpBy(2T|4$ zJ%ey8HAhl&95qK#a||^{P;>k=M^AI^Q)fQ)8~%=(=9p=Ym=?9d`(%apNeAXi2j)r# z^t3`BM@aLV{Em+1*l3Q7=D28%isqPTj)>-XXpV;FSZKMrr{kbG3Yue}IRcvFpE>%O zW1l(lnd6>0>X~DnIpUe)ojKZ>W1TtDnd6)}%GqXp9O2CI%^cm#vCSOW%yG>e)yy%? z9MR12%pA?kZ{7Qyd&e#~gReQOB-O3++&gq^Ly>sWlF%H4bS!JfxO5Bu14BM&J8wc)ttpH{tyr zyx)TNJMex3-tWKr?RUTX?l<54-n-v=_dD-?>;7+ZH}T)k>bAeu@juo& z{>Q`uaV#lEl5&JL$7gfYGe?ke{3ypeb5u6RWOGEefB7#5$!;hsr9RGoIY2WhX9jfU zOXt0G)=THSbjC~PyL7%v=el%GG3U8-mdjQhI~!lJYJWtvKcZcTBbt{rYCd*SwLYR+ zA0bMLqn0^lnd754I*Ox}IWmglqBtswW1?Io`{Rfrjwj-1B90v5h#`);;g}naxZ!vk zj<(@g8;-OQQJ;5|4aeAUgbl~naC8kv)o@G=N7QgU4M)>(EDguXaEuH`$Z$*y#Y6d5 zsr$c9DgW}e{Fnc7#HTHPyJqoo^qH%Vb3rcB$9W)M(C0;cUef1feO}S$RehZK@il#% z_0c&Wo$=B69$(kTxgMSA(Rm)7Wpf2MzuPl@#6!HA0KG^_(0>w2O2*<(D?Cz#*YtF<1?!9 z8P)iVYJ5gDKBF3+QH{^2#%EOHGpg|!)%c8Rd`2}sqZ*%4jnAmYXH?@esr=1t z9AV7y#T;GCvBex&%yGpWRm?HPl2!AMRP!UM`4QFpBh~yP)$k+L@FUgmBh~OD)$k+L z@FUgmBbEA*N;#rZj;Iv9+oON~f203BtVetQ?>Flgbj7Uy+Z@w=|Mmp_{XVn%{e9x~ z`&+aBtG~ZL-VuW|?qq4a$+kF23*r@cmd2kfjXzl$f3h_GWNG}# z()g1lACK!a24(%9_RgNAVITm*xriv#(V>%rgD7-z>eRuHNx{iga1u))O4CUv2f;re z4kG>lhk%Qli;Ihk&f>3d?(<%oDmYX_)l2URIoi_Xa(8LI-Z#&S4`Y#I56c+YlHA>L zN7u%%$8^sl;Lo*UXzBQ=+hI(@miB|JD&|}G~D+T`e=9`{oH%w<{UxaDx<#T z-aoYXJ#t^>EU${;%LwIn>&vH+6d$4Tw%MPny6?NQi*E<>D76VHbArm8;GRhF)HdN)PFI(lZq4tnWonaZjYE z(+TQyf;yd`PRn7Q;-*M(Q=}u(jEna~I3p_K8PVT5e#W^rcQpog*UVqd!rzvc|G7zj z$IjoDmw&5u_b3qh_V=DrcX!nN-Iw@t1#WO{PvYjT;O5TRR$^C)T(yK(QpBp9R`r!t zwQlKD8*r&|D%JLYMzsS0ss#f|bVIQXJC^r!4Dsm%{*>rcr_h+rU@nQabPkE?0%p@C zoT@8)M%N^V^E6L%1B>d`@|#3*x+C5AUQ{MXP7e^O9^p|v;YNCaKSko4WkHeZgwvcf z7l=;eQb4(ShXCK>3Dv3lGf!x4zz~{%5ESz%X9_`9hXDowOq`@>!Irhw{@!l1Y|DDP zbI^_&wp{CzhCZl6s?FFs#Wd1;5yhrqhgJLER&7lNDp>Eg4Sul_RYbfJ>q?xfoNxu# z%0LAZzbJ-CHUqCKjyBB{TOwh-Lcw|yJ&Sn_6tS3c7G@c* EE{KhEV*mgE literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Regular.ttf b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/Lato-Regular.ttf new file mode 100644 index 0000000000000000000000000000000000000000..04ea8efb1367727b081dea87e63818be0a4d02f0 GIT binary patch literal 120196 zcmeFacYIvMxj#H}%I>PIv|UlIRhK2%mSx$NTqXBzV;eB0g8|2YX%5%~ z98*FIA)MyCx4Kg#`xi<80&wcXUWp`Wuak} z@z-_$%)DqxS>=B{^3YaXKLGf#^*hJ+488W*|A#TdDpdIP`t$aC4gW~L2QN5)=b=q| zHt*cKVsDtSq)x#6dh__cJxZw%LcKm9`?)Bq6 z*B?&A`_VqBWas#SJ(Ah@FO)xw^4?wJJ2yVNAb%m_`;IeaId9MIeft~#zS_a~RcVaL zx9{1zanF6mPrFc_-ro<*ps4#)$uDmB%i7fD_gIGU`?$kixn<2BaegCo)l_HX7Sq$l zQv6O}65Yi=lrugVS%zEEROeKO>1k1u_Dlo7I|1fkS1==6hp~{DpOvx(JiO8HYy9F& zR;>I+rZT1;Q0;(C*Us`Y>;V6pNtRMoNs<&*iU6QJFXmNwK%pJa#^o>2^-?yVaKHr zb~TPZ*~`Z8Yy(Drjr62Ak4V3p`Wx;w<9G$f792Zp6hzN-y$c7GJI4RXE~A64aomdI zk8&3C8+Nc|>L5#0&Fm3%1zVy1l0Bjv!Lb9spTqBW*dx*=_NshyW%to)9dlsDNj^y8@X$EiQyyaMk( zDFe5tJ1GAh^{ipX<@;D4&b>-H>yz$gZaKm#l@WF`hV}}6dg@!ae;n8M8Md*T={}BL zWe{hSk%R1Jc>`;ae#c61|DXawQcp9p{4UGFwOPJ{b>qDyINruFg7@#&agXaGII3|R z!XaSfKeD}On;CuUlpbcQ>0xQT!&!{_h~FJ4)KS?rv3%|--h$6IDVlF zu>tf~8wVPT_yc&s?=X&oGY*V}7&Dxy-}HX!t9akN=qrsq##m{=I9$PMsedScv*||k z?`6EBmo?Hj6RnAJl(uAyFVWbHGk6L3A{wK^j>C)N2^@6)Y8+M^Yn0bmIo@#x=;{ve zS0j!UbVxs8jX3B`^m<j>M0ghf6SKQdX>5d{TpE| zIEL~2m~xPXaNQ_-r-=6^aL}1}@sBtzV{9s->}PJ}Ugk!dFwRr2;dmF;d)+ zyPU0OyVxZADF)(SY$v;zy$c<51-pvf#{QFim;IW(&3?yz&wj(+VNY{~y}*9R{>I*8 ze_?;+25w}3WEZgCvOlmtvqS7Ub|t%>9bq@H8`(|lDEl@aN3;HF$!Jq24`rUqyzu4dFAMN#i_4O zJu-FM)ZwWMr_P-^XKLkCZ^RL?M+}p>Z@&8G_ul;OoB#RdD{sE==F@LZygC1k*WUQS z>wka!udo09_20ez*6VM+{@UwLy?)p0Cx6!X(>n~Xt3*rxxBvYA`2D|&Uod8gcf*8t zY*S!@4UTLaEuG-F;hlJXa6$>Lm{7V_j`#w;%p)V-iNV1U-$Zyc(>qa5SM{T#-id^+ z@eLCN^fRH$J5f#-N+yhf_6Y+HMn}hlp=0sLgt4ReF;G~?So?%?V;11#5LCCi zskn5)RDzpHW8MzDW{m2_|BFWg-e&v^OjtK&W%_(*c|ysAsd&OvR63DZ;`R2RqdMLK zcQEeW}rODEFic#58{2ZW{MQHeS8ydiIoAOmGv-DAG>Vox#x?{dl#cNY7;m{_ zJQLSrqZodGjpM!GoIv+@eP#glbkmraIz(NlLaPdI0FB}YkWoCL5;0I&lmowja8bLA zzu=S1fNylVMhuCax&u)^p$4Pf2{faZ4smtXz0-dZU?bu#BKxc)3@ER+X7lIIs+yXuXJd10OrHE+d>m&jD6Nw?q`=g%DCM& zkqQ`3$%F-`K*@x)Sg(9WyMiSXw&Ek87b1)!;DNSMsO{5+FvCI+8w;>UusIp%HqCd7A_EnZCF|_l-sy;sw)#&~wmiKlNQ7hCJ%7 zkH(6c6m55`hdI>4F5tl14GE@qD!*jH9;={$eoUmJ-a>JefvX~c7~FQ_M{&u7BL-bU zKLm8CxFYC~xFXQ9k_l%Fw48nj&Ni7|jruGRb(D`^mqAV3Zo|Hy^El&I$ zeM~7ZbPaXlo+1?s0T=!A6l~w8@ZYuUI*LZ9&&cmF7I{#8aOz$48AYA?OXQe<{3#Rv z@rC^B(#!HYs@)JYY%<(#_^xr#c&|w^`As`a#}ljxcO-Tu6(v2Dyeq|!vc{ZielfK- z^;c=;wC1!87Pqy<`YqcgyVZV?{cT6PQ*!QgKHv(vUQRcq-fJeHE`(Hdh|6N~>zFda_!l%+Wt!jFp>6gvYyzsoSd0%fSYI&q}P3zI{w(!r}(%Me7o7?xaKhg2?uKMnGdmiX{ zqUZUZ@AUkn=T|-N_D=Mz=-bq{x9^g^BYn5_-QD*{-!uIi`uFr-)PK1DSpTX1hx=b0 zcxvG51K%I``M^5^e_OC?Vei7>g<}hMEIhFA(83!Bf4TVmA;XY$$TL(lR6Eo@v~Xy} z5^0HfiF-+KN#&B3C4EaC9=>(>?%_vJaEdBAa_eaJ?c8nYty?w<`SK3z| zSo!wKzpRX`9$OPxo4D4w*1tBiwsCFu+M%^;)^1yS-r6h1YR4`a`_9;F>Yo+r<#-)rA{YVR-iJ&b{K?ub%tM^Lo$Qa^8*SegAyx z`76#pdj3xitUB<-fp_5#B9UtOg~~ zSlmCcc5o!z!8n3!9wtj%l6fWLio}(2kewtmiNiUBi)m6+x=KheAoj=%hNK*3G8yUG zXiPSG6EgcJcA%=ZxvMh3H#H+p24$&+seAeHLFGj`uSfIv0gnH_tEhl-8C9 z6wAS6#a&ug?w#LISYMEpl##r?rQBJNZLwq*ILliicgf#9U0ErwKYgcit}~cz34~YH z*9|rm2lHH8&-GUo7laxMs+z4%tMl{+Wnqh_(B&%dSXz~P-``xTQgl^fKb`tB{~^XK zh56VeVKZZ%EV~uIQj7*wAE!(}!b{3kVA28q5(W$Smt`xgk0|~#@C?G zB!?vxcM=VXA=X!WaspSNsXf#g>a{8>GWyNXmHvr$Kx_Fi5b;Pr1vDrW$VEB&&!=RD zO9dpl=m82u3?`uBED^=CAfb~APz8Wjqew8CIY^?6TYQ$-C9g`8vvS zy#5()AmIHB_fKC@UuzMUUyQ!Cuy)=M2JN@EgonOpS!mzt9$B`rn9uqfz#Fo7G5Nja%Wl8OK>%S|*%27@_=aFfiuYIO9A0c9{& z(?fz(;8jb(Srt){R3-?9kXWx35y+}JvmnP9umDv-t;iJ(qAQ;vGd#wO3C3!cU`VJY zih~TP#1L0OO{ON9QYp-ZaFm*u#3|s#L~B5l<`fR<4zT1jo+2lw5S=Pa<``RgXr{Md zc7uVkSrm7%c;EY>TuMvbm68+z< z&v9mbB-Xn=Vf#2!IrK%|bVD7A7bLUjlhz|s=OCq+qEeTG=qBpT)vEUyH40HfJRg)m zg34us*n-e%^!w4QF1%m&0CK*7u((D!p4CLU+;B$x|;Xhzdc#XbhPv1dEsRh{ zfyp2Fn+MB0ZENRwl9R^!hmy>}ijYaNIck<(K0g229bL+eHqXl`Lyhg844=;!$#PZ? zUASt+$pig{30t;wRb_8=FfC#>lyX0?J4+5U zIU&-(RW(_~(DYCEQLg%<%K@GW8)y^^2CE@PbM<<_oxI~NR>V>MN#x=k}4G4F|%Bm1Ys^O#R07wGSmEI5Pj?V;Y5&{QwLNr5kL^Ndt zwUD{s0JT(Awn&1sG&=eSNa>~O<@;MZ_bn?gU$(Eaj@NXJ(euxgtxt zEG0YrvJZZnm}NVp)>JRwHx0gjS^1IK;7aT8RV&NOS6(%|?CMqJ<*Tk<*1oFA?QUAt z-nOzKBcov@Ki^_||4>RA9~wSHfQN>cT|&RjVp0BAL{B_KK)6pdXEdM2k=j zsK#K3R^uR18SeggH5e2XTc&H4`=5(Z(Q@W*9bY|eeJk4L_5cHXpdTkYm!tGh4WHtbn&^TPR;t*!gut+w@@ zfuT@hV}jEe_M1m9Wxe-AZvLkmmr`K{L@HUo-{I`PwJkhpKx7K36= zTGYR_&Esj?+P^5toVazTbncHMJHMQiW-?oi<@Kj|_wZv++EVeFiv7QQ z>zxY@{^nP|+*gj*n9`EI%qi!9voU$C^ql%j%&u(__$+7T=`MlK4A8W{w6Gx8o0Dlv zg9&9+UOE@IVu@p{reDNGWsG5KR;vHoB60#W#dNQD>)xcJMT`g#?jMurGt`MKc zt6(j)@K&fuP^X9IaOz>cGn?~us?qLyxa8s7JbS?Ug_17>oC(Geb5f=S_bfiE)n~y? zYZd|=YrkRhr)AjJ_iu2>Qd089{tb4oHP8O?Hwtr7ok_Tzlq^X}Nw}ZnO!MWxEZVmL zGsu4BDCR294I|$L=cL306C536aKOxk%puD(54s7~4>|>&gXK?Rh6PDsNrVlFPQtj4 z!9@*8GAV(NIpI}}?tBiPC1CN@_$<=3{I}hiTs%l zVs6jF)`kt483skt>E4>kx$wq_qB&2danT&$Sx-{Mh-GTvVo<~oiDEQlQJ1SO&d)Lu z)z!7gbtEX(SaM3-p0b=YcX>~#C&iqY>Vu=jkpqz|4N3PvXyt_sj8- z=(~+A2^+|^i1i)TJJmw{wsNl&?RVT=2i=Xni{z#bPNjUZP_gm-rEZSQb|!b7={xeN zzfIjI{at+lv4qmFA;G9fqD|L>R+6d7HFyCy1n*9yj#cBu#S)FTOW1s55Z-03%kGy( zQ_6k)j(}hNFRvepf;CV5Ss8#HB>U?8aH4KaDf(!;qm~ou7b*_56E|8lFN$;#vbd&g z7Bai&xr1EQurK}*JOZIfq9AnAoo>4%R0D_EVHLJ4x6U>^l!3+9eQoEiuUt1cc->ca z?flwxi=VDreXza#;HtX1RdilmCw=F+$p1VsGV%nsJ@*{9e`#doOOZc3ckdgAo0<;4 zaqqpa)A@Bm)+=x&a@0G}iT?;ETP-6fNC{T^6d379Iss=|4T{IUQ(wD&D(*>x0axTlx04Dv*yQ-%m(d2cj zNygRY!3#gDJ_u`J&EVmS&z%>!Bq_z8xnrKKz{3Btar=(lt*vWYa=Z--%d+7%r>(nf zQw`yB$JDz@2>9%y2qb46ZA}doNaljhjs5-S^apbm->_%pv(u#K6D?G8A*N1t`?Vt7Kvq zpM1@K+3b(qIeC>mTd_({-*>01PW}TduWm|nMy}x(xGXE>J0s7!o4u1w8lB4#;3mZ0 z45x)k3-fcb-H7O!NNMU6-b4YBl440#og7q+hz{a9vOY~Vx3l{9|>D|Aiv}ABkNALc{#qzF(ouA#b{-H~HyDt6Go;9x>2mXHikblAVMvj@&k;Gy`8&wvDVLoUN(Q^fBAU4(1@fK){6%B*MutTNXD_ z1vwK$oroI4wt}w*Q;Xs=R1TV3izGrTBw7lOpje3i z;>yRDffa|*ul)#ckS1h*TseAYR4c2(;V0iqk0=p(G*ytVi~eZ9z&7i*)Uo}s%ers8 z`kZ|&dq2Bw{M6o-{d=yyvFFmqws-GdP*|~KM^n>|B^8AWc6WELZ^`ntjfcbIZN99Q z^=S>;Zd-HY@nF&Y`xhPA)Y!P`$fEuC7X=?bvgWpJ4M+2P);ITUZO_SR-`dx_z9(Or zDDGKRQ905c47QI{R;=p59JPeZMW)n7$Kp=nwQ}h03>SC}_@CyrY$5d#9093->wx|k z>%d$VhLFx{{wOSDxkB0!`eC}1B*Ffn*_tR27!oG^G$dL>`V|%>Ma89@y5} zxxFt~wr~?T1-QEm{?i5WPlZo$e3nm<3;J^dNl_7RCbk3foJK5?YtdcFSh}p6#Z|31|9kzyxi&%tq{sTM(17QQXT22Zv@h zR1Zh2=9p|qvqxI(r5PEecK(7r?ezQ7%lxKGEg6ZwN=h}TX^C$oy3;P>H*0ixEB~_m zXZd8juXd3COLwRbF}eb96{8*YF=- zBLM%1_Wo6GFBVQE71xpbkp~@sz)~K?oVeqUY1GQ%jErJxb(*aH?y@vD+L)$d&hl4@ z8J0^UyZf}Z`ltRZ{S)%106FI`hs_OjWu^IfelO)N#H3FZ*>`s6VEAKTD6mT`e?gP` zs0va@AvuF-BMKnXBpIoIinA952ZQy5e9{XdWDGm1@ne-y$yXssrM;9+QTu6DE&>z+ zk`Xl5Ok^WyGY-0w;LqtF-Q2wBnsxQ1T|+%piuGV}Y1g8zQh(#3(s|39^O7^npPo%) zYDRW-fh#n8pnqW3l6keYz7zK)6}2@qbd59@cUQPQxgOUCr)JZd#FkB23|Zi z0gjsq4x34{yRf80N(3sC6EHYQ5;Ksu3>9s}j4F_%st7wEi-b--a^k*;dY4D*P597y z6SR7Hg3QEh&PP_CkQpBNWHqCy319`NG$hS_Sj)9klRQNKrz8C2;K>Gk+DIQ~hu!MI zTqOd@Rh2p1palH6L7Hn)pu7|s`8+78I-AH)aoC;84GY($G#*~qJkpficG=f1?$}tm z+GfoubXAOWeKmD&8j{kOPYO*6SV|(OJU-&}g$3MHcZo_pCzr17B z#GQxM*38>}Q$)&XZK|*gm$&cu^3?+e?3K&f zcz#0brbAu5%fV?9<_DNMANFPn!e3ttCnKzsoRnZdtTq-|%C^#EKcXkVEhq%Z0kWK= zXENx5Tn9qVNA)x$I5IwWp&(il0pSrv05Q2q&LUV3HA8OEiNZ;tI8b722#rd#w`%SJ z(P)y7CUaz;$U5Lva0_X0jq3bc-ConxlNVoY^k>{E&HF~=X36ynCz4na-FD;%+-J>F zPn^C`>Zx5^*yTo)2dh_@atb)H!>TP}Plufj2V+GAey=0P;YoMmzD?$0u8s6uNis#1 zfFC1-nr_abbGc}5Y%bNnMbufhW{aX_fPCa?3Ar_0S~Jk81hgP**{Tl(hFMQ+87m~r zdd;6fJWaQ+qJaz~#|VQp7|7Eve2?&NANtybO}>teop+wzS`H|f4%GyiLBjvLK zbCe0t0U`FEVXV|8-#XnXP-Ww-U>f*bBHF@!=TAztO`TS z+iAC15)jRa`Gs*YZ{asb2@uIfI*ZO3^M;T3iDKRme=sL16{i;Lrt20-J-q3e$mx@l z??~w2+#4TscD-nO?0TP-B&MP^!m|qe}5TcV19kXKF0h(N5bO3s~9Hr(6P=vQ( zSC*UwN&z8)mvm?y?WwgB=>m4brRjczv(_DuxrC< zxRbzQGi5Ow2toR|9#P9^0$%hec{(*P3pY_Cj#*tvm1)fKVLr(CG2!3)NXN(`*?nqZcf>;Oj^F7F_rI^-0bgJ8yQT?V9{)eq+8( zaQMC4{KB@3vW}vW%p`L`o_o9j#5*^(qS@8FE?$ z>;9#C=5y4VOY|T(T#L|x%s|qD#G}ewt11eL2aG0Yi-jN-S{Zs5(v-|8@-+kts>EBl zf)NFEk?-Y0JQguo=o?FwTL04N(=WXwD=$gcP3}jM>E+U;pp92S%E!<@nJtdZZ)$#G zG6)v5FCtmfvy&ht@tSB9%Y`cFf1+;f0iB|=lX!gBcl`t*ra9Eow+c)>* zy}`w_dA{wi?(ww3l`N$^`a{*QS%K1S!)Bo)(^nPygbw{2ftH>oa zK45d((o7Lck}boRKJvl~avp*}Ss9MW+g#qngxt)@QA1){g4B>~NmeKK2;vd)TmCt& zRkk5)5(y40mOW#`@Cr&rU&*vUAVX(9JVH2HjDUEg2>?+ThF)My3i6pg&*kwU5B zd!!wwUw!eOd#Dkj4Tj5c8DP(clf9noET@gE@|Z=QMcNP}sENr+;!v9F6%EqI&vPaW zz;X#n#8$M?D>wrR$j2yBl~Hgy)7X^(l+0XxijRB&8gCjvQk$flsR;g134P=c_W(VM zv4e!5*&58>`13goQj!?3qPV=<>_|*>n)$C&vfMX3BuNoRMrl@QMkG;|AG*PvmBRld z8PaPqv#Q+kIj+R_H!InW@{H4$m6pm^x+@(YyrrHS^9(`-szM!Eg8O!OhKRa1Xfe*sS+b?wb|hyvX-xWf!}}l z+lSh^uld&HZ@<0d(q$zNe*SGKeexakMC<;0H*UD^K*#MRi*~ht>UN@CjBDg42Fhp1 zLblll;pEcdfG@+9nqtyclu+JzFbR^AxDYL?iM9pQDFSBEj>1zSFVhhZ9ShaY03@B8 z#soBJy^miv1>S7*ko*A|k1_lPKOhf~+(!EH~9tnrIbsvE!FuA zct8}Rs)Ck*7YY@`&AL~dy(sNjL52#6g=j%-w!QIVmHCiab}fb&4Fn*9NOoLMU*n(& zgpfg-O+<+Cx&(WgrL=3jt8GJvziIr!%P$;n3Sap6-fMroxZdP4J8Bp2Thg_ozo2Oh zkH(ss_Iz&pftUM~r&Ck?h5kVE;v1ea2g4hSj1q!^$mCPb*=f2hIM9a->H}wXn>pENU>Q7Px({U6kPVC1#VA6z%^Y}$B)7PS z7gQBrZLY^s~|H#;aaf zbjxdp4!w44(F;}M*Wcc}k+z=z(C8INV`Du%}*=An(4BffO> zG4;ns_rcdfIqE%9V3Z>#4Z|lFM@`Z*`bJ%K#`TnourUvq?{fPMyug%VFq#wiVnZOK z-VN7qk=1NSH1R?;ka1h2?UBf*VVNhWky{=SxX8+E@%vld@~fE5;Z&QvMDcWwN`&iJ2Le)RZJxBl;*i%!1H7+Axzz8aK|axQ9gTQHxa{ zYv1%^jaaFYD4b5y1%LtJBM=4dCOr&h1d)+woXc)a!2Ac06!pOpxG-MzjFAr_`7b!^ zCVn2mq2mdT)TbkP{P)j0Gfa`oj7gCr2`2jH+QHO2v zduDR%LGQ}1fD1djG;FeCwh-%7Vwgw<La`3)4JBkQRs|;~k=TuKKqiJ4qEQ#QR7hB=IxzD+JU4gT!)dp@}S3iRO>(Fe?y1MP`MRgv`Ba)@uyen+A5roucFN!-XD69H$eAVPSJrX!;kAu?>a!GMP3 zQs-cA>&t8Bee4R*wq#KYY9O}}-jtrGjL7$ytw7=`(n1AKz_8NV1N%L`3OGVYQSP0q zG}4;UTuPTdqZagpVZ%BWpe|{Rp_5qjC?c+u|4MP|=;E~4774hmEvRTJ-PgXct9kdbI%Uy$7x)T&Hgm(`!TJqHmrnlL7O3?8P|2z6EGlTsvjBA% z*W*)vQJmmwC(Gk&!_IUpVadsM<)!E04t5P7X(Hwl$eS(BblcEz;m@)Z%ofDFbvsS{ zk7qu)I5@1C36;{Wl`u17D#C(GSwoBEXBFOWeEfg=>+(wQr6!^)o5-qNr)=gn$fY2 zdK_5K$o&SRMIkmgTkqLAa&$v&^EvlyTKB1{1XGYNUVdd=`MJGEj|bYv)E6f2 zo1FUrj5j}NQ7lZ?hp6K0Z=H7aV(-*ev^RdN zGQvM3{f0ru3?rRr-bje$8NQxaU`%--+TECo*JVmeO%2p8sPEgmAiro}XJ^}ReXiA& zRN4OWuC@0Z=xV*-v3=X_ZI#=Sk~2IRH5-nOth!;m3Mtf>zQu2`6|t=%PDb$Y8Naf$ zmSR7cQ~!`sl!}`i&z?f0X-Qe-GfKk9$HEUyC=;WQD2!ukl+!t-Z0>RZX5cizESgtJ zePF~ajUQS9{37FhoD_R-`js={N3f<;Fnxh%G1K>!93(a6y%i#OS9Z|k!=64KWr_H1=uwc!fTUe?))@s}i(zG=g_x zYRm=U<%8Ig0xNId(~3m-HB$NT{@#x9?lOxrxze|4>z=x;k6zx}c5q_v<;Sd2zQ28~ zqR!j*;EtlKv7>9ta&o~y1x-O)&!=9wa@$kaEV%O1hgvrG7ZM+FtU+MXG4&DV;dvt8 zz{4=NlIeC>DV`uAd6gKCVwfnfjzGwm>>z`Q>;MsLLM3pvu}+e}gC;Euc>v=1&(uyI@sAt_S0a5_qaACgUhbQ8f*YCyGje>FGl8OY%rs(aR|k z*f3oR9Vb6ztWra;=9xW?%u^LBFB|M^ zRJb=gC)8h?&GRC^kXNUu4*UFd%dc5oZXdOq(rZWBR$qSl6s*z8$Sv~gih(s?$Klm{ zES$AyA!o~%E?m86bzg6|g`(YQX0)e)HzbiaKr5`fOx$Ryv|#CITalz}0L}!eI zFjR>oMnSNgBP-ivB6dM)A+bv=4Z*4HWiTI=_0Fyg@F-)doV(Hwt&hh2jK+O99l1rDCJhpYmqE9u#=zF+pN!`Yy%O)?BuG)9$K-;8~-hTz&a+&%# z*viFTqzHiBnrOl=^j$>(t%C1_DM1r!#1nA~+8+9A>C__{nII*au7iA!bY9R0*BLVhLfX0Rc8W78_kD z!ABnZsUv_5&`JY#d!Q5>p#>cBd#97+_jpU}UKu?rLsd+g`c~waz=@p|a849OYatM+ zvRgn?f}#j3*zOBrp6o5nU_|Z{rU)g-B(#kB%HaM8+lR!^8PFi9xuFT6foRmjZnniPExok>Mkp7{>Srx4p_h$Yn8tP7Q* z=+KOj5S!4<%!xrtK?pjUf|&gwyE~1CQ#~1XN3JzzTCCYA{JK-l9CPIHRF9|farK4M zcP3f*a;!z!XK^Pc=h!337Aya(BPEgrl;a;~_ug+P)H93vea z7|#J3%^c8N6b%?t6jU>jLP!UOEeL{RfwL6?YK5#1Qvo9dLR6!SS5wYe6#@W8DvSea z9cmsHC9=%P86`bLn|Z=+pmS_1EJOt0i&9Jg6B^nsno%u)6y@j@>4R;-#FYALS8cvD z%h9!LymIj3<)O#6tS?#A9C&Qqn)Y+besu&mTDd zg~NTP4}ANHFTGN|?uHdBj*e3noy2aAJgB51K1^}Mb7#d7Mf54U0)w<~DATQCdA4!5W}4AA&ZYkB1T9;BrmQG(s$v886~1(D83|uk}`!8i5XA< zrH}||M6;yA`?JMliMB?U=3Fc@ql+X*Qrqs|DWWBN?%A~Fsw!>~!IIwVDY}S#u?O-F zEE?;$k^&~zFK%gwgq82kiZ6l(A`i;nh>rDnv&MRM%y?#eD=tW^1-Epjh|6sfV?85w zbhc91Of!}dCB_=1WIdKf!CMF>JrXO;c%NP}HrDYaKdcO-5n*07Ym*hkp%fX5y%n4Q zK}jwyjSmeF%ZsBOux&Il7ApZb+D!xEBvup!KvHB=Q!P{n$cs+Xp=7cdW`@SF+>Or+ zjeX;>@I71gz}UJ^)g~tfBllA*`8+K&CcpRo6a0VrR_Nie?(m|#)7MjUEL<0jjtPAs zy)VZ47eZe+8MrykOctGxbu?POWN2)M0e+7}X{;o?b)^C3#!g1Mz@w#CIv~iI*8WtY zTeI|sR)*M~&^u?DcvYeRJ@Bd^eF(QTbG~9)J;W4Bv{=j;)8g|q52mSOvDKjFjcv+y zD#_I+HWzhfyNv1P#_H7<7s>BAGf!?i-)6Zg!?t7dB)ATH4GE zlOc*J@(rq*Iajlhm>VB=hsKJ}lY)GSr8~vvNu9mubnrY@Fq$XzvC4c%o|M?z^<$<< zNk2}`NDbBvRG0QvWtR4>S-+;Qv~u0i)!QC!E;2c-)`Et`^QsqCXO#A>UB9-kl=jx# z@YzOrq0^a(?Ye7n@~eZ{zJliE^SaMpUfEUKnPSfJXJv+({Y7>8+1|pIm2HjN7nirz zfnb2^608|`Mr~m}zKGVpWM^WIgSOd9!OW+R`$T-5qJvdfUMlAxkBp*&GO|m^-p2}B za2GKs`Ncv?z{3}TTWmU}3x$fa6h#n@bBrq36QUxnpiZ)%tRPk%P(iXo8$Zq)k!(cL zBKBr#fe%5cF!uAF(Nj**D{R$Dt8}nV4{44dG;&bj?aWbyzCEjo-JrE8^*XWhvsgoA z7pohzi4*>f1D796bKX}dIV~$_PwtkAtU`~&WKOCMU6FS6CDIO?y~n{DQf-lYE}uLV zZb`MKT9y`9h;cgz9{C2o!Qf*5)a_4e8s&Ve^0fVF#`*`i=a8h)cm+9B(X1L>miT4? z!Eq#YKmr1=ZDjpj5S6Ku`*V8(f!Bwz^9D)mqDKd|ofOX1{DiQk)(Ju~Ml-xZg0 zMv;M;IcM>YXXc#I`gX@0kCDEijdF(m5Y50Qq|hZ=&RQ{&2YvJmqfSfykZuH>j5Lqg zNof?U5?N_BE$c|I2|T#?pB%}!lnR3NFEUn8n6GnYsV|z$s>z=8V>QFJ!0uLmkYq8b zX$dc@S+=VqPhIa$eAASus)?qzk~~*Oan|AYcjQVprrPbPlY0W4K3{K+hC#pdMOT^2 zRqmP`@(X%E-l+U4=pmCmG)I1#%Wg(68%!lK)XYetoIw>CGal>A7MG70hzB@pmRga3 z`owu^Hf%jlaS<&~4Prnf&+tnlpZ~nmZu)0}<)?}E)O)c$b^Yg&r8Z?W{~^(3|15Gh z{%B5#9Lmb#VY4NYHTfrOLwS9+D{{ZcQ8U9veHZv}vJ1l|RD&cnkqtw3qTP)ArD%#8 z7)02RL>#1{^=G7GkT3&c=CQ0y>vTCm9E>u8oOJW7`Dru-V>=^5jX#@^nRV#t$eP<- zZUawENKq+c(P+rF9F6?Qp3ZNUpK+NduW**QTqQ2);xq@^i1u`2jF+NMskEY)R{m3t zS}X^VRuoTbG=hgDoUz6z9h8oc7+h&`BBIZ=3^iZ;BWN~?hv^^$sVAt>zEdJW4Y`HB z8lSw>oHY4!sc=$FNtW^_-;mywAG8I`lfi5IQUYnx8`p_SN+NH-ww+{Q)+6@kFHc8| zpVn$Y;)g48!D$pVhg^l&MAPs(__cJU%(c;nfw&K@YYlm@+SG6pCP8SKl9>6R$rGbT z>_(669hxw!k_~3m0Ke4T(b1h|ODkM*;ZRLhvVFm**=lwc*7wuV06Tza4py??HcM)*QEXk|+;SkGehQGxmQVJZ59A5O~B81G55q(DKNG(J+d)ATUK}g)c!TAK{U9 zN+W!UJ&b{>7)I-~t)CGh09vu;R^Rvu7_D+3%l01Nr)cQIkvLQYAVN5Q5NKLYI4m2q zTQ@8hILr%I6Ar7|f&z!jHd^hALWIK&>(*6<2e&WQ`n;c?RIDKDOwbPYCrEc%k$RhG zLYOX-XJQUGT*_e3A!%4rY7laZMvmZ7Ve%1O$1N}?`b<0;?K4zwRdkwx?E64;szLfk z+kAdwUe~5@^`^DUaUX^9T7r0nu5Z+x8!%}l4 zs!3rgfiNp6u%XB>MrjQftqOrBuB8CtO?HDw-b?zoE5p}1W>-cs{eP`xSbp4|{oCZ$ik74#OM1F-(xBw{vl5K0y?w?n;+q@4zWaHX z^iM;>`om~0<(e{OrTPGC;bmca%e>lZvDXyl1MJqM1VxJNHb_Yja$T{6~yM2EYge=4}9Q-@F2dBr6-xy%~1i~AB`l>s47+*-^J2hu<$1+ZZu*TXf9uC1)azd z>;2FwfDMyMDfCcp7*I_>Bb(*Ss>mS|x{h+3qe4pC!zA_z1d+WRK+=E#JIz<&jJyFK z?Q&}gRC}|puHAL-u7ww@=}PZSbR?QHlI(?5?WL__VK0B$e#2liS!M$EH`Adz9yhvtml`R&yh;Y4zVQz1i9&cZVjjVY5hN?IAx@}Xf3oAvXnECTSIcJ7>V65mC#q(%9#Wz zCXiJm9Ajo1^n~uxvRT0my7LErux}OQ7Gyv68-f*7Sz?s* zeP^1^us-QO#6Mww*7$Dbm60u>$d#A3HuTk&E7v5K}+rsAV z&eGz7pf6`eXmI^wI?4#ikEsV6ECw~22+wP0&jk*p+FM1zFo z3u>||7H!(PX;H<(;fj{Z@f%hlP*`YkS*!((OIs@!)n-)=ZP~SDsB+or%GPMGaPrID zI}f$gmV2tZ7Y!G**D8Oe;9*8leNM2UtTMe9R3v#U1oC2q-&}-$JX|p<4p~q^a?;hf#6>0*$eu!TME>{u3 z717ra<9|b9vd*c$sQ-dK4q^BBb$mtGxpwuE#a$hBHMHMzmfL|99f~BrU`e)JkBeik zZH_r8I2cG^5}!)bw*P`*hcG_%24rN?$VmU}lL0y!AD<*@1Z!$vu_QtEzfqlI`lFa# zXKx)oj42tAJR_#!&uC|?ZKw<%#$5Ps*MpB^65HtYQJ3lCn8f$mbi(X}bL3`{PZ|xa zYoEQE-l7m&l!X-NBWzhH^pV)IOfi^}4A|ajUc-I+*WI&h>vkM(2&rkw=A6ob zCTvSxjBRpT@M+k*(?iv3ufF@4jT@i6`|7pTbp7ncjnB~ahLWMZ*WEpG=r^BVUpln! zx_d?rz5UQS{yo)bFofIZcOHCT!^Q_M=;*9#GbDqxO0mu5f(wRJUUr(TEM@>M= zYi+h-0yeRzBIIu#u8RCP7}zRVGGV|WNC-cUU5-4nyO9l7$P&T^SD|E=u;*=!P5ZzT zB5xvwNhzpv-aPWJMzcBbvu1N@%4bzItFdg>Z^_`|S7jNUDVDUz2k9whXXFEu)s&Tz z#jiTc1ELe`!^@lGccr%=K!#@Q;X{%q8(LT5NC-#NkrXTS1L8!>xxt;h%$>YDwZeZNPE$T3FCVD<@K_Yl&_gmhtr#0D*o14_sOhVaxaS$$m_5&Hi@ zEtr1RSI0HaZVQwG=v$NHbF?bf64XJi7U{dLPg=)Z_BrHkzg7>@rxa|Fh!_E3ryLlV zyF~^KPcTrSL}yw1By=@{KepfNoWfKk`;oq9N_LD3pFE{ty}ols2=TDaPbNU$zJq%o zzHj?BOGeVKj``BQosi)k++Vk#%wa3;u0AAv=M%`zHzOzIi!MI6=1@kW#~yhsgNIVg zdmROh!91);0#dM{g7Q6SNbQ6c|M=gYvP&(KFRGpA6906|`O>S9%d{WSl3Df*QJ4!b z!g(SIsS{(&)csIzOEYz&&Z?Hi9+GBzR^62&=XZ6TKT@fmFZI;UFDmM-^>}J~i;Cvg zdXz04=Pj?STz+0h`?<@js+OPIhPydA1l3oUlT$|YGAsn}l#S%wr7 zpSdfgh$|4ShG3$=D$^`@L=z}B1xbRXGjP30u)vEa!2*wkF`C}1g?|;dQ`W~UXb>u2 zOqmJ?#X`~YxNo3Ew##2V-L5_1NpEF=KWs%vU8tLn;&%xRdW*tSj3_ON`BGz2`% zV~^1{jcTjQLq&xJVprNUGn>cfi4pAwHrg8KW6W@b?Z};m#em6>_-`7`{UIVwK2t8p z8q+%DvHm-CfQ(QH;&Ei|Bg{Z2MB!qXi+*~7>^t%8mYH85f+sWsi85bTHPqxizrCxd zYh`)E@Vw&Gx>R#^lELaJ_U4p%(=7RIWy^aS%gY;*Y4Li3+F>kd8#ZjruIenftkkx! zrEa((JENkvEZyKr!A`XHoC1fZILo}8H&<6ymldR8Q~u#LFM{1BH8lCpC@aQ^m_$HL$r>*AaVrq{3J!$E0&6$pE$IL#j`d}oIn(`Nyg9;y{ z+%U{hW%E&y1D?&qw|cZ0ei17sZ#pO@+U=k@$pb!|Je0f=_)>V27KkEXIOC+Af}$X5!#Xdjlq5?%6(Xvo&O;I*lmlvtl?D>^vIwzgMd=iu z{B=eGK`>uz&_}5oyky5#J&&N{`sICl@{NYkU?Fk|cI`Z%=MwaGR)va|2P3~N$i>_7 z%A%<{)rmNijomHA&Bm;=z8OiF&4y5<%(P0-JZJ#OCqtYP>){5|dMm zPipTA zk>B6B<-T)UThG03i+bY3`*rHK->;Kb&)a%*@v`eT)}!4Q@vrdvrFYOr=*{Ri7o#(9 z#LqwjjS~nS$QIvhoTbMuauwEka_S4x(+lczJhg=`X>t57JVhNSe<*Sn{}Uo!+3Y3S z|LFf^?#<()I9KRVmuis3P$z<}zyMN=@&g&T`AbrpC-0oIO z2%9AH$CqFH=u&-eojRvZovJ!@stRYq;eJQ7h>Xy#oU8;lRDZlw03DfOn~M20HPuGj z1h*1p$s^$=4u8>BILdo$P`EkX%8>Ww;fY5d(dll&ItBBDz-L|UHQ6$D2G;BRBYlHW zOOM=tGp#&l#`dur*G%-T&YQL@)8qUvTwR|vE@@n1 ztmCVzlNZmMSTH%s6IX1FU+zO+x5#-bdhG*&6YO#72eg7#i1(FbMe86}E(!;4JVZ-} zXwmEuEoe1#YTAq|U&I@F6)qTfRt@kDcZC6F##iNC`8GY0pLFLT*oWV)n6ZGk*A>zF zDOsn#5%GoCxYX#}-_$n`eBS=AX8(+vqvJ|`aQRC&q8^QEd%5k~u&+rti+*z`K0Gre zGb}!wEh!D_LBj`Gs4>H%QP#DEb%**J?iI9_w}V05SO*_t-oNCo)iY9$e}M%&J@c_ z&b8p7Tk>>g1|?fHE;$KP*~z$B0&M|90t^iDIpT|k*BQQNIH_U1AbeQoSZqsz%iIc^ z#K?-9kAe$H^TYGOi_S;{4?3KMSIH_Y6Lb*FWF-o-@1BE>pmt#W;0mT1UQCLz{q{=6)# zJwB5(Gj-rQuV#*M)MiXXQ>Q-N0)3i=(dAO}^{NS`v2^jms`=$*rQVXFf;qFpN8KTP zT3$RikFkk?u{SSav2+T(76K|wOSkOOtyr|-z;HaqQY~m2Iu)E6MAZsTzN<%OiI;=w z^~t$H&cXbkWz3ISw&rihPqPM11FUi~|E%bs!riExaap%D@!&8!21*A>(wDLBgq7Y{iRl!24BVq#tS zMr3qUG&by`IY&pjELRkqtWj8v&T)qfC1e~E!;xNmf(=8xpuvo@wAuwNq~ZPS{{Wfz zc;s%;O5mt+1gRL1Vi3lbQAou*VjS@?`6D?)HbzXW0|6H~pUR|VBFPpS7ullC-S)TA zionhYj_{*K6>Ny6%yP{5D*v_9Gf-4B&Xzwqk5|w|ppxBm2W@uTC^p-DHJfeu1VV$q zYn<7RH0%k(4f~~qf6dI--Yol{Jk+?t?Z55$zj$7JsdiXDVKZh9?88!#177m^#&cD1 zrD$E;%MrR4jRWoi%-=Y~#+DZZpkY0N3$chfgWobZX^TL>7h`2H2Gw?QjtSUK@~-|V zrvmt3N?0D&wP;uW1VJQ$C_jEoGZ>`FoB|UjN9g3Sh)S~{6^=RFgk`PRYK?ZpM8|H+ zTz>P`t6z+kgHs_R2kshqHQLX4Guq6xJD0DxbH%*8xmgb%jh$JMKc{?k+04bd87(#@ zB4Om!XoI*r9QN&c=SQ$IlvE@FfxloFqol_UOaFD~eYd$Y?ERNR>50SAKM19}!qX#X zh0;Cd-Jow9d=v3izr5_HXvfmy^nE zb1wgWzU?!YF3r9C^QU5_jO#RiY5q%HY(`w@A|7-1z~SUHtVF#(Z7~BRA&HFxkLymV z!TBX0?FUoc(tRO^S zsOGdIC>p;TjzLcG@JAP;y-~6Pz$J{la+3qYJ?s9=G zeFEN)EZNwpXk)ao*hn`@dhD=t+F0v-x4AIvecDnh-DRZ@zKDkVJ>`#xHmtcv|2O_1 ze_WMd`*K)%td&0a9@2L?nZNZu8ZX};`~d0qIhnte?m`nq5_eZQ{slHU!N@ZHqbhNN z6(pCEfPhu1w)XqcBI9-(P`5{7x`!Huua{~ch>Hs}fv^Kc=}})}?JJ$u`~K zmOX_*iMYKDfp5IQE&n-NsxIfyg&mjQdM@G@xWnxp?2&02Xfbc(Egkk)+gEjko33-S zJ)F<0+y)YS19si!7N~niiIe>$_vS@nk@=UZGu>CBI%C&BUHQMGrpFFTXI)zFyUqU$ zd!PAR>50SAS;tnoi|LT={l>3w_V>+L!HcZIItT8zjkZNbgj*cAQuH4cxi%OK8h1qXe;) zaYY5wr%p&uO>xHrZnx!07sYAtr{>SinUaaFGA;^kdCWx7qw}r~9F;QMYT^fW=V3cU zNBtbWOZZ)x$0vQxSxnJr)Q3KY3B(x}G*sN{DcagAT2*n)-=Wb^HG|(X8;%IIRwdP9 z@T>MH@ru-ddBgHfnHf1I(SbN|oKM3TB}XBSs?iouhjm9x{r6UF8B?0E@`u}Z>86;w zU#MA|JaOWdQ+I6t^Md7zZQm&GyoqGqh? zc@5)J-??qz?UNm^TyJlgK7+T&-2YG2ms*$b9vRpW-6tS@ED7l2qtdUD>9J;bI`z?d z-)$ZXd!Kq|rMm*@QLv4_SN`S7Ki2f(@6i1<3D|wIuPPCnP|}h-us}E!ms@PKnnjzF zg?9tH{=@GRk<|&EwZ#g@*nIRCL5`}WBekk#2F8P*@-~N;VHeu)D4D>)55ums`O)iF zTxnw_4E(|I&4K^E@=_bqxH$NSh@Fln5R3Xg_uE{zaDLg8Y>vB(YO`7#v)xP|Z({lb z|2*2O4Kp9>2oE?77_?%oiy{(`Q7as=Qbx1KW0rKaFEA_)eg<2OuYyD5nZv�r(aJ zZ33HkgG;a`qEg`DFB$$iS~G&mOkPzQ`iwI*Hi_VuTD%Q52}^*S8tJ0oD`Q)6ne@hV&no+d+meobxEgh>q^H?C1wRm~aOxy}xvhKEZC9|$udEKnE zk`0xM8dlACYViYS9Z!_s^2LJk^$YX!3MS?j&YH92_LVEYbmOd{&F@uHN|qE%FRfWv zw5oDm`O>_J3ktKQue*QUr5yWjx1RVCx@5Kwoz3ky4!vH4gh=B$Dyy?G4Kp zFRGkhGOu9nY}`_xF+Om<>UHLI3G`M)LsP03l-Z&pGgA>ljk$Fc9HUVf$-`@bW&V7( z>2yK$blz%wtSyoUE=`WcWfeGNhyHu0h7N;Bv<{I>|DVbar>WA}%GKy~e{K0NoCp>V zyPjfVLjQ=6uZgYXGuNEA8H;-uL#$))5&o~M6N&{Bv_u;|iBP;58)?9moh`veMqvm* zZ{U#RKZTQrK;V|Ykw6Sbb=gJ??pf8}ptSfmi!&8&^WHK#5tj{DqUVpw1$@QSoosM} zd(*)YdRN;g(xS_eKK9!`i56CQgXD6sLJ|p|Dsvu%SWE<6ku>eW&fW5M8t`6%Gx-1R z7(vJ#8RdrlTTESr5YG2^xxp90nL=!R8YQ~=_`lFPq7$3?uv4r8(a78_hC_aFu}bKu z-{Qb=Q3`3bHqsyfC=UB(y7|5Nn-@=uG%sbA z-xT4f`qH(U7#@Z)dKer_FrmI;qKyGQydq(DVJByr7)_$#!1)&$nZOCFwU1=Q6}eqG zZ4cyz*{F%h$*^3}Jr3nbhXt+1^?ya4@(j?^7#gG|)5KNP{1thH&DA3#*}6idWMPAW z@WZFmh$WMv1uo?t771_ZA9gE-&!x?O2%Ae!srl;drGYcq=Zt!EdyL1KUv}a%p3&#g zjWO88c$al%d)3Gz-J_!xR4{!Zh%SMUdPdoU248kWA(N*{a~>GK@S-+KR7NWlAp|AF*r z4(4yA-^ur3ZB`6^h~4z<2nng?Ugdd3RTV|m^QvdhoIFW!7wi%}@uA=EU%znIliTZ#-oI@9O}l?k)p6-7^R^vsn6ajEO8!mv zE?V<<>u0H6_F|y(Zw`)?xKTaQ_#J$>tS_ApsQOx~^y`d2kD9)7SUT&`djD6$(wV=N z{<~r6tY0hrPNrkbwZ-^8VqqV^Q>rn;SYX}zpp#co4?G`W29&@a+)6IPA_s{UD}pX! z`gT!G4u-wJ)nJZT76@)a4aW6uVJxe8TT)i|uJWv;k^i>+-wyN02)F;`nh^=)p=$7K z#H@(xjVy3bWX`BcoHcW1(X1lwg&Q|E0cTW(_L`Tc!zLFNOyMp!4iGSHM_7rO0d2iv z@|~>H-vhdf$vZ7Et>#~y2lStLu*H;qdO1QJz2e_OEeKxtMSt1H)?9ul7ft4aZulWf zsp)*+gm5+?&F0PIR1;CBaX4d`8;UTOxBtWZg*@+ZMa#V6F=ZLoeSP5)9{aeeqht~0 z@f$DwQ<-`8`i2$vteR>TFTZ=$)WU&POYHY7`r%HV1378pvW&E67eDRiVURi5o5rVJ z{`UUQ*jARz+w%2+$wgZp+Ss%C@`XIM2c7q%_CUW3=LG*x?O|m4&SB|n57zs?8kSDI zx6f`X4!T5qhkvy zCVj#!1vh_gRe9RPsP@ZE?YQx>+cy6>+x#iX(&ms$2b3UM@(k!oN+lb5EWy4!?twZnrVx12?^~` z@RwoZR|G^t-GWd#M@YsN_9&dHiGSeux=aXHf$p$62{tWFQqOMu#9Yxf@%^>rPL@bX znFrVX*8YW=Q!L1ZYB?$ob`_gCy84=O#zcx$c1SwI_ zImn#D((I5l$d0uDh!Id$NXr8A5vd}^qSvscGyEdAA?6ys|>)Qy~6UHZ;e~32DApM-$;>bjC?KtyMU58dPh9b77SX&$!AK z#x$CXdzLYwF%3?UtB^soiHlYEo%CZct$G`?%esL+_X)Sld<7eHn70RMaGmNBOBoi>FuiW%Ny-?UtVpSb@>(B znN35g9cE5LksU({i^42}{p1~6<;G(3dsP!E=9`$L%wJrw*jtQ9IjQ=2Aa+lfy{U(Wgs(((CVr` zJ=bCVcFhB^ZxLb_oV}32`zOMTo?0O(?l8eGXnR z61?~Ptg}5E(S3W>`$S7C5CYese!{)Jm`c^V$7SZl-T4Y^WU zfR$40qOdDYlJ-D@&-88os za2v~rY}lR7L^g;$yLt((mJPKYN4G0as44v{DGn`DK9u&Nvy90c=X>8vCAEG1Rns(!XeN5GhjyRep1itK@t$AY1`QMtjM_R^ts z1CM|0?PImI$KL+h;{)qbtL{C%b?fo_7A&}rfA6gdb-I7Jul)-@GTo0Ww4$T&50?vC zU+G-6s`HiB)>pooMNJrEEzSlOWf8z@+OaH)MZ##CbqSv{26~>H8H=GxXwegE zvK$iew3ojjm%xpf)SBg=ToyAL<1*|{wTc4u4Exuxf+0(e5~Mk!Wa&0>LK&-9IYqg2 zz26YeBeNopTrgbu*JY*knC$RODL{<>0$ae={pHzWl%v&DY+}Q4!C-{j-U0@Pf3e-C z>c&yBg=00yI~NwCTxv%{oQLHL&oQ@fVlh?Kjc^O)tI52KvqCF|j}YL}=j1)y-;WhV z>kL}U+dpP#QSpz%78U1jsG60S5?i1(#e08PJnu()wjA0~Rdw&t+gpB6l>gn!NB@5J zq(xg7FWtI$(jNQgu!uPQ%0$6WdY`dK*86d0LfHHCb6W5JnkzlX zCkkVR-z)ynibZmni!=?G*`e=jet=I)i)lo@wUe|q`miQ`K&dSGov;^O;u6Y zg@74xXylcI7Kh;@__E=IEes-Up`*$@)=&5WTgH(KPbyDANR~#Mp-t6Dw@#fyBb(g}?)~>8j&HggP0=ogE27C6J@DVu?ZCM>P_nzEqZ1>(Vp{~+r5InTLg0i4_e|i_ z$rLk1E1uM}L`1MrdT<5sM1vSJbe11Z*|ds;K_8XJTKx>XoQ0A1B=mVGvKE}s*NyU$ z!|L(5H@hHswkQvtHuG=Tx*+}jxJlj_GrW`H?oVIv`G~K~xc;`{EH94io9fLfzU}%M zl*-wN@0;ItT*O}T^r7<#;>a3XfQHC6PCG^%5omtfx-ru_=b1NVI!c45K938#E7Q0$ z;tS@V9lz0Db({mld*XR2g3fJaA0AU#-aO5Stx^kkS4g<_v#o{nMaOCBP^}}Kv zTVb7la_7Y2>Z#MNFPS*8PTTamq^a?o86%QW<_*lnaPywgQkCe!yxx`M!j0`n3En58Ru1aY z132!`tUbn1D_4qs%(i}nv@rbyqQFq}T!xD(@{k0JpcfD$1d0c0Jv`|A6P#a%PRFr! zLa{S2Pd^`b3n2^OIa}r{4WR6bG88e3bm`2{(AjT-_0?X{FVtPDNEs#(7D+cm_5}(@6AIPB<^D%?`9<@F4K)9P&PO^mp+N zKM3^0aH+HJ5_@rQTW@zvx2enlqE5+Jv;(CAcud26xhq`(1)bP zezzjFq{N*I^C(EI&p&p40$|5c|>zVtP_?{f3KdtyDyqY-#lvC!tP ziW!^4OEOJkpUrLmp6wwF2(JBnwSD%9mwsz|s5$Vx|wk%Hc|wFg7kJHFCWDk9nWT+jw~KBuA_> z&XqiK?z{;T7v;pnjz!bJzB>EAn@b$OxAKMNU|T=q2Aq+K#DV-^nsuIs8J{t3!>aI% z9ly`poVO{Manh_n#xY}gm(Rw5cg-cn`(gP`xz>E&ziPJ70?5I3ljJa$=a6Kk!CQ7! zSs+&Ennd)>waaYgRfTDzENwd_OO-7RhtZ>KSCQv6i^F{M+66!J>Y{_}P$#yXs*~{Y zU8NvbNxo7It}NeGEAW$w2c6kD@Nh(;<7p$){9;vH=7jNSV{j)-tSf?d!Yn^CAC_na zoC$`BO*wWWeJnN_aAywgFNQ(3<9ixuUK|(^F~*t)uxFok#V2?RA4H%j!=CVS>jQRr z{!wWR`yjM^%pIZ81E=+cSI|Id&>he%IgA!;A6!(7k-%=Sz~sFw^sz0(ll3voAlbq| zljX&;${Usk3}<=pYsZyeBLoWlH9o?qY}C&+6~|~Lsc;_M^{ICJNwrs)#k?OU%aa5f znw#Xw+Bt2;q!p`I=Z>9PRGgE#^6|wprw-hgnp0dfb?m^s_U_EQXjiP=d=qE(jEx*; z=4F--Y`*kgsj2p8bH8k7uwLhwzpolIXZEa_({i)3a62FDl~uorwP5{*xPh6?v^gRs zPtN6z7?vrb z%x(;37tQPa}e?Gunt+p=>mZ(DuxwSoiKaht7sE$qHty-c+=7< ztOfB7A$UDU)h=`Q)R~JPUuh}X$^(mMOf&b4u4|W%m1pLeX^{hIsj220k!jRF8{@%D z<7dWi?HBAXU?f-`nky|olZx8WITw^O?1hPuAEq@N46?210hP&rXIXbHjhM3htZYli ziW_!+uB_~HyKh+0v8Bvb6a3c=_!oYKX}NjueaCv^UC_=o%8W;O#}(sh8M7GJYp78u zf@>^-I3+^6oPrBYiNk-vUMBv+rQ;0#Vik7SJ63_mBdC)jYqElh!r|1WRgFAG4^P9` z!)%llRy=~iDWCH1n@1k<5aAe^f_?s3v&SKxGbw2j|7In9aYS%u@H!z~I;2a8W^-~n zJNR!bVpI>l7xf*-QOR(wvDnyPY%?A-e^oW%e*ZnbJGXAG!du8o!&^cRu0xZnQ&!lslesL88$eEA-K#^at+^N`6E^tux+_8 z+)i}Lm(6-DzsmR6xe|7Ov-aIzkw-9&bUr!(8$w$1!2#EZSoYC5aya6L6(q$f2$f}7 zC=*0?L_4r)>QgdxREAG=|!6Z^qgG;I+UKQ;_y=61OqI4Nk9%;4dPjf%lE9Bal# zQ0CEY<%v1E%jwnzo8WZ-$~zR`HPUSnIb!ugXMxEj^=WTT8Q}mKnUn3A!kg}?Ty*#P zyu9^yFS>5WjdTA#eeQxOQ*g%m_&oldn{I21P9OWgpWkw&C$&0?3U9i5==FQn=Y4tP z>-Mdmnqx%ey0%Sud7IkSt#7Z*;{_HAYsP|4%u50Cs zt?Slz@Wqbx3vVeM2M^%F1snO|#s#19yX+s%b~pc3XS-w0U`ytlVYGAIM;_sR)g#+s zJ9rMD`I^oFM4pK_2o9&XU2))_`P#4}{%p8`akSI?kl!FY+4gMsq|mT62Hd_Temd$QF0 zYSo0LOR8{Pp0_wZZ^ks7AGu-j)awWP#%Sp?wo+sD|cx0}cdnm^gmx80% z$ZP(#99=HhMI1#HC@cSP_2;wKk}Imh&CBl4+J}Y(IBz>LHil_VoF!&SC2BM(F;@SR zRG{0)hPM4UBQ;paiZfHv%~b1o0`8OH`R%&2Oy?+P7Zv0ba(czLGw6;Lh}a+&gb=`HYEau~D&6%a{D@p?fawzA52r z?fAXJ-g5s>9$K;G=0(x&oY^@q{9|!qM)K5@gbDE_o{X1XN|`uiVoGG>lH2cE^^I3r zZjYakkUT9JgX${#^^R%K-3j3IjjFMknVC76Ia4NM(F5zGX=9T;^v!E*OI<2T9TOjC zcVH|JU2@1rxK13$OfG?;r<6=s?ug7nuJ{W+qT1 z&M>N0gnbqng_um-zvqA#hsWUH@Ch8R3zLqQadT4?0)246o+>izjB~E3TiGGl2TcsK zS$N$DsVOt&LPWk*mn)wD!9yPfV=D6Q+ z9Jh%5j=Syg7ju-UIqA6DJJuz?CuN&6HzNgIB^MfCPuS$Rkc9qIeZ9_G4*0+5&zd~+ zHpH$umi98S-RfP%(O9Fc*`vP;PaoE|!U>R)j`$em1Fk6WefZ9>BPB2-Q_;A_f$sut z&@2!AEkjqpqcAXU>>cIHO`_ z#nc=`dukjTI$;GTDcg;_bm$fg<i}VciiW>rgccIB zte?@gARsg|?T12Md>{WdxHN|dcsQ?d|0vo!UCS6y4;?FxrC!4}%CX`yc%gH}vx^*Q z-|ZiW>HjW{694$P^CtfHP4Ku5JleryqVcsVg?rHgYxRk|VOJqf27ze;6Evqf{f(O{ zWTtSichE1N8F~{A8~#2e>=Uk4RZR=M0okIqX|8RfT`y;?Git+L3eRI>HyMp;D_R%v ztxKP?&AhuID3*J(OF3@)Yo)3YzF&6Yw4LS-Le(2b~)B)7q0qF zJm0Cx4bK9@Gaj!*k!2HParlSUl|2_01Yk?iNd@j?wn&ur7Kk&JUizbaP$#5)9Ncng*T3@L#;FxINubKTS<8al4`Q_85 z@=Ut&Rr6OB%$-^`tt>Nxx216(k)r<8g)g6#hO4>J{X_R)hM;ud*X4|cm18fQt;YzK zoBPE1!2V=m=rd4`bl5e&E>28}F(pu3fPpBYnXQn@TFS zug}k4zy0#6$rZ)_+No6ahPhU|s zDQ|;+#R~t;bA$h$do%yNA#d-5qQ$wniwiTy&Z*AJ!vz+>znO(hFG4FC>>fB^uf>=k z+vu!vWu}iwcH^{$PX-V$taSz+&TBP`xfo0IMs9<{j{ zVede@ptDj_?uteUf;Tzy)1ZyS5+Ae-vCh0o+HM`1pp_`B1e-fk&hE`wJTb}^l{jJS zmWKFd_kzzpxIBB=1eZNJd16}WP4lNjMO^npe_X=)=s1^S+s;4#>Gr+1&T=QLh;=*7 z@nyFxR9|q$yx;x{`*S#jsMt)Z8kdodfQfuY&8HV<6zdk|DBgx0IumhaGTNR!$%)pM zmjz+XnS{=oXBMFSvFwUJMI1OyaNwF`xW{^CGPsP1lW{D>RQ$ zl@e5V7S`8O(6I!@XtaQt?5wF-?v%9HZ3T0)rezI0;YR9R zd9(2x7f79&h1S?@eAoVd#QpGT{Y%xDBpz0e`-#H3L_;;k>#pftG0dr`0f%!MYAE2n zwxOo5Yaccv8xK5pb25zy{$d@~8nfcI3{H!2Fn!TAepgjF^a<2!g!dPLUJ=*=35p0s zqZe4S1d(Qqf--!+urWzlxC;W;Az=2F6`5U(n^=ppy3MzI5BlC8_}Q)ILj(EuK6vlI zAI;^r4y?C-_5JrdUg)@Vse@+{*o;nNwf*6Ue?VM(iZQDSmlY%>!V^%H=}CYxIS|@G zZDI-Vz>brK-N=d{Rg=q=*d~UViDQD90lyyTciNqa;|7+_E*O`eVtywr>C&I29}OXR1uu^)MW#0EXBVh#b8DDf5oIH zeCf~s7%0O7gL@$B55RJ=kynLghz1KeO!CCJoOW7zPI0a-ih^h}8>cmBjuvfdALIjO zyWead_>%tvGdU{W;fRYi#}2%i=yJqI*}iWty7ZGvFWL()e>XKJF)=6Aw%E30Ms{Kj zq7Tf$fq~~*OBiC7;1Ww|h@^rxj=1g3( z!^|0V06T&eKiuMoz;r80omDi;({OV&$+lgW&Hlqdrse- zvns=BOHPUz8~^RcZCjokSZBY*?MO+!zT}oiwpX}Zx40wCZ*&%1%Cv93v>#OwsM8M| zXR&^JfH$w5 zMxZR*A$&Cb%8zhb8EQ#G_@VDD)zMfm$PQ-)G$F3N$8?*st9{;s)Bw|XaiGim^57X5fa|K@M2vO8 zL+Vy!Ds2X~PT?g~H(-oO6M?N$On?A}eqw^P?1oKcJXAzyS0tHRQ*n}iT9PXxtzz!# zlvvk<{OZCnakwQOcIxLiv+G&sNAMwMkS#0T`wz}Bww=xowBEFS#2tvNwZHW)XBJ_^vc$-%oL}UH z%_+IOnmIRx7dV?IaB1@xT-NOI;PU1%xU|{XJSLa_%EeXB)&gRRwn@&f z!**YLywW1`Hv{9XyGOk*fhmFPWOUqlKee+ung+dd8)E z`4yKZag4|L(Jx}7e&UM7wtkjp@LlA0pYzuU>8`B8;Y@L{Fk!R?lq&*(F$#rw4-ZVn zhQm<;lOaOZ;2d;q*w#gNe{q5BzK+=R=;o-1sEFq1^w^I7JmYjlI&Y1@T?e;1BVQg) zKaunk6VR=O(TCDl8`T1gF)$iwq>n-%2HDzWhd^Y}$61DHB8*u^oRCmp zMb;K1JI#VUU%Pwd`t>XCe#r4(cl*lb&oBGDALZ$HW}2rWlc4X=k)gZKtY$i54$ZsI zMy|P;r;;blN*gK4wva=WeN>1j#W^y%mCWLP@b~=7)z8^UYbTW;CVKK#3 zS$KiH8B8C<&2Erk)zC0l3I4H0cq7)M!()bbW)>{U;k=OZ#+*e3nHz#J!_Hl~3+Id* zH)mmPP8FA+t8!*|y)%L_!{eM$w)M`JF@HM4cv{{Y6^N(BtVw>UO{kCm|3%BP8iobS zI)|cVPi9XsZyPhcVrq6(S>f18Q_L-?Gb(elt4a%ZK)jOwC{ahc<0OrCLl;RHOe zUD%A3XqSI-z60BtWNf`kysR|ye=I7N9LT6M6gDgLWFC8-k+5G&$jLIF|Im|>viYf` zsS};={5Z~iE_v*a-ElzZ?8^~;^MK=-QTmuKqQ2s-{zQRb?rZ2{%wc`ZgJWVM6DOvz zkMTO5K_`<{ws9dknWc~v8b$qY4Kp!&GZrLcUq=5LJ-7@QKbQ_o7+eYT=s8j8**J~O zVNBL@j-ICr^M!>%FHQ$^z?(!Y$10M;sMPbK!GFZ_lEFj3rNV0ATH!k3Hc@O4HVT`B z&7#;MY!$W%+l3v%-NHR8L#MDy*e&c4_6i>s_Ni>%zBG7w-z+ zQ_2Uz4}~8iXWVWiWDUAhgD%ye%U}(<4A!7aHRv)}gD!(L=rUM?E`v4bGFXEy)u2l? z=u!>3a1;1HBAqqpQVqHg%fe^Ypvzzlx(wE!%U}(<4A!8_U=6wq)}YH^4Y~~0pvzzl zx(wE!%U}(<4A!8_U=6wq)}YH^4Y~~0pvzzlx(wE!%U}(<4A!8_U=6wq)}YH^4Y~~0 zpvzzlx(wE!%U}(<4A!8_U=6wq)}YH^4Y~~0pvzzlx(wE!%U}(<4A!8_U=6wq)}RY# zMiW_sE`v4bGFXEygEiO4%^z$MeR)r-8M4u2;_6lyig7r<6uL`}N$U=RL~5 zQ`jZ!7WN2xg%1n+MDbZY|5W&jQeIO&uM6K$&Tk6e7QQ2VPrrU3{80E2(i0$!mB47+ z0+Ilk@YyYl$2$qoZDOK+oh+mr5+H|v0G6UfBp7AjIswwy44e;Jfw_ZztyexipfNJy_ZX~q z585enX1#k1*1HF-mCvkq585oBS??aSL?Y|mgO*5Sy?f9SiL7^z!Fu2ZRzPIECt}Q!2aHBaBJ4Du-NN|6Dm*8k z1`|>Hd`{Fm8H300JV7`~Z)QWPiLiCdAxF>Cg|kq$M97f8777;)eg)4N3;1XAi%!foQB zLFiM;J+Qlp#tz}V%Arxe?ox_h?=&f;S*2Zs8tL?-X_kyM;Z%Ug5*S z1LEbN@R0DZ@QCoJ@R;zp@PzQB@Rabh@JZoQD*stMpA()JUJ&*RFABe_H@_$RzVHXa zr&a!E^v<&?;d6R^UihNk`Ki)hQp#(R%LI%tou^b1eGVY_v^2$3xGvp@GCiy)#)@Jop$=yeL&REYI(Nt9eFKkvmEy7k|o3LHjA>1wOQ_fH8`4v6?TvT2a{zCYM@_bYH zmP-4!p5GC^tCWxQ{4w%@qZi|c$>5jh7ABy~lM(g!0x(=QmJd`#G%#Yh9|%7L=1S{wrFFT|x?E{puCy*!T9+%W%azvU z!oIzVuc&po(mL!DfY#+o>vE-axzf5^oPqocq*Lp1A@i4k)Vf^Qd?K|j7b7$xwJsMU zG$OSw7b7$xwJsOd{tS>>mkT@3XKG!pL9NR*sCBup_RN!7my0pa3qWdJE^I!LT9*qu z&u41gH1O*O#-lHr2JVQ7O34^}7S9uelQ6cQ27dYGtie*?64084u_&=xxLR+n5w2BA zjh@%(`9?k8EWB6PtlV0Jt->~8yRbvJTXo6?i6+jyM;Z%Ug5*SdoSvT-{!}S1>G?I4>UH6J!ViQW0_PZxf!_dKLbov9n1_@E zXz3h`X!tw{Qk?@yo&n|vrwj9ig~H;&b@DjMeo0PIg`E&}qgx$g(VXyFE zVV_FKT9|{m6_K?t2XiYTYhe!NRz%jq9L%kVtc5w4TM=0cb1=6eKC3)g3v)1^BK}k< ztc5wSHk8I|D&gzGH&o^~g>OmDZ|nIT;k!zCPj7x8{80E2e$AJqMI1itPrfWI?stZ5 z%$KFjm!-{@rOlV6MK7l}X=(FiY4c@i^JQuCWoh$eY4c@i^JQuCWoh$eY4c@i^JQuC zWoh$eY4c@i^JQuCWoh$eY4c@i^JQuCWoh$eY4c@i^JQuCWoh$eY4c@i^JQuCWoh$e zY4c@i^JQrZ!0%3@0Nh0ZJ;Fq#Ocu_9rWIhO{}ONs^uGZ5MywXD6|NID>-`pCtFTSj zF6T?UF35C*xLTN&w zG@($MP$*3(lqM8P6AGmXh0=sVX+ohip-`GoC`~AoCKO5&3Z)5!(u6{3LZLLFP?}IE zO(>Km6iO2cr3r=7ghFXTp){dTnouZBD3m4?!4|!Yvwi53ERq+fNM4{Kd4Y<+-HS*s zfzB7nCsQP!Op$ytMe@lM$tP1JpG=W_GDXHCdVinrQQ>1kdhLqj8!3jI{fNJ3UtbIh zNo0>-tRBDE$iQs67(G5Q8*QyvJ$^CD$>-_9S%W2b&ewCHaM7R>DN6=t1D6V`h0Cxr zsMuJo+|~%!D!oR}>-2o1p4Si7;mw=%yg}vJICu|IHVtkE)+*(e!QFV?rsoFXy?Vb< z&rL#(D2h?1M2;wmQKv+XD2h?1M2;wmAysnJDeMw<3wwmU!iR+i#N9#RA>m=+5#dqc zG2wA>bV7JicuII$_@wYDmHDim&k4^9F9`dE7lq%|o8J?DU-$zdM=8bdfKleps)Wz! z{pW=*>Ybk|{UxQmCds@mQpoFp;C060{d0M>Qp&NaU!-E8l__RPMtweG6Xs7QCQXg=hK}yr9cx z`WC#<$zwqJ7Q6<13tnjEi$MAoywFTO)3@NoxO6L!z6Gy*3trgLui%-!1ury{NZ*3j zpl`t|-+~wV$(-q1@S;!Wuk09v1 zx8Q}Ak_-A4yas&>UW2{`uY3z$gT4hXd_Me@z6GyA-+~vOAEwZ^;Dv;V^euQHVIqAC zUPzco-+~u9OzQM4cwrfc^euQ{8Hn^Pcwrfc^euSdrzO(2;Dw)-NZ*1Nep(`Z3tsqX ziS#XaF_s|Gx8TKCf=J(j*Pw5~ixCB%>09t(L_wr)!HW?Ek-i15LEnPcpl`uz(6`_< z=v(kYH&}l97QE2m7lHIGcrofA(zoD+y<$3j3to&mC>i<|yas&>UW2{`FSLt#Lf?Yd zpl`toO=Aju3tsrOi1aOZ4f+%p@9d0)WA|{U@0`P9nT5yTb4ot`JAYC zCPD8?p>KSD*5JdyMJQn@^onnCZK4!2WHBRxqVONUbP^ zRuFdx8yv6s5Pd%r#C+kekf$Em7>-TVE;X5LuF|DzXNhMRHoTb8QMFaIU6cN zjr1Al?FXEYF^)ijs%g~CSz%yqUq6#xLMB|2KV9pjaW%6hh6mpYn4*3@^8~u4MLw% z?!io;9BqequX1SAue+4u*E>y0X%;Un!d79MuwB?8+%4qHs~mMrD79J5E6&@2FR~b$SPYO>7PYa(EKBe-X)$=*wdEo_Nzwn~)yL$6` z!tV=zAbeWoe?}BJk1L1%u&$pMzNmLNn=6MFG5s~+>%uoAt2c#jNjKis^E<+KmGYk6 z{6P4j@FV^DG3d^RUR?xIf96AfehkbJP8a423x!Jte~Dk03af={h3kat2Y-)WH((|> zAGJ^1rkopujlw439_7|4>=JehdxX8hhlR(L^9kWe;VI#1;giC%!gIp&!VAKF;YH!I z%I!HlKQH{LQeM*YYbw?2!uNz92tNc?KqkKca*ewJt%=Ar?h3RcBKwgF^&=JPM=I2V zRHz53fc@b+T;r~QP7=AsT>+gWa*ewJI!UBeuaH%*kX5gcRj-g$uaH%*kX5gcRj-g$ zuaH%*kX5gcRj+{kVQ#eN6|(0Qus=+pRj-tfx>7#sO8KZOQTs03~KI%&Os4HQynNA;dCFXbhl|Jf9NRJfhqppPXi1blcLV85{s4F2oB7M}A27T0( z27T0(27T0(nEkO-^ifwr4n+E>E75|OKYi4dnEjC=ebkkh_Yvu%u7rK&uk=w@!aft} zqh16V_5)o)w{Qbwy9n0r55QVI*DKv8yhpf0xJ&34z9D>5__pvJ;YYy5pmGT462>CW z#i%c)crm7044E^fQqNU--Z1z&QZ~Woxfo^O^Jb;j>noqoFMLDzrtodyJHn5E)uLN1 zy49G={}w5vTP?cPqFXJx)tI64SJJH(-D=UT7Ts#pJHH~`YSbx_bgLm}BI#B`&P39^ z9(~^;AR>2wh?oGz58e;-2uPZwTKMzNN3;*7G~Uca`!Ho|mfz zm#YSsgS&pDum+c_2A8V_m!telXALfgt`b>;%b}%2*5Gn*L}U#v2S-HK;Bs)(Z>)r6 zcow)+SS?&DTqis(JRv+OJS99Wd{TH;cusg;ctO}NyeNE5_`L8X;A(NVTHLJ`cdNzS zYH_z(+^rUOtHs@FakpCBtrmBy#ocOgw_4n-7I&+~-D+{SMpV{_${JBwBPwe|1viXC zo@+#9ji{^=l<3{K_aS{5a8!=WP z9uyuD9u^)E9u*!FJ|lcf-@XgnfRW@AK<2qYd2Ya*h$)kWOVDyRKtGAq!nMM6!e+hG zB5W153EPDo!rj8-djEv*r0|sRwD3vcS>ZY1dEo_Nzwn~)Y325uo}U-KBqT>0Fv}o* zjCVGIqo;u$;akFYft%FgHmSvJ0!Pmxg)MFq`eGtm+$Qv}M7Fq1=wXR$ahuS?64~N5 zp@${1#ce_lOJs}NgdUd27Pkp~E0Ha(R&uVDoNFcLTFDt}wkT~aO7%LBa;}w}Yf&mb zQ_i)RA@Uu{xfUJ+BIR5Qj{%W#u7$^dNIBP{{6xyR7Ud^W&b25%k#ep@`H7TsEy_=% zoNG~jBIR5QF8EA2*MbWo|T$nokl)&8u`>|T$nokl+OsH0_=$urip9%G)BKt>DKqo$Zn zk8VBci_i4y)`MRnV@>P9FOjjP^_bBT87*9o5dohWYg!L!90D#CGS;*n(jYR{v>xLh zQe>=YJw`i3#+ufn_DPYkruC?OB4bVKQTs&3n%1NCiHtR^hdhalHLZs{iHtR^hdhal zHLX{4U%jIH>J{BrujsydMfcS!y02c*ef5g&tB3qqLdKfbL;gg@n$|=9M8=xdL;gg@ zn$|=9M8=xdL;gg@n$|8)}t<162_X=qb`VyHLXWo@R_lu^%#Ru0*p1Shwia1 z7;9ROaTik*|xz-GatsYZG)92GM;T4>V?R7wr!{vV!M#>Y}-&T zM8>mi1MhrhJli&`FEHmpXHrRhYGoGzMoHmHl z265UTP8-B&gE(yvrw!t?L7X;-(*|+cAWj>^X@fXz5T^~|v_YIUh|>mf+8|CF#A$;# zZ4jpo&_I@loHmHl265UTP8-B&gE(!#O3KT4hnzNu(*|+cAWj>^X@fXz5T^~|bUQeG z+1L(FUj;H!XuH;rwu4_jGg4?f_$4w@Xgl~NawTy)_5SRf zj$W9^n2qh=n#h=q?ckdEFlJ*rxF#}YV>`GeGG=2txF#}YV>`I!Gh;TkYyD`u){nMp z{b)P5W}b}M*bc5)TE=W_2iHW#Y-|VDd}hpsPqxS>TjY~1^2rwYWQ%;VMLyXgpKOs& zw#X-2 zTjY~1^2rwYWQ%;VMLyXgpKOs&w#X-2`j4$R}ImlP&Ve z7Wrh0e6mG8*&?58kx#bBCtKu`E%M10`DBZHvPC}GBA;xLPqxS>TjY~1^2rwYWQ%;V zMLyXgpKOs&w#X-2`j4$R}ImlP$UjHCPS*Z=!Ir(2LsO zIsviVm~yY^DBD(7|%OIYlmp53~B&{8y zwL`Rapa%I4Y3)D_5=mPopePqbyIOEKj2>PopePBTCC0Xk!~?c^YMT8fAGJ zWqBH9c^YMT8fAGJWqBH9c^YMT8fAGJWqBH9c^YMT8fAGJWqBH9c^YMT8fAHQNvgXf z)m@V6E=iRuI;B|Gp;UKCs=FlBU6Sf9Np+W`x=T{sC8_R`RCh_LyCl_JlIku=)el_Hz4pBJIM`_1E_p818)!zN!i_|&x@T1E_p818)!zMT?|!v+zuLQB?cJ~T?pJ&FtG)Zx-u-ItezkYM z+Ph!v-LLlUS9@<#yJ%9oXi~dqQoCqUyJ%9oXi~dqQoCqUyJ%9oXi~dqQoCqUyJ%9o zXi~dqQoCqUyJ%9oXi~dqQoCqUyJ%9oXi~dqQoCqUyJ%9oXi~dqQoCqUyJ%9oXi~dq zQoCqUyJ%9oXi~dqQoCqUyJ%9oXi~dq2B*u6X7EU46l=3Qgw660HbYlmMG8HH&CpUJ zJ%r8BRX)>0*bLsGTk;S#Ljw2VnI6Js@Q&FIxMm7Hgw2>K6B)(YEDvF`JcP}V22c?g>!CH_heVKX$76zL&shGr7!A#8?b66qmqhGr7!A#9e1uvs3$W_bvk zAw!mm9>Qkm36UPcW_bvk6W7Rj(h zGHj6yTO`94$*@H-Y>^CGB*PZTuthR#kqlcT!xqV~MKWxW3|l0_7Rj(hGHj6yTO`94 z$*@H-Y>^CGB*PZTuthR#kqlcT!xqV~MKWxW3|l0_7Rj(hGHj6yTO`94$*@H-Y>^CG zB*PZTuthR#kqlcT!xqV~MKWxW3|l0_7Rj(hGHj6yTO`94$*@&2Y?TaKCBs(9uvIc_ zl?+=Y!&b?#RWfXq3|l3`R>`ncGHjI$TP4F*$*@&2Y?TaKCBs(9uvIc_l?+=Y!&b?# zRWfXq3|l3`R>`ncGHjI$TP4F*$*@&2Y?TaKCBs(9uvIc_l?+=Y!&b?#RWfXq3|l3` zR>`ncGHjI$TP4F*$*@&2Y?TaKCBs(9uvIc_l?>Y?!#2sVO)_kg4BI5bHp#F}GHjC! z+a$v_$*@f_Y?BPzB*QkzuuU>-lMLG=!#2sVO)_kg4BI5bHp#F}GHjC!+a$v_$*@f_ zY?BPzB*QkzuuU>-lMLG=!#2sVO)_kg4BI5bHp#F}GHjC!+a$v_$*@f_Y?BPzB*Qkz zuuU>-lMLG=!#2sVO)_kg4BI5bHp#GEGHjO&+a<$x$*^5AY?ln%CBt^fuw622mkiq_ z!*cSh_%4n*#Z*n=GIH1Sy_#k3 zh0K{7XW4rpPa*Kv+TW)8rQdqDXu%kb*H%Q6xW^N zx>HUUxb76!o#MJvTz87=PI28S zt~rQdqDXu%kb*H%Q6xUtix=UPliR&(L-6gKO#C4ar?h@Bs z;<`&*cZusRaor`ZyTo;uxb70yUE;b+Tz84c{*InYeOI&w}>n?HK zC9b=~b(gsA64zbgx=UPliR&(L-6gKO#C4ar?h@Bs;<{U0cZ=(8aosJhyTx_4xb7C$ z*kuUa=oZ)A;u^7m(By7$-7T)W#dWv1?iSbG;<{U0cZ=(8aosJhyTx_4xb7C$-Qv1i zTz8A>ZgJf$uDiu`x47;W*WKc}TU>XG>uzz~Ev~!8b+@?g7T4Y4x<_31i0dA4-6O7h z#C4Cj?h)5L;<`s%_lWBraor=Xd&G5*xb6|xJ>t4YT=$6U9&z0xu6x9FkGSp;*FEC8 zM_l)a>mG64Bd&YIb&t625!XH9x<_31i0dA4-6O7h#C4Cj?h)5L;<`s%_loOYaosDf zd&PCHxb79#z2dr8T=$CWUUA(ku6xCGuek0N*S+GpS6ugs>t1o)E3SLRb+5SY71zDu zx>sEHitAo+-7Btp#dWW^?iJU);<{H{_loOYaosDfd&PCHxb79#z2dr8T=$CWN5Jn3 z#v|bFB_Jbv9|3nvVPx+kC>xQHy^o-5L`L>Lg0c}A+4~5}Mr35~BcR9}7}@&>@_)hD zr~LOR|9#4TpYq?Q{P!vUeae5I^53WY_bLB<%735o->3ZdDgS-Sf1mPyRQW%u{2x{R zk1GF1mH(s4|54@tsPcbQ`9G@sA65R3D*s27|D($PQRV-r@_$VEKc@U2Q~r-B|HqX7 zW6J+A<^P!Se@yv5ru-jM{*NjD$CUqL%KtIt|CsXcQ*2%zsMNy8!PvY$L@5v%o7acl zc{7l)d3~VEcNm+8Q$K`^t?I)#=M0dsd3_k|@R_lBeTvQN!)S-kjLqwVSLXrX66ML* zygqn!h>XqaQ*2(JV)Odo=V3Zy^ZMZJ;WK0N`VhJL0FbeHeHa(*12Q(R4=dDuAY=3T zu&%=LGd8aeBMKs8^ZMYk#Qqt01c{8z>%&NczcMzj556M4!`Qq&NR_-WHm?s-B{DXz z4^kyEHm?s-B{DXz4`V7KWApkjrXn&nuMcA?B4hLV;5&K%cu;sqcv#5TygvAjh>Xqa zgYRfFkg<7v@Es8uo7V^55s|TZeTa5u`5Bwn2M-dFv3Y&)AQAh87ln+?>qE3Nk+FGw zh;}A2Hm}ckMid#F*9XrMzh!J*AEKT44rBBB;9p|OYr@xsjLqvq+$@o?d3}hRMr%aI=Jg@knZGhNZ@+BaerVmRc;?7$zii!p*}DDEy%&(ek=uS~9pB-| zZNF^Ye%ZSHvUU4q>-Njm?U$|FFI%@?wr;;{-G14+{jzoYQM1g4Be(siSt3Vn`%$w* zj@%C@MHX3bb&( zj*z?@5|u-ua!6FLBC2%qa!6DTiOL~SIV38FMCFjE91@j7qH;)74vWfRQ8_GL4vWfR zQ8_FshehSEcsVR8hehSEs2moR!=iFnR1S;EVNp3ODn~@+h^QP9l_R2ZL{yH5$`MgH zA}U8j<%p;p5tSpNazs>)h{_RBIU*`YMCGWc92J$LqH%t16?BH+>U`Rk#TM(ME8W~o)Fy=qI*JgPl)abw9v2M zP0~Ffx+g^Ugy^0S-4mjFLUd1v?g`O7A-X3-_k`%45Z#lads1{yitb6#Jt?{;MfarW zo)q1aqI*(wPm1nI(LE`;Cq?(9=$;halcIZ4bWe)zNzpwex~D|DqI+6&PmAtp(LF7?r$zU) z=$;nc)1rG?bWe-!Y0*6`x~E0=wCJ7|-P59bT69l~?rG6|3UvF8r$Cp;_Wl%d{w#VptEAGyUyR+i%thhTX z?#_z4v*PZoxH~KE&WgLU;_j@tJ1g$aio3Jo?yR^wEAGyUyR+i%oamkt-E*RQPIS+S z?m5vtC%WfE_nhdS6Ww#7droxEiS9YkJtw;7ME9KNo)g`3qI*ts&x`JP(LFD^=SBCt z=$;qd^P+oRbkB?KdC@&Dy5~jryy%`6-SeV*UUbik?s?HYFS_SN_k!qN5Zw!+dqH$B zi0%c^y&$?5ME8Q|UJ%_2qI*GfFNp31(Y+wL7ex1h=w1-r3!-~Lbo)iOUv&FLw_kMo zMYmsc`$e~3bo)iOUv&FLw_kMoMYmsc`$e~3bo)iOUv&FLw_kKGita_xy(qdDMfalU zUKHJnqI*$vFN*F((Y+|T7e)7?=w1}v|F6BXfs*UI&-xu%UzTn8BTA$AD-$_&>{wdK zj^o%$abjC>Y_ZrOcI^lasR>36 zL5zi0ZkGjemthd52$P+ey)$IP4BW$V4h_%mxigkz$7$7WdnB{cnRo8qx%a;J|MC9s zec$*0KF?9td(`zFb-hPj?@`x#)b$E&QL#}NbuNj<$6W6**L%$M9&^3NT<nFFE49BpKO5#Cu8gQWEiAQoWQ! zyyG7KJnr$&;~xJ!?(xs#9{)V<@z3KP|2*#T&*L8dJnr$&DSOwHy=%%|J!S8jvUg3{ zyQb`2Q}(VYd)Jh`Ys%g=W$&7@cTL%=r|ex*_Ub8n*Oa|$%HB0)?|Mb`mV;MRFXd$} zuTVeY71jHMN-)P>k)MpJ{HXW*IlT$Lq8cglK7P!{7hD#-r!0SaMcSi0=>0$C?Wg_g zU-BMM#a@wRDd)VW?y})ynl2-kEtd=awd1nuGS>cSTXx!(owjACrI}OO&$DdWmYud` zr)}A3TXx!(owjACZP{sCcG{Mmwq>Vn*=bvL#@3m!b!Kdx8Cz$@)|s(&W^A1qTW7}B znXz?dY@HcfXU5i-2`PkQvBvOy^6(TDEQhwjmb?$L+t(TDEQhwjmb?$L+t z(TDEQhwjmb?$L+t(TDEQhsp_gQrDzMAG${$x-J=iP zqYvGq58a~=-J=f`TR4Uuedr#2=pKFO9)0K@edr#2=pKFO9)0K@edr#2=pOy7{OV{h zYyX**|GcbiR@=?Wb0}GDH!Gi^WVPL_yoHk0cC+#gN>!)h{RIQ(? z^;5Nes@6}{`l(t!RqLl}{nV_Vn)M?@J>6l=`l(qz!r<{9^i#8bYSvH9`l(qzHS4El z{nV_Vn)Oq&erncF&HAZXKQ-&8X8qLcKQ-&8X8);KKQ-&8X8qKxpPKbkvwmvUPtE$N zSwA)Fr)K@ste=|oQ?q_*)=$m)saZcY>!)V@)U2PH^;5HcYSvH9`kB+yKR=TA1AKiP2pq*e?nf3l&LqVYAg6iV`?8)_+(tlem+T~H%yHyUael&sxoNGH@t z{$xWsp=9kwLpq^k?M6d7p=9kwLoJAswHpn!AWGJ5G}MA9S-a8DxbO8U!3l5ZiAnjK z%U^Z*yi0Jx8_u6>sKs%Itlem+#Zj_$qoEc@`3;w>-Ds%AQL=WUp%zEU+Kq-<93^Wv z8hR#jW!7#q)cV-Z+Kq-!n7HryrO!n7HryrOZ8`(CX$v-O!KN+Pv;~{CVAB?C+Ja5ROpW~7f=yenX$v-O z!KN+Pv;~{CVAB?C+Ja46uxSf6ZNa83*t7+kwqVm1Y}$fNTd-*hHf_PCEjX`eb8RrM zI711>^1SSLKqc7P^RgNx7|Zjr8YLLZ^Nu<5iaCSYroS`q{?5GO412&>p4WS9MJ3qU z^NKuN8I0w5*^3g4<#}0+Z7`PSWjnUN;Om32JTHq-g0Va=i%^2GJTHq-(i@tWPS^%x zdEPyvd1-*_fU!KUh{Tn_Se{obq6A}kUfSSSFqY?~4N5SUBl~k?e~#?Wk^MQcKS%cG z$o?GJpCkKoWPgtA&yoE(vOh=m=g9u770dGH$o?GJpCkKoWPgtA&yoE(vOh=m=g9sX z*`Fi(b7X&x?9Y+?IkG=T_UFj{9NC{E`*UP}j_l8o{W-EfNA~B){v6q#Bl~k?e~#?W zk^MQcKS%cG$o?GJpCkKoWPgtA&yoE(vOh=m=g9sX*`Fi(b7X&x?9Y+?IkG=T_UFj{ z9NC{E`*UP}j_l8o{W-EfNA~B){v6q#Bm1-XRuqw1wqVN^Y}tY>Td-vdwrs(cE!eUJ zTee`!7HrvqEnBc<3$|=Qtu~hhTee`!7HrvqEnBc<3$|>*mMz$_1zWaY%NA_ef-PIH zWec`!!Imx9vISeVV9OS4*@7)wuw@IjY{8Z-*s=v%wqVN^Y}tY>Td-vdwrs(cE!eUJ zTee`!7HrvqEnBc<3$|>*mMz$_1zWaY%NA_ef-PIHWec`!!Imx9vISeVV9OS4*@7)w zuw@IjY{8Z-*s=v%wqVN^Y}tZsN2InRQri)!?TFNNL~1)CwH=Y#j!11sq_!hc+Yzbl zh}3pOYC9se9g*6ONNq=?wj)y85vlEn)OJK_J0i6mk=l+(ZAYZGEOH`fJ0i6mk=l+( zZAYZGBU0NDsqKi=c0_7BBDEcn+KxzVN2InRQri)!?TFNNL~1)CwH=Y#jz|lB8(ffA zPX`Nr8(i?);DS8-fcEg-yCC1@SKfOUtcL}^4KDa?aKUeb3w|41@Y~>m-v$@_Hn`xo z!3Dn!F33x{0`I*G@={9Pdl%%Tl)U#Y$V(}C?_H25u+4k#g5L%g{5H7Yx4{L!4KDa? za6xwGK6&q5@Y~>me1JW?_b$lp(?Q3Qb}VVfl6EX<$C7p|X~&XwENRD*b}VVfl6EX< z$C7p|X~&XwENRD*b}VVfl6EX<$C7p|X~&XwENRD*b}VVfl6EX<$C7p|X~&XwENRD* zb}VVfl6EX<$C7p|X~&XwEos-1b}ebwl6Ea=*OGQEY1fi=Eos-1b}ebwl6Ea=*OGQE zY1fi=Eos-1b}ebwl6Ea=*OGQEY1fi=Eos-1b}ebwl6Ea=*OGQEY1fi=Eos-1b}ebw zl6Ea=*OGQEsh9&5jblgS*wHw4G>#pOV@KoI(KvQAjvb9-N8{MhICeCS9gSm0S9XdF8l$BxFaqjBtL96K7vj>fU0aqMUuI~vE1#<8Pu>}VW28pn>tv7>S9 zXdF8l$BxFaqjBtL96K7vj>fU0aqMUuI~vE1#<8Pu>}VW28pn>tv7>S9XdF8l$BxFa zqjBtL96K7vj>fU0aqMUuI~vE1#<8Pu>}VW28pn>tv7>S9XdF8l$BxFaqjBtL96K7v zj>fU0aqMUuI~p&_S9b=B@={7>QWj;$X_X)gEy{vbm8=_Dl4H?$}Vvdy}oMR~7Q zTX`mBQ9gV?+svda%6o-JAire~GbxLT%#_TeEXsD&!c5Ad{Fyz>q%3+SWl`2-KQk$d z@^gM=CS_6fqDIyYEy`Y$tQ%UCy(n2Xv?zN~vTkV6GbxLnNm=wv%A#5Ucg0M~qO?cJ zOvU?i|MX-K#xwm~$@aXE#_qJCC8&_9*+pB_4uKr$cdv&mJP5+u}f+yEJ*4w`} z*tX`Iz3q#G>(|tK+v`@nxOQc4`;uVWW#8&;Um6Tw*6wXzmipQCpX_a~4{pDF_P)Zz z!D4P?w4Ad z^ry0=Y;j+9IDLO%yqtb0GnP$n8qAann+DQ@xuNWMNk2`F4`++%@@O{w$b*CFhbOY* z$30XTL(D#Q`wQpe5Tm1IjOi`@Afo@sA3rTG@34`_EKT8IF#j_ExoJw{9GxWNtcV6;p|wZxHnzc{g$E+^zZDA zI(dVNPG7c^ktT{cE;*6iof*oecW1_O`Ge`YE4B50)ibE?Y`VbwinAcK2jnweQNv zvbvd4L3W!cl(XaIT!tTp3gf%;xuJ4yd?YLNF%D$7_uj=1b7?uZR50ulpCd=vlK65x%n#gAkCY9>SBf0TR z9>wR%rL)hL4~$3|rQB25(m?uAInYo(Q!3?#bo@lIFi|L$lXO!rt^)X0P;{-Ip7d9(RuD+N{P7k!AyF0Hk-$o^6LGPvpl+4s?JGE7Oq?@=(ke2I5||FEXoy%1;mh? z<;<>JK37h(f(sWWOXJy6X<)Qmp4h&1>;C=w)fy%oAqIvDV_V;9f8TjaTa!le*?xQ8 z`iF@>!*WHX@5zdVzAFgq=Wl)rE%B%kghPMy=l#u3~IZqUp9$J zgX?phtd8ScYMgYL$|KP;Iz_RMRaeTB{X?J*rw)b(<%KP~wN{OQ-s zosOs;q%5kAvt>S0;y22>U03g4C6V~_b@;8X&$l|}hu_&YA^3kpXFsm{D(QZ>`|;qG zo+WbHhkmhVqNjrHy=blV>)B%MpT3v={tA)eK51AWhb+&ZDw{c0Dx^xgNzv#-m!KUx~v*_mFRcAbed`2QoaUjIHe>1xSc zCao^9_04V>4@%34)o5{8kyewI>{t&y;K7OP+;3i=@t$T%Ix=Z*6WYR~Xooo;m7Fo8 z{o}euUVDf9+qg8BmXD!tVH2t33~I)+`75pMQT;}}v{W>NH>HEmX&*-AJ(c7?ceTxVBw7idy%dQRlFZ=ekHs#5yf$a?c~a9@^-8 zJokn6-nwqCRh0CJXW&CmX}e@AJlcyuL$0x;z33~sKDwe+QZu?jqosfdl*rA#A#024 zCwkwfeOzOg{zhA8`{<<3#K&pfi3f5uWFn>_Q4$Y1x2*phx!d)R>8fY82yBh7j{1Ad z_lCauaXst$NBlRfiCBD(u6Vi*+Ct(($iWu((${9m=Vu*7-rQF6s;}VRh&6k4E_aue z6gfwrj*J3Q?<{g%w#QA6^4;M#a9&%VC*4r@TP}`FJhyKR z?t-H-@=C6SjnDKIBu%0Mt(NFYI~Y*S_~3-%!&d#@@BhiOfi{uEBXmZr8PgHxdi>cI z=ZU`ctl0b6H@%N+{S$ldx#^sx;mzy9d0XNscDB7rvLjwFA)8};qF7$vM86SP=3%|> z!F%^czxacl7X&Ljk`XB5@j$Y5cA0voMmARHsEafXvnp7v5ty~X#mX4GM57{?X$0hQ z@#0=7?$LJy8-jNRKNh?z*ciM!xH`BdxHh;>v*quR{@<&o&<)~b{Bf}xzF!jFtg)M0 z)Q-03uDAMK_%?Ax-7cn|JH+mCr$#fk>&@&ZgrR=7#xXyp2zjqOY==;t?+-p9%;X1y zox&L&4E~G|h9B1Z+Mm^X*dxKCLW+G%Z*!j(QtD@fPWl&uzbI_Z&jwEhnbbvE@$|F7 zUkU!X);ep3Tcb!nAN-x**MjF#8eK}Q5^Bxg(%5=8_=P}gcT=l_-wpmp@T}IK{IB4D zYW(zY@DG(sIu-neTIx{nj3UnOs5PDlemnR#$^`w_!Hi}`cWdPE-v<9K_(!tJ_k+Ko z+^N~%-^-S*;J*urV2`Y}SFJIxcKj={-RB$&N{S3+#m@bj^E{xZ-$CUh3I{28G5EW| z&jddm918xjW>dZw98IlBtquNf@O!C?Q|p5N5WE)rx6~!6OM|Zm|2TD7YJKosWySnf z>hjbTsVh@gDL1AOJg*F>|C)M7@SlQLgZ~_y3jSm8U$oZs8(Kl}&ETIZpZJB~p9KF( z7(SKYuLi#!yc~R6<7eMWZ3w=k5!zpt&A$@-ZOu6Rs?Y?!8vOm>uM1D$mx6zm`Z48_ z|I5_7QX5n6PFQnHNQ{K9hVs z<*#+087`DFLtJ>>Q?GBj_S^2eYvso$i-lD?viWj`UANtF$6Z%=d`f-Su}tr@kz!_F zc7QR1%Z78hyHc*?zb;8`-P`M2nKv&V$`ywu$9Ctl2a=yOz)~1bHg^@(zxU?)*YCxD zUR+dnJUOPE%MT~VTsb;9K9VU;j^#6x<>bfYTBS_Btag}EySpk_^MfC#m8JAIj4wNb z6+7-9d^A{}&y>g2&Q{W1bp*ek-qx9WH4GN4cez2o@q1D-qDrgRC}oh^IqtLe1@Vga zUG%AoUR||r)v?u2tl6-(a`EW8d)MVJx$2VdUV7uD?e$l!fAR9-6&tVEb7k$StKV^A z!}s3#!n;1R@!E~gzx&X;U%qbj_V$~?#T7q zuRs2tPWqYm4!n2vh7~sq-tgu3-TuCx{_(Hfxbyw*d;jm;K-iecRKwZMyBm2iJe_(GPy*gQsr4@%H@f-~P}QAKLYy7w%Yn z$KV~$-tqkp-}~WT{BZrwJMaABUBh?%gS%$8-?;tA_V0b#nNZ|Gkp)E#6d6#@=|lF@^ZJnabVMJrp2&G3OE1z?A`020R&HML(bq97`}P!Hxkp2Fw`nV!(<4CkBid@L|Al1jEtS^nu+7ZX=kD z;5CBP2u>pyjo>qa_X5@nIE-MtfbU}2Zs%gREtXQ;R$; zvb4z2B14OnD`aPpn?+_8d0Av-k&{J67Wr6YW08yXe$SGV_dvEUxxQpPkncdY1Gx^# z9Y5n4adLaf>?N<4tX^_@$>=4Ym#hYI8pvoMpMh)!av8{EAdi78267l?buM|kWbKl( zOU5pF3uG;jt4qcL`3ht!T$noDtM}Y(dO{rV^Y$`r!|w;XAKZR0`@!o6s~?Nrhw-44nIQwAigRc*^KDhcG*KF#iwGB%j z9DOkK!OsT|8{B*_^A)uX+Ab)#F!I622X-smYcTP_!v_l=9DFeF!M_Ll9^89h&^6)R zgLMziJs9`k+kGc84>n_y-k{38$pm>4d z1%ekS*`RlU-34+N=nr5&fcyaN1E>#RK7jZD-UDb4U_F4*1$Q~j<)Cwc%>}*#=nkNA zf$R|L8&roooFPDd0NDZL29Oy*UI1AEV>kM3rV?qH8<-lMbk=I$bTjIQvx!sZG)Jlyaw!@~;?D?FU=Fv7zJ4;wsO@G!x{0}l&4 z9Plu}!~YKZJFKcOzr*_u>pPt9u%*J43NPvvlIVmanvp~^lIVn_5E`sLASQvA1X>bU zNgySGlLSf<7)c-`fsb^nY|MJ#*W|6Q$y;BOr@kgneNB3JReE?;dU(}*g|HRE+zwMA zJcV$!!%+xBA^e1}6T(dhGa69MF?nBH3-unJcFM*Lqr+%iyeQDuPhd~|wblB73PKP-i-gH>g;Y^1y9lmtf(&0)6 z69_~g@PI%A0t*NvAmae3u5;JI*U!+x*R2J3&tW}>^Bl%=_|9QFhwB`sb9l~SIfvsM zhI9DMFN}CPAfMhRpI$4UUMrv8C!gM@mMMlZ*%AhF_{U)%hkN`{ec&C3bsWxd7{}oo zhix3LahS&88HZ&Yj&T^q;TMNp{MU3Y%;NBh!zvD^IE>;i=mVQLT;ec^!y^uhI2__I zh{GQadpO+TFo(k%4r};@q2CQ^58qLHIJ+kdxA&cTKK!WOD@@+-c*Eiihc~@W-oyX= z>v0wC?$fdLNyXMDRU24kPpigf)dHXO8e(|5Vd;jW8-{N9xnbvqn;T|sc)4Naenj6e za>K_B8~3O64HGv!+^}%N!3_g9{M)c^!@UjjHoV(EDmKHj4a+th+c0dyuMN94+}bc} z!>bLeHk{fpYQv`un>Jk9Floc14U0A$+AwJUrs{<~8}4kFv*FE#H5<o^5&`h8LPK z!lcgvR`V&fw4YOaJgm2uO=@9>)v~^#7Ij1|>hy>N+|T_{iO1AdlfK3&wU$%8zQ#87 zHMXhMoKimn<^}p0r__25E2bV+Og*fadRQ^_uwv?A#ni)UAxG3gj;MtkQ42Yu7IH)_ z28USHwx+vGha zXY2;B7(rqLhY=J;Fc?8#1b-3qMUWb>Iqx-~F81GT;6m=d-|P_j!2LQ8Oa>4cKv;zP z80KTJ6+u=6R}oZ2Fcm>m1bqSQ1&|lOT>wWB6h$x;K~Mxg5%ff`6G2V{HxblCFcU#c z1TPV^M6eP;N(3hnl*AwPJ_ITvn268m19}432_Pqcga{5ID2QMnf`ADAA?Sx-AA)=c z?jfj$U>?4x&ryBAMgZ#&q(g8HK{*8D5Ih9X5I{Es+Yn?!a1B88G>a9 zk|8*TpcsN-*wqL8LeLAh$s$L47I<0Oe_7A9m!x#~ru%7E<%vLi@A-~@pZ1V#`DLEr;z&{aTLe9j0mAo+pg$9jIS^gz-BzYlg? zu=}3$)y0UV<3NdO=mTC~qz_nqAoVT%6|Yj%5^u0R@Y}*}3%4!Iw(#1*Y73_=jJELE z!e$GXEljrX*ur89hb;`YOQkayYT>7aD-)(ncrszhgd-D%O!zTj$AlXbW=wc7Va0?K z6GlwHrMa)AxysVpZ|SdinY;ilD0rMs>V4s)V*E+P_>+q9Cl%vQD#o8w zj6bQ^d{UkOOOcqO^p^7*ub&B{D?FpHjKVPrlPmn9u#3Vi3bQD@qOgj>DGH+~e4?<4 z!X*lmC_JLDh{7QXgDCu=u!q7O3UesDp|FO+846=4e4+ijS=9cOx|@pR&^m5?;9}jN z`&nAwI{&0Tf1VD@^IYdL&vky!7@gmDcVUd(EVqYqX%AQFdGdgIO%Lcf@_;kX;6Q`{ z5e7^6D`Av`PZBmsxFlhcghvt8^Bsw}PdUbJ%wUHOEYS| ze3c(QzqB-ZS^61-4Bw( z^-jq;r$fp+IiwtfvT_j0%0VbA2cfJyltaoxIix(4L&`@eFVWok(rae<9drWyV z>%z|_yYMAAzvo}h@4H)`={uL1zGZEli?%MzRmRIUJ{KD=YwKLJbz!!M^ZN<5e0P6% z9Ej!CdoHc_?K={Z64u!&tpT`1YXJJVap1y%3U_l44X%#__huY8@ZZ3G`_n>w>tnwC zg188l+S5W)`@FE-Kz{o^Hl ziV)uZUhtgo&YllE6;O#?|T7Oz2q*>$Jx;Y`e~>tDy|x=1KoEA&?%w@XX{!r2qb9#~|- zjV?Fmb0eAHHkWsnCMQb4-7a_Z(7a9~dr@1;b%GnlHmH4Twf=u&Z|_FeloIk@a_rqY z;@;pAQ02gr152)tA}8#)l#utp2wNf4ze|OQw;~u!tx@@~KAUyrpR%4)vgUolxBHxI d3)lz{Xfc9M412p literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/OFL.txt b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/OFL.txt new file mode 100644 index 0000000..98383e3 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/fonts/Lato/OFL.txt @@ -0,0 +1,93 @@ +Copyright (c) 2010-2014 by tyPoland Lukasz Dziedzic (team@latofonts.com) with Reserved Font Name "Lato" + +This Font Software is licensed under the SIL Open Font License, Version 1.1. +This license is copied below, and is also available with a FAQ at: +http://scripts.sil.org/OFL + + +----------------------------------------------------------- +SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007 +----------------------------------------------------------- + +PREAMBLE +The goals of the Open Font License (OFL) are to stimulate worldwide +development of collaborative font projects, to support the font creation +efforts of academic and linguistic communities, and to provide a free and +open framework in which fonts may be shared and improved in partnership +with others. + +The OFL allows the licensed fonts to be used, studied, modified and +redistributed freely as long as they are not sold by themselves. The +fonts, including any derivative works, can be bundled, embedded, +redistributed and/or sold with any software provided that any reserved +names are not used by derivative works. The fonts and derivatives, +however, cannot be released under any other type of license. The +requirement for fonts to remain under this license does not apply +to any document created using the fonts or their derivatives. + +DEFINITIONS +"Font Software" refers to the set of files released by the Copyright +Holder(s) under this license and clearly marked as such. This may +include source files, build scripts and documentation. + +"Reserved Font Name" refers to any names specified as such after the +copyright statement(s). + +"Original Version" refers to the collection of Font Software components as +distributed by the Copyright Holder(s). + +"Modified Version" refers to any derivative made by adding to, deleting, +or substituting -- in part or in whole -- any of the components of the +Original Version, by changing formats or by porting the Font Software to a +new environment. + +"Author" refers to any designer, engineer, programmer, technical +writer or other person who contributed to the Font Software. + +PERMISSION & CONDITIONS +Permission is hereby granted, free of charge, to any person obtaining +a copy of the Font Software, to use, study, copy, merge, embed, modify, +redistribute, and sell modified and unmodified copies of the Font +Software, subject to the following conditions: + +1) Neither the Font Software nor any of its individual components, +in Original or Modified Versions, may be sold by itself. + +2) Original or Modified Versions of the Font Software may be bundled, +redistributed and/or sold with any software, provided that each copy +contains the above copyright notice and this license. These can be +included either as stand-alone text files, human-readable headers or +in the appropriate machine-readable metadata fields within text or +binary files as long as those fields can be easily viewed by the user. + +3) No Modified Version of the Font Software may use the Reserved Font +Name(s) unless explicit written permission is granted by the corresponding +Copyright Holder. This restriction only applies to the primary font name as +presented to the users. + +4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font +Software shall not be used to promote, endorse or advertise any +Modified Version, except to acknowledge the contribution(s) of the +Copyright Holder(s) and the Author(s) or with their explicit written +permission. + +5) The Font Software, modified or unmodified, in part or in whole, +must be distributed entirely under this license, and must not be +distributed under any other license. The requirement for fonts to +remain under this license does not apply to any document created +using the Font Software. + +TERMINATION +This license becomes null and void if any of the above conditions are +not met. + +DISCLAIMER +THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT +OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE +COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL +DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM +OTHER DEALINGS IN THE FONT SOFTWARE. diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/icons/favicon.ico b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/icons/favicon.ico new file mode 100644 index 0000000..e69de29 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/otseca_logo.png b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/images/otseca_logo.png new file mode 100644 index 0000000000000000000000000000000000000000..61081dd4bd92ad331c12b78850362733266df1f8 GIT binary patch literal 9114 zcmch7Ra{%m7cDJr#U)6gxCAK<#fuatxYGc^tw4%f3w%)AEx1$Mp+G5KAi;}k(E!C= zdei^=eYh|8my_gV=48*BIWv2&z2-z|Ybq1s(cqz>p%JRQQ_w*}dq#;mf55>)eKu@I zGoZe(tkjeh(Ek2=<#&}Oqe^hy-x+(Nq2ZJLdp|?Vf>EOivAt9@6tOokU*chiFNApW zp`kINsVKy(v=Y!AeN z*+oZSw>?-LkHr&VV=M3-vE}>SqVoc3J0-sBn|m%kehxb(;wR|)zaBAM3S$^bG}YC1 z?wd2lKJ2z6iPIoEO3nTsr*Rwm(K9UZA0C>lAKDJe0i*oj%uJ@&*tI)!dOM%IU+_~w zc!$OF8$mhY?h?bm_mtY{L$#eD?gX>eIDDT3V~~R7-qcYKFIA*55z`7uT9Zrn*q&c- zqe-yLT0=>?$T#5m=RKMDelJGEe_MeZK%y9um}le`XT+LYa|%rHQ{T>8cht!!i-3T4 zyOI_(?c{9)L+u3HI_pq<4`?vP6U7$jscFl8Mo*%Jq2>b|qNVXLf;tLSb zk=>C=$jtKY$loldor1)g%B-{LAlp}d5+nPOWAftk<$R&3L7z{EH(4^wv)6xM#~ZI_ z)KS;&RF=3|9rlx^7$gjkH?T7i6iDJqhM%zP>584Pywr*l)v@Fl5jGEgbdY>}2uNrz z&yDVD=kO#!U?K*lJ&DDuL%xgQTx<@%yy_2jm4oyOoVV>{8PfqAl$+`8F)d^Q`H)5H z56>r+C$cO(tPWLzmLJs>mtIl6Nlv%n9g$DrmgPg|MRzRA39Wb{zW8rg?akhSKjIT2 zti;cu{qBhWDrjA6NG&4Z7OE->Q%)FWzBqa?hAwbk*@m?ioEhk?;dMf?Lj?}HEb z_v;yjz!fi1_XzZOuUC=W=xu?41;QfPC5e;z>v{Dj$M-R8=Zf3ihZ|{*yGU@hD2cIS z=+lt(v?9}-F9gQDpT6b;J=whoe*NWyECr)5@Z$1eEM|{g$dE^#362BO%MKCr;Gq2r zaJ$gGxF*VerD4=NAUrp=Ieh95GHJNE(jq2ZznE_Qwic6)U47)nS^=8i7M+g@hAn_g5~t z1v7Bf!m+*1o!pTh^Ua90cmIayb_!oyNIDF1Jv&Ci;G9KyXt(Y?qPauUnpl28c7p=o z3bVrcBiZC}c4cB|70c^K+hPx#pnHn-KtRC{<-3#xXk?bg&t+!%lF0; zvJA*l1*X2=m%);p-|ne;$L9`ZoNL*#j2dxi>(zA7!H(}UyxF5}u;H?)TVGqCjIB2| zybJ|=PcDK95MZj!;G2LKPf4B@{$CeLd*5AD$?aYK1j@isLnDBmS*M4kW;Gh3#zs%C zm~-v97B~c#r5LWKlE!!lDy(rA;iLOo2N((~5jeRiAD@S?T;v(qV(x~zf|HN*)L{%cH^yJ^VcmTH zzy7QvHXwv(%*f9{=uV?i?cH89F=n z;*-1kszU_I77>YCy;jO1OYh0ba~W0dA~T1NsM6`=IM2YD!C!Yc=E7fPE>Dl13&!B8 zWrhu8A6aW;M=*#4v{FsZWrNj?MlOnzFJ||&l9_EYw9g(`c5@+YC{6jWifFJz&tgNI90I2}|#F5QQW|B3V!Ph9ywT$aLFJbT;g+R%IH9^>!5ak^wSQA=l z{*tt$RsX~KQV1&asW`r_IieceYqiBd@v~W48M_+ngzE9_B&lhfW#6x8BU~HQPv7;9 z%Mh)W!fe2N^EiQxO>}Ihum!l^lu+P964)`UnkVZ0zb?pW_feW#6Plt1a#)b`IZaF8 zis_ixKX7kA-k87Ygi*LYZFF2l)?9IhR{gIbUjbzG+dzZxuZ{m8rcE(x3LMRQjw{MT z33-m-<;w}VRs4-KEt~2=ZzOD=x%TR?c?mtvJ0W|agt@_eE#J$WY}<9%?=+~JZ$!YH zy8L$-dFNIx_6QkdO-5bvh6>UKs|Ng)>~Uv567%Mw?wQAJGB1#wg|2tA<1z;6=;fi( z6Qt>muD0y3TDD5!nB!8wS(YNPHT#ix)Ce`NC}Y_(h+{*@NWp;1Uj@lZ^QEqJisign zPeeE|NDoFzJpV|TZAn6^e5$-($Dw#*-v^}5LtuKUVg(_B3%0W}SDg2auJr^3Z4Q3> z--Y$hM){;W2Hr_N{UFZbX1ja30L11}Scw_QZB_hyn1Yd)6jPt#QzE=zuO7x^XSZw0 zOjR|M^qoy+XzNee$(=UL4+%X}Y-$qKvXtqZ?b(d_h%*^u4@Eq8YhcK$|KAX>7LS*9 z>C27d%?hh~gAPmMlwc}_Nez88n=4>n=9JuepR{@-PCZ_xpLT(&F`|g7y^09HISl!L$@TzYj}gOV-qe5mxiamo3a7takM zT$P&E-pX#ZQvO1@jG#r|@0Yk^YL)keUmcY$SdFEC1Y~KXRD1V<{X1VOyOtfZNsd_8 z5`&b>tF!ESb!^nS4&GBX3Xk3E+T@W3FcMCJFoV)M*%T<C zX}+}~YXt3aM@@R$j~tzx=(*B0NPn`=x1amsJCdcTYNvHc8w4urn_KDgf{l|c8Y-V= zHW$K5bk6p@z@R9DIbnkh(liy9pCjoJxN5$nX}_g=3k~(PS~gcLQq_#OT=uO5MeLuU zx(Gl;C*}wHsY!8#+78K!xt$Ke{Qaexh;}eOadZxDCuCFjl;CsM_l6J=a7D34`J2ZC zGWz6j6nfRi8Al)Y>~ikqD)D=l(#p$J$GWo4@EqcP>imjel=WCTl8R8_;@|PreBrWGTD@r+6A(i_ZYT?I>jIlNT9f#?eB!+T^GPqW@}cYSmA3#w>H zttXTI+UtAFcACJ0v;nB$sCY5-c=wojGy}>MVsdVL?uztC*|<R-gSo#T_o4eU>~|Lh@OB|Z4R-;|dhkuR)I zwS~#sasPpr3zaJSZF$bKX?o3JZo#Xl%#8? zD$mULaiV{>xh9NmJg5^$7rem`S{5jMTL~zWol)qPziUWVp6npBr5iP>OfJg{ii*Iz z|B>0Lzi&Jyb4>n13LGu2^%dhw_4AtR+bzC#hfSasHlY641le05STNi05}UOCwki!T z(t7Wd9sbU@u0N1=M5dIUsy$xenhGv!fCmrpTDb@AZCns_ejD`O6ZH52Jva^crB9MO z@a9R>mXRziQ_k%eC-(;UP;B>_%Tfe=dpPo1aXogww~(Rad+9^@d!zE= z@2nE>=ez+?YxFnu08V_9MOVyQH)*Cv);qs$Fcues$hUTwg7q5uYUUpbH$WiK;{-uU zD65OwiB0x6dwjy4g(Fsjj{VN2;?tXxfIIZL_UyFzY`Cmk;ZzVw?(*;R49PDu%g$H= z;7rsi@T1)33y{tXA2G;U+RaL2OPArX+wi@9);JZe=vLykJ8fHhW-XQG;kma?jL%Dr znWlcX<)x6$zgrl*kvU{3@HTOAqU+b~3-|8vvV;AD+cdyW0m|Pjfv0>--S^m*@_`;- z0rs$kpKfUB#dch0^rS1^S)p9mPOAo_lk?so0}ex}D;M6u@0FHH#jgm%J~Dt7)GQxX zC?(VCspa;D^U$#ax4!4>wA7B7fgJ9?)Ry%bGcK!I;9@Exfm9;&-skkIwtV;n|*psqgt}4sH3l1?WWK zx_VZ$A^Okqp0ae4{)Vrv+VK$ge!ev7RRDfuD+)mO@edJYh{&QS$mBb(nWq)g?~Xuj zhtBD82P;Vi^~2nHt;kWcWvw7!c&$hvCjEisk;tX?WU7qf;%j$_78m}vXoc~=B6itz z)Fl+@GKvdmGnhDIL?>~zmBacog@5d1-3V_ksQ0)?rHC?;HH>0B>e?=~%A*44OJ1$h zepl|)r)ad-6Z-i2gmrx?#Eq{1!xK#ETd*~PQ1n+Pq2PacH|UADj-grE7RvOM0kGkmp0!-6~Eb;4(BJ_*11mWSg>$1|*XtY34L3VE!dKUnJ7Vfx&0 zx=Smq{dr2tH9VN5LPd#f0%JVJ;I~Xq!k&ewlsu}<6`k47a4_3wi_Sq}S57kPUkGM(CwyMOye&iw~^{5rO&A2C>uqRS~P{&SC|8gYaTd@s)-f7WfLNMuJ?JupkVZDxt z60`jjux0dXbKh}-O)vtSQK!x@SB<@s{feM3ti+w}8mRUfMIPnTV9M}9y!*d8I&h9&d z7k)EBWb>36Q>Iq0R43yDw?#kP)XZct8+05&@SMsfj~>Sy#`OlzmBG^AS2P4T{xiPz z#@)`?b>7~Yv-b@40Hjm2AuDUBw%=WznS2-9>h-WOnKG2qg${#nXR&Z^Q;@sLK?j;f zV+`rK+8ISBlI8_cpqMC;&b^9`i+iNECrgy7_0#&kXF94^C4du`ZMS4_|rDo-Rr7Pq<2b?4tvnpomI zF7C+{QPAx)p^qVQO`(_2^G16HioBAM3k#S#Q=kRPH){2cti}f+?~>`3Sln^7dLz|H@qYN;Htnxo{{_&!rqj z0A^$P6+f%nP(#orc^x5))vnMLzc_ylF|SY4QAj6&Wy$EloB;D*S_vjAL*>i+MHd=9 zR(ap46>Jy}g5S_G{fyls7p)L8mBT8Zeap90UQv`7`Kzb{$6m=EuOX#s_+NF*m0oJFS?y^$EQX%5J2-2Z4xC~WeTLq zA#L?fKUswwv$ zpokZT@Ov6cpz~nu0=vNQL}+g;K`}(z)J2yTr9fr%hl9i53 zh3hWg%e?h-0LH^_mX101by-)9jkobKqZ2>;9op78-1U1}X^iVm_}^k*ZwDYMX$5Qu zmdaCU_m2=#A`vhC{N4<=v{UEB;)SsgWbenj!I5hYZ6Ss=rXQIQ>?&Th;Juzzn2T=` zI<^u(VqUQi(@jN26m5s!YyHV;^=bfa^iMdA#qJg+UQx0fAL+%JC)X;K@U>g5#ZXJF zZ|V;^a{4O2@DqA)?nj$K(?)%LgdIund08)k{e9_9rF)8rukx?mynUD!9=OI>b=|i$ zaAW(Bk-<`Ng~Hd4U3Vpz`HpODoOHzvxKnMpymM4;>tkM-jnBpS2jdpZK@hTn@7S79T}?`ZDrW@iocc_bOP|+Xg8ZDae5paG_5xDd0S~ zBa%RuU6kU;+bKslv{qQ(Figj&)8>{VAkDXr=W$=IrH zOja14>Js|UGI{G+D1mAkma^%k!2m*!?w5#t=)Tv~RDKmC49|kVv;`yW!{q#6648z4 zN<_~-VY4$2(v98e)27V_r8gMWYCr+A6w>mf4=Y$R_|#us#l8ZDKR;-#nKGWm#Ty$r zYMiMT?&J6kiLvi24lJCMm60~M$Q(xhc7?fUCG_?eX%la~-z*OoN{s|Y@h~H6m}!G}0sI!Ow8nts#Wc zgfs>$9c6cZixLoaZM;-_u3E!zzZItyPOw4z-2|K4y>nuiGixGR{w6_0x z*@1Eu_MBy|L%-iDEWId;b*#EbT}Sz5`>4QxFTOnIAmgFPnj+Q~hD6>$7(HfdZJMu} zBiNGi?JB$A_;*R(@eUSDW*SooUKTaL=yr@obtJR_gzvSIkAc)#_24OE9+cj9KfUh&_ za8e_7X7Krd!gg~#QF!f=;xue_#ZhXyL*2lgN%iiEw8Shx0C{TlOuhKAhf2ngQ@2%> zVRH87Ru(j3S7Tx;ys?zFo2d`5J4Jz8)+Fi+(Ann~taDW?vJb0jIi0v)#B8ewq|)Ri zA-!wN95z?aO?A|mW2!SeenxtQ8huGNQ=NfBFWclE(xW-}RLZ_qVw9kK_&X2g+#Rm1 z3dkEtH-<8C^!{)0Hz|+$I(RuBA26&*VwfQOG4XURt_O6MRTb0TM})!Q?cty-_mymJ zN9e<$FTw1kuTaIV{vm~MD|C~k(QH+h2;H0my~ND6K_IN8)jO>GxI?le_zX8Xz-gxL z`zy3T^so3v$$pQ+I{APLBL#z1hdRZuM$@Hh4Xg%7~8{()NHquif9dc|5ed7w>LHcY9FU&EpJL5b1(ajsk5VNGSG-3Ls`l#LjN!p=Gp=krz5X&x zSHRbut1wOxsz%%iYgcb3kdsZ;<7%pSlRKI!b=B}{y5YqhxHD1>C6F2IiclyU3GMBq zmat|Xqr}@t;OM?>g%TAIx|T$l;mGMC%v*~Zrr82S2W`dafH__MedZt+7AQ1Ga> zDl_m=%DnqrGG!sg=d0S85Kb1-lG}WY<*uU@13_+JD=0B*BeVcGX%*Gmx-4}a9(t%v z9WfGNwl8EUrbOV`S$DBWQHF%5gm|b~SaW%Jm`pIqSj>&VMDoDF4mq0?b|+h1rC;DC z&+Vd|K3MZPdD{oRZ_(Ls^B>^@Hap|Na*!;?ys9S1j?3Rmb~mE^j_2kX9QM6wqB0jG zj5Au9fmouS<|w;5?OhLSqOwiXXob`sY^FPmw!MF$lb~mfI6s(wFm86hrZCnguIobTOvJRb3ZP0aGtvX- z1rbiCj;>h-Zmhchbx#CF=vA(U4gG6$+G3uwxnyvvCrf(i$0w-AGlavLH+ZszXUjP5)sx0q4vb1sZDOJdy@|m>M;ByN}eVQpM4IQn4oWawg%5#mO;-S99!@>gAD>x}u?> z)BbxF03f39#uqVhd1gRw;UN+ywCO-L5$2xK{U^H2ce+$T34*44E!V&Mb62<^%i$o^ zP$0y_N*rJIDoCA2He9f$V)aQ#PJIRAJOsh{C~hue>yL29vB9>N(cI#&rh~knlSWb8 z3h-5%%bPOTWlrpSt!DA;VKz<3c?wa|O#jRPXndfduOk8 z_X3C{yrgM5;lCGutXCD^5Z4kGi;Z$b5-=m~_oAsjO7?`JD;v27y^WA6Yy=0dznprD z{i4LV$PmqrLh6Q0>RM|&o=RG8*>kqfM|f_M;h59tkf+U^xO1nl-@;L@#MHClpfeiF zy^XRQeo}qgv(2Hw_ZK@oo}o6UVYwptIw{3ut-)n)oqhoC^?y45ygpPD_**jV;qwQ< zW;0OJ!f3^jU|HiB_&lZMr#HCl@bllDPc~?%unc0KqlCvpHLKS97Vke^ms#<-w~hr6 zeoHo~85T#Un{SRU_H-c$kct#LW}OUlshlCq81!%$+MfmC-KJ6%ts;Bi@P=-@6{TuV zWt9l|GS$M^t@BFpxhCn7#!FRkGcWn#1+!)N2CWp?HI+pQOg1m>!>G@zM( z2E7`{5;Yulf1~!Q_P&<{u0)%Spq@tL`si@Y~kUdoKDUr7<44)VtF@zwY|-tc0-)a tKd6+=mLfD;XO#K>E+PyPtp7#l_Ii_t7SgkUdWr^3MNw0sM*jV${{swHrsx0w literal 0 HcmV?d00001 diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/index.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/index.html new file mode 100644 index 0000000..b359ffb --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/index.html @@ -0,0 +1,144 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
TYPEREPORT FILEDESCRIPTION
Systemsystem.all.log.htmlIt contains tasks related directly to the system
Kernelkernel.all.log.htmlIt contains tasks related directly to the kernel
Permissionspermissions.all.log.htmlIt contains tasks related directly to the permissions
Servicesservices.all.log.htmlIt contains tasks related directly to the system services
Networknetwork.all.log.htmlIt contains tasks related directly to the network stack
Distributiondistro.all.log.htmlIt contains tasks related directly to the distribution stack
Externalexternal.all.log.htmlIt contains all external (user) tasks
+ + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/js/main.js b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/js/main.js new file mode 100644 index 0000000..02e17d2 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/js/main.js @@ -0,0 +1,25 @@ + +(function ($) { + "use strict"; + $('.column100').on('mouseover',function(){ + var table1 = $(this).parent().parent().parent(); + var table2 = $(this).parent().parent(); + var verTable = $(table1).data('vertable')+""; + var column = $(this).data('column') + ""; + + $(table2).find("."+column).addClass('hov-column-'+ verTable); + $(table1).find(".row100.head ."+column).addClass('hov-column-head-'+ verTable); + }); + + $('.column100').on('mouseout',function(){ + var table1 = $(this).parent().parent().parent(); + var table2 = $(this).parent().parent(); + var verTable = $(table1).data('vertable')+""; + var column = $(this).data('column') + ""; + + $(table2).find("."+column).removeClass('hov-column-'+ verTable); + $(table1).find(".row100.head ."+column).removeClass('hov-column-head-'+ verTable); + }); + + +})(jQuery); \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/kernel.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/kernel.all.log.html new file mode 100644 index 0000000..738e9da --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/kernel.all.log.html @@ -0,0 +1,856 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec lsmod
+
+
+ + + + + + +
+
Module                  Size  Used by
+iptable_nat            16384  0
+nf_conntrack_ipv4      20480  1
+nf_defrag_ipv4         16384  1 nf_conntrack_ipv4
+nf_nat_ipv4            16384  1 iptable_nat
+nf_nat                 28672  1 nf_nat_ipv4
+nf_conntrack          106496  3 nf_nat,nf_nat_ipv4,nf_conntrack_ipv4
+iptable_filter         16384  0
+ip_tables              24576  2 iptable_filter,iptable_nat
+x_tables               36864  2 ip_tables,iptable_filter
+tcp_diag               16384  0
+udp_diag               16384  0
+inet_diag              20480  2 tcp_diag,udp_diag
+binfmt_misc            20480  1
+crct10dif_pclmul       16384  0
+crc32_pclmul           16384  0
+ghash_clmulni_intel    16384  0
+aesni_intel           167936  0
+aes_x86_64             20480  1 aesni_intel
+lrw                    16384  1 aesni_intel
+gf128mul               16384  1 lrw
+glue_helper            16384  1 aesni_intel
+ablk_helper            16384  1 aesni_intel
+cryptd                 20480  3 ghash_clmulni_intel,aesni_intel,ablk_helper
+input_leds             16384  0
+joydev                 20480  0
+serio_raw              16384  0
+virtio_rng             16384  0
+autofs4                40960  2
+btrfs                 995328  0
+raid10                 49152  0
+raid456               106496  0
+async_raid6_recov      20480  1 raid456
+async_memcpy           16384  2 raid456,async_raid6_recov
+async_pq               16384  2 raid456,async_raid6_recov
+async_xor              16384  3 async_pq,raid456,async_raid6_recov
+async_tx               16384  5 async_pq,raid456,async_xor,async_memcpy,async_raid6_recov
+xor                    24576  2 btrfs,async_xor
+raid6_pq              102400  4 async_pq,raid456,btrfs,async_raid6_recov
+libcrc32c              16384  1 raid456
+raid1                  40960  0
+raid0                  20480  0
+multipath              16384  0
+linear                 16384  0
+hid_generic            16384  0
+usbhid                 53248  0
+hid                   122880  2 hid_generic,usbhid
+psmouse               131072  0
+ahci                   40960  0
+libahci                32768  1 ahci
+virtio_scsi            20480  2
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl fs.suid_dumpable 1
+
+
+ + + + + + +
+
fs.suid_dumpable = 0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl kernel.randomize_va_space 0
+
+
+ + + + + + +
+
kernel.randomize_va_space = 2
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.ip_forward 1
+
+
+ + + + + + +
+
net.ipv4.ip_forward = 0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.send_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.send_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.send_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.send_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.accept_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.accept_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.accept_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.accept_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.accept_source_route 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.accept_source_route = 0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.accept_source_route 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.accept_source_route = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.secure_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.secure_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.secure_redirects 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.secure_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.log_martians 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.log_martians = 0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.log_martians 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.log_martians = 0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.icmp_echo_ignore_broadcasts 1
+
+
+ + + + + + +
+
net.ipv4.icmp_echo_ignore_broadcasts = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.icmp_ignore_bogus_error_responses 1
+
+
+ + + + + + +
+
net.ipv4.icmp_ignore_bogus_error_responses = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.all.rp_filter 1
+
+
+ + + + + + +
+
net.ipv4.conf.all.rp_filter = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.conf.default.rp_filter 1
+
+
+ + + + + + +
+
net.ipv4.conf.default.rp_filter = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv4.tcp_syncookies 1
+
+
+ + + + + + +
+
net.ipv4.tcp_syncookies = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv6.conf.all.accept_ra 1
+
+
+ + + + + + +
+
net.ipv6.conf.all.accept_ra = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv6.conf.default.accept_ra 1
+
+
+ + + + + + +
+
net.ipv6.conf.default.accept_ra = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv6.conf.all.accept_redirects 1
+
+
+ + + + + + +
+
net.ipv6.conf.all.accept_redirects = 1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _sysctl net.ipv6.conf.default.accept_redirects 1
+
+
+ + + + + + +
+
net.ipv6.conf.default.accept_redirects = 1
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/network.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/network.all.log.html new file mode 100644 index 0000000..f0b9f26 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/network.all.log.html @@ -0,0 +1,420 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec hostname -f
+
+
+ + + + + + +
+
it-sec-test-vm
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ifconfig -a
+
+
+ + + + + + +
+
eth0      Link encap:Ethernet  HWaddr 96:00:00:8b:fc:bd  
+          inet addr:116.203.241.83  Bcast:116.203.241.83  Mask:255.255.255.255
+          inet6 addr: 2a01:4f8:c2c:410b::1/64 Scope:Global
+          inet6 addr: fe80::9400:ff:fe8b:fcbd/64 Scope:Link
+          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+          RX packets:19640 errors:0 dropped:0 overruns:0 frame:0
+          TX packets:17557 errors:0 dropped:0 overruns:0 carrier:0
+          collisions:0 txqueuelen:1000 
+          RX bytes:114666872 (114.6 MB)  TX bytes:2305519 (2.3 MB)
+
+lo        Link encap:Local Loopback  
+          inet addr:127.0.0.1  Mask:255.0.0.0
+          inet6 addr: ::1/128 Scope:Host
+          UP LOOPBACK RUNNING  MTU:65536  Metric:1
+          RX packets:426 errors:0 dropped:0 overruns:0 frame:0
+          TX packets:426 errors:0 dropped:0 overruns:0 carrier:0
+          collisions:0 txqueuelen:1 
+          RX bytes:23320 (23.3 KB)  TX bytes:23320 (23.3 KB)
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec iwconfig
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec netstat -tunap
+
+
+ + + + + + +
+
Active Internet connections (servers and established)
+Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
+tcp        0      0 0.0.0.0:5355            0.0.0.0:*               LISTEN      23188/systemd-resol
+tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1333/sshd       
+tcp        0    116 116.203.241.83:22       95.208.80.10:10344      ESTABLISHED 1380/0          
+tcp6       0      0 :::5355                 :::*                    LISTEN      23188/systemd-resol
+tcp6       0      0 :::22                   :::*                    LISTEN      1333/sshd       
+udp        0      0 0.0.0.0:68              0.0.0.0:*                           947/dhclient    
+udp        0      0 0.0.0.0:5355            0.0.0.0:*                           23188/systemd-resol
+udp6       0      0 :::5355                 :::*                                23188/systemd-resol
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec netstat -rn
+
+
+ + + + + + +
+
Kernel IP routing table
+Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
+0.0.0.0         172.31.1.1      0.0.0.0         UG        0 0          0 eth0
+172.31.1.1      0.0.0.0         255.255.255.255 UH        0 0          0 eth0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec iptables -nL -v
+
+
+ + + + + + +
+
Chain INPUT (policy ACCEPT 4465 packets, 12M bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+Chain OUTPUT (policy ACCEPT 5321 packets, 720K bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec iptables -nL -v -t nat
+
+
+ + + + + + +
+
Chain PREROUTING (policy ACCEPT 36 packets, 1772 bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+Chain INPUT (policy ACCEPT 36 packets, 1772 bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+Chain OUTPUT (policy ACCEPT 136 packets, 6730 bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+Chain POSTROUTING (policy ACCEPT 136 packets, 6730 bytes)
+ pkts bytes target     prot opt in     out     source               destination         
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec iptables -S
+
+
+ + + + + + +
+
-P INPUT ACCEPT
+-P FORWARD ACCEPT
+-P OUTPUT ACCEPT
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec lsof -ni
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/permissions.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/permissions.all.log.html new file mode 100644 index 0000000..c8d79e9 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/permissions.all.log.html @@ -0,0 +1,2110 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ls -l /tmp
+
+
+ + + + + + +
+
total 4
+drwx------ 3 root root 4096 Jan  7 17:41 systemd-private-80cc91d5c219426eadaa3b4617e96328-systemd-timesyncd.service-REbPX0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ls -l /etc/rc*.d
+
+
+ + + + + + +
+
/etc/rc0.d:
+total 4
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 K01atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 K01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 K01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 K01mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K01plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 K01qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  20 Dec 10 15:29 K01resolvconf -> ../init.d/resolvconf
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 K01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  17 Dec 10 15:28 K01urandom -> ../init.d/urandom
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K02sendsigs -> ../init.d/sendsigs
+lrwxrwxrwx 1 root root  17 Dec 10 15:34 K03rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K04hwclock.sh -> ../init.d/hwclock.sh
+lrwxrwxrwx 1 root root  22 Dec 10 15:34 K04umountnfs.sh -> ../init.d/umountnfs.sh
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K05networking -> ../init.d/networking
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K06umountfs -> ../init.d/umountfs
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K07cryptdisks -> ../init.d/cryptdisks
+lrwxrwxrwx 1 root root  26 Dec 10 15:34 K08cryptdisks-early -> ../init.d/cryptdisks-early
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K09umountroot -> ../init.d/umountroot
+lrwxrwxrwx 1 root root  24 Dec 10 15:34 K10mdadm-waitidle -> ../init.d/mdadm-waitidle
+lrwxrwxrwx 1 root root  14 Dec 10 15:34 K11halt -> ../init.d/halt
+-rw-r--r-- 1 root root 353 Jan 19  2016 README
+
+/etc/rc1.d:
+total 4
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 K01atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 K01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 K01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 K01mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 K01qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  17 Dec 10 15:34 K03rsyslog -> ../init.d/rsyslog
+-rw-r--r-- 1 root root 369 Jan 19  2016 README
+lrwxrwxrwx 1 root root  19 Dec 10 15:28 S01killprocs -> ../init.d/killprocs
+lrwxrwxrwx 1 root root  16 Dec 10 15:28 S02single -> ../init.d/single
+
+/etc/rc2.d:
+total 4
+-rw-r--r-- 1 root root 677 Feb  5  2016 README
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 S01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 S01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  17 Dec 10 15:29 S01rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 S01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02acpid -> ../init.d/acpid
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 S02atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  14 Dec 10 15:29 S02cron -> ../init.d/cron
+lrwxrwxrwx 1 root root  14 Dec 10 15:36 S02dbus -> ../init.d/dbus
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 S02qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  15 Jan  7 17:47 S02rsync -> ../init.d/rsync
+lrwxrwxrwx 1 root root  13 Dec 10 15:32 S02ssh -> ../init.d/ssh
+lrwxrwxrwx 1 root root  21 Dec 10 15:33 S03grub-common -> ../init.d/grub-common
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03ondemand -> ../init.d/ondemand
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 S03plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03rc.local -> ../init.d/rc.local
+
+/etc/rc3.d:
+total 4
+-rw-r--r-- 1 root root 677 Feb  5  2016 README
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 S01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 S01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  17 Dec 10 15:29 S01rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 S01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02acpid -> ../init.d/acpid
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 S02atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  14 Dec 10 15:29 S02cron -> ../init.d/cron
+lrwxrwxrwx 1 root root  14 Dec 10 15:36 S02dbus -> ../init.d/dbus
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 S02qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  15 Jan  7 17:47 S02rsync -> ../init.d/rsync
+lrwxrwxrwx 1 root root  13 Dec 10 15:32 S02ssh -> ../init.d/ssh
+lrwxrwxrwx 1 root root  21 Dec 10 15:33 S03grub-common -> ../init.d/grub-common
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03ondemand -> ../init.d/ondemand
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 S03plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03rc.local -> ../init.d/rc.local
+
+/etc/rc4.d:
+total 4
+-rw-r--r-- 1 root root 677 Feb  5  2016 README
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 S01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 S01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  17 Dec 10 15:29 S01rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 S01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02acpid -> ../init.d/acpid
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 S02atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  14 Dec 10 15:29 S02cron -> ../init.d/cron
+lrwxrwxrwx 1 root root  14 Dec 10 15:36 S02dbus -> ../init.d/dbus
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 S02qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  15 Jan  7 17:47 S02rsync -> ../init.d/rsync
+lrwxrwxrwx 1 root root  13 Dec 10 15:32 S02ssh -> ../init.d/ssh
+lrwxrwxrwx 1 root root  21 Dec 10 15:33 S03grub-common -> ../init.d/grub-common
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03ondemand -> ../init.d/ondemand
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 S03plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03rc.local -> ../init.d/rc.local
+
+/etc/rc5.d:
+total 4
+-rw-r--r-- 1 root root 677 Feb  5  2016 README
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 S01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 S01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  17 Dec 10 15:29 S01rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 S01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02acpid -> ../init.d/acpid
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 S02atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  14 Dec 10 15:29 S02cron -> ../init.d/cron
+lrwxrwxrwx 1 root root  14 Dec 10 15:36 S02dbus -> ../init.d/dbus
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 S02mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 S02qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  15 Jan  7 17:47 S02rsync -> ../init.d/rsync
+lrwxrwxrwx 1 root root  13 Dec 10 15:32 S02ssh -> ../init.d/ssh
+lrwxrwxrwx 1 root root  21 Dec 10 15:33 S03grub-common -> ../init.d/grub-common
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03ondemand -> ../init.d/ondemand
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 S03plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  18 Dec 10 15:29 S03rc.local -> ../init.d/rc.local
+
+/etc/rc6.d:
+total 4
+lrwxrwxrwx 1 root root  13 Dec 10 15:34 K01atd -> ../init.d/atd
+lrwxrwxrwx 1 root root  22 Dec 10 15:35 K01lvm2-lvmetad -> ../init.d/lvm2-lvmetad
+lrwxrwxrwx 1 root root  23 Dec 10 15:35 K01lvm2-lvmpolld -> ../init.d/lvm2-lvmpolld
+lrwxrwxrwx 1 root root  15 Dec 10 15:34 K01mdadm -> ../init.d/mdadm
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K01plymouth -> ../init.d/plymouth
+lrwxrwxrwx 1 root root  26 Dec 10 15:35 K01qemu-guest-agent -> ../init.d/qemu-guest-agent
+lrwxrwxrwx 1 root root  20 Dec 10 15:29 K01resolvconf -> ../init.d/resolvconf
+lrwxrwxrwx 1 root root  29 Dec 10 15:35 K01unattended-upgrades -> ../init.d/unattended-upgrades
+lrwxrwxrwx 1 root root  17 Dec 10 15:28 K01urandom -> ../init.d/urandom
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K02sendsigs -> ../init.d/sendsigs
+lrwxrwxrwx 1 root root  17 Dec 10 15:34 K03rsyslog -> ../init.d/rsyslog
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K04hwclock.sh -> ../init.d/hwclock.sh
+lrwxrwxrwx 1 root root  22 Dec 10 15:34 K04umountnfs.sh -> ../init.d/umountnfs.sh
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K05networking -> ../init.d/networking
+lrwxrwxrwx 1 root root  18 Dec 10 15:34 K06umountfs -> ../init.d/umountfs
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K07cryptdisks -> ../init.d/cryptdisks
+lrwxrwxrwx 1 root root  26 Dec 10 15:34 K08cryptdisks-early -> ../init.d/cryptdisks-early
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 K09umountroot -> ../init.d/umountroot
+lrwxrwxrwx 1 root root  24 Dec 10 15:34 K10mdadm-waitidle -> ../init.d/mdadm-waitidle
+lrwxrwxrwx 1 root root  16 Dec 10 15:34 K11reboot -> ../init.d/reboot
+-rw-r--r-- 1 root root 351 Jan 19  2016 README
+
+/etc/rcS.d:
+total 4
+-rw-r--r-- 1 root root 447 Jan 19  2016 README
+lrwxrwxrwx 1 root root  23 Dec 10 15:29 S01console-setup -> ../init.d/console-setup
+lrwxrwxrwx 1 root root  21 Dec 10 15:29 S02hostname.sh -> ../init.d/hostname.sh
+lrwxrwxrwx 1 root root  24 Dec 10 15:29 S02mountkernfs.sh -> ../init.d/mountkernfs.sh
+lrwxrwxrwx 1 root root  22 Dec 10 15:34 S02plymouth-log -> ../init.d/plymouth-log
+lrwxrwxrwx 1 root root  20 Dec 10 15:29 S02resolvconf -> ../init.d/resolvconf
+lrwxrwxrwx 1 root root  14 Dec 10 15:29 S03udev -> ../init.d/udev
+lrwxrwxrwx 1 root root  24 Dec 10 15:32 S04keyboard-setup -> ../init.d/keyboard-setup
+lrwxrwxrwx 1 root root  26 Dec 10 15:32 S05mountdevsubfs.sh -> ../init.d/mountdevsubfs.sh
+lrwxrwxrwx 1 root root  16 Dec 10 15:32 S05procps -> ../init.d/procps
+lrwxrwxrwx 1 root root  20 Dec 10 15:32 S06hwclock.sh -> ../init.d/hwclock.sh
+lrwxrwxrwx 1 root root  22 Dec 10 15:32 S07checkroot.sh -> ../init.d/checkroot.sh
+lrwxrwxrwx 1 root root  26 Dec 10 15:34 S08cryptdisks-early -> ../init.d/cryptdisks-early
+lrwxrwxrwx 1 root root  32 Dec 10 15:32 S09checkroot-bootclean.sh -> ../init.d/checkroot-bootclean.sh
+lrwxrwxrwx 1 root root  14 Dec 10 15:32 S09kmod -> ../init.d/kmod
+lrwxrwxrwx 1 root root  14 Dec 10 15:35 S09lvm2 -> ../init.d/lvm2
+lrwxrwxrwx 1 root root  17 Dec 10 15:32 S09urandom -> ../init.d/urandom
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 S10cryptdisks -> ../init.d/cryptdisks
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 S11checkfs.sh -> ../init.d/checkfs.sh
+lrwxrwxrwx 1 root root  21 Dec 10 15:34 S12mountall.sh -> ../init.d/mountall.sh
+lrwxrwxrwx 1 root root  20 Dec 10 15:34 S12networking -> ../init.d/networking
+lrwxrwxrwx 1 root root  31 Dec 10 15:34 S13mountall-bootclean.sh -> ../init.d/mountall-bootclean.sh
+lrwxrwxrwx 1 root root  21 Dec 10 15:34 S13mountnfs.sh -> ../init.d/mountnfs.sh
+lrwxrwxrwx 1 root root  31 Dec 10 15:34 S14mountnfs-bootclean.sh -> ../init.d/mountnfs-bootclean.sh
+lrwxrwxrwx 1 root root  21 Dec 10 15:34 S15bootmisc.sh -> ../init.d/bootmisc.sh
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/hosts.allow
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/hosts.allow'
+  Size: 411       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 4451        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:42:23.884934309 +0100
+Modify: 2020-12-10 15:32:35.077309000 +0100
+Change: 2020-12-10 15:32:35.077309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/hosts.allow
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/hosts.allow
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/hosts.deny
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/hosts.deny'
+  Size: 711       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 4847        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:42:23.884934309 +0100
+Modify: 2020-12-10 15:32:35.077309000 +0100
+Change: 2020-12-10 15:32:35.077309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/hosts.deny
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/hosts.deny
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /boot/grub/grub.cfg
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/boot/grub/grub.cfg'
+  Size: 6073      	Blocks: 16         IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 36          Links: 1
+Access: (0444/-r--r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:06.686995140 +0100
+Modify: 2020-12-10 15:36:33.529127159 +0100
+Change: 2020-12-10 15:36:33.529127159 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: boot/grub/grub.cfg
+# owner: root
+# group: root
+user::r--
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /boot/grub/grub.cfg
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/securetty
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/securetty'
+  Size: 4038      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 2856        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2020-12-10 15:28:24.601309000 +0100
+Modify: 2016-03-29 11:25:06.000000000 +0200
+Change: 2020-12-10 15:27:40.329309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/securetty
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/securetty
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/inittab
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/fstab
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/fstab'
+  Size: 573       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 24          Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:46.688000000 +0100
+Modify: 2020-12-10 15:27:10.853309000 +0100
+Change: 2020-12-10 15:29:23.145309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/fstab
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/fstab
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/bashrc
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/profile
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/profile'
+  Size: 575       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 410         Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:42:30.655516902 +0100
+Modify: 2015-10-22 19:15:21.000000000 +0200
+Change: 2020-12-10 15:27:42.457309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/profile
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/profile
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/default/useradd
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/default/useradd'
+  Size: 1118      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 3158        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:46:07.274637679 +0100
+Modify: 2016-03-29 11:25:04.000000000 +0200
+Change: 2020-12-10 15:27:40.425309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/default/useradd
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/default/useradd
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/sysctl.conf
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/sysctl.conf'
+  Size: 2084      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 4052        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:42.740000000 +0100
+Modify: 2015-09-06 07:30:20.000000000 +0200
+Change: 2020-12-10 15:27:40.637309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/sysctl.conf
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/sysctl.conf
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "hard core" /etc/security/limits.conf
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "hard core" /etc/security/limits.d/*
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep pam_wheel.so /etc/pam.d/su
+
+
+ + + + + + +
+
# auth       required   pam_wheel.so
+# auth       sufficient pam_wheel.so trust
+# auth       required   pam_wheel.so deny group=nosu
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep wheel /etc/group
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/pam.d/system-auth
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/pam.d/sshd
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/pam.d/sshd'
+  Size: 2133      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 33215       Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:42:23.984721210 +0100
+Modify: 2020-05-27 01:17:32.000000000 +0200
+Change: 2020-12-10 15:32:36.805309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/pam.d/sshd
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/pam.d/sshd
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/pam.d/su
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/pam.d/su'
+  Size: 2257      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 2857        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:03.242911539 +0100
+Modify: 2015-11-12 23:12:32.000000000 +0100
+Change: 2020-12-10 15:27:40.333309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/pam.d/su
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/pam.d/su
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/passwd
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/passwd'
+  Size: 1429      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 12323       Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:42.736000000 +0100
+Modify: 2020-12-10 15:36:02.225262561 +0100
+Change: 2020-12-10 15:36:02.237262412 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/passwd
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/passwd
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/shadow
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/shadow'
+  Size: 770       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 11286       Links: 1
+Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (   42/  shadow)
+Access: 2021-01-07 17:41:48.080000000 +0100
+Modify: 2021-01-07 17:41:46.704000000 +0100
+Change: 2021-01-07 17:41:46.708000000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/shadow
+# owner: root
+# group: shadow
+user::rw-
+group::r--
+other::---
+
+subcommand: ls -ZR
+? /etc/shadow
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/gshadow
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/gshadow'
+  Size: 550       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 11904       Links: 1
+Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (   42/  shadow)
+Access: 2021-01-07 17:45:07.903020925 +0100
+Modify: 2020-12-10 15:36:02.129263751 +0100
+Change: 2020-12-10 15:36:02.137263652 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/gshadow
+# owner: root
+# group: shadow
+user::rw-
+group::r--
+other::---
+
+subcommand: ls -ZR
+? /etc/gshadow
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/group
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/group'
+  Size: 655       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 12322       Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:42.752000000 +0100
+Modify: 2020-12-10 15:36:02.117263900 +0100
+Change: 2020-12-10 15:36:02.125263801 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/group
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/group
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/login.defs
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/login.defs'
+  Size: 10551     	Blocks: 24         IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 2855        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:42:23.992704162 +0100
+Modify: 2016-03-29 11:25:06.000000000 +0200
+Change: 2020-12-10 15:27:40.329309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/login.defs
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/login.defs
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/sudoers
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/sudoers'
+  Size: 755       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 6865        Links: 1
+Access: (0440/-r--r-----)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:46.708000000 +0100
+Modify: 2020-01-31 19:37:22.000000000 +0100
+Change: 2020-12-10 15:32:14.057309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/sudoers
+# owner: root
+# group: root
+user::r--
+group::r--
+other::---
+
+subcommand: ls -ZR
+? /etc/sudoers
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec awk -F : '{print $1 ":" $3 ":" $7}' /etc/passwd
+
+
+ + + + + + +
+
root:0:/bin/bash
+daemon:1:/usr/sbin/nologin
+bin:2:/usr/sbin/nologin
+sys:3:/usr/sbin/nologin
+sync:4:/bin/sync
+games:5:/usr/sbin/nologin
+man:6:/usr/sbin/nologin
+lp:7:/usr/sbin/nologin
+mail:8:/usr/sbin/nologin
+news:9:/usr/sbin/nologin
+uucp:10:/usr/sbin/nologin
+proxy:13:/usr/sbin/nologin
+www-data:33:/usr/sbin/nologin
+backup:34:/usr/sbin/nologin
+list:38:/usr/sbin/nologin
+irc:39:/usr/sbin/nologin
+gnats:41:/usr/sbin/nologin
+nobody:65534:/usr/sbin/nologin
+systemd-timesync:100:/bin/false
+systemd-network:101:/bin/false
+systemd-resolve:102:/bin/false
+systemd-bus-proxy:103:/bin/false
+syslog:104:/bin/false
+_apt:105:/bin/false
+sshd:106:/usr/sbin/nologin
+pollinate:107:/bin/false
+messagebus:108:/bin/false
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec awk -F : '($2 == "" )' /etc/shadow
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep '^+:' /etc/passwd
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep '^+:' /etc/shadow
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep '^+:' /etc/group
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "PASS_MIN_DAYS\|PASS_WARN_AGE" /etc/login.defs | grep -v "#"
+
+
+ + + + + + +
+
PASS_MIN_DAYS	0
+PASS_WARN_AGE	7
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec chage --list operator
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec chage --list nobody
+
+
+ + + + + + +
+
Last password change					: Dec 10, 2020
+Password expires					: never
+Password inactive					: never
+Account expires						: never
+Minimum number of days between password change		: 0
+Maximum number of days between password change		: 99999
+Number of days of warning before password expires	: 7
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^root" /etc/passwd | cut -f4 -d:
+
+
+ + + + + + +
+
0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec useradd -D | grep INACTIVE
+
+
+ + + + + + +
+
INACTIVE=-1
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^UMASK=077" /etc/bashrc
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^umask=077" /etc/bashrc
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "umask *[0-7]" /etc/profile
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/cron.d
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/cron.d'
+  Size: 4096      	Blocks: 8          IO Block: 4096   directory
+Device: 801h/2049d	Inode: 6619        Links: 2
+Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:47.248000000 +0100
+Modify: 2020-12-10 15:34:57.867995039 +0100
+Change: 2020-12-10 15:34:57.867995039 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/cron.d
+# owner: root
+# group: root
+user::rwx
+group::r-x
+other::r-x
+
+subcommand: ls -ZR
+/etc/cron.d:
+? mdadm
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/crontab
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/crontab'
+  Size: 722       	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 6615        Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:47.248000000 +0100
+Modify: 2016-04-05 23:59:09.000000000 +0200
+Change: 2020-12-10 15:29:06.737309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/crontab
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/crontab
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/cron.hourly
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/cron.hourly'
+  Size: 4096      	Blocks: 8          IO Block: 4096   directory
+Device: 801h/2049d	Inode: 6621        Links: 2
+Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:19.859183651 +0100
+Modify: 2020-12-10 15:29:06.637309000 +0100
+Change: 2020-12-10 15:29:06.637309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/cron.hourly
+# owner: root
+# group: root
+user::rwx
+group::r-x
+other::r-x
+
+subcommand: ls -ZR
+/etc/cron.hourly:
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/cron.daily
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/cron.daily'
+  Size: 4096      	Blocks: 8          IO Block: 4096   directory
+Device: 801h/2049d	Inode: 1011        Links: 2
+Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:19.875183779 +0100
+Modify: 2020-12-10 15:34:57.887996355 +0100
+Change: 2020-12-10 15:34:57.887996355 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/cron.daily
+# owner: root
+# group: root
+user::rwx
+group::r-x
+other::r-x
+
+subcommand: ls -ZR
+/etc/cron.daily:
+? apt-compat
+? aptitude
+? bsdmainutils
+? dpkg
+? logrotate
+? man-db
+? mdadm
+? passwd
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/cron.weekly
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/cron.weekly'
+  Size: 4096      	Blocks: 8          IO Block: 4096   directory
+Device: 801h/2049d	Inode: 6833        Links: 2
+Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:19.931184226 +0100
+Modify: 2020-12-10 15:34:46.731014399 +0100
+Change: 2020-12-10 15:34:46.731014399 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/cron.weekly
+# owner: root
+# group: root
+user::rwx
+group::r-x
+other::r-x
+
+subcommand: ls -ZR
+/etc/cron.weekly:
+? fstrim
+? man-db
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/cron.monthly
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/cron.monthly'
+  Size: 4096      	Blocks: 8          IO Block: 4096   directory
+Device: 801h/2049d	Inode: 6613        Links: 2
+Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:45:19.959184450 +0100
+Modify: 2020-12-10 15:29:06.681309000 +0100
+Change: 2020-12-10 15:29:06.681309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/cron.monthly
+# owner: root
+# group: root
+user::rwx
+group::r-x
+other::r-x
+
+subcommand: ls -ZR
+/etc/cron.monthly:
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/services.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/services.all.log.html new file mode 100644 index 0000000..bef5884 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/services.all.log.html @@ -0,0 +1,2527 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec service --status-all
+
+
+ + + + + + +
+
 [ + ]  acpid
+ [ + ]  atd
+ [ - ]  bootmisc.sh
+ [ - ]  checkfs.sh
+ [ - ]  checkroot-bootclean.sh
+ [ - ]  checkroot.sh
+ [ + ]  console-setup
+ [ + ]  cron
+ [ - ]  cryptdisks
+ [ - ]  cryptdisks-early
+ [ + ]  dbus
+ [ + ]  grub-common
+ [ - ]  hostname.sh
+ [ - ]  hwclock.sh
+ [ + ]  keyboard-setup
+ [ - ]  killprocs
+ [ + ]  kmod
+ [ - ]  lvm2
+ [ + ]  lvm2-lvmetad
+ [ + ]  lvm2-lvmpolld
+ [ + ]  mdadm
+ [ - ]  mdadm-waitidle
+ [ - ]  mountall-bootclean.sh
+ [ - ]  mountall.sh
+ [ - ]  mountdevsubfs.sh
+ [ - ]  mountkernfs.sh
+ [ - ]  mountnfs-bootclean.sh
+ [ - ]  mountnfs.sh
+ [ + ]  networking
+ [ + ]  ondemand
+ [ - ]  plymouth
+ [ - ]  plymouth-log
+ [ + ]  procps
+ [ + ]  qemu-guest-agent
+ [ + ]  rc.local
+ [ + ]  resolvconf
+ [ - ]  rsync
+ [ + ]  rsyslog
+ [ - ]  sendsigs
+ [ + ]  ssh
+ [ + ]  udev
+ [ - ]  umountfs
+ [ - ]  umountnfs.sh
+ [ - ]  umountroot
+ [ + ]  unattended-upgrades
+ [ + ]  urandom
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec systemctl list-units
+
+
+ + + + + + +
+
UNIT                                                                                                      LOAD   ACTIVE SUB       DESCRIPTION
+proc-sys-fs-binfmt_misc.automount                                                                         loaded active running   Arbitrary Executable File Formats File System Automount Point
+sys-devices-pci0000:00-0000:00:02.0-0000:01:00.0-virtio1-net-eth0.device                                  loaded active plugged   /sys/devices/pci0000:00/0000:00:02.0/0000:01:00.0/virtio1/net/eth0
+sys-devices-pci0000:00-0000:00:02.2-0000:03:00.0-virtio2-virtio\x2dports-vport2p1.device                  loaded active plugged   /sys/devices/pci0000:00/0000:00:02.2/0000:03:00.0/virtio2/virtio-ports/vport2p1
+sys-devices-pci0000:00-0000:00:02.5-0000:06:00.0-virtio5-host0-target0:0:0-0:0:0:0-block-sda-sda1.device  loaded active plugged   QEMU_HARDDISK 1
+sys-devices-pci0000:00-0000:00:02.5-0000:06:00.0-virtio5-host0-target0:0:0-0:0:0:0-block-sda-sda14.device loaded active plugged   QEMU_HARDDISK 14
+sys-devices-pci0000:00-0000:00:02.5-0000:06:00.0-virtio5-host0-target0:0:0-0:0:0:0-block-sda-sda15.device loaded active plugged   QEMU_HARDDISK 15
+sys-devices-pci0000:00-0000:00:02.5-0000:06:00.0-virtio5-host0-target0:0:0-0:0:0:0-block-sda.device       loaded active plugged   QEMU_HARDDISK
+sys-devices-pci0000:00-0000:00:1f.2-ata1-host1-target1:0:0-1:0:0:0-block-sr0.device                       loaded active plugged   QEMU_DVD-ROM
+sys-devices-platform-serial8250-tty-ttyS1.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS1
+sys-devices-platform-serial8250-tty-ttyS10.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS10
+sys-devices-platform-serial8250-tty-ttyS11.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS11
+sys-devices-platform-serial8250-tty-ttyS12.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS12
+sys-devices-platform-serial8250-tty-ttyS13.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS13
+sys-devices-platform-serial8250-tty-ttyS14.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS14
+sys-devices-platform-serial8250-tty-ttyS15.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS15
+sys-devices-platform-serial8250-tty-ttyS16.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS16
+sys-devices-platform-serial8250-tty-ttyS17.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS17
+sys-devices-platform-serial8250-tty-ttyS18.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS18
+sys-devices-platform-serial8250-tty-ttyS19.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS19
+sys-devices-platform-serial8250-tty-ttyS2.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS2
+sys-devices-platform-serial8250-tty-ttyS20.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS20
+sys-devices-platform-serial8250-tty-ttyS21.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS21
+sys-devices-platform-serial8250-tty-ttyS22.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS22
+sys-devices-platform-serial8250-tty-ttyS23.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS23
+sys-devices-platform-serial8250-tty-ttyS24.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS24
+sys-devices-platform-serial8250-tty-ttyS25.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS25
+sys-devices-platform-serial8250-tty-ttyS26.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS26
+sys-devices-platform-serial8250-tty-ttyS27.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS27
+sys-devices-platform-serial8250-tty-ttyS28.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS28
+sys-devices-platform-serial8250-tty-ttyS29.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS29
+sys-devices-platform-serial8250-tty-ttyS3.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS3
+sys-devices-platform-serial8250-tty-ttyS30.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS30
+sys-devices-platform-serial8250-tty-ttyS31.device                                                         loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS31
+sys-devices-platform-serial8250-tty-ttyS4.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS4
+sys-devices-platform-serial8250-tty-ttyS5.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS5
+sys-devices-platform-serial8250-tty-ttyS6.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS6
+sys-devices-platform-serial8250-tty-ttyS7.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS7
+sys-devices-platform-serial8250-tty-ttyS8.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS8
+sys-devices-platform-serial8250-tty-ttyS9.device                                                          loaded active plugged   /sys/devices/platform/serial8250/tty/ttyS9
+sys-devices-pnp0-00:03-tty-ttyS0.device                                                                   loaded active plugged   /sys/devices/pnp0/00:03/tty/ttyS0
+sys-devices-virtual-misc-rfkill.device                                                                    loaded active plugged   /sys/devices/virtual/misc/rfkill
+sys-devices-virtual-tty-ttyprintk.device                                                                  loaded active plugged   /sys/devices/virtual/tty/ttyprintk
+sys-module-fuse.device                                                                                    loaded active plugged   /sys/module/fuse
+sys-subsystem-net-devices-enp1s0.device                                                                   loaded active plugged   /sys/subsystem/net/devices/enp1s0
+sys-subsystem-net-devices-eth0.device                                                                     loaded active plugged   /sys/subsystem/net/devices/eth0
+-.mount                                                                                                   loaded active mounted   /
+boot-efi.mount                                                                                            loaded active mounted   /boot/efi
+dev-hugepages.mount                                                                                       loaded active mounted   Huge Pages File System
+dev-mqueue.mount                                                                                          loaded active mounted   POSIX Message Queue File System
+proc-sys-fs-binfmt_misc.mount                                                                             loaded active mounted   Arbitrary Executable File Formats File System
+run-user-0.mount                                                                                          loaded active mounted   /run/user/0
+sys-fs-fuse-connections.mount                                                                             loaded active mounted   FUSE Control File System
+sys-kernel-debug.mount                                                                                    loaded active mounted   Debug File System
+acpid.path                                                                                                loaded active running   ACPI Events Check
+systemd-ask-password-console.path                                                                         loaded active waiting   Dispatch Password Requests to Console Directory Watch
+systemd-ask-password-wall.path                                                                            loaded active waiting   Forward Password Requests to Wall Directory Watch
+systemd-networkd-resolvconf-update.path                                                                   loaded active waiting   Trigger resolvconf update for networkd DNS
+init.scope                                                                                                loaded active running   System and Service Manager
+session-1.scope                                                                                           loaded active running   Session 1 of user root
+acpid.service                                                                                             loaded active running   ACPI event daemon
+atd.service                                                                                               loaded active running   Deferred execution scheduler
+cloud-config.service                                                                                      loaded active exited    Apply the settings specified in cloud-config
+cloud-final.service                                                                                       loaded active exited    Execute cloud user/final scripts
+cloud-init-local.service                                                                                  loaded active exited    Initial cloud-init job (pre-networking)
+cloud-init.service                                                                                        loaded active exited    Initial cloud-init job (metadata service crawler)
+console-setup.service                                                                                     loaded active exited    Set console font and keymap
+cron.service                                                                                              loaded active running   Regular background program processing daemon
+dbus.service                                                                                              loaded active running   D-Bus System Message Bus
+getty@tty1.service                                                                                        loaded active running   Getty on tty1
+grub-common.service                                                                                       loaded active exited    LSB: Record successful boot for GRUB
+keyboard-setup.service                                                                                    loaded active exited    Set console keymap
+kmod-static-nodes.service                                                                                 loaded active exited    Create list of required static device nodes for the current kernel
+lvm2-lvmetad.service                                                                                      loaded active running   LVM2 metadata daemon
+lvm2-monitor.service                                                                                      loaded active exited    Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling
+mdadm.service                                                                                             loaded active running   LSB: MD monitoring daemon
+networking.service                                                                                        loaded active exited    Raise network interfaces
+ondemand.service                                                                                          loaded active exited    LSB: Set the CPU Frequency Scaling governor to "ondemand"
+qemu-guest-agent.service                                                                                  loaded active running   LSB: QEMU Guest Agent startup script
+rc-local.service                                                                                          loaded active exited    /etc/rc.local Compatibility
+resolvconf.service                                                                                        loaded active exited    Nameserver information manager
+rsyslog.service                                                                                           loaded active running   System Logging Service
+serial-getty@ttyS0.service                                                                                loaded active running   Serial Getty on ttyS0
+setvtrgb.service                                                                                          loaded active exited    Set console scheme
+ssh.service                                                                                               loaded active running   OpenBSD Secure Shell server
+systemd-journal-flush.service                                                                             loaded active exited    Flush Journal to Persistent Storage
+systemd-journald.service                                                                                  loaded active running   Journal Service
+systemd-logind.service                                                                                    loaded active running   Login Service
+systemd-machine-id-commit.service                                                                         loaded active exited    Commit a transient machine-id on disk
+systemd-modules-load.service                                                                              loaded active exited    Load Kernel Modules
+systemd-random-seed.service                                                                               loaded active exited    Load/Save Random Seed
+systemd-remount-fs.service                                                                                loaded active exited    Remount Root and Kernel File Systems
+systemd-resolved.service                                                                                  loaded active running   Network Name Resolution
+systemd-sysctl.service                                                                                    loaded active exited    Apply Kernel Variables
+systemd-timesyncd.service                                                                                 loaded active running   Network Time Synchronization
+systemd-tmpfiles-setup-dev.service                                                                        loaded active exited    Create Static Device Nodes in /dev
+systemd-tmpfiles-setup.service                                                                            loaded active exited    Create Volatile Files and Directories
+systemd-udev-trigger.service                                                                              loaded active exited    udev Coldplug all Devices
+systemd-udevd.service                                                                                     loaded active running   udev Kernel Device Manager
+systemd-update-utmp.service                                                                               loaded active exited    Update UTMP about System Boot/Shutdown
+systemd-user-sessions.service                                                                             loaded active exited    Permit User Sessions
+unattended-upgrades.service                                                                               loaded active running   Unattended Upgrades Shutdown
+user@0.service                                                                                            loaded active running   User Manager for UID 0
+-.slice                                                                                                   loaded active active    Root Slice
+system-getty.slice                                                                                        loaded active active    system-getty.slice
+system-serial\x2dgetty.slice                                                                              loaded active active    system-serial\x2dgetty.slice
+system.slice                                                                                              loaded active active    System Slice
+user-0.slice                                                                                              loaded active active    User Slice of root
+user.slice                                                                                                loaded active active    User and Session Slice
+acpid.socket                                                                                              loaded active running   ACPID Listen Socket
+dbus.socket                                                                                               loaded active running   D-Bus System Message Bus Socket
+dm-event.socket                                                                                           loaded active listening Device-mapper event daemon FIFOs
+lvm2-lvmetad.socket                                                                                       loaded active running   LVM2 metadata daemon socket
+lvm2-lvmpolld.socket                                                                                      loaded active listening LVM2 poll daemon socket
+syslog.socket                                                                                             loaded active running   Syslog Socket
+systemd-fsckd.socket                                                                                      loaded active listening fsck to fsckd communication Socket
+systemd-initctl.socket                                                                                    loaded active listening /dev/initctl Compatibility Named Pipe
+systemd-journald-audit.socket                                                                             loaded active running   Journal Audit Socket
+systemd-journald-dev-log.socket                                                                           loaded active running   Journal Socket (/dev/log)
+systemd-journald.socket                                                                                   loaded active running   Journal Socket
+systemd-rfkill.socket                                                                                     loaded active listening Load/Save RF Kill Switch Status /dev/rfkill Watch
+systemd-udevd-control.socket                                                                              loaded active running   udev Control Socket
+systemd-udevd-kernel.socket                                                                               loaded active running   udev Kernel Socket
+basic.target                                                                                              loaded active active    Basic System
+cloud-config.target                                                                                       loaded active active    Cloud-config availability
+cloud-init.target                                                                                         loaded active active    Cloud-init target
+cryptsetup.target                                                                                         loaded active active    Encrypted Volumes
+getty.target                                                                                              loaded active active    Login Prompts
+graphical.target                                                                                          loaded active active    Graphical Interface
+local-fs-pre.target                                                                                       loaded active active    Local File Systems (Pre)
+local-fs.target                                                                                           loaded active active    Local File Systems
+multi-user.target                                                                                         loaded active active    Multi-User System
+network-online.target                                                                                     loaded active active    Network is Online
+network-pre.target                                                                                        loaded active active    Network (Pre)
+network.target                                                                                            loaded active active    Network
+paths.target                                                                                              loaded active active    Paths
+remote-fs-pre.target                                                                                      loaded active active    Remote File Systems (Pre)
+remote-fs.target                                                                                          loaded active active    Remote File Systems
+slices.target                                                                                             loaded active active    Slices
+sockets.target                                                                                            loaded active active    Sockets
+swap.target                                                                                               loaded active active    Swap
+sysinit.target                                                                                            loaded active active    System Initialization
+time-sync.target                                                                                          loaded active active    System Time Synchronized
+timers.target                                                                                             loaded active active    Timers
+apt-daily-upgrade.timer                                                                                   loaded active waiting   Daily apt upgrade and clean activities
+apt-daily.timer                                                                                           loaded active waiting   Daily apt download activities
+motd-news.timer                                                                                           loaded active waiting   Message of the Day
+systemd-tmpfiles-clean.timer                                                                              loaded active waiting   Daily Cleanup of Temporary Directories
+
+LOAD   = Reflects whether the unit definition was properly loaded.
+ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
+SUB    = The low-level unit activation state, values depend on unit type.
+
+147 loaded units listed. Pass --all to see loaded but inactive units, too.
+To show all installed unit files use 'systemctl list-unit-files'.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl rsync
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl avahi-daemon
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl cups
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl dhcpd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl slapd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl nfs
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl rpcbind
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl named
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl vsftpd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl httpd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl dovecot
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl smb
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl snmpd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl auditd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl rsyslog
+
+
+ + + + + + +
+
UNIT FILE       STATE  
+rsyslog.service enabled
+
+1 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _systemctl syslog-nd
+
+
+ + + + + + +
+
UNIT FILE STATE
+
+0 unit files listed.
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep max_log_file /etc/audit/auditd.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep space_left_action /etc/audit/auditd.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep action_mail_acct /etc/audit/auditd.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep admin_space_left_action /etc/audit/auditd.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep max_log_file_action /etc/audit/auditd.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep time-change /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep identity /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep system-locale /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep MAC-policy /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep logins /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep session /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep perm_mod /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep access /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep mounts /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep delete /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep scope /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep actions /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep modules /etc/audit/audit.rules
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^*.*[^I][^I]*@" /etc/syslog.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ls -l /etc/rsyslog.conf
+
+
+ + + + + + +
+
-rw-r--r-- 1 root root 1371 Jan 27  2016 /etc/rsyslog.conf
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ls -l /etc/syslog.conf
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ls -l /etc/ssh
+
+
+ + + + + + +
+
total 340
+-rw-r--r-- 1 root root 300261 May 27  2020 moduli
+-rw-r--r-- 1 root root   1756 May 27  2020 ssh_config
+-rw-r--r-- 1 root root   2513 Dec 10 15:33 sshd_config
+-rw------- 1 root root    668 Jan  7 17:41 ssh_host_dsa_key
+-rw-r--r-- 1 root root    609 Jan  7 17:41 ssh_host_dsa_key.pub
+-rw------- 1 root root    227 Jan  7 17:41 ssh_host_ecdsa_key
+-rw-r--r-- 1 root root    181 Jan  7 17:41 ssh_host_ecdsa_key.pub
+-rw------- 1 root root    411 Jan  7 17:41 ssh_host_ed25519_key
+-rw-r--r-- 1 root root    101 Jan  7 17:41 ssh_host_ed25519_key.pub
+-rw------- 1 root root   1675 Jan  7 17:41 ssh_host_rsa_key
+-rw-r--r-- 1 root root    401 Jan  7 17:41 ssh_host_rsa_key.pub
+-rw-r--r-- 1 root root    338 Dec 10 15:32 ssh_import_id
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/ssh/sshd_config
+
+
+ + + + + + +
+
subcommand: stat
+  File: '/etc/ssh/sshd_config'
+  Size: 2513      	Blocks: 8          IO Block: 4096   regular file
+Device: 801h/2049d	Inode: 45          Links: 1
+Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
+Access: 2021-01-07 17:41:46.988000000 +0100
+Modify: 2020-12-10 15:33:28.149309000 +0100
+Change: 2020-12-10 15:33:28.149309000 +0100
+ Birth: -
+
+subcommand: getfacl
+getfacl: Removing leading '/' from absolute path names
+# file: etc/ssh/sshd_config
+# owner: root
+# group: root
+user::rw-
+group::r--
+other::r--
+
+subcommand: ls -ZR
+? /etc/ssh/sshd_config
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^Protocol" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
Protocol 2
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^LogLevel" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
LogLevel INFO
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^X11Forwarding" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
X11Forwarding yes
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^MaxAuthTries" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^IgnoreRhosts" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
IgnoreRhosts yes
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^HostbasedAuthentication" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
HostbasedAuthentication no
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^PermitRootLogin" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
PermitRootLogin yes
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^PermitEmptyPasswords" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
PermitEmptyPasswords no
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^PermitUserEnvironment" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^Ciphers" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^MACs" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^ClientAliveInterval" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^ClientAliveCountMax" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^LoginGraceTime" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
LoginGraceTime 120
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^AllowGroups" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^DenyUsers" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^DenyGroups" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^Banner" /etc/ssh/sshd_config
+
+
+ + + + + + +
+
string not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _stat /etc/ntp.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^restrict" /etc/ntp.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^server" /etc/ntp.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^password" /etc/grub.conf
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "{" /etc/logrotate.d/syslog
+
+
+ + + + + + +
+
file not found
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec find /etc/httpd/ -name ".conf" -print
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec find /etc/httpd/ -name ".load" -print
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec find /etc/apache/ -name ".conf" -print
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec find /etc/apache/ -name ".load" -print
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec apachectl -S
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec apachectl -M
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/system.all.log.html b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/system.all.log.html new file mode 100644 index 0000000..e88af95 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/system.all.log.html @@ -0,0 +1,840 @@ + + + +Φ otseca v1.0.5 security audit script + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

