Subject: pkg/4928: overhaul of ssh package
To: None <gnats-bugs@gnats.netbsd.org>
From: None <jbernard@tater.mines.edu>
List: netbsd-bugs
Date: 01/31/1998 22:01:50
>Number:         4928
>Category:       pkg
>Synopsis:       the ssh package needs an overhaul
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    gnats-admin (GNATS administrator)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 31 21:20:03 1998
>Last-Modified:
>Originator:     Jim Bernard
>Organization:
	Speaking for myself
>Release:        Jan 30, 1998
>Environment:
System: NetBSD zoo 1.3_BETA NetBSD 1.3_BETA (ZOO) #0: Sat Dec 6 09:47:11 MST 1997 local@zoo:/home/local/compile/sys/arch/i386/compile/ZOO i386
  with up-to-date /usr/bin/make and /usr/share/mk


>Description:
	There are several problems and missing features in the ssh package:

	  * Two @exec statements near the end of PLIST misuse %B, which at
	    that point expands to /usr/pkg/sbin, leading to host key links
	    being installed there instead of /usr/pkg/etc if installing
	    via pkg_add.

	  * The configuration and key files are installed in /etc, with
	    links to the key files created in /usr/pkg/etc.  There is no
	    point in doing the latter, since the code doesn't reference
	    them in that location, and all the other files are only placed
	    in /etc.  The links should either not be installed at all (my
	    choice), or all the ssh config, key, known_hosts, and seed files
	    should be linked there.

	  * There is no way to specify an alternative etcdir (the location
	    of the config, key, known_hosts, and seed files) without editing
	    the package Makefile.  It is useful to be able to specify this
	    in /etc/mk.conf, so that as new versions are released, they
	    can be compiled out of the box without the need to redo changes
	    to the Makefile.

	  * More problematically, there is no (working) way to pick up
	    local preferences from /etc/mk.conf (of particular interest are
	    such things as etcdir, USA_RESIDENT, USE_PERL, USE_LIBWRAP, etc.).
	    This is a result of the use of a single, one-pass file
	    (<bsd.port.mk>) both to set variables and to set up targets,
	    but this can be worked around in the package Makefile.

	  * Files are installed with incorrect (i.e., not conforming to
	    NetBSD convention) permissions (owner write) and ownership
	    (root.wheel).

	  * Example/starter configuration files are not part of the binary
	    package generated by "make package".

	  * Example configuration files should be installed in
	    /usr/pkg/share/examples/ssh for future reference to the original
	    state of the files (and for convenient inclusion in a binary
	    package).

	  * Useful messages should be displayed at install and deinstall
	    time.

	  * The programs work just fine compiled with -O2, but they are
	    compiled with -O by default.

	  * Installed binaries are not stripped.  This is a problem in
	    <bsd.port.mk>, which is dealt with in PR 4884 (still open).

>How-To-Repeat:
	Install the package; note the problems above.

>Fix:
	I've addressed the problems above as follows:

	  * etcdir is configurable through the make variable SSH_CONF_DIR,
	    which can be specified in /etc/mk.conf.  This requires installation
	    specific changes to PLIST, so I've renamed the distributed file
	    to PLIST.pre, and that is preprocessed to substitute the value
	    of SSH_CONF_DIR at installation time, resulting in the PLIST
	    that is actually installed.  Two added files, MESSAGES.pre and
	    DEINSTALL.pre require similar preprocessing and have similar
	    suffixes (see below for their function).

	  * Because /etc/mk.conf is not read until <bsd.port.mk> is included,
	    all conditionals that depend on variables that might appear in
	    mk.conf (USA_RESIDENT, USE_SECUREID, DONT_USE_IDEA, MANZ,
	    and the new SSH_CONF_DIR) are likely to yield the wrong result
	    (yielding the correct result only by luck).  However, inclusion
	    of <bsd.port.mk> cannot be done prior to the targets, or those
	    present in <bsd.port.mk> will take precedence, and various things
	    will fail.  However, since there are conditionals within some of
	    the targets that depend on some of these variables, the variables
	    _must_ be made available before the targets appear.  The (rather
	    ugly) solution, is to explicitly include /etc/mk.conf early in
	    the Makefile, with additional ugliness arising from the fact
	    that the name is OS dependent.  (If <bsd.port.mk> were split
	    into two files or two sections processed on separate passes,
	    one for variables and one for targets, this would not be
	    necessary.)

	  * No files are installed in /usr/pkg/etc (unless that happens to
	    be chosen as the SSH_CONF_DIR).

