From 8e2987ed5313c84f2b323fc0ede2d25e0717bbe4 Mon Sep 17 00:00:00 2001
From: Thomas Walker Lynch <thomas.lynch@reasoningtechnology.com>
Date: Wed, 13 Feb 2019 17:16:02 +0100
Subject: [PATCH] adds ss_cache_probs

---
 try/sss_cache_probs/example.txt     |  12 +++++
 try/sss_cache_probs/sss_cache       | Bin 0 -> 19200 bytes
 try/sss_cache_probs/sss_cache.cli.c |   4 +-
 try/sss_cache_probs/sss_cache.cli.o | Bin 0 -> 1688 bytes
 try/sss_cache_probs/sss_cache.lib.c |  65 +++-------------------------
 try/sss_cache_probs/sss_cache.lib.o | Bin 4288 -> 2880 bytes
 6 files changed, 20 insertions(+), 61 deletions(-)
 create mode 100644 try/sss_cache_probs/example.txt
 create mode 100755 try/sss_cache_probs/sss_cache
 create mode 100644 try/sss_cache_probs/sss_cache.cli.o

diff --git a/try/sss_cache_probs/example.txt b/try/sss_cache_probs/example.txt
new file mode 100644
index 0000000..d40b0be
--- /dev/null
+++ b/try/sss_cache_probs/example.txt
@@ -0,0 +1,12 @@
+> ./sss_cache
+Checking we are running from a user and are setuid root.
+uid 49972, gid 49972, euid 0 egid 49972
+yes, uid is not zero, and euid is zero, so we are setuid to the root user.
+dispatching sss_cache -U to clear users
+dispatching:
+arg: 0x7ffdbebdf6f0 /usr/sbin/sss_cache
+arg: 0x7ffdbebdf6f8 -U
+
+/usr/sbin/sss_cache must be run as root
+sss_cache failed
+
diff --git a/try/sss_cache_probs/sss_cache b/try/sss_cache_probs/sss_cache
new file mode 100755
index 0000000000000000000000000000000000000000..39fd5b88f4f2082fbd0870a43ebe25ac2360f832
GIT binary patch
literal 19200
zcmeHPe{2-joqxNFu|vYz4*B5%DH95nP4L<VLY(B1%o-Mk*8B+I)VY=n>)o}zu->(H
zXTe0_;?yD6jpH7@ORB1BPZp|9D7`<p>RKU`26G^s=Bmm?r<BXJI<7}6ySR<p{5XpP
z_CDV??>pXI??%;Kd(xfu!Or)6Ki?nkz3;qvGjHBJKObn{;&!<NC%1T95I0k!OUOP7
zF}O*x3TqX&3tfCt+$R<SS%9A|B}DBU(_XhNU|Oa0JfLKEQpr!cb#TP%M8tA=oTFSr
zqGUIhbd|NKUTL#TMUBmqT?J(oFI4-OR!~Ebn6jQzo+iaYXu6$Ibd(x`#5C8AT-Nxc
zSkyeO%M8<)YWJw3Y)35FY06Ghc1$N!AeeGIDJJy0p!{8M>)?pjiHObeI7dmB(ym`v
zVahL9DOpfmW|;1^VZoH`o`jtWnbP=p!eQU7$}1I@8Pz_fiWN<<XxGLKO|fueEE-P_
zG!C?GY}~lPmrD57$##=}(%rhFLso=N3x}5Kd>4L%k^JvM@v{?aH>^*OoNWHi(D%=N