(Ot)her (Sec)urity (A)wareness

+ + + +

Open source security auditing tool to search and dump system configuration.
It allows you to generate reports in HTML or RAW-HTML formats.

+ +

+Φ otseca v1.0.5 security audit script +

+ +

+gen_time: 07.01.2021 17:49:15 +

+ + + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec uname -a
+
+
+ + + + + + +
+
Linux it-sec-test-vm 4.4.0-197-generic #229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec uptime
+
+
+ + + + + + +
+
 17:49:03 up 7 min,  1 user,  load average: 0.95, 0.52, 0.23
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec lsb_release -a
+
+
+ + + + + + +
+
Distributor ID:	Ubuntu
+Description:	Ubuntu 16.04.7 LTS
+Release:	16.04
+Codename:	xenial
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /proc/cpuinfo
+
+
+ + + + + + +
+
processor	: 0
+vendor_id	: AuthenticAMD
+cpu family	: 23
+model		: 1
+model name	: AMD EPYC Processor (with IBPB)
+stepping	: 2
+microcode	: 0x1000065
+cpu MHz		: 2495.272
+cache size	: 512 KB
+physical id	: 0
+siblings	: 2
+core id		: 0
+cpu cores	: 2
+apicid		: 0
+initial apicid	: 0
+fpu		: yes
+fpu_exception	: yes
+cpuid level	: 13
+wp		: yes
+flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext ssbd ibpb vmmcall fsgsbase bmi1 avx2 smep bmi2 rdseed adx smap clflushopt sha_ni xsaveopt xsavec xgetbv1 arat
+bugs		: fxsave_leak sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass
+bogomips	: 4990.54
+TLB size	: 1024 4K pages
+clflush size	: 64
+cache_alignment	: 64
+address sizes	: 40 bits physical, 48 bits virtual
+power management:
+
+processor	: 1
+vendor_id	: AuthenticAMD
+cpu family	: 23
+model		: 1
+model name	: AMD EPYC Processor (with IBPB)
+stepping	: 2
+microcode	: 0x1000065
+cpu MHz		: 2495.272
+cache size	: 512 KB
+physical id	: 0
+siblings	: 2
+core id		: 1
+cpu cores	: 2
+apicid		: 1
+initial apicid	: 1
+fpu		: yes
+fpu_exception	: yes
+cpuid level	: 13
+wp		: yes
+flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext ssbd ibpb vmmcall fsgsbase bmi1 avx2 smep bmi2 rdseed adx smap clflushopt sha_ni xsaveopt xsavec xgetbv1 arat
+bugs		: fxsave_leak sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass
+bogomips	: 4990.54
+TLB size	: 1024 4K pages
+clflush size	: 64
+cache_alignment	: 64
+address sizes	: 40 bits physical, 48 bits virtual
+power management:
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec ps -auxenf
+
+
+ + + + + + +
+
    USER   PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
+       0     2  0.0  0.0      0     0 ?        S    17:41   0:00 [kthreadd]
+       0     3  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [ksoftirqd/0]
+       0     4  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/0:0]
+       0     5  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kworker/0:0H]
+       0     7  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [rcu_sched]
+       0     8  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [rcu_bh]
+       0     9  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [migration/0]
+       0    10  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [watchdog/0]
+       0    11  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [watchdog/1]
+       0    12  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [migration/1]
+       0    13  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [ksoftirqd/1]
+       0    15  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kworker/1:0H]
+       0    16  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kdevtmpfs]
+       0    17  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [netns]
+       0    18  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [perf]
+       0    19  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [khungtaskd]
+       0    20  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [writeback]
+       0    21  0.0  0.0      0     0 ?        SN   17:41   0:00  \_ [ksmd]
+       0    22  0.0  0.0      0     0 ?        SN   17:41   0:00  \_ [khugepaged]
+       0    23  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [crypto]
+       0    24  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kintegrityd]
+       0    25  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    26  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kblockd]
+       0    27  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [ata_sff]
+       0    28  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [md]
+       0    29  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [devfreq_wq]
+       0    32  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/1:1]
+       0    35  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kswapd0]
+       0    36  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [vmstat]
+       0    37  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [fsnotify_mark]
+       0    38  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [ecryptfs-kthrea]
+       0    54  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kthrotld]
+       0    55  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [acpi_thermal_pm]
+       0    56  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [vballoon]
+       0    57  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    58  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    59  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    60  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    61  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    62  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    63  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    64  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0    68  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [ipv6_addrconf]
+       0    81  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [deferwq]
+       0    82  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [charger_manager]
+       0   121  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_0]
+       0   122  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_0]
+       0   123  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kpsmoused]
+       0   125  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0   126  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_1]
+       0   128  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_1]
+       0   131  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_2]
+       0   140  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_2]
+       0   143  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_3]
+       0   144  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_3]
+       0   145  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_4]
+       0   146  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_4]
+       0   147  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_5]
+       0   153  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_5]
+       0   155  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [scsi_eh_6]
+       0   156  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [scsi_tmf_6]
+       0   170  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/u4:5]
+       0   181  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/u4:6]
+       0   402  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0   409  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kworker/0:1H]
+       0   413  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [kworker/1:1H]
+       0   481  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [raid5wq]
+       0   504  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [bioset]
+       0   534  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [jbd2/sda1-8]
+       0   535  0.0  0.0      0     0 ?        S<   17:41   0:00  \_ [ext4-rsv-conver]
+       0   608  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/0:3]
+       0   613  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/1:3]
+       0   614  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kauditd]
+       0   686  0.2  0.0      0     0 ?        S    17:41   0:01  \_ [hwrng]
+       0  1384  0.0  0.0      0     0 ?        S    17:47   0:00  \_ [kworker/u4:0]
+       0     1  0.7  0.2  37648  5688 ?        Ss   17:41   0:03 /sbin/init HOME=/ init=/sbin/init NETWORK_SKIP_ENSLAVED= recovery= TERM=linux drop_caps= BOOT_IMAGE=/boot/vmlinuz-4.4.0-197-generic PATH=/sbin:/usr/sbin:/bin:/usr/bin PWD=/ rootmnt=/root
+       0   604  0.0  0.1  29576  3460 ?        Ss   17:41   0:00 /lib/systemd/systemd-journald LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify LISTEN_PID=604 LISTEN_FDS=4 LISTEN_FDNAMES=systemd-journald-audit.socket:systemd-journald-dev-log.socket:systemd-journald.socket:systemd-journald.socket
+       0   624  0.0  0.0 102964  1536 ?        Ss   17:41   0:00 /sbin/lvmetad -f LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin LISTEN_PID=624 LISTEN_FDS=1 LISTEN_FDNAMES=lvm2-lvmetad.socket SD_ACTIVATION=1
+       0   660  0.0  0.1  42360  3812 ?        Ss   17:41   0:00 /lib/systemd/systemd-udevd LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify LISTEN_PID=660 LISTEN_FDS=2 LISTEN_FDNAMES=systemd-udevd-control.socket:systemd-udevd-kernel.socket WATCHDOG_PID=660 WATCHDOG_USEC=180000000
+     100   777  0.0  0.1 100320  2428 ?        Ssl  17:41   0:00 /lib/systemd/systemd-timesyncd LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify WATCHDOG_PID=777 WATCHDOG_USEC=180000000
+       0   947  0.0  0.0  16120   856 ?        Ss   17:41   0:00 /sbin/dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0 METHOD=dhcp MODE=start LOGICAL=eth0 PHASE=post-up ADDRFAM=inet VERBOSITY=0 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin IFUPDOWN_eth0=post-up IFACE=eth0 PWD=/ IF_DNS_NAMESERVERS=213.133.99.99 213.133.98.98 213.133.100.100
+     108  1211  0.0  0.1  42884  3720 ?        Ss   17:41   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin LISTEN_PID=1211 LISTEN_FDS=1 LISTEN_FDNAMES=dbus.socket
+       0  1217  0.0  0.0   4392  1300 ?        Ss   17:41   0:00 /usr/sbin/acpid LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+       0  1219  0.0  0.1  27724  2980 ?        Ss   17:41   0:00 /usr/sbin/cron -f LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+       0  1227  0.0  0.1  28544  3152 ?        Ss   17:41   0:00 /lib/systemd/systemd-logind LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify WATCHDOG_PID=1227 WATCHDOG_USEC=180000000
+     104  1229  0.0  0.1 256388  3404 ?        Ssl  17:41   0:00 /usr/sbin/rsyslogd -n LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify LISTEN_PID=1229 LISTEN_FDS=1 LISTEN_FDNAMES=syslog.socket
+       1  1230  0.0  0.1  26040  2260 ?        Ss   17:41   0:00 /usr/sbin/atd -f LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+       0  1280  0.0  0.0  13368   160 ?        Ss   17:41   0:00 /sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan --syslog PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin LANG=en_US.UTF-8 _SYSTEMCTL_SKIP_REDIRECT=true PWD=/
+       0  1293  0.0  0.0  21968   188 ?        Ss   17:41   0:00 /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0 PATH=/sbin:/usr/sbin:/bin:/usr/bin LANG=en_US.UTF-8 _SYSTEMCTL_SKIP_REDIRECT=true PWD=/
+       0  1301  0.0  0.9 173108 19752 ?        Ssl  17:41   0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+       0  1313  0.0  0.1  14468  2224 ttyS0    Ss+  17:41   0:00 /sbin/agetty --keep-baud 115200 38400 9600 ttyS0 vt220 LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin TERM=vt220
+       0  1315  0.0  0.0  14652  1824 tty1     Ss+  17:41   0:00 /sbin/agetty --noclear tty1 linux LANG= PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin TERM=linux LANGUAGE= LC_CTYPE= LC_NUMERIC= LC_TIME= LC_COLLATE= LC_MONETARY= LC_MESSAGES= LC_PAPER= LC_NAME= LC_ADDRESS= LC_TELEPHONE= LC_MEASUREMENT= LC_IDENTIFICATION=
+       0  1333  0.0  0.3  65508  6252 ?        Ss   17:41   0:00 /usr/sbin/sshd -D LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify SSHD_OPTS=
+       0  1380  0.1  0.3  92796  6920 ?        Ss   17:42   0:00  \_ sshd: root@pts/0                                                                                                                                         =
+       0  1403  0.0  0.1  20000  3900 pts/0    Ss   17:42   0:00  |   \_ -bash LANG=en_US.UTF-8 USER=root LOGNAME=root HOME=/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 SSH_TTY=/dev/pts/0 TERM=xterm-256color XDG_SESSION_ID=1 XDG_RUNTIME_DIR=/run/user/0
+       0  1440  0.0  0.1  11368  3204 pts/0    S+   17:48   0:00  |       \_ /bin/bash ./bla.sh run_scan 1 XDG_SESSION_ID=1 TERM=xterm-256color SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: MAIL=/var/mail/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin PWD=/root LANG=en_US.UTF-8 SHLVL=1 HOME=/root LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=./bla.sh
+       0 21297  0.0  0.1  12116  3984 pts/0    S+   17:49   0:00  |           \_ bash /usr/local/bin/otseca --ignore-failed --tasks system,kernel,permissions,services,network,distro,external XDG_SESSION_ID=1 SHELL=/bin/bash TERM=xterm-256color SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/testssl.sh SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root PWD=/root/scans/otseca LANG=en_US.UTF-8 HOME=/root SHLVL=2 LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/local/bin/otseca
+       0 21502  0.0  0.1  12116  2536 pts/0    S+   17:49   0:00  |           |   \_ bash /usr/local/bin/otseca --ignore-failed --tasks system,kernel,permissions,services,network,distro,external XDG_SESSION_ID=1 SHELL=/bin/bash TERM=xterm-256color SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/testssl.sh SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root PWD=/root/scans/otseca LANG=en_US.UTF-8 HOME=/root SHLVL=2 LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/local/bin/otseca
+       0 21503  0.0  0.1  12116  2728 pts/0    S+   17:49   0:00  |           |   |   \_ bash /usr/local/bin/otseca --ignore-failed --tasks system,kernel,permissions,services,network,distro,external XDG_SESSION_ID=1 SHELL=/bin/bash TERM=xterm-256color SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/testssl.sh SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root PWD=/root/scans/otseca LANG=en_US.UTF-8 HOME=/root SHLVL=2 LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/local/bin/otseca
+       0 21505  0.0  0.1  36224  3396 pts/0    R+   17:49   0:00  |           |   |       \_ ps -auxenf XDG_SESSION_ID=1 TERM=xterm-256color SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/otseca SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: MAIL=/var/mail/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PWD=/root/scans/otseca LANG=en_US.UTF-8 SHLVL=3 HOME=/root LOGNAME=root ignore_errors=1 tasks_type=system,kernel,permissions,services,network,distro,external SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/bin/ps
+       0 21504  0.0  0.1  12116  2600 pts/0    S+   17:49   0:00  |           |   \_ bash /usr/local/bin/otseca --ignore-failed --tasks system,kernel,permissions,services,network,distro,external XDG_SESSION_ID=1 SHELL=/bin/bash TERM=xterm-256color SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/testssl.sh SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root PWD=/root/scans/otseca LANG=en_US.UTF-8 HOME=/root SHLVL=2 LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/local/bin/otseca
+       0 21506  0.0  0.0  27632  1512 pts/0    R+   17:49   0:00  |           |       \_ ps a XDG_SESSION_ID=1 TERM=xterm-256color SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/otseca SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: MAIL=/var/mail/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PWD=/root/scans/otseca LANG=en_US.UTF-8 SHLVL=3 HOME=/root LOGNAME=root ignore_errors=1 tasks_type=system,kernel,permissions,services,network,distro,external SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/bin/ps
+       0 21507  0.0  0.0   7584   916 pts/0    S+   17:49   0:00  |           |       \_ awk {print $1} XDG_SESSION_ID=1 TERM=xterm-256color SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/otseca SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: MAIL=/var/mail/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PWD=/root/scans/otseca LANG=en_US.UTF-8 SHLVL=3 HOME=/root LOGNAME=root ignore_errors=1 tasks_type=system,kernel,permissions,services,network,distro,external SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/bin/awk
+       0 21508  0.0  0.0  12940   972 pts/0    S+   17:49   0:00  |           |       \_ grep -w 21502 XDG_SESSION_ID=1 TERM=xterm-256color SHELL=/bin/bash SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/otseca SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: MAIL=/var/mail/root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PWD=/root/scans/otseca LANG=en_US.UTF-8 SHLVL=3 HOME=/root LOGNAME=root ignore_errors=1 tasks_type=system,kernel,permissions,services,network,distro,external SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/bin/grep
+       0 21298  0.0  0.0   6008   680 pts/0    S+   17:49   0:00  |           \_ tee otseca-1.log XDG_SESSION_ID=1 SHELL=/bin/bash TERM=xterm-256color SSH_CLIENT=95.208.80.10 10344 22 OLDPWD=/root/scans/testssl.sh SSH_TTY=/dev/pts/0 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin MAIL=/var/mail/root PWD=/root/scans/otseca LANG=en_US.UTF-8 HOME=/root SHLVL=2 LOGNAME=root SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22 LESSOPEN=| /usr/bin/lesspipe %s XDG_RUNTIME_DIR=/run/user/0 LESSCLOSE=/usr/bin/lesspipe %s %s _=/usr/bin/tee
+       0 21443  0.0  0.3  65508  6036 ?        Ss   17:49   0:00  \_ sshd: [accepted]                                                                                                                                         =
+     106 21444  0.0  0.0  65508   732 ?        S    17:49   0:00      \_ sshd: [net]                                                                                                                                         =
+       0  1383  0.0  0.2  36868  4496 ?        Ss   17:42   0:00 /lib/systemd/systemd --user LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify HOME=/root LOGNAME=root USER=root SHELL=/bin/sh XDG_RUNTIME_DIR=/run/user/0
+       0  1388  0.0  0.0  60960  1576 ?        S    17:42   0:00  \_ (sd-pam) HOME=/ init=/sbin/init NETWORK_SKIP_ENSLAVED= recovery= TERM=linux drop_caps= BOOT_IMAGE=/boot/vmlinuz-4.4.0-197-generic PATH=/sbin:/usr/sbin:/bin:/usr/bin PWD=/ rootmnt=/root
+     102 23188  0.0  0.1  34700  3180 ?        Ss   17:45   0:00 /lib/systemd/systemd-resolved LANG=en_US.UTF-8 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin NOTIFY_SOCKET=/run/systemd/notify WATCHDOG_PID=23188 WATCHDOG_USEC=180000000
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _grep "^\s*linux" /boot/grub/grub.*
+
+
+ + + + + + +
+
        linux	/boot/vmlinuz-4.4.0-197-generic root=UUID=1f3f61e1-c0cb-4079-b8a9-77bc28da1465 ro  consoleblank=0 systemd.show_status=true elevator=noop console=tty1 console=ttyS0
+	        linux	/boot/vmlinuz-4.4.0-197-generic root=UUID=1f3f61e1-c0cb-4079-b8a9-77bc28da1465 ro  consoleblank=0 systemd.show_status=true elevator=noop console=tty1 console=ttyS0
+	        linux	/boot/vmlinuz-4.4.0-197-generic root=UUID=1f3f61e1-c0cb-4079-b8a9-77bc28da1465 ro single nomodeset dis_ucode_ldr 
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec lspci
+
+
+ + + + + + +
+
00:00.0 Host bridge: Intel Corporation 82G33/G31/P35/P31 Express DRAM Controller
+00:01.0 VGA compatible controller: Red Hat, Inc. Virtio GPU (rev 01)
+00:02.0 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.1 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.2 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.3 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.4 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.5 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.6 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:02.7 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:03.0 PCI bridge: Red Hat, Inc. QEMU PCIe Root port
+00:1f.0 ISA bridge: Intel Corporation 82801IB (ICH9) LPC Interface Controller (rev 02)
+00:1f.2 SATA controller: Intel Corporation 82801IR/IO/IH (ICH9R/DO/DH) 6 port SATA Controller [AHCI mode] (rev 02)
+00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 02)
+01:00.0 Ethernet controller: Red Hat, Inc. Virtio network device (rev 01)
+02:00.0 USB controller: Red Hat, Inc. QEMU XHCI Host Controller (rev 01)
+03:00.0 Communication controller: Red Hat, Inc. Virtio console (rev 01)
+04:00.0 Unclassified device [00ff]: Red Hat, Inc. Virtio memory balloon (rev 01)
+05:00.0 Unclassified device [00ff]: Red Hat, Inc. Virtio RNG (rev 01)
+06:00.0 SCSI storage controller: Red Hat, Inc. Virtio SCSI (rev 01)
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec lsblk
+
+
+ + + + + + +
+
NAME    MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
+sda       8:0    0 38.2G  0 disk 
+├─sda1    8:1    0 38.1G  0 part /
+├─sda14   8:14   0    1M  0 part 
+└─sda15   8:15   0   61M  0 part /boot/efi
+sr0      11:0    1 1024M  0 rom  
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec df -H
+
+
+ + + + + + +
+
Filesystem      Size  Used Avail Use% Mounted on
+udev            1.1G     0  1.1G   0% /dev
+tmpfs           205M  3.3M  202M   2% /run
+/dev/sda1        41G  1.5G   38G   4% /
+tmpfs           1.1G     0  1.1G   0% /dev/shm
+tmpfs           5.3M     0  5.3M   0% /run/lock
+tmpfs           1.1G     0  1.1G   0% /sys/fs/cgroup
+/dev/sda15       63M  125k   63M   1% /boot/efi
+tmpfs           205M     0  205M   0% /run/user/0
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec mount
+
+
+ + + + + + +
+
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
+proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
+udev on /dev type devtmpfs (rw,nosuid,relatime,size=990692k,nr_inodes=247673,mode=755)
+devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
+tmpfs on /run type tmpfs (rw,nosuid,noexec,relatime,size=199868k,mode=755)
+/dev/sda1 on / type ext4 (rw,relatime,errors=remount-ro,data=ordered)
+securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
+tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
+tmpfs on /run/lock type tmpfs (rw,nosuid,nodev,noexec,relatime,size=5120k)
+tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755)
+cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd)
+pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
+cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
+cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls,net_prio)
+cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)
+cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpu,cpuacct)
+cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,pids)
+cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
+cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)
+cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)
+cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)
+cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
+hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime)
+mqueue on /dev/mqueue type mqueue (rw,relatime)
+systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=38,pgrp=1,timeout=0,minproto=5,maxproto=5,direct)
+debugfs on /sys/kernel/debug type debugfs (rw,relatime)
+fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
+/dev/sda15 on /boot/efi type vfat (rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro)
+tmpfs on /run/user/0 type tmpfs (rw,nosuid,nodev,relatime,size=199868k,mode=700)
+binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,relatime)
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec sestatus
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /etc/issue
+
+
+ + + + + + +
+
Ubuntu 16.04.7 LTS \n \l
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /etc/issue.net
+
+
+ + + + + + +
+
Ubuntu 16.04.7 LTS
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec cat /etc/motd
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec printenv
+
+
+ + + + + + +
+
XDG_SESSION_ID=1
+TERM=xterm-256color
+SHELL=/bin/bash
+SSH_CLIENT=95.208.80.10 10344 22
+OLDPWD=/root/scans/otseca
+SSH_TTY=/dev/pts/0
+USER=root
+LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:
+MAIL=/var/mail/root
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+PWD=/root/scans/otseca
+LANG=en_US.UTF-8
+SHLVL=3
+HOME=/root
+LOGNAME=root
+ignore_errors=1
+tasks_type=system,kernel,permissions,services,network,distro,external
+SSH_CONNECTION=95.208.80.10 10344 116.203.241.83 22
+LESSOPEN=| /usr/bin/lesspipe %s
+XDG_RUNTIME_DIR=/run/user/0
+LESSCLOSE=/usr/bin/lesspipe %s %s
+_=/usr/bin/printenv
+
+
+
+
+
+
+ + +
+
+
+
+ +
+ + + + + + +
COMMAND: _exec crontab -u root -l
+
+
+ + + + + + +
+
command error or empty output
+
+
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/animate/animate.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/animate/animate.css new file mode 100644 index 0000000..1e79e03 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/animate/animate.css @@ -0,0 +1,1579 @@ +@charset "UTF-8"; + +/*! + * animate.css -http://daneden.me/animate + * Version - 3.5.2 + * Licensed under the MIT license - http://opensource.org/licenses/MIT + * + * Copyright (c) 2017 Daniel Eden + */ + +.animated { + animation-duration: 1s; + animation-fill-mode: both; +} + +.animated.infinite { + animation-iteration-count: infinite; +} + +.animated.hinge { + animation-duration: 2s; +} + +.animated.flipOutX, +.animated.flipOutY, +.animated.bounceIn, +.animated.bounceOut { + animation-duration: .75s; +} + +@keyframes bounce { + from, 20%, 53%, 80%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + transform: translate3d(0,0,0); + } + + 40%, 43% { + animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); + transform: translate3d(0, -30px, 0); + } + + 70% { + animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); + transform: translate3d(0, -15px, 0); + } + + 90% { + transform: translate3d(0,-4px,0); + } +} + +.bounce { + animation-name: bounce; + transform-origin: center bottom; +} + +@keyframes flash { + from, 50%, to { + opacity: 1; + } + + 25%, 75% { + opacity: 0; + } +} + +.flash { + animation-name: flash; +} + +/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */ + +@keyframes pulse { + from { + transform: scale3d(1, 1, 1); + } + + 50% { + transform: scale3d(1.05, 1.05, 1.05); + } + + to { + transform: scale3d(1, 1, 1); + } +} + +.pulse { + animation-name: pulse; +} + +@keyframes rubberBand { + from { + transform: scale3d(1, 1, 1); + } + + 30% { + transform: scale3d(1.25, 0.75, 1); + } + + 40% { + transform: scale3d(0.75, 1.25, 1); + } + + 50% { + transform: scale3d(1.15, 0.85, 1); + } + + 65% { + transform: scale3d(.95, 1.05, 1); + } + + 75% { + transform: scale3d(1.05, .95, 1); + } + + to { + transform: scale3d(1, 1, 1); + } +} + +.rubberBand { + animation-name: rubberBand; +} + +@keyframes shake { + from, to { + transform: translate3d(0, 0, 0); + } + + 10%, 30%, 50%, 70%, 90% { + transform: translate3d(-10px, 0, 0); + } + + 20%, 40%, 60%, 80% { + transform: translate3d(10px, 0, 0); + } +} + +.shake { + animation-name: shake; +} + +@keyframes headShake { + 0% { + transform: translateX(0); + } + + 6.5% { + transform: translateX(-6px) rotateY(-9deg); + } + + 18.5% { + transform: translateX(5px) rotateY(7deg); + } + + 31.5% { + transform: translateX(-3px) rotateY(-5deg); + } + + 43.5% { + transform: translateX(2px) rotateY(3deg); + } + + 50% { + transform: translateX(0); + } +} + +.headShake { + animation-timing-function: ease-in-out; + animation-name: headShake; +} + +@keyframes swing { + 20% { + transform: rotate3d(0, 0, 1, 15deg); + } + + 40% { + transform: rotate3d(0, 0, 1, -10deg); + } + + 60% { + transform: rotate3d(0, 0, 1, 5deg); + } + + 80% { + transform: rotate3d(0, 0, 1, -5deg); + } + + to { + transform: rotate3d(0, 0, 1, 0deg); + } +} + +.swing { + transform-origin: top center; + animation-name: swing; +} + +@keyframes tada { + from { + transform: scale3d(1, 1, 1); + } + + 10%, 20% { + transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); + } + + 30%, 50%, 70%, 90% { + transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg); + } + + 40%, 60%, 80% { + transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, -3deg); + } + + to { + transform: scale3d(1, 1, 1); + } +} + +.tada { + animation-name: tada; +} + +/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */ + +@keyframes wobble { + from { + transform: none; + } + + 15% { + transform: translate3d(-25%, 0, 0) rotate3d(0, 0, 1, -5deg); + } + + 30% { + transform: translate3d(20%, 0, 0) rotate3d(0, 0, 1, 3deg); + } + + 45% { + transform: translate3d(-15%, 0, 0) rotate3d(0, 0, 1, -3deg); + } + + 60% { + transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); + } + + 75% { + transform: translate3d(-5%, 0, 0) rotate3d(0, 0, 1, -1deg); + } + + to { + transform: none; + } +} + +.wobble { + animation-name: wobble; +} + +@keyframes jello { + from, 11.1%, to { + transform: none; + } + + 22.2% { + transform: skewX(-12.5deg) skewY(-12.5deg); + } + + 33.3% { + transform: skewX(6.25deg) skewY(6.25deg); + } + + 44.4% { + transform: skewX(-3.125deg) skewY(-3.125deg); + } + + 55.5% { + transform: skewX(1.5625deg) skewY(1.5625deg); + } + + 66.6% { + transform: skewX(-0.78125deg) skewY(-0.78125deg); + } + + 77.7% { + transform: skewX(0.390625deg) skewY(0.390625deg); + } + + 88.8% { + transform: skewX(-0.1953125deg) skewY(-0.1953125deg); + } +} + +.jello { + animation-name: jello; + transform-origin: center; +} + +@keyframes bounceIn { + from, 20%, 40%, 60%, 80%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + } + + 0% { + opacity: 0; + transform: scale3d(.3, .3, .3); + } + + 20% { + transform: scale3d(1.1, 1.1, 1.1); + } + + 40% { + transform: scale3d(.9, .9, .9); + } + + 60% { + opacity: 1; + transform: scale3d(1.03, 1.03, 1.03); + } + + 80% { + transform: scale3d(.97, .97, .97); + } + + to { + opacity: 1; + transform: scale3d(1, 1, 1); + } +} + +.bounceIn { + animation-name: bounceIn; +} + +@keyframes bounceInDown { + from, 60%, 75%, 90%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + } + + 0% { + opacity: 0; + transform: translate3d(0, -3000px, 0); + } + + 60% { + opacity: 1; + transform: translate3d(0, 25px, 0); + } + + 75% { + transform: translate3d(0, -10px, 0); + } + + 90% { + transform: translate3d(0, 5px, 0); + } + + to { + transform: none; + } +} + +.bounceInDown { + animation-name: bounceInDown; +} + +@keyframes bounceInLeft { + from, 60%, 75%, 90%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + } + + 0% { + opacity: 0; + transform: translate3d(-3000px, 0, 0); + } + + 60% { + opacity: 1; + transform: translate3d(25px, 0, 0); + } + + 75% { + transform: translate3d(-10px, 0, 0); + } + + 90% { + transform: translate3d(5px, 0, 0); + } + + to { + transform: none; + } +} + +.bounceInLeft { + animation-name: bounceInLeft; +} + +@keyframes bounceInRight { + from, 60%, 75%, 90%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + } + + from { + opacity: 0; + transform: translate3d(3000px, 0, 0); + } + + 60% { + opacity: 1; + transform: translate3d(-25px, 0, 0); + } + + 75% { + transform: translate3d(10px, 0, 0); + } + + 90% { + transform: translate3d(-5px, 0, 0); + } + + to { + transform: none; + } +} + +.bounceInRight { + animation-name: bounceInRight; +} + +@keyframes bounceInUp { + from, 60%, 75%, 90%, to { + animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); + } + + from { + opacity: 0; + transform: translate3d(0, 3000px, 0); + } + + 60% { + opacity: 1; + transform: translate3d(0, -20px, 0); + } + + 75% { + transform: translate3d(0, 10px, 0); + } + + 90% { + transform: translate3d(0, -5px, 0); + } + + to { + transform: translate3d(0, 0, 0); + } +} + +.bounceInUp { + animation-name: bounceInUp; +} + +@keyframes bounceOut { + 20% { + transform: scale3d(.9, .9, .9); + } + + 50%, 55% { + opacity: 1; + transform: scale3d(1.1, 1.1, 1.1); + } + + to { + opacity: 0; + transform: scale3d(.3, .3, .3); + } +} + +.bounceOut { + animation-name: bounceOut; +} + +@keyframes bounceOutDown { + 20% { + transform: translate3d(0, 10px, 0); + } + + 40%, 45% { + opacity: 1; + transform: translate3d(0, -20px, 0); + } + + to { + opacity: 0; + transform: translate3d(0, 2000px, 0); + } +} + +.bounceOutDown { + animation-name: bounceOutDown; +} + +@keyframes bounceOutLeft { + 20% { + opacity: 1; + transform: translate3d(20px, 0, 0); + } + + to { + opacity: 0; + transform: translate3d(-2000px, 0, 0); + } +} + +.bounceOutLeft { + animation-name: bounceOutLeft; +} + +@keyframes bounceOutRight { + 20% { + opacity: 1; + transform: translate3d(-20px, 0, 0); + } + + to { + opacity: 0; + transform: translate3d(2000px, 0, 0); + } +} + +.bounceOutRight { + animation-name: bounceOutRight; +} + +@keyframes bounceOutUp { + 20% { + transform: translate3d(0, -10px, 0); + } + + 40%, 45% { + opacity: 1; + transform: translate3d(0, 20px, 0); + } + + to { + opacity: 0; + transform: translate3d(0, -2000px, 0); + } +} + +.bounceOutUp { + animation-name: bounceOutUp; +} + +@keyframes fadeIn { + from { + opacity: 0; + } + + to { + opacity: 1; + } +} + +.fadeIn { + animation-name: fadeIn; +} + +@keyframes fadeInDown { + from { + opacity: 0; + transform: translate3d(0, -100%, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInDown { + animation-name: fadeInDown; +} + +@keyframes fadeInDownBig { + from { + opacity: 0; + transform: translate3d(0, -2000px, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInDownBig { + animation-name: fadeInDownBig; +} + +@keyframes fadeInLeft { + from { + opacity: 0; + transform: translate3d(-100%, 0, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInLeft { + animation-name: fadeInLeft; +} + +@keyframes fadeInLeftBig { + from { + opacity: 0; + transform: translate3d(-2000px, 0, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInLeftBig { + animation-name: fadeInLeftBig; +} + +@keyframes fadeInRight { + from { + opacity: 0; + transform: translate3d(100%, 0, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInRight { + animation-name: fadeInRight; +} + +@keyframes fadeInRightBig { + from { + opacity: 0; + transform: translate3d(2000px, 0, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInRightBig { + animation-name: fadeInRightBig; +} + +@keyframes fadeInUp { + from { + opacity: 0; + transform: translate3d(0, 100%, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInUp { + animation-name: fadeInUp; +} + +@keyframes fadeInUpBig { + from { + opacity: 0; + transform: translate3d(0, 2000px, 0); + } + + to { + opacity: 1; + transform: none; + } +} + +.fadeInUpBig { + animation-name: fadeInUpBig; +} + +@keyframes fadeOut { + from { + opacity: 1; + } + + to { + opacity: 0; + } +} + +.fadeOut { + animation-name: fadeOut; +} + +@keyframes fadeOutDown { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(0, 100%, 0); + } +} + +.fadeOutDown { + animation-name: fadeOutDown; +} + +@keyframes fadeOutDownBig { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(0, 2000px, 0); + } +} + +.fadeOutDownBig { + animation-name: fadeOutDownBig; +} + +@keyframes fadeOutLeft { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(-100%, 0, 0); + } +} + +.fadeOutLeft { + animation-name: fadeOutLeft; +} + +@keyframes fadeOutLeftBig { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(-2000px, 0, 0); + } +} + +.fadeOutLeftBig { + animation-name: fadeOutLeftBig; +} + +@keyframes fadeOutRight { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(100%, 0, 0); + } +} + +.fadeOutRight { + animation-name: fadeOutRight; +} + +@keyframes fadeOutRightBig { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(2000px, 0, 0); + } +} + +.fadeOutRightBig { + animation-name: fadeOutRightBig; +} + +@keyframes fadeOutUp { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(0, -100%, 0); + } +} + +.fadeOutUp { + animation-name: fadeOutUp; +} + +@keyframes fadeOutUpBig { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(0, -2000px, 0); + } +} + +.fadeOutUpBig { + animation-name: fadeOutUpBig; +} + +@keyframes flip { + from { + transform: perspective(400px) rotate3d(0, 1, 0, -360deg); + animation-timing-function: ease-out; + } + + 40% { + transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1, 0, -190deg); + animation-timing-function: ease-out; + } + + 50% { + transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1, 0, -170deg); + animation-timing-function: ease-in; + } + + 80% { + transform: perspective(400px) scale3d(.95, .95, .95); + animation-timing-function: ease-in; + } + + to { + transform: perspective(400px); + animation-timing-function: ease-in; + } +} + +.animated.flip { + -webkit-backface-visibility: visible; + backface-visibility: visible; + animation-name: flip; +} + +@keyframes flipInX { + from { + transform: perspective(400px) rotate3d(1, 0, 0, 90deg); + animation-timing-function: ease-in; + opacity: 0; + } + + 40% { + transform: perspective(400px) rotate3d(1, 0, 0, -20deg); + animation-timing-function: ease-in; + } + + 60% { + transform: perspective(400px) rotate3d(1, 0, 0, 10deg); + opacity: 1; + } + + 80% { + transform: perspective(400px) rotate3d(1, 0, 0, -5deg); + } + + to { + transform: perspective(400px); + } +} + +.flipInX { + -webkit-backface-visibility: visible !important; + backface-visibility: visible !important; + animation-name: flipInX; +} + +@keyframes flipInY { + from { + transform: perspective(400px) rotate3d(0, 1, 0, 90deg); + animation-timing-function: ease-in; + opacity: 0; + } + + 40% { + transform: perspective(400px) rotate3d(0, 1, 0, -20deg); + animation-timing-function: ease-in; + } + + 60% { + transform: perspective(400px) rotate3d(0, 1, 0, 10deg); + opacity: 1; + } + + 80% { + transform: perspective(400px) rotate3d(0, 1, 0, -5deg); + } + + to { + transform: perspective(400px); + } +} + +.flipInY { + -webkit-backface-visibility: visible !important; + backface-visibility: visible !important; + animation-name: flipInY; +} + +@keyframes flipOutX { + from { + transform: perspective(400px); + } + + 30% { + transform: perspective(400px) rotate3d(1, 0, 0, -20deg); + opacity: 1; + } + + to { + transform: perspective(400px) rotate3d(1, 0, 0, 90deg); + opacity: 0; + } +} + +.flipOutX { + animation-name: flipOutX; + -webkit-backface-visibility: visible !important; + backface-visibility: visible !important; +} + +@keyframes flipOutY { + from { + transform: perspective(400px); + } + + 30% { + transform: perspective(400px) rotate3d(0, 1, 0, -15deg); + opacity: 1; + } + + to { + transform: perspective(400px) rotate3d(0, 1, 0, 90deg); + opacity: 0; + } +} + +.flipOutY { + -webkit-backface-visibility: visible !important; + backface-visibility: visible !important; + animation-name: flipOutY; +} + +@keyframes lightSpeedIn { + from { + transform: translate3d(100%, 0, 0) skewX(-30deg); + opacity: 0; + } + + 60% { + transform: skewX(20deg); + opacity: 1; + } + + 80% { + transform: skewX(-5deg); + opacity: 1; + } + + to { + transform: none; + opacity: 1; + } +} + +.lightSpeedIn { + animation-name: lightSpeedIn; + animation-timing-function: ease-out; +} + +@keyframes lightSpeedOut { + from { + opacity: 1; + } + + to { + transform: translate3d(100%, 0, 0) skewX(30deg); + opacity: 0; + } +} + +.lightSpeedOut { + animation-name: lightSpeedOut; + animation-timing-function: ease-in; +} + +@keyframes rotateIn { + from { + transform-origin: center; + transform: rotate3d(0, 0, 1, -200deg); + opacity: 0; + } + + to { + transform-origin: center; + transform: none; + opacity: 1; + } +} + +.rotateIn { + animation-name: rotateIn; +} + +@keyframes rotateInDownLeft { + from { + transform-origin: left bottom; + transform: rotate3d(0, 0, 1, -45deg); + opacity: 0; + } + + to { + transform-origin: left bottom; + transform: none; + opacity: 1; + } +} + +.rotateInDownLeft { + animation-name: rotateInDownLeft; +} + +@keyframes rotateInDownRight { + from { + transform-origin: right bottom; + transform: rotate3d(0, 0, 1, 45deg); + opacity: 0; + } + + to { + transform-origin: right bottom; + transform: none; + opacity: 1; + } +} + +.rotateInDownRight { + animation-name: rotateInDownRight; +} + +@keyframes rotateInUpLeft { + from { + transform-origin: left bottom; + transform: rotate3d(0, 0, 1, 45deg); + opacity: 0; + } + + to { + transform-origin: left bottom; + transform: none; + opacity: 1; + } +} + +.rotateInUpLeft { + animation-name: rotateInUpLeft; +} + +@keyframes rotateInUpRight { + from { + transform-origin: right bottom; + transform: rotate3d(0, 0, 1, -90deg); + opacity: 0; + } + + to { + transform-origin: right bottom; + transform: none; + opacity: 1; + } +} + +.rotateInUpRight { + animation-name: rotateInUpRight; +} + +@keyframes rotateOut { + from { + transform-origin: center; + opacity: 1; + } + + to { + transform-origin: center; + transform: rotate3d(0, 0, 1, 200deg); + opacity: 0; + } +} + +.rotateOut { + animation-name: rotateOut; +} + +@keyframes rotateOutDownLeft { + from { + transform-origin: left bottom; + opacity: 1; + } + + to { + transform-origin: left bottom; + transform: rotate3d(0, 0, 1, 45deg); + opacity: 0; + } +} + +.rotateOutDownLeft { + animation-name: rotateOutDownLeft; +} + +@keyframes rotateOutDownRight { + from { + transform-origin: right bottom; + opacity: 1; + } + + to { + transform-origin: right bottom; + transform: rotate3d(0, 0, 1, -45deg); + opacity: 0; + } +} + +.rotateOutDownRight { + animation-name: rotateOutDownRight; +} + +@keyframes rotateOutUpLeft { + from { + transform-origin: left bottom; + opacity: 1; + } + + to { + transform-origin: left bottom; + transform: rotate3d(0, 0, 1, -45deg); + opacity: 0; + } +} + +.rotateOutUpLeft { + animation-name: rotateOutUpLeft; +} + +@keyframes rotateOutUpRight { + from { + transform-origin: right bottom; + opacity: 1; + } + + to { + transform-origin: right bottom; + transform: rotate3d(0, 0, 1, 90deg); + opacity: 0; + } +} + +.rotateOutUpRight { + animation-name: rotateOutUpRight; +} + +@keyframes hinge { + 0% { + transform-origin: top left; + animation-timing-function: ease-in-out; + } + + 20%, 60% { + transform: rotate3d(0, 0, 1, 80deg); + transform-origin: top left; + animation-timing-function: ease-in-out; + } + + 40%, 80% { + transform: rotate3d(0, 0, 1, 60deg); + transform-origin: top left; + animation-timing-function: ease-in-out; + opacity: 1; + } + + to { + transform: translate3d(0, 700px, 0); + opacity: 0; + } +} + +.hinge { + animation-name: hinge; +} + +@keyframes jackInTheBox { + from { + opacity: 0; + transform: scale(0.1) rotate(30deg); + transform-origin: center bottom; + } + + 50% { + transform: rotate(-10deg); + } + + 70% { + transform: rotate(3deg); + } + + to { + opacity: 1; + transform: scale(1); + } +} + +.jackInTheBox { + animation-name: jackInTheBox; +} + +/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */ + +@keyframes rollIn { + from { + opacity: 0; + transform: translate3d(-100%, 0, 0) rotate3d(0, 0, 1, -120deg); + } + + to { + opacity: 1; + transform: none; + } +} + +.rollIn { + animation-name: rollIn; +} + +/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */ + +@keyframes rollOut { + from { + opacity: 1; + } + + to { + opacity: 0; + transform: translate3d(100%, 0, 0) rotate3d(0, 0, 1, 120deg); + } +} + +.rollOut { + animation-name: rollOut; +} + +@keyframes zoomIn { + from { + opacity: 0; + transform: scale3d(.3, .3, .3); + } + + 50% { + opacity: 1; + } +} + +.zoomIn { + animation-name: zoomIn; +} + +@keyframes zoomInDown { + from { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(0, -1000px, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + 60% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(0, 60px, 0); + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomInDown { + animation-name: zoomInDown; +} + +@keyframes zoomInLeft { + from { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(-1000px, 0, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + 60% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(10px, 0, 0); + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomInLeft { + animation-name: zoomInLeft; +} + +@keyframes zoomInRight { + from { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(1000px, 0, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + 60% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(-10px, 0, 0); + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomInRight { + animation-name: zoomInRight; +} + +@keyframes zoomInUp { + from { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(0, 1000px, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + 60% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(0, -60px, 0); + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomInUp { + animation-name: zoomInUp; +} + +@keyframes zoomOut { + from { + opacity: 1; + } + + 50% { + opacity: 0; + transform: scale3d(.3, .3, .3); + } + + to { + opacity: 0; + } +} + +.zoomOut { + animation-name: zoomOut; +} + +@keyframes zoomOutDown { + 40% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(0, -60px, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + to { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(0, 2000px, 0); + transform-origin: center bottom; + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomOutDown { + animation-name: zoomOutDown; +} + +@keyframes zoomOutLeft { + 40% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(42px, 0, 0); + } + + to { + opacity: 0; + transform: scale(.1) translate3d(-2000px, 0, 0); + transform-origin: left center; + } +} + +.zoomOutLeft { + animation-name: zoomOutLeft; +} + +@keyframes zoomOutRight { + 40% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(-42px, 0, 0); + } + + to { + opacity: 0; + transform: scale(.1) translate3d(2000px, 0, 0); + transform-origin: right center; + } +} + +.zoomOutRight { + animation-name: zoomOutRight; +} + +@keyframes zoomOutUp { + 40% { + opacity: 1; + transform: scale3d(.475, .475, .475) translate3d(0, 60px, 0); + animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); + } + + to { + opacity: 0; + transform: scale3d(.1, .1, .1) translate3d(0, -2000px, 0); + transform-origin: center bottom; + animation-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1); + } +} + +.zoomOutUp { + animation-name: zoomOutUp; +} + +@keyframes slideInDown { + from { + transform: translate3d(0, -100%, 0); + visibility: visible; + } + + to { + transform: translate3d(0, 0, 0); + } +} + +.slideInDown { + animation-name: slideInDown; +} + +@keyframes slideInLeft { + from { + transform: translate3d(-100%, 0, 0); + visibility: visible; + } + + to { + transform: translate3d(0, 0, 0); + } +} + +.slideInLeft { + animation-name: slideInLeft; +} + +@keyframes slideInRight { + from { + transform: translate3d(100%, 0, 0); + visibility: visible; + } + + to { + transform: translate3d(0, 0, 0); + } +} + +.slideInRight { + animation-name: slideInRight; +} + +@keyframes slideInUp { + from { + transform: translate3d(0, 100%, 0); + visibility: visible; + } + + to { + transform: translate3d(0, 0, 0); + } +} + +.slideInUp { + animation-name: slideInUp; +} + +@keyframes slideOutDown { + from { + transform: translate3d(0, 0, 0); + } + + to { + visibility: hidden; + transform: translate3d(0, 100%, 0); + } +} + +.slideOutDown { + animation-name: slideOutDown; +} + +@keyframes slideOutLeft { + from { + transform: translate3d(0, 0, 0); + } + + to { + visibility: hidden; + transform: translate3d(-100%, 0, 0); + } +} + +.slideOutLeft { + animation-name: slideOutLeft; +} + +@keyframes slideOutRight { + from { + transform: translate3d(0, 0, 0); + } + + to { + visibility: hidden; + transform: translate3d(100%, 0, 0); + } +} + +.slideOutRight { + animation-name: slideOutRight; +} + +@keyframes slideOutUp { + from { + transform: translate3d(0, 0, 0); + } + + to { + visibility: hidden; + transform: translate3d(0, -100%, 0); + } +} + +.slideOutUp { + animation-name: slideOutUp; +} diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css new file mode 100644 index 0000000..b5f77b2 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css @@ -0,0 +1,1353 @@ +@-ms-viewport { + width: device-width; +} + +html { + box-sizing: border-box; + -ms-overflow-style: scrollbar; +} + +*, +*::before, +*::after { + box-sizing: inherit; +} + +.container { + margin-right: auto; + margin-left: auto; + padding-right: 15px; + padding-left: 15px; + width: 100%; +} + +@media (min-width: 576px) { + .container { + max-width: 540px; + } +} + +@media (min-width: 768px) { + .container { + max-width: 720px; + } +} + +@media (min-width: 992px) { + .container { + max-width: 960px; + } +} + +@media (min-width: 1200px) { + .container { + max-width: 1140px; + } +} + +.container-fluid { + width: 100%; + margin-right: auto; + margin-left: auto; + padding-right: 15px; + padding-left: 15px; + width: 100%; +} + +.row { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + margin-right: -15px; + margin-left: -15px; +} + +.no-gutters { + margin-right: 0; + margin-left: 0; +} + +.no-gutters > .col, +.no-gutters > [class*="col-"] { + padding-right: 0; + padding-left: 0; +} + +.col-1, .col-2, .col-3, .col-4, .col-5, .col-6, .col-7, .col-8, .col-9, .col-10, .col-11, .col-12, .col, +.col-auto, .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12, .col-sm, +.col-sm-auto, .col-md-1, .col-md-2, .col-md-3, .col-md-4, .col-md-5, .col-md-6, .col-md-7, .col-md-8, .col-md-9, .col-md-10, .col-md-11, .col-md-12, .col-md, +.col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg, +.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-xl-8, .col-xl-9, .col-xl-10, .col-xl-11, .col-xl-12, .col-xl, +.col-xl-auto { + position: relative; + width: 100%; + min-height: 1px; + padding-right: 15px; + padding-left: 15px; +} + +.col { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; +} + +.col-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; +} + +.col-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; +} + +.col-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; +} + +.col-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; +} + +.col-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; +} + +.col-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; +} + +.col-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; +} + +.col-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; +} + +.col-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; +} + +.col-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; +} + +.col-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; +} + +.col-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; +} + +.col-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; +} + +.order-1 { + -ms-flex-order: 1; + order: 1; +} + +.order-2 { + -ms-flex-order: 2; + order: 2; +} + +.order-3 { + -ms-flex-order: 3; + order: 3; +} + +.order-4 { + -ms-flex-order: 4; + order: 4; +} + +.order-5 { + -ms-flex-order: 5; + order: 5; +} + +.order-6 { + -ms-flex-order: 6; + order: 6; +} + +.order-7 { + -ms-flex-order: 7; + order: 7; +} + +.order-8 { + -ms-flex-order: 8; + order: 8; +} + +.order-9 { + -ms-flex-order: 9; + order: 9; +} + +.order-10 { + -ms-flex-order: 10; + order: 10; +} + +.order-11 { + -ms-flex-order: 11; + order: 11; +} + +.order-12 { + -ms-flex-order: 12; + order: 12; +} + +@media (min-width: 576px) { + .col-sm { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-sm-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-sm-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-sm-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-sm-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-sm-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-sm-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-sm-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-sm-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-sm-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-sm-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-sm-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-sm-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-sm-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-sm-1 { + -ms-flex-order: 1; + order: 1; + } + .order-sm-2 { + -ms-flex-order: 2; + order: 2; + } + .order-sm-3 { + -ms-flex-order: 3; + order: 3; + } + .order-sm-4 { + -ms-flex-order: 4; + order: 4; + } + .order-sm-5 { + -ms-flex-order: 5; + order: 5; + } + .order-sm-6 { + -ms-flex-order: 6; + order: 6; + } + .order-sm-7 { + -ms-flex-order: 7; + order: 7; + } + .order-sm-8 { + -ms-flex-order: 8; + order: 8; + } + .order-sm-9 { + -ms-flex-order: 9; + order: 9; + } + .order-sm-10 { + -ms-flex-order: 10; + order: 10; + } + .order-sm-11 { + -ms-flex-order: 11; + order: 11; + } + .order-sm-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 768px) { + .col-md { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-md-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-md-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-md-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-md-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-md-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-md-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-md-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-md-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-md-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-md-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-md-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-md-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-md-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-md-1 { + -ms-flex-order: 1; + order: 1; + } + .order-md-2 { + -ms-flex-order: 2; + order: 2; + } + .order-md-3 { + -ms-flex-order: 3; + order: 3; + } + .order-md-4 { + -ms-flex-order: 4; + order: 4; + } + .order-md-5 { + -ms-flex-order: 5; + order: 5; + } + .order-md-6 { + -ms-flex-order: 6; + order: 6; + } + .order-md-7 { + -ms-flex-order: 7; + order: 7; + } + .order-md-8 { + -ms-flex-order: 8; + order: 8; + } + .order-md-9 { + -ms-flex-order: 9; + order: 9; + } + .order-md-10 { + -ms-flex-order: 10; + order: 10; + } + .order-md-11 { + -ms-flex-order: 11; + order: 11; + } + .order-md-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 992px) { + .col-lg { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-lg-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-lg-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-lg-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-lg-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-lg-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-lg-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-lg-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-lg-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-lg-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-lg-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-lg-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-lg-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-lg-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-lg-1 { + -ms-flex-order: 1; + order: 1; + } + .order-lg-2 { + -ms-flex-order: 2; + order: 2; + } + .order-lg-3 { + -ms-flex-order: 3; + order: 3; + } + .order-lg-4 { + -ms-flex-order: 4; + order: 4; + } + .order-lg-5 { + -ms-flex-order: 5; + order: 5; + } + .order-lg-6 { + -ms-flex-order: 6; + order: 6; + } + .order-lg-7 { + -ms-flex-order: 7; + order: 7; + } + .order-lg-8 { + -ms-flex-order: 8; + order: 8; + } + .order-lg-9 { + -ms-flex-order: 9; + order: 9; + } + .order-lg-10 { + -ms-flex-order: 10; + order: 10; + } + .order-lg-11 { + -ms-flex-order: 11; + order: 11; + } + .order-lg-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 1200px) { + .col-xl { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-xl-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-xl-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-xl-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-xl-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-xl-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-xl-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-xl-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-xl-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-xl-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-xl-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-xl-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-xl-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-xl-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-xl-1 { + -ms-flex-order: 1; + order: 1; + } + .order-xl-2 { + -ms-flex-order: 2; + order: 2; + } + .order-xl-3 { + -ms-flex-order: 3; + order: 3; + } + .order-xl-4 { + -ms-flex-order: 4; + order: 4; + } + .order-xl-5 { + -ms-flex-order: 5; + order: 5; + } + .order-xl-6 { + -ms-flex-order: 6; + order: 6; + } + .order-xl-7 { + -ms-flex-order: 7; + order: 7; + } + .order-xl-8 { + -ms-flex-order: 8; + order: 8; + } + .order-xl-9 { + -ms-flex-order: 9; + order: 9; + } + .order-xl-10 { + -ms-flex-order: 10; + order: 10; + } + .order-xl-11 { + -ms-flex-order: 11; + order: 11; + } + .order-xl-12 { + -ms-flex-order: 12; + order: 12; + } +} + +.flex-row { + -ms-flex-direction: row !important; + flex-direction: row !important; +} + +.flex-column { + -ms-flex-direction: column !important; + flex-direction: column !important; +} + +.flex-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; +} + +.flex-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; +} + +.flex-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; +} + +.flex-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; +} + +.flex-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; +} + +.justify-content-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; +} + +.justify-content-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; +} + +.justify-content-center { + -ms-flex-pack: center !important; + justify-content: center !important; +} + +.justify-content-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; +} + +.justify-content-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; +} + +.align-items-start { + -ms-flex-align: start !important; + align-items: flex-start !important; +} + +.align-items-end { + -ms-flex-align: end !important; + align-items: flex-end !important; +} + +.align-items-center { + -ms-flex-align: center !important; + align-items: center !important; +} + +.align-items-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; +} + +.align-items-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; +} + +.align-content-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; +} + +.align-content-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; +} + +.align-content-center { + -ms-flex-line-pack: center !important; + align-content: center !important; +} + +.align-content-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; +} + +.align-content-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; +} + +.align-content-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; +} + +.align-self-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; +} + +.align-self-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; +} + +.align-self-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; +} + +.align-self-center { + -ms-flex-item-align: center !important; + align-self: center !important; +} + +.align-self-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; +} + +.align-self-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; +} + +@media (min-width: 576px) { + .flex-sm-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-sm-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-sm-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-sm-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-sm-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-sm-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-sm-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-sm-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-sm-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-sm-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-sm-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-sm-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-sm-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-sm-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-sm-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-sm-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-sm-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-sm-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-sm-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-sm-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-sm-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-sm-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-sm-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-sm-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-sm-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-sm-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-sm-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-sm-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-sm-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 768px) { + .flex-md-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-md-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-md-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-md-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-md-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-md-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-md-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-md-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-md-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-md-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-md-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-md-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-md-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-md-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-md-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-md-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-md-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-md-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-md-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-md-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-md-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-md-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-md-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-md-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-md-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-md-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-md-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-md-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-md-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 992px) { + .flex-lg-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-lg-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-lg-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-lg-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-lg-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-lg-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-lg-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-lg-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-lg-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-lg-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-lg-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-lg-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-lg-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-lg-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-lg-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-lg-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-lg-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-lg-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-lg-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-lg-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-lg-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-lg-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-lg-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-lg-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-lg-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-lg-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-lg-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-lg-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-lg-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 1200px) { + .flex-xl-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-xl-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-xl-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-xl-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-xl-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-xl-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-xl-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-xl-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-xl-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-xl-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-xl-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-xl-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-xl-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-xl-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-xl-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-xl-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-xl-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-xl-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-xl-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-xl-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-xl-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-xl-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-xl-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-xl-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-xl-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-xl-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-xl-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-xl-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-xl-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} +/*# sourceMappingURL=bootstrap-grid.css.map */ \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css.map b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css.map new file mode 100644 index 0000000..a5145bd --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["../../scss/bootstrap-grid.scss","bootstrap-grid.css","../../scss/_grid.scss","../../scss/mixins/_grid.scss","../../scss/mixins/_breakpoints.scss","../../scss/_variables.scss","../../scss/mixins/_grid-framework.scss","../../scss/utilities/_flex.scss"],"names":[],"mappings":"AAUE;EAAgB,oBAAmB;CCRpC;;ADWD;EACE,uBAAsB;EACtB,8BAA6B;CAC9B;;AAED;;;EAGE,oBAAmB;CACpB;;AEjBC;ECAA,mBAAkB;EAClB,kBAAiB;EACjB,oBAAuC;EACvC,mBAAuC;EACvC,YAAW;CDDV;;AEgDC;EFnDF;ICYI,iBE8KK;GHvLR;CDmBF;;AG6BG;EFnDF;ICYI,iBE+KK;GHxLR;CDyBF;;AGuBG;EFnDF;ICYI,iBEgLK;GHzLR;CD+BF;;AGiBG;EFnDF;ICYI,kBEiLM;GH1LT;CDqCF;;AC5BC;EACE,YAAW;ECbb,mBAAkB;EAClB,kBAAiB;EACjB,oBAAuC;EACvC,mBAAuC;EACvC,YAAW;CDWV;;AAQD;ECLA,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,oBAAuC;EACvC,mBAAuC;CDItC;;AAID;EACE,gBAAe;EACf,eAAc;CAOf;;AATD;;EAMI,iBAAgB;EAChB,gBAAe;CAChB;;AInCH;;;;;;EACE,mBAAkB;EAClB,YAAW;EACX,gBAAe;EACf,oBAA4B;EAC5B,mBAA4B;CAC7B;;AAkBG;EACE,2BAAa;MAAb,cAAa;EACb,qBAAY;MAAZ,aAAY;EACZ,gBAAe;CAChB;;AACD;EACE,mBAAc;MAAd,eAAc;EACd,YAAW;EACX,gBAAe;CAChB;;AAGC;EHFN,wBAAsC;MAAtC,oBAAsC;EAItC,qBAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CGAhC;;AAFD;EHFN,mBAAsC;MAAtC,eAAsC;EAItC,gBAAuC;CGAhC;;AAID;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;AFKL;EEzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IHFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GGAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CL2PR;;AGtPG;EEzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IHFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GGAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CL4VR;;AGvVG;EEzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IHFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GGAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CL6bR;;AGxbG;EEzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IHFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GGAhC;EAFD;IHFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GGAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CL8hBR;;AMzkBG;EAAgC,mCAA8B;MAA9B,+BAA8B;CAAK;;AACnE;EAAgC,sCAAiC;MAAjC,kCAAiC;CAAK;;AACtE;EAAgC,2CAAsC;MAAtC,uCAAsC;CAAK;;AAC3E;EAAgC,8CAAyC;MAAzC,0CAAyC;CAAK;;AAE9E;EAA8B,+BAA0B;MAA1B,2BAA0B;CAAK;;AAC7D;EAA8B,iCAA4B;MAA5B,6BAA4B;CAAK;;AAC/D;EAA8B,uCAAkC;MAAlC,mCAAkC;CAAK;;AAErE;EAAoC,gCAAsC;MAAtC,uCAAsC;CAAK;;AAC/E;EAAoC,8BAAoC;MAApC,qCAAoC;CAAK;;AAC7E;EAAoC,iCAAkC;MAAlC,mCAAkC;CAAK;;AAC3E;EAAoC,kCAAyC;MAAzC,0CAAyC;CAAK;;AAClF;EAAoC,qCAAwC;MAAxC,yCAAwC;CAAK;;AAEjF;EAAiC,iCAAkC;MAAlC,mCAAkC;CAAK;;AACxE;EAAiC,+BAAgC;MAAhC,iCAAgC;CAAK;;AACtE;EAAiC,kCAA8B;MAA9B,+BAA8B;CAAK;;AACpE;EAAiC,oCAAgC;MAAhC,iCAAgC;CAAK;;AACtE;EAAiC,mCAA+B;MAA/B,gCAA+B;CAAK;;AAErE;EAAkC,qCAAoC;MAApC,qCAAoC;CAAK;;AAC3E;EAAkC,mCAAkC;MAAlC,mCAAkC;CAAK;;AACzE;EAAkC,sCAAgC;MAAhC,iCAAgC;CAAK;;AACvE;EAAkC,uCAAuC;MAAvC,wCAAuC;CAAK;;AAC9E;EAAkC,0CAAsC;MAAtC,uCAAsC;CAAK;;AAC7E;EAAkC,uCAAiC;MAAjC,kCAAiC;CAAK;;AAExE;EAAgC,qCAA2B;MAA3B,4BAA2B;CAAK;;AAChE;EAAgC,sCAAiC;MAAjC,kCAAiC;CAAK;;AACtE;EAAgC,oCAA+B;MAA/B,gCAA+B;CAAK;;AACpE;EAAgC,uCAA6B;MAA7B,8BAA6B;CAAK;;AAClE;EAAgC,yCAA+B;MAA/B,gCAA+B;CAAK;;AACpE;EAAgC,wCAA8B;MAA9B,+BAA8B;CAAK;;AHenE;EGhDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CNsvBtE;;AGvuBG;EGhDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CNg1BtE;;AGj0BG;EGhDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CN06BtE;;AG35BG;EGhDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CNogCtE","file":"bootstrap-grid.css","sourcesContent":["// Bootstrap Grid only\n//\n// Includes relevant variables and mixins for the flexbox grid\n// system, as well as the generated predefined classes (e.g., `.col-sm-4`).\n\n//\n// Box sizing, responsive, and more\n//\n\n@at-root {\n @-ms-viewport { width: device-width; }\n}\n\nhtml {\n box-sizing: border-box;\n -ms-overflow-style: scrollbar;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@import \"functions\";\n@import \"variables\";\n\n//\n// Grid mixins\n//\n\n@import \"mixins/breakpoints\";\n@import \"mixins/grid-framework\";\n@import \"mixins/grid\";\n\n@import \"grid\";\n@import \"utilities/flex\";\n","@-ms-viewport {\n width: device-width;\n}\n\nhtml {\n box-sizing: border-box;\n -ms-overflow-style: scrollbar;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n.container {\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n@media (min-width: 576px) {\n .container {\n max-width: 540px;\n }\n}\n\n@media (min-width: 768px) {\n .container {\n max-width: 720px;\n }\n}\n\n@media (min-width: 992px) {\n .container {\n max-width: 960px;\n }\n}\n\n@media (min-width: 1200px) {\n .container {\n max-width: 1140px;\n }\n}\n\n.container-fluid {\n width: 100%;\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n.row {\n display: flex;\n flex-wrap: wrap;\n margin-right: -15px;\n margin-left: -15px;\n}\n\n.no-gutters {\n margin-right: 0;\n margin-left: 0;\n}\n\n.no-gutters > .col,\n.no-gutters > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n}\n\n.col-1, .col-2, .col-3, .col-4, .col-5, .col-6, .col-7, .col-8, .col-9, .col-10, .col-11, .col-12, .col,\n.col-auto, .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12, .col-sm,\n.col-sm-auto, .col-md-1, .col-md-2, .col-md-3, .col-md-4, .col-md-5, .col-md-6, .col-md-7, .col-md-8, .col-md-9, .col-md-10, .col-md-11, .col-md-12, .col-md,\n.col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg,\n.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-xl-8, .col-xl-9, .col-xl-10, .col-xl-11, .col-xl-12, .col-xl,\n.col-xl-auto {\n position: relative;\n width: 100%;\n min-height: 1px;\n padding-right: 15px;\n padding-left: 15px;\n}\n\n.col {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n}\n\n.col-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n}\n\n.col-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n}\n\n.col-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n}\n\n.col-3 {\n flex: 0 0 25%;\n max-width: 25%;\n}\n\n.col-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n}\n\n.col-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n}\n\n.col-6 {\n flex: 0 0 50%;\n max-width: 50%;\n}\n\n.col-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n}\n\n.col-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n}\n\n.col-9 {\n flex: 0 0 75%;\n max-width: 75%;\n}\n\n.col-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n}\n\n.col-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n}\n\n.col-12 {\n flex: 0 0 100%;\n max-width: 100%;\n}\n\n.order-1 {\n order: 1;\n}\n\n.order-2 {\n order: 2;\n}\n\n.order-3 {\n order: 3;\n}\n\n.order-4 {\n order: 4;\n}\n\n.order-5 {\n order: 5;\n}\n\n.order-6 {\n order: 6;\n}\n\n.order-7 {\n order: 7;\n}\n\n.order-8 {\n order: 8;\n}\n\n.order-9 {\n order: 9;\n}\n\n.order-10 {\n order: 10;\n}\n\n.order-11 {\n order: 11;\n}\n\n.order-12 {\n order: 12;\n}\n\n@media (min-width: 576px) {\n .col-sm {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-sm-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-sm-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-sm-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-sm-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-sm-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-sm-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-sm-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-sm-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-sm-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-sm-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-sm-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-sm-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-sm-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-sm-1 {\n order: 1;\n }\n .order-sm-2 {\n order: 2;\n }\n .order-sm-3 {\n order: 3;\n }\n .order-sm-4 {\n order: 4;\n }\n .order-sm-5 {\n order: 5;\n }\n .order-sm-6 {\n order: 6;\n }\n .order-sm-7 {\n order: 7;\n }\n .order-sm-8 {\n order: 8;\n }\n .order-sm-9 {\n order: 9;\n }\n .order-sm-10 {\n order: 10;\n }\n .order-sm-11 {\n order: 11;\n }\n .order-sm-12 {\n order: 12;\n }\n}\n\n@media (min-width: 768px) {\n .col-md {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-md-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-md-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-md-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-md-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-md-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-md-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-md-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-md-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-md-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-md-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-md-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-md-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-md-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-md-1 {\n order: 1;\n }\n .order-md-2 {\n order: 2;\n }\n .order-md-3 {\n order: 3;\n }\n .order-md-4 {\n order: 4;\n }\n .order-md-5 {\n order: 5;\n }\n .order-md-6 {\n order: 6;\n }\n .order-md-7 {\n order: 7;\n }\n .order-md-8 {\n order: 8;\n }\n .order-md-9 {\n order: 9;\n }\n .order-md-10 {\n order: 10;\n }\n .order-md-11 {\n order: 11;\n }\n .order-md-12 {\n order: 12;\n }\n}\n\n@media (min-width: 992px) {\n .col-lg {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-lg-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-lg-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-lg-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-lg-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-lg-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-lg-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-lg-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-lg-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-lg-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-lg-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-lg-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-lg-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-lg-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-lg-1 {\n order: 1;\n }\n .order-lg-2 {\n order: 2;\n }\n .order-lg-3 {\n order: 3;\n }\n .order-lg-4 {\n order: 4;\n }\n .order-lg-5 {\n order: 5;\n }\n .order-lg-6 {\n order: 6;\n }\n .order-lg-7 {\n order: 7;\n }\n .order-lg-8 {\n order: 8;\n }\n .order-lg-9 {\n order: 9;\n }\n .order-lg-10 {\n order: 10;\n }\n .order-lg-11 {\n order: 11;\n }\n .order-lg-12 {\n order: 12;\n }\n}\n\n@media (min-width: 1200px) {\n .col-xl {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-xl-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-xl-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-xl-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-xl-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-xl-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-xl-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-xl-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-xl-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-xl-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-xl-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-xl-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-xl-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-xl-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-xl-1 {\n order: 1;\n }\n .order-xl-2 {\n order: 2;\n }\n .order-xl-3 {\n order: 3;\n }\n .order-xl-4 {\n order: 4;\n }\n .order-xl-5 {\n order: 5;\n }\n .order-xl-6 {\n order: 6;\n }\n .order-xl-7 {\n order: 7;\n }\n .order-xl-8 {\n order: 8;\n }\n .order-xl-9 {\n order: 9;\n }\n .order-xl-10 {\n order: 10;\n }\n .order-xl-11 {\n order: 11;\n }\n .order-xl-12 {\n order: 12;\n }\n}\n\n.flex-row {\n flex-direction: row !important;\n}\n\n.flex-column {\n flex-direction: column !important;\n}\n\n.flex-row-reverse {\n flex-direction: row-reverse !important;\n}\n\n.flex-column-reverse {\n flex-direction: column-reverse !important;\n}\n\n.flex-wrap {\n flex-wrap: wrap !important;\n}\n\n.flex-nowrap {\n flex-wrap: nowrap !important;\n}\n\n.flex-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n}\n\n.justify-content-start {\n justify-content: flex-start !important;\n}\n\n.justify-content-end {\n justify-content: flex-end !important;\n}\n\n.justify-content-center {\n justify-content: center !important;\n}\n\n.justify-content-between {\n justify-content: space-between !important;\n}\n\n.justify-content-around {\n justify-content: space-around !important;\n}\n\n.align-items-start {\n align-items: flex-start !important;\n}\n\n.align-items-end {\n align-items: flex-end !important;\n}\n\n.align-items-center {\n align-items: center !important;\n}\n\n.align-items-baseline {\n align-items: baseline !important;\n}\n\n.align-items-stretch {\n align-items: stretch !important;\n}\n\n.align-content-start {\n align-content: flex-start !important;\n}\n\n.align-content-end {\n align-content: flex-end !important;\n}\n\n.align-content-center {\n align-content: center !important;\n}\n\n.align-content-between {\n align-content: space-between !important;\n}\n\n.align-content-around {\n align-content: space-around !important;\n}\n\n.align-content-stretch {\n align-content: stretch !important;\n}\n\n.align-self-auto {\n align-self: auto !important;\n}\n\n.align-self-start {\n align-self: flex-start !important;\n}\n\n.align-self-end {\n align-self: flex-end !important;\n}\n\n.align-self-center {\n align-self: center !important;\n}\n\n.align-self-baseline {\n align-self: baseline !important;\n}\n\n.align-self-stretch {\n align-self: stretch !important;\n}\n\n@media (min-width: 576px) {\n .flex-sm-row {\n flex-direction: row !important;\n }\n .flex-sm-column {\n flex-direction: column !important;\n }\n .flex-sm-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-sm-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-sm-wrap {\n flex-wrap: wrap !important;\n }\n .flex-sm-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-sm-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-sm-start {\n justify-content: flex-start !important;\n }\n .justify-content-sm-end {\n justify-content: flex-end !important;\n }\n .justify-content-sm-center {\n justify-content: center !important;\n }\n .justify-content-sm-between {\n justify-content: space-between !important;\n }\n .justify-content-sm-around {\n justify-content: space-around !important;\n }\n .align-items-sm-start {\n align-items: flex-start !important;\n }\n .align-items-sm-end {\n align-items: flex-end !important;\n }\n .align-items-sm-center {\n align-items: center !important;\n }\n .align-items-sm-baseline {\n align-items: baseline !important;\n }\n .align-items-sm-stretch {\n align-items: stretch !important;\n }\n .align-content-sm-start {\n align-content: flex-start !important;\n }\n .align-content-sm-end {\n align-content: flex-end !important;\n }\n .align-content-sm-center {\n align-content: center !important;\n }\n .align-content-sm-between {\n align-content: space-between !important;\n }\n .align-content-sm-around {\n align-content: space-around !important;\n }\n .align-content-sm-stretch {\n align-content: stretch !important;\n }\n .align-self-sm-auto {\n align-self: auto !important;\n }\n .align-self-sm-start {\n align-self: flex-start !important;\n }\n .align-self-sm-end {\n align-self: flex-end !important;\n }\n .align-self-sm-center {\n align-self: center !important;\n }\n .align-self-sm-baseline {\n align-self: baseline !important;\n }\n .align-self-sm-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 768px) {\n .flex-md-row {\n flex-direction: row !important;\n }\n .flex-md-column {\n flex-direction: column !important;\n }\n .flex-md-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-md-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-md-wrap {\n flex-wrap: wrap !important;\n }\n .flex-md-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-md-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-md-start {\n justify-content: flex-start !important;\n }\n .justify-content-md-end {\n justify-content: flex-end !important;\n }\n .justify-content-md-center {\n justify-content: center !important;\n }\n .justify-content-md-between {\n justify-content: space-between !important;\n }\n .justify-content-md-around {\n justify-content: space-around !important;\n }\n .align-items-md-start {\n align-items: flex-start !important;\n }\n .align-items-md-end {\n align-items: flex-end !important;\n }\n .align-items-md-center {\n align-items: center !important;\n }\n .align-items-md-baseline {\n align-items: baseline !important;\n }\n .align-items-md-stretch {\n align-items: stretch !important;\n }\n .align-content-md-start {\n align-content: flex-start !important;\n }\n .align-content-md-end {\n align-content: flex-end !important;\n }\n .align-content-md-center {\n align-content: center !important;\n }\n .align-content-md-between {\n align-content: space-between !important;\n }\n .align-content-md-around {\n align-content: space-around !important;\n }\n .align-content-md-stretch {\n align-content: stretch !important;\n }\n .align-self-md-auto {\n align-self: auto !important;\n }\n .align-self-md-start {\n align-self: flex-start !important;\n }\n .align-self-md-end {\n align-self: flex-end !important;\n }\n .align-self-md-center {\n align-self: center !important;\n }\n .align-self-md-baseline {\n align-self: baseline !important;\n }\n .align-self-md-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 992px) {\n .flex-lg-row {\n flex-direction: row !important;\n }\n .flex-lg-column {\n flex-direction: column !important;\n }\n .flex-lg-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-lg-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-lg-wrap {\n flex-wrap: wrap !important;\n }\n .flex-lg-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-lg-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-lg-start {\n justify-content: flex-start !important;\n }\n .justify-content-lg-end {\n justify-content: flex-end !important;\n }\n .justify-content-lg-center {\n justify-content: center !important;\n }\n .justify-content-lg-between {\n justify-content: space-between !important;\n }\n .justify-content-lg-around {\n justify-content: space-around !important;\n }\n .align-items-lg-start {\n align-items: flex-start !important;\n }\n .align-items-lg-end {\n align-items: flex-end !important;\n }\n .align-items-lg-center {\n align-items: center !important;\n }\n .align-items-lg-baseline {\n align-items: baseline !important;\n }\n .align-items-lg-stretch {\n align-items: stretch !important;\n }\n .align-content-lg-start {\n align-content: flex-start !important;\n }\n .align-content-lg-end {\n align-content: flex-end !important;\n }\n .align-content-lg-center {\n align-content: center !important;\n }\n .align-content-lg-between {\n align-content: space-between !important;\n }\n .align-content-lg-around {\n align-content: space-around !important;\n }\n .align-content-lg-stretch {\n align-content: stretch !important;\n }\n .align-self-lg-auto {\n align-self: auto !important;\n }\n .align-self-lg-start {\n align-self: flex-start !important;\n }\n .align-self-lg-end {\n align-self: flex-end !important;\n }\n .align-self-lg-center {\n align-self: center !important;\n }\n .align-self-lg-baseline {\n align-self: baseline !important;\n }\n .align-self-lg-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 1200px) {\n .flex-xl-row {\n flex-direction: row !important;\n }\n .flex-xl-column {\n flex-direction: column !important;\n }\n .flex-xl-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-xl-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-xl-wrap {\n flex-wrap: wrap !important;\n }\n .flex-xl-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-xl-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-xl-start {\n justify-content: flex-start !important;\n }\n .justify-content-xl-end {\n justify-content: flex-end !important;\n }\n .justify-content-xl-center {\n justify-content: center !important;\n }\n .justify-content-xl-between {\n justify-content: space-between !important;\n }\n .justify-content-xl-around {\n justify-content: space-around !important;\n }\n .align-items-xl-start {\n align-items: flex-start !important;\n }\n .align-items-xl-end {\n align-items: flex-end !important;\n }\n .align-items-xl-center {\n align-items: center !important;\n }\n .align-items-xl-baseline {\n align-items: baseline !important;\n }\n .align-items-xl-stretch {\n align-items: stretch !important;\n }\n .align-content-xl-start {\n align-content: flex-start !important;\n }\n .align-content-xl-end {\n align-content: flex-end !important;\n }\n .align-content-xl-center {\n align-content: center !important;\n }\n .align-content-xl-between {\n align-content: space-between !important;\n }\n .align-content-xl-around {\n align-content: space-around !important;\n }\n .align-content-xl-stretch {\n align-content: stretch !important;\n }\n .align-self-xl-auto {\n align-self: auto !important;\n }\n .align-self-xl-start {\n align-self: flex-start !important;\n }\n .align-self-xl-end {\n align-self: flex-end !important;\n }\n .align-self-xl-center {\n align-self: center !important;\n }\n .align-self-xl-baseline {\n align-self: baseline !important;\n }\n .align-self-xl-stretch {\n align-self: stretch !important;\n }\n}\n\n/*# sourceMappingURL=bootstrap-grid.css.map */","// Container widths\n//\n// Set the container width, and override it for fixed navbars in media queries.\n\n@if $enable-grid-classes {\n .container {\n @include make-container();\n @include make-container-max-widths();\n }\n}\n\n// Fluid container\n//\n// Utilizes the mixin meant for fixed width containers, but with 100% width for\n// fluid, full width layouts.\n\n@if $enable-grid-classes {\n .container-fluid {\n width: 100%;\n @include make-container();\n }\n}\n\n// Row\n//\n// Rows contain and clear the floats of your columns.\n\n@if $enable-grid-classes {\n .row {\n @include make-row();\n }\n\n // Remove the negative margin from default .row, then the horizontal padding\n // from all immediate children columns (to prevent runaway style inheritance).\n .no-gutters {\n margin-right: 0;\n margin-left: 0;\n\n > .col,\n > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n }\n }\n}\n\n// Columns\n//\n// Common styles for small and large grid columns\n\n@if $enable-grid-classes {\n @include make-grid-columns();\n}\n","/// Grid system\n//\n// Generate semantic grid columns with these mixins.\n\n@mixin make-container() {\n margin-right: auto;\n margin-left: auto;\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n width: 100%;\n}\n\n\n// For each breakpoint, define the maximum width of the container in a media query\n@mixin make-container-max-widths($max-widths: $container-max-widths, $breakpoints: $grid-breakpoints) {\n @each $breakpoint, $container-max-width in $max-widths {\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n max-width: $container-max-width;\n }\n }\n}\n\n@mixin make-row() {\n display: flex;\n flex-wrap: wrap;\n margin-right: ($grid-gutter-width / -2);\n margin-left: ($grid-gutter-width / -2);\n}\n\n@mixin make-col-ready() {\n position: relative;\n // Prevent columns from becoming too narrow when at smaller grid tiers by\n // always setting `width: 100%;`. This works because we use `flex` values\n // later on to override this initial width.\n width: 100%;\n min-height: 1px; // Prevent collapsing\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n}\n\n@mixin make-col($size, $columns: $grid-columns) {\n flex: 0 0 percentage($size / $columns);\n // Add a `max-width` to ensure content within each column does not blow out\n // the width of the column. Applies to IE10+ and Firefox. Chrome and Safari\n // do not appear to require this.\n max-width: percentage($size / $columns);\n}\n","// Breakpoint viewport sizes and media queries.\n//\n// Breakpoints are defined as a map of (name: minimum width), order from small to large:\n//\n// (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px)\n//\n// The map defined in the `$grid-breakpoints` global variable is used as the `$breakpoints` argument by default.\n\n// Name of the next breakpoint, or null for the last breakpoint.\n//\n// >> breakpoint-next(sm)\n// md\n// >> breakpoint-next(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// md\n// >> breakpoint-next(sm, $breakpoint-names: (xs sm md lg xl))\n// md\n@function breakpoint-next($name, $breakpoints: $grid-breakpoints, $breakpoint-names: map-keys($breakpoints)) {\n $n: index($breakpoint-names, $name);\n @return if($n < length($breakpoint-names), nth($breakpoint-names, $n + 1), null);\n}\n\n// Minimum breakpoint width. Null for the smallest (first) breakpoint.\n//\n// >> breakpoint-min(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 576px\n@function breakpoint-min($name, $breakpoints: $grid-breakpoints) {\n $min: map-get($breakpoints, $name);\n @return if($min != 0, $min, null);\n}\n\n// Maximum breakpoint width. Null for the largest (last) breakpoint.\n// The maximum value is calculated as the minimum of the next one less 0.1.\n//\n// >> breakpoint-max(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 767px\n@function breakpoint-max($name, $breakpoints: $grid-breakpoints) {\n $next: breakpoint-next($name, $breakpoints);\n @return if($next, breakpoint-min($next, $breakpoints) - 1px, null);\n}\n\n// Returns a blank string if smallest breakpoint, otherwise returns the name with a dash infront.\n// Useful for making responsive utilities.\n//\n// >> breakpoint-infix(xs, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"\" (Returns a blank string)\n// >> breakpoint-infix(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"-sm\"\n@function breakpoint-infix($name, $breakpoints: $grid-breakpoints) {\n @return if(breakpoint-min($name, $breakpoints) == null, \"\", \"-#{$name}\");\n}\n\n// Media of at least the minimum breakpoint width. No query for the smallest breakpoint.\n// Makes the @content apply to the given breakpoint and wider.\n@mixin media-breakpoint-up($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n @if $min {\n @media (min-width: $min) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media of at most the maximum breakpoint width. No query for the largest breakpoint.\n// Makes the @content apply to the given breakpoint and narrower.\n@mixin media-breakpoint-down($name, $breakpoints: $grid-breakpoints) {\n $max: breakpoint-max($name, $breakpoints);\n @if $max {\n @media (max-width: $max) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media that spans multiple breakpoint widths.\n// Makes the @content apply between the min and max breakpoints\n@mixin media-breakpoint-between($lower, $upper, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($lower, $breakpoints);\n $max: breakpoint-max($upper, $breakpoints);\n\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n}\n\n// Media between the breakpoint's minimum and maximum widths.\n// No minimum for the smallest breakpoint, and no maximum for the largest one.\n// Makes the @content apply only to the given breakpoint, not viewports any wider or narrower.\n@mixin media-breakpoint-only($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n $max: breakpoint-max($name, $breakpoints);\n\n @if $min != null and $max != null {\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else if $max == null {\n @include media-breakpoint-up($name)\n } @else if $min == null {\n @include media-breakpoint-down($name)\n }\n}\n","// Variables\n//\n// Copy settings from this file into the provided `_custom.scss` to override\n// the Bootstrap defaults without modifying key, versioned files.\n//\n// Variables should follow the `$component-state-property-size` formula for\n// consistent naming. Ex: $nav-link-disabled-color and $modal-content-box-shadow-xs.\n\n// Table of Contents\n//\n// Color system\n// Options\n// Spacing\n// Body\n// Links\n// Grid breakpoints\n// Grid containers\n// Grid columns\n// Fonts\n// Components\n// Tables\n// Buttons\n// Forms\n// Dropdowns\n// Z-index master list\n// Navs\n// Navbar\n// Pagination\n// Jumbotron\n// Form states and alerts\n// Cards\n// Tooltips\n// Popovers\n// Badges\n// Modals\n// Alerts\n// Progress bars\n// List group\n// Image thumbnails\n// Figures\n// Breadcrumbs\n// Carousel\n// Close\n// Code\n\n\n//\n// Color system\n//\n\n$white: #fff !default;\n$gray-100: #f8f9fa !default;\n$gray-200: #e9ecef !default;\n$gray-300: #dee2e6 !default;\n$gray-400: #ced4da !default;\n$gray-500: #adb5bd !default;\n$gray-600: #868e96 !default;\n$gray-700: #495057 !default;\n$gray-800: #343a40 !default;\n$gray-900: #212529 !default;\n$black: #000 !default;\n\n$grays: (\n 100: $gray-100,\n 200: $gray-200,\n 300: $gray-300,\n 400: $gray-400,\n 500: $gray-500,\n 600: $gray-600,\n 700: $gray-700,\n 800: $gray-800,\n 900: $gray-900\n) !default;\n\n$blue: #007bff !default;\n$indigo: #6610f2 !default;\n$purple: #6f42c1 !default;\n$pink: #e83e8c !default;\n$red: #dc3545 !default;\n$orange: #fd7e14 !default;\n$yellow: #ffc107 !default;\n$green: #28a745 !default;\n$teal: #20c997 !default;\n$cyan: #17a2b8 !default;\n\n$colors: (\n blue: $blue,\n indigo: $indigo,\n purple: $purple,\n pink: $pink,\n red: $red,\n orange: $orange,\n yellow: $yellow,\n green: $green,\n teal: $teal,\n cyan: $cyan,\n white: $white,\n gray: $gray-600,\n gray-dark: $gray-800\n) !default;\n\n$theme-colors: (\n primary: $blue,\n secondary: $gray-600,\n success: $green,\n info: $cyan,\n warning: $yellow,\n danger: $red,\n light: $gray-100,\n dark: $gray-800\n) !default;\n\n// Set a specific jump point for requesting color jumps\n$theme-color-interval: 8% !default;\n\n\n// Options\n//\n// Quickly modify global styling by enabling or disabling optional features.\n\n$enable-rounded: true !default;\n$enable-shadows: false !default;\n$enable-gradients: false !default;\n$enable-transitions: true !default;\n$enable-hover-media-query: false !default;\n$enable-grid-classes: true !default;\n$enable-print-styles: true !default;\n\n\n// Spacing\n//\n// Control the default styling of most Bootstrap elements by modifying these\n// variables. Mostly focused on spacing.\n// You can add more entries to the $spacers map, should you need more variation.\n\n$spacer: 1rem !default;\n$spacers: (\n 0: 0,\n 1: ($spacer * .25),\n 2: ($spacer * .5),\n 3: $spacer,\n 4: ($spacer * 1.5),\n 5: ($spacer * 3)\n) !default;\n\n// This variable affects the `.h-*` and `.w-*` classes.\n$sizes: (\n 25: 25%,\n 50: 50%,\n 75: 75%,\n 100: 100%\n) !default;\n\n// Body\n//\n// Settings for the `` element.\n\n$body-bg: $white !default;\n$body-color: $gray-900 !default;\n\n// Links\n//\n// Style anchor elements.\n\n$link-color: theme-color(\"primary\") !default;\n$link-decoration: none !default;\n$link-hover-color: darken($link-color, 15%) !default;\n$link-hover-decoration: underline !default;\n\n\n// Grid breakpoints\n//\n// Define the minimum dimensions at which your layout will change,\n// adapting to different screen sizes, for use in media queries.\n\n$grid-breakpoints: (\n xs: 0,\n sm: 576px,\n md: 768px,\n lg: 992px,\n xl: 1200px\n) !default;\n@include _assert-ascending($grid-breakpoints, \"$grid-breakpoints\");\n@include _assert-starts-at-zero($grid-breakpoints);\n\n\n// Grid containers\n//\n// Define the maximum width of `.container` for different screen sizes.\n\n$container-max-widths: (\n sm: 540px,\n md: 720px,\n lg: 960px,\n xl: 1140px\n) !default;\n@include _assert-ascending($container-max-widths, \"$container-max-widths\");\n\n\n// Grid columns\n//\n// Set the number of columns and specify the width of the gutters.\n\n$grid-columns: 12 !default;\n$grid-gutter-width: 30px !default;\n\n// Components\n//\n// Define common padding and border radius sizes and more.\n\n$line-height-lg: 1.5 !default;\n$line-height-sm: 1.5 !default;\n\n$border-width: 1px !default;\n\n$border-radius: .25rem !default;\n$border-radius-lg: .3rem !default;\n$border-radius-sm: .2rem !default;\n\n$component-active-color: $white !default;\n$component-active-bg: theme-color(\"primary\") !default;\n\n$caret-width: .3em !default;\n\n$transition-base: all .2s ease-in-out !default;\n$transition-fade: opacity .15s linear !default;\n$transition-collapse: height .35s ease !default;\n\n\n// Fonts\n//\n// Font, line-height, and color for body text, headings, and more.\n\n$font-family-sans-serif: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif !default;\n$font-family-monospace: Menlo, Monaco, Consolas, \"Liberation Mono\", \"Courier New\", monospace !default;\n$font-family-base: $font-family-sans-serif !default;\n\n$font-size-base: 1rem !default; // Assumes the browser default, typically `16px`\n$font-size-lg: 1.25rem !default;\n$font-size-sm: .875rem !default;\n\n$font-weight-normal: normal !default;\n$font-weight-bold: bold !default;\n\n$font-weight-base: $font-weight-normal !default;\n$line-height-base: 1.5 !default;\n\n$h1-font-size: 2.5rem !default;\n$h2-font-size: 2rem !default;\n$h3-font-size: 1.75rem !default;\n$h4-font-size: 1.5rem !default;\n$h5-font-size: 1.25rem !default;\n$h6-font-size: 1rem !default;\n\n$headings-margin-bottom: ($spacer / 2) !default;\n$headings-font-family: inherit !default;\n$headings-font-weight: 500 !default;\n$headings-line-height: 1.1 !default;\n$headings-color: inherit !default;\n\n$display1-size: 6rem !default;\n$display2-size: 5.5rem !default;\n$display3-size: 4.5rem !default;\n$display4-size: 3.5rem !default;\n\n$display1-weight: 300 !default;\n$display2-weight: 300 !default;\n$display3-weight: 300 !default;\n$display4-weight: 300 !default;\n$display-line-height: $headings-line-height !default;\n\n$lead-font-size: 1.25rem !default;\n$lead-font-weight: 300 !default;\n\n$small-font-size: 80% !default;\n\n$text-muted: $gray-600 !default;\n\n$blockquote-small-color: $gray-600 !default;\n$blockquote-font-size: ($font-size-base * 1.25) !default;\n\n$hr-border-color: rgba($black,.1) !default;\n$hr-border-width: $border-width !default;\n\n$mark-padding: .2em !default;\n\n$dt-font-weight: $font-weight-bold !default;\n\n$kbd-box-shadow: inset 0 -.1rem 0 rgba($black,.25) !default;\n$nested-kbd-font-weight: $font-weight-bold !default;\n\n$list-inline-padding: 5px !default;\n\n$mark-bg: #fcf8e3 !default;\n\n\n// Tables\n//\n// Customizes the `.table` component with basic values, each used across all table variations.\n\n$table-cell-padding: .75rem !default;\n$table-cell-padding-sm: .3rem !default;\n\n$table-bg: transparent !default;\n$table-accent-bg: rgba($black,.05) !default;\n$table-hover-bg: rgba($black,.075) !default;\n$table-active-bg: $table-hover-bg !default;\n\n$table-border-width: $border-width !default;\n$table-border-color: $gray-200 !default;\n\n$table-head-bg: $gray-200 !default;\n$table-head-color: $gray-700 !default;\n\n$table-inverse-bg: $gray-900 !default;\n$table-inverse-accent-bg: rgba($white, .05) !default;\n$table-inverse-hover-bg: rgba($white, .075) !default;\n$table-inverse-border-color: lighten($gray-900, 7.5%) !default;\n$table-inverse-color: $body-bg !default;\n\n\n// Buttons\n//\n// For each of Bootstrap's buttons, define text, background and border color.\n\n$input-btn-padding-y: .5rem !default;\n$input-btn-padding-x: .75rem !default;\n$input-btn-line-height: 1.25 !default;\n\n$input-btn-padding-y-sm: .25rem !default;\n$input-btn-padding-x-sm: .5rem !default;\n$input-btn-line-height-sm: 1.5 !default;\n\n$input-btn-padding-y-lg: .5rem !default;\n$input-btn-padding-x-lg: 1rem !default;\n$input-btn-line-height-lg: 1.5 !default;\n\n$btn-font-weight: $font-weight-normal !default;\n$btn-box-shadow: inset 0 1px 0 rgba($white,.15), 0 1px 1px rgba($black,.075) !default;\n$btn-focus-box-shadow: 0 0 0 3px rgba(theme-color(\"primary\"), .25) !default;\n$btn-active-box-shadow: inset 0 3px 5px rgba($black,.125) !default;\n\n$btn-link-disabled-color: $gray-600 !default;\n\n$btn-block-spacing-y: .5rem !default;\n\n// Allows for customizing button radius independently from global border radius\n$btn-border-radius: $border-radius !default;\n$btn-border-radius-lg: $border-radius-lg !default;\n$btn-border-radius-sm: $border-radius-sm !default;\n\n$btn-transition: all .15s ease-in-out !default;\n\n\n// Forms\n\n$input-bg: $white !default;\n$input-disabled-bg: $gray-200 !default;\n\n$input-color: $gray-700 !default;\n$input-border-color: rgba($black,.15) !default;\n$input-btn-border-width: $border-width !default; // For form controls and buttons\n$input-box-shadow: inset 0 1px 1px rgba($black,.075) !default;\n\n$input-border-radius: $border-radius !default;\n$input-border-radius-lg: $border-radius-lg !default;\n$input-border-radius-sm: $border-radius-sm !default;\n\n$input-focus-bg: $input-bg !default;\n$input-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$input-focus-box-shadow: $input-box-shadow, $btn-focus-box-shadow !default;\n$input-focus-color: $input-color !default;\n\n$input-placeholder-color: $gray-600 !default;\n\n$input-height-border: $input-btn-border-width * 2 !default;\n\n$input-height-inner: ($font-size-base * $input-btn-line-height) + ($input-btn-padding-y * 2) !default;\n$input-height: calc(#{$input-height-inner} + #{$input-height-border}) !default;\n\n$input-height-inner-sm: ($font-size-sm * $input-btn-line-height-sm) + ($input-btn-padding-y-sm * 2) !default;\n$input-height-sm: calc(#{$input-height-inner-sm} + #{$input-height-border}) !default;\n\n$input-height-inner-lg: ($font-size-sm * $input-btn-line-height-lg) + ($input-btn-padding-y-lg * 2) !default;\n$input-height-lg: calc(#{$input-height-inner-lg} + #{$input-height-border}) !default;\n\n$input-transition: border-color ease-in-out .15s, box-shadow ease-in-out .15s !default;\n\n$form-text-margin-top: .25rem !default;\n\n$form-check-margin-bottom: .5rem !default;\n$form-check-input-gutter: 1.25rem !default;\n$form-check-input-margin-y: .25rem !default;\n$form-check-input-margin-x: .25rem !default;\n\n$form-check-inline-margin-x: .75rem !default;\n\n$form-group-margin-bottom: 1rem !default;\n\n$input-group-addon-bg: $gray-200 !default;\n$input-group-addon-border-color: $input-border-color !default;\n\n$custom-control-gutter: 1.5rem !default;\n$custom-control-spacer-y: .25rem !default;\n$custom-control-spacer-x: 1rem !default;\n\n$custom-control-indicator-size: 1rem !default;\n$custom-control-indicator-bg: #ddd !default;\n$custom-control-indicator-bg-size: 50% 50% !default;\n$custom-control-indicator-box-shadow: inset 0 .25rem .25rem rgba($black,.1) !default;\n\n$custom-control-indicator-disabled-bg: $gray-200 !default;\n$custom-control-description-disabled-color: $gray-600 !default;\n\n$custom-control-indicator-checked-color: $white !default;\n$custom-control-indicator-checked-bg: theme-color(\"primary\") !default;\n$custom-control-indicator-checked-box-shadow: none !default;\n\n$custom-control-indicator-focus-box-shadow: 0 0 0 1px $body-bg, 0 0 0 3px theme-color(\"primary\") !default;\n\n$custom-control-indicator-active-color: $white !default;\n$custom-control-indicator-active-bg: lighten(theme-color(\"primary\"), 35%) !default;\n$custom-control-indicator-active-box-shadow: none !default;\n\n$custom-checkbox-indicator-border-radius: $border-radius !default;\n$custom-checkbox-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='#{$custom-control-indicator-checked-color}' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-checkbox-indicator-indeterminate-bg: theme-color(\"primary\") !default;\n$custom-checkbox-indicator-indeterminate-color: $custom-control-indicator-checked-color !default;\n$custom-checkbox-indicator-icon-indeterminate: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='#{$custom-checkbox-indicator-indeterminate-color}' d='M0 2h4'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-checkbox-indicator-indeterminate-box-shadow: none !default;\n\n$custom-radio-indicator-border-radius: 50% !default;\n$custom-radio-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='#{$custom-control-indicator-checked-color}'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-select-padding-y: .375rem !default;\n$custom-select-padding-x: .75rem !default;\n$custom-select-height: $input-height !default;\n$custom-select-indicator-padding: 1rem !default; // Extra padding to account for the presence of the background-image based indicator\n$custom-select-line-height: $input-btn-line-height !default;\n$custom-select-color: $input-color !default;\n$custom-select-disabled-color: $gray-600 !default;\n$custom-select-bg: $white !default;\n$custom-select-disabled-bg: $gray-200 !default;\n$custom-select-bg-size: 8px 10px !default; // In pixels because image dimensions\n$custom-select-indicator-color: #333 !default;\n$custom-select-indicator: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='#{$custom-select-indicator-color}' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-select-border-width: $input-btn-border-width !default;\n$custom-select-border-color: $input-border-color !default;\n$custom-select-border-radius: $border-radius !default;\n\n$custom-select-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$custom-select-focus-box-shadow: inset 0 1px 2px rgba($black, .075), 0 0 5px rgba($custom-select-focus-border-color, .5) !default;\n\n$custom-select-font-size-sm: 75% !default;\n$custom-select-height-sm: $input-height-sm !default;\n\n$custom-file-height: 2.5rem !default;\n$custom-file-width: 14rem !default;\n$custom-file-focus-box-shadow: 0 0 0 .075rem $white, 0 0 0 .2rem theme-color(\"primary\") !default;\n\n$custom-file-padding-y: 1rem !default;\n$custom-file-padding-x: .5rem !default;\n$custom-file-line-height: 1.5 !default;\n$custom-file-color: $gray-700 !default;\n$custom-file-bg: $white !default;\n$custom-file-border-width: $border-width !default;\n$custom-file-border-color: $input-border-color !default;\n$custom-file-border-radius: $border-radius !default;\n$custom-file-box-shadow: inset 0 .2rem .4rem rgba($black,.05) !default;\n$custom-file-button-color: $custom-file-color !default;\n$custom-file-button-bg: $gray-200 !default;\n$custom-file-text: (\n placeholder: (\n en: \"Choose file...\"\n ),\n button-label: (\n en: \"Browse\"\n )\n) !default;\n\n\n// Form validation\n$form-feedback-valid-color: theme-color(\"success\") !default;\n$form-feedback-invalid-color: theme-color(\"danger\") !default;\n\n\n// Dropdowns\n//\n// Dropdown menu container and contents.\n\n$dropdown-min-width: 10rem !default;\n$dropdown-padding-y: .5rem !default;\n$dropdown-spacer: .125rem !default;\n$dropdown-bg: $white !default;\n$dropdown-border-color: rgba($black,.15) !default;\n$dropdown-border-width: $border-width !default;\n$dropdown-divider-bg: $gray-200 !default;\n$dropdown-box-shadow: 0 .5rem 1rem rgba($black,.175) !default;\n\n$dropdown-link-color: $gray-900 !default;\n$dropdown-link-hover-color: darken($gray-900, 5%) !default;\n$dropdown-link-hover-bg: $gray-100 !default;\n\n$dropdown-link-active-color: $component-active-color !default;\n$dropdown-link-active-bg: $component-active-bg !default;\n\n$dropdown-link-disabled-color: $gray-600 !default;\n\n$dropdown-item-padding-y: .25rem !default;\n$dropdown-item-padding-x: 1.5rem !default;\n\n$dropdown-header-color: $gray-600 !default;\n\n\n// Z-index master list\n//\n// Warning: Avoid customizing these values. They're used for a bird's eye view\n// of components dependent on the z-axis and are designed to all work together.\n\n$zindex-dropdown: 1000 !default;\n$zindex-sticky: 1020 !default;\n$zindex-fixed: 1030 !default;\n$zindex-modal-backdrop: 1040 !default;\n$zindex-modal: 1050 !default;\n$zindex-popover: 1060 !default;\n$zindex-tooltip: 1070 !default;\n\n// Navs\n\n$nav-link-padding-y: .5rem !default;\n$nav-link-padding-x: 1rem !default;\n$nav-link-disabled-color: $gray-600 !default;\n\n$nav-tabs-border-color: #ddd !default;\n$nav-tabs-border-width: $border-width !default;\n$nav-tabs-border-radius: $border-radius !default;\n$nav-tabs-link-hover-border-color: $gray-200 !default;\n$nav-tabs-link-active-color: $gray-700 !default;\n$nav-tabs-link-active-bg: $body-bg !default;\n$nav-tabs-link-active-border-color: #ddd !default;\n\n$nav-pills-border-radius: $border-radius !default;\n$nav-pills-link-active-color: $component-active-color !default;\n$nav-pills-link-active-bg: $component-active-bg !default;\n\n// Navbar\n\n$navbar-padding-y: ($spacer / 2) !default;\n$navbar-padding-x: $spacer !default;\n\n$navbar-brand-font-size: $font-size-lg !default;\n// Compute the navbar-brand padding-y so the navbar-brand will have the same height as navbar-text and nav-link\n$nav-link-height: $navbar-brand-font-size * $line-height-base !default;\n$navbar-brand-height: ($font-size-base * $line-height-base + $nav-link-padding-y * 2) !default;\n$navbar-brand-padding-y: ($navbar-brand-height - $nav-link-height) / 2 !default;\n\n$navbar-toggler-padding-y: .25rem !default;\n$navbar-toggler-padding-x: .75rem !default;\n$navbar-toggler-font-size: $font-size-lg !default;\n$navbar-toggler-border-radius: $btn-border-radius !default;\n\n$navbar-dark-color: rgba($white,.5) !default;\n$navbar-dark-hover-color: rgba($white,.75) !default;\n$navbar-dark-active-color: rgba($white,1) !default;\n$navbar-dark-disabled-color: rgba($white,.25) !default;\n$navbar-dark-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-dark-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-dark-toggler-border-color: rgba($white,.1) !default;\n\n$navbar-light-color: rgba($black,.5) !default;\n$navbar-light-hover-color: rgba($black,.7) !default;\n$navbar-light-active-color: rgba($black,.9) !default;\n$navbar-light-disabled-color: rgba($black,.3) !default;\n$navbar-light-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-light-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-light-toggler-border-color: rgba($black,.1) !default;\n\n// Pagination\n\n$pagination-padding-y: .5rem !default;\n$pagination-padding-x: .75rem !default;\n$pagination-padding-y-sm: .25rem !default;\n$pagination-padding-x-sm: .5rem !default;\n$pagination-padding-y-lg: .75rem !default;\n$pagination-padding-x-lg: 1.5rem !default;\n$pagination-line-height: 1.25 !default;\n\n$pagination-color: $link-color !default;\n$pagination-bg: $white !default;\n$pagination-border-width: $border-width !default;\n$pagination-border-color: #ddd !default;\n\n$pagination-hover-color: $link-hover-color !default;\n$pagination-hover-bg: $gray-200 !default;\n$pagination-hover-border-color: #ddd !default;\n\n$pagination-active-color: $white !default;\n$pagination-active-bg: theme-color(\"primary\") !default;\n$pagination-active-border-color: theme-color(\"primary\") !default;\n\n$pagination-disabled-color: $gray-600 !default;\n$pagination-disabled-bg: $white !default;\n$pagination-disabled-border-color: #ddd !default;\n\n\n// Jumbotron\n\n$jumbotron-padding: 2rem !default;\n$jumbotron-bg: $gray-200 !default;\n\n\n// Cards\n\n$card-spacer-y: .75rem !default;\n$card-spacer-x: 1.25rem !default;\n$card-border-width: 1px !default;\n$card-border-radius: $border-radius !default;\n$card-border-color: rgba($black,.125) !default;\n$card-inner-border-radius: calc(#{$card-border-radius} - #{$card-border-width}) !default;\n$card-cap-bg: rgba($black, .03) !default;\n$card-bg: $white !default;\n\n$card-img-overlay-padding: 1.25rem !default;\n\n$card-deck-margin: ($grid-gutter-width / 2) !default;\n\n$card-columns-count: 3 !default;\n$card-columns-gap: 1.25rem !default;\n$card-columns-margin: $card-spacer-y !default;\n\n\n// Tooltips\n\n$tooltip-max-width: 200px !default;\n$tooltip-color: $white !default;\n$tooltip-bg: $black !default;\n$tooltip-opacity: .9 !default;\n$tooltip-padding-y: 3px !default;\n$tooltip-padding-x: 8px !default;\n$tooltip-margin: 0 !default;\n\n\n$tooltip-arrow-width: 5px !default;\n$tooltip-arrow-height: 5px !default;\n$tooltip-arrow-color: $tooltip-bg !default;\n\n\n// Popovers\n\n$popover-inner-padding: 1px !default;\n$popover-bg: $white !default;\n$popover-max-width: 276px !default;\n$popover-border-width: $border-width !default;\n$popover-border-color: rgba($black,.2) !default;\n$popover-box-shadow: 0 5px 10px rgba($black,.2) !default;\n\n$popover-header-bg: darken($popover-bg, 3%) !default;\n$popover-header-color: $headings-color !default;\n$popover-header-padding-y: 8px !default;\n$popover-header-padding-x: 14px !default;\n\n$popover-body-color: $body-color !default;\n$popover-body-padding-y: 9px !default;\n$popover-body-padding-x: 14px !default;\n\n$popover-arrow-width: 10px !default;\n$popover-arrow-height: 5px !default;\n$popover-arrow-color: $popover-bg !default;\n\n$popover-arrow-outer-width: ($popover-arrow-width + 1px) !default;\n$popover-arrow-outer-color: fade-in($popover-border-color, .05) !default;\n\n\n// Badges\n\n$badge-color: $white !default;\n$badge-font-size: 75% !default;\n$badge-font-weight: $font-weight-bold !default;\n$badge-padding-y: .25em !default;\n$badge-padding-x: .4em !default;\n\n$badge-pill-padding-x: .6em !default;\n// Use a higher than normal value to ensure completely rounded edges when\n// customizing padding or font-size on labels.\n$badge-pill-border-radius: 10rem !default;\n\n\n// Modals\n\n// Padding applied to the modal body\n$modal-inner-padding: 15px !default;\n\n$modal-dialog-margin: 10px !default;\n$modal-dialog-margin-y-sm-up: 30px !default;\n\n$modal-title-line-height: $line-height-base !default;\n\n$modal-content-bg: $white !default;\n$modal-content-border-color: rgba($black,.2) !default;\n$modal-content-border-width: $border-width !default;\n$modal-content-box-shadow-xs: 0 3px 9px rgba($black,.5) !default;\n$modal-content-box-shadow-sm-up: 0 5px 15px rgba($black,.5) !default;\n\n$modal-backdrop-bg: $black !default;\n$modal-backdrop-opacity: .5 !default;\n$modal-header-border-color: $gray-200 !default;\n$modal-footer-border-color: $modal-header-border-color !default;\n$modal-header-border-width: $modal-content-border-width !default;\n$modal-footer-border-width: $modal-header-border-width !default;\n$modal-header-padding: 15px !default;\n\n$modal-lg: 800px !default;\n$modal-md: 500px !default;\n$modal-sm: 300px !default;\n\n$modal-transition: transform .3s ease-out !default;\n\n\n// Alerts\n//\n// Define alert colors, border radius, and padding.\n\n$alert-padding-y: .75rem !default;\n$alert-padding-x: 1.25rem !default;\n$alert-margin-bottom: 1rem !default;\n$alert-border-radius: $border-radius !default;\n$alert-link-font-weight: $font-weight-bold !default;\n$alert-border-width: $border-width !default;\n\n\n// Progress bars\n\n$progress-height: 1rem !default;\n$progress-font-size: .75rem !default;\n$progress-bg: $gray-200 !default;\n$progress-border-radius: $border-radius !default;\n$progress-box-shadow: inset 0 .1rem .1rem rgba($black,.1) !default;\n$progress-bar-color: $white !default;\n$progress-bar-bg: theme-color(\"primary\") !default;\n$progress-bar-animation-timing: 1s linear infinite !default;\n$progress-bar-transition: width .6s ease !default;\n\n// List group\n\n$list-group-bg: $white !default;\n$list-group-border-color: rgba($black,.125) !default;\n$list-group-border-width: $border-width !default;\n$list-group-border-radius: $border-radius !default;\n\n$list-group-item-padding-y: .75rem !default;\n$list-group-item-padding-x: 1.25rem !default;\n\n$list-group-hover-bg: $gray-100 !default;\n$list-group-active-color: $component-active-color !default;\n$list-group-active-bg: $component-active-bg !default;\n$list-group-active-border-color: $list-group-active-bg !default;\n\n$list-group-disabled-color: $gray-600 !default;\n$list-group-disabled-bg: $list-group-bg !default;\n\n$list-group-action-color: $gray-700 !default;\n$list-group-action-hover-color: $list-group-action-color !default;\n\n$list-group-action-active-color: $body-color !default;\n$list-group-action-active-bg: $gray-200 !default;\n\n\n// Image thumbnails\n\n$thumbnail-padding: .25rem !default;\n$thumbnail-bg: $body-bg !default;\n$thumbnail-border-width: $border-width !default;\n$thumbnail-border-color: #ddd !default;\n$thumbnail-border-radius: $border-radius !default;\n$thumbnail-box-shadow: 0 1px 2px rgba($black,.075) !default;\n$thumbnail-transition: all .2s ease-in-out !default;\n\n\n// Figures\n\n$figure-caption-font-size: 90% !default;\n$figure-caption-color: $gray-600 !default;\n\n\n// Breadcrumbs\n\n$breadcrumb-padding-y: .75rem !default;\n$breadcrumb-padding-x: 1rem !default;\n$breadcrumb-item-padding: .5rem !default;\n\n$breadcrumb-bg: $gray-200 !default;\n$breadcrumb-divider-color: $gray-600 !default;\n$breadcrumb-active-color: $gray-600 !default;\n$breadcrumb-divider: \"/\" !default;\n\n\n// Carousel\n\n$carousel-control-color: $white !default;\n$carousel-control-width: 15% !default;\n$carousel-control-opacity: .5 !default;\n\n$carousel-indicator-width: 30px !default;\n$carousel-indicator-height: 3px !default;\n$carousel-indicator-spacer: 3px !default;\n$carousel-indicator-active-bg: $white !default;\n\n$carousel-caption-width: 70% !default;\n$carousel-caption-color: $white !default;\n\n$carousel-control-icon-width: 20px !default;\n\n$carousel-control-prev-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M4 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$carousel-control-next-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M1.5 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$carousel-transition: transform .6s ease !default;\n\n\n// Close\n\n$close-font-size: $font-size-base * 1.5 !default;\n$close-font-weight: $font-weight-bold !default;\n$close-color: $black !default;\n$close-text-shadow: 0 1px 0 $white !default;\n\n// Code\n\n$code-font-size: 90% !default;\n$code-padding-y: .2rem !default;\n$code-padding-x: .4rem !default;\n$code-color: #bd4147 !default;\n$code-bg: $gray-100 !default;\n\n$kbd-color: $white !default;\n$kbd-bg: $gray-900 !default;\n\n$pre-color: $gray-900 !default;\n$pre-scrollable-max-height: 340px !default;\n","// Framework grid generation\n//\n// Used only by Bootstrap to generate the correct number of grid classes given\n// any value of `$grid-columns`.\n\n@mixin make-grid-columns($columns: $grid-columns, $gutter: $grid-gutter-width, $breakpoints: $grid-breakpoints) {\n // Common properties for all breakpoints\n %grid-column {\n position: relative;\n width: 100%;\n min-height: 1px; // Prevent columns from collapsing when empty\n padding-right: ($gutter / 2);\n padding-left: ($gutter / 2);\n }\n\n @each $breakpoint in map-keys($breakpoints) {\n $infix: breakpoint-infix($breakpoint, $breakpoints);\n\n // Allow columns to stretch full width below their breakpoints\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @extend %grid-column;\n }\n }\n .col#{$infix},\n .col#{$infix}-auto {\n @extend %grid-column;\n }\n\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n // Provide basic `.col-{bp}` classes for equal-width flexbox columns\n .col#{$infix} {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col#{$infix}-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none; // Reset earlier grid tiers\n }\n\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @include make-col($i, $columns);\n }\n }\n\n @for $i from 1 through $columns {\n .order#{$infix}-#{$i} {\n order: $i;\n }\n }\n }\n }\n}\n","// Flex variation\n//\n// Custom styles for additional flex alignment options.\n\n@each $breakpoint in map-keys($grid-breakpoints) {\n @include media-breakpoint-up($breakpoint) {\n $infix: breakpoint-infix($breakpoint, $grid-breakpoints);\n\n .flex#{$infix}-row { flex-direction: row !important; }\n .flex#{$infix}-column { flex-direction: column !important; }\n .flex#{$infix}-row-reverse { flex-direction: row-reverse !important; }\n .flex#{$infix}-column-reverse { flex-direction: column-reverse !important; }\n\n .flex#{$infix}-wrap { flex-wrap: wrap !important; }\n .flex#{$infix}-nowrap { flex-wrap: nowrap !important; }\n .flex#{$infix}-wrap-reverse { flex-wrap: wrap-reverse !important; }\n\n .justify-content#{$infix}-start { justify-content: flex-start !important; }\n .justify-content#{$infix}-end { justify-content: flex-end !important; }\n .justify-content#{$infix}-center { justify-content: center !important; }\n .justify-content#{$infix}-between { justify-content: space-between !important; }\n .justify-content#{$infix}-around { justify-content: space-around !important; }\n\n .align-items#{$infix}-start { align-items: flex-start !important; }\n .align-items#{$infix}-end { align-items: flex-end !important; }\n .align-items#{$infix}-center { align-items: center !important; }\n .align-items#{$infix}-baseline { align-items: baseline !important; }\n .align-items#{$infix}-stretch { align-items: stretch !important; }\n\n .align-content#{$infix}-start { align-content: flex-start !important; }\n .align-content#{$infix}-end { align-content: flex-end !important; }\n .align-content#{$infix}-center { align-content: center !important; }\n .align-content#{$infix}-between { align-content: space-between !important; }\n .align-content#{$infix}-around { align-content: space-around !important; }\n .align-content#{$infix}-stretch { align-content: stretch !important; }\n\n .align-self#{$infix}-auto { align-self: auto !important; }\n .align-self#{$infix}-start { align-self: flex-start !important; }\n .align-self#{$infix}-end { align-self: flex-end !important; }\n .align-self#{$infix}-center { align-self: center !important; }\n .align-self#{$infix}-baseline { align-self: baseline !important; }\n .align-self#{$infix}-stretch { align-self: stretch !important; }\n }\n}\n"]} \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css new file mode 100644 index 0000000..b775555 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css @@ -0,0 +1,2 @@ +@-ms-viewport{width:device-width}html{box-sizing:border-box;-ms-overflow-style:scrollbar}*,::after,::before{box-sizing:inherit}.container{margin-right:auto;margin-left:auto;padding-right:15px;padding-left:15px;width:100%}@media (min-width:576px){.container{max-width:540px}}@media (min-width:768px){.container{max-width:720px}}@media (min-width:992px){.container{max-width:960px}}@media (min-width:1200px){.container{max-width:1140px}}.container-fluid{width:100%;margin-right:auto;margin-left:auto;padding-right:15px;padding-left:15px;width:100%}.row{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;margin-right:-15px;margin-left:-15px}.no-gutters{margin-right:0;margin-left:0}.no-gutters>.col,.no-gutters>[class*=col-]{padding-right:0;padding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12,.col-xl-2,.col-xl-3,.col-xl-4,.col-xl-5,.col-xl-6,.col-xl-7,.col-xl-8,.col-xl-9,.col-xl-auto{position:relative;width:100%;min-height:1px;padding-right:15px;padding-left:15px}.col{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:none}.col-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;order:3}.order-4{-ms-flex-order:4;order:4}.order-5{-ms-flex-order:5;order:5}.order-6{-ms-flex-order:6;order:6}.order-7{-ms-flex-order:7;order:7}.order-8{-ms-flex-order:8;order:8}.order-9{-ms-flex-order:9;order:9}.order-10{-ms-flex-order:10;order:10}.order-11{-ms-flex-order:11;order:11}.order-12{-ms-flex-order:12;order:12}@media (min-width:576px){.col-sm{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-sm-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:none}.col-sm-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-sm-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-sm-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-sm-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6{-ms-flex-order:6;order:6}.order-sm-7{-ms-flex-order:7;order:7}.order-sm-8{-ms-flex-order:8;order:8}.order-sm-9{-ms-flex-order:9;order:9}.order-sm-10{-ms-flex-order:10;order:10}.order-sm-11{-ms-flex-order:11;order:11}.order-sm-12{-ms-flex-order:12;order:12}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-md-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:none}.col-md-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-md-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-md-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-md-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-md-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-md-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-md-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-md-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-md-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-md-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-md-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-md-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-md-1{-ms-flex-order:1;order:1}.order-md-2{-ms-flex-order:2;order:2}.order-md-3{-ms-flex-order:3;order:3}.order-md-4{-ms-flex-order:4;order:4}.order-md-5{-ms-flex-order:5;order:5}.order-md-6{-ms-flex-order:6;order:6}.order-md-7{-ms-flex-order:7;order:7}.order-md-8{-ms-flex-order:8;order:8}.order-md-9{-ms-flex-order:9;order:9}.order-md-10{-ms-flex-order:10;order:10}.order-md-11{-ms-flex-order:11;order:11}.order-md-12{-ms-flex-order:12;order:12}}@media (min-width:992px){.col-lg{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-lg-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:none}.col-lg-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-lg-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-lg-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-lg-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-lg-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-lg-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-lg-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-lg-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-lg-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-lg-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-lg-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-lg-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-lg-1{-ms-flex-order:1;order:1}.order-lg-2{-ms-flex-order:2;order:2}.order-lg-3{-ms-flex-order:3;order:3}.order-lg-4{-ms-flex-order:4;order:4}.order-lg-5{-ms-flex-order:5;order:5}.order-lg-6{-ms-flex-order:6;order:6}.order-lg-7{-ms-flex-order:7;order:7}.order-lg-8{-ms-flex-order:8;order:8}.order-lg-9{-ms-flex-order:9;order:9}.order-lg-10{-ms-flex-order:10;order:10}.order-lg-11{-ms-flex-order:11;order:11}.order-lg-12{-ms-flex-order:12;order:12}}@media (min-width:1200px){.col-xl{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-xl-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:none}.col-xl-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-xl-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-xl-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-xl-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-xl-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-xl-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-xl-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-xl-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-xl-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-xl-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-1{-ms-flex-order:1;order:1}.order-xl-2{-ms-flex-order:2;order:2}.order-xl-3{-ms-flex-order:3;order:3}.order-xl-4{-ms-flex-order:4;order:4}.order-xl-5{-ms-flex-order:5;order:5}.order-xl-6{-ms-flex-order:6;order:6}.order-xl-7{-ms-flex-order:7;order:7}.order-xl-8{-ms-flex-order:8;order:8}.order-xl-9{-ms-flex-order:9;order:9}.order-xl-10{-ms-flex-order:10;order:10}.order-xl-11{-ms-flex-order:11;order:11}.order-xl-12{-ms-flex-order:12;order:12}}.flex-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.justify-content-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-center{-ms-flex-align:center!important;align-items:center!important}.align-items-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}@media (min-width:576px){.flex-sm-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-sm-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-sm-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-sm-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-sm-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-sm-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-sm-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.justify-content-sm-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-sm-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-sm-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-sm-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-sm-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-sm-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-sm-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-sm-center{-ms-flex-align:center!important;align-items:center!important}.align-items-sm-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-sm-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-sm-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-sm-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-sm-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-sm-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-sm-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-sm-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-sm-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-sm-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-sm-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-sm-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-sm-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-sm-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:768px){.flex-md-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-md-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-md-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-md-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-md-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-md-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-md-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.justify-content-md-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-md-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-md-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-md-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-md-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-md-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-md-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-md-center{-ms-flex-align:center!important;align-items:center!important}.align-items-md-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-md-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-md-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-md-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-md-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-md-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-md-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-md-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-md-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-md-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-md-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-md-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-md-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-md-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:992px){.flex-lg-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-lg-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-lg-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-lg-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-lg-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-lg-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-lg-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.justify-content-lg-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-lg-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-lg-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-lg-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-lg-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-lg-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-lg-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-lg-center{-ms-flex-align:center!important;align-items:center!important}.align-items-lg-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-lg-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-lg-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-lg-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-lg-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-lg-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-lg-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-lg-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-lg-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-lg-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-lg-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-lg-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-lg-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-lg-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:1200px){.flex-xl-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-xl-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-xl-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-xl-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-xl-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-xl-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-xl-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.justify-content-xl-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-xl-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-xl-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-xl-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-xl-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-xl-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-xl-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-xl-center{-ms-flex-align:center!important;align-items:center!important}.align-items-xl-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-xl-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-xl-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-xl-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-xl-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-xl-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-xl-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-xl-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-xl-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-xl-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-xl-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-xl-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-xl-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-xl-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}} +/*# sourceMappingURL=bootstrap-grid.min.css.map */ \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css.map b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css.map new file mode 100644 index 0000000..5e16e09 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-grid.min.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["../../scss/bootstrap-grid.scss","dist/css/bootstrap-grid.css","../../scss/_grid.scss","../../scss/mixins/_grid.scss","../../scss/mixins/_breakpoints.scss","../../scss/mixins/_grid-framework.scss","../../scss/utilities/_flex.scss"],"names":[],"mappings":"AAUE,cAAgB,MAAA,aAGlB,KACE,WAAA,WACA,mBAAA,UAGF,ECPA,QADA,SDWE,WAAA,QEhBA,WCAA,aAAA,KACA,YAAA,KACA,cAAA,KACA,aAAA,KACA,MAAA,KC+CE,yBFnDF,WCYI,UAAA,OCuCF,yBFnDF,WCYI,UAAA,OCuCF,yBFnDF,WCYI,UAAA,OCuCF,0BFnDF,WCYI,UAAA,QDAJ,iBACE,MAAA,KCbF,aAAA,KACA,YAAA,KACA,cAAA,KACA,aAAA,KACA,MAAA,KDmBA,KCLA,QAAA,YAAA,QAAA,KACA,cAAA,KAAA,UAAA,KACA,aAAA,MACA,YAAA,MDQA,YACE,aAAA,EACA,YAAA,EAFF,iBDqCF,0BC/BM,cAAA,EACA,aAAA,EGlCJ,KAAA,OAAA,QAAA,QAAA,QAAA,OAAA,OAAA,OAAA,OAAA,OAAA,OAAA,OAAA,OJsEF,UAEqJ,QAAvI,UAAmG,WAAY,WAAY,WAAhH,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UACtG,aAFqJ,QAAvI,UAAmG,WAAY,WAAY,WAAhH,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UACtG,aAFkJ,QAAvI,UAAmG,WAAY,WAAY,WAAhH,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UACnG,aAEqJ,QAAvI,UAAmG,WAAY,WAAY,WAAhH,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UAAW,UACtG,aIzEI,SAAA,SACA,MAAA,KACA,WAAA,IACA,cAAA,KACA,aAAA,KAmBE,KACE,wBAAA,EAAA,WAAA,EACA,kBAAA,EAAA,UAAA,EACA,UAAA,KAEF,UACE,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KACA,MAAA,KACA,UAAA,KAIA,OFFN,SAAA,EAAA,EAAA,UAAA,KAAA,EAAA,EAAA,UAIA,UAAA,UEFM,OFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,OFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,OFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,OFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,OFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,OFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,OFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,OFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,QFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,QFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,QFFN,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KAIA,UAAA,KEIM,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,SACE,eAAA,EAAA,MAAA,EADF,UACE,eAAA,GAAA,MAAA,GADF,UACE,eAAA,GAAA,MAAA,GADF,UACE,eAAA,GAAA,MAAA,GDMN,yBCzBE,QACE,wBAAA,EAAA,WAAA,EACA,kBAAA,EAAA,UAAA,EACA,UAAA,KAEF,aACE,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KACA,MAAA,KACA,UAAA,KAIA,UFFN,SAAA,EAAA,EAAA,UAAA,KAAA,EAAA,EAAA,UAIA,UAAA,UEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KAIA,UAAA,KEIM,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,IDMN,yBCzBE,QACE,wBAAA,EAAA,WAAA,EACA,kBAAA,EAAA,UAAA,EACA,UAAA,KAEF,aACE,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KACA,MAAA,KACA,UAAA,KAIA,UFFN,SAAA,EAAA,EAAA,UAAA,KAAA,EAAA,EAAA,UAIA,UAAA,UEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KAIA,UAAA,KEIM,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,IDMN,yBCzBE,QACE,wBAAA,EAAA,WAAA,EACA,kBAAA,EAAA,UAAA,EACA,UAAA,KAEF,aACE,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KACA,MAAA,KACA,UAAA,KAIA,UFFN,SAAA,EAAA,EAAA,UAAA,KAAA,EAAA,EAAA,UAIA,UAAA,UEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KAIA,UAAA,KEIM,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,IDMN,0BCzBE,QACE,wBAAA,EAAA,WAAA,EACA,kBAAA,EAAA,UAAA,EACA,UAAA,KAEF,aACE,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KACA,MAAA,KACA,UAAA,KAIA,UFFN,SAAA,EAAA,EAAA,UAAA,KAAA,EAAA,EAAA,UAIA,UAAA,UEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,UFFN,SAAA,EAAA,EAAA,IAAA,KAAA,EAAA,EAAA,IAIA,UAAA,IEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,WAAA,KAAA,EAAA,EAAA,WAIA,UAAA,WEFM,WFFN,SAAA,EAAA,EAAA,KAAA,KAAA,EAAA,EAAA,KAIA,UAAA,KEIM,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,YACE,eAAA,EAAA,MAAA,EADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,GADF,aACE,eAAA,GAAA,MAAA,IC1CN,UAAgC,mBAAA,cAAA,eAAA,cAChC,aAAgC,mBAAA,iBAAA,eAAA,iBAChC,kBAAgC,mBAAA,sBAAA,eAAA,sBAChC,qBAAgC,mBAAA,yBAAA,eAAA,yBAEhC,WAA8B,cAAA,eAAA,UAAA,eAC9B,aAA8B,cAAA,iBAAA,UAAA,iBAC9B,mBAA8B,cAAA,uBAAA,UAAA,uBAE9B,uBAAoC,cAAA,gBAAA,gBAAA,qBACpC,qBAAoC,cAAA,cAAA,gBAAA,mBACpC,wBAAoC,cAAA,iBAAA,gBAAA,iBACpC,yBAAoC,cAAA,kBAAA,gBAAA,wBACpC,wBAAoC,cAAA,qBAAA,gBAAA,uBAEpC,mBAAiC,eAAA,gBAAA,YAAA,qBACjC,iBAAiC,eAAA,cAAA,YAAA,mBACjC,oBAAiC,eAAA,iBAAA,YAAA,iBACjC,sBAAiC,eAAA,mBAAA,YAAA,mBACjC,qBAAiC,eAAA,kBAAA,YAAA,kBAEjC,qBAAkC,mBAAA,gBAAA,cAAA,qBAClC,mBAAkC,mBAAA,cAAA,cAAA,mBAClC,sBAAkC,mBAAA,iBAAA,cAAA,iBAClC,uBAAkC,mBAAA,kBAAA,cAAA,wBAClC,sBAAkC,mBAAA,qBAAA,cAAA,uBAClC,uBAAkC,mBAAA,kBAAA,cAAA,kBAElC,iBAAgC,oBAAA,eAAA,WAAA,eAChC,kBAAgC,oBAAA,gBAAA,WAAA,qBAChC,gBAAgC,oBAAA,cAAA,WAAA,mBAChC,mBAAgC,oBAAA,iBAAA,WAAA,iBAChC,qBAAgC,oBAAA,mBAAA,WAAA,mBAChC,oBAAgC,oBAAA,kBAAA,WAAA,kBFehC,yBEhDA,aAAgC,mBAAA,cAAA,eAAA,cAChC,gBAAgC,mBAAA,iBAAA,eAAA,iBAChC,qBAAgC,mBAAA,sBAAA,eAAA,sBAChC,wBAAgC,mBAAA,yBAAA,eAAA,yBAEhC,cAA8B,cAAA,eAAA,UAAA,eAC9B,gBAA8B,cAAA,iBAAA,UAAA,iBAC9B,sBAA8B,cAAA,uBAAA,UAAA,uBAE9B,0BAAoC,cAAA,gBAAA,gBAAA,qBACpC,wBAAoC,cAAA,cAAA,gBAAA,mBACpC,2BAAoC,cAAA,iBAAA,gBAAA,iBACpC,4BAAoC,cAAA,kBAAA,gBAAA,wBACpC,2BAAoC,cAAA,qBAAA,gBAAA,uBAEpC,sBAAiC,eAAA,gBAAA,YAAA,qBACjC,oBAAiC,eAAA,cAAA,YAAA,mBACjC,uBAAiC,eAAA,iBAAA,YAAA,iBACjC,yBAAiC,eAAA,mBAAA,YAAA,mBACjC,wBAAiC,eAAA,kBAAA,YAAA,kBAEjC,wBAAkC,mBAAA,gBAAA,cAAA,qBAClC,sBAAkC,mBAAA,cAAA,cAAA,mBAClC,yBAAkC,mBAAA,iBAAA,cAAA,iBAClC,0BAAkC,mBAAA,kBAAA,cAAA,wBAClC,yBAAkC,mBAAA,qBAAA,cAAA,uBAClC,0BAAkC,mBAAA,kBAAA,cAAA,kBAElC,oBAAgC,oBAAA,eAAA,WAAA,eAChC,qBAAgC,oBAAA,gBAAA,WAAA,qBAChC,mBAAgC,oBAAA,cAAA,WAAA,mBAChC,sBAAgC,oBAAA,iBAAA,WAAA,iBAChC,wBAAgC,oBAAA,mBAAA,WAAA,mBAChC,uBAAgC,oBAAA,kBAAA,WAAA,mBFehC,yBEhDA,aAAgC,mBAAA,cAAA,eAAA,cAChC,gBAAgC,mBAAA,iBAAA,eAAA,iBAChC,qBAAgC,mBAAA,sBAAA,eAAA,sBAChC,wBAAgC,mBAAA,yBAAA,eAAA,yBAEhC,cAA8B,cAAA,eAAA,UAAA,eAC9B,gBAA8B,cAAA,iBAAA,UAAA,iBAC9B,sBAA8B,cAAA,uBAAA,UAAA,uBAE9B,0BAAoC,cAAA,gBAAA,gBAAA,qBACpC,wBAAoC,cAAA,cAAA,gBAAA,mBACpC,2BAAoC,cAAA,iBAAA,gBAAA,iBACpC,4BAAoC,cAAA,kBAAA,gBAAA,wBACpC,2BAAoC,cAAA,qBAAA,gBAAA,uBAEpC,sBAAiC,eAAA,gBAAA,YAAA,qBACjC,oBAAiC,eAAA,cAAA,YAAA,mBACjC,uBAAiC,eAAA,iBAAA,YAAA,iBACjC,yBAAiC,eAAA,mBAAA,YAAA,mBACjC,wBAAiC,eAAA,kBAAA,YAAA,kBAEjC,wBAAkC,mBAAA,gBAAA,cAAA,qBAClC,sBAAkC,mBAAA,cAAA,cAAA,mBAClC,yBAAkC,mBAAA,iBAAA,cAAA,iBAClC,0BAAkC,mBAAA,kBAAA,cAAA,wBAClC,yBAAkC,mBAAA,qBAAA,cAAA,uBAClC,0BAAkC,mBAAA,kBAAA,cAAA,kBAElC,oBAAgC,oBAAA,eAAA,WAAA,eAChC,qBAAgC,oBAAA,gBAAA,WAAA,qBAChC,mBAAgC,oBAAA,cAAA,WAAA,mBAChC,sBAAgC,oBAAA,iBAAA,WAAA,iBAChC,wBAAgC,oBAAA,mBAAA,WAAA,mBAChC,uBAAgC,oBAAA,kBAAA,WAAA,mBFehC,yBEhDA,aAAgC,mBAAA,cAAA,eAAA,cAChC,gBAAgC,mBAAA,iBAAA,eAAA,iBAChC,qBAAgC,mBAAA,sBAAA,eAAA,sBAChC,wBAAgC,mBAAA,yBAAA,eAAA,yBAEhC,cAA8B,cAAA,eAAA,UAAA,eAC9B,gBAA8B,cAAA,iBAAA,UAAA,iBAC9B,sBAA8B,cAAA,uBAAA,UAAA,uBAE9B,0BAAoC,cAAA,gBAAA,gBAAA,qBACpC,wBAAoC,cAAA,cAAA,gBAAA,mBACpC,2BAAoC,cAAA,iBAAA,gBAAA,iBACpC,4BAAoC,cAAA,kBAAA,gBAAA,wBACpC,2BAAoC,cAAA,qBAAA,gBAAA,uBAEpC,sBAAiC,eAAA,gBAAA,YAAA,qBACjC,oBAAiC,eAAA,cAAA,YAAA,mBACjC,uBAAiC,eAAA,iBAAA,YAAA,iBACjC,yBAAiC,eAAA,mBAAA,YAAA,mBACjC,wBAAiC,eAAA,kBAAA,YAAA,kBAEjC,wBAAkC,mBAAA,gBAAA,cAAA,qBAClC,sBAAkC,mBAAA,cAAA,cAAA,mBAClC,yBAAkC,mBAAA,iBAAA,cAAA,iBAClC,0BAAkC,mBAAA,kBAAA,cAAA,wBAClC,yBAAkC,mBAAA,qBAAA,cAAA,uBAClC,0BAAkC,mBAAA,kBAAA,cAAA,kBAElC,oBAAgC,oBAAA,eAAA,WAAA,eAChC,qBAAgC,oBAAA,gBAAA,WAAA,qBAChC,mBAAgC,oBAAA,cAAA,WAAA,mBAChC,sBAAgC,oBAAA,iBAAA,WAAA,iBAChC,wBAAgC,oBAAA,mBAAA,WAAA,mBAChC,uBAAgC,oBAAA,kBAAA,WAAA,mBFehC,0BEhDA,aAAgC,mBAAA,cAAA,eAAA,cAChC,gBAAgC,mBAAA,iBAAA,eAAA,iBAChC,qBAAgC,mBAAA,sBAAA,eAAA,sBAChC,wBAAgC,mBAAA,yBAAA,eAAA,yBAEhC,cAA8B,cAAA,eAAA,UAAA,eAC9B,gBAA8B,cAAA,iBAAA,UAAA,iBAC9B,sBAA8B,cAAA,uBAAA,UAAA,uBAE9B,0BAAoC,cAAA,gBAAA,gBAAA,qBACpC,wBAAoC,cAAA,cAAA,gBAAA,mBACpC,2BAAoC,cAAA,iBAAA,gBAAA,iBACpC,4BAAoC,cAAA,kBAAA,gBAAA,wBACpC,2BAAoC,cAAA,qBAAA,gBAAA,uBAEpC,sBAAiC,eAAA,gBAAA,YAAA,qBACjC,oBAAiC,eAAA,cAAA,YAAA,mBACjC,uBAAiC,eAAA,iBAAA,YAAA,iBACjC,yBAAiC,eAAA,mBAAA,YAAA,mBACjC,wBAAiC,eAAA,kBAAA,YAAA,kBAEjC,wBAAkC,mBAAA,gBAAA,cAAA,qBAClC,sBAAkC,mBAAA,cAAA,cAAA,mBAClC,yBAAkC,mBAAA,iBAAA,cAAA,iBAClC,0BAAkC,mBAAA,kBAAA,cAAA,wBAClC,yBAAkC,mBAAA,qBAAA,cAAA,uBAClC,0BAAkC,mBAAA,kBAAA,cAAA,kBAElC,oBAAgC,oBAAA,eAAA,WAAA,eAChC,qBAAgC,oBAAA,gBAAA,WAAA,qBAChC,mBAAgC,oBAAA,cAAA,WAAA,mBAChC,sBAAgC,oBAAA,iBAAA,WAAA,iBAChC,wBAAgC,oBAAA,mBAAA,WAAA,mBAChC,uBAAgC,oBAAA,kBAAA,WAAA","sourcesContent":["// Bootstrap Grid only\n//\n// Includes relevant variables and mixins for the flexbox grid\n// system, as well as the generated predefined classes (e.g., `.col-sm-4`).\n\n//\n// Box sizing, responsive, and more\n//\n\n@at-root {\n @-ms-viewport { width: device-width; }\n}\n\nhtml {\n box-sizing: border-box;\n -ms-overflow-style: scrollbar;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@import \"functions\";\n@import \"variables\";\n\n//\n// Grid mixins\n//\n\n@import \"mixins/breakpoints\";\n@import \"mixins/grid-framework\";\n@import \"mixins/grid\";\n\n@import \"grid\";\n@import \"utilities/flex\";\n","@-ms-viewport {\n width: device-width;\n}\n\nhtml {\n box-sizing: border-box;\n -ms-overflow-style: scrollbar;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n.container {\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n@media (min-width: 576px) {\n .container {\n max-width: 540px;\n }\n}\n\n@media (min-width: 768px) {\n .container {\n max-width: 720px;\n }\n}\n\n@media (min-width: 992px) {\n .container {\n max-width: 960px;\n }\n}\n\n@media (min-width: 1200px) {\n .container {\n max-width: 1140px;\n }\n}\n\n.container-fluid {\n width: 100%;\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n.row {\n display: -ms-flexbox;\n display: flex;\n -ms-flex-wrap: wrap;\n flex-wrap: wrap;\n margin-right: -15px;\n margin-left: -15px;\n}\n\n.no-gutters {\n margin-right: 0;\n margin-left: 0;\n}\n\n.no-gutters > .col,\n.no-gutters > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n}\n\n.col-1, .col-2, .col-3, .col-4, .col-5, .col-6, .col-7, .col-8, .col-9, .col-10, .col-11, .col-12, .col,\n.col-auto, .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12, .col-sm,\n.col-sm-auto, .col-md-1, .col-md-2, .col-md-3, .col-md-4, .col-md-5, .col-md-6, .col-md-7, .col-md-8, .col-md-9, .col-md-10, .col-md-11, .col-md-12, .col-md,\n.col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg,\n.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-xl-8, .col-xl-9, .col-xl-10, .col-xl-11, .col-xl-12, .col-xl,\n.col-xl-auto {\n position: relative;\n width: 100%;\n min-height: 1px;\n padding-right: 15px;\n padding-left: 15px;\n}\n\n.col {\n -ms-flex-preferred-size: 0;\n flex-basis: 0;\n -ms-flex-positive: 1;\n flex-grow: 1;\n max-width: 100%;\n}\n\n.col-auto {\n -ms-flex: 0 0 auto;\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n}\n\n.col-1 {\n -ms-flex: 0 0 8.333333%;\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n}\n\n.col-2 {\n -ms-flex: 0 0 16.666667%;\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n}\n\n.col-3 {\n -ms-flex: 0 0 25%;\n flex: 0 0 25%;\n max-width: 25%;\n}\n\n.col-4 {\n -ms-flex: 0 0 33.333333%;\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n}\n\n.col-5 {\n -ms-flex: 0 0 41.666667%;\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n}\n\n.col-6 {\n -ms-flex: 0 0 50%;\n flex: 0 0 50%;\n max-width: 50%;\n}\n\n.col-7 {\n -ms-flex: 0 0 58.333333%;\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n}\n\n.col-8 {\n -ms-flex: 0 0 66.666667%;\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n}\n\n.col-9 {\n -ms-flex: 0 0 75%;\n flex: 0 0 75%;\n max-width: 75%;\n}\n\n.col-10 {\n -ms-flex: 0 0 83.333333%;\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n}\n\n.col-11 {\n -ms-flex: 0 0 91.666667%;\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n}\n\n.col-12 {\n -ms-flex: 0 0 100%;\n flex: 0 0 100%;\n max-width: 100%;\n}\n\n.order-1 {\n -ms-flex-order: 1;\n order: 1;\n}\n\n.order-2 {\n -ms-flex-order: 2;\n order: 2;\n}\n\n.order-3 {\n -ms-flex-order: 3;\n order: 3;\n}\n\n.order-4 {\n -ms-flex-order: 4;\n order: 4;\n}\n\n.order-5 {\n -ms-flex-order: 5;\n order: 5;\n}\n\n.order-6 {\n -ms-flex-order: 6;\n order: 6;\n}\n\n.order-7 {\n -ms-flex-order: 7;\n order: 7;\n}\n\n.order-8 {\n -ms-flex-order: 8;\n order: 8;\n}\n\n.order-9 {\n -ms-flex-order: 9;\n order: 9;\n}\n\n.order-10 {\n -ms-flex-order: 10;\n order: 10;\n}\n\n.order-11 {\n -ms-flex-order: 11;\n order: 11;\n}\n\n.order-12 {\n -ms-flex-order: 12;\n order: 12;\n}\n\n@media (min-width: 576px) {\n .col-sm {\n -ms-flex-preferred-size: 0;\n flex-basis: 0;\n -ms-flex-positive: 1;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-sm-auto {\n -ms-flex: 0 0 auto;\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-sm-1 {\n -ms-flex: 0 0 8.333333%;\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-sm-2 {\n -ms-flex: 0 0 16.666667%;\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-sm-3 {\n -ms-flex: 0 0 25%;\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-sm-4 {\n -ms-flex: 0 0 33.333333%;\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-sm-5 {\n -ms-flex: 0 0 41.666667%;\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-sm-6 {\n -ms-flex: 0 0 50%;\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-sm-7 {\n -ms-flex: 0 0 58.333333%;\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-sm-8 {\n -ms-flex: 0 0 66.666667%;\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-sm-9 {\n -ms-flex: 0 0 75%;\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-sm-10 {\n -ms-flex: 0 0 83.333333%;\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-sm-11 {\n -ms-flex: 0 0 91.666667%;\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-sm-12 {\n -ms-flex: 0 0 100%;\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-sm-1 {\n -ms-flex-order: 1;\n order: 1;\n }\n .order-sm-2 {\n -ms-flex-order: 2;\n order: 2;\n }\n .order-sm-3 {\n -ms-flex-order: 3;\n order: 3;\n }\n .order-sm-4 {\n -ms-flex-order: 4;\n order: 4;\n }\n .order-sm-5 {\n -ms-flex-order: 5;\n order: 5;\n }\n .order-sm-6 {\n -ms-flex-order: 6;\n order: 6;\n }\n .order-sm-7 {\n -ms-flex-order: 7;\n order: 7;\n }\n .order-sm-8 {\n -ms-flex-order: 8;\n order: 8;\n }\n .order-sm-9 {\n -ms-flex-order: 9;\n order: 9;\n }\n .order-sm-10 {\n -ms-flex-order: 10;\n order: 10;\n }\n .order-sm-11 {\n -ms-flex-order: 11;\n order: 11;\n }\n .order-sm-12 {\n -ms-flex-order: 12;\n order: 12;\n }\n}\n\n@media (min-width: 768px) {\n .col-md {\n -ms-flex-preferred-size: 0;\n flex-basis: 0;\n -ms-flex-positive: 1;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-md-auto {\n -ms-flex: 0 0 auto;\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-md-1 {\n -ms-flex: 0 0 8.333333%;\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-md-2 {\n -ms-flex: 0 0 16.666667%;\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-md-3 {\n -ms-flex: 0 0 25%;\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-md-4 {\n -ms-flex: 0 0 33.333333%;\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-md-5 {\n -ms-flex: 0 0 41.666667%;\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-md-6 {\n -ms-flex: 0 0 50%;\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-md-7 {\n -ms-flex: 0 0 58.333333%;\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-md-8 {\n -ms-flex: 0 0 66.666667%;\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-md-9 {\n -ms-flex: 0 0 75%;\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-md-10 {\n -ms-flex: 0 0 83.333333%;\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-md-11 {\n -ms-flex: 0 0 91.666667%;\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-md-12 {\n -ms-flex: 0 0 100%;\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-md-1 {\n -ms-flex-order: 1;\n order: 1;\n }\n .order-md-2 {\n -ms-flex-order: 2;\n order: 2;\n }\n .order-md-3 {\n -ms-flex-order: 3;\n order: 3;\n }\n .order-md-4 {\n -ms-flex-order: 4;\n order: 4;\n }\n .order-md-5 {\n -ms-flex-order: 5;\n order: 5;\n }\n .order-md-6 {\n -ms-flex-order: 6;\n order: 6;\n }\n .order-md-7 {\n -ms-flex-order: 7;\n order: 7;\n }\n .order-md-8 {\n -ms-flex-order: 8;\n order: 8;\n }\n .order-md-9 {\n -ms-flex-order: 9;\n order: 9;\n }\n .order-md-10 {\n -ms-flex-order: 10;\n order: 10;\n }\n .order-md-11 {\n -ms-flex-order: 11;\n order: 11;\n }\n .order-md-12 {\n -ms-flex-order: 12;\n order: 12;\n }\n}\n\n@media (min-width: 992px) {\n .col-lg {\n -ms-flex-preferred-size: 0;\n flex-basis: 0;\n -ms-flex-positive: 1;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-lg-auto {\n -ms-flex: 0 0 auto;\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-lg-1 {\n -ms-flex: 0 0 8.333333%;\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-lg-2 {\n -ms-flex: 0 0 16.666667%;\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-lg-3 {\n -ms-flex: 0 0 25%;\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-lg-4 {\n -ms-flex: 0 0 33.333333%;\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-lg-5 {\n -ms-flex: 0 0 41.666667%;\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-lg-6 {\n -ms-flex: 0 0 50%;\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-lg-7 {\n -ms-flex: 0 0 58.333333%;\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-lg-8 {\n -ms-flex: 0 0 66.666667%;\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-lg-9 {\n -ms-flex: 0 0 75%;\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-lg-10 {\n -ms-flex: 0 0 83.333333%;\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-lg-11 {\n -ms-flex: 0 0 91.666667%;\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-lg-12 {\n -ms-flex: 0 0 100%;\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-lg-1 {\n -ms-flex-order: 1;\n order: 1;\n }\n .order-lg-2 {\n -ms-flex-order: 2;\n order: 2;\n }\n .order-lg-3 {\n -ms-flex-order: 3;\n order: 3;\n }\n .order-lg-4 {\n -ms-flex-order: 4;\n order: 4;\n }\n .order-lg-5 {\n -ms-flex-order: 5;\n order: 5;\n }\n .order-lg-6 {\n -ms-flex-order: 6;\n order: 6;\n }\n .order-lg-7 {\n -ms-flex-order: 7;\n order: 7;\n }\n .order-lg-8 {\n -ms-flex-order: 8;\n order: 8;\n }\n .order-lg-9 {\n -ms-flex-order: 9;\n order: 9;\n }\n .order-lg-10 {\n -ms-flex-order: 10;\n order: 10;\n }\n .order-lg-11 {\n -ms-flex-order: 11;\n order: 11;\n }\n .order-lg-12 {\n -ms-flex-order: 12;\n order: 12;\n }\n}\n\n@media (min-width: 1200px) {\n .col-xl {\n -ms-flex-preferred-size: 0;\n flex-basis: 0;\n -ms-flex-positive: 1;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-xl-auto {\n -ms-flex: 0 0 auto;\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-xl-1 {\n -ms-flex: 0 0 8.333333%;\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-xl-2 {\n -ms-flex: 0 0 16.666667%;\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-xl-3 {\n -ms-flex: 0 0 25%;\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-xl-4 {\n -ms-flex: 0 0 33.333333%;\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-xl-5 {\n -ms-flex: 0 0 41.666667%;\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-xl-6 {\n -ms-flex: 0 0 50%;\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-xl-7 {\n -ms-flex: 0 0 58.333333%;\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-xl-8 {\n -ms-flex: 0 0 66.666667%;\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-xl-9 {\n -ms-flex: 0 0 75%;\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-xl-10 {\n -ms-flex: 0 0 83.333333%;\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-xl-11 {\n -ms-flex: 0 0 91.666667%;\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-xl-12 {\n -ms-flex: 0 0 100%;\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-xl-1 {\n -ms-flex-order: 1;\n order: 1;\n }\n .order-xl-2 {\n -ms-flex-order: 2;\n order: 2;\n }\n .order-xl-3 {\n -ms-flex-order: 3;\n order: 3;\n }\n .order-xl-4 {\n -ms-flex-order: 4;\n order: 4;\n }\n .order-xl-5 {\n -ms-flex-order: 5;\n order: 5;\n }\n .order-xl-6 {\n -ms-flex-order: 6;\n order: 6;\n }\n .order-xl-7 {\n -ms-flex-order: 7;\n order: 7;\n }\n .order-xl-8 {\n -ms-flex-order: 8;\n order: 8;\n }\n .order-xl-9 {\n -ms-flex-order: 9;\n order: 9;\n }\n .order-xl-10 {\n -ms-flex-order: 10;\n order: 10;\n }\n .order-xl-11 {\n -ms-flex-order: 11;\n order: 11;\n }\n .order-xl-12 {\n -ms-flex-order: 12;\n order: 12;\n }\n}\n\n.flex-row {\n -ms-flex-direction: row !important;\n flex-direction: row !important;\n}\n\n.flex-column {\n -ms-flex-direction: column !important;\n flex-direction: column !important;\n}\n\n.flex-row-reverse {\n -ms-flex-direction: row-reverse !important;\n flex-direction: row-reverse !important;\n}\n\n.flex-column-reverse {\n -ms-flex-direction: column-reverse !important;\n flex-direction: column-reverse !important;\n}\n\n.flex-wrap {\n -ms-flex-wrap: wrap !important;\n flex-wrap: wrap !important;\n}\n\n.flex-nowrap {\n -ms-flex-wrap: nowrap !important;\n flex-wrap: nowrap !important;\n}\n\n.flex-wrap-reverse {\n -ms-flex-wrap: wrap-reverse !important;\n flex-wrap: wrap-reverse !important;\n}\n\n.justify-content-start {\n -ms-flex-pack: start !important;\n justify-content: flex-start !important;\n}\n\n.justify-content-end {\n -ms-flex-pack: end !important;\n justify-content: flex-end !important;\n}\n\n.justify-content-center {\n -ms-flex-pack: center !important;\n justify-content: center !important;\n}\n\n.justify-content-between {\n -ms-flex-pack: justify !important;\n justify-content: space-between !important;\n}\n\n.justify-content-around {\n -ms-flex-pack: distribute !important;\n justify-content: space-around !important;\n}\n\n.align-items-start {\n -ms-flex-align: start !important;\n align-items: flex-start !important;\n}\n\n.align-items-end {\n -ms-flex-align: end !important;\n align-items: flex-end !important;\n}\n\n.align-items-center {\n -ms-flex-align: center !important;\n align-items: center !important;\n}\n\n.align-items-baseline {\n -ms-flex-align: baseline !important;\n align-items: baseline !important;\n}\n\n.align-items-stretch {\n -ms-flex-align: stretch !important;\n align-items: stretch !important;\n}\n\n.align-content-start {\n -ms-flex-line-pack: start !important;\n align-content: flex-start !important;\n}\n\n.align-content-end {\n -ms-flex-line-pack: end !important;\n align-content: flex-end !important;\n}\n\n.align-content-center {\n -ms-flex-line-pack: center !important;\n align-content: center !important;\n}\n\n.align-content-between {\n -ms-flex-line-pack: justify !important;\n align-content: space-between !important;\n}\n\n.align-content-around {\n -ms-flex-line-pack: distribute !important;\n align-content: space-around !important;\n}\n\n.align-content-stretch {\n -ms-flex-line-pack: stretch !important;\n align-content: stretch !important;\n}\n\n.align-self-auto {\n -ms-flex-item-align: auto !important;\n align-self: auto !important;\n}\n\n.align-self-start {\n -ms-flex-item-align: start !important;\n align-self: flex-start !important;\n}\n\n.align-self-end {\n -ms-flex-item-align: end !important;\n align-self: flex-end !important;\n}\n\n.align-self-center {\n -ms-flex-item-align: center !important;\n align-self: center !important;\n}\n\n.align-self-baseline {\n -ms-flex-item-align: baseline !important;\n align-self: baseline !important;\n}\n\n.align-self-stretch {\n -ms-flex-item-align: stretch !important;\n align-self: stretch !important;\n}\n\n@media (min-width: 576px) {\n .flex-sm-row {\n -ms-flex-direction: row !important;\n flex-direction: row !important;\n }\n .flex-sm-column {\n -ms-flex-direction: column !important;\n flex-direction: column !important;\n }\n .flex-sm-row-reverse {\n -ms-flex-direction: row-reverse !important;\n flex-direction: row-reverse !important;\n }\n .flex-sm-column-reverse {\n -ms-flex-direction: column-reverse !important;\n flex-direction: column-reverse !important;\n }\n .flex-sm-wrap {\n -ms-flex-wrap: wrap !important;\n flex-wrap: wrap !important;\n }\n .flex-sm-nowrap {\n -ms-flex-wrap: nowrap !important;\n flex-wrap: nowrap !important;\n }\n .flex-sm-wrap-reverse {\n -ms-flex-wrap: wrap-reverse !important;\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-sm-start {\n -ms-flex-pack: start !important;\n justify-content: flex-start !important;\n }\n .justify-content-sm-end {\n -ms-flex-pack: end !important;\n justify-content: flex-end !important;\n }\n .justify-content-sm-center {\n -ms-flex-pack: center !important;\n justify-content: center !important;\n }\n .justify-content-sm-between {\n -ms-flex-pack: justify !important;\n justify-content: space-between !important;\n }\n .justify-content-sm-around {\n -ms-flex-pack: distribute !important;\n justify-content: space-around !important;\n }\n .align-items-sm-start {\n -ms-flex-align: start !important;\n align-items: flex-start !important;\n }\n .align-items-sm-end {\n -ms-flex-align: end !important;\n align-items: flex-end !important;\n }\n .align-items-sm-center {\n -ms-flex-align: center !important;\n align-items: center !important;\n }\n .align-items-sm-baseline {\n -ms-flex-align: baseline !important;\n align-items: baseline !important;\n }\n .align-items-sm-stretch {\n -ms-flex-align: stretch !important;\n align-items: stretch !important;\n }\n .align-content-sm-start {\n -ms-flex-line-pack: start !important;\n align-content: flex-start !important;\n }\n .align-content-sm-end {\n -ms-flex-line-pack: end !important;\n align-content: flex-end !important;\n }\n .align-content-sm-center {\n -ms-flex-line-pack: center !important;\n align-content: center !important;\n }\n .align-content-sm-between {\n -ms-flex-line-pack: justify !important;\n align-content: space-between !important;\n }\n .align-content-sm-around {\n -ms-flex-line-pack: distribute !important;\n align-content: space-around !important;\n }\n .align-content-sm-stretch {\n -ms-flex-line-pack: stretch !important;\n align-content: stretch !important;\n }\n .align-self-sm-auto {\n -ms-flex-item-align: auto !important;\n align-self: auto !important;\n }\n .align-self-sm-start {\n -ms-flex-item-align: start !important;\n align-self: flex-start !important;\n }\n .align-self-sm-end {\n -ms-flex-item-align: end !important;\n align-self: flex-end !important;\n }\n .align-self-sm-center {\n -ms-flex-item-align: center !important;\n align-self: center !important;\n }\n .align-self-sm-baseline {\n -ms-flex-item-align: baseline !important;\n align-self: baseline !important;\n }\n .align-self-sm-stretch {\n -ms-flex-item-align: stretch !important;\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 768px) {\n .flex-md-row {\n -ms-flex-direction: row !important;\n flex-direction: row !important;\n }\n .flex-md-column {\n -ms-flex-direction: column !important;\n flex-direction: column !important;\n }\n .flex-md-row-reverse {\n -ms-flex-direction: row-reverse !important;\n flex-direction: row-reverse !important;\n }\n .flex-md-column-reverse {\n -ms-flex-direction: column-reverse !important;\n flex-direction: column-reverse !important;\n }\n .flex-md-wrap {\n -ms-flex-wrap: wrap !important;\n flex-wrap: wrap !important;\n }\n .flex-md-nowrap {\n -ms-flex-wrap: nowrap !important;\n flex-wrap: nowrap !important;\n }\n .flex-md-wrap-reverse {\n -ms-flex-wrap: wrap-reverse !important;\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-md-start {\n -ms-flex-pack: start !important;\n justify-content: flex-start !important;\n }\n .justify-content-md-end {\n -ms-flex-pack: end !important;\n justify-content: flex-end !important;\n }\n .justify-content-md-center {\n -ms-flex-pack: center !important;\n justify-content: center !important;\n }\n .justify-content-md-between {\n -ms-flex-pack: justify !important;\n justify-content: space-between !important;\n }\n .justify-content-md-around {\n -ms-flex-pack: distribute !important;\n justify-content: space-around !important;\n }\n .align-items-md-start {\n -ms-flex-align: start !important;\n align-items: flex-start !important;\n }\n .align-items-md-end {\n -ms-flex-align: end !important;\n align-items: flex-end !important;\n }\n .align-items-md-center {\n -ms-flex-align: center !important;\n align-items: center !important;\n }\n .align-items-md-baseline {\n -ms-flex-align: baseline !important;\n align-items: baseline !important;\n }\n .align-items-md-stretch {\n -ms-flex-align: stretch !important;\n align-items: stretch !important;\n }\n .align-content-md-start {\n -ms-flex-line-pack: start !important;\n align-content: flex-start !important;\n }\n .align-content-md-end {\n -ms-flex-line-pack: end !important;\n align-content: flex-end !important;\n }\n .align-content-md-center {\n -ms-flex-line-pack: center !important;\n align-content: center !important;\n }\n .align-content-md-between {\n -ms-flex-line-pack: justify !important;\n align-content: space-between !important;\n }\n .align-content-md-around {\n -ms-flex-line-pack: distribute !important;\n align-content: space-around !important;\n }\n .align-content-md-stretch {\n -ms-flex-line-pack: stretch !important;\n align-content: stretch !important;\n }\n .align-self-md-auto {\n -ms-flex-item-align: auto !important;\n align-self: auto !important;\n }\n .align-self-md-start {\n -ms-flex-item-align: start !important;\n align-self: flex-start !important;\n }\n .align-self-md-end {\n -ms-flex-item-align: end !important;\n align-self: flex-end !important;\n }\n .align-self-md-center {\n -ms-flex-item-align: center !important;\n align-self: center !important;\n }\n .align-self-md-baseline {\n -ms-flex-item-align: baseline !important;\n align-self: baseline !important;\n }\n .align-self-md-stretch {\n -ms-flex-item-align: stretch !important;\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 992px) {\n .flex-lg-row {\n -ms-flex-direction: row !important;\n flex-direction: row !important;\n }\n .flex-lg-column {\n -ms-flex-direction: column !important;\n flex-direction: column !important;\n }\n .flex-lg-row-reverse {\n -ms-flex-direction: row-reverse !important;\n flex-direction: row-reverse !important;\n }\n .flex-lg-column-reverse {\n -ms-flex-direction: column-reverse !important;\n flex-direction: column-reverse !important;\n }\n .flex-lg-wrap {\n -ms-flex-wrap: wrap !important;\n flex-wrap: wrap !important;\n }\n .flex-lg-nowrap {\n -ms-flex-wrap: nowrap !important;\n flex-wrap: nowrap !important;\n }\n .flex-lg-wrap-reverse {\n -ms-flex-wrap: wrap-reverse !important;\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-lg-start {\n -ms-flex-pack: start !important;\n justify-content: flex-start !important;\n }\n .justify-content-lg-end {\n -ms-flex-pack: end !important;\n justify-content: flex-end !important;\n }\n .justify-content-lg-center {\n -ms-flex-pack: center !important;\n justify-content: center !important;\n }\n .justify-content-lg-between {\n -ms-flex-pack: justify !important;\n justify-content: space-between !important;\n }\n .justify-content-lg-around {\n -ms-flex-pack: distribute !important;\n justify-content: space-around !important;\n }\n .align-items-lg-start {\n -ms-flex-align: start !important;\n align-items: flex-start !important;\n }\n .align-items-lg-end {\n -ms-flex-align: end !important;\n align-items: flex-end !important;\n }\n .align-items-lg-center {\n -ms-flex-align: center !important;\n align-items: center !important;\n }\n .align-items-lg-baseline {\n -ms-flex-align: baseline !important;\n align-items: baseline !important;\n }\n .align-items-lg-stretch {\n -ms-flex-align: stretch !important;\n align-items: stretch !important;\n }\n .align-content-lg-start {\n -ms-flex-line-pack: start !important;\n align-content: flex-start !important;\n }\n .align-content-lg-end {\n -ms-flex-line-pack: end !important;\n align-content: flex-end !important;\n }\n .align-content-lg-center {\n -ms-flex-line-pack: center !important;\n align-content: center !important;\n }\n .align-content-lg-between {\n -ms-flex-line-pack: justify !important;\n align-content: space-between !important;\n }\n .align-content-lg-around {\n -ms-flex-line-pack: distribute !important;\n align-content: space-around !important;\n }\n .align-content-lg-stretch {\n -ms-flex-line-pack: stretch !important;\n align-content: stretch !important;\n }\n .align-self-lg-auto {\n -ms-flex-item-align: auto !important;\n align-self: auto !important;\n }\n .align-self-lg-start {\n -ms-flex-item-align: start !important;\n align-self: flex-start !important;\n }\n .align-self-lg-end {\n -ms-flex-item-align: end !important;\n align-self: flex-end !important;\n }\n .align-self-lg-center {\n -ms-flex-item-align: center !important;\n align-self: center !important;\n }\n .align-self-lg-baseline {\n -ms-flex-item-align: baseline !important;\n align-self: baseline !important;\n }\n .align-self-lg-stretch {\n -ms-flex-item-align: stretch !important;\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 1200px) {\n .flex-xl-row {\n -ms-flex-direction: row !important;\n flex-direction: row !important;\n }\n .flex-xl-column {\n -ms-flex-direction: column !important;\n flex-direction: column !important;\n }\n .flex-xl-row-reverse {\n -ms-flex-direction: row-reverse !important;\n flex-direction: row-reverse !important;\n }\n .flex-xl-column-reverse {\n -ms-flex-direction: column-reverse !important;\n flex-direction: column-reverse !important;\n }\n .flex-xl-wrap {\n -ms-flex-wrap: wrap !important;\n flex-wrap: wrap !important;\n }\n .flex-xl-nowrap {\n -ms-flex-wrap: nowrap !important;\n flex-wrap: nowrap !important;\n }\n .flex-xl-wrap-reverse {\n -ms-flex-wrap: wrap-reverse !important;\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-xl-start {\n -ms-flex-pack: start !important;\n justify-content: flex-start !important;\n }\n .justify-content-xl-end {\n -ms-flex-pack: end !important;\n justify-content: flex-end !important;\n }\n .justify-content-xl-center {\n -ms-flex-pack: center !important;\n justify-content: center !important;\n }\n .justify-content-xl-between {\n -ms-flex-pack: justify !important;\n justify-content: space-between !important;\n }\n .justify-content-xl-around {\n -ms-flex-pack: distribute !important;\n justify-content: space-around !important;\n }\n .align-items-xl-start {\n -ms-flex-align: start !important;\n align-items: flex-start !important;\n }\n .align-items-xl-end {\n -ms-flex-align: end !important;\n align-items: flex-end !important;\n }\n .align-items-xl-center {\n -ms-flex-align: center !important;\n align-items: center !important;\n }\n .align-items-xl-baseline {\n -ms-flex-align: baseline !important;\n align-items: baseline !important;\n }\n .align-items-xl-stretch {\n -ms-flex-align: stretch !important;\n align-items: stretch !important;\n }\n .align-content-xl-start {\n -ms-flex-line-pack: start !important;\n align-content: flex-start !important;\n }\n .align-content-xl-end {\n -ms-flex-line-pack: end !important;\n align-content: flex-end !important;\n }\n .align-content-xl-center {\n -ms-flex-line-pack: center !important;\n align-content: center !important;\n }\n .align-content-xl-between {\n -ms-flex-line-pack: justify !important;\n align-content: space-between !important;\n }\n .align-content-xl-around {\n -ms-flex-line-pack: distribute !important;\n align-content: space-around !important;\n }\n .align-content-xl-stretch {\n -ms-flex-line-pack: stretch !important;\n align-content: stretch !important;\n }\n .align-self-xl-auto {\n -ms-flex-item-align: auto !important;\n align-self: auto !important;\n }\n .align-self-xl-start {\n -ms-flex-item-align: start !important;\n align-self: flex-start !important;\n }\n .align-self-xl-end {\n -ms-flex-item-align: end !important;\n align-self: flex-end !important;\n }\n .align-self-xl-center {\n -ms-flex-item-align: center !important;\n align-self: center !important;\n }\n .align-self-xl-baseline {\n -ms-flex-item-align: baseline !important;\n align-self: baseline !important;\n }\n .align-self-xl-stretch {\n -ms-flex-item-align: stretch !important;\n align-self: stretch !important;\n }\n}\n/*# sourceMappingURL=bootstrap-grid.css.map */","// Container widths\n//\n// Set the container width, and override it for fixed navbars in media queries.\n\n@if $enable-grid-classes {\n .container {\n @include make-container();\n @include make-container-max-widths();\n }\n}\n\n// Fluid container\n//\n// Utilizes the mixin meant for fixed width containers, but with 100% width for\n// fluid, full width layouts.\n\n@if $enable-grid-classes {\n .container-fluid {\n width: 100%;\n @include make-container();\n }\n}\n\n// Row\n//\n// Rows contain and clear the floats of your columns.\n\n@if $enable-grid-classes {\n .row {\n @include make-row();\n }\n\n // Remove the negative margin from default .row, then the horizontal padding\n // from all immediate children columns (to prevent runaway style inheritance).\n .no-gutters {\n margin-right: 0;\n margin-left: 0;\n\n > .col,\n > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n }\n }\n}\n\n// Columns\n//\n// Common styles for small and large grid columns\n\n@if $enable-grid-classes {\n @include make-grid-columns();\n}\n","/// Grid system\n//\n// Generate semantic grid columns with these mixins.\n\n@mixin make-container() {\n margin-right: auto;\n margin-left: auto;\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n width: 100%;\n}\n\n\n// For each breakpoint, define the maximum width of the container in a media query\n@mixin make-container-max-widths($max-widths: $container-max-widths, $breakpoints: $grid-breakpoints) {\n @each $breakpoint, $container-max-width in $max-widths {\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n max-width: $container-max-width;\n }\n }\n}\n\n@mixin make-row() {\n display: flex;\n flex-wrap: wrap;\n margin-right: ($grid-gutter-width / -2);\n margin-left: ($grid-gutter-width / -2);\n}\n\n@mixin make-col-ready() {\n position: relative;\n // Prevent columns from becoming too narrow when at smaller grid tiers by\n // always setting `width: 100%;`. This works because we use `flex` values\n // later on to override this initial width.\n width: 100%;\n min-height: 1px; // Prevent collapsing\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n}\n\n@mixin make-col($size, $columns: $grid-columns) {\n flex: 0 0 percentage($size / $columns);\n // Add a `max-width` to ensure content within each column does not blow out\n // the width of the column. Applies to IE10+ and Firefox. Chrome and Safari\n // do not appear to require this.\n max-width: percentage($size / $columns);\n}\n","// Breakpoint viewport sizes and media queries.\n//\n// Breakpoints are defined as a map of (name: minimum width), order from small to large:\n//\n// (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px)\n//\n// The map defined in the `$grid-breakpoints` global variable is used as the `$breakpoints` argument by default.\n\n// Name of the next breakpoint, or null for the last breakpoint.\n//\n// >> breakpoint-next(sm)\n// md\n// >> breakpoint-next(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// md\n// >> breakpoint-next(sm, $breakpoint-names: (xs sm md lg xl))\n// md\n@function breakpoint-next($name, $breakpoints: $grid-breakpoints, $breakpoint-names: map-keys($breakpoints)) {\n $n: index($breakpoint-names, $name);\n @return if($n < length($breakpoint-names), nth($breakpoint-names, $n + 1), null);\n}\n\n// Minimum breakpoint width. Null for the smallest (first) breakpoint.\n//\n// >> breakpoint-min(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 576px\n@function breakpoint-min($name, $breakpoints: $grid-breakpoints) {\n $min: map-get($breakpoints, $name);\n @return if($min != 0, $min, null);\n}\n\n// Maximum breakpoint width. Null for the largest (last) breakpoint.\n// The maximum value is calculated as the minimum of the next one less 0.1.\n//\n// >> breakpoint-max(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 767px\n@function breakpoint-max($name, $breakpoints: $grid-breakpoints) {\n $next: breakpoint-next($name, $breakpoints);\n @return if($next, breakpoint-min($next, $breakpoints) - 1px, null);\n}\n\n// Returns a blank string if smallest breakpoint, otherwise returns the name with a dash infront.\n// Useful for making responsive utilities.\n//\n// >> breakpoint-infix(xs, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"\" (Returns a blank string)\n// >> breakpoint-infix(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"-sm\"\n@function breakpoint-infix($name, $breakpoints: $grid-breakpoints) {\n @return if(breakpoint-min($name, $breakpoints) == null, \"\", \"-#{$name}\");\n}\n\n// Media of at least the minimum breakpoint width. No query for the smallest breakpoint.\n// Makes the @content apply to the given breakpoint and wider.\n@mixin media-breakpoint-up($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n @if $min {\n @media (min-width: $min) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media of at most the maximum breakpoint width. No query for the largest breakpoint.\n// Makes the @content apply to the given breakpoint and narrower.\n@mixin media-breakpoint-down($name, $breakpoints: $grid-breakpoints) {\n $max: breakpoint-max($name, $breakpoints);\n @if $max {\n @media (max-width: $max) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media that spans multiple breakpoint widths.\n// Makes the @content apply between the min and max breakpoints\n@mixin media-breakpoint-between($lower, $upper, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($lower, $breakpoints);\n $max: breakpoint-max($upper, $breakpoints);\n\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n}\n\n// Media between the breakpoint's minimum and maximum widths.\n// No minimum for the smallest breakpoint, and no maximum for the largest one.\n// Makes the @content apply only to the given breakpoint, not viewports any wider or narrower.\n@mixin media-breakpoint-only($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n $max: breakpoint-max($name, $breakpoints);\n\n @if $min != null and $max != null {\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else if $max == null {\n @include media-breakpoint-up($name)\n } @else if $min == null {\n @include media-breakpoint-down($name)\n }\n}\n","// Framework grid generation\n//\n// Used only by Bootstrap to generate the correct number of grid classes given\n// any value of `$grid-columns`.\n\n@mixin make-grid-columns($columns: $grid-columns, $gutter: $grid-gutter-width, $breakpoints: $grid-breakpoints) {\n // Common properties for all breakpoints\n %grid-column {\n position: relative;\n width: 100%;\n min-height: 1px; // Prevent columns from collapsing when empty\n padding-right: ($gutter / 2);\n padding-left: ($gutter / 2);\n }\n\n @each $breakpoint in map-keys($breakpoints) {\n $infix: breakpoint-infix($breakpoint, $breakpoints);\n\n // Allow columns to stretch full width below their breakpoints\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @extend %grid-column;\n }\n }\n .col#{$infix},\n .col#{$infix}-auto {\n @extend %grid-column;\n }\n\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n // Provide basic `.col-{bp}` classes for equal-width flexbox columns\n .col#{$infix} {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col#{$infix}-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none; // Reset earlier grid tiers\n }\n\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @include make-col($i, $columns);\n }\n }\n\n @for $i from 1 through $columns {\n .order#{$infix}-#{$i} {\n order: $i;\n }\n }\n }\n }\n}\n","// Flex variation\n//\n// Custom styles for additional flex alignment options.\n\n@each $breakpoint in map-keys($grid-breakpoints) {\n @include media-breakpoint-up($breakpoint) {\n $infix: breakpoint-infix($breakpoint, $grid-breakpoints);\n\n .flex#{$infix}-row { flex-direction: row !important; }\n .flex#{$infix}-column { flex-direction: column !important; }\n .flex#{$infix}-row-reverse { flex-direction: row-reverse !important; }\n .flex#{$infix}-column-reverse { flex-direction: column-reverse !important; }\n\n .flex#{$infix}-wrap { flex-wrap: wrap !important; }\n .flex#{$infix}-nowrap { flex-wrap: nowrap !important; }\n .flex#{$infix}-wrap-reverse { flex-wrap: wrap-reverse !important; }\n\n .justify-content#{$infix}-start { justify-content: flex-start !important; }\n .justify-content#{$infix}-end { justify-content: flex-end !important; }\n .justify-content#{$infix}-center { justify-content: center !important; }\n .justify-content#{$infix}-between { justify-content: space-between !important; }\n .justify-content#{$infix}-around { justify-content: space-around !important; }\n\n .align-items#{$infix}-start { align-items: flex-start !important; }\n .align-items#{$infix}-end { align-items: flex-end !important; }\n .align-items#{$infix}-center { align-items: center !important; }\n .align-items#{$infix}-baseline { align-items: baseline !important; }\n .align-items#{$infix}-stretch { align-items: stretch !important; }\n\n .align-content#{$infix}-start { align-content: flex-start !important; }\n .align-content#{$infix}-end { align-content: flex-end !important; }\n .align-content#{$infix}-center { align-content: center !important; }\n .align-content#{$infix}-between { align-content: space-between !important; }\n .align-content#{$infix}-around { align-content: space-around !important; }\n .align-content#{$infix}-stretch { align-content: stretch !important; }\n\n .align-self#{$infix}-auto { align-self: auto !important; }\n .align-self#{$infix}-start { align-self: flex-start !important; }\n .align-self#{$infix}-end { align-self: flex-end !important; }\n .align-self#{$infix}-center { align-self: center !important; }\n .align-self#{$infix}-baseline { align-self: baseline !important; }\n .align-self#{$infix}-stretch { align-self: stretch !important; }\n }\n}\n"]} \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css new file mode 100644 index 0000000..867ee17 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css @@ -0,0 +1,330 @@ +html { + box-sizing: border-box; + font-family: sans-serif; + line-height: 1.15; + -webkit-text-size-adjust: 100%; + -ms-text-size-adjust: 100%; + -ms-overflow-style: scrollbar; + -webkit-tap-highlight-color: transparent; +} + +*, +*::before, +*::after { + box-sizing: inherit; +} + +@-ms-viewport { + width: device-width; +} + +article, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section { + display: block; +} + +body { + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; + font-size: 1rem; + font-weight: normal; + line-height: 1.5; + color: #212529; + background-color: #fff; +} + +[tabindex="-1"]:focus { + outline: none !important; +} + +hr { + box-sizing: content-box; + height: 0; + overflow: visible; +} + +h1, h2, h3, h4, h5, h6 { + margin-top: 0; + margin-bottom: .5rem; +} + +p { + margin-top: 0; + margin-bottom: 1rem; +} + +abbr[title], +abbr[data-original-title] { + text-decoration: underline; + -webkit-text-decoration: underline dotted; + text-decoration: underline dotted; + cursor: help; + border-bottom: 0; +} + +address { + margin-bottom: 1rem; + font-style: normal; + line-height: inherit; +} + +ol, +ul, +dl { + margin-top: 0; + margin-bottom: 1rem; +} + +ol ol, +ul ul, +ol ul, +ul ol { + margin-bottom: 0; +} + +dt { + font-weight: bold; +} + +dd { + margin-bottom: .5rem; + margin-left: 0; +} + +blockquote { + margin: 0 0 1rem; +} + +dfn { + font-style: italic; +} + +b, +strong { + font-weight: bolder; +} + +small { + font-size: 80%; +} + +sub, +sup { + position: relative; + font-size: 75%; + line-height: 0; + vertical-align: baseline; +} + +sub { + bottom: -.25em; +} + +sup { + top: -.5em; +} + +a { + color: #007bff; + text-decoration: none; + background-color: transparent; + -webkit-text-decoration-skip: objects; +} + +a:hover { + color: #0056b3; + text-decoration: underline; +} + +a:not([href]):not([tabindex]) { + color: inherit; + text-decoration: none; +} + +a:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover { + color: inherit; + text-decoration: none; +} + +a:not([href]):not([tabindex]):focus { + outline: 0; +} + +pre, +code, +kbd, +samp { + font-family: monospace, monospace; + font-size: 1em; +} + +pre { + margin-top: 0; + margin-bottom: 1rem; + overflow: auto; +} + +figure { + margin: 0 0 1rem; +} + +img { + vertical-align: middle; + border-style: none; +} + +svg:not(:root) { + overflow: hidden; +} + +a, +area, +button, +[role="button"], +input, +label, +select, +summary, +textarea { + -ms-touch-action: manipulation; + touch-action: manipulation; +} + +table { + border-collapse: collapse; +} + +caption { + padding-top: 0.75rem; + padding-bottom: 0.75rem; + color: #868e96; + text-align: left; + caption-side: bottom; +} + +th { + text-align: left; +} + +label { + display: inline-block; + margin-bottom: .5rem; +} + +button:focus { + outline: 1px dotted; + outline: 5px auto -webkit-focus-ring-color; +} + +input, +button, +select, +optgroup, +textarea { + margin: 0; + font-family: inherit; + font-size: inherit; + line-height: inherit; +} + +button, +input { + overflow: visible; +} + +button, +select { + text-transform: none; +} + +button, +html [type="button"], +[type="reset"], +[type="submit"] { + -webkit-appearance: button; +} + +button::-moz-focus-inner, +[type="button"]::-moz-focus-inner, +[type="reset"]::-moz-focus-inner, +[type="submit"]::-moz-focus-inner { + padding: 0; + border-style: none; +} + +input[type="radio"], +input[type="checkbox"] { + box-sizing: border-box; + padding: 0; +} + +input[type="date"], +input[type="time"], +input[type="datetime-local"], +input[type="month"] { + -webkit-appearance: listbox; +} + +textarea { + overflow: auto; + resize: vertical; +} + +fieldset { + min-width: 0; + padding: 0; + margin: 0; + border: 0; +} + +legend { + display: block; + width: 100%; + max-width: 100%; + padding: 0; + margin-bottom: .5rem; + font-size: 1.5rem; + line-height: inherit; + color: inherit; + white-space: normal; +} + +progress { + vertical-align: baseline; +} + +[type="number"]::-webkit-inner-spin-button, +[type="number"]::-webkit-outer-spin-button { + height: auto; +} + +[type="search"] { + outline-offset: -2px; + -webkit-appearance: none; +} + +[type="search"]::-webkit-search-cancel-button, +[type="search"]::-webkit-search-decoration { + -webkit-appearance: none; +} + +::-webkit-file-upload-button { + font: inherit; + -webkit-appearance: button; +} + +output { + display: inline-block; +} + +summary { + display: list-item; +} + +template { + display: none; +} + +[hidden] { + display: none !important; +} +/*# sourceMappingURL=bootstrap-reboot.css.map */ \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css.map b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css.map new file mode 100644 index 0000000..425ac48 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["../../scss/_reboot.scss","bootstrap-reboot.css","../../scss/_variables.scss","../../scss/mixins/_hover.scss"],"names":[],"mappings":"AAoBA;EACE,uBAAsB;EACtB,wBAAuB;EACvB,kBAAiB;EACjB,+BAA8B;EAC9B,2BAA0B;EAC1B,8BAA6B;EAC7B,yCAA0C;CAC3C;;AAED;;;EAGE,oBAAmB;CACpB;;AAIC;EAAgB,oBAAmB;CCpBpC;;ADwBD;EACE,eAAc;CACf;;AAOD;EACE,UAAS;EACT,wGEoLiH;EFnLjH,gBEuLmB;EFtLnB,oBE0LyB;EFzLzB,iBE6LoB;EF5LpB,eEEgB;EFDhB,uBERW;CFSZ;;ACzBD;EDiCE,yBAAwB;CACzB;;AAQD;EACE,wBAAuB;EACvB,UAAS;EACT,kBAAiB;CAClB;;AAWD;EACE,cAAa;EACb,qBAAoB;CACrB;;AAMD;EACE,cAAa;EACb,oBAAmB;CACpB;;AASD;;EAEE,2BAA0B;EAC1B,0CAAiC;UAAjC,kCAAiC;EACjC,aAAY;EACZ,iBAAgB;CACjB;;AAED;EACE,oBAAmB;EACnB,mBAAkB;EAClB,qBAAoB;CACrB;;AAED;;;EAGE,cAAa;EACb,oBAAmB;CACpB;;AAED;;;;EAIE,iBAAgB;CACjB;;AAED;EACE,kBEqGqB;CFpGtB;;AAED;EACE,qBAAoB;EACpB,eAAc;CACf;;AAED;EACE,iBAAgB;CACjB;;AAED;EACE,mBAAkB;CACnB;;AAED;;EAEE,oBAAmB;CACpB;;AAED;EACE,eAAc;CACf;;AAOD;;EAEE,mBAAkB;EAClB,eAAc;EACd,eAAc;EACd,yBAAwB;CACzB;;AAED;EAAM,eAAc;CAAK;;AACzB;EAAM,WAAU;CAAK;;AAOrB;EACE,eElHe;EFmHf,sBExB0B;EFyB1B,8BAA6B;EAC7B,sCAAqC;CAMtC;;AG1LG;EHuLA,eE5B4C;EF6B5C,2BE5B6B;CC5JR;;AHkMzB;EACE,eAAc;EACd,sBAAqB;CAUtB;;AGnMG;EH4LA,eAAc;EACd,sBAAqB;CG1LpB;;AHoLL;EAUI,WAAU;CACX;;AAQH;;;;EAIE,kCAAiC;EACjC,eAAc;CACf;;AAED;EAEE,cAAa;EAEb,oBAAmB;EAEnB,eAAc;CACf;;AAOD;EAEE,iBAAgB;CACjB;;AAOD;EACE,uBAAsB;EACtB,mBAAkB;CACnB;;AAED;EACE,iBAAgB;CACjB;;AAaD;;;;;;;;;EASE,+BAA0B;MAA1B,2BAA0B;CAC3B;;AAOD;EACE,0BAAyB;CAC1B;;AAED;EACE,qBEEoC;EFDpC,wBECoC;EFApC,eEpPgB;EFqPhB,iBAAgB;EAChB,qBAAoB;CACrB;;AAED;EAEE,iBAAgB;CACjB;;AAOD;EAEE,sBAAqB;EACrB,qBAAoB;CACrB;;AAMD;EACE,oBAAmB;EACnB,2CAA0C;CAC3C;;AAED;;;;;EAKE,UAAS;EACT,qBAAoB;EACpB,mBAAkB;EAClB,qBAAoB;CACrB;;AAED;;EAEE,kBAAiB;CAClB;;AAED;;EAEE,qBAAoB;CACrB;;AAKD;;;;EAIE,2BAA0B;CAC3B;;AAGD;;;;EAIE,WAAU;EACV,mBAAkB;CACnB;;AAED;;EAEE,uBAAsB;EACtB,WAAU;CACX;;AAGD;;;;EASE,4BAA2B;CAC5B;;AAED;EACE,eAAc;EAEd,iBAAgB;CACjB;;AAED;EAME,aAAY;EAEZ,WAAU;EACV,UAAS;EACT,UAAS;CACV;;AAID;EACE,eAAc;EACd,YAAW;EACX,gBAAe;EACf,WAAU;EACV,qBAAoB;EACpB,kBAAiB;EACjB,qBAAoB;EACpB,eAAc;EACd,oBAAmB;CACpB;;AAED;EACE,yBAAwB;CACzB;;ACpID;;EDyIE,aAAY;CACb;;ACrID;ED4IE,qBAAoB;EACpB,yBAAwB;CACzB;;ACzID;;EDiJE,yBAAwB;CACzB;;AAOD;EACE,cAAa;EACb,2BAA0B;CAC3B;;AAMD;EACE,sBAAqB;CACtB;;AAED;EACE,mBAAkB;CACnB;;AAED;EACE,cAAa;CACd;;ACtJD;ED2JE,yBAAwB;CACzB","file":"bootstrap-reboot.css","sourcesContent":["// scss-lint:disable QualifyingElement, DuplicateProperty, VendorPrefix\n\n// Reboot\n//\n// Normalization of HTML elements, manually forked from Normalize.css to remove\n// styles targeting irrelevant browsers while applying new styles.\n//\n// Normalize is licensed MIT. https://github.com/necolas/normalize.css\n\n\n// Document\n//\n// 1. Change from `box-sizing: content-box` so that `width` is not affected by `padding` or `border`.\n// 2. Change the default font family in all browsers.\n// 3. Correct the line height in all browsers.\n// 4. Prevent adjustments of font size after orientation changes in IE on Windows Phone and in iOS.\n// 5. Setting @viewport causes scrollbars to overlap content in IE11 and Edge, so\n// we force a non-overlapping, non-auto-hiding scrollbar to counteract.\n// 6. Change the default tap highlight to be completely transparent in iOS.\n\nhtml {\n box-sizing: border-box; // 1\n font-family: sans-serif; // 2\n line-height: 1.15; // 3\n -webkit-text-size-adjust: 100%; // 4\n -ms-text-size-adjust: 100%; // 4\n -ms-overflow-style: scrollbar; // 5\n -webkit-tap-highlight-color: rgba(0,0,0,0); // 6\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit; // 1\n}\n\n// IE10+ doesn't honor `` in some cases.\n@at-root {\n @-ms-viewport { width: device-width; }\n}\n\n// Shim for \"new\" HTML5 structural elements to display correctly (IE10, older browsers)\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\n// Body\n//\n// 1. Remove the margin in all browsers.\n// 2. As a best practice, apply a default `background-color`.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n font-size: $font-size-base;\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n background-color: $body-bg; // 2\n}\n\n// Suppress the focus outline on elements that cannot be accessed via keyboard.\n// This prevents an unwanted focus outline from appearing around elements that\n// might still respond to pointer events.\n//\n// Credit: https://github.com/suitcss/base\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, `