	  * Four files may be placed in SSH_CONF_DIR (by default /etc)
	    for new installations:  starter config files for ssh and sshd,
	    and the host key files.  These are installed both by make
	    and by pkg_add, and only if they don't already exist.  They
	    are never deleted by pkg_delete, since it has no way to know
	    if they should be removed.  So the DEINSTALL script displays
	    a message noting that they should be removed by hand if desired.

	  * Example config files are (also) installed in
	    /usr/pkg/share/examples/ssh.  Aside from the obvious utility,
	    this makes it easy for pkg_add to duplicate the ability of
	    a build done with make to install these files as starter
	    config files in SSH_CONF_DIR.

	  * A MESSAGE is displayed at installation time (either with make
	    or pkg_add), mentioning the "starter" files, the example
	    config files, and an rc.local fragment for starting sshd.

	  * Added CFLAGS = -O2 (in Makefile).

	  * The patches were modified to get the ownership and permissions
	    of the installed files correct (one could argue that root
	    ownership of /usr/pkg/bin/ssh is still incorrect, but that leaves
	    the flexibility to change the installation of that to suid root).

	  * The patches that didn't otherwise need modification were updated
	    for ssh-1.2.22 (the patches were not updated when the package
	    was originally updated for 1.2.22, thus resulting in "fuzz" and
	    "offset" messages from patch, though the patched files were OK).

	  * The description (DESCR) was updated from the ssh-1.2.22
	    distribution (from README, IIRC).

