Many craftWowSuch createhttps://maciej.lasyk.info/2015-11-27T00:00:00+01:00Containers do not contain2015-11-27T00:00:00+01:002015-11-27T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2015-11-27:2015/Nov/27/containers-do-not-contain/<p><center><img alt="Devopsdays" src="https://maciej.lasyk.info/images/devopsdays-logo.png" /></center></p>
<p>The title of this presentation is borrowed from <a href="https://www.youtube.com/watch?v=zWGFqMuEHdw">Dan's Walsh</a>
presentations about security of Linux containers.</p>
<p>I worked on this presentation only for about 45 minutes. It was an emergency one - one of the speakers couldn't make it
to the Devopsdays Warsaw 2015 and I was asked to replace him on very short notice. </p>
<p>Fortunately I had some slides from other events, merged
those very quickly, added some more and tried to improvise on the scene ;)</p>
<p><center>
<iframe src="//www.slideshare.net/slideshow/embed_code/key/7enDSiQ4NYiYkI" width="510" height="420" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC; border-width:1px; margin-bottom:5px; max-width: 100%;" allowfullscreen> </iframe> <div style="margin-bottom:5px"> <strong> <a href="//www.slideshare.net/d0cent/containers-do-not-contain" title=""Containers do not contain"" target="_blank">"Containers do not contain"</a> </strong> from <strong><a href="//www.slideshare.net/d0cent" target="_blank">Maciej Lasyk</a></strong> </div>
</center></p>Running sshd on 443/tcp2015-11-17T00:00:00+01:002015-11-17T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2015-11-17:2015/Nov/17/running-sshd-on-443tcp/<p><center><img alt="Selinux" src="https://maciej.lasyk.info/images/selinux-logo.png" /></center></p>
<h3>What?</h3>
<p>So I had this need to run <strong>ssh</strong> daemon on port 443/TCP. I reconfigured sshd daemon, iptables and stucked with Selinux
policy, when I wanted to assign port 443 to sshd_port_t (so I thought I'd need to remove in the first step actual
assignment of port 443 which is http_port_t):</p>
<div class="highlight"><pre><span></span><span class="o">[</span>root@srv<span class="w"> </span>~<span class="o">]</span><span class="c1"># semanage port -d -t http_port_t -p tcp 443 </span>
ValueError:<span class="w"> </span>Port<span class="w"> </span>tcp/443<span class="w"> </span>is<span class="w"> </span>defined<span class="w"> </span><span class="k">in</span><span class="w"> </span>policy,<span class="w"> </span>cannot<span class="w"> </span>be<span class="w"> </span>deleted
</pre></div>
<h3>SSH on port 443? sshd configuration + iptables</h3>
<p>Yup, it happens ;)</p>
<p>It's simple reconfiguration done in <strong>/etc/ssh/sshd_config</strong>:</p>
<div class="highlight"><pre><span></span>Port<span class="w"> </span><span class="m">22</span>
Port<span class="w"> </span><span class="m">443</span>
</pre></div>
<p>So as you can see I left sshd running also on port 22/tcp. Also reconfigured iptables (Centos 7, no firewalld yet):</p>
<div class="highlight"><pre><span></span><span class="o">[</span>root@srv<span class="w"> </span>~<span class="o">]</span><span class="c1"># grep 443 /etc/sysconfig/iptables</span>
