From 076ea27107ff9e6e792897f2390cff7867564504 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Fri, 19 Mar 2021 21:06:40 -0400 Subject: [PATCH 01/27] initial upload --- Dockerfile | 51 +++++++++++ LICENSE | 34 ++++++++ README.md | 40 ++++++++- config/node.cfg | 4 + hardening_manifest.yaml | 114 +++++++++++++++++++++++++ renovate.json | 31 +++++++ signatures/RPM-GPG-KEY-CentOS-Official | 30 +++++++ signatures/RPM-GPG-KEY-EPEL-8 | 28 ++++++ signatures/RPM-GPG-KEY-PGDG | 30 +++++++ 9 files changed, 360 insertions(+), 2 deletions(-) create mode 100644 Dockerfile create mode 100644 LICENSE create mode 100644 config/node.cfg create mode 100644 hardening_manifest.yaml create mode 100644 renovate.json create mode 100644 signatures/RPM-GPG-KEY-CentOS-Official create mode 100644 signatures/RPM-GPG-KEY-EPEL-8 create mode 100644 signatures/RPM-GPG-KEY-PGDG diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..d1b8900 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,51 @@ +ARG BASE_REGISTRY=registry1.dso.mil +ARG BASE_IMAGE=ironbank/opensource/python/python36 +ARG BASE_TAG=3.6 + +FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} + +COPY *.rpm / +COPY *.tar.gz / +COPY signatures/* / +COPY config/* /opt/zeek/etc/ + +USER 0 + +RUN dnf upgrade -y && \ + dnf install -y openssl-devel zlib-devel && \ + dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ + dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ + dnf localinstall -y /zeek-core-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /zeekctl-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /zeek-libcaf-devel-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /libbroker-devel-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /zeek-devel-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /zeek-btest-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /python3-smmap-3.0.1-2.el8.noarch.rpm && \ + dnf localinstall -y /python3-gitdb-4.0.1-2.el8.noarch.rpm && \ + dnf localinstall -y /python3-GitPython-3.1.0-1.el8.noarch.rpm && \ + dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ + dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ + dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ + rm *.tar.gz RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-PGDG RPM-GPG-KEY-EPEL-8 && \ + dnf clean all && \ + rm -rf /var/cache/dnf && \ + dnf clean all && \ + rm -rf /var/cache/dnf + +ENV ZEEKPATH .:/data/config:/opt/zeek/share/zeek:/opt/zeek/share/zeek/policy:/opt/zeek/share/zeek/site +ENV PATH /opt/zeek/bin:$PATH + +WORKDIR /opt/zeek/logs + +VOLUME /opt/zeek/logs + +# accept incoming connections +EXPOSE 9999 + +HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ + CMD curl -fs http://localhost:9999 || exit 1 + +ENTRYPOINT ["/opt/zeek/bin/zeek"] + +CMD ["-h"] diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..995ff38 --- /dev/null +++ b/LICENSE @@ -0,0 +1,34 @@ +Copyright (c) 1995-2021, The Regents of the University of California +through the Lawrence Berkeley National Laboratory and the +International Computer Science Institute. All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +(1) Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + +(2) Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + +(3) Neither the name of the University of California, Lawrence Berkeley + National Laboratory, U.S. Dept. of Energy, International Computer + Science Institute, nor the names of contributors may be used to endorse + or promote products derived from this software without specific prior + written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE +LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +POSSIBILITY OF SUCH DAMAGE. + +Note that some files in the distribution may carry their own copyright +notices. diff --git a/README.md b/README.md index 5dc6fa6..678488a 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,39 @@ -# +# zeek - The Zeek Network Security Monitor -Project template for all Iron Bank container repositories. \ No newline at end of file +Zeek is a powerful framework for network traffic analysis and security +monitoring. + +## Key Features: + +# In-depth Analysis** + Zeek ships with analyzers for many protocols, enabling + high-level semantic analysis at the application layer. + +# Adaptable & Flexible** + Zeek's domain specific scripting language enables site-specific + monitoring policies and means that it is not restricted to any + particular detection approach. + +# Efficient** + Zeek targets high-performance networks and is used operationally + at a variety of large sites. + +# Highly Stateful** + Zeek keeps extensive application-layer state about the network + it monitors and provides a high-level archive of a network's + activity. + +## Documentation URLs + +The best place to find information about getting started with Zeek is +our web site https://www.zeek.org + +* Documentation https://www.zeek.org/documentation/index.html +* Zeek installation https://docs.zeek.org/en/stable/install/install.html +* Development https://www.zeek.org/development/index.html +* Community https://www.zeek.org/community/index.html + +## License + +Zeek comes with a BSD license, allowing for free use with virtually no +restrictions. You can find it in this repository. diff --git a/config/node.cfg b/config/node.cfg new file mode 100644 index 0000000..7fe1b01 --- /dev/null +++ b/config/node.cfg @@ -0,0 +1,4 @@ +[zeek] +type=standalone +host=localhost +interface=eth0 # change this according to your listening interface in ifconfig diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml new file mode 100644 index 0000000..bcbb22d --- /dev/null +++ b/hardening_manifest.yaml @@ -0,0 +1,114 @@ +--- +apiVersion: v1 + +# The repository name in registry1, excluding /ironbank/ +name: "zeek/zeek" + +# List of tags to push for the repository in registry1 +# The most specific version should be the first tag and will be shown +# on ironbank.dsop.io +tags: +- "v4.0.0" +- "latest" + +# Build args passed to Dockerfile ARGs +args: + BASE_IMAGE: "opensource/python/python36" + BASE_TAG: "3.6" + +# Docker image labels +labels: + org.opencontainers.image.title: "zeek/zeek" + ## Human-readable description of the software packaged in the image + org.opencontainers.image.description: "Zeek is a framework for network traffic analysis and security + monitoring" + ## License(s) under which contained software is distributed + org.opencontainers.image.licenses: "BSD license" + ## URL to find more information on the image + org.opencontainers.image.url: "https://github.com/zeek/zeek" + ## Name of the distributing entity, organization or individual + org.opencontainers.image.vendor: "Zeek" + org.opencontainers.image.version: "v4.0.0" + ## Keywords to help with search (ex. "cicd,gitops,golang") + mil.dso.ironbank.image.keywords: "opensource" + ## This value can be "opensource" or "commercial" + mil.dso.ironbank.image.type: "opensource" + ## Product the image belongs to for grouping multiple images + mil.dso.ironbank.product.name: "Zeek" + +# List of resources to make available to the offline build context +resources: +- filename: zeek-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: ea5eec08f4cc416f6dec94016621aa86e8b81665cb3c5ef6d569dbf7971b9160 +- filename: zeek-core-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-core-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: de87b905723a906f608058ab7c053207db3ddcb9be2528ff94a70c260a516e71 +- filename: zeekctl-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeekctl-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: 17ca199b1bad89488e9afcc78fce01765b4407b869a72573cc9c772b2a7b7bd8 +- filename: zeek-devel-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-devel-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: 73558e4b7d7295b04feca71d6769d92a6f927e7261ece291e0913686c8fdf101 +- filename: zeek-libcaf-devel-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-libcaf-devel-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: 2ee88d08baa0efa0b49374c6864bcaaa29d714976b8a9eddb281cb38491db777 +- filename: libbroker-devel-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/libbroker-devel-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: 02eae87f068ce4674157ca8f98d90c3ea832b8f4032c1935314793fbd66bb0ac +- filename: zeek-btest-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-btest-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: bd38666aee10fb430e644bdd95d82adcb8f66b98ceacf65ef400727b7291256f +- filename: zeek-zkg-4.0.0-1.2.x86_64.rpm + url: https://download.zeek.org/binary-packages/CentOS_8/x86_64/zeek-zkg-4.0.0-1.2.x86_64.rpm + validation: + type: sha256 + value: a5c04a319340761202dbe8363621002ded79dbf81b6f2e56412a928038b08253 +- filename: libpcap-devel-1.9.1-4.el8.x86_64.rpm + url: http://mirror.centos.org/centos/8/PowerTools/x86_64/os/Packages/libpcap-devel-1.9.1-4.el8.x86_64.rpm + validation: + type: sha256 + value: 4f967ea5444c35b6c3bf331dbf4a65761582c4084a0e73e723353964a29b6707 +- filename: python3-semantic_version-2.6.0-5.el8.noarch.rpm + url: http://mirror.centos.org/centos/8/AppStream/aarch64/os/Packages/python3-semantic_version-2.6.0-5.el8.noarch.rpm + validation: + type: sha256 + value: a3bd7684ba2b6952c8d7ce3fe9055f9a29ed47ebee5acb0207e8c183d754b659 +- filename: python3-GitPython-3.1.0-1.el8.noarch.rpm + url: https://download-ib01.fedoraproject.org/pub/epel/8/Everything/aarch64/Packages/p/python3-GitPython-3.1.0-1.el8.noarch.rpm + validation: + type: sha256 + value: 76f7a705620e405429fc93d18aeda1d7a2273de42fb7d1861e3877759e6575d4 +- filename: python3-gitdb-4.0.1-2.el8.noarch.rpm + url: https://download-ib01.fedoraproject.org/pub/epel/8/Everything/aarch64/Packages/p/python3-gitdb-4.0.1-2.el8.noarch.rpm + validation: + type: sha256 + value: 04731f6c5b8709d268e7ddf4f180fe92d183709d3e49f7e3520b71f81fee2354 +- filename: python3-smmap-3.0.1-2.el8.noarch.rpm + url: https://download-ib01.fedoraproject.org/pub/epel/8/Everything/aarch64/Packages/p/python3-smmap-3.0.1-2.el8.noarch.rpm + validation: + type: sha256 + value: 4fd61dd28a6a07f205f5dc95e5a6153a6eabe1061b5be60e264aa55ba520e2a6 + +# List of project maintainers +maintainers: +- email: "shen_vickie@bah.com" +# # The name of the current container owner + name: "Vickie Shen" +# # The gitlab username of the current container owner + username: "shen_vickie" + cht_member: true diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..86abeae --- /dev/null +++ b/renovate.json @@ -0,0 +1,31 @@ +{ + "assignees": [ + "vickie.shen", + + ], + "baseBranches": [ + "development" + ], + "regexManagers": [ + { + "fileMatch": [ + "^hardening_manifest.yaml$" + ], + "matchStrings": [ + "org\\.opencontainers\\.image\\.version:\\s+\"(?.+?)\"" + ], + "depNameTemplate": "zeek/zeek", + "datasourceTemplate": "github-releases" + }, + { + "fileMatch": [ + "^hardening_manifest.yaml$" + ], + "matchStrings": [ + "tags:\\s+-\\s+\"(?.+?)\"" + ], + "depNameTemplate": "zeek/zeek", + "datasourceTemplate": "github-releases" + } + ] +} diff --git a/signatures/RPM-GPG-KEY-CentOS-Official b/signatures/RPM-GPG-KEY-CentOS-Official new file mode 100644 index 0000000..94ebc83 --- /dev/null +++ b/signatures/RPM-GPG-KEY-CentOS-Official @@ -0,0 +1,30 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.22 (GNU/Linux) + +mQINBFzMWxkBEADHrskpBgN9OphmhRkc7P/YrsAGSvvl7kfu+e9KAaU6f5MeAVyn +rIoM43syyGkgFyWgjZM8/rur7EMPY2yt+2q/1ZfLVCRn9856JqTIq0XRpDUe4nKQ +8BlA7wDVZoSDxUZkSuTIyExbDf0cpw89Tcf62Mxmi8jh74vRlPy1PgjWL5494b3X +5fxDidH4bqPZyxTBqPrUFuo+EfUVEqiGF94Ppq6ZUvrBGOVo1V1+Ifm9CGEK597c +aevcGc1RFlgxIgN84UpuDjPR9/zSndwJ7XsXYvZ6HXcKGagRKsfYDWGPkA5cOL/e +f+yObOnC43yPUvpggQ4KaNJ6+SMTZOKikM8yciyBwLqwrjo8FlJgkv8Vfag/2UR7 +JINbyqHHoLUhQ2m6HXSwK4YjtwidF9EUkaBZWrrskYR3IRZLXlWqeOi/+ezYOW0m +vufrkcvsh+TKlVVnuwmEPjJ8mwUSpsLdfPJo1DHsd8FS03SCKPaXFdD7ePfEjiYk +nHpQaKE01aWVSLUiygn7F7rYemGqV9Vt7tBw5pz0vqSC72a5E3zFzIIuHx6aANry +Gat3aqU3qtBXOrA/dPkX9cWE+UR5wo/A2UdKJZLlGhM2WRJ3ltmGT48V9CeS6N9Y +m4CKdzvg7EWjlTlFrd/8WJ2KoqOE9leDPeXRPncubJfJ6LLIHyG09h9kKQARAQAB +tDpDZW50T1MgKENlbnRPUyBPZmZpY2lhbCBTaWduaW5nIEtleSkgPHNlY3VyaXR5 +QGNlbnRvcy5vcmc+iQI3BBMBAgAhBQJczFsZAhsDBgsJCAcDAgYVCAIJCgsDFgIB +Ah4BAheAAAoJEAW1VbOEg8ZdjOsP/2ygSxH9jqffOU9SKyJDlraL2gIutqZ3B8pl +Gy/Qnb9QD1EJVb4ZxOEhcY2W9VJfIpnf3yBuAto7zvKe/G1nxH4Bt6WTJQCkUjcs +N3qPWsx1VslsAEz7bXGiHym6Ay4xF28bQ9XYIokIQXd0T2rD3/lNGxNtORZ2bKjD +vOzYzvh2idUIY1DgGWJ11gtHFIA9CvHcW+SMPEhkcKZJAO51ayFBqTSSpiorVwTq +a0cB+cgmCQOI4/MY+kIvzoexfG7xhkUqe0wxmph9RQQxlTbNQDCdaxSgwbF2T+gw +byaDvkS4xtR6Soj7BKjKAmcnf5fn4C5Or0KLUqMzBtDMbfQQihn62iZJN6ZZ/4dg +q4HTqyVpyuzMXsFpJ9L/FqH2DJ4exGGpBv00ba/Zauy7GsqOc5PnNBsYaHCply0X +407DRx51t9YwYI/ttValuehq9+gRJpOTTKp6AjZn/a5Yt3h6jDgpNfM/EyLFIY9z +V6CXqQQ/8JRvaik/JsGCf+eeLZOw4koIjZGEAg04iuyNTjhx0e/QHEVcYAqNLhXG +rCTTbCn3NSUO9qxEXC+K/1m1kaXoCGA0UWlVGZ1JSifbbMx0yxq/brpEZPUYm+32 +o8XfbocBWljFUJ+6aljTvZ3LQLKTSPW7TFO+GXycAOmCGhlXh2tlc6iTc41PACqy +yy+mHmSv +=kkH7 +-----END PGP PUBLIC KEY BLOCK----- \ No newline at end of file diff --git a/signatures/RPM-GPG-KEY-EPEL-8 b/signatures/RPM-GPG-KEY-EPEL-8 new file mode 100644 index 0000000..30b69a6 --- /dev/null +++ b/signatures/RPM-GPG-KEY-EPEL-8 @@ -0,0 +1,28 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFz3zvsBEADJOIIWllGudxnpvJnkxQz2CtoWI7godVnoclrdl83kVjqSQp+2 +dgxuG5mUiADUfYHaRQzxKw8efuQnwxzU9kZ70ngCxtmbQWGmUmfSThiapOz00018 ++eo5MFabd2vdiGo1y+51m2sRDpN8qdCaqXko65cyMuLXrojJHIuvRA/x7iqOrRfy +a8x3OxC4PEgl5pgDnP8pVK0lLYncDEQCN76D9ubhZQWhISF/zJI+e806V71hzfyL +/Mt3mQm/li+lRKU25Usk9dWaf4NH/wZHMIPAkVJ4uD4H/uS49wqWnyiTYGT7hUbi +ecF7crhLCmlRzvJR8mkRP6/4T/F3tNDPWZeDNEDVFUkTFHNU6/h2+O398MNY/fOh +yKaNK3nnE0g6QJ1dOH31lXHARlpFOtWt3VmZU0JnWLeYdvap4Eff9qTWZJhI7Cq0 +Wm8DgLUpXgNlkmquvE7P2W5EAr2E5AqKQoDbfw/GiWdRvHWKeNGMRLnGI3QuoX3U +pAlXD7v13VdZxNydvpeypbf/AfRyrHRKhkUj3cU1pYkM3DNZE77C5JUe6/0nxbt4 +ETUZBTgLgYJGP8c7PbkVnO6I/KgL1jw+7MW6Az8Ox+RXZLyGMVmbW/TMc8haJfKL +MoUo3TVk8nPiUhoOC0/kI7j9ilFrBxBU5dUtF4ITAWc8xnG6jJs/IsvRpQARAQAB +tChGZWRvcmEgRVBFTCAoOCkgPGVwZWxAZmVkb3JhcHJvamVjdC5vcmc+iQI4BBMB +AgAiBQJc9877AhsPBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRAh6kWrL4bW +oWagD/4xnLWws34GByVDQkjprk0fX7Iyhpm/U7BsIHKspHLL+Y46vAAGY/9vMvdE +0fcr9Ek2Zp7zE1RWmSCzzzUgTG6BFoTG1H4Fho/7Z8BXK/jybowXSZfqXnTOfhSF +alwDdwlSJvfYNV9MbyvbxN8qZRU1z7PEWZrIzFDDToFRk0R71zHpnPTNIJ5/YXTw +NqU9OxII8hMQj4ufF11040AJQZ7br3rzerlyBOB+Jd1zSPVrAPpeMyJppWFHSDAI +WK6x+am13VIInXtqB/Cz4GBHLFK5d2/IYspVw47Solj8jiFEtnAq6+1Aq5WH3iB4 +bE2e6z00DSF93frwOyWN7WmPIoc2QsNRJhgfJC+isGQAwwq8xAbHEBeuyMG8GZjz +xohg0H4bOSEujVLTjH1xbAG4DnhWO/1VXLX+LXELycO8ZQTcjj/4AQKuo4wvMPrv +9A169oETG+VwQlNd74VBPGCvhnzwGXNbTK/KH1+WRH0YSb+41flB3NKhMSU6dGI0 +SGtIxDSHhVVNmx2/6XiT9U/znrZsG5Kw8nIbbFz+9MGUUWgJMsd1Zl9R8gz7V9fp +n7L7y5LhJ8HOCMsY/Z7/7HUs+t/A1MI4g7Q5g5UuSZdgi0zxukiWuCkLeAiAP4y7 +zKK4OjJ644NDcWCHa36znwVmkz3ixL8Q0auR15Oqq2BjR/fyog== +=84m8 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/signatures/RPM-GPG-KEY-PGDG b/signatures/RPM-GPG-KEY-PGDG new file mode 100644 index 0000000..065274e --- /dev/null +++ b/signatures/RPM-GPG-KEY-PGDG @@ -0,0 +1,30 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1.4.7 (GNU/Linux) + +mQGiBEeD8koRBACC1VBRsUwGr9gxFFRho9kZpdRUjBJoPhkeOTvp9LzkdAQMFngr +BFi6N0ov1kCX7LLwBmDG+JPR7N+XcH9YR1coSHpLVg+JNy2kFDd4zAyWxJafjZ3a +9zFg9Yx+0va1BJ2t4zVcmKS4aOfbgQ5KwIOWUujalQW5Y+Fw39Gn86qjbwCg5dIo +tkM0l19h2sx50D027pV5aPsD/2c9pfcFTbMhB0CcKS836GH1qY+NCAdUwPs646ee +Ex/k9Uy4qMwhl3HuCGGGa+N6Plyon7V0TzZuRGp/1742dE8IO+I/KLy2L1d1Fxrn +XOTBZd8qe6nBwh12OMcKrsPBVBxn+iSkaG3ULsgOtx+HHLfa1/p22L5+GzGdxizr +peBuA/90cCp+lYcEwdYaRoFVR501yDOTmmzBc1DrsyWP79QMEGzMqa393G0VnqXt +L4pGmunq66Agw2EhPcIt3pDYiCmEt/obdVtSJH6BtmSDB/zYhbE8u3vLP3jfFDa9 +KXxgtYj0NvuUVoRmxSKm8jtfmj1L7zoKNz3jl+Ba3L0WxIv4+bRBUG9zdGdyZVNR +TCBSUE0gQnVpbGRpbmcgUHJvamVjdCA8cGdzcWxycG1zLWhhY2tlcnNAcGdmb3Vu +ZHJ5Lm9yZz6IYAQTEQIAIAUCR4PySgIbIwYLCQgHAwIEFQIIAwQWAgMBAh4BAheA +AAoJEB8W0uFELfD4jnkAoMqd6ZwwsgYHZ3hP9vt+DJt1uDW7AKDbRwP8ESKFhwdJ +8m91RPBeJW/tMLkCDQRHg/JKEAgA64+ZXgcERPYfZYo4p+yMTJAAa9aqnE3U4Ni6 +ZMB57GPuEy8NfbNya+HiftO8hoozmJdcI6XFyRBCDUVCdZ8SE+PJdOx2FFqZVIu6 +dKnr8ykhgLpNNEFDG3boK9UfLj/5lYQ3Y550Iym1QKOgyrJYeAp6sZ+Nx2PavsP3 +nMFCSD67BqAbcLCVQN7a2dAUXfEbfXJjPHXTbo1/kxtzE+KCRTLdXEbSEe3nHO04 +K/EgTBjeBUOxnciH5RylJ2oGy/v4xr9ed7R1jJtshsDKMdWApwoLlCBJ63jg/4T/ +z/OtXmu4AvmWaJxaTl7fPf2GqSqqb6jLCrQAH7AIhXr9V0zPZwADBQgAlpptNQHl +u7euIdIujFwwcxyQGfee6BG+3zaNSEHMVQMuc6bxuvYmgM9r7aki/b0YMfjJBk8v +OJ3Eh1vDH/woJi2iJ13vQ21ot+1JP3fMd6NPR8/qEeDnmVXu7QAtlkmSKI9Rdnjz +FFSUJrQPHnKsH4V4uvAM+njwYD+VFiwlBPTKNeL8cdBb4tPN2cdVJzoAp57wkZAN +VA2tKxNsTJKBi8wukaLWX8+yPHiWCNWItvyB4WCEp/rZKG4A868NM5sZQMAabpLd +l4fTiGu68OYgK9qUPZvhEAL2C1jPDVHPkLm+ZsD+90Pe66w9vB00cxXuHLzm8Pad +GaCXCY8h3xi6VIhJBBgRAgAJBQJHg/JKAhsMAAoJEB8W0uFELfD4K4cAoJ4yug8y +1U0cZEiF5W25HDzMTtaDAKCaM1m3Cbd+AZ0NGWNg/VvIX9MsPA== +=au6K +-----END PGP PUBLIC KEY BLOCK----- -- GitLab From d220a3579e8ed9db4fabe0acad2a488cadfe26fd Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Fri, 19 Mar 2021 21:17:39 -0400 Subject: [PATCH 02/27] remove tarball --- Dockerfile | 3 +-- README.md | 12 ++++++------ 2 files changed, 7 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index d1b8900..fde98fc 100644 --- a/Dockerfile +++ b/Dockerfile @@ -5,7 +5,6 @@ ARG BASE_TAG=3.6 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} COPY *.rpm / -COPY *.tar.gz / COPY signatures/* / COPY config/* /opt/zeek/etc/ @@ -27,7 +26,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.tar.gz RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-PGDG RPM-GPG-KEY-EPEL-8 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-PGDG RPM-GPG-KEY-EPEL-8 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/README.md b/README.md index 678488a..ba24171 100644 --- a/README.md +++ b/README.md @@ -3,22 +3,22 @@ Zeek is a powerful framework for network traffic analysis and security monitoring. -## Key Features: +## Key Features -# In-depth Analysis** +* In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at the application layer. -# Adaptable & Flexible** +* Adaptable & Flexible Zeek's domain specific scripting language enables site-specific monitoring policies and means that it is not restricted to any particular detection approach. -# Efficient** +* Efficient Zeek targets high-performance networks and is used operationally at a variety of large sites. -# Highly Stateful** +* Highly Stateful Zeek keeps extensive application-layer state about the network it monitors and provides a high-level archive of a network's activity. @@ -29,7 +29,7 @@ The best place to find information about getting started with Zeek is our web site https://www.zeek.org * Documentation https://www.zeek.org/documentation/index.html -* Zeek installation https://docs.zeek.org/en/stable/install/install.html +* Installation Guide https://docs.zeek.org/en/stable/install/install.html * Development https://www.zeek.org/development/index.html * Community https://www.zeek.org/community/index.html -- GitLab From 5ebf98489890aaad82ee899645a18c18e53ef979 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Mon, 22 Mar 2021 10:25:46 -0400 Subject: [PATCH 03/27] cleaned up PGP keys --- Dockerfile | 2 ++ signatures/RPM-GPG-KEY-PGDG | 30 ------------------------------ 2 files changed, 2 insertions(+), 30 deletions(-) delete mode 100644 signatures/RPM-GPG-KEY-PGDG diff --git a/Dockerfile b/Dockerfile index fde98fc..24b36c8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -11,6 +11,8 @@ COPY config/* /opt/zeek/etc/ USER 0 RUN dnf upgrade -y && \ + rpm --import RPM-GPG-KEY-CentOS-Official && \ + rpm --import RPM-GPG-KEY-EPEL-8 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ diff --git a/signatures/RPM-GPG-KEY-PGDG b/signatures/RPM-GPG-KEY-PGDG deleted file mode 100644 index 065274e..0000000 --- a/signatures/RPM-GPG-KEY-PGDG +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- -Version: GnuPG v1.4.7 (GNU/Linux) - -mQGiBEeD8koRBACC1VBRsUwGr9gxFFRho9kZpdRUjBJoPhkeOTvp9LzkdAQMFngr -BFi6N0ov1kCX7LLwBmDG+JPR7N+XcH9YR1coSHpLVg+JNy2kFDd4zAyWxJafjZ3a -9zFg9Yx+0va1BJ2t4zVcmKS4aOfbgQ5KwIOWUujalQW5Y+Fw39Gn86qjbwCg5dIo -tkM0l19h2sx50D027pV5aPsD/2c9pfcFTbMhB0CcKS836GH1qY+NCAdUwPs646ee -Ex/k9Uy4qMwhl3HuCGGGa+N6Plyon7V0TzZuRGp/1742dE8IO+I/KLy2L1d1Fxrn -XOTBZd8qe6nBwh12OMcKrsPBVBxn+iSkaG3ULsgOtx+HHLfa1/p22L5+GzGdxizr -peBuA/90cCp+lYcEwdYaRoFVR501yDOTmmzBc1DrsyWP79QMEGzMqa393G0VnqXt -L4pGmunq66Agw2EhPcIt3pDYiCmEt/obdVtSJH6BtmSDB/zYhbE8u3vLP3jfFDa9 -KXxgtYj0NvuUVoRmxSKm8jtfmj1L7zoKNz3jl+Ba3L0WxIv4+bRBUG9zdGdyZVNR -TCBSUE0gQnVpbGRpbmcgUHJvamVjdCA8cGdzcWxycG1zLWhhY2tlcnNAcGdmb3Vu -ZHJ5Lm9yZz6IYAQTEQIAIAUCR4PySgIbIwYLCQgHAwIEFQIIAwQWAgMBAh4BAheA -AAoJEB8W0uFELfD4jnkAoMqd6ZwwsgYHZ3hP9vt+DJt1uDW7AKDbRwP8ESKFhwdJ -8m91RPBeJW/tMLkCDQRHg/JKEAgA64+ZXgcERPYfZYo4p+yMTJAAa9aqnE3U4Ni6 -ZMB57GPuEy8NfbNya+HiftO8hoozmJdcI6XFyRBCDUVCdZ8SE+PJdOx2FFqZVIu6 -dKnr8ykhgLpNNEFDG3boK9UfLj/5lYQ3Y550Iym1QKOgyrJYeAp6sZ+Nx2PavsP3 -nMFCSD67BqAbcLCVQN7a2dAUXfEbfXJjPHXTbo1/kxtzE+KCRTLdXEbSEe3nHO04 -K/EgTBjeBUOxnciH5RylJ2oGy/v4xr9ed7R1jJtshsDKMdWApwoLlCBJ63jg/4T/ -z/OtXmu4AvmWaJxaTl7fPf2GqSqqb6jLCrQAH7AIhXr9V0zPZwADBQgAlpptNQHl -u7euIdIujFwwcxyQGfee6BG+3zaNSEHMVQMuc6bxuvYmgM9r7aki/b0YMfjJBk8v -OJ3Eh1vDH/woJi2iJ13vQ21ot+1JP3fMd6NPR8/qEeDnmVXu7QAtlkmSKI9Rdnjz -FFSUJrQPHnKsH4V4uvAM+njwYD+VFiwlBPTKNeL8cdBb4tPN2cdVJzoAp57wkZAN -VA2tKxNsTJKBi8wukaLWX8+yPHiWCNWItvyB4WCEp/rZKG4A868NM5sZQMAabpLd -l4fTiGu68OYgK9qUPZvhEAL2C1jPDVHPkLm+ZsD+90Pe66w9vB00cxXuHLzm8Pad -GaCXCY8h3xi6VIhJBBgRAgAJBQJHg/JKAhsMAAoJEB8W0uFELfD4K4cAoJ4yug8y -1U0cZEiF5W25HDzMTtaDAKCaM1m3Cbd+AZ0NGWNg/VvIX9MsPA== -=au6K ------END PGP PUBLIC KEY BLOCK----- -- GitLab From 07f546aac1cca54acd73966cc3b15dd63abee87b Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Mon, 22 Mar 2021 14:02:44 -0400 Subject: [PATCH 04/27] updated bind pkg --- Dockerfile | 2 +- hardening_manifest.yaml | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 24b36c8..c747569 100644 --- a/Dockerfile +++ b/Dockerfile @@ -28,7 +28,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-PGDG RPM-GPG-KEY-EPEL-8 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index bcbb22d..5625e72 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -103,6 +103,11 @@ resources: validation: type: sha256 value: 4fd61dd28a6a07f205f5dc95e5a6153a6eabe1061b5be60e264aa55ba520e2a6 +- filename: bind-9.11.20-5.el8_3.1.x86_64.rpm + url: http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages/bind-9.11.20-5.el8_3.1.x86_64.rpm + validation: + type: sha256 + value: 7ef153e7014c76ca1fe36019d58a0bd936e8d07495fc25aa94c2594400a6ea73 # List of project maintainers maintainers: -- GitLab From 01ac98e23a432bb81b4c6359518029f57baf978f Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Mon, 22 Mar 2021 19:27:22 -0400 Subject: [PATCH 05/27] added zeek gpg key --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index c747569..f6240be 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,6 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ + rpm --import repomd.xml.key.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -28,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ -- GitLab From 850b0dd34696716e78b3121c2d26f168ff99429f Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 09:06:14 -0400 Subject: [PATCH 06/27] added zeek gpg key --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index f6240be..6f50964 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import repomd.xml.key.meta4 && \ + rpm --import repomd.xml.asc.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ -- GitLab From a6278f5a95df00f5f533f5490ebb3731a95ce977 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 09:17:50 -0400 Subject: [PATCH 07/27] added zeek gpg key --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6f50964..7416227 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import repomd.xml.asc.meta4 && \ + rpm --import zeek.asc && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -29,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.asc fedora.gpg && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ -- GitLab From b7c50e396940afbbcd3c04745eca1d6e5418dda4 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 10:23:47 -0400 Subject: [PATCH 08/27] added gpg key --- Dockerfile | 2 +- signatures/zeek.asc | 337 ++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 338 insertions(+), 1 deletion(-) create mode 100644 signatures/zeek.asc diff --git a/Dockerfile b/Dockerfile index 7416227..9bd8286 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.asc fedora.gpg && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.asc && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/zeek.asc b/signatures/zeek.asc new file mode 100644 index 0000000..ce7adb7 --- /dev/null +++ b/signatures/zeek.asc @@ -0,0 +1,337 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +xsFNBE6zSSYBEACrOwJVLa1BNkII9aTZtPLEKrQHQ+2AYu3gkCEmlb6ga1fq+IJ2 +qIXV91FNuqxWa4tvkZ71AQffZpyFL0HMAzwdLrYUZXOtGkc7H/VVl4BKmQNEvCLF +QmiRRMdNx+4Abh7EZzgrjXH7HEs5t34llWwUa7rDffXTPdMRcH+I7W99CmGCIwhC +S+Eltbh4QjxrrkQF+CWGvKqzDdUWARcM8GM/REbDE9bDG6KJttCKr7xeT4iFrbPA +8YqNPhSNgSPcQjQQmFTKyqe2/Rwm9BKh7n8T3JZ9l/OQEO6P8NN9vIut/+ohLIGv +izxV5uX6vU9Ama4F6iPthG/IUhUq5S0tNdI8X/I8IkPpC8s0Z3SFXTgft6b63t4g +VsTbnDex8k67RoxWeECfSlq3lodJUmNt1H623IutFCmkNMreU8H7hj+3b+M+mQm5 +VqXNr1a9YZps5Ao2vzl1flQnp+2Frep9WaW/9zSaG0DiumYIOkDsGOEfDAo9OqMy +F/kDDt//qWCoThusMktyZadVJz60iDTpfiBgSjL+APUrqDEPdnxyktS8nhOpkLQr +1U7l3SuHXquiqSh605rJ+a654no0TwZ/yooQfKE+s3DGMe0LvHKlraUw5MohwG/J +zAzWQWNuU6ogb42dGZgkNnsxOSmU5FN2VSESUbeeMZzQEpBSp0aAH5WfrQARAQAB +zR1UaGUgWmVlayBUZWFtIDxpbmZvQHplZWsub3JnPsLBlwQTAQoAQQIbAwULCQgH +AgYVCgkICwIEFgIDAQIeAQIXgAUJEvcSMxYhBJYv0hh+1aHdgvxHijPxXq74y4AZ +BQJd5/TbAhkBAAoJEDPxXq74y4AZ+8sP/RtkyIA9vUa/eNs/7Fz3gfgtokvHqzOS +55aKkG42/PFbJN++DVV+A+ImjpNTI0Qvlg8zMlvBJRNygsqdNvLiYPFFqwPI34Nj +BT11VRW2UmaKmMA1r3mAWBgcSEPLoK9CavWYXUL3L33Pkg24oEZMYrOcTUMFYmwQ +EKgasJuyuVJGLqFeP8Gc6STwuQYwafAWYxjBa4MvMBXzwzVqzi0e3RmR6BX4dCAZ +W3ViATE//4wZnpYMFKIjNyDNpdhNnplZBZEHwTS78nY9Ii5pSelLMaZgKf0TOWmJ +oRA9CQCZIjDL7ipb5DVH9Be+7vjUnzfLhlh2u5yXd5pz1PLwdlYx+uB1pnIoVRJc +I0EHWlZFhddjIAgSD1VraFWNn25RsbvuxoNJMTOubBZE78CDKx/SCwJqxIfxvyUd +sudOLTxzQzWgFgMR9SGzT7rZCciAxgv7jMIgrZxwsR+8KgPlmmSocUx/9NaTuFMQ +QhpJwCvdcb7YMmbVgCWGi0s8PsVCuSy74Lq+Dc9mV5NJs5N5leCADCtZBY6+wcWD +2ej8rHDoJdGn0mjCha3B4tq3aZVlrIZ7EXuYmkamtHKdXpn5viFbVeWctx3ylKUd +LsTAttkGG0h7rtfTK/aroyjPTKMuB22VYTHqRYSiUHsG7Fqhq72WFQd7LY41F06N +3LeONOGYQggrzsFNBE6zSjcBEAC2eAeyXYPe/LnuEBTjyUToAXN/yvmKs/6iMJ3F +wPG1hEsbqbuBNWcICUCDzZa/LNJ8gulTG1wlhp04hUwY7/KWkuMWgr0vLsL1S5/b +OdfeDuKFnLdK7exEiSFAxK9sJeCUTV9zvoOY6tgUG1I0EEo+l/ccC08EyT4Q5TrH +aEpQXM5NjLSAlvSWfC52aEgT/SVyXEDTRgetYidyWUFPNGHpkzTGVdIn2MMJ3xT0 +Y4z10f4N5c3kFO+xQFtkqk5dHbTebauwZISSynfPckUukhx6K+NtQTpG6JAycQS1 +Y40XiP9Pgkacx4LkxNBA2VjCe0qQ5mG+/qUYaLdClTvdwq3l9kKUND8W7ut+163T +SQKzX0t+/Pjc+JsikPZIAMIHWd/Ope3USOe4hs0lOizdzAJqDBnM7wg5odAb1Dwu +nyY7Hc6TkMvyKE1rjmqq2lB6Zy+12/+DeRmoL8j1AlRnN0cENDhdFYpARYGbAQS4 +NcLu6mJ9PH3kzOGiXqejCfOUWgueNQZQwmjOdOY0QsNJ7Biu2n4UBQE1HQMcllji +/+552M9rY2OjHi2bqmDcXh7MPbCKI2EvvZXJ+rM4itZKDkwjiMAcskPk9WTc4+Bd +tDj7dGhHjTirnIC+3HH4mtoGb+tOqr7/Ns+PR/Jfe3901MhipBD0bWtSHGQF/xvy +oj23WQARAQABwsObBBgBCgAmAhsCFiEEli/SGH7Vod2C/EeKM/FervjLgBkFAl3n +9UEFCRL3EgoCKcFdIAQZAQIABgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3 +bQ9DqtfdfuwMpsGkOfk+XhuHS7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwm +Bzu3iSvl33REUlJp4WQ/ktk2SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88 +sesBZc6Qtl6siVB9j/HhOZFJQzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv +6PiI0FCyCVlmMXJ/VViPqWyK9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91Sxh +S0NIA7FpUD22ywN05qdhiYLmx16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8I +tAx0X/i8s1RnTbUDeRuOrYlUw4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14T +I+7ajM04Fl84g/PzN2/SxUyfPHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5H +Ot9QNQzTYoSZsicoxOYeD4RkThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w +6NUgLfIXje8J8990DohMzhB/zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0udd +LL9LgP8O+fPSGctSa42qLqs57fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE +9n9RcfROm+LbdnN99Lh5DcHl2Ss0srcnaQkQM/FervjLgBmkYRAAj8zSCoN4ZMvJ ++dOv0UILtvlZhmyDzfsJ08Ab2QWGMdyYWYlFGW5GU6o2N3yOQ7ceuewp7BfgW7u7 +8tL2JJr0X7qSFpBVChWOerFSjFPE7wDET0HMrsdiiWNUPISWErFf25vxly3C2W5j +6BYo1eu6kI0e7v26zeyUocKmIgM4qUctzEw/72ZCNxHq3A1ZSVwy7zZz8wvdkiyh +tMNzi22tzyO7QnqcYMRGZPgDLXc8eH+yLWWsS0VY/lWg8Wq0Ol1eNow5Fi9+zeUl +wb5f46wJIrzBsahWe5elVSWRJbSM98fjl8Ku8/EboBR7+KY7iKaYvog4WXHBpOUU +HsqxGEas5BmF7lwkIMGEktkypssL+HM7XkJFI75XEV4TsinMHySNWVQfoWR2talc +kpHsAUuDgEhm7Jdtq32kv30hv3H40OuP8cbPhWoAbs8pD3uZkf19aSrU58NUM7WC +IVBNZHcVoyTEZyh/cU8vkgI4ouwV+VlnctnzKkm6T3yhrL9qGyOzH2bF/3wIPaKt +vqutkjWSWV9CqJLqpSJIov/Eg0tOQ2WeqojsCYDUya7C1M2xqzyc2K6vvAaFhns/ +fq8RcKF5k4wmkjIs0ynrrNpXC3CkqPltm5VmOi7b/1S589vHpepKXsOPDp9o/RXN +TrItiqj+Uy9jlUT/IALxYDPyMfqSGgHCw4MEGAECAA8CGwIFAlgmedYFCQ8Wyh8C +KcFdIAQZAQIABgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3bQ9DqtfdfuwM +psGkOfk+XhuHS7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwmBzu3iSvl33RE +UlJp4WQ/ktk2SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88sesBZc6Qtl6s +iVB9j/HhOZFJQzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv6PiI0FCyCVlm +MXJ/VViPqWyK9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91SxhS0NIA7FpUD22 +ywN05qdhiYLmx16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8ItAx0X/i8s1Rn +TbUDeRuOrYlUw4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14TI+7ajM04Fl84 +g/PzN2/SxUyfPHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5HOt9QNQzTYoSZ +sicoxOYeD4RkThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w6NUgLfIXje8J +8990DohMzhB/zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0uddLL9LgP8O+fPS +GctSa42qLqs57fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE9n9RcfROm+Lb +dnN99Lh5DcHl2Ss0srcnaQkQM/FervjLgBnbIg/4ydyWl2ZTSvUfHfcgUS0KjMZ7 +ouPgfmZk86obq/SkHRKapQQSh+n51ZiDQ/iX5QTFnrrbM/ssLNNMamAKptc4l1Pk +dUIA/3KyRPJ0ckp6u4iIUtJ8E6xVVfrd6Agy460OkWU9k/csHzdT9cmHhImbOgOJ +GfdGPP2lHFGNrn9j5nNLkp2BGXiPforKqxGdLwvBYIaiDmVCB+L0FA1U8vYtLTRF +ohmAsjicQKaLkAp1kByP5afyoPfQTZdQGrZcsrPZU0rVpC8OsGO0uil7b46FTzqE +VgmsANNjBnQQuo0CpjE6TW5+CfzA7+BoksG38dSJfp7ea5C4cSz++i37BAdAuCcR +3FxRMfvuPyV7mhyJExYqZOfgFbLq5Cmwpym3a4bJbaQj5aFvpx6Ujkty/8/WUqkY +FPHAxR/LtoTqo27otjq6+lHO0jV3y7Mlk0Ur29L1iDfozZl/HDxXfRyQp2agnezg +RNMq8pksX9gHDuk2lt7zfp0HdlsqfCfX/lIXZ8oMwc1V9zK9HWp8IrmZ8VY810qs +4CHRIsngJUHRFE+WqqKxHvLbLlFp8VNMGPMnDbQ925ex5rA5ncYBuBiEXSPXKlpk +uhBZbY/Gd54zb7vrU/SCG9fgfLX2dkeFJ6c3uY8uwne4NCwjvI3yU4ftmpPJlOkV +0jS1Zg9lEqTOP9zA3MLDhAQYAQIADwIbAgUCUmLJdgUJCVMZvwIpwV0gBBkBAgAG +BQJOs0o3AAoJEGHHFvNvmtKiqSkQAIB6srp5KzdtD0Oq191+7AymwaQ5+T5eG4dL +tGg3J5Z03RzlgJOwrbNwLonwazhtTb1env61bCYHO7eJK+XfdERSUmnhZD+S2TZJ +fFVBKk1ZfmJYbcSIiWkniwGYBH06s2jswft1Pzyx6wFlzpC2XqyJUH2P8eE5kUlD +MJ95bSfc+JDQ9wZsMGWJFNnxZy6rQgU6ZQtQZi/o+IjQULIJWWYxcn9VWI+pbIr0 +WObnMB2bKwSaS0rB2eyJs5lBPpdk3anVND3VLGFLQ0gDsWlQPbbLA3Tmp2GJgubH +XoLh7/qjK40cbhvxm3XzS5MAi0iM67ZQ9C1VPwi0DHRf+LyzVGdNtQN5G46tiVTD +gzfb5sL2SM3j7VCzIPWKwz3M9x5OoicXS5m7XhMj7tqMzTgWXziD8/M3b9LFTJ88 +eJLiprzVxC1siQoav44wUcn16hF7FPaYWoBwnkc631A1DNNihJmyJyjE5h4PhGRO +EtsxzrsUNELymrD+QFyV0/dZglLWVrpllFpAv3Do1SAt8heN7wnz33QOiEzOEH/N +FfaWF6dZycNRUNZXFwjvSRFWxKAeNhjdaJ7S510sv0uA/w7589IZy1Jrjaouqznt +++iSB/ENe0fjg4a87fTivQ3TsTOHUmOY5mQqsIT2f1Fx9E6b4tt2c330uHkNweXZ +KzSytydpCRAz8V6u+MuAGbUoEACn5KX4QRH2hh98nHE9s5FpQ6u33AxGiWwZFR8L +10PmbUSTaGwcJ8y3n+Co/T7ASfRwmaNu1BB84uRb3BFgZ0H9fN/3SIm0Joaqbq16 +f6aHkFcWOoW4eGJQ/+K9l/GgqPRGRTj7jcNwnj1Y3MeGpCLn5/zY6qA5R4QZ9xlc +KYlRskoI/KBG5THiJnBmlkW3KHclxl7ec1DDpRPCquPFYeA64HXaVeoCADonoUes +lyRLG4yRwyCQnjnYW5p6wOsC7wQ/daBUeYf/Z0cGe/e5MeFntoNPDJnIItQqr8WQ +yAlaF0eVWxXr2to9Bcg5wQWySnFcPnM7SGpyJQxEB6FBPIfqUInGODfbJC8gFv63 +ooYob22QctkJihFiD2/1HF9JfuHAgtvZZaE4RXz2Uq1AR1LoUKfKcMy4RiN+qMLV +y3kaNc+YTD4veJVJjbusClX1qjNhghMfBK0cGsKGjJ/VkbYb8hqE/4NEve08L7TF +DDfwzb9+uLRc6cmNEFVCJIkiuM4KhC7T0qdL052pFXWFr9h+0cWx16ncp7VvPrxy +Y3Ri+72jjAplVWZd1QEn08NC07/aQnyO9Kfn7MnFwmXEvF9UiP45VwUOikYe6W+o +EA3qHI7sJorR/+kyIV8c8s+Dh7k2qOgQkCAMrq5aGPZCKEF9+RvKDb2I6jpBGOnB +pqHfNcLDhAQYAQIADwUCTrNKNwIbAgUJA8JnAAIpCRAz8V6u+MuAGcFdIAQZAQIA +BgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3bQ9DqtfdfuwMpsGkOfk+XhuH +S7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwmBzu3iSvl33REUlJp4WQ/ktk2 +SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88sesBZc6Qtl6siVB9j/HhOZFJ +QzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv6PiI0FCyCVlmMXJ/VViPqWyK +9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91SxhS0NIA7FpUD22ywN05qdhiYLm +x16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8ItAx0X/i8s1RnTbUDeRuOrYlU +w4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14TI+7ajM04Fl84g/PzN2/SxUyf +PHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5HOt9QNQzTYoSZsicoxOYeD4Rk +ThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w6NUgLfIXje8J8990DohMzhB/ +zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0uddLL9LgP8O+fPSGctSa42qLqs5 +7fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE9n9RcfROm+LbdnN99Lh5DcHl +2Ss0srcnaSPdD/9sO6MWmLFwsqRybt2wMTlVhwPqwJJytnYPx4GcXKkoOzf8ePQY +81HnmjKzenUqW5O048qJ1p0qQktyYvuLF4vmpjgse4APtW8GbhSLvlysRtr9ly3a +SQtRxqiJy5yh4aPd0Kq9FOq0n8DKYjsqYs6oY0n8fS+jbeTETbUWQnVcZH6yeP/v +ds4q7YD6W1bO72OTq0e7CIsCU2VeApiz51hhagz0c9ykolHWqfDOYLgrC0YonhEL +BmrrOUXhbmeapZO60SXDbmyPPMBaDT7IVvNJXgXLOo2/VKmVp08OufIGa3vmyP8J +LPWtqw/ow22kBtmTMi7dqZLYbsf8VCcfcjFu/gXwf9baT92+0OHFYWIl1Q1NRsmY +PwSxNYTpKcJuzOREk20YBpL0fdiUndtmiKFQoxhrCXeuk8XcBi6CrQc/L5bxO67s +FOEU6NywKuwLsVgtPU7OIuEeT2i+3teejEPVAVCVvTVwI0HHXU9wbV8WFjI4S2HJ +7JzqFD/hRhtYkMSh3zxxC4GTKzOA6GQhXCEnGhEraO3MsuBKTxgBhK5+bk9v9o0r +iMchTVwwDQNu6VOEgOOu+DW/W98x2sLZX109tDWzCPY2S/XHAMnP9bLp8nnd32gg +oV/avKNsQHz5xBt40/CJa3u821ePPyKecRtO7fUtGlFe2nt0BL9Vc9G2ss7BTQRO +s0qCARAAuvRDcqiwIgIH2afpWsMf5CwR0YTDrvztbSv8BfgtIvg5Rz80PFzXeuOY +I+m+ww8ffTBX6cHMjdIWg2dqo5sAhrzFP2OVkAsSpcvnUWeGkw0r9aGqW4AmBp+N +pU2bUOL8p0mf9UNmu3dSStP/xdag8kLFaOcTu9MdFQJK/w75aRxLyaxU/3FtXE1d +YgdGm0ECmNcyrFGNYjG3x+reMbv8lCug6GTn44QoGrXc003w6Bz+1GT/c4M8tdMV +QNalKO9IuQWrUnDVg2ymObSFhan8ijLtvayo7F85sZwYBbb03at4MiUDGfQQVMc8 +ajqWHYxgWtfvMlbjGMW9yLMLb2XGJOGPD8mjYLkJtUlR/1PoV9dEPlj9TG/BwKUK +XgkimABq98A3W/NcXvNtfbAnuZaB3d6QruLwHaD/hgIyZRjKx5AoC45T4Y3U60sE +CRGLKmyqwUdzwSsegUpcKnm2551Zv2RmRvhH7Sv+6y1xq1Yp2Xd6YhvsKU2cR5zz +zW2cUfGEwbKhsNKrz6JrIuuUnSckx1Gf+qqDtmXhrDf30LRSLfHWw/3jUYJiRKwb +b7W/SU+KmHp09r1O77tX11o4rwsIGmANgv66ZRyuM8+3n5s74eV2ERuFnt8vF/eG +w8EmT7W56pKfeTR7gcPvP7oqCzww9OSviaQHOEtKz/cuBaGxm2cAEQEAAcLDmwQY +AQoAJgIbAhYhBJYv0hh+1aHdgvxHijPxXq74y4AZBQJd5/VBBQkS9xG/AinBXSAE +GQECAAYFAk6zSoIACgkQxotJTfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLj +f1q+gYnEbHArdwHffeq7Eos5a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJ +BUO40XuR+3EMMncz65TolvPCdan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trD +Q/ch2nbDlLyC1RLp9aBHn3RMd3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0 +C61hlMealiJo3Fykjyh7MzfIZ1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgO +XYrcNQWsG0KPB7tGzlkAJMC7fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn11 +7pqd3D/uAEepjzc7u8XzY6L11hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSn +ry/uwAfo89MfGduG8FCJkl4nx3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0 +NX34KIFhZlB+/hM/tgPlcrSbCerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1E +x88XnMW11TKadWjW4mVdHiFoYDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4R +E+74txGFDM2b091qbR5gGHr3InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IU +hFChmE0gJy+c7R0JEDPxXq74y4AZgwIQAIYoGn0h6pJSV1vtaP4xig0vcq4RD7Ti +uRk6QnDtl4jM0K1QYJz7DSQiMisVyGe7tsJKFcwHT/CKW8ic/qO6xrQmyD3b4tmr +qtdwWNvnavmH678eIXD3VliRjIAX68KGoXcSCU3NwaQI/AMSSBxm+Wk+MS5qU99j +yi84rA8W4yQLfTRmelmAJibiIIQ6wqDOukC+kEAOXfWrn0lU56dqVRa0Xl0CSiZp +qYZsBeZuEzreZrOx+v/MII/4oCj889ATsBao41eBmrOPYOJcKw6nX90FLkNOGHxE +rWBL4VHK18Kqmvrt65oouIQe4+MDtni3IJx4sV8sHWyAKq/G5cX4Jjeo/HrYBteA +VssvCaEAru2M53dMpLmQ6tqGAUsPoQ9h0keAXi8BGAZ9sijTu6M5pWJLgjWt8ncp +J6yYAlXGW0S6Ns4v7qSyuaCvDdgCzYJU8+3ZZFVXWCgRJkSiwDJSikfHjWFrCvxu +8xGGxqjvkg9spJDc/oWBSB3CheyIhqiiyq+DDzMjWT15t/t5Sia4VFGfwfgBM0hG +SIluAnvrSPrRXjTUsjV3IVT53IMZSp9R24phnoa47FX4tZu6Gzg3znYOjOBLg8rU +VgIYO4lAv4Q+PugSwJKX5gENRZklbi6H9DhLVWe5600Lt8PLVZsEe9IMQsZhVbLZ +MZ6ypBebR4fXwsOEBBgBAgAPAhsCBQJYJnnpBQkPFsnnAinBXSAEGQECAAYFAk6z +SoIACgkQxotJTfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLjf1q+gYnEbHAr +dwHffeq7Eos5a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJBUO40XuR+3EM +Mncz65TolvPCdan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trDQ/ch2nbDlLyC +1RLp9aBHn3RMd3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0C61hlMealiJo +3Fykjyh7MzfIZ1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgOXYrcNQWsG0KP +B7tGzlkAJMC7fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn117pqd3D/uAEep +jzc7u8XzY6L11hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSnry/uwAfo89Mf +GduG8FCJkl4nx3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0NX34KIFhZlB+ +/hM/tgPlcrSbCerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1Ex88XnMW11TKa +dWjW4mVdHiFoYDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4RE+74txGFDM2b +091qbR5gGHr3InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IUhFChmE0gJy+c +7R0JEDPxXq74y4AZuCUP/jDnb60J2vTkPI4mIpj3EK18UrUQptWDERMcogXWEyvH +5pPOVuFCGq7KvbDE1aQX5ExkKlXApzFRwO4Wgy2VFAeVjjUPqstKu5fmH3kxSUsS +ajk+8f2HL5XxKKmw4AmbAY+NHCSxYKHwsQx1Yq8tSKITGT1yJnQH5QuGeBeewN48 +rDn6I+xI2BjVj07RTG9te/mqmU3zAlevOrxR1BxJRv1w5IqOv8JxE+YjRxFKdL2r +J0b88h9zT/SaLKFhoeFKuie2GHhobobSvwewQbVuqI/fkZ2Q/fUK3au8ZPDVk9ZN +qu9PngSXmC/2X38T2EQUZSBqyypyjYBhmOF/mjDyu+qs3e1l1RmCoYSvIVD2P4Cv +96GmM69ufA6VhcAa26UhOBJwRIigUbOBiwIN3rd4yMRQrYbJgGQelb9ZpUzwNxKK +8fAsALVzu5pPEOqDeu+jMs4misDfUJEqZzyfKAe9c+Gu5Uhfnk43kDNtcFULXR7v +gRnJS2PTIcTKBnjFSKCfpjdvFw2SgSDFNsNwHgUBJ8k1HnX8YbkX0UtuTXrVPN2m +ml1puU4eYJ17JIESfE7KF3bfih5VVLo7p/2obm/sc0/XWX/KkLdMizFjPUv8v25J +egnbxRchUwY1m92TXQ75vRBX1b7A8yqhYtT2AsIWbQH0RGzOiOW8SksW7GfqLlU/ +wsOEBBgBAgAPAhsCBQJSYsmIBQkJUxmGAinBXSAEGQECAAYFAk6zSoIACgkQxotJ +TfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLjf1q+gYnEbHArdwHffeq7Eos5 +a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJBUO40XuR+3EMMncz65TolvPC +dan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trDQ/ch2nbDlLyC1RLp9aBHn3RM +d3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0C61hlMealiJo3Fykjyh7MzfI +Z1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgOXYrcNQWsG0KPB7tGzlkAJMC7 +fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn117pqd3D/uAEepjzc7u8XzY6L1 +1hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSnry/uwAfo89MfGduG8FCJkl4n +x3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0NX34KIFhZlB+/hM/tgPlcrSb +CerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1Ex88XnMW11TKadWjW4mVdHiFo +YDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4RE+74txGFDM2b091qbR5gGHr3 +InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IUhFChmE0gJy+c7R0JEDPxXq74 +y4AZkjoP+wR9mWXgo6GVNPW7etwGXvUxxQhepXFlmm/ccMfbwv5Haop6TBiRFIzX +tBNHGbE3jgAfpoYYtLdM3iY/SCh2DB0abFNibpELCcQCoiUmiXfGVaNlkHyUqxai +pNydOx/PdGPHR4lXICd1HZ/P77eBtdBrw+01LpkhAzaoJfVG+mnUb7o9td9Ip6r6 +gqrBFjI3WS9Z6YmPv9tuGzjzIkKnfMLuV+3Kr4+bAnoLAZIbEaUAgwuXbr/DrFU6 +qYaGxxe52EJdGi6GJNujSOouS/prR/pUHcMQumKgrRLRAugmc/21YsklLJn0Q7NS +VIprblesM11S4b+SwRObxDPE+He+Y7OnzGReHQCSXwH/T8YnUbg0LnELX70R763Z +rQ3snDkf24oB9YxpVUrYh1CcvaaXNPQcJ7JzX6PdVnUOEotOiUWFcjk128PzpS5D +diMGmVZDEVsDDQbV2B56vW+RzpKf/Gd8JBaIugpBlK9D8G+0wmXp3Ks3U+BEtb40 +Q24dxO7lb5mGZZTz1DKq9DKKF6DM4ybqDHS5sf9moIyYx5ls1w1KC5oX1Vx9ZdLY +Vjc9t0D6lvoDndh/yw9VKa+Q1sZcGhPJjWvzYF6KHVp3R7NhtDjefeynKIUax3Pb +D43vBEZ+B6j1dPD8OnaHw5If3869gDcj2KDCRYTlf2ZXSopmVRMpwsOEBBgBAgAP +BQJOs0qCAhsCBQkDwmcAAikJEDPxXq74y4AZwV0gBBkBAgAGBQJOs0qCAAoJEMaL +SU31asx+R88P/1NPLFHGdQMvz0En/y/8OhRCwZDy439avoGJxGxwK3cB333quxKL +OWtzyrk2F7x88tpPmhd3ODvsxX1hjrfMzNohK/4GyQVDuNF7kftxDDJ3M+uU6Jbz +wnWp+894kIAHrXEzu2hAHKqHO5Hor/r7tcK11ubaw0P3Idp2w5S8gtUS6fWgR590 +THd8eSLpMwZzTcZK1a8dGJ6NFQCy6B9jsS93CMrRtAutYZTHmpYiaNxcpI8oezM3 +yGdT7e92QyzkTbYDMRql3OZkbT3whgpPg8GffsqYDl2K3DUFrBtCjwe7Rs5ZACTA +u37N5bzwnWl1dSOQ2eYkq/mQENVK2oPjiQP2/qZ9de6andw/7gBHqY83O7vF82Oi +9dYWwPZkp5JFBn+fegwXC8agZ16QItgPxp2i3fhkp68v7sAH6PPTHxnbhvBQiZJe +J8d0r8SBgNJ3JiOVDmbZVlvJ0xOqOmxAWvSfROxBdDV9+CiBYWZQfv4TP7YD5XK0 +mwnqwvid/9phc+R7Z34ZSFW5b47f7PUr+Jmzyg49RMfPF5zFtdUymnVo1uJlXR4h +aGA4V8i29US5M8T9CjV3GnWre1ihJ4PljqO+rL7eERPu+LcRhQzNm9Pdam0eYBh6 +9yJwK/z1yZ+x6Jb7GsBG99sz+aKOhbPXz6o/GNfiFIRQoZhNICcvnO0dAMYP/ibD +23JOBzscyMt4vB2mog2wszJisnQOXCiYaB8WPPO3lycuNoPiMr/oWPnnHechXk9W +aVTBIvLB81x41ObizvRu4cZ2gtTLxvVw+CtSPMpNxfdfzbPKGajeo8OWA925hSA8 +7ilh8jwu0XIKR2pSnxZ0GYEkAPO7JLgI8GS4TO4C600If+seLwIhVSLw7dIhRjiG +sUZ0LBNCG88ZgR5OnfWLcbL1Tu9+tBNjgTiy9+XIRok9ermPyitjmI0DpJkPH4rD +H//e7rBda0Ojtc0vooWR0aR0Hk+gRpwG8Q+/3AGDCC7PUdIyVn0h7RDtAF98uiOT +Q2hnIdHX7MWtU7wJNkoEiA00Z4WU9SEVjVEob/mgXbsiLKkjG92GAJJhoHbpcu/d +zcYV5sx8AD6Al+zJ4pp/0bF3d7QfNoiK+xCOvSB1WX3V2MUQvSOOGvOimq+jBRpe +VB8aTmqse6lI/TJY0gd1P6Hi687lRxz6Q55SP+r/7aKIpmB8x+ehyIfR0iTBp0kS +tiQ3krYXKwi7UOZQCkJXA40JZK1sk3bYtui0tRG5JLn3Shcyoxo7guXfe+Y80huJ +TQExxcqX2iCfuQNPDS7hWJYVnPvZaOndm+RIKmg5j73aPybPA6QGa57wqn7Ahz6U ++EThIl3ogq38UjZT/2ckZZQ5jhUNIWkYvY4fl69rzsFNBE6zSy8BEADHe19OP/Yb +GJSxu9SdEQhig28ohEmF2GuQOeebGicyvfmtmX5X3/e2DbwntQ9HmDYJ9gDUWSey +afDe7RKszwZ6lRE5daK6BoGq0ks7whGNj3qqOgQkBvDOlG2cVCgBraUogBOh+lcO +X5A9HCX7dxzxohWSFT6Bbs7FlwmfIoAzzmILKp/8ROTgxZZOymLjiACGTXm992US +bQpFCyyP8kYgKOLJ4OPTqxytBlDzY6mlOE6j+1eqCdjMmUgCytbsqAuRXh6qSoZL +IOpesZMv7v262MPvZV93qBa1x20QlLE+1RPs/l/Vzu+bVg6ma8YgIegnzvMSgluE +KmR76lD/bOw0h/iG/4dW6HCQCUgXXpPBr4neLp8MqD4t3E/iDC47rUnUEg4mhhTQ +E/OgRfyy+o6J1S4LLb5UkeyOGMNYd63ovBODqBeCOfJH31m8nEPOH2MpJaVr7kGL +ne71HFiKNNPcoCpmcmafrMTK9fEyDY13NUM1SS99r09XI4qL14w9RZjy01ozsvrm +Y2QOXLiYo5hkPiazUf2z0vIDundhqV/CScBICTTbMheFBogArFrNtWV67++z0HVG +gsyRMUju897qqDBNHGUXCgrjcipcDoQB5V4HG8Yl4+GYp896kjxbf2RibdabNHXY +YlQW6arB/wrJeWv0Xc4nR1LmhF/F2IJY+QARAQABwsObBBgBCgAmAhsCFiEEli/S +GH7Vod2C/EeKM/FervjLgBkFAl3n9UEFCRL3ERICKcFdIAQZAQIABgUCTrNLLwAK +CRAZLOHEg2M6a4LEEACvvnVf6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM +9Ik2YiDXrtyBvzvFuSu6I4PIyH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl +5dAQ0hmMYWOdET6kbBrFoPDpUQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcu +AqsQ4Hv3ZjRxAru6hSdq4pM8jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tT +ob0w+RsO7b/CpW9YaRbSC84M5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdD +Wak+lslIhj82+hBaU3tXI/uH2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/ +nxEpTQS9uM2YH541l3biRqrjI+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9V +NzV+Efb4PFCqxyCGmArVBv9qN7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWD +JE+D6KMeUGLV0zWcRs+cixPOdC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+du +LQ7mc0M23eiy2F4e56yK7jPVMwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cw +ze8/MsG5f/8Pq4wOIPuDe7dkjLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQ +M/FervjLgBkz7w//QABLWdVBkrKOYQDnZj3/3rdzbpYcdPEuMYpxPCbquCkqAvy4 +9MXGBKmUti3Ljqbgqa7IF/WqtiXuQFOvqU2Tri34A5P357mDeNN+ed/khzcnmGF3 +17g9AGiJ4p5feGMbIeIpfWNzHwZx+g2RbZ2RsrAn9476YzmHvsc6EHXRm0/XWVW9 +dyYnUNcFyBJso3NniLwasKdWMqW46gx/L3nk7PIymWmWjD8EBQuLFhJ/FrqaJ5UE +zTuKoHghRtHCIEXFFK8SHTPgzNAy7bP+YdfByvoUiNCLip9fF1JhPBX2C+AwTLz/ +Fe/VZQBWfyrWx6fztRnewvUTCi8E/PzgRgVXMK96pWAOI1fcO4iCYkbV+sRIIbJk +YOwLirhy4IzHW2gpJ6CwkhiBgVoub7Mvx0tLBcpSn8RZqZT2j3INWV2IswYsrFKY +JUDoOVMCDlI9z4MGFohvUDlXxllF8ZXaR+aswq905QW93ddu1UeSg+yLpizbP/2O +TlQXx1Mdv9UkcFZn/wU263a6LOW6cQquDAOr37DyNrFxHZ2JdI7u2ggPYYViE7Zf +TDRLFz7RJc0DVZKd/sY65uh9NMgPseORa7y1h7VapLMJderjJNpdX+TirqXols6Z +gkEbBCHvPKlY2A5okmXoSPF5QmU0OxqeykVBcfDchXM7uhqIiZ6gB+pXpdDCw4QE +GAECAA8CGwIFAlgmefIFCQ8WyUMCKcFdIAQZAQIABgUCTrNLLwAKCRAZLOHEg2M6 +a4LEEACvvnVf6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM9Ik2YiDXrtyB +vzvFuSu6I4PIyH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl5dAQ0hmMYWOd +ET6kbBrFoPDpUQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcuAqsQ4Hv3ZjRx +Aru6hSdq4pM8jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tTob0w+RsO7b/C +pW9YaRbSC84M5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdDWak+lslIhj82 ++hBaU3tXI/uH2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/nxEpTQS9uM2Y +H541l3biRqrjI+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9VNzV+Efb4PFCq +xyCGmArVBv9qN7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWDJE+D6KMeUGLV +0zWcRs+cixPOdC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+duLQ7mc0M23eiy +2F4e56yK7jPVMwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cwze8/MsG5f/8P +q4wOIPuDe7dkjLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQM/FervjLgBkF +Qw/9F7yzJdzVqXS8AWF96km5ZPIkTfIvxzXhQKctAWLRZNoz5P+rP5bUvtej7jWq +wJR1L35oaCWo1C6kGWXCTFJnLv/uAue5xbL6NF5g26vmU4swJFmvnXJQJX8+v57j +C2XsCKwbwqnFXwy5YfrTOCjAP6PbzTiMujlz0nxsYXXGTfC5Aq9zS2G9UrOQ/Ich +gmCRoDci8KC+HD6NfsI9lzhYeW89HJ6+h89hLdDXgSwQfd1zprTQyTPZNUERJ+Ww +iMIKtwqZghDvFMbrQrkBrcPa/rc1nQ3PzSfRAMIds3tekciv4Q4LVRvwCFsEgifz +8TX48/Jog9riJARHE+qQtjwJ6dqyn/p0ubUm62iYe1Lp3tv1q6exqwsGWkEQZc58 +LihWIMklZf4l/FGP0yTZO59CEZYgmWcBynY2aLs2q30l8GFYatuXkZ1WTcbTp9yk +0ocaBnq3JwKQLh4j+hISwndT8oqq97hrWfw7D3kEoiXG+cjO9adKy20105kFcmjW +urR2WAaTsc3MIwc63qxW6MvUFGRINISknkBfTm4LMWyNFLQuZS25EgfLGgNQWQcA +ILgN52cd1UrG9+rrzW1XkJDamRIcRZAUQsKcfjUANsfhLzVSA7p61tj8eWVtu2wT +v+dk4BnK++Je162WepOmwWONRpUue5n13v5HNWzQz1o723TCw4QEGAECAA8CGwIF +AlJiyZQFCQlTGOUCKcFdIAQZAQIABgUCTrNLLwAKCRAZLOHEg2M6a4LEEACvvnVf +6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM9Ik2YiDXrtyBvzvFuSu6I4PI +yH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl5dAQ0hmMYWOdET6kbBrFoPDp +UQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcuAqsQ4Hv3ZjRxAru6hSdq4pM8 +jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tTob0w+RsO7b/CpW9YaRbSC84M +5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdDWak+lslIhj82+hBaU3tXI/uH +2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/nxEpTQS9uM2YH541l3biRqrj +I+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9VNzV+Efb4PFCqxyCGmArVBv9q +N7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWDJE+D6KMeUGLV0zWcRs+cixPO +dC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+duLQ7mc0M23eiy2F4e56yK7jPV +MwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cwze8/MsG5f/8Pq4wOIPuDe7dk +jLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQM/FervjLgBkjtg//alQGs/J8 +T+sNGYU8fpkJtnTSVhjFrWY6ljzkVO4EO9mFKM1yEJtNfdAiy7JhA2VPDxGWj+as +ZC8NVLsJ8/l3JdcIgACQdiNNJTqfXTLSsJWWiNDAGXwJxKbsOpPObtF0MXnPin3Q +S3ww0ucuqljlhrbw3cUC9QVIi0NAIBJEaEqWlwAciNbSuiNQvUC7bDVFXn3jVJKZ +G4OFVnoLyrdQY7kNnXIe4TAaaGHhpEEG6FfYXR+1S8mdw1NyWNJZWJwCIxBeHkCa +TArKlLdZANrj7eUbcuJr956zcbvHzD13qBJ7zJn3Afjeecch4ONNpnnYL3vP9AHs +mse3/iqyFCd31/yYr/dBpQD4fn22AiUJ34VFTvCDP6AIDEsvogIU72jsBDB28Fg/ +UX6nHY2MmL32ipSesLzN0TYohPusbhnlrsoaHEF8Ar8Wau3xLFGesknpjRRD2ptv +O5M1Vuo5xF8Vqia9N6dkpIBha7sBaVNznaDzWMgqNyukftYzrFiRn6yJs6nQVd6N +Vx+x50bm2oIzi19GP8axhXOoc15f+VjR3ryZcOctSBbQJe1CC0SzK+UwusvvkTmy +/ZGCY9wagxxZ2wdFk9BGIquMTqaY6cdonDiWyDFvMCPZDxVxb+tXA5ulGsMqjrWK +L3GN+1KGKYH/bXL0loBZPEfyXzcyBP9ADFLCw4QEGAECAA8FAk6zSy8CGwIFCQPC +ZwACKQkQM/FervjLgBnBXSAEGQECAAYFAk6zSy8ACgkQGSzhxINjOmuCxBAAr751 +X+kSSFD1Wxk8o0oAV5QBH5b3xOp/8ewp/u8DiVFijPSJNmIg167cgb87xbkruiOD +yMh/jaBJayx04vTkcIjU7gp8LXpT/R60O2TBarzSZeXQENIZjGFjnRE+pGwaxaDw +6VEKFnUN99rRwpaAed17RcK04tsNgHhT5VdyLcjXLgKrEOB792Y0cQK7uoUnauKT +PIzgr601WM7MVbfdETSeX6rTrovujs41tkIZ0EeLU6G9MPkbDu2/wqVvWGkW0gvO +DOTLfeRpZSRevtluDVv6b5of0pUZu74T6f0P5NKnQ1mpPpbJSIY/NvoQWlN7VyP7 +h9rKt24ufkC36D3nvKFW6KyXGJVw3LBK3stnj7y/v58RKU0EvbjNmB+eNZd24kaq +4yPsvG8S372UWbXlKj+HW+jsSaUXiywNrb28CMy/VTc1fhH2+DxQqscghpgK1Qb/ +aje6VtleZe5zURa/cmRMva/5Qxf4iJhP2Dg7B/pVgyRPg+ijHlBi1dM1nEbPnIsT +znQvtXLN7WCzzMAocj2qa4S5boVVevh4wwCoknPnbi0O5nNDNt3ostheHuesiu4z +1TMM5BkQOdd+51DjpvfSrglJ2Mwj6IdkHZUNw7uQsM3vPzLBuX//D6uMDiD7g3u3 +ZIy8BFY0zKIXbcriaYzHQotCe26dsPTXEIrT3y+3eA//cZhsZfuRNuA2pkAyJ8eo +TQI9ynN/GLzDNbn37GZ+0+ZUzxcSKOQBh6hQfGVi7H5gyf5sswwZeYeA7QZJupQk +5CNuiE/SCmC1JmMqeG9yoBfl/VnBCXJ0nEoRo4s7X7oyt8lvjuewfbOTERxdoN4L +oTSKX4jbHSmaDd34JOoGuNzZQ+UhvXNiOOsdBh+VW0JDqZRTCI89XJ82yMQJWZY8 +csiTfbZfwt0L5YHY7IlduRWO3G7ladDdTRNIIsuZ1+kOZUDOvVU9bQtwEPwTqjJm +J4cOZPX1DV6vYQhCz+gi1nGKv9/0+BKUzq87PVGOfIVujAbvowZfxFFCCJOOPoHM +e0SiWQCqAL5Ybo8QxEW6aL2ijCl9kcHZMdYmCGozndb6XymMiMdChomAKYnMgEN7 +VDIXmGS1R4X5+WNiu6win6trgS1l+PF15tDeppIjbnxqRv8KyIz5GOycAZc8zLg3 +1PFqjHizzAXCoybRvGAdZkHoNLo6523dEp+5cXFhSmGVLxxU0cX4bqmyT5fm/Ibg +jRifDHCEcoHI4Q8WV68XADyzzK+mxf4KCwrlSx9x97jyUWg3JOtvb12g2wUsA+gL +JHNd9p2vVM2KvjrzT/DYpJyBxs00RiWeNwuphndOCo6yZF7sFuT/XMLIr0WQny4u +wiDJ24DfvuOu2loDbAJX5JU= +=rwLr +-----END PGP PUBLIC KEY BLOCK----- -- GitLab From ed8dd57c2199c15570bbdd293fd141fe863fa6c5 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 10:42:53 -0400 Subject: [PATCH 09/27] updated keys --- Dockerfile | 4 +- signatures/repomd.xml.key.meta4 | 38 ++++ signatures/zeek.asc | 337 -------------------------------- 3 files changed, 40 insertions(+), 339 deletions(-) create mode 100644 signatures/repomd.xml.key.meta4 delete mode 100644 signatures/zeek.asc diff --git a/Dockerfile b/Dockerfile index 9bd8286..f6240be 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import zeek.asc && \ + rpm --import repomd.xml.key.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -29,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.asc && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/repomd.xml.key.meta4 b/signatures/repomd.xml.key.meta4 new file mode 100644 index 0000000..5e03d85 --- /dev/null +++ b/signatures/repomd.xml.key.meta4 @@ -0,0 +1,38 @@ + + + MirrorBrain/2.19.0 + https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key.meta4 + 2021-03-23T14:40:01Z + + openSUSE + http://download.opensuse.org + + + + 1084 + + + + + + + + + + + + + http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + + + + + http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + + diff --git a/signatures/zeek.asc b/signatures/zeek.asc deleted file mode 100644 index ce7adb7..0000000 --- a/signatures/zeek.asc +++ /dev/null @@ -1,337 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- - -xsFNBE6zSSYBEACrOwJVLa1BNkII9aTZtPLEKrQHQ+2AYu3gkCEmlb6ga1fq+IJ2 -qIXV91FNuqxWa4tvkZ71AQffZpyFL0HMAzwdLrYUZXOtGkc7H/VVl4BKmQNEvCLF -QmiRRMdNx+4Abh7EZzgrjXH7HEs5t34llWwUa7rDffXTPdMRcH+I7W99CmGCIwhC -S+Eltbh4QjxrrkQF+CWGvKqzDdUWARcM8GM/REbDE9bDG6KJttCKr7xeT4iFrbPA -8YqNPhSNgSPcQjQQmFTKyqe2/Rwm9BKh7n8T3JZ9l/OQEO6P8NN9vIut/+ohLIGv -izxV5uX6vU9Ama4F6iPthG/IUhUq5S0tNdI8X/I8IkPpC8s0Z3SFXTgft6b63t4g -VsTbnDex8k67RoxWeECfSlq3lodJUmNt1H623IutFCmkNMreU8H7hj+3b+M+mQm5 -VqXNr1a9YZps5Ao2vzl1flQnp+2Frep9WaW/9zSaG0DiumYIOkDsGOEfDAo9OqMy -F/kDDt//qWCoThusMktyZadVJz60iDTpfiBgSjL+APUrqDEPdnxyktS8nhOpkLQr -1U7l3SuHXquiqSh605rJ+a654no0TwZ/yooQfKE+s3DGMe0LvHKlraUw5MohwG/J -zAzWQWNuU6ogb42dGZgkNnsxOSmU5FN2VSESUbeeMZzQEpBSp0aAH5WfrQARAQAB -zR1UaGUgWmVlayBUZWFtIDxpbmZvQHplZWsub3JnPsLBlwQTAQoAQQIbAwULCQgH -AgYVCgkICwIEFgIDAQIeAQIXgAUJEvcSMxYhBJYv0hh+1aHdgvxHijPxXq74y4AZ -BQJd5/TbAhkBAAoJEDPxXq74y4AZ+8sP/RtkyIA9vUa/eNs/7Fz3gfgtokvHqzOS -55aKkG42/PFbJN++DVV+A+ImjpNTI0Qvlg8zMlvBJRNygsqdNvLiYPFFqwPI34Nj -BT11VRW2UmaKmMA1r3mAWBgcSEPLoK9CavWYXUL3L33Pkg24oEZMYrOcTUMFYmwQ -EKgasJuyuVJGLqFeP8Gc6STwuQYwafAWYxjBa4MvMBXzwzVqzi0e3RmR6BX4dCAZ -W3ViATE//4wZnpYMFKIjNyDNpdhNnplZBZEHwTS78nY9Ii5pSelLMaZgKf0TOWmJ -oRA9CQCZIjDL7ipb5DVH9Be+7vjUnzfLhlh2u5yXd5pz1PLwdlYx+uB1pnIoVRJc -I0EHWlZFhddjIAgSD1VraFWNn25RsbvuxoNJMTOubBZE78CDKx/SCwJqxIfxvyUd -sudOLTxzQzWgFgMR9SGzT7rZCciAxgv7jMIgrZxwsR+8KgPlmmSocUx/9NaTuFMQ -QhpJwCvdcb7YMmbVgCWGi0s8PsVCuSy74Lq+Dc9mV5NJs5N5leCADCtZBY6+wcWD -2ej8rHDoJdGn0mjCha3B4tq3aZVlrIZ7EXuYmkamtHKdXpn5viFbVeWctx3ylKUd -LsTAttkGG0h7rtfTK/aroyjPTKMuB22VYTHqRYSiUHsG7Fqhq72WFQd7LY41F06N -3LeONOGYQggrzsFNBE6zSjcBEAC2eAeyXYPe/LnuEBTjyUToAXN/yvmKs/6iMJ3F -wPG1hEsbqbuBNWcICUCDzZa/LNJ8gulTG1wlhp04hUwY7/KWkuMWgr0vLsL1S5/b -OdfeDuKFnLdK7exEiSFAxK9sJeCUTV9zvoOY6tgUG1I0EEo+l/ccC08EyT4Q5TrH -aEpQXM5NjLSAlvSWfC52aEgT/SVyXEDTRgetYidyWUFPNGHpkzTGVdIn2MMJ3xT0 -Y4z10f4N5c3kFO+xQFtkqk5dHbTebauwZISSynfPckUukhx6K+NtQTpG6JAycQS1 -Y40XiP9Pgkacx4LkxNBA2VjCe0qQ5mG+/qUYaLdClTvdwq3l9kKUND8W7ut+163T -SQKzX0t+/Pjc+JsikPZIAMIHWd/Ope3USOe4hs0lOizdzAJqDBnM7wg5odAb1Dwu -nyY7Hc6TkMvyKE1rjmqq2lB6Zy+12/+DeRmoL8j1AlRnN0cENDhdFYpARYGbAQS4 -NcLu6mJ9PH3kzOGiXqejCfOUWgueNQZQwmjOdOY0QsNJ7Biu2n4UBQE1HQMcllji -/+552M9rY2OjHi2bqmDcXh7MPbCKI2EvvZXJ+rM4itZKDkwjiMAcskPk9WTc4+Bd -tDj7dGhHjTirnIC+3HH4mtoGb+tOqr7/Ns+PR/Jfe3901MhipBD0bWtSHGQF/xvy -oj23WQARAQABwsObBBgBCgAmAhsCFiEEli/SGH7Vod2C/EeKM/FervjLgBkFAl3n -9UEFCRL3EgoCKcFdIAQZAQIABgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3 -bQ9DqtfdfuwMpsGkOfk+XhuHS7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwm -Bzu3iSvl33REUlJp4WQ/ktk2SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88 -sesBZc6Qtl6siVB9j/HhOZFJQzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv -6PiI0FCyCVlmMXJ/VViPqWyK9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91Sxh -S0NIA7FpUD22ywN05qdhiYLmx16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8I -tAx0X/i8s1RnTbUDeRuOrYlUw4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14T -I+7ajM04Fl84g/PzN2/SxUyfPHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5H -Ot9QNQzTYoSZsicoxOYeD4RkThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w -6NUgLfIXje8J8990DohMzhB/zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0udd -LL9LgP8O+fPSGctSa42qLqs57fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE -9n9RcfROm+LbdnN99Lh5DcHl2Ss0srcnaQkQM/FervjLgBmkYRAAj8zSCoN4ZMvJ -+dOv0UILtvlZhmyDzfsJ08Ab2QWGMdyYWYlFGW5GU6o2N3yOQ7ceuewp7BfgW7u7 -8tL2JJr0X7qSFpBVChWOerFSjFPE7wDET0HMrsdiiWNUPISWErFf25vxly3C2W5j -6BYo1eu6kI0e7v26zeyUocKmIgM4qUctzEw/72ZCNxHq3A1ZSVwy7zZz8wvdkiyh -tMNzi22tzyO7QnqcYMRGZPgDLXc8eH+yLWWsS0VY/lWg8Wq0Ol1eNow5Fi9+zeUl -wb5f46wJIrzBsahWe5elVSWRJbSM98fjl8Ku8/EboBR7+KY7iKaYvog4WXHBpOUU -HsqxGEas5BmF7lwkIMGEktkypssL+HM7XkJFI75XEV4TsinMHySNWVQfoWR2talc -kpHsAUuDgEhm7Jdtq32kv30hv3H40OuP8cbPhWoAbs8pD3uZkf19aSrU58NUM7WC -IVBNZHcVoyTEZyh/cU8vkgI4ouwV+VlnctnzKkm6T3yhrL9qGyOzH2bF/3wIPaKt -vqutkjWSWV9CqJLqpSJIov/Eg0tOQ2WeqojsCYDUya7C1M2xqzyc2K6vvAaFhns/ -fq8RcKF5k4wmkjIs0ynrrNpXC3CkqPltm5VmOi7b/1S589vHpepKXsOPDp9o/RXN -TrItiqj+Uy9jlUT/IALxYDPyMfqSGgHCw4MEGAECAA8CGwIFAlgmedYFCQ8Wyh8C -KcFdIAQZAQIABgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3bQ9DqtfdfuwM -psGkOfk+XhuHS7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwmBzu3iSvl33RE -UlJp4WQ/ktk2SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88sesBZc6Qtl6s -iVB9j/HhOZFJQzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv6PiI0FCyCVlm -MXJ/VViPqWyK9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91SxhS0NIA7FpUD22 -ywN05qdhiYLmx16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8ItAx0X/i8s1Rn -TbUDeRuOrYlUw4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14TI+7ajM04Fl84 -g/PzN2/SxUyfPHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5HOt9QNQzTYoSZ -sicoxOYeD4RkThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w6NUgLfIXje8J -8990DohMzhB/zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0uddLL9LgP8O+fPS -GctSa42qLqs57fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE9n9RcfROm+Lb -dnN99Lh5DcHl2Ss0srcnaQkQM/FervjLgBnbIg/4ydyWl2ZTSvUfHfcgUS0KjMZ7 -ouPgfmZk86obq/SkHRKapQQSh+n51ZiDQ/iX5QTFnrrbM/ssLNNMamAKptc4l1Pk -dUIA/3KyRPJ0ckp6u4iIUtJ8E6xVVfrd6Agy460OkWU9k/csHzdT9cmHhImbOgOJ -GfdGPP2lHFGNrn9j5nNLkp2BGXiPforKqxGdLwvBYIaiDmVCB+L0FA1U8vYtLTRF -ohmAsjicQKaLkAp1kByP5afyoPfQTZdQGrZcsrPZU0rVpC8OsGO0uil7b46FTzqE -VgmsANNjBnQQuo0CpjE6TW5+CfzA7+BoksG38dSJfp7ea5C4cSz++i37BAdAuCcR -3FxRMfvuPyV7mhyJExYqZOfgFbLq5Cmwpym3a4bJbaQj5aFvpx6Ujkty/8/WUqkY -FPHAxR/LtoTqo27otjq6+lHO0jV3y7Mlk0Ur29L1iDfozZl/HDxXfRyQp2agnezg -RNMq8pksX9gHDuk2lt7zfp0HdlsqfCfX/lIXZ8oMwc1V9zK9HWp8IrmZ8VY810qs -4CHRIsngJUHRFE+WqqKxHvLbLlFp8VNMGPMnDbQ925ex5rA5ncYBuBiEXSPXKlpk -uhBZbY/Gd54zb7vrU/SCG9fgfLX2dkeFJ6c3uY8uwne4NCwjvI3yU4ftmpPJlOkV -0jS1Zg9lEqTOP9zA3MLDhAQYAQIADwIbAgUCUmLJdgUJCVMZvwIpwV0gBBkBAgAG -BQJOs0o3AAoJEGHHFvNvmtKiqSkQAIB6srp5KzdtD0Oq191+7AymwaQ5+T5eG4dL -tGg3J5Z03RzlgJOwrbNwLonwazhtTb1env61bCYHO7eJK+XfdERSUmnhZD+S2TZJ -fFVBKk1ZfmJYbcSIiWkniwGYBH06s2jswft1Pzyx6wFlzpC2XqyJUH2P8eE5kUlD -MJ95bSfc+JDQ9wZsMGWJFNnxZy6rQgU6ZQtQZi/o+IjQULIJWWYxcn9VWI+pbIr0 -WObnMB2bKwSaS0rB2eyJs5lBPpdk3anVND3VLGFLQ0gDsWlQPbbLA3Tmp2GJgubH -XoLh7/qjK40cbhvxm3XzS5MAi0iM67ZQ9C1VPwi0DHRf+LyzVGdNtQN5G46tiVTD -gzfb5sL2SM3j7VCzIPWKwz3M9x5OoicXS5m7XhMj7tqMzTgWXziD8/M3b9LFTJ88 -eJLiprzVxC1siQoav44wUcn16hF7FPaYWoBwnkc631A1DNNihJmyJyjE5h4PhGRO -EtsxzrsUNELymrD+QFyV0/dZglLWVrpllFpAv3Do1SAt8heN7wnz33QOiEzOEH/N -FfaWF6dZycNRUNZXFwjvSRFWxKAeNhjdaJ7S510sv0uA/w7589IZy1Jrjaouqznt -++iSB/ENe0fjg4a87fTivQ3TsTOHUmOY5mQqsIT2f1Fx9E6b4tt2c330uHkNweXZ -KzSytydpCRAz8V6u+MuAGbUoEACn5KX4QRH2hh98nHE9s5FpQ6u33AxGiWwZFR8L -10PmbUSTaGwcJ8y3n+Co/T7ASfRwmaNu1BB84uRb3BFgZ0H9fN/3SIm0Joaqbq16 -f6aHkFcWOoW4eGJQ/+K9l/GgqPRGRTj7jcNwnj1Y3MeGpCLn5/zY6qA5R4QZ9xlc -KYlRskoI/KBG5THiJnBmlkW3KHclxl7ec1DDpRPCquPFYeA64HXaVeoCADonoUes -lyRLG4yRwyCQnjnYW5p6wOsC7wQ/daBUeYf/Z0cGe/e5MeFntoNPDJnIItQqr8WQ -yAlaF0eVWxXr2to9Bcg5wQWySnFcPnM7SGpyJQxEB6FBPIfqUInGODfbJC8gFv63 -ooYob22QctkJihFiD2/1HF9JfuHAgtvZZaE4RXz2Uq1AR1LoUKfKcMy4RiN+qMLV -y3kaNc+YTD4veJVJjbusClX1qjNhghMfBK0cGsKGjJ/VkbYb8hqE/4NEve08L7TF -DDfwzb9+uLRc6cmNEFVCJIkiuM4KhC7T0qdL052pFXWFr9h+0cWx16ncp7VvPrxy -Y3Ri+72jjAplVWZd1QEn08NC07/aQnyO9Kfn7MnFwmXEvF9UiP45VwUOikYe6W+o -EA3qHI7sJorR/+kyIV8c8s+Dh7k2qOgQkCAMrq5aGPZCKEF9+RvKDb2I6jpBGOnB -pqHfNcLDhAQYAQIADwUCTrNKNwIbAgUJA8JnAAIpCRAz8V6u+MuAGcFdIAQZAQIA -BgUCTrNKNwAKCRBhxxbzb5rSoqkpEACAerK6eSs3bQ9DqtfdfuwMpsGkOfk+XhuH -S7RoNyeWdN0c5YCTsK2zcC6J8Gs4bU29Xp7+tWwmBzu3iSvl33REUlJp4WQ/ktk2 -SXxVQSpNWX5iWG3EiIlpJ4sBmAR9OrNo7MH7dT88sesBZc6Qtl6siVB9j/HhOZFJ -QzCfeW0n3PiQ0PcGbDBliRTZ8Wcuq0IFOmULUGYv6PiI0FCyCVlmMXJ/VViPqWyK -9Fjm5zAdmysEmktKwdnsibOZQT6XZN2p1TQ91SxhS0NIA7FpUD22ywN05qdhiYLm -x16C4e/6oyuNHG4b8Zt180uTAItIjOu2UPQtVT8ItAx0X/i8s1RnTbUDeRuOrYlU -w4M32+bC9kjN4+1QsyD1isM9zPceTqInF0uZu14TI+7ajM04Fl84g/PzN2/SxUyf -PHiS4qa81cQtbIkKGr+OMFHJ9eoRexT2mFqAcJ5HOt9QNQzTYoSZsicoxOYeD4Rk -ThLbMc67FDRC8pqw/kBcldP3WYJS1la6ZZRaQL9w6NUgLfIXje8J8990DohMzhB/ -zRX2lhenWcnDUVDWVxcI70kRVsSgHjYY3Wie0uddLL9LgP8O+fPSGctSa42qLqs5 -7fvokgfxDXtH44OGvO304r0N07Ezh1JjmOZkKrCE9n9RcfROm+LbdnN99Lh5DcHl -2Ss0srcnaSPdD/9sO6MWmLFwsqRybt2wMTlVhwPqwJJytnYPx4GcXKkoOzf8ePQY -81HnmjKzenUqW5O048qJ1p0qQktyYvuLF4vmpjgse4APtW8GbhSLvlysRtr9ly3a -SQtRxqiJy5yh4aPd0Kq9FOq0n8DKYjsqYs6oY0n8fS+jbeTETbUWQnVcZH6yeP/v -ds4q7YD6W1bO72OTq0e7CIsCU2VeApiz51hhagz0c9ykolHWqfDOYLgrC0YonhEL -BmrrOUXhbmeapZO60SXDbmyPPMBaDT7IVvNJXgXLOo2/VKmVp08OufIGa3vmyP8J -LPWtqw/ow22kBtmTMi7dqZLYbsf8VCcfcjFu/gXwf9baT92+0OHFYWIl1Q1NRsmY -PwSxNYTpKcJuzOREk20YBpL0fdiUndtmiKFQoxhrCXeuk8XcBi6CrQc/L5bxO67s -FOEU6NywKuwLsVgtPU7OIuEeT2i+3teejEPVAVCVvTVwI0HHXU9wbV8WFjI4S2HJ -7JzqFD/hRhtYkMSh3zxxC4GTKzOA6GQhXCEnGhEraO3MsuBKTxgBhK5+bk9v9o0r -iMchTVwwDQNu6VOEgOOu+DW/W98x2sLZX109tDWzCPY2S/XHAMnP9bLp8nnd32gg -oV/avKNsQHz5xBt40/CJa3u821ePPyKecRtO7fUtGlFe2nt0BL9Vc9G2ss7BTQRO -s0qCARAAuvRDcqiwIgIH2afpWsMf5CwR0YTDrvztbSv8BfgtIvg5Rz80PFzXeuOY -I+m+ww8ffTBX6cHMjdIWg2dqo5sAhrzFP2OVkAsSpcvnUWeGkw0r9aGqW4AmBp+N -pU2bUOL8p0mf9UNmu3dSStP/xdag8kLFaOcTu9MdFQJK/w75aRxLyaxU/3FtXE1d -YgdGm0ECmNcyrFGNYjG3x+reMbv8lCug6GTn44QoGrXc003w6Bz+1GT/c4M8tdMV -QNalKO9IuQWrUnDVg2ymObSFhan8ijLtvayo7F85sZwYBbb03at4MiUDGfQQVMc8 -ajqWHYxgWtfvMlbjGMW9yLMLb2XGJOGPD8mjYLkJtUlR/1PoV9dEPlj9TG/BwKUK -XgkimABq98A3W/NcXvNtfbAnuZaB3d6QruLwHaD/hgIyZRjKx5AoC45T4Y3U60sE -CRGLKmyqwUdzwSsegUpcKnm2551Zv2RmRvhH7Sv+6y1xq1Yp2Xd6YhvsKU2cR5zz -zW2cUfGEwbKhsNKrz6JrIuuUnSckx1Gf+qqDtmXhrDf30LRSLfHWw/3jUYJiRKwb -b7W/SU+KmHp09r1O77tX11o4rwsIGmANgv66ZRyuM8+3n5s74eV2ERuFnt8vF/eG -w8EmT7W56pKfeTR7gcPvP7oqCzww9OSviaQHOEtKz/cuBaGxm2cAEQEAAcLDmwQY -AQoAJgIbAhYhBJYv0hh+1aHdgvxHijPxXq74y4AZBQJd5/VBBQkS9xG/AinBXSAE -GQECAAYFAk6zSoIACgkQxotJTfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLj -f1q+gYnEbHArdwHffeq7Eos5a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJ -BUO40XuR+3EMMncz65TolvPCdan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trD -Q/ch2nbDlLyC1RLp9aBHn3RMd3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0 -C61hlMealiJo3Fykjyh7MzfIZ1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgO -XYrcNQWsG0KPB7tGzlkAJMC7fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn11 -7pqd3D/uAEepjzc7u8XzY6L11hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSn -ry/uwAfo89MfGduG8FCJkl4nx3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0 -NX34KIFhZlB+/hM/tgPlcrSbCerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1E -x88XnMW11TKadWjW4mVdHiFoYDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4R -E+74txGFDM2b091qbR5gGHr3InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IU -hFChmE0gJy+c7R0JEDPxXq74y4AZgwIQAIYoGn0h6pJSV1vtaP4xig0vcq4RD7Ti -uRk6QnDtl4jM0K1QYJz7DSQiMisVyGe7tsJKFcwHT/CKW8ic/qO6xrQmyD3b4tmr -qtdwWNvnavmH678eIXD3VliRjIAX68KGoXcSCU3NwaQI/AMSSBxm+Wk+MS5qU99j -yi84rA8W4yQLfTRmelmAJibiIIQ6wqDOukC+kEAOXfWrn0lU56dqVRa0Xl0CSiZp -qYZsBeZuEzreZrOx+v/MII/4oCj889ATsBao41eBmrOPYOJcKw6nX90FLkNOGHxE -rWBL4VHK18Kqmvrt65oouIQe4+MDtni3IJx4sV8sHWyAKq/G5cX4Jjeo/HrYBteA -VssvCaEAru2M53dMpLmQ6tqGAUsPoQ9h0keAXi8BGAZ9sijTu6M5pWJLgjWt8ncp -J6yYAlXGW0S6Ns4v7qSyuaCvDdgCzYJU8+3ZZFVXWCgRJkSiwDJSikfHjWFrCvxu -8xGGxqjvkg9spJDc/oWBSB3CheyIhqiiyq+DDzMjWT15t/t5Sia4VFGfwfgBM0hG -SIluAnvrSPrRXjTUsjV3IVT53IMZSp9R24phnoa47FX4tZu6Gzg3znYOjOBLg8rU -VgIYO4lAv4Q+PugSwJKX5gENRZklbi6H9DhLVWe5600Lt8PLVZsEe9IMQsZhVbLZ -MZ6ypBebR4fXwsOEBBgBAgAPAhsCBQJYJnnpBQkPFsnnAinBXSAEGQECAAYFAk6z -SoIACgkQxotJTfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLjf1q+gYnEbHAr -dwHffeq7Eos5a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJBUO40XuR+3EM -Mncz65TolvPCdan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trDQ/ch2nbDlLyC -1RLp9aBHn3RMd3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0C61hlMealiJo -3Fykjyh7MzfIZ1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgOXYrcNQWsG0KP -B7tGzlkAJMC7fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn117pqd3D/uAEep -jzc7u8XzY6L11hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSnry/uwAfo89Mf -GduG8FCJkl4nx3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0NX34KIFhZlB+ -/hM/tgPlcrSbCerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1Ex88XnMW11TKa -dWjW4mVdHiFoYDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4RE+74txGFDM2b -091qbR5gGHr3InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IUhFChmE0gJy+c -7R0JEDPxXq74y4AZuCUP/jDnb60J2vTkPI4mIpj3EK18UrUQptWDERMcogXWEyvH -5pPOVuFCGq7KvbDE1aQX5ExkKlXApzFRwO4Wgy2VFAeVjjUPqstKu5fmH3kxSUsS -ajk+8f2HL5XxKKmw4AmbAY+NHCSxYKHwsQx1Yq8tSKITGT1yJnQH5QuGeBeewN48 -rDn6I+xI2BjVj07RTG9te/mqmU3zAlevOrxR1BxJRv1w5IqOv8JxE+YjRxFKdL2r -J0b88h9zT/SaLKFhoeFKuie2GHhobobSvwewQbVuqI/fkZ2Q/fUK3au8ZPDVk9ZN -qu9PngSXmC/2X38T2EQUZSBqyypyjYBhmOF/mjDyu+qs3e1l1RmCoYSvIVD2P4Cv -96GmM69ufA6VhcAa26UhOBJwRIigUbOBiwIN3rd4yMRQrYbJgGQelb9ZpUzwNxKK -8fAsALVzu5pPEOqDeu+jMs4misDfUJEqZzyfKAe9c+Gu5Uhfnk43kDNtcFULXR7v -gRnJS2PTIcTKBnjFSKCfpjdvFw2SgSDFNsNwHgUBJ8k1HnX8YbkX0UtuTXrVPN2m -ml1puU4eYJ17JIESfE7KF3bfih5VVLo7p/2obm/sc0/XWX/KkLdMizFjPUv8v25J -egnbxRchUwY1m92TXQ75vRBX1b7A8yqhYtT2AsIWbQH0RGzOiOW8SksW7GfqLlU/ -wsOEBBgBAgAPAhsCBQJSYsmIBQkJUxmGAinBXSAEGQECAAYFAk6zSoIACgkQxotJ -TfVqzH5Hzw//U08sUcZ1Ay/PQSf/L/w6FELBkPLjf1q+gYnEbHArdwHffeq7Eos5 -a3PKuTYXvHzy2k+aF3c4O+zFfWGOt8zM2iEr/gbJBUO40XuR+3EMMncz65TolvPC -dan7z3iQgAetcTO7aEAcqoc7keiv+vu1wrXW5trDQ/ch2nbDlLyC1RLp9aBHn3RM -d3x5IukzBnNNxkrVrx0Yno0VALLoH2OxL3cIytG0C61hlMealiJo3Fykjyh7MzfI -Z1Pt73ZDLORNtgMxGqXc5mRtPfCGCk+DwZ9+ypgOXYrcNQWsG0KPB7tGzlkAJMC7 -fs3lvPCdaXV1I5DZ5iSr+ZAQ1Urag+OJA/b+pn117pqd3D/uAEepjzc7u8XzY6L1 -1hbA9mSnkkUGf596DBcLxqBnXpAi2A/GnaLd+GSnry/uwAfo89MfGduG8FCJkl4n -x3SvxIGA0ncmI5UOZtlWW8nTE6o6bEBa9J9E7EF0NX34KIFhZlB+/hM/tgPlcrSb -CerC+J3/2mFz5HtnfhlIVblvjt/s9Sv4mbPKDj1Ex88XnMW11TKadWjW4mVdHiFo -YDhXyLb1RLkzxP0KNXcadat7WKEng+WOo76svt4RE+74txGFDM2b091qbR5gGHr3 -InAr/PXJn7HolvsawEb32zP5oo6Fs9fPqj8Y1+IUhFChmE0gJy+c7R0JEDPxXq74 -y4AZkjoP+wR9mWXgo6GVNPW7etwGXvUxxQhepXFlmm/ccMfbwv5Haop6TBiRFIzX -tBNHGbE3jgAfpoYYtLdM3iY/SCh2DB0abFNibpELCcQCoiUmiXfGVaNlkHyUqxai -pNydOx/PdGPHR4lXICd1HZ/P77eBtdBrw+01LpkhAzaoJfVG+mnUb7o9td9Ip6r6 -gqrBFjI3WS9Z6YmPv9tuGzjzIkKnfMLuV+3Kr4+bAnoLAZIbEaUAgwuXbr/DrFU6 -qYaGxxe52EJdGi6GJNujSOouS/prR/pUHcMQumKgrRLRAugmc/21YsklLJn0Q7NS -VIprblesM11S4b+SwRObxDPE+He+Y7OnzGReHQCSXwH/T8YnUbg0LnELX70R763Z -rQ3snDkf24oB9YxpVUrYh1CcvaaXNPQcJ7JzX6PdVnUOEotOiUWFcjk128PzpS5D -diMGmVZDEVsDDQbV2B56vW+RzpKf/Gd8JBaIugpBlK9D8G+0wmXp3Ks3U+BEtb40 -Q24dxO7lb5mGZZTz1DKq9DKKF6DM4ybqDHS5sf9moIyYx5ls1w1KC5oX1Vx9ZdLY -Vjc9t0D6lvoDndh/yw9VKa+Q1sZcGhPJjWvzYF6KHVp3R7NhtDjefeynKIUax3Pb -D43vBEZ+B6j1dPD8OnaHw5If3869gDcj2KDCRYTlf2ZXSopmVRMpwsOEBBgBAgAP -BQJOs0qCAhsCBQkDwmcAAikJEDPxXq74y4AZwV0gBBkBAgAGBQJOs0qCAAoJEMaL -SU31asx+R88P/1NPLFHGdQMvz0En/y/8OhRCwZDy439avoGJxGxwK3cB333quxKL -OWtzyrk2F7x88tpPmhd3ODvsxX1hjrfMzNohK/4GyQVDuNF7kftxDDJ3M+uU6Jbz -wnWp+894kIAHrXEzu2hAHKqHO5Hor/r7tcK11ubaw0P3Idp2w5S8gtUS6fWgR590 -THd8eSLpMwZzTcZK1a8dGJ6NFQCy6B9jsS93CMrRtAutYZTHmpYiaNxcpI8oezM3 -yGdT7e92QyzkTbYDMRql3OZkbT3whgpPg8GffsqYDl2K3DUFrBtCjwe7Rs5ZACTA -u37N5bzwnWl1dSOQ2eYkq/mQENVK2oPjiQP2/qZ9de6andw/7gBHqY83O7vF82Oi -9dYWwPZkp5JFBn+fegwXC8agZ16QItgPxp2i3fhkp68v7sAH6PPTHxnbhvBQiZJe -J8d0r8SBgNJ3JiOVDmbZVlvJ0xOqOmxAWvSfROxBdDV9+CiBYWZQfv4TP7YD5XK0 -mwnqwvid/9phc+R7Z34ZSFW5b47f7PUr+Jmzyg49RMfPF5zFtdUymnVo1uJlXR4h -aGA4V8i29US5M8T9CjV3GnWre1ihJ4PljqO+rL7eERPu+LcRhQzNm9Pdam0eYBh6 -9yJwK/z1yZ+x6Jb7GsBG99sz+aKOhbPXz6o/GNfiFIRQoZhNICcvnO0dAMYP/ibD -23JOBzscyMt4vB2mog2wszJisnQOXCiYaB8WPPO3lycuNoPiMr/oWPnnHechXk9W -aVTBIvLB81x41ObizvRu4cZ2gtTLxvVw+CtSPMpNxfdfzbPKGajeo8OWA925hSA8 -7ilh8jwu0XIKR2pSnxZ0GYEkAPO7JLgI8GS4TO4C600If+seLwIhVSLw7dIhRjiG -sUZ0LBNCG88ZgR5OnfWLcbL1Tu9+tBNjgTiy9+XIRok9ermPyitjmI0DpJkPH4rD -H//e7rBda0Ojtc0vooWR0aR0Hk+gRpwG8Q+/3AGDCC7PUdIyVn0h7RDtAF98uiOT -Q2hnIdHX7MWtU7wJNkoEiA00Z4WU9SEVjVEob/mgXbsiLKkjG92GAJJhoHbpcu/d -zcYV5sx8AD6Al+zJ4pp/0bF3d7QfNoiK+xCOvSB1WX3V2MUQvSOOGvOimq+jBRpe -VB8aTmqse6lI/TJY0gd1P6Hi687lRxz6Q55SP+r/7aKIpmB8x+ehyIfR0iTBp0kS -tiQ3krYXKwi7UOZQCkJXA40JZK1sk3bYtui0tRG5JLn3Shcyoxo7guXfe+Y80huJ -TQExxcqX2iCfuQNPDS7hWJYVnPvZaOndm+RIKmg5j73aPybPA6QGa57wqn7Ahz6U -+EThIl3ogq38UjZT/2ckZZQ5jhUNIWkYvY4fl69rzsFNBE6zSy8BEADHe19OP/Yb -GJSxu9SdEQhig28ohEmF2GuQOeebGicyvfmtmX5X3/e2DbwntQ9HmDYJ9gDUWSey -afDe7RKszwZ6lRE5daK6BoGq0ks7whGNj3qqOgQkBvDOlG2cVCgBraUogBOh+lcO -X5A9HCX7dxzxohWSFT6Bbs7FlwmfIoAzzmILKp/8ROTgxZZOymLjiACGTXm992US -bQpFCyyP8kYgKOLJ4OPTqxytBlDzY6mlOE6j+1eqCdjMmUgCytbsqAuRXh6qSoZL -IOpesZMv7v262MPvZV93qBa1x20QlLE+1RPs/l/Vzu+bVg6ma8YgIegnzvMSgluE -KmR76lD/bOw0h/iG/4dW6HCQCUgXXpPBr4neLp8MqD4t3E/iDC47rUnUEg4mhhTQ -E/OgRfyy+o6J1S4LLb5UkeyOGMNYd63ovBODqBeCOfJH31m8nEPOH2MpJaVr7kGL -ne71HFiKNNPcoCpmcmafrMTK9fEyDY13NUM1SS99r09XI4qL14w9RZjy01ozsvrm -Y2QOXLiYo5hkPiazUf2z0vIDundhqV/CScBICTTbMheFBogArFrNtWV67++z0HVG -gsyRMUju897qqDBNHGUXCgrjcipcDoQB5V4HG8Yl4+GYp896kjxbf2RibdabNHXY -YlQW6arB/wrJeWv0Xc4nR1LmhF/F2IJY+QARAQABwsObBBgBCgAmAhsCFiEEli/S -GH7Vod2C/EeKM/FervjLgBkFAl3n9UEFCRL3ERICKcFdIAQZAQIABgUCTrNLLwAK -CRAZLOHEg2M6a4LEEACvvnVf6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM -9Ik2YiDXrtyBvzvFuSu6I4PIyH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl -5dAQ0hmMYWOdET6kbBrFoPDpUQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcu -AqsQ4Hv3ZjRxAru6hSdq4pM8jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tT -ob0w+RsO7b/CpW9YaRbSC84M5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdD -Wak+lslIhj82+hBaU3tXI/uH2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/ -nxEpTQS9uM2YH541l3biRqrjI+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9V -NzV+Efb4PFCqxyCGmArVBv9qN7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWD -JE+D6KMeUGLV0zWcRs+cixPOdC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+du -LQ7mc0M23eiy2F4e56yK7jPVMwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cw -ze8/MsG5f/8Pq4wOIPuDe7dkjLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQ -M/FervjLgBkz7w//QABLWdVBkrKOYQDnZj3/3rdzbpYcdPEuMYpxPCbquCkqAvy4 -9MXGBKmUti3Ljqbgqa7IF/WqtiXuQFOvqU2Tri34A5P357mDeNN+ed/khzcnmGF3 -17g9AGiJ4p5feGMbIeIpfWNzHwZx+g2RbZ2RsrAn9476YzmHvsc6EHXRm0/XWVW9 -dyYnUNcFyBJso3NniLwasKdWMqW46gx/L3nk7PIymWmWjD8EBQuLFhJ/FrqaJ5UE -zTuKoHghRtHCIEXFFK8SHTPgzNAy7bP+YdfByvoUiNCLip9fF1JhPBX2C+AwTLz/ -Fe/VZQBWfyrWx6fztRnewvUTCi8E/PzgRgVXMK96pWAOI1fcO4iCYkbV+sRIIbJk -YOwLirhy4IzHW2gpJ6CwkhiBgVoub7Mvx0tLBcpSn8RZqZT2j3INWV2IswYsrFKY -JUDoOVMCDlI9z4MGFohvUDlXxllF8ZXaR+aswq905QW93ddu1UeSg+yLpizbP/2O -TlQXx1Mdv9UkcFZn/wU263a6LOW6cQquDAOr37DyNrFxHZ2JdI7u2ggPYYViE7Zf -TDRLFz7RJc0DVZKd/sY65uh9NMgPseORa7y1h7VapLMJderjJNpdX+TirqXols6Z -gkEbBCHvPKlY2A5okmXoSPF5QmU0OxqeykVBcfDchXM7uhqIiZ6gB+pXpdDCw4QE -GAECAA8CGwIFAlgmefIFCQ8WyUMCKcFdIAQZAQIABgUCTrNLLwAKCRAZLOHEg2M6 -a4LEEACvvnVf6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM9Ik2YiDXrtyB -vzvFuSu6I4PIyH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl5dAQ0hmMYWOd -ET6kbBrFoPDpUQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcuAqsQ4Hv3ZjRx -Aru6hSdq4pM8jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tTob0w+RsO7b/C -pW9YaRbSC84M5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdDWak+lslIhj82 -+hBaU3tXI/uH2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/nxEpTQS9uM2Y -H541l3biRqrjI+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9VNzV+Efb4PFCq -xyCGmArVBv9qN7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWDJE+D6KMeUGLV -0zWcRs+cixPOdC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+duLQ7mc0M23eiy -2F4e56yK7jPVMwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cwze8/MsG5f/8P -q4wOIPuDe7dkjLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQM/FervjLgBkF -Qw/9F7yzJdzVqXS8AWF96km5ZPIkTfIvxzXhQKctAWLRZNoz5P+rP5bUvtej7jWq -wJR1L35oaCWo1C6kGWXCTFJnLv/uAue5xbL6NF5g26vmU4swJFmvnXJQJX8+v57j -C2XsCKwbwqnFXwy5YfrTOCjAP6PbzTiMujlz0nxsYXXGTfC5Aq9zS2G9UrOQ/Ich -gmCRoDci8KC+HD6NfsI9lzhYeW89HJ6+h89hLdDXgSwQfd1zprTQyTPZNUERJ+Ww -iMIKtwqZghDvFMbrQrkBrcPa/rc1nQ3PzSfRAMIds3tekciv4Q4LVRvwCFsEgifz -8TX48/Jog9riJARHE+qQtjwJ6dqyn/p0ubUm62iYe1Lp3tv1q6exqwsGWkEQZc58 -LihWIMklZf4l/FGP0yTZO59CEZYgmWcBynY2aLs2q30l8GFYatuXkZ1WTcbTp9yk -0ocaBnq3JwKQLh4j+hISwndT8oqq97hrWfw7D3kEoiXG+cjO9adKy20105kFcmjW -urR2WAaTsc3MIwc63qxW6MvUFGRINISknkBfTm4LMWyNFLQuZS25EgfLGgNQWQcA -ILgN52cd1UrG9+rrzW1XkJDamRIcRZAUQsKcfjUANsfhLzVSA7p61tj8eWVtu2wT -v+dk4BnK++Je162WepOmwWONRpUue5n13v5HNWzQz1o723TCw4QEGAECAA8CGwIF -AlJiyZQFCQlTGOUCKcFdIAQZAQIABgUCTrNLLwAKCRAZLOHEg2M6a4LEEACvvnVf -6RJIUPVbGTyjSgBXlAEflvfE6n/x7Cn+7wOJUWKM9Ik2YiDXrtyBvzvFuSu6I4PI -yH+NoElrLHTi9ORwiNTuCnwtelP9HrQ7ZMFqvNJl5dAQ0hmMYWOdET6kbBrFoPDp -UQoWdQ332tHCloB53XtFwrTi2w2AeFPlV3ItyNcuAqsQ4Hv3ZjRxAru6hSdq4pM8 -jOCvrTVYzsxVt90RNJ5fqtOui+6OzjW2QhnQR4tTob0w+RsO7b/CpW9YaRbSC84M -5Mt95GllJF6+2W4NW/pvmh/SlRm7vhPp/Q/k0qdDWak+lslIhj82+hBaU3tXI/uH -2sq3bi5+QLfoPee8oVborJcYlXDcsErey2ePvL+/nxEpTQS9uM2YH541l3biRqrj -I+y8bxLfvZRZteUqP4db6OxJpReLLA2tvbwIzL9VNzV+Efb4PFCqxyCGmArVBv9q -N7pW2V5l7nNRFr9yZEy9r/lDF/iImE/YODsH+lWDJE+D6KMeUGLV0zWcRs+cixPO -dC+1cs3tYLPMwChyPaprhLluhVV6+HjDAKiSc+duLQ7mc0M23eiy2F4e56yK7jPV -MwzkGRA5137nUOOm99KuCUnYzCPoh2QdlQ3Du5Cwze8/MsG5f/8Pq4wOIPuDe7dk -jLwEVjTMohdtyuJpjMdCi0J7bp2w9NcQitPfLwkQM/FervjLgBkjtg//alQGs/J8 -T+sNGYU8fpkJtnTSVhjFrWY6ljzkVO4EO9mFKM1yEJtNfdAiy7JhA2VPDxGWj+as -ZC8NVLsJ8/l3JdcIgACQdiNNJTqfXTLSsJWWiNDAGXwJxKbsOpPObtF0MXnPin3Q -S3ww0ucuqljlhrbw3cUC9QVIi0NAIBJEaEqWlwAciNbSuiNQvUC7bDVFXn3jVJKZ -G4OFVnoLyrdQY7kNnXIe4TAaaGHhpEEG6FfYXR+1S8mdw1NyWNJZWJwCIxBeHkCa -TArKlLdZANrj7eUbcuJr956zcbvHzD13qBJ7zJn3Afjeecch4ONNpnnYL3vP9AHs -mse3/iqyFCd31/yYr/dBpQD4fn22AiUJ34VFTvCDP6AIDEsvogIU72jsBDB28Fg/ -UX6nHY2MmL32ipSesLzN0TYohPusbhnlrsoaHEF8Ar8Wau3xLFGesknpjRRD2ptv -O5M1Vuo5xF8Vqia9N6dkpIBha7sBaVNznaDzWMgqNyukftYzrFiRn6yJs6nQVd6N -Vx+x50bm2oIzi19GP8axhXOoc15f+VjR3ryZcOctSBbQJe1CC0SzK+UwusvvkTmy -/ZGCY9wagxxZ2wdFk9BGIquMTqaY6cdonDiWyDFvMCPZDxVxb+tXA5ulGsMqjrWK -L3GN+1KGKYH/bXL0loBZPEfyXzcyBP9ADFLCw4QEGAECAA8FAk6zSy8CGwIFCQPC -ZwACKQkQM/FervjLgBnBXSAEGQECAAYFAk6zSy8ACgkQGSzhxINjOmuCxBAAr751 -X+kSSFD1Wxk8o0oAV5QBH5b3xOp/8ewp/u8DiVFijPSJNmIg167cgb87xbkruiOD -yMh/jaBJayx04vTkcIjU7gp8LXpT/R60O2TBarzSZeXQENIZjGFjnRE+pGwaxaDw -6VEKFnUN99rRwpaAed17RcK04tsNgHhT5VdyLcjXLgKrEOB792Y0cQK7uoUnauKT -PIzgr601WM7MVbfdETSeX6rTrovujs41tkIZ0EeLU6G9MPkbDu2/wqVvWGkW0gvO -DOTLfeRpZSRevtluDVv6b5of0pUZu74T6f0P5NKnQ1mpPpbJSIY/NvoQWlN7VyP7 -h9rKt24ufkC36D3nvKFW6KyXGJVw3LBK3stnj7y/v58RKU0EvbjNmB+eNZd24kaq -4yPsvG8S372UWbXlKj+HW+jsSaUXiywNrb28CMy/VTc1fhH2+DxQqscghpgK1Qb/ -aje6VtleZe5zURa/cmRMva/5Qxf4iJhP2Dg7B/pVgyRPg+ijHlBi1dM1nEbPnIsT -znQvtXLN7WCzzMAocj2qa4S5boVVevh4wwCoknPnbi0O5nNDNt3ostheHuesiu4z -1TMM5BkQOdd+51DjpvfSrglJ2Mwj6IdkHZUNw7uQsM3vPzLBuX//D6uMDiD7g3u3 -ZIy8BFY0zKIXbcriaYzHQotCe26dsPTXEIrT3y+3eA//cZhsZfuRNuA2pkAyJ8eo -TQI9ynN/GLzDNbn37GZ+0+ZUzxcSKOQBh6hQfGVi7H5gyf5sswwZeYeA7QZJupQk -5CNuiE/SCmC1JmMqeG9yoBfl/VnBCXJ0nEoRo4s7X7oyt8lvjuewfbOTERxdoN4L -oTSKX4jbHSmaDd34JOoGuNzZQ+UhvXNiOOsdBh+VW0JDqZRTCI89XJ82yMQJWZY8 -csiTfbZfwt0L5YHY7IlduRWO3G7ladDdTRNIIsuZ1+kOZUDOvVU9bQtwEPwTqjJm -J4cOZPX1DV6vYQhCz+gi1nGKv9/0+BKUzq87PVGOfIVujAbvowZfxFFCCJOOPoHM -e0SiWQCqAL5Ybo8QxEW6aL2ijCl9kcHZMdYmCGozndb6XymMiMdChomAKYnMgEN7 -VDIXmGS1R4X5+WNiu6win6trgS1l+PF15tDeppIjbnxqRv8KyIz5GOycAZc8zLg3 -1PFqjHizzAXCoybRvGAdZkHoNLo6523dEp+5cXFhSmGVLxxU0cX4bqmyT5fm/Ibg -jRifDHCEcoHI4Q8WV68XADyzzK+mxf4KCwrlSx9x97jyUWg3JOtvb12g2wUsA+gL -JHNd9p2vVM2KvjrzT/DYpJyBxs00RiWeNwuphndOCo6yZF7sFuT/XMLIr0WQny4u -wiDJ24DfvuOu2loDbAJX5JU= -=rwLr ------END PGP PUBLIC KEY BLOCK----- -- GitLab From 739f7a2dae240c8d9a12222d1ae6a147d4a02e6c Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 11:00:01 -0400 Subject: [PATCH 10/27] added keys --- Dockerfile | 4 ++-- signatures/{repomd.xml.key.meta4 => zeek.key} | 0 2 files changed, 2 insertions(+), 2 deletions(-) rename signatures/{repomd.xml.key.meta4 => zeek.key} (100%) diff --git a/Dockerfile b/Dockerfile index f6240be..506d2cb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import repomd.xml.key.meta4 && \ + rpm --import zeek.key && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -29,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/repomd.xml.key.meta4 b/signatures/zeek.key similarity index 100% rename from signatures/repomd.xml.key.meta4 rename to signatures/zeek.key -- GitLab From abc1fc235201199b2d62bfc0db742bc739344652 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 11:15:35 -0400 Subject: [PATCH 11/27] update key --- signatures/zeek.key | 148 +++++++++++++++++++++++++++++++++----------- 1 file changed, 111 insertions(+), 37 deletions(-) diff --git a/signatures/zeek.key b/signatures/zeek.key index 5e03d85..88c9a18 100644 --- a/signatures/zeek.key +++ b/signatures/zeek.key @@ -1,38 +1,112 @@ - - - MirrorBrain/2.19.0 - https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key.meta4 - 2021-03-23T14:40:01Z - - openSUSE - http://download.opensuse.org - +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: SKS 1.1.6 +Comment: Hostname: sks.pod02.fleetstreetops.com - - 1084 - - - - - - - - - - - - - http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - - - - - http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - - +mQINBFSqrMoBEACiAx50jkSte7rcYHOBrZAOlCn6g5iJnKss6fNULdNOvn9WSZd5AWGNe/GN +iL/WCOjgeZIOUy/ioFxkzooLq/0dQcaYQZoDG4RrGTdOkvQt1xHa59cqbQyZ3NsbCaJWM9p6 +TsppHEQxd6Ex45bF5aITj74MQFi8EhQoIfAr8azykWk2q4HKbdCots+qzuWhNC+M8f7V5yGB +NdRTlhRLVAV2cFkfHqqdmY9MC/dJwWgDMbXEcmoHFgrmzDFEEl3c0Oo/XO1T6aPYdJuFipJe +nvbvTmN+g4FvPbPYY+pUl/0nptqpsdshoMX9eiynbaQS0MzkqSkrolbh+xmmFeqKdAbLHj7g +LBh4LSZxhxEHRFc63YPsRL5ZmGgV9Z4MPnjUMd0I4It2uU8VwyB1Xnvso52de9Scn4IaZBf1 +vA+O64esljyKpn3pa848EbQWGo9gNV8RsP6jdQITM13eCs+PRBgHi5DbVVKEDrYyIFXuJ+7H +0TxPGG6QOOprttcSOMcEY5KMf2s3L/cWMhqg7V5d+wH1LXCHK5oqKtQPiRpx4MnXtLpMltTe +xLjq/BB7k75B/IZbfa5ZM4mU4zlAws4Tb2wo9ij13pvYFFtVRSnIk3PFmnJ5sOzisQuRhbps +3WiA22DlfmZCqt5G+3lTNAb4jR7d0VK7zRt7/A4Qxz4RVeA4aQARAQABtCRCcm8gU2VjdXJp +dHkgVGVhbSA8c2VjdXJpdHlAYnJvLm9yZz6JAhwEEAECAAYFAlSqx7sACgkQKfDK7eOs+jSQ +zA/6AyPcaq9pX79eJoM061haghUdhbdLyQjUU3Xu8Wu6pyouLYbDlPNQSFgvQ0D/dh5j3xZl +Ods4IbEFWrrO6sGQlByeBiZJHgJxSURboXPKNdSF7RpNX2D0RE0s0z06TtanZ23iIrvnajo0 +OFvOBafGvBkW+baLCpyx6dJoDsEAZoJdcVJJ/FQQT3fSa/rf9Po9X0DaJq78AUBQddkIhBKn +CmIJt/6AjosKSvWUVMEKcxVPkDfx+NgfJB1qV3RN1G6HdDZ3/q04cQM94h1AKxl3R/nhHImc +tml7DfoLzU8eDhtXFHajRg8uKlV3SeUpRsHmuYrltV/s5qJ5+aDgiWv9j2BixiUk0+GG0+br +vIjT0lEEAmU5FG/Timi5ifXnhbiNSiZAM8bwJmvin08hQWp2M2NNxIIqazPuRJv+oA03y6tg +0lnp4P4A4muTp4vJbWHxInWecrONAsr15jE2G27kIWIf7ZizKPW+MjZe6PnrWCvNGKzJom37 +lzMaOvrpxI5J0oVrn+bBeWilUZTTH6Ih6OxXffgPtM6fwG3yg0dY0lWPBA+AsJPelbcvCDKb +TvKnNd3xYWlbZwdYp/BX8DrHFn4X4dXaryMolCxyTYV8iZOo/j+GyBIxeB+l/dmup1DrHmn5 +NubdzmsBZULZJV2GVCbkAmbPaKv9c1zoxpoyYjiJAhwEEwECAAYFAlSqr/IACgkQoz7iEFO1 +Lvrvlg/6A1gGx1/gE8J/JOrtI5dVTkh5Ljp9yLlI8LQ+WAsD0vIzZ8Q7ffg/HznbK+bzCi66 +vDnigs9XEFkpUaaRYXTAYVMAkQQOemHl5AqIIO4NJbTJECLqfvQLdnAVW539V8xOqtI4Nd6y +KJGAp//T+5qN6tCUy3gbc+d5TCvDVePJO35IM+yfeHGriQBJAN/8G483+mrW1xmaWLBF1uOj +lDR5nUYJvq101Sh/ovtsF2CZ6e4gOpJ9XQs99ZI0l/4n49DgI9frKyPgxQIcgVnpnfjCjJXU +H/yjucjqr6/IuoMLEevlyp4Amr6zRiDyaYxb4+D/gH8YhgTniVleCcPIBSTJx7L2tAzcnWz2 +p2iA6vXH5t4Rp/QVceX8CJeZUmJQcDczeEY40tIAcwwzaI4ocS8rUDUj6zgld5GH0QbY32pb +JpR2b5Yj6vNBSUARuv4DqRNLEqgQWX1yNQUN+WSRfJm8yQ/U3ePwmIFSsHm8sNKnfMps1XQ9 +dq51btzpr/VZITBKOjarisqxaWkc7+zTB+woEr6fiaQ8w2ZaijLJ5ONxsGQFbR9rOpbbQifH +Lz2QkANQ5/rMxhPUTKU7zIKgxzTRX9ZbvD45pKeEzBhMJem53mF0SeIlbD0HF1Vw1k2O6m6/ +AwMzkbjFz8yxxHT5IQIt35UqmiK1OlxM1MUw+/xibRuJAj4EEwECACgFAlSqrMoCGwMFCQeG +H4AGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEKfUHOR63zbznioP/3wmOuRZ8oTGK/3t +yPts7GDaIf1DUHsKvVV3dqMBSEBe8dZ5AidmMjgQ+aSp1EpETNqeX5MujjfVBs/B/VJfTofO +JNjeaMzi47T0FhIEIJfLRoq5Rj2ofjn55oqDjgKcrgjeGSyauSiNIsrPMtNg7VnJY41srPjt +3zIsS2ed95NCN1DvhXXJnB4KOXUu6qqPMhtBMpqEHxeH3Rop6Sx1gKwkLMEI27awIFy2pRHD +vJVjW3xDIjKRIsR3G88z8wDhODMaMrpq0mf2XrOFLYI8S841an1jaEBzpX7mxyJFnKKrPiEH +NijkkUtbBE8hUahmoyg5tU1L2ZwpGW280aWPKorFy00jDkr0gNfKlyTxln6YkSra2bvgUbY7 +2e2cw9tB29AB+2DBYC8RhwrfU3pYNLmikIa5Tei6RyGZvU5S9h8H/F+mTvNmXTo1spYJvyGu +URdqvKlGcJ+x6XhI8/I/IrsZHwcaQPFffDEK+9L8SWE249cIRBb90KkY0QYm1smXKHiUgFvB +nezV39BxSkDm5isBK9b41E0XEOWnLGDN8EHhHbTC2LBk7kl81j24T5A1X9UpdRW1mCX/xN6H +pjnxVqAoinbdm7w4oCVX+rpCn6aJGlG1QwGUxnVPAhoAT97d8ahw3P0Qv89aU/kDzQhqlDz5 +qTU8X+bdOmwZha7t1ClviQJVBBMBCgA/AhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgBYh +BLCiNTQWi9YeU62vAKfUHOR63zbzBQJcR06SBQkNQDxIAAoJEKfUHOR63zbzolkP/1mq/9xa +r+wATVEtl+Nj/h1DMrtbBT8ss/iEWQESP0usOqXHUtdIPvzvCdIJdrnjZzBKQjtlCj3pjoJ+ +Et/VU85vCFVe+yJtzLjl2rXoCICNzg9g4f63qsEXMJ8k5SB21I5j5mtvitOE/D0h5O8NFWgu +7t8N4fKm1LOuZq0Suu4shwOweqEAh+1XQA6Wpi3vugYCBpNHle99VpfYU+CxVf8iuCS0a1+F +kIKsVZEe70SomlmTLlVEV2k0WK/52X2zQzRYWKq4xuTXMBgmdGR0omDYxzK2eIt3kpwmP6Od +KO6mt88HfGJPH/VVUUyfZiWh1zsciE7Zp6zd/C9y9fYC7DkdE3pd063zLPdWG0vKbC7RFFe4 +yHkNol/FC02qveeh4DMdN2H+9Z6i1q0RG13U9ogdXTY/+7rPR8XTIvPFwW2EJT74EwiuzIzi +GCwbR3Fr6kopowweNm9c4nwJuEm8SF377/4GyPadCi9yQpuP91LuM4NdUOLTFhb5kFn3AUu0 +XCJyZYAbpqj74W8PtCZAK4tfqXKxfeM0Q6MZdadcAcljdWnv2K4NmBMMfKtBUCfvKK6kOue4 +NTNnYocySPia2W9Fc7u7AgcpzG2MjlUvoB0QOLOCinhZAZzdCxLr+gyul79XuHVNdXXsgSBo +ctE64/j1pvPbzrLifV+6pPGvsCtYtCZaZWVrIFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QHpl +ZWsub3JnPokCVAQTAQoAPhYhBLCiNTQWi9YeU62vAKfUHOR63zbzBQJcR08KAhsDBQkNQDxI +BQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEKfUHOR63zbzX1AP/jMBgIYQ/ZMOf/NlKwkC +Gs+kMejYV1+9puSIcywPhMpnn2d8Qn3GNRyH+/uKPn1CztxAi8fgxQCiY5FKdJT9AfcgRlzj +EK+wYrWU+xcfmVnjfLwHsBWr+dAunqyzxzio4AuyPGlbTvXl1s7NGLvz3aCZygZbPQoo0tUc +NJRh99N/nRp7w3U5dgbKAd8suPBYQsBeNneLBqTOgnCYo0Ngqjk2yo7VpoqdCIbWXTHhk4JG +Oi/wysQp6QcHNYxSi3aPMLqt8ofzdoExFXKXj7rlfV/qznityQKQY2fT9X1BHXOOqHSoqFAY +fGkJZKKBs91oqlhnAaa0KiKy4kMP3DkJESOEjMRqKhMPqQf1ztsB/pLh1qpR2HxY7k7Z6TN7 +6GU1s5siI9g0SMcpoWOi3GlVPcQ+40OpBsI1y56jigcQPvqb9vWFOWN1Z5YzSvP27tH+YrXt +YskNcaKNKXjqD8VzmoxtLoLxMDONc0QZPCl/gSAUES6Xj1jTtDDoQ3aUPfyQOQaHVNR5U6vE +B+gFIT1xTCldJQbgG1Yiu4qytQTnUCGE92m81yOaZQKJOBZdI8CFEbiVKT05Zfi21eq47TIH +sUiM6h9VIrMjb/SRCzgMEDFnucpgzlvx3PvCg6rxJI2/Iv2Hlxmvp+mlVSehMLgkSy64ikr6 +pUeDQ6zjNVt866JCiQIzBBABCAAdFiEEh6qvzsSCCe1IOfrhKfDK7eOs+jQFAlxbCvoACgkQ +KfDK7eOs+jSN5xAAkgCP+JsYsagQFU/SXoGUjukyTFG59oKyH2/gmXyKrNdn4Cu8oGzBLUBi +3MWv1+679cpYkQpnYLVimn0PmYKPliZJ4ic7KJW3qOA2AmZIsrv4a167mPnS8dkkH8BQhkcX +/f/IVIMmeO/Px0xLmWQAOp5Re+EsHinHeA5NCVHAUjVFW9fv33xU6jE4UtEAhG5M1rcr7RQc +pFxnluXAwIX4N2vCMQ335v3F9jUvj+7Ahg02jct6gtlNuzzD1oIae0R6uBwF42b1HUe6WKGf +MrlMXd4ezvHMfYqzHOAvvwuEBLJnHwMekUaYTNk+KG+vmQ1/JixSkRUbnxsF2bc4EHScm1/h +RowJpyJslkrc3DNgcWhPBejHedSkghY7ev4aOPWih8nL1syI8hGU9FmEoUUXprYln7kZb2T7 +a6MPrWeP6q8TW16E0y6xjw33Nvx+g6aZ444aw9pEINd6o4hiWCihvFEJ3JH4k8ZqVDNEqO5w +0wVr1IkazT9wM6LeNnU8kSon3+ejRtPKv8VgIjlSrJ6luot/m3uVuG2WsDEcTcBVe1pnx6Rl +ehyI+1ji8ma5P56ifcnHTCDW8rb3aIie3797vg9MdArvRxcRfXPk1g//hDHQguhdainfUXYv +x+3ExkJ8aLlT0BDzA75TzwAfxXf020W5mGL+OTu7Qfrmv9Z2T1e5Ag0EVKqsygEQALAI3JX4 +D0gZOe76OvaeWY/oMp0oD2Y8JKuF8vxOIz4EbvzgkJR2ZAbCOYFFs15dS0wVDREO1CXtCMPz +ul2wiCmskUNtwvcgQhlqNeouaZXAA6YySq7fXMN1xXXGMAW5WiMg34lg+VB76MRqzqAJH5iR +RMvHuE38N6fXxwR/K+Ln83eW6ClHU5M7IU0jwKql6rXfAMo2RovdfIcOSq2xg8PtSlYXS7Pr +hm9vW0rlEhS+SHxkwhfSW7HcCQNcGjhfmxnF5tP3jSrZ1MIqQFW+7Y6XpnKDsttMf+L8ZQ// ++TCUnOL54R8IClw2WfYSk64Hy+xXdQ4roNMhI/E2WBe/DFbd1n0uiWBc7RBC4mGiUNSi8hVD +2zpC+7MUaAH3PQKr8MXxrxnTO/BuWYjOC8fYui56oIkgt26P2NEvNkIj+2spUPQFDRfPOjxQ +Fr00g46ZQXbeCsw/LVPvT9wFbbhwBcwhNAKPte5pG6AGfAtnHNcWnczWv/Ps9/NqqjnDz4P5 +ByCdAbmXJjcv7/mkQFBayWw4JiSpSL+xULPom2wmmEE3nHBI6kx1D147bgayCHbwWBlHuqrG +p7Z1Yywro9wYbPZGvbFrd3QtullTaVZ+nz9u7z+4NZ9h5crASWWs92qg3O8UhO9dYKtMWVOz +XD30FtKBVzhyK/GABEb1vs7q7oyPABEBAAGJAiUEGAECAA8FAlSqrMoCGwwFCQeGH4AACgkQ +p9Qc5HrfNvP5mg/6A+c/2noN5yEPsdjr9RvFSYpGU5d9p9o8tWWfpEYZQ1QNrf2507x0XlVM +AD0l42U6lv/SiD/VC/2iLZ8FFmsmWWeI34lICqnFiiuH5Jj67u1v3+lEF6CTrdEivTlrreC5 +AmllBE5WTXGbFAo8hLMqC9QaVIjY4SSEMhjwLphI+Wk9GNHBPJR/0fySQiRF63GKfsYIxQ77 +XlcSyaoYjHjqHQeG1Hsmr2r4J+DN4v3exZN1eEHa5MrdZwf57cFUVGc5H03s7UE1QG3zGCF6 +vUVgCqourjtVIs/jU88KOpXM6BuU2Tm6VMlLmpeOpfwhsvfrez8ZfGw3QzYbDYw6wZpFGo5Q +kESCW+rReOsOVLKb0wi3XZQBHU7sKKD+oEJPRVjpajy34GD9Gev/akQFVuaoMLvKz3Ffz6+J +jtyUTV3M7++zM8wA2GFd7q61NM0SN3n45ORQ+DHXrKEapsUsPWQOs9cin1WIBl/mvXPlz3+f +C2Yu1Ry1e52duUyj2v10Yc8kmBbrLONtal1yWvq0XvLZhoJIqlCD7Y6MWZv3QIS9lg50uH+n +TjTA9Alslc6SMYfBwXOAUOyBe+DoZtjb4Tv2GteS5gVqVmst97vNRZVH574CD1MH51K+/Sn5 +mbr4t712KWTWdWY/OKlL8sVs7PMtdoQT/BP0i/6cXR5tOOFLkJmJAjwEGAEKACYCGwwWIQSw +ojU0FovWHlOtrwCn1Bzket828wUCXEdOtAUJDUA8agAKCRCn1Bzket828xi5D/9otRQogegK +mFXrHO4XbdvuBdug8LlSyuRgBc2vgpMWFoLwaXkqU6evl5syJiFSf9E6MQsSt2Sb/dcl+bS8 +ELLg3EMPL/SoKX7c1leWV+AO6Lx9bhM8c/5yUrEz9fcm9tzezIxnxXwBIq4F+IAYBVraoQmY +DFiq59dLkNlMC2zYFsvbE/HRDHRa02PgMiCeMW7BL+nWe2L6NeXQLfoPyx6H6mQ2YDT3kzWY +pWK8riAV3Gvowm52DknIOMzHmbV2q61yqNdI18Mwdopj0QaVyr1bYDlLk037GcC2zI7+3KIx +c7j3mMLIkxxBX32Rk3HGWNniyk8//nkqrdjVvzSr5Q8JoeCRcqzxIv828brSeyOBc4jTOlkS +h3aBnAjDWtT2bVpcpTap0z21Z1WMvD8zvc5BBwR/pNF4sI61FGeM1+nXCsRo8YLw0rF7M0KI +Q6iz0hRwfol5iSEro/XEp/SwhASBJ4i6kRxYN9ZBFAm9DnNiRnP8iIpnOEUUHFLlu4tDEgWO +IJpFsocISPPLTBn7rpSleFXWyBwC0Hthn35rOPQtee+4iDwvx5LQOin0A7SmyX158srJQwjV +BMX/7YKewjCuyUytcceJN67YaS2rpxTL93EN/mRt7pBzX6LTS+D/Ukiblujf1JdYrnkNBUDn +sCxl9x7GpN1WuhYx07gF00Au7g== +=DMyz +-----END PGP PUBLIC KEY BLOCK----- -- GitLab From 193cd62bf935e90ba05c2ec426ccaa64163c8b44 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 11:41:09 -0400 Subject: [PATCH 12/27] updated keys --- Dockerfile | 3 ++- signatures/repomd.xml.asc.meta4 | 38 +++++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+), 1 deletion(-) create mode 100644 signatures/repomd.xml.asc.meta4 diff --git a/Dockerfile b/Dockerfile index 506d2cb..0353914 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,6 +14,7 @@ RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ rpm --import zeek.key && \ + rpm --import repomd.xml.asc.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -29,7 +30,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key repomd.xml.asc.meta4 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/repomd.xml.asc.meta4 b/signatures/repomd.xml.asc.meta4 new file mode 100644 index 0000000..72d9ad2 --- /dev/null +++ b/signatures/repomd.xml.asc.meta4 @@ -0,0 +1,38 @@ + + + MirrorBrain/2.19.0 + https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc.meta4 + 2021-03-23T14:55:44Z + + openSUSE + http://download.opensuse.org + + + + 481 + + + + + + + + + + + + + http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + + + + + http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + + -- GitLab From 839d9cfbc55c80fd313ad564033020d097afbab8 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 13:14:55 -0400 Subject: [PATCH 13/27] updated keys --- Dockerfile | 4 ++-- ...omd.xml.asc.meta4 => repomd.xml.key.meta4} | 22 +++++++++---------- signatures/zeek.key | 1 + 3 files changed, 14 insertions(+), 13 deletions(-) rename signatures/{repomd.xml.asc.meta4 => repomd.xml.key.meta4} (74%) diff --git a/Dockerfile b/Dockerfile index 0353914..8c249aa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,7 +14,7 @@ RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ rpm --import zeek.key && \ - rpm --import repomd.xml.asc.meta4 && \ + rpm --import repomd.xml.key.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -30,7 +30,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key repomd.xml.asc.meta4 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key repomd.xml.key.meta4 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/repomd.xml.asc.meta4 b/signatures/repomd.xml.key.meta4 similarity index 74% rename from signatures/repomd.xml.asc.meta4 rename to signatures/repomd.xml.key.meta4 index 72d9ad2..af08fc1 100644 --- a/signatures/repomd.xml.asc.meta4 +++ b/signatures/repomd.xml.key.meta4 @@ -1,15 +1,15 @@ MirrorBrain/2.19.0 - https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc.meta4 - 2021-03-23T14:55:44Z + https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key.meta4 + 2021-03-23T17:09:23Z openSUSE http://download.opensuse.org - - 481 + + 1084 @@ -23,16 +23,16 @@ - http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc - https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc - http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc - http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.asc + http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key + http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key diff --git a/signatures/zeek.key b/signatures/zeek.key index 88c9a18..e2e0cc1 100644 --- a/signatures/zeek.key +++ b/signatures/zeek.key @@ -109,4 +109,5 @@ IJpFsocISPPLTBn7rpSleFXWyBwC0Hthn35rOPQtee+4iDwvx5LQOin0A7SmyX158srJQwjV BMX/7YKewjCuyUytcceJN67YaS2rpxTL93EN/mRt7pBzX6LTS+D/Ukiblujf1JdYrnkNBUDn sCxl9x7GpN1WuhYx07gF00Au7g== =DMyz + -----END PGP PUBLIC KEY BLOCK----- -- GitLab From f31c9324a1ed18c42d1763f5aaf8eb153af5259f Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 13:24:57 -0400 Subject: [PATCH 14/27] updated keys --- Dockerfile | 3 +- signatures/zeek.key | 113 -------------------------------------------- 2 files changed, 1 insertion(+), 115 deletions(-) delete mode 100644 signatures/zeek.key diff --git a/Dockerfile b/Dockerfile index 8c249aa..f6240be 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,6 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import zeek.key && \ rpm --import repomd.xml.key.meta4 && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ @@ -30,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 zeek.key repomd.xml.key.meta4 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/zeek.key b/signatures/zeek.key deleted file mode 100644 index e2e0cc1..0000000 --- a/signatures/zeek.key +++ /dev/null @@ -1,113 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- -Version: SKS 1.1.6 -Comment: Hostname: sks.pod02.fleetstreetops.com - -mQINBFSqrMoBEACiAx50jkSte7rcYHOBrZAOlCn6g5iJnKss6fNULdNOvn9WSZd5AWGNe/GN -iL/WCOjgeZIOUy/ioFxkzooLq/0dQcaYQZoDG4RrGTdOkvQt1xHa59cqbQyZ3NsbCaJWM9p6 -TsppHEQxd6Ex45bF5aITj74MQFi8EhQoIfAr8azykWk2q4HKbdCots+qzuWhNC+M8f7V5yGB -NdRTlhRLVAV2cFkfHqqdmY9MC/dJwWgDMbXEcmoHFgrmzDFEEl3c0Oo/XO1T6aPYdJuFipJe -nvbvTmN+g4FvPbPYY+pUl/0nptqpsdshoMX9eiynbaQS0MzkqSkrolbh+xmmFeqKdAbLHj7g -LBh4LSZxhxEHRFc63YPsRL5ZmGgV9Z4MPnjUMd0I4It2uU8VwyB1Xnvso52de9Scn4IaZBf1 -vA+O64esljyKpn3pa848EbQWGo9gNV8RsP6jdQITM13eCs+PRBgHi5DbVVKEDrYyIFXuJ+7H -0TxPGG6QOOprttcSOMcEY5KMf2s3L/cWMhqg7V5d+wH1LXCHK5oqKtQPiRpx4MnXtLpMltTe -xLjq/BB7k75B/IZbfa5ZM4mU4zlAws4Tb2wo9ij13pvYFFtVRSnIk3PFmnJ5sOzisQuRhbps -3WiA22DlfmZCqt5G+3lTNAb4jR7d0VK7zRt7/A4Qxz4RVeA4aQARAQABtCRCcm8gU2VjdXJp -dHkgVGVhbSA8c2VjdXJpdHlAYnJvLm9yZz6JAhwEEAECAAYFAlSqx7sACgkQKfDK7eOs+jSQ -zA/6AyPcaq9pX79eJoM061haghUdhbdLyQjUU3Xu8Wu6pyouLYbDlPNQSFgvQ0D/dh5j3xZl -Ods4IbEFWrrO6sGQlByeBiZJHgJxSURboXPKNdSF7RpNX2D0RE0s0z06TtanZ23iIrvnajo0 -OFvOBafGvBkW+baLCpyx6dJoDsEAZoJdcVJJ/FQQT3fSa/rf9Po9X0DaJq78AUBQddkIhBKn -CmIJt/6AjosKSvWUVMEKcxVPkDfx+NgfJB1qV3RN1G6HdDZ3/q04cQM94h1AKxl3R/nhHImc -tml7DfoLzU8eDhtXFHajRg8uKlV3SeUpRsHmuYrltV/s5qJ5+aDgiWv9j2BixiUk0+GG0+br -vIjT0lEEAmU5FG/Timi5ifXnhbiNSiZAM8bwJmvin08hQWp2M2NNxIIqazPuRJv+oA03y6tg -0lnp4P4A4muTp4vJbWHxInWecrONAsr15jE2G27kIWIf7ZizKPW+MjZe6PnrWCvNGKzJom37 -lzMaOvrpxI5J0oVrn+bBeWilUZTTH6Ih6OxXffgPtM6fwG3yg0dY0lWPBA+AsJPelbcvCDKb -TvKnNd3xYWlbZwdYp/BX8DrHFn4X4dXaryMolCxyTYV8iZOo/j+GyBIxeB+l/dmup1DrHmn5 -NubdzmsBZULZJV2GVCbkAmbPaKv9c1zoxpoyYjiJAhwEEwECAAYFAlSqr/IACgkQoz7iEFO1 -Lvrvlg/6A1gGx1/gE8J/JOrtI5dVTkh5Ljp9yLlI8LQ+WAsD0vIzZ8Q7ffg/HznbK+bzCi66 -vDnigs9XEFkpUaaRYXTAYVMAkQQOemHl5AqIIO4NJbTJECLqfvQLdnAVW539V8xOqtI4Nd6y -KJGAp//T+5qN6tCUy3gbc+d5TCvDVePJO35IM+yfeHGriQBJAN/8G483+mrW1xmaWLBF1uOj -lDR5nUYJvq101Sh/ovtsF2CZ6e4gOpJ9XQs99ZI0l/4n49DgI9frKyPgxQIcgVnpnfjCjJXU -H/yjucjqr6/IuoMLEevlyp4Amr6zRiDyaYxb4+D/gH8YhgTniVleCcPIBSTJx7L2tAzcnWz2 -p2iA6vXH5t4Rp/QVceX8CJeZUmJQcDczeEY40tIAcwwzaI4ocS8rUDUj6zgld5GH0QbY32pb -JpR2b5Yj6vNBSUARuv4DqRNLEqgQWX1yNQUN+WSRfJm8yQ/U3ePwmIFSsHm8sNKnfMps1XQ9 -dq51btzpr/VZITBKOjarisqxaWkc7+zTB+woEr6fiaQ8w2ZaijLJ5ONxsGQFbR9rOpbbQifH -Lz2QkANQ5/rMxhPUTKU7zIKgxzTRX9ZbvD45pKeEzBhMJem53mF0SeIlbD0HF1Vw1k2O6m6/ -AwMzkbjFz8yxxHT5IQIt35UqmiK1OlxM1MUw+/xibRuJAj4EEwECACgFAlSqrMoCGwMFCQeG -H4AGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEKfUHOR63zbznioP/3wmOuRZ8oTGK/3t -yPts7GDaIf1DUHsKvVV3dqMBSEBe8dZ5AidmMjgQ+aSp1EpETNqeX5MujjfVBs/B/VJfTofO -JNjeaMzi47T0FhIEIJfLRoq5Rj2ofjn55oqDjgKcrgjeGSyauSiNIsrPMtNg7VnJY41srPjt -3zIsS2ed95NCN1DvhXXJnB4KOXUu6qqPMhtBMpqEHxeH3Rop6Sx1gKwkLMEI27awIFy2pRHD -vJVjW3xDIjKRIsR3G88z8wDhODMaMrpq0mf2XrOFLYI8S841an1jaEBzpX7mxyJFnKKrPiEH -NijkkUtbBE8hUahmoyg5tU1L2ZwpGW280aWPKorFy00jDkr0gNfKlyTxln6YkSra2bvgUbY7 -2e2cw9tB29AB+2DBYC8RhwrfU3pYNLmikIa5Tei6RyGZvU5S9h8H/F+mTvNmXTo1spYJvyGu -URdqvKlGcJ+x6XhI8/I/IrsZHwcaQPFffDEK+9L8SWE249cIRBb90KkY0QYm1smXKHiUgFvB -nezV39BxSkDm5isBK9b41E0XEOWnLGDN8EHhHbTC2LBk7kl81j24T5A1X9UpdRW1mCX/xN6H -pjnxVqAoinbdm7w4oCVX+rpCn6aJGlG1QwGUxnVPAhoAT97d8ahw3P0Qv89aU/kDzQhqlDz5 -qTU8X+bdOmwZha7t1ClviQJVBBMBCgA/AhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgBYh -BLCiNTQWi9YeU62vAKfUHOR63zbzBQJcR06SBQkNQDxIAAoJEKfUHOR63zbzolkP/1mq/9xa -r+wATVEtl+Nj/h1DMrtbBT8ss/iEWQESP0usOqXHUtdIPvzvCdIJdrnjZzBKQjtlCj3pjoJ+ -Et/VU85vCFVe+yJtzLjl2rXoCICNzg9g4f63qsEXMJ8k5SB21I5j5mtvitOE/D0h5O8NFWgu -7t8N4fKm1LOuZq0Suu4shwOweqEAh+1XQA6Wpi3vugYCBpNHle99VpfYU+CxVf8iuCS0a1+F -kIKsVZEe70SomlmTLlVEV2k0WK/52X2zQzRYWKq4xuTXMBgmdGR0omDYxzK2eIt3kpwmP6Od -KO6mt88HfGJPH/VVUUyfZiWh1zsciE7Zp6zd/C9y9fYC7DkdE3pd063zLPdWG0vKbC7RFFe4 -yHkNol/FC02qveeh4DMdN2H+9Z6i1q0RG13U9ogdXTY/+7rPR8XTIvPFwW2EJT74EwiuzIzi -GCwbR3Fr6kopowweNm9c4nwJuEm8SF377/4GyPadCi9yQpuP91LuM4NdUOLTFhb5kFn3AUu0 -XCJyZYAbpqj74W8PtCZAK4tfqXKxfeM0Q6MZdadcAcljdWnv2K4NmBMMfKtBUCfvKK6kOue4 -NTNnYocySPia2W9Fc7u7AgcpzG2MjlUvoB0QOLOCinhZAZzdCxLr+gyul79XuHVNdXXsgSBo -ctE64/j1pvPbzrLifV+6pPGvsCtYtCZaZWVrIFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QHpl -ZWsub3JnPokCVAQTAQoAPhYhBLCiNTQWi9YeU62vAKfUHOR63zbzBQJcR08KAhsDBQkNQDxI -BQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEKfUHOR63zbzX1AP/jMBgIYQ/ZMOf/NlKwkC -Gs+kMejYV1+9puSIcywPhMpnn2d8Qn3GNRyH+/uKPn1CztxAi8fgxQCiY5FKdJT9AfcgRlzj -EK+wYrWU+xcfmVnjfLwHsBWr+dAunqyzxzio4AuyPGlbTvXl1s7NGLvz3aCZygZbPQoo0tUc -NJRh99N/nRp7w3U5dgbKAd8suPBYQsBeNneLBqTOgnCYo0Ngqjk2yo7VpoqdCIbWXTHhk4JG -Oi/wysQp6QcHNYxSi3aPMLqt8ofzdoExFXKXj7rlfV/qznityQKQY2fT9X1BHXOOqHSoqFAY -fGkJZKKBs91oqlhnAaa0KiKy4kMP3DkJESOEjMRqKhMPqQf1ztsB/pLh1qpR2HxY7k7Z6TN7 -6GU1s5siI9g0SMcpoWOi3GlVPcQ+40OpBsI1y56jigcQPvqb9vWFOWN1Z5YzSvP27tH+YrXt -YskNcaKNKXjqD8VzmoxtLoLxMDONc0QZPCl/gSAUES6Xj1jTtDDoQ3aUPfyQOQaHVNR5U6vE -B+gFIT1xTCldJQbgG1Yiu4qytQTnUCGE92m81yOaZQKJOBZdI8CFEbiVKT05Zfi21eq47TIH -sUiM6h9VIrMjb/SRCzgMEDFnucpgzlvx3PvCg6rxJI2/Iv2Hlxmvp+mlVSehMLgkSy64ikr6 -pUeDQ6zjNVt866JCiQIzBBABCAAdFiEEh6qvzsSCCe1IOfrhKfDK7eOs+jQFAlxbCvoACgkQ -KfDK7eOs+jSN5xAAkgCP+JsYsagQFU/SXoGUjukyTFG59oKyH2/gmXyKrNdn4Cu8oGzBLUBi -3MWv1+679cpYkQpnYLVimn0PmYKPliZJ4ic7KJW3qOA2AmZIsrv4a167mPnS8dkkH8BQhkcX -/f/IVIMmeO/Px0xLmWQAOp5Re+EsHinHeA5NCVHAUjVFW9fv33xU6jE4UtEAhG5M1rcr7RQc -pFxnluXAwIX4N2vCMQ335v3F9jUvj+7Ahg02jct6gtlNuzzD1oIae0R6uBwF42b1HUe6WKGf -MrlMXd4ezvHMfYqzHOAvvwuEBLJnHwMekUaYTNk+KG+vmQ1/JixSkRUbnxsF2bc4EHScm1/h -RowJpyJslkrc3DNgcWhPBejHedSkghY7ev4aOPWih8nL1syI8hGU9FmEoUUXprYln7kZb2T7 -a6MPrWeP6q8TW16E0y6xjw33Nvx+g6aZ444aw9pEINd6o4hiWCihvFEJ3JH4k8ZqVDNEqO5w -0wVr1IkazT9wM6LeNnU8kSon3+ejRtPKv8VgIjlSrJ6luot/m3uVuG2WsDEcTcBVe1pnx6Rl -ehyI+1ji8ma5P56ifcnHTCDW8rb3aIie3797vg9MdArvRxcRfXPk1g//hDHQguhdainfUXYv -x+3ExkJ8aLlT0BDzA75TzwAfxXf020W5mGL+OTu7Qfrmv9Z2T1e5Ag0EVKqsygEQALAI3JX4 -D0gZOe76OvaeWY/oMp0oD2Y8JKuF8vxOIz4EbvzgkJR2ZAbCOYFFs15dS0wVDREO1CXtCMPz -ul2wiCmskUNtwvcgQhlqNeouaZXAA6YySq7fXMN1xXXGMAW5WiMg34lg+VB76MRqzqAJH5iR -RMvHuE38N6fXxwR/K+Ln83eW6ClHU5M7IU0jwKql6rXfAMo2RovdfIcOSq2xg8PtSlYXS7Pr -hm9vW0rlEhS+SHxkwhfSW7HcCQNcGjhfmxnF5tP3jSrZ1MIqQFW+7Y6XpnKDsttMf+L8ZQ// -+TCUnOL54R8IClw2WfYSk64Hy+xXdQ4roNMhI/E2WBe/DFbd1n0uiWBc7RBC4mGiUNSi8hVD -2zpC+7MUaAH3PQKr8MXxrxnTO/BuWYjOC8fYui56oIkgt26P2NEvNkIj+2spUPQFDRfPOjxQ -Fr00g46ZQXbeCsw/LVPvT9wFbbhwBcwhNAKPte5pG6AGfAtnHNcWnczWv/Ps9/NqqjnDz4P5 -ByCdAbmXJjcv7/mkQFBayWw4JiSpSL+xULPom2wmmEE3nHBI6kx1D147bgayCHbwWBlHuqrG -p7Z1Yywro9wYbPZGvbFrd3QtullTaVZ+nz9u7z+4NZ9h5crASWWs92qg3O8UhO9dYKtMWVOz -XD30FtKBVzhyK/GABEb1vs7q7oyPABEBAAGJAiUEGAECAA8FAlSqrMoCGwwFCQeGH4AACgkQ -p9Qc5HrfNvP5mg/6A+c/2noN5yEPsdjr9RvFSYpGU5d9p9o8tWWfpEYZQ1QNrf2507x0XlVM -AD0l42U6lv/SiD/VC/2iLZ8FFmsmWWeI34lICqnFiiuH5Jj67u1v3+lEF6CTrdEivTlrreC5 -AmllBE5WTXGbFAo8hLMqC9QaVIjY4SSEMhjwLphI+Wk9GNHBPJR/0fySQiRF63GKfsYIxQ77 -XlcSyaoYjHjqHQeG1Hsmr2r4J+DN4v3exZN1eEHa5MrdZwf57cFUVGc5H03s7UE1QG3zGCF6 -vUVgCqourjtVIs/jU88KOpXM6BuU2Tm6VMlLmpeOpfwhsvfrez8ZfGw3QzYbDYw6wZpFGo5Q -kESCW+rReOsOVLKb0wi3XZQBHU7sKKD+oEJPRVjpajy34GD9Gev/akQFVuaoMLvKz3Ffz6+J -jtyUTV3M7++zM8wA2GFd7q61NM0SN3n45ORQ+DHXrKEapsUsPWQOs9cin1WIBl/mvXPlz3+f -C2Yu1Ry1e52duUyj2v10Yc8kmBbrLONtal1yWvq0XvLZhoJIqlCD7Y6MWZv3QIS9lg50uH+n -TjTA9Alslc6SMYfBwXOAUOyBe+DoZtjb4Tv2GteS5gVqVmst97vNRZVH574CD1MH51K+/Sn5 -mbr4t712KWTWdWY/OKlL8sVs7PMtdoQT/BP0i/6cXR5tOOFLkJmJAjwEGAEKACYCGwwWIQSw -ojU0FovWHlOtrwCn1Bzket828wUCXEdOtAUJDUA8agAKCRCn1Bzket828xi5D/9otRQogegK -mFXrHO4XbdvuBdug8LlSyuRgBc2vgpMWFoLwaXkqU6evl5syJiFSf9E6MQsSt2Sb/dcl+bS8 -ELLg3EMPL/SoKX7c1leWV+AO6Lx9bhM8c/5yUrEz9fcm9tzezIxnxXwBIq4F+IAYBVraoQmY -DFiq59dLkNlMC2zYFsvbE/HRDHRa02PgMiCeMW7BL+nWe2L6NeXQLfoPyx6H6mQ2YDT3kzWY -pWK8riAV3Gvowm52DknIOMzHmbV2q61yqNdI18Mwdopj0QaVyr1bYDlLk037GcC2zI7+3KIx -c7j3mMLIkxxBX32Rk3HGWNniyk8//nkqrdjVvzSr5Q8JoeCRcqzxIv828brSeyOBc4jTOlkS -h3aBnAjDWtT2bVpcpTap0z21Z1WMvD8zvc5BBwR/pNF4sI61FGeM1+nXCsRo8YLw0rF7M0KI -Q6iz0hRwfol5iSEro/XEp/SwhASBJ4i6kRxYN9ZBFAm9DnNiRnP8iIpnOEUUHFLlu4tDEgWO -IJpFsocISPPLTBn7rpSleFXWyBwC0Hthn35rOPQtee+4iDwvx5LQOin0A7SmyX158srJQwjV -BMX/7YKewjCuyUytcceJN67YaS2rpxTL93EN/mRt7pBzX6LTS+D/Ukiblujf1JdYrnkNBUDn -sCxl9x7GpN1WuhYx07gF00Au7g== -=DMyz - ------END PGP PUBLIC KEY BLOCK----- -- GitLab From 323be89b6d16357b199c1bbc6acb0bb1d6ca3845 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 13:44:33 -0400 Subject: [PATCH 15/27] updated keys --- Dockerfile | 4 ++-- signatures/repomd.xml.key | 20 +++++++++++++++++ signatures/repomd.xml.key.meta4 | 38 --------------------------------- 3 files changed, 22 insertions(+), 40 deletions(-) create mode 100644 signatures/repomd.xml.key delete mode 100644 signatures/repomd.xml.key.meta4 diff --git a/Dockerfile b/Dockerfile index f6240be..1ae2383 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ USER 0 RUN dnf upgrade -y && \ rpm --import RPM-GPG-KEY-CentOS-Official && \ rpm --import RPM-GPG-KEY-EPEL-8 && \ - rpm --import repomd.xml.key.meta4 && \ + rpm --import repomd.xml.key && \ dnf install -y openssl-devel zlib-devel && \ dnf localinstall -y /libpcap-devel-1.9.1-4.el8.x86_64.rpm && \ dnf localinstall -y /bind-9.11.20-5.el8_3.1.x86_64.rpm && \ @@ -29,7 +29,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key.meta4 && \ + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ dnf clean all && \ rm -rf /var/cache/dnf && \ dnf clean all && \ diff --git a/signatures/repomd.xml.key b/signatures/repomd.xml.key new file mode 100644 index 0000000..23c0ddb --- /dev/null +++ b/signatures/repomd.xml.key @@ -0,0 +1,20 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1.4.5 (GNU/Linux) + +mQENBFODA6oBCAC1ZlvBSl+aNBm+NH7xGiNa8JRpZ0ujQIc941ozc2T2Pqe3tscZ +Z6KjsqSwTX6jzomTgGyqJDYd308KEHeqIMuZVlCZQDsyHb6YiuOa051ice3eas94 +PVJ+z6Do9zSVOLwc0xsdy4jBdiB7K5XN3iGmmboK3oiFbNJRP0b+saFSJ3R9lQQ6 +c7iD++tFl36/ovwWitwqzJ3cYuWeGxHjBvTV4YCQb2JECQgskfloHcjqMIyevJm1 +4KNmrHn2Q12qPfrHECtnf/hP/9yrCvbekT/aLWx/IV/vIQdHJPwnYDRFDN6tyuDJ +kh4QVYYyFaKaSHNJ2it3lRMeIAzaCnSVJQ8lABEBAAG0MnNlY3VyaXR5IE9CUyBQ +cm9qZWN0IDxzZWN1cml0eUBidWlsZC5vcGVuc3VzZS5vcmc+iQE+BBMBAgAoBQJb +3PRcAhsDBQkMeKCyBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBp0bKq7j0W +ajhOB/9SXnFdzfUQPHrNIqTC0vzHaSsRueFE4ektdaOG9Luku3gPolJQ/LzVd6Dq +2dApFix96PR9Z4EUI5U/Bgbh0UDhcoOgOFv5hC98h9+cIBpOAXi/j7vOc2vpxdQs +ELvplesgbH+BCoIvG0ssKVbPG0A3bqLCeABUTuG7W0Tb1PtIKXqIl/DoOjfEU7gV +pYVOrke5grPJ5BSV9ZG8Zuz9/GtN3tH4mJVEkMDb6flKZ15epgX7VzLSkEhZodwq +cSYQuuniA9XjMgNnHrdL07jE4zLI9KO5UEnRht9Z4yWU0bzSGzU0zXmbTl4iAjAw +bgf3B7FMvJkcaGYD0ZTVd0X5M73GiEYEExECAAYFAlODA6sACgkQOzARt2udZSO5 +wgCfdn5fA8nzafycfrO4iXjg7/E34E4AnixpDpJ8llW/+4r+MC59fMWa59oj +=CIXb +-----END PGP PUBLIC KEY BLOCK----- diff --git a/signatures/repomd.xml.key.meta4 b/signatures/repomd.xml.key.meta4 deleted file mode 100644 index af08fc1..0000000 --- a/signatures/repomd.xml.key.meta4 +++ /dev/null @@ -1,38 +0,0 @@ - - - MirrorBrain/2.19.0 - https://download.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key.meta4 - 2021-03-23T17:09:23Z - - openSUSE - http://download.opensuse.org - - - - 1084 - - - - - - - - - - - - - http://plug-mirror.rcac.purdue.edu/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://provo-mirror.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - - - - - http://espejito.fder.edu.uy/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - https://ftp.gwdg.de/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - http://widehat.opensuse.org/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - http://ftp.lysator.liu.se/pub/opensuse/repositories/security:/zeek/CentOS_8/repodata/repomd.xml.key - - -- GitLab From 0fde7e5891b206ff0b6a2bc7ec2b3851e24974b2 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 17:56:20 -0400 Subject: [PATCH 16/27] updated user permissions --- Dockerfile | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1ae2383..c00c626 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,8 +30,10 @@ RUN dnf upgrade -y && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - dnf clean all && \ - rm -rf /var/cache/dnf && \ + groupadd -r zeek --gid=1001 && \ + useradd -r -g zeek --uid=1001 zeek && \ + chown -R zeek:zeek /opt/zeek && \ + chmod u-s /opt/zeek && \ dnf clean all && \ rm -rf /var/cache/dnf @@ -45,6 +47,15 @@ VOLUME /opt/zeek/logs # accept incoming connections EXPOSE 9999 +# The user starting ZeekControl needs permission to capture network traffic. +# If you are not root, you may need to grant further privileges to the account you’re using" +# unprivileged users cannot capture packets from a network interface, which means they would +# not be able to use Zeek to read/analyze live traffic. +# there are operating system specific ways to enable packet capture permission for non-root users, +# which is worth doing in the context of using Zeek to monitor live traffic. + +USER zeek + HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ CMD curl -fs http://localhost:9999 || exit 1 -- GitLab From 13653912780c4a360faf86f73b114c5630f84041 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 20:24:07 -0400 Subject: [PATCH 17/27] updated user permissions --- Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c00c626..e2b832a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,9 +30,8 @@ RUN dnf upgrade -y && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - groupadd -r zeek --gid=1001 && \ - useradd -r -g zeek --uid=1001 zeek && \ chown -R zeek:zeek /opt/zeek && \ + chown -R zeek:zeek /config/node.cfg && \ chmod u-s /opt/zeek && \ dnf clean all && \ rm -rf /var/cache/dnf -- GitLab From 176526cb9ad5b2ccbe3e6592bce9fc112852aca6 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 20:46:53 -0400 Subject: [PATCH 18/27] updated user permissions --- Dockerfile | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index e2b832a..13ad0ad 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,12 +29,8 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - chown -R zeek:zeek /opt/zeek && \ - chown -R zeek:zeek /config/node.cfg && \ - chmod u-s /opt/zeek && \ - dnf clean all && \ - rm -rf /var/cache/dnf + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key + ENV ZEEKPATH .:/data/config:/opt/zeek/share/zeek:/opt/zeek/share/zeek/policy:/opt/zeek/share/zeek/site ENV PATH /opt/zeek/bin:$PATH @@ -46,8 +42,7 @@ VOLUME /opt/zeek/logs # accept incoming connections EXPOSE 9999 -# The user starting ZeekControl needs permission to capture network traffic. -# If you are not root, you may need to grant further privileges to the account you’re using" +# The non-user starting ZeekControl will need further privileges with permissions to capture network traffic. # unprivileged users cannot capture packets from a network interface, which means they would # not be able to use Zeek to read/analyze live traffic. # there are operating system specific ways to enable packet capture permission for non-root users, @@ -55,6 +50,12 @@ EXPOSE 9999 USER zeek +RUN chown -R zeek:zeek /opt/zeek && \ + chown -R zeek:zeek /config/node.cfg && \ + chmod u-s /opt/zeek && \ + dnf clean all && \ + rm -rf /var/cache/dnf + HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ CMD curl -fs http://localhost:9999 || exit 1 -- GitLab From dbe5424cbb75a10aab34d4a601d612aac79208d6 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 21:00:28 -0400 Subject: [PATCH 19/27] updated user permissions --- Dockerfile | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index 13ad0ad..257de32 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,7 +29,10 @@ RUN dnf upgrade -y && \ dnf localinstall -y /python3-semantic_version-2.6.0-5.el8.noarch.rpm && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ - rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key + rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ + chmod u-s /opt/zeek && \ + dnf clean all && \ + rm -rf /var/cache/dnf ENV ZEEKPATH .:/data/config:/opt/zeek/share/zeek:/opt/zeek/share/zeek/policy:/opt/zeek/share/zeek/site @@ -48,14 +51,6 @@ EXPOSE 9999 # there are operating system specific ways to enable packet capture permission for non-root users, # which is worth doing in the context of using Zeek to monitor live traffic. -USER zeek - -RUN chown -R zeek:zeek /opt/zeek && \ - chown -R zeek:zeek /config/node.cfg && \ - chmod u-s /opt/zeek && \ - dnf clean all && \ - rm -rf /var/cache/dnf - HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ CMD curl -fs http://localhost:9999 || exit 1 -- GitLab From 243c251c096dbf9f9d757057732385eb99a87105 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 22:09:15 -0400 Subject: [PATCH 20/27] updated user permissions --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 257de32..883bf77 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,7 +30,8 @@ RUN dnf upgrade -y && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - chmod u-s /opt/zeek && \ + chmod 0755 /opt/zeek && \ + rm -f /usr/libexec/openssh/ssh-keysign && \ dnf clean all && \ rm -rf /var/cache/dnf -- GitLab From f285a0e1049e1d969170a3014207aab42387b060 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 22:35:44 -0400 Subject: [PATCH 21/27] updated user permissions --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 883bf77..1966039 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,7 +30,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - chmod 0755 /opt/zeek && \ + chmod -R 755 /opt/zeek && \ rm -f /usr/libexec/openssh/ssh-keysign && \ dnf clean all && \ rm -rf /var/cache/dnf -- GitLab From 65b26299f08b4afe815a8b38e0ed3c2eff745e9c Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Tue, 23 Mar 2021 23:29:32 -0400 Subject: [PATCH 22/27] updated user permissions --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 1966039..8e14202 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,7 +30,7 @@ RUN dnf upgrade -y && \ dnf localinstall -y /zeek-zkg-4.0.0-1.2.x86_64.rpm && \ dnf localinstall -y /zeek-4.0.0-1.2.x86_64.rpm && \ rm *.rpm RPM-GPG-KEY-CentOS-Official RPM-GPG-KEY-EPEL-8 repomd.xml.key && \ - chmod -R 755 /opt/zeek && \ + chmod -R g-s /opt/zeek && \ rm -f /usr/libexec/openssh/ssh-keysign && \ dnf clean all && \ rm -rf /var/cache/dnf -- GitLab From 4d8ee7f7823356b63978b2c37f31326c4b523111 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Wed, 24 Mar 2021 00:05:14 -0400 Subject: [PATCH 23/27] updated user permissions --- Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8e14202..31e70d3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -35,7 +35,6 @@ RUN dnf upgrade -y && \ dnf clean all && \ rm -rf /var/cache/dnf - ENV ZEEKPATH .:/data/config:/opt/zeek/share/zeek:/opt/zeek/share/zeek/policy:/opt/zeek/share/zeek/site ENV PATH /opt/zeek/bin:$PATH @@ -46,11 +45,11 @@ VOLUME /opt/zeek/logs # accept incoming connections EXPOSE 9999 -# The non-user starting ZeekControl will need further privileges with permissions to capture network traffic. # unprivileged users cannot capture packets from a network interface, which means they would # not be able to use Zeek to read/analyze live traffic. # there are operating system specific ways to enable packet capture permission for non-root users, # which is worth doing in the context of using Zeek to monitor live traffic. +# this container is default to run as root HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ CMD curl -fs http://localhost:9999 || exit 1 -- GitLab From 8446ff5c6e9ca1ef59fdd8d1d6171789686cc443 Mon Sep 17 00:00:00 2001 From: Hunter Stevens Date: Wed, 24 Mar 2021 20:45:32 +0000 Subject: [PATCH 24/27] Update hardening_manifest.yaml --- hardening_manifest.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index 5625e72..e195e95 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -2,7 +2,7 @@ apiVersion: v1 # The repository name in registry1, excluding /ironbank/ -name: "zeek/zeek" +name: "opensource/zeek/zeek" # List of tags to push for the repository in registry1 # The most specific version should be the first tag and will be shown -- GitLab From 8a1dc9d79261da2ed0c3d24fafa8e62706de035f Mon Sep 17 00:00:00 2001 From: Hunter Stevens Date: Thu, 25 Mar 2021 12:26:34 +0000 Subject: [PATCH 25/27] Update hardening_manifest.yaml --- hardening_manifest.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index e195e95..2aff4dc 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -18,7 +18,7 @@ args: # Docker image labels labels: - org.opencontainers.image.title: "zeek/zeek" + org.opencontainers.image.title: "zeek" ## Human-readable description of the software packaged in the image org.opencontainers.image.description: "Zeek is a framework for network traffic analysis and security monitoring" -- GitLab From a20d01401182fc95013bfb662b8754bf1993a388 Mon Sep 17 00:00:00 2001 From: shen_vickie Date: Mon, 29 Mar 2021 11:33:10 -0400 Subject: [PATCH 26/27] remove comment --- Dockerfile | 6 ------ 1 file changed, 6 deletions(-) diff --git a/Dockerfile b/Dockerfile index 31e70d3..ecfbff5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,12 +45,6 @@ VOLUME /opt/zeek/logs # accept incoming connections EXPOSE 9999 -# unprivileged users cannot capture packets from a network interface, which means they would -# not be able to use Zeek to read/analyze live traffic. -# there are operating system specific ways to enable packet capture permission for non-root users, -# which is worth doing in the context of using Zeek to monitor live traffic. -# this container is default to run as root - HEALTHCHECK --start-period=3s --timeout=5s --interval=3s --retries=3 \ CMD curl -fs http://localhost:9999 || exit 1 -- GitLab From 6a4c35a4355b9d546c1590fed9e50032f0a4c1fc Mon Sep 17 00:00:00 2001 From: Zachary Sanders Date: Fri, 2 Apr 2021 17:17:40 +0000 Subject: [PATCH 27/27] fix renovate.json file --- renovate.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/renovate.json b/renovate.json index 86abeae..7443a86 100644 --- a/renovate.json +++ b/renovate.json @@ -1,7 +1,6 @@ { "assignees": [ - "vickie.shen", - + "vickie.shen" ], "baseBranches": [ "development" -- GitLab