z>(=!bNVgh4@*&$r8CQ*)F!J4S-z&=>{@pNlOCb5_QLuOBLy{w`82)4lJXiv^O5lG5
zT*I$0H3BGB?(HS;wi5W$CGe#s@Kg!>GbQl*OW>adUMuRvpsph)1o!g|$P+$VfD81G
z5Os%*qPshmPW6h&KqPdiKO*`g$z&oax)aHRB4vdWX-o7(te$9?ILL@gg9C{W+I=_~
zwIY%w_;4_4^@Exwm0+f<VA3-Cg3-7*)ZL$q#;tC#wS8OLCUc#yrNzmv^F0WQp1wp}
zS(vD|8$Hl1|51MaKWe87ICVX~UcT~`ucAA8#B&NuFOA+t)_+dQNHb69l2V`LYm<Q4
z99;HisU@6v(pX4+n-j;Aa4wr<bt=v@tWv!=X*sx?LD2dfTn&v<+MI(^8Jt>ka5Z#G
zk)DI|xhH{<gCh`5+LePZa!?^Ub8zbWoc8D7cQ6Rrn}aXT!TWP?Zw_A0mLpJ(Ksf^C
z2$UmGjzBpA|JNe$e)T7>8$;7o#&E?{6CSUQjalyOgfVoX>bz`9_Q9V6&aS?SWAzFh
zIpTXsHgzS7wEA7*>Ctd%Lh_f0cN0G*`L~IuN5QF6lK%(d=}~oRRPtwtr$@r6<C6al
z@$|?#H7NPliKj=yseZ|yAf6rxr}j(!>%`Ne;M6Y3|0VJC2soun{$=9n(Qm35Jhivw
z*V{5be#XfB+!(q#vup3R@v)h^bzzL38<b?c4kUZ`CCtD-I8OTKyM5IwUW5lBj-MXH
zgP`#k9jzs&38IkQc9wwbmG0x`yXTZCUT;eM7k(qjxmzA1Gh>{ae8O;DG=6-`s&zb6
zDi4MBRQ}*&H|cFadP#?o`Nib3XvM{fYd~E4&d)24^sl{4ia4wLjm*)LXKOTF$Z{s@
zaGE9`xs}ak0yidiOFBDwK++E;zbNU<aC&BV`|NPX2g89I{>)6~;@Mq}{bkf*=;#e$
zEgU*JE3A5SnlGRpM&{g^haq~CdcoNNs86Qh>@<ac>I7k@9T%?=TXjFz=q0emcwn*x
zh%p?PG%|rP@NWf(9}i4GOw<n3NXKbo1oF%~MrM4{i_$WIt3yYxX49)tlS`QLQcY@M
zV%NlglgVp0RZXrfLjflZG-$t5JasGS`v>P`$X=MfLIq~NUyrIAneTQ=@)~tCBQw$q
z(w;d+-LO3~G63@8n59)W1O}@cwjZx<=oqbT*mtVBAu?9o&^J-tkiJsgaCBz;81*~q
zu;a%zAlFPKj09?o%&}Im#>g@1x8SI|q8-0lOY+yq$QT~6EAk_1a4lMrIo57#T_7!h
zZ`{achb5?*Ff`qavwqpgq;VA=y)3Ld(Co{`F!j?kow3)Y<+(HKQ4c##U!pjjha>xp
zWg$5Gh7+TI$ElPqGJ)A^8<3l&7{2Yu&)f1@DguH_j^K3?3<YK}w!p@&z}VTJIP#a-
zF&PGCCZ9wNGJ)x#qto^Yb*YNp=T!8cVLQ2$D|+o|sEYI&W4L3&7~YOH24;+m3|04k
z$~uD`pL`p6*|2L3#>n=`;lT76I7E>@g7BLVqTAsTuC#S3a=Qa!nK?R*P+l=I9pwLt
zY-C^-1-q<O2<E;A;AyyH_Rar5)lizWo~)!I>0-FHL>di^AqFI#459Kr$Q@7Udi8&9
zTjnSJr?zE2@^|<%H~o9tM^;<)LUb4-jYRjfH_+8wHM#RTnsx4`$6C?yFV!mssTu8=
z>+PA3HfP@RXYcx{F?8N#Jp8ltuW0=K{67B|{QLaR_|4ogMUH2%BPz#zXQU@@<y4M9
zIRfPflp|1%Ksf^C2$Uo6|2+b<-jtg*^+rMmqwyZ?a6}6xBU&;Yj}zOSO!R3%EuD%a
zwO~9fWhuFErX>>z%g1XjSTfUAr`Kv&Ns}~U0~#%@0bn&@^+r=#e=^aN4EAY#>6E2)
z$-=Z8r}>43LWy+TVh2YeskIvUhMRc8(w>bZ6KiG7WQjm+B$eQnD92VpvwBe!DlJ>1
zY95ZJ`h!-em)e?2rOZ$;1g*vn4f>&2B$$-SsYRkGok}*Px}xzWM@=+#2#3+SgV9(d
z%=PS!#-pj;NI1vo;i%P%RY*;)OTwc}!DP>&&o}SW;^|n-r|rN|3nlvcDAfJIR0<BT