`-`

` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `

`s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\n// Abbreviations\n//\n// 1. Remove the bottom border in Firefox 39-.\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Duplicate behavior to the data-* attribute for our tooltip plugin\n\nabbr[title],\nabbr[data-original-title] { // 4\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 1\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic; // Add the correct font style in Android 4.3-\n}\n\nb,\nstrong {\n font-weight: bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n font-size: 80%; // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n -webkit-text-decoration-skip: objects; // Remove gaps in links underline in iOS 8+ and Safari 8+.\n\n @include hover {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href)\n// which have not been made explicitly keyboard-focusable (without tabindex).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n\n @include hover-focus {\n color: inherit;\n text-decoration: none;\n }\n\n &:focus {\n outline: 0;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace; // Correct the inheritance and scaling of font size in all browsers.\n font-size: 1em; // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg:not(:root) {\n overflow: hidden; // Hide the overflow in IE\n}\n\n\n// Avoid 300ms click delay on touch devices that support the `touch-action` CSS property.\n//\n// In particular, unlike most other browsers, IE11+Edge on Windows 10 on touch devices and IE Mobile 10-11\n// DON'T remove the click delay when `` is present.\n// However, they DO support removing the click delay via `touch-action: manipulation`.\n// See:\n// * https://v4-alpha.getbootstrap.com/content/reboot/#click-delay-optimization-for-touch\n// * http://caniuse.com/#feat=css-touch-action\n// * https://patrickhlauke.github.io/touch/tests/results/#suppressing-300ms-delay\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $text-muted;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default `` alignment\n text-align: left;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: .5rem;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\nhtml [type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. `

`s, which have `min-width: 0;` by default.\n // So we reset that to ensure fieldsets behave more like a standard block element.\n // See https://github.com/twbs/bootstrap/issues/12359\n // and https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements\n min-width: 0;\n // Reset the default outline behavior of fieldsets so they don't affect page layout.\n padding: 0;\n margin: 0;\n border: 0;\n}\n\n// 1. Correct the text wrapping in Edge and IE.\n// 2. Correct the color inheritance from `fieldset` elements in IE.\nlegend {\n display: block;\n width: 100%;\n max-width: 100%; // 1\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit; // 2\n white-space: normal; // 1\n}\n\nprogress {\n vertical-align: baseline; // Add the correct vertical alignment in Chrome, Firefox, and Opera.\n}\n\n// Correct the cursor style of increment and decrement buttons in Chrome.\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n // This overrides the extra rounded corners on search inputs in iOS so that our\n // `.form-control` class can properly style them. Note that this cannot simply\n // be added to `.form-control` as it's not specific enough. For details, see\n // https://github.com/twbs/bootstrap/issues/11586.\n outline-offset: -2px; // 2. Correct the outline style in Safari.\n -webkit-appearance: none;\n}\n\n//\n// Remove the inner padding and cancel buttons in Chrome and Safari on macOS.\n//\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n//\n// 1. Correct the inability to style clickable types in iOS and Safari.\n// 2. Change font properties to `inherit` in Safari.\n//\n\n::-webkit-file-upload-button {\n font: inherit; // 2\n -webkit-appearance: button; // 1\n}\n\n//\n// Correct element displays\n//\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item; // Add the correct display in all browsers\n}\n\ntemplate {\n display: none; // Add the correct display in IE\n}\n\n// Always hide an element with the `hidden` HTML attribute (from PureCSS).\n// Needed for proper display in IE 10-.\n[hidden] {\n display: none !important;\n}\n","html {\n box-sizing: border-box;\n font-family: sans-serif;\n line-height: 1.15;\n -webkit-text-size-adjust: 100%;\n -ms-text-size-adjust: 100%;\n -ms-overflow-style: scrollbar;\n -webkit-tap-highlight-color: transparent;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@-ms-viewport {\n width: device-width;\n}\n\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\nbody {\n margin: 0;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-size: 1rem;\n font-weight: normal;\n line-height: 1.5;\n color: #212529;\n background-color: #fff;\n}\n\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\nhr {\n box-sizing: content-box;\n height: 0;\n overflow: visible;\n}\n\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nabbr[title],\nabbr[data-original-title] {\n text-decoration: underline;\n text-decoration: underline dotted;\n cursor: help;\n border-bottom: 0;\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: bold;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0;\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic;\n}\n\nb,\nstrong {\n font-weight: bolder;\n}\n\nsmall {\n font-size: 80%;\n}\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub {\n bottom: -.25em;\n}\n\nsup {\n top: -.5em;\n}\n\na {\n color: #007bff;\n text-decoration: none;\n background-color: transparent;\n -webkit-text-decoration-skip: objects;\n}\n\na:hover {\n color: #0056b3;\n text-decoration: underline;\n}\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus {\n outline: 0;\n}\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace;\n font-size: 1em;\n}\n\npre {\n margin-top: 0;\n margin-bottom: 1rem;\n overflow: auto;\n}\n\nfigure {\n margin: 0 0 1rem;\n}\n\nimg {\n vertical-align: middle;\n border-style: none;\n}\n\nsvg:not(:root) {\n overflow: hidden;\n}\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\ntable {\n border-collapse: collapse;\n}\n\ncaption {\n padding-top: 0.75rem;\n padding-bottom: 0.75rem;\n color: #868e96;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n text-align: left;\n}\n\nlabel {\n display: inline-block;\n margin-bottom: .5rem;\n}\n\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0;\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible;\n}\n\nbutton,\nselect {\n text-transform: none;\n}\n\nbutton,\nhtml [type=\"button\"],\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button;\n}\n\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box;\n padding: 0;\n}\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto;\n resize: vertical;\n}\n\nfieldset {\n min-width: 0;\n padding: 0;\n margin: 0;\n border: 0;\n}\n\nlegend {\n display: block;\n width: 100%;\n max-width: 100%;\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit;\n white-space: normal;\n}\n\nprogress {\n vertical-align: baseline;\n}\n\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n outline-offset: -2px;\n -webkit-appearance: none;\n}\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n::-webkit-file-upload-button {\n font: inherit;\n -webkit-appearance: button;\n}\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item;\n}\n\ntemplate {\n display: none;\n}\n\n[hidden] {\n display: none !important;\n}\n\n/*# sourceMappingURL=bootstrap-reboot.css.map */","// Variables\n//\n// Copy settings from this file into the provided `_custom.scss` to override\n// the Bootstrap defaults without modifying key, versioned files.\n//\n// Variables should follow the `$component-state-property-size` formula for\n// consistent naming. Ex: $nav-link-disabled-color and $modal-content-box-shadow-xs.\n\n// Table of Contents\n//\n// Color system\n// Options\n// Spacing\n// Body\n// Links\n// Grid breakpoints\n// Grid containers\n// Grid columns\n// Fonts\n// Components\n// Tables\n// Buttons\n// Forms\n// Dropdowns\n// Z-index master list\n// Navs\n// Navbar\n// Pagination\n// Jumbotron\n// Form states and alerts\n// Cards\n// Tooltips\n// Popovers\n// Badges\n// Modals\n// Alerts\n// Progress bars\n// List group\n// Image thumbnails\n// Figures\n// Breadcrumbs\n// Carousel\n// Close\n// Code\n\n\n//\n// Color system\n//\n\n$white: #fff !default;\n$gray-100: #f8f9fa !default;\n$gray-200: #e9ecef !default;\n$gray-300: #dee2e6 !default;\n$gray-400: #ced4da !default;\n$gray-500: #adb5bd !default;\n$gray-600: #868e96 !default;\n$gray-700: #495057 !default;\n$gray-800: #343a40 !default;\n$gray-900: #212529 !default;\n$black: #000 !default;\n\n$grays: (\n 100: $gray-100,\n 200: $gray-200,\n 300: $gray-300,\n 400: $gray-400,\n 500: $gray-500,\n 600: $gray-600,\n 700: $gray-700,\n 800: $gray-800,\n 900: $gray-900\n) !default;\n\n$blue: #007bff !default;\n$indigo: #6610f2 !default;\n$purple: #6f42c1 !default;\n$pink: #e83e8c !default;\n$red: #dc3545 !default;\n$orange: #fd7e14 !default;\n$yellow: #ffc107 !default;\n$green: #28a745 !default;\n$teal: #20c997 !default;\n$cyan: #17a2b8 !default;\n\n$colors: (\n blue: $blue,\n indigo: $indigo,\n purple: $purple,\n pink: $pink,\n red: $red,\n orange: $orange,\n yellow: $yellow,\n green: $green,\n teal: $teal,\n cyan: $cyan,\n white: $white,\n gray: $gray-600,\n gray-dark: $gray-800\n) !default;\n\n$theme-colors: (\n primary: $blue,\n secondary: $gray-600,\n success: $green,\n info: $cyan,\n warning: $yellow,\n danger: $red,\n light: $gray-100,\n dark: $gray-800\n) !default;\n\n// Set a specific jump point for requesting color jumps\n$theme-color-interval: 8% !default;\n\n\n// Options\n//\n// Quickly modify global styling by enabling or disabling optional features.\n\n$enable-rounded: true !default;\n$enable-shadows: false !default;\n$enable-gradients: false !default;\n$enable-transitions: true !default;\n$enable-hover-media-query: false !default;\n$enable-grid-classes: true !default;\n$enable-print-styles: true !default;\n\n\n// Spacing\n//\n// Control the default styling of most Bootstrap elements by modifying these\n// variables. Mostly focused on spacing.\n// You can add more entries to the $spacers map, should you need more variation.\n\n$spacer: 1rem !default;\n$spacers: (\n 0: 0,\n 1: ($spacer * .25),\n 2: ($spacer * .5),\n 3: $spacer,\n 4: ($spacer * 1.5),\n 5: ($spacer * 3)\n) !default;\n\n// This variable affects the `.h-*` and `.w-*` classes.\n$sizes: (\n 25: 25%,\n 50: 50%,\n 75: 75%,\n 100: 100%\n) !default;\n\n// Body\n//\n// Settings for the `` element.\n\n$body-bg: $white !default;\n$body-color: $gray-900 !default;\n\n// Links\n//\n// Style anchor elements.\n\n$link-color: theme-color(\"primary\") !default;\n$link-decoration: none !default;\n$link-hover-color: darken($link-color, 15%) !default;\n$link-hover-decoration: underline !default;\n\n\n// Grid breakpoints\n//\n// Define the minimum dimensions at which your layout will change,\n// adapting to different screen sizes, for use in media queries.\n\n$grid-breakpoints: (\n xs: 0,\n sm: 576px,\n md: 768px,\n lg: 992px,\n xl: 1200px\n) !default;\n@include _assert-ascending($grid-breakpoints, \"$grid-breakpoints\");\n@include _assert-starts-at-zero($grid-breakpoints);\n\n\n// Grid containers\n//\n// Define the maximum width of `.container` for different screen sizes.\n\n$container-max-widths: (\n sm: 540px,\n md: 720px,\n lg: 960px,\n xl: 1140px\n) !default;\n@include _assert-ascending($container-max-widths, \"$container-max-widths\");\n\n\n// Grid columns\n//\n// Set the number of columns and specify the width of the gutters.\n\n$grid-columns: 12 !default;\n$grid-gutter-width: 30px !default;\n\n// Components\n//\n// Define common padding and border radius sizes and more.\n\n$line-height-lg: 1.5 !default;\n$line-height-sm: 1.5 !default;\n\n$border-width: 1px !default;\n\n$border-radius: .25rem !default;\n$border-radius-lg: .3rem !default;\n$border-radius-sm: .2rem !default;\n\n$component-active-color: $white !default;\n$component-active-bg: theme-color(\"primary\") !default;\n\n$caret-width: .3em !default;\n\n$transition-base: all .2s ease-in-out !default;\n$transition-fade: opacity .15s linear !default;\n$transition-collapse: height .35s ease !default;\n\n\n// Fonts\n//\n// Font, line-height, and color for body text, headings, and more.\n\n$font-family-sans-serif: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif !default;\n$font-family-monospace: Menlo, Monaco, Consolas, \"Liberation Mono\", \"Courier New\", monospace !default;\n$font-family-base: $font-family-sans-serif !default;\n\n$font-size-base: 1rem !default; // Assumes the browser default, typically `16px`\n$font-size-lg: 1.25rem !default;\n$font-size-sm: .875rem !default;\n\n$font-weight-normal: normal !default;\n$font-weight-bold: bold !default;\n\n$font-weight-base: $font-weight-normal !default;\n$line-height-base: 1.5 !default;\n\n$h1-font-size: 2.5rem !default;\n$h2-font-size: 2rem !default;\n$h3-font-size: 1.75rem !default;\n$h4-font-size: 1.5rem !default;\n$h5-font-size: 1.25rem !default;\n$h6-font-size: 1rem !default;\n\n$headings-margin-bottom: ($spacer / 2) !default;\n$headings-font-family: inherit !default;\n$headings-font-weight: 500 !default;\n$headings-line-height: 1.1 !default;\n$headings-color: inherit !default;\n\n$display1-size: 6rem !default;\n$display2-size: 5.5rem !default;\n$display3-size: 4.5rem !default;\n$display4-size: 3.5rem !default;\n\n$display1-weight: 300 !default;\n$display2-weight: 300 !default;\n$display3-weight: 300 !default;\n$display4-weight: 300 !default;\n$display-line-height: $headings-line-height !default;\n\n$lead-font-size: 1.25rem !default;\n$lead-font-weight: 300 !default;\n\n$small-font-size: 80% !default;\n\n$text-muted: $gray-600 !default;\n\n$blockquote-small-color: $gray-600 !default;\n$blockquote-font-size: ($font-size-base * 1.25) !default;\n\n$hr-border-color: rgba($black,.1) !default;\n$hr-border-width: $border-width !default;\n\n$mark-padding: .2em !default;\n\n$dt-font-weight: $font-weight-bold !default;\n\n$kbd-box-shadow: inset 0 -.1rem 0 rgba($black,.25) !default;\n$nested-kbd-font-weight: $font-weight-bold !default;\n\n$list-inline-padding: 5px !default;\n\n$mark-bg: #fcf8e3 !default;\n\n\n// Tables\n//\n// Customizes the `.table` component with basic values, each used across all table variations.\n\n$table-cell-padding: .75rem !default;\n$table-cell-padding-sm: .3rem !default;\n\n$table-bg: transparent !default;\n$table-accent-bg: rgba($black,.05) !default;\n$table-hover-bg: rgba($black,.075) !default;\n$table-active-bg: $table-hover-bg !default;\n\n$table-border-width: $border-width !default;\n$table-border-color: $gray-200 !default;\n\n$table-head-bg: $gray-200 !default;\n$table-head-color: $gray-700 !default;\n\n$table-inverse-bg: $gray-900 !default;\n$table-inverse-accent-bg: rgba($white, .05) !default;\n$table-inverse-hover-bg: rgba($white, .075) !default;\n$table-inverse-border-color: lighten($gray-900, 7.5%) !default;\n$table-inverse-color: $body-bg !default;\n\n\n// Buttons\n//\n// For each of Bootstrap's buttons, define text, background and border color.\n\n$input-btn-padding-y: .5rem !default;\n$input-btn-padding-x: .75rem !default;\n$input-btn-line-height: 1.25 !default;\n\n$input-btn-padding-y-sm: .25rem !default;\n$input-btn-padding-x-sm: .5rem !default;\n$input-btn-line-height-sm: 1.5 !default;\n\n$input-btn-padding-y-lg: .5rem !default;\n$input-btn-padding-x-lg: 1rem !default;\n$input-btn-line-height-lg: 1.5 !default;\n\n$btn-font-weight: $font-weight-normal !default;\n$btn-box-shadow: inset 0 1px 0 rgba($white,.15), 0 1px 1px rgba($black,.075) !default;\n$btn-focus-box-shadow: 0 0 0 3px rgba(theme-color(\"primary\"), .25) !default;\n$btn-active-box-shadow: inset 0 3px 5px rgba($black,.125) !default;\n\n$btn-link-disabled-color: $gray-600 !default;\n\n$btn-block-spacing-y: .5rem !default;\n\n// Allows for customizing button radius independently from global border radius\n$btn-border-radius: $border-radius !default;\n$btn-border-radius-lg: $border-radius-lg !default;\n$btn-border-radius-sm: $border-radius-sm !default;\n\n$btn-transition: all .15s ease-in-out !default;\n\n\n// Forms\n\n$input-bg: $white !default;\n$input-disabled-bg: $gray-200 !default;\n\n$input-color: $gray-700 !default;\n$input-border-color: rgba($black,.15) !default;\n$input-btn-border-width: $border-width !default; // For form controls and buttons\n$input-box-shadow: inset 0 1px 1px rgba($black,.075) !default;\n\n$input-border-radius: $border-radius !default;\n$input-border-radius-lg: $border-radius-lg !default;\n$input-border-radius-sm: $border-radius-sm !default;\n\n$input-focus-bg: $input-bg !default;\n$input-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$input-focus-box-shadow: $input-box-shadow, $btn-focus-box-shadow !default;\n$input-focus-color: $input-color !default;\n\n$input-placeholder-color: $gray-600 !default;\n\n$input-height-border: $input-btn-border-width * 2 !default;\n\n$input-height-inner: ($font-size-base * $input-btn-line-height) + ($input-btn-padding-y * 2) !default;\n$input-height: calc(#{$input-height-inner} + #{$input-height-border}) !default;\n\n$input-height-inner-sm: ($font-size-sm * $input-btn-line-height-sm) + ($input-btn-padding-y-sm * 2) !default;\n$input-height-sm: calc(#{$input-height-inner-sm} + #{$input-height-border}) !default;\n\n$input-height-inner-lg: ($font-size-sm * $input-btn-line-height-lg) + ($input-btn-padding-y-lg * 2) !default;\n$input-height-lg: calc(#{$input-height-inner-lg} + #{$input-height-border}) !default;\n\n$input-transition: border-color ease-in-out .15s, box-shadow ease-in-out .15s !default;\n\n$form-text-margin-top: .25rem !default;\n\n$form-check-margin-bottom: .5rem !default;\n$form-check-input-gutter: 1.25rem !default;\n$form-check-input-margin-y: .25rem !default;\n$form-check-input-margin-x: .25rem !default;\n\n$form-check-inline-margin-x: .75rem !default;\n\n$form-group-margin-bottom: 1rem !default;\n\n$input-group-addon-bg: $gray-200 !default;\n$input-group-addon-border-color: $input-border-color !default;\n\n$custom-control-gutter: 1.5rem !default;\n$custom-control-spacer-y: .25rem !default;\n$custom-control-spacer-x: 1rem !default;\n\n$custom-control-indicator-size: 1rem !default;\n$custom-control-indicator-bg: #ddd !default;\n$custom-control-indicator-bg-size: 50% 50% !default;\n$custom-control-indicator-box-shadow: inset 0 .25rem .25rem rgba($black,.1) !default;\n\n$custom-control-indicator-disabled-bg: $gray-200 !default;\n$custom-control-description-disabled-color: $gray-600 !default;\n\n$custom-control-indicator-checked-color: $white !default;\n$custom-control-indicator-checked-bg: theme-color(\"primary\") !default;\n$custom-control-indicator-checked-box-shadow: none !default;\n\n$custom-control-indicator-focus-box-shadow: 0 0 0 1px $body-bg, 0 0 0 3px theme-color(\"primary\") !default;\n\n$custom-control-indicator-active-color: $white !default;\n$custom-control-indicator-active-bg: lighten(theme-color(\"primary\"), 35%) !default;\n$custom-control-indicator-active-box-shadow: none !default;\n\n$custom-checkbox-indicator-border-radius: $border-radius !default;\n$custom-checkbox-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='#{$custom-control-indicator-checked-color}' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-checkbox-indicator-indeterminate-bg: theme-color(\"primary\") !default;\n$custom-checkbox-indicator-indeterminate-color: $custom-control-indicator-checked-color !default;\n$custom-checkbox-indicator-icon-indeterminate: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='#{$custom-checkbox-indicator-indeterminate-color}' d='M0 2h4'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-checkbox-indicator-indeterminate-box-shadow: none !default;\n\n$custom-radio-indicator-border-radius: 50% !default;\n$custom-radio-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='#{$custom-control-indicator-checked-color}'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-select-padding-y: .375rem !default;\n$custom-select-padding-x: .75rem !default;\n$custom-select-height: $input-height !default;\n$custom-select-indicator-padding: 1rem !default; // Extra padding to account for the presence of the background-image based indicator\n$custom-select-line-height: $input-btn-line-height !default;\n$custom-select-color: $input-color !default;\n$custom-select-disabled-color: $gray-600 !default;\n$custom-select-bg: $white !default;\n$custom-select-disabled-bg: $gray-200 !default;\n$custom-select-bg-size: 8px 10px !default; // In pixels because image dimensions\n$custom-select-indicator-color: #333 !default;\n$custom-select-indicator: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='#{$custom-select-indicator-color}' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-select-border-width: $input-btn-border-width !default;\n$custom-select-border-color: $input-border-color !default;\n$custom-select-border-radius: $border-radius !default;\n\n$custom-select-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$custom-select-focus-box-shadow: inset 0 1px 2px rgba($black, .075), 0 0 5px rgba($custom-select-focus-border-color, .5) !default;\n\n$custom-select-font-size-sm: 75% !default;\n$custom-select-height-sm: $input-height-sm !default;\n\n$custom-file-height: 2.5rem !default;\n$custom-file-width: 14rem !default;\n$custom-file-focus-box-shadow: 0 0 0 .075rem $white, 0 0 0 .2rem theme-color(\"primary\") !default;\n\n$custom-file-padding-y: 1rem !default;\n$custom-file-padding-x: .5rem !default;\n$custom-file-line-height: 1.5 !default;\n$custom-file-color: $gray-700 !default;\n$custom-file-bg: $white !default;\n$custom-file-border-width: $border-width !default;\n$custom-file-border-color: $input-border-color !default;\n$custom-file-border-radius: $border-radius !default;\n$custom-file-box-shadow: inset 0 .2rem .4rem rgba($black,.05) !default;\n$custom-file-button-color: $custom-file-color !default;\n$custom-file-button-bg: $gray-200 !default;\n$custom-file-text: (\n placeholder: (\n en: \"Choose file...\"\n ),\n button-label: (\n en: \"Browse\"\n )\n) !default;\n\n\n// Form validation\n$form-feedback-valid-color: theme-color(\"success\") !default;\n$form-feedback-invalid-color: theme-color(\"danger\") !default;\n\n\n// Dropdowns\n//\n// Dropdown menu container and contents.\n\n$dropdown-min-width: 10rem !default;\n$dropdown-padding-y: .5rem !default;\n$dropdown-spacer: .125rem !default;\n$dropdown-bg: $white !default;\n$dropdown-border-color: rgba($black,.15) !default;\n$dropdown-border-width: $border-width !default;\n$dropdown-divider-bg: $gray-200 !default;\n$dropdown-box-shadow: 0 .5rem 1rem rgba($black,.175) !default;\n\n$dropdown-link-color: $gray-900 !default;\n$dropdown-link-hover-color: darken($gray-900, 5%) !default;\n$dropdown-link-hover-bg: $gray-100 !default;\n\n$dropdown-link-active-color: $component-active-color !default;\n$dropdown-link-active-bg: $component-active-bg !default;\n\n$dropdown-link-disabled-color: $gray-600 !default;\n\n$dropdown-item-padding-y: .25rem !default;\n$dropdown-item-padding-x: 1.5rem !default;\n\n$dropdown-header-color: $gray-600 !default;\n\n\n// Z-index master list\n//\n// Warning: Avoid customizing these values. They're used for a bird's eye view\n// of components dependent on the z-axis and are designed to all work together.\n\n$zindex-dropdown: 1000 !default;\n$zindex-sticky: 1020 !default;\n$zindex-fixed: 1030 !default;\n$zindex-modal-backdrop: 1040 !default;\n$zindex-modal: 1050 !default;\n$zindex-popover: 1060 !default;\n$zindex-tooltip: 1070 !default;\n\n// Navs\n\n$nav-link-padding-y: .5rem !default;\n$nav-link-padding-x: 1rem !default;\n$nav-link-disabled-color: $gray-600 !default;\n\n$nav-tabs-border-color: #ddd !default;\n$nav-tabs-border-width: $border-width !default;\n$nav-tabs-border-radius: $border-radius !default;\n$nav-tabs-link-hover-border-color: $gray-200 !default;\n$nav-tabs-link-active-color: $gray-700 !default;\n$nav-tabs-link-active-bg: $body-bg !default;\n$nav-tabs-link-active-border-color: #ddd !default;\n\n$nav-pills-border-radius: $border-radius !default;\n$nav-pills-link-active-color: $component-active-color !default;\n$nav-pills-link-active-bg: $component-active-bg !default;\n\n// Navbar\n\n$navbar-padding-y: ($spacer / 2) !default;\n$navbar-padding-x: $spacer !default;\n\n$navbar-brand-font-size: $font-size-lg !default;\n// Compute the navbar-brand padding-y so the navbar-brand will have the same height as navbar-text and nav-link\n$nav-link-height: $navbar-brand-font-size * $line-height-base !default;\n$navbar-brand-height: ($font-size-base * $line-height-base + $nav-link-padding-y * 2) !default;\n$navbar-brand-padding-y: ($navbar-brand-height - $nav-link-height) / 2 !default;\n\n$navbar-toggler-padding-y: .25rem !default;\n$navbar-toggler-padding-x: .75rem !default;\n$navbar-toggler-font-size: $font-size-lg !default;\n$navbar-toggler-border-radius: $btn-border-radius !default;\n\n$navbar-dark-color: rgba($white,.5) !default;\n$navbar-dark-hover-color: rgba($white,.75) !default;\n$navbar-dark-active-color: rgba($white,1) !default;\n$navbar-dark-disabled-color: rgba($white,.25) !default;\n$navbar-dark-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-dark-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-dark-toggler-border-color: rgba($white,.1) !default;\n\n$navbar-light-color: rgba($black,.5) !default;\n$navbar-light-hover-color: rgba($black,.7) !default;\n$navbar-light-active-color: rgba($black,.9) !default;\n$navbar-light-disabled-color: rgba($black,.3) !default;\n$navbar-light-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-light-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-light-toggler-border-color: rgba($black,.1) !default;\n\n// Pagination\n\n$pagination-padding-y: .5rem !default;\n$pagination-padding-x: .75rem !default;\n$pagination-padding-y-sm: .25rem !default;\n$pagination-padding-x-sm: .5rem !default;\n$pagination-padding-y-lg: .75rem !default;\n$pagination-padding-x-lg: 1.5rem !default;\n$pagination-line-height: 1.25 !default;\n\n$pagination-color: $link-color !default;\n$pagination-bg: $white !default;\n$pagination-border-width: $border-width !default;\n$pagination-border-color: #ddd !default;\n\n$pagination-hover-color: $link-hover-color !default;\n$pagination-hover-bg: $gray-200 !default;\n$pagination-hover-border-color: #ddd !default;\n\n$pagination-active-color: $white !default;\n$pagination-active-bg: theme-color(\"primary\") !default;\n$pagination-active-border-color: theme-color(\"primary\") !default;\n\n$pagination-disabled-color: $gray-600 !default;\n$pagination-disabled-bg: $white !default;\n$pagination-disabled-border-color: #ddd !default;\n\n\n// Jumbotron\n\n$jumbotron-padding: 2rem !default;\n$jumbotron-bg: $gray-200 !default;\n\n\n// Cards\n\n$card-spacer-y: .75rem !default;\n$card-spacer-x: 1.25rem !default;\n$card-border-width: 1px !default;\n$card-border-radius: $border-radius !default;\n$card-border-color: rgba($black,.125) !default;\n$card-inner-border-radius: calc(#{$card-border-radius} - #{$card-border-width}) !default;\n$card-cap-bg: rgba($black, .03) !default;\n$card-bg: $white !default;\n\n$card-img-overlay-padding: 1.25rem !default;\n\n$card-deck-margin: ($grid-gutter-width / 2) !default;\n\n$card-columns-count: 3 !default;\n$card-columns-gap: 1.25rem !default;\n$card-columns-margin: $card-spacer-y !default;\n\n\n// Tooltips\n\n$tooltip-max-width: 200px !default;\n$tooltip-color: $white !default;\n$tooltip-bg: $black !default;\n$tooltip-opacity: .9 !default;\n$tooltip-padding-y: 3px !default;\n$tooltip-padding-x: 8px !default;\n$tooltip-margin: 0 !default;\n\n\n$tooltip-arrow-width: 5px !default;\n$tooltip-arrow-height: 5px !default;\n$tooltip-arrow-color: $tooltip-bg !default;\n\n\n// Popovers\n\n$popover-inner-padding: 1px !default;\n$popover-bg: $white !default;\n$popover-max-width: 276px !default;\n$popover-border-width: $border-width !default;\n$popover-border-color: rgba($black,.2) !default;\n$popover-box-shadow: 0 5px 10px rgba($black,.2) !default;\n\n$popover-header-bg: darken($popover-bg, 3%) !default;\n$popover-header-color: $headings-color !default;\n$popover-header-padding-y: 8px !default;\n$popover-header-padding-x: 14px !default;\n\n$popover-body-color: $body-color !default;\n$popover-body-padding-y: 9px !default;\n$popover-body-padding-x: 14px !default;\n\n$popover-arrow-width: 10px !default;\n$popover-arrow-height: 5px !default;\n$popover-arrow-color: $popover-bg !default;\n\n$popover-arrow-outer-width: ($popover-arrow-width + 1px) !default;\n$popover-arrow-outer-color: fade-in($popover-border-color, .05) !default;\n\n\n// Badges\n\n$badge-color: $white !default;\n$badge-font-size: 75% !default;\n$badge-font-weight: $font-weight-bold !default;\n$badge-padding-y: .25em !default;\n$badge-padding-x: .4em !default;\n\n$badge-pill-padding-x: .6em !default;\n// Use a higher than normal value to ensure completely rounded edges when\n// customizing padding or font-size on labels.\n$badge-pill-border-radius: 10rem !default;\n\n\n// Modals\n\n// Padding applied to the modal body\n$modal-inner-padding: 15px !default;\n\n$modal-dialog-margin: 10px !default;\n$modal-dialog-margin-y-sm-up: 30px !default;\n\n$modal-title-line-height: $line-height-base !default;\n\n$modal-content-bg: $white !default;\n$modal-content-border-color: rgba($black,.2) !default;\n$modal-content-border-width: $border-width !default;\n$modal-content-box-shadow-xs: 0 3px 9px rgba($black,.5) !default;\n$modal-content-box-shadow-sm-up: 0 5px 15px rgba($black,.5) !default;\n\n$modal-backdrop-bg: $black !default;\n$modal-backdrop-opacity: .5 !default;\n$modal-header-border-color: $gray-200 !default;\n$modal-footer-border-color: $modal-header-border-color !default;\n$modal-header-border-width: $modal-content-border-width !default;\n$modal-footer-border-width: $modal-header-border-width !default;\n$modal-header-padding: 15px !default;\n\n$modal-lg: 800px !default;\n$modal-md: 500px !default;\n$modal-sm: 300px !default;\n\n$modal-transition: transform .3s ease-out !default;\n\n\n// Alerts\n//\n// Define alert colors, border radius, and padding.\n\n$alert-padding-y: .75rem !default;\n$alert-padding-x: 1.25rem !default;\n$alert-margin-bottom: 1rem !default;\n$alert-border-radius: $border-radius !default;\n$alert-link-font-weight: $font-weight-bold !default;\n$alert-border-width: $border-width !default;\n\n\n// Progress bars\n\n$progress-height: 1rem !default;\n$progress-font-size: .75rem !default;\n$progress-bg: $gray-200 !default;\n$progress-border-radius: $border-radius !default;\n$progress-box-shadow: inset 0 .1rem .1rem rgba($black,.1) !default;\n$progress-bar-color: $white !default;\n$progress-bar-bg: theme-color(\"primary\") !default;\n$progress-bar-animation-timing: 1s linear infinite !default;\n$progress-bar-transition: width .6s ease !default;\n\n// List group\n\n$list-group-bg: $white !default;\n$list-group-border-color: rgba($black,.125) !default;\n$list-group-border-width: $border-width !default;\n$list-group-border-radius: $border-radius !default;\n\n$list-group-item-padding-y: .75rem !default;\n$list-group-item-padding-x: 1.25rem !default;\n\n$list-group-hover-bg: $gray-100 !default;\n$list-group-active-color: $component-active-color !default;\n$list-group-active-bg: $component-active-bg !default;\n$list-group-active-border-color: $list-group-active-bg !default;\n\n$list-group-disabled-color: $gray-600 !default;\n$list-group-disabled-bg: $list-group-bg !default;\n\n$list-group-action-color: $gray-700 !default;\n$list-group-action-hover-color: $list-group-action-color !default;\n\n$list-group-action-active-color: $body-color !default;\n$list-group-action-active-bg: $gray-200 !default;\n\n\n// Image thumbnails\n\n$thumbnail-padding: .25rem !default;\n$thumbnail-bg: $body-bg !default;\n$thumbnail-border-width: $border-width !default;\n$thumbnail-border-color: #ddd !default;\n$thumbnail-border-radius: $border-radius !default;\n$thumbnail-box-shadow: 0 1px 2px rgba($black,.075) !default;\n$thumbnail-transition: all .2s ease-in-out !default;\n\n\n// Figures\n\n$figure-caption-font-size: 90% !default;\n$figure-caption-color: $gray-600 !default;\n\n\n// Breadcrumbs\n\n$breadcrumb-padding-y: .75rem !default;\n$breadcrumb-padding-x: 1rem !default;\n$breadcrumb-item-padding: .5rem !default;\n\n$breadcrumb-bg: $gray-200 !default;\n$breadcrumb-divider-color: $gray-600 !default;\n$breadcrumb-active-color: $gray-600 !default;\n$breadcrumb-divider: \"/\" !default;\n\n\n// Carousel\n\n$carousel-control-color: $white !default;\n$carousel-control-width: 15% !default;\n$carousel-control-opacity: .5 !default;\n\n$carousel-indicator-width: 30px !default;\n$carousel-indicator-height: 3px !default;\n$carousel-indicator-spacer: 3px !default;\n$carousel-indicator-active-bg: $white !default;\n\n$carousel-caption-width: 70% !default;\n$carousel-caption-color: $white !default;\n\n$carousel-control-icon-width: 20px !default;\n\n$carousel-control-prev-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M4 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$carousel-control-next-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M1.5 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$carousel-transition: transform .6s ease !default;\n\n\n// Close\n\n$close-font-size: $font-size-base * 1.5 !default;\n$close-font-weight: $font-weight-bold !default;\n$close-color: $black !default;\n$close-text-shadow: 0 1px 0 $white !default;\n\n// Code\n\n$code-font-size: 90% !default;\n$code-padding-y: .2rem !default;\n$code-padding-x: .4rem !default;\n$code-color: #bd4147 !default;\n$code-bg: $gray-100 !default;\n\n$kbd-color: $white !default;\n$kbd-bg: $gray-900 !default;\n\n$pre-color: $gray-900 !default;\n$pre-scrollable-max-height: 340px !default;\n","@mixin hover {\n // TODO: re-enable along with mq4-hover-shim\n// @if $enable-hover-media-query {\n// // See Media Queries Level 4: https://drafts.csswg.org/mediaqueries/#hover\n// // Currently shimmed by https://github.com/twbs/mq4-hover-shim\n// @media (hover: hover) {\n// &:hover { @content }\n// }\n// }\n// @else {\n// scss-lint:disable Indentation\n &:hover { @content }\n// scss-lint:enable Indentation\n// }\n}\n\n\n@mixin hover-focus {\n @if $enable-hover-media-query {\n &:focus { @content }\n @include hover { @content }\n } @else {\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin plain-hover-focus {\n @if $enable-hover-media-query {\n &,\n &:focus {\n @content\n }\n @include hover { @content }\n } @else {\n &,\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin hover-focus-active {\n @if $enable-hover-media-query {\n &:focus,\n &:active {\n @content\n }\n @include hover { @content }\n } @else {\n &:focus,\n &:active,\n &:hover {\n @content\n }\n }\n}\n"]} \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css new file mode 100644 index 0000000..4ee4a40 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css @@ -0,0 +1,2 @@ +html{box-sizing:border-box;font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;-ms-overflow-style:scrollbar;-webkit-tap-highlight-color:transparent}*,::after,::before{box-sizing:inherit}@-ms-viewport{width:device-width}article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;font-size:1rem;font-weight:400;line-height:1.5;color:#212529;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}dfn{font-style:italic}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent;-webkit-text-decoration-skip:objects}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg:not(:root){overflow:hidden}[role=button],a,area,button,input,label,select,summary,textarea{-ms-touch-action:manipulation;touch-action:manipulation}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#868e96;text-align:left;caption-side:bottom}th{text-align:left}label{display:inline-block;margin-bottom:.5rem}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item}template{display:none}[hidden]{display:none!important} +/*# sourceMappingURL=bootstrap-reboot.min.css.map */ \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css.map b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css.map new file mode 100644 index 0000000..d461cb5 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap-reboot.min.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["../../scss/_reboot.scss","dist/css/bootstrap-reboot.css","bootstrap-reboot.css","../../scss/mixins/_hover.scss"],"names":[],"mappings":"AAoBA,KACE,WAAA,WACA,YAAA,WACA,YAAA,KACA,yBAAA,KACA,qBAAA,KACA,mBAAA,UACA,4BAAA,YAGF,EClBA,QADA,SDsBE,WAAA,QAKA,cAAgB,MAAA,aAIlB,QAAA,MAAA,OAAA,WAAA,OAAA,OAAA,OAAA,OAAA,KAAA,IAAA,QACE,QAAA,MAQF,KACE,OAAA,EACA,YAAA,aAAA,CAAA,kBAAA,CAAA,UAAA,CAAA,MAAA,CAAA,gBAAA,CAAA,KAAA,CAAA,WACA,UAAA,KACA,YAAA,IACA,YAAA,IACA,MAAA,QACA,iBAAA,KExBF,sBFiCE,QAAA,YASF,GACE,WAAA,YACA,OAAA,EACA,SAAA,QAYF,GAAA,GAAA,GAAA,GAAA,GAAA,GACE,WAAA,EACA,cAAA,MAOF,EACE,WAAA,EACA,cAAA,KC/CF,0BDyDA,YAEE,gBAAA,UACA,wBAAA,UAAA,OAAA,gBAAA,UAAA,OACA,OAAA,KACA,cAAA,EAGF,QACE,cAAA,KACA,WAAA,OACA,YAAA,QCpDF,GDuDA,GCxDA,GD2DE,WAAA,EACA,cAAA,KAGF,MCvDA,MACA,MAFA,MD4DE,cAAA,EAGF,GACE,YAAA,IAGF,GACE,cAAA,MACA,YAAA,EAGF,WACE,OAAA,EAAA,EAAA,KAGF,IACE,WAAA,OAGF,ECxDA,OD0DE,YAAA,OAGF,MACE,UAAA,IAQF,IC7DA,ID+DE,SAAA,SACA,UAAA,IACA,YAAA,EACA,eAAA,SAGF,IAAM,OAAA,OACN,IAAM,IAAA,MAON,EACE,MAAA,QACA,gBAAA,KACA,iBAAA,YACA,6BAAA,QGpLE,QHuLA,MAAA,QACA,gBAAA,UAUJ,8BACE,MAAA,QACA,gBAAA,KGzLE,oCAAA,oCH4LA,MAAA,QACA,gBAAA,KANJ,oCAUI,QAAA,EC/DJ,KACA,IDuEA,ICtEA,KD0EE,YAAA,SAAA,CAAA,UACA,UAAA,IAGF,IAEE,WAAA,EAEA,cAAA,KAEA,SAAA,KAQF,OAEE,OAAA,EAAA,EAAA,KAQF,IACE,eAAA,OACA,aAAA,KAGF,eACE,SAAA,OCjFF,cD+FA,ECjGA,KACA,OAEA,MACA,MACA,OACA,QACA,SDmGE,iBAAA,aAAA,aAAA,aAQF,MACE,gBAAA,SAGF,QACE,YAAA,OACA,eAAA,OACA,MAAA,QACA,WAAA,KACA,aAAA,OAGF,GAEE,WAAA,KAQF,MAEE,QAAA,aACA,cAAA,MAOF,aACE,QAAA,IAAA,OACA,QAAA,IAAA,KAAA,yBC7GF,ODgHA,MC9GA,SADA,OAEA,SDkHE,OAAA,EACA,YAAA,QACA,UAAA,QACA,YAAA,QAGF,OChHA,MDkHE,SAAA,QAGF,OChHA,ODkHE,eAAA,KC5GF,aACA,cDiHA,OCnHA,mBDuHE,mBAAA,OChHF,gCACA,+BACA,gCDkHA,yBAIE,QAAA,EACA,aAAA,KCjHF,qBDoHA,kBAEE,WAAA,WACA,QAAA,EAIF,iBCpHA,2BACA,kBAFA,iBD8HE,mBAAA,QAGF,SACE,SAAA,KAEA,OAAA,SAGF,SAME,UAAA,EAEA,QAAA,EACA,OAAA,EACA,OAAA,EAKF,OACE,QAAA,MACA,MAAA,KACA,UAAA,KACA,QAAA,EACA,cAAA,MACA,UAAA,OACA,YAAA,QACA,MAAA,QACA,YAAA,OAGF,SACE,eAAA,SEnIF,yCDGA,yCDsIE,OAAA,KEpIF,cF4IE,eAAA,KACA,mBAAA,KExIF,4CDGA,yCD8IE,mBAAA,KAQF,6BACE,KAAA,QACA,mBAAA,OAOF,OACE,QAAA,aAGF,QACE,QAAA,UAGF,SACE,QAAA,KErJF,SF2JE,QAAA","sourcesContent":["// scss-lint:disable QualifyingElement, DuplicateProperty, VendorPrefix\n\n// Reboot\n//\n// Normalization of HTML elements, manually forked from Normalize.css to remove\n// styles targeting irrelevant browsers while applying new styles.\n//\n// Normalize is licensed MIT. https://github.com/necolas/normalize.css\n\n\n// Document\n//\n// 1. Change from `box-sizing: content-box` so that `width` is not affected by `padding` or `border`.\n// 2. Change the default font family in all browsers.\n// 3. Correct the line height in all browsers.\n// 4. Prevent adjustments of font size after orientation changes in IE on Windows Phone and in iOS.\n// 5. Setting @viewport causes scrollbars to overlap content in IE11 and Edge, so\n// we force a non-overlapping, non-auto-hiding scrollbar to counteract.\n// 6. Change the default tap highlight to be completely transparent in iOS.\n\nhtml {\n box-sizing: border-box; // 1\n font-family: sans-serif; // 2\n line-height: 1.15; // 3\n -webkit-text-size-adjust: 100%; // 4\n -ms-text-size-adjust: 100%; // 4\n -ms-overflow-style: scrollbar; // 5\n -webkit-tap-highlight-color: rgba(0,0,0,0); // 6\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit; // 1\n}\n\n// IE10+ doesn't honor `` in some cases.\n@at-root {\n @-ms-viewport { width: device-width; }\n}\n\n// Shim for \"new\" HTML5 structural elements to display correctly (IE10, older browsers)\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\n// Body\n//\n// 1. Remove the margin in all browsers.\n// 2. As a best practice, apply a default `background-color`.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n font-size: $font-size-base;\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n background-color: $body-bg; // 2\n}\n\n// Suppress the focus outline on elements that cannot be accessed via keyboard.\n// This prevents an unwanted focus outline from appearing around elements that\n// might still respond to pointer events.\n//\n// Credit: https://github.com/suitcss/base\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, `

`-`

` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `

`s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\n// Abbreviations\n//\n// 1. Remove the bottom border in Firefox 39-.\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Duplicate behavior to the data-* attribute for our tooltip plugin\n\nabbr[title],\nabbr[data-original-title] { // 4\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 1\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic; // Add the correct font style in Android 4.3-\n}\n\nb,\nstrong {\n font-weight: bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n font-size: 80%; // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n -webkit-text-decoration-skip: objects; // Remove gaps in links underline in iOS 8+ and Safari 8+.\n\n @include hover {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href)\n// which have not been made explicitly keyboard-focusable (without tabindex).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n\n @include hover-focus {\n color: inherit;\n text-decoration: none;\n }\n\n &:focus {\n outline: 0;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace; // Correct the inheritance and scaling of font size in all browsers.\n font-size: 1em; // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg:not(:root) {\n overflow: hidden; // Hide the overflow in IE\n}\n\n\n// Avoid 300ms click delay on touch devices that support the `touch-action` CSS property.\n//\n// In particular, unlike most other browsers, IE11+Edge on Windows 10 on touch devices and IE Mobile 10-11\n// DON'T remove the click delay when `` is present.\n// However, they DO support removing the click delay via `touch-action: manipulation`.\n// See:\n// * https://v4-alpha.getbootstrap.com/content/reboot/#click-delay-optimization-for-touch\n// * http://caniuse.com/#feat=css-touch-action\n// * https://patrickhlauke.github.io/touch/tests/results/#suppressing-300ms-delay\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $text-muted;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default `` alignment\n text-align: left;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: .5rem;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\nhtml [type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. `

