daily autocommit

committing changes in /etc made by "apt install libreoffice"
Packages with configuration changes: +ca-certificates-java 20190909 all +firebird3.0-common 3.0.7.33374.ds4-2 all +fonts-crosextra-carlito 20130920-1.1 all +fonts-linuxlibertine 5.3.0-6 all +fonts-noto-core 20201225-1 all +libbcprov-java 1.68-2 all +libxml-commons-resolver1.1-java 1.2-11 all +mariadb-common 1:10.5.15-0+deb11u1 all +mysql-common 5.8+1.0.7 all +openjdk-11-jre-headless 11.0.16+8-1~deb11u1 amd64 Package changes: +ant 1.10.9-4 all +ant-optional 1.10.9-4 all +ca-certificates-java 20190909 all +default-jre 2:1.11-72 amd64 +default-jre-headless 2:1.11-72 amd64 +firebird3.0-common 3.0.7.33374.ds4-2 all +firebird3.0-common-doc 3.0.7.33374.ds4-2 all +firebird3.0-server-core 3.0.7.33374.ds4-2 amd64 +firebird3.0-utils 3.0.7.33374.ds4-2 amd64 +fonts-crosextra-caladea 20130214-2.1 all +fonts-crosextra-carlito 20130920-1.1 all +fonts-linuxlibertine 5.3.0-6 all +fonts-noto-core 20201225-1 all +fonts-noto-extra 20201225-1 all +fonts-noto-ui-core 20201225-1 all +fonts-sil-gentium 20081126:1.03-4 all +fonts-sil-gentium-basic 1.102-1.1 all +java-common 0.72 all +libactivation-java 1.2.0-2 all +libaopalliance-java 20070526-6 all +libapache-poi-java 4.0.1-1 all +libapache-pom-java 18-1 all +libargs4j-java 2.33-1.1 all +libatinject-jsr330-api-java 1.0+ds1-5 all +libatk-wrapper-java 0.38.0-2+deb11u1 all +libatk-wrapper-java-jni 0.38.0-2+deb11u1 amd64 +libbase-java 1.1.6-2.1 all +libbcmail-java 1.68-2 all +libbcpkix-java 1.68-2 all +libbcprov-java 1.68-2 all +libbsh-java 2.0b4-20 all +libcdi-api-java 1.2-3 all +libcodemodel-java 2.6+jaxb2.3.0.1-10 all +libcommons-cli-java 1.4-2 all +libcommons-codec-java 1.15-1 all +libcommons-collections3-java 3.2.2-2 all +libcommons-collections4-java 4.2-1 all +libcommons-compress-java 1.20-1 all +libcommons-io-java 2.8.0-1 all +libcommons-lang3-java 3.11-1 all +libcommons-logging-java 1.2-2 all +libcommons-math3-java 3.6.1-3 all +libcommons-parent-java 43-1 all +libcurvesapi-java 1.06-1 all +libdom4j-java 2.1.3-1 all +libdtd-parser-java 1.2-1 all +libehcache-java 2.6.11-5 all +libel-api-java 3.0.0-3 all +libfastinfoset-java 1.2.12-3 all +libfbclient2 3.0.7.33374.ds4-2 amd64 +libflute-java 1:1.1.6-4 all +libfonts-java 1.1.6.dfsg-3.1 all +libformula-java 1.1.7.dfsg-2.1 all +libgeronimo-annotation-1.3-spec-java 1.3-1 all +libgeronimo-interceptor-3.0-spec-java 1.0.1-4 all +libgif7 5.1.9-2 amd64 +libguava-java 29.0-6 all +libguice-java 4.2.3-2 all +libhawtjni-runtime-java 1.17-1 all +libhsqldb1.8.0-java 1.8.0.10+dfsg-10 all +libhttpclient-java 4.5.13-2 all +libhttpcore-java 4.4.14-1 all +libib-util 3.0.7.33374.ds4-2 amd64 +libicu4j-java 68.2-2 all +libintellij-annotations-java 20.1.0-1 all +libistack-commons-java 3.0.6-5 all +libitext-java 2.1.7-12 all +libjansi-java 1.18-1 all +libjansi-native-java 1.8-1 all +libjaxb-api-java 2.3.1-1 all +libjaxb-java 2.3.0.1-10 all +libjaxen-java 1.1.6-4 all +libjcommon-java 1.0.23-2 all +libjdom1-java 1.1.3-2.1 all +libjetbrains-annotations-java 20.1.0-1 all +libjsoup-java 1.10.2-2 all +libjsp-api-java 2.3.4-3 all +libjsr305-java 0.1~+svn49-11 all +liblayout-java 0.2.10-3.1 all +libloader-java 1.1.6.dfsg-4.1 all +liblog4j1.2-java 1.2.17-10+deb11u1 all +libmail-java 1.6.5-1 all +libmariadb3 1:10.5.15-0+deb11u1 amd64 +libmaven-file-management-java 3.0.0-1 all +libmaven-parent-java 31-2 all +libmaven-resolver-java 1.4.2-3 all +libmaven-shared-io-java 3.0.0-3 all +libmaven-shared-utils-java 3.3.0-1+deb11u1 all +libmaven3-core-java 3.6.3-5 all +libpentaho-reporting-flow-engine-java 0.9.4-5.1 all +libpixie-java 1:1.1.6-3.1 all +libplexus-archiver-java 3.6.0-2 all +libplexus-cipher-java 1.8-2 all +libplexus-classworlds-java 2.6.0-1 all +libplexus-component-annotations-java 2.1.0-1 all +libplexus-interpolation-java 1.26-1 all +libplexus-io-java 3.2.0-1.1 all +libplexus-sec-dispatcher-java 1.4-4 all +libplexus-utils2-java 3.3.0-1 all +librelaxng-datatype-java 1.0+ds1-3.1 all +libreoffice 1:7.0.4-4+deb11u4 amd64 +libreoffice-base 1:7.0.4-4+deb11u4 amd64 +libreoffice-base-drivers 1:7.0.4-4+deb11u4 amd64 +libreoffice-java-common 1:7.0.4-4+deb11u4 all +libreoffice-nlpsolver 0.9+LibO7.0.4-4+deb11u4 all +libreoffice-report-builder 1:7.0.4-4+deb11u4 all +libreoffice-report-builder-bin 1:7.0.4-4+deb11u4 amd64 +libreoffice-script-provider-bsh 1:7.0.4-4+deb11u4 all +libreoffice-script-provider-js 1:7.0.4-4+deb11u4 all +libreoffice-script-provider-python 1:7.0.4-4+deb11u4 all +libreoffice-sdbc-firebird 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-hsqldb 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-mysql 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-postgresql 1:7.0.4-4+deb11u4 amd64 +libreoffice-wiki-publisher 1.2.0+LibO7.0.4-4+deb11u4 all +librepository-java 1.1.6-4 all +librngom-java 2.3.0.1-10 all +libsac-java 1.3+dfsg-5.1 all +libsaxonhe-java 9.9.1.5+dfsg-1 all +libserializer-java 1.1.6-6 all +libservlet-api-java 4.0.1-2 all +libservlet3.1-java 1:4.0.1-2 all +libsisu-inject-java 0.3.4-2 all +libsisu-plexus-java 0.3.4-3 all +libslf4j-java 1.7.30-1 all +libsnappy-java 1.1.8.3-1 all +libsnappy-jni 1.1.8.3-1 amd64 +libstax-ex-java 1.7.8-3 all +libstreambuffer-java 1.5.4-1.1 all +libtommath1 1.2.0-6 amd64 +libtxw2-java 2.3.0.1-10 all +libunoil-java 1:7.0.4-4+deb11u4 all +libwagon-http-java 3.3.4-1 all +libwagon-provider-api-java 3.3.4-1 all +libwebsocket-api-java 1.1-2 all +libxerces2-java 2.12.1-1 all +libxml-commons-external-java 1.4.01-5 all +libxml-commons-resolver1.1-java 1.2-11 all +libxml-java 1.1.6.dfsg-3.1 all +libxmlbeans-java 3.0.2-1 all +libxom-java 1.2.10-1.1 all +libxsom-java 2.3.0.1-10 all +libxz-java 1.8-2 all +mariadb-common 1:10.5.15-0+deb11u1 all +mysql-common 5.8+1.0.7 all +openjdk-11-jre 11.0.16+8-1~deb11u1 amd64 +openjdk-11-jre-headless 11.0.16+8-1~deb11u1 amd64