z)R@q?n)MB+H#4a7BZ~w)Jff}c7ust0TqM^!>l;*UV4QE7P6c}+P^aZu;acW-bQdVS
zL|OiuZ1z>qY0wz)?`5-tpqD`30Im3KHv3c1w?J=z-t~SqyBt%U=Rp4ibQ<(UP+D)N
z<a&0ua1GSBmfcZVbsRXYEiT7z0RHh}1|K9;)(}Rs;#Yz3+Tbb@;Wzl}Y<2=vcx$$J
z>poL``{AlV@x;<c*Q{T)l3?;h_4J~C>)~Jcy)`enH!WW1@wrf>l)nP_{+Vp{Jg6gg
zze!>#|69NpAaBpJ-|E=^5b_zccVC`;r?jU!PUF}5yKFW>@-5z)zi<b<bzk-byxPcu
zfVcjY3d7s{(n7=AI#jvUtH-^qes8niTi@o@+Prmb-kLUVm5j><l)oQ-I0oddoXQa>
zN1z;mas<i|C`X_ifpP@O5%^<9V4_x+?nf1+M`B7$@32`s$m=r4-^k5k&6Lt7<PqY>
zb(veHcv}CWMBj~4s#9`$ey7Cp4{v1?lK1FD>~FR~-&&v(Yk!*y+N|U}&!S~UO8kvq
zoz0576=mY#jIPTZ&we%4K%Teow}|&DeQlww&-hq{&2zo?D?R=uk;}&#mu$~*rH|D+
z$#Xn0?U4KdC0B0#*9d=CURdBpb$+)f`jn#GiXKw*B}Kog=-(*%Jw-1n`i`Q%RFulw
zx@prRT0OqVZqQnN_<UAd*WA+D($f5(R=*n)UL$DPc;kZ&C3M%d%+uZ2Ao~){DXG(L
z^{;ZR54Je_8CIx%P3Nsphh<FX>GZb>mNDi2p~|Z0355z8BQP0PN!Dl0)}5adYXX3r
z?{aNicE##E-3Rcwap<5KiUsjOvsjWRTNCOw@dCw)gsf;HPK~}NPyT@XEV;AO^zYdd
z*u8h#&K-Lo=j+w3@0u+;A=&b@pf%sZ`c%@j;><;59q*@*2xkni>%H(!V6{ML<y|IQ
z*RFdq5{yNA;)EBAr>4%wYDLTOT=U<LC;B<Zk?FjcLx;!id(^d9OozvFagQ!fX)&E<
zb<W;Vbe;~b7y6`z(ua!vA<r-M&;QBwQsP>W*WvGTEfrk9m1Ouwy<TwcIF3x`#r*fw
z;d8(2WBLG}`wG<u=sbR0@?cOo>DK3|(5{CIMRAX~S`=R(syxN~R5<tj+(JAUx%l}Y
zAFmX}?yDY*M0`Ka*S}5heLWvvB>4WHkK<`0=YGaA55_{RD8AUa53w#$kMIiTddm@b
zsCR364q|6LxN|L7Sq!fgokj6Go#!#zgMIYij>6Aj`S@L;*mHpgPgA_#Bwrs_i>~KF
zGVc-hih-i|+`gV%Baid+n2S<;mWosR^*j)_7_mV7R^GRA1&<NqUhLebS+>0d9#lBr
zhgkoJ!g(BJoW5TxR_-WpH}0-HCbIqsh3{8mB;(&z_-FzCkHB5n-*i&NjoL}+UHn`{
z&KGUnq;mPWT`J?S7`RK!KksXS7pp(LyDx@+wgmpCCGZ0!@I%1qyzu>i>-n<6c|2ph
zRGd#h-z93rH$J7aszZy_{}lO0918pSIq7G9KYv^4^ZbRK|4icZue%xPXMX=*=%!L}
zy{r2k-xuxyUTk06C~&RF^|D6!;d`uH<3Od>0k47nbGpt|l=NYxf7=opmunu7)DZ5T
zKhCsC{X7?vd8!0{palMW3H+~tQ#}jEf#-4azH@%D;@i;Iir{B}*J3wjm8R!O#|h6F
zCl@H`JHRRaKU8s$YdetrtHkqMNalT|&;2u^R6Hf>c^vW@T&JgWU1{3nUeZTD=kbKk
z`?r*T-dEkEteQ&r-wd4m7oOi;Qh%|aZ<Hy?H7U@J5`GSp!2hfS{%Q&QB=B1Iz0UqY
zSvU?isa@{*_rbp};pZaxLAyp(-01m5Cb_PPEtXA~K{a7_ueotUV=@x%4O;e&-=@|k
zpKtCzG_f5xl(brW3E>OI;|VOunpkYLe4#?#jKsrp7^WpwG-M_tu|z0WHy@WaaG$c$
z_@X-`uu~LE*eNTLG_5{N$P)2L3OhW*39~1b=nBTnu$4%r%wT#zVBNMqhRvj5-$UzK
zA1bb7(z>u2OeTXzP?D8ABD%2<9x=n|zP=+c$>C(9@>HF*W*?$Jb?dS>qWVxev1%z>
zN$0dfu_(lmSa+k0Q)16tPyo&g-W(=_VVYZZ`?m+oz>dwPi7Jv0r&`z_yZPxI{_Wc~
z<x3FMqy-3*d^2Du560%*!ra=vv(4Xb?%c9vPhhXP*WcD2Ag^dq$PA^@GC*p-uCDVA
zTiRAjpCFih2Zb342d$vfc(si;Usvq`o&&K(m-hMM!+|->-m5DMmerNJdke)>mc5l1
zmCW1Mi%yVAn7vr3k41#JZ6~zC=!&Rj*f|wcC_aEFbm}ygVyX5m7wCjzc25mj5h|W~
zZhzF?om|9W7rtDuLoRnHtG&zlF75r$`513y&PVN?(D|5Y?%lpg^#R&aoiDX_ROe&D
zmpamC1-n44q)mG{hi@7p$$sI(7aS3vzinHi73@)5Pdx4GN=LEbADgdz#P!lk5MTI6
z9R6%-C2h%}NHRt5K%|;tOvrGJ2gyL?`eT;x$x!>O$N=(m5ki)b9myBzRhM0F7`DvW
z7IsIsEjSOy!M-R)o1O%G;oy@6*v@b!gpa=9z}0QnOE$(Aw5(*bD{W!)_=6;Rze<lL
z7=~ry`4|6P4Sv6>#8Q{@L_dWez0+iSo~K<<fCgD^;`=LOc$<)C&-1yf%6=6qDq3j2
z8Tdzd2g>F1ysrxP2}<=gapu*|{X*e8K<S+?+w*(jW@Z013Jwy@)hWyN{C@T+V5G|S
zJdb=!RrCa8xk<Tmpl6Vyce-rP^UVY5#=lZ&@^b*|F+B)5y(4Cx=cUJ$L9?<itiOWA
zv&c|Y*`DXGW6FNNQsnXr+yA1nZ&P~OLS5!G^>RZ~4JLbfCsJttWniS@ybIxZuY9>G
z1i$}>icBi3%!&+hx%Qf}*OdK)qiJUpjAtV|y$X_R&(BvgN}+-quJqYXvEu6m_B;=t
zRSO5sJ0fLJSpQLF&+&KW>zZxgas)Qd@v}Mny&Ghx{;alOr4A0~bfqND-(9ge`&@IL
z==bo;wdeVNr?NLln3D?2AA`(`pSoO}_XPa+Sqk-;XG-5j(K|S{=XqA04<Hij+1wn@
z_+<#F@31|;ci_K&Gok9w{fq7RJpLPONrmnC{ltuVz-B$D$i((ce+e|#-g%GFZ0ir$
z#5uAZ)AtJOd7d+%><jygYL4UYL*&R8*MCsgrR+InuZYCxpgB1^a~*_y7V5EmXMsMK
z&(wnqjsKkZJ<C5Shn)r2PqFrJ-(?>}n>X5ArwSC^haSR@<HqAJt(S4zZ43MOrN?dh
aZh?^N&APS76sSm1SDUTzi2{QHR{R%lZDl?H

literal 0
HcmV?d00001

diff --git a/try/sss_cache_probs/sss_cache.cli.c b/try/sss_cache_probs/sss_cache.cli.c
index 6d0e934..39fee15 100644
--- a/try/sss_cache_probs/sss_cache.cli.c
+++ b/try/sss_cache_probs/sss_cache.cli.c
@@ -7,8 +7,8 @@
 
 int main(int argc, char **argv, char **env){
   char *command = argv[0];
-  if( argc != 2 ){
-    fprintf(stderr, "usage: %s subu", command);
+  if( argc != 1 ){
+    fprintf(stderr, "usage: %s", command);
     return 1;
   }
   return user_mk(argv[1]);
diff --git a/try/sss_cache_probs/sss_cache.cli.o b/try/sss_cache_probs/sss_cache.cli.o
new file mode 100644
index 0000000000000000000000000000000000000000..16f9c8f65fa2b489473ba0cf58953a5fecd1e9df
GIT binary patch
literal 1688
zcmbtU&ubG=5T4CyTQ!yV0}-mQ2dgcZB?&08phQFL9>hZ+*o(yN=Ea0|6WO<cC=?F?
zVadgRz_b5CPa=3I-aX{liy)YT-g*$~%<g;1bF;bF3G-&&_vV{<nR&_E%9F<_O#>+!
zJb>v=q5xa^)Gvi@36>!ZH7odT4aT`(Z)^p<Lo29_tYPKQ8iEy6js|;U&A(v{PZPr$
z){Z`fPH?bK_6IHdRPE=bkTm$b6cP`@ldoTT+<wV6j8zV>SuSrFYnxAN>qgNmn0cd+
z%NO&7{2gPh${L1c`w^bKyG~i*a<~F$Z>pg6Guldeap^slx`sF@$#YsBp3l5Xm6sP%
zTNpt=vd}G0!SCawQ$4X`06Kn>M8`}?qC?oHnIjz*XD|YENWQQR3p4Q-5V@$_GyLv|
zT|v#vL<3x(gRjoPfpcDWY^TLcXSZ!S;M(mDaKFJk51OyMcE@i*k2A0C?ohc~w4kI=
z&!YZ0jwDAQ3SnwD?uRJN0N@;|jDM!!X$3a~PWeeEV)ECnZ*POieJ`>t>3M9|HhtFj
z!ED&R4dyoIV0ztX<8)n@b?~gy^_ht;G0T11*}(v!u~xn5*)E&ZIiX`9pWa-2k|o4Q
z<ou#t6f1qQE2z|~5~?bF(To=Yq&`y}`I4>*{HDO;FZhEvj~mLN%5B_G&j01-kxM!M
znH}zBeY&?Q@%s1hkTCh4Wb8-bWF;W1<V*Vqap|j}-_(ub$7AVT5*EMzNN|b@mt5I@
z30Kicn%_tylyjm!5Lfago>ZH1XT(K|!qRW)Oah;<`0Nk@OVpp&KZ+rt|C=QKFTuCN
LsOciEGXeerkVTIN

literal 0
HcmV?d00001

diff --git a/try/sss_cache_probs/sss_cache.lib.c b/try/sss_cache_probs/sss_cache.lib.c
index 109a99f..0db485a 100644
--- a/try/sss_cache_probs/sss_cache.lib.c
+++ b/try/sss_cache_probs/sss_cache.lib.c
@@ -44,81 +44,28 @@ int user_mk(char *username){
   dbprintf("yes, uid is not zero, and euid is zero, so we are setuid to the root user.\n");
   #endif
 
-  //--------------------------------------------------------------------------------
-  char *home;
-  size_t home_len;
-  {
-    #ifdef DEBUG
-    dbprintf("making the home dir path\n");
-    #endif
-    char *prefix = "/home/";
-    home_len = strlen(prefix) + strlen(username);
-    home = (char *)malloc(home_len + 1);
-    if( !home ){
-      perror("sss_cache");
-      return -1;
-    }
-    strcpy (home, prefix);
-    strcpy (home + strlen(prefix), username);
-  }
-  #ifdef DEBUG
-  dbprintf("home dir path: \"%s\"\n", home);
-  #endif
-
   /*--------------------------------------------------------------------------------
-    note this from the man page:
-
-           -d, --home-dir HOME_DIR The new user will be created using HOME_DIR
-           as the value for the user's login directory. ... The directory HOME_DIR
-           does not have to exist but will not be created if it is missing.