-A<span class="w"> </span>INPUT<span class="w"> </span>-p<span class="w"> </span>tcp<span class="w"> </span>-m<span class="w"> </span>state<span class="w"> </span>--state<span class="w"> </span>NEW<span class="w"> </span>-m<span class="w"> </span>tcp<span class="w"> </span>--dport<span class="w"> </span><span class="m">443</span><span class="w"> </span>-j<span class="w"> </span>ACCEPT
</pre></div>
<h3>Back to Selinux - how to fix this?</h3>
<p>Actually answer lays in documentation:</p>
<div class="highlight"><pre><span></span>$<span class="w"> </span>man<span class="w"> </span>semanage-port
<span class="w"> </span>-m,<span class="w"> </span>--modify
<span class="w"> </span>Modify<span class="w"> </span>a<span class="w"> </span>record<span class="w"> </span>of<span class="w"> </span>the<span class="w"> </span>specified<span class="w"> </span>object<span class="w"> </span><span class="nb">type</span>
</pre></div>
<p>So basically instead of removing this httpd_port_t assignment, what is impossible without recompiling the policy I just
modified it:</p>
<div class="highlight"><pre><span></span><span class="o">[</span>root@srv<span class="w"> </span>~<span class="o">]</span><span class="c1"># semanage port -m -t ssh_port_t -p tcp 443</span>
</pre></div>
<p>And now we have:</p>
<div class="highlight"><pre><span></span><span class="o">[</span>root@netrunner<span class="w"> </span>~<span class="o">]</span><span class="c1"># semanage port -l | grep 443 </span>
http_port_t<span class="w"> </span>tcp<span class="w"> </span><span class="m">80</span>,<span class="w"> </span><span class="m">81</span>,<span class="w"> </span><span class="m">443</span>,<span class="w"> </span><span class="m">488</span>,<span class="w"> </span><span class="m">8008</span>,<span class="w"> </span><span class="m">8009</span>,<span class="w"> </span><span class="m">8443</span>,<span class="w"> </span><span class="m">9000</span>
ssh_port_t<span class="w"> </span>tcp<span class="w"> </span><span class="m">443</span>,<span class="w"> </span><span class="m">444</span>,<span class="w"> </span><span class="m">22</span>
</pre></div>
<p>Works for me ;)</p>SELinux / sVirt vs Venom vulnerability2015-05-13T00:00:00+02:002015-05-13T00:00:00+02:00Maciej Lasyktag:maciej.lasyk.info,2015-05-13:2015/May/13/selinux-svirt-vs-venom-vulnerability/<p><center><img alt="libvirt" src="https://maciej.lasyk.info/images/venom.png" /></center></p>
<h1>Venom?</h1>
<p>Basically it's a vulnerability that may be used to escape hypervisor (Qemu
based, e.g. KVM. XEN) and obtain root permissions on host machine (and from
that on also other virtual machines).</p>
<p>This vulnerability has interesting PR - nice logo, name and a website
:O Real triplet of security marketing: <a href="http://venom.crowdstrike.com/">Venom
webpage</a></p>
<p>Also check <a href="https://access.redhat.com/articles/1444903">RedHat article on this
CVE</a></p>
<h1>Am I fucked?</h1>
<p>Maybe. If you're using Qemu driver then you might have a problem...</p>
<p>...but...</p>
<p>... <strong>not when using SELinux / sVirt</strong></p>
<p>With <a href="http://www.selinuxproject.org/page/SVirt">sVirt</a> and SELinux securing
your system <a href="https://securityblog.redhat.com/2015/05/13/venom-dont-get-bitten/">you should sleep
well</a>.