begin 644 sshpkg.tar.gz
M'XL(`!?[TS0"`^P\_7O:2,[]%?X*!7@VD!<;#!@2LNDM!9IR34@>H+W;V^RQ
MCCV`+V!SMLE'N_W?7VG&7Q`2TMTT[?;"TP8\H]%H)(VDF='8=2?SBW'AQ9?\
M0*584U5X`0!*I<*_`8K^M_\`U4JU4L-_916ABF6U]`+4%T_P6;B>Y@"\^(\Y
MNQ?N:L+8],5W]W&%_(^U"S8RI^R+]*$4BU5?[FODKZ"L*S'YXV^EI)3++Z#X
M+/\O_DE#EUW!W'8\%W1[.F6Z9]H6S'Q]@)'MU!.H),DTO&>.2W4.^^_"=)A1
MY^)+)!2Y))<4!&AI'@/=8?AEU!/X4?;V:BC+"M;]8V+/>%EBLCAGCC?ZR6+>
MN6O(MC-.IA$@TV7>JWZK#H$JYB]!D?<`<>P6BDH!=:14JJM[=300/@IH7\\A
M@VU?.XQA6^@8*\TK-6I?*RA*02E2^V*E7BF!8<XT:LP[/M:N\7$*.$B8:_J%
M-F;!$%W0X.=V'RZUZ8*S`M[UV\/3=N\(VVF6P1^/.J_^T6N<RH@LV>KT!]W&
M<?O`MVN(4^+L*26;C4'[\*37:?</$B[3%X[IW0#R('G<Z`_:O6&_,\`J;#/R
MYO5"`?_*NBM/%IX\,@OSQ7D!<17@+)E(1`"C!2((ZA>6>5T(,!>F]MBT>)LD
M]M#I#O!_NW>0F#GCGYC''$N3=7LF:XMDLM?N#WJ=YJ#=.DBDFL[-W+/W@5V3
M3DBZ;7D.J8612AYW>KV3WI#&^+ISU#Y(6':RTQ\B[G:OT1QTWF,1<BN9;+X^
M:ASB,!/222EYV'TW;)YT7W<.W_4"@#1T+'VZ,!A,;1U93]J&VF>-S#%PK9LP
MA\D`'0],%YCK,LLS$<ZS8:)=,O`FIHM(Y@[3&2+1K!NP+YGCF/B`LWG,4)FS
MWL1V"53SHDJ#C;3%%&M-"]O_2/I'PY1G%R\%I,=<#\7MF-KY%,7/RV;:#9PS
M<)D7T-6U/8$9D1`MB`Z'PR<'/M@>@EV9+JF1L;`,S?+RX"((6^G1%$QP`U+L
M*XO*\W`U,?5)6`VF)R>3)Z?]G_M;!["PM!D#R4W*Y@BRF8^\_!,<'$#*GP:I
M'-;Y_$T5F*<7B+\R\3>5E-G49;?J+\):RS!')*"?[07HFL5'_:[?&**2=%KM
M[@"T^=RQY\@@CTUOD$:(8P"DB3/D?#%VX<9>R'(RWOIO!XGN29*3CJ(P+69D
MX]4Y^.$'R'R,%_&1D=($:H=ZE?D8S+-/,HI;'G\`Q]4<-BKYC\MS*H&3YC/G
M#(1-+%-?;J+3!"G,3,>Q'9=C-%Q31D0S4S:]`K)G:C)#XF!V#)'SP5U8)60\
MFI&9YID7U$:::+/SA3.6#<:17YK.PO6[<,PYF\40H/YJ,M*ZW!^W#,$`?-HT
M+SX"(A'!+TTF:[JL>:O@@M*QH\TG-P7-O9G-F.>8>@%9&N_=-;#K2UW6+]$D
MZ1^6.^;D^/A6.!#3J7<X)?K]-]P<H!GIP<BQ9TOZDX=(,_9C$\F?MV0`"#P9
MQ_*W`UZ4#(W,L-$[[/_?`4@2&HB1>7V0^7C::[_N_/,3%EV9WD1">,-TL#R.
MYQ,WK@E),DR79K_D+DQ#(M>73+^ST%C.T`H1?=IT2JKMP,)%CPBH>#0-D%;3
M`9S",';LQ9R[!U&&GH]A=\DTSHLK9!<C['!^(ZP+AT:;\HI=$29L`J%[,&?(
M2ETCC^QN)=-K1L@L3BI'(OG(S2FV724:"88KM$3$0AR`?<7]'3ZPV6)*?AOG
M.JJYQ:7&#)Q0$[+(EH@'DFDRH>@-.6D,:$"+&5(]X-;/!8N4>HH&`:W=F"$U
MKF_Q3(^;D2G3#.H-AY=,(X/UJ>T2H@MVXW)6S377O;(=PY77CI.+S;(M]L>,
MQUT8A=F(J6C@E]S%G,PT]_DDDCX?=Z>%@W$,"F<TQS*M<1UY1BX#&;:U0EA[
MV&\WL<=.*R0L*MI(F."S:<1(:]G6MD<Z!SBVALS_<MZB;QJAY4?F8Z7!249.
M25SXCDY^$\ME>&-?,11B'E$M5W$'YT<\*&+4.,8E9^&#M9AAJ`7V"-O@4!V3
M>ZM-HV^==`=#&B_1Z`]_J6S3^.V%)Y&]BPV_'Y/(U#R_0GLEWV*Y'XO%..Z7
M;&2XCW*-*O1/FF_[&)8X.$%QYON:<5O:!!87-3UOEK.M7[@'*>DHM%$%I`2D
M*:]0(X]\W.@J&%&Y^EQ6>%BI&4;P:XQSW/^-\PF?Q`/^)8M&SE_B=19:)PFC
M(L^5%4*X2PC=B2'O)I-H*J6YYNF3>C+Q4^;C\7LTEB,<RC]Z;_N]YJ?"6BSS
M*?5`@>Y&0'1\R>0(#>]$,M@<!^76.0NWUD_EWW^_-96W."?737*LP:B"R&XW
MWYQ\BG[Q*&:&*SP>Q@1AW7(\@T:)T/HF4N-3``%B2'`=@+J(IA,UKWL2>24Y
M!M-9:1XUHF(1M-J`@2FW)KU^`X5=BK5'H3N:<P-G6:PCU9/1;4P-6H"@5'CG
M%C43MG)QCI.4;&<,@T[>EB8MRI\Y.+,EG-LX27DK<B2,7('P)6(,Y'^L&`9!
M%5R9J.67ILV]`E'[KA_0,-6NSG*Q%D0,N_8<3??(T&/_H1X0<T8:CS5]#9ZC
M)D@^=/T/6?%`,7DGY+$+?M@74S^_).H5]=JT<(T_G0K-QG78)Z`MC],C#")E
MK`?2M7Z[)0(`B<&VNW_VXUDF$X\.SE[N;Z_$"]O[XVW>Y&6(;KF'XW:_WSAL
M/TH?L2;"4`A@WV@LD^+WNTQ,J]WI]@>-HZ/'&W*(TA?N$I^/N80@LFON!"53
M8-<:Z:)+8?8RG"_3E1Z3B:QN1/+=YW0/VEVN!L>-M^UA_/=I[^2PUS@.G_E"
M5`Q2E-`*XA/XA`[#^-#O.ZB0Q%K415W/?/3'.&PU!HV[Z:3Q#/TEK.CN;C@C
M`-S`')PBO\"6L,.W.R/+.D0;`+_NTS2U_&[%S$P=<BO@D0'@49M#JU=L059#
MEN74O@\>$'`N5CZ^`_%#X0T=2UU("40C<VE"HV_Y%^==[]AW(T$W,\VB_TK!
MY8LM6:'5&@(>=1'0'0FW10NZ#4W$,O9!/=Q"?R^P;S?2R]P/X&FIXN`*C$M1
MQA`YXGTZQOR.4"-B_CUM:>/1PY4"[7@(@<1QI+>$3"8I>'D/EM5FOVQ6%^%<
M[Q#\`V2^O8TD?29-UW%=][LTD!1N[&]7\&+16K)@F^1F/+!7?3*S#:#SADV@
MJ+3KS+7P&3JN6"QAR7P5"XU\'!A6[&`4-BYO]6S8T*+`DEQML%%%^TK^/E:P
MR15M,=EBCT5.1MLX2YT1%:]M6N.1`KK>8C0201`N%+21AXY_9>/+IMT^].78
MCEV;&*]E0];E@'9[F#.]2=Z*>&D?-!;PTF/@JDG%SI(4&*XBY/I&"%6Y6*P4
M*QR!`,UNW<;NQX$!=A[IY9*OWG6.6L-6^[3=;5$P'<-7QYY.>H,^U]PI+D9%
M9[$`'/T%-B%\!W=2Y=N7M8T*#IM/-9T-36](,3PG;8@1TB0P'G_!\Q^R06[A
MFSC_H_,?I:*6G\__GES^,T-]^O,_+*R6;YW_58K/YW]/\3ENJ9!=WCW/P0$4
MSRNUBKY7.Q\I(T4O&J4:4[4]=:24RGMZ<==(\G;1\5:\J:*,2N=50]DKJ[JZ
M=\Z*AL9*>WO&>849M9&6?/'\^>;F/]_Z^5(>X//M?ZE8+#[;_Z\@?_XM:>=/
M:?\KI5)I1?[E2JWV;/^?XM.Q#'9=]P_?%PY+[NSL1$^R[9CCQ&#!X.^:!:4B
M%-5ZJ5)7*CPM(RE)4@2;Z&N>`*-:RK0HJ@)L9_G#NU!JZEY>J=6*P(L`DN#G
M'(!('X!FDTHE2$/?UB^8!W/-I..V^9RAP'#1@LN9<\>^P$6K3>?4EWS7T[UQ
M/39S::T%!C\QH7UH1*WI'BYB"-T5+<;RX-K0V9Z*$Y"Y.6>X+D,4-[S6/T2Y