   */
   uid_t useruid;
   gid_t usergid;
   {
     #ifdef DEBUG
-    dbprintf("dispatching useradd to create the user\n");
+    dbprintf("dispatching sss_cache -U to clear users\n");
     #endif
-    char *command = "/usr/sbin/useradd";
-    char *argv[5];
+    char *command = "/usr/sbin/sss_cache";
+    char *argv[3];
     argv[0] = command;
-    argv[1] = username;
-    argv[2] = "-d";
-    argv[3] = home;
-    argv[4] = (char *) NULL;
+    argv[1] = "-U";
+    argv[2] = (char *) NULL;
     char *envp[1];
     envp[0] = (char *) NULL;
     int ret = dispatch(argv, envp);
     if(ret == -1){
-      fprintf(stderr, "useradd failed\n");
+      fprintf(stderr, "sss_cache failed\n");
       return -1;
     }
-    struct passwd *pw_record = getpwnam(username);
-    if( pw_record == NULL ){
-      fprintf(stderr,"getpwnam failed after useradd for username, %s\n", username);
-    }
-    useruid = pw_record->pw_uid;
-    usergid = pw_record->pw_gid;
   }  
 
-  //--------------------------------------------------------------------------------
-  // create home directory
-  //   we have our reasons for doing this second (setting facls in different places)
-  {
-    #ifdef DEBUG
-    dbprintf("mkdir(%s, 0x0700)\n", home);
-    #endif
-    int ret = mkdir(home, 0x0700);
-    if( ret == -1 ){
-      perror("sss_cache");
-      return -1;
-    }
-    ret = chown(home, useruid, usergid);
-    if( ret == -1 ){
-      perror("sss_cache");
-      return -1;
-    }
-  }
-
   #ifdef DEBUG
   dbprintf("finished sss_cache without errors\n", username);
   #endif
diff --git a/try/sss_cache_probs/sss_cache.lib.o b/try/sss_cache_probs/sss_cache.lib.o
index edb0d0f45cd7af982d91d4750eb1d6ffd5b3f653..97c858430e3e8b1069931c9105b480ad29a9da65 100644
GIT binary patch
delta 851
zcmZ8fO=uHA6rSDu?k3sYB4iV-c3TzqU=7;Zcq)Xlu$M|NvEFn|qe&^TW)tvW&=3%o
zrPBB=B7)RY#DncEc+eD~Rq)_JJa{YQP+AWWg60sYGn+{$c`)<Md*8R;yf<uPyb)ek
z;k_8FPD^uo<@asfD%CzA9Cfno4>n8dI*FxqD7GoK>|)EF@7T$<t#zx<!oDslcq^q&
z_1y*b4XXY)``8icwzjWZT0`H}z7SW8-zhp*>1)ZlzJ_`0r*7?1?`EacJSv{oZI2_h
zwm*#E!$$^hPLqzTeuU%j6uzLQTRTI|V{b1)Uq2%Rr(OSU5Syi}xoQ+rnQZQ!Vw&cy
zl#$A$mC2-1xUZyE(nek>n(4gBqgc_*$ILs~Tx=jilSwp4l)FZDCB4KWIB@62MzJ+n
zB&JA*2|;?w&V{_LOH9z`hjJ(itAZO|dA_kz3@m$hpyj(B=y!uq2+Dq$kzs?AnNisC
z%h7X=8A5K1LA<(TQXCgy53|$9Sm78u4<p!N(eYV^1SdxyQ6-O&ykv&vWq5$u^&z%K
z^OwXS`g(}%(EKf7FK^K-fRQ+llfiLp_W<?lS82To3@<Zn(iP){KfHV;Kp8TlgjavY
zGqm3Cd4c9C0|&vsA?JnZB?uDYiRVIuzv=uY2&pVg2s5n7K-m+<kFNHQn}W(cq(&y}
z332w2g_Ghe8*%ldqRK^FJ=<%rA;#G!KKLch@(Z-M$-sm(!#T5J*&-NHoO|KxePMth
GjQt0K&e0kG

literal 4288
zcmbtYUu+ab7@zAYC<2y$ia~KiYueBrEk>;v&0({4AAkq&qKP8z?d^5f-rb(NvuPnT
zmYf*Y3kfd-UQN&t<3k@CgII;o#s@=Uf+WU-2S}>c1f!3d`hBxA*Xi^&n)s2qneR8>
z_xry2W@mQG`^LUkJ2Dv}B|}~&OPWLpnOwIt&hufOtRrhl!Hn-5GEXd=2h5DWbQc#F
zzryKh{F!h4#Kr<wVq;$Pw?%)e8Qp5`pKlg!H;sk8@!j~E=HHlDAZ%4*VxF*Wvw1I4
zn(^0Pya4@W%#@pRvS|pu`14C00$WN!V>D-to1CU;+%)4^?rX+Z%;rf<zlCIA(ztFm
zp*3bQEjTvj%*MnVi8kwzuRuCxvv3n!=FIp;%VSxXZ}@BmIuY%f8UK)^z}@uaugrZ$
z<UV7@C+nE7WI8#H+N?1t3?K>P6zFHTK5O6}5%YB6ym>ltT*@&vE;S}DEk<gE9|Y^R
z75))vWKdZ?V+yJ=MItKqsCgEvd6~zIXO}hu)<4zEcgDu&$!K$IT;w%bvGa&tCaZD3
zlPIxqp)qk`G1{P2{?~oY!o}u(B%F)C`&aAjt>pD$^DNC1SFuuW9=-y<L#|_wdbJTc
z=1?neXb{zEsFnl2N-Y|NPC%_%iO+=&i@XvIe4pjk;JQH&=!$yji0GXJpiTlvGs0Xi
zr1iib39KruMj@j`9*ioa%Y)jsAJv#7IO>GG6uE(><}-TC3H)B38IK5Pf`q<Yi6CY^
zWiEt*r1@$f^Qy&HjIirh9a{1NTDO?HhU`Lp7YW1gh;7-fLzd0&p*y<59Z5zdF9a9c
z#adyJtWt?WC_8X0=J1G!0%H^gyTYPZg8{c9eI+6t%9dAgN}O=SVfC>Z)F#2GRc286
zmZ6`F!NBRIT_LPt6teE_f}-?~_dnm?-y;fD_G(_}Iwjg#10D02>qm?_LEs1AN`{Aq
z_R#L(1BD(snA@Ejpu77A1_yQzJWIO|f~RS*1n+yUhip!^nPiR~B$@Hf%(k_w?>htc
zz*B%fD&~HI8;R^)-}zz3(7IJ-Bb&Y60aju%rNf);9`gHQyXkD(8=8<T{A(v!U}`5>
z!f(?RQ&~K7Z6r(DC!Hm$R#<NUWTTQNuK{3>K<iv#O~{TEye9=8NWlkF@O%nBoPr-n
z!3!z)TPe7mg1?)Bhbj2+6#Rn}{G$|n>FnkzUNL9$vv#C9N=n6g;MG`}z)6F91UtMr
zu!pOPtJsIE1m}d5#{!Qzpam7D1{X%9;@hOoPY{B3{V0()0J`#{OUfbwKbypM{jpl>
z{NV9apT_N=qu`T^bAQ3R1m#HtK@ficn#6Y^2!i-pXcB)0K@i086Gq}MA_#)`dT0`V
z4M7l@Po8Upye)dPSMzyK;CRIGg(-O&0+&3l&`*gTdGH)a`*Q-9_7{czvFP=<pKA7h
z3VkZYp1;{(4r_*WUXK?H$kn9db-*(#^SP0N|EAy@75l#hF7w|a_&Y?8`EOF}A6Ia^
zLuK5Z3a;ietl+BsA%V-dlJ~G;k8_g0sM!w+y^><j1TO3Lj?m9)cp!BA21LR2Zh<D_
zelKwSIk_WnnSUhoUlbnoImsdc2=YG!P4aIMxX%BCz$O1F!JAWf9#(h`X!g^>{td-m
zt*58pTNR!$jYmEY#}#|^c{r!w_>Pe4`Xq(tGsRxznbGX8i~PS;?A81!#6rPoVZwEi
z3y)TrRfL`eN$<*0;8d&}bH*9Tl`LkFTrmtuF7Ok@_N!H=26ONk=H%cjqAz5YJqiZs
z=D0`7@QLRnLH_?Q1qxiE{sztih9cj)iI&*PG4|V_;j@&7rplyv)lcFi2-Xba2$<kr
zqdW}_asA8VF&#i-5V0MJ0>8b`kW)ARum1QQfSk+r4s<FA|Ih-;{K13^{uzlT{fXN8
z-6UQ{eJvyzNIKcS0<avbrg`;crcCIzuM2-Yf9aoBd~vAfe-N;C`^R5)Femp3_YZxg
zzr-;gJvKmOQsiG3lX(B#4^8(+Oy4_z$X)RXc?K0l^!4K%-_C!l`2Pk=@x`I;{|}Ol
BJ;49~

-- 
2.20.1