Because even if attacker successfully escapes hypervisor confinement he will be
still under the dome of SELinux confinement (which by default is set to
<strong>system_u:system_r:svirt_t</strong>; </p>
<p>But <strong>should</strong> may not be enough. So I'm gonna say this - you <strong>can</strong> sleep
well thanks to MCS (Multi-Level security) & MLC (Multi-Category security)
in SELinux.</p>
<p>What I wrote above tells us that every virtual machine has <strong>svirt_t</strong> security
type by default. This is a confinement configuration for each VM. And there is
more. Each virtualized guest process is labeled and runs with a dynamically
generated level. Each process is isolated from other VMs with different MCS
levels. Example from one of my boxes:</p>
<div class="highlight"><pre><span></span>system_u:system_r:svirt_t:s0:c14,c894
system_u:system_r:svirt_t:s0:c393,c652
system_u:system_r:svirt_t:s0:c730,c767
system_u:system_r:svirt_t:s0:c465,c623
system_u:system_r:svirt_t:s0:c246,c630
system_u:system_r:svirt_t:s0:c37,c395
system_u:system_r:svirt_t:s0:c225,c437
system_u:system_r:svirt_t:s0:c40,c846
system_u:system_r:svirt_t:s0:c523,c530
system_u:system_r:svirt_t:s0:c361,c630
system_u:system_r:svirt_t:s0:c63,c827
system_u:system_r:svirt_t:s0:c52,c133
system_u:system_r:svirt_t:s0:c416,c722
system_u:system_r:svirt_t:s0:c36,c814
system_u:system_r:svirt_t:s0:c615,c661
system_u:system_r:svirt_t:s0:c96,c792
system_u:system_r:svirt_t:s0:c60,c74
system_u:system_r:svirt_t:s0:c492,c659
system_u:system_r:svirt_t:s0:c72,c693
system_u:system_r:svirt_t:s0:c499,c536
</pre></div>
<p>This is just a slice. As you can see each process (VM) has other MLC.</p>
<h1>Solution?</h1>
<p>Yup - even SELinux might have some security vulnerabilities we don't know about
so it's better to fix Qemu. How? Simply:</p>
<div class="highlight"><pre><span></span>yum<span class="w"> </span>update<span class="w"> </span>qemu-kvm
</pre></div>
<p>(or update all pkgs - whatever)</p>
<p>EDIT: <a href="http://danwalsh.livejournal.com/71489.html">Dan Walsh confirmed</a> that Venom is not an issue w/ SELinux enabled.</p>Dropbox and security of your files in Linux2015-03-03T00:00:00+01:002015-03-03T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2015-03-03:2015/Mar/03/dropbox-and-security-of-your-files-in-linux/<p><center><img alt="RHEL" src="https://maciej.lasyk.info/images/dropbox-logo.png" /></center></p>
<h3>WAT?</h3>
<p>So there's been discussion about <a href="http://www.e-siber.com/guvenlik/dropbox-accesses-all-the-files-in-your-pc-not-just-sync-folder-and-steals-everything/">Dropbox indexing all files on Windows
boxes</a></p>
<p>It basically tells that Dropbox scans all the files in the whole drive:</p>
<blockquote>
<p>Dropbox syncs not only its own folder but also everything in local drive (C:)
without any user consent or permission.</p>
</blockquote>
<p><center><img alt="WAT" src="https://maciej.lasyk.info/images/wat.jpg" /></center></p>
<h3>How about Linux?</h3>
<p>First of all - if you're sane Linux user than you use one of the <a href="https://en.wikipedia.org/wiki/Linux_Security_Modules">Linux
Security Modules (LSMs)</a>
and literally don't give a fuck. Even when <a href="http://www.techrepublic.com/article/moving-steams-local-folder-deletes-all-user-files-on-linux/">Steam wants to delete all your files
in
hard-drive</a>
you show him a middle finger and praise <a href="http://danwalsh.livejournal.com/">Dan Walsh for his
work</a></p>
<p>I'll tell this one more time - use SELinux. <a href="https://www.packtpub.com/networking-and-servers/selinux-system-administration">Read this
book</a>
- it's only 100 pages for the sake. Or use AppArmor if SELinux is too hard for
you. Then you will never find yourself again in such hard position.</p>
<h3>Erm.. Linux again?</h3>
<p>Ok, let's say you don't use SELinux (because if you did you wouldn't have to
read this).</p>
<p>So I run Dropbox (default datadir in ~/Dropbox) and fetched its PID and attached strace:</p>
<div class="highlight"><pre><span></span>strace<span class="w"> </span>-f<span class="w"> </span>-e<span class="w"> </span><span class="nv">trace</span><span class="o">=</span>file<span class="w"> </span>-s<span class="w"> </span><span class="m">1024</span><span class="w"> </span>-p<span class="w"> </span><span class="m">6033</span><span class="w"> </span>-o<span class="w"> </span>~/tmp/dropbox-wtf.txt
</pre></div>
<p>Now I tried to create a file outside of ~/Dropbox directory:</p>
<div class="highlight"><pre><span></span>touch<span class="w"> </span>~/tmp/wtf.txt
</pre></div>
<p>... and ...</p>
<p><strong>N O T H I N G</strong></p>
<p><strong>Quiet</strong></p>
<p><strong>Peace</strong></p>
<p>Later on just to confirm I created a file in ~/Dropbox/tmp and got a ton of
crap from the strace - filtered out the ENOENT so it's more clear (nothing
interesting there):</p>
<div class="highlight"><pre><span></span><span class="m">6308</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6308</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6308</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6308</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">48</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt/.dropbox.attr"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span>-1<span class="w"> </span>ENOTDIR<span class="w"> </span><span class="o">(</span>Not<span class="w"> </span>a<span class="w"> </span>directory<span class="o">)</span>
<span class="m">6294</span><span class="w"> </span>lstat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0664</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/Dropbox/tmp/wtf.txt"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_NOCTTY<span class="p">|</span>O_NONBLOCK<span class="p">|</span>O_NOATIME<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/filecache.dbx"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0644</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">26258432</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/filecache.dbx-journal"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">48</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/var/tmp"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFDIR<span class="p">|</span>S_ISVTX<span class="p">|</span><span class="m">0777</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">4096</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>access<span class="o">(</span><span class="s2">"/var/tmp"</span>,<span class="w"> </span>R_OK<span class="p">|</span>W_OK<span class="p">|</span>X_OK<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/var/tmp/etilqs_1GCo6ezszP3OnQ1"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_EXCL<span class="p">|</span>O_NOFOLLOW<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0600</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">52</span>
<span class="m">6294</span><span class="w"> </span>unlink<span class="o">(</span><span class="s2">"/var/tmp/etilqs_1GCo6ezszP3OnQ1"</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1"</span>,<span class="w"> </span>O_RDONLY<span class="p">|</span>O_CLOEXEC<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">54</span>
<span class="m">6294</span><span class="w"> </span>unlink<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/filecache.dbx-journal"</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">35</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/dev/urandom"</span>,<span class="w"> </span>O_RDONLY<span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>open<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span>O_RDWR<span class="p">|</span>O_CREAT<span class="p">|</span>O_CLOEXEC,<span class="w"> </span><span class="m">0644</span><span class="o">)</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">47</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/UPDATED_jt6wdD"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">7168</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
<span class="m">6294</span><span class="w"> </span>stat<span class="o">(</span><span class="s2">"/home/putinstopattackingukraine/.dropbox/instance1/PENDING_FIbd69"</span>,<span class="w"> </span><span class="o">{</span><span class="nv">st_mode</span><span class="o">=</span>S_IFREG<span class="p">|</span><span class="m">0600</span>,<span class="w"> </span><span class="nv">st_size</span><span class="o">=</span><span class="m">5120</span>,<span class="w"> </span>...<span class="o">})</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="m">0</span>
</pre></div>
<p>So we basically see that Dropbox reads only its datadir (~/Dropbox), config dir
(~/.dropbox), urandom device (probably generating bitcoins, but this is ok),
and /var/tmp (not sure however what kind of tmpfiles it creates - but this
would be rather performance question).</p>
<p>So we're safe. Dropbox does not read all the file contents on Linux.</p>
<p><strong>But once again - start using Linux Security Modules!</strong></p>Isolation2014-10-22T00:00:00+02:002014-10-22T00:00:00+02:00Maciej Lasyktag:maciej.lasyk.info,2014-10-22:2014/Oct/22/isolation/<h1>Isolation - what?</h1>
<p>Many of guys I talk to tend to run their Linux containers (LXC, Docker, you
name it) straight on bare. And I call this a bad idea. This is because when
running all the containers within one single box you will be hit by network or
security problems. Not today, but it will happen. Why?</p>
<h1>Clusterfuck network</h1>
<p>This term is used to describe a network where noone knows what's happening.
Frankly it's working but don't-try-to-change-that (unless you're stupid brave
/ enough).</p>
<p><center><img alt="Clusterfuck network" src="https://maciej.lasyk.info/images/clusterfucknetwork.jpg" /></center></p>
<p>How does it refers to containers? Imagine that above wires are iptables rules.
Should I write more? What happens when you restart iptables? Did you just
killed the network in 300 containers running on that box? Oh whatever iptables
- think docker0 interface + bonding/teaming + multiple bridges + veths + VIPs +
vlans + whatever-your-sysadmins-come-with</p>
<p>And now one single junior - sysadmin just reloads iptables as was written in
the 5th point of never-updated-procedure.</p>
<p>That's why I really like to have containers grouped on KVM VMs. KVM overhead is
minimal these years. And it can save your ass. Just make a proper Ha planning
and even if you kill some group of containers you will not have to firefight
having 5 managers simultaneously on 3 calls ;)</p>
<h1>Security</h1>
<p>Yes I know - this term is usually some big-fucking-unknown for most of guys /
ignorants. And that is why you should isolate groups of containers from each other. Throw
the first rock who uses SELinux / enforcing (under these circumstances you
could possibly cover the security subject in the terms on containers). But even
if you do then see > <strong>Clusterfuck network</strong> paragraph).</p>
<p>Btw - I had this talk during Infosec meetup some time ago about Docker
security - <a href="http://www.slideshare.net/d0cent/docker-rhel">enjoy</a>!</p>
<h1>What about IaaSes?</h1>
<p>Yes - if you're running <a href="https://openshift.github.io/">OpenShift</a> (or any other
Open: Nebula / Stack / Whatever) then probably you will not care about isolation at
all because this will be done for you without your interference. But -
seriously? Usually people rather use VMs for hosting nodes of IaaSes.</p>
<h1>Recap?</h1>
<p>No. Just wrote this after having a failure with LXC containers on Centos7 and
no-real-explanation just "have-you-tried-to-turn-it-off-and-on-again?".</p>
<p><center><img alt="Isolation" src="https://maciej.lasyk.info/images/isolation.jpg" /></center></p>Atmosphere Conference 2014 recap2014-05-26T00:00:00+02:002014-05-26T00:00:00+02:00Maciej Lasyktag:maciej.lasyk.info,2014-05-26:2014/May/26/atmosphere-conference-2014-recap/<p><center><img alt="Atmo 2014" src="https://maciej.lasyk.info/images/atmo-2014.jpg" /></center></p>
<p>Atmosphere conference was a blast! Those 2 days were full of talking, arguing and thinking. Venue was really great – whole event took place in the Praha Cinema in Warsaw and we had that feeling of #RedCarpet party ;)</p>
<p>The Atmosphere Conference just like Velocity is all about scalability and performance so DevOPS techniques and culture are all around the place – you can literally feel those in the air. Also the event is about people you meet there – and as the afterparty kept the Conference standards (great organization, full of interesting people) I can only say, that this is “must be” for all our polish DevOPS and others that are taking care of scaling and polishing their platforms performance.</p>
<p>Someone asked me to compare Velocity and Atmosphere. Well – the latter one is generally polish Conference where 95% of participants are from Poland; yet this year lectures were mainly in english. And about technological part – this year there were guys from Akamai, Facebook, E-Bay, Chef, Percona, Prezi, Microsoft, some polish local businesses and me – from Fedora Project. Looks like this conference is going global, yup? :)</p>
<p>Oh and that running part – I stayed in a hotel just near to Lazienki Park – one of the most beautiful city – parks in the Poland. So 6 am I was already up & running through that alleys – I really recommend this place to every of you that wants to keep in motion ;)</p>
<p>I’m really happy to had been part of the Atmosphere 2014. My lecture was about scaling and securing node.js apps. Check those out:</p>
<iframe src="//www.slideshare.net/slideshow/embed_code/key/Auh2Lp4o2QxZRG" width="595" height="485" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC; border-width:1px; margin-bottom:5px; max-width: 100%;" allowfullscreen> </iframe>
<p><div style="margin-bottom:5px"> <strong> <a href="//www.slideshare.net/d0cent/scaling-and-securing-nodejs-apps-35127655" title="Scaling and securing node.js apps" target="_blank">Scaling and securing node.js apps</a> </strong> from <strong><a href="//www.slideshare.net/d0cent" target="_blank">Maciej Lasyk</a></strong> </div></p>node.js security slides from SEConference 20142014-05-10T00:00:00+02:002014-05-10T00:00:00+02:00Maciej Lasyktag:maciej.lasyk.info,2014-05-10:2014/May/10/nodejs-security-slides-from-seconference-2014/<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/node-js-S.jpg" /></center></p>
<p>Yesterday I gave talk about node.js security during SEConference here in Kraków. It was fun – especially afterparty where we could do some nerd – talking about our security concerns :)</p>
<p>Oh and that part:</p>
<p>me: “- hey, where did you get this Dragon Sector t-shirt?”</p>
<p>vnd: “- because I’m the member of Dragon sector”</p>
<p>me: “- LOL, that explains everything”</p>
<p>And I was wondering why this guy is called “vnd” – just like that one from Dragon Sector. It was so obvious – lolme ;)</p>
<p>Ok so now – slides:</p>
<iframe src="//www.slideshare.net/slideshow/embed_code/key/gSGNb8sEtqoBZu" width="595" height="485" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC; border-width:1px; margin-bottom:5px; max-width: 100%;" allowfullscreen> </iframe>
<p><div style="margin-bottom:5px"> <strong> <a href="//www.slideshare.net/d0cent/nodejs-security" title="Node.js security" target="_blank">Node.js security</a> </strong> from <strong><a href="//www.slideshare.net/d0cent" target="_blank">Maciej Lasyk</a></strong> </div></p>Stop disabling SELinux – slides from my talk @ Krakow Infosec meetup2014-03-13T00:00:00+01:002014-03-13T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2014-03-13:2014/Mar/13/stop-disabling-selinux-slides-from-my-talk-krakow-infosec-meetup/<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/post-38-pinguim-do-selinux.jpg" /></center></p>
<p>Every time you run setenforce 0, you make Dan Walsh weep. Dan is a nice guy and he certainly doesn’t deserve that. So see how not to disable SELinux and why it is so great :)</p>
<iframe src="//www.slideshare.net/slideshow/embed_code/key/9mMyW30WRpJqX9" width="595" height="485" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC; border-width:1px; margin-bottom:5px; max-width: 100%;" allowfullscreen> </iframe>
<p><div style="margin-bottom:5px"> <strong> <a href="//www.slideshare.net/d0cent/selinux-single" title="Stop disabling SELinux!" target="_blank">Stop disabling SELinux!</a> </strong> from <strong><a href="//www.slideshare.net/d0cent" target="_blank">Maciej Lasyk</a></strong> </div></p>Infosec meetup invitation2014-03-06T00:00:00+01:002014-03-06T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2014-03-06:2014/Mar/06/infosec-meetup-invitation/<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/cyber-attacks-hicube-infosec-300x168.jpg" /></center></p>
<p>Next week there will be first Infosec group meetup. It’ll take place in BaseLab here in Kraków. I’ll give a #SELinux presentation there and that will be the beginning of the whole SELinux series. I’ll try to enlight all of you who still “setenforce 0”.</p>
<p>You can RSVP here: <a href="http://www.meetup.com/Infosec-Krakow/events/168455142/">http://www.meetup.com/Infosec-Krakow/events/168455142/</a></p>
<p>And remember one, very important thing, Dan is watching you!</p>
<iframe width="560" height="315" src="https://www.youtube.com/embed/o5snlP8Y5GY" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>RHEL/Fedora + Docker (and SELinux)2014-02-26T00:00:00+01:002014-02-26T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2014-02-26:2014/Feb/26/rhelfedora-docker-and-selinux/<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/docker.png" /></center></p>
<p>It’s still fresh – I gave this talk a few hours ago at DevOPS meetup here in Krakow. There’s Dan Walsh’s surprise included ;)</p>
<iframe src="//www.slideshare.net/slideshow/embed_code/key/4sT9375823WPty" width="595" height="485" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC; border-width:1px; margin-bottom:5px; max-width: 100%;" allowfullscreen> </iframe>
<p><div style="margin-bottom:5px"> <strong> <a href="//www.slideshare.net/d0cent/docker-rhel" title="RHEL/Fedora + Docker (and SELinux)" target="_blank">RHEL/Fedora + Docker (and SELinux)</a> </strong> from <strong><a href="//www.slideshare.net/d0cent" target="_blank">Maciej Lasyk</a></strong> </div></p>Samsung R&D Linux Boot competition – smashed ;) / Concepts github repo created!2013-10-29T00:00:00+01:002013-10-29T00:00:00+01:00Maciej Lasyktag:maciej.lasyk.info,2013-10-29:2013/Oct/29/samsung-rd-linux-boot-competition-smashed-concepts-github-repo-created/<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/Samsung-booth-11-520x245-300x141.jpg" /></center></p>
<p>During last Linux Autumn conference (check my recap here) I won competition run by guys from the platinum sponsor – Samsung R&D Centre. There were two topics to be covered – each on other interesting aspect of Linux tuning. First one was about polishing Linux security and the second – about speeding up the Linux boot process. I wrote answers to both topics, but the latter was the winning one.</p>
<p>I was asked about my ideas that I used during that competition a few times until then. So after yet another conversation I thought, that maybe it’s time to write those and make them public – why not – I didn’t discover the America – just wrote down some known facts ;)</p>
<p>So – I strongly believe that github is a good place to publish things like that. I created ‘concepts’ repo where I’ll push any ideas that in my opinion is worth of it. Never mind if those are my own concepts or I heard those on some conference. This way I’m publishing my “concepts” notebook from my Evernote.</p>
<p>Feel free to clone this repo here: https://github.com/docent-net/concepts</p>
<p>The competition winning idea is here: https://github.com/docent-net/concepts/tree/master/booter</p>
<p>And one more thing. This competition was awarded with this beauty Samsung Galaxy SIII (yes, it’s only box; I already have exactly the same phone, so this one is landing on E-Bay):</p>
<p><center><img alt="IMG" src="https://maciej.lasyk.info/images/1382195_10151717010150911_753129479_n-300x300.jpg" /></center></p>Safe WordPress management via SSL / HTTPS2012-09-17T00:00:00+02:002012-09-17T00:00:00+02:00Maciej Lasyktag:maciej.lasyk.info,2012-09-17:2012/Sep/17/safe-wordpress-management-via-ssl-https/<p>Why would you like to secure your <strong>wp-admin</strong> session with SSL? Remember – Big Brother is always watching – so don’t make his life easy.</p>
<p>In order to use SSL in wp-admin the most important thing is to enable SSL in WWW server’s vhost (eg. Apache). When SSL is turned on for your WordPress domain it will work just out of the box.</p>
<p>So what is also important here? You should always make users use SSL in wp-admin sessions. So make it obligatory. You can do it using mod_rewrite in Apache webserver (httpd.conf or .htaccess):</p>
<div class="highlight"><pre><span></span>RewriteEngine<span class="w"> </span>On
RewriteBase<span class="w"> </span>/
RewriteCond<span class="w"> </span>%<span class="o">{</span>HTTPS<span class="o">}</span><span class="w"> </span>!<span class="o">=</span>on
RewriteRule<span class="w"> </span>“^<span class="o">(</span>/wp-admin/.*<span class="o">)</span>”<span class="w"> </span>“https://%<span class="o">{</span>HTTP_HOST<span class="o">}</span><span class="nv">$1</span>”<span class="w"> </span><span class="o">[</span><span class="nv">R</span><span class="o">=</span><span class="m">301</span>,L<span class="o">]</span>
</pre></div>
<p>Or simplier - editing Your <strong>wp-config.php</strong> file - add below line:</p>
<div class="highlight"><pre><span></span>define<span class="o">(</span>‘FORCE_SSL_ADMIN’,<span class="w"> </span><span class="nb">true</span><span class="o">)</span><span class="p">;</span>
</pre></div>
<p>somewhere before the folliwing line:</p>
<div class="highlight"><pre><span></span>require_once<span class="o">(</span>ABSPATH<span class="w"> </span>.<span class="w"> </span>‘wp-settings.php’<span class="o">)</span><span class="p">;</span>
</pre></div>
<p>And that should do the trick!</p>