`s, which have `min-width: 0;` by default.\n // So we reset that to ensure fieldsets behave more like a standard block element.\n // See https://github.com/twbs/bootstrap/issues/12359\n // and https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements\n min-width: 0;\n // Reset the default outline behavior of fieldsets so they don't affect page layout.\n padding: 0;\n margin: 0;\n border: 0;\n}\n\n// 1. Correct the text wrapping in Edge and IE.\n// 2. Correct the color inheritance from `fieldset` elements in IE.\nlegend {\n display: block;\n width: 100%;\n max-width: 100%; // 1\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit; // 2\n white-space: normal; // 1\n}\n\nprogress {\n vertical-align: baseline; // Add the correct vertical alignment in Chrome, Firefox, and Opera.\n}\n\n// Correct the cursor style of increment and decrement buttons in Chrome.\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n // This overrides the extra rounded corners on search inputs in iOS so that our\n // `.form-control` class can properly style them. Note that this cannot simply\n // be added to `.form-control` as it's not specific enough. For details, see\n // https://github.com/twbs/bootstrap/issues/11586.\n outline-offset: -2px; // 2. Correct the outline style in Safari.\n -webkit-appearance: none;\n}\n\n//\n// Remove the inner padding and cancel buttons in Chrome and Safari on macOS.\n//\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n//\n// 1. Correct the inability to style clickable types in iOS and Safari.\n// 2. Change font properties to `inherit` in Safari.\n//\n\n::-webkit-file-upload-button {\n font: inherit; // 2\n -webkit-appearance: button; // 1\n}\n\n//\n// Correct element displays\n//\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item; // Add the correct display in all browsers\n}\n\ntemplate {\n display: none; // Add the correct display in IE\n}\n\n// Always hide an element with the `hidden` HTML attribute (from PureCSS).\n// Needed for proper display in IE 10-.\n[hidden] {\n display: none !important;\n}\n","html {\n box-sizing: border-box;\n font-family: sans-serif;\n line-height: 1.15;\n -webkit-text-size-adjust: 100%;\n -ms-text-size-adjust: 100%;\n -ms-overflow-style: scrollbar;\n -webkit-tap-highlight-color: transparent;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@-ms-viewport {\n width: device-width;\n}\n\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\nbody {\n margin: 0;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-size: 1rem;\n font-weight: normal;\n line-height: 1.5;\n color: #212529;\n background-color: #fff;\n}\n\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\nhr {\n box-sizing: content-box;\n height: 0;\n overflow: visible;\n}\n\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nabbr[title],\nabbr[data-original-title] {\n text-decoration: underline;\n -webkit-text-decoration: underline dotted;\n text-decoration: underline dotted;\n cursor: help;\n border-bottom: 0;\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: bold;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0;\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic;\n}\n\nb,\nstrong {\n font-weight: bolder;\n}\n\nsmall {\n font-size: 80%;\n}\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub {\n bottom: -.25em;\n}\n\nsup {\n top: -.5em;\n}\n\na {\n color: #007bff;\n text-decoration: none;\n background-color: transparent;\n -webkit-text-decoration-skip: objects;\n}\n\na:hover {\n color: #0056b3;\n text-decoration: underline;\n}\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus {\n outline: 0;\n}\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace;\n font-size: 1em;\n}\n\npre {\n margin-top: 0;\n margin-bottom: 1rem;\n overflow: auto;\n}\n\nfigure {\n margin: 0 0 1rem;\n}\n\nimg {\n vertical-align: middle;\n border-style: none;\n}\n\nsvg:not(:root) {\n overflow: hidden;\n}\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n -ms-touch-action: manipulation;\n touch-action: manipulation;\n}\n\ntable {\n border-collapse: collapse;\n}\n\ncaption {\n padding-top: 0.75rem;\n padding-bottom: 0.75rem;\n color: #868e96;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n text-align: left;\n}\n\nlabel {\n display: inline-block;\n margin-bottom: .5rem;\n}\n\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0;\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible;\n}\n\nbutton,\nselect {\n text-transform: none;\n}\n\nbutton,\nhtml [type=\"button\"],\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button;\n}\n\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box;\n padding: 0;\n}\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto;\n resize: vertical;\n}\n\nfieldset {\n min-width: 0;\n padding: 0;\n margin: 0;\n border: 0;\n}\n\nlegend {\n display: block;\n width: 100%;\n max-width: 100%;\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit;\n white-space: normal;\n}\n\nprogress {\n vertical-align: baseline;\n}\n\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n outline-offset: -2px;\n -webkit-appearance: none;\n}\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n::-webkit-file-upload-button {\n font: inherit;\n -webkit-appearance: button;\n}\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item;\n}\n\ntemplate {\n display: none;\n}\n\n[hidden] {\n display: none !important;\n}\n/*# sourceMappingURL=bootstrap-reboot.css.map */","html {\n box-sizing: border-box;\n font-family: sans-serif;\n line-height: 1.15;\n -webkit-text-size-adjust: 100%;\n -ms-text-size-adjust: 100%;\n -ms-overflow-style: scrollbar;\n -webkit-tap-highlight-color: transparent;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@-ms-viewport {\n width: device-width;\n}\n\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\nbody {\n margin: 0;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-size: 1rem;\n font-weight: normal;\n line-height: 1.5;\n color: #212529;\n background-color: #fff;\n}\n\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\nhr {\n box-sizing: content-box;\n height: 0;\n overflow: visible;\n}\n\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nabbr[title],\nabbr[data-original-title] {\n text-decoration: underline;\n text-decoration: underline dotted;\n cursor: help;\n border-bottom: 0;\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: bold;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0;\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic;\n}\n\nb,\nstrong {\n font-weight: bolder;\n}\n\nsmall {\n font-size: 80%;\n}\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub {\n bottom: -.25em;\n}\n\nsup {\n top: -.5em;\n}\n\na {\n color: #007bff;\n text-decoration: none;\n background-color: transparent;\n -webkit-text-decoration-skip: objects;\n}\n\na:hover {\n color: #0056b3;\n text-decoration: underline;\n}\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus {\n outline: 0;\n}\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace;\n font-size: 1em;\n}\n\npre {\n margin-top: 0;\n margin-bottom: 1rem;\n overflow: auto;\n}\n\nfigure {\n margin: 0 0 1rem;\n}\n\nimg {\n vertical-align: middle;\n border-style: none;\n}\n\nsvg:not(:root) {\n overflow: hidden;\n}\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\ntable {\n border-collapse: collapse;\n}\n\ncaption {\n padding-top: 0.75rem;\n padding-bottom: 0.75rem;\n color: #868e96;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n text-align: left;\n}\n\nlabel {\n display: inline-block;\n margin-bottom: .5rem;\n}\n\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0;\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible;\n}\n\nbutton,\nselect {\n text-transform: none;\n}\n\nbutton,\nhtml [type=\"button\"],\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button;\n}\n\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box;\n padding: 0;\n}\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto;\n resize: vertical;\n}\n\nfieldset {\n min-width: 0;\n padding: 0;\n margin: 0;\n border: 0;\n}\n\nlegend {\n display: block;\n width: 100%;\n max-width: 100%;\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit;\n white-space: normal;\n}\n\nprogress {\n vertical-align: baseline;\n}\n\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n outline-offset: -2px;\n -webkit-appearance: none;\n}\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n::-webkit-file-upload-button {\n font: inherit;\n -webkit-appearance: button;\n}\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item;\n}\n\ntemplate {\n display: none;\n}\n\n[hidden] {\n display: none !important;\n}\n\n/*# sourceMappingURL=bootstrap-reboot.css.map */","@mixin hover {\n // TODO: re-enable along with mq4-hover-shim\n// @if $enable-hover-media-query {\n// // See Media Queries Level 4: https://drafts.csswg.org/mediaqueries/#hover\n// // Currently shimmed by https://github.com/twbs/mq4-hover-shim\n// @media (hover: hover) {\n// &:hover { @content }\n// }\n// }\n// @else {\n// scss-lint:disable Indentation\n &:hover { @content }\n// scss-lint:enable Indentation\n// }\n}\n\n\n@mixin hover-focus {\n @if $enable-hover-media-query {\n &:focus { @content }\n @include hover { @content }\n } @else {\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin plain-hover-focus {\n @if $enable-hover-media-query {\n &,\n &:focus {\n @content\n }\n @include hover { @content }\n } @else {\n &,\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin hover-focus-active {\n @if $enable-hover-media-query {\n &:focus,\n &:active {\n @content\n }\n @include hover { @content }\n } @else {\n &:focus,\n &:active,\n &:hover {\n @content\n }\n }\n}\n"]} \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css new file mode 100644 index 0000000..b39107f --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css @@ -0,0 +1,8185 @@ +/*! + * Bootstrap v4.0.0-beta (https://getbootstrap.com) + * Copyright 2011-2017 The Bootstrap Authors + * Copyright 2011-2017 Twitter, Inc. + * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) + */ +@media print { + *, + *::before, + *::after { + text-shadow: none !important; + box-shadow: none !important; + } + a, + a:visited { + text-decoration: underline; + } + abbr[title]::after { + content: " (" attr(title) ")"; + } + pre { + white-space: pre-wrap !important; + } + pre, + blockquote { + border: 1px solid #999; + page-break-inside: avoid; + } + thead { + display: table-header-group; + } + tr, + img { + page-break-inside: avoid; + } + p, + h2, + h3 { + orphans: 3; + widows: 3; + } + h2, + h3 { + page-break-after: avoid; + } + .navbar { + display: none; + } + .badge { + border: 1px solid #000; + } + .table { + border-collapse: collapse !important; + } + .table td, + .table th { + background-color: #fff !important; + } + .table-bordered th, + .table-bordered td { + border: 1px solid #ddd !important; + } +} + +html { + box-sizing: border-box; + font-family: sans-serif; + line-height: 1.15; + -webkit-text-size-adjust: 100%; + -ms-text-size-adjust: 100%; + -ms-overflow-style: scrollbar; + -webkit-tap-highlight-color: transparent; +} + +*, +*::before, +*::after { + box-sizing: inherit; +} + +@-ms-viewport { + width: device-width; +} + +article, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section { + display: block; +} + +body { + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; + font-size: 1rem; + font-weight: normal; + line-height: 1.5; + color: #212529; + background-color: #fff; +} + +[tabindex="-1"]:focus { + outline: none !important; +} + +hr { + box-sizing: content-box; + height: 0; + overflow: visible; +} + +h1, h2, h3, h4, h5, h6 { + margin-top: 0; + margin-bottom: .5rem; +} + +p { + margin-top: 0; + margin-bottom: 1rem; +} + +abbr[title], +abbr[data-original-title] { + text-decoration: underline; + -webkit-text-decoration: underline dotted; + text-decoration: underline dotted; + cursor: help; + border-bottom: 0; +} + +address { + margin-bottom: 1rem; + font-style: normal; + line-height: inherit; +} + +ol, +ul, +dl { + margin-top: 0; + margin-bottom: 1rem; +} + +ol ol, +ul ul, +ol ul, +ul ol { + margin-bottom: 0; +} + +dt { + font-weight: bold; +} + +dd { + margin-bottom: .5rem; + margin-left: 0; +} + +blockquote { + margin: 0 0 1rem; +} + +dfn { + font-style: italic; +} + +b, +strong { + font-weight: bolder; +} + +small { + font-size: 80%; +} + +sub, +sup { + position: relative; + font-size: 75%; + line-height: 0; + vertical-align: baseline; +} + +sub { + bottom: -.25em; +} + +sup { + top: -.5em; +} + +a { + color: #007bff; + text-decoration: none; + background-color: transparent; + -webkit-text-decoration-skip: objects; +} + +a:hover { + color: #0056b3; + text-decoration: underline; +} + +a:not([href]):not([tabindex]) { + color: inherit; + text-decoration: none; +} + +a:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover { + color: inherit; + text-decoration: none; +} + +a:not([href]):not([tabindex]):focus { + outline: 0; +} + +pre, +code, +kbd, +samp { + font-family: monospace, monospace; + font-size: 1em; +} + +pre { + margin-top: 0; + margin-bottom: 1rem; + overflow: auto; +} + +figure { + margin: 0 0 1rem; +} + +img { + vertical-align: middle; + border-style: none; +} + +svg:not(:root) { + overflow: hidden; +} + +a, +area, +button, +[role="button"], +input, +label, +select, +summary, +textarea { + -ms-touch-action: manipulation; + touch-action: manipulation; +} + +table { + border-collapse: collapse; +} + +caption { + padding-top: 0.75rem; + padding-bottom: 0.75rem; + color: #868e96; + text-align: left; + caption-side: bottom; +} + +th { + text-align: left; +} + +label { + display: inline-block; + margin-bottom: .5rem; +} + +button:focus { + outline: 1px dotted; + outline: 5px auto -webkit-focus-ring-color; +} + +input, +button, +select, +optgroup, +textarea { + margin: 0; + font-family: inherit; + font-size: inherit; + line-height: inherit; +} + +button, +input { + overflow: visible; +} + +button, +select { + text-transform: none; +} + +button, +html [type="button"], +[type="reset"], +[type="submit"] { + -webkit-appearance: button; +} + +button::-moz-focus-inner, +[type="button"]::-moz-focus-inner, +[type="reset"]::-moz-focus-inner, +[type="submit"]::-moz-focus-inner { + padding: 0; + border-style: none; +} + +input[type="radio"], +input[type="checkbox"] { + box-sizing: border-box; + padding: 0; +} + +input[type="date"], +input[type="time"], +input[type="datetime-local"], +input[type="month"] { + -webkit-appearance: listbox; +} + +textarea { + overflow: auto; + resize: vertical; +} + +fieldset { + min-width: 0; + padding: 0; + margin: 0; + border: 0; +} + +legend { + display: block; + width: 100%; + max-width: 100%; + padding: 0; + margin-bottom: .5rem; + font-size: 1.5rem; + line-height: inherit; + color: inherit; + white-space: normal; +} + +progress { + vertical-align: baseline; +} + +[type="number"]::-webkit-inner-spin-button, +[type="number"]::-webkit-outer-spin-button { + height: auto; +} + +[type="search"] { + outline-offset: -2px; + -webkit-appearance: none; +} + +[type="search"]::-webkit-search-cancel-button, +[type="search"]::-webkit-search-decoration { + -webkit-appearance: none; +} + +::-webkit-file-upload-button { + font: inherit; + -webkit-appearance: button; +} + +output { + display: inline-block; +} + +summary { + display: list-item; +} + +template { + display: none; +} + +[hidden] { + display: none !important; +} + +h1, h2, h3, h4, h5, h6, +.h1, .h2, .h3, .h4, .h5, .h6 { + margin-bottom: 0.5rem; + font-family: inherit; + font-weight: 500; + line-height: 1.1; + color: inherit; +} + +h1, .h1 { + font-size: 2.5rem; +} + +h2, .h2 { + font-size: 2rem; +} + +h3, .h3 { + font-size: 1.75rem; +} + +h4, .h4 { + font-size: 1.5rem; +} + +h5, .h5 { + font-size: 1.25rem; +} + +h6, .h6 { + font-size: 1rem; +} + +.lead { + font-size: 1.25rem; + font-weight: 300; +} + +.display-1 { + font-size: 6rem; + font-weight: 300; + line-height: 1.1; +} + +.display-2 { + font-size: 5.5rem; + font-weight: 300; + line-height: 1.1; +} + +.display-3 { + font-size: 4.5rem; + font-weight: 300; + line-height: 1.1; +} + +.display-4 { + font-size: 3.5rem; + font-weight: 300; + line-height: 1.1; +} + +hr { + margin-top: 1rem; + margin-bottom: 1rem; + border: 0; + border-top: 1px solid rgba(0, 0, 0, 0.1); +} + +small, +.small { + font-size: 80%; + font-weight: normal; +} + +mark, +.mark { + padding: 0.2em; + background-color: #fcf8e3; +} + +.list-unstyled { + padding-left: 0; + list-style: none; +} + +.list-inline { + padding-left: 0; + list-style: none; +} + +.list-inline-item { + display: inline-block; +} + +.list-inline-item:not(:last-child) { + margin-right: 5px; +} + +.initialism { + font-size: 90%; + text-transform: uppercase; +} + +.blockquote { + margin-bottom: 1rem; + font-size: 1.25rem; +} + +.blockquote-footer { + display: block; + font-size: 80%; + color: #868e96; +} + +.blockquote-footer::before { + content: "\2014 \00A0"; +} + +.img-fluid { + max-width: 100%; + height: auto; +} + +.img-thumbnail { + padding: 0.25rem; + background-color: #fff; + border: 1px solid #ddd; + border-radius: 0.25rem; + transition: all 0.2s ease-in-out; + max-width: 100%; + height: auto; +} + +.figure { + display: inline-block; +} + +.figure-img { + margin-bottom: 0.5rem; + line-height: 1; +} + +.figure-caption { + font-size: 90%; + color: #868e96; +} + +code, +kbd, +pre, +samp { + font-family: Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace; +} + +code { + padding: 0.2rem 0.4rem; + font-size: 90%; + color: #bd4147; + background-color: #f8f9fa; + border-radius: 0.25rem; +} + +a > code { + padding: 0; + color: inherit; + background-color: inherit; +} + +kbd { + padding: 0.2rem 0.4rem; + font-size: 90%; + color: #fff; + background-color: #212529; + border-radius: 0.2rem; +} + +kbd kbd { + padding: 0; + font-size: 100%; + font-weight: bold; +} + +pre { + display: block; + margin-top: 0; + margin-bottom: 1rem; + font-size: 90%; + color: #212529; +} + +pre code { + padding: 0; + font-size: inherit; + color: inherit; + background-color: transparent; + border-radius: 0; +} + +.pre-scrollable { + max-height: 340px; + overflow-y: scroll; +} + +.container { + margin-right: auto; + margin-left: auto; + padding-right: 15px; + padding-left: 15px; + width: 100%; +} + +@media (min-width: 576px) { + .container { + max-width: 540px; + } +} + +@media (min-width: 768px) { + .container { + max-width: 720px; + } +} + +@media (min-width: 992px) { + .container { + max-width: 960px; + } +} + +@media (min-width: 1200px) { + .container { + max-width: 1140px; + } +} + +.container-fluid { + width: 100%; + margin-right: auto; + margin-left: auto; + padding-right: 15px; + padding-left: 15px; + width: 100%; +} + +.row { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + margin-right: -15px; + margin-left: -15px; +} + +.no-gutters { + margin-right: 0; + margin-left: 0; +} + +.no-gutters > .col, +.no-gutters > [class*="col-"] { + padding-right: 0; + padding-left: 0; +} + +.col-1, .col-2, .col-3, .col-4, .col-5, .col-6, .col-7, .col-8, .col-9, .col-10, .col-11, .col-12, .col, +.col-auto, .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12, .col-sm, +.col-sm-auto, .col-md-1, .col-md-2, .col-md-3, .col-md-4, .col-md-5, .col-md-6, .col-md-7, .col-md-8, .col-md-9, .col-md-10, .col-md-11, .col-md-12, .col-md, +.col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg, +.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-xl-8, .col-xl-9, .col-xl-10, .col-xl-11, .col-xl-12, .col-xl, +.col-xl-auto { + position: relative; + width: 100%; + min-height: 1px; + padding-right: 15px; + padding-left: 15px; +} + +.col { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; +} + +.col-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; +} + +.col-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; +} + +.col-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; +} + +.col-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; +} + +.col-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; +} + +.col-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; +} + +.col-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; +} + +.col-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; +} + +.col-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; +} + +.col-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; +} + +.col-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; +} + +.col-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; +} + +.col-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; +} + +.order-1 { + -ms-flex-order: 1; + order: 1; +} + +.order-2 { + -ms-flex-order: 2; + order: 2; +} + +.order-3 { + -ms-flex-order: 3; + order: 3; +} + +.order-4 { + -ms-flex-order: 4; + order: 4; +} + +.order-5 { + -ms-flex-order: 5; + order: 5; +} + +.order-6 { + -ms-flex-order: 6; + order: 6; +} + +.order-7 { + -ms-flex-order: 7; + order: 7; +} + +.order-8 { + -ms-flex-order: 8; + order: 8; +} + +.order-9 { + -ms-flex-order: 9; + order: 9; +} + +.order-10 { + -ms-flex-order: 10; + order: 10; +} + +.order-11 { + -ms-flex-order: 11; + order: 11; +} + +.order-12 { + -ms-flex-order: 12; + order: 12; +} + +@media (min-width: 576px) { + .col-sm { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-sm-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-sm-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-sm-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-sm-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-sm-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-sm-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-sm-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-sm-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-sm-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-sm-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-sm-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-sm-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-sm-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-sm-1 { + -ms-flex-order: 1; + order: 1; + } + .order-sm-2 { + -ms-flex-order: 2; + order: 2; + } + .order-sm-3 { + -ms-flex-order: 3; + order: 3; + } + .order-sm-4 { + -ms-flex-order: 4; + order: 4; + } + .order-sm-5 { + -ms-flex-order: 5; + order: 5; + } + .order-sm-6 { + -ms-flex-order: 6; + order: 6; + } + .order-sm-7 { + -ms-flex-order: 7; + order: 7; + } + .order-sm-8 { + -ms-flex-order: 8; + order: 8; + } + .order-sm-9 { + -ms-flex-order: 9; + order: 9; + } + .order-sm-10 { + -ms-flex-order: 10; + order: 10; + } + .order-sm-11 { + -ms-flex-order: 11; + order: 11; + } + .order-sm-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 768px) { + .col-md { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-md-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-md-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-md-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-md-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-md-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-md-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-md-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-md-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-md-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-md-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-md-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-md-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-md-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-md-1 { + -ms-flex-order: 1; + order: 1; + } + .order-md-2 { + -ms-flex-order: 2; + order: 2; + } + .order-md-3 { + -ms-flex-order: 3; + order: 3; + } + .order-md-4 { + -ms-flex-order: 4; + order: 4; + } + .order-md-5 { + -ms-flex-order: 5; + order: 5; + } + .order-md-6 { + -ms-flex-order: 6; + order: 6; + } + .order-md-7 { + -ms-flex-order: 7; + order: 7; + } + .order-md-8 { + -ms-flex-order: 8; + order: 8; + } + .order-md-9 { + -ms-flex-order: 9; + order: 9; + } + .order-md-10 { + -ms-flex-order: 10; + order: 10; + } + .order-md-11 { + -ms-flex-order: 11; + order: 11; + } + .order-md-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 992px) { + .col-lg { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-lg-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-lg-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-lg-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-lg-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-lg-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-lg-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-lg-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-lg-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-lg-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-lg-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-lg-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-lg-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-lg-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-lg-1 { + -ms-flex-order: 1; + order: 1; + } + .order-lg-2 { + -ms-flex-order: 2; + order: 2; + } + .order-lg-3 { + -ms-flex-order: 3; + order: 3; + } + .order-lg-4 { + -ms-flex-order: 4; + order: 4; + } + .order-lg-5 { + -ms-flex-order: 5; + order: 5; + } + .order-lg-6 { + -ms-flex-order: 6; + order: 6; + } + .order-lg-7 { + -ms-flex-order: 7; + order: 7; + } + .order-lg-8 { + -ms-flex-order: 8; + order: 8; + } + .order-lg-9 { + -ms-flex-order: 9; + order: 9; + } + .order-lg-10 { + -ms-flex-order: 10; + order: 10; + } + .order-lg-11 { + -ms-flex-order: 11; + order: 11; + } + .order-lg-12 { + -ms-flex-order: 12; + order: 12; + } +} + +@media (min-width: 1200px) { + .col-xl { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + max-width: 100%; + } + .col-xl-auto { + -ms-flex: 0 0 auto; + flex: 0 0 auto; + width: auto; + max-width: none; + } + .col-xl-1 { + -ms-flex: 0 0 8.333333%; + flex: 0 0 8.333333%; + max-width: 8.333333%; + } + .col-xl-2 { + -ms-flex: 0 0 16.666667%; + flex: 0 0 16.666667%; + max-width: 16.666667%; + } + .col-xl-3 { + -ms-flex: 0 0 25%; + flex: 0 0 25%; + max-width: 25%; + } + .col-xl-4 { + -ms-flex: 0 0 33.333333%; + flex: 0 0 33.333333%; + max-width: 33.333333%; + } + .col-xl-5 { + -ms-flex: 0 0 41.666667%; + flex: 0 0 41.666667%; + max-width: 41.666667%; + } + .col-xl-6 { + -ms-flex: 0 0 50%; + flex: 0 0 50%; + max-width: 50%; + } + .col-xl-7 { + -ms-flex: 0 0 58.333333%; + flex: 0 0 58.333333%; + max-width: 58.333333%; + } + .col-xl-8 { + -ms-flex: 0 0 66.666667%; + flex: 0 0 66.666667%; + max-width: 66.666667%; + } + .col-xl-9 { + -ms-flex: 0 0 75%; + flex: 0 0 75%; + max-width: 75%; + } + .col-xl-10 { + -ms-flex: 0 0 83.333333%; + flex: 0 0 83.333333%; + max-width: 83.333333%; + } + .col-xl-11 { + -ms-flex: 0 0 91.666667%; + flex: 0 0 91.666667%; + max-width: 91.666667%; + } + .col-xl-12 { + -ms-flex: 0 0 100%; + flex: 0 0 100%; + max-width: 100%; + } + .order-xl-1 { + -ms-flex-order: 1; + order: 1; + } + .order-xl-2 { + -ms-flex-order: 2; + order: 2; + } + .order-xl-3 { + -ms-flex-order: 3; + order: 3; + } + .order-xl-4 { + -ms-flex-order: 4; + order: 4; + } + .order-xl-5 { + -ms-flex-order: 5; + order: 5; + } + .order-xl-6 { + -ms-flex-order: 6; + order: 6; + } + .order-xl-7 { + -ms-flex-order: 7; + order: 7; + } + .order-xl-8 { + -ms-flex-order: 8; + order: 8; + } + .order-xl-9 { + -ms-flex-order: 9; + order: 9; + } + .order-xl-10 { + -ms-flex-order: 10; + order: 10; + } + .order-xl-11 { + -ms-flex-order: 11; + order: 11; + } + .order-xl-12 { + -ms-flex-order: 12; + order: 12; + } +} + +.table { + width: 100%; + max-width: 100%; + margin-bottom: 1rem; + background-color: transparent; +} + +.table th, +.table td { + padding: 0.75rem; + vertical-align: top; + border-top: 1px solid #e9ecef; +} + +.table thead th { + vertical-align: bottom; + border-bottom: 2px solid #e9ecef; +} + +.table tbody + tbody { + border-top: 2px solid #e9ecef; +} + +.table .table { + background-color: #fff; +} + +.table-sm th, +.table-sm td { + padding: 0.3rem; +} + +.table-bordered { + border: 1px solid #e9ecef; +} + +.table-bordered th, +.table-bordered td { + border: 1px solid #e9ecef; +} + +.table-bordered thead th, +.table-bordered thead td { + border-bottom-width: 2px; +} + +.table-striped tbody tr:nth-of-type(odd) { + background-color: rgba(0, 0, 0, 0.05); +} + +.table-hover tbody tr:hover { + background-color: rgba(0, 0, 0, 0.075); +} + +.table-primary, +.table-primary > th, +.table-primary > td { + background-color: #b8daff; +} + +.table-hover .table-primary:hover { + background-color: #9fcdff; +} + +.table-hover .table-primary:hover > td, +.table-hover .table-primary:hover > th { + background-color: #9fcdff; +} + +.table-secondary, +.table-secondary > th, +.table-secondary > td { + background-color: #dddfe2; +} + +.table-hover .table-secondary:hover { + background-color: #cfd2d6; +} + +.table-hover .table-secondary:hover > td, +.table-hover .table-secondary:hover > th { + background-color: #cfd2d6; +} + +.table-success, +.table-success > th, +.table-success > td { + background-color: #c3e6cb; +} + +.table-hover .table-success:hover { + background-color: #b1dfbb; +} + +.table-hover .table-success:hover > td, +.table-hover .table-success:hover > th { + background-color: #b1dfbb; +} + +.table-info, +.table-info > th, +.table-info > td { + background-color: #bee5eb; +} + +.table-hover .table-info:hover { + background-color: #abdde5; +} + +.table-hover .table-info:hover > td, +.table-hover .table-info:hover > th { + background-color: #abdde5; +} + +.table-warning, +.table-warning > th, +.table-warning > td { + background-color: #ffeeba; +} + +.table-hover .table-warning:hover { + background-color: #ffe8a1; +} + +.table-hover .table-warning:hover > td, +.table-hover .table-warning:hover > th { + background-color: #ffe8a1; +} + +.table-danger, +.table-danger > th, +.table-danger > td { + background-color: #f5c6cb; +} + +.table-hover .table-danger:hover { + background-color: #f1b0b7; +} + +.table-hover .table-danger:hover > td, +.table-hover .table-danger:hover > th { + background-color: #f1b0b7; +} + +.table-light, +.table-light > th, +.table-light > td { + background-color: #fdfdfe; +} + +.table-hover .table-light:hover { + background-color: #ececf6; +} + +.table-hover .table-light:hover > td, +.table-hover .table-light:hover > th { + background-color: #ececf6; +} + +.table-dark, +.table-dark > th, +.table-dark > td { + background-color: #c6c8ca; +} + +.table-hover .table-dark:hover { + background-color: #b9bbbe; +} + +.table-hover .table-dark:hover > td, +.table-hover .table-dark:hover > th { + background-color: #b9bbbe; +} + +.table-active, +.table-active > th, +.table-active > td { + background-color: rgba(0, 0, 0, 0.075); +} + +.table-hover .table-active:hover { + background-color: rgba(0, 0, 0, 0.075); +} + +.table-hover .table-active:hover > td, +.table-hover .table-active:hover > th { + background-color: rgba(0, 0, 0, 0.075); +} + +.thead-inverse th { + color: #fff; + background-color: #212529; +} + +.thead-default th { + color: #495057; + background-color: #e9ecef; +} + +.table-inverse { + color: #fff; + background-color: #212529; +} + +.table-inverse th, +.table-inverse td, +.table-inverse thead th { + border-color: #32383e; +} + +.table-inverse.table-bordered { + border: 0; +} + +.table-inverse.table-striped tbody tr:nth-of-type(odd) { + background-color: rgba(255, 255, 255, 0.05); +} + +.table-inverse.table-hover tbody tr:hover { + background-color: rgba(255, 255, 255, 0.075); +} + +@media (max-width: 991px) { + .table-responsive { + display: block; + width: 100%; + overflow-x: auto; + -ms-overflow-style: -ms-autohiding-scrollbar; + } + .table-responsive.table-bordered { + border: 0; + } +} + +.form-control { + display: block; + width: 100%; + padding: 0.5rem 0.75rem; + font-size: 1rem; + line-height: 1.25; + color: #495057; + background-color: #fff; + background-image: none; + background-clip: padding-box; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0.25rem; + transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s; +} + +.form-control::-ms-expand { + background-color: transparent; + border: 0; +} + +.form-control:focus { + color: #495057; + background-color: #fff; + border-color: #80bdff; + outline: none; +} + +.form-control::-webkit-input-placeholder { + color: #868e96; + opacity: 1; +} + +.form-control:-ms-input-placeholder { + color: #868e96; + opacity: 1; +} + +.form-control::placeholder { + color: #868e96; + opacity: 1; +} + +.form-control:disabled, .form-control[readonly] { + background-color: #e9ecef; + opacity: 1; +} + +select.form-control:not([size]):not([multiple]) { + height: calc(2.25rem + 2px); +} + +select.form-control:focus::-ms-value { + color: #495057; + background-color: #fff; +} + +.form-control-file, +.form-control-range { + display: block; +} + +.col-form-label { + padding-top: calc(0.5rem - 1px * 2); + padding-bottom: calc(0.5rem - 1px * 2); + margin-bottom: 0; +} + +.col-form-label-lg { + padding-top: calc(0.5rem - 1px * 2); + padding-bottom: calc(0.5rem - 1px * 2); + font-size: 1.25rem; +} + +.col-form-label-sm { + padding-top: calc(0.25rem - 1px * 2); + padding-bottom: calc(0.25rem - 1px * 2); + font-size: 0.875rem; +} + +.col-form-legend { + padding-top: 0.5rem; + padding-bottom: 0.5rem; + margin-bottom: 0; + font-size: 1rem; +} + +.form-control-plaintext { + padding-top: 0.5rem; + padding-bottom: 0.5rem; + margin-bottom: 0; + line-height: 1.25; + border: solid transparent; + border-width: 1px 0; +} + +.form-control-plaintext.form-control-sm, .input-group-sm > .form-control-plaintext.form-control, +.input-group-sm > .form-control-plaintext.input-group-addon, +.input-group-sm > .input-group-btn > .form-control-plaintext.btn, .form-control-plaintext.form-control-lg, .input-group-lg > .form-control-plaintext.form-control, +.input-group-lg > .form-control-plaintext.input-group-addon, +.input-group-lg > .input-group-btn > .form-control-plaintext.btn { + padding-right: 0; + padding-left: 0; +} + +.form-control-sm, .input-group-sm > .form-control, +.input-group-sm > .input-group-addon, +.input-group-sm > .input-group-btn > .btn { + padding: 0.25rem 0.5rem; + font-size: 0.875rem; + line-height: 1.5; + border-radius: 0.2rem; +} + +select.form-control-sm:not([size]):not([multiple]), .input-group-sm > select.form-control:not([size]):not([multiple]), +.input-group-sm > select.input-group-addon:not([size]):not([multiple]), +.input-group-sm > .input-group-btn > select.btn:not([size]):not([multiple]) { + height: calc(1.8125rem + 2px); +} + +.form-control-lg, .input-group-lg > .form-control, +.input-group-lg > .input-group-addon, +.input-group-lg > .input-group-btn > .btn { + padding: 0.5rem 1rem; + font-size: 1.25rem; + line-height: 1.5; + border-radius: 0.3rem; +} + +select.form-control-lg:not([size]):not([multiple]), .input-group-lg > select.form-control:not([size]):not([multiple]), +.input-group-lg > select.input-group-addon:not([size]):not([multiple]), +.input-group-lg > .input-group-btn > select.btn:not([size]):not([multiple]) { + height: calc(2.3125rem + 2px); +} + +.form-group { + margin-bottom: 1rem; +} + +.form-text { + display: block; + margin-top: 0.25rem; +} + +.form-row { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + margin-right: -5px; + margin-left: -5px; +} + +.form-row > .col, +.form-row > [class*="col-"] { + padding-right: 5px; + padding-left: 5px; +} + +.form-check { + position: relative; + display: block; + margin-bottom: 0.5rem; +} + +.form-check.disabled .form-check-label { + color: #868e96; +} + +.form-check-label { + padding-left: 1.25rem; + margin-bottom: 0; +} + +.form-check-input { + position: absolute; + margin-top: 0.25rem; + margin-left: -1.25rem; +} + +.form-check-input:only-child { + position: static; +} + +.form-check-inline { + display: inline-block; +} + +.form-check-inline .form-check-label { + vertical-align: middle; +} + +.form-check-inline + .form-check-inline { + margin-left: 0.75rem; +} + +.invalid-feedback { + display: none; + margin-top: .25rem; + font-size: .875rem; + color: #dc3545; +} + +.invalid-tooltip { + position: absolute; + top: 100%; + z-index: 5; + display: none; + width: 250px; + padding: .5rem; + margin-top: .1rem; + font-size: .875rem; + line-height: 1; + color: #fff; + background-color: rgba(220, 53, 69, 0.8); + border-radius: .2rem; +} + +.was-validated .form-control:valid, .form-control.is-valid, .was-validated +.custom-select:valid, +.custom-select.is-valid { + border-color: #28a745; +} + +.was-validated .form-control:valid:focus, .form-control.is-valid:focus, .was-validated +.custom-select:valid:focus, +.custom-select.is-valid:focus { + box-shadow: 0 0 0 0.2rem rgba(40, 167, 69, 0.25); +} + +.was-validated .form-control:valid ~ .invalid-feedback, +.was-validated .form-control:valid ~ .invalid-tooltip, .form-control.is-valid ~ .invalid-feedback, +.form-control.is-valid ~ .invalid-tooltip, .was-validated +.custom-select:valid ~ .invalid-feedback, +.was-validated +.custom-select:valid ~ .invalid-tooltip, +.custom-select.is-valid ~ .invalid-feedback, +.custom-select.is-valid ~ .invalid-tooltip { + display: block; +} + +.was-validated .form-check-input:valid + .form-check-label, .form-check-input.is-valid + .form-check-label { + color: #28a745; +} + +.was-validated .custom-control-input:valid ~ .custom-control-indicator, .custom-control-input.is-valid ~ .custom-control-indicator { + background-color: rgba(40, 167, 69, 0.25); +} + +.was-validated .custom-control-input:valid ~ .custom-control-description, .custom-control-input.is-valid ~ .custom-control-description { + color: #28a745; +} + +.was-validated .custom-file-input:valid ~ .custom-file-control, .custom-file-input.is-valid ~ .custom-file-control { + border-color: #28a745; +} + +.was-validated .custom-file-input:valid ~ .custom-file-control::before, .custom-file-input.is-valid ~ .custom-file-control::before { + border-color: inherit; +} + +.was-validated .custom-file-input:valid:focus, .custom-file-input.is-valid:focus { + box-shadow: 0 0 0 0.2rem rgba(40, 167, 69, 0.25); +} + +.was-validated .form-control:invalid, .form-control.is-invalid, .was-validated +.custom-select:invalid, +.custom-select.is-invalid { + border-color: #dc3545; +} + +.was-validated .form-control:invalid:focus, .form-control.is-invalid:focus, .was-validated +.custom-select:invalid:focus, +.custom-select.is-invalid:focus { + box-shadow: 0 0 0 0.2rem rgba(220, 53, 69, 0.25); +} + +.was-validated .form-control:invalid ~ .invalid-feedback, +.was-validated .form-control:invalid ~ .invalid-tooltip, .form-control.is-invalid ~ .invalid-feedback, +.form-control.is-invalid ~ .invalid-tooltip, .was-validated +.custom-select:invalid ~ .invalid-feedback, +.was-validated +.custom-select:invalid ~ .invalid-tooltip, +.custom-select.is-invalid ~ .invalid-feedback, +.custom-select.is-invalid ~ .invalid-tooltip { + display: block; +} + +.was-validated .form-check-input:invalid + .form-check-label, .form-check-input.is-invalid + .form-check-label { + color: #dc3545; +} + +.was-validated .custom-control-input:invalid ~ .custom-control-indicator, .custom-control-input.is-invalid ~ .custom-control-indicator { + background-color: rgba(220, 53, 69, 0.25); +} + +.was-validated .custom-control-input:invalid ~ .custom-control-description, .custom-control-input.is-invalid ~ .custom-control-description { + color: #dc3545; +} + +.was-validated .custom-file-input:invalid ~ .custom-file-control, .custom-file-input.is-invalid ~ .custom-file-control { + border-color: #dc3545; +} + +.was-validated .custom-file-input:invalid ~ .custom-file-control::before, .custom-file-input.is-invalid ~ .custom-file-control::before { + border-color: inherit; +} + +.was-validated .custom-file-input:invalid:focus, .custom-file-input.is-invalid:focus { + box-shadow: 0 0 0 0.2rem rgba(220, 53, 69, 0.25); +} + +.form-inline { + display: -ms-flexbox; + display: flex; + -ms-flex-flow: row wrap; + flex-flow: row wrap; + -ms-flex-align: center; + align-items: center; +} + +.form-inline .form-check { + width: 100%; +} + +@media (min-width: 576px) { + .form-inline label { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: center; + justify-content: center; + margin-bottom: 0; + } + .form-inline .form-group { + display: -ms-flexbox; + display: flex; + -ms-flex: 0 0 auto; + flex: 0 0 auto; + -ms-flex-flow: row wrap; + flex-flow: row wrap; + -ms-flex-align: center; + align-items: center; + margin-bottom: 0; + } + .form-inline .form-control { + display: inline-block; + width: auto; + vertical-align: middle; + } + .form-inline .form-control-plaintext { + display: inline-block; + } + .form-inline .input-group { + width: auto; + } + .form-inline .form-control-label { + margin-bottom: 0; + vertical-align: middle; + } + .form-inline .form-check { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: center; + justify-content: center; + width: auto; + margin-top: 0; + margin-bottom: 0; + } + .form-inline .form-check-label { + padding-left: 0; + } + .form-inline .form-check-input { + position: relative; + margin-top: 0; + margin-right: 0.25rem; + margin-left: 0; + } + .form-inline .custom-control { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: center; + justify-content: center; + padding-left: 0; + } + .form-inline .custom-control-indicator { + position: static; + display: inline-block; + margin-right: 0.25rem; + vertical-align: text-bottom; + } + .form-inline .has-feedback .form-control-feedback { + top: 0; + } +} + +.btn { + display: inline-block; + font-weight: normal; + text-align: center; + white-space: nowrap; + vertical-align: middle; + -webkit-user-select: none; + -moz-user-select: none; + -ms-user-select: none; + user-select: none; + border: 1px solid transparent; + padding: 0.5rem 0.75rem; + font-size: 1rem; + line-height: 1.25; + border-radius: 0.25rem; + transition: all 0.15s ease-in-out; +} + +.btn:focus, .btn:hover { + text-decoration: none; +} + +.btn:focus, .btn.focus { + outline: 0; + box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.25); +} + +.btn.disabled, .btn:disabled { + opacity: .65; +} + +.btn:active, .btn.active { + background-image: none; +} + +a.btn.disabled, +fieldset[disabled] a.btn { + pointer-events: none; +} + +.btn-primary { + color: #fff; + background-color: #007bff; + border-color: #007bff; +} + +.btn-primary:hover { + color: #fff; + background-color: #0069d9; + border-color: #0062cc; +} + +.btn-primary:focus, .btn-primary.focus { + box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.5); +} + +.btn-primary.disabled, .btn-primary:disabled { + background-color: #007bff; + border-color: #007bff; +} + +.btn-primary:active, .btn-primary.active, +.show > .btn-primary.dropdown-toggle { + background-color: #0069d9; + background-image: none; + border-color: #0062cc; +} + +.btn-secondary { + color: #fff; + background-color: #868e96; + border-color: #868e96; +} + +.btn-secondary:hover { + color: #fff; + background-color: #727b84; + border-color: #6c757d; +} + +.btn-secondary:focus, .btn-secondary.focus { + box-shadow: 0 0 0 3px rgba(134, 142, 150, 0.5); +} + +.btn-secondary.disabled, .btn-secondary:disabled { + background-color: #868e96; + border-color: #868e96; +} + +.btn-secondary:active, .btn-secondary.active, +.show > .btn-secondary.dropdown-toggle { + background-color: #727b84; + background-image: none; + border-color: #6c757d; +} + +.btn-success { + color: #fff; + background-color: #28a745; + border-color: #28a745; +} + +.btn-success:hover { + color: #fff; + background-color: #218838; + border-color: #1e7e34; +} + +.btn-success:focus, .btn-success.focus { + box-shadow: 0 0 0 3px rgba(40, 167, 69, 0.5); +} + +.btn-success.disabled, .btn-success:disabled { + background-color: #28a745; + border-color: #28a745; +} + +.btn-success:active, .btn-success.active, +.show > .btn-success.dropdown-toggle { + background-color: #218838; + background-image: none; + border-color: #1e7e34; +} + +.btn-info { + color: #fff; + background-color: #17a2b8; + border-color: #17a2b8; +} + +.btn-info:hover { + color: #fff; + background-color: #138496; + border-color: #117a8b; +} + +.btn-info:focus, .btn-info.focus { + box-shadow: 0 0 0 3px rgba(23, 162, 184, 0.5); +} + +.btn-info.disabled, .btn-info:disabled { + background-color: #17a2b8; + border-color: #17a2b8; +} + +.btn-info:active, .btn-info.active, +.show > .btn-info.dropdown-toggle { + background-color: #138496; + background-image: none; + border-color: #117a8b; +} + +.btn-warning { + color: #111; + background-color: #ffc107; + border-color: #ffc107; +} + +.btn-warning:hover { + color: #111; + background-color: #e0a800; + border-color: #d39e00; +} + +.btn-warning:focus, .btn-warning.focus { + box-shadow: 0 0 0 3px rgba(255, 193, 7, 0.5); +} + +.btn-warning.disabled, .btn-warning:disabled { + background-color: #ffc107; + border-color: #ffc107; +} + +.btn-warning:active, .btn-warning.active, +.show > .btn-warning.dropdown-toggle { + background-color: #e0a800; + background-image: none; + border-color: #d39e00; +} + +.btn-danger { + color: #fff; + background-color: #dc3545; + border-color: #dc3545; +} + +.btn-danger:hover { + color: #fff; + background-color: #c82333; + border-color: #bd2130; +} + +.btn-danger:focus, .btn-danger.focus { + box-shadow: 0 0 0 3px rgba(220, 53, 69, 0.5); +} + +.btn-danger.disabled, .btn-danger:disabled { + background-color: #dc3545; + border-color: #dc3545; +} + +.btn-danger:active, .btn-danger.active, +.show > .btn-danger.dropdown-toggle { + background-color: #c82333; + background-image: none; + border-color: #bd2130; +} + +.btn-light { + color: #111; + background-color: #f8f9fa; + border-color: #f8f9fa; +} + +.btn-light:hover { + color: #111; + background-color: #e2e6ea; + border-color: #dae0e5; +} + +.btn-light:focus, .btn-light.focus { + box-shadow: 0 0 0 3px rgba(248, 249, 250, 0.5); +} + +.btn-light.disabled, .btn-light:disabled { + background-color: #f8f9fa; + border-color: #f8f9fa; +} + +.btn-light:active, .btn-light.active, +.show > .btn-light.dropdown-toggle { + background-color: #e2e6ea; + background-image: none; + border-color: #dae0e5; +} + +.btn-dark { + color: #fff; + background-color: #343a40; + border-color: #343a40; +} + +.btn-dark:hover { + color: #fff; + background-color: #23272b; + border-color: #1d2124; +} + +.btn-dark:focus, .btn-dark.focus { + box-shadow: 0 0 0 3px rgba(52, 58, 64, 0.5); +} + +.btn-dark.disabled, .btn-dark:disabled { + background-color: #343a40; + border-color: #343a40; +} + +.btn-dark:active, .btn-dark.active, +.show > .btn-dark.dropdown-toggle { + background-color: #23272b; + background-image: none; + border-color: #1d2124; +} + +.btn-outline-primary { + color: #007bff; + background-color: transparent; + background-image: none; + border-color: #007bff; +} + +.btn-outline-primary:hover { + color: #fff; + background-color: #007bff; + border-color: #007bff; +} + +.btn-outline-primary:focus, .btn-outline-primary.focus { + box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.5); +} + +.btn-outline-primary.disabled, .btn-outline-primary:disabled { + color: #007bff; + background-color: transparent; +} + +.btn-outline-primary:active, .btn-outline-primary.active, +.show > .btn-outline-primary.dropdown-toggle { + color: #fff; + background-color: #007bff; + border-color: #007bff; +} + +.btn-outline-secondary { + color: #868e96; + background-color: transparent; + background-image: none; + border-color: #868e96; +} + +.btn-outline-secondary:hover { + color: #fff; + background-color: #868e96; + border-color: #868e96; +} + +.btn-outline-secondary:focus, .btn-outline-secondary.focus { + box-shadow: 0 0 0 3px rgba(134, 142, 150, 0.5); +} + +.btn-outline-secondary.disabled, .btn-outline-secondary:disabled { + color: #868e96; + background-color: transparent; +} + +.btn-outline-secondary:active, .btn-outline-secondary.active, +.show > .btn-outline-secondary.dropdown-toggle { + color: #fff; + background-color: #868e96; + border-color: #868e96; +} + +.btn-outline-success { + color: #28a745; + background-color: transparent; + background-image: none; + border-color: #28a745; +} + +.btn-outline-success:hover { + color: #fff; + background-color: #28a745; + border-color: #28a745; +} + +.btn-outline-success:focus, .btn-outline-success.focus { + box-shadow: 0 0 0 3px rgba(40, 167, 69, 0.5); +} + +.btn-outline-success.disabled, .btn-outline-success:disabled { + color: #28a745; + background-color: transparent; +} + +.btn-outline-success:active, .btn-outline-success.active, +.show > .btn-outline-success.dropdown-toggle { + color: #fff; + background-color: #28a745; + border-color: #28a745; +} + +.btn-outline-info { + color: #17a2b8; + background-color: transparent; + background-image: none; + border-color: #17a2b8; +} + +.btn-outline-info:hover { + color: #fff; + background-color: #17a2b8; + border-color: #17a2b8; +} + +.btn-outline-info:focus, .btn-outline-info.focus { + box-shadow: 0 0 0 3px rgba(23, 162, 184, 0.5); +} + +.btn-outline-info.disabled, .btn-outline-info:disabled { + color: #17a2b8; + background-color: transparent; +} + +.btn-outline-info:active, .btn-outline-info.active, +.show > .btn-outline-info.dropdown-toggle { + color: #fff; + background-color: #17a2b8; + border-color: #17a2b8; +} + +.btn-outline-warning { + color: #ffc107; + background-color: transparent; + background-image: none; + border-color: #ffc107; +} + +.btn-outline-warning:hover { + color: #fff; + background-color: #ffc107; + border-color: #ffc107; +} + +.btn-outline-warning:focus, .btn-outline-warning.focus { + box-shadow: 0 0 0 3px rgba(255, 193, 7, 0.5); +} + +.btn-outline-warning.disabled, .btn-outline-warning:disabled { + color: #ffc107; + background-color: transparent; +} + +.btn-outline-warning:active, .btn-outline-warning.active, +.show > .btn-outline-warning.dropdown-toggle { + color: #fff; + background-color: #ffc107; + border-color: #ffc107; +} + +.btn-outline-danger { + color: #dc3545; + background-color: transparent; + background-image: none; + border-color: #dc3545; +} + +.btn-outline-danger:hover { + color: #fff; + background-color: #dc3545; + border-color: #dc3545; +} + +.btn-outline-danger:focus, .btn-outline-danger.focus { + box-shadow: 0 0 0 3px rgba(220, 53, 69, 0.5); +} + +.btn-outline-danger.disabled, .btn-outline-danger:disabled { + color: #dc3545; + background-color: transparent; +} + +.btn-outline-danger:active, .btn-outline-danger.active, +.show > .btn-outline-danger.dropdown-toggle { + color: #fff; + background-color: #dc3545; + border-color: #dc3545; +} + +.btn-outline-light { + color: #f8f9fa; + background-color: transparent; + background-image: none; + border-color: #f8f9fa; +} + +.btn-outline-light:hover { + color: #fff; + background-color: #f8f9fa; + border-color: #f8f9fa; +} + +.btn-outline-light:focus, .btn-outline-light.focus { + box-shadow: 0 0 0 3px rgba(248, 249, 250, 0.5); +} + +.btn-outline-light.disabled, .btn-outline-light:disabled { + color: #f8f9fa; + background-color: transparent; +} + +.btn-outline-light:active, .btn-outline-light.active, +.show > .btn-outline-light.dropdown-toggle { + color: #fff; + background-color: #f8f9fa; + border-color: #f8f9fa; +} + +.btn-outline-dark { + color: #343a40; + background-color: transparent; + background-image: none; + border-color: #343a40; +} + +.btn-outline-dark:hover { + color: #fff; + background-color: #343a40; + border-color: #343a40; +} + +.btn-outline-dark:focus, .btn-outline-dark.focus { + box-shadow: 0 0 0 3px rgba(52, 58, 64, 0.5); +} + +.btn-outline-dark.disabled, .btn-outline-dark:disabled { + color: #343a40; + background-color: transparent; +} + +.btn-outline-dark:active, .btn-outline-dark.active, +.show > .btn-outline-dark.dropdown-toggle { + color: #fff; + background-color: #343a40; + border-color: #343a40; +} + +.btn-link { + font-weight: normal; + color: #007bff; + border-radius: 0; +} + +.btn-link, .btn-link:active, .btn-link.active, .btn-link:disabled { + background-color: transparent; +} + +.btn-link, .btn-link:focus, .btn-link:active { + border-color: transparent; + box-shadow: none; +} + +.btn-link:hover { + border-color: transparent; +} + +.btn-link:focus, .btn-link:hover { + color: #0056b3; + text-decoration: underline; + background-color: transparent; +} + +.btn-link:disabled { + color: #868e96; +} + +.btn-link:disabled:focus, .btn-link:disabled:hover { + text-decoration: none; +} + +.btn-lg, .btn-group-lg > .btn { + padding: 0.5rem 1rem; + font-size: 1.25rem; + line-height: 1.5; + border-radius: 0.3rem; +} + +.btn-sm, .btn-group-sm > .btn { + padding: 0.25rem 0.5rem; + font-size: 0.875rem; + line-height: 1.5; + border-radius: 0.2rem; +} + +.btn-block { + display: block; + width: 100%; +} + +.btn-block + .btn-block { + margin-top: 0.5rem; +} + +input[type="submit"].btn-block, +input[type="reset"].btn-block, +input[type="button"].btn-block { + width: 100%; +} + +.fade { + opacity: 0; + transition: opacity 0.15s linear; +} + +.fade.show { + opacity: 1; +} + +.collapse { + display: none; +} + +.collapse.show { + display: block; +} + +tr.collapse.show { + display: table-row; +} + +tbody.collapse.show { + display: table-row-group; +} + +.collapsing { + position: relative; + height: 0; + overflow: hidden; + transition: height 0.35s ease; +} + +.dropup, +.dropdown { + position: relative; +} + +.dropdown-toggle::after { + display: inline-block; + width: 0; + height: 0; + margin-left: 0.255em; + vertical-align: 0.255em; + content: ""; + border-top: 0.3em solid; + border-right: 0.3em solid transparent; + border-left: 0.3em solid transparent; +} + +.dropdown-toggle:empty::after { + margin-left: 0; +} + +.dropup .dropdown-menu { + margin-top: 0; + margin-bottom: 0.125rem; +} + +.dropup .dropdown-toggle::after { + border-top: 0; + border-bottom: 0.3em solid; +} + +.dropdown-menu { + position: absolute; + top: 100%; + left: 0; + z-index: 1000; + display: none; + float: left; + min-width: 10rem; + padding: 0.5rem 0; + margin: 0.125rem 0 0; + font-size: 1rem; + color: #212529; + text-align: left; + list-style: none; + background-color: #fff; + background-clip: padding-box; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0.25rem; +} + +.dropdown-divider { + height: 0; + margin: 0.5rem 0; + overflow: hidden; + border-top: 1px solid #e9ecef; +} + +.dropdown-item { + display: block; + width: 100%; + padding: 0.25rem 1.5rem; + clear: both; + font-weight: normal; + color: #212529; + text-align: inherit; + white-space: nowrap; + background: none; + border: 0; +} + +.dropdown-item:focus, .dropdown-item:hover { + color: #16181b; + text-decoration: none; + background-color: #f8f9fa; +} + +.dropdown-item.active, .dropdown-item:active { + color: #fff; + text-decoration: none; + background-color: #007bff; +} + +.dropdown-item.disabled, .dropdown-item:disabled { + color: #868e96; + background-color: transparent; +} + +.show > a { + outline: 0; +} + +.dropdown-menu.show { + display: block; +} + +.dropdown-header { + display: block; + padding: 0.5rem 1.5rem; + margin-bottom: 0; + font-size: 0.875rem; + color: #868e96; + white-space: nowrap; +} + +.btn-group, +.btn-group-vertical { + position: relative; + display: -ms-inline-flexbox; + display: inline-flex; + vertical-align: middle; +} + +.btn-group > .btn, +.btn-group-vertical > .btn { + position: relative; + -ms-flex: 0 1 auto; + flex: 0 1 auto; + margin-bottom: 0; +} + +.btn-group > .btn:hover, +.btn-group-vertical > .btn:hover { + z-index: 2; +} + +.btn-group > .btn:focus, .btn-group > .btn:active, .btn-group > .btn.active, +.btn-group-vertical > .btn:focus, +.btn-group-vertical > .btn:active, +.btn-group-vertical > .btn.active { + z-index: 2; +} + +.btn-group .btn + .btn, +.btn-group .btn + .btn-group, +.btn-group .btn-group + .btn, +.btn-group .btn-group + .btn-group, +.btn-group-vertical .btn + .btn, +.btn-group-vertical .btn + .btn-group, +.btn-group-vertical .btn-group + .btn, +.btn-group-vertical .btn-group + .btn-group { + margin-left: -1px; +} + +.btn-toolbar { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + -ms-flex-pack: start; + justify-content: flex-start; +} + +.btn-toolbar .input-group { + width: auto; +} + +.btn-group > .btn:not(:first-child):not(:last-child):not(.dropdown-toggle) { + border-radius: 0; +} + +.btn-group > .btn:first-child { + margin-left: 0; +} + +.btn-group > .btn:first-child:not(:last-child):not(.dropdown-toggle) { + border-top-right-radius: 0; + border-bottom-right-radius: 0; +} + +.btn-group > .btn:last-child:not(:first-child), +.btn-group > .dropdown-toggle:not(:first-child) { + border-top-left-radius: 0; + border-bottom-left-radius: 0; +} + +.btn-group > .btn-group { + float: left; +} + +.btn-group > .btn-group:not(:first-child):not(:last-child) > .btn { + border-radius: 0; +} + +.btn-group > .btn-group:first-child:not(:last-child) > .btn:last-child, +.btn-group > .btn-group:first-child:not(:last-child) > .dropdown-toggle { + border-top-right-radius: 0; + border-bottom-right-radius: 0; +} + +.btn-group > .btn-group:last-child:not(:first-child) > .btn:first-child { + border-top-left-radius: 0; + border-bottom-left-radius: 0; +} + +.btn + .dropdown-toggle-split { + padding-right: 0.5625rem; + padding-left: 0.5625rem; +} + +.btn + .dropdown-toggle-split::after { + margin-left: 0; +} + +.btn-sm + .dropdown-toggle-split, .btn-group-sm > .btn + .dropdown-toggle-split { + padding-right: 0.375rem; + padding-left: 0.375rem; +} + +.btn-lg + .dropdown-toggle-split, .btn-group-lg > .btn + .dropdown-toggle-split { + padding-right: 0.75rem; + padding-left: 0.75rem; +} + +.btn-group-vertical { + display: -ms-inline-flexbox; + display: inline-flex; + -ms-flex-direction: column; + flex-direction: column; + -ms-flex-align: start; + align-items: flex-start; + -ms-flex-pack: center; + justify-content: center; +} + +.btn-group-vertical .btn, +.btn-group-vertical .btn-group { + width: 100%; +} + +.btn-group-vertical > .btn + .btn, +.btn-group-vertical > .btn + .btn-group, +.btn-group-vertical > .btn-group + .btn, +.btn-group-vertical > .btn-group + .btn-group { + margin-top: -1px; + margin-left: 0; +} + +.btn-group-vertical > .btn:not(:first-child):not(:last-child) { + border-radius: 0; +} + +.btn-group-vertical > .btn:first-child:not(:last-child) { + border-bottom-right-radius: 0; + border-bottom-left-radius: 0; +} + +.btn-group-vertical > .btn:last-child:not(:first-child) { + border-top-left-radius: 0; + border-top-right-radius: 0; +} + +.btn-group-vertical > .btn-group:not(:first-child):not(:last-child) > .btn { + border-radius: 0; +} + +.btn-group-vertical > .btn-group:first-child:not(:last-child) > .btn:last-child, +.btn-group-vertical > .btn-group:first-child:not(:last-child) > .dropdown-toggle { + border-bottom-right-radius: 0; + border-bottom-left-radius: 0; +} + +.btn-group-vertical > .btn-group:last-child:not(:first-child) > .btn:first-child { + border-top-left-radius: 0; + border-top-right-radius: 0; +} + +[data-toggle="buttons"] > .btn input[type="radio"], +[data-toggle="buttons"] > .btn input[type="checkbox"], +[data-toggle="buttons"] > .btn-group > .btn input[type="radio"], +[data-toggle="buttons"] > .btn-group > .btn input[type="checkbox"] { + position: absolute; + clip: rect(0, 0, 0, 0); + pointer-events: none; +} + +.input-group { + position: relative; + display: -ms-flexbox; + display: flex; + width: 100%; +} + +.input-group .form-control { + position: relative; + z-index: 2; + -ms-flex: 1 1 auto; + flex: 1 1 auto; + width: 1%; + margin-bottom: 0; +} + +.input-group .form-control:focus, .input-group .form-control:active, .input-group .form-control:hover { + z-index: 3; +} + +.input-group-addon, +.input-group-btn, +.input-group .form-control { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; +} + +.input-group-addon:not(:first-child):not(:last-child), +.input-group-btn:not(:first-child):not(:last-child), +.input-group .form-control:not(:first-child):not(:last-child) { + border-radius: 0; +} + +.input-group-addon, +.input-group-btn { + white-space: nowrap; + vertical-align: middle; +} + +.input-group-addon { + padding: 0.5rem 0.75rem; + margin-bottom: 0; + font-size: 1rem; + font-weight: normal; + line-height: 1.25; + color: #495057; + text-align: center; + background-color: #e9ecef; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0.25rem; +} + +.input-group-addon.form-control-sm, +.input-group-sm > .input-group-addon, +.input-group-sm > .input-group-btn > .input-group-addon.btn { + padding: 0.25rem 0.5rem; + font-size: 0.875rem; + border-radius: 0.2rem; +} + +.input-group-addon.form-control-lg, +.input-group-lg > .input-group-addon, +.input-group-lg > .input-group-btn > .input-group-addon.btn { + padding: 0.5rem 1rem; + font-size: 1.25rem; + border-radius: 0.3rem; +} + +.input-group-addon input[type="radio"], +.input-group-addon input[type="checkbox"] { + margin-top: 0; +} + +.input-group .form-control:not(:last-child), +.input-group-addon:not(:last-child), +.input-group-btn:not(:last-child) > .btn, +.input-group-btn:not(:last-child) > .btn-group > .btn, +.input-group-btn:not(:last-child) > .dropdown-toggle, +.input-group-btn:not(:first-child) > .btn:not(:last-child):not(.dropdown-toggle), +.input-group-btn:not(:first-child) > .btn-group:not(:last-child) > .btn { + border-top-right-radius: 0; + border-bottom-right-radius: 0; +} + +.input-group-addon:not(:last-child) { + border-right: 0; +} + +.input-group .form-control:not(:first-child), +.input-group-addon:not(:first-child), +.input-group-btn:not(:first-child) > .btn, +.input-group-btn:not(:first-child) > .btn-group > .btn, +.input-group-btn:not(:first-child) > .dropdown-toggle, +.input-group-btn:not(:last-child) > .btn:not(:first-child), +.input-group-btn:not(:last-child) > .btn-group:not(:first-child) > .btn { + border-top-left-radius: 0; + border-bottom-left-radius: 0; +} + +.form-control + .input-group-addon:not(:first-child) { + border-left: 0; +} + +.input-group-btn { + position: relative; + font-size: 0; + white-space: nowrap; +} + +.input-group-btn > .btn { + position: relative; +} + +.input-group-btn > .btn + .btn { + margin-left: -1px; +} + +.input-group-btn > .btn:focus, .input-group-btn > .btn:active, .input-group-btn > .btn:hover { + z-index: 3; +} + +.input-group-btn:not(:last-child) > .btn, +.input-group-btn:not(:last-child) > .btn-group { + margin-right: -1px; +} + +.input-group-btn:not(:first-child) > .btn, +.input-group-btn:not(:first-child) > .btn-group { + z-index: 2; + margin-left: -1px; +} + +.input-group-btn:not(:first-child) > .btn:focus, .input-group-btn:not(:first-child) > .btn:active, .input-group-btn:not(:first-child) > .btn:hover, +.input-group-btn:not(:first-child) > .btn-group:focus, +.input-group-btn:not(:first-child) > .btn-group:active, +.input-group-btn:not(:first-child) > .btn-group:hover { + z-index: 3; +} + +.custom-control { + position: relative; + display: -ms-inline-flexbox; + display: inline-flex; + min-height: 1.5rem; + padding-left: 1.5rem; + margin-right: 1rem; +} + +.custom-control-input { + position: absolute; + z-index: -1; + opacity: 0; +} + +.custom-control-input:checked ~ .custom-control-indicator { + color: #fff; + background-color: #007bff; +} + +.custom-control-input:focus ~ .custom-control-indicator { + box-shadow: 0 0 0 1px #fff, 0 0 0 3px #007bff; +} + +.custom-control-input:active ~ .custom-control-indicator { + color: #fff; + background-color: #b3d7ff; +} + +.custom-control-input:disabled ~ .custom-control-indicator { + background-color: #e9ecef; +} + +.custom-control-input:disabled ~ .custom-control-description { + color: #868e96; +} + +.custom-control-indicator { + position: absolute; + top: 0.25rem; + left: 0; + display: block; + width: 1rem; + height: 1rem; + pointer-events: none; + -webkit-user-select: none; + -moz-user-select: none; + -ms-user-select: none; + user-select: none; + background-color: #ddd; + background-repeat: no-repeat; + background-position: center center; + background-size: 50% 50%; +} + +.custom-checkbox .custom-control-indicator { + border-radius: 0.25rem; +} + +.custom-checkbox .custom-control-input:checked ~ .custom-control-indicator { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E"); +} + +.custom-checkbox .custom-control-input:indeterminate ~ .custom-control-indicator { + background-color: #007bff; + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='%23fff' d='M0 2h4'/%3E%3C/svg%3E"); +} + +.custom-radio .custom-control-indicator { + border-radius: 50%; +} + +.custom-radio .custom-control-input:checked ~ .custom-control-indicator { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='%23fff'/%3E%3C/svg%3E"); +} + +.custom-controls-stacked { + display: -ms-flexbox; + display: flex; + -ms-flex-direction: column; + flex-direction: column; +} + +.custom-controls-stacked .custom-control { + margin-bottom: 0.25rem; +} + +.custom-controls-stacked .custom-control + .custom-control { + margin-left: 0; +} + +.custom-select { + display: inline-block; + max-width: 100%; + height: calc(2.25rem + 2px); + padding: 0.375rem 1.75rem 0.375rem 0.75rem; + line-height: 1.25; + color: #495057; + vertical-align: middle; + background: #fff url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23333' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E") no-repeat right 0.75rem center; + background-size: 8px 10px; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0.25rem; + -webkit-appearance: none; + -moz-appearance: none; + appearance: none; +} + +.custom-select:focus { + border-color: #80bdff; + outline: none; +} + +.custom-select:focus::-ms-value { + color: #495057; + background-color: #fff; +} + +.custom-select:disabled { + color: #868e96; + background-color: #e9ecef; +} + +.custom-select::-ms-expand { + opacity: 0; +} + +.custom-select-sm { + height: calc(1.8125rem + 2px); + padding-top: 0.375rem; + padding-bottom: 0.375rem; + font-size: 75%; +} + +.custom-file { + position: relative; + display: inline-block; + max-width: 100%; + height: 2.5rem; + margin-bottom: 0; +} + +.custom-file-input { + min-width: 14rem; + max-width: 100%; + height: 2.5rem; + margin: 0; + opacity: 0; +} + +.custom-file-control { + position: absolute; + top: 0; + right: 0; + left: 0; + z-index: 5; + height: 2.5rem; + padding: 0.5rem 1rem; + line-height: 1.5; + color: #495057; + pointer-events: none; + -webkit-user-select: none; + -moz-user-select: none; + -ms-user-select: none; + user-select: none; + background-color: #fff; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0.25rem; +} + +.custom-file-control:lang(en):empty::after { + content: "Choose file..."; +} + +.custom-file-control::before { + position: absolute; + top: -1px; + right: -1px; + bottom: -1px; + z-index: 6; + display: block; + height: 2.5rem; + padding: 0.5rem 1rem; + line-height: 1.5; + color: #495057; + background-color: #e9ecef; + border: 1px solid rgba(0, 0, 0, 0.15); + border-radius: 0 0.25rem 0.25rem 0; +} + +.custom-file-control:lang(en)::before { + content: "Browse"; +} + +.nav { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + padding-left: 0; + margin-bottom: 0; + list-style: none; +} + +.nav-link { + display: block; + padding: 0.5rem 1rem; +} + +.nav-link:focus, .nav-link:hover { + text-decoration: none; +} + +.nav-link.disabled { + color: #868e96; +} + +.nav-tabs { + border-bottom: 1px solid #ddd; +} + +.nav-tabs .nav-item { + margin-bottom: -1px; +} + +.nav-tabs .nav-link { + border: 1px solid transparent; + border-top-left-radius: 0.25rem; + border-top-right-radius: 0.25rem; +} + +.nav-tabs .nav-link:focus, .nav-tabs .nav-link:hover { + border-color: #e9ecef #e9ecef #ddd; +} + +.nav-tabs .nav-link.disabled { + color: #868e96; + background-color: transparent; + border-color: transparent; +} + +.nav-tabs .nav-link.active, +.nav-tabs .nav-item.show .nav-link { + color: #495057; + background-color: #fff; + border-color: #ddd #ddd #fff; +} + +.nav-tabs .dropdown-menu { + margin-top: -1px; + border-top-left-radius: 0; + border-top-right-radius: 0; +} + +.nav-pills .nav-link { + border-radius: 0.25rem; +} + +.nav-pills .nav-link.active, +.show > .nav-pills .nav-link { + color: #fff; + background-color: #007bff; +} + +.nav-fill .nav-item { + -ms-flex: 1 1 auto; + flex: 1 1 auto; + text-align: center; +} + +.nav-justified .nav-item { + -ms-flex-preferred-size: 0; + flex-basis: 0; + -ms-flex-positive: 1; + flex-grow: 1; + text-align: center; +} + +.tab-content > .tab-pane { + display: none; +} + +.tab-content > .active { + display: block; +} + +.navbar { + position: relative; + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: justify; + justify-content: space-between; + padding: 0.5rem 1rem; +} + +.navbar > .container, +.navbar > .container-fluid { + display: -ms-flexbox; + display: flex; + -ms-flex-wrap: wrap; + flex-wrap: wrap; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: justify; + justify-content: space-between; +} + +.navbar-brand { + display: inline-block; + padding-top: 0.3125rem; + padding-bottom: 0.3125rem; + margin-right: 1rem; + font-size: 1.25rem; + line-height: inherit; + white-space: nowrap; +} + +.navbar-brand:focus, .navbar-brand:hover { + text-decoration: none; +} + +.navbar-nav { + display: -ms-flexbox; + display: flex; + -ms-flex-direction: column; + flex-direction: column; + padding-left: 0; + margin-bottom: 0; + list-style: none; +} + +.navbar-nav .nav-link { + padding-right: 0; + padding-left: 0; +} + +.navbar-nav .dropdown-menu { + position: static; + float: none; +} + +.navbar-text { + display: inline-block; + padding-top: 0.5rem; + padding-bottom: 0.5rem; +} + +.navbar-collapse { + -ms-flex-preferred-size: 100%; + flex-basis: 100%; + -ms-flex-align: center; + align-items: center; +} + +.navbar-toggler { + padding: 0.25rem 0.75rem; + font-size: 1.25rem; + line-height: 1; + background: transparent; + border: 1px solid transparent; + border-radius: 0.25rem; +} + +.navbar-toggler:focus, .navbar-toggler:hover { + text-decoration: none; +} + +.navbar-toggler-icon { + display: inline-block; + width: 1.5em; + height: 1.5em; + vertical-align: middle; + content: ""; + background: no-repeat center center; + background-size: 100% 100%; +} + +@media (max-width: 575px) { + .navbar-expand-sm > .container, + .navbar-expand-sm > .container-fluid { + padding-right: 0; + padding-left: 0; + } +} + +@media (min-width: 576px) { + .navbar-expand-sm { + -ms-flex-direction: row; + flex-direction: row; + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + -ms-flex-pack: start; + justify-content: flex-start; + } + .navbar-expand-sm .navbar-nav { + -ms-flex-direction: row; + flex-direction: row; + } + .navbar-expand-sm .navbar-nav .dropdown-menu { + position: absolute; + } + .navbar-expand-sm .navbar-nav .dropdown-menu-right { + right: 0; + left: auto; + } + .navbar-expand-sm .navbar-nav .nav-link { + padding-right: .5rem; + padding-left: .5rem; + } + .navbar-expand-sm > .container, + .navbar-expand-sm > .container-fluid { + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + } + .navbar-expand-sm .navbar-collapse { + display: -ms-flexbox !important; + display: flex !important; + } + .navbar-expand-sm .navbar-toggler { + display: none; + } +} + +@media (max-width: 767px) { + .navbar-expand-md > .container, + .navbar-expand-md > .container-fluid { + padding-right: 0; + padding-left: 0; + } +} + +@media (min-width: 768px) { + .navbar-expand-md { + -ms-flex-direction: row; + flex-direction: row; + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + -ms-flex-pack: start; + justify-content: flex-start; + } + .navbar-expand-md .navbar-nav { + -ms-flex-direction: row; + flex-direction: row; + } + .navbar-expand-md .navbar-nav .dropdown-menu { + position: absolute; + } + .navbar-expand-md .navbar-nav .dropdown-menu-right { + right: 0; + left: auto; + } + .navbar-expand-md .navbar-nav .nav-link { + padding-right: .5rem; + padding-left: .5rem; + } + .navbar-expand-md > .container, + .navbar-expand-md > .container-fluid { + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + } + .navbar-expand-md .navbar-collapse { + display: -ms-flexbox !important; + display: flex !important; + } + .navbar-expand-md .navbar-toggler { + display: none; + } +} + +@media (max-width: 991px) { + .navbar-expand-lg > .container, + .navbar-expand-lg > .container-fluid { + padding-right: 0; + padding-left: 0; + } +} + +@media (min-width: 992px) { + .navbar-expand-lg { + -ms-flex-direction: row; + flex-direction: row; + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + -ms-flex-pack: start; + justify-content: flex-start; + } + .navbar-expand-lg .navbar-nav { + -ms-flex-direction: row; + flex-direction: row; + } + .navbar-expand-lg .navbar-nav .dropdown-menu { + position: absolute; + } + .navbar-expand-lg .navbar-nav .dropdown-menu-right { + right: 0; + left: auto; + } + .navbar-expand-lg .navbar-nav .nav-link { + padding-right: .5rem; + padding-left: .5rem; + } + .navbar-expand-lg > .container, + .navbar-expand-lg > .container-fluid { + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + } + .navbar-expand-lg .navbar-collapse { + display: -ms-flexbox !important; + display: flex !important; + } + .navbar-expand-lg .navbar-toggler { + display: none; + } +} + +@media (max-width: 1199px) { + .navbar-expand-xl > .container, + .navbar-expand-xl > .container-fluid { + padding-right: 0; + padding-left: 0; + } +} + +@media (min-width: 1200px) { + .navbar-expand-xl { + -ms-flex-direction: row; + flex-direction: row; + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + -ms-flex-pack: start; + justify-content: flex-start; + } + .navbar-expand-xl .navbar-nav { + -ms-flex-direction: row; + flex-direction: row; + } + .navbar-expand-xl .navbar-nav .dropdown-menu { + position: absolute; + } + .navbar-expand-xl .navbar-nav .dropdown-menu-right { + right: 0; + left: auto; + } + .navbar-expand-xl .navbar-nav .nav-link { + padding-right: .5rem; + padding-left: .5rem; + } + .navbar-expand-xl > .container, + .navbar-expand-xl > .container-fluid { + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + } + .navbar-expand-xl .navbar-collapse { + display: -ms-flexbox !important; + display: flex !important; + } + .navbar-expand-xl .navbar-toggler { + display: none; + } +} + +.navbar-expand { + -ms-flex-direction: row; + flex-direction: row; + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; + -ms-flex-pack: start; + justify-content: flex-start; +} + +.navbar-expand > .container, +.navbar-expand > .container-fluid { + padding-right: 0; + padding-left: 0; +} + +.navbar-expand .navbar-nav { + -ms-flex-direction: row; + flex-direction: row; +} + +.navbar-expand .navbar-nav .dropdown-menu { + position: absolute; +} + +.navbar-expand .navbar-nav .dropdown-menu-right { + right: 0; + left: auto; +} + +.navbar-expand .navbar-nav .nav-link { + padding-right: .5rem; + padding-left: .5rem; +} + +.navbar-expand > .container, +.navbar-expand > .container-fluid { + -ms-flex-wrap: nowrap; + flex-wrap: nowrap; +} + +.navbar-expand .navbar-collapse { + display: -ms-flexbox !important; + display: flex !important; +} + +.navbar-expand .navbar-toggler { + display: none; +} + +.navbar-light .navbar-brand { + color: rgba(0, 0, 0, 0.9); +} + +.navbar-light .navbar-brand:focus, .navbar-light .navbar-brand:hover { + color: rgba(0, 0, 0, 0.9); +} + +.navbar-light .navbar-nav .nav-link { + color: rgba(0, 0, 0, 0.5); +} + +.navbar-light .navbar-nav .nav-link:focus, .navbar-light .navbar-nav .nav-link:hover { + color: rgba(0, 0, 0, 0.7); +} + +.navbar-light .navbar-nav .nav-link.disabled { + color: rgba(0, 0, 0, 0.3); +} + +.navbar-light .navbar-nav .show > .nav-link, +.navbar-light .navbar-nav .active > .nav-link, +.navbar-light .navbar-nav .nav-link.show, +.navbar-light .navbar-nav .nav-link.active { + color: rgba(0, 0, 0, 0.9); +} + +.navbar-light .navbar-toggler { + color: rgba(0, 0, 0, 0.5); + border-color: rgba(0, 0, 0, 0.1); +} + +.navbar-light .navbar-toggler-icon { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E"); +} + +.navbar-light .navbar-text { + color: rgba(0, 0, 0, 0.5); +} + +.navbar-dark .navbar-brand { + color: white; +} + +.navbar-dark .navbar-brand:focus, .navbar-dark .navbar-brand:hover { + color: white; +} + +.navbar-dark .navbar-nav .nav-link { + color: rgba(255, 255, 255, 0.5); +} + +.navbar-dark .navbar-nav .nav-link:focus, .navbar-dark .navbar-nav .nav-link:hover { + color: rgba(255, 255, 255, 0.75); +} + +.navbar-dark .navbar-nav .nav-link.disabled { + color: rgba(255, 255, 255, 0.25); +} + +.navbar-dark .navbar-nav .show > .nav-link, +.navbar-dark .navbar-nav .active > .nav-link, +.navbar-dark .navbar-nav .nav-link.show, +.navbar-dark .navbar-nav .nav-link.active { + color: white; +} + +.navbar-dark .navbar-toggler { + color: rgba(255, 255, 255, 0.5); + border-color: rgba(255, 255, 255, 0.1); +} + +.navbar-dark .navbar-toggler-icon { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E"); +} + +.navbar-dark .navbar-text { + color: rgba(255, 255, 255, 0.5); +} + +.card { + position: relative; + display: -ms-flexbox; + display: flex; + -ms-flex-direction: column; + flex-direction: column; + min-width: 0; + word-wrap: break-word; + background-color: #fff; + background-clip: border-box; + border: 1px solid rgba(0, 0, 0, 0.125); + border-radius: 0.25rem; +} + +.card-body { + -ms-flex: 1 1 auto; + flex: 1 1 auto; + padding: 1.25rem; +} + +.card-title { + margin-bottom: 0.75rem; +} + +.card-subtitle { + margin-top: -0.375rem; + margin-bottom: 0; +} + +.card-text:last-child { + margin-bottom: 0; +} + +.card-link:hover { + text-decoration: none; +} + +.card-link + .card-link { + margin-left: 1.25rem; +} + +.card > .list-group:first-child .list-group-item:first-child { + border-top-left-radius: 0.25rem; + border-top-right-radius: 0.25rem; +} + +.card > .list-group:last-child .list-group-item:last-child { + border-bottom-right-radius: 0.25rem; + border-bottom-left-radius: 0.25rem; +} + +.card-header { + padding: 0.75rem 1.25rem; + margin-bottom: 0; + background-color: rgba(0, 0, 0, 0.03); + border-bottom: 1px solid rgba(0, 0, 0, 0.125); +} + +.card-header:first-child { + border-radius: calc(0.25rem - 1px) calc(0.25rem - 1px) 0 0; +} + +.card-footer { + padding: 0.75rem 1.25rem; + background-color: rgba(0, 0, 0, 0.03); + border-top: 1px solid rgba(0, 0, 0, 0.125); +} + +.card-footer:last-child { + border-radius: 0 0 calc(0.25rem - 1px) calc(0.25rem - 1px); +} + +.card-header-tabs { + margin-right: -0.625rem; + margin-bottom: -0.75rem; + margin-left: -0.625rem; + border-bottom: 0; +} + +.card-header-pills { + margin-right: -0.625rem; + margin-left: -0.625rem; +} + +.card-img-overlay { + position: absolute; + top: 0; + right: 0; + bottom: 0; + left: 0; + padding: 1.25rem; +} + +.card-img { + width: 100%; + border-radius: calc(0.25rem - 1px); +} + +.card-img-top { + width: 100%; + border-top-left-radius: calc(0.25rem - 1px); + border-top-right-radius: calc(0.25rem - 1px); +} + +.card-img-bottom { + width: 100%; + border-bottom-right-radius: calc(0.25rem - 1px); + border-bottom-left-radius: calc(0.25rem - 1px); +} + +@media (min-width: 576px) { + .card-deck { + display: -ms-flexbox; + display: flex; + -ms-flex-flow: row wrap; + flex-flow: row wrap; + margin-right: -15px; + margin-left: -15px; + } + .card-deck .card { + display: -ms-flexbox; + display: flex; + -ms-flex: 1 0 0%; + flex: 1 0 0%; + -ms-flex-direction: column; + flex-direction: column; + margin-right: 15px; + margin-left: 15px; + } +} + +@media (min-width: 576px) { + .card-group { + display: -ms-flexbox; + display: flex; + -ms-flex-flow: row wrap; + flex-flow: row wrap; + } + .card-group .card { + -ms-flex: 1 0 0%; + flex: 1 0 0%; + } + .card-group .card + .card { + margin-left: 0; + border-left: 0; + } + .card-group .card:first-child { + border-top-right-radius: 0; + border-bottom-right-radius: 0; + } + .card-group .card:first-child .card-img-top { + border-top-right-radius: 0; + } + .card-group .card:first-child .card-img-bottom { + border-bottom-right-radius: 0; + } + .card-group .card:last-child { + border-top-left-radius: 0; + border-bottom-left-radius: 0; + } + .card-group .card:last-child .card-img-top { + border-top-left-radius: 0; + } + .card-group .card:last-child .card-img-bottom { + border-bottom-left-radius: 0; + } + .card-group .card:not(:first-child):not(:last-child) { + border-radius: 0; + } + .card-group .card:not(:first-child):not(:last-child) .card-img-top, + .card-group .card:not(:first-child):not(:last-child) .card-img-bottom { + border-radius: 0; + } +} + +.card-columns .card { + margin-bottom: 0.75rem; +} + +@media (min-width: 576px) { + .card-columns { + -webkit-column-count: 3; + column-count: 3; + -webkit-column-gap: 1.25rem; + column-gap: 1.25rem; + } + .card-columns .card { + display: inline-block; + width: 100%; + } +} + +.breadcrumb { + padding: 0.75rem 1rem; + margin-bottom: 1rem; + list-style: none; + background-color: #e9ecef; + border-radius: 0.25rem; +} + +.breadcrumb::after { + display: block; + clear: both; + content: ""; +} + +.breadcrumb-item { + float: left; +} + +.breadcrumb-item + .breadcrumb-item::before { + display: inline-block; + padding-right: 0.5rem; + padding-left: 0.5rem; + color: #868e96; + content: "/"; +} + +.breadcrumb-item + .breadcrumb-item:hover::before { + text-decoration: underline; +} + +.breadcrumb-item + .breadcrumb-item:hover::before { + text-decoration: none; +} + +.breadcrumb-item.active { + color: #868e96; +} + +.pagination { + display: -ms-flexbox; + display: flex; + padding-left: 0; + list-style: none; + border-radius: 0.25rem; +} + +.page-item:first-child .page-link { + margin-left: 0; + border-top-left-radius: 0.25rem; + border-bottom-left-radius: 0.25rem; +} + +.page-item:last-child .page-link { + border-top-right-radius: 0.25rem; + border-bottom-right-radius: 0.25rem; +} + +.page-item.active .page-link { + z-index: 2; + color: #fff; + background-color: #007bff; + border-color: #007bff; +} + +.page-item.disabled .page-link { + color: #868e96; + pointer-events: none; + background-color: #fff; + border-color: #ddd; +} + +.page-link { + position: relative; + display: block; + padding: 0.5rem 0.75rem; + margin-left: -1px; + line-height: 1.25; + color: #007bff; + background-color: #fff; + border: 1px solid #ddd; +} + +.page-link:focus, .page-link:hover { + color: #0056b3; + text-decoration: none; + background-color: #e9ecef; + border-color: #ddd; +} + +.pagination-lg .page-link { + padding: 0.75rem 1.5rem; + font-size: 1.25rem; + line-height: 1.5; +} + +.pagination-lg .page-item:first-child .page-link { + border-top-left-radius: 0.3rem; + border-bottom-left-radius: 0.3rem; +} + +.pagination-lg .page-item:last-child .page-link { + border-top-right-radius: 0.3rem; + border-bottom-right-radius: 0.3rem; +} + +.pagination-sm .page-link { + padding: 0.25rem 0.5rem; + font-size: 0.875rem; + line-height: 1.5; +} + +.pagination-sm .page-item:first-child .page-link { + border-top-left-radius: 0.2rem; + border-bottom-left-radius: 0.2rem; +} + +.pagination-sm .page-item:last-child .page-link { + border-top-right-radius: 0.2rem; + border-bottom-right-radius: 0.2rem; +} + +.badge { + display: inline-block; + padding: 0.25em 0.4em; + font-size: 75%; + font-weight: bold; + line-height: 1; + color: #fff; + text-align: center; + white-space: nowrap; + vertical-align: baseline; + border-radius: 0.25rem; +} + +.badge:empty { + display: none; +} + +.btn .badge { + position: relative; + top: -1px; +} + +.badge-pill { + padding-right: 0.6em; + padding-left: 0.6em; + border-radius: 10rem; +} + +.badge-primary { + color: #fff; + background-color: #007bff; +} + +.badge-primary[href]:focus, .badge-primary[href]:hover { + color: #fff; + text-decoration: none; + background-color: #0062cc; +} + +.badge-secondary { + color: #fff; + background-color: #868e96; +} + +.badge-secondary[href]:focus, .badge-secondary[href]:hover { + color: #fff; + text-decoration: none; + background-color: #6c757d; +} + +.badge-success { + color: #fff; + background-color: #28a745; +} + +.badge-success[href]:focus, .badge-success[href]:hover { + color: #fff; + text-decoration: none; + background-color: #1e7e34; +} + +.badge-info { + color: #fff; + background-color: #17a2b8; +} + +.badge-info[href]:focus, .badge-info[href]:hover { + color: #fff; + text-decoration: none; + background-color: #117a8b; +} + +.badge-warning { + color: #111; + background-color: #ffc107; +} + +.badge-warning[href]:focus, .badge-warning[href]:hover { + color: #111; + text-decoration: none; + background-color: #d39e00; +} + +.badge-danger { + color: #fff; + background-color: #dc3545; +} + +.badge-danger[href]:focus, .badge-danger[href]:hover { + color: #fff; + text-decoration: none; + background-color: #bd2130; +} + +.badge-light { + color: #111; + background-color: #f8f9fa; +} + +.badge-light[href]:focus, .badge-light[href]:hover { + color: #111; + text-decoration: none; + background-color: #dae0e5; +} + +.badge-dark { + color: #fff; + background-color: #343a40; +} + +.badge-dark[href]:focus, .badge-dark[href]:hover { + color: #fff; + text-decoration: none; + background-color: #1d2124; +} + +.jumbotron { + padding: 2rem 1rem; + margin-bottom: 2rem; + background-color: #e9ecef; + border-radius: 0.3rem; +} + +@media (min-width: 576px) { + .jumbotron { + padding: 4rem 2rem; + } +} + +.jumbotron-fluid { + padding-right: 0; + padding-left: 0; + border-radius: 0; +} + +.alert { + padding: 0.75rem 1.25rem; + margin-bottom: 1rem; + border: 1px solid transparent; + border-radius: 0.25rem; +} + +.alert-heading { + color: inherit; +} + +.alert-link { + font-weight: bold; +} + +.alert-dismissible .close { + position: relative; + top: -0.75rem; + right: -1.25rem; + padding: 0.75rem 1.25rem; + color: inherit; +} + +.alert-primary { + color: #004085; + background-color: #cce5ff; + border-color: #b8daff; +} + +.alert-primary hr { + border-top-color: #9fcdff; +} + +.alert-primary .alert-link { + color: #002752; +} + +.alert-secondary { + color: #464a4e; + background-color: #e7e8ea; + border-color: #dddfe2; +} + +.alert-secondary hr { + border-top-color: #cfd2d6; +} + +.alert-secondary .alert-link { + color: #2e3133; +} + +.alert-success { + color: #155724; + background-color: #d4edda; + border-color: #c3e6cb; +} + +.alert-success hr { + border-top-color: #b1dfbb; +} + +.alert-success .alert-link { + color: #0b2e13; +} + +.alert-info { + color: #0c5460; + background-color: #d1ecf1; + border-color: #bee5eb; +} + +.alert-info hr { + border-top-color: #abdde5; +} + +.alert-info .alert-link { + color: #062c33; +} + +.alert-warning { + color: #856404; + background-color: #fff3cd; + border-color: #ffeeba; +} + +.alert-warning hr { + border-top-color: #ffe8a1; +} + +.alert-warning .alert-link { + color: #533f03; +} + +.alert-danger { + color: #721c24; + background-color: #f8d7da; + border-color: #f5c6cb; +} + +.alert-danger hr { + border-top-color: #f1b0b7; +} + +.alert-danger .alert-link { + color: #491217; +} + +.alert-light { + color: #818182; + background-color: #fefefe; + border-color: #fdfdfe; +} + +.alert-light hr { + border-top-color: #ececf6; +} + +.alert-light .alert-link { + color: #686868; +} + +.alert-dark { + color: #1b1e21; + background-color: #d6d8d9; + border-color: #c6c8ca; +} + +.alert-dark hr { + border-top-color: #b9bbbe; +} + +.alert-dark .alert-link { + color: #040505; +} + +@-webkit-keyframes progress-bar-stripes { + from { + background-position: 1rem 0; + } + to { + background-position: 0 0; + } +} + +@keyframes progress-bar-stripes { + from { + background-position: 1rem 0; + } + to { + background-position: 0 0; + } +} + +.progress { + display: -ms-flexbox; + display: flex; + overflow: hidden; + font-size: 0.75rem; + line-height: 1rem; + text-align: center; + background-color: #e9ecef; + border-radius: 0.25rem; +} + +.progress-bar { + height: 1rem; + line-height: 1rem; + color: #fff; + background-color: #007bff; + transition: width 0.6s ease; +} + +.progress-bar-striped { + background-image: linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); + background-size: 1rem 1rem; +} + +.progress-bar-animated { + -webkit-animation: progress-bar-stripes 1s linear infinite; + animation: progress-bar-stripes 1s linear infinite; +} + +.media { + display: -ms-flexbox; + display: flex; + -ms-flex-align: start; + align-items: flex-start; +} + +.media-body { + -ms-flex: 1; + flex: 1; +} + +.list-group { + display: -ms-flexbox; + display: flex; + -ms-flex-direction: column; + flex-direction: column; + padding-left: 0; + margin-bottom: 0; +} + +.list-group-item-action { + width: 100%; + color: #495057; + text-align: inherit; +} + +.list-group-item-action:focus, .list-group-item-action:hover { + color: #495057; + text-decoration: none; + background-color: #f8f9fa; +} + +.list-group-item-action:active { + color: #212529; + background-color: #e9ecef; +} + +.list-group-item { + position: relative; + display: block; + padding: 0.75rem 1.25rem; + margin-bottom: -1px; + background-color: #fff; + border: 1px solid rgba(0, 0, 0, 0.125); +} + +.list-group-item:first-child { + border-top-left-radius: 0.25rem; + border-top-right-radius: 0.25rem; +} + +.list-group-item:last-child { + margin-bottom: 0; + border-bottom-right-radius: 0.25rem; + border-bottom-left-radius: 0.25rem; +} + +.list-group-item:focus, .list-group-item:hover { + text-decoration: none; +} + +.list-group-item.disabled, .list-group-item:disabled { + color: #868e96; + background-color: #fff; +} + +.list-group-item.active { + z-index: 2; + color: #fff; + background-color: #007bff; + border-color: #007bff; +} + +.list-group-flush .list-group-item { + border-right: 0; + border-left: 0; + border-radius: 0; +} + +.list-group-flush:first-child .list-group-item:first-child { + border-top: 0; +} + +.list-group-flush:last-child .list-group-item:last-child { + border-bottom: 0; +} + +.list-group-item-primary { + color: #004085; + background-color: #b8daff; +} + +a.list-group-item-primary, +button.list-group-item-primary { + color: #004085; +} + +a.list-group-item-primary:focus, a.list-group-item-primary:hover, +button.list-group-item-primary:focus, +button.list-group-item-primary:hover { + color: #004085; + background-color: #9fcdff; +} + +a.list-group-item-primary.active, +button.list-group-item-primary.active { + color: #fff; + background-color: #004085; + border-color: #004085; +} + +.list-group-item-secondary { + color: #464a4e; + background-color: #dddfe2; +} + +a.list-group-item-secondary, +button.list-group-item-secondary { + color: #464a4e; +} + +a.list-group-item-secondary:focus, a.list-group-item-secondary:hover, +button.list-group-item-secondary:focus, +button.list-group-item-secondary:hover { + color: #464a4e; + background-color: #cfd2d6; +} + +a.list-group-item-secondary.active, +button.list-group-item-secondary.active { + color: #fff; + background-color: #464a4e; + border-color: #464a4e; +} + +.list-group-item-success { + color: #155724; + background-color: #c3e6cb; +} + +a.list-group-item-success, +button.list-group-item-success { + color: #155724; +} + +a.list-group-item-success:focus, a.list-group-item-success:hover, +button.list-group-item-success:focus, +button.list-group-item-success:hover { + color: #155724; + background-color: #b1dfbb; +} + +a.list-group-item-success.active, +button.list-group-item-success.active { + color: #fff; + background-color: #155724; + border-color: #155724; +} + +.list-group-item-info { + color: #0c5460; + background-color: #bee5eb; +} + +a.list-group-item-info, +button.list-group-item-info { + color: #0c5460; +} + +a.list-group-item-info:focus, a.list-group-item-info:hover, +button.list-group-item-info:focus, +button.list-group-item-info:hover { + color: #0c5460; + background-color: #abdde5; +} + +a.list-group-item-info.active, +button.list-group-item-info.active { + color: #fff; + background-color: #0c5460; + border-color: #0c5460; +} + +.list-group-item-warning { + color: #856404; + background-color: #ffeeba; +} + +a.list-group-item-warning, +button.list-group-item-warning { + color: #856404; +} + +a.list-group-item-warning:focus, a.list-group-item-warning:hover, +button.list-group-item-warning:focus, +button.list-group-item-warning:hover { + color: #856404; + background-color: #ffe8a1; +} + +a.list-group-item-warning.active, +button.list-group-item-warning.active { + color: #fff; + background-color: #856404; + border-color: #856404; +} + +.list-group-item-danger { + color: #721c24; + background-color: #f5c6cb; +} + +a.list-group-item-danger, +button.list-group-item-danger { + color: #721c24; +} + +a.list-group-item-danger:focus, a.list-group-item-danger:hover, +button.list-group-item-danger:focus, +button.list-group-item-danger:hover { + color: #721c24; + background-color: #f1b0b7; +} + +a.list-group-item-danger.active, +button.list-group-item-danger.active { + color: #fff; + background-color: #721c24; + border-color: #721c24; +} + +.list-group-item-light { + color: #818182; + background-color: #fdfdfe; +} + +a.list-group-item-light, +button.list-group-item-light { + color: #818182; +} + +a.list-group-item-light:focus, a.list-group-item-light:hover, +button.list-group-item-light:focus, +button.list-group-item-light:hover { + color: #818182; + background-color: #ececf6; +} + +a.list-group-item-light.active, +button.list-group-item-light.active { + color: #fff; + background-color: #818182; + border-color: #818182; +} + +.list-group-item-dark { + color: #1b1e21; + background-color: #c6c8ca; +} + +a.list-group-item-dark, +button.list-group-item-dark { + color: #1b1e21; +} + +a.list-group-item-dark:focus, a.list-group-item-dark:hover, +button.list-group-item-dark:focus, +button.list-group-item-dark:hover { + color: #1b1e21; + background-color: #b9bbbe; +} + +a.list-group-item-dark.active, +button.list-group-item-dark.active { + color: #fff; + background-color: #1b1e21; + border-color: #1b1e21; +} + +.close { + float: right; + font-size: 1.5rem; + font-weight: bold; + line-height: 1; + color: #000; + text-shadow: 0 1px 0 #fff; + opacity: .5; +} + +.close:focus, .close:hover { + color: #000; + text-decoration: none; + opacity: .75; +} + +button.close { + padding: 0; + background: transparent; + border: 0; + -webkit-appearance: none; +} + +.modal-open { + overflow: hidden; +} + +.modal { + position: fixed; + top: 0; + right: 0; + bottom: 0; + left: 0; + z-index: 1050; + display: none; + overflow: hidden; + outline: 0; +} + +.modal.fade .modal-dialog { + transition: -webkit-transform 0.3s ease-out; + transition: transform 0.3s ease-out; + transition: transform 0.3s ease-out, -webkit-transform 0.3s ease-out; + -webkit-transform: translate(0, -25%); + transform: translate(0, -25%); +} + +.modal.show .modal-dialog { + -webkit-transform: translate(0, 0); + transform: translate(0, 0); +} + +.modal-open .modal { + overflow-x: hidden; + overflow-y: auto; +} + +.modal-dialog { + position: relative; + width: auto; + margin: 10px; +} + +.modal-content { + position: relative; + display: -ms-flexbox; + display: flex; + -ms-flex-direction: column; + flex-direction: column; + background-color: #fff; + background-clip: padding-box; + border: 1px solid rgba(0, 0, 0, 0.2); + border-radius: 0.3rem; + outline: 0; +} + +.modal-backdrop { + position: fixed; + top: 0; + right: 0; + bottom: 0; + left: 0; + z-index: 1040; + background-color: #000; +} + +.modal-backdrop.fade { + opacity: 0; +} + +.modal-backdrop.show { + opacity: 0.5; +} + +.modal-header { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: justify; + justify-content: space-between; + padding: 15px; + border-bottom: 1px solid #e9ecef; +} + +.modal-title { + margin-bottom: 0; + line-height: 1.5; +} + +.modal-body { + position: relative; + -ms-flex: 1 1 auto; + flex: 1 1 auto; + padding: 15px; +} + +.modal-footer { + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: end; + justify-content: flex-end; + padding: 15px; + border-top: 1px solid #e9ecef; +} + +.modal-footer > :not(:first-child) { + margin-left: .25rem; +} + +.modal-footer > :not(:last-child) { + margin-right: .25rem; +} + +.modal-scrollbar-measure { + position: absolute; + top: -9999px; + width: 50px; + height: 50px; + overflow: scroll; +} + +@media (min-width: 576px) { + .modal-dialog { + max-width: 500px; + margin: 30px auto; + } + .modal-sm { + max-width: 300px; + } +} + +@media (min-width: 992px) { + .modal-lg { + max-width: 800px; + } +} + +.tooltip { + position: absolute; + z-index: 1070; + display: block; + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; + font-style: normal; + font-weight: normal; + line-height: 1.5; + text-align: left; + text-align: start; + text-decoration: none; + text-shadow: none; + text-transform: none; + letter-spacing: normal; + word-break: normal; + word-spacing: normal; + white-space: normal; + line-break: auto; + font-size: 0.875rem; + word-wrap: break-word; + opacity: 0; +} + +.tooltip.show { + opacity: 0.9; +} + +.tooltip .arrow { + position: absolute; + display: block; + width: 5px; + height: 5px; +} + +.tooltip.bs-tooltip-top, .tooltip.bs-tooltip-auto[x-placement^="top"] { + padding: 5px 0; +} + +.tooltip.bs-tooltip-top .arrow, .tooltip.bs-tooltip-auto[x-placement^="top"] .arrow { + bottom: 0; +} + +.tooltip.bs-tooltip-top .arrow::before, .tooltip.bs-tooltip-auto[x-placement^="top"] .arrow::before { + margin-left: -3px; + content: ""; + border-width: 5px 5px 0; + border-top-color: #000; +} + +.tooltip.bs-tooltip-right, .tooltip.bs-tooltip-auto[x-placement^="right"] { + padding: 0 5px; +} + +.tooltip.bs-tooltip-right .arrow, .tooltip.bs-tooltip-auto[x-placement^="right"] .arrow { + left: 0; +} + +.tooltip.bs-tooltip-right .arrow::before, .tooltip.bs-tooltip-auto[x-placement^="right"] .arrow::before { + margin-top: -3px; + content: ""; + border-width: 5px 5px 5px 0; + border-right-color: #000; +} + +.tooltip.bs-tooltip-bottom, .tooltip.bs-tooltip-auto[x-placement^="bottom"] { + padding: 5px 0; +} + +.tooltip.bs-tooltip-bottom .arrow, .tooltip.bs-tooltip-auto[x-placement^="bottom"] .arrow { + top: 0; +} + +.tooltip.bs-tooltip-bottom .arrow::before, .tooltip.bs-tooltip-auto[x-placement^="bottom"] .arrow::before { + margin-left: -3px; + content: ""; + border-width: 0 5px 5px; + border-bottom-color: #000; +} + +.tooltip.bs-tooltip-left, .tooltip.bs-tooltip-auto[x-placement^="left"] { + padding: 0 5px; +} + +.tooltip.bs-tooltip-left .arrow, .tooltip.bs-tooltip-auto[x-placement^="left"] .arrow { + right: 0; +} + +.tooltip.bs-tooltip-left .arrow::before, .tooltip.bs-tooltip-auto[x-placement^="left"] .arrow::before { + right: 0; + margin-top: -3px; + content: ""; + border-width: 5px 0 5px 5px; + border-left-color: #000; +} + +.tooltip .arrow::before { + position: absolute; + border-color: transparent; + border-style: solid; +} + +.tooltip-inner { + max-width: 200px; + padding: 3px 8px; + color: #fff; + text-align: center; + background-color: #000; + border-radius: 0.25rem; +} + +.popover { + position: absolute; + top: 0; + left: 0; + z-index: 1060; + display: block; + max-width: 276px; + padding: 1px; + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; + font-style: normal; + font-weight: normal; + line-height: 1.5; + text-align: left; + text-align: start; + text-decoration: none; + text-shadow: none; + text-transform: none; + letter-spacing: normal; + word-break: normal; + word-spacing: normal; + white-space: normal; + line-break: auto; + font-size: 0.875rem; + word-wrap: break-word; + background-color: #fff; + background-clip: padding-box; + border: 1px solid rgba(0, 0, 0, 0.2); + border-radius: 0.3rem; +} + +.popover .arrow { + position: absolute; + display: block; + width: 10px; + height: 5px; +} + +.popover .arrow::before, +.popover .arrow::after { + position: absolute; + display: block; + border-color: transparent; + border-style: solid; +} + +.popover .arrow::before { + content: ""; + border-width: 11px; +} + +.popover .arrow::after { + content: ""; + border-width: 11px; +} + +.popover.bs-popover-top, .popover.bs-popover-auto[x-placement^="top"] { + margin-bottom: 10px; +} + +.popover.bs-popover-top .arrow, .popover.bs-popover-auto[x-placement^="top"] .arrow { + bottom: 0; +} + +.popover.bs-popover-top .arrow::before, .popover.bs-popover-auto[x-placement^="top"] .arrow::before, +.popover.bs-popover-top .arrow::after, .popover.bs-popover-auto[x-placement^="top"] .arrow::after { + border-bottom-width: 0; +} + +.popover.bs-popover-top .arrow::before, .popover.bs-popover-auto[x-placement^="top"] .arrow::before { + bottom: -11px; + margin-left: -6px; + border-top-color: rgba(0, 0, 0, 0.25); +} + +.popover.bs-popover-top .arrow::after, .popover.bs-popover-auto[x-placement^="top"] .arrow::after { + bottom: -10px; + margin-left: -6px; + border-top-color: #fff; +} + +.popover.bs-popover-right, .popover.bs-popover-auto[x-placement^="right"] { + margin-left: 10px; +} + +.popover.bs-popover-right .arrow, .popover.bs-popover-auto[x-placement^="right"] .arrow { + left: 0; +} + +.popover.bs-popover-right .arrow::before, .popover.bs-popover-auto[x-placement^="right"] .arrow::before, +.popover.bs-popover-right .arrow::after, .popover.bs-popover-auto[x-placement^="right"] .arrow::after { + margin-top: -8px; + border-left-width: 0; +} + +.popover.bs-popover-right .arrow::before, .popover.bs-popover-auto[x-placement^="right"] .arrow::before { + left: -11px; + border-right-color: rgba(0, 0, 0, 0.25); +} + +.popover.bs-popover-right .arrow::after, .popover.bs-popover-auto[x-placement^="right"] .arrow::after { + left: -10px; + border-right-color: #fff; +} + +.popover.bs-popover-bottom, .popover.bs-popover-auto[x-placement^="bottom"] { + margin-top: 10px; +} + +.popover.bs-popover-bottom .arrow, .popover.bs-popover-auto[x-placement^="bottom"] .arrow { + top: 0; +} + +.popover.bs-popover-bottom .arrow::before, .popover.bs-popover-auto[x-placement^="bottom"] .arrow::before, +.popover.bs-popover-bottom .arrow::after, .popover.bs-popover-auto[x-placement^="bottom"] .arrow::after { + margin-left: -7px; + border-top-width: 0; +} + +.popover.bs-popover-bottom .arrow::before, .popover.bs-popover-auto[x-placement^="bottom"] .arrow::before { + top: -11px; + border-bottom-color: rgba(0, 0, 0, 0.25); +} + +.popover.bs-popover-bottom .arrow::after, .popover.bs-popover-auto[x-placement^="bottom"] .arrow::after { + top: -10px; + border-bottom-color: #fff; +} + +.popover.bs-popover-bottom .popover-header::before, .popover.bs-popover-auto[x-placement^="bottom"] .popover-header::before { + position: absolute; + top: 0; + left: 50%; + display: block; + width: 20px; + margin-left: -10px; + content: ""; + border-bottom: 1px solid #f7f7f7; +} + +.popover.bs-popover-left, .popover.bs-popover-auto[x-placement^="left"] { + margin-right: 10px; +} + +.popover.bs-popover-left .arrow, .popover.bs-popover-auto[x-placement^="left"] .arrow { + right: 0; +} + +.popover.bs-popover-left .arrow::before, .popover.bs-popover-auto[x-placement^="left"] .arrow::before, +.popover.bs-popover-left .arrow::after, .popover.bs-popover-auto[x-placement^="left"] .arrow::after { + margin-top: -8px; + border-right-width: 0; +} + +.popover.bs-popover-left .arrow::before, .popover.bs-popover-auto[x-placement^="left"] .arrow::before { + right: -11px; + border-left-color: rgba(0, 0, 0, 0.25); +} + +.popover.bs-popover-left .arrow::after, .popover.bs-popover-auto[x-placement^="left"] .arrow::after { + right: -10px; + border-left-color: #fff; +} + +.popover-header { + padding: 8px 14px; + margin-bottom: 0; + font-size: 1rem; + color: inherit; + background-color: #f7f7f7; + border-bottom: 1px solid #ebebeb; + border-top-left-radius: calc(0.3rem - 1px); + border-top-right-radius: calc(0.3rem - 1px); +} + +.popover-header:empty { + display: none; +} + +.popover-body { + padding: 9px 14px; + color: #212529; +} + +.carousel { + position: relative; +} + +.carousel-inner { + position: relative; + width: 100%; + overflow: hidden; +} + +.carousel-item { + position: relative; + display: none; + -ms-flex-align: center; + align-items: center; + width: 100%; + transition: -webkit-transform 0.6s ease; + transition: transform 0.6s ease; + transition: transform 0.6s ease, -webkit-transform 0.6s ease; + -webkit-backface-visibility: hidden; + backface-visibility: hidden; + -webkit-perspective: 1000px; + perspective: 1000px; +} + +.carousel-item.active, +.carousel-item-next, +.carousel-item-prev { + display: block; +} + +.carousel-item-next, +.carousel-item-prev { + position: absolute; + top: 0; +} + +.carousel-item-next.carousel-item-left, +.carousel-item-prev.carousel-item-right { + -webkit-transform: translateX(0); + transform: translateX(0); +} + +@supports ((-webkit-transform-style: preserve-3d) or (transform-style: preserve-3d)) { + .carousel-item-next.carousel-item-left, + .carousel-item-prev.carousel-item-right { + -webkit-transform: translate3d(0, 0, 0); + transform: translate3d(0, 0, 0); + } +} + +.carousel-item-next, +.active.carousel-item-right { + -webkit-transform: translateX(100%); + transform: translateX(100%); +} + +@supports ((-webkit-transform-style: preserve-3d) or (transform-style: preserve-3d)) { + .carousel-item-next, + .active.carousel-item-right { + -webkit-transform: translate3d(100%, 0, 0); + transform: translate3d(100%, 0, 0); + } +} + +.carousel-item-prev, +.active.carousel-item-left { + -webkit-transform: translateX(-100%); + transform: translateX(-100%); +} + +@supports ((-webkit-transform-style: preserve-3d) or (transform-style: preserve-3d)) { + .carousel-item-prev, + .active.carousel-item-left { + -webkit-transform: translate3d(-100%, 0, 0); + transform: translate3d(-100%, 0, 0); + } +} + +.carousel-control-prev, +.carousel-control-next { + position: absolute; + top: 0; + bottom: 0; + display: -ms-flexbox; + display: flex; + -ms-flex-align: center; + align-items: center; + -ms-flex-pack: center; + justify-content: center; + width: 15%; + color: #fff; + text-align: center; + opacity: 0.5; +} + +.carousel-control-prev:focus, .carousel-control-prev:hover, +.carousel-control-next:focus, +.carousel-control-next:hover { + color: #fff; + text-decoration: none; + outline: 0; + opacity: .9; +} + +.carousel-control-prev { + left: 0; +} + +.carousel-control-next { + right: 0; +} + +.carousel-control-prev-icon, +.carousel-control-next-icon { + display: inline-block; + width: 20px; + height: 20px; + background: transparent no-repeat center center; + background-size: 100% 100%; +} + +.carousel-control-prev-icon { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M4 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E"); +} + +.carousel-control-next-icon { + background-image: url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M1.5 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E"); +} + +.carousel-indicators { + position: absolute; + right: 0; + bottom: 10px; + left: 0; + z-index: 15; + display: -ms-flexbox; + display: flex; + -ms-flex-pack: center; + justify-content: center; + padding-left: 0; + margin-right: 15%; + margin-left: 15%; + list-style: none; +} + +.carousel-indicators li { + position: relative; + -ms-flex: 0 1 auto; + flex: 0 1 auto; + width: 30px; + height: 3px; + margin-right: 3px; + margin-left: 3px; + text-indent: -999px; + background-color: rgba(255, 255, 255, 0.5); +} + +.carousel-indicators li::before { + position: absolute; + top: -10px; + left: 0; + display: inline-block; + width: 100%; + height: 10px; + content: ""; +} + +.carousel-indicators li::after { + position: absolute; + bottom: -10px; + left: 0; + display: inline-block; + width: 100%; + height: 10px; + content: ""; +} + +.carousel-indicators .active { + background-color: #fff; +} + +.carousel-caption { + position: absolute; + right: 15%; + bottom: 20px; + left: 15%; + z-index: 10; + padding-top: 20px; + padding-bottom: 20px; + color: #fff; + text-align: center; +} + +.align-baseline { + vertical-align: baseline !important; +} + +.align-top { + vertical-align: top !important; +} + +.align-middle { + vertical-align: middle !important; +} + +.align-bottom { + vertical-align: bottom !important; +} + +.align-text-bottom { + vertical-align: text-bottom !important; +} + +.align-text-top { + vertical-align: text-top !important; +} + +.bg-primary { + background-color: #007bff !important; +} + +a.bg-primary:focus, a.bg-primary:hover { + background-color: #0062cc !important; +} + +.bg-secondary { + background-color: #868e96 !important; +} + +a.bg-secondary:focus, a.bg-secondary:hover { + background-color: #6c757d !important; +} + +.bg-success { + background-color: #28a745 !important; +} + +a.bg-success:focus, a.bg-success:hover { + background-color: #1e7e34 !important; +} + +.bg-info { + background-color: #17a2b8 !important; +} + +a.bg-info:focus, a.bg-info:hover { + background-color: #117a8b !important; +} + +.bg-warning { + background-color: #ffc107 !important; +} + +a.bg-warning:focus, a.bg-warning:hover { + background-color: #d39e00 !important; +} + +.bg-danger { + background-color: #dc3545 !important; +} + +a.bg-danger:focus, a.bg-danger:hover { + background-color: #bd2130 !important; +} + +.bg-light { + background-color: #f8f9fa !important; +} + +a.bg-light:focus, a.bg-light:hover { + background-color: #dae0e5 !important; +} + +.bg-dark { + background-color: #343a40 !important; +} + +a.bg-dark:focus, a.bg-dark:hover { + background-color: #1d2124 !important; +} + +.bg-white { + background-color: #fff !important; +} + +.bg-transparent { + background-color: transparent !important; +} + +.border { + border: 1px solid #e9ecef !important; +} + +.border-0 { + border: 0 !important; +} + +.border-top-0 { + border-top: 0 !important; +} + +.border-right-0 { + border-right: 0 !important; +} + +.border-bottom-0 { + border-bottom: 0 !important; +} + +.border-left-0 { + border-left: 0 !important; +} + +.border-primary { + border-color: #007bff !important; +} + +.border-secondary { + border-color: #868e96 !important; +} + +.border-success { + border-color: #28a745 !important; +} + +.border-info { + border-color: #17a2b8 !important; +} + +.border-warning { + border-color: #ffc107 !important; +} + +.border-danger { + border-color: #dc3545 !important; +} + +.border-light { + border-color: #f8f9fa !important; +} + +.border-dark { + border-color: #343a40 !important; +} + +.border-white { + border-color: #fff !important; +} + +.rounded { + border-radius: 0.25rem !important; +} + +.rounded-top { + border-top-left-radius: 0.25rem !important; + border-top-right-radius: 0.25rem !important; +} + +.rounded-right { + border-top-right-radius: 0.25rem !important; + border-bottom-right-radius: 0.25rem !important; +} + +.rounded-bottom { + border-bottom-right-radius: 0.25rem !important; + border-bottom-left-radius: 0.25rem !important; +} + +.rounded-left { + border-top-left-radius: 0.25rem !important; + border-bottom-left-radius: 0.25rem !important; +} + +.rounded-circle { + border-radius: 50%; +} + +.rounded-0 { + border-radius: 0; +} + +.clearfix::after { + display: block; + clear: both; + content: ""; +} + +.d-none { + display: none !important; +} + +.d-inline { + display: inline !important; +} + +.d-inline-block { + display: inline-block !important; +} + +.d-block { + display: block !important; +} + +.d-table { + display: table !important; +} + +.d-table-cell { + display: table-cell !important; +} + +.d-flex { + display: -ms-flexbox !important; + display: flex !important; +} + +.d-inline-flex { + display: -ms-inline-flexbox !important; + display: inline-flex !important; +} + +@media (min-width: 576px) { + .d-sm-none { + display: none !important; + } + .d-sm-inline { + display: inline !important; + } + .d-sm-inline-block { + display: inline-block !important; + } + .d-sm-block { + display: block !important; + } + .d-sm-table { + display: table !important; + } + .d-sm-table-cell { + display: table-cell !important; + } + .d-sm-flex { + display: -ms-flexbox !important; + display: flex !important; + } + .d-sm-inline-flex { + display: -ms-inline-flexbox !important; + display: inline-flex !important; + } +} + +@media (min-width: 768px) { + .d-md-none { + display: none !important; + } + .d-md-inline { + display: inline !important; + } + .d-md-inline-block { + display: inline-block !important; + } + .d-md-block { + display: block !important; + } + .d-md-table { + display: table !important; + } + .d-md-table-cell { + display: table-cell !important; + } + .d-md-flex { + display: -ms-flexbox !important; + display: flex !important; + } + .d-md-inline-flex { + display: -ms-inline-flexbox !important; + display: inline-flex !important; + } +} + +@media (min-width: 992px) { + .d-lg-none { + display: none !important; + } + .d-lg-inline { + display: inline !important; + } + .d-lg-inline-block { + display: inline-block !important; + } + .d-lg-block { + display: block !important; + } + .d-lg-table { + display: table !important; + } + .d-lg-table-cell { + display: table-cell !important; + } + .d-lg-flex { + display: -ms-flexbox !important; + display: flex !important; + } + .d-lg-inline-flex { + display: -ms-inline-flexbox !important; + display: inline-flex !important; + } +} + +@media (min-width: 1200px) { + .d-xl-none { + display: none !important; + } + .d-xl-inline { + display: inline !important; + } + .d-xl-inline-block { + display: inline-block !important; + } + .d-xl-block { + display: block !important; + } + .d-xl-table { + display: table !important; + } + .d-xl-table-cell { + display: table-cell !important; + } + .d-xl-flex { + display: -ms-flexbox !important; + display: flex !important; + } + .d-xl-inline-flex { + display: -ms-inline-flexbox !important; + display: inline-flex !important; + } +} + +.d-print-block { + display: none !important; +} + +@media print { + .d-print-block { + display: block !important; + } +} + +.d-print-inline { + display: none !important; +} + +@media print { + .d-print-inline { + display: inline !important; + } +} + +.d-print-inline-block { + display: none !important; +} + +@media print { + .d-print-inline-block { + display: inline-block !important; + } +} + +@media print { + .d-print-none { + display: none !important; + } +} + +.embed-responsive { + position: relative; + display: block; + width: 100%; + padding: 0; + overflow: hidden; +} + +.embed-responsive::before { + display: block; + content: ""; +} + +.embed-responsive .embed-responsive-item, +.embed-responsive iframe, +.embed-responsive embed, +.embed-responsive object, +.embed-responsive video { + position: absolute; + top: 0; + bottom: 0; + left: 0; + width: 100%; + height: 100%; + border: 0; +} + +.embed-responsive-21by9::before { + padding-top: 42.857143%; +} + +.embed-responsive-16by9::before { + padding-top: 56.25%; +} + +.embed-responsive-4by3::before { + padding-top: 75%; +} + +.embed-responsive-1by1::before { + padding-top: 100%; +} + +.flex-row { + -ms-flex-direction: row !important; + flex-direction: row !important; +} + +.flex-column { + -ms-flex-direction: column !important; + flex-direction: column !important; +} + +.flex-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; +} + +.flex-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; +} + +.flex-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; +} + +.flex-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; +} + +.flex-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; +} + +.justify-content-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; +} + +.justify-content-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; +} + +.justify-content-center { + -ms-flex-pack: center !important; + justify-content: center !important; +} + +.justify-content-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; +} + +.justify-content-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; +} + +.align-items-start { + -ms-flex-align: start !important; + align-items: flex-start !important; +} + +.align-items-end { + -ms-flex-align: end !important; + align-items: flex-end !important; +} + +.align-items-center { + -ms-flex-align: center !important; + align-items: center !important; +} + +.align-items-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; +} + +.align-items-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; +} + +.align-content-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; +} + +.align-content-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; +} + +.align-content-center { + -ms-flex-line-pack: center !important; + align-content: center !important; +} + +.align-content-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; +} + +.align-content-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; +} + +.align-content-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; +} + +.align-self-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; +} + +.align-self-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; +} + +.align-self-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; +} + +.align-self-center { + -ms-flex-item-align: center !important; + align-self: center !important; +} + +.align-self-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; +} + +.align-self-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; +} + +@media (min-width: 576px) { + .flex-sm-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-sm-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-sm-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-sm-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-sm-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-sm-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-sm-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-sm-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-sm-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-sm-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-sm-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-sm-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-sm-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-sm-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-sm-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-sm-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-sm-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-sm-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-sm-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-sm-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-sm-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-sm-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-sm-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-sm-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-sm-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-sm-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-sm-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-sm-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-sm-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 768px) { + .flex-md-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-md-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-md-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-md-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-md-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-md-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-md-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-md-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-md-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-md-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-md-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-md-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-md-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-md-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-md-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-md-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-md-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-md-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-md-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-md-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-md-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-md-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-md-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-md-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-md-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-md-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-md-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-md-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-md-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 992px) { + .flex-lg-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-lg-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-lg-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-lg-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-lg-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-lg-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-lg-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-lg-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-lg-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-lg-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-lg-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-lg-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-lg-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-lg-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-lg-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-lg-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-lg-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-lg-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-lg-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-lg-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-lg-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-lg-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-lg-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-lg-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-lg-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-lg-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-lg-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-lg-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-lg-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +@media (min-width: 1200px) { + .flex-xl-row { + -ms-flex-direction: row !important; + flex-direction: row !important; + } + .flex-xl-column { + -ms-flex-direction: column !important; + flex-direction: column !important; + } + .flex-xl-row-reverse { + -ms-flex-direction: row-reverse !important; + flex-direction: row-reverse !important; + } + .flex-xl-column-reverse { + -ms-flex-direction: column-reverse !important; + flex-direction: column-reverse !important; + } + .flex-xl-wrap { + -ms-flex-wrap: wrap !important; + flex-wrap: wrap !important; + } + .flex-xl-nowrap { + -ms-flex-wrap: nowrap !important; + flex-wrap: nowrap !important; + } + .flex-xl-wrap-reverse { + -ms-flex-wrap: wrap-reverse !important; + flex-wrap: wrap-reverse !important; + } + .justify-content-xl-start { + -ms-flex-pack: start !important; + justify-content: flex-start !important; + } + .justify-content-xl-end { + -ms-flex-pack: end !important; + justify-content: flex-end !important; + } + .justify-content-xl-center { + -ms-flex-pack: center !important; + justify-content: center !important; + } + .justify-content-xl-between { + -ms-flex-pack: justify !important; + justify-content: space-between !important; + } + .justify-content-xl-around { + -ms-flex-pack: distribute !important; + justify-content: space-around !important; + } + .align-items-xl-start { + -ms-flex-align: start !important; + align-items: flex-start !important; + } + .align-items-xl-end { + -ms-flex-align: end !important; + align-items: flex-end !important; + } + .align-items-xl-center { + -ms-flex-align: center !important; + align-items: center !important; + } + .align-items-xl-baseline { + -ms-flex-align: baseline !important; + align-items: baseline !important; + } + .align-items-xl-stretch { + -ms-flex-align: stretch !important; + align-items: stretch !important; + } + .align-content-xl-start { + -ms-flex-line-pack: start !important; + align-content: flex-start !important; + } + .align-content-xl-end { + -ms-flex-line-pack: end !important; + align-content: flex-end !important; + } + .align-content-xl-center { + -ms-flex-line-pack: center !important; + align-content: center !important; + } + .align-content-xl-between { + -ms-flex-line-pack: justify !important; + align-content: space-between !important; + } + .align-content-xl-around { + -ms-flex-line-pack: distribute !important; + align-content: space-around !important; + } + .align-content-xl-stretch { + -ms-flex-line-pack: stretch !important; + align-content: stretch !important; + } + .align-self-xl-auto { + -ms-flex-item-align: auto !important; + align-self: auto !important; + } + .align-self-xl-start { + -ms-flex-item-align: start !important; + align-self: flex-start !important; + } + .align-self-xl-end { + -ms-flex-item-align: end !important; + align-self: flex-end !important; + } + .align-self-xl-center { + -ms-flex-item-align: center !important; + align-self: center !important; + } + .align-self-xl-baseline { + -ms-flex-item-align: baseline !important; + align-self: baseline !important; + } + .align-self-xl-stretch { + -ms-flex-item-align: stretch !important; + align-self: stretch !important; + } +} + +.float-left { + float: left !important; +} + +.float-right { + float: right !important; +} + +.float-none { + float: none !important; +} + +@media (min-width: 576px) { + .float-sm-left { + float: left !important; + } + .float-sm-right { + float: right !important; + } + .float-sm-none { + float: none !important; + } +} + +@media (min-width: 768px) { + .float-md-left { + float: left !important; + } + .float-md-right { + float: right !important; + } + .float-md-none { + float: none !important; + } +} + +@media (min-width: 992px) { + .float-lg-left { + float: left !important; + } + .float-lg-right { + float: right !important; + } + .float-lg-none { + float: none !important; + } +} + +@media (min-width: 1200px) { + .float-xl-left { + float: left !important; + } + .float-xl-right { + float: right !important; + } + .float-xl-none { + float: none !important; + } +} + +.fixed-top { + position: fixed; + top: 0; + right: 0; + left: 0; + z-index: 1030; +} + +.fixed-bottom { + position: fixed; + right: 0; + bottom: 0; + left: 0; + z-index: 1030; +} + +@supports ((position: -webkit-sticky) or (position: sticky)) { + .sticky-top { + position: -webkit-sticky; + position: sticky; + top: 0; + z-index: 1020; + } +} + +.sr-only { + position: absolute; + width: 1px; + height: 1px; + padding: 0; + overflow: hidden; + clip: rect(0, 0, 0, 0); + white-space: nowrap; + -webkit-clip-path: inset(50%); + clip-path: inset(50%); + border: 0; +} + +.sr-only-focusable:active, .sr-only-focusable:focus { + position: static; + width: auto; + height: auto; + overflow: visible; + clip: auto; + white-space: normal; + -webkit-clip-path: none; + clip-path: none; +} + +.w-25 { + width: 25% !important; +} + +.w-50 { + width: 50% !important; +} + +.w-75 { + width: 75% !important; +} + +.w-100 { + width: 100% !important; +} + +.h-25 { + height: 25% !important; +} + +.h-50 { + height: 50% !important; +} + +.h-75 { + height: 75% !important; +} + +.h-100 { + height: 100% !important; +} + +.mw-100 { + max-width: 100% !important; +} + +.mh-100 { + max-height: 100% !important; +} + +.m-0 { + margin: 0 !important; +} + +.mt-0 { + margin-top: 0 !important; +} + +.mr-0 { + margin-right: 0 !important; +} + +.mb-0 { + margin-bottom: 0 !important; +} + +.ml-0 { + margin-left: 0 !important; +} + +.mx-0 { + margin-right: 0 !important; + margin-left: 0 !important; +} + +.my-0 { + margin-top: 0 !important; + margin-bottom: 0 !important; +} + +.m-1 { + margin: 0.25rem !important; +} + +.mt-1 { + margin-top: 0.25rem !important; +} + +.mr-1 { + margin-right: 0.25rem !important; +} + +.mb-1 { + margin-bottom: 0.25rem !important; +} + +.ml-1 { + margin-left: 0.25rem !important; +} + +.mx-1 { + margin-right: 0.25rem !important; + margin-left: 0.25rem !important; +} + +.my-1 { + margin-top: 0.25rem !important; + margin-bottom: 0.25rem !important; +} + +.m-2 { + margin: 0.5rem !important; +} + +.mt-2 { + margin-top: 0.5rem !important; +} + +.mr-2 { + margin-right: 0.5rem !important; +} + +.mb-2 { + margin-bottom: 0.5rem !important; +} + +.ml-2 { + margin-left: 0.5rem !important; +} + +.mx-2 { + margin-right: 0.5rem !important; + margin-left: 0.5rem !important; +} + +.my-2 { + margin-top: 0.5rem !important; + margin-bottom: 0.5rem !important; +} + +.m-3 { + margin: 1rem !important; +} + +.mt-3 { + margin-top: 1rem !important; +} + +.mr-3 { + margin-right: 1rem !important; +} + +.mb-3 { + margin-bottom: 1rem !important; +} + +.ml-3 { + margin-left: 1rem !important; +} + +.mx-3 { + margin-right: 1rem !important; + margin-left: 1rem !important; +} + +.my-3 { + margin-top: 1rem !important; + margin-bottom: 1rem !important; +} + +.m-4 { + margin: 1.5rem !important; +} + +.mt-4 { + margin-top: 1.5rem !important; +} + +.mr-4 { + margin-right: 1.5rem !important; +} + +.mb-4 { + margin-bottom: 1.5rem !important; +} + +.ml-4 { + margin-left: 1.5rem !important; +} + +.mx-4 { + margin-right: 1.5rem !important; + margin-left: 1.5rem !important; +} + +.my-4 { + margin-top: 1.5rem !important; + margin-bottom: 1.5rem !important; +} + +.m-5 { + margin: 3rem !important; +} + +.mt-5 { + margin-top: 3rem !important; +} + +.mr-5 { + margin-right: 3rem !important; +} + +.mb-5 { + margin-bottom: 3rem !important; +} + +.ml-5 { + margin-left: 3rem !important; +} + +.mx-5 { + margin-right: 3rem !important; + margin-left: 3rem !important; +} + +.my-5 { + margin-top: 3rem !important; + margin-bottom: 3rem !important; +} + +.p-0 { + padding: 0 !important; +} + +.pt-0 { + padding-top: 0 !important; +} + +.pr-0 { + padding-right: 0 !important; +} + +.pb-0 { + padding-bottom: 0 !important; +} + +.pl-0 { + padding-left: 0 !important; +} + +.px-0 { + padding-right: 0 !important; + padding-left: 0 !important; +} + +.py-0 { + padding-top: 0 !important; + padding-bottom: 0 !important; +} + +.p-1 { + padding: 0.25rem !important; +} + +.pt-1 { + padding-top: 0.25rem !important; +} + +.pr-1 { + padding-right: 0.25rem !important; +} + +.pb-1 { + padding-bottom: 0.25rem !important; +} + +.pl-1 { + padding-left: 0.25rem !important; +} + +.px-1 { + padding-right: 0.25rem !important; + padding-left: 0.25rem !important; +} + +.py-1 { + padding-top: 0.25rem !important; + padding-bottom: 0.25rem !important; +} + +.p-2 { + padding: 0.5rem !important; +} + +.pt-2 { + padding-top: 0.5rem !important; +} + +.pr-2 { + padding-right: 0.5rem !important; +} + +.pb-2 { + padding-bottom: 0.5rem !important; +} + +.pl-2 { + padding-left: 0.5rem !important; +} + +.px-2 { + padding-right: 0.5rem !important; + padding-left: 0.5rem !important; +} + +.py-2 { + padding-top: 0.5rem !important; + padding-bottom: 0.5rem !important; +} + +.p-3 { + padding: 1rem !important; +} + +.pt-3 { + padding-top: 1rem !important; +} + +.pr-3 { + padding-right: 1rem !important; +} + +.pb-3 { + padding-bottom: 1rem !important; +} + +.pl-3 { + padding-left: 1rem !important; +} + +.px-3 { + padding-right: 1rem !important; + padding-left: 1rem !important; +} + +.py-3 { + padding-top: 1rem !important; + padding-bottom: 1rem !important; +} + +.p-4 { + padding: 1.5rem !important; +} + +.pt-4 { + padding-top: 1.5rem !important; +} + +.pr-4 { + padding-right: 1.5rem !important; +} + +.pb-4 { + padding-bottom: 1.5rem !important; +} + +.pl-4 { + padding-left: 1.5rem !important; +} + +.px-4 { + padding-right: 1.5rem !important; + padding-left: 1.5rem !important; +} + +.py-4 { + padding-top: 1.5rem !important; + padding-bottom: 1.5rem !important; +} + +.p-5 { + padding: 3rem !important; +} + +.pt-5 { + padding-top: 3rem !important; +} + +.pr-5 { + padding-right: 3rem !important; +} + +.pb-5 { + padding-bottom: 3rem !important; +} + +.pl-5 { + padding-left: 3rem !important; +} + +.px-5 { + padding-right: 3rem !important; + padding-left: 3rem !important; +} + +.py-5 { + padding-top: 3rem !important; + padding-bottom: 3rem !important; +} + +.m-auto { + margin: auto !important; +} + +.mt-auto { + margin-top: auto !important; +} + +.mr-auto { + margin-right: auto !important; +} + +.mb-auto { + margin-bottom: auto !important; +} + +.ml-auto { + margin-left: auto !important; +} + +.mx-auto { + margin-right: auto !important; + margin-left: auto !important; +} + +.my-auto { + margin-top: auto !important; + margin-bottom: auto !important; +} + +@media (min-width: 576px) { + .m-sm-0 { + margin: 0 !important; + } + .mt-sm-0 { + margin-top: 0 !important; + } + .mr-sm-0 { + margin-right: 0 !important; + } + .mb-sm-0 { + margin-bottom: 0 !important; + } + .ml-sm-0 { + margin-left: 0 !important; + } + .mx-sm-0 { + margin-right: 0 !important; + margin-left: 0 !important; + } + .my-sm-0 { + margin-top: 0 !important; + margin-bottom: 0 !important; + } + .m-sm-1 { + margin: 0.25rem !important; + } + .mt-sm-1 { + margin-top: 0.25rem !important; + } + .mr-sm-1 { + margin-right: 0.25rem !important; + } + .mb-sm-1 { + margin-bottom: 0.25rem !important; + } + .ml-sm-1 { + margin-left: 0.25rem !important; + } + .mx-sm-1 { + margin-right: 0.25rem !important; + margin-left: 0.25rem !important; + } + .my-sm-1 { + margin-top: 0.25rem !important; + margin-bottom: 0.25rem !important; + } + .m-sm-2 { + margin: 0.5rem !important; + } + .mt-sm-2 { + margin-top: 0.5rem !important; + } + .mr-sm-2 { + margin-right: 0.5rem !important; + } + .mb-sm-2 { + margin-bottom: 0.5rem !important; + } + .ml-sm-2 { + margin-left: 0.5rem !important; + } + .mx-sm-2 { + margin-right: 0.5rem !important; + margin-left: 0.5rem !important; + } + .my-sm-2 { + margin-top: 0.5rem !important; + margin-bottom: 0.5rem !important; + } + .m-sm-3 { + margin: 1rem !important; + } + .mt-sm-3 { + margin-top: 1rem !important; + } + .mr-sm-3 { + margin-right: 1rem !important; + } + .mb-sm-3 { + margin-bottom: 1rem !important; + } + .ml-sm-3 { + margin-left: 1rem !important; + } + .mx-sm-3 { + margin-right: 1rem !important; + margin-left: 1rem !important; + } + .my-sm-3 { + margin-top: 1rem !important; + margin-bottom: 1rem !important; + } + .m-sm-4 { + margin: 1.5rem !important; + } + .mt-sm-4 { + margin-top: 1.5rem !important; + } + .mr-sm-4 { + margin-right: 1.5rem !important; + } + .mb-sm-4 { + margin-bottom: 1.5rem !important; + } + .ml-sm-4 { + margin-left: 1.5rem !important; + } + .mx-sm-4 { + margin-right: 1.5rem !important; + margin-left: 1.5rem !important; + } + .my-sm-4 { + margin-top: 1.5rem !important; + margin-bottom: 1.5rem !important; + } + .m-sm-5 { + margin: 3rem !important; + } + .mt-sm-5 { + margin-top: 3rem !important; + } + .mr-sm-5 { + margin-right: 3rem !important; + } + .mb-sm-5 { + margin-bottom: 3rem !important; + } + .ml-sm-5 { + margin-left: 3rem !important; + } + .mx-sm-5 { + margin-right: 3rem !important; + margin-left: 3rem !important; + } + .my-sm-5 { + margin-top: 3rem !important; + margin-bottom: 3rem !important; + } + .p-sm-0 { + padding: 0 !important; + } + .pt-sm-0 { + padding-top: 0 !important; + } + .pr-sm-0 { + padding-right: 0 !important; + } + .pb-sm-0 { + padding-bottom: 0 !important; + } + .pl-sm-0 { + padding-left: 0 !important; + } + .px-sm-0 { + padding-right: 0 !important; + padding-left: 0 !important; + } + .py-sm-0 { + padding-top: 0 !important; + padding-bottom: 0 !important; + } + .p-sm-1 { + padding: 0.25rem !important; + } + .pt-sm-1 { + padding-top: 0.25rem !important; + } + .pr-sm-1 { + padding-right: 0.25rem !important; + } + .pb-sm-1 { + padding-bottom: 0.25rem !important; + } + .pl-sm-1 { + padding-left: 0.25rem !important; + } + .px-sm-1 { + padding-right: 0.25rem !important; + padding-left: 0.25rem !important; + } + .py-sm-1 { + padding-top: 0.25rem !important; + padding-bottom: 0.25rem !important; + } + .p-sm-2 { + padding: 0.5rem !important; + } + .pt-sm-2 { + padding-top: 0.5rem !important; + } + .pr-sm-2 { + padding-right: 0.5rem !important; + } + .pb-sm-2 { + padding-bottom: 0.5rem !important; + } + .pl-sm-2 { + padding-left: 0.5rem !important; + } + .px-sm-2 { + padding-right: 0.5rem !important; + padding-left: 0.5rem !important; + } + .py-sm-2 { + padding-top: 0.5rem !important; + padding-bottom: 0.5rem !important; + } + .p-sm-3 { + padding: 1rem !important; + } + .pt-sm-3 { + padding-top: 1rem !important; + } + .pr-sm-3 { + padding-right: 1rem !important; + } + .pb-sm-3 { + padding-bottom: 1rem !important; + } + .pl-sm-3 { + padding-left: 1rem !important; + } + .px-sm-3 { + padding-right: 1rem !important; + padding-left: 1rem !important; + } + .py-sm-3 { + padding-top: 1rem !important; + padding-bottom: 1rem !important; + } + .p-sm-4 { + padding: 1.5rem !important; + } + .pt-sm-4 { + padding-top: 1.5rem !important; + } + .pr-sm-4 { + padding-right: 1.5rem !important; + } + .pb-sm-4 { + padding-bottom: 1.5rem !important; + } + .pl-sm-4 { + padding-left: 1.5rem !important; + } + .px-sm-4 { + padding-right: 1.5rem !important; + padding-left: 1.5rem !important; + } + .py-sm-4 { + padding-top: 1.5rem !important; + padding-bottom: 1.5rem !important; + } + .p-sm-5 { + padding: 3rem !important; + } + .pt-sm-5 { + padding-top: 3rem !important; + } + .pr-sm-5 { + padding-right: 3rem !important; + } + .pb-sm-5 { + padding-bottom: 3rem !important; + } + .pl-sm-5 { + padding-left: 3rem !important; + } + .px-sm-5 { + padding-right: 3rem !important; + padding-left: 3rem !important; + } + .py-sm-5 { + padding-top: 3rem !important; + padding-bottom: 3rem !important; + } + .m-sm-auto { + margin: auto !important; + } + .mt-sm-auto { + margin-top: auto !important; + } + .mr-sm-auto { + margin-right: auto !important; + } + .mb-sm-auto { + margin-bottom: auto !important; + } + .ml-sm-auto { + margin-left: auto !important; + } + .mx-sm-auto { + margin-right: auto !important; + margin-left: auto !important; + } + .my-sm-auto { + margin-top: auto !important; + margin-bottom: auto !important; + } +} + +@media (min-width: 768px) { + .m-md-0 { + margin: 0 !important; + } + .mt-md-0 { + margin-top: 0 !important; + } + .mr-md-0 { + margin-right: 0 !important; + } + .mb-md-0 { + margin-bottom: 0 !important; + } + .ml-md-0 { + margin-left: 0 !important; + } + .mx-md-0 { + margin-right: 0 !important; + margin-left: 0 !important; + } + .my-md-0 { + margin-top: 0 !important; + margin-bottom: 0 !important; + } + .m-md-1 { + margin: 0.25rem !important; + } + .mt-md-1 { + margin-top: 0.25rem !important; + } + .mr-md-1 { + margin-right: 0.25rem !important; + } + .mb-md-1 { + margin-bottom: 0.25rem !important; + } + .ml-md-1 { + margin-left: 0.25rem !important; + } + .mx-md-1 { + margin-right: 0.25rem !important; + margin-left: 0.25rem !important; + } + .my-md-1 { + margin-top: 0.25rem !important; + margin-bottom: 0.25rem !important; + } + .m-md-2 { + margin: 0.5rem !important; + } + .mt-md-2 { + margin-top: 0.5rem !important; + } + .mr-md-2 { + margin-right: 0.5rem !important; + } + .mb-md-2 { + margin-bottom: 0.5rem !important; + } + .ml-md-2 { + margin-left: 0.5rem !important; + } + .mx-md-2 { + margin-right: 0.5rem !important; + margin-left: 0.5rem !important; + } + .my-md-2 { + margin-top: 0.5rem !important; + margin-bottom: 0.5rem !important; + } + .m-md-3 { + margin: 1rem !important; + } + .mt-md-3 { + margin-top: 1rem !important; + } + .mr-md-3 { + margin-right: 1rem !important; + } + .mb-md-3 { + margin-bottom: 1rem !important; + } + .ml-md-3 { + margin-left: 1rem !important; + } + .mx-md-3 { + margin-right: 1rem !important; + margin-left: 1rem !important; + } + .my-md-3 { + margin-top: 1rem !important; + margin-bottom: 1rem !important; + } + .m-md-4 { + margin: 1.5rem !important; + } + .mt-md-4 { + margin-top: 1.5rem !important; + } + .mr-md-4 { + margin-right: 1.5rem !important; + } + .mb-md-4 { + margin-bottom: 1.5rem !important; + } + .ml-md-4 { + margin-left: 1.5rem !important; + } + .mx-md-4 { + margin-right: 1.5rem !important; + margin-left: 1.5rem !important; + } + .my-md-4 { + margin-top: 1.5rem !important; + margin-bottom: 1.5rem !important; + } + .m-md-5 { + margin: 3rem !important; + } + .mt-md-5 { + margin-top: 3rem !important; + } + .mr-md-5 { + margin-right: 3rem !important; + } + .mb-md-5 { + margin-bottom: 3rem !important; + } + .ml-md-5 { + margin-left: 3rem !important; + } + .mx-md-5 { + margin-right: 3rem !important; + margin-left: 3rem !important; + } + .my-md-5 { + margin-top: 3rem !important; + margin-bottom: 3rem !important; + } + .p-md-0 { + padding: 0 !important; + } + .pt-md-0 { + padding-top: 0 !important; + } + .pr-md-0 { + padding-right: 0 !important; + } + .pb-md-0 { + padding-bottom: 0 !important; + } + .pl-md-0 { + padding-left: 0 !important; + } + .px-md-0 { + padding-right: 0 !important; + padding-left: 0 !important; + } + .py-md-0 { + padding-top: 0 !important; + padding-bottom: 0 !important; + } + .p-md-1 { + padding: 0.25rem !important; + } + .pt-md-1 { + padding-top: 0.25rem !important; + } + .pr-md-1 { + padding-right: 0.25rem !important; + } + .pb-md-1 { + padding-bottom: 0.25rem !important; + } + .pl-md-1 { + padding-left: 0.25rem !important; + } + .px-md-1 { + padding-right: 0.25rem !important; + padding-left: 0.25rem !important; + } + .py-md-1 { + padding-top: 0.25rem !important; + padding-bottom: 0.25rem !important; + } + .p-md-2 { + padding: 0.5rem !important; + } + .pt-md-2 { + padding-top: 0.5rem !important; + } + .pr-md-2 { + padding-right: 0.5rem !important; + } + .pb-md-2 { + padding-bottom: 0.5rem !important; + } + .pl-md-2 { + padding-left: 0.5rem !important; + } + .px-md-2 { + padding-right: 0.5rem !important; + padding-left: 0.5rem !important; + } + .py-md-2 { + padding-top: 0.5rem !important; + padding-bottom: 0.5rem !important; + } + .p-md-3 { + padding: 1rem !important; + } + .pt-md-3 { + padding-top: 1rem !important; + } + .pr-md-3 { + padding-right: 1rem !important; + } + .pb-md-3 { + padding-bottom: 1rem !important; + } + .pl-md-3 { + padding-left: 1rem !important; + } + .px-md-3 { + padding-right: 1rem !important; + padding-left: 1rem !important; + } + .py-md-3 { + padding-top: 1rem !important; + padding-bottom: 1rem !important; + } + .p-md-4 { + padding: 1.5rem !important; + } + .pt-md-4 { + padding-top: 1.5rem !important; + } + .pr-md-4 { + padding-right: 1.5rem !important; + } + .pb-md-4 { + padding-bottom: 1.5rem !important; + } + .pl-md-4 { + padding-left: 1.5rem !important; + } + .px-md-4 { + padding-right: 1.5rem !important; + padding-left: 1.5rem !important; + } + .py-md-4 { + padding-top: 1.5rem !important; + padding-bottom: 1.5rem !important; + } + .p-md-5 { + padding: 3rem !important; + } + .pt-md-5 { + padding-top: 3rem !important; + } + .pr-md-5 { + padding-right: 3rem !important; + } + .pb-md-5 { + padding-bottom: 3rem !important; + } + .pl-md-5 { + padding-left: 3rem !important; + } + .px-md-5 { + padding-right: 3rem !important; + padding-left: 3rem !important; + } + .py-md-5 { + padding-top: 3rem !important; + padding-bottom: 3rem !important; + } + .m-md-auto { + margin: auto !important; + } + .mt-md-auto { + margin-top: auto !important; + } + .mr-md-auto { + margin-right: auto !important; + } + .mb-md-auto { + margin-bottom: auto !important; + } + .ml-md-auto { + margin-left: auto !important; + } + .mx-md-auto { + margin-right: auto !important; + margin-left: auto !important; + } + .my-md-auto { + margin-top: auto !important; + margin-bottom: auto !important; + } +} + +@media (min-width: 992px) { + .m-lg-0 { + margin: 0 !important; + } + .mt-lg-0 { + margin-top: 0 !important; + } + .mr-lg-0 { + margin-right: 0 !important; + } + .mb-lg-0 { + margin-bottom: 0 !important; + } + .ml-lg-0 { + margin-left: 0 !important; + } + .mx-lg-0 { + margin-right: 0 !important; + margin-left: 0 !important; + } + .my-lg-0 { + margin-top: 0 !important; + margin-bottom: 0 !important; + } + .m-lg-1 { + margin: 0.25rem !important; + } + .mt-lg-1 { + margin-top: 0.25rem !important; + } + .mr-lg-1 { + margin-right: 0.25rem !important; + } + .mb-lg-1 { + margin-bottom: 0.25rem !important; + } + .ml-lg-1 { + margin-left: 0.25rem !important; + } + .mx-lg-1 { + margin-right: 0.25rem !important; + margin-left: 0.25rem !important; + } + .my-lg-1 { + margin-top: 0.25rem !important; + margin-bottom: 0.25rem !important; + } + .m-lg-2 { + margin: 0.5rem !important; + } + .mt-lg-2 { + margin-top: 0.5rem !important; + } + .mr-lg-2 { + margin-right: 0.5rem !important; + } + .mb-lg-2 { + margin-bottom: 0.5rem !important; + } + .ml-lg-2 { + margin-left: 0.5rem !important; + } + .mx-lg-2 { + margin-right: 0.5rem !important; + margin-left: 0.5rem !important; + } + .my-lg-2 { + margin-top: 0.5rem !important; + margin-bottom: 0.5rem !important; + } + .m-lg-3 { + margin: 1rem !important; + } + .mt-lg-3 { + margin-top: 1rem !important; + } + .mr-lg-3 { + margin-right: 1rem !important; + } + .mb-lg-3 { + margin-bottom: 1rem !important; + } + .ml-lg-3 { + margin-left: 1rem !important; + } + .mx-lg-3 { + margin-right: 1rem !important; + margin-left: 1rem !important; + } + .my-lg-3 { + margin-top: 1rem !important; + margin-bottom: 1rem !important; + } + .m-lg-4 { + margin: 1.5rem !important; + } + .mt-lg-4 { + margin-top: 1.5rem !important; + } + .mr-lg-4 { + margin-right: 1.5rem !important; + } + .mb-lg-4 { + margin-bottom: 1.5rem !important; + } + .ml-lg-4 { + margin-left: 1.5rem !important; + } + .mx-lg-4 { + margin-right: 1.5rem !important; + margin-left: 1.5rem !important; + } + .my-lg-4 { + margin-top: 1.5rem !important; + margin-bottom: 1.5rem !important; + } + .m-lg-5 { + margin: 3rem !important; + } + .mt-lg-5 { + margin-top: 3rem !important; + } + .mr-lg-5 { + margin-right: 3rem !important; + } + .mb-lg-5 { + margin-bottom: 3rem !important; + } + .ml-lg-5 { + margin-left: 3rem !important; + } + .mx-lg-5 { + margin-right: 3rem !important; + margin-left: 3rem !important; + } + .my-lg-5 { + margin-top: 3rem !important; + margin-bottom: 3rem !important; + } + .p-lg-0 { + padding: 0 !important; + } + .pt-lg-0 { + padding-top: 0 !important; + } + .pr-lg-0 { + padding-right: 0 !important; + } + .pb-lg-0 { + padding-bottom: 0 !important; + } + .pl-lg-0 { + padding-left: 0 !important; + } + .px-lg-0 { + padding-right: 0 !important; + padding-left: 0 !important; + } + .py-lg-0 { + padding-top: 0 !important; + padding-bottom: 0 !important; + } + .p-lg-1 { + padding: 0.25rem !important; + } + .pt-lg-1 { + padding-top: 0.25rem !important; + } + .pr-lg-1 { + padding-right: 0.25rem !important; + } + .pb-lg-1 { + padding-bottom: 0.25rem !important; + } + .pl-lg-1 { + padding-left: 0.25rem !important; + } + .px-lg-1 { + padding-right: 0.25rem !important; + padding-left: 0.25rem !important; + } + .py-lg-1 { + padding-top: 0.25rem !important; + padding-bottom: 0.25rem !important; + } + .p-lg-2 { + padding: 0.5rem !important; + } + .pt-lg-2 { + padding-top: 0.5rem !important; + } + .pr-lg-2 { + padding-right: 0.5rem !important; + } + .pb-lg-2 { + padding-bottom: 0.5rem !important; + } + .pl-lg-2 { + padding-left: 0.5rem !important; + } + .px-lg-2 { + padding-right: 0.5rem !important; + padding-left: 0.5rem !important; + } + .py-lg-2 { + padding-top: 0.5rem !important; + padding-bottom: 0.5rem !important; + } + .p-lg-3 { + padding: 1rem !important; + } + .pt-lg-3 { + padding-top: 1rem !important; + } + .pr-lg-3 { + padding-right: 1rem !important; + } + .pb-lg-3 { + padding-bottom: 1rem !important; + } + .pl-lg-3 { + padding-left: 1rem !important; + } + .px-lg-3 { + padding-right: 1rem !important; + padding-left: 1rem !important; + } + .py-lg-3 { + padding-top: 1rem !important; + padding-bottom: 1rem !important; + } + .p-lg-4 { + padding: 1.5rem !important; + } + .pt-lg-4 { + padding-top: 1.5rem !important; + } + .pr-lg-4 { + padding-right: 1.5rem !important; + } + .pb-lg-4 { + padding-bottom: 1.5rem !important; + } + .pl-lg-4 { + padding-left: 1.5rem !important; + } + .px-lg-4 { + padding-right: 1.5rem !important; + padding-left: 1.5rem !important; + } + .py-lg-4 { + padding-top: 1.5rem !important; + padding-bottom: 1.5rem !important; + } + .p-lg-5 { + padding: 3rem !important; + } + .pt-lg-5 { + padding-top: 3rem !important; + } + .pr-lg-5 { + padding-right: 3rem !important; + } + .pb-lg-5 { + padding-bottom: 3rem !important; + } + .pl-lg-5 { + padding-left: 3rem !important; + } + .px-lg-5 { + padding-right: 3rem !important; + padding-left: 3rem !important; + } + .py-lg-5 { + padding-top: 3rem !important; + padding-bottom: 3rem !important; + } + .m-lg-auto { + margin: auto !important; + } + .mt-lg-auto { + margin-top: auto !important; + } + .mr-lg-auto { + margin-right: auto !important; + } + .mb-lg-auto { + margin-bottom: auto !important; + } + .ml-lg-auto { + margin-left: auto !important; + } + .mx-lg-auto { + margin-right: auto !important; + margin-left: auto !important; + } + .my-lg-auto { + margin-top: auto !important; + margin-bottom: auto !important; + } +} + +@media (min-width: 1200px) { + .m-xl-0 { + margin: 0 !important; + } + .mt-xl-0 { + margin-top: 0 !important; + } + .mr-xl-0 { + margin-right: 0 !important; + } + .mb-xl-0 { + margin-bottom: 0 !important; + } + .ml-xl-0 { + margin-left: 0 !important; + } + .mx-xl-0 { + margin-right: 0 !important; + margin-left: 0 !important; + } + .my-xl-0 { + margin-top: 0 !important; + margin-bottom: 0 !important; + } + .m-xl-1 { + margin: 0.25rem !important; + } + .mt-xl-1 { + margin-top: 0.25rem !important; + } + .mr-xl-1 { + margin-right: 0.25rem !important; + } + .mb-xl-1 { + margin-bottom: 0.25rem !important; + } + .ml-xl-1 { + margin-left: 0.25rem !important; + } + .mx-xl-1 { + margin-right: 0.25rem !important; + margin-left: 0.25rem !important; + } + .my-xl-1 { + margin-top: 0.25rem !important; + margin-bottom: 0.25rem !important; + } + .m-xl-2 { + margin: 0.5rem !important; + } + .mt-xl-2 { + margin-top: 0.5rem !important; + } + .mr-xl-2 { + margin-right: 0.5rem !important; + } + .mb-xl-2 { + margin-bottom: 0.5rem !important; + } + .ml-xl-2 { + margin-left: 0.5rem !important; + } + .mx-xl-2 { + margin-right: 0.5rem !important; + margin-left: 0.5rem !important; + } + .my-xl-2 { + margin-top: 0.5rem !important; + margin-bottom: 0.5rem !important; + } + .m-xl-3 { + margin: 1rem !important; + } + .mt-xl-3 { + margin-top: 1rem !important; + } + .mr-xl-3 { + margin-right: 1rem !important; + } + .mb-xl-3 { + margin-bottom: 1rem !important; + } + .ml-xl-3 { + margin-left: 1rem !important; + } + .mx-xl-3 { + margin-right: 1rem !important; + margin-left: 1rem !important; + } + .my-xl-3 { + margin-top: 1rem !important; + margin-bottom: 1rem !important; + } + .m-xl-4 { + margin: 1.5rem !important; + } + .mt-xl-4 { + margin-top: 1.5rem !important; + } + .mr-xl-4 { + margin-right: 1.5rem !important; + } + .mb-xl-4 { + margin-bottom: 1.5rem !important; + } + .ml-xl-4 { + margin-left: 1.5rem !important; + } + .mx-xl-4 { + margin-right: 1.5rem !important; + margin-left: 1.5rem !important; + } + .my-xl-4 { + margin-top: 1.5rem !important; + margin-bottom: 1.5rem !important; + } + .m-xl-5 { + margin: 3rem !important; + } + .mt-xl-5 { + margin-top: 3rem !important; + } + .mr-xl-5 { + margin-right: 3rem !important; + } + .mb-xl-5 { + margin-bottom: 3rem !important; + } + .ml-xl-5 { + margin-left: 3rem !important; + } + .mx-xl-5 { + margin-right: 3rem !important; + margin-left: 3rem !important; + } + .my-xl-5 { + margin-top: 3rem !important; + margin-bottom: 3rem !important; + } + .p-xl-0 { + padding: 0 !important; + } + .pt-xl-0 { + padding-top: 0 !important; + } + .pr-xl-0 { + padding-right: 0 !important; + } + .pb-xl-0 { + padding-bottom: 0 !important; + } + .pl-xl-0 { + padding-left: 0 !important; + } + .px-xl-0 { + padding-right: 0 !important; + padding-left: 0 !important; + } + .py-xl-0 { + padding-top: 0 !important; + padding-bottom: 0 !important; + } + .p-xl-1 { + padding: 0.25rem !important; + } + .pt-xl-1 { + padding-top: 0.25rem !important; + } + .pr-xl-1 { + padding-right: 0.25rem !important; + } + .pb-xl-1 { + padding-bottom: 0.25rem !important; + } + .pl-xl-1 { + padding-left: 0.25rem !important; + } + .px-xl-1 { + padding-right: 0.25rem !important; + padding-left: 0.25rem !important; + } + .py-xl-1 { + padding-top: 0.25rem !important; + padding-bottom: 0.25rem !important; + } + .p-xl-2 { + padding: 0.5rem !important; + } + .pt-xl-2 { + padding-top: 0.5rem !important; + } + .pr-xl-2 { + padding-right: 0.5rem !important; + } + .pb-xl-2 { + padding-bottom: 0.5rem !important; + } + .pl-xl-2 { + padding-left: 0.5rem !important; + } + .px-xl-2 { + padding-right: 0.5rem !important; + padding-left: 0.5rem !important; + } + .py-xl-2 { + padding-top: 0.5rem !important; + padding-bottom: 0.5rem !important; + } + .p-xl-3 { + padding: 1rem !important; + } + .pt-xl-3 { + padding-top: 1rem !important; + } + .pr-xl-3 { + padding-right: 1rem !important; + } + .pb-xl-3 { + padding-bottom: 1rem !important; + } + .pl-xl-3 { + padding-left: 1rem !important; + } + .px-xl-3 { + padding-right: 1rem !important; + padding-left: 1rem !important; + } + .py-xl-3 { + padding-top: 1rem !important; + padding-bottom: 1rem !important; + } + .p-xl-4 { + padding: 1.5rem !important; + } + .pt-xl-4 { + padding-top: 1.5rem !important; + } + .pr-xl-4 { + padding-right: 1.5rem !important; + } + .pb-xl-4 { + padding-bottom: 1.5rem !important; + } + .pl-xl-4 { + padding-left: 1.5rem !important; + } + .px-xl-4 { + padding-right: 1.5rem !important; + padding-left: 1.5rem !important; + } + .py-xl-4 { + padding-top: 1.5rem !important; + padding-bottom: 1.5rem !important; + } + .p-xl-5 { + padding: 3rem !important; + } + .pt-xl-5 { + padding-top: 3rem !important; + } + .pr-xl-5 { + padding-right: 3rem !important; + } + .pb-xl-5 { + padding-bottom: 3rem !important; + } + .pl-xl-5 { + padding-left: 3rem !important; + } + .px-xl-5 { + padding-right: 3rem !important; + padding-left: 3rem !important; + } + .py-xl-5 { + padding-top: 3rem !important; + padding-bottom: 3rem !important; + } + .m-xl-auto { + margin: auto !important; + } + .mt-xl-auto { + margin-top: auto !important; + } + .mr-xl-auto { + margin-right: auto !important; + } + .mb-xl-auto { + margin-bottom: auto !important; + } + .ml-xl-auto { + margin-left: auto !important; + } + .mx-xl-auto { + margin-right: auto !important; + margin-left: auto !important; + } + .my-xl-auto { + margin-top: auto !important; + margin-bottom: auto !important; + } +} + +.text-justify { + text-align: justify !important; +} + +.text-nowrap { + white-space: nowrap !important; +} + +.text-truncate { + overflow: hidden; + text-overflow: ellipsis; + white-space: nowrap; +} + +.text-left { + text-align: left !important; +} + +.text-right { + text-align: right !important; +} + +.text-center { + text-align: center !important; +} + +@media (min-width: 576px) { + .text-sm-left { + text-align: left !important; + } + .text-sm-right { + text-align: right !important; + } + .text-sm-center { + text-align: center !important; + } +} + +@media (min-width: 768px) { + .text-md-left { + text-align: left !important; + } + .text-md-right { + text-align: right !important; + } + .text-md-center { + text-align: center !important; + } +} + +@media (min-width: 992px) { + .text-lg-left { + text-align: left !important; + } + .text-lg-right { + text-align: right !important; + } + .text-lg-center { + text-align: center !important; + } +} + +@media (min-width: 1200px) { + .text-xl-left { + text-align: left !important; + } + .text-xl-right { + text-align: right !important; + } + .text-xl-center { + text-align: center !important; + } +} + +.text-lowercase { + text-transform: lowercase !important; +} + +.text-uppercase { + text-transform: uppercase !important; +} + +.text-capitalize { + text-transform: capitalize !important; +} + +.font-weight-normal { + font-weight: normal; +} + +.font-weight-bold { + font-weight: bold; +} + +.font-italic { + font-style: italic; +} + +.text-white { + color: #fff !important; +} + +.text-primary { + color: #007bff !important; +} + +a.text-primary:focus, a.text-primary:hover { + color: #0062cc !important; +} + +.text-secondary { + color: #868e96 !important; +} + +a.text-secondary:focus, a.text-secondary:hover { + color: #6c757d !important; +} + +.text-success { + color: #28a745 !important; +} + +a.text-success:focus, a.text-success:hover { + color: #1e7e34 !important; +} + +.text-info { + color: #17a2b8 !important; +} + +a.text-info:focus, a.text-info:hover { + color: #117a8b !important; +} + +.text-warning { + color: #ffc107 !important; +} + +a.text-warning:focus, a.text-warning:hover { + color: #d39e00 !important; +} + +.text-danger { + color: #dc3545 !important; +} + +a.text-danger:focus, a.text-danger:hover { + color: #bd2130 !important; +} + +.text-light { + color: #f8f9fa !important; +} + +a.text-light:focus, a.text-light:hover { + color: #dae0e5 !important; +} + +.text-dark { + color: #343a40 !important; +} + +a.text-dark:focus, a.text-dark:hover { + color: #1d2124 !important; +} + +.text-muted { + color: #868e96 !important; +} + +.text-hide { + font: 0/0 a; + color: transparent; + text-shadow: none; + background-color: transparent; + border: 0; +} + +.visible { + visibility: visible !important; +} + +.invisible { + visibility: hidden !important; +} +/*# sourceMappingURL=bootstrap.css.map */ \ No newline at end of file diff --git a/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css.map b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css.map new file mode 100644 index 0000000..1453035 --- /dev/null +++ b/raw_scans/1_hetzner_ubuntu_16.04/otseca-1/report.1610038143/vendor/bootstrap/css/bootstrap.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["../../scss/bootstrap.scss","../../scss/_print.scss","bootstrap.css","../../scss/_reboot.scss","../../scss/_variables.scss","../../scss/mixins/_hover.scss","../../scss/_type.scss","../../scss/mixins/_lists.scss","../../scss/_images.scss","../../scss/mixins/_image.scss","../../scss/mixins/_border-radius.scss","../../scss/mixins/_transition.scss","../../scss/_code.scss","../../scss/_grid.scss","../../scss/mixins/_grid.scss","../../scss/mixins/_breakpoints.scss","../../scss/mixins/_grid-framework.scss","../../scss/_tables.scss","../../scss/mixins/_table-row.scss","../../scss/_functions.scss","../../scss/_forms.scss","../../scss/mixins/_forms.scss","../../scss/_buttons.scss","../../scss/mixins/_buttons.scss","../../scss/_transitions.scss","../../scss/_dropdown.scss","../../scss/mixins/_nav-divider.scss","../../scss/_button-group.scss","../../scss/_input-group.scss","../../scss/_custom-forms.scss","../../scss/_nav.scss","../../scss/_navbar.scss","../../scss/_card.scss","../../scss/_breadcrumb.scss","../../scss/mixins/_clearfix.scss","../../scss/_pagination.scss","../../scss/mixins/_pagination.scss","../../scss/_badge.scss","../../scss/mixins/_badge.scss","../../scss/_jumbotron.scss","../../scss/_alert.scss","../../scss/mixins/_alert.scss","../../scss/_progress.scss","../../scss/mixins/_gradients.scss","../../scss/_media.scss","../../scss/_list-group.scss","../../scss/mixins/_list-group.scss","../../scss/_close.scss","../../scss/_modal.scss","../../scss/_tooltip.scss","../../scss/mixins/_reset-text.scss","../../scss/_popover.scss","../../scss/_carousel.scss","../../scss/utilities/_align.scss","../../scss/mixins/_background-variant.scss","../../scss/utilities/_background.scss","../../scss/utilities/_borders.scss","../../scss/utilities/_display.scss","../../scss/utilities/_embed.scss","../../scss/utilities/_flex.scss","../../scss/utilities/_float.scss","../../scss/mixins/_float.scss","../../scss/utilities/_position.scss","../../scss/utilities/_screenreaders.scss","../../scss/mixins/_screen-reader.scss","../../scss/utilities/_sizing.scss","../../scss/utilities/_spacing.scss","../../scss/utilities/_text.scss","../../scss/mixins/_text-truncate.scss","../../scss/mixins/_text-emphasis.scss","../../scss/mixins/_text-hide.scss","../../scss/utilities/_visibility.scss","../../scss/mixins/_visibility.scss"],"names":[],"mappings":"AAAA;;;;;GAKG;ACMD;EACE;;;IAME,6BAA4B;IAE5B,4BAA2B;GAC5B;EAED;;IAEE,2BAA0B;GAC3B;EAOD;IACE,8BAA6B;GAC9B;EAaD;IACE,iCAAgC;GACjC;EACD;;IAEE,uBAAgC;IAChC,yBAAwB;GACzB;EAOD;IACE,4BAA2B;GAC5B;EAED;;IAEE,yBAAwB;GACzB;EAED;;;IAGE,WAAU;IACV,UAAS;GACV;EAED;;IAEE,wBAAuB;GACxB;EAKD;IACE,cAAa;GACd;EACD;IACE,uBAAgC;GACjC;EAED;IACE,qCAAoC;GAMrC;EAPD;;IAKI,kCAAiC;GAClC;EAEH;;IAGI,kCAAiC;GAClC;CC3CN;;AC1CD;EACE,uBAAsB;EACtB,wBAAuB;EACvB,kBAAiB;EACjB,+BAA8B;EAC9B,2BAA0B;EAC1B,8BAA6B;EAC7B,yCAA0C;CAC3C;;AAED;;;EAGE,oBAAmB;CACpB;;AAIC;EAAgB,oBAAmB;CD4CpC;;ACxCD;EACE,eAAc;CACf;;AAOD;EACE,UAAS;EACT,wGCoLiH;EDnLjH,gBCuLmB;EDtLnB,oBC0LyB;EDzLzB,iBC6LoB;ED5LpB,eCEgB;EDDhB,uBCRW;CDSZ;;ADuCD;EC/BE,yBAAwB;CACzB;;AAQD;EACE,wBAAuB;EACvB,UAAS;EACT,kBAAiB;CAClB;;AAWD;EACE,cAAa;EACb,qBAAoB;CACrB;;AAMD;EACE,cAAa;EACb,oBAAmB;CACpB;;AASD;;EAEE,2BAA0B;EAC1B,0CAAiC;UAAjC,kCAAiC;EACjC,aAAY;EACZ,iBAAgB;CACjB;;AAED;EACE,oBAAmB;EACnB,mBAAkB;EAClB,qBAAoB;CACrB;;AAED;;;EAGE,cAAa;EACb,oBAAmB;CACpB;;AAED;;;;EAIE,iBAAgB;CACjB;;AAED;EACE,kBCqGqB;CDpGtB;;AAED;EACE,qBAAoB;EACpB,eAAc;CACf;;AAED;EACE,iBAAgB;CACjB;;AAED;EACE,mBAAkB;CACnB;;AAED;;EAEE,oBAAmB;CACpB;;AAED;EACE,eAAc;CACf;;AAOD;;EAEE,mBAAkB;EAClB,eAAc;EACd,eAAc;EACd,yBAAwB;CACzB;;AAED;EAAM,eAAc;CAAK;;AACzB;EAAM,WAAU;CAAK;;AAOrB;EACE,eClHe;EDmHf,sBCxB0B;EDyB1B,8BAA6B;EAC7B,sCAAqC;CAMtC;;AE1LG;EFuLA,eC5B4C;ED6B5C,2BC5B6B;CC5JR;;AFkMzB;EACE,eAAc;EACd,sBAAqB;CAUtB;;AEnMG;EF4LA,eAAc;EACd,sBAAqB;CE1LpB;;AFoLL;EAUI,WAAU;CACX;;AAQH;;;;EAIE,kCAAiC;EACjC,eAAc;CACf;;AAED;EAEE,cAAa;EAEb,oBAAmB;EAEnB,eAAc;CACf;;AAOD;EAEE,iBAAgB;CACjB;;AAOD;EACE,uBAAsB;EACtB,mBAAkB;CACnB;;AAED;EACE,iBAAgB;CACjB;;AAaD;;;;;;;;;EASE,+BAA0B;MAA1B,2BAA0B;CAC3B;;AAOD;EACE,0BAAyB;CAC1B;;AAED;EACE,qBCEoC;EDDpC,wBCCoC;EDApC,eCpPgB;EDqPhB,iBAAgB;EAChB,qBAAoB;CACrB;;AAED;EAEE,iBAAgB;CACjB;;AAOD;EAEE,sBAAqB;EACrB,qBAAoB;CACrB;;AAMD;EACE,oBAAmB;EACnB,2CAA0C;CAC3C;;AAED;;;;;EAKE,UAAS;EACT,qBAAoB;EACpB,mBAAkB;EAClB,qBAAoB;CACrB;;AAED;;EAEE,kBAAiB;CAClB;;AAED;;EAEE,qBAAoB;CACrB;;AAKD;;;;EAIE,2BAA0B;CAC3B;;AAGD;;;;EAIE,WAAU;EACV,mBAAkB;CACnB;;AAED;;EAEE,uBAAsB;EACtB,WAAU;CACX;;AAGD;;;;EASE,4BAA2B;CAC5B;;AAED;EACE,eAAc;EAEd,iBAAgB;CACjB;;AAED;EAME,aAAY;EAEZ,WAAU;EACV,UAAS;EACT,UAAS;CACV;;AAID;EACE,eAAc;EACd,YAAW;EACX,gBAAe;EACf,WAAU;EACV,qBAAoB;EACpB,kBAAiB;EACjB,qBAAoB;EACpB,eAAc;EACd,oBAAmB;CACpB;;AAED;EACE,yBAAwB;CACzB;;ADpED;;ECyEE,aAAY;CACb;;ADrED;EC4EE,qBAAoB;EACpB,yBAAwB;CACzB;;ADzED;;ECiFE,yBAAwB;CACzB;;AAOD;EACE,cAAa;EACb,2BAA0B;CAC3B;;AAMD;EACE,sBAAqB;CACtB;;AAED;EACE,mBAAkB;CACnB;;AAED;EACE,cAAa;CACd;;ADtFD;EC2FE,yBAAwB;CACzB;;AG5dD;;EAEE,sBFwPoC;EEvPpC,qBFwP8B;EEvP9B,iBFwP0B;EEvP1B,iBFwP0B;EEvP1B,eFwP8B;CEvP/B;;AAED;EAAU,kBF0OW;CE1OiB;;AACtC;EAAU,gBF0OS;CE1OmB;;AACtC;EAAU,mBF0OY;CE1OgB;;AACtC;EAAU,kBF0OW;CE1OiB;;AACtC;EAAU,mBF0OY;CE1OgB;;AACtC;EAAU,gBF0OS;CE1OmB;;AAEtC;EACE,mBF0PwB;EEzPxB,iBF0PoB;CEzPrB;;AAGD;EACE,gBFyOkB;EExOlB,iBF6OuB;EE5OvB,iBFoO0B;CEnO3B;;AACD;EACE,kBFqOoB;EEpOpB,iBFyOuB;EExOvB,iBF+N0B;CE9N3B;;AACD;EACE,kBFiOoB;EEhOpB,iBFqOuB;EEpOvB,iBF0N0B;CEzN3B;;AACD;EACE,kBF6NoB;EE5NpB,iBFiOuB;EEhOvB,iBFqN0B;CEpN3B;;AAOD;EACE,iBAAgB;EAChB,oBAAmB;EACnB,UAAS;EACT,yCFIW;CEHZ;;AAOD;;EAEE,eFgNmB;EE/MnB,oBF8KyB;CE7K1B;;AAED;;EAEE,eFoNiB;EEnNjB,0BF4Ne;CE3NhB;;AAOD;EC7EE,gBAAe;EACf,iBAAgB;CD8EjB;;AAGD;EClFE,gBAAe;EACf,iBAAgB;CDmFjB;;AACD;EACE,sBAAqB;CAKtB;;AAND;EAII,kBFsMqB;CErMtB;;AASH;EACE,eAAc;EACd,0BAAyB;CAC1B;;AAGD;EACE,oBFyBW;EExBX,mBFwKgD;CEvKjD;;AAED;EACE,eAAc;EACd,eAAc;EACd,eF7DgB;CEkEjB;;AARD;EAMI,uBAAsB;CACvB;;AElHH;ECIE,gBAAe;EAGf,aAAY;CDLb;;AAID;EACE,iBJkvBkC;EIjvBlC,uBJmCW;EIlCX,uBJmvBgC;EM/vB9B,uBNmN2B;EOlNzB,iCPiwB2C;EK3vB/C,gBAAe;EAGf,aAAY;CDSb;;AAMD;EAEE,sBAAqB;CACtB;;AAED;EACE,sBAA4B;EAC5B,eAAc;CACf;;AAED;EACE,eJmuB4B;EIluB5B,eJegB;CIdjB;;AIzCD;;;;EAIE,kFRqO2F;CQpO5F;;AAGD;EACE,uBRkzBiC;EQjzBjC,eR+yB+B;EQ9yB/B,eRizBmC;EQhzBnC,0BRsCgB;EM/Cd,uBNmN2B;CQjM9B;;AALC;EACE,WAAU;EACV,eAAc;EACd,0BAAyB;CAC1B;;AAIH;EACE,uBRkyBiC;EQjyBjC,eR+xB+B;EQ9xB/B,YRsBW;EQrBX,0BR8BgB;EMvDd,sBNqN0B;CQlL7B;;AAdD;EASI,WAAU;EACV,gBAAe;EACf,kBR8MmB;CQ5MpB;;AAIH;EACE,eAAc;EACd,cAAa;EACb,oBAAmB;EACnB,eR4wB+B;EQ3wB/B,eRYgB;CQFjB;;AAfD;EASI,WAAU;EACV,mBAAkB;EAClB,eAAc;EACd,8BAA6B;EAC7B,iBAAgB;CACjB;;AAIH;EACE,kBRuwBiC;EQtwBjC,mBAAkB;CACnB;;AC1DC;ECAA,mBAAkB;EAClB,kBAAiB;EACjB,oBAAuC;EACvC,mBAAuC;EACvC,YAAW;CDDV;;AEgDC;EFnDF;ICYI,iBV8KK;GSvLR;CXwlBF;;AaxiBG;EFnDF;ICYI,iBV+KK;GSxLR;CX8lBF;;Aa9iBG;EFnDF;ICYI,iBVgLK;GSzLR;CXomBF;;AapjBG;EFnDF;ICYI,kBViLM;GS1LT;CX0mBF;;AWjmBC;EACE,YAAW;ECbb,mBAAkB;EAClB,kBAAiB;EACjB,oBAAuC;EACvC,mBAAuC;EACvC,YAAW;CDWV;;AAQD;ECLA,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,oBAAuC;EACvC,mBAAuC;CDItC;;AAID;EACE,gBAAe;EACf,eAAc;CAOf;;AATD;;EAMI,iBAAgB;EAChB,gBAAe;CAChB;;AGnCH;;;;;;EACE,mBAAkB;EAClB,YAAW;EACX,gBAAe;EACf,oBAA4B;EAC5B,mBAA4B;CAC7B;;AAkBG;EACE,2BAAa;MAAb,cAAa;EACb,qBAAY;MAAZ,aAAY;EACZ,gBAAe;CAChB;;AACD;EACE,mBAAc;MAAd,eAAc;EACd,YAAW;EACX,gBAAe;CAChB;;AAGC;EFFN,wBAAsC;MAAtC,oBAAsC;EAItC,qBAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,kBAAsC;MAAtC,cAAsC;EAItC,eAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,yBAAsC;MAAtC,qBAAsC;EAItC,sBAAuC;CEAhC;;AAFD;EFFN,mBAAsC;MAAtC,eAAsC;EAItC,gBAAuC;CEAhC;;AAID;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,kBAFU;MAEV,SAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;AAFD;EACE,mBAFU;MAEV,UAFU;CAGX;;ADKL;ECzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IFFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GEAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;Cdg0BR;;Aa3zBG;ECzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IFFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GEAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;Cdi6BR;;Aa55BG;ECzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IFFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GEAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CdkgCR;;Aa7/BG;ECzBE;IACE,2BAAa;QAAb,cAAa;IACb,qBAAY;QAAZ,aAAY;IACZ,gBAAe;GAChB;EACD;IACE,mBAAc;QAAd,eAAc;IACd,YAAW;IACX,gBAAe;GAChB;EAGC;IFFN,wBAAsC;QAAtC,oBAAsC;IAItC,qBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,kBAAsC;QAAtC,cAAsC;IAItC,eAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,yBAAsC;QAAtC,qBAAsC;IAItC,sBAAuC;GEAhC;EAFD;IFFN,mBAAsC;QAAtC,eAAsC;IAItC,gBAAuC;GEAhC;EAID;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,kBAFU;QAEV,SAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;EAFD;IACE,mBAFU;QAEV,UAFU;GAGX;CdmmCR;;AelpCD;EACE,YAAW;EACX,gBAAe;EACf,oBbgIW;Ea/HX,8BbuSyC;CalR1C;;AAzBD;;EAQI,iBbgSkC;Ea/RlC,oBAAmB;EACnB,8BbsCc;CarCf;;AAXH;EAcI,uBAAsB;EACtB,iCbiCc;CahCf;;AAhBH;EAmBI,8Bb6Bc;Ca5Bf;;AApBH;EAuBI,uBbuBS;CatBV;;AAQH;;EAGI,gBbsQiC;CarQlC;;AAQH;EACE,0BbGgB;CaUjB;;AAdD;;EAKI,0BbDc;CaEf;;AANH;;EAWM,yBAA8C;CAC/C;;AASL;EAEI,sCbXS;CaYV;;AAQH;EAGM,uCbvBO;CCjDY;;AaNvB;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,0BC4EmE;CD3EpE;;AAKH;EAKM,0BAJsC;CbLrB;;AaIvB;;EASQ,0BARoC;CASrC;;AApBP;;;EAII,uCdmDO;CclDR;;AAKH;EAKM,uCAJsC;CbLrB;;AaIvB;;EASQ,uCARoC;CASrC;;ADgFT;EAEI,YbzDS;Ea0DT,0BbjDc;CakDf;;AAGH;EAEI,ebzDc;Ea0Dd,0Bb/Dc;CagEf;;AAGH;EACE,YbtEW;EauEX,0Bb9DgB;CauFjB;;AA3BD;;;EAOI,sBb+LoD;Ca9LrD;;AARH;EAWI,UAAS;CACV;;AAZH;EAgBM,4CbrFO;CasFR;;AAjBL;EAuBQ,6Cb5FK;CCvCY;;AU0DrB;EEsFJ;IAEI,eAAc;IACd,YAAW;IACX,iBAAgB;IAChB,6CAA4C;GAO/C;EAZD;IASM,UAAS;GACV;Cf2tCJ;;AkB13CD;EACE,eAAc;EACd,YAAW;EAGX,wBhB2TgC;EgB1ThC,gBhBiOmB;EgBhOnB,kBhB0T8B;EgBzT9B,ehB2CgB;EgB1ChB,uBhBmCW;EgBjCX,uBAAsB;EACtB,6BAA4B;EAC5B,sChByCW;EgBpCT,uBhB+L2B;EOlNzB,yEP6XqF;CgBtU1F;;AAtDD;EA6BI,8BAA6B;EAC7B,UAAS;CACV;;ACxBD;EACE,ejB2Cc;EiB1Cd,uBjBmCS;EiBlCT,sBjBiWiE;EiBhWjE,cAAa;CAEd;;ADbH;EAsCI,ehBYc;EgBVd,WAAU;CACX;;AAzCH;EAsCI,ehBYc;EgBVd,WAAU;CACX;;AAzCH;EAsCI,ehBYc;EgBVd,WAAU;CACX;;AAzCH;EAkDI,0BhBJc;EgBMd,WAAU;CACX;;AAGH;EAEI,4BhB0TkF;CgBzTnF;;AAHH;EAWI,ehBhBc;EgBiBd,uBhBxBS;CgByBV;;AAIH;;EAEE,eAAc;CACf;;AASD;EACE,oCAA2E;EAC3E,uCAA8E;EAC9E,iBAAgB;CACjB;;AAED;EACE,oCAA8E;EAC9E,uCAAiF;EACjF,mBhB0IsB;CgBzIvB;;AAED;EACE,qCAA8E;EAC9E,wCAAiF;EACjF,oBhBqIsB;CgBpIvB;;AASD;EACE,oBhBgN+B;EgB/M/B,uBhB+M+B;EgB9M/B,iBAAgB;EAChB,gBhBqHmB;CgBpHpB;;AAQD;EACE,oBhBmM+B;EgBlM/B,uBhBkM+B;EgBjM/B,iBAAgB;EAChB,kBhBkM8B;EgBjM9B,0BAAyB;EACzB,oBAAuC;CAOxC;;AAbD;;;;;EAUI,iBAAgB;EAChB,gBAAe;CAChB;;AAYH;;;EACE,wBhBgL+B;EgB/K/B,oBhBoFsB;EgBnFtB,iBhB+K6B;EMvU3B,sBNqN0B;CgB3D7B;;AAED;;;EAEI,8BhB2NqF;CgB1NtF;;AAGH;;;EACE,qBhBuK8B;EgBtK9B,mBhBsEsB;EgBrEtB,iBhBsK6B;EM3U3B,sBNoN0B;CgB7C7B;;AAED;;;EAEI,8BhBiNqF;CgBhNtF;;AASH;EACE,oBhBmNmC;CgBlNpC;;AAED;EACE,eAAc;EACd,oBhBqM+B;CgBpMhC;;AAOD;EACE,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,mBAAkB;EAClB,kBAAiB;CAOlB;;AAXD;;EAQI,mBAAkB;EAClB,kBAAiB;CAClB;;AAQH;EACE,mBAAkB;EAClB,eAAc;EACd,sBhB0K+B;CgBnKhC;;AAVD;EAOM,ehBxKY;CgByKb;;AAIL;EACE,sBhBiKiC;EgBhKjC,iBAAgB;CACjB;;AAED;EACE,mBAAkB;EAClB,oBhB4JgC;EgB3JhC,sBhB0JiC;CgBrJlC;;AARD;EAMI,iBAAgB;CACjB;;AAIH;EACE,sBAAqB;CAStB;;AAVD;EAII,uBAAsB;CACvB;;AALH;EAQI,qBhB8I+B;CgB7IhC;;AAWH;EACE,cAAa;EACb,mBAAkB;EAClB,mBAAkB;EAClB,ehB/Le;CgBgMhB;;AAED;EACE,mBAAkB;EAClB,UAAS;EACT,WAAU;EACV,cAAa;EACb,aAAY;EACZ,eAAc;EACd,kBAAiB;EACjB,mBAAkB;EAClB,eAAc;EACd,YAAW;EACX,yChB7Me;EgB8Mf,qBAAoB;CACrB;;AClQG;;;EAEE,sBjBoDW;CiB1CZ;;AAZD;;;EAKI,iDjBiDS;CiBhDV;;AANH;;;;;;;;EAUI,eAAc;CACf;;AAOH;EAGI,ejBiCS;CiBhCV;;AAMH;EAGI,0CjBuBS;CiBtBV;;AAJH;EAMI,ejBoBS;CiBnBV;;AAMH;EAGI,sBjBUS;CiBPV;;AANH;EAKgB,sBAAqB;CAAK;;AAL1C;EAQI,iDjBKS;CiBJV;;AAlDH;;;EAEE,sBjBiDW;CiBvCZ;;AAZD;;;EAKI,iDjB8CS;CiB7CV;;AANH;;;;;;;;EAUI,eAAc;CACf;;AAOH;EAGI,ejB8BS;CiB7BV;;AAMH;EAGI,0CjBoBS;CiBnBV;;AAJH;EAMI,ejBiBS;CiBhBV;;AAMH;EAGI,sBjBOS;CiBJV;;AANH;EAKgB,sBAAqB;CAAK;;AAL1C;EAQI,iDjBES;CiBDV;;AD8NP;EACE,qBAAa;EAAb,cAAa;EACb,wBAAmB;MAAnB,oBAAmB;EACnB,uBAAmB;MAAnB,oBAAmB;CAuFpB;;AA1FD;EASI,YAAW;CACZ;;AL7PC;EKmPJ;IAeM,qBAAa;IAAb,cAAa;IACb,uBAAmB;QAAnB,oBAAmB;IACnB,sBAAuB;QAAvB,wBAAuB;IACvB,iBAAgB;GACjB;EAnBL;IAuBM,qBAAa;IAAb,cAAa;IACb,mBAAc;QAAd,eAAc;IACd,wBAAmB;QAAnB,oBAAmB;IACnB,uBAAmB;QAAnB,oBAAmB;IACnB,iBAAgB;GACjB;EA5BL;IAgCM,sBAAqB;IACrB,YAAW;IACX,uBAAsB;GACvB;EAnCL;IAuCM,sBAAqB;GACtB;EAxCL;IA2CM,YAAW;GACZ;EA5CL;IA+CM,iBAAgB;IAChB,uBAAsB;GACvB;EAjDL;IAsDM,qBAAa;IAAb,cAAa;IACb,uBAAmB;QAAnB,oBAAmB;IACnB,sBAAuB;QAAvB,wBAAuB;IACvB,YAAW;IACX,cAAa;IACb,iBAAgB;GACjB;EA5DL;IA8DM,gBAAe;GAChB;EA/DL;IAiEM,mBAAkB;IAClB,cAAa;IACb,sBhB2B4B;IgB1B5B,eAAc;GACf;EArEL;IAyEM,qBAAa;IAAb,cAAa;IACb,uBAAmB;QAAnB,oBAAmB;IACnB,sBAAuB;QAAvB,wBAAuB;IACvB,gBAAe;GAChB;EA7EL;IA+EM,iBAAgB;IAChB,sBAAqB;IACrB,sBhBa4B;IgBZ5B,4BAA2B;GAC5B;EAnFL;IAuFM,OAAM;GACP;ClBi3CJ;;AoB9uDD;EACE,sBAAqB;EACrB,oBlByOyB;EkBxOzB,mBAAkB;EAClB,oBAAmB;EACnB,uBAAsB;EACtB,0BAAiB;KAAjB,uBAAiB;MAAjB,sBAAiB;UAAjB,kBAAiB;EACjB,8BAAiD;ECiEjD,wBnBwPgC;EmBvPhC,gBnB8JmB;EmB7JnB,kBnBuP8B;EMnU5B,uBNmN2B;EOlNzB,kCP0V+C;CkBxTpD;;AjBjBG;EiBHA,sBAAqB;CjBMpB;;AiBnBL;EAiBI,WAAU;EACV,8ClBkDa;CkBjDd;;AAnBH;EAwBI,aAAY;CAEb;;AA1BH;EA8BI,uBAAsB;CAEvB;;AAIH;;EAEE,qBAAoB;CACrB;;AAQC;EHQE,YAAW;EItDb,0BnBmEe;EmBlEf,sBnBkEe;CkBnBd;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,6CnBmDW;CmBjDd;;AAGD;EAEE,0BnB4Ca;EmB3Cb,sBnB2Ca;CmB1Cd;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHQE,YAAW;EItDb,0BnBiDgB;EmBhDhB,sBnBgDgB;CkBDf;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,+CnBiCY;CmB/Bf;;AAGD;EAEE,0BnB0Bc;EmBzBd,sBnByBc;CmBxBf;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHQE,YAAW;EItDb,0BnB0Ee;EmBzEf,sBnByEe;CkB1Bd;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,6CnB0DW;CmBxDd;;AAGD;EAEE,0BnBmDa;EmBlDb,sBnBkDa;CmBjDd;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHQE,YAAW;EItDb,0BnB4Ee;EmB3Ef,sBnB2Ee;CkB5Bd;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,8CnB4DW;CmB1Dd;;AAGD;EAEE,0BnBqDa;EmBpDb,sBnBoDa;CmBnDd;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHME,YAAW;EIpDb,0BnByEe;EmBxEf,sBnBwEe;CkBzBd;;AC5CD;EJgDE,YAAW;EI9CX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,6CnByDW;CmBvDd;;AAGD;EAEE,0BnBkDa;EmBjDb,sBnBiDa;CmBhDd;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHQE,YAAW;EItDb,0BnBuEe;EmBtEf,sBnBsEe;CkBvBd;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,6CnBuDW;CmBrDd;;AAGD;EAEE,0BnBgDa;EmB/Cb,sBnB+Ca;CmB9Cd;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHME,YAAW;EIpDb,0BnB4CgB;EmB3ChB,sBnB2CgB;CkBIf;;AC5CD;EJgDE,YAAW;EI9CX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,+CnB4BY;CmB1Bf;;AAGD;EAEE,0BnBqBc;EmBpBd,sBnBoBc;CmBnBf;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADYD;EHQE,YAAW;EItDb,0BnBmDgB;EmBlDhB,sBnBkDgB;CkBHf;;AC5CD;EJkDE,YAAW;EIhDX,0BARqF;EASrF,sBAT2H;CAU5H;;AAED;EAMI,4CnBmCY;CmBjCf;;AAGD;EAEE,0BnB4Bc;EmB3Bd,sBnB2Bc;CmB1Bf;;AAED;;EAGE,0BAhCqF;EAiCrF,uBAAsB;EACtB,sBAlC2H;CAoC5H;;ADkBD;ECdA,enB6Be;EmB5Bf,8BAA6B;EAC7B,uBAAsB;EACtB,sBnB0Be;CkBbd;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnBsBa;EmBrBb,sBnBqBa;CC/DQ;;AkB6CvB;EAEE,6CnBgBa;CmBfd;;AAED;EAEE,enBWa;EmBVb,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBGa;EmBFb,sBnBEa;CmBDd;;ADdD;ECdA,enBWgB;EmBVhB,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBQgB;CkBKf;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnBIc;EmBHd,sBnBGc;CC7CO;;AkB6CvB;EAEE,+CnBFc;CmBGf;;AAED;EAEE,enBPc;EmBQd,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBfc;EmBgBd,sBnBhBc;CmBiBf;;ADdD;ECdA,enBoCe;EmBnCf,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBiCe;CkBpBd;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnB6Ba;EmB5Bb,sBnB4Ba;CCtEQ;;AkB6CvB;EAEE,6CnBuBa;CmBtBd;;AAED;EAEE,enBkBa;EmBjBb,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBUa;EmBTb,sBnBSa;CmBRd;;ADdD;ECdA,enBsCe;EmBrCf,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBmCe;CkBtBd;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnB+Ba;EmB9Bb,sBnB8Ba;CCxEQ;;AkB6CvB;EAEE,8CnByBa;CmBxBd;;AAED;EAEE,enBoBa;EmBnBb,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBYa;EmBXb,sBnBWa;CmBVd;;ADdD;ECdA,enBmCe;EmBlCf,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBgCe;CkBnBd;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnB4Ba;EmB3Bb,sBnB2Ba;CCrEQ;;AkB6CvB;EAEE,6CnBsBa;CmBrBd;;AAED;EAEE,enBiBa;EmBhBb,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBSa;EmBRb,sBnBQa;CmBPd;;ADdD;ECdA,enBiCe;EmBhCf,8BAA6B;EAC7B,uBAAsB;EACtB,sBnB8Be;CkBjBd;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnB0Ba;EmBzBb,sBnByBa;CCnEQ;;AkB6CvB;EAEE,6CnBoBa;CmBnBd;;AAED;EAEE,enBea;EmBdb,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBOa;EmBNb,sBnBMa;CmBLd;;ADdD;ECdA,enBMgB;EmBLhB,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBGgB;CkBUf;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnBDc;EmBEd,sBnBFc;CCxCO;;AkB6CvB;EAEE,+CnBPc;CmBQf;;AAED;EAEE,enBZc;EmBad,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBpBc;EmBqBd,sBnBrBc;CmBsBf;;ADdD;ECdA,enBagB;EmBZhB,8BAA6B;EAC7B,uBAAsB;EACtB,sBnBUgB;CkBGf;;AjBlDC;EkBwCA,YDS4C;ECR5C,0BnBMc;EmBLd,sBnBKc;CC/CO;;AkB6CvB;EAEE,4CnBAc;CmBCf;;AAED;EAEE,enBLc;EmBMd,8BAA6B;CAC9B;;AAED;;EAGE,YDV4C;ECW5C,0BnBbc;EmBcd,sBnBdc;CmBef;;ADHH;EACE,oBlB0KyB;EkBzKzB,elBEe;EkBDf,iBAAgB;CA8BjB;;AAjCD;EASI,8BAA6B;CAE9B;;AAXH;EAeI,0BAAyB;EACzB,iBAAgB;CACjB;;AjB5EC;EiB8EA,0BAAyB;CjB9EJ;;AAWrB;EiBsEA,elB0E4C;EkBzE5C,2BlB0E6B;EkBzE7B,8BAA6B;CjBrE5B;;AiB6CL;EA2BI,elBzCc;CkB8Cf;;AjBhFC;EiB8EE,sBAAqB;CjB3EtB;;AiBqFL;EChCE,qBnBgQ8B;EmB/P9B,mBnB+JsB;EmB9JtB,iBnBkI0B;EM9MxB,sBNoN0B;CkBxG7B;;AAED;ECpCE,wBnB4P+B;EmB3P/B,oBnBgKsB;EmB/JtB,iBnBmI0B;EM/MxB,sBNqN0B;CkBrG7B;;AAOD;EACE,eAAc;EACd,YAAW;CACZ;;AAGD;EACE,mBlBsNoC;CkBrNrC;;AAGD;;;EAII,YAAW;CACZ;;AE3IH;EACE,WAAU;EbIN,iCP4NsC;CoB1N3C;;AAPD;EAKI,WAAU;CACX;;AAGH;EACE,cAAa;CAId;;AALD;EAGI,eAAc;CACf;;AAGH;EAEI,mBAAkB;CACnB;;AAGH;EAEI,yBAAwB;CACzB;;AAGH;EACE,mBAAkB;EAClB,UAAS;EACT,iBAAgB;Eb1BZ,8BP6NmC;CoBjMxC;;AChCD;;EAEE,mBAAkB;CACnB;;AAED;EAGI,sBAAqB;EACrB,SAAQ;EACR,UAAS;EACT,qBAA+B;EAC/B,wBAAkC;EAClC,YAAW;EACX,wBAA8B;EAC9B,sCAA4C;EAC5C,qCAA2C;CAC5C;;AAZH;EAeI,eAAc;CACf;;AAKH;EAEI,cAAa;EACb,wBrB+coC;CqB9crC;;AAJH;EAQM,cAAa;EACb,2BAAiC;CAClC;;AAKL;EACE,mBAAkB;EAClB,UAAS;EACT,QAAO;EACP,crB0d8B;EqBzd9B,cAAa;EACb,YAAW;EACX,iBrB0boC;EqBzbpC,kBAA8B;EAC9B,qBAA4B;EAC5B,gBrByLmB;EqBxLnB,erBMgB;EqBLhB,iBAAgB;EAChB,iBAAgB;EAChB,uBrBNW;EqBOX,6BAA4B;EAC5B,sCrBEW;EMxDT,uBNmN2B;CqB1J9B;;AAGD;EC3DE,UAAS;EACT,iBAAuB;EACvB,iBAAgB;EAChB,8BtB4CgB;CqBcjB;;AAKD;EACE,eAAc;EACd,YAAW;EACX,wBrBobqC;EqBnbrC,YAAW;EACX,oBrBqKyB;EqBpKzB,erBlBgB;EqBmBhB,oBAAmB;EACnB,oBAAmB;EACnB,iBAAgB;EAChB,UAAS;CAwBV;;ApBnFG;EoB8DA,erBiakD;EqBhalD,sBAAqB;EACrB,0BrBnCc;CC1Bb;;AoB8CL;EAoBI,YrBzCS;EqB0CT,sBAAqB;EACrB,0BrBnBa;CqBoBd;;AAvBH;EA2BI,erB1Cc;EqB2Cd,8BAA6B;CAK9B;;AAIH;EAGI,WAAU;CACX;;AAGH;EACE,eAAc;CACf;;AAGD;EACE,eAAc;EACd,uBrBoYqC;EqBnYrC,iBAAgB;EAChB,oBrBmHsB;EqBlHtB,erBrEgB;EqBsEhB,oBAAmB;CACpB;;AE5HD;;EAEE,mBAAkB;EAClB,4BAAoB;EAApB,qBAAoB;EACpB,uBAAsB;CA0BvB;;AA9BD;;EAOI,mBAAkB;EAClB,mBAAc;MAAd,eAAc;EACd,iBAAgB;CAYjB;;AArBH;;EAcM,WAAU;CtBNS;;AsBRzB;;;;EAmBM,WAAU;CACX;;AApBL;;;;;;;;EA4BI,kBvBsLc;CuBrLf;;AAIH;EACE,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,qBAA2B;MAA3B,4BAA2B;CAK5B;;AARD;EAMI,YAAW;CACZ;;AAGH;EACE,iBAAgB;CACjB;;AAGD;EACE,eAAc;CAKf;;AAND;EjBlCI,2BiBsC8B;EjBrC9B,8BiBqC8B;CAC/B;;AAGH;;EjB5BI,0BiB8B2B;EjB7B3B,6BiB6B2B;CAC9B;;AAGD;EACE,YAAW;CACZ;;AACD;EACE,iBAAgB;CACjB;;AACD;;EjBtDI,2BiByD8B;EjBxD9B,8BiBwD8B;CAC/B;;AAEH;EjB9CI,0BiB+C2B;EjB9C3B,6BiB8C2B;CAC9B;;AAeD;EACE,yBAAyC;EACzC,wBAAwC;CAKzC;;AAPD;EAKI,eAAc;CACf;;AAGH;EACE,wBAA4C;EAC5C,uBAA2C;CAC5C;;AAED;EACE,uBAA4C;EAC5C,sBAA2C;CAC5C;;AAmBD;EACE,4BAAoB;EAApB,qBAAoB;EACpB,2BAAsB;MAAtB,uBAAsB;EACtB,sBAAuB;MAAvB,wBAAuB;EACvB,sBAAuB;MAAvB,wBAAuB;CAcxB;;AAlBD;;EAQI,YAAW;CACZ;;AATH;;;;EAeI,iBvBoEc;EuBnEd,eAAc;CACf;;AAGH;EAEI,iBAAgB;CACjB;;AAHH;EjB9HI,8BiBmI+B;EjBlI/B,6BiBkI+B;CAChC;;AANH;EjB5II,0BiBoJ4B;EjBnJ5B,2BiBmJ4B;CAC7B;;AAEH;EACE,iBAAgB;CACjB;;AACD;;EjB5II,8BiB+I+B;EjB9I/B,6BiB8I+B;CAChC;;AAEH;EjBhKI,0BiBiK0B;EjBhK1B,2BiBgK0B;CAC7B;;AzBu5ED;;;;EyBn4EM,mBAAkB;EAClB,uBAAmB;EACnB,qBAAoB;CACrB;;AC/LL;EACE,mBAAkB;EAClB,qBAAa;EAAb,cAAa;EACb,YAAW;CAkBZ;;AArBD;EAQI,mBAAkB;EAClB,WAAU;EACV,mBAAc;MAAd,eAAc;EAGd,UAAS;EACT,iBAAgB;CAMjB;;AApBH;EAkBM,WAAU;CvBmCX;;AuB9BL;;;EAIE,qBAAa;EAAb,cAAa;EACb,uBAAmB;MAAnB,oBAAmB;CAKpB;;AAVD;;;ElBvBI,iBkB+BwB;CACzB;;AAGH;;EAEE,oBAAmB;EACnB,uBAAsB;CACvB;;AAwBD;EACE,wBxBkQgC;EwBjQhC,iBAAgB;EAChB,gBxBuKmB;EwBtKnB,oBxB0KyB;EwBzKzB,kBxB+P8B;EwB9P9B,exBhBgB;EwBiBhB,mBAAkB;EAClB,0BxBvBgB;EwBwBhB,sCxBhBW;EMxDT,uBNmN2B;CwBpH9B;;AAhCD;;;EAcI,wBxByP6B;EwBxP7B,oBxB6JoB;EM3OpB,sBNqN0B;CwBrI3B;;AAjBH;;;EAoBI,qBxBuP4B;EwBtP5B,mBxBsJoB;EM1OpB,sBNoN0B;CwB9H3B;;AAvBH;;EA6BI,cAAa;CACd;;AASH;;;;;;;ElBzFI,2BkBgG4B;ElB/F5B,8BkB+F4B;CAC/B;;AACD;EACE,gBAAe;CAChB;;AACD;;;;;;;ElBvFI,0BkB8F2B;ElB7F3B,6BkB6F2B;CAC9B;;AACD;EACE,eAAc;CACf;;AAMD;EACE,mBAAkB;EAGlB,aAAY;EACZ,oBAAmB;CAmCpB;;AAxCD;EAUI,mBAAkB;CAUnB;;AApBH;EAaM,kBxBiEY;CwBhEb;;AAdL;EAkBM,WAAU;CvBhGX;;AuB8EL;;EA0BM,mBxBoDY;CwBnDb;;AA3BL;;EAgCM,WAAU;EACV,kBxB6CY;CwBxCb;;AAtCL;;;;EAoCQ,WAAU;CvBlHb;;AwB9CL;EACE,mBAAkB;EAClB,4BAAoB;EAApB,qBAAoB;EACpB,mBAAsC;EACtC,qBzBmY8B;EyBlY9B,mBzBoY4B;CyBnY7B;;AAED;EACE,mBAAkB;EAClB,YAAW;EACX,WAAU;CA4BX;;AA/BD;EAMI,YzByBS;EyBxBT,0BzBgDa;CyB9Cd;;AATH;EAaI,8CzB0Ca;CyBzCd;;AAdH;EAiBI,YzBcS;EyBbT,0BzBgY6E;CyB9X9E;;AApBH;EAwBM,0BzBSY;CyBRb;;AAzBL;EA4BM,ezBSY;CyBRb;;AAQL;EACE,mBAAkB;EAClB,aAA+D;EAC/D,QAAO;EACP,eAAc;EACd,YzByVwC;EyBxVxC,azBwVwC;EyBvVxC,qBAAoB;EACpB,0BAAiB;KAAjB,uBAAiB;MAAjB,sBAAiB;UAAjB,kBAAiB;EACjB,uBzBsVwC;EyBrVxC,6BAA4B;EAC5B,mCAAkC;EAClC,yBzBoV2C;CyBlV5C;;AAMD;EnBxEI,uBNmN2B;CyBxI5B;;AAHH;EAMI,2NVtCuI;CUuCxI;;AAPH;EAUI,0BzBZa;EyBab,wKV3CuI;CU6CxI;;AAOH;EAEI,mBzB8UsC;CyB7UvC;;AAHH;EAMI,qKV1DuI;CU2DxI;;AASH;EACE,qBAAa;EAAb,cAAa;EACb,2BAAsB;MAAtB,uBAAsB;CASvB;;AAXD;EAKI,uBzB8R4B;CyBzR7B;;AAVH;EAQM,eAAc;CACf;;AAWL;EACE,sBAAqB;EACrB,gBAAe;EACf,4BzBmPoF;EyBlPpF,2CzB4SuC;EyB3SvC,kBzB8L8B;EyB7L9B,ezBjFgB;EyBkFhB,uBAAsB;EACtB,oNAAsG;EACtG,0BzB+SoC;EyB9SpC,sCzBlFW;EyBoFT,uBzBuE2B;EyBnE7B,yBAAgB;KAAhB,sBAAgB;UAAhB,iBAAgB;CA2BjB;;AA3CD;EAmBI,sBzB4SmE;EyB3SnE,cAAa;CAYd;;AAhCH;EA6BM,ezBxGY;EyByGZ,uBzBhHO;CyBiHR;;AA/BL;EAmCI,ezB/Gc;EyBgHd,0BzBpHc;CyBqHf;;AArCH;EAyCI,WAAU;CACX;;AAGH;EACE,8BzB2MuF;EyB1MvF,sBzBgQwC;EyB/PxC,yBzB+PwC;EyB9PxC,ezBiR+B;CyBhRhC;;AAOD;EACE,mBAAkB;EAClB,sBAAqB;EACrB,gBAAe;EACf,ezBwQmC;EyBvQnC,iBAAgB;CACjB;;AAED;EACE,iBzBoQkC;EyBnQlC,gBAAe;EACf,ezBiQmC;EyBhQnC,UAAS;EACT,WAAU;CAKX;;AAED;EACE,mBAAkB;EAClB,OAAM;EACN,SAAQ;EACR,QAAO;EACP,WAAU;EACV,ezBkPmC;EyBjPnC,qBzBqP8B;EyBpP9B,iBzBsP6B;EyBrP7B,ezBjKgB;EyBkKhB,qBAAoB;EACpB,0BAAiB;KAAjB,uBAAiB;MAAjB,sBAAiB;UAAjB,kBAAiB;EACjB,uBzB3KW;EyB4KX,sCzBlKW;EMxDT,uBNmN2B;CyBsC9B;;AA5CD;EAmBM,0BzBsPkB;CyBrPnB;;AApBL;EAwBI,mBAAkB;EAClB,UzBrBc;EyBsBd,YzBtBc;EyBuBd,azBvBc;EyBwBd,WAAU;EACV,eAAc;EACd,ezB0NiC;EyBzNjC,qBzB6N4B;EyB5N5B,iBzB8N2B;EyB7N3B,ezBzLc;EyB0Ld,0BzB/Lc;EyBgMd,sCzBxLS;EMxDT,mCmBiPgF;CACjF;;AArCH;EAyCM,kBzBmOU;CyBlOX;;ACtPL;EACE,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,gBAAe;EACf,iBAAgB;EAChB,iBAAgB;CACjB;;AAED;EACE,eAAc;EACd,qB1BogBkC;C0B1fnC;;AzBHG;EyBJA,sBAAqB;CzBOpB;;AyBZL;EAUI,e1BiCc;C0BhCf;;AAOH;EACE,8B1BsfgD;C0BpdjD;;AAnCD;EAII,oB1BkLc;C0BjLf;;AALH;EAQI,8BAAgD;EpB7BhD,gCN6M2B;EM5M3B,iCN4M2B;C0BpK5B;;AApBH;EAYM,mC1B2e4C;CC7f7C;;AyBML;EAgBM,e1BSY;E0BRZ,8BAA6B;EAC7B,0BAAyB;CAC1B;;AAnBL;;EAwBI,e1BEc;E0BDd,uB1BNS;E0BOT,6B1BPS;C0BQV;;AA3BH;EA+BI,iB1BuJc;EM3Md,0BoBsD4B;EpBrD5B,2BoBqD4B;CAC7B;;AAQH;EpBrEI,uBNmN2B;C0BrI5B;;AATH;;EAMM,Y1B7BO;E0B8BP,0B1BNW;C0BOZ;;AASL;EAEI,mBAAc;MAAd,eAAc;EACd,mBAAkB;CACnB;;AAGH;EAEI,2BAAa;MAAb,cAAa;EACb,qBAAY;MAAZ,aAAY;EACZ,mBAAkB;CACnB;;AAQH;EAEI,cAAa;CACd;;AAHH;EAKI,eAAc;CACf;;ACnGH;EACE,mBAAkB;EAClB,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,uBAAmB;MAAnB,oBAAmB;EACnB,uBAA8B;MAA9B,+BAA8B;EAC9B,qB3BgHW;C2BrGZ;;AAjBD;;EAYI,qBAAa;EAAb,cAAa;EACb,oBAAe;MAAf,gBAAe;EACf,uBAAmB;MAAnB,oBAAmB;EACnB,uBAA8B;MAA9B,+BAA8B;CAC/B;;AAQH;EACE,sBAAqB;EACrB,uB3BggB+E;E2B/f/E,0B3B+f+E;E2B9f/E,mB3B0FW;E2BzFX,mB3BgMsB;E2B/LtB,qBAAoB;EACpB,oBAAmB;CAKpB;;A1B/BG;E0B6BA,sBAAqB;C1B1BpB;;A0BmCL;EACE,qBAAa;EAAb,cAAa;EACb,2BAAsB;MAAtB,uBAAsB;EACtB,gBAAe;EACf,iBAAgB;EAChB,iBAAgB;CAWjB;;AAhBD;EAQI,iBAAgB;EAChB,gBAAe;CAChB;;AAVH;EAaI,iBAAgB;EAChB,YAAW;CACZ;;AAQH;EACE,sBAAqB;EACrB,oB3B6bmC;E2B5bnC,uB3B4bmC;C2B3bpC;;AAWD;EACE,8BAAgB;MAAhB,iBAAgB;EAGhB,uBAAmB;MAAnB,oBAAmB;CACpB;;AAGD;EACE,yB3BmcyC;E2BlczC,mB3BkIsB;E2BjItB,eAAc;EACd,wBAAuB;EACvB,8BAAuC;ErB3GrC,uBNmN2B;C2BlG9B;;A1B/FG;E0B6FA,sBAAqB;C1B1FpB;;A0BgGL;EACE,sBAAqB;EACrB,aAAY;EACZ,cAAa;EACb,uBAAsB;EACtB,YAAW;EACX,oCAAmC;EACnC,2BAA0B;CAC3B;;AhB5DG;EgBqEA;;IAIM,iBAAgB;IAChB,gBAAe;GAChB;C7B46FR;;AapgGG;EgBkFA;IAUI,wBAAmB;QAAnB,oBAAmB;IACnB,sBAAiB;QAAjB,kBAAiB;IACjB,qBAA2B;QAA3B,4BAA2B;GAoC9B;EAhDD;IAeM,wBAAmB;QAAnB,oBAAmB;GAepB;EA9BL;IAkBQ,mBAAkB;GACnB;EAnBP;IAsBQ,SAAQ;IACR,WAAU;GACX;EAxBP;IA2BQ,qBAAoB;IACpB,oBAAmB;GACpB;EA7BP;;IAmCM,sBAAiB;QAAjB,kBAAiB;GAClB;EApCL;IAwCM,gCAAwB;IAAxB,yBAAwB;GACzB;EAzCL;IA6CM,cAAa;GACd;C7Bo6FR;;AavhGG;EgBqEA;;IAIM,iBAAgB;IAChB,gBAAe;GAChB;C7Bo9FR;;Aa5iGG;EgBkFA;IAUI,wBAAmB;QAAnB,oBAAmB;IACnB,sBAAiB;QAAjB,kBAAiB;IACjB,qBAA2B;QAA3B,4BAA2B;GAoC9B;EAhDD;IAeM,wBAAmB;QAAnB,oBAAmB;GAepB;EA9BL;IAkBQ,mBAAkB;GACnB;EAnBP;IAsBQ,SAAQ;IACR,WAAU;GACX;EAxBP;IA2BQ,qBAAoB;IACpB,oBAAmB;GACpB;EA7BP;;IAmCM,sBAAiB;QAAjB,kBAAiB;GAClB;EApCL;IAwCM,gCAAwB;IAAxB,yBAAwB;GACzB;EAzCL;IA6CM,cAAa;GACd;C7B48FR;;Aa/jGG;EgBqEA;;IAIM,iBAAgB;IAChB,gBAAe;GAChB;C7B4/FR;;AaplGG;EgBkFA;IAUI,wBAAmB;QAAnB,oBAAmB;IACnB,sBAAiB;QAAjB,kBAAiB;IACjB,qBAA2B;QAA3B,4BAA2B;GAoC9B;EAhDD;IAeM,wBAAmB;QAAnB,oBAAmB;GAepB;EA9BL;IAkBQ,mBAAkB;GACnB;EAnBP;IAsBQ,SAAQ;IACR,WAAU;GACX;EAxBP;IA2BQ,qBAAoB;IACpB,oBAAmB;GACpB;EA7BP;;IAmCM,sBAAiB;QAAjB,kBAAiB;GAClB;EApCL;IAwCM,gCAAwB;IAAxB,yBAAwB;GACzB;EAzCL;IA6CM,cAAa;GACd;C7Bo/FR;;AavmGG;EgBqEA;;IAIM,iBAAgB;IAChB,gBAAe;GAChB;C7BoiGR;;Aa5nGG;EgBkFA;IAUI,wBAAmB;QAAnB,oBAAmB;IACnB,sBAAiB;QAAjB,kBAAiB;IACjB,qBAA2B;QAA3B,4BAA2B;GAoC9B;EAhDD;IAeM,wBAAmB;QAAnB,oBAAmB;GAepB;EA9BL;IAkBQ,mBAAkB;GACnB;EAnBP;IAsBQ,SAAQ;IACR,WAAU;GACX;EAxBP;IA2BQ,qBAAoB;IACpB,oBAAmB;GACpB;EA7BP;;IAmCM,sBAAiB;QAAjB,kBAAiB;GAClB;EApCL;IAwCM,gCAAwB;IAAxB,yBAAwB;GACzB;EAzCL;IA6CM,cAAa;GACd;C7B4hGR;;A6B/kGD;EAeQ,wBAAmB;MAAnB,oBAAmB;EACnB,sBAAiB;MAAjB,kBAAiB;EACjB,qBAA2B;MAA3B,4BAA2B;CAoC9B;;AArDL;;EASU,iBAAgB;EAChB,gBAAe;CAChB;;AAXT;EAoBU,wBAAmB;MAAnB,oBAAmB;CAepB;;AAnCT;EAuBY,mBAAkB;CACnB;;AAxBX;EA2BY,SAAQ;EACR,WAAU;CACX;;AA7BX;EAgCY,qBAAoB;EACpB,oBAAmB;CACpB;;AAlCX;;EAwCU,sBAAiB;MAAjB,kBAAiB;CAClB;;AAzCT;EA6CU,gCAAwB;EAAxB,yBAAwB;CACzB;;AA9CT;EAkDU,cAAa;CACd;;AAYT;EAEI,0B3B1IS;C2B+IV;;AAPH;EAKM,0B3B7IO;CCnCR;;A0B2KL;EAWM,0B3BnJO;C2B4JR;;AApBL;EAcQ,0B3BtJK;CCnCR;;A0B2KL;EAkBQ,0B3B1JK;C2B2JN;;AAnBP;;;;EA0BM,0B3BlKO;C2BmKR;;AA3BL;EA+BI,0B3BvKS;E2BwKT,iC3BxKS;C2ByKV;;AAjCH;EAoCI,sQ3BqV8R;C2BpV/R;;AArCH;EAwCI,0B3BhLS;C2BiLV;;AAIH;EAEI,a3BjMS;C2BsMV;;AAPH;EAKM,a3BpMO;CCzBR;;A0BwNL;EAWM,gC3B1MO;C2BmNR;;AApBL;EAcQ,iC3B7MK;CCzBR;;A0BwNL;EAkBQ,iC3BjNK;C2BkNN;;AAnBP;;;;EA0BM,a3BzNO;C2B0NR;;AA3BL;EA+BI,gC3B9NS;E2B+NT,uC3B/NS;C2BgOV;;AAjCH;EAoCI,4Q3BiS4R;C2BhS7R;;AArCH;EAwCI,gC3BvOS;C2BwOV;;ACtRH;EACE,mBAAkB;EAClB,qBAAa;EAAb,cAAa;EACb,2BAAsB;MAAtB,uBAAsB;EACtB,aAAY;EACZ,sBAAqB;EACrB,uB5BwCW;E4BvCX,4BAA2B;EAC3B,uC5BgDW;EMxDT,uBNmN2B;C4BzM9B;;AAED;EAGE,mBAAc;MAAd,eAAc;EACd,iB5BilBgC;C4BhlBjC;;AAED;EACE,uB5B4kB+B;C4B3kBhC;;AAED;EACE,sBAAgC;EAChC,iBAAgB;CACjB;;AAED;EACE,iBAAgB;CACjB;;A3BvBG;E2B2BA,sBAAqB;C3B3BA;;A2ByBzB;EAMI,qB5B2jB8B;C4B1jB/B;;AAGH;EtBpCI,gCN6M2B;EM5M3B,iCN4M2B;C4BrK1B;;AAJL;EtBtBI,oCN+L2B;EM9L3B,mCN8L2B;C4B/J1B;;AASL;EACE,yB5BmiBgC;E4BliBhC,iBAAgB;EAChB,sC5BRW;E4BSX,8C5BTW;C4BcZ;;AATD;EtB7DI,2DsBoE8E;CAC/E;;AAGH;EACE,yB5BwhBgC;E4BvhBhC,sC5BlBW;E4BmBX,2C5BnBW;C4BwBZ;;AARD;EtBxEI,2DNqmB2E;C4BthB5E;;AAQH;EACE,wBAAkC;EAClC,wB5BugB+B;E4BtgB/B,uBAAiC;EACjC,iBAAgB;CACjB;;AAED;EACE,wBAAkC;EAClC,uBAAiC;CAClC;;AAGD;EACE,mBAAkB;EAClB,OAAM;EACN,SAAQ;EACR,UAAS;EACT,QAAO;EACP,iB5B+fgC;C4B9fjC;;AAED;EACE,YAAW;EtB9GT,mCNqmB2E;C4Brf9E;;AAGD;EACE,YAAW;EtB9GT,4CN+lB2E;EM9lB3E,6CN8lB2E;C4B/e9E;;AAED;EACE,YAAW;EtBrGT,gDNilB2E;EMhlB3E,+CNglB2E;C4B1e9E;;AjBvEG;EiB6EF;IACE,qBAAa;IAAb,cAAa;IACb,wBAAmB;QAAnB,oBAAmB;IACnB,oB5BuegD;I4BtehD,mB5BsegD;G4B7djD;EAbD;IAOI,qBAAa;IAAb,cAAa;IACb,iBAAY;QAAZ,aAAY;IACZ,2BAAsB;QAAtB,uBAAsB;IACtB,mB5Bge8C;I4B/d9C,kB5B+d8C;G4B9d/C;C9ByzGJ;;Aal5GG;EiBmGF;IACE,qBAAa;IAAb,cAAa;IACb,wBAAmB;QAAnB,oBAAmB;GA2CpB;EA7CD;IAKI,iBAAY;QAAZ,aAAY;GAuCb;EA5CH;IAQM,eAAc;IACd,eAAc;GACf;EAVL;ItB1IE,2BsByJoC;ItBxJpC,8BsBwJoC;GAQ/B;EAvBP;IAkBU,2BAA0B;GAC3B;EAnBT;IAqBU,8BAA6B;GAC9B;EAtBT;ItB5HE,0BsBqJmC;ItBpJnC,6BsBoJmC;GAQ9B;EAjCP;IA4BU,0BAAyB;GAC1B;EA7BT;IA+BU,6BAA4B;GAC7B;EAhCT;IAoCQ,iBAAgB;GAMjB;EA1CP;;IAwCU,iBAAgB;GACjB;C9B+yGV;;A8BnyGD;EAEI,uB5BkZ6B;C4BjZ9B;;AjB3JC;EiBwJJ;IAMI,wB5B2ZyB;Y4B3ZzB,gB5B2ZyB;I4B1ZzB,4B5B2Z+B;Y4B3Z/B,oB5B2Z+B;G4BpZlC;EAdD;IAUM,sBAAqB;IACrB,YAAW;GACZ;C9BsyGJ;;A+BlgHD;EACE,sB7BixBkC;E6BhxBlC,oBAAmB;EACnB,iBAAgB;EAChB,0B7BgDgB;EMhDd,uBNmN2B;C6BhN9B;;ACNC;EACE,eAAc;EACd,YAAW;EACX,YAAW;CACZ;;ADIH;EACE,YAAW;CA2BZ;;AA5BD;EAKI,sBAAqB;EACrB,sB7BowBiC;E6BnwBjC,qB7BmwBiC;E6BlwBjC,e7BuCc;E6BtCd,aAAiC;CAClC;;AAVH;EAmBI,2BAA0B;CAC3B;;AApBH;EAsBI,sBAAqB;CACtB;;AAvBH;EA0BI,e7BqBc;C6BpBf;;AEpCH;EACE,qBAAa;EAAb,cAAa;EAEb,gBAAe;EACf,iBAAgB;EzBAd,uBNmN2B;C+BjN9B;;AAED;EAGM,eAAc;EzBoBhB,gCNwL2B;EMvL3B,mCNuL2B;C+B1M1B;;AALL;EzBSI,iCNsM2B;EMrM3B,oCNqM2B;C+BrM1B;;AAVL;EAcI,WAAU;EACV,Y/B2BS;E+B1BT,0B/BkDa;E+BjDb,sB/BiDa;C+BhDd;;AAlBH;EAqBI,e/B2Bc;E+B1Bd,qBAAoB;EACpB,uB/BmBS;E+BlBT,mB/ByjBuC;C+BxjBxC;;AAGH;EACE,mBAAkB;EAClB,eAAc;EACd,wB/B4hB0C;E+B3hB1C,kBAAiB;EACjB,kB/B+hBwC;E+B9hBxC,e/BgCe;E+B/Bf,uB/BOW;E+BNX,uB/BiiByC;C+BzhB1C;;A9B9BG;E8ByBA,e/BuH4C;E+BtH5C,sBAAqB;EACrB,0B/BGc;E+BFd,mB/B+hBuC;CCxjBtC;;A+BtBH;EACE,wBhCmkBwC;EgClkBxC,mBhCyOoB;EgCxOpB,iBhC4MwB;CgC3MzB;;AAIG;E1BoBF,+BNyL0B;EMxL1B,kCNwL0B;CgC3MvB;;AAGD;E1BCF,gCNuM0B;EMtM1B,mCNsM0B;CgCtMvB;;AAfL;EACE,wBhCikBuC;EgChkBvC,oBhC0OoB;EgCzOpB,iBhC6MwB;CgC5MzB;;AAIG;E1BoBF,+BN0L0B;EMzL1B,kCNyL0B;CgC5MvB;;AAGD;E1BCF,gCNwM0B;EMvM1B,mCNuM0B;CgCvMvB;;ACbP;EACE,sBAAqB;EACrB,sBjC+pBgC;EiC9pBhC,ejC2pB+B;EiC1pB/B,kBjCyOqB;EiCxOrB,eAAc;EACd,YjCuCW;EiCtCX,mBAAkB;EAClB,oBAAmB;EACnB,yBAAwB;E3BVtB,uBNmN2B;CiClM9B;;AAhBD;EAcI,cAAa;CACd;;AAIH;EACE,mBAAkB;EAClB,UAAS;CACV;;AAMD;EACE,qBjCsoBgC;EiCroBhC,oBjCqoBgC;EMpqB9B,qBNuqB+B;CiCtoBlC;;AAOC;ElBiBE,YAAW;EmB3Db,0BlCwEe;CiC5Bd;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBiBE,YAAW;EmB3Db,0BlCsDgB;CiCVf;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBiBE,YAAW;EmB3Db,0BlC+Ee;CiCnCd;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBiBE,YAAW;EmB3Db,0BlCiFe;CiCrCd;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBeE,YAAW;EmBzDb,0BlC8Ee;CiClCd;;AhCxBC;EcqCA,YAAW;EmBpDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBiBE,YAAW;EmB3Db,0BlC4Ee;CiChCd;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBeE,YAAW;EmBzDb,0BlCiDgB;CiCLf;;AhCxBC;EcqCA,YAAW;EmBpDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AgCmBH;ElBiBE,YAAW;EmB3Db,0BlCwDgB;CiCZf;;AhCxBC;EcuCA,YAAW;EmBtDT,sBAAqB;EACrB,0BAAkC;CjCiBnC;;AkCzBL;EACE,mBAAoD;EACpD,oBnC4lBmC;EmC3lBnC,0BnCiDgB;EMhDd,sBNoN0B;CmC/M7B;;AxB+CG;EwBxDJ;IAOI,mBnCulBiC;GmCrlBpC;CrCkvHA;;AqChvHD;EACE,iBAAgB;EAChB,gBAAe;E7BTb,iB6BUsB;CACzB;;ACXD;EACE,yBpC6sBmC;EoC5sBnC,oBpC6sBgC;EoC5sBhC,8BAA6C;E9BH3C,uBNmN2B;CoC9M9B;;AAGD;EAEE,eAAc;CACf;;AAGD;EACE,kBpC+NqB;CoC9NtB;;AAOD;EAGI,mBAAkB;EAClB,cpCkrBgC;EoCjrBhC,gBpCkrBiC;EoCjrBjC,yBpCirBiC;EoChrBjC,eAAc;CACf;;AASD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ADiCD;EC3CA,etBsFkE;EsBrFlE,0BtBmFuE;EsBlFvE,sBtBkFuE;CqBvCtE;;ACzCD;EACE,0BAAqC;CACtC;;AAED;EACE,eAA0B;CAC3B;;ACXH;EACE;IAAO,4BAAuC;GxC44H7C;EwC34HD;IAAK,yBAAwB;GxC84H5B;CACF;;AwCj5HD;EACE;IAAO,4BAAuC;GxC44H7C;EwC34HD;IAAK,yBAAwB;GxC84H5B;CACF;;AwC54HD;EACE,qBAAa;EAAb,cAAa;EACb,iBAAgB;EAChB,mBtCotBoC;EsCntBpC,kBtCktBkC;EsCjtBlC,mBAAkB;EAClB,0BtCyCgB;EMhDd,uBNmN2B;CsCzM9B;;AAED;EACE,atC0sBkC;EsCzsBlC,kBtCysBkC;EsCxsBlC,YtC+BW;EsC9BX,0BtCsDe;EOrEX,4BP8tBwC;CsC7sB7C;;AAED;ECWE,sMAA6I;EDT7I,2BtCisBkC;CsChsBnC;;AAED;EACE,2DtCosBgD;UsCpsBhD,mDtCosBgD;CsCnsBjD;;AE/BD;EACE,qBAAa;EAAb,cAAa;EACb,sBAAuB;MAAvB,wBAAuB;CACxB;;AAED;EACE,YAAO;MAAP,QAAO;CACR;;ACHD;EACE,qBAAa;EAAb,cAAa;EACb,2BAAsB;MAAtB,uBAAsB;EAGtB,gBAAe;EACf,iBAAgB;CACjB;;AAQD;EACE,YAAW;EACX,ezCoCgB;EyCnChB,oBAAmB;CAapB;;AxCbG;EwCIA,ezC+Bc;EyC9Bd,sBAAqB;EACrB,0BzCuBc;CC1Bb;;AwCNL;EAaI,ezC2Bc;EyC1Bd,0BzCmBc;CyClBf;;AAQH;EACE,mBAAkB;EAClB,eAAc;EACd,yBzCgsBsC;EyC9rBtC,oBzCsKgB;EyCrKhB,uBzCEW;EyCDX,uCzCWW;CyCiBZ;;AAnCD;EnChCI,gCN6M2B;EM5M3B,iCN4M2B;CyClK5B;;AAXH;EAcI,iBAAgB;EnChChB,oCN+L2B;EM9L3B,mCN8L2B;CyC7J5B;;AxCpCC;EwCuCA,sBAAqB;CxCpCpB;;AwCiBL;EAwBI,ezCVc;EyCWd,uBzCjBS;CyCkBV;;AA1BH;EA8BI,WAAU;EACV,YzCvBS;EyCwBT,0BzCAa;EyCCb,sBzCDa;CyCEd;;AASH;EAEI,gBAAe;EACf,eAAc;EACd,iBAAgB;CACjB;;AALH;EASM,cAAa;CACd;;AAVL;EAeM,iBAAgB;CACjB;;AClGH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;AAnBH;EACE,e3BmFgE;E2BlFhE,0B3BgFqE;C2B/EtE;;AAGD;;EAEE,e3B4EgE;C2BhEjE;;AzCDC;;;EyCRE,e3ByE8D;E2BxE9D,0BAAyC;CzCU1C;;AyChBH;;EAUI,YAAW;EACX,0B3BmE8D;E2BlE9D,sB3BkE8D;C2BjE/D;;ACtBL;EACE,aAAY;EACZ,kB3CizBiD;E2ChzBjD,kB3C+OqB;E2C9OrB,eAAc;EACd,Y3CuDW;E2CtDX,0B3C4CW;E2C3CX,YAAW;CAOZ;;A1CQG;E0CZA,Y3CkDS;E2CjDT,sBAAqB;EACrB,aAAY;C1CaX;;A0CHL;EACE,WAAU;EACV,wBAAuB;EACvB,UAAS;EACT,yBAAwB;CACzB;;ACpBD;EACE,iBAAgB;CACjB;;AAGD;EACE,gBAAe;EACf,OAAM;EACN,SAAQ;EACR,UAAS;EACT,QAAO;EACP,c5C0f8B;E4Czf9B,cAAa;EACb,iBAAgB;EAGhB,WAAU;CAWX;;AAtBD;ErCPM,4CPqsB8C;EOrsB9C,oCPqsB8C;EOrsB9C,qEPqsB8C;E4C3qBhD,sCAA6B;UAA7B,8BAA6B;CAC9B;;AApBH;EAqByB,mCAA0B;UAA1B,2BAA0B;CAAI;;AAEvD;EACE,mBAAkB;EAClB,iBAAgB;CACjB;;AAGD;EACE,mBAAkB;EAClB,YAAW;EACX,a5CuoBgC;C4CtoBjC;;AAGD;EACE,mBAAkB;EAClB,qBAAa;EAAb,cAAa;EACb,2BAAsB;MAAtB,uBAAsB;EACtB,uB5CFW;E4CGX,6BAA4B;EAC5B,qC5CMW;EMxDT,sBNoN0B;E4C9J5B,WAAU;CACX;;AAGD;EACE,gBAAe;EACf,OAAM;EACN,SAAQ;EACR,UAAS;EACT,QAAO;EACP,c5Cuc8B;E4Ctc9B,uB5CTW;C4CcZ;;AAZD;EAUW,WAAU;CAAK;;AAV1B;EAWW,a5CsnBqB;C4CtnBe;;AAK/C;EACE,qBAAa;EAAb,cAAa;EACb,uBAAmB;MAAnB,oBAAmB;EACnB,uBAA8B;MAA9B,+BAA8B;EAC9B,c5CknBgC;E4CjnBhC,iC5C/BgB;C4CgCjB;;AAGD;EACE,iBAAgB;EAChB,iB5C4JoB;C4C3JrB;;AAID;EACE,mBAAkB;EAGlB,mBAAc;MAAd,eAAc;EACd,c5C8kBgC;C4C7kBjC;;AAGD;EACE,qBAAa;EAAb,cAAa;EACb,uBAAmB;MAAnB,oBAAmB;EACnB,mBAAyB;MAAzB,0BAAyB;EACzB,c5CskBgC;E4CrkBhC,8B5CxDgB;C4C6DjB;;AAVD;EAQyB,oBAAmB;CAAK;;AARjD;EASwB,qBAAoB;CAAK;;AAIjD;EACE,mBAAkB;EAClB,aAAY;EACZ,YAAW;EACX,aAAY;EACZ,iBAAgB;CACjB;;AjClEG;EiCuEF;IACE,iB5CukB+B;I4CtkB/B,kBAAyC;GAC1C;EAMD;IAAY,iB5CgkBqB;G4ChkBG;C9CosIrC;;AapxIG;EiCoFF;IAAY,iB5C0jBqB;G4C1jBG;C9CssIrC;;A+Cj1ID;EACE,mBAAkB;EAClB,c7C2gB8B;E6C1gB9B,eAAc;EACd,U7CynB6B;E8C5nB7B,wG9CuOiH;E8CrOjH,mBAAkB;EAClB,oB9C4OyB;E8C3OzB,iB9C+OoB;E8C9OpB,iBAAgB;EAChB,kBAAiB;EACjB,sBAAqB;EACrB,kBAAiB;EACjB,qBAAoB;EACpB,uBAAsB;EACtB,mBAAkB;EAClB,qBAAoB;EACpB,oBAAmB;EACnB,iBAAgB;EDPhB,oB7CsOsB;E6CpOtB,sBAAqB;EACrB,WAAU;CAoFX;;AA/FD;EAaW,a7C6mBqB;C6C7mBQ;;AAbxC;EAgBI,mBAAkB;EAClB,eAAc;EACd,W7C8mB6B;E6C7mB7B,Y7C8mB6B;C6C7mB9B;;AApBH;EAuBI,eAA+B;CAWhC;;AAlCH;EAyBM,UAAS;CACV;;AA1BL;EA6BM,kBAAuC;EACvC,YAAW;EACX,wBAAyD;EACzD,uB7C2BO;C6C1BR;;AAjCL;EAoCI,e7C4lB6B;C6CjlB9B;;AA/CH;EAsCM,QAAO;CACR;;AAvCL;EA0CM,iBAAsC;EACtC,YAAW;EACX,4BAA8E;EAC9E,yB7CcO;C6CbR;;AA9CL;EAiDI,eAA+B;CAWhC;;AA5DH;EAmDM,OAAM;CACP;;AApDL;EAuDM,kBAAuC;EACvC,YAAW;EACX,wB7CukB2B;E6CtkB3B,0B7CCO;C6CAR;;AA3DL;EA8DI,e7CkkB6B;C6CtjB9B;;AA1EH;EAgEM,SAAQ;CACT;;AAjEL;EAoEM,SAAQ;EACR,iBAAsC;EACtC,YAAW;EACX,4B7CyjB2B;E6CxjB3B,wB7CbO;C6CcR;;AAzEL;EA2FI,mBAAkB;EAClB,0BAAyB;EACzB,oBAAmB;CACpB;;AAIH;EACE,iB7CohBiC;E6CnhBjC,iB7CwhB+B;E6CvhB/B,Y7CpDW;E6CqDX,mBAAkB;EAClB,uB7C5CW;EMxDT,uBNmN2B;C6C7G9B;;AE1GD;EACE,mBAAkB;EAClB,OAAM;EACN,QAAO;EACP,c/CygB8B;E+CxgB9B,eAAc;EACd,iB/CooByC;E+CnoBzC,a/CioBuC;E8CtoBvC,wG9CuOiH;E8CrOjH,mBAAkB;EAClB,oB9C4OyB;E8C3OzB,iB9C+OoB;E8C9OpB,iBAAgB;EAChB,kBAAiB;EACjB,sBAAqB;EACrB,kBAAiB;EACjB,qBAAoB;EACpB,uBAAsB;EACtB,mBAAkB;EAClB,qBAAoB;EACpB,oBAAmB;EACnB,iBAAgB;ECLhB,oB/CoOsB;E+ClOtB,sBAAqB;EACrB,uB/CoCW;E+CnCX,6BAA4B;EAC5B,qC/C4CW;EMxDT,sBNoN0B;C+C5C7B;;AA5KD;EAyBI,mBAAkB;EAClB,eAAc;EACd,Y/C6nBsC;E+C5nBtC,Y/C6nBqC;C+C5nBtC;;AA7BH;;EAiCI,mBAAkB;EAClB,eAAc;EACd,0BAAyB;EACzB,oBAAmB;CACpB;;AArCH;EAwCI,YAAW;EACX,mB/CmnB8D;C+ClnB/D;;AA1CH;EA4CI,YAAW;EACX,mB/C+mB8D;C+C9mB/D;;AA9CH;EAmDI,oB/CqmBsC;C+C/kBvC;;AAzEH;EAsDM,UAAS;CACV;;AAvDL;;EA2DM,uBAAsB;CACvB;;AA5DL;EA+DM,c/C6lB4D;E+C5lB5D,kBAA6C;EAC7C,sC/C4lBmE;C+C3lBpE;;AAlEL;EAqEM,cAAwC;EACxC,kBAA6C;EAC7C,uB/CrBO;C+CsBR;;AAxEL;EA4EI,kB/C4kBsC;C+CvjBvC;;AAjGH;EA+EM,QAAO;CACR;;AAhFL;;EAoFM,iBAA4C;EAC5C,qBAAoB;CACrB;;AAtFL;EAyFM,Y/CmkB4D;E+ClkB5D,wC/CmkBmE;C+ClkBpE;;AA3FL;EA8FM,YAAsC;EACtC,yB/C7CO;C+C8CR;;AAhGL;EAoGI,iB/CojBsC;C+CnhBvC;;AArIH;EAuGM,OAAM;CACP;;AAxGL;;EA4GM,kBAAuC;EACvC,oBAAmB;CACpB;;AA9GL;EAiHM,W/C2iB4D;E+C1iB5D,yC/C2iBmE;C+C1iBpE;;AAnHL;EAsHM,WAAqC;EACrC,0B/CrEO;C+CsER;;AAxHL;EA4HM,mBAAkB;EAClB,OAAM;EACN,UAAS;EACT,eAAc;EACd,YAAW;EACX,mBAAkB;EAClB,YAAW;EACX,iC/C4gBwD;C+C3gBzD;;AApIL;EAwII,mB/CghBsC;C+C3fvC;;AA7JH;EA2IM,SAAQ;CACT;;AA5IL;;EAgJM,iBAA4C;EAC5C,sBAAqB;CACtB;;AAlJL;EAqJM,a/CugB4D;E+CtgB5D,uC/CugBmE;C+CtgBpE;;AAvJL;EA0JM,aAAuC;EACvC,wB/CzGO;C+C0GR;;AAoBL;EACE,kB/CieyC;E+ChezC,iBAAgB;EAChB,gB/C0DmB;E+CzDnB,e/C8E8B;E+C7E9B,0B/C0d4D;E+Czd5D,iCAAyE;EzC5KvE,2CyC6KyE;EzC5KzE,4CyC4KyE;CAM5E;;AAbD;EAWI,cAAa;CACd;;AAGH;EACE,kB/CsdqC;E+CrdrC,e/CtIgB;C+CuIjB;;ACjMD;EACE,mBAAkB;CACnB;;AAED;EACE,mBAAkB;EAClB,YAAW;EACX,iBAAgB;CACjB;;AAED;EACE,mBAAkB;EAClB,cAAa;EACb,uBAAmB;MAAnB,oBAAmB;EACnB,YAAW;EzCVP,wCPyyB4C;EOzyB5C,gCPyyB4C;EOzyB5C,6DPyyB4C;EgD7xBhD,oCAA2B;UAA3B,4BAA2B;EAC3B,4BAAmB;UAAnB,oBAAmB;CACpB;;AAED;;;EAGE,eAAc;CACf;;AAED;;EAEE,mBAAkB;EAClB,OAAM;CACP;;AAGD;;EAEE,iCAAwB;UAAxB,yBAAwB;CAKzB;;AAHyC;EAJ1C;;IAKI,wCAA+B;YAA/B,gCAA+B;GAElC;ClD2nJA;;AkDznJD;;EAEE,oCAA2B;UAA3B,4BAA2B;CAK5B;;AAHyC;EAJ1C;;IAKI,2CAAkC;YAAlC,mCAAkC;GAErC;ClD8nJA;;AkD5nJD;;EAEE,qCAA4B;UAA5B,6BAA4B;CAK7B;;AAHyC;EAJ1C;;IAKI,4CAAmC;YAAnC,oCAAmC;GAEtC;ClDioJA;;AkD1nJD;;EAEE,mBAAkB;EAClB,OAAM;EACN,UAAS;EAET,qBAAa;EAAb,cAAa;EACb,uBAAmB;MAAnB,oBAAmB;EACnB,sBAAuB;MAAvB,wBAAuB;EACvB,WhDmtB+C;EgDltB/C,YhD1BW;EgD2BX,mBAAkB;EAClB,ahDitB8C;CgDtsB/C;;A/CnEG;;;E+C8DA,YhDlCS;EgDmCT,sBAAqB;EACrB,WAAU;EACV,YAAW;C/C9DV;;A+CiEL;EACE,QAAO;CACR;;AACD;EACE,SAAQ;CACT;;AAGD;;EAEE,sBAAqB;EACrB,YhDosBgD;EgDnsBhD,ahDmsBgD;EgDlsBhD,gDAA+C;EAC/C,2BAA0B;CAC3B;;AACD;EACE,8MjC/DyI;CiCgE1I;;AACD;EACE,gNjClEyI;CiCmE1I;;AAQD;EACE,mBAAkB;EAClB,SAAQ;EACR,aAAY;EACZ,QAAO;EACP,YAAW;EACX,qBAAa;EAAb,cAAa;EACb,sBAAuB;MAAvB,wBAAuB;EACvB,gBAAe;EAEf,kBhD6pB+C;EgD5pB/C,iBhD4pB+C;EgD3pB/C,iBAAgB;CAoCjB;;AAhDD;EAeI,mBAAkB;EAClB,mBAAc;MAAd,eAAc;EACd,YhDypB8C;EgDxpB9C,YhDypB6C;EgDxpB7C,kBhDypB6C;EgDxpB7C,iBhDwpB6C;EgDvpB7C,oBAAmB;EACnB,2ChD3FS;CgDgHV;;AA3CH;EA0BM,mBAAkB;EAClB,WAAU;EACV,QAAO;EACP,sBAAqB;EACrB,YAAW;EACX,aAAY;EACZ,YAAW;CACZ;;AAjCL;EAmCM,mBAAkB;EAClB,cAAa;EACb,QAAO;EACP,sBAAqB;EACrB,YAAW;EACX,aAAY;EACZ,YAAW;CACZ;;AA1CL;EA8CI,uBhDnHS;CgDoHV;;AAQH;EACE,mBAAkB;EAClB,WAA6C;EAC7C,aAAY;EACZ,UAA4C;EAC5C,YAAW;EACX,kBAAiB;EACjB,qBAAoB;EACpB,YhDpIW;EgDqIX,mBAAkB;CACnB;;ACxLD;EAAqB,oCAAmC;CAAK;;AAC7D;EAAqB,+BAA8B;CAAK;;AACxD;EAAqB,kCAAiC;CAAK;;AAC3D;EAAqB,kCAAiC;CAAK;;AAC3D;EAAqB,uCAAsC;CAAK;;AAChE;EAAqB,oCAAmC;CAAK;;ACF3D;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AiDtBH;EACE,qCAAmC;CACpC;;AjDiBC;EiDdE,qCAAgD;CjDiBjD;;AkDrBL;EAAY,kCAAmC;CAAI;;AACnD;EAAkB,yCAAwC;CAAK;;ACD/D;EAAmB,qCAAsC;CAAI;;AAC7D;EAAmB,qBAAoB;CAAK;;AAC5C;EAAmB,yBAAwB;CAAK;;AAChD;EAAmB,2BAA0B;CAAK;;AAClD;EAAmB,4BAA2B;CAAK;;AACnD;EAAmB,0BAAyB;CAAK;;AAG/C;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAFD;EACE,iCAA+B;CAChC;;AAGH;EACE,8BAA+B;CAChC;;AAMD;EACE,kCAAwC;CACzC;;AACD;EACE,2CAAiD;EACjD,4CAAkD;CACnD;;AACD;EACE,4CAAkD;EAClD,+CAAqD;CACtD;;AACD;EACE,+CAAqD;EACrD,8CAAoD;CACrD;;AACD;EACE,2CAAiD;EACjD,8CAAoD;CACrD;;AAED;EACE,mBAAkB;CACnB;;AAED;EACE,iBAAgB;CACjB;;AtBlDC;EACE,eAAc;EACd,YAAW;EACX,YAAW;CACZ;;AuBGC;EAA2B,yBAAwB;CAAK;;AACxD;EAA2B,2BAA0B;CAAK;;AAC1D;EAA2B,iCAAgC;CAAK;;AAChE;EAA2B,0BAAyB;CAAK;;AACzD;EAA2B,0BAAyB;CAAK;;AACzD;EAA2B,+BAA8B;CAAK;;AAC9D;EAA2B,gCAAwB;EAAxB,yBAAwB;CAAK;;AACxD;EAA2B,uCAA+B;EAA/B,gCAA+B;CAAK;;A1CyC/D;E0ChDA;IAA2B,yBAAwB;GAAK;EACxD;IAA2B,2BAA0B;GAAK;EAC1D;IAA2B,iCAAgC;GAAK;EAChE;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,+BAA8B;GAAK;EAC9D;IAA2B,gCAAwB;IAAxB,yBAAwB;GAAK;EACxD;IAA2B,uCAA+B;IAA/B,gCAA+B;GAAK;CvDuhKlE;;Aa9+JG;E0ChDA;IAA2B,yBAAwB;GAAK;EACxD;IAA2B,2BAA0B;GAAK;EAC1D;IAA2B,iCAAgC;GAAK;EAChE;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,+BAA8B;GAAK;EAC9D;IAA2B,gCAAwB;IAAxB,yBAAwB;GAAK;EACxD;IAA2B,uCAA+B;IAA/B,gCAA+B;GAAK;CvDkjKlE;;AazgKG;E0ChDA;IAA2B,yBAAwB;GAAK;EACxD;IAA2B,2BAA0B;GAAK;EAC1D;IAA2B,iCAAgC;GAAK;EAChE;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,+BAA8B;GAAK;EAC9D;IAA2B,gCAAwB;IAAxB,yBAAwB;GAAK;EACxD;IAA2B,uCAA+B;IAA/B,gCAA+B;GAAK;CvD6kKlE;;AapiKG;E0ChDA;IAA2B,yBAAwB;GAAK;EACxD;IAA2B,2BAA0B;GAAK;EAC1D;IAA2B,iCAAgC;GAAK;EAChE;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,0BAAyB;GAAK;EACzD;IAA2B,+BAA8B;GAAK;EAC9D;IAA2B,gCAAwB;IAAxB,yBAAwB;GAAK;EACxD;IAA2B,uCAA+B;IAA/B,gCAA+B;GAAK;CvDwmKlE;;AuD/lKD;EACE,yBAAwB;CAKzB;;AAHC;EAHF;IAII,0BAAyB;GAE5B;CvDmmKA;;AuDjmKD;EACE,yBAAwB;CAKzB;;AAHC;EAHF;IAII,2BAA0B;GAE7B;CvDqmKA;;AuDnmKD;EACE,yBAAwB;CAKzB;;AAHC;EAHF;IAII,iCAAgC;GAEnC;CvDumKA;;AuDpmKC;EADF;IAEI,yBAAwB;GAE3B;CvDumKA;;AwDzpKD;EACE,mBAAkB;EAClB,eAAc;EACd,YAAW;EACX,WAAU;EACV,iBAAgB;CAoBjB;;AAzBD;EAQI,eAAc;EACd,YAAW;CACZ;;AAVH;;;;;EAiBI,mBAAkB;EAClB,OAAM;EACN,UAAS;EACT,QAAO;EACP,YAAW;EACX,aAAY;EACZ,UAAS;CACV;;AAGH;EAEI,wBAA+B;CAChC;;AAGH;EAEI,oBAA+B;CAChC;;AAGH;EAEI,iBAA8B;CAC/B;;AAGH;EAEI,kBAA8B;CAC/B;;AC1CC;EAAgC,mCAA8B;MAA9B,+BAA8B;CAAK;;AACnE;EAAgC,sCAAiC;MAAjC,kCAAiC;CAAK;;AACtE;EAAgC,2CAAsC;MAAtC,uCAAsC;CAAK;;AAC3E;EAAgC,8CAAyC;MAAzC,0CAAyC;CAAK;;AAE9E;EAA8B,+BAA0B;MAA1B,2BAA0B;CAAK;;AAC7D;EAA8B,iCAA4B;MAA5B,6BAA4B;CAAK;;AAC/D;EAA8B,uCAAkC;MAAlC,mCAAkC;CAAK;;AAErE;EAAoC,gCAAsC;MAAtC,uCAAsC;CAAK;;AAC/E;EAAoC,8BAAoC;MAApC,qCAAoC;CAAK;;AAC7E;EAAoC,iCAAkC;MAAlC,mCAAkC;CAAK;;AAC3E;EAAoC,kCAAyC;MAAzC,0CAAyC;CAAK;;AAClF;EAAoC,qCAAwC;MAAxC,yCAAwC;CAAK;;AAEjF;EAAiC,iCAAkC;MAAlC,mCAAkC;CAAK;;AACxE;EAAiC,+BAAgC;MAAhC,iCAAgC;CAAK;;AACtE;EAAiC,kCAA8B;MAA9B,+BAA8B;CAAK;;AACpE;EAAiC,oCAAgC;MAAhC,iCAAgC;CAAK;;AACtE;EAAiC,mCAA+B;MAA/B,gCAA+B;CAAK;;AAErE;EAAkC,qCAAoC;MAApC,qCAAoC;CAAK;;AAC3E;EAAkC,mCAAkC;MAAlC,mCAAkC;CAAK;;AACzE;EAAkC,sCAAgC;MAAhC,iCAAgC;CAAK;;AACvE;EAAkC,uCAAuC;MAAvC,wCAAuC;CAAK;;AAC9E;EAAkC,0CAAsC;MAAtC,uCAAsC;CAAK;;AAC7E;EAAkC,uCAAiC;MAAjC,kCAAiC;CAAK;;AAExE;EAAgC,qCAA2B;MAA3B,4BAA2B;CAAK;;AAChE;EAAgC,sCAAiC;MAAjC,kCAAiC;CAAK;;AACtE;EAAgC,oCAA+B;MAA/B,gCAA+B;CAAK;;AACpE;EAAgC,uCAA6B;MAA7B,8BAA6B;CAAK;;AAClE;EAAgC,yCAA+B;MAA/B,gCAA+B;CAAK;;AACpE;EAAgC,wCAA8B;MAA9B,+BAA8B;CAAK;;A5CenE;E4ChDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CzD22KtE;;Aa51KG;E4ChDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CzDq8KtE;;Aat7KG;E4ChDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CzD+hLtE;;AahhLG;E4ChDA;IAAgC,mCAA8B;QAA9B,+BAA8B;GAAK;EACnE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,2CAAsC;QAAtC,uCAAsC;GAAK;EAC3E;IAAgC,8CAAyC;QAAzC,0CAAyC;GAAK;EAE9E;IAA8B,+BAA0B;QAA1B,2BAA0B;GAAK;EAC7D;IAA8B,iCAA4B;QAA5B,6BAA4B;GAAK;EAC/D;IAA8B,uCAAkC;QAAlC,mCAAkC;GAAK;EAErE;IAAoC,gCAAsC;QAAtC,uCAAsC;GAAK;EAC/E;IAAoC,8BAAoC;QAApC,qCAAoC;GAAK;EAC7E;IAAoC,iCAAkC;QAAlC,mCAAkC;GAAK;EAC3E;IAAoC,kCAAyC;QAAzC,0CAAyC;GAAK;EAClF;IAAoC,qCAAwC;QAAxC,yCAAwC;GAAK;EAEjF;IAAiC,iCAAkC;QAAlC,mCAAkC;GAAK;EACxE;IAAiC,+BAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,kCAA8B;QAA9B,+BAA8B;GAAK;EACpE;IAAiC,oCAAgC;QAAhC,iCAAgC;GAAK;EACtE;IAAiC,mCAA+B;QAA/B,gCAA+B;GAAK;EAErE;IAAkC,qCAAoC;QAApC,qCAAoC;GAAK;EAC3E;IAAkC,mCAAkC;QAAlC,mCAAkC;GAAK;EACzE;IAAkC,sCAAgC;QAAhC,iCAAgC;GAAK;EACvE;IAAkC,uCAAuC;QAAvC,wCAAuC;GAAK;EAC9E;IAAkC,0CAAsC;QAAtC,uCAAsC;GAAK;EAC7E;IAAkC,uCAAiC;QAAjC,kCAAiC;GAAK;EAExE;IAAgC,qCAA2B;QAA3B,4BAA2B;GAAK;EAChE;IAAgC,sCAAiC;QAAjC,kCAAiC;GAAK;EACtE;IAAgC,oCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,uCAA6B;QAA7B,8BAA6B;GAAK;EAClE;IAAgC,yCAA+B;QAA/B,gCAA+B;GAAK;EACpE;IAAgC,wCAA8B;QAA9B,+BAA8B;GAAK;CzDynLtE;;A0D9pLG;ECHF,uBAAsB;CDG2B;;AAC/C;ECDF,wBAAuB;CDC2B;;AAChD;ECCF,uBAAsB;CDD2B;;A7CkD/C;E6CpDA;ICHF,uBAAsB;GDG2B;EAC/C;ICDF,wBAAuB;GDC2B;EAChD;ICCF,uBAAsB;GDD2B;C1DorLlD;;AaloLG;E6CpDA;ICHF,uBAAsB;GDG2B;EAC/C;ICDF,wBAAuB;GDC2B;EAChD;ICCF,uBAAsB;GDD2B;C1DgsLlD;;Aa9oLG;E6CpDA;ICHF,uBAAsB;GDG2B;EAC/C;ICDF,wBAAuB;GDC2B;EAChD;ICCF,uBAAsB;GDD2B;C1D4sLlD;;Aa1pLG;E6CpDA;ICHF,uBAAsB;GDG2B;EAC/C;ICDF,wBAAuB;GDC2B;EAChD;ICCF,uBAAsB;GDD2B;C1DwtLlD;;A4D5tLD;EACE,gBAAe;EACf,OAAM;EACN,SAAQ;EACR,QAAO;EACP,c1DmgB8B;C0DlgB/B;;AAED;EACE,gBAAe;EACf,SAAQ;EACR,UAAS;EACT,QAAO;EACP,c1D2f8B;C0D1f/B;;AAG6B;EAD9B;IAEI,yBAAgB;IAAhB,iBAAgB;IAChB,OAAM;IACN,c1Dmf4B;G0Djf/B;C5D8tLA;;A6DlvLD;ECEE,mBAAkB;EAClB,WAAU;EACV,YAAW;EACX,WAAU;EACV,iBAAgB;EAChB,uBAAmB;EACnB,oBAAmB;EACnB,8BAAqB;UAArB,sBAAqB;EACrB,UAAS;CDRV;;ACkBC;EAEE,iBAAgB;EAChB,YAAW;EACX,aAAY;EACZ,kBAAiB;EACjB,WAAU;EACV,oBAAmB;EACnB,wBAAe;UAAf,gBAAe;CAChB;;AC7BC;EAAuB,sBAA4B;CAAI;;AAAvD;EAAuB,sBAA4B;CAAI;;AAAvD;EAAuB,sBAA4B;CAAI;;AAAvD;EAAuB,uBAA4B;CAAI;;AAAvD;EAAuB,uBAA4B;CAAI;;AAAvD;EAAuB,uBAA4B;CAAI;;AAAvD;EAAuB,uBAA4B;CAAI;;AAAvD;EAAuB,wBAA4B;CAAI;;AAI3D;EAAU,2BAA0B;CAAK;;AACzC;EAAU,4BAA2B;CAAK;;ACAlC;EAAiC,qBAAmC;CAAI;;AACxE;EAAiC,yBAAuC;CAAI;;AAC5E;EAAiC,2BAAyC;CAAI;;AAC9E;EAAiC,4BAA0C;CAAI;;AAC/E;EAAiC,0BAAwC;CAAI;;AAC7E;EACE,2BAAwC;EACxC,0BAAuC;CACxC;;AACD;EACE,yBAAuC;EACvC,4BAA0C;CAC3C;;AAZD;EAAiC,2BAAmC;CAAI;;AACxE;EAAiC,+BAAuC;CAAI;;AAC5E;EAAiC,iCAAyC;CAAI;;AAC9E;EAAiC,kCAA0C;CAAI;;AAC/E;EAAiC,gCAAwC;CAAI;;AAC7E;EACE,iCAAwC;EACxC,gCAAuC;CACxC;;AACD;EACE,+BAAuC;EACvC,kCAA0C;CAC3C;;AAZD;EAAiC,0BAAmC;CAAI;;AACxE;EAAiC,8BAAuC;CAAI;;AAC5E;EAAiC,gCAAyC;CAAI;;AAC9E;EAAiC,iCAA0C;CAAI;;AAC/E;EAAiC,+BAAwC;CAAI;;AAC7E;EACE,gCAAwC;EACxC,+BAAuC;CACxC;;AACD;EACE,8BAAuC;EACvC,iCAA0C;CAC3C;;AAZD;EAAiC,wBAAmC;CAAI;;AACxE;EAAiC,4BAAuC;CAAI;;AAC5E;EAAiC,8BAAyC;CAAI;;AAC9E;EAAiC,+BAA0C;CAAI;;AAC/E;EAAiC,6BAAwC;CAAI;;AAC7E;EACE,8BAAwC;EACxC,6BAAuC;CACxC;;AACD;EACE,4BAAuC;EACvC,+BAA0C;CAC3C;;AAZD;EAAiC,0BAAmC;CAAI;;AACxE;EAAiC,8BAAuC;CAAI;;AAC5E;EAAiC,gCAAyC;CAAI;;AAC9E;EAAiC,iCAA0C;CAAI;;AAC/E;EAAiC,+BAAwC;CAAI;;AAC7E;EACE,gCAAwC;EACxC,+BAAuC;CACxC;;AACD;EACE,8BAAuC;EACvC,iCAA0C;CAC3C;;AAZD;EAAiC,wBAAmC;CAAI;;AACxE;EAAiC,4BAAuC;CAAI;;AAC5E;EAAiC,8BAAyC;CAAI;;AAC9E;EAAiC,+BAA0C;CAAI;;AAC/E;EAAiC,6BAAwC;CAAI;;AAC7E;EACE,8BAAwC;EACxC,6BAAuC;CACxC;;AACD;EACE,4BAAuC;EACvC,+BAA0C;CAC3C;;AAZD;EAAiC,sBAAmC;CAAI;;AACxE;EAAiC,0BAAuC;CAAI;;AAC5E;EAAiC,4BAAyC;CAAI;;AAC9E;EAAiC,6BAA0C;CAAI;;AAC/E;EAAiC,2BAAwC;CAAI;;AAC7E;EACE,4BAAwC;EACxC,2BAAuC;CACxC;;AACD;EACE,0BAAuC;EACvC,6BAA0C;CAC3C;;AAZD;EAAiC,4BAAmC;CAAI;;AACxE;EAAiC,gCAAuC;CAAI;;AAC5E;EAAiC,kCAAyC;CAAI;;AAC9E;EAAiC,mCAA0C;CAAI;;AAC/E;EAAiC,iCAAwC;CAAI;;AAC7E;EACE,kCAAwC;EACxC,iCAAuC;CACxC;;AACD;EACE,gCAAuC;EACvC,mCAA0C;CAC3C;;AAZD;EAAiC,2BAAmC;CAAI;;AACxE;EAAiC,+BAAuC;CAAI;;AAC5E;EAAiC,iCAAyC;CAAI;;AAC9E;EAAiC,kCAA0C;CAAI;;AAC/E;EAAiC,gCAAwC;CAAI;;AAC7E;EACE,iCAAwC;EACxC,gCAAuC;CACxC;;AACD;EACE,+BAAuC;EACvC,kCAA0C;CAC3C;;AAZD;EAAiC,yBAAmC;CAAI;;AACxE;EAAiC,6BAAuC;CAAI;;AAC5E;EAAiC,+BAAyC;CAAI;;AAC9E;EAAiC,gCAA0C;CAAI;;AAC/E;EAAiC,8BAAwC;CAAI;;AAC7E;EACE,+BAAwC;EACxC,8BAAuC;CACxC;;AACD;EACE,6BAAuC;EACvC,gCAA0C;CAC3C;;AAZD;EAAiC,2BAAmC;CAAI;;AACxE;EAAiC,+BAAuC;CAAI;;AAC5E;EAAiC,iCAAyC;CAAI;;AAC9E;EAAiC,kCAA0C;CAAI;;AAC/E;EAAiC,gCAAwC;CAAI;;AAC7E;EACE,iCAAwC;EACxC,gCAAuC;CACxC;;AACD;EACE,+BAAuC;EACvC,kCAA0C;CAC3C;;AAZD;EAAiC,yBAAmC;CAAI;;AACxE;EAAiC,6BAAuC;CAAI;;AAC5E;EAAiC,+BAAyC;CAAI;;AAC9E;EAAiC,gCAA0C;CAAI;;AAC/E;EAAiC,8BAAwC;CAAI;;AAC7E;EACE,+BAAwC;EACxC,8BAAuC;CACxC;;AACD;EACE,6BAAuC;EACvC,gCAA0C;CAC3C;;AAKL;EAAoB,wBAA8B;CAAK;;AACvD;EAAoB,4BAA8B;CAAK;;AACvD;EAAoB,8BAA8B;CAAK;;AACvD;EAAoB,+BAA8B;CAAK;;AACvD;EAAoB,6BAA8B;CAAK;;AACvD;EACE,8BAA6B;EAC7B,6BAA6B;CAC9B;;AACD;EACE,4BAA8B;EAC9B,+BAA8B;CAC/B;;AnDkBD;EmD/CI;IAAiC,qBAAmC;GAAI;EACxE;IAAiC,yBAAuC;GAAI;EAC5E;IAAiC,2BAAyC;GAAI;EAC9E;IAAiC,4BAA0C;GAAI;EAC/E;IAAiC,0BAAwC;GAAI;EAC7E;IACE,2BAAwC;IACxC,0BAAuC;GACxC;EACD;IACE,yBAAuC;IACvC,4BAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,sBAAmC;GAAI;EACxE;IAAiC,0BAAuC;GAAI;EAC5E;IAAiC,4BAAyC;GAAI;EAC9E;IAAiC,6BAA0C;GAAI;EAC/E;IAAiC,2BAAwC;GAAI;EAC7E;IACE,4BAAwC;IACxC,2BAAuC;GACxC;EACD;IACE,0BAAuC;IACvC,6BAA0C;GAC3C;EAZD;IAAiC,4BAAmC;GAAI;EACxE;IAAiC,gCAAuC;GAAI;EAC5E;IAAiC,kCAAyC;GAAI;EAC9E;IAAiC,mCAA0C;GAAI;EAC/E;IAAiC,iCAAwC;GAAI;EAC7E;IACE,kCAAwC;IACxC,iCAAuC;GACxC;EACD;IACE,gCAAuC;IACvC,mCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAKL;IAAoB,wBAA8B;GAAK;EACvD;IAAoB,4BAA8B;GAAK;EACvD;IAAoB,8BAA8B;GAAK;EACvD;IAAoB,+BAA8B;GAAK;EACvD;IAAoB,6BAA8B;GAAK;EACvD;IACE,8BAA6B;IAC7B,6BAA6B;GAC9B;EACD;IACE,4BAA8B;IAC9B,+BAA8B;GAC/B;ChEk8MJ;;Aah7MG;EmD/CI;IAAiC,qBAAmC;GAAI;EACxE;IAAiC,yBAAuC;GAAI;EAC5E;IAAiC,2BAAyC;GAAI;EAC9E;IAAiC,4BAA0C;GAAI;EAC/E;IAAiC,0BAAwC;GAAI;EAC7E;IACE,2BAAwC;IACxC,0BAAuC;GACxC;EACD;IACE,yBAAuC;IACvC,4BAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,sBAAmC;GAAI;EACxE;IAAiC,0BAAuC;GAAI;EAC5E;IAAiC,4BAAyC;GAAI;EAC9E;IAAiC,6BAA0C;GAAI;EAC/E;IAAiC,2BAAwC;GAAI;EAC7E;IACE,4BAAwC;IACxC,2BAAuC;GACxC;EACD;IACE,0BAAuC;IACvC,6BAA0C;GAC3C;EAZD;IAAiC,4BAAmC;GAAI;EACxE;IAAiC,gCAAuC;GAAI;EAC5E;IAAiC,kCAAyC;GAAI;EAC9E;IAAiC,mCAA0C;GAAI;EAC/E;IAAiC,iCAAwC;GAAI;EAC7E;IACE,kCAAwC;IACxC,iCAAuC;GACxC;EACD;IACE,gCAAuC;IACvC,mCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAKL;IAAoB,wBAA8B;GAAK;EACvD;IAAoB,4BAA8B;GAAK;EACvD;IAAoB,8BAA8B;GAAK;EACvD;IAAoB,+BAA8B;GAAK;EACvD;IAAoB,6BAA8B;GAAK;EACvD;IACE,8BAA6B;IAC7B,6BAA6B;GAC9B;EACD;IACE,4BAA8B;IAC9B,+BAA8B;GAC/B;ChEgvNJ;;Aa9tNG;EmD/CI;IAAiC,qBAAmC;GAAI;EACxE;IAAiC,yBAAuC;GAAI;EAC5E;IAAiC,2BAAyC;GAAI;EAC9E;IAAiC,4BAA0C;GAAI;EAC/E;IAAiC,0BAAwC;GAAI;EAC7E;IACE,2BAAwC;IACxC,0BAAuC;GACxC;EACD;IACE,yBAAuC;IACvC,4BAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,sBAAmC;GAAI;EACxE;IAAiC,0BAAuC;GAAI;EAC5E;IAAiC,4BAAyC;GAAI;EAC9E;IAAiC,6BAA0C;GAAI;EAC/E;IAAiC,2BAAwC;GAAI;EAC7E;IACE,4BAAwC;IACxC,2BAAuC;GACxC;EACD;IACE,0BAAuC;IACvC,6BAA0C;GAC3C;EAZD;IAAiC,4BAAmC;GAAI;EACxE;IAAiC,gCAAuC;GAAI;EAC5E;IAAiC,kCAAyC;GAAI;EAC9E;IAAiC,mCAA0C;GAAI;EAC/E;IAAiC,iCAAwC;GAAI;EAC7E;IACE,kCAAwC;IACxC,iCAAuC;GACxC;EACD;IACE,gCAAuC;IACvC,mCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAKL;IAAoB,wBAA8B;GAAK;EACvD;IAAoB,4BAA8B;GAAK;EACvD;IAAoB,8BAA8B;GAAK;EACvD;IAAoB,+BAA8B;GAAK;EACvD;IAAoB,6BAA8B;GAAK;EACvD;IACE,8BAA6B;IAC7B,6BAA6B;GAC9B;EACD;IACE,4BAA8B;IAC9B,+BAA8B;GAC/B;ChE8hOJ;;Aa5gOG;EmD/CI;IAAiC,qBAAmC;GAAI;EACxE;IAAiC,yBAAuC;GAAI;EAC5E;IAAiC,2BAAyC;GAAI;EAC9E;IAAiC,4BAA0C;GAAI;EAC/E;IAAiC,0BAAwC;GAAI;EAC7E;IACE,2BAAwC;IACxC,0BAAuC;GACxC;EACD;IACE,yBAAuC;IACvC,4BAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,0BAAmC;GAAI;EACxE;IAAiC,8BAAuC;GAAI;EAC5E;IAAiC,gCAAyC;GAAI;EAC9E;IAAiC,iCAA0C;GAAI;EAC/E;IAAiC,+BAAwC;GAAI;EAC7E;IACE,gCAAwC;IACxC,+BAAuC;GACxC;EACD;IACE,8BAAuC;IACvC,iCAA0C;GAC3C;EAZD;IAAiC,wBAAmC;GAAI;EACxE;IAAiC,4BAAuC;GAAI;EAC5E;IAAiC,8BAAyC;GAAI;EAC9E;IAAiC,+BAA0C;GAAI;EAC/E;IAAiC,6BAAwC;GAAI;EAC7E;IACE,8BAAwC;IACxC,6BAAuC;GACxC;EACD;IACE,4BAAuC;IACvC,+BAA0C;GAC3C;EAZD;IAAiC,sBAAmC;GAAI;EACxE;IAAiC,0BAAuC;GAAI;EAC5E;IAAiC,4BAAyC;GAAI;EAC9E;IAAiC,6BAA0C;GAAI;EAC/E;IAAiC,2BAAwC;GAAI;EAC7E;IACE,4BAAwC;IACxC,2BAAuC;GACxC;EACD;IACE,0BAAuC;IACvC,6BAA0C;GAC3C;EAZD;IAAiC,4BAAmC;GAAI;EACxE;IAAiC,gCAAuC;GAAI;EAC5E;IAAiC,kCAAyC;GAAI;EAC9E;IAAiC,mCAA0C;GAAI;EAC/E;IAAiC,iCAAwC;GAAI;EAC7E;IACE,kCAAwC;IACxC,iCAAuC;GACxC;EACD;IACE,gCAAuC;IACvC,mCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAZD;IAAiC,2BAAmC;GAAI;EACxE;IAAiC,+BAAuC;GAAI;EAC5E;IAAiC,iCAAyC;GAAI;EAC9E;IAAiC,kCAA0C;GAAI;EAC/E;IAAiC,gCAAwC;GAAI;EAC7E;IACE,iCAAwC;IACxC,gCAAuC;GACxC;EACD;IACE,+BAAuC;IACvC,kCAA0C;GAC3C;EAZD;IAAiC,yBAAmC;GAAI;EACxE;IAAiC,6BAAuC;GAAI;EAC5E;IAAiC,+BAAyC;GAAI;EAC9E;IAAiC,gCAA0C;GAAI;EAC/E;IAAiC,8BAAwC;GAAI;EAC7E;IACE,+BAAwC;IACxC,8BAAuC;GACxC;EACD;IACE,6BAAuC;IACvC,gCAA0C;GAC3C;EAKL;IAAoB,wBAA8B;GAAK;EACvD;IAAoB,4BAA8B;GAAK;EACvD;IAAoB,8BAA8B;GAAK;EACvD;IAAoB,+BAA8B;GAAK;EACvD;IAAoB,6BAA8B;GAAK;EACvD;IACE,8BAA6B;IAC7B,6BAA6B;GAC9B;EACD;IACE,4BAA8B;IAC9B,+BAA8B;GAC/B;ChE40OJ;;AiE52OD;EAAiB,+BAA8B;CAAK;;AACpD;EAAiB,+BAA8B;CAAK;;AACpD;ECJE,iBAAgB;EAChB,wBAAuB;EACvB,oBAAmB;CDEsB;;AAQvC;EAAwB,4BAA2B;CAAK;;AACxD;EAAwB,6BAA4B;CAAK;;AACzD;EAAwB,8BAA6B;CAAK;;ApDsC1D;EoDxCA;IAAwB,4BAA2B;GAAK;EACxD;IAAwB,6BAA4B;GAAK;EACzD;IAAwB,8BAA6B;GAAK;CjEs4O7D;;Aah2OG;EoDxCA;IAAwB,4BAA2B;GAAK;EACxD;IAAwB,6BAA4B;GAAK;EACzD;IAAwB,8BAA6B;GAAK;CjEk5O7D;;Aa52OG;EoDxCA;IAAwB,4BAA2B;GAAK;EACxD;IAAwB,6BAA4B;GAAK;EACzD;IAAwB,8BAA6B;GAAK;CjE85O7D;;Aax3OG;EoDxCA;IAAwB,4BAA2B;GAAK;EACxD;IAAwB,6BAA4B;GAAK;EACzD;IAAwB,8BAA6B;GAAK;CjE06O7D;;AiEp6OD;EAAmB,qCAAoC;CAAK;;AAC5D;EAAmB,qCAAoC;CAAK;;AAC5D;EAAmB,sCAAqC;CAAK;;AAI7D;EAAsB,oB/DmNK;C+DnN+B;;AAC1D;EAAsB,kB/DmNC;C+DnNiC;;AACxD;EAAsB,mBAAkB;CAAK;;AAI7C;EAAc,uBAAsB;CAAK;;AEjCvC;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;AgEtBH;EACE,0BAAwB;CACzB;;AhEiBC;EgEdE,0BAAqC;ChEiBtC;;A8DiBL;EAAc,0BAA6B;CAAI;;AAI/C;EG5CE,YAAW;EACX,mBAAkB;EAClB,kBAAiB;EACjB,8BAA6B;EAC7B,UAAS;CH0CV;;AI5CD;ECDE,+BAAkC;CDGnC;;AAED;ECLE,8BAAkC;CDOnC","file":"bootstrap.css","sourcesContent":["/*!\n * Bootstrap v4.0.0-beta (https://getbootstrap.com)\n * Copyright 2011-2017 The Bootstrap Authors\n * Copyright 2011-2017 Twitter, Inc.\n * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)\n */\n\n@import \"functions\";\n@import \"variables\";\n@import \"mixins\";\n@import \"print\";\n@import \"reboot\";\n@import \"type\";\n@import \"images\";\n@import \"code\";\n@import \"grid\";\n@import \"tables\";\n@import \"forms\";\n@import \"buttons\";\n@import \"transitions\";\n@import \"dropdown\";\n@import \"button-group\";\n@import \"input-group\";\n@import \"custom-forms\";\n@import \"nav\";\n@import \"navbar\";\n@import \"card\";\n@import \"breadcrumb\";\n@import \"pagination\";\n@import \"badge\";\n@import \"jumbotron\";\n@import \"alert\";\n@import \"progress\";\n@import \"media\";\n@import \"list-group\";\n@import \"close\";\n@import \"modal\";\n@import \"tooltip\";\n@import \"popover\";\n@import \"carousel\";\n@import \"utilities\";\n","// scss-lint:disable QualifyingElement\n\n// Source: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css\n\n// ==========================================================================\n// Print styles.\n// Inlined to avoid the additional HTTP request:\n// http://www.phpied.com/delay-loading-your-print-css/\n// ==========================================================================\n\n@if $enable-print-styles {\n @media print {\n *,\n *::before,\n *::after {\n // Bootstrap specific; comment out `color` and `background`\n //color: #000 !important; // Black prints faster:\n // http://www.sanbeiji.com/archives/953\n text-shadow: none !important;\n //background: transparent !important;\n box-shadow: none !important;\n }\n\n a,\n a:visited {\n text-decoration: underline;\n }\n\n // Bootstrap specific; comment the following selector out\n //a[href]::after {\n // content: \" (\" attr(href) \")\";\n //}\n\n abbr[title]::after {\n content: \" (\" attr(title) \")\";\n }\n\n // Bootstrap specific; comment the following selector out\n //\n // Don't show links that are fragment identifiers,\n // or use the `javascript:` pseudo protocol\n //\n\n //a[href^=\"#\"]::after,\n //a[href^=\"javascript:\"]::after {\n // content: \"\";\n //}\n\n pre {\n white-space: pre-wrap !important;\n }\n pre,\n blockquote {\n border: $border-width solid #999; // Bootstrap custom code; using `$border-width` instead of 1px\n page-break-inside: avoid;\n }\n\n //\n // Printing Tables:\n // http://css-discuss.incutio.com/wiki/Printing_Tables\n //\n\n thead {\n display: table-header-group;\n }\n\n tr,\n img {\n page-break-inside: avoid;\n }\n\n p,\n h2,\n h3 {\n orphans: 3;\n widows: 3;\n }\n\n h2,\n h3 {\n page-break-after: avoid;\n }\n\n // Bootstrap specific changes start\n\n // Bootstrap components\n .navbar {\n display: none;\n }\n .badge {\n border: $border-width solid #000;\n }\n\n .table {\n border-collapse: collapse !important;\n\n td,\n th {\n background-color: #fff !important;\n }\n }\n .table-bordered {\n th,\n td {\n border: 1px solid #ddd !important;\n }\n }\n\n // Bootstrap specific changes end\n }\n}\n","/*!\n * Bootstrap v4.0.0-beta (https://getbootstrap.com)\n * Copyright 2011-2017 The Bootstrap Authors\n * Copyright 2011-2017 Twitter, Inc.\n * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)\n */\n@media print {\n *,\n *::before,\n *::after {\n text-shadow: none !important;\n box-shadow: none !important;\n }\n a,\n a:visited {\n text-decoration: underline;\n }\n abbr[title]::after {\n content: \" (\" attr(title) \")\";\n }\n pre {\n white-space: pre-wrap !important;\n }\n pre,\n blockquote {\n border: 1px solid #999;\n page-break-inside: avoid;\n }\n thead {\n display: table-header-group;\n }\n tr,\n img {\n page-break-inside: avoid;\n }\n p,\n h2,\n h3 {\n orphans: 3;\n widows: 3;\n }\n h2,\n h3 {\n page-break-after: avoid;\n }\n .navbar {\n display: none;\n }\n .badge {\n border: 1px solid #000;\n }\n .table {\n border-collapse: collapse !important;\n }\n .table td,\n .table th {\n background-color: #fff !important;\n }\n .table-bordered th,\n .table-bordered td {\n border: 1px solid #ddd !important;\n }\n}\n\nhtml {\n box-sizing: border-box;\n font-family: sans-serif;\n line-height: 1.15;\n -webkit-text-size-adjust: 100%;\n -ms-text-size-adjust: 100%;\n -ms-overflow-style: scrollbar;\n -webkit-tap-highlight-color: transparent;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n@-ms-viewport {\n width: device-width;\n}\n\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\nbody {\n margin: 0;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-size: 1rem;\n font-weight: normal;\n line-height: 1.5;\n color: #212529;\n background-color: #fff;\n}\n\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\nhr {\n box-sizing: content-box;\n height: 0;\n overflow: visible;\n}\n\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nabbr[title],\nabbr[data-original-title] {\n text-decoration: underline;\n text-decoration: underline dotted;\n cursor: help;\n border-bottom: 0;\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: bold;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0;\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic;\n}\n\nb,\nstrong {\n font-weight: bolder;\n}\n\nsmall {\n font-size: 80%;\n}\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub {\n bottom: -.25em;\n}\n\nsup {\n top: -.5em;\n}\n\na {\n color: #007bff;\n text-decoration: none;\n background-color: transparent;\n -webkit-text-decoration-skip: objects;\n}\n\na:hover {\n color: #0056b3;\n text-decoration: underline;\n}\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus, a:not([href]):not([tabindex]):hover {\n color: inherit;\n text-decoration: none;\n}\n\na:not([href]):not([tabindex]):focus {\n outline: 0;\n}\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace;\n font-size: 1em;\n}\n\npre {\n margin-top: 0;\n margin-bottom: 1rem;\n overflow: auto;\n}\n\nfigure {\n margin: 0 0 1rem;\n}\n\nimg {\n vertical-align: middle;\n border-style: none;\n}\n\nsvg:not(:root) {\n overflow: hidden;\n}\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\ntable {\n border-collapse: collapse;\n}\n\ncaption {\n padding-top: 0.75rem;\n padding-bottom: 0.75rem;\n color: #868e96;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n text-align: left;\n}\n\nlabel {\n display: inline-block;\n margin-bottom: .5rem;\n}\n\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0;\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible;\n}\n\nbutton,\nselect {\n text-transform: none;\n}\n\nbutton,\nhtml [type=\"button\"],\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button;\n}\n\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box;\n padding: 0;\n}\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto;\n resize: vertical;\n}\n\nfieldset {\n min-width: 0;\n padding: 0;\n margin: 0;\n border: 0;\n}\n\nlegend {\n display: block;\n width: 100%;\n max-width: 100%;\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit;\n white-space: normal;\n}\n\nprogress {\n vertical-align: baseline;\n}\n\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n outline-offset: -2px;\n -webkit-appearance: none;\n}\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n::-webkit-file-upload-button {\n font: inherit;\n -webkit-appearance: button;\n}\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item;\n}\n\ntemplate {\n display: none;\n}\n\n[hidden] {\n display: none !important;\n}\n\nh1, h2, h3, h4, h5, h6,\n.h1, .h2, .h3, .h4, .h5, .h6 {\n margin-bottom: 0.5rem;\n font-family: inherit;\n font-weight: 500;\n line-height: 1.1;\n color: inherit;\n}\n\nh1, .h1 {\n font-size: 2.5rem;\n}\n\nh2, .h2 {\n font-size: 2rem;\n}\n\nh3, .h3 {\n font-size: 1.75rem;\n}\n\nh4, .h4 {\n font-size: 1.5rem;\n}\n\nh5, .h5 {\n font-size: 1.25rem;\n}\n\nh6, .h6 {\n font-size: 1rem;\n}\n\n.lead {\n font-size: 1.25rem;\n font-weight: 300;\n}\n\n.display-1 {\n font-size: 6rem;\n font-weight: 300;\n line-height: 1.1;\n}\n\n.display-2 {\n font-size: 5.5rem;\n font-weight: 300;\n line-height: 1.1;\n}\n\n.display-3 {\n font-size: 4.5rem;\n font-weight: 300;\n line-height: 1.1;\n}\n\n.display-4 {\n font-size: 3.5rem;\n font-weight: 300;\n line-height: 1.1;\n}\n\nhr {\n margin-top: 1rem;\n margin-bottom: 1rem;\n border: 0;\n border-top: 1px solid rgba(0, 0, 0, 0.1);\n}\n\nsmall,\n.small {\n font-size: 80%;\n font-weight: normal;\n}\n\nmark,\n.mark {\n padding: 0.2em;\n background-color: #fcf8e3;\n}\n\n.list-unstyled {\n padding-left: 0;\n list-style: none;\n}\n\n.list-inline {\n padding-left: 0;\n list-style: none;\n}\n\n.list-inline-item {\n display: inline-block;\n}\n\n.list-inline-item:not(:last-child) {\n margin-right: 5px;\n}\n\n.initialism {\n font-size: 90%;\n text-transform: uppercase;\n}\n\n.blockquote {\n margin-bottom: 1rem;\n font-size: 1.25rem;\n}\n\n.blockquote-footer {\n display: block;\n font-size: 80%;\n color: #868e96;\n}\n\n.blockquote-footer::before {\n content: \"\\2014 \\00A0\";\n}\n\n.img-fluid {\n max-width: 100%;\n height: auto;\n}\n\n.img-thumbnail {\n padding: 0.25rem;\n background-color: #fff;\n border: 1px solid #ddd;\n border-radius: 0.25rem;\n transition: all 0.2s ease-in-out;\n max-width: 100%;\n height: auto;\n}\n\n.figure {\n display: inline-block;\n}\n\n.figure-img {\n margin-bottom: 0.5rem;\n line-height: 1;\n}\n\n.figure-caption {\n font-size: 90%;\n color: #868e96;\n}\n\ncode,\nkbd,\npre,\nsamp {\n font-family: Menlo, Monaco, Consolas, \"Liberation Mono\", \"Courier New\", monospace;\n}\n\ncode {\n padding: 0.2rem 0.4rem;\n font-size: 90%;\n color: #bd4147;\n background-color: #f8f9fa;\n border-radius: 0.25rem;\n}\n\na > code {\n padding: 0;\n color: inherit;\n background-color: inherit;\n}\n\nkbd {\n padding: 0.2rem 0.4rem;\n font-size: 90%;\n color: #fff;\n background-color: #212529;\n border-radius: 0.2rem;\n}\n\nkbd kbd {\n padding: 0;\n font-size: 100%;\n font-weight: bold;\n}\n\npre {\n display: block;\n margin-top: 0;\n margin-bottom: 1rem;\n font-size: 90%;\n color: #212529;\n}\n\npre code {\n padding: 0;\n font-size: inherit;\n color: inherit;\n background-color: transparent;\n border-radius: 0;\n}\n\n.pre-scrollable {\n max-height: 340px;\n overflow-y: scroll;\n}\n\n.container {\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n@media (min-width: 576px) {\n .container {\n max-width: 540px;\n }\n}\n\n@media (min-width: 768px) {\n .container {\n max-width: 720px;\n }\n}\n\n@media (min-width: 992px) {\n .container {\n max-width: 960px;\n }\n}\n\n@media (min-width: 1200px) {\n .container {\n max-width: 1140px;\n }\n}\n\n.container-fluid {\n width: 100%;\n margin-right: auto;\n margin-left: auto;\n padding-right: 15px;\n padding-left: 15px;\n width: 100%;\n}\n\n.row {\n display: flex;\n flex-wrap: wrap;\n margin-right: -15px;\n margin-left: -15px;\n}\n\n.no-gutters {\n margin-right: 0;\n margin-left: 0;\n}\n\n.no-gutters > .col,\n.no-gutters > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n}\n\n.col-1, .col-2, .col-3, .col-4, .col-5, .col-6, .col-7, .col-8, .col-9, .col-10, .col-11, .col-12, .col,\n.col-auto, .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12, .col-sm,\n.col-sm-auto, .col-md-1, .col-md-2, .col-md-3, .col-md-4, .col-md-5, .col-md-6, .col-md-7, .col-md-8, .col-md-9, .col-md-10, .col-md-11, .col-md-12, .col-md,\n.col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg,\n.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-xl-8, .col-xl-9, .col-xl-10, .col-xl-11, .col-xl-12, .col-xl,\n.col-xl-auto {\n position: relative;\n width: 100%;\n min-height: 1px;\n padding-right: 15px;\n padding-left: 15px;\n}\n\n.col {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n}\n\n.col-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n}\n\n.col-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n}\n\n.col-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n}\n\n.col-3 {\n flex: 0 0 25%;\n max-width: 25%;\n}\n\n.col-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n}\n\n.col-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n}\n\n.col-6 {\n flex: 0 0 50%;\n max-width: 50%;\n}\n\n.col-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n}\n\n.col-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n}\n\n.col-9 {\n flex: 0 0 75%;\n max-width: 75%;\n}\n\n.col-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n}\n\n.col-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n}\n\n.col-12 {\n flex: 0 0 100%;\n max-width: 100%;\n}\n\n.order-1 {\n order: 1;\n}\n\n.order-2 {\n order: 2;\n}\n\n.order-3 {\n order: 3;\n}\n\n.order-4 {\n order: 4;\n}\n\n.order-5 {\n order: 5;\n}\n\n.order-6 {\n order: 6;\n}\n\n.order-7 {\n order: 7;\n}\n\n.order-8 {\n order: 8;\n}\n\n.order-9 {\n order: 9;\n}\n\n.order-10 {\n order: 10;\n}\n\n.order-11 {\n order: 11;\n}\n\n.order-12 {\n order: 12;\n}\n\n@media (min-width: 576px) {\n .col-sm {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-sm-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-sm-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-sm-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-sm-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-sm-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-sm-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-sm-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-sm-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-sm-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-sm-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-sm-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-sm-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-sm-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-sm-1 {\n order: 1;\n }\n .order-sm-2 {\n order: 2;\n }\n .order-sm-3 {\n order: 3;\n }\n .order-sm-4 {\n order: 4;\n }\n .order-sm-5 {\n order: 5;\n }\n .order-sm-6 {\n order: 6;\n }\n .order-sm-7 {\n order: 7;\n }\n .order-sm-8 {\n order: 8;\n }\n .order-sm-9 {\n order: 9;\n }\n .order-sm-10 {\n order: 10;\n }\n .order-sm-11 {\n order: 11;\n }\n .order-sm-12 {\n order: 12;\n }\n}\n\n@media (min-width: 768px) {\n .col-md {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-md-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-md-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-md-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-md-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-md-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-md-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-md-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-md-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-md-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-md-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-md-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-md-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-md-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-md-1 {\n order: 1;\n }\n .order-md-2 {\n order: 2;\n }\n .order-md-3 {\n order: 3;\n }\n .order-md-4 {\n order: 4;\n }\n .order-md-5 {\n order: 5;\n }\n .order-md-6 {\n order: 6;\n }\n .order-md-7 {\n order: 7;\n }\n .order-md-8 {\n order: 8;\n }\n .order-md-9 {\n order: 9;\n }\n .order-md-10 {\n order: 10;\n }\n .order-md-11 {\n order: 11;\n }\n .order-md-12 {\n order: 12;\n }\n}\n\n@media (min-width: 992px) {\n .col-lg {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-lg-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-lg-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-lg-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-lg-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-lg-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-lg-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-lg-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-lg-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-lg-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-lg-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-lg-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-lg-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-lg-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-lg-1 {\n order: 1;\n }\n .order-lg-2 {\n order: 2;\n }\n .order-lg-3 {\n order: 3;\n }\n .order-lg-4 {\n order: 4;\n }\n .order-lg-5 {\n order: 5;\n }\n .order-lg-6 {\n order: 6;\n }\n .order-lg-7 {\n order: 7;\n }\n .order-lg-8 {\n order: 8;\n }\n .order-lg-9 {\n order: 9;\n }\n .order-lg-10 {\n order: 10;\n }\n .order-lg-11 {\n order: 11;\n }\n .order-lg-12 {\n order: 12;\n }\n}\n\n@media (min-width: 1200px) {\n .col-xl {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col-xl-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none;\n }\n .col-xl-1 {\n flex: 0 0 8.333333%;\n max-width: 8.333333%;\n }\n .col-xl-2 {\n flex: 0 0 16.666667%;\n max-width: 16.666667%;\n }\n .col-xl-3 {\n flex: 0 0 25%;\n max-width: 25%;\n }\n .col-xl-4 {\n flex: 0 0 33.333333%;\n max-width: 33.333333%;\n }\n .col-xl-5 {\n flex: 0 0 41.666667%;\n max-width: 41.666667%;\n }\n .col-xl-6 {\n flex: 0 0 50%;\n max-width: 50%;\n }\n .col-xl-7 {\n flex: 0 0 58.333333%;\n max-width: 58.333333%;\n }\n .col-xl-8 {\n flex: 0 0 66.666667%;\n max-width: 66.666667%;\n }\n .col-xl-9 {\n flex: 0 0 75%;\n max-width: 75%;\n }\n .col-xl-10 {\n flex: 0 0 83.333333%;\n max-width: 83.333333%;\n }\n .col-xl-11 {\n flex: 0 0 91.666667%;\n max-width: 91.666667%;\n }\n .col-xl-12 {\n flex: 0 0 100%;\n max-width: 100%;\n }\n .order-xl-1 {\n order: 1;\n }\n .order-xl-2 {\n order: 2;\n }\n .order-xl-3 {\n order: 3;\n }\n .order-xl-4 {\n order: 4;\n }\n .order-xl-5 {\n order: 5;\n }\n .order-xl-6 {\n order: 6;\n }\n .order-xl-7 {\n order: 7;\n }\n .order-xl-8 {\n order: 8;\n }\n .order-xl-9 {\n order: 9;\n }\n .order-xl-10 {\n order: 10;\n }\n .order-xl-11 {\n order: 11;\n }\n .order-xl-12 {\n order: 12;\n }\n}\n\n.table {\n width: 100%;\n max-width: 100%;\n margin-bottom: 1rem;\n background-color: transparent;\n}\n\n.table th,\n.table td {\n padding: 0.75rem;\n vertical-align: top;\n border-top: 1px solid #e9ecef;\n}\n\n.table thead th {\n vertical-align: bottom;\n border-bottom: 2px solid #e9ecef;\n}\n\n.table tbody + tbody {\n border-top: 2px solid #e9ecef;\n}\n\n.table .table {\n background-color: #fff;\n}\n\n.table-sm th,\n.table-sm td {\n padding: 0.3rem;\n}\n\n.table-bordered {\n border: 1px solid #e9ecef;\n}\n\n.table-bordered th,\n.table-bordered td {\n border: 1px solid #e9ecef;\n}\n\n.table-bordered thead th,\n.table-bordered thead td {\n border-bottom-width: 2px;\n}\n\n.table-striped tbody tr:nth-of-type(odd) {\n background-color: rgba(0, 0, 0, 0.05);\n}\n\n.table-hover tbody tr:hover {\n background-color: rgba(0, 0, 0, 0.075);\n}\n\n.table-primary,\n.table-primary > th,\n.table-primary > td {\n background-color: #b8daff;\n}\n\n.table-hover .table-primary:hover {\n background-color: #9fcdff;\n}\n\n.table-hover .table-primary:hover > td,\n.table-hover .table-primary:hover > th {\n background-color: #9fcdff;\n}\n\n.table-secondary,\n.table-secondary > th,\n.table-secondary > td {\n background-color: #dddfe2;\n}\n\n.table-hover .table-secondary:hover {\n background-color: #cfd2d6;\n}\n\n.table-hover .table-secondary:hover > td,\n.table-hover .table-secondary:hover > th {\n background-color: #cfd2d6;\n}\n\n.table-success,\n.table-success > th,\n.table-success > td {\n background-color: #c3e6cb;\n}\n\n.table-hover .table-success:hover {\n background-color: #b1dfbb;\n}\n\n.table-hover .table-success:hover > td,\n.table-hover .table-success:hover > th {\n background-color: #b1dfbb;\n}\n\n.table-info,\n.table-info > th,\n.table-info > td {\n background-color: #bee5eb;\n}\n\n.table-hover .table-info:hover {\n background-color: #abdde5;\n}\n\n.table-hover .table-info:hover > td,\n.table-hover .table-info:hover > th {\n background-color: #abdde5;\n}\n\n.table-warning,\n.table-warning > th,\n.table-warning > td {\n background-color: #ffeeba;\n}\n\n.table-hover .table-warning:hover {\n background-color: #ffe8a1;\n}\n\n.table-hover .table-warning:hover > td,\n.table-hover .table-warning:hover > th {\n background-color: #ffe8a1;\n}\n\n.table-danger,\n.table-danger > th,\n.table-danger > td {\n background-color: #f5c6cb;\n}\n\n.table-hover .table-danger:hover {\n background-color: #f1b0b7;\n}\n\n.table-hover .table-danger:hover > td,\n.table-hover .table-danger:hover > th {\n background-color: #f1b0b7;\n}\n\n.table-light,\n.table-light > th,\n.table-light > td {\n background-color: #fdfdfe;\n}\n\n.table-hover .table-light:hover {\n background-color: #ececf6;\n}\n\n.table-hover .table-light:hover > td,\n.table-hover .table-light:hover > th {\n background-color: #ececf6;\n}\n\n.table-dark,\n.table-dark > th,\n.table-dark > td {\n background-color: #c6c8ca;\n}\n\n.table-hover .table-dark:hover {\n background-color: #b9bbbe;\n}\n\n.table-hover .table-dark:hover > td,\n.table-hover .table-dark:hover > th {\n background-color: #b9bbbe;\n}\n\n.table-active,\n.table-active > th,\n.table-active > td {\n background-color: rgba(0, 0, 0, 0.075);\n}\n\n.table-hover .table-active:hover {\n background-color: rgba(0, 0, 0, 0.075);\n}\n\n.table-hover .table-active:hover > td,\n.table-hover .table-active:hover > th {\n background-color: rgba(0, 0, 0, 0.075);\n}\n\n.thead-inverse th {\n color: #fff;\n background-color: #212529;\n}\n\n.thead-default th {\n color: #495057;\n background-color: #e9ecef;\n}\n\n.table-inverse {\n color: #fff;\n background-color: #212529;\n}\n\n.table-inverse th,\n.table-inverse td,\n.table-inverse thead th {\n border-color: #32383e;\n}\n\n.table-inverse.table-bordered {\n border: 0;\n}\n\n.table-inverse.table-striped tbody tr:nth-of-type(odd) {\n background-color: rgba(255, 255, 255, 0.05);\n}\n\n.table-inverse.table-hover tbody tr:hover {\n background-color: rgba(255, 255, 255, 0.075);\n}\n\n@media (max-width: 991px) {\n .table-responsive {\n display: block;\n width: 100%;\n overflow-x: auto;\n -ms-overflow-style: -ms-autohiding-scrollbar;\n }\n .table-responsive.table-bordered {\n border: 0;\n }\n}\n\n.form-control {\n display: block;\n width: 100%;\n padding: 0.5rem 0.75rem;\n font-size: 1rem;\n line-height: 1.25;\n color: #495057;\n background-color: #fff;\n background-image: none;\n background-clip: padding-box;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0.25rem;\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n\n.form-control::-ms-expand {\n background-color: transparent;\n border: 0;\n}\n\n.form-control:focus {\n color: #495057;\n background-color: #fff;\n border-color: #80bdff;\n outline: none;\n}\n\n.form-control::placeholder {\n color: #868e96;\n opacity: 1;\n}\n\n.form-control:disabled, .form-control[readonly] {\n background-color: #e9ecef;\n opacity: 1;\n}\n\nselect.form-control:not([size]):not([multiple]) {\n height: calc(2.25rem + 2px);\n}\n\nselect.form-control:focus::-ms-value {\n color: #495057;\n background-color: #fff;\n}\n\n.form-control-file,\n.form-control-range {\n display: block;\n}\n\n.col-form-label {\n padding-top: calc(0.5rem - 1px * 2);\n padding-bottom: calc(0.5rem - 1px * 2);\n margin-bottom: 0;\n}\n\n.col-form-label-lg {\n padding-top: calc(0.5rem - 1px * 2);\n padding-bottom: calc(0.5rem - 1px * 2);\n font-size: 1.25rem;\n}\n\n.col-form-label-sm {\n padding-top: calc(0.25rem - 1px * 2);\n padding-bottom: calc(0.25rem - 1px * 2);\n font-size: 0.875rem;\n}\n\n.col-form-legend {\n padding-top: 0.5rem;\n padding-bottom: 0.5rem;\n margin-bottom: 0;\n font-size: 1rem;\n}\n\n.form-control-plaintext {\n padding-top: 0.5rem;\n padding-bottom: 0.5rem;\n margin-bottom: 0;\n line-height: 1.25;\n border: solid transparent;\n border-width: 1px 0;\n}\n\n.form-control-plaintext.form-control-sm, .input-group-sm > .form-control-plaintext.form-control,\n.input-group-sm > .form-control-plaintext.input-group-addon,\n.input-group-sm > .input-group-btn > .form-control-plaintext.btn, .form-control-plaintext.form-control-lg, .input-group-lg > .form-control-plaintext.form-control,\n.input-group-lg > .form-control-plaintext.input-group-addon,\n.input-group-lg > .input-group-btn > .form-control-plaintext.btn {\n padding-right: 0;\n padding-left: 0;\n}\n\n.form-control-sm, .input-group-sm > .form-control,\n.input-group-sm > .input-group-addon,\n.input-group-sm > .input-group-btn > .btn {\n padding: 0.25rem 0.5rem;\n font-size: 0.875rem;\n line-height: 1.5;\n border-radius: 0.2rem;\n}\n\nselect.form-control-sm:not([size]):not([multiple]), .input-group-sm > select.form-control:not([size]):not([multiple]),\n.input-group-sm > select.input-group-addon:not([size]):not([multiple]),\n.input-group-sm > .input-group-btn > select.btn:not([size]):not([multiple]) {\n height: calc(1.8125rem + 2px);\n}\n\n.form-control-lg, .input-group-lg > .form-control,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .btn {\n padding: 0.5rem 1rem;\n font-size: 1.25rem;\n line-height: 1.5;\n border-radius: 0.3rem;\n}\n\nselect.form-control-lg:not([size]):not([multiple]), .input-group-lg > select.form-control:not([size]):not([multiple]),\n.input-group-lg > select.input-group-addon:not([size]):not([multiple]),\n.input-group-lg > .input-group-btn > select.btn:not([size]):not([multiple]) {\n height: calc(2.3125rem + 2px);\n}\n\n.form-group {\n margin-bottom: 1rem;\n}\n\n.form-text {\n display: block;\n margin-top: 0.25rem;\n}\n\n.form-row {\n display: flex;\n flex-wrap: wrap;\n margin-right: -5px;\n margin-left: -5px;\n}\n\n.form-row > .col,\n.form-row > [class*=\"col-\"] {\n padding-right: 5px;\n padding-left: 5px;\n}\n\n.form-check {\n position: relative;\n display: block;\n margin-bottom: 0.5rem;\n}\n\n.form-check.disabled .form-check-label {\n color: #868e96;\n}\n\n.form-check-label {\n padding-left: 1.25rem;\n margin-bottom: 0;\n}\n\n.form-check-input {\n position: absolute;\n margin-top: 0.25rem;\n margin-left: -1.25rem;\n}\n\n.form-check-input:only-child {\n position: static;\n}\n\n.form-check-inline {\n display: inline-block;\n}\n\n.form-check-inline .form-check-label {\n vertical-align: middle;\n}\n\n.form-check-inline + .form-check-inline {\n margin-left: 0.75rem;\n}\n\n.invalid-feedback {\n display: none;\n margin-top: .25rem;\n font-size: .875rem;\n color: #dc3545;\n}\n\n.invalid-tooltip {\n position: absolute;\n top: 100%;\n z-index: 5;\n display: none;\n width: 250px;\n padding: .5rem;\n margin-top: .1rem;\n font-size: .875rem;\n line-height: 1;\n color: #fff;\n background-color: rgba(220, 53, 69, 0.8);\n border-radius: .2rem;\n}\n\n.was-validated .form-control:valid, .form-control.is-valid, .was-validated\n.custom-select:valid,\n.custom-select.is-valid {\n border-color: #28a745;\n}\n\n.was-validated .form-control:valid:focus, .form-control.is-valid:focus, .was-validated\n.custom-select:valid:focus,\n.custom-select.is-valid:focus {\n box-shadow: 0 0 0 0.2rem rgba(40, 167, 69, 0.25);\n}\n\n.was-validated .form-control:valid ~ .invalid-feedback,\n.was-validated .form-control:valid ~ .invalid-tooltip, .form-control.is-valid ~ .invalid-feedback,\n.form-control.is-valid ~ .invalid-tooltip, .was-validated\n.custom-select:valid ~ .invalid-feedback,\n.was-validated\n.custom-select:valid ~ .invalid-tooltip,\n.custom-select.is-valid ~ .invalid-feedback,\n.custom-select.is-valid ~ .invalid-tooltip {\n display: block;\n}\n\n.was-validated .form-check-input:valid + .form-check-label, .form-check-input.is-valid + .form-check-label {\n color: #28a745;\n}\n\n.was-validated .custom-control-input:valid ~ .custom-control-indicator, .custom-control-input.is-valid ~ .custom-control-indicator {\n background-color: rgba(40, 167, 69, 0.25);\n}\n\n.was-validated .custom-control-input:valid ~ .custom-control-description, .custom-control-input.is-valid ~ .custom-control-description {\n color: #28a745;\n}\n\n.was-validated .custom-file-input:valid ~ .custom-file-control, .custom-file-input.is-valid ~ .custom-file-control {\n border-color: #28a745;\n}\n\n.was-validated .custom-file-input:valid ~ .custom-file-control::before, .custom-file-input.is-valid ~ .custom-file-control::before {\n border-color: inherit;\n}\n\n.was-validated .custom-file-input:valid:focus, .custom-file-input.is-valid:focus {\n box-shadow: 0 0 0 0.2rem rgba(40, 167, 69, 0.25);\n}\n\n.was-validated .form-control:invalid, .form-control.is-invalid, .was-validated\n.custom-select:invalid,\n.custom-select.is-invalid {\n border-color: #dc3545;\n}\n\n.was-validated .form-control:invalid:focus, .form-control.is-invalid:focus, .was-validated\n.custom-select:invalid:focus,\n.custom-select.is-invalid:focus {\n box-shadow: 0 0 0 0.2rem rgba(220, 53, 69, 0.25);\n}\n\n.was-validated .form-control:invalid ~ .invalid-feedback,\n.was-validated .form-control:invalid ~ .invalid-tooltip, .form-control.is-invalid ~ .invalid-feedback,\n.form-control.is-invalid ~ .invalid-tooltip, .was-validated\n.custom-select:invalid ~ .invalid-feedback,\n.was-validated\n.custom-select:invalid ~ .invalid-tooltip,\n.custom-select.is-invalid ~ .invalid-feedback,\n.custom-select.is-invalid ~ .invalid-tooltip {\n display: block;\n}\n\n.was-validated .form-check-input:invalid + .form-check-label, .form-check-input.is-invalid + .form-check-label {\n color: #dc3545;\n}\n\n.was-validated .custom-control-input:invalid ~ .custom-control-indicator, .custom-control-input.is-invalid ~ .custom-control-indicator {\n background-color: rgba(220, 53, 69, 0.25);\n}\n\n.was-validated .custom-control-input:invalid ~ .custom-control-description, .custom-control-input.is-invalid ~ .custom-control-description {\n color: #dc3545;\n}\n\n.was-validated .custom-file-input:invalid ~ .custom-file-control, .custom-file-input.is-invalid ~ .custom-file-control {\n border-color: #dc3545;\n}\n\n.was-validated .custom-file-input:invalid ~ .custom-file-control::before, .custom-file-input.is-invalid ~ .custom-file-control::before {\n border-color: inherit;\n}\n\n.was-validated .custom-file-input:invalid:focus, .custom-file-input.is-invalid:focus {\n box-shadow: 0 0 0 0.2rem rgba(220, 53, 69, 0.25);\n}\n\n.form-inline {\n display: flex;\n flex-flow: row wrap;\n align-items: center;\n}\n\n.form-inline .form-check {\n width: 100%;\n}\n\n@media (min-width: 576px) {\n .form-inline label {\n display: flex;\n align-items: center;\n justify-content: center;\n margin-bottom: 0;\n }\n .form-inline .form-group {\n display: flex;\n flex: 0 0 auto;\n flex-flow: row wrap;\n align-items: center;\n margin-bottom: 0;\n }\n .form-inline .form-control {\n display: inline-block;\n width: auto;\n vertical-align: middle;\n }\n .form-inline .form-control-plaintext {\n display: inline-block;\n }\n .form-inline .input-group {\n width: auto;\n }\n .form-inline .form-control-label {\n margin-bottom: 0;\n vertical-align: middle;\n }\n .form-inline .form-check {\n display: flex;\n align-items: center;\n justify-content: center;\n width: auto;\n margin-top: 0;\n margin-bottom: 0;\n }\n .form-inline .form-check-label {\n padding-left: 0;\n }\n .form-inline .form-check-input {\n position: relative;\n margin-top: 0;\n margin-right: 0.25rem;\n margin-left: 0;\n }\n .form-inline .custom-control {\n display: flex;\n align-items: center;\n justify-content: center;\n padding-left: 0;\n }\n .form-inline .custom-control-indicator {\n position: static;\n display: inline-block;\n margin-right: 0.25rem;\n vertical-align: text-bottom;\n }\n .form-inline .has-feedback .form-control-feedback {\n top: 0;\n }\n}\n\n.btn {\n display: inline-block;\n font-weight: normal;\n text-align: center;\n white-space: nowrap;\n vertical-align: middle;\n user-select: none;\n border: 1px solid transparent;\n padding: 0.5rem 0.75rem;\n font-size: 1rem;\n line-height: 1.25;\n border-radius: 0.25rem;\n transition: all 0.15s ease-in-out;\n}\n\n.btn:focus, .btn:hover {\n text-decoration: none;\n}\n\n.btn:focus, .btn.focus {\n outline: 0;\n box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.25);\n}\n\n.btn.disabled, .btn:disabled {\n opacity: .65;\n}\n\n.btn:active, .btn.active {\n background-image: none;\n}\n\na.btn.disabled,\nfieldset[disabled] a.btn {\n pointer-events: none;\n}\n\n.btn-primary {\n color: #fff;\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.btn-primary:hover {\n color: #fff;\n background-color: #0069d9;\n border-color: #0062cc;\n}\n\n.btn-primary:focus, .btn-primary.focus {\n box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.5);\n}\n\n.btn-primary.disabled, .btn-primary:disabled {\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.btn-primary:active, .btn-primary.active,\n.show > .btn-primary.dropdown-toggle {\n background-color: #0069d9;\n background-image: none;\n border-color: #0062cc;\n}\n\n.btn-secondary {\n color: #fff;\n background-color: #868e96;\n border-color: #868e96;\n}\n\n.btn-secondary:hover {\n color: #fff;\n background-color: #727b84;\n border-color: #6c757d;\n}\n\n.btn-secondary:focus, .btn-secondary.focus {\n box-shadow: 0 0 0 3px rgba(134, 142, 150, 0.5);\n}\n\n.btn-secondary.disabled, .btn-secondary:disabled {\n background-color: #868e96;\n border-color: #868e96;\n}\n\n.btn-secondary:active, .btn-secondary.active,\n.show > .btn-secondary.dropdown-toggle {\n background-color: #727b84;\n background-image: none;\n border-color: #6c757d;\n}\n\n.btn-success {\n color: #fff;\n background-color: #28a745;\n border-color: #28a745;\n}\n\n.btn-success:hover {\n color: #fff;\n background-color: #218838;\n border-color: #1e7e34;\n}\n\n.btn-success:focus, .btn-success.focus {\n box-shadow: 0 0 0 3px rgba(40, 167, 69, 0.5);\n}\n\n.btn-success.disabled, .btn-success:disabled {\n background-color: #28a745;\n border-color: #28a745;\n}\n\n.btn-success:active, .btn-success.active,\n.show > .btn-success.dropdown-toggle {\n background-color: #218838;\n background-image: none;\n border-color: #1e7e34;\n}\n\n.btn-info {\n color: #fff;\n background-color: #17a2b8;\n border-color: #17a2b8;\n}\n\n.btn-info:hover {\n color: #fff;\n background-color: #138496;\n border-color: #117a8b;\n}\n\n.btn-info:focus, .btn-info.focus {\n box-shadow: 0 0 0 3px rgba(23, 162, 184, 0.5);\n}\n\n.btn-info.disabled, .btn-info:disabled {\n background-color: #17a2b8;\n border-color: #17a2b8;\n}\n\n.btn-info:active, .btn-info.active,\n.show > .btn-info.dropdown-toggle {\n background-color: #138496;\n background-image: none;\n border-color: #117a8b;\n}\n\n.btn-warning {\n color: #111;\n background-color: #ffc107;\n border-color: #ffc107;\n}\n\n.btn-warning:hover {\n color: #111;\n background-color: #e0a800;\n border-color: #d39e00;\n}\n\n.btn-warning:focus, .btn-warning.focus {\n box-shadow: 0 0 0 3px rgba(255, 193, 7, 0.5);\n}\n\n.btn-warning.disabled, .btn-warning:disabled {\n background-color: #ffc107;\n border-color: #ffc107;\n}\n\n.btn-warning:active, .btn-warning.active,\n.show > .btn-warning.dropdown-toggle {\n background-color: #e0a800;\n background-image: none;\n border-color: #d39e00;\n}\n\n.btn-danger {\n color: #fff;\n background-color: #dc3545;\n border-color: #dc3545;\n}\n\n.btn-danger:hover {\n color: #fff;\n background-color: #c82333;\n border-color: #bd2130;\n}\n\n.btn-danger:focus, .btn-danger.focus {\n box-shadow: 0 0 0 3px rgba(220, 53, 69, 0.5);\n}\n\n.btn-danger.disabled, .btn-danger:disabled {\n background-color: #dc3545;\n border-color: #dc3545;\n}\n\n.btn-danger:active, .btn-danger.active,\n.show > .btn-danger.dropdown-toggle {\n background-color: #c82333;\n background-image: none;\n border-color: #bd2130;\n}\n\n.btn-light {\n color: #111;\n background-color: #f8f9fa;\n border-color: #f8f9fa;\n}\n\n.btn-light:hover {\n color: #111;\n background-color: #e2e6ea;\n border-color: #dae0e5;\n}\n\n.btn-light:focus, .btn-light.focus {\n box-shadow: 0 0 0 3px rgba(248, 249, 250, 0.5);\n}\n\n.btn-light.disabled, .btn-light:disabled {\n background-color: #f8f9fa;\n border-color: #f8f9fa;\n}\n\n.btn-light:active, .btn-light.active,\n.show > .btn-light.dropdown-toggle {\n background-color: #e2e6ea;\n background-image: none;\n border-color: #dae0e5;\n}\n\n.btn-dark {\n color: #fff;\n background-color: #343a40;\n border-color: #343a40;\n}\n\n.btn-dark:hover {\n color: #fff;\n background-color: #23272b;\n border-color: #1d2124;\n}\n\n.btn-dark:focus, .btn-dark.focus {\n box-shadow: 0 0 0 3px rgba(52, 58, 64, 0.5);\n}\n\n.btn-dark.disabled, .btn-dark:disabled {\n background-color: #343a40;\n border-color: #343a40;\n}\n\n.btn-dark:active, .btn-dark.active,\n.show > .btn-dark.dropdown-toggle {\n background-color: #23272b;\n background-image: none;\n border-color: #1d2124;\n}\n\n.btn-outline-primary {\n color: #007bff;\n background-color: transparent;\n background-image: none;\n border-color: #007bff;\n}\n\n.btn-outline-primary:hover {\n color: #fff;\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.btn-outline-primary:focus, .btn-outline-primary.focus {\n box-shadow: 0 0 0 3px rgba(0, 123, 255, 0.5);\n}\n\n.btn-outline-primary.disabled, .btn-outline-primary:disabled {\n color: #007bff;\n background-color: transparent;\n}\n\n.btn-outline-primary:active, .btn-outline-primary.active,\n.show > .btn-outline-primary.dropdown-toggle {\n color: #fff;\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.btn-outline-secondary {\n color: #868e96;\n background-color: transparent;\n background-image: none;\n border-color: #868e96;\n}\n\n.btn-outline-secondary:hover {\n color: #fff;\n background-color: #868e96;\n border-color: #868e96;\n}\n\n.btn-outline-secondary:focus, .btn-outline-secondary.focus {\n box-shadow: 0 0 0 3px rgba(134, 142, 150, 0.5);\n}\n\n.btn-outline-secondary.disabled, .btn-outline-secondary:disabled {\n color: #868e96;\n background-color: transparent;\n}\n\n.btn-outline-secondary:active, .btn-outline-secondary.active,\n.show > .btn-outline-secondary.dropdown-toggle {\n color: #fff;\n background-color: #868e96;\n border-color: #868e96;\n}\n\n.btn-outline-success {\n color: #28a745;\n background-color: transparent;\n background-image: none;\n border-color: #28a745;\n}\n\n.btn-outline-success:hover {\n color: #fff;\n background-color: #28a745;\n border-color: #28a745;\n}\n\n.btn-outline-success:focus, .btn-outline-success.focus {\n box-shadow: 0 0 0 3px rgba(40, 167, 69, 0.5);\n}\n\n.btn-outline-success.disabled, .btn-outline-success:disabled {\n color: #28a745;\n background-color: transparent;\n}\n\n.btn-outline-success:active, .btn-outline-success.active,\n.show > .btn-outline-success.dropdown-toggle {\n color: #fff;\n background-color: #28a745;\n border-color: #28a745;\n}\n\n.btn-outline-info {\n color: #17a2b8;\n background-color: transparent;\n background-image: none;\n border-color: #17a2b8;\n}\n\n.btn-outline-info:hover {\n color: #fff;\n background-color: #17a2b8;\n border-color: #17a2b8;\n}\n\n.btn-outline-info:focus, .btn-outline-info.focus {\n box-shadow: 0 0 0 3px rgba(23, 162, 184, 0.5);\n}\n\n.btn-outline-info.disabled, .btn-outline-info:disabled {\n color: #17a2b8;\n background-color: transparent;\n}\n\n.btn-outline-info:active, .btn-outline-info.active,\n.show > .btn-outline-info.dropdown-toggle {\n color: #fff;\n background-color: #17a2b8;\n border-color: #17a2b8;\n}\n\n.btn-outline-warning {\n color: #ffc107;\n background-color: transparent;\n background-image: none;\n border-color: #ffc107;\n}\n\n.btn-outline-warning:hover {\n color: #fff;\n background-color: #ffc107;\n border-color: #ffc107;\n}\n\n.btn-outline-warning:focus, .btn-outline-warning.focus {\n box-shadow: 0 0 0 3px rgba(255, 193, 7, 0.5);\n}\n\n.btn-outline-warning.disabled, .btn-outline-warning:disabled {\n color: #ffc107;\n background-color: transparent;\n}\n\n.btn-outline-warning:active, .btn-outline-warning.active,\n.show > .btn-outline-warning.dropdown-toggle {\n color: #fff;\n background-color: #ffc107;\n border-color: #ffc107;\n}\n\n.btn-outline-danger {\n color: #dc3545;\n background-color: transparent;\n background-image: none;\n border-color: #dc3545;\n}\n\n.btn-outline-danger:hover {\n color: #fff;\n background-color: #dc3545;\n border-color: #dc3545;\n}\n\n.btn-outline-danger:focus, .btn-outline-danger.focus {\n box-shadow: 0 0 0 3px rgba(220, 53, 69, 0.5);\n}\n\n.btn-outline-danger.disabled, .btn-outline-danger:disabled {\n color: #dc3545;\n background-color: transparent;\n}\n\n.btn-outline-danger:active, .btn-outline-danger.active,\n.show > .btn-outline-danger.dropdown-toggle {\n color: #fff;\n background-color: #dc3545;\n border-color: #dc3545;\n}\n\n.btn-outline-light {\n color: #f8f9fa;\n background-color: transparent;\n background-image: none;\n border-color: #f8f9fa;\n}\n\n.btn-outline-light:hover {\n color: #fff;\n background-color: #f8f9fa;\n border-color: #f8f9fa;\n}\n\n.btn-outline-light:focus, .btn-outline-light.focus {\n box-shadow: 0 0 0 3px rgba(248, 249, 250, 0.5);\n}\n\n.btn-outline-light.disabled, .btn-outline-light:disabled {\n color: #f8f9fa;\n background-color: transparent;\n}\n\n.btn-outline-light:active, .btn-outline-light.active,\n.show > .btn-outline-light.dropdown-toggle {\n color: #fff;\n background-color: #f8f9fa;\n border-color: #f8f9fa;\n}\n\n.btn-outline-dark {\n color: #343a40;\n background-color: transparent;\n background-image: none;\n border-color: #343a40;\n}\n\n.btn-outline-dark:hover {\n color: #fff;\n background-color: #343a40;\n border-color: #343a40;\n}\n\n.btn-outline-dark:focus, .btn-outline-dark.focus {\n box-shadow: 0 0 0 3px rgba(52, 58, 64, 0.5);\n}\n\n.btn-outline-dark.disabled, .btn-outline-dark:disabled {\n color: #343a40;\n background-color: transparent;\n}\n\n.btn-outline-dark:active, .btn-outline-dark.active,\n.show > .btn-outline-dark.dropdown-toggle {\n color: #fff;\n background-color: #343a40;\n border-color: #343a40;\n}\n\n.btn-link {\n font-weight: normal;\n color: #007bff;\n border-radius: 0;\n}\n\n.btn-link, .btn-link:active, .btn-link.active, .btn-link:disabled {\n background-color: transparent;\n}\n\n.btn-link, .btn-link:focus, .btn-link:active {\n border-color: transparent;\n box-shadow: none;\n}\n\n.btn-link:hover {\n border-color: transparent;\n}\n\n.btn-link:focus, .btn-link:hover {\n color: #0056b3;\n text-decoration: underline;\n background-color: transparent;\n}\n\n.btn-link:disabled {\n color: #868e96;\n}\n\n.btn-link:disabled:focus, .btn-link:disabled:hover {\n text-decoration: none;\n}\n\n.btn-lg, .btn-group-lg > .btn {\n padding: 0.5rem 1rem;\n font-size: 1.25rem;\n line-height: 1.5;\n border-radius: 0.3rem;\n}\n\n.btn-sm, .btn-group-sm > .btn {\n padding: 0.25rem 0.5rem;\n font-size: 0.875rem;\n line-height: 1.5;\n border-radius: 0.2rem;\n}\n\n.btn-block {\n display: block;\n width: 100%;\n}\n\n.btn-block + .btn-block {\n margin-top: 0.5rem;\n}\n\ninput[type=\"submit\"].btn-block,\ninput[type=\"reset\"].btn-block,\ninput[type=\"button\"].btn-block {\n width: 100%;\n}\n\n.fade {\n opacity: 0;\n transition: opacity 0.15s linear;\n}\n\n.fade.show {\n opacity: 1;\n}\n\n.collapse {\n display: none;\n}\n\n.collapse.show {\n display: block;\n}\n\ntr.collapse.show {\n display: table-row;\n}\n\ntbody.collapse.show {\n display: table-row-group;\n}\n\n.collapsing {\n position: relative;\n height: 0;\n overflow: hidden;\n transition: height 0.35s ease;\n}\n\n.dropup,\n.dropdown {\n position: relative;\n}\n\n.dropdown-toggle::after {\n display: inline-block;\n width: 0;\n height: 0;\n margin-left: 0.255em;\n vertical-align: 0.255em;\n content: \"\";\n border-top: 0.3em solid;\n border-right: 0.3em solid transparent;\n border-left: 0.3em solid transparent;\n}\n\n.dropdown-toggle:empty::after {\n margin-left: 0;\n}\n\n.dropup .dropdown-menu {\n margin-top: 0;\n margin-bottom: 0.125rem;\n}\n\n.dropup .dropdown-toggle::after {\n border-top: 0;\n border-bottom: 0.3em solid;\n}\n\n.dropdown-menu {\n position: absolute;\n top: 100%;\n left: 0;\n z-index: 1000;\n display: none;\n float: left;\n min-width: 10rem;\n padding: 0.5rem 0;\n margin: 0.125rem 0 0;\n font-size: 1rem;\n color: #212529;\n text-align: left;\n list-style: none;\n background-color: #fff;\n background-clip: padding-box;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0.25rem;\n}\n\n.dropdown-divider {\n height: 0;\n margin: 0.5rem 0;\n overflow: hidden;\n border-top: 1px solid #e9ecef;\n}\n\n.dropdown-item {\n display: block;\n width: 100%;\n padding: 0.25rem 1.5rem;\n clear: both;\n font-weight: normal;\n color: #212529;\n text-align: inherit;\n white-space: nowrap;\n background: none;\n border: 0;\n}\n\n.dropdown-item:focus, .dropdown-item:hover {\n color: #16181b;\n text-decoration: none;\n background-color: #f8f9fa;\n}\n\n.dropdown-item.active, .dropdown-item:active {\n color: #fff;\n text-decoration: none;\n background-color: #007bff;\n}\n\n.dropdown-item.disabled, .dropdown-item:disabled {\n color: #868e96;\n background-color: transparent;\n}\n\n.show > a {\n outline: 0;\n}\n\n.dropdown-menu.show {\n display: block;\n}\n\n.dropdown-header {\n display: block;\n padding: 0.5rem 1.5rem;\n margin-bottom: 0;\n font-size: 0.875rem;\n color: #868e96;\n white-space: nowrap;\n}\n\n.btn-group,\n.btn-group-vertical {\n position: relative;\n display: inline-flex;\n vertical-align: middle;\n}\n\n.btn-group > .btn,\n.btn-group-vertical > .btn {\n position: relative;\n flex: 0 1 auto;\n margin-bottom: 0;\n}\n\n.btn-group > .btn:hover,\n.btn-group-vertical > .btn:hover {\n z-index: 2;\n}\n\n.btn-group > .btn:focus, .btn-group > .btn:active, .btn-group > .btn.active,\n.btn-group-vertical > .btn:focus,\n.btn-group-vertical > .btn:active,\n.btn-group-vertical > .btn.active {\n z-index: 2;\n}\n\n.btn-group .btn + .btn,\n.btn-group .btn + .btn-group,\n.btn-group .btn-group + .btn,\n.btn-group .btn-group + .btn-group,\n.btn-group-vertical .btn + .btn,\n.btn-group-vertical .btn + .btn-group,\n.btn-group-vertical .btn-group + .btn,\n.btn-group-vertical .btn-group + .btn-group {\n margin-left: -1px;\n}\n\n.btn-toolbar {\n display: flex;\n flex-wrap: wrap;\n justify-content: flex-start;\n}\n\n.btn-toolbar .input-group {\n width: auto;\n}\n\n.btn-group > .btn:not(:first-child):not(:last-child):not(.dropdown-toggle) {\n border-radius: 0;\n}\n\n.btn-group > .btn:first-child {\n margin-left: 0;\n}\n\n.btn-group > .btn:first-child:not(:last-child):not(.dropdown-toggle) {\n border-top-right-radius: 0;\n border-bottom-right-radius: 0;\n}\n\n.btn-group > .btn:last-child:not(:first-child),\n.btn-group > .dropdown-toggle:not(:first-child) {\n border-top-left-radius: 0;\n border-bottom-left-radius: 0;\n}\n\n.btn-group > .btn-group {\n float: left;\n}\n\n.btn-group > .btn-group:not(:first-child):not(:last-child) > .btn {\n border-radius: 0;\n}\n\n.btn-group > .btn-group:first-child:not(:last-child) > .btn:last-child,\n.btn-group > .btn-group:first-child:not(:last-child) > .dropdown-toggle {\n border-top-right-radius: 0;\n border-bottom-right-radius: 0;\n}\n\n.btn-group > .btn-group:last-child:not(:first-child) > .btn:first-child {\n border-top-left-radius: 0;\n border-bottom-left-radius: 0;\n}\n\n.btn + .dropdown-toggle-split {\n padding-right: 0.5625rem;\n padding-left: 0.5625rem;\n}\n\n.btn + .dropdown-toggle-split::after {\n margin-left: 0;\n}\n\n.btn-sm + .dropdown-toggle-split, .btn-group-sm > .btn + .dropdown-toggle-split {\n padding-right: 0.375rem;\n padding-left: 0.375rem;\n}\n\n.btn-lg + .dropdown-toggle-split, .btn-group-lg > .btn + .dropdown-toggle-split {\n padding-right: 0.75rem;\n padding-left: 0.75rem;\n}\n\n.btn-group-vertical {\n display: inline-flex;\n flex-direction: column;\n align-items: flex-start;\n justify-content: center;\n}\n\n.btn-group-vertical .btn,\n.btn-group-vertical .btn-group {\n width: 100%;\n}\n\n.btn-group-vertical > .btn + .btn,\n.btn-group-vertical > .btn + .btn-group,\n.btn-group-vertical > .btn-group + .btn,\n.btn-group-vertical > .btn-group + .btn-group {\n margin-top: -1px;\n margin-left: 0;\n}\n\n.btn-group-vertical > .btn:not(:first-child):not(:last-child) {\n border-radius: 0;\n}\n\n.btn-group-vertical > .btn:first-child:not(:last-child) {\n border-bottom-right-radius: 0;\n border-bottom-left-radius: 0;\n}\n\n.btn-group-vertical > .btn:last-child:not(:first-child) {\n border-top-left-radius: 0;\n border-top-right-radius: 0;\n}\n\n.btn-group-vertical > .btn-group:not(:first-child):not(:last-child) > .btn {\n border-radius: 0;\n}\n\n.btn-group-vertical > .btn-group:first-child:not(:last-child) > .btn:last-child,\n.btn-group-vertical > .btn-group:first-child:not(:last-child) > .dropdown-toggle {\n border-bottom-right-radius: 0;\n border-bottom-left-radius: 0;\n}\n\n.btn-group-vertical > .btn-group:last-child:not(:first-child) > .btn:first-child {\n border-top-left-radius: 0;\n border-top-right-radius: 0;\n}\n\n[data-toggle=\"buttons\"] > .btn input[type=\"radio\"],\n[data-toggle=\"buttons\"] > .btn input[type=\"checkbox\"],\n[data-toggle=\"buttons\"] > .btn-group > .btn input[type=\"radio\"],\n[data-toggle=\"buttons\"] > .btn-group > .btn input[type=\"checkbox\"] {\n position: absolute;\n clip: rect(0, 0, 0, 0);\n pointer-events: none;\n}\n\n.input-group {\n position: relative;\n display: flex;\n width: 100%;\n}\n\n.input-group .form-control {\n position: relative;\n z-index: 2;\n flex: 1 1 auto;\n width: 1%;\n margin-bottom: 0;\n}\n\n.input-group .form-control:focus, .input-group .form-control:active, .input-group .form-control:hover {\n z-index: 3;\n}\n\n.input-group-addon,\n.input-group-btn,\n.input-group .form-control {\n display: flex;\n align-items: center;\n}\n\n.input-group-addon:not(:first-child):not(:last-child),\n.input-group-btn:not(:first-child):not(:last-child),\n.input-group .form-control:not(:first-child):not(:last-child) {\n border-radius: 0;\n}\n\n.input-group-addon,\n.input-group-btn {\n white-space: nowrap;\n vertical-align: middle;\n}\n\n.input-group-addon {\n padding: 0.5rem 0.75rem;\n margin-bottom: 0;\n font-size: 1rem;\n font-weight: normal;\n line-height: 1.25;\n color: #495057;\n text-align: center;\n background-color: #e9ecef;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0.25rem;\n}\n\n.input-group-addon.form-control-sm,\n.input-group-sm > .input-group-addon,\n.input-group-sm > .input-group-btn > .input-group-addon.btn {\n padding: 0.25rem 0.5rem;\n font-size: 0.875rem;\n border-radius: 0.2rem;\n}\n\n.input-group-addon.form-control-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 0.5rem 1rem;\n font-size: 1.25rem;\n border-radius: 0.3rem;\n}\n\n.input-group-addon input[type=\"radio\"],\n.input-group-addon input[type=\"checkbox\"] {\n margin-top: 0;\n}\n\n.input-group .form-control:not(:last-child),\n.input-group-addon:not(:last-child),\n.input-group-btn:not(:last-child) > .btn,\n.input-group-btn:not(:last-child) > .btn-group > .btn,\n.input-group-btn:not(:last-child) > .dropdown-toggle,\n.input-group-btn:not(:first-child) > .btn:not(:last-child):not(.dropdown-toggle),\n.input-group-btn:not(:first-child) > .btn-group:not(:last-child) > .btn {\n border-top-right-radius: 0;\n border-bottom-right-radius: 0;\n}\n\n.input-group-addon:not(:last-child) {\n border-right: 0;\n}\n\n.input-group .form-control:not(:first-child),\n.input-group-addon:not(:first-child),\n.input-group-btn:not(:first-child) > .btn,\n.input-group-btn:not(:first-child) > .btn-group > .btn,\n.input-group-btn:not(:first-child) > .dropdown-toggle,\n.input-group-btn:not(:last-child) > .btn:not(:first-child),\n.input-group-btn:not(:last-child) > .btn-group:not(:first-child) > .btn {\n border-top-left-radius: 0;\n border-bottom-left-radius: 0;\n}\n\n.form-control + .input-group-addon:not(:first-child) {\n border-left: 0;\n}\n\n.input-group-btn {\n position: relative;\n font-size: 0;\n white-space: nowrap;\n}\n\n.input-group-btn > .btn {\n position: relative;\n}\n\n.input-group-btn > .btn + .btn {\n margin-left: -1px;\n}\n\n.input-group-btn > .btn:focus, .input-group-btn > .btn:active, .input-group-btn > .btn:hover {\n z-index: 3;\n}\n\n.input-group-btn:not(:last-child) > .btn,\n.input-group-btn:not(:last-child) > .btn-group {\n margin-right: -1px;\n}\n\n.input-group-btn:not(:first-child) > .btn,\n.input-group-btn:not(:first-child) > .btn-group {\n z-index: 2;\n margin-left: -1px;\n}\n\n.input-group-btn:not(:first-child) > .btn:focus, .input-group-btn:not(:first-child) > .btn:active, .input-group-btn:not(:first-child) > .btn:hover,\n.input-group-btn:not(:first-child) > .btn-group:focus,\n.input-group-btn:not(:first-child) > .btn-group:active,\n.input-group-btn:not(:first-child) > .btn-group:hover {\n z-index: 3;\n}\n\n.custom-control {\n position: relative;\n display: inline-flex;\n min-height: 1.5rem;\n padding-left: 1.5rem;\n margin-right: 1rem;\n}\n\n.custom-control-input {\n position: absolute;\n z-index: -1;\n opacity: 0;\n}\n\n.custom-control-input:checked ~ .custom-control-indicator {\n color: #fff;\n background-color: #007bff;\n}\n\n.custom-control-input:focus ~ .custom-control-indicator {\n box-shadow: 0 0 0 1px #fff, 0 0 0 3px #007bff;\n}\n\n.custom-control-input:active ~ .custom-control-indicator {\n color: #fff;\n background-color: #b3d7ff;\n}\n\n.custom-control-input:disabled ~ .custom-control-indicator {\n background-color: #e9ecef;\n}\n\n.custom-control-input:disabled ~ .custom-control-description {\n color: #868e96;\n}\n\n.custom-control-indicator {\n position: absolute;\n top: 0.25rem;\n left: 0;\n display: block;\n width: 1rem;\n height: 1rem;\n pointer-events: none;\n user-select: none;\n background-color: #ddd;\n background-repeat: no-repeat;\n background-position: center center;\n background-size: 50% 50%;\n}\n\n.custom-checkbox .custom-control-indicator {\n border-radius: 0.25rem;\n}\n\n.custom-checkbox .custom-control-input:checked ~ .custom-control-indicator {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E\");\n}\n\n.custom-checkbox .custom-control-input:indeterminate ~ .custom-control-indicator {\n background-color: #007bff;\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='%23fff' d='M0 2h4'/%3E%3C/svg%3E\");\n}\n\n.custom-radio .custom-control-indicator {\n border-radius: 50%;\n}\n\n.custom-radio .custom-control-input:checked ~ .custom-control-indicator {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='%23fff'/%3E%3C/svg%3E\");\n}\n\n.custom-controls-stacked {\n display: flex;\n flex-direction: column;\n}\n\n.custom-controls-stacked .custom-control {\n margin-bottom: 0.25rem;\n}\n\n.custom-controls-stacked .custom-control + .custom-control {\n margin-left: 0;\n}\n\n.custom-select {\n display: inline-block;\n max-width: 100%;\n height: calc(2.25rem + 2px);\n padding: 0.375rem 1.75rem 0.375rem 0.75rem;\n line-height: 1.25;\n color: #495057;\n vertical-align: middle;\n background: #fff url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23333' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E\") no-repeat right 0.75rem center;\n background-size: 8px 10px;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0.25rem;\n appearance: none;\n}\n\n.custom-select:focus {\n border-color: #80bdff;\n outline: none;\n}\n\n.custom-select:focus::-ms-value {\n color: #495057;\n background-color: #fff;\n}\n\n.custom-select:disabled {\n color: #868e96;\n background-color: #e9ecef;\n}\n\n.custom-select::-ms-expand {\n opacity: 0;\n}\n\n.custom-select-sm {\n height: calc(1.8125rem + 2px);\n padding-top: 0.375rem;\n padding-bottom: 0.375rem;\n font-size: 75%;\n}\n\n.custom-file {\n position: relative;\n display: inline-block;\n max-width: 100%;\n height: 2.5rem;\n margin-bottom: 0;\n}\n\n.custom-file-input {\n min-width: 14rem;\n max-width: 100%;\n height: 2.5rem;\n margin: 0;\n opacity: 0;\n}\n\n.custom-file-control {\n position: absolute;\n top: 0;\n right: 0;\n left: 0;\n z-index: 5;\n height: 2.5rem;\n padding: 0.5rem 1rem;\n line-height: 1.5;\n color: #495057;\n pointer-events: none;\n user-select: none;\n background-color: #fff;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0.25rem;\n}\n\n.custom-file-control:lang(en):empty::after {\n content: \"Choose file...\";\n}\n\n.custom-file-control::before {\n position: absolute;\n top: -1px;\n right: -1px;\n bottom: -1px;\n z-index: 6;\n display: block;\n height: 2.5rem;\n padding: 0.5rem 1rem;\n line-height: 1.5;\n color: #495057;\n background-color: #e9ecef;\n border: 1px solid rgba(0, 0, 0, 0.15);\n border-radius: 0 0.25rem 0.25rem 0;\n}\n\n.custom-file-control:lang(en)::before {\n content: \"Browse\";\n}\n\n.nav {\n display: flex;\n flex-wrap: wrap;\n padding-left: 0;\n margin-bottom: 0;\n list-style: none;\n}\n\n.nav-link {\n display: block;\n padding: 0.5rem 1rem;\n}\n\n.nav-link:focus, .nav-link:hover {\n text-decoration: none;\n}\n\n.nav-link.disabled {\n color: #868e96;\n}\n\n.nav-tabs {\n border-bottom: 1px solid #ddd;\n}\n\n.nav-tabs .nav-item {\n margin-bottom: -1px;\n}\n\n.nav-tabs .nav-link {\n border: 1px solid transparent;\n border-top-left-radius: 0.25rem;\n border-top-right-radius: 0.25rem;\n}\n\n.nav-tabs .nav-link:focus, .nav-tabs .nav-link:hover {\n border-color: #e9ecef #e9ecef #ddd;\n}\n\n.nav-tabs .nav-link.disabled {\n color: #868e96;\n background-color: transparent;\n border-color: transparent;\n}\n\n.nav-tabs .nav-link.active,\n.nav-tabs .nav-item.show .nav-link {\n color: #495057;\n background-color: #fff;\n border-color: #ddd #ddd #fff;\n}\n\n.nav-tabs .dropdown-menu {\n margin-top: -1px;\n border-top-left-radius: 0;\n border-top-right-radius: 0;\n}\n\n.nav-pills .nav-link {\n border-radius: 0.25rem;\n}\n\n.nav-pills .nav-link.active,\n.show > .nav-pills .nav-link {\n color: #fff;\n background-color: #007bff;\n}\n\n.nav-fill .nav-item {\n flex: 1 1 auto;\n text-align: center;\n}\n\n.nav-justified .nav-item {\n flex-basis: 0;\n flex-grow: 1;\n text-align: center;\n}\n\n.tab-content > .tab-pane {\n display: none;\n}\n\n.tab-content > .active {\n display: block;\n}\n\n.navbar {\n position: relative;\n display: flex;\n flex-wrap: wrap;\n align-items: center;\n justify-content: space-between;\n padding: 0.5rem 1rem;\n}\n\n.navbar > .container,\n.navbar > .container-fluid {\n display: flex;\n flex-wrap: wrap;\n align-items: center;\n justify-content: space-between;\n}\n\n.navbar-brand {\n display: inline-block;\n padding-top: 0.3125rem;\n padding-bottom: 0.3125rem;\n margin-right: 1rem;\n font-size: 1.25rem;\n line-height: inherit;\n white-space: nowrap;\n}\n\n.navbar-brand:focus, .navbar-brand:hover {\n text-decoration: none;\n}\n\n.navbar-nav {\n display: flex;\n flex-direction: column;\n padding-left: 0;\n margin-bottom: 0;\n list-style: none;\n}\n\n.navbar-nav .nav-link {\n padding-right: 0;\n padding-left: 0;\n}\n\n.navbar-nav .dropdown-menu {\n position: static;\n float: none;\n}\n\n.navbar-text {\n display: inline-block;\n padding-top: 0.5rem;\n padding-bottom: 0.5rem;\n}\n\n.navbar-collapse {\n flex-basis: 100%;\n align-items: center;\n}\n\n.navbar-toggler {\n padding: 0.25rem 0.75rem;\n font-size: 1.25rem;\n line-height: 1;\n background: transparent;\n border: 1px solid transparent;\n border-radius: 0.25rem;\n}\n\n.navbar-toggler:focus, .navbar-toggler:hover {\n text-decoration: none;\n}\n\n.navbar-toggler-icon {\n display: inline-block;\n width: 1.5em;\n height: 1.5em;\n vertical-align: middle;\n content: \"\";\n background: no-repeat center center;\n background-size: 100% 100%;\n}\n\n@media (max-width: 575px) {\n .navbar-expand-sm > .container,\n .navbar-expand-sm > .container-fluid {\n padding-right: 0;\n padding-left: 0;\n }\n}\n\n@media (min-width: 576px) {\n .navbar-expand-sm {\n flex-direction: row;\n flex-wrap: nowrap;\n justify-content: flex-start;\n }\n .navbar-expand-sm .navbar-nav {\n flex-direction: row;\n }\n .navbar-expand-sm .navbar-nav .dropdown-menu {\n position: absolute;\n }\n .navbar-expand-sm .navbar-nav .dropdown-menu-right {\n right: 0;\n left: auto;\n }\n .navbar-expand-sm .navbar-nav .nav-link {\n padding-right: .5rem;\n padding-left: .5rem;\n }\n .navbar-expand-sm > .container,\n .navbar-expand-sm > .container-fluid {\n flex-wrap: nowrap;\n }\n .navbar-expand-sm .navbar-collapse {\n display: flex !important;\n }\n .navbar-expand-sm .navbar-toggler {\n display: none;\n }\n}\n\n@media (max-width: 767px) {\n .navbar-expand-md > .container,\n .navbar-expand-md > .container-fluid {\n padding-right: 0;\n padding-left: 0;\n }\n}\n\n@media (min-width: 768px) {\n .navbar-expand-md {\n flex-direction: row;\n flex-wrap: nowrap;\n justify-content: flex-start;\n }\n .navbar-expand-md .navbar-nav {\n flex-direction: row;\n }\n .navbar-expand-md .navbar-nav .dropdown-menu {\n position: absolute;\n }\n .navbar-expand-md .navbar-nav .dropdown-menu-right {\n right: 0;\n left: auto;\n }\n .navbar-expand-md .navbar-nav .nav-link {\n padding-right: .5rem;\n padding-left: .5rem;\n }\n .navbar-expand-md > .container,\n .navbar-expand-md > .container-fluid {\n flex-wrap: nowrap;\n }\n .navbar-expand-md .navbar-collapse {\n display: flex !important;\n }\n .navbar-expand-md .navbar-toggler {\n display: none;\n }\n}\n\n@media (max-width: 991px) {\n .navbar-expand-lg > .container,\n .navbar-expand-lg > .container-fluid {\n padding-right: 0;\n padding-left: 0;\n }\n}\n\n@media (min-width: 992px) {\n .navbar-expand-lg {\n flex-direction: row;\n flex-wrap: nowrap;\n justify-content: flex-start;\n }\n .navbar-expand-lg .navbar-nav {\n flex-direction: row;\n }\n .navbar-expand-lg .navbar-nav .dropdown-menu {\n position: absolute;\n }\n .navbar-expand-lg .navbar-nav .dropdown-menu-right {\n right: 0;\n left: auto;\n }\n .navbar-expand-lg .navbar-nav .nav-link {\n padding-right: .5rem;\n padding-left: .5rem;\n }\n .navbar-expand-lg > .container,\n .navbar-expand-lg > .container-fluid {\n flex-wrap: nowrap;\n }\n .navbar-expand-lg .navbar-collapse {\n display: flex !important;\n }\n .navbar-expand-lg .navbar-toggler {\n display: none;\n }\n}\n\n@media (max-width: 1199px) {\n .navbar-expand-xl > .container,\n .navbar-expand-xl > .container-fluid {\n padding-right: 0;\n padding-left: 0;\n }\n}\n\n@media (min-width: 1200px) {\n .navbar-expand-xl {\n flex-direction: row;\n flex-wrap: nowrap;\n justify-content: flex-start;\n }\n .navbar-expand-xl .navbar-nav {\n flex-direction: row;\n }\n .navbar-expand-xl .navbar-nav .dropdown-menu {\n position: absolute;\n }\n .navbar-expand-xl .navbar-nav .dropdown-menu-right {\n right: 0;\n left: auto;\n }\n .navbar-expand-xl .navbar-nav .nav-link {\n padding-right: .5rem;\n padding-left: .5rem;\n }\n .navbar-expand-xl > .container,\n .navbar-expand-xl > .container-fluid {\n flex-wrap: nowrap;\n }\n .navbar-expand-xl .navbar-collapse {\n display: flex !important;\n }\n .navbar-expand-xl .navbar-toggler {\n display: none;\n }\n}\n\n.navbar-expand {\n flex-direction: row;\n flex-wrap: nowrap;\n justify-content: flex-start;\n}\n\n.navbar-expand > .container,\n.navbar-expand > .container-fluid {\n padding-right: 0;\n padding-left: 0;\n}\n\n.navbar-expand .navbar-nav {\n flex-direction: row;\n}\n\n.navbar-expand .navbar-nav .dropdown-menu {\n position: absolute;\n}\n\n.navbar-expand .navbar-nav .dropdown-menu-right {\n right: 0;\n left: auto;\n}\n\n.navbar-expand .navbar-nav .nav-link {\n padding-right: .5rem;\n padding-left: .5rem;\n}\n\n.navbar-expand > .container,\n.navbar-expand > .container-fluid {\n flex-wrap: nowrap;\n}\n\n.navbar-expand .navbar-collapse {\n display: flex !important;\n}\n\n.navbar-expand .navbar-toggler {\n display: none;\n}\n\n.navbar-light .navbar-brand {\n color: rgba(0, 0, 0, 0.9);\n}\n\n.navbar-light .navbar-brand:focus, .navbar-light .navbar-brand:hover {\n color: rgba(0, 0, 0, 0.9);\n}\n\n.navbar-light .navbar-nav .nav-link {\n color: rgba(0, 0, 0, 0.5);\n}\n\n.navbar-light .navbar-nav .nav-link:focus, .navbar-light .navbar-nav .nav-link:hover {\n color: rgba(0, 0, 0, 0.7);\n}\n\n.navbar-light .navbar-nav .nav-link.disabled {\n color: rgba(0, 0, 0, 0.3);\n}\n\n.navbar-light .navbar-nav .show > .nav-link,\n.navbar-light .navbar-nav .active > .nav-link,\n.navbar-light .navbar-nav .nav-link.show,\n.navbar-light .navbar-nav .nav-link.active {\n color: rgba(0, 0, 0, 0.9);\n}\n\n.navbar-light .navbar-toggler {\n color: rgba(0, 0, 0, 0.5);\n border-color: rgba(0, 0, 0, 0.1);\n}\n\n.navbar-light .navbar-toggler-icon {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\");\n}\n\n.navbar-light .navbar-text {\n color: rgba(0, 0, 0, 0.5);\n}\n\n.navbar-dark .navbar-brand {\n color: white;\n}\n\n.navbar-dark .navbar-brand:focus, .navbar-dark .navbar-brand:hover {\n color: white;\n}\n\n.navbar-dark .navbar-nav .nav-link {\n color: rgba(255, 255, 255, 0.5);\n}\n\n.navbar-dark .navbar-nav .nav-link:focus, .navbar-dark .navbar-nav .nav-link:hover {\n color: rgba(255, 255, 255, 0.75);\n}\n\n.navbar-dark .navbar-nav .nav-link.disabled {\n color: rgba(255, 255, 255, 0.25);\n}\n\n.navbar-dark .navbar-nav .show > .nav-link,\n.navbar-dark .navbar-nav .active > .nav-link,\n.navbar-dark .navbar-nav .nav-link.show,\n.navbar-dark .navbar-nav .nav-link.active {\n color: white;\n}\n\n.navbar-dark .navbar-toggler {\n color: rgba(255, 255, 255, 0.5);\n border-color: rgba(255, 255, 255, 0.1);\n}\n\n.navbar-dark .navbar-toggler-icon {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\");\n}\n\n.navbar-dark .navbar-text {\n color: rgba(255, 255, 255, 0.5);\n}\n\n.card {\n position: relative;\n display: flex;\n flex-direction: column;\n min-width: 0;\n word-wrap: break-word;\n background-color: #fff;\n background-clip: border-box;\n border: 1px solid rgba(0, 0, 0, 0.125);\n border-radius: 0.25rem;\n}\n\n.card-body {\n flex: 1 1 auto;\n padding: 1.25rem;\n}\n\n.card-title {\n margin-bottom: 0.75rem;\n}\n\n.card-subtitle {\n margin-top: -0.375rem;\n margin-bottom: 0;\n}\n\n.card-text:last-child {\n margin-bottom: 0;\n}\n\n.card-link:hover {\n text-decoration: none;\n}\n\n.card-link + .card-link {\n margin-left: 1.25rem;\n}\n\n.card > .list-group:first-child .list-group-item:first-child {\n border-top-left-radius: 0.25rem;\n border-top-right-radius: 0.25rem;\n}\n\n.card > .list-group:last-child .list-group-item:last-child {\n border-bottom-right-radius: 0.25rem;\n border-bottom-left-radius: 0.25rem;\n}\n\n.card-header {\n padding: 0.75rem 1.25rem;\n margin-bottom: 0;\n background-color: rgba(0, 0, 0, 0.03);\n border-bottom: 1px solid rgba(0, 0, 0, 0.125);\n}\n\n.card-header:first-child {\n border-radius: calc(0.25rem - 1px) calc(0.25rem - 1px) 0 0;\n}\n\n.card-footer {\n padding: 0.75rem 1.25rem;\n background-color: rgba(0, 0, 0, 0.03);\n border-top: 1px solid rgba(0, 0, 0, 0.125);\n}\n\n.card-footer:last-child {\n border-radius: 0 0 calc(0.25rem - 1px) calc(0.25rem - 1px);\n}\n\n.card-header-tabs {\n margin-right: -0.625rem;\n margin-bottom: -0.75rem;\n margin-left: -0.625rem;\n border-bottom: 0;\n}\n\n.card-header-pills {\n margin-right: -0.625rem;\n margin-left: -0.625rem;\n}\n\n.card-img-overlay {\n position: absolute;\n top: 0;\n right: 0;\n bottom: 0;\n left: 0;\n padding: 1.25rem;\n}\n\n.card-img {\n width: 100%;\n border-radius: calc(0.25rem - 1px);\n}\n\n.card-img-top {\n width: 100%;\n border-top-left-radius: calc(0.25rem - 1px);\n border-top-right-radius: calc(0.25rem - 1px);\n}\n\n.card-img-bottom {\n width: 100%;\n border-bottom-right-radius: calc(0.25rem - 1px);\n border-bottom-left-radius: calc(0.25rem - 1px);\n}\n\n@media (min-width: 576px) {\n .card-deck {\n display: flex;\n flex-flow: row wrap;\n margin-right: -15px;\n margin-left: -15px;\n }\n .card-deck .card {\n display: flex;\n flex: 1 0 0%;\n flex-direction: column;\n margin-right: 15px;\n margin-left: 15px;\n }\n}\n\n@media (min-width: 576px) {\n .card-group {\n display: flex;\n flex-flow: row wrap;\n }\n .card-group .card {\n flex: 1 0 0%;\n }\n .card-group .card + .card {\n margin-left: 0;\n border-left: 0;\n }\n .card-group .card:first-child {\n border-top-right-radius: 0;\n border-bottom-right-radius: 0;\n }\n .card-group .card:first-child .card-img-top {\n border-top-right-radius: 0;\n }\n .card-group .card:first-child .card-img-bottom {\n border-bottom-right-radius: 0;\n }\n .card-group .card:last-child {\n border-top-left-radius: 0;\n border-bottom-left-radius: 0;\n }\n .card-group .card:last-child .card-img-top {\n border-top-left-radius: 0;\n }\n .card-group .card:last-child .card-img-bottom {\n border-bottom-left-radius: 0;\n }\n .card-group .card:not(:first-child):not(:last-child) {\n border-radius: 0;\n }\n .card-group .card:not(:first-child):not(:last-child) .card-img-top,\n .card-group .card:not(:first-child):not(:last-child) .card-img-bottom {\n border-radius: 0;\n }\n}\n\n.card-columns .card {\n margin-bottom: 0.75rem;\n}\n\n@media (min-width: 576px) {\n .card-columns {\n column-count: 3;\n column-gap: 1.25rem;\n }\n .card-columns .card {\n display: inline-block;\n width: 100%;\n }\n}\n\n.breadcrumb {\n padding: 0.75rem 1rem;\n margin-bottom: 1rem;\n list-style: none;\n background-color: #e9ecef;\n border-radius: 0.25rem;\n}\n\n.breadcrumb::after {\n display: block;\n clear: both;\n content: \"\";\n}\n\n.breadcrumb-item {\n float: left;\n}\n\n.breadcrumb-item + .breadcrumb-item::before {\n display: inline-block;\n padding-right: 0.5rem;\n padding-left: 0.5rem;\n color: #868e96;\n content: \"/\";\n}\n\n.breadcrumb-item + .breadcrumb-item:hover::before {\n text-decoration: underline;\n}\n\n.breadcrumb-item + .breadcrumb-item:hover::before {\n text-decoration: none;\n}\n\n.breadcrumb-item.active {\n color: #868e96;\n}\n\n.pagination {\n display: flex;\n padding-left: 0;\n list-style: none;\n border-radius: 0.25rem;\n}\n\n.page-item:first-child .page-link {\n margin-left: 0;\n border-top-left-radius: 0.25rem;\n border-bottom-left-radius: 0.25rem;\n}\n\n.page-item:last-child .page-link {\n border-top-right-radius: 0.25rem;\n border-bottom-right-radius: 0.25rem;\n}\n\n.page-item.active .page-link {\n z-index: 2;\n color: #fff;\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.page-item.disabled .page-link {\n color: #868e96;\n pointer-events: none;\n background-color: #fff;\n border-color: #ddd;\n}\n\n.page-link {\n position: relative;\n display: block;\n padding: 0.5rem 0.75rem;\n margin-left: -1px;\n line-height: 1.25;\n color: #007bff;\n background-color: #fff;\n border: 1px solid #ddd;\n}\n\n.page-link:focus, .page-link:hover {\n color: #0056b3;\n text-decoration: none;\n background-color: #e9ecef;\n border-color: #ddd;\n}\n\n.pagination-lg .page-link {\n padding: 0.75rem 1.5rem;\n font-size: 1.25rem;\n line-height: 1.5;\n}\n\n.pagination-lg .page-item:first-child .page-link {\n border-top-left-radius: 0.3rem;\n border-bottom-left-radius: 0.3rem;\n}\n\n.pagination-lg .page-item:last-child .page-link {\n border-top-right-radius: 0.3rem;\n border-bottom-right-radius: 0.3rem;\n}\n\n.pagination-sm .page-link {\n padding: 0.25rem 0.5rem;\n font-size: 0.875rem;\n line-height: 1.5;\n}\n\n.pagination-sm .page-item:first-child .page-link {\n border-top-left-radius: 0.2rem;\n border-bottom-left-radius: 0.2rem;\n}\n\n.pagination-sm .page-item:last-child .page-link {\n border-top-right-radius: 0.2rem;\n border-bottom-right-radius: 0.2rem;\n}\n\n.badge {\n display: inline-block;\n padding: 0.25em 0.4em;\n font-size: 75%;\n font-weight: bold;\n line-height: 1;\n color: #fff;\n text-align: center;\n white-space: nowrap;\n vertical-align: baseline;\n border-radius: 0.25rem;\n}\n\n.badge:empty {\n display: none;\n}\n\n.btn .badge {\n position: relative;\n top: -1px;\n}\n\n.badge-pill {\n padding-right: 0.6em;\n padding-left: 0.6em;\n border-radius: 10rem;\n}\n\n.badge-primary {\n color: #fff;\n background-color: #007bff;\n}\n\n.badge-primary[href]:focus, .badge-primary[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #0062cc;\n}\n\n.badge-secondary {\n color: #fff;\n background-color: #868e96;\n}\n\n.badge-secondary[href]:focus, .badge-secondary[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #6c757d;\n}\n\n.badge-success {\n color: #fff;\n background-color: #28a745;\n}\n\n.badge-success[href]:focus, .badge-success[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #1e7e34;\n}\n\n.badge-info {\n color: #fff;\n background-color: #17a2b8;\n}\n\n.badge-info[href]:focus, .badge-info[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #117a8b;\n}\n\n.badge-warning {\n color: #111;\n background-color: #ffc107;\n}\n\n.badge-warning[href]:focus, .badge-warning[href]:hover {\n color: #111;\n text-decoration: none;\n background-color: #d39e00;\n}\n\n.badge-danger {\n color: #fff;\n background-color: #dc3545;\n}\n\n.badge-danger[href]:focus, .badge-danger[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #bd2130;\n}\n\n.badge-light {\n color: #111;\n background-color: #f8f9fa;\n}\n\n.badge-light[href]:focus, .badge-light[href]:hover {\n color: #111;\n text-decoration: none;\n background-color: #dae0e5;\n}\n\n.badge-dark {\n color: #fff;\n background-color: #343a40;\n}\n\n.badge-dark[href]:focus, .badge-dark[href]:hover {\n color: #fff;\n text-decoration: none;\n background-color: #1d2124;\n}\n\n.jumbotron {\n padding: 2rem 1rem;\n margin-bottom: 2rem;\n background-color: #e9ecef;\n border-radius: 0.3rem;\n}\n\n@media (min-width: 576px) {\n .jumbotron {\n padding: 4rem 2rem;\n }\n}\n\n.jumbotron-fluid {\n padding-right: 0;\n padding-left: 0;\n border-radius: 0;\n}\n\n.alert {\n padding: 0.75rem 1.25rem;\n margin-bottom: 1rem;\n border: 1px solid transparent;\n border-radius: 0.25rem;\n}\n\n.alert-heading {\n color: inherit;\n}\n\n.alert-link {\n font-weight: bold;\n}\n\n.alert-dismissible .close {\n position: relative;\n top: -0.75rem;\n right: -1.25rem;\n padding: 0.75rem 1.25rem;\n color: inherit;\n}\n\n.alert-primary {\n color: #004085;\n background-color: #cce5ff;\n border-color: #b8daff;\n}\n\n.alert-primary hr {\n border-top-color: #9fcdff;\n}\n\n.alert-primary .alert-link {\n color: #002752;\n}\n\n.alert-secondary {\n color: #464a4e;\n background-color: #e7e8ea;\n border-color: #dddfe2;\n}\n\n.alert-secondary hr {\n border-top-color: #cfd2d6;\n}\n\n.alert-secondary .alert-link {\n color: #2e3133;\n}\n\n.alert-success {\n color: #155724;\n background-color: #d4edda;\n border-color: #c3e6cb;\n}\n\n.alert-success hr {\n border-top-color: #b1dfbb;\n}\n\n.alert-success .alert-link {\n color: #0b2e13;\n}\n\n.alert-info {\n color: #0c5460;\n background-color: #d1ecf1;\n border-color: #bee5eb;\n}\n\n.alert-info hr {\n border-top-color: #abdde5;\n}\n\n.alert-info .alert-link {\n color: #062c33;\n}\n\n.alert-warning {\n color: #856404;\n background-color: #fff3cd;\n border-color: #ffeeba;\n}\n\n.alert-warning hr {\n border-top-color: #ffe8a1;\n}\n\n.alert-warning .alert-link {\n color: #533f03;\n}\n\n.alert-danger {\n color: #721c24;\n background-color: #f8d7da;\n border-color: #f5c6cb;\n}\n\n.alert-danger hr {\n border-top-color: #f1b0b7;\n}\n\n.alert-danger .alert-link {\n color: #491217;\n}\n\n.alert-light {\n color: #818182;\n background-color: #fefefe;\n border-color: #fdfdfe;\n}\n\n.alert-light hr {\n border-top-color: #ececf6;\n}\n\n.alert-light .alert-link {\n color: #686868;\n}\n\n.alert-dark {\n color: #1b1e21;\n background-color: #d6d8d9;\n border-color: #c6c8ca;\n}\n\n.alert-dark hr {\n border-top-color: #b9bbbe;\n}\n\n.alert-dark .alert-link {\n color: #040505;\n}\n\n@keyframes progress-bar-stripes {\n from {\n background-position: 1rem 0;\n }\n to {\n background-position: 0 0;\n }\n}\n\n.progress {\n display: flex;\n overflow: hidden;\n font-size: 0.75rem;\n line-height: 1rem;\n text-align: center;\n background-color: #e9ecef;\n border-radius: 0.25rem;\n}\n\n.progress-bar {\n height: 1rem;\n line-height: 1rem;\n color: #fff;\n background-color: #007bff;\n transition: width 0.6s ease;\n}\n\n.progress-bar-striped {\n background-image: linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);\n background-size: 1rem 1rem;\n}\n\n.progress-bar-animated {\n animation: progress-bar-stripes 1s linear infinite;\n}\n\n.media {\n display: flex;\n align-items: flex-start;\n}\n\n.media-body {\n flex: 1;\n}\n\n.list-group {\n display: flex;\n flex-direction: column;\n padding-left: 0;\n margin-bottom: 0;\n}\n\n.list-group-item-action {\n width: 100%;\n color: #495057;\n text-align: inherit;\n}\n\n.list-group-item-action:focus, .list-group-item-action:hover {\n color: #495057;\n text-decoration: none;\n background-color: #f8f9fa;\n}\n\n.list-group-item-action:active {\n color: #212529;\n background-color: #e9ecef;\n}\n\n.list-group-item {\n position: relative;\n display: block;\n padding: 0.75rem 1.25rem;\n margin-bottom: -1px;\n background-color: #fff;\n border: 1px solid rgba(0, 0, 0, 0.125);\n}\n\n.list-group-item:first-child {\n border-top-left-radius: 0.25rem;\n border-top-right-radius: 0.25rem;\n}\n\n.list-group-item:last-child {\n margin-bottom: 0;\n border-bottom-right-radius: 0.25rem;\n border-bottom-left-radius: 0.25rem;\n}\n\n.list-group-item:focus, .list-group-item:hover {\n text-decoration: none;\n}\n\n.list-group-item.disabled, .list-group-item:disabled {\n color: #868e96;\n background-color: #fff;\n}\n\n.list-group-item.active {\n z-index: 2;\n color: #fff;\n background-color: #007bff;\n border-color: #007bff;\n}\n\n.list-group-flush .list-group-item {\n border-right: 0;\n border-left: 0;\n border-radius: 0;\n}\n\n.list-group-flush:first-child .list-group-item:first-child {\n border-top: 0;\n}\n\n.list-group-flush:last-child .list-group-item:last-child {\n border-bottom: 0;\n}\n\n.list-group-item-primary {\n color: #004085;\n background-color: #b8daff;\n}\n\na.list-group-item-primary,\nbutton.list-group-item-primary {\n color: #004085;\n}\n\na.list-group-item-primary:focus, a.list-group-item-primary:hover,\nbutton.list-group-item-primary:focus,\nbutton.list-group-item-primary:hover {\n color: #004085;\n background-color: #9fcdff;\n}\n\na.list-group-item-primary.active,\nbutton.list-group-item-primary.active {\n color: #fff;\n background-color: #004085;\n border-color: #004085;\n}\n\n.list-group-item-secondary {\n color: #464a4e;\n background-color: #dddfe2;\n}\n\na.list-group-item-secondary,\nbutton.list-group-item-secondary {\n color: #464a4e;\n}\n\na.list-group-item-secondary:focus, a.list-group-item-secondary:hover,\nbutton.list-group-item-secondary:focus,\nbutton.list-group-item-secondary:hover {\n color: #464a4e;\n background-color: #cfd2d6;\n}\n\na.list-group-item-secondary.active,\nbutton.list-group-item-secondary.active {\n color: #fff;\n background-color: #464a4e;\n border-color: #464a4e;\n}\n\n.list-group-item-success {\n color: #155724;\n background-color: #c3e6cb;\n}\n\na.list-group-item-success,\nbutton.list-group-item-success {\n color: #155724;\n}\n\na.list-group-item-success:focus, a.list-group-item-success:hover,\nbutton.list-group-item-success:focus,\nbutton.list-group-item-success:hover {\n color: #155724;\n background-color: #b1dfbb;\n}\n\na.list-group-item-success.active,\nbutton.list-group-item-success.active {\n color: #fff;\n background-color: #155724;\n border-color: #155724;\n}\n\n.list-group-item-info {\n color: #0c5460;\n background-color: #bee5eb;\n}\n\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #0c5460;\n}\n\na.list-group-item-info:focus, a.list-group-item-info:hover,\nbutton.list-group-item-info:focus,\nbutton.list-group-item-info:hover {\n color: #0c5460;\n background-color: #abdde5;\n}\n\na.list-group-item-info.active,\nbutton.list-group-item-info.active {\n color: #fff;\n background-color: #0c5460;\n border-color: #0c5460;\n}\n\n.list-group-item-warning {\n color: #856404;\n background-color: #ffeeba;\n}\n\na.list-group-item-warning,\nbutton.list-group-item-warning {\n color: #856404;\n}\n\na.list-group-item-warning:focus, a.list-group-item-warning:hover,\nbutton.list-group-item-warning:focus,\nbutton.list-group-item-warning:hover {\n color: #856404;\n background-color: #ffe8a1;\n}\n\na.list-group-item-warning.active,\nbutton.list-group-item-warning.active {\n color: #fff;\n background-color: #856404;\n border-color: #856404;\n}\n\n.list-group-item-danger {\n color: #721c24;\n background-color: #f5c6cb;\n}\n\na.list-group-item-danger,\nbutton.list-group-item-danger {\n color: #721c24;\n}\n\na.list-group-item-danger:focus, a.list-group-item-danger:hover,\nbutton.list-group-item-danger:focus,\nbutton.list-group-item-danger:hover {\n color: #721c24;\n background-color: #f1b0b7;\n}\n\na.list-group-item-danger.active,\nbutton.list-group-item-danger.active {\n color: #fff;\n background-color: #721c24;\n border-color: #721c24;\n}\n\n.list-group-item-light {\n color: #818182;\n background-color: #fdfdfe;\n}\n\na.list-group-item-light,\nbutton.list-group-item-light {\n color: #818182;\n}\n\na.list-group-item-light:focus, a.list-group-item-light:hover,\nbutton.list-group-item-light:focus,\nbutton.list-group-item-light:hover {\n color: #818182;\n background-color: #ececf6;\n}\n\na.list-group-item-light.active,\nbutton.list-group-item-light.active {\n color: #fff;\n background-color: #818182;\n border-color: #818182;\n}\n\n.list-group-item-dark {\n color: #1b1e21;\n background-color: #c6c8ca;\n}\n\na.list-group-item-dark,\nbutton.list-group-item-dark {\n color: #1b1e21;\n}\n\na.list-group-item-dark:focus, a.list-group-item-dark:hover,\nbutton.list-group-item-dark:focus,\nbutton.list-group-item-dark:hover {\n color: #1b1e21;\n background-color: #b9bbbe;\n}\n\na.list-group-item-dark.active,\nbutton.list-group-item-dark.active {\n color: #fff;\n background-color: #1b1e21;\n border-color: #1b1e21;\n}\n\n.close {\n float: right;\n font-size: 1.5rem;\n font-weight: bold;\n line-height: 1;\n color: #000;\n text-shadow: 0 1px 0 #fff;\n opacity: .5;\n}\n\n.close:focus, .close:hover {\n color: #000;\n text-decoration: none;\n opacity: .75;\n}\n\nbutton.close {\n padding: 0;\n background: transparent;\n border: 0;\n -webkit-appearance: none;\n}\n\n.modal-open {\n overflow: hidden;\n}\n\n.modal {\n position: fixed;\n top: 0;\n right: 0;\n bottom: 0;\n left: 0;\n z-index: 1050;\n display: none;\n overflow: hidden;\n outline: 0;\n}\n\n.modal.fade .modal-dialog {\n transition: transform 0.3s ease-out;\n transform: translate(0, -25%);\n}\n\n.modal.show .modal-dialog {\n transform: translate(0, 0);\n}\n\n.modal-open .modal {\n overflow-x: hidden;\n overflow-y: auto;\n}\n\n.modal-dialog {\n position: relative;\n width: auto;\n margin: 10px;\n}\n\n.modal-content {\n position: relative;\n display: flex;\n flex-direction: column;\n background-color: #fff;\n background-clip: padding-box;\n border: 1px solid rgba(0, 0, 0, 0.2);\n border-radius: 0.3rem;\n outline: 0;\n}\n\n.modal-backdrop {\n position: fixed;\n top: 0;\n right: 0;\n bottom: 0;\n left: 0;\n z-index: 1040;\n background-color: #000;\n}\n\n.modal-backdrop.fade {\n opacity: 0;\n}\n\n.modal-backdrop.show {\n opacity: 0.5;\n}\n\n.modal-header {\n display: flex;\n align-items: center;\n justify-content: space-between;\n padding: 15px;\n border-bottom: 1px solid #e9ecef;\n}\n\n.modal-title {\n margin-bottom: 0;\n line-height: 1.5;\n}\n\n.modal-body {\n position: relative;\n flex: 1 1 auto;\n padding: 15px;\n}\n\n.modal-footer {\n display: flex;\n align-items: center;\n justify-content: flex-end;\n padding: 15px;\n border-top: 1px solid #e9ecef;\n}\n\n.modal-footer > :not(:first-child) {\n margin-left: .25rem;\n}\n\n.modal-footer > :not(:last-child) {\n margin-right: .25rem;\n}\n\n.modal-scrollbar-measure {\n position: absolute;\n top: -9999px;\n width: 50px;\n height: 50px;\n overflow: scroll;\n}\n\n@media (min-width: 576px) {\n .modal-dialog {\n max-width: 500px;\n margin: 30px auto;\n }\n .modal-sm {\n max-width: 300px;\n }\n}\n\n@media (min-width: 992px) {\n .modal-lg {\n max-width: 800px;\n }\n}\n\n.tooltip {\n position: absolute;\n z-index: 1070;\n display: block;\n margin: 0;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-style: normal;\n font-weight: normal;\n line-height: 1.5;\n text-align: left;\n text-align: start;\n text-decoration: none;\n text-shadow: none;\n text-transform: none;\n letter-spacing: normal;\n word-break: normal;\n word-spacing: normal;\n white-space: normal;\n line-break: auto;\n font-size: 0.875rem;\n word-wrap: break-word;\n opacity: 0;\n}\n\n.tooltip.show {\n opacity: 0.9;\n}\n\n.tooltip .arrow {\n position: absolute;\n display: block;\n width: 5px;\n height: 5px;\n}\n\n.tooltip.bs-tooltip-top, .tooltip.bs-tooltip-auto[x-placement^=\"top\"] {\n padding: 5px 0;\n}\n\n.tooltip.bs-tooltip-top .arrow, .tooltip.bs-tooltip-auto[x-placement^=\"top\"] .arrow {\n bottom: 0;\n}\n\n.tooltip.bs-tooltip-top .arrow::before, .tooltip.bs-tooltip-auto[x-placement^=\"top\"] .arrow::before {\n margin-left: -3px;\n content: \"\";\n border-width: 5px 5px 0;\n border-top-color: #000;\n}\n\n.tooltip.bs-tooltip-right, .tooltip.bs-tooltip-auto[x-placement^=\"right\"] {\n padding: 0 5px;\n}\n\n.tooltip.bs-tooltip-right .arrow, .tooltip.bs-tooltip-auto[x-placement^=\"right\"] .arrow {\n left: 0;\n}\n\n.tooltip.bs-tooltip-right .arrow::before, .tooltip.bs-tooltip-auto[x-placement^=\"right\"] .arrow::before {\n margin-top: -3px;\n content: \"\";\n border-width: 5px 5px 5px 0;\n border-right-color: #000;\n}\n\n.tooltip.bs-tooltip-bottom, .tooltip.bs-tooltip-auto[x-placement^=\"bottom\"] {\n padding: 5px 0;\n}\n\n.tooltip.bs-tooltip-bottom .arrow, .tooltip.bs-tooltip-auto[x-placement^=\"bottom\"] .arrow {\n top: 0;\n}\n\n.tooltip.bs-tooltip-bottom .arrow::before, .tooltip.bs-tooltip-auto[x-placement^=\"bottom\"] .arrow::before {\n margin-left: -3px;\n content: \"\";\n border-width: 0 5px 5px;\n border-bottom-color: #000;\n}\n\n.tooltip.bs-tooltip-left, .tooltip.bs-tooltip-auto[x-placement^=\"left\"] {\n padding: 0 5px;\n}\n\n.tooltip.bs-tooltip-left .arrow, .tooltip.bs-tooltip-auto[x-placement^=\"left\"] .arrow {\n right: 0;\n}\n\n.tooltip.bs-tooltip-left .arrow::before, .tooltip.bs-tooltip-auto[x-placement^=\"left\"] .arrow::before {\n right: 0;\n margin-top: -3px;\n content: \"\";\n border-width: 5px 0 5px 5px;\n border-left-color: #000;\n}\n\n.tooltip .arrow::before {\n position: absolute;\n border-color: transparent;\n border-style: solid;\n}\n\n.tooltip-inner {\n max-width: 200px;\n padding: 3px 8px;\n color: #fff;\n text-align: center;\n background-color: #000;\n border-radius: 0.25rem;\n}\n\n.popover {\n position: absolute;\n top: 0;\n left: 0;\n z-index: 1060;\n display: block;\n max-width: 276px;\n padding: 1px;\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n font-style: normal;\n font-weight: normal;\n line-height: 1.5;\n text-align: left;\n text-align: start;\n text-decoration: none;\n text-shadow: none;\n text-transform: none;\n letter-spacing: normal;\n word-break: normal;\n word-spacing: normal;\n white-space: normal;\n line-break: auto;\n font-size: 0.875rem;\n word-wrap: break-word;\n background-color: #fff;\n background-clip: padding-box;\n border: 1px solid rgba(0, 0, 0, 0.2);\n border-radius: 0.3rem;\n}\n\n.popover .arrow {\n position: absolute;\n display: block;\n width: 10px;\n height: 5px;\n}\n\n.popover .arrow::before,\n.popover .arrow::after {\n position: absolute;\n display: block;\n border-color: transparent;\n border-style: solid;\n}\n\n.popover .arrow::before {\n content: \"\";\n border-width: 11px;\n}\n\n.popover .arrow::after {\n content: \"\";\n border-width: 11px;\n}\n\n.popover.bs-popover-top, .popover.bs-popover-auto[x-placement^=\"top\"] {\n margin-bottom: 10px;\n}\n\n.popover.bs-popover-top .arrow, .popover.bs-popover-auto[x-placement^=\"top\"] .arrow {\n bottom: 0;\n}\n\n.popover.bs-popover-top .arrow::before, .popover.bs-popover-auto[x-placement^=\"top\"] .arrow::before,\n.popover.bs-popover-top .arrow::after, .popover.bs-popover-auto[x-placement^=\"top\"] .arrow::after {\n border-bottom-width: 0;\n}\n\n.popover.bs-popover-top .arrow::before, .popover.bs-popover-auto[x-placement^=\"top\"] .arrow::before {\n bottom: -11px;\n margin-left: -6px;\n border-top-color: rgba(0, 0, 0, 0.25);\n}\n\n.popover.bs-popover-top .arrow::after, .popover.bs-popover-auto[x-placement^=\"top\"] .arrow::after {\n bottom: -10px;\n margin-left: -6px;\n border-top-color: #fff;\n}\n\n.popover.bs-popover-right, .popover.bs-popover-auto[x-placement^=\"right\"] {\n margin-left: 10px;\n}\n\n.popover.bs-popover-right .arrow, .popover.bs-popover-auto[x-placement^=\"right\"] .arrow {\n left: 0;\n}\n\n.popover.bs-popover-right .arrow::before, .popover.bs-popover-auto[x-placement^=\"right\"] .arrow::before,\n.popover.bs-popover-right .arrow::after, .popover.bs-popover-auto[x-placement^=\"right\"] .arrow::after {\n margin-top: -8px;\n border-left-width: 0;\n}\n\n.popover.bs-popover-right .arrow::before, .popover.bs-popover-auto[x-placement^=\"right\"] .arrow::before {\n left: -11px;\n border-right-color: rgba(0, 0, 0, 0.25);\n}\n\n.popover.bs-popover-right .arrow::after, .popover.bs-popover-auto[x-placement^=\"right\"] .arrow::after {\n left: -10px;\n border-right-color: #fff;\n}\n\n.popover.bs-popover-bottom, .popover.bs-popover-auto[x-placement^=\"bottom\"] {\n margin-top: 10px;\n}\n\n.popover.bs-popover-bottom .arrow, .popover.bs-popover-auto[x-placement^=\"bottom\"] .arrow {\n top: 0;\n}\n\n.popover.bs-popover-bottom .arrow::before, .popover.bs-popover-auto[x-placement^=\"bottom\"] .arrow::before,\n.popover.bs-popover-bottom .arrow::after, .popover.bs-popover-auto[x-placement^=\"bottom\"] .arrow::after {\n margin-left: -7px;\n border-top-width: 0;\n}\n\n.popover.bs-popover-bottom .arrow::before, .popover.bs-popover-auto[x-placement^=\"bottom\"] .arrow::before {\n top: -11px;\n border-bottom-color: rgba(0, 0, 0, 0.25);\n}\n\n.popover.bs-popover-bottom .arrow::after, .popover.bs-popover-auto[x-placement^=\"bottom\"] .arrow::after {\n top: -10px;\n border-bottom-color: #fff;\n}\n\n.popover.bs-popover-bottom .popover-header::before, .popover.bs-popover-auto[x-placement^=\"bottom\"] .popover-header::before {\n position: absolute;\n top: 0;\n left: 50%;\n display: block;\n width: 20px;\n margin-left: -10px;\n content: \"\";\n border-bottom: 1px solid #f7f7f7;\n}\n\n.popover.bs-popover-left, .popover.bs-popover-auto[x-placement^=\"left\"] {\n margin-right: 10px;\n}\n\n.popover.bs-popover-left .arrow, .popover.bs-popover-auto[x-placement^=\"left\"] .arrow {\n right: 0;\n}\n\n.popover.bs-popover-left .arrow::before, .popover.bs-popover-auto[x-placement^=\"left\"] .arrow::before,\n.popover.bs-popover-left .arrow::after, .popover.bs-popover-auto[x-placement^=\"left\"] .arrow::after {\n margin-top: -8px;\n border-right-width: 0;\n}\n\n.popover.bs-popover-left .arrow::before, .popover.bs-popover-auto[x-placement^=\"left\"] .arrow::before {\n right: -11px;\n border-left-color: rgba(0, 0, 0, 0.25);\n}\n\n.popover.bs-popover-left .arrow::after, .popover.bs-popover-auto[x-placement^=\"left\"] .arrow::after {\n right: -10px;\n border-left-color: #fff;\n}\n\n.popover-header {\n padding: 8px 14px;\n margin-bottom: 0;\n font-size: 1rem;\n color: inherit;\n background-color: #f7f7f7;\n border-bottom: 1px solid #ebebeb;\n border-top-left-radius: calc(0.3rem - 1px);\n border-top-right-radius: calc(0.3rem - 1px);\n}\n\n.popover-header:empty {\n display: none;\n}\n\n.popover-body {\n padding: 9px 14px;\n color: #212529;\n}\n\n.carousel {\n position: relative;\n}\n\n.carousel-inner {\n position: relative;\n width: 100%;\n overflow: hidden;\n}\n\n.carousel-item {\n position: relative;\n display: none;\n align-items: center;\n width: 100%;\n transition: transform 0.6s ease;\n backface-visibility: hidden;\n perspective: 1000px;\n}\n\n.carousel-item.active,\n.carousel-item-next,\n.carousel-item-prev {\n display: block;\n}\n\n.carousel-item-next,\n.carousel-item-prev {\n position: absolute;\n top: 0;\n}\n\n.carousel-item-next.carousel-item-left,\n.carousel-item-prev.carousel-item-right {\n transform: translateX(0);\n}\n\n@supports (transform-style: preserve-3d) {\n .carousel-item-next.carousel-item-left,\n .carousel-item-prev.carousel-item-right {\n transform: translate3d(0, 0, 0);\n }\n}\n\n.carousel-item-next,\n.active.carousel-item-right {\n transform: translateX(100%);\n}\n\n@supports (transform-style: preserve-3d) {\n .carousel-item-next,\n .active.carousel-item-right {\n transform: translate3d(100%, 0, 0);\n }\n}\n\n.carousel-item-prev,\n.active.carousel-item-left {\n transform: translateX(-100%);\n}\n\n@supports (transform-style: preserve-3d) {\n .carousel-item-prev,\n .active.carousel-item-left {\n transform: translate3d(-100%, 0, 0);\n }\n}\n\n.carousel-control-prev,\n.carousel-control-next {\n position: absolute;\n top: 0;\n bottom: 0;\n display: flex;\n align-items: center;\n justify-content: center;\n width: 15%;\n color: #fff;\n text-align: center;\n opacity: 0.5;\n}\n\n.carousel-control-prev:focus, .carousel-control-prev:hover,\n.carousel-control-next:focus,\n.carousel-control-next:hover {\n color: #fff;\n text-decoration: none;\n outline: 0;\n opacity: .9;\n}\n\n.carousel-control-prev {\n left: 0;\n}\n\n.carousel-control-next {\n right: 0;\n}\n\n.carousel-control-prev-icon,\n.carousel-control-next-icon {\n display: inline-block;\n width: 20px;\n height: 20px;\n background: transparent no-repeat center center;\n background-size: 100% 100%;\n}\n\n.carousel-control-prev-icon {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M4 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E\");\n}\n\n.carousel-control-next-icon {\n background-image: url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M1.5 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E\");\n}\n\n.carousel-indicators {\n position: absolute;\n right: 0;\n bottom: 10px;\n left: 0;\n z-index: 15;\n display: flex;\n justify-content: center;\n padding-left: 0;\n margin-right: 15%;\n margin-left: 15%;\n list-style: none;\n}\n\n.carousel-indicators li {\n position: relative;\n flex: 0 1 auto;\n width: 30px;\n height: 3px;\n margin-right: 3px;\n margin-left: 3px;\n text-indent: -999px;\n background-color: rgba(255, 255, 255, 0.5);\n}\n\n.carousel-indicators li::before {\n position: absolute;\n top: -10px;\n left: 0;\n display: inline-block;\n width: 100%;\n height: 10px;\n content: \"\";\n}\n\n.carousel-indicators li::after {\n position: absolute;\n bottom: -10px;\n left: 0;\n display: inline-block;\n width: 100%;\n height: 10px;\n content: \"\";\n}\n\n.carousel-indicators .active {\n background-color: #fff;\n}\n\n.carousel-caption {\n position: absolute;\n right: 15%;\n bottom: 20px;\n left: 15%;\n z-index: 10;\n padding-top: 20px;\n padding-bottom: 20px;\n color: #fff;\n text-align: center;\n}\n\n.align-baseline {\n vertical-align: baseline !important;\n}\n\n.align-top {\n vertical-align: top !important;\n}\n\n.align-middle {\n vertical-align: middle !important;\n}\n\n.align-bottom {\n vertical-align: bottom !important;\n}\n\n.align-text-bottom {\n vertical-align: text-bottom !important;\n}\n\n.align-text-top {\n vertical-align: text-top !important;\n}\n\n.bg-primary {\n background-color: #007bff !important;\n}\n\na.bg-primary:focus, a.bg-primary:hover {\n background-color: #0062cc !important;\n}\n\n.bg-secondary {\n background-color: #868e96 !important;\n}\n\na.bg-secondary:focus, a.bg-secondary:hover {\n background-color: #6c757d !important;\n}\n\n.bg-success {\n background-color: #28a745 !important;\n}\n\na.bg-success:focus, a.bg-success:hover {\n background-color: #1e7e34 !important;\n}\n\n.bg-info {\n background-color: #17a2b8 !important;\n}\n\na.bg-info:focus, a.bg-info:hover {\n background-color: #117a8b !important;\n}\n\n.bg-warning {\n background-color: #ffc107 !important;\n}\n\na.bg-warning:focus, a.bg-warning:hover {\n background-color: #d39e00 !important;\n}\n\n.bg-danger {\n background-color: #dc3545 !important;\n}\n\na.bg-danger:focus, a.bg-danger:hover {\n background-color: #bd2130 !important;\n}\n\n.bg-light {\n background-color: #f8f9fa !important;\n}\n\na.bg-light:focus, a.bg-light:hover {\n background-color: #dae0e5 !important;\n}\n\n.bg-dark {\n background-color: #343a40 !important;\n}\n\na.bg-dark:focus, a.bg-dark:hover {\n background-color: #1d2124 !important;\n}\n\n.bg-white {\n background-color: #fff !important;\n}\n\n.bg-transparent {\n background-color: transparent !important;\n}\n\n.border {\n border: 1px solid #e9ecef !important;\n}\n\n.border-0 {\n border: 0 !important;\n}\n\n.border-top-0 {\n border-top: 0 !important;\n}\n\n.border-right-0 {\n border-right: 0 !important;\n}\n\n.border-bottom-0 {\n border-bottom: 0 !important;\n}\n\n.border-left-0 {\n border-left: 0 !important;\n}\n\n.border-primary {\n border-color: #007bff !important;\n}\n\n.border-secondary {\n border-color: #868e96 !important;\n}\n\n.border-success {\n border-color: #28a745 !important;\n}\n\n.border-info {\n border-color: #17a2b8 !important;\n}\n\n.border-warning {\n border-color: #ffc107 !important;\n}\n\n.border-danger {\n border-color: #dc3545 !important;\n}\n\n.border-light {\n border-color: #f8f9fa !important;\n}\n\n.border-dark {\n border-color: #343a40 !important;\n}\n\n.border-white {\n border-color: #fff !important;\n}\n\n.rounded {\n border-radius: 0.25rem !important;\n}\n\n.rounded-top {\n border-top-left-radius: 0.25rem !important;\n border-top-right-radius: 0.25rem !important;\n}\n\n.rounded-right {\n border-top-right-radius: 0.25rem !important;\n border-bottom-right-radius: 0.25rem !important;\n}\n\n.rounded-bottom {\n border-bottom-right-radius: 0.25rem !important;\n border-bottom-left-radius: 0.25rem !important;\n}\n\n.rounded-left {\n border-top-left-radius: 0.25rem !important;\n border-bottom-left-radius: 0.25rem !important;\n}\n\n.rounded-circle {\n border-radius: 50%;\n}\n\n.rounded-0 {\n border-radius: 0;\n}\n\n.clearfix::after {\n display: block;\n clear: both;\n content: \"\";\n}\n\n.d-none {\n display: none !important;\n}\n\n.d-inline {\n display: inline !important;\n}\n\n.d-inline-block {\n display: inline-block !important;\n}\n\n.d-block {\n display: block !important;\n}\n\n.d-table {\n display: table !important;\n}\n\n.d-table-cell {\n display: table-cell !important;\n}\n\n.d-flex {\n display: flex !important;\n}\n\n.d-inline-flex {\n display: inline-flex !important;\n}\n\n@media (min-width: 576px) {\n .d-sm-none {\n display: none !important;\n }\n .d-sm-inline {\n display: inline !important;\n }\n .d-sm-inline-block {\n display: inline-block !important;\n }\n .d-sm-block {\n display: block !important;\n }\n .d-sm-table {\n display: table !important;\n }\n .d-sm-table-cell {\n display: table-cell !important;\n }\n .d-sm-flex {\n display: flex !important;\n }\n .d-sm-inline-flex {\n display: inline-flex !important;\n }\n}\n\n@media (min-width: 768px) {\n .d-md-none {\n display: none !important;\n }\n .d-md-inline {\n display: inline !important;\n }\n .d-md-inline-block {\n display: inline-block !important;\n }\n .d-md-block {\n display: block !important;\n }\n .d-md-table {\n display: table !important;\n }\n .d-md-table-cell {\n display: table-cell !important;\n }\n .d-md-flex {\n display: flex !important;\n }\n .d-md-inline-flex {\n display: inline-flex !important;\n }\n}\n\n@media (min-width: 992px) {\n .d-lg-none {\n display: none !important;\n }\n .d-lg-inline {\n display: inline !important;\n }\n .d-lg-inline-block {\n display: inline-block !important;\n }\n .d-lg-block {\n display: block !important;\n }\n .d-lg-table {\n display: table !important;\n }\n .d-lg-table-cell {\n display: table-cell !important;\n }\n .d-lg-flex {\n display: flex !important;\n }\n .d-lg-inline-flex {\n display: inline-flex !important;\n }\n}\n\n@media (min-width: 1200px) {\n .d-xl-none {\n display: none !important;\n }\n .d-xl-inline {\n display: inline !important;\n }\n .d-xl-inline-block {\n display: inline-block !important;\n }\n .d-xl-block {\n display: block !important;\n }\n .d-xl-table {\n display: table !important;\n }\n .d-xl-table-cell {\n display: table-cell !important;\n }\n .d-xl-flex {\n display: flex !important;\n }\n .d-xl-inline-flex {\n display: inline-flex !important;\n }\n}\n\n.d-print-block {\n display: none !important;\n}\n\n@media print {\n .d-print-block {\n display: block !important;\n }\n}\n\n.d-print-inline {\n display: none !important;\n}\n\n@media print {\n .d-print-inline {\n display: inline !important;\n }\n}\n\n.d-print-inline-block {\n display: none !important;\n}\n\n@media print {\n .d-print-inline-block {\n display: inline-block !important;\n }\n}\n\n@media print {\n .d-print-none {\n display: none !important;\n }\n}\n\n.embed-responsive {\n position: relative;\n display: block;\n width: 100%;\n padding: 0;\n overflow: hidden;\n}\n\n.embed-responsive::before {\n display: block;\n content: \"\";\n}\n\n.embed-responsive .embed-responsive-item,\n.embed-responsive iframe,\n.embed-responsive embed,\n.embed-responsive object,\n.embed-responsive video {\n position: absolute;\n top: 0;\n bottom: 0;\n left: 0;\n width: 100%;\n height: 100%;\n border: 0;\n}\n\n.embed-responsive-21by9::before {\n padding-top: 42.857143%;\n}\n\n.embed-responsive-16by9::before {\n padding-top: 56.25%;\n}\n\n.embed-responsive-4by3::before {\n padding-top: 75%;\n}\n\n.embed-responsive-1by1::before {\n padding-top: 100%;\n}\n\n.flex-row {\n flex-direction: row !important;\n}\n\n.flex-column {\n flex-direction: column !important;\n}\n\n.flex-row-reverse {\n flex-direction: row-reverse !important;\n}\n\n.flex-column-reverse {\n flex-direction: column-reverse !important;\n}\n\n.flex-wrap {\n flex-wrap: wrap !important;\n}\n\n.flex-nowrap {\n flex-wrap: nowrap !important;\n}\n\n.flex-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n}\n\n.justify-content-start {\n justify-content: flex-start !important;\n}\n\n.justify-content-end {\n justify-content: flex-end !important;\n}\n\n.justify-content-center {\n justify-content: center !important;\n}\n\n.justify-content-between {\n justify-content: space-between !important;\n}\n\n.justify-content-around {\n justify-content: space-around !important;\n}\n\n.align-items-start {\n align-items: flex-start !important;\n}\n\n.align-items-end {\n align-items: flex-end !important;\n}\n\n.align-items-center {\n align-items: center !important;\n}\n\n.align-items-baseline {\n align-items: baseline !important;\n}\n\n.align-items-stretch {\n align-items: stretch !important;\n}\n\n.align-content-start {\n align-content: flex-start !important;\n}\n\n.align-content-end {\n align-content: flex-end !important;\n}\n\n.align-content-center {\n align-content: center !important;\n}\n\n.align-content-between {\n align-content: space-between !important;\n}\n\n.align-content-around {\n align-content: space-around !important;\n}\n\n.align-content-stretch {\n align-content: stretch !important;\n}\n\n.align-self-auto {\n align-self: auto !important;\n}\n\n.align-self-start {\n align-self: flex-start !important;\n}\n\n.align-self-end {\n align-self: flex-end !important;\n}\n\n.align-self-center {\n align-self: center !important;\n}\n\n.align-self-baseline {\n align-self: baseline !important;\n}\n\n.align-self-stretch {\n align-self: stretch !important;\n}\n\n@media (min-width: 576px) {\n .flex-sm-row {\n flex-direction: row !important;\n }\n .flex-sm-column {\n flex-direction: column !important;\n }\n .flex-sm-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-sm-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-sm-wrap {\n flex-wrap: wrap !important;\n }\n .flex-sm-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-sm-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-sm-start {\n justify-content: flex-start !important;\n }\n .justify-content-sm-end {\n justify-content: flex-end !important;\n }\n .justify-content-sm-center {\n justify-content: center !important;\n }\n .justify-content-sm-between {\n justify-content: space-between !important;\n }\n .justify-content-sm-around {\n justify-content: space-around !important;\n }\n .align-items-sm-start {\n align-items: flex-start !important;\n }\n .align-items-sm-end {\n align-items: flex-end !important;\n }\n .align-items-sm-center {\n align-items: center !important;\n }\n .align-items-sm-baseline {\n align-items: baseline !important;\n }\n .align-items-sm-stretch {\n align-items: stretch !important;\n }\n .align-content-sm-start {\n align-content: flex-start !important;\n }\n .align-content-sm-end {\n align-content: flex-end !important;\n }\n .align-content-sm-center {\n align-content: center !important;\n }\n .align-content-sm-between {\n align-content: space-between !important;\n }\n .align-content-sm-around {\n align-content: space-around !important;\n }\n .align-content-sm-stretch {\n align-content: stretch !important;\n }\n .align-self-sm-auto {\n align-self: auto !important;\n }\n .align-self-sm-start {\n align-self: flex-start !important;\n }\n .align-self-sm-end {\n align-self: flex-end !important;\n }\n .align-self-sm-center {\n align-self: center !important;\n }\n .align-self-sm-baseline {\n align-self: baseline !important;\n }\n .align-self-sm-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 768px) {\n .flex-md-row {\n flex-direction: row !important;\n }\n .flex-md-column {\n flex-direction: column !important;\n }\n .flex-md-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-md-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-md-wrap {\n flex-wrap: wrap !important;\n }\n .flex-md-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-md-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-md-start {\n justify-content: flex-start !important;\n }\n .justify-content-md-end {\n justify-content: flex-end !important;\n }\n .justify-content-md-center {\n justify-content: center !important;\n }\n .justify-content-md-between {\n justify-content: space-between !important;\n }\n .justify-content-md-around {\n justify-content: space-around !important;\n }\n .align-items-md-start {\n align-items: flex-start !important;\n }\n .align-items-md-end {\n align-items: flex-end !important;\n }\n .align-items-md-center {\n align-items: center !important;\n }\n .align-items-md-baseline {\n align-items: baseline !important;\n }\n .align-items-md-stretch {\n align-items: stretch !important;\n }\n .align-content-md-start {\n align-content: flex-start !important;\n }\n .align-content-md-end {\n align-content: flex-end !important;\n }\n .align-content-md-center {\n align-content: center !important;\n }\n .align-content-md-between {\n align-content: space-between !important;\n }\n .align-content-md-around {\n align-content: space-around !important;\n }\n .align-content-md-stretch {\n align-content: stretch !important;\n }\n .align-self-md-auto {\n align-self: auto !important;\n }\n .align-self-md-start {\n align-self: flex-start !important;\n }\n .align-self-md-end {\n align-self: flex-end !important;\n }\n .align-self-md-center {\n align-self: center !important;\n }\n .align-self-md-baseline {\n align-self: baseline !important;\n }\n .align-self-md-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 992px) {\n .flex-lg-row {\n flex-direction: row !important;\n }\n .flex-lg-column {\n flex-direction: column !important;\n }\n .flex-lg-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-lg-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-lg-wrap {\n flex-wrap: wrap !important;\n }\n .flex-lg-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-lg-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-lg-start {\n justify-content: flex-start !important;\n }\n .justify-content-lg-end {\n justify-content: flex-end !important;\n }\n .justify-content-lg-center {\n justify-content: center !important;\n }\n .justify-content-lg-between {\n justify-content: space-between !important;\n }\n .justify-content-lg-around {\n justify-content: space-around !important;\n }\n .align-items-lg-start {\n align-items: flex-start !important;\n }\n .align-items-lg-end {\n align-items: flex-end !important;\n }\n .align-items-lg-center {\n align-items: center !important;\n }\n .align-items-lg-baseline {\n align-items: baseline !important;\n }\n .align-items-lg-stretch {\n align-items: stretch !important;\n }\n .align-content-lg-start {\n align-content: flex-start !important;\n }\n .align-content-lg-end {\n align-content: flex-end !important;\n }\n .align-content-lg-center {\n align-content: center !important;\n }\n .align-content-lg-between {\n align-content: space-between !important;\n }\n .align-content-lg-around {\n align-content: space-around !important;\n }\n .align-content-lg-stretch {\n align-content: stretch !important;\n }\n .align-self-lg-auto {\n align-self: auto !important;\n }\n .align-self-lg-start {\n align-self: flex-start !important;\n }\n .align-self-lg-end {\n align-self: flex-end !important;\n }\n .align-self-lg-center {\n align-self: center !important;\n }\n .align-self-lg-baseline {\n align-self: baseline !important;\n }\n .align-self-lg-stretch {\n align-self: stretch !important;\n }\n}\n\n@media (min-width: 1200px) {\n .flex-xl-row {\n flex-direction: row !important;\n }\n .flex-xl-column {\n flex-direction: column !important;\n }\n .flex-xl-row-reverse {\n flex-direction: row-reverse !important;\n }\n .flex-xl-column-reverse {\n flex-direction: column-reverse !important;\n }\n .flex-xl-wrap {\n flex-wrap: wrap !important;\n }\n .flex-xl-nowrap {\n flex-wrap: nowrap !important;\n }\n .flex-xl-wrap-reverse {\n flex-wrap: wrap-reverse !important;\n }\n .justify-content-xl-start {\n justify-content: flex-start !important;\n }\n .justify-content-xl-end {\n justify-content: flex-end !important;\n }\n .justify-content-xl-center {\n justify-content: center !important;\n }\n .justify-content-xl-between {\n justify-content: space-between !important;\n }\n .justify-content-xl-around {\n justify-content: space-around !important;\n }\n .align-items-xl-start {\n align-items: flex-start !important;\n }\n .align-items-xl-end {\n align-items: flex-end !important;\n }\n .align-items-xl-center {\n align-items: center !important;\n }\n .align-items-xl-baseline {\n align-items: baseline !important;\n }\n .align-items-xl-stretch {\n align-items: stretch !important;\n }\n .align-content-xl-start {\n align-content: flex-start !important;\n }\n .align-content-xl-end {\n align-content: flex-end !important;\n }\n .align-content-xl-center {\n align-content: center !important;\n }\n .align-content-xl-between {\n align-content: space-between !important;\n }\n .align-content-xl-around {\n align-content: space-around !important;\n }\n .align-content-xl-stretch {\n align-content: stretch !important;\n }\n .align-self-xl-auto {\n align-self: auto !important;\n }\n .align-self-xl-start {\n align-self: flex-start !important;\n }\n .align-self-xl-end {\n align-self: flex-end !important;\n }\n .align-self-xl-center {\n align-self: center !important;\n }\n .align-self-xl-baseline {\n align-self: baseline !important;\n }\n .align-self-xl-stretch {\n align-self: stretch !important;\n }\n}\n\n.float-left {\n float: left !important;\n}\n\n.float-right {\n float: right !important;\n}\n\n.float-none {\n float: none !important;\n}\n\n@media (min-width: 576px) {\n .float-sm-left {\n float: left !important;\n }\n .float-sm-right {\n float: right !important;\n }\n .float-sm-none {\n float: none !important;\n }\n}\n\n@media (min-width: 768px) {\n .float-md-left {\n float: left !important;\n }\n .float-md-right {\n float: right !important;\n }\n .float-md-none {\n float: none !important;\n }\n}\n\n@media (min-width: 992px) {\n .float-lg-left {\n float: left !important;\n }\n .float-lg-right {\n float: right !important;\n }\n .float-lg-none {\n float: none !important;\n }\n}\n\n@media (min-width: 1200px) {\n .float-xl-left {\n float: left !important;\n }\n .float-xl-right {\n float: right !important;\n }\n .float-xl-none {\n float: none !important;\n }\n}\n\n.fixed-top {\n position: fixed;\n top: 0;\n right: 0;\n left: 0;\n z-index: 1030;\n}\n\n.fixed-bottom {\n position: fixed;\n right: 0;\n bottom: 0;\n left: 0;\n z-index: 1030;\n}\n\n@supports (position: sticky) {\n .sticky-top {\n position: sticky;\n top: 0;\n z-index: 1020;\n }\n}\n\n.sr-only {\n position: absolute;\n width: 1px;\n height: 1px;\n padding: 0;\n overflow: hidden;\n clip: rect(0, 0, 0, 0);\n white-space: nowrap;\n clip-path: inset(50%);\n border: 0;\n}\n\n.sr-only-focusable:active, .sr-only-focusable:focus {\n position: static;\n width: auto;\n height: auto;\n overflow: visible;\n clip: auto;\n white-space: normal;\n clip-path: none;\n}\n\n.w-25 {\n width: 25% !important;\n}\n\n.w-50 {\n width: 50% !important;\n}\n\n.w-75 {\n width: 75% !important;\n}\n\n.w-100 {\n width: 100% !important;\n}\n\n.h-25 {\n height: 25% !important;\n}\n\n.h-50 {\n height: 50% !important;\n}\n\n.h-75 {\n height: 75% !important;\n}\n\n.h-100 {\n height: 100% !important;\n}\n\n.mw-100 {\n max-width: 100% !important;\n}\n\n.mh-100 {\n max-height: 100% !important;\n}\n\n.m-0 {\n margin: 0 !important;\n}\n\n.mt-0 {\n margin-top: 0 !important;\n}\n\n.mr-0 {\n margin-right: 0 !important;\n}\n\n.mb-0 {\n margin-bottom: 0 !important;\n}\n\n.ml-0 {\n margin-left: 0 !important;\n}\n\n.mx-0 {\n margin-right: 0 !important;\n margin-left: 0 !important;\n}\n\n.my-0 {\n margin-top: 0 !important;\n margin-bottom: 0 !important;\n}\n\n.m-1 {\n margin: 0.25rem !important;\n}\n\n.mt-1 {\n margin-top: 0.25rem !important;\n}\n\n.mr-1 {\n margin-right: 0.25rem !important;\n}\n\n.mb-1 {\n margin-bottom: 0.25rem !important;\n}\n\n.ml-1 {\n margin-left: 0.25rem !important;\n}\n\n.mx-1 {\n margin-right: 0.25rem !important;\n margin-left: 0.25rem !important;\n}\n\n.my-1 {\n margin-top: 0.25rem !important;\n margin-bottom: 0.25rem !important;\n}\n\n.m-2 {\n margin: 0.5rem !important;\n}\n\n.mt-2 {\n margin-top: 0.5rem !important;\n}\n\n.mr-2 {\n margin-right: 0.5rem !important;\n}\n\n.mb-2 {\n margin-bottom: 0.5rem !important;\n}\n\n.ml-2 {\n margin-left: 0.5rem !important;\n}\n\n.mx-2 {\n margin-right: 0.5rem !important;\n margin-left: 0.5rem !important;\n}\n\n.my-2 {\n margin-top: 0.5rem !important;\n margin-bottom: 0.5rem !important;\n}\n\n.m-3 {\n margin: 1rem !important;\n}\n\n.mt-3 {\n margin-top: 1rem !important;\n}\n\n.mr-3 {\n margin-right: 1rem !important;\n}\n\n.mb-3 {\n margin-bottom: 1rem !important;\n}\n\n.ml-3 {\n margin-left: 1rem !important;\n}\n\n.mx-3 {\n margin-right: 1rem !important;\n margin-left: 1rem !important;\n}\n\n.my-3 {\n margin-top: 1rem !important;\n margin-bottom: 1rem !important;\n}\n\n.m-4 {\n margin: 1.5rem !important;\n}\n\n.mt-4 {\n margin-top: 1.5rem !important;\n}\n\n.mr-4 {\n margin-right: 1.5rem !important;\n}\n\n.mb-4 {\n margin-bottom: 1.5rem !important;\n}\n\n.ml-4 {\n margin-left: 1.5rem !important;\n}\n\n.mx-4 {\n margin-right: 1.5rem !important;\n margin-left: 1.5rem !important;\n}\n\n.my-4 {\n margin-top: 1.5rem !important;\n margin-bottom: 1.5rem !important;\n}\n\n.m-5 {\n margin: 3rem !important;\n}\n\n.mt-5 {\n margin-top: 3rem !important;\n}\n\n.mr-5 {\n margin-right: 3rem !important;\n}\n\n.mb-5 {\n margin-bottom: 3rem !important;\n}\n\n.ml-5 {\n margin-left: 3rem !important;\n}\n\n.mx-5 {\n margin-right: 3rem !important;\n margin-left: 3rem !important;\n}\n\n.my-5 {\n margin-top: 3rem !important;\n margin-bottom: 3rem !important;\n}\n\n.p-0 {\n padding: 0 !important;\n}\n\n.pt-0 {\n padding-top: 0 !important;\n}\n\n.pr-0 {\n padding-right: 0 !important;\n}\n\n.pb-0 {\n padding-bottom: 0 !important;\n}\n\n.pl-0 {\n padding-left: 0 !important;\n}\n\n.px-0 {\n padding-right: 0 !important;\n padding-left: 0 !important;\n}\n\n.py-0 {\n padding-top: 0 !important;\n padding-bottom: 0 !important;\n}\n\n.p-1 {\n padding: 0.25rem !important;\n}\n\n.pt-1 {\n padding-top: 0.25rem !important;\n}\n\n.pr-1 {\n padding-right: 0.25rem !important;\n}\n\n.pb-1 {\n padding-bottom: 0.25rem !important;\n}\n\n.pl-1 {\n padding-left: 0.25rem !important;\n}\n\n.px-1 {\n padding-right: 0.25rem !important;\n padding-left: 0.25rem !important;\n}\n\n.py-1 {\n padding-top: 0.25rem !important;\n padding-bottom: 0.25rem !important;\n}\n\n.p-2 {\n padding: 0.5rem !important;\n}\n\n.pt-2 {\n padding-top: 0.5rem !important;\n}\n\n.pr-2 {\n padding-right: 0.5rem !important;\n}\n\n.pb-2 {\n padding-bottom: 0.5rem !important;\n}\n\n.pl-2 {\n padding-left: 0.5rem !important;\n}\n\n.px-2 {\n padding-right: 0.5rem !important;\n padding-left: 0.5rem !important;\n}\n\n.py-2 {\n padding-top: 0.5rem !important;\n padding-bottom: 0.5rem !important;\n}\n\n.p-3 {\n padding: 1rem !important;\n}\n\n.pt-3 {\n padding-top: 1rem !important;\n}\n\n.pr-3 {\n padding-right: 1rem !important;\n}\n\n.pb-3 {\n padding-bottom: 1rem !important;\n}\n\n.pl-3 {\n padding-left: 1rem !important;\n}\n\n.px-3 {\n padding-right: 1rem !important;\n padding-left: 1rem !important;\n}\n\n.py-3 {\n padding-top: 1rem !important;\n padding-bottom: 1rem !important;\n}\n\n.p-4 {\n padding: 1.5rem !important;\n}\n\n.pt-4 {\n padding-top: 1.5rem !important;\n}\n\n.pr-4 {\n padding-right: 1.5rem !important;\n}\n\n.pb-4 {\n padding-bottom: 1.5rem !important;\n}\n\n.pl-4 {\n padding-left: 1.5rem !important;\n}\n\n.px-4 {\n padding-right: 1.5rem !important;\n padding-left: 1.5rem !important;\n}\n\n.py-4 {\n padding-top: 1.5rem !important;\n padding-bottom: 1.5rem !important;\n}\n\n.p-5 {\n padding: 3rem !important;\n}\n\n.pt-5 {\n padding-top: 3rem !important;\n}\n\n.pr-5 {\n padding-right: 3rem !important;\n}\n\n.pb-5 {\n padding-bottom: 3rem !important;\n}\n\n.pl-5 {\n padding-left: 3rem !important;\n}\n\n.px-5 {\n padding-right: 3rem !important;\n padding-left: 3rem !important;\n}\n\n.py-5 {\n padding-top: 3rem !important;\n padding-bottom: 3rem !important;\n}\n\n.m-auto {\n margin: auto !important;\n}\n\n.mt-auto {\n margin-top: auto !important;\n}\n\n.mr-auto {\n margin-right: auto !important;\n}\n\n.mb-auto {\n margin-bottom: auto !important;\n}\n\n.ml-auto {\n margin-left: auto !important;\n}\n\n.mx-auto {\n margin-right: auto !important;\n margin-left: auto !important;\n}\n\n.my-auto {\n margin-top: auto !important;\n margin-bottom: auto !important;\n}\n\n@media (min-width: 576px) {\n .m-sm-0 {\n margin: 0 !important;\n }\n .mt-sm-0 {\n margin-top: 0 !important;\n }\n .mr-sm-0 {\n margin-right: 0 !important;\n }\n .mb-sm-0 {\n margin-bottom: 0 !important;\n }\n .ml-sm-0 {\n margin-left: 0 !important;\n }\n .mx-sm-0 {\n margin-right: 0 !important;\n margin-left: 0 !important;\n }\n .my-sm-0 {\n margin-top: 0 !important;\n margin-bottom: 0 !important;\n }\n .m-sm-1 {\n margin: 0.25rem !important;\n }\n .mt-sm-1 {\n margin-top: 0.25rem !important;\n }\n .mr-sm-1 {\n margin-right: 0.25rem !important;\n }\n .mb-sm-1 {\n margin-bottom: 0.25rem !important;\n }\n .ml-sm-1 {\n margin-left: 0.25rem !important;\n }\n .mx-sm-1 {\n margin-right: 0.25rem !important;\n margin-left: 0.25rem !important;\n }\n .my-sm-1 {\n margin-top: 0.25rem !important;\n margin-bottom: 0.25rem !important;\n }\n .m-sm-2 {\n margin: 0.5rem !important;\n }\n .mt-sm-2 {\n margin-top: 0.5rem !important;\n }\n .mr-sm-2 {\n margin-right: 0.5rem !important;\n }\n .mb-sm-2 {\n margin-bottom: 0.5rem !important;\n }\n .ml-sm-2 {\n margin-left: 0.5rem !important;\n }\n .mx-sm-2 {\n margin-right: 0.5rem !important;\n margin-left: 0.5rem !important;\n }\n .my-sm-2 {\n margin-top: 0.5rem !important;\n margin-bottom: 0.5rem !important;\n }\n .m-sm-3 {\n margin: 1rem !important;\n }\n .mt-sm-3 {\n margin-top: 1rem !important;\n }\n .mr-sm-3 {\n margin-right: 1rem !important;\n }\n .mb-sm-3 {\n margin-bottom: 1rem !important;\n }\n .ml-sm-3 {\n margin-left: 1rem !important;\n }\n .mx-sm-3 {\n margin-right: 1rem !important;\n margin-left: 1rem !important;\n }\n .my-sm-3 {\n margin-top: 1rem !important;\n margin-bottom: 1rem !important;\n }\n .m-sm-4 {\n margin: 1.5rem !important;\n }\n .mt-sm-4 {\n margin-top: 1.5rem !important;\n }\n .mr-sm-4 {\n margin-right: 1.5rem !important;\n }\n .mb-sm-4 {\n margin-bottom: 1.5rem !important;\n }\n .ml-sm-4 {\n margin-left: 1.5rem !important;\n }\n .mx-sm-4 {\n margin-right: 1.5rem !important;\n margin-left: 1.5rem !important;\n }\n .my-sm-4 {\n margin-top: 1.5rem !important;\n margin-bottom: 1.5rem !important;\n }\n .m-sm-5 {\n margin: 3rem !important;\n }\n .mt-sm-5 {\n margin-top: 3rem !important;\n }\n .mr-sm-5 {\n margin-right: 3rem !important;\n }\n .mb-sm-5 {\n margin-bottom: 3rem !important;\n }\n .ml-sm-5 {\n margin-left: 3rem !important;\n }\n .mx-sm-5 {\n margin-right: 3rem !important;\n margin-left: 3rem !important;\n }\n .my-sm-5 {\n margin-top: 3rem !important;\n margin-bottom: 3rem !important;\n }\n .p-sm-0 {\n padding: 0 !important;\n }\n .pt-sm-0 {\n padding-top: 0 !important;\n }\n .pr-sm-0 {\n padding-right: 0 !important;\n }\n .pb-sm-0 {\n padding-bottom: 0 !important;\n }\n .pl-sm-0 {\n padding-left: 0 !important;\n }\n .px-sm-0 {\n padding-right: 0 !important;\n padding-left: 0 !important;\n }\n .py-sm-0 {\n padding-top: 0 !important;\n padding-bottom: 0 !important;\n }\n .p-sm-1 {\n padding: 0.25rem !important;\n }\n .pt-sm-1 {\n padding-top: 0.25rem !important;\n }\n .pr-sm-1 {\n padding-right: 0.25rem !important;\n }\n .pb-sm-1 {\n padding-bottom: 0.25rem !important;\n }\n .pl-sm-1 {\n padding-left: 0.25rem !important;\n }\n .px-sm-1 {\n padding-right: 0.25rem !important;\n padding-left: 0.25rem !important;\n }\n .py-sm-1 {\n padding-top: 0.25rem !important;\n padding-bottom: 0.25rem !important;\n }\n .p-sm-2 {\n padding: 0.5rem !important;\n }\n .pt-sm-2 {\n padding-top: 0.5rem !important;\n }\n .pr-sm-2 {\n padding-right: 0.5rem !important;\n }\n .pb-sm-2 {\n padding-bottom: 0.5rem !important;\n }\n .pl-sm-2 {\n padding-left: 0.5rem !important;\n }\n .px-sm-2 {\n padding-right: 0.5rem !important;\n padding-left: 0.5rem !important;\n }\n .py-sm-2 {\n padding-top: 0.5rem !important;\n padding-bottom: 0.5rem !important;\n }\n .p-sm-3 {\n padding: 1rem !important;\n }\n .pt-sm-3 {\n padding-top: 1rem !important;\n }\n .pr-sm-3 {\n padding-right: 1rem !important;\n }\n .pb-sm-3 {\n padding-bottom: 1rem !important;\n }\n .pl-sm-3 {\n padding-left: 1rem !important;\n }\n .px-sm-3 {\n padding-right: 1rem !important;\n padding-left: 1rem !important;\n }\n .py-sm-3 {\n padding-top: 1rem !important;\n padding-bottom: 1rem !important;\n }\n .p-sm-4 {\n padding: 1.5rem !important;\n }\n .pt-sm-4 {\n padding-top: 1.5rem !important;\n }\n .pr-sm-4 {\n padding-right: 1.5rem !important;\n }\n .pb-sm-4 {\n padding-bottom: 1.5rem !important;\n }\n .pl-sm-4 {\n padding-left: 1.5rem !important;\n }\n .px-sm-4 {\n padding-right: 1.5rem !important;\n padding-left: 1.5rem !important;\n }\n .py-sm-4 {\n padding-top: 1.5rem !important;\n padding-bottom: 1.5rem !important;\n }\n .p-sm-5 {\n padding: 3rem !important;\n }\n .pt-sm-5 {\n padding-top: 3rem !important;\n }\n .pr-sm-5 {\n padding-right: 3rem !important;\n }\n .pb-sm-5 {\n padding-bottom: 3rem !important;\n }\n .pl-sm-5 {\n padding-left: 3rem !important;\n }\n .px-sm-5 {\n padding-right: 3rem !important;\n padding-left: 3rem !important;\n }\n .py-sm-5 {\n padding-top: 3rem !important;\n padding-bottom: 3rem !important;\n }\n .m-sm-auto {\n margin: auto !important;\n }\n .mt-sm-auto {\n margin-top: auto !important;\n }\n .mr-sm-auto {\n margin-right: auto !important;\n }\n .mb-sm-auto {\n margin-bottom: auto !important;\n }\n .ml-sm-auto {\n margin-left: auto !important;\n }\n .mx-sm-auto {\n margin-right: auto !important;\n margin-left: auto !important;\n }\n .my-sm-auto {\n margin-top: auto !important;\n margin-bottom: auto !important;\n }\n}\n\n@media (min-width: 768px) {\n .m-md-0 {\n margin: 0 !important;\n }\n .mt-md-0 {\n margin-top: 0 !important;\n }\n .mr-md-0 {\n margin-right: 0 !important;\n }\n .mb-md-0 {\n margin-bottom: 0 !important;\n }\n .ml-md-0 {\n margin-left: 0 !important;\n }\n .mx-md-0 {\n margin-right: 0 !important;\n margin-left: 0 !important;\n }\n .my-md-0 {\n margin-top: 0 !important;\n margin-bottom: 0 !important;\n }\n .m-md-1 {\n margin: 0.25rem !important;\n }\n .mt-md-1 {\n margin-top: 0.25rem !important;\n }\n .mr-md-1 {\n margin-right: 0.25rem !important;\n }\n .mb-md-1 {\n margin-bottom: 0.25rem !important;\n }\n .ml-md-1 {\n margin-left: 0.25rem !important;\n }\n .mx-md-1 {\n margin-right: 0.25rem !important;\n margin-left: 0.25rem !important;\n }\n .my-md-1 {\n margin-top: 0.25rem !important;\n margin-bottom: 0.25rem !important;\n }\n .m-md-2 {\n margin: 0.5rem !important;\n }\n .mt-md-2 {\n margin-top: 0.5rem !important;\n }\n .mr-md-2 {\n margin-right: 0.5rem !important;\n }\n .mb-md-2 {\n margin-bottom: 0.5rem !important;\n }\n .ml-md-2 {\n margin-left: 0.5rem !important;\n }\n .mx-md-2 {\n margin-right: 0.5rem !important;\n margin-left: 0.5rem !important;\n }\n .my-md-2 {\n margin-top: 0.5rem !important;\n margin-bottom: 0.5rem !important;\n }\n .m-md-3 {\n margin: 1rem !important;\n }\n .mt-md-3 {\n margin-top: 1rem !important;\n }\n .mr-md-3 {\n margin-right: 1rem !important;\n }\n .mb-md-3 {\n margin-bottom: 1rem !important;\n }\n .ml-md-3 {\n margin-left: 1rem !important;\n }\n .mx-md-3 {\n margin-right: 1rem !important;\n margin-left: 1rem !important;\n }\n .my-md-3 {\n margin-top: 1rem !important;\n margin-bottom: 1rem !important;\n }\n .m-md-4 {\n margin: 1.5rem !important;\n }\n .mt-md-4 {\n margin-top: 1.5rem !important;\n }\n .mr-md-4 {\n margin-right: 1.5rem !important;\n }\n .mb-md-4 {\n margin-bottom: 1.5rem !important;\n }\n .ml-md-4 {\n margin-left: 1.5rem !important;\n }\n .mx-md-4 {\n margin-right: 1.5rem !important;\n margin-left: 1.5rem !important;\n }\n .my-md-4 {\n margin-top: 1.5rem !important;\n margin-bottom: 1.5rem !important;\n }\n .m-md-5 {\n margin: 3rem !important;\n }\n .mt-md-5 {\n margin-top: 3rem !important;\n }\n .mr-md-5 {\n margin-right: 3rem !important;\n }\n .mb-md-5 {\n margin-bottom: 3rem !important;\n }\n .ml-md-5 {\n margin-left: 3rem !important;\n }\n .mx-md-5 {\n margin-right: 3rem !important;\n margin-left: 3rem !important;\n }\n .my-md-5 {\n margin-top: 3rem !important;\n margin-bottom: 3rem !important;\n }\n .p-md-0 {\n padding: 0 !important;\n }\n .pt-md-0 {\n padding-top: 0 !important;\n }\n .pr-md-0 {\n padding-right: 0 !important;\n }\n .pb-md-0 {\n padding-bottom: 0 !important;\n }\n .pl-md-0 {\n padding-left: 0 !important;\n }\n .px-md-0 {\n padding-right: 0 !important;\n padding-left: 0 !important;\n }\n .py-md-0 {\n padding-top: 0 !important;\n padding-bottom: 0 !important;\n }\n .p-md-1 {\n padding: 0.25rem !important;\n }\n .pt-md-1 {\n padding-top: 0.25rem !important;\n }\n .pr-md-1 {\n padding-right: 0.25rem !important;\n }\n .pb-md-1 {\n padding-bottom: 0.25rem !important;\n }\n .pl-md-1 {\n padding-left: 0.25rem !important;\n }\n .px-md-1 {\n padding-right: 0.25rem !important;\n padding-left: 0.25rem !important;\n }\n .py-md-1 {\n padding-top: 0.25rem !important;\n padding-bottom: 0.25rem !important;\n }\n .p-md-2 {\n padding: 0.5rem !important;\n }\n .pt-md-2 {\n padding-top: 0.5rem !important;\n }\n .pr-md-2 {\n padding-right: 0.5rem !important;\n }\n .pb-md-2 {\n padding-bottom: 0.5rem !important;\n }\n .pl-md-2 {\n padding-left: 0.5rem !important;\n }\n .px-md-2 {\n padding-right: 0.5rem !important;\n padding-left: 0.5rem !important;\n }\n .py-md-2 {\n padding-top: 0.5rem !important;\n padding-bottom: 0.5rem !important;\n }\n .p-md-3 {\n padding: 1rem !important;\n }\n .pt-md-3 {\n padding-top: 1rem !important;\n }\n .pr-md-3 {\n padding-right: 1rem !important;\n }\n .pb-md-3 {\n padding-bottom: 1rem !important;\n }\n .pl-md-3 {\n padding-left: 1rem !important;\n }\n .px-md-3 {\n padding-right: 1rem !important;\n padding-left: 1rem !important;\n }\n .py-md-3 {\n padding-top: 1rem !important;\n padding-bottom: 1rem !important;\n }\n .p-md-4 {\n padding: 1.5rem !important;\n }\n .pt-md-4 {\n padding-top: 1.5rem !important;\n }\n .pr-md-4 {\n padding-right: 1.5rem !important;\n }\n .pb-md-4 {\n padding-bottom: 1.5rem !important;\n }\n .pl-md-4 {\n padding-left: 1.5rem !important;\n }\n .px-md-4 {\n padding-right: 1.5rem !important;\n padding-left: 1.5rem !important;\n }\n .py-md-4 {\n padding-top: 1.5rem !important;\n padding-bottom: 1.5rem !important;\n }\n .p-md-5 {\n padding: 3rem !important;\n }\n .pt-md-5 {\n padding-top: 3rem !important;\n }\n .pr-md-5 {\n padding-right: 3rem !important;\n }\n .pb-md-5 {\n padding-bottom: 3rem !important;\n }\n .pl-md-5 {\n padding-left: 3rem !important;\n }\n .px-md-5 {\n padding-right: 3rem !important;\n padding-left: 3rem !important;\n }\n .py-md-5 {\n padding-top: 3rem !important;\n padding-bottom: 3rem !important;\n }\n .m-md-auto {\n margin: auto !important;\n }\n .mt-md-auto {\n margin-top: auto !important;\n }\n .mr-md-auto {\n margin-right: auto !important;\n }\n .mb-md-auto {\n margin-bottom: auto !important;\n }\n .ml-md-auto {\n margin-left: auto !important;\n }\n .mx-md-auto {\n margin-right: auto !important;\n margin-left: auto !important;\n }\n .my-md-auto {\n margin-top: auto !important;\n margin-bottom: auto !important;\n }\n}\n\n@media (min-width: 992px) {\n .m-lg-0 {\n margin: 0 !important;\n }\n .mt-lg-0 {\n margin-top: 0 !important;\n }\n .mr-lg-0 {\n margin-right: 0 !important;\n }\n .mb-lg-0 {\n margin-bottom: 0 !important;\n }\n .ml-lg-0 {\n margin-left: 0 !important;\n }\n .mx-lg-0 {\n margin-right: 0 !important;\n margin-left: 0 !important;\n }\n .my-lg-0 {\n margin-top: 0 !important;\n margin-bottom: 0 !important;\n }\n .m-lg-1 {\n margin: 0.25rem !important;\n }\n .mt-lg-1 {\n margin-top: 0.25rem !important;\n }\n .mr-lg-1 {\n margin-right: 0.25rem !important;\n }\n .mb-lg-1 {\n margin-bottom: 0.25rem !important;\n }\n .ml-lg-1 {\n margin-left: 0.25rem !important;\n }\n .mx-lg-1 {\n margin-right: 0.25rem !important;\n margin-left: 0.25rem !important;\n }\n .my-lg-1 {\n margin-top: 0.25rem !important;\n margin-bottom: 0.25rem !important;\n }\n .m-lg-2 {\n margin: 0.5rem !important;\n }\n .mt-lg-2 {\n margin-top: 0.5rem !important;\n }\n .mr-lg-2 {\n margin-right: 0.5rem !important;\n }\n .mb-lg-2 {\n margin-bottom: 0.5rem !important;\n }\n .ml-lg-2 {\n margin-left: 0.5rem !important;\n }\n .mx-lg-2 {\n margin-right: 0.5rem !important;\n margin-left: 0.5rem !important;\n }\n .my-lg-2 {\n margin-top: 0.5rem !important;\n margin-bottom: 0.5rem !important;\n }\n .m-lg-3 {\n margin: 1rem !important;\n }\n .mt-lg-3 {\n margin-top: 1rem !important;\n }\n .mr-lg-3 {\n margin-right: 1rem !important;\n }\n .mb-lg-3 {\n margin-bottom: 1rem !important;\n }\n .ml-lg-3 {\n margin-left: 1rem !important;\n }\n .mx-lg-3 {\n margin-right: 1rem !important;\n margin-left: 1rem !important;\n }\n .my-lg-3 {\n margin-top: 1rem !important;\n margin-bottom: 1rem !important;\n }\n .m-lg-4 {\n margin: 1.5rem !important;\n }\n .mt-lg-4 {\n margin-top: 1.5rem !important;\n }\n .mr-lg-4 {\n margin-right: 1.5rem !important;\n }\n .mb-lg-4 {\n margin-bottom: 1.5rem !important;\n }\n .ml-lg-4 {\n margin-left: 1.5rem !important;\n }\n .mx-lg-4 {\n margin-right: 1.5rem !important;\n margin-left: 1.5rem !important;\n }\n .my-lg-4 {\n margin-top: 1.5rem !important;\n margin-bottom: 1.5rem !important;\n }\n .m-lg-5 {\n margin: 3rem !important;\n }\n .mt-lg-5 {\n margin-top: 3rem !important;\n }\n .mr-lg-5 {\n margin-right: 3rem !important;\n }\n .mb-lg-5 {\n margin-bottom: 3rem !important;\n }\n .ml-lg-5 {\n margin-left: 3rem !important;\n }\n .mx-lg-5 {\n margin-right: 3rem !important;\n margin-left: 3rem !important;\n }\n .my-lg-5 {\n margin-top: 3rem !important;\n margin-bottom: 3rem !important;\n }\n .p-lg-0 {\n padding: 0 !important;\n }\n .pt-lg-0 {\n padding-top: 0 !important;\n }\n .pr-lg-0 {\n padding-right: 0 !important;\n }\n .pb-lg-0 {\n padding-bottom: 0 !important;\n }\n .pl-lg-0 {\n padding-left: 0 !important;\n }\n .px-lg-0 {\n padding-right: 0 !important;\n padding-left: 0 !important;\n }\n .py-lg-0 {\n padding-top: 0 !important;\n padding-bottom: 0 !important;\n }\n .p-lg-1 {\n padding: 0.25rem !important;\n }\n .pt-lg-1 {\n padding-top: 0.25rem !important;\n }\n .pr-lg-1 {\n padding-right: 0.25rem !important;\n }\n .pb-lg-1 {\n padding-bottom: 0.25rem !important;\n }\n .pl-lg-1 {\n padding-left: 0.25rem !important;\n }\n .px-lg-1 {\n padding-right: 0.25rem !important;\n padding-left: 0.25rem !important;\n }\n .py-lg-1 {\n padding-top: 0.25rem !important;\n padding-bottom: 0.25rem !important;\n }\n .p-lg-2 {\n padding: 0.5rem !important;\n }\n .pt-lg-2 {\n padding-top: 0.5rem !important;\n }\n .pr-lg-2 {\n padding-right: 0.5rem !important;\n }\n .pb-lg-2 {\n padding-bottom: 0.5rem !important;\n }\n .pl-lg-2 {\n padding-left: 0.5rem !important;\n }\n .px-lg-2 {\n padding-right: 0.5rem !important;\n padding-left: 0.5rem !important;\n }\n .py-lg-2 {\n padding-top: 0.5rem !important;\n padding-bottom: 0.5rem !important;\n }\n .p-lg-3 {\n padding: 1rem !important;\n }\n .pt-lg-3 {\n padding-top: 1rem !important;\n }\n .pr-lg-3 {\n padding-right: 1rem !important;\n }\n .pb-lg-3 {\n padding-bottom: 1rem !important;\n }\n .pl-lg-3 {\n padding-left: 1rem !important;\n }\n .px-lg-3 {\n padding-right: 1rem !important;\n padding-left: 1rem !important;\n }\n .py-lg-3 {\n padding-top: 1rem !important;\n padding-bottom: 1rem !important;\n }\n .p-lg-4 {\n padding: 1.5rem !important;\n }\n .pt-lg-4 {\n padding-top: 1.5rem !important;\n }\n .pr-lg-4 {\n padding-right: 1.5rem !important;\n }\n .pb-lg-4 {\n padding-bottom: 1.5rem !important;\n }\n .pl-lg-4 {\n padding-left: 1.5rem !important;\n }\n .px-lg-4 {\n padding-right: 1.5rem !important;\n padding-left: 1.5rem !important;\n }\n .py-lg-4 {\n padding-top: 1.5rem !important;\n padding-bottom: 1.5rem !important;\n }\n .p-lg-5 {\n padding: 3rem !important;\n }\n .pt-lg-5 {\n padding-top: 3rem !important;\n }\n .pr-lg-5 {\n padding-right: 3rem !important;\n }\n .pb-lg-5 {\n padding-bottom: 3rem !important;\n }\n .pl-lg-5 {\n padding-left: 3rem !important;\n }\n .px-lg-5 {\n padding-right: 3rem !important;\n padding-left: 3rem !important;\n }\n .py-lg-5 {\n padding-top: 3rem !important;\n padding-bottom: 3rem !important;\n }\n .m-lg-auto {\n margin: auto !important;\n }\n .mt-lg-auto {\n margin-top: auto !important;\n }\n .mr-lg-auto {\n margin-right: auto !important;\n }\n .mb-lg-auto {\n margin-bottom: auto !important;\n }\n .ml-lg-auto {\n margin-left: auto !important;\n }\n .mx-lg-auto {\n margin-right: auto !important;\n margin-left: auto !important;\n }\n .my-lg-auto {\n margin-top: auto !important;\n margin-bottom: auto !important;\n }\n}\n\n@media (min-width: 1200px) {\n .m-xl-0 {\n margin: 0 !important;\n }\n .mt-xl-0 {\n margin-top: 0 !important;\n }\n .mr-xl-0 {\n margin-right: 0 !important;\n }\n .mb-xl-0 {\n margin-bottom: 0 !important;\n }\n .ml-xl-0 {\n margin-left: 0 !important;\n }\n .mx-xl-0 {\n margin-right: 0 !important;\n margin-left: 0 !important;\n }\n .my-xl-0 {\n margin-top: 0 !important;\n margin-bottom: 0 !important;\n }\n .m-xl-1 {\n margin: 0.25rem !important;\n }\n .mt-xl-1 {\n margin-top: 0.25rem !important;\n }\n .mr-xl-1 {\n margin-right: 0.25rem !important;\n }\n .mb-xl-1 {\n margin-bottom: 0.25rem !important;\n }\n .ml-xl-1 {\n margin-left: 0.25rem !important;\n }\n .mx-xl-1 {\n margin-right: 0.25rem !important;\n margin-left: 0.25rem !important;\n }\n .my-xl-1 {\n margin-top: 0.25rem !important;\n margin-bottom: 0.25rem !important;\n }\n .m-xl-2 {\n margin: 0.5rem !important;\n }\n .mt-xl-2 {\n margin-top: 0.5rem !important;\n }\n .mr-xl-2 {\n margin-right: 0.5rem !important;\n }\n .mb-xl-2 {\n margin-bottom: 0.5rem !important;\n }\n .ml-xl-2 {\n margin-left: 0.5rem !important;\n }\n .mx-xl-2 {\n margin-right: 0.5rem !important;\n margin-left: 0.5rem !important;\n }\n .my-xl-2 {\n margin-top: 0.5rem !important;\n margin-bottom: 0.5rem !important;\n }\n .m-xl-3 {\n margin: 1rem !important;\n }\n .mt-xl-3 {\n margin-top: 1rem !important;\n }\n .mr-xl-3 {\n margin-right: 1rem !important;\n }\n .mb-xl-3 {\n margin-bottom: 1rem !important;\n }\n .ml-xl-3 {\n margin-left: 1rem !important;\n }\n .mx-xl-3 {\n margin-right: 1rem !important;\n margin-left: 1rem !important;\n }\n .my-xl-3 {\n margin-top: 1rem !important;\n margin-bottom: 1rem !important;\n }\n .m-xl-4 {\n margin: 1.5rem !important;\n }\n .mt-xl-4 {\n margin-top: 1.5rem !important;\n }\n .mr-xl-4 {\n margin-right: 1.5rem !important;\n }\n .mb-xl-4 {\n margin-bottom: 1.5rem !important;\n }\n .ml-xl-4 {\n margin-left: 1.5rem !important;\n }\n .mx-xl-4 {\n margin-right: 1.5rem !important;\n margin-left: 1.5rem !important;\n }\n .my-xl-4 {\n margin-top: 1.5rem !important;\n margin-bottom: 1.5rem !important;\n }\n .m-xl-5 {\n margin: 3rem !important;\n }\n .mt-xl-5 {\n margin-top: 3rem !important;\n }\n .mr-xl-5 {\n margin-right: 3rem !important;\n }\n .mb-xl-5 {\n margin-bottom: 3rem !important;\n }\n .ml-xl-5 {\n margin-left: 3rem !important;\n }\n .mx-xl-5 {\n margin-right: 3rem !important;\n margin-left: 3rem !important;\n }\n .my-xl-5 {\n margin-top: 3rem !important;\n margin-bottom: 3rem !important;\n }\n .p-xl-0 {\n padding: 0 !important;\n }\n .pt-xl-0 {\n padding-top: 0 !important;\n }\n .pr-xl-0 {\n padding-right: 0 !important;\n }\n .pb-xl-0 {\n padding-bottom: 0 !important;\n }\n .pl-xl-0 {\n padding-left: 0 !important;\n }\n .px-xl-0 {\n padding-right: 0 !important;\n padding-left: 0 !important;\n }\n .py-xl-0 {\n padding-top: 0 !important;\n padding-bottom: 0 !important;\n }\n .p-xl-1 {\n padding: 0.25rem !important;\n }\n .pt-xl-1 {\n padding-top: 0.25rem !important;\n }\n .pr-xl-1 {\n padding-right: 0.25rem !important;\n }\n .pb-xl-1 {\n padding-bottom: 0.25rem !important;\n }\n .pl-xl-1 {\n padding-left: 0.25rem !important;\n }\n .px-xl-1 {\n padding-right: 0.25rem !important;\n padding-left: 0.25rem !important;\n }\n .py-xl-1 {\n padding-top: 0.25rem !important;\n padding-bottom: 0.25rem !important;\n }\n .p-xl-2 {\n padding: 0.5rem !important;\n }\n .pt-xl-2 {\n padding-top: 0.5rem !important;\n }\n .pr-xl-2 {\n padding-right: 0.5rem !important;\n }\n .pb-xl-2 {\n padding-bottom: 0.5rem !important;\n }\n .pl-xl-2 {\n padding-left: 0.5rem !important;\n }\n .px-xl-2 {\n padding-right: 0.5rem !important;\n padding-left: 0.5rem !important;\n }\n .py-xl-2 {\n padding-top: 0.5rem !important;\n padding-bottom: 0.5rem !important;\n }\n .p-xl-3 {\n padding: 1rem !important;\n }\n .pt-xl-3 {\n padding-top: 1rem !important;\n }\n .pr-xl-3 {\n padding-right: 1rem !important;\n }\n .pb-xl-3 {\n padding-bottom: 1rem !important;\n }\n .pl-xl-3 {\n padding-left: 1rem !important;\n }\n .px-xl-3 {\n padding-right: 1rem !important;\n padding-left: 1rem !important;\n }\n .py-xl-3 {\n padding-top: 1rem !important;\n padding-bottom: 1rem !important;\n }\n .p-xl-4 {\n padding: 1.5rem !important;\n }\n .pt-xl-4 {\n padding-top: 1.5rem !important;\n }\n .pr-xl-4 {\n padding-right: 1.5rem !important;\n }\n .pb-xl-4 {\n padding-bottom: 1.5rem !important;\n }\n .pl-xl-4 {\n padding-left: 1.5rem !important;\n }\n .px-xl-4 {\n padding-right: 1.5rem !important;\n padding-left: 1.5rem !important;\n }\n .py-xl-4 {\n padding-top: 1.5rem !important;\n padding-bottom: 1.5rem !important;\n }\n .p-xl-5 {\n padding: 3rem !important;\n }\n .pt-xl-5 {\n padding-top: 3rem !important;\n }\n .pr-xl-5 {\n padding-right: 3rem !important;\n }\n .pb-xl-5 {\n padding-bottom: 3rem !important;\n }\n .pl-xl-5 {\n padding-left: 3rem !important;\n }\n .px-xl-5 {\n padding-right: 3rem !important;\n padding-left: 3rem !important;\n }\n .py-xl-5 {\n padding-top: 3rem !important;\n padding-bottom: 3rem !important;\n }\n .m-xl-auto {\n margin: auto !important;\n }\n .mt-xl-auto {\n margin-top: auto !important;\n }\n .mr-xl-auto {\n margin-right: auto !important;\n }\n .mb-xl-auto {\n margin-bottom: auto !important;\n }\n .ml-xl-auto {\n margin-left: auto !important;\n }\n .mx-xl-auto {\n margin-right: auto !important;\n margin-left: auto !important;\n }\n .my-xl-auto {\n margin-top: auto !important;\n margin-bottom: auto !important;\n }\n}\n\n.text-justify {\n text-align: justify !important;\n}\n\n.text-nowrap {\n white-space: nowrap !important;\n}\n\n.text-truncate {\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n\n.text-left {\n text-align: left !important;\n}\n\n.text-right {\n text-align: right !important;\n}\n\n.text-center {\n text-align: center !important;\n}\n\n@media (min-width: 576px) {\n .text-sm-left {\n text-align: left !important;\n }\n .text-sm-right {\n text-align: right !important;\n }\n .text-sm-center {\n text-align: center !important;\n }\n}\n\n@media (min-width: 768px) {\n .text-md-left {\n text-align: left !important;\n }\n .text-md-right {\n text-align: right !important;\n }\n .text-md-center {\n text-align: center !important;\n }\n}\n\n@media (min-width: 992px) {\n .text-lg-left {\n text-align: left !important;\n }\n .text-lg-right {\n text-align: right !important;\n }\n .text-lg-center {\n text-align: center !important;\n }\n}\n\n@media (min-width: 1200px) {\n .text-xl-left {\n text-align: left !important;\n }\n .text-xl-right {\n text-align: right !important;\n }\n .text-xl-center {\n text-align: center !important;\n }\n}\n\n.text-lowercase {\n text-transform: lowercase !important;\n}\n\n.text-uppercase {\n text-transform: uppercase !important;\n}\n\n.text-capitalize {\n text-transform: capitalize !important;\n}\n\n.font-weight-normal {\n font-weight: normal;\n}\n\n.font-weight-bold {\n font-weight: bold;\n}\n\n.font-italic {\n font-style: italic;\n}\n\n.text-white {\n color: #fff !important;\n}\n\n.text-primary {\n color: #007bff !important;\n}\n\na.text-primary:focus, a.text-primary:hover {\n color: #0062cc !important;\n}\n\n.text-secondary {\n color: #868e96 !important;\n}\n\na.text-secondary:focus, a.text-secondary:hover {\n color: #6c757d !important;\n}\n\n.text-success {\n color: #28a745 !important;\n}\n\na.text-success:focus, a.text-success:hover {\n color: #1e7e34 !important;\n}\n\n.text-info {\n color: #17a2b8 !important;\n}\n\na.text-info:focus, a.text-info:hover {\n color: #117a8b !important;\n}\n\n.text-warning {\n color: #ffc107 !important;\n}\n\na.text-warning:focus, a.text-warning:hover {\n color: #d39e00 !important;\n}\n\n.text-danger {\n color: #dc3545 !important;\n}\n\na.text-danger:focus, a.text-danger:hover {\n color: #bd2130 !important;\n}\n\n.text-light {\n color: #f8f9fa !important;\n}\n\na.text-light:focus, a.text-light:hover {\n color: #dae0e5 !important;\n}\n\n.text-dark {\n color: #343a40 !important;\n}\n\na.text-dark:focus, a.text-dark:hover {\n color: #1d2124 !important;\n}\n\n.text-muted {\n color: #868e96 !important;\n}\n\n.text-hide {\n font: 0/0 a;\n color: transparent;\n text-shadow: none;\n background-color: transparent;\n border: 0;\n}\n\n.visible {\n visibility: visible !important;\n}\n\n.invisible {\n visibility: hidden !important;\n}\n\n/*# sourceMappingURL=bootstrap.css.map */","// scss-lint:disable QualifyingElement, DuplicateProperty, VendorPrefix\n\n// Reboot\n//\n// Normalization of HTML elements, manually forked from Normalize.css to remove\n// styles targeting irrelevant browsers while applying new styles.\n//\n// Normalize is licensed MIT. https://github.com/necolas/normalize.css\n\n\n// Document\n//\n// 1. Change from `box-sizing: content-box` so that `width` is not affected by `padding` or `border`.\n// 2. Change the default font family in all browsers.\n// 3. Correct the line height in all browsers.\n// 4. Prevent adjustments of font size after orientation changes in IE on Windows Phone and in iOS.\n// 5. Setting @viewport causes scrollbars to overlap content in IE11 and Edge, so\n// we force a non-overlapping, non-auto-hiding scrollbar to counteract.\n// 6. Change the default tap highlight to be completely transparent in iOS.\n\nhtml {\n box-sizing: border-box; // 1\n font-family: sans-serif; // 2\n line-height: 1.15; // 3\n -webkit-text-size-adjust: 100%; // 4\n -ms-text-size-adjust: 100%; // 4\n -ms-overflow-style: scrollbar; // 5\n -webkit-tap-highlight-color: rgba(0,0,0,0); // 6\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit; // 1\n}\n\n// IE10+ doesn't honor `` in some cases.\n@at-root {\n @-ms-viewport { width: device-width; }\n}\n\n// Shim for \"new\" HTML5 structural elements to display correctly (IE10, older browsers)\narticle, aside, dialog, figcaption, figure, footer, header, hgroup, main, nav, section {\n display: block;\n}\n\n// Body\n//\n// 1. Remove the margin in all browsers.\n// 2. As a best practice, apply a default `background-color`.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n font-size: $font-size-base;\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n background-color: $body-bg; // 2\n}\n\n// Suppress the focus outline on elements that cannot be accessed via keyboard.\n// This prevents an unwanted focus outline from appearing around elements that\n// might still respond to pointer events.\n//\n// Credit: https://github.com/suitcss/base\n[tabindex=\"-1\"]:focus {\n outline: none !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, `

`-`

` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: .5rem;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `

`s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\n// Abbreviations\n//\n// 1. Remove the bottom border in Firefox 39-.\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Duplicate behavior to the data-* attribute for our tooltip plugin\n\nabbr[title],\nabbr[data-original-title] { // 4\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 1\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\ndfn {\n font-style: italic; // Add the correct font style in Android 4.3-\n}\n\nb,\nstrong {\n font-weight: bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n font-size: 80%; // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n font-size: 75%;\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n -webkit-text-decoration-skip: objects; // Remove gaps in links underline in iOS 8+ and Safari 8+.\n\n @include hover {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href)\n// which have not been made explicitly keyboard-focusable (without tabindex).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]):not([tabindex]) {\n color: inherit;\n text-decoration: none;\n\n @include hover-focus {\n color: inherit;\n text-decoration: none;\n }\n\n &:focus {\n outline: 0;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: monospace, monospace; // Correct the inheritance and scaling of font size in all browsers.\n font-size: 1em; // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg:not(:root) {\n overflow: hidden; // Hide the overflow in IE\n}\n\n\n// Avoid 300ms click delay on touch devices that support the `touch-action` CSS property.\n//\n// In particular, unlike most other browsers, IE11+Edge on Windows 10 on touch devices and IE Mobile 10-11\n// DON'T remove the click delay when `` is present.\n// However, they DO support removing the click delay via `touch-action: manipulation`.\n// See:\n// * https://v4-alpha.getbootstrap.com/content/reboot/#click-delay-optimization-for-touch\n// * http://caniuse.com/#feat=css-touch-action\n// * https://patrickhlauke.github.io/touch/tests/results/#suppressing-300ms-delay\n\na,\narea,\nbutton,\n[role=\"button\"],\ninput,\nlabel,\nselect,\nsummary,\ntextarea {\n touch-action: manipulation;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $text-muted;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default `` alignment\n text-align: left;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: .5rem;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\nhtml [type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. `

`s, which have `min-width: 0;` by default.\n // So we reset that to ensure fieldsets behave more like a standard block element.\n // See https://github.com/twbs/bootstrap/issues/12359\n // and https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements\n min-width: 0;\n // Reset the default outline behavior of fieldsets so they don't affect page layout.\n padding: 0;\n margin: 0;\n border: 0;\n}\n\n// 1. Correct the text wrapping in Edge and IE.\n// 2. Correct the color inheritance from `fieldset` elements in IE.\nlegend {\n display: block;\n width: 100%;\n max-width: 100%; // 1\n padding: 0;\n margin-bottom: .5rem;\n font-size: 1.5rem;\n line-height: inherit;\n color: inherit; // 2\n white-space: normal; // 1\n}\n\nprogress {\n vertical-align: baseline; // Add the correct vertical alignment in Chrome, Firefox, and Opera.\n}\n\n// Correct the cursor style of increment and decrement buttons in Chrome.\n[type=\"number\"]::-webkit-inner-spin-button,\n[type=\"number\"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n[type=\"search\"] {\n // This overrides the extra rounded corners on search inputs in iOS so that our\n // `.form-control` class can properly style them. Note that this cannot simply\n // be added to `.form-control` as it's not specific enough. For details, see\n // https://github.com/twbs/bootstrap/issues/11586.\n outline-offset: -2px; // 2. Correct the outline style in Safari.\n -webkit-appearance: none;\n}\n\n//\n// Remove the inner padding and cancel buttons in Chrome and Safari on macOS.\n//\n\n[type=\"search\"]::-webkit-search-cancel-button,\n[type=\"search\"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n//\n// 1. Correct the inability to style clickable types in iOS and Safari.\n// 2. Change font properties to `inherit` in Safari.\n//\n\n::-webkit-file-upload-button {\n font: inherit; // 2\n -webkit-appearance: button; // 1\n}\n\n//\n// Correct element displays\n//\n\noutput {\n display: inline-block;\n}\n\nsummary {\n display: list-item; // Add the correct display in all browsers\n}\n\ntemplate {\n display: none; // Add the correct display in IE\n}\n\n// Always hide an element with the `hidden` HTML attribute (from PureCSS).\n// Needed for proper display in IE 10-.\n[hidden] {\n display: none !important;\n}\n","// Variables\n//\n// Copy settings from this file into the provided `_custom.scss` to override\n// the Bootstrap defaults without modifying key, versioned files.\n//\n// Variables should follow the `$component-state-property-size` formula for\n// consistent naming. Ex: $nav-link-disabled-color and $modal-content-box-shadow-xs.\n\n// Table of Contents\n//\n// Color system\n// Options\n// Spacing\n// Body\n// Links\n// Grid breakpoints\n// Grid containers\n// Grid columns\n// Fonts\n// Components\n// Tables\n// Buttons\n// Forms\n// Dropdowns\n// Z-index master list\n// Navs\n// Navbar\n// Pagination\n// Jumbotron\n// Form states and alerts\n// Cards\n// Tooltips\n// Popovers\n// Badges\n// Modals\n// Alerts\n// Progress bars\n// List group\n// Image thumbnails\n// Figures\n// Breadcrumbs\n// Carousel\n// Close\n// Code\n\n\n//\n// Color system\n//\n\n$white: #fff !default;\n$gray-100: #f8f9fa !default;\n$gray-200: #e9ecef !default;\n$gray-300: #dee2e6 !default;\n$gray-400: #ced4da !default;\n$gray-500: #adb5bd !default;\n$gray-600: #868e96 !default;\n$gray-700: #495057 !default;\n$gray-800: #343a40 !default;\n$gray-900: #212529 !default;\n$black: #000 !default;\n\n$grays: (\n 100: $gray-100,\n 200: $gray-200,\n 300: $gray-300,\n 400: $gray-400,\n 500: $gray-500,\n 600: $gray-600,\n 700: $gray-700,\n 800: $gray-800,\n 900: $gray-900\n) !default;\n\n$blue: #007bff !default;\n$indigo: #6610f2 !default;\n$purple: #6f42c1 !default;\n$pink: #e83e8c !default;\n$red: #dc3545 !default;\n$orange: #fd7e14 !default;\n$yellow: #ffc107 !default;\n$green: #28a745 !default;\n$teal: #20c997 !default;\n$cyan: #17a2b8 !default;\n\n$colors: (\n blue: $blue,\n indigo: $indigo,\n purple: $purple,\n pink: $pink,\n red: $red,\n orange: $orange,\n yellow: $yellow,\n green: $green,\n teal: $teal,\n cyan: $cyan,\n white: $white,\n gray: $gray-600,\n gray-dark: $gray-800\n) !default;\n\n$theme-colors: (\n primary: $blue,\n secondary: $gray-600,\n success: $green,\n info: $cyan,\n warning: $yellow,\n danger: $red,\n light: $gray-100,\n dark: $gray-800\n) !default;\n\n// Set a specific jump point for requesting color jumps\n$theme-color-interval: 8% !default;\n\n\n// Options\n//\n// Quickly modify global styling by enabling or disabling optional features.\n\n$enable-rounded: true !default;\n$enable-shadows: false !default;\n$enable-gradients: false !default;\n$enable-transitions: true !default;\n$enable-hover-media-query: false !default;\n$enable-grid-classes: true !default;\n$enable-print-styles: true !default;\n\n\n// Spacing\n//\n// Control the default styling of most Bootstrap elements by modifying these\n// variables. Mostly focused on spacing.\n// You can add more entries to the $spacers map, should you need more variation.\n\n$spacer: 1rem !default;\n$spacers: (\n 0: 0,\n 1: ($spacer * .25),\n 2: ($spacer * .5),\n 3: $spacer,\n 4: ($spacer * 1.5),\n 5: ($spacer * 3)\n) !default;\n\n// This variable affects the `.h-*` and `.w-*` classes.\n$sizes: (\n 25: 25%,\n 50: 50%,\n 75: 75%,\n 100: 100%\n) !default;\n\n// Body\n//\n// Settings for the `` element.\n\n$body-bg: $white !default;\n$body-color: $gray-900 !default;\n\n// Links\n//\n// Style anchor elements.\n\n$link-color: theme-color(\"primary\") !default;\n$link-decoration: none !default;\n$link-hover-color: darken($link-color, 15%) !default;\n$link-hover-decoration: underline !default;\n\n\n// Grid breakpoints\n//\n// Define the minimum dimensions at which your layout will change,\n// adapting to different screen sizes, for use in media queries.\n\n$grid-breakpoints: (\n xs: 0,\n sm: 576px,\n md: 768px,\n lg: 992px,\n xl: 1200px\n) !default;\n@include _assert-ascending($grid-breakpoints, \"$grid-breakpoints\");\n@include _assert-starts-at-zero($grid-breakpoints);\n\n\n// Grid containers\n//\n// Define the maximum width of `.container` for different screen sizes.\n\n$container-max-widths: (\n sm: 540px,\n md: 720px,\n lg: 960px,\n xl: 1140px\n) !default;\n@include _assert-ascending($container-max-widths, \"$container-max-widths\");\n\n\n// Grid columns\n//\n// Set the number of columns and specify the width of the gutters.\n\n$grid-columns: 12 !default;\n$grid-gutter-width: 30px !default;\n\n// Components\n//\n// Define common padding and border radius sizes and more.\n\n$line-height-lg: 1.5 !default;\n$line-height-sm: 1.5 !default;\n\n$border-width: 1px !default;\n\n$border-radius: .25rem !default;\n$border-radius-lg: .3rem !default;\n$border-radius-sm: .2rem !default;\n\n$component-active-color: $white !default;\n$component-active-bg: theme-color(\"primary\") !default;\n\n$caret-width: .3em !default;\n\n$transition-base: all .2s ease-in-out !default;\n$transition-fade: opacity .15s linear !default;\n$transition-collapse: height .35s ease !default;\n\n\n// Fonts\n//\n// Font, line-height, and color for body text, headings, and more.\n\n$font-family-sans-serif: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif !default;\n$font-family-monospace: Menlo, Monaco, Consolas, \"Liberation Mono\", \"Courier New\", monospace !default;\n$font-family-base: $font-family-sans-serif !default;\n\n$font-size-base: 1rem !default; // Assumes the browser default, typically `16px`\n$font-size-lg: 1.25rem !default;\n$font-size-sm: .875rem !default;\n\n$font-weight-normal: normal !default;\n$font-weight-bold: bold !default;\n\n$font-weight-base: $font-weight-normal !default;\n$line-height-base: 1.5 !default;\n\n$h1-font-size: 2.5rem !default;\n$h2-font-size: 2rem !default;\n$h3-font-size: 1.75rem !default;\n$h4-font-size: 1.5rem !default;\n$h5-font-size: 1.25rem !default;\n$h6-font-size: 1rem !default;\n\n$headings-margin-bottom: ($spacer / 2) !default;\n$headings-font-family: inherit !default;\n$headings-font-weight: 500 !default;\n$headings-line-height: 1.1 !default;\n$headings-color: inherit !default;\n\n$display1-size: 6rem !default;\n$display2-size: 5.5rem !default;\n$display3-size: 4.5rem !default;\n$display4-size: 3.5rem !default;\n\n$display1-weight: 300 !default;\n$display2-weight: 300 !default;\n$display3-weight: 300 !default;\n$display4-weight: 300 !default;\n$display-line-height: $headings-line-height !default;\n\n$lead-font-size: 1.25rem !default;\n$lead-font-weight: 300 !default;\n\n$small-font-size: 80% !default;\n\n$text-muted: $gray-600 !default;\n\n$blockquote-small-color: $gray-600 !default;\n$blockquote-font-size: ($font-size-base * 1.25) !default;\n\n$hr-border-color: rgba($black,.1) !default;\n$hr-border-width: $border-width !default;\n\n$mark-padding: .2em !default;\n\n$dt-font-weight: $font-weight-bold !default;\n\n$kbd-box-shadow: inset 0 -.1rem 0 rgba($black,.25) !default;\n$nested-kbd-font-weight: $font-weight-bold !default;\n\n$list-inline-padding: 5px !default;\n\n$mark-bg: #fcf8e3 !default;\n\n\n// Tables\n//\n// Customizes the `.table` component with basic values, each used across all table variations.\n\n$table-cell-padding: .75rem !default;\n$table-cell-padding-sm: .3rem !default;\n\n$table-bg: transparent !default;\n$table-accent-bg: rgba($black,.05) !default;\n$table-hover-bg: rgba($black,.075) !default;\n$table-active-bg: $table-hover-bg !default;\n\n$table-border-width: $border-width !default;\n$table-border-color: $gray-200 !default;\n\n$table-head-bg: $gray-200 !default;\n$table-head-color: $gray-700 !default;\n\n$table-inverse-bg: $gray-900 !default;\n$table-inverse-accent-bg: rgba($white, .05) !default;\n$table-inverse-hover-bg: rgba($white, .075) !default;\n$table-inverse-border-color: lighten($gray-900, 7.5%) !default;\n$table-inverse-color: $body-bg !default;\n\n\n// Buttons\n//\n// For each of Bootstrap's buttons, define text, background and border color.\n\n$input-btn-padding-y: .5rem !default;\n$input-btn-padding-x: .75rem !default;\n$input-btn-line-height: 1.25 !default;\n\n$input-btn-padding-y-sm: .25rem !default;\n$input-btn-padding-x-sm: .5rem !default;\n$input-btn-line-height-sm: 1.5 !default;\n\n$input-btn-padding-y-lg: .5rem !default;\n$input-btn-padding-x-lg: 1rem !default;\n$input-btn-line-height-lg: 1.5 !default;\n\n$btn-font-weight: $font-weight-normal !default;\n$btn-box-shadow: inset 0 1px 0 rgba($white,.15), 0 1px 1px rgba($black,.075) !default;\n$btn-focus-box-shadow: 0 0 0 3px rgba(theme-color(\"primary\"), .25) !default;\n$btn-active-box-shadow: inset 0 3px 5px rgba($black,.125) !default;\n\n$btn-link-disabled-color: $gray-600 !default;\n\n$btn-block-spacing-y: .5rem !default;\n\n// Allows for customizing button radius independently from global border radius\n$btn-border-radius: $border-radius !default;\n$btn-border-radius-lg: $border-radius-lg !default;\n$btn-border-radius-sm: $border-radius-sm !default;\n\n$btn-transition: all .15s ease-in-out !default;\n\n\n// Forms\n\n$input-bg: $white !default;\n$input-disabled-bg: $gray-200 !default;\n\n$input-color: $gray-700 !default;\n$input-border-color: rgba($black,.15) !default;\n$input-btn-border-width: $border-width !default; // For form controls and buttons\n$input-box-shadow: inset 0 1px 1px rgba($black,.075) !default;\n\n$input-border-radius: $border-radius !default;\n$input-border-radius-lg: $border-radius-lg !default;\n$input-border-radius-sm: $border-radius-sm !default;\n\n$input-focus-bg: $input-bg !default;\n$input-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$input-focus-box-shadow: $input-box-shadow, $btn-focus-box-shadow !default;\n$input-focus-color: $input-color !default;\n\n$input-placeholder-color: $gray-600 !default;\n\n$input-height-border: $input-btn-border-width * 2 !default;\n\n$input-height-inner: ($font-size-base * $input-btn-line-height) + ($input-btn-padding-y * 2) !default;\n$input-height: calc(#{$input-height-inner} + #{$input-height-border}) !default;\n\n$input-height-inner-sm: ($font-size-sm * $input-btn-line-height-sm) + ($input-btn-padding-y-sm * 2) !default;\n$input-height-sm: calc(#{$input-height-inner-sm} + #{$input-height-border}) !default;\n\n$input-height-inner-lg: ($font-size-sm * $input-btn-line-height-lg) + ($input-btn-padding-y-lg * 2) !default;\n$input-height-lg: calc(#{$input-height-inner-lg} + #{$input-height-border}) !default;\n\n$input-transition: border-color ease-in-out .15s, box-shadow ease-in-out .15s !default;\n\n$form-text-margin-top: .25rem !default;\n\n$form-check-margin-bottom: .5rem !default;\n$form-check-input-gutter: 1.25rem !default;\n$form-check-input-margin-y: .25rem !default;\n$form-check-input-margin-x: .25rem !default;\n\n$form-check-inline-margin-x: .75rem !default;\n\n$form-group-margin-bottom: 1rem !default;\n\n$input-group-addon-bg: $gray-200 !default;\n$input-group-addon-border-color: $input-border-color !default;\n\n$custom-control-gutter: 1.5rem !default;\n$custom-control-spacer-y: .25rem !default;\n$custom-control-spacer-x: 1rem !default;\n\n$custom-control-indicator-size: 1rem !default;\n$custom-control-indicator-bg: #ddd !default;\n$custom-control-indicator-bg-size: 50% 50% !default;\n$custom-control-indicator-box-shadow: inset 0 .25rem .25rem rgba($black,.1) !default;\n\n$custom-control-indicator-disabled-bg: $gray-200 !default;\n$custom-control-description-disabled-color: $gray-600 !default;\n\n$custom-control-indicator-checked-color: $white !default;\n$custom-control-indicator-checked-bg: theme-color(\"primary\") !default;\n$custom-control-indicator-checked-box-shadow: none !default;\n\n$custom-control-indicator-focus-box-shadow: 0 0 0 1px $body-bg, 0 0 0 3px theme-color(\"primary\") !default;\n\n$custom-control-indicator-active-color: $white !default;\n$custom-control-indicator-active-bg: lighten(theme-color(\"primary\"), 35%) !default;\n$custom-control-indicator-active-box-shadow: none !default;\n\n$custom-checkbox-indicator-border-radius: $border-radius !default;\n$custom-checkbox-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='#{$custom-control-indicator-checked-color}' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-checkbox-indicator-indeterminate-bg: theme-color(\"primary\") !default;\n$custom-checkbox-indicator-indeterminate-color: $custom-control-indicator-checked-color !default;\n$custom-checkbox-indicator-icon-indeterminate: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='#{$custom-checkbox-indicator-indeterminate-color}' d='M0 2h4'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-checkbox-indicator-indeterminate-box-shadow: none !default;\n\n$custom-radio-indicator-border-radius: 50% !default;\n$custom-radio-indicator-icon-checked: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='#{$custom-control-indicator-checked-color}'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$custom-select-padding-y: .375rem !default;\n$custom-select-padding-x: .75rem !default;\n$custom-select-height: $input-height !default;\n$custom-select-indicator-padding: 1rem !default; // Extra padding to account for the presence of the background-image based indicator\n$custom-select-line-height: $input-btn-line-height !default;\n$custom-select-color: $input-color !default;\n$custom-select-disabled-color: $gray-600 !default;\n$custom-select-bg: $white !default;\n$custom-select-disabled-bg: $gray-200 !default;\n$custom-select-bg-size: 8px 10px !default; // In pixels because image dimensions\n$custom-select-indicator-color: #333 !default;\n$custom-select-indicator: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='#{$custom-select-indicator-color}' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$custom-select-border-width: $input-btn-border-width !default;\n$custom-select-border-color: $input-border-color !default;\n$custom-select-border-radius: $border-radius !default;\n\n$custom-select-focus-border-color: lighten(theme-color(\"primary\"), 25%) !default;\n$custom-select-focus-box-shadow: inset 0 1px 2px rgba($black, .075), 0 0 5px rgba($custom-select-focus-border-color, .5) !default;\n\n$custom-select-font-size-sm: 75% !default;\n$custom-select-height-sm: $input-height-sm !default;\n\n$custom-file-height: 2.5rem !default;\n$custom-file-width: 14rem !default;\n$custom-file-focus-box-shadow: 0 0 0 .075rem $white, 0 0 0 .2rem theme-color(\"primary\") !default;\n\n$custom-file-padding-y: 1rem !default;\n$custom-file-padding-x: .5rem !default;\n$custom-file-line-height: 1.5 !default;\n$custom-file-color: $gray-700 !default;\n$custom-file-bg: $white !default;\n$custom-file-border-width: $border-width !default;\n$custom-file-border-color: $input-border-color !default;\n$custom-file-border-radius: $border-radius !default;\n$custom-file-box-shadow: inset 0 .2rem .4rem rgba($black,.05) !default;\n$custom-file-button-color: $custom-file-color !default;\n$custom-file-button-bg: $gray-200 !default;\n$custom-file-text: (\n placeholder: (\n en: \"Choose file...\"\n ),\n button-label: (\n en: \"Browse\"\n )\n) !default;\n\n\n// Form validation\n$form-feedback-valid-color: theme-color(\"success\") !default;\n$form-feedback-invalid-color: theme-color(\"danger\") !default;\n\n\n// Dropdowns\n//\n// Dropdown menu container and contents.\n\n$dropdown-min-width: 10rem !default;\n$dropdown-padding-y: .5rem !default;\n$dropdown-spacer: .125rem !default;\n$dropdown-bg: $white !default;\n$dropdown-border-color: rgba($black,.15) !default;\n$dropdown-border-width: $border-width !default;\n$dropdown-divider-bg: $gray-200 !default;\n$dropdown-box-shadow: 0 .5rem 1rem rgba($black,.175) !default;\n\n$dropdown-link-color: $gray-900 !default;\n$dropdown-link-hover-color: darken($gray-900, 5%) !default;\n$dropdown-link-hover-bg: $gray-100 !default;\n\n$dropdown-link-active-color: $component-active-color !default;\n$dropdown-link-active-bg: $component-active-bg !default;\n\n$dropdown-link-disabled-color: $gray-600 !default;\n\n$dropdown-item-padding-y: .25rem !default;\n$dropdown-item-padding-x: 1.5rem !default;\n\n$dropdown-header-color: $gray-600 !default;\n\n\n// Z-index master list\n//\n// Warning: Avoid customizing these values. They're used for a bird's eye view\n// of components dependent on the z-axis and are designed to all work together.\n\n$zindex-dropdown: 1000 !default;\n$zindex-sticky: 1020 !default;\n$zindex-fixed: 1030 !default;\n$zindex-modal-backdrop: 1040 !default;\n$zindex-modal: 1050 !default;\n$zindex-popover: 1060 !default;\n$zindex-tooltip: 1070 !default;\n\n// Navs\n\n$nav-link-padding-y: .5rem !default;\n$nav-link-padding-x: 1rem !default;\n$nav-link-disabled-color: $gray-600 !default;\n\n$nav-tabs-border-color: #ddd !default;\n$nav-tabs-border-width: $border-width !default;\n$nav-tabs-border-radius: $border-radius !default;\n$nav-tabs-link-hover-border-color: $gray-200 !default;\n$nav-tabs-link-active-color: $gray-700 !default;\n$nav-tabs-link-active-bg: $body-bg !default;\n$nav-tabs-link-active-border-color: #ddd !default;\n\n$nav-pills-border-radius: $border-radius !default;\n$nav-pills-link-active-color: $component-active-color !default;\n$nav-pills-link-active-bg: $component-active-bg !default;\n\n// Navbar\n\n$navbar-padding-y: ($spacer / 2) !default;\n$navbar-padding-x: $spacer !default;\n\n$navbar-brand-font-size: $font-size-lg !default;\n// Compute the navbar-brand padding-y so the navbar-brand will have the same height as navbar-text and nav-link\n$nav-link-height: $navbar-brand-font-size * $line-height-base !default;\n$navbar-brand-height: ($font-size-base * $line-height-base + $nav-link-padding-y * 2) !default;\n$navbar-brand-padding-y: ($navbar-brand-height - $nav-link-height) / 2 !default;\n\n$navbar-toggler-padding-y: .25rem !default;\n$navbar-toggler-padding-x: .75rem !default;\n$navbar-toggler-font-size: $font-size-lg !default;\n$navbar-toggler-border-radius: $btn-border-radius !default;\n\n$navbar-dark-color: rgba($white,.5) !default;\n$navbar-dark-hover-color: rgba($white,.75) !default;\n$navbar-dark-active-color: rgba($white,1) !default;\n$navbar-dark-disabled-color: rgba($white,.25) !default;\n$navbar-dark-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-dark-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-dark-toggler-border-color: rgba($white,.1) !default;\n\n$navbar-light-color: rgba($black,.5) !default;\n$navbar-light-hover-color: rgba($black,.7) !default;\n$navbar-light-active-color: rgba($black,.9) !default;\n$navbar-light-disabled-color: rgba($black,.3) !default;\n$navbar-light-toggler-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='#{$navbar-light-color}' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$navbar-light-toggler-border-color: rgba($black,.1) !default;\n\n// Pagination\n\n$pagination-padding-y: .5rem !default;\n$pagination-padding-x: .75rem !default;\n$pagination-padding-y-sm: .25rem !default;\n$pagination-padding-x-sm: .5rem !default;\n$pagination-padding-y-lg: .75rem !default;\n$pagination-padding-x-lg: 1.5rem !default;\n$pagination-line-height: 1.25 !default;\n\n$pagination-color: $link-color !default;\n$pagination-bg: $white !default;\n$pagination-border-width: $border-width !default;\n$pagination-border-color: #ddd !default;\n\n$pagination-hover-color: $link-hover-color !default;\n$pagination-hover-bg: $gray-200 !default;\n$pagination-hover-border-color: #ddd !default;\n\n$pagination-active-color: $white !default;\n$pagination-active-bg: theme-color(\"primary\") !default;\n$pagination-active-border-color: theme-color(\"primary\") !default;\n\n$pagination-disabled-color: $gray-600 !default;\n$pagination-disabled-bg: $white !default;\n$pagination-disabled-border-color: #ddd !default;\n\n\n// Jumbotron\n\n$jumbotron-padding: 2rem !default;\n$jumbotron-bg: $gray-200 !default;\n\n\n// Cards\n\n$card-spacer-y: .75rem !default;\n$card-spacer-x: 1.25rem !default;\n$card-border-width: 1px !default;\n$card-border-radius: $border-radius !default;\n$card-border-color: rgba($black,.125) !default;\n$card-inner-border-radius: calc(#{$card-border-radius} - #{$card-border-width}) !default;\n$card-cap-bg: rgba($black, .03) !default;\n$card-bg: $white !default;\n\n$card-img-overlay-padding: 1.25rem !default;\n\n$card-deck-margin: ($grid-gutter-width / 2) !default;\n\n$card-columns-count: 3 !default;\n$card-columns-gap: 1.25rem !default;\n$card-columns-margin: $card-spacer-y !default;\n\n\n// Tooltips\n\n$tooltip-max-width: 200px !default;\n$tooltip-color: $white !default;\n$tooltip-bg: $black !default;\n$tooltip-opacity: .9 !default;\n$tooltip-padding-y: 3px !default;\n$tooltip-padding-x: 8px !default;\n$tooltip-margin: 0 !default;\n\n\n$tooltip-arrow-width: 5px !default;\n$tooltip-arrow-height: 5px !default;\n$tooltip-arrow-color: $tooltip-bg !default;\n\n\n// Popovers\n\n$popover-inner-padding: 1px !default;\n$popover-bg: $white !default;\n$popover-max-width: 276px !default;\n$popover-border-width: $border-width !default;\n$popover-border-color: rgba($black,.2) !default;\n$popover-box-shadow: 0 5px 10px rgba($black,.2) !default;\n\n$popover-header-bg: darken($popover-bg, 3%) !default;\n$popover-header-color: $headings-color !default;\n$popover-header-padding-y: 8px !default;\n$popover-header-padding-x: 14px !default;\n\n$popover-body-color: $body-color !default;\n$popover-body-padding-y: 9px !default;\n$popover-body-padding-x: 14px !default;\n\n$popover-arrow-width: 10px !default;\n$popover-arrow-height: 5px !default;\n$popover-arrow-color: $popover-bg !default;\n\n$popover-arrow-outer-width: ($popover-arrow-width + 1px) !default;\n$popover-arrow-outer-color: fade-in($popover-border-color, .05) !default;\n\n\n// Badges\n\n$badge-color: $white !default;\n$badge-font-size: 75% !default;\n$badge-font-weight: $font-weight-bold !default;\n$badge-padding-y: .25em !default;\n$badge-padding-x: .4em !default;\n\n$badge-pill-padding-x: .6em !default;\n// Use a higher than normal value to ensure completely rounded edges when\n// customizing padding or font-size on labels.\n$badge-pill-border-radius: 10rem !default;\n\n\n// Modals\n\n// Padding applied to the modal body\n$modal-inner-padding: 15px !default;\n\n$modal-dialog-margin: 10px !default;\n$modal-dialog-margin-y-sm-up: 30px !default;\n\n$modal-title-line-height: $line-height-base !default;\n\n$modal-content-bg: $white !default;\n$modal-content-border-color: rgba($black,.2) !default;\n$modal-content-border-width: $border-width !default;\n$modal-content-box-shadow-xs: 0 3px 9px rgba($black,.5) !default;\n$modal-content-box-shadow-sm-up: 0 5px 15px rgba($black,.5) !default;\n\n$modal-backdrop-bg: $black !default;\n$modal-backdrop-opacity: .5 !default;\n$modal-header-border-color: $gray-200 !default;\n$modal-footer-border-color: $modal-header-border-color !default;\n$modal-header-border-width: $modal-content-border-width !default;\n$modal-footer-border-width: $modal-header-border-width !default;\n$modal-header-padding: 15px !default;\n\n$modal-lg: 800px !default;\n$modal-md: 500px !default;\n$modal-sm: 300px !default;\n\n$modal-transition: transform .3s ease-out !default;\n\n\n// Alerts\n//\n// Define alert colors, border radius, and padding.\n\n$alert-padding-y: .75rem !default;\n$alert-padding-x: 1.25rem !default;\n$alert-margin-bottom: 1rem !default;\n$alert-border-radius: $border-radius !default;\n$alert-link-font-weight: $font-weight-bold !default;\n$alert-border-width: $border-width !default;\n\n\n// Progress bars\n\n$progress-height: 1rem !default;\n$progress-font-size: .75rem !default;\n$progress-bg: $gray-200 !default;\n$progress-border-radius: $border-radius !default;\n$progress-box-shadow: inset 0 .1rem .1rem rgba($black,.1) !default;\n$progress-bar-color: $white !default;\n$progress-bar-bg: theme-color(\"primary\") !default;\n$progress-bar-animation-timing: 1s linear infinite !default;\n$progress-bar-transition: width .6s ease !default;\n\n// List group\n\n$list-group-bg: $white !default;\n$list-group-border-color: rgba($black,.125) !default;\n$list-group-border-width: $border-width !default;\n$list-group-border-radius: $border-radius !default;\n\n$list-group-item-padding-y: .75rem !default;\n$list-group-item-padding-x: 1.25rem !default;\n\n$list-group-hover-bg: $gray-100 !default;\n$list-group-active-color: $component-active-color !default;\n$list-group-active-bg: $component-active-bg !default;\n$list-group-active-border-color: $list-group-active-bg !default;\n\n$list-group-disabled-color: $gray-600 !default;\n$list-group-disabled-bg: $list-group-bg !default;\n\n$list-group-action-color: $gray-700 !default;\n$list-group-action-hover-color: $list-group-action-color !default;\n\n$list-group-action-active-color: $body-color !default;\n$list-group-action-active-bg: $gray-200 !default;\n\n\n// Image thumbnails\n\n$thumbnail-padding: .25rem !default;\n$thumbnail-bg: $body-bg !default;\n$thumbnail-border-width: $border-width !default;\n$thumbnail-border-color: #ddd !default;\n$thumbnail-border-radius: $border-radius !default;\n$thumbnail-box-shadow: 0 1px 2px rgba($black,.075) !default;\n$thumbnail-transition: all .2s ease-in-out !default;\n\n\n// Figures\n\n$figure-caption-font-size: 90% !default;\n$figure-caption-color: $gray-600 !default;\n\n\n// Breadcrumbs\n\n$breadcrumb-padding-y: .75rem !default;\n$breadcrumb-padding-x: 1rem !default;\n$breadcrumb-item-padding: .5rem !default;\n\n$breadcrumb-bg: $gray-200 !default;\n$breadcrumb-divider-color: $gray-600 !default;\n$breadcrumb-active-color: $gray-600 !default;\n$breadcrumb-divider: \"/\" !default;\n\n\n// Carousel\n\n$carousel-control-color: $white !default;\n$carousel-control-width: 15% !default;\n$carousel-control-opacity: .5 !default;\n\n$carousel-indicator-width: 30px !default;\n$carousel-indicator-height: 3px !default;\n$carousel-indicator-spacer: 3px !default;\n$carousel-indicator-active-bg: $white !default;\n\n$carousel-caption-width: 70% !default;\n$carousel-caption-color: $white !default;\n\n$carousel-control-icon-width: 20px !default;\n\n$carousel-control-prev-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M4 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n$carousel-control-next-icon-bg: str-replace(url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='#{$carousel-control-color}' viewBox='0 0 8 8'%3E%3Cpath d='M1.5 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E\"), \"#\", \"%23\") !default;\n\n$carousel-transition: transform .6s ease !default;\n\n\n// Close\n\n$close-font-size: $font-size-base * 1.5 !default;\n$close-font-weight: $font-weight-bold !default;\n$close-color: $black !default;\n$close-text-shadow: 0 1px 0 $white !default;\n\n// Code\n\n$code-font-size: 90% !default;\n$code-padding-y: .2rem !default;\n$code-padding-x: .4rem !default;\n$code-color: #bd4147 !default;\n$code-bg: $gray-100 !default;\n\n$kbd-color: $white !default;\n$kbd-bg: $gray-900 !default;\n\n$pre-color: $gray-900 !default;\n$pre-scrollable-max-height: 340px !default;\n","@mixin hover {\n // TODO: re-enable along with mq4-hover-shim\n// @if $enable-hover-media-query {\n// // See Media Queries Level 4: https://drafts.csswg.org/mediaqueries/#hover\n// // Currently shimmed by https://github.com/twbs/mq4-hover-shim\n// @media (hover: hover) {\n// &:hover { @content }\n// }\n// }\n// @else {\n// scss-lint:disable Indentation\n &:hover { @content }\n// scss-lint:enable Indentation\n// }\n}\n\n\n@mixin hover-focus {\n @if $enable-hover-media-query {\n &:focus { @content }\n @include hover { @content }\n } @else {\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin plain-hover-focus {\n @if $enable-hover-media-query {\n &,\n &:focus {\n @content\n }\n @include hover { @content }\n } @else {\n &,\n &:focus,\n &:hover {\n @content\n }\n }\n}\n\n@mixin hover-focus-active {\n @if $enable-hover-media-query {\n &:focus,\n &:active {\n @content\n }\n @include hover { @content }\n } @else {\n &:focus,\n &:active,\n &:hover {\n @content\n }\n }\n}\n","//\n// Headings\n//\n\nh1, h2, h3, h4, h5, h6,\n.h1, .h2, .h3, .h4, .h5, .h6 {\n margin-bottom: $headings-margin-bottom;\n font-family: $headings-font-family;\n font-weight: $headings-font-weight;\n line-height: $headings-line-height;\n color: $headings-color;\n}\n\nh1, .h1 { font-size: $h1-font-size; }\nh2, .h2 { font-size: $h2-font-size; }\nh3, .h3 { font-size: $h3-font-size; }\nh4, .h4 { font-size: $h4-font-size; }\nh5, .h5 { font-size: $h5-font-size; }\nh6, .h6 { font-size: $h6-font-size; }\n\n.lead {\n font-size: $lead-font-size;\n font-weight: $lead-font-weight;\n}\n\n// Type display classes\n.display-1 {\n font-size: $display1-size;\n font-weight: $display1-weight;\n line-height: $display-line-height;\n}\n.display-2 {\n font-size: $display2-size;\n font-weight: $display2-weight;\n line-height: $display-line-height;\n}\n.display-3 {\n font-size: $display3-size;\n font-weight: $display3-weight;\n line-height: $display-line-height;\n}\n.display-4 {\n font-size: $display4-size;\n font-weight: $display4-weight;\n line-height: $display-line-height;\n}\n\n\n//\n// Horizontal rules\n//\n\nhr {\n margin-top: 1rem;\n margin-bottom: 1rem;\n border: 0;\n border-top: $hr-border-width solid $hr-border-color;\n}\n\n\n//\n// Emphasis\n//\n\nsmall,\n.small {\n font-size: $small-font-size;\n font-weight: $font-weight-normal;\n}\n\nmark,\n.mark {\n padding: $mark-padding;\n background-color: $mark-bg;\n}\n\n\n//\n// Lists\n//\n\n.list-unstyled {\n @include list-unstyled;\n}\n\n// Inline turns list items into inline-block\n.list-inline {\n @include list-unstyled;\n}\n.list-inline-item {\n display: inline-block;\n\n &:not(:last-child) {\n margin-right: $list-inline-padding;\n }\n}\n\n\n//\n// Misc\n//\n\n// Builds on `abbr`\n.initialism {\n font-size: 90%;\n text-transform: uppercase;\n}\n\n// Blockquotes\n.blockquote {\n margin-bottom: $spacer;\n font-size: $blockquote-font-size;\n}\n\n.blockquote-footer {\n display: block;\n font-size: 80%; // back to default font-size\n color: $blockquote-small-color;\n\n &::before {\n content: \"\\2014 \\00A0\"; // em dash, nbsp\n }\n}\n","// Lists\n\n// Unstyled keeps list items block level, just removes default browser padding and list-style\n@mixin list-unstyled {\n padding-left: 0;\n list-style: none;\n}\n","// Responsive images (ensure images don't scale beyond their parents)\n//\n// This is purposefully opt-in via an explicit class rather than being the default for all ``s.\n// We previously tried the \"images are responsive by default\" approach in Bootstrap v2,\n// and abandoned it in Bootstrap v3 because it breaks lots of third-party widgets (including Google Maps)\n// which weren't expecting the images within themselves to be involuntarily resized.\n// See also https://github.com/twbs/bootstrap/issues/18178\n.img-fluid {\n @include img-fluid;\n}\n\n\n// Image thumbnails\n.img-thumbnail {\n padding: $thumbnail-padding;\n background-color: $thumbnail-bg;\n border: $thumbnail-border-width solid $thumbnail-border-color;\n @include border-radius($thumbnail-border-radius);\n @include transition($thumbnail-transition);\n @include box-shadow($thumbnail-box-shadow);\n\n // Keep them at most 100% wide\n @include img-fluid;\n}\n\n//\n// Figures\n//\n\n.figure {\n // Ensures the caption's text aligns with the image.\n display: inline-block;\n}\n\n.figure-img {\n margin-bottom: ($spacer / 2);\n line-height: 1;\n}\n\n.figure-caption {\n font-size: $figure-caption-font-size;\n color: $figure-caption-color;\n}\n","// Image Mixins\n// - Responsive image\n// - Retina image\n\n\n// Responsive image\n//\n// Keep images from scaling beyond the width of their parents.\n\n@mixin img-fluid {\n // Part 1: Set a maximum relative to the parent\n max-width: 100%;\n // Part 2: Override the height to auto, otherwise images will be stretched\n // when setting a width and height attribute on the img element.\n height: auto;\n}\n\n\n// Retina image\n//\n// Short retina mixin for setting background-image and -size.\n\n@mixin img-retina($file-1x, $file-2x, $width-1x, $height-1x) {\n background-image: url($file-1x);\n\n // Autoprefixer takes care of adding -webkit-min-device-pixel-ratio and -o-min-device-pixel-ratio,\n // but doesn't convert dppx=>dpi.\n // There's no such thing as unprefixed min-device-pixel-ratio since it's nonstandard.\n // Compatibility info: http://caniuse.com/#feat=css-media-resolution\n @media\n only screen and (min-resolution: 192dpi), // IE9-11 don't support dppx\n only screen and (min-resolution: 2dppx) { // Standardized\n background-image: url($file-2x);\n background-size: $width-1x $height-1x;\n }\n}\n","// Single side border-radius\n\n@mixin border-radius($radius: $border-radius) {\n @if $enable-rounded {\n border-radius: $radius;\n }\n}\n\n@mixin border-top-radius($radius) {\n @if $enable-rounded {\n border-top-left-radius: $radius;\n border-top-right-radius: $radius;\n }\n}\n\n@mixin border-right-radius($radius) {\n @if $enable-rounded {\n border-top-right-radius: $radius;\n border-bottom-right-radius: $radius;\n }\n}\n\n@mixin border-bottom-radius($radius) {\n @if $enable-rounded {\n border-bottom-right-radius: $radius;\n border-bottom-left-radius: $radius;\n }\n}\n\n@mixin border-left-radius($radius) {\n @if $enable-rounded {\n border-top-left-radius: $radius;\n border-bottom-left-radius: $radius;\n }\n}\n","@mixin transition($transition...) {\n @if $enable-transitions {\n @if length($transition) == 0 {\n transition: $transition-base;\n } @else {\n transition: $transition;\n }\n }\n}\n","// Inline and block code styles\ncode,\nkbd,\npre,\nsamp {\n font-family: $font-family-monospace;\n}\n\n// Inline code\ncode {\n padding: $code-padding-y $code-padding-x;\n font-size: $code-font-size;\n color: $code-color;\n background-color: $code-bg;\n @include border-radius($border-radius);\n\n // Streamline the style when inside anchors to avoid broken underline and more\n a > & {\n padding: 0;\n color: inherit;\n background-color: inherit;\n }\n}\n\n// User input typically entered via keyboard\nkbd {\n padding: $code-padding-y $code-padding-x;\n font-size: $code-font-size;\n color: $kbd-color;\n background-color: $kbd-bg;\n @include border-radius($border-radius-sm);\n @include box-shadow($kbd-box-shadow);\n\n kbd {\n padding: 0;\n font-size: 100%;\n font-weight: $nested-kbd-font-weight;\n @include box-shadow(none);\n }\n}\n\n// Blocks of code\npre {\n display: block;\n margin-top: 0;\n margin-bottom: 1rem;\n font-size: $code-font-size;\n color: $pre-color;\n\n // Account for some code outputs that place code tags in pre tags\n code {\n padding: 0;\n font-size: inherit;\n color: inherit;\n background-color: transparent;\n border-radius: 0;\n }\n}\n\n// Enable scrollable blocks of code\n.pre-scrollable {\n max-height: $pre-scrollable-max-height;\n overflow-y: scroll;\n}\n","// Container widths\n//\n// Set the container width, and override it for fixed navbars in media queries.\n\n@if $enable-grid-classes {\n .container {\n @include make-container();\n @include make-container-max-widths();\n }\n}\n\n// Fluid container\n//\n// Utilizes the mixin meant for fixed width containers, but with 100% width for\n// fluid, full width layouts.\n\n@if $enable-grid-classes {\n .container-fluid {\n width: 100%;\n @include make-container();\n }\n}\n\n// Row\n//\n// Rows contain and clear the floats of your columns.\n\n@if $enable-grid-classes {\n .row {\n @include make-row();\n }\n\n // Remove the negative margin from default .row, then the horizontal padding\n // from all immediate children columns (to prevent runaway style inheritance).\n .no-gutters {\n margin-right: 0;\n margin-left: 0;\n\n > .col,\n > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n }\n }\n}\n\n// Columns\n//\n// Common styles for small and large grid columns\n\n@if $enable-grid-classes {\n @include make-grid-columns();\n}\n","/// Grid system\n//\n// Generate semantic grid columns with these mixins.\n\n@mixin make-container() {\n margin-right: auto;\n margin-left: auto;\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n width: 100%;\n}\n\n\n// For each breakpoint, define the maximum width of the container in a media query\n@mixin make-container-max-widths($max-widths: $container-max-widths, $breakpoints: $grid-breakpoints) {\n @each $breakpoint, $container-max-width in $max-widths {\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n max-width: $container-max-width;\n }\n }\n}\n\n@mixin make-row() {\n display: flex;\n flex-wrap: wrap;\n margin-right: ($grid-gutter-width / -2);\n margin-left: ($grid-gutter-width / -2);\n}\n\n@mixin make-col-ready() {\n position: relative;\n // Prevent columns from becoming too narrow when at smaller grid tiers by\n // always setting `width: 100%;`. This works because we use `flex` values\n // later on to override this initial width.\n width: 100%;\n min-height: 1px; // Prevent collapsing\n padding-right: ($grid-gutter-width / 2);\n padding-left: ($grid-gutter-width / 2);\n}\n\n@mixin make-col($size, $columns: $grid-columns) {\n flex: 0 0 percentage($size / $columns);\n // Add a `max-width` to ensure content within each column does not blow out\n // the width of the column. Applies to IE10+ and Firefox. Chrome and Safari\n // do not appear to require this.\n max-width: percentage($size / $columns);\n}\n","// Breakpoint viewport sizes and media queries.\n//\n// Breakpoints are defined as a map of (name: minimum width), order from small to large:\n//\n// (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px)\n//\n// The map defined in the `$grid-breakpoints` global variable is used as the `$breakpoints` argument by default.\n\n// Name of the next breakpoint, or null for the last breakpoint.\n//\n// >> breakpoint-next(sm)\n// md\n// >> breakpoint-next(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// md\n// >> breakpoint-next(sm, $breakpoint-names: (xs sm md lg xl))\n// md\n@function breakpoint-next($name, $breakpoints: $grid-breakpoints, $breakpoint-names: map-keys($breakpoints)) {\n $n: index($breakpoint-names, $name);\n @return if($n < length($breakpoint-names), nth($breakpoint-names, $n + 1), null);\n}\n\n// Minimum breakpoint width. Null for the smallest (first) breakpoint.\n//\n// >> breakpoint-min(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 576px\n@function breakpoint-min($name, $breakpoints: $grid-breakpoints) {\n $min: map-get($breakpoints, $name);\n @return if($min != 0, $min, null);\n}\n\n// Maximum breakpoint width. Null for the largest (last) breakpoint.\n// The maximum value is calculated as the minimum of the next one less 0.1.\n//\n// >> breakpoint-max(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 767px\n@function breakpoint-max($name, $breakpoints: $grid-breakpoints) {\n $next: breakpoint-next($name, $breakpoints);\n @return if($next, breakpoint-min($next, $breakpoints) - 1px, null);\n}\n\n// Returns a blank string if smallest breakpoint, otherwise returns the name with a dash infront.\n// Useful for making responsive utilities.\n//\n// >> breakpoint-infix(xs, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"\" (Returns a blank string)\n// >> breakpoint-infix(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"-sm\"\n@function breakpoint-infix($name, $breakpoints: $grid-breakpoints) {\n @return if(breakpoint-min($name, $breakpoints) == null, \"\", \"-#{$name}\");\n}\n\n// Media of at least the minimum breakpoint width. No query for the smallest breakpoint.\n// Makes the @content apply to the given breakpoint and wider.\n@mixin media-breakpoint-up($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n @if $min {\n @media (min-width: $min) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media of at most the maximum breakpoint width. No query for the largest breakpoint.\n// Makes the @content apply to the given breakpoint and narrower.\n@mixin media-breakpoint-down($name, $breakpoints: $grid-breakpoints) {\n $max: breakpoint-max($name, $breakpoints);\n @if $max {\n @media (max-width: $max) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media that spans multiple breakpoint widths.\n// Makes the @content apply between the min and max breakpoints\n@mixin media-breakpoint-between($lower, $upper, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($lower, $breakpoints);\n $max: breakpoint-max($upper, $breakpoints);\n\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n}\n\n// Media between the breakpoint's minimum and maximum widths.\n// No minimum for the smallest breakpoint, and no maximum for the largest one.\n// Makes the @content apply only to the given breakpoint, not viewports any wider or narrower.\n@mixin media-breakpoint-only($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n $max: breakpoint-max($name, $breakpoints);\n\n @if $min != null and $max != null {\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else if $max == null {\n @include media-breakpoint-up($name)\n } @else if $min == null {\n @include media-breakpoint-down($name)\n }\n}\n","// Framework grid generation\n//\n// Used only by Bootstrap to generate the correct number of grid classes given\n// any value of `$grid-columns`.\n\n@mixin make-grid-columns($columns: $grid-columns, $gutter: $grid-gutter-width, $breakpoints: $grid-breakpoints) {\n // Common properties for all breakpoints\n %grid-column {\n position: relative;\n width: 100%;\n min-height: 1px; // Prevent columns from collapsing when empty\n padding-right: ($gutter / 2);\n padding-left: ($gutter / 2);\n }\n\n @each $breakpoint in map-keys($breakpoints) {\n $infix: breakpoint-infix($breakpoint, $breakpoints);\n\n // Allow columns to stretch full width below their breakpoints\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @extend %grid-column;\n }\n }\n .col#{$infix},\n .col#{$infix}-auto {\n @extend %grid-column;\n }\n\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n // Provide basic `.col-{bp}` classes for equal-width flexbox columns\n .col#{$infix} {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n .col#{$infix}-auto {\n flex: 0 0 auto;\n width: auto;\n max-width: none; // Reset earlier grid tiers\n }\n\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @include make-col($i, $columns);\n }\n }\n\n @for $i from 1 through $columns {\n .order#{$infix}-#{$i} {\n order: $i;\n }\n }\n }\n }\n}\n","//\n// Basic Bootstrap table\n//\n\n.table {\n width: 100%;\n max-width: 100%;\n margin-bottom: $spacer;\n background-color: $table-bg; // Reset for nesting within parents with `background-color`.\n\n th,\n td {\n padding: $table-cell-padding;\n vertical-align: top;\n border-top: $table-border-width solid $table-border-color;\n }\n\n thead th {\n vertical-align: bottom;\n border-bottom: (2 * $table-border-width) solid $table-border-color;\n }\n\n tbody + tbody {\n border-top: (2 * $table-border-width) solid $table-border-color;\n }\n\n .table {\n background-color: $body-bg;\n }\n}\n\n\n//\n// Condensed table w/ half padding\n//\n\n.table-sm {\n th,\n td {\n padding: $table-cell-padding-sm;\n }\n}\n\n\n// Bordered version\n//\n// Add borders all around the table and between all the columns.\n\n.table-bordered {\n border: $table-border-width solid $table-border-color;\n\n th,\n td {\n border: $table-border-width solid $table-border-color;\n }\n\n thead {\n th,\n td {\n border-bottom-width: (2 * $table-border-width);\n }\n }\n}\n\n\n// Zebra-striping\n//\n// Default zebra-stripe styles (alternating gray and transparent backgrounds)\n\n.table-striped {\n tbody tr:nth-of-type(odd) {\n background-color: $table-accent-bg;\n }\n}\n\n\n// Hover effect\n//\n// Placed here since it has to come after the potential zebra striping\n\n.table-hover {\n tbody tr {\n @include hover {\n background-color: $table-hover-bg;\n }\n }\n}\n\n\n// Table backgrounds\n//\n// Exact selectors below required to override `.table-striped` and prevent\n// inheritance to nested tables.\n\n@each $color, $value in $theme-colors {\n @include table-row-variant($color, theme-color-level($color, -9));\n}\n\n@include table-row-variant(active, $table-active-bg);\n\n\n// Inverse styles\n//\n// Same table markup, but inverted color scheme: dark background and light text.\n\n.thead-inverse {\n th {\n color: $table-inverse-color;\n background-color: $table-inverse-bg;\n }\n}\n\n.thead-default {\n th {\n color: $table-head-color;\n background-color: $table-head-bg;\n }\n}\n\n.table-inverse {\n color: $table-inverse-color;\n background-color: $table-inverse-bg;\n\n th,\n td,\n thead th {\n border-color: $table-inverse-border-color;\n }\n\n &.table-bordered {\n border: 0;\n }\n\n &.table-striped {\n tbody tr:nth-of-type(odd) {\n background-color: $table-inverse-accent-bg;\n }\n }\n\n &.table-hover {\n tbody tr {\n @include hover {\n background-color: $table-inverse-hover-bg;\n }\n }\n }\n}\n\n\n// Responsive tables\n//\n// Add `.table-responsive` to `.table`s and we'll make them mobile friendly by\n// enabling horizontal scrolling. Only applies <768px. Everything above that\n// will display normally.\n\n.table-responsive {\n @include media-breakpoint-down(md) {\n display: block;\n width: 100%;\n overflow-x: auto;\n -ms-overflow-style: -ms-autohiding-scrollbar; // See https://github.com/twbs/bootstrap/pull/10057\n\n // Prevent double border on horizontal scroll due to use of `display: block;`\n &.table-bordered {\n border: 0;\n }\n }\n}\n","// Tables\n\n@mixin table-row-variant($state, $background) {\n // Exact selectors below required to override `.table-striped` and prevent\n // inheritance to nested tables.\n .table-#{$state} {\n &,\n > th,\n > td {\n background-color: $background;\n }\n }\n\n // Hover states for `.table-hover`\n // Note: this is not available for cells or rows within `thead` or `tfoot`.\n .table-hover {\n $hover-background: darken($background, 5%);\n\n .table-#{$state} {\n @include hover {\n background-color: $hover-background;\n\n > td,\n > th {\n background-color: $hover-background;\n }\n }\n }\n }\n}\n","// Bootstrap functions\n//\n// Utility mixins and functions for evalutating source code across our variables, maps, and mixins.\n\n// Ascending\n// Used to evaluate Sass maps like our grid breakpoints.\n@mixin _assert-ascending($map, $map-name) {\n $prev-key: null;\n $prev-num: null;\n @each $key, $num in $map {\n @if $prev-num == null {\n // Do nothing\n } @else if not comparable($prev-num, $num) {\n @warn \"Potentially invalid value for #{$map-name}: This map must be in ascending order, but key '#{$key}' has value #{$num} whose unit makes it incomparable to #{$prev-num}, the value of the previous key '#{$prev-key}' !\";\n } @else if $prev-num >= $num {\n @warn \"Invalid value for #{$map-name}: This map must be in ascending order, but key '#{$key}' has value #{$num} which isn't greater than #{$prev-num}, the value of the previous key '#{$prev-key}' !\";\n }\n $prev-key: $key;\n $prev-num: $num;\n }\n}\n\n// Starts at zero\n// Another grid mixin that ensures the min-width of the lowest breakpoint starts at 0.\n@mixin _assert-starts-at-zero($map) {\n $values: map-values($map);\n $first-value: nth($values, 1);\n @if $first-value != 0 {\n @warn \"First breakpoint in `$grid-breakpoints` must start at 0, but starts at #{$first-value}.\";\n }\n}\n\n// Replace `$search` with `$replace` in `$string`\n// Used on our SVG icon backgrounds for custom forms.\n//\n// @author Hugo Giraudel\n// @param {String} $string - Initial string\n// @param {String} $search - Substring to replace\n// @param {String} $replace ('') - New value\n// @return {String} - Updated string\n@function str-replace($string, $search, $replace: \"\") {\n $index: str-index($string, $search);\n\n @if $index {\n @return str-slice($string, 1, $index - 1) + $replace + str-replace(str-slice($string, $index + str-length($search)), $search, $replace);\n }\n\n @return $string;\n}\n\n// Color contrast\n@mixin color-yiq($color) {\n $r: red($color);\n $g: green($color);\n $b: blue($color);\n\n $yiq: (($r * 299) + ($g * 587) + ($b * 114)) / 1000;\n\n @if ($yiq >= 150) {\n color: #111;\n } @else {\n color: #fff;\n }\n}\n\n// Retreive color Sass maps\n@function color($key: \"blue\") {\n @return map-get($colors, $key);\n}\n\n@function theme-color($key: \"primary\") {\n @return map-get($theme-colors, $key);\n}\n\n@function grayscale($key: \"100\") {\n @return map-get($grays, $key);\n}\n\n// Request a theme color level\n@function theme-color-level($color-name: \"primary\", $level: 0) {\n $color: theme-color($color-name);\n $color-base: if($level > 0, #000, #fff);\n\n @if $level < 0 {\n // Lighter values need a quick double negative for the Sass math to work\n @return mix($color-base, $color, $level * -1 * $theme-color-interval);\n } @else {\n @return mix($color-base, $color, $level * $theme-color-interval);\n }\n}\n","// scss-lint:disable QualifyingElement, VendorPrefix\n\n//\n// Textual form controls\n//\n\n.form-control {\n display: block;\n width: 100%;\n // // Make inputs at least the height of their button counterpart (base line-height + padding + border)\n // height: $input-height;\n padding: $input-btn-padding-y $input-btn-padding-x;\n font-size: $font-size-base;\n line-height: $input-btn-line-height;\n color: $input-color;\n background-color: $input-bg;\n // Reset unusual Firefox-on-Android default style; see https://github.com/necolas/normalize.css/issues/214.\n background-image: none;\n background-clip: padding-box;\n border: $input-btn-border-width solid $input-border-color;\n\n // Note: This has no effect on `s in CSS.\n @if $enable-rounded {\n // Manually use the if/else instead of the mixin to account for iOS override\n border-radius: $input-border-radius;\n } @else {\n // Otherwise undo the iOS default\n border-radius: 0;\n }\n\n @include box-shadow($input-box-shadow);\n @include transition($input-transition);\n\n // Unstyle the caret on ` receives focus\n // in IE and (under certain conditions) Edge, as it looks bad and cannot be made to\n // match the appearance of the native widget.\n // See https://github.com/twbs/bootstrap/issues/19398.\n color: $input-color;\n background-color: $input-bg;\n }\n}\n\n// Make file inputs better match text inputs by forcing them to new lines.\n.form-control-file,\n.form-control-range {\n display: block;\n}\n\n\n//\n// Labels\n//\n\n// For use with horizontal and inline forms, when you need the label text to\n// align with the form controls.\n.col-form-label {\n padding-top: calc(#{$input-btn-padding-y} - #{$input-btn-border-width} * 2);\n padding-bottom: calc(#{$input-btn-padding-y} - #{$input-btn-border-width} * 2);\n margin-bottom: 0; // Override the `