2022-12-03 17:47:27 +01:00 · 2022-12-02 17:20:32 +01:00 · 2022-12-02 17:17:50 +01:00 · 2022-11-30 16:26:53 +01:00 · 2022-11-30 16:09:35 +01:00 · 2022-11-30 09:58:45 +01:00
269 changed files with 13515 additions and 397 deletions
@@ -11,14 +11,14 @@ mkdir -p './X11/xorg.conf.d'
 mkdir -p './apparmor.d/force-complain'
 mkdir -p './apt/auth.conf.d'
 mkdir -p './apt/listchanges.conf.d'
 mkdir -p './apt/preferences.d'
 mkdir -p './avahi/services'
 mkdir -p './binfmt.d'
 mkdir -p './ca-certificates/update.d'
 mkdir -p './cups/interfaces'
 mkdir -p './cups/ssl'
 mkdir -p './dbus-1/session.d'
 mkdir -p './dconf/db'
 mkdir -p './gconf/gconf.xml.defaults'
 mkdir -p './gconf/gconf.xml.mandatory'
 mkdir -p './glvnd/egl_vendor.d'
 mkdir -p './gss/mech.d'
 mkdir -p './initramfs-tools/hooks'
@@ -34,9 +34,11 @@ mkdir -p './initramfs-tools/scripts/nfs-top'
 mkdir -p './initramfs-tools/scripts/panic'
 mkdir -p './kernel/install.d'
 mkdir -p './libpaper.d'
 mkdir -p './mate-settings-daemon/xrandr'
 mkdir -p './modprobe.d'
 mkdir -p './mysql/mariadb.conf.d'
 mkdir -p './network/interfaces.d'
 mkdir -p './openvpn/client'
 mkdir -p './openvpn/server'
 mkdir -p './polkit-1/localauthority/10-vendor.d'
 mkdir -p './polkit-1/localauthority/20-org.d'
 mkdir -p './polkit-1/localauthority/30-site.d'
@@ -63,6 +65,10 @@ mkdir -p './vulkan/implicit_layer.d'
 maybe chmod 0755 '.'
 maybe chmod 0700 '.etckeeper'
 maybe chmod 0644 '.gitignore'
 maybe chmod 0755 '.java'
 maybe chmod 0755 '.java/.systemPrefs'
 maybe chmod 0644 '.java/.systemPrefs/.system.lock'
 maybe chmod 0644 '.java/.systemPrefs/.systemRootModFile'
 maybe chmod 0755 'ImageMagick-6'
 maybe chmod 0644 'ImageMagick-6/coder.xml'
 maybe chmod 0644 'ImageMagick-6/colors.xml'
@@ -92,7 +98,10 @@ maybe chmod 0755 'NetworkManager/dnsmasq-shared.d'
 maybe chmod 0755 'NetworkManager/dnsmasq.d'
 maybe chmod 0755 'NetworkManager/system-connections'
 maybe chmod 0600 'NetworkManager/system-connections/Funknetzwerkverbindung 1.nmconnection'
 maybe chmod 0600 'NetworkManager/system-connections/Kabelgebundene Verbindung 1.nmconnection'
 maybe chmod 0600 'NetworkManager/system-connections/Wired connection 1'
 maybe chmod 0600 'NetworkManager/system-connections/vmpfsense-UDP4-1194-mende-2.5.0.nmconnection'
 maybe chmod 0600 'NetworkManager/system-connections/vmpfsense-UDP4-1195-mende-adm-config (1).nmconnection'
 maybe chmod 0755 'PackageKit'
 maybe chmod 0644 'PackageKit/PackageKit.conf'
 maybe chmod 0644 'PackageKit/Vendor.conf'
@@ -140,6 +149,7 @@ maybe chmod 0644 'X11/app-defaults/UXTerm'
 maybe chmod 0644 'X11/app-defaults/UXTerm-color'
 maybe chmod 0644 'X11/app-defaults/Viewres'
 maybe chmod 0644 'X11/app-defaults/Viewres-color'
 maybe chmod 0644 'X11/app-defaults/Vncviewer'
 maybe chmod 0644 'X11/app-defaults/XCalc'