MDK&!CL/"A2>-$]<GKCR!'W\\:Y^\)EQBP2*R0CJGN.Y1L%34^4/2)S9D-'UH
M00HGF'Y!2S*1:3"AE(?9'`,O!ZYLY\)-I619YL!Z"I27/U2#]JF0QW7DF(+2
MVH0)7OZ@<NGX;*Y6`)^DM9*H[JKE?'6W6@LD@1]=0Z:D,N)T\5*;IBAA@BHL
M.Y<,K;8@C@CV4BG+]HG>"JK[_3?^NOCXI-4^*-84)6J[O\]_[^16\=PP=Q.B
MRCI,S-5TSG%:N,']6.]`B/]&)E<ZY%QUMU(CMBB"<U^.+>JCL45];+:HRVQ9
MISVUHE+.XY^]0'L0\=B\9-;0=<0AN_B.U_B='*0R_J\48=\"S]'FL.W,0!HY
M\)L@-$CG`G%0Y>_@K3_3@@]3\QP#TJ)<"1,:??LD3U+P.]#Q:,HMU'_Y-_RZ
M4RB,4[_Q:CK#W*&4)],#91L4*(&B(DDTD2&8_QFQ&3!$@@?O^F@#1"W7E5JQ
M6",FE`-=^7I,F$^_)>:LU1A%V<W7%/02D>7?@&8+_`J1`'26^1A_EOZTDJ0^
M;1S0F:@FOX`BY)V9%I"]CI.RCSZ'YT!1&EGJ.N.#IFCCZEJ6Q6:Q4!E%*>6)
M%8'*/"D7/DM+GI@[SVNRKQ__ZT\8_Y>J5<KY7X[_U7+E.?Y_PO@_F.N4ID%&
M.O9\UQJ@'*T!8M")8PS&.6"55@$57`B4[UX%H.SSI5HY\`2'QZ>M]BDD$@>0
MR=)#IY<KC&=SC+FC9S105*0)F_FOH\XK+*8FD>E"4\G+VZ<"E0_$VW[`EJ(:
M__6Q6CJ*`$":?A!X13($83X(DDO#TGZO2=F+''4(ERNX]L+1&6>(&)<:V/9'
M'E>GVQ2$%1:N4_#/@*)!Q>JPY3I>"`3WL^,1.;).\N6:DB_7PC5'(I-M-K$S
M&YR1+LW'_I=LB[YE7;;K2&<`IH/40>>2?=ONO6KW3B@)O=G'\DXF*R*M7"%D
M[$II*.I,MH6$8W7KS4E_,'S;_IE[J8.S5":[5)([2P5`,6\6P<4*!6B_W7O?
M[MT"OEWL@_??!(D+`BYZ%@#M`7&7UXG,55%\VFD%Q7/3"(NI.4HXJ#HWK;!J
MT.D/CQNG$4GQ`@)!]O+%-W'GG\/P]X]""A17U($3V!J>O/H[!Q.ZG8L$+QY\
MG:-E44+BT2QOSF='N59&V>\%L^-I9>_K_K/XOXKXUYF"BK*7KY1+@2FX;1'K
MA(6R@(*:??Q)V3PY$19'W7$]D8(0<WMK&R0C9O_#9`V$`IA=(&>6:OT*?0[K
M+$:T;+K5!M?'6SZ)48U/([P_;0S>'*S#6)?EPEK;Y!/2;.+RD+0^Y6^*\4=?
M+#0+[C!M?G,@F.4>?`:FH-?H(C3A$[^PR/<&7-:!.(5AYZ(0-M^7QFT>1V8_
MY#+-]4I)0>%6@KG^^<)-+TLW_3#QIN^4;_J/"#@M))Q^9!&G_Z2,T]^`D-?.
MZ-UROK(7SN@T9*.K'/Z%`-N:WL#4'O,T<Y?O8=)U"JIV%I:+97F>7NHGKG`L
MY_;"XK<(-)[@/G?,2Q36F!G\_F).!FA,73L?WB4`;4%$>OX5"LISYW@L6^3"
M7&KFE"<$XS@)H6-C!74J$F?=B6;85_&;"5M!@B"90=]&HY3X4MJ@S6F1>^LQ
MOIRFE*K5C,*8/<QDE],0<Z&QIC0EV9X:''AVN0'R(8C(*L82HQ[4<R8;9#X&
MWHB[:.*1-!-N(-C$&M)^80XV$[.D52FQNT6MQ.[3=B;K.9KET@VIW/9O*=2[
M`Y[[%2H;D%G;R+X->/<#T[2KHI:&INE_1TN_-9U4GW5R_PY+JA:5O%J,EDD2
M;;'-21TSV>Y)[[@1<L(/VN)/)X,W&'"&)7S[[:'T9C)S8CKL!RWNESF"/P!;
M&&&MD^,,>);`9DPA22M"HY;W"8TWC0OMP6*[$_-^A"J3/>H.B>T(*^R+6BRC
M[*)ESO<KN^]#9FOGGX+S3XGFW]?D/BQSG^XC/)3U8EGSD`#@KS2_%)Q?2C2_
M_OJR4;\+V:R=1Z5B7BV7U_JQ_JM.]S,MG?N9`G4W2-1]/$?E/K&TW(>*ZPYI
M^87PIW##R!3X#;JBO2)?NKIZVCALA[+=6C=9B*UT2A1;R*YG,-W7">N?@L-A
MAW^0P]Q6E4JH_^K:6.`OIO_/>O^H>O_]Z?M:^U]!_:_LQN(H>$#7P:V\>QT0
MSTVZQ?C#=K?=:PS:K8<9G>_)U%0J>54MQL*B;X+5W[5VJQC=J-68=J-=@/L,
MP^YCZ>?N4]K<L+\_HYXJ6@)U-Z:>C\2K[X1'Z_5K+Z\NI4JO;.&MV:Y?2]RM
M`\OE$['-,1F_!^QG#;K\LGI\%?"0_GP;LIG6->>ERT*@9+2(,I<YE\Q9H>WW
M`%8D-Z:'XBQUF`Z/4M/C%+PL>+,YO^9,1,@9_.QO8LGM)O<R8NU@EJ*\=31$
MV<AJ54$-*,>2!;^,!O"L$;H,ZS?DQ^W!#NL8>!)4R(/PF/%_6#\^BV%/J#1K
MS<A>)5\M1F[*W_3?D6T8SVQ+MA<>[.BVPY;.#40VQIVGM,!ORM.)A:A?.E+<
MAZB+'9YI=-<):H`%_QFFZXGK]V%I0.IJXC(RS%NXP9.NZ9.PBDYM@O3FY2P$
M\78DRI"]X]5(=PXUI.R>@40PX6#J_*]$+^D*Y_->#441VQO^"J)(?S>R2/]Q
M8:R]$5,NYZN5T-TFQA_,.<[K&!G1(7OP`LK?@;^G)AN\F9)LD891S/4(),AQ
MF="S3H_Q<_2[&E*[7"3*L+:P>881OLCP^73X'8?I`[G[",Z%^AWO-V+O4I?B
MT1E!\WU?L#EMTDTI>.V_[@X-V/%QN]?L-(ZH4MRN*5>1Q:$_^XNQ./U(/$Y_
M.2:OU>MJ*5^MQA;A67&]Q"V<H>^PI\;P4KSB^2Q5P`*+7<4*QJE]<7?HRO_^
M+S&6&3$7ZP/+$_28!KLL6(OIU)]X_)5O?A8?34V>)A;+;`DS7>*)>[=2-=$E
M]IK]G,#I:4'4(S@U:!SVA6Y5U7RUID0KC&]LF`\?S5?+_V=/F/\/4%.56_=_
MJ^IS_O\3YO^OBXZYS5A7L?9&0''I5O"Z9O$6"%XITJO<[[X@7,V7P@RRUYJK
MH]<^LL=CRGFQ*#7XU#$M[]CV#+AAE,/REK%Y8VI>,OZ\!?T;VM-ZK>G\?;C0
M:K2/3[J4L<Y#B\9RT@W'*&K0]J]4"OSKR_DE6TZJ;VX>@=3&N\&;1R?TL^;_
M?YYR_I?+Y5OS7RT^W___*O?_@PM`\8+/>0L`70%:>1&`6D?[?N<\KY95'@G>
M_QJ`K<=]#<#6Y[X&8`L:S2&Z[4ZWG0UO^_NN&VN.^X?#YIMV\VVG>YC]Y8Y;
M^;_F!/"@]_.P]ZZ;_077/*:%RWX/-#T/^@3'L[.C7>;@(SC,6S@6%/?A$_R:
M]T-F-1XRW\DHPYH^-K/^O[UK_VW;2,(_AW_%UDU:J97D5^SDG*:(X[B-@9QC
M6#;.=\7!H$3*9B.1`I>RS\']\3??S"Q?HIM+XCB]`Q>!'?.Q.SN[\]SE?E+E
M1S(,+WU5IC5:E:VU[=[Z5O&Y^F__Y4?]2N_Q_O#TS4D'MS[^G(-J':24NY]R
MQ@'US-Q>V2WU*->_-7\+':Z$`#7PJ/$V5YH=C,,19>8JLM%(ON'M]R_#*6>_
MY:!W?A3GC(OER]FIL_(+L'/K3MBY=4?LW/I2[&R>K9M_(?8^SOT@HG)X^G)X
MTD%.D#_!*5^L$JO?3]#=MZ<G1Z<GG<_]2KZK0^YHTB&_+YH^ZIOU;OL9^>?$
M?\E]^G_KZYMKK?_W=?V_.+PF4QK'X=0.QJQ[*E=N\0#7M@L/L/)\/=3;V-EZ
M^@=?@6]N/.[1#S7*_`&U7-K<+)V^8PJT@Q(T"72HP+&(&V-^6.7'D>=9S'S[
MSCPW_+LS/#\X/AT>_YM^G^GOXU^/C_AO_7W\]N0U_TV_NV(DO!_IQZI\$6\8
MLX0A6L2]"I+0PE_RIVGH!S=RVFW/3,.)@$X)PHVOI'%5.$8H]8$U%J:7_IR\
M+B(8-Q;Q-(K?=92)Y^1)7?MI$`;G^#[D7!H\!_@3$?:C8=J``(6M2AW<[9F.
MS=+%.&/B_"`@QZC[G5W$^&_/[/YR?GIX<'8^//C'?D>O=KOF)[/FS#+`SZ@)
MH+,(=SLKN\QL[2Q:,A.?M&NP8QX-2*KM"KF#61H""ZE#/\F..ZZUFO5_2_]_
M20S03SC_=WVSQ?^\[_'G%83#D[MOXT/Y7[/]I'[^Y\9Z:__OI0BPE;$4EDS-
M>!I!W^/C0DG@FDX:S@!VR+L#<1;\1>K/NH-6O?\?RG\%(>8^Y7]K>[ON_V\\
M;M=_[J5\^XU1G!'/T]3-!J=L'N33H<L[J>08.N_YYQ0O!T[E+V%=TI@7*7I`
MII&OJ5/ZD<SZ-@2:'0ZF]SH_59")?L:>IQ^Z#+>%SZ2AI*[H88%A-$&H6ZFX
M8H^TUCBT2&\"#LQ>)HMIH*\8`8D=W1CRNH.>0P&+$U)XP#'T8M!`=<X&G]ES
M#]Q[\.R9AZ23]R>5_^'>\9=HXP/XW^O8K5X__[L]_^V>[/_PM>FH$S"$$]!%
M6M)WIAYI3#G_``<:Q((;APS]`C@R`@I*0I(A5]\3)!FJ*^,L_HQ$R@J,I'H1
M,W]\&<6A2#D2I!!!D7`.E),X?\84[0EN#A%T%0$-F0+.!*A6U25.P-<H."F:
M7L0.-U6()(6@-UV.PH'Q4,_"F,)LG._@>XKMPJBI6,M(V?'I`0Z5?HSGJJ"P
MA6S@>;_L[YZ<'@/1VB3&#)L(HW;VIJ1C;+':XM!=+Q-`3'?"P<6@9PZ.)`^=
M)@N`=DD[KPZ'QLZ39$)7<'`$H-KKIT6$I,("NV,&*:=#N9(LN0AYI(!/PP"`
M(Q\[7!D`K%I!3Q$%4T8EY+=K'9#.'<PP`#C$(HVN_/$-'V,QK?.:\0\760*`
MXS'CP6)<F"1L?9_3_3BCJSG.[,`(/J$ML$MQ:DKX+XS3A<X4GVL@:W$%LI*8
MF#B.YNA?)\>=!:IHS[R<)M>3"&,%W-8TFD_#/JFU+BJ6E+\T+&=G`VG76AFD
M?;TA$-X,S47TC$)Z,6S@BA!&=B(_=P,MBGCD$,]<5]'[691EA9'"ML1TJ6%_
M:A-A!<U_XG@6CC-I_L*'49/I@&'@9(W5T5$!/EM?=UVR#,X;YG)<'14+9*E7
M!\.C-[M_)ZD3&ID?[/57Y%03499AUM%")?=VQ3B2PJ*JB`VP%^(=$07.)8)G
M7.%,E2:NP9V?$Y1;#AUR<$V-\&YO19"7R,4-5*FG@-2C9QFB/9EAW.M=8($6
ML;=Y5R:@7`E_+P0'?N:+0`DIU"I?ZL0A,R$4P#?<%$FN$%N\5&)"5X=O-QU%
M&>-_GNP=K1X<\4DQUH'[ID"/)FK9$R']<"$4%%C-RG!)"=(K-`V-O,(=5`T#
MV0K[8Z0>>3KZ<MO1<)A@_32E6<;;5LCOR;&$(6("=OU,UGJS2SQSB67EV"XS
M7>8-/DM5I20Z7I!%82F$C:+(&X2+0;8#&BS2LJE>$8?.YAB&4J6C748@7:`M
M\$8M$DW!OU(M()]O(E5<FD=`:#7)))_]Q:QH>I%<4F*.0096Y00R=G2[YC1Q
MF2R2'F';:"'KW*Q(,X;`UF[L2?A-M?5+-<FLK(FFTR*CD,P3CYCV@\>GU!/1
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M^_PXQH4K`>FD-1,;90E0P=GTL^9ALO`2W$1!'9;VG#/WNE1'KN0*S5_P7[K6
MQ&>;3#(R#<*4*#_1BOV)6\9:*,QNYEK7^MK&8T-JU^F0W?A&.`*"QJ2I231A
M\0H$=+Y;JQC."U?N'(QE7N[GO+Z$B\F*BWH2T=5IY!06ZA%8YX(S&!IYCHPX
MM4__B-]JWP4%$CHK34.:[G$`45*=DH\0C"S+F?JW==?TM*%+CE<R9V_EUTFA
MDYR/@?Y%$.3KV-U2_F@_H@9C0;.H&'O17A2AISP)B7SMA:A2ZTN4+[7$8@3`
M8G47`^?]%`->6$DY+HVG:.&P,)%HHZK-"JA<]:(6Z1R)`F6Z#<F3=7PN54*$
MEK9]1#,,%^_\H*M!J#ZK3S-L#M$LJ!VI8-*L8U@7CK8:E+Y/$]L`EYNL2C0C
M!P@!$[C%ZXP-=@P,C9MJHDF.Q$E.5,D9=I-'NRZ"KD,DZH7:OX(C8XL,SFCJ
MU$;)'+BQ<S[ZD^VG58E;"N*PW-C#T7JQL"$_<>][2_V>9\D<2H%=/FZ!MXAE
MJI-5DSCO&?CIY?<9/;W27BYJ1/J0W*+JO,S]WAI+96B:[+TL34M0')>-<&$M
M:48R1XPDEA*905FBR\K+-,I,Y@#WIF[\U<L1\%0*F4C.RQV&&(IWK.]U=8@:
MN(!0(QDG4R=IL*^^8-*"`':U;XHC$4MLIJ>CR8W./;]"@/!#M-XX3&'G=&+M
MPWJS1>+G^4$-\B0Y!^V/Q(&=42!&[:82$(4I?&>&RVWHA.0E)!0M:RDU%FZ"
MY,:BL*(==DA)D9(W`$=;8H!%/)9PDV*7KH@2GL.W>?Q]9WZT8[DU]78@'.3W
M4<CQWM>]7[()H'\-K[-L5%UT6^1"U;DE)Y1MF9W3-+*YQN<&,+YS)Y)C7Q@P
M"HN-N#"%KZ+))$QY4LXE%E`6H,9H$HG7X3,EK/%&OHUR\:S%49S7L=4P/"6I
MZ0BF,+E2%$/=,."XR*:?QNQ'1I-&!]9*ZE9EG?=_2<-OYR[(I_%,"W.'42^"
M,/YBK".;[U!!$2R>Z58_\+@43_&[Y`Z)*9KY4&MV,<UX:**+F/A!W$&$3:*Y
MF%L7%]MI<EV69>>LLW>3A>8/4T8<7([G?]X%LU+^5R&M[WKUY\/[O[:WEO#_
MUC;:]=][*<_OK'@'$[,BB;-TI4F?F6LV?[GV)>$UM76=KI>[^$APD5T@-5)R
M[WNLO'@35N)2.[P\0UI('3@*=>C="Z2421BQS,3+V:1>NN*&$7G\&K7$Z3HL
M^%Q#\)WKQK:;_4G(^EXR1WBCRA=MSJ=A8_?\2N_(2_WIH<"+_[RJKUFL6_$.
M>EEW@C:VF<1W13B7AJRTQXK6[H%`1HE').DH$S<$E92;K/.3@[]HHE4$LC\-
MVK*!?J<9K]D$Z^G#<&:N4R0NX?AY8$%Y;<VXM37/.X@UAIOVA*6<[%&^VC`S
MB[F$]NEX(%X)KF.Z\.#`MQV14?7@V,(?2Y#9!JG3Z)TX1Y,"TU[6\`)QDG]/
M1CO`O#]>Q%(5&9RJC2^,HD?W?L/WE<786%[^Q'M]7^XL+34&^B&;^:=B5#W@
M3T/[L>&C@(/OGSUHJ,^;1-X=BM<7U_]';PZ&)W>O_3^H_S>VUI;6_[9;_7\_
MY056<."Z/#P,LY?#5SN&IT'ORJP/-K!E]\GJ^L;J^E.SMK'S>&MG;</,T@L*
MN.?FH9>_>W9V9E2T`Y[Z`U*[?=8A-R3Y?7.Y&)'_/_%8-,9S3T7$>P&WTDQC
MDCMK'DW,HY>K<A"9]V(1\SWR]HN+^EK?#X+B_QP[Y'_9=UB1R?^F<(/N\Y]-
M'P]X9"U6<2+8:O.G!8.+]\4C1'C]BM#2=!54-5P7>I9OU*_H:6REBT^%L4]Q
MJ5`QPD!6:M\`HN'1JU5[28:H8G&<VE)$C/Z\^3$^.F;Y,I\O(_KOEKM./2Y1
M4U.E.1WR/?X>DFQ0Y[)6D:0W2R\X$Z[J5\*BP8IY5G2E]@IWHDI'HTJO:70E
MZ4#,!HAREK[T[+)]%5H^Z@R@1M:7*?K$#@4?TZ/@?KH4?&:?SODX*:21JIWZ
M5;-1B#6QZIB2DLD7AF[K$E%9U0JF?VA65C[4M-!*DXTTT7(OVXV0;6E+6]K2
MEK:TI2UM:4M;VM*6MK2E+6UI2UO:TI:VM*4M;6E+6]K2EK:TI2UM:4M;VM*6
,KU+^`R5S@<(`R```
`
end
>Audit-Trail:
>Unformatted: