From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7002935164998254592 X-Received: by 2002:adf:8064:: with SMTP id 91mr34376wrk.252.1630511676084; Wed, 01 Sep 2021 08:54:36 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a5d:6251:: with SMTP id m17ls135600wrv.1.gmail; Wed, 01 Sep 2021 08:54:35 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxcUKndJzLTEMbo8U3Gszrc+xPBP4N1YkHogV4pWxhzJybk2WIBFKIGWReamz9re5f2Xm6E X-Received: by 2002:a5d:554e:: with SMTP id g14mr64379wrw.48.1630511675141; Wed, 01 Sep 2021 08:54:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1630511675; cv=none; d=google.com; s=arc-20160816; b=EOFvrKoDJb/rDN5tDjvVQqixAYmUjOmupRrXLVEl+6Bdlppw46vmXj+tVEf/yKsijx RgEdPLPeLbqxOqrgWvySN9YiXa+/LlyKARgbELWluToQMfcZsuQOIhfu3uW0a6RhSRCz EJeEVFQ7ZaqUG71ryd6AbNR6SZcu2I4V5melWeIYFxKC68ztc2xkJVPKWOEzGSyDgT3w tDZgxHL7+lwb/5PT75Jw/CoGaCfY8ZkqqKsxL1bR3Gv1VrGvCUm2PCu2QVnxrp/gghAT 2JrqNUrMhSL585tsVA4UWBpbk3BFCWtu4FiBwakCDUDFn2FXQYzvj8o+sM9P7GzP6gdT nJtQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:references:in-reply-to:message-id:subject:cc:to:from :date; bh=P3/W8znewBrTmh8APMryGetcmlCmw08RNF60H76ASjU=; b=OhtjpfGYVUT21nCCgBih6GLEZAZ7E8dQ6mOJ6m6FSfLKZ7R+1BYkFG6lVfAg7IvLI5 5CGx57k0ufq49WJl527wwcXiNNUAqFMzCqLu9CN64/z3BgTTc5mYp9OOoauwCjPK52Gt 1SfUbc8vKAlprobKjbVeHkCWydhe6g88sB0HQQJh6qij0gUpEaeXwy1Ut1AfpKkaDiDG 55QSd9jkRvslXznH1N5DVjMFLlrO7QrO3Ducs4WsYS0OlCmUALP0BHoZscWxiKGz1bPh 39WQOkC94JV3Hh9B9kr6zJB+qg7ayoNH1+QKVdrzOZYmoy12FzgrfntlnpYLCa+j9WGL YDhQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id g17si5711wmq.4.2021.09.01.08.54.35 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 01 Sep 2021 08:54:35 -0700 (PDT) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id 181FsYOK019553 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Wed, 1 Sep 2021 17:54:34 +0200 Received: from md1za8fc.ad001.siemens.net ([139.25.0.59]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id 181FsYH1004757; Wed, 1 Sep 2021 17:54:34 +0200 Date: Wed, 1 Sep 2021 17:54:33 +0200 From: Henning Schild To: "Schultschik, Sven" Cc: "isar-users@googlegroups.com" Subject: Re: Fixed user ids Message-ID: <20210901175433.2b76961a@md1za8fc.ad001.siemens.net> In-Reply-To: References: X-Mailer: Claws Mail 3.18.0 (GTK+ 2.24.33; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/tA.fVqSr1fJm.JZNWbJn9wY"; protocol="application/pkcs7-signature"; micalg=SHA256 X-TUID: TEIYvXmh1oPn --Sig_/tA.fVqSr1fJm.JZNWbJn9wY Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hey, pre-fixed user ids would be an anti-pattern and would only work if debian would do it. If you need files to be owned by a specific user you chown and possibly chmod them in postinst. Using the name and not an id. You create that user in case it is not already there. https://github.com/ilbers/isar/blob/master/doc/user_manual.md#home-director= y-contents-prefilling and here the example postinst https://github.com/ilbers/isar/blob/master/meta-isar/recipes-app/example-ra= w/files/postinst This is also how debian does things. i.e. when a webserver needs the user "www", all web-server packages would create that user if not there, and chown/chmod based on the name. I think every file in a debian package will always belong to root:root, and deviations need to be chowned in postinst. Henning Am Wed, 1 Sep 2021 12:04:57 +0000 schrieb "Schultschik, Sven" : > Hi ISAR users, >=20 > =20 >=20 > I=E2=80=99m currently thinking about to freeze the users and group ids. >=20 > =20 >=20 > I have different ideas in mind, but I wanted to ask which would be > the best way with ISAR to generate fixed user and group ids. >=20 > =20 >=20 > Or do you just pre create all needed user accounts before installing > the packages within the build process? >=20 > =20 >=20 > Mit freundlichen Gr=C3=BC=C3=9Fen > Sven Angelo Schultschik >=20 > Siemens AG > Digital Industries > Process Automation > Software House Khe > DI PA DCP R&D 2 > =C3=96stliche Rheinbr=C3=BCckenstr. 50 > 76187 Karlsruhe, Deutschland > Tel.: +49 721 6672-0128 > Mobil: +49 162 4975705 > > mailto:sven.schultschik@siemens.com > www.siemens.com >=20 > Siemens Aktiengesellschaft: Vorsitzender des Aufsichtsrats: Jim > Hagemann Snabe; Vorstand: Roland Busch, Vorsitzender; Cedrik Neike, > Matthias Rebellius, Ralf P. Thomas, Judith Wiese; Sitz der > Gesellschaft: Berlin und M=C3=BCnchen, Deutschland; Registergericht: > Berlin-Charlottenburg, HRB 12300, M=C3=BCnchen, HRB 6684; WEEE-Reg.-Nr. DE > 23691322 >=20 --Sig_/tA.fVqSr1fJm.JZNWbJn9wY Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=smime.p7s MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0B BwEAAKCCG9UwggaPMIIEd6ADAgECAhQMIWOkSST/t/zbZ1rNyu5yCMypWjANBgkq hkiG9w0BAQsFADBIMQswCQYDVQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGlt aXRlZDEeMBwGA1UEAxMVUXVvVmFkaXMgUm9vdCBDQSAzIEczMB4XDTE2MDYwNjE0 NDM1OVoXDTMxMDYwNjE0NDM1OVowVDELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1 b1ZhZGlzIExpbWl0ZWQxKjAoBgNVBAMMIVF1b1ZhZGlzIEVudGVycHJpc2UgVHJ1 c3QgQ0EgMyBHMzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKDQr9a8 kNTqqWTbSb/ABorCqUtKPZOVCnndOfZYMlpGnzwNziaqyM8wjLkcOxT7xVfOpLqY IMZJs3jPKhNH6mPc8NYTwGTkIAcn65v+3TR5i0Z6ltS9CTYyHQYKGU7BgQcUUqEh Fs2aAu9gaQcO2Rq6pc6AG11dKYGAULWziUdTdcMesfNN2rOKMGAiJZWuGk8kuoZv RaIUr87uox1x1SZSNinHvf8CBgV35d8s08jFW80xP/3AkdLSDR+rQpd4TUDeiSKE yxzdKLqfqDc1TotD52Hjav1bv2qPWdz6gv/pl7Yb9FbNcrvBRMUzQWz0BE6V2ch5 Cd6hG/LoS+sCfF74izNdmun0T4NUAvjyTp0L4OjOaKsq558QyXQEsQoCbTLkl5Bc OL5qJOJmp1WE7kcFBEF7GnVHt1fbCYfRKxwykc0KGsb31+7hzwRSHhvhY1kc+S4p X6vEKG1RVQZrPlI0ho1crBv0OsuponO8oz5My8CoPWb7ZNgbeJcAPLuxg7LH275a U8AGgrINSLZHu9TOEQKsQ+Zi3jTJYaxaL9Q7vhSinOvyCaifMyswSYNSJZ1LALfq 9pUnEnPm8czWqjZCQPn7Xk4pOD3/aFh84uX/dX0bT7XkOCTeAhsVOK68kmZOW0lU H4hMUxTAZsBo1nR0uDERMFLFYoj5xcX9+OErAgMBAAGjggFjMIIBXzAPBgNVHRMB Af8EBTADAQH/MEkGA1UdIARCMEAwPgYEVR0gADA2MDQGCCsGAQUFBwIBFihodHRw Oi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MHQGCCsGAQUFBwEB BGgwZjAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29t MDgGCCsGAQUFBzAChixodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2 cmNhM2czLmNydDAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUxhfQvKjqAkPy GwaZXSuQILnXnOQwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5xdW92YWRp c2dsb2JhbC5jb20vcXZyY2EzZzMuY3JsMB0GA1UdDgQWBBTwFmAimDWJL4b8zdmH HA1jVW06RzANBgkqhkiG9w0BAQsFAAOCAgEAJ3C6bK6r2BE5pdemBIiZIvbJ3B5B QnGq9wofNSaVvKGAD5pOnu40wdxzXvatWWyy6rY72lC3wSrYgTbXNhwaK+FESOzd mhIsezTiBI/yY0HvuLsQyGYeAJiN5vuA199dz1EKyR00INsEWXmG7JsaGacnu3l7 VXM9n6w2NaCY1dxen3Pw1QkGg9mSbd/wLue0mQ33gQdJJyr+Fs5Jwyf2VoMm2i5L tb4DMP3WvdHipTSDo9g86dNBorBlFHtLgLUeBUyb8Ik9nVqIud/pPF18u6ivTeRi m1lKPjztcKwbawXFgcbiSDcn4qvDt64sVpmKmjOC1AZX0zYNd5j2YHP8m355ida/ zIMMacXFlmZ7QCoThQXJn73n8N4yf40VLGj9iiJHl5MPMao1COyhxSZx220rW6bI 94viPGJmM+NWwOV7eH8O7PPfubtWfYtMkYLglkeUcSSRnmvw7S8NpaxSATAvxS3D rvBY2RFKQs7yA1nGhT4KTn0l8hBiOBcuE3QK+5seyWo6xHwfYN9cYKG4j3wwWCwu SXyzgnKuKmHcJ5E57JoyWiws6QNI/ilj/TaLcCS2l32GYOEgnFM12GHEEsaltl4i H0+sXj1Pido/SdJhpMwCGFK9HLiqnOzD12zkZOu4Rl+nPWGpqhL3oXvGTIe6vgER WyQsJwMVYpBHCkkwgg2+MIILpqADAgECAhRWZvDMrJJk+lDZm+NfAOYzTdcWtTAN BgkqhkiG9w0BAQsFADBUMQswCQYDVQQGEwJCTTEZMBcGA1UECgwQUXVvVmFkaXMg TGltaXRlZDEqMCgGA1UEAwwhUXVvVmFkaXMgRW50ZXJwcmlzZSBUcnVzdCBDQSAz IEczMB4XDTIwMDYyOTE0MzYyNFoXDTI2MDYyOTE0MzYyNFowgZ8xCzAJBgNVBAYT AkRFMQ8wDQYDVQQIDAZCYXllcm4xETAPBgNVBAcMCE11ZW5jaGVuMRAwDgYDVQQK DAdTaWVtZW5zMREwDwYDVQQFEwhaWlpaWlpCMjEdMBsGA1UECwwUU2llbWVucyBU cnVzdCBDZW50ZXIxKDAmBgNVBAMMH1NpZW1lbnMgSXNzdWluZyBDQSBFRSBBdXRo IDIwMjAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKA7rBD0wDgBDk 8CO0JEnd28M8CkoDG7s18VD2qGLBFggKcxnuHs4fWWc9NMPfpW5Ikp7hJFrsF/hT +dCy5ID9TVJLIoG8LbGd3Tg3gfx9RlYPuXFeKGlgd0YbeXj2BQkTsLJKeJVEugxp bpynPrdjQZB3rAdBFnomiXmUiZ9IALdmoxchFT9sKcERwmkf0o8JkD3wlNY6sLrl NPs0tOhC0XUvKwYjdD17LUuiG6Mvt4z6T5Sp67QLpoztjU7HwwQ7d6tfPmTuPKCm RDT3WuBRnxdJsRj/tF69DiCNeFtWwjFMBRD/+FFpbxb7Y6Y1KqK4VleG8SRnuxP6 GdZ5pkZ9/NrJfjd79jJf8sm+fZu0QoQ0QptkAtp76834tITeqDzmtlR2bMqnqTGB yibwXo9r5P7cGqWUbGON72z87QOdVxR3K3ZyW7Kh/UWKl1buDNu+ZdEjettldb87 I/pIDClyMR38U+4wJfb/ByxS03PnvQa3tvVtfsKcNHfag2xhkGDvlDd9U7rDMaSI U9RebS5HmcEy11JRcAPd3Bk6QK7Z+10tN6gidxNiHlHMGcnUDsB/RTUwSIVL2tFl 2nn3tmKH7nn4wvl6MRY7ys7NTXiPE2qyNgdWpfYq7rtm8z+9pkvo1nb5OirpEFxA La5X2jC3Pk5rHkBpjsaQ9vRzynaYZwIDAQABo4IIOjCCCDYwEgYDVR0TAQH/BAgw BgEB/wIBADAfBgNVHSMEGDAWgBTwFmAimDWJL4b8zdmHHA1jVW06RzCBgQYIKwYB BQUHAQEEdTBzMDoGCCsGAQUFBzAChi5odHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9i YWwuY29tL3F2ZW50Y2EzZzMuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vcXZlbnRj YTNnMy5vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTCCBHgGA1UdHgSCBG8wggRroIIE ZzAYgRYuYWR2YW5jZWQtYWlyZm9pbHMuY29tMBaBFC5haXJwb3J0bXVuaWNobHMu Y29tMBiBFi5lZHVjYXRpb24tc2llbWVucy5jb20wCYEHLmV0bS5hdDAOgQwuZXZv c29mdC5jb20wHIEaLmZhc3QtdHJhY2tkaWFnbm9zdGljcy5jb20wDoEMLmZsZW5k ZXIuY29tMBSBEi5mbGVuZGVyLWdyYWZmLmNvbTAOgQwuaHNwa29lbG4uZGUwEoEQ Lmh1YmFjb250cm9sLmNvbTAUgRIua2Fjby1uZXdlbmVyZ3kuZGUwDoEMLmxtc2lu dGwuY29tMAqBCC5vZXouY29tMA+BDS5vbW5ldHJpYy5jb20wCoEILnNiay5vcmcw DoEMLnNpZW1lbnMuY29tMA2BCy5zaWVtZW5zLmV1MBWBEy5zaWVtZW5zLWVuZXJn eS5jb20wEoEQLnNpZW1lbnNnb3Z0LmNvbTAZgRcuc2llbWVucy1oZWFsdGhjYXJl LmNvbTAbgRkuc2llbWVucy1oZWFsdGhpbmVlcnMuY29tMBiBFi5zaWVtZW5zLWxv Z2lzdGljcy5jb20wF4EVLnNpZW1lbnMtc3RpZnR1bmcub3JnMA2BCy5zeWthdGVj LmRlMBOBES50cmVuY2gtZ3JvdXAuY29tMBCBDi52ZXJ0ZWlsZXIuY29tMBCBDi52 bXpiZXJsaW4uY29tMA+BDS53ZWlzc2dtYmguZGUwFIESLndpbmVyZ3ktZ3JvdXAu Y29tMBeBFWFkdmFuY2VkLWFpcmZvaWxzLmNvbTAVgRNhaXJwb3J0bXVuaWNobHMu Y29tMBeBFWVkdWNhdGlvbi1zaWVtZW5zLmNvbTAIgQZldG0uYXQwDYELZXZvc29m dC5jb20wG4EZZmFzdC10cmFja2RpYWdub3N0aWNzLmNvbTANgQtmbGVuZGVyLmNv bTATgRFmbGVuZGVyLWdyYWZmLmNvbTANgQtoc3Brb2Vsbi5kZTARgQ9odWJhY29u dHJvbC5jb20wE4ERa2Fjby1uZXdlbmVyZ3kuZGUwDYELbG1zaW50bC5jb20wCYEH b2V6LmNvbTAOgQxvbW5ldHJpYy5jb20wCYEHc2JrLm9yZzANgQtzaWVtZW5zLmNv bTAMgQpzaWVtZW5zLmV1MBSBEnNpZW1lbnMtZW5lcmd5LmNvbTARgQ9zaWVtZW5z Z292dC5jb20wGIEWc2llbWVucy1oZWFsdGhjYXJlLmNvbTAagRhzaWVtZW5zLWhl YWx0aGluZWVycy5jb20wF4EVc2llbWVucy1sb2dpc3RpY3MuY29tMBaBFHNpZW1l bnMtc3RpZnR1bmcub3JnMAyBCnN5a2F0ZWMuZGUwEoEQdHJlbmNoLWdyb3VwLmNv bTAPgQ12ZXJ0ZWlsZXIuY29tMA+BDXZtemJlcmxpbi5jb20wDoEMd2Vpc3NnbWJo LmRlMBOBEXdpbmVyZ3ktZ3JvdXAuY29tMIICZAYDVR0gBIICWzCCAlcwRgYMKwYB BAG+WAADjggAMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9i YWwuY29tL3JlcG9zaXRvcnkwNQYIKwYBBAGhaQcwKTAnBggrBgEFBQcCARYbaHR0 cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kvMDoGDSsGAQQBoWkHAgIDAgEwKTAnBggr BgEFBQcCARYbaHR0cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kvMDoGDSsGAQQBoWkH AgIDAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kv MDoGDSsGAQQBoWkHAgIEAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5zaWVt ZW5zLmNvbS9wa2kvMDoGDSsGAQQBoWkHAgIDAgIwKTAnBggrBgEFBQcCARYbaHR0 cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kvMDoGDSsGAQQBoWkHAgIDAQIwKTAnBggr BgEFBQcCARYbaHR0cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kvMDoGDSsGAQQBoWkH AgIEAQIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5zaWVtZW5zLmNvbS9wa2kv MDcGCisGAQQBoWkHAgUwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5zaWVtZW5z LmNvbS9wa2kvMDUGCCsGAQQBoWljMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu c2llbWVucy5jb20vcGtpLzApBgNVHSUEIjAgBggrBgEFBQcDAgYIKwYBBQUHAwQG CisGAQQBgjcUAgIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5xdW92YWRp c2dsb2JhbC5jb20vcXZlbnRjYTNnMy5jcmwwHQYDVR0OBBYEFNbv+6fnKrHAXUxo hcItj1ZmfoLuMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAAY3A /NWZXtvb9ppNZIVwfHwhpmaFOulcpe+ntuO5GDqdEejp8bIEfuN4uJEGEYfg1Bml D3oZebPL9fLIwxurhZvSuQG6+7Kptqe0Oynyj/FmB49k2CZyiimZPJO44jN1u6l7 BpB4jxah+AfK4ZUU8ADDHIIOZsfcrSDz5dQhIQ2xZ4FsTIiPxRy8NZqRuoTlcYGn 8OgFikzJp4p4e6MkFoplijk56HrNIeKTwXz1Zd3BLe14bLwYliHl+rLvjVP1OUfe FENzFR6S6eUYl/6wbPitl6i9E5KTAiy8QWXWoGLXeTz1CDpBFVDCdnS5yUwHkQko RjiyW2E58QGbJWBxelOZXhePDNjDHXelXAkFPRL95Cx8UWrxsRSmShOyO+0ennq1 LnNudVGzmzVpDGRZhny6gdXJELHqmsvD5eNbwdNhgSrEHD3ZnXjyIQABCx8biyYT lY+LaUBHjQR8ptpYn+GndwJYCuL71oGyjH99bTAF+qrWG2SX6oCl/qny2v13mWWq GrcRuGyKZbUX4wLpkLL9bp6Xz+NTNNU3mdEq/tbmeQa1CGOAonzZn2O0+6voUWlY G2CdnEtpUoCihoQeEEcvyHJEK9xBNY3B2tvrGGmYEFVFHFPhFvDJeexv4zjZXZqf AQCG1dHvwaJ8gMm1YyPP/9AOoDRvEjW8Kd8xLjswggd8MIIFZKADAgECAhB7Nr8a z5id/ie58hOV6Q7YMA0GCSqGSIb3DQEBCwUAMIGfMQswCQYDVQQGEwJERTEPMA0G A1UECAwGQmF5ZXJuMREwDwYDVQQHDAhNdWVuY2hlbjEQMA4GA1UECgwHU2llbWVu czERMA8GA1UEBRMIWlpaWlpaQjIxHTAbBgNVBAsMFFNpZW1lbnMgVHJ1c3QgQ2Vu dGVyMSgwJgYDVQQDDB9TaWVtZW5zIElzc3VpbmcgQ0EgRUUgQXV0aCAyMDIwMB4X DTIxMDQyNjE4MDM0NVoXDTI0MDQyNjE4MDM0NVowYTERMA8GA1UEBRMIWjAwM0JQ TVIxEDAOBgNVBCoTB0hlbm5pbmcxDzANBgNVBAQTBlNjaGlsZDEQMA4GA1UEChMH U2llbWVuczEXMBUGA1UEAxMOU2NoaWxkIEhlbm5pbmcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC4GX9J2sE8IJsbEyLflaY0M7on3wc/wF6IuYNt/InO 2O6b159oAo+L1Vqx1hH771vPp6YZEu9ZgJqAsJpfpWwjM7ESW4P0NvF9RegwZ151 3zHjG0A7jbzIuDD6kiSH/4J5131bLmzxW93tLESTot/QmAQ166XfSJ6qzqxjamop QMEg2oKg+n6mouQNQDfXZvNuogIJ4w6PxjffPO6KR82tAdDiEXp5tAYt4WUNGL9I fF6uhTDeplq/5rG2nJsLXkhCL83roK7gu2UMy6APCXlR49Xy6c/KguEgV2ldrMfm 1oeUxF7WzslzJZMQ00QFllkOxwPv5rw97rg0aUryseq1AgMBAAGjggLvMIIC6zAp BgNVHSUEIjAgBggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQBgjcUAgIwHwYDVR0j BBgwFoAU1u/7p+cqscBdTGiFwi2PVmZ+gu4wgfcGCCsGAQUFBwEBBIHqMIHnMDIG CCsGAQUFBzAChiZodHRwOi8vYWguc2llbWVucy5jb20vcGtpP1paWlpaWkIyLmNy dDBBBggrBgEFBQcwAoY1bGRhcDovL2FsLnNpZW1lbnMubmV0L0NOPVpaWlpaWkIy LEw9UEtJP2NBQ2VydGlmaWNhdGUwSQYIKwYBBQUHMAKGPWxkYXA6Ly9hbC5zaWVt ZW5zLmNvbS9DTj1aWlpaWlpCMixvPVRydXN0Y2VudGVyP2NBQ2VydGlmaWNhdGUw IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNpZW1lbnMuY29tMEYGA1UdIAQ/MD0w OwYNKwYBBAGhaQcCAgMBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5zaWVt ZW5zLmNvbS9wa2kvMIHKBgNVHR8EgcIwgb8wgbyggbmggbaGJmh0dHA6Ly9jaC5z aWVtZW5zLmNvbS9wa2k/WlpaWlpaQjIuY3JshkFsZGFwOi8vY2wuc2llbWVucy5u ZXQvQ049WlpaWlpaQjIsTD1QS0k/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdIZJ bGRhcDovL2NsLnNpZW1lbnMuY29tL0NOPVpaWlpaWkIyLG89VHJ1c3RjZW50ZXI/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUsTDIKjp8E0peSG5z mHQoGs71qZQwDgYDVR0PAQH/BAQDAgeAMFEGA1UdEQRKMEigKgYKKwYBBAGCNxQC A6AcDBpoZW5uaW5nLnNjaGlsZEBzaWVtZW5zLmNvbYEaaGVubmluZy5zY2hpbGRA c2llbWVucy5jb20wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAgEAxwe4 rcG8HnrqvEm6W3duRpR68AI0GytOjeEAXhzsSaj1RS0VUAkwRIHhZ0I9NOIOk4GA mvr2lA1vnbVeGArSJAFwsb/d07yuzvS95iOsmW4SrXMdUY9Kna63wLeHUfrb1Sg1 Rgl0xZ1EdJuiAx5ZW4qHwwxju0DpKIKrYkxdDFbcUB0kHIsJ4EFF4BKiOwwojGKC fzukIA7ECwm39hCEfXYdSlcV1Y3F06rkukYXCBkFM0Enj3PMqln+uNz0XVPu2Pyn fVECwMXIhd2UtjqwB3MxnFKPf2BLEsB6GLe65mUrALqhWmwtqpJRQ7ySx2q5Zwa6 CQUTKFI9bhlRYO3j3pvaCgSk+MebetftUSMSgCCpeo8f8RC8scZsTW0d4HK8hOWM sW4fOLmOJwtNUGlH+qOxDMmNHCaeR2tTegIJp0pEciFYjU7g5i+08RLpNjWw2MpV sChbWztdelJQ7mlOURcb2egA0s+P0w1HzAhIPn3xw/jAnKZZhY8SadpPtCzkVVR9 6T6UMH7+9IkvFHYukdVR2yq/uvj1EJ/mJIWplRHRLVjHBWHK1ZflsqS78uE7iXAx z6hQshUKft5Dol8Bt7me30oFsL/73TNuy2QViaCQz4U52rs3GmCOFJOn4gZL8lkX NQosORrc5o+K84ml3DLF/83Nw8ulOLCagBP1+44xggJ2MIICcgIBATCBtDCBnzEL MAkGA1UEBhMCREUxDzANBgNVBAgMBkJheWVybjERMA8GA1UEBwwITXVlbmNoZW4x EDAOBgNVBAoMB1NpZW1lbnMxETAPBgNVBAUTCFpaWlpaWkIyMR0wGwYDVQQLDBRT aWVtZW5zIFRydXN0IENlbnRlcjEoMCYGA1UEAwwfU2llbWVucyBJc3N1aW5nIENB IEVFIEF1dGggMjAyMAIQeza/Gs+Ynf4nufITlekO2DANBglghkgBZQMEAgEFAKCB kzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTA5 MDExNTU0MzNaMCgGCSqGSIb3DQEJDzEbMBkwCwYJYIZIAWUDBAECMAoGCCqGSIb3 DQMHMC8GCSqGSIb3DQEJBDEiBCD7BX+gh5vEfyP1IAD6X9vm8XGy6n07iHxZgzir OYD6SDANBgkqhkiG9w0BAQEFAASCAQAAY5mY1t7/jFfDoUHnFsm8LI0MNCtu6OcE Jd3Jifm25gxR+J8PQ7UNiVY10qshWdXysbdFIhoaZ9gdJJjHXjy8RHSrBpxOSqGb mw2Tyk9EjG3ILvSsWEtrBJ5ZFif1hIreYJ+3hYeMGFyxwYaBDdZDQrpdhmkbLivR qQw3E1v/dNhqaTfBCzvttVyzzO6NUmmZmY8DSCHWo3Vt4VFey00ogO68JCFs+Q5n +pU96Y7rgM1xrI4W4x/nZyOg4vJOIdc50GYX0NpoUtZ1W+mBNULn3aU1gQftBwhi lY8ENV09b7IYbS+Ei3E+CFCtq4Fh4GTB9rVx9o+6lSLuaXi1gMF3AAAAAAAA --Sig_/tA.fVqSr1fJm.JZNWbJn9wY--