 maybe chmod 0644 'X11/app-defaults/XCalc-color'
 maybe chmod 0644 'X11/app-defaults/XClipboard'
@@ -443,6 +453,7 @@ maybe chmod 0644 'apparmor.d/abstractions/smbpass'
 maybe chmod 0644 'apparmor.d/abstractions/ssl_certs'
 maybe chmod 0644 'apparmor.d/abstractions/ssl_keys'
 maybe chmod 0644 'apparmor.d/abstractions/svn-repositories'
 maybe chmod 0644 'apparmor.d/abstractions/tor'
 maybe chmod 0644 'apparmor.d/abstractions/ubuntu-bittorrent-clients'
 maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers'
 maybe chmod 0755 'apparmor.d/abstractions/ubuntu-browsers.d'
@@ -489,6 +500,9 @@ maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'
 maybe chmod 0644 'apparmor.d/local/lsb_release'
 maybe chmod 0644 'apparmor.d/local/nvidia_modprobe'
 maybe chmod 0644 'apparmor.d/local/system_tor'
 maybe chmod 0644 'apparmor.d/local/torbrowser.Browser.firefox'
 maybe chmod 0644 'apparmor.d/local/torbrowser.Tor.tor'
 maybe chmod 0644 'apparmor.d/local/usr.bin.man'
 maybe chmod 0644 'apparmor.d/local/usr.bin.thunderbird'
 maybe chmod 0644 'apparmor.d/local/usr.lib.libreoffice.program.oosplash'
@@ -500,6 +514,9 @@ maybe chmod 0644 'apparmor.d/local/usr.sbin.cupsd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.ntpd'
 maybe chmod 0644 'apparmor.d/lsb_release'
 maybe chmod 0644 'apparmor.d/nvidia_modprobe'
 maybe chmod 0644 'apparmor.d/system_tor'
 maybe chmod 0644 'apparmor.d/torbrowser.Browser.firefox'
 maybe chmod 0644 'apparmor.d/torbrowser.Tor.tor'
 maybe chmod 0755 'apparmor.d/tunables'
 maybe chmod 0644 'apparmor.d/tunables/alias'
 maybe chmod 0644 'apparmor.d/tunables/apparmorfs'
@@ -519,6 +536,7 @@ maybe chmod 0644 'apparmor.d/tunables/run'
 maybe chmod 0644 'apparmor.d/tunables/securityfs'
 maybe chmod 0644 'apparmor.d/tunables/share'
 maybe chmod 0644 'apparmor.d/tunables/sys'
 maybe chmod 0644 'apparmor.d/tunables/torbrowser'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs'
 maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local'
@@ -552,12 +570,15 @@ maybe chmod 0755 'apt/auth.conf.d'
 maybe chmod 0644 'apt/listchanges.conf'
 maybe chmod 0755 'apt/listchanges.conf.d'
 maybe chmod 0755 'apt/preferences.d'
 maybe chmod 0644 'apt/preferences.d/tor'
 maybe chmod 0644 'apt/sources.list'
 maybe chmod 0755 'apt/sources.list.d'
 maybe chmod 0644 'apt/sources.list.d/docker.list'
 maybe chmod 0644 'apt/sources.list.d/google-chrome.list'
 maybe chmod 0644 'apt/sources.list.d/lutris.list'
 maybe chmod 0644 'apt/sources.list.d/spotify.list'
 maybe chmod 0644 'apt/sources.list.d/steam.list'
 maybe chmod 0644 'apt/sources.list.d/unstable.list'
 maybe chmod 0644 'apt/sources.list.d/winehq-bullseye.sources'
 maybe chmod 0644 'apt/trusted.gpg'
 maybe chmod 0755 'apt/trusted.gpg.d'
