From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 0B1531287F; Mon, 17 Nov 2025 22:19:56 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id A6F00128C9; Mon, 17 Nov 2025 22:19:53 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_PASS,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 Received: from mail-yx1-xb12d.google.com (mail-yx1-xb12d.google.com [IPv6:2607:f8b0:4864:20::b12d]) by atuin.qyliss.net (Postfix) with ESMTPS id 7C204128C7 for ; Mon, 17 Nov 2025 22:19:52 +0000 (UTC) Received: by mail-yx1-xb12d.google.com with SMTP id 956f58d0204a3-640c857ce02so4553448d50.0 for ; Mon, 17 Nov 2025 14:19:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1763417991; x=1764022791; darn=spectrum-os.org; h=in-reply-to:autocrypt:from:content-language:references:to:subject :user-agent:mime-version:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=elQYdUXCH0G+1PeGJ2aFGs4k9t17q1ZWfRdA60QRzlA=; b=dF4+UVD6VJl4Q0GdtmiKorWan79XVbaWhgUeLGTNGzwRM43AKPy+6eerzfuUGgxzce p6R/mLKlXwi4Q+mLnCm7rnQz6CRTo5LopfnFGzRDKBE9zxH8TF+5BUEYKwmoMsquDkNN 1OJydjsXGr9uS+sbkHatsE0jtkqG82g4sY+tmp74/0d70P/NZfQut68iQmSqKc1EnEmU cD6haiSJN/vpwF/+0QvvDHdgnaeSKNRV9pwNRzzDBbY0/iEFRXSt/+ehHA/mWXDBd7Y7 QBD7d7CIZSt+c5dZKAl6UqHP8eFJQ0jvytcLywjW9YzkjPxn5x9qkawS91dZa0Uwcdca 1UWQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763417991; x=1764022791; h=in-reply-to:autocrypt:from:content-language:references:to:subject :user-agent:mime-version:date:message-id:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=elQYdUXCH0G+1PeGJ2aFGs4k9t17q1ZWfRdA60QRzlA=; b=vnxSJPCHH9smhhVRtzVHw8YoI7NBazWuKCr0VmMUjfqrHoM36KT+4TBam8WYUaeDbe HXWYfQuscP1VaWWBNdDWcAzZcFvQGqE/aoEuh5wy68q0x1LnOO1n4JeoCCgBpAmUvlbF ay4bBrxLsc13O37TFXJ+XCOySNAKevXWtXtfj5ojEJO/P/fKcWFjbmX/MtydmoyW/Oz7 BqwaHzsm18iWosR5i//FWz8mrR/5aGHZkEiFjzy45X7Ud1Yz+GjBZngEBVhV5Bi5uxjd fqN6tAKg5pfuv6LyOBudfi4CZKFI3uKY3JI1eMsAgGKmwdgUnPaodNsIZILTeXDlixUE vtmA== X-Forwarded-Encrypted: i=1; AJvYcCX9bVc9yfbGK1XA3rZ5nYALGT8zdufdYotjuIeYozZ5K4GOm2T+4z2R/huy03a/YhCdGxonvA==@spectrum-os.org X-Gm-Message-State: AOJu0YxMWgDwOZce+UiGBAWTErZ4VPQQohd3WSlbkiIes8de6AB+WQbp o/4B2jn7DI1pmKO+9syPUEz4RA0wg0BoIy8QtY3ap0Ttp4R303Je9NvqCDFO7k1R X-Gm-Gg: ASbGncsBKaodk5sUOF/HzLFMcBpp5fHS7YEtNvYYYB7qDbK4DdpbMCMGBXE6o+0USyX KZJPDjArJQ/DvHiTb7WwJfFbmhBBirNVMi9R3LEYCrZ23CdRbzTEGFolNnLz1/uSJPOxxyN/t0k ZG1tR/5Lc99fIMKJs1BgAgyWVPn9w0ZR8XQz6s5fVUCkDJfXfyN9QMBiGOiNsHJHa1GQ96N78+R 9pRUobUrV0ARmX6UySWqW951618KVvQua0aG2i4e5SmNoyMi0+dVNFPVDSNQ0l8ZTEXhmn676s4 gNIEs7KxtwsHVY3CDZZchcuCuwFADm6FMNxzPgiuCiWNWC/2DpYaxOZdsPCj8LuD4rm7xSRwDJu 4ShDvWoIw77lVRahxfRucA8ilaJJ06zWMF7SSR6x8Un1VgRNuMzWxQtXBgcC42NOdZPJpwtLps6 wr++WsU+CasfbeYjPKSkCdcGOslQ43mgCVjvsF4+CME5RBy0+MNHhWbmfev/oXpV3MCurs/RbKf MvkDMP444dkygkF+fnqNEKWVWc= X-Google-Smtp-Source: AGHT+IHWpupXDlMtVes5t84udMoVgStCpEspG7l6URaq/DTF+Ny4hsfIjVSv9E/aPFEeX9C9v2DH/Q== X-Received: by 2002:a05:690e:1c21:b0:63f:9473:4749 with SMTP id 956f58d0204a3-641e76ae912mr11215462d50.56.1763417990387; Mon, 17 Nov 2025 14:19:50 -0800 (PST) Received: from [10.138.34.110] (h96-60-249-169.cncrtn.broadband.dynamic.tds.net. [96.60.249.169]) by smtp.gmail.com with ESMTPSA id 00721157ae682-78821c8fedasm46427167b3.0.2025.11.17.14.19.48 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 17 Nov 2025 14:19:49 -0800 (PST) Message-ID: <83ba7fd7-e058-4387-b215-d97109a583b1@gmail.com> Date: Mon, 17 Nov 2025 17:19:46 -0500 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 2/3] img/app: dbus: don't listen on VSOCK To: Alyssa Ross , devel@spectrum-os.org References: <20251113111038.39098-1-hi@alyssa.is> <20251113111038.39098-2-hi@alyssa.is> Content-Language: en-US From: Demi Marie Obenour Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT In-Reply-To: <20251113111038.39098-2-hi@alyssa.is> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------7yFz6N4h7Hgowg497ejzDHeo" Message-ID-Hash: YGKCC7RUXF67634NBETSCHE3V3QU2IOV X-Message-ID-Hash: YGKCC7RUXF67634NBETSCHE3V3QU2IOV X-MailFrom: demiobenour@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------7yFz6N4h7Hgowg497ejzDHeo Content-Type: multipart/mixed; boundary="------------3N0cxPX0dQ9T30Xcbzdgt1v4"; protected-headers="v1" From: Demi Marie Obenour To: Alyssa Ross , devel@spectrum-os.org Message-ID: <83ba7fd7-e058-4387-b215-d97109a583b1@gmail.com> Subject: Re: [PATCH 2/3] img/app: dbus: don't listen on VSOCK References: <20251113111038.39098-1-hi@alyssa.is> <20251113111038.39098-2-hi@alyssa.is> In-Reply-To: <20251113111038.39098-2-hi@alyssa.is> Autocrypt-Gossip: addr=hi@alyssa.is; keydata= xsFNBFpSgoYBEAC4xkCYidG2JlRWulUkTWcx0pHFDf3oSbb6Q872Kb3iDChWgluNVz43hva1 3xfDo9foV0GoyfGl/ycSCkXX5hlQr7ir/5FN38E7H/yY6tH8+l68iDgIOcb1qY0OYaxyg+Lz WesfFQedrmwNTbF4L1BtWzrTR5PflDdhDo5VWSguHGJFSclchcr/6UmMb/gOUN+2ElBC2TE2 EKY099phZ6DJZ2aZCsclwKIdCpZzXlEmXPAeaH5om6xo90JYv5+sFji40R0Plqec3WC+jTxy lGca6IbPdOminuUF+GvsR86eVsgh/0XNK7/zus7gyc4PuMUA1rCoeHcWOBDPgmelgCQyJGXd /bXeKuUsGoge58uc7/YNvOh1vfpD3AaEMqAyXfmmUwBnIicml74+2eOpH3Oljfs01g+DhkOB MtpVSZSgaIDvP0WG6cbAxImoUasnmNxEDNskfVmI8bsajPW9bt4z5hiP5Q9G3vE0D5HcIFdM adOz81PpOwNiUXcjtYV1PWZQ56jbSTOf8EBvsB71WwB+XgVWcPzIlY8hAykiHIO87oV3o71U JTAn1Foj7mjSADnY0deleOmar/K5jrK3wvKKM1XlB7PXcGBdkorJC+cbxVsw0ADzMw0c7bVc wEE7OFvHjQiIK1lO+lb1cvGBBY3IZxjsjZdA/VsFHFdAeYlzNQARAQABzRpBbHlzc2EgUm9z cyA8aGlAYWx5c3NhLmlzPsLBlwQTAQgAQQIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAIZ ARYhBHVzVtd5u7iIdz5BXnNszfnvUb2XBQJpALHXBQkPJNZRAAoJEHNszfnvUb2X2jEP/AqQ aafKiC7ormevgoCH4QinAKJoXAqiwOIdRK55HOvyhGWjnlzqoK4JTUFVRMR4Vat/APlkjOUk LPXKk+DCn4loFyl7BCLvsk4Xwy7WmXyfSPqjdik8/cjTv/Q4AHTYTpnx7GMC5eTS7ULmUvcf mD/JRr7NM2273Z7dkL3gOeZdnXYOQaGAIIox91qCtmnQhn+V7s3uxvcRl8I2/Qnn3S2veV03 LXSugAXSTdKRa7LBrcSm9TtC/D3qY9kStHiaiB/eAJsOQ0l5yRfax5INorE2DQgBKjbiBcnQ mTX7Rl9LW+U0ibHmKOFG8Zs+zKlmItek49cmqoGOv66RAY6dGUOHoEQgP0EUDJ8xGwActToC lOGZrzcXfrfx0CYlgqYE1VEWgSmtbTW1DBXiZIPKUMLJGhgaIHSKEjYujHd+vGytAMGKQsVQ OwgOMHYWyzAIB/Y6hZGNK8y5fxr468zX876mDdXhYo4dKA7UEOeQOlAIGobTXDRFEC7B/UAj qYbP+qmnyUohCy/Pf04cF0ucpWW2Z00sBL83lauhyQHiLze5OznvOeEkEeXQ6DsJOY0dmrsi 0NJZ1QoyYewXOPmPBNc7IesY1MjrpAnHgeAt1rgEPwTkt4NrRASsPe5JowJcc7CpIdR8eOrG hrw+bEMyoyjk7fN6Hs6MK+hVihMNhUwMzjgEZyd/yxIKKwYBBAGXVQEFAQEHQCVxoiHOlsEo NDKGCbxg4nL3E1CV0MRQCU1hPowd77h3AwEIB8LBfAQYAQoAJgIbDBYhBHVzVtd5u7iIdz5B XnNszfnvUb2XBQJpALHQBQkCT9j5AAoJEHNszfnvUb2XhSMP/0gStw42LjpjVLh+0HKWafs3 T9NJxtefYRbyu4wkkO0dss2pkl9gekZnvgktD0SzIe8AiMszs1rUWMG8zPXVWdMi7tSNm/IR WPa0XZDIoDwJY4T342nCvHeDsfoJnGg8o0nreI2djwO8sc9aeSevm60MQ9AouFBpS6Qw7f/Z LalXH4aWCCtvAO1o95lQXEoH4Lg4qnS6GxYMYi1u3IzrYdUu0By/Ccc5+AOOICgbJnpOoYQI bVDbdjMkj18JxxmpN5amOkPdiDndpzWkWm+oNhGUITYp6EuP1esRb35MgOmFGouvt5UdKpEl Egs2y5h9oR+kiiu9DhrC0UFL2CQ/HdiukCAxADKX3RE9m+mprSbvw7CsYmXUTH6WzPpvxpGx wQq7m2O7uy85u0HyVYkiWQiAfwCbEr1vrFU7gscBW+FcrLIODauovA9eZgA4d+cHRXfzsdKW u/QuVHsABh78LLIq008GcqJChSe4KHrJ5PUjkLnyp/Sshrmuyoy+DwqYky0KK4NtkaWa2o0B TFp+Kk2VCxWA8i/azPvTMzXOWNwqogISp5SwljiEx0hkyf0HvSb3gHfuGbZ+eGfWB+qy2pTD x/YriV5EfqkP+4+1cqXjasrQxyZUW0ULRke0j92Cgt+J722PIcOAb8vdSGF4AXczO+KMtNn9 wGxvGU7TX5ou --------------3N0cxPX0dQ9T30Xcbzdgt1v4 Content-Type: multipart/mixed; boundary="------------QLoDjEb8B3U4Ofd1gSHHi1TP" --------------QLoDjEb8B3U4Ofd1gSHHi1TP Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 11/13/25 06:10, Alyssa Ross wrote: > After working on it for a while, I decided that it complicated the > D-Bus security model too much to upstream VSOCK support for the bus. > Proxying D-Bus with socat will allow us to drop the D-Bus VSOCK > patches. >=20 > The new dbus-vsock service starts before dbus-daemon to ensure that > VSOCK connections can be received as soon as > org.freedesktop.impl.portal.desktop.spectrum is started. When a > connection is received (which should only be after the bus is up and > has started org.freedesktop.impl.portal.desktop.spectrum), it will be > relayed to the bus. >=20 > Sadly we do still need to allow ANONYMOUS authentication for now[1]. >=20 > Signed-off-by: Alyssa Ross > Link: https://github.com/z-galaxy/zbus/issues/1003#issuecomment-3523214= 990 [1] > --- > img/app/default.nix | 4 +- > img/app/file-list.mk | 5 +++ > img/app/image/etc/dbus-1/session.conf | 1 - > .../XDG_DESKTOP_PORTAL_SPECTRUM_GUEST_PORT | 1 + > ...DESKTOP_PORTAL_SPECTRUM_GUEST_PORT.license | 2 + > .../etc/s6-rc/dbus-vsock/notification-fd | 1 + > .../s6-rc/dbus-vsock/notification-fd.license | 2 + > img/app/image/etc/s6-rc/dbus-vsock/run | 17 +++++++ > img/app/image/etc/s6-rc/dbus-vsock/type | 1 + > .../image/etc/s6-rc/dbus-vsock/type.license | 2 + > .../etc/s6-rc/dbus/dependencies.d/dbus-vsock | 0 > img/app/image/etc/s6-rc/dbus/run | 2 - > tools/default.nix | 5 +-- > tools/xdg-desktop-portal-spectrum/meson.build | 3 -- > .../xdg-desktop-portal-spectrum.c | 45 ++++++-------------= > 15 files changed, 49 insertions(+), 42 deletions(-) > create mode 100644 img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_POR= TAL_SPECTRUM_GUEST_PORT > create mode 100644 img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_POR= TAL_SPECTRUM_GUEST_PORT.license > create mode 100644 img/app/image/etc/s6-rc/dbus-vsock/notification-fd > create mode 100644 img/app/image/etc/s6-rc/dbus-vsock/notification-fd.= license > create mode 100755 img/app/image/etc/s6-rc/dbus-vsock/run > create mode 100644 img/app/image/etc/s6-rc/dbus-vsock/type > create mode 100644 img/app/image/etc/s6-rc/dbus-vsock/type.license > create mode 100644 img/app/image/etc/s6-rc/dbus/dependencies.d/dbus-vs= ock >=20 > diff --git a/img/app/default.nix b/img/app/default.nix > index 08cb2cd..6490ac2 100644 > --- a/img/app/default.nix > +++ b/img/app/default.nix > @@ -71,6 +71,8 @@ let > pkgs.s6 > pkgs.s6-linux-init > pkgs.s6-rc > + pkgs.socat > + pkgs.systemd > pkgs.wayland-proxy-virtwl > pkgs.wireplumber > pkgs.xdg-desktop-portal > @@ -88,7 +90,7 @@ let > } '' > mkdir $out > lndir -ignorelinks -silent ${appimageFhsenv} $out > - rm $out/etc/dbus-1/session.conf > + rm $out/etc/dbus-1/session.conf $out/usr/bin/init > ''; > in > =20 > diff --git a/img/app/file-list.mk b/img/app/file-list.mk > index 0b4d3d1..6934975 100644 > --- a/img/app/file-list.mk > +++ b/img/app/file-list.mk > @@ -17,6 +17,7 @@ FILES =3D \ > image/etc/s6-linux-init/env/GTK_USE_PORTAL \ > image/etc/s6-linux-init/env/NIX_XDG_DESKTOP_PORTAL_DIR \ > image/etc/s6-linux-init/env/WAYLAND_DISPLAY \ > + image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL_SPECTRUM_GUEST_PORT \ > image/etc/s6-linux-init/env/XDG_RUNTIME_DIR \ > image/etc/s6-linux-init/run-image/service/getty-hvc0/run \ > image/etc/s6-linux-init/run-image/service/s6-linux-init-shutdownd/not= ification-fd \ > @@ -39,6 +40,10 @@ S6_RC_FILES =3D \ > image/etc/s6-rc/app/dependencies.d/wayland-proxy-virtwl \ > image/etc/s6-rc/app/run \ > image/etc/s6-rc/app/type \ > + image/etc/s6-rc/dbus-vsock/notification-fd \ > + image/etc/s6-rc/dbus-vsock/run \ > + image/etc/s6-rc/dbus-vsock/type \ > + image/etc/s6-rc/dbus/dependencies.d/dbus-vsock \ > image/etc/s6-rc/dbus/notification-fd \ > image/etc/s6-rc/dbus/run \ > image/etc/s6-rc/dbus/type \ > diff --git a/img/app/image/etc/dbus-1/session.conf b/img/app/image/etc/= dbus-1/session.conf > index 751a788..d31f4b9 100644 > --- a/img/app/image/etc/dbus-1/session.conf > +++ b/img/app/image/etc/dbus-1/session.conf > @@ -19,7 +19,6 @@ > default config file with an address override on the command > line, because command line address can only be given once. > So that's why we need a whole custom session.conf. --> > - vsock: > unix:path=3D/run/session-bus > =20 > EXTERNAL > diff --git a/img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL_SPE= CTRUM_GUEST_PORT b/img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL= _SPECTRUM_GUEST_PORT > new file mode 100644 > index 0000000..037ba97 > --- /dev/null > +++ b/img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL_SPECTRUM_G= UEST_PORT > @@ -0,0 +1 @@ > +219 > diff --git a/img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL_SPE= CTRUM_GUEST_PORT.license b/img/app/image/etc/s6-linux-init/env/XDG_DESKTO= P_PORTAL_SPECTRUM_GUEST_PORT.license > new file mode 100644 > index 0000000..0d3d47c > --- /dev/null > +++ b/img/app/image/etc/s6-linux-init/env/XDG_DESKTOP_PORTAL_SPECTRUM_G= UEST_PORT.license > @@ -0,0 +1,2 @@ > +SPDX-License-Identifier: CC0-1.0 > +SPDX-FileCopyrightText: 2025 Alyssa Ross > diff --git a/img/app/image/etc/s6-rc/dbus-vsock/notification-fd b/img/a= pp/image/etc/s6-rc/dbus-vsock/notification-fd > new file mode 100644 > index 0000000..00750ed > --- /dev/null > +++ b/img/app/image/etc/s6-rc/dbus-vsock/notification-fd > @@ -0,0 +1 @@ > +3 > diff --git a/img/app/image/etc/s6-rc/dbus-vsock/notification-fd.license= b/img/app/image/etc/s6-rc/dbus-vsock/notification-fd.license > new file mode 100644 > index 0000000..0d3d47c > --- /dev/null > +++ b/img/app/image/etc/s6-rc/dbus-vsock/notification-fd.license > @@ -0,0 +1,2 @@ > +SPDX-License-Identifier: CC0-1.0 > +SPDX-FileCopyrightText: 2025 Alyssa Ross > diff --git a/img/app/image/etc/s6-rc/dbus-vsock/run b/img/app/image/etc= /s6-rc/dbus-vsock/run > new file mode 100755 > index 0000000..37fae7d > --- /dev/null > +++ b/img/app/image/etc/s6-rc/dbus-vsock/run > @@ -0,0 +1,17 @@ > +#!/bin/execlineb -P > +# SPDX-License-Identifier: EUPL-1.2+ > +# SPDX-FileCopyrightText: 2025 Alyssa Ross > + > +if { modprobe vsock } > + > +export LISTEN_FDS 1 > +getpid LISTEN_PID > +export SYSTEMD_LOG_LEVEL notice > + > +systemd-socket-activate -l vsock::219 --now > + > +# Notify readiness. > +if { fdmove 1 3 echo } > +fdclose 3 > + > +socat ACCEPT-FD:4,fork UNIX-CONNECT:/run/session-bus > diff --git a/img/app/image/etc/s6-rc/dbus-vsock/type b/img/app/image/et= c/s6-rc/dbus-vsock/type > new file mode 100644 > index 0000000..5883cff > --- /dev/null > +++ b/img/app/image/etc/s6-rc/dbus-vsock/type > @@ -0,0 +1 @@ > +longrun > diff --git a/img/app/image/etc/s6-rc/dbus-vsock/type.license b/img/app/= image/etc/s6-rc/dbus-vsock/type.license > new file mode 100644 > index 0000000..0d3d47c > --- /dev/null > +++ b/img/app/image/etc/s6-rc/dbus-vsock/type.license > @@ -0,0 +1,2 @@ > +SPDX-License-Identifier: CC0-1.0 > +SPDX-FileCopyrightText: 2025 Alyssa Ross > diff --git a/img/app/image/etc/s6-rc/dbus/dependencies.d/dbus-vsock b/i= mg/app/image/etc/s6-rc/dbus/dependencies.d/dbus-vsock > new file mode 100644 > index 0000000..e69de29 > diff --git a/img/app/image/etc/s6-rc/dbus/run b/img/app/image/etc/s6-rc= /dbus/run > index a226abf..75e9cab 100644 > --- a/img/app/image/etc/s6-rc/dbus/run > +++ b/img/app/image/etc/s6-rc/dbus/run > @@ -2,8 +2,6 @@ > # SPDX-License-Identifier: EUPL-1.2+ > # SPDX-FileCopyrightText: 2023 Alyssa Ross > =20 > -if { modprobe vsock } > - > dbus-daemon > --config-file /etc/dbus-1/session.conf > --nofork > diff --git a/tools/default.nix b/tools/default.nix > index 18d4dd6..0492f98 100644 > --- a/tools/default.nix > +++ b/tools/default.nix > @@ -6,7 +6,7 @@ import ../lib/call-package.nix ( > { src, lib, stdenv, fetchCrate, fetchurl, runCommand, buildPackages > , meson, ninja, pkg-config, rustc > , clang-tools, clippy, jq > -, dbus, linuxHeaders > +, linuxHeaders > , clang, libbpf > , buildSupport ? false > , appSupport ? true > @@ -88,8 +88,7 @@ stdenv.mkDerivation (finalAttrs: { > ++ lib.optionals (appSupport || driverSupport) [ pkg-config ] > ++ lib.optionals hostSupport [ rustc ] > ++ lib.optionals driverSupport [ clang.cc ]; > - buildInputs =3D lib.optionals appSupport [ dbus ] > - ++ lib.optionals driverSupport [ libbpf linuxHeaders ]; > + buildInputs =3D lib.optionals driverSupport [ libbpf linuxHeaders ];= > =20 > postPatch =3D lib.optionals hostSupport (lib.concatMapStringsSep "\n= " (crate: '' > mkdir -p subprojects/packagecache > diff --git a/tools/xdg-desktop-portal-spectrum/meson.build b/tools/xdg-= desktop-portal-spectrum/meson.build > index 7c2716f..a99c66d 100644 > --- a/tools/xdg-desktop-portal-spectrum/meson.build > +++ b/tools/xdg-desktop-portal-spectrum/meson.build > @@ -1,8 +1,6 @@ > # SPDX-License-Identifier: EUPL-1.2+ > # SPDX-FileCopyrightText: 2024 Alyssa Ross > =20 > -dbus =3D dependency('dbus-1') > - > install_data('spectrum.portal', > install_dir : get_option('datadir') / 'xdg-desktop-portal/portals') > =20 > @@ -21,5 +19,4 @@ configure_file( > configuration : exe_conf_data) > =20 > executable('xdg-desktop-portal-spectrum', 'xdg-desktop-portal-spectrum= =2Ec', > - dependencies : dbus, > install : true) > diff --git a/tools/xdg-desktop-portal-spectrum/xdg-desktop-portal-spect= rum.c b/tools/xdg-desktop-portal-spectrum/xdg-desktop-portal-spectrum.c > index 690d397..3c75923 100644 > --- a/tools/xdg-desktop-portal-spectrum/xdg-desktop-portal-spectrum.c > +++ b/tools/xdg-desktop-portal-spectrum/xdg-desktop-portal-spectrum.c > @@ -1,5 +1,5 @@ > // SPDX-License-Identifier: EUPL-1.2+ > -// SPDX-FileCopyrightText: 2024 Alyssa Ross > +// SPDX-FileCopyrightText: 2024-2025 Alyssa Ross > =20 > #include > #include > @@ -8,7 +8,6 @@ > #include > #include > #include > -#include > #include > =20 > #include > @@ -16,12 +15,13 @@ > =20 > #include > =20 > -#include > - > #include "config.h" > =20 > static const uint32_t HOST_PORT =3D 219; > =20 > +static const char GUEST_PORT_ENV_VAR[] =3D > + "XDG_DESKTOP_PORTAL_SPECTRUM_GUEST_PORT"; > + > static int parse_u32(const char *s, uint32_t *v) > { > char *end; > @@ -113,36 +113,17 @@ static void check_result(int sock) > =20 > int main(void) > { > - char *addr =3D getenv("DBUS_STARTER_ADDRESS"); > - > - DBusAddressEntry **entries; > - int entries_len, i, sock; > - DBusError error; > - > - const char *port_str; > + int sock; > uint32_t port; > + char *port_str =3D getenv(GUEST_PORT_ENV_VAR); > =20 > - if (!addr) > - errx(EXIT_FAILURE, "DBUS_STARTER_ADDRESS not set"); > + if (!port_str) > + errx(EXIT_FAILURE, "%s is not set", GUEST_PORT_ENV_VAR); > =20 > - if (!dbus_parse_address(addr, &entries, &entries_len, &error)) > - errx(EXIT_FAILURE, "parsing D-Bus address '%s': %s", > - addr, error.message); > + if (parse_u32(port_str, &port) =3D=3D -1) > + err(EXIT_FAILURE, "D-Bus address vsock port"); > =20 > - for (i =3D 0; i < entries_len; i++) { > - if (strcmp(dbus_address_entry_get_method(entries[i]), "vsock")) > - continue; > - > - if (!(port_str =3D dbus_address_entry_get_value(entries[i], "port"))= ) > - errx(EXIT_FAILURE, "missing vsock port in D-Bus address '%s'", > - addr); > - > - if (parse_u32(port_str, &port) =3D=3D -1) > - err(EXIT_FAILURE, "D-Bus address vsock port"); > - > - sock =3D connect_to_host(); > - send_info(sock, port); > - check_result(sock); > - return 0; > - } > + sock =3D connect_to_host(); > + send_info(sock, port); > + check_result(sock); > } Assuming it passes tests: Acked-by: Demi Marie Obenour socat could be replaced with systemd-socket-proxyd, which avoids forking a process for each connection. That's definitely a very minor nit, though. --=20 Sincerely, Demi Marie Obenour (she/her/hers) --------------QLoDjEb8B3U4Ofd1gSHHi1TP Content-Type: application/pgp-keys; name="OpenPGP_0xB288B55FFF9C22C1.asc" Content-Disposition: attachment; filename="OpenPGP_0xB288B55FFF9C22C1.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49y B+l2nipdaq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYf bWpr/si88QKgyGSVZ7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/ UorR+FaSuVwT7rqzGrTlscnTDlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7M MPCJwI8JpPlBedRpe9tfVyfu3euTPLPxwcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9H zx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR6h3nBc3eyuZ+q62HS1pJ5EvU T1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl5FMWo8TCniHynNXs BtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2Bkg1b//r 6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nS m9BBff0Nm0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQAB zTxEZW1pIE9iZW5vdXIgKElUTCBFbWFpbCBLZXkpIDxhdGhlbmFAaW52aXNpYmxl dGhpbmdzbGFiLmNvbT7CwY4EEwEIADgWIQR2h02fEza6IlkHHHGyiLVf/5wiwQUC X6YJvQIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRCyiLVf/5wiwWRhD/0Y R+YYC5Kduv/2LBgQJIygMsFiRHbR4+tWXuTFqgrxxFSlMktZ6gQrQCWe38WnOXkB oY6n/5lSJdfnuGd2UagZ/9dkaGMUkqt+5WshLFly4BnP7pSsWReKgMP7etRTwn3S zk1OwFx2lzY1EnnconPLfPBc6rWG2moA6l0WX+3WNR1B1ndqpl2hPSjT2jUCBWDV rGOUSX7r5f1WgtBeNYnEXPBCUUM51pFGESmfHIXQrqFDA7nBNiIVFDJTmQzuEqIy Jl67pKNgooij5mKzRhFKHfjLRAH4mmWZlB9UjDStAfFBAoDFHwd1HL5VQCNQdqEc /9lZDApqWuCPadZN+pGouqLysesIYsNxUhJ7dtWOWHl0vs7/3qkWmWun/2uOJMQh ra2u8nA9g91FbOobWqjrDd6x3ZJoGQf4zLqjmn/P514gb697788e573WN/MpQ5XI Fl7aM2d6/GJiq6LC9T2gSUW4rbPBiqOCeiUx7Kd/sVm41p9TOA7fEG4bYddCfDsN xaQJH6VRK3NOuBUGeL+iQEVF5Xs6Yp+U+jwvv2M5Lel3EqAYo5xXTx4ls0xaxDCu fudcAh8CMMqx3fguSb7Mi31WlnZpk0fDuWQVNKyDP7lYpwc4nCCGNKCj622ZSocH AcQmX28L8pJdLYacv9pU3jPy4fHcQYvmTavTqowGnM08RGVtaSBNYXJpZSBPYmVu b3VyIChsb3ZlciBvZiBjb2RpbmcpIDxkZW1pb2Jlbm91ckBnbWFpbC5jb20+wsF4 BBMBAgAiBQJafgNKAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRCyiLVf /5wiwYa/EACv8a2+MMou9cSCNoZBQaU+fTmyzft9hUE+0d5W2UY1RY3OsjFIzm9R /4SVccfsqOYLEo+S0vQMIIIqFEq3FCpXXwPzyimotps05VA8U3Bd7yseojFygOgK sAMOAee2RCaDDOnoJue01dfZMzzHPO/TVdp3OvnpWipfv5G1Xg96rwbhMLE3tg6N xwAHa31Bv4/Xq8CJOoIWvx6fcmZQpz01/lSvsYn0KrfEbTKkuUf0vM9JrCTCP2oz VNN5BYzqaq2M4r+jmSyeXLim922VOWqGkUEQ85BSEemqrRS06IU6NtEMsF8EWt/b hWjk/9GDKTcnpdJHTrMxTspExBiNrvpI2t+YPU5B/dJJAUxvmhFrbSIbdB8umBZs I3AMYrEmpAbh5x7jEjoskUC7uN3o9vpg1oCLS2ePDLtAtyBtbHnkA4xGD7ar8mem xpH9lY/i+sC6CyyIUWcUDnnagKyJP0m9ks0GLsTeOCA0bft2XA6rD6aaCnMUsndT ctrab42CV5XypjmC4U1rPJ8JQJUh1/3P48/8sMH+3krxpJ06KNWNFaUbaMTGiltZ 7x9DngklSYrX0T+2G4kVXNmjaljwkoLahwLla2gUWwBSyofXdqyhQdwZsp01KXNQ UCyT/Pg+aDcm/E7OMV3d4lf7g/CSxiX2GSEe6BlhSz+Lmd7ZJ3g32M1ARGVtaSBN YXJpZSBPYmVub3VyIChJVEwgRW1haWwgS2V5KSA8ZGVtaUBpbnZpc2libGV0aGlu Z3NsYWIuY29tPsLBjgQTAQgAOBYhBHaHTZ8TNroiWQcccbKItV//nCLBBQJgOEV+ AhsDBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJELKItV//nCLBKwoP/1WSnFdv SAD0g7fD0WlF+oi7ISFT7oqJnchFLOwVHK4Jg0e4hGn1ekWsF3Ha5tFLh4V/7UUu obYJpTfBAA2CckspYBqLtKGjFxcaqjjpO1I2W/jeNELVtSYuCOZICjdNGw2Hl9yH KRZiBkqc9u8lQcHDZKq4LIpVJj6ZQV/nxttDX90ax2No1nLLQXFbr5wb465LAPpU lXwunYDij7xJGye+VUASQh9datye6orZYuJvNo8Tr3mAQxxkfR46LzWgxFCPEAZJ 5P56Nc0IMHdJZj0Uc9+1jxERhOGppp5jlLgYGK7faGB/jTV6LaRQ4Ad+xiqokDWp mUOZsmA+bMbtPfYjDZBz5mlyHcIRKIFpE1l3Y8F7PhJuzzMUKkJi90CYakCV4x/a Zs4pzk5E96c2VQx01RIEJ7fzHF7lwFdtfTS4YsLtAbQFsKayqwkGcVv2B1AHeqdo TMX+cgDvjd1ZganGlWA8Sv9RkNSMchn1hMuTwERTyFTr2dKPnQdA1F480+jUap41 ClXgn227WkCIMrNhQGNyJsnwyzi5wS8rBVRQ3BOTMyvGM07j3axUOYaejEpg7wKi wTPZGLGH1sz5GljD/916v5+v2xLbOo5606j9dWf5/tAhbPuqrQgWv41wuKDi+dDD EKkODF7DHes8No+QcHTDyETMn1RYm7t0RKR4zsFNBFp+A0oBEAC9ynZI9LU+uJkM eEJeJyQ/8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd 8xD57ue0eB47bcJvVqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPp I4gfUbVEIEQuqdqQyO4GAe+MkD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalq l1/iSyv1WYeC1OAs+2BLOAT2NEggSiVOtxEfgewsQtCWi8H1SoirakIfo45Hz0tk /Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJriwoaRIS8N2C8/nEM53jb1sH 0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcNfRAIUrNlatj9Txwi vQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6dCxN0GNA ORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog 2LNtcyCjkTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZA grrnNz0iZG2DVx46x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJ ELKItV//nCLBwNIP/AiIHE8boIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwj jVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGjgn0TPtsGzelyQHipaUzEyrsceUGWYoKX YyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8frRHnJdBcjf112PzQSdKC6kqU0 Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2E0rW4tBtDAn2HkT9 uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHMOBvy3Ehz fAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVss Z/rYZ9+51yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aW emLLszcYz/u3XnbOvUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPt hZlDnTnOT+C+OTsh8+m5tos8HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj 6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E+MYSfkEjBz0E8CLOcAw7JIwAaeBTzsFN BGbyLVgBEACqClxh50hmBepTSVlan6EBq3OAoxhrAhWZYEwN78k+ENhK68KhqC5R IsHzlL7QHW1gmfVBQZ63GnWiraM6wOJqFTL4ZWvRslga9u28FJ5XyK860mZLgYhK 9BzoUk4s+dat9jVUbq6LpQ1Ot5I9vrdzo2p1jtQ8h9WCIiFxSYy8s8pZ3hHh5T64 GIj1m/kY7lG3VIdUgoNiREGf/iOMjUFjwwE9ZoJ26j9p7p1U+TkKeF6wgswEB1T3 J8KCAtvmRtqJDq558IU5jhg5fgN+xHB8cgvUWulgK9FIF9oFxcuxtaf/juhHWKMO RtL0bHfNdXoBdpUDZE+mLBUAxF6KSsRrvx6AQyJs7VjgXJDtQVWvH0PUmTrEswgb 49nNU+dLLZQAZagxqnZ9Dp5l6GqaGZCHERJcLmdY/EmMzSf5YazJ6c0vO8rdW27M kn73qcWAplQn5mOXaqbfzWkAUPyUXppuRHfrjxTDz3GyJJVOeMmMrTxH4uCaGpOX Z8tN6829J1roGw4oKDRUQsaBAeEDqizXMPRc+6U9vI5FXzbAsb+8lKW65G7JWHym YPOGUt2hK4DdTA1PmVo0DxH00eWWeKxqvmGyX+Dhcg+5e191rPsMRGsDlH6KihI6 +3JIuc0y6ngdjcp6aalbuvPIGFrCRx3tnRtNc7He6cBWQoH9RPwluwARAQABwsOs BBgBCgAgFiEEdodNnxM2uiJZBxxxsoi1X/+cIsEFAmbyLVgCGwICQAkQsoi1X/+c IsHBdCAEGQEKAB0WIQSilC2pUlbVp66j3+yzNoc6synyUwUCZvItWAAKCRCzNoc6 synyU85gD/0T1QDtPhovkGwoqv4jUbEMMvpeYQf+oWgm/TjWPeLwdjl7AtY0G9Ml ZoyGniYkoHi37Gnn/ShLT3B5vtyI58ap2+SSa8SnGftdAKRLiWFWCiAEklm9FRk8 N3hwxhmSFF1KR/AIDS4g+HIsZn7YEMubBSgLlZZ9zHl4O4vwuXlREBEW97iL/FSt VownU2V39t7PtFvGZNk+DJH7eLO3jmNRYB0PL4JOyyda3NH/J92iwrFmjFWWmmWb /Xz8l9DIs+Z59pRCVTTwbBEZhcUc7rVMCcIYL+q1WxBG2e6lMn15OQJ5WfiE6E0I sGirAEDnXWx92JNGx5l+mMpdpsWhBZ5iGTtttZesibNkQfd48/eCgFi4cxJUC4PT UQwfD9AMgzwSTGJrkI5XGy+XqxwOjL8UA0iIrtTpMh49zw46uV6kwFQCgkf32jZM OLwLTNSzclbnA7GRd8tKwezQ/XqeK3dal2n+cOr+o+Eka7yGmGWNUqFbIe8cjj9T JeF3mgOCmZOwMI+wIcQYRSf+e5VTMO6TNWH5BI3vqeHSt7HkYuPlHT0pGum88d4a pWqhulH4rUhEMtirX1hYx8Q4HlUOQqLtxzmwOYWkhl1C+yPObAvUDNiHCLf9w28n uihgEkzHt9J4VKYulyJM9fe3ENcyU6rpXD7iANQqcr87ogKXFxknZ97uEACvSucc RbnnAgRqZ7GDzgoBerJ2zrmhLkeREZ08iz1zze1JgyW3HEwdr2UbyAuqvSADCSUU GN0vtQHsPzWl8onRc7lOPqPDF8OO+UfN9NAfA4wl3QyChD1GXl9rwKQOkbvdlYFV UFx9u86LNi4ssTmU8p9NtHIGpz1SYMVYNoYy9NU7EVqypGMguDCL7gJt6GUmA0sw p+YCroXiwL2BJ7RwRqTpgQuFL1gShkA17D5jK4mDPEetq1d8kz9rQYvAR/sTKBsR ImC3xSfn8zpWoNTTB6lnwyP5Ng1bu6esS7+SpYprFTe7ZqGZF6xhvBPf1Ldi9UAm U2xPN1/eeWxEa2kusidmFKPmN8lcT4miiAvwGxEnY7Oww9CgZlUB+LP4dl5VPjEt sFeAhrgxLdpVTjPRRwTd9VQF3/XYl83j5wySIQKIPXgT3sG3ngAhDhC8I8GpM36r 8WJJ3x2yVzyJUbBPO0GBhWE2xPNIfhxVoU4cGGhpFqz7dPKSTRDGq++MrFgKKGpI ZwT3CPTSSKc7ySndEXWkOYArDIdtyxdE1p5/c3aoz4utzUU7NDHQ+vVIwlnZSMiZ jek2IJP3SZ+COOIHCVxpUaZ4lnzWT4eDqABhMLpIzw6NmGfg+kLBJhouqz81WITr EtJuZYM5blWncBOJCoWMnBEcTEo/viU3GgcVRw=3D=3D =3Dx94R -----END PGP PUBLIC KEY BLOCK----- --------------QLoDjEb8B3U4Ofd1gSHHi1TP-- --------------3N0cxPX0dQ9T30Xcbzdgt1v4-- --------------7yFz6N4h7Hgowg497ejzDHeo Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmkbn4MACgkQszaHOrMp 8lPlthAAn4+7A1l9ky6T9jzqVX4UnVNU4mpswaEHmAxTV3SzuSJeGaJ2eRvuijjM jQu1P5RtNs0iU9mbYo04C4Y/RYCQvbKZMQHNF3g0BuFJq6kwV1Ebnx+0QTnxOHOS rOcC9mFMBnfUoHi6wK5JhMiYZQ3+8oeb7yEDJngnbvB7ZMLWvIvSWX0kSnOUWURH NCVRTZ2FdU/71d1blqz1W7aFb3Zf+YmZoIj+Q6/9rKg1QbywE+iN2SikXAAmX154 3Oz95ZCnFvRiUH7Xl6gLM/rtMLLSimgjj0LIQpezX6e0cnhZYmT9rn5NP+/Rnhs/ KikkZG5ZedjeKTSQ6FZryWmyAgRUvVUGzla5BFld/YHGnrBsXa93Z5vYgdCNTLuP 0W4ucmeTnfXMHNKsVEEEZVaUBt3Lr6N+anwGu0sDhK9KRTfdEcUIm/ACRZx/Hfub qD8C8r0bPZUAj0M30V6tEmA1uplwowii/52Qz/CDfYbvKOOi7+bpu0fPgbFj3Lb0 5deIGb5ykE+wDaMq29+SJykIkckA8yamD6pDJ2eHHdXGmWsh8LXFz4VCCo6pZ7NU npMbbi6Akz5JUT8mShcV6MuX15yMtWsl3htsYR62vYGCtxtTVoXiiJU+C82TwThQ ABiW136eHYgjR2hDgmpQiw27VaTbFE6hII9Seaxid0g9yvy41KU= =9ECS -----END PGP SIGNATURE----- --------------7yFz6N4h7Hgowg497ejzDHeo--