@@ -570,8 +591,10 @@ maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-buster-stable.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-stable.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/google-chrome.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/lutris.asc'
 maybe chmod 0644 'apt/trusted.gpg.d/spotify-2021-10-27-5E3C45D7B312C643.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/steam.gpg'
 maybe chmod 0755 'avahi'
 maybe chmod 0755 'avahi/avahi-autoipd.action'
@@ -591,6 +614,7 @@ maybe chmod 0644 'bluetooth/network.conf'
 maybe chmod 0755 'ca-certificates'
 maybe chmod 0644 'ca-certificates.conf'
 maybe chmod 0755 'ca-certificates/update.d'
 maybe chmod 0755 'ca-certificates/update.d/jks-keystore'
 maybe chgrp 'dip' 'chatscripts'
 maybe chmod 2750 'chatscripts'
 maybe chmod 0644 'chatscripts/gprs'
@@ -601,6 +625,8 @@ maybe chmod 0775 'check_mk'
 maybe chmod 0640 'check_mk/cmk-update-agent.cfg'
 maybe chmod 0640 'check_mk/docker.cfg'
 maybe chmod 0640 'check_mk/mk_inventory.cfg'
 maybe chmod 0644 'check_mk/super-server.cfg'
 maybe chmod 0644 'check_mk/xinetd-service-template.cfg'
 maybe chmod 0600 'cmk-update-agent.state'
 maybe chmod 0755 'console-setup'
 maybe chmod 0644 'console-setup/cached_Lat15-Fixed16.psf.gz'
@@ -662,6 +688,7 @@ maybe chmod 0755 'cron.weekly'
 maybe chmod 0644 'cron.weekly/.placeholder'
 maybe chmod 0755 'cron.weekly/0anacron'
 maybe chmod 0755 'cron.weekly/man-db'
 maybe chmod 0755 'cron.weekly/tor'
 maybe chmod 0644 'crontab'
 maybe chmod 0755 'cruft'
 maybe chmod 0755 'cruft/filters-unex'
@@ -709,11 +736,12 @@ maybe chmod 0644 'default/anacron'
 maybe chmod 0644 'default/apache-htcacheclean'
 maybe chmod 0644 'default/avahi-daemon'
 maybe chmod 0644 'default/bluetooth'
 maybe chmod 0600 'default/cacerts'
 maybe chmod 0644 'default/console-setup'
 maybe chmod 0644 'default/cron'
 maybe chmod 0644 'default/cryptdisks'
 maybe chmod 0644 'default/dbus'
-maybe chmod 0644 'default/docker'
+maybe chmod 0644 'default/google-chrome'
 maybe chmod 0644 'default/grub'
 maybe chmod 0755 'default/grub.d'
 maybe chmod 0644 'default/grub.d/init-select.cfg'
@@ -725,10 +753,12 @@ maybe chmod 0644 'default/nfs-common'
 maybe chmod 0644 'default/nss'
 maybe chmod 0644 'default/ntp'
 maybe chmod 0644 'default/omd'
 maybe chmod 0644 'default/openvpn'
 maybe chmod 0644 'default/rpcbind'
 maybe chmod 0644 'default/rsync'
 maybe chmod 0644 'default/saned'
 maybe chmod 0644 'default/ssh'
 maybe chmod 0644 'default/tor'
 maybe chmod 0644 'default/useradd'
 maybe chmod 0644 'default/xinetd'
 maybe chmod 0644 'deluser.conf'
@@ -773,6 +803,7 @@ maybe chmod 0755 'etckeeper/commit.d/30darcs-add'
 maybe chmod 0755 'etckeeper/commit.d/30git-add'
 maybe chmod 0755 'etckeeper/commit.d/30hg-addremove'
 maybe chmod 0755 'etckeeper/commit.d/50vcs-commit'
 maybe chmod 0755 'etckeeper/commit.d/60-push'
 maybe chmod 0755 'etckeeper/commit.d/99push'
 maybe chmod 0644 'etckeeper/commit.d/README'
 maybe chmod 0755 'etckeeper/daily'
@@ -814,6 +845,11 @@ maybe chmod 0644 'etckeeper/update-ignore.d/README'
 maybe chmod 0755 'etckeeper/vcs.d'
 maybe chmod 0755 'etckeeper/vcs.d/50vcs-cmd'
 maybe chmod 0644 'ethertypes'
 maybe chmod 0755 'firebird'
 maybe chmod 0755 'firebird/3.0'
 maybe chmod 0644 'firebird/3.0/fbintl.conf'
 maybe chmod 0644 'firebird/3.0/firebird.conf'
 maybe chmod 0644 'firebird/3.0/plugins.conf'
 maybe chmod 0755 'firefox-esr'
 maybe chmod 0644 'firefox-esr/firefox-esr.js'
 maybe chmod 0755 'fonts'
@@ -824,17 +860,23 @@ maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/30-0-google-crosextra-carlito-fontconfig.conf'
 maybe chmod 0644 'fonts/conf.avail/30-droid-noto-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/30-droid-noto.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/62-google-crosextra-carlito-fontconfig.conf'
 maybe chmod 0644 'fonts/conf.avail/65-droid-sans-fallback.conf'
 maybe chmod 0755 'fonts/conf.d'
 maybe chmod 0644 'fonts/conf.d/README'
 maybe chmod 0644 'fonts/fonts.conf'
 maybe chmod 0755 'forticlient'
 maybe chmod 0600 'forticlient/config.db'
 maybe chmod 0644 'forticlient/custom_machine_id.conf'
 maybe chmod 0644 'fstab'
 maybe chmod 0644 'fuse.conf'
 maybe chmod 0755 'fwupd'
@@ -854,6 +896,8 @@ maybe chmod 0755 'gconf'
 maybe chmod 0755 'gconf/2'
 maybe chmod 0644 'gconf/2/evoldap.conf'
 maybe chmod 0644 'gconf/2/path'
 maybe chmod 0755 'gconf/gconf.xml.defaults'
 maybe chmod 0755 'gconf/gconf.xml.mandatory'
 maybe chmod 0755 'ghostscript'
 maybe chmod 0755 'ghostscript/cidfmap.d'
 maybe chmod 0644 'ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf'
@@ -908,7 +952,6 @@ maybe chmod 0644 'hosts.deny'
 maybe chmod 0644 'idmapd.conf'
 maybe chmod 0755 'ifplugd'
 maybe chmod 0755 'ifplugd/action.d'
 maybe chmod 0755 'init'
 maybe chmod 0755 'init.d'
 maybe chmod 0755 'init.d/alsa-utils'
 maybe chmod 0755 'init.d/anacron'
@@ -917,7 +960,10 @@ maybe chmod 0755 'init.d/apache2'
 maybe chmod 0755 'init.d/apparmor'
 maybe chmod 0755 'init.d/avahi-daemon'
 maybe chmod 0755 'init.d/bluetooth'
-maybe chmod 0755 'init.d/check-mk-free-2.0.0p24'
+maybe chmod 0755 'init.d/check-mk-free-2.1.0p15'
 maybe chmod 0755 'init.d/check-mk-free-2.1.0p6'
 maybe chmod 0755 'init.d/check-mk-free-2.1.0p8'
 maybe chmod 0755 'init.d/check-mk-free-2.1.0p9'
 maybe chmod 0755 'init.d/console-setup.sh'
 maybe chmod 0755 'init.d/cron'
 maybe chmod 0755 'init.d/cryptdisks'
@@ -925,7 +971,6 @@ maybe chmod 0755 'init.d/cryptdisks-early'
 maybe chmod 0755 'init.d/cups'
 maybe chmod 0755 'init.d/cups-browsed'
 maybe chmod 0755 'init.d/dbus'
 maybe chmod 0755 'init.d/docker'
 maybe chmod 0755 'init.d/ftscanhv'
 maybe chmod 0755 'init.d/ftsprhv'
 maybe chmod 0755 'init.d/hwclock.sh'
@@ -937,6 +982,8 @@ maybe chmod 0755 'init.d/lvm2-lvmpolld'
 maybe chmod 0755 'init.d/networking'
 maybe chmod 0755 'init.d/nfs-common'
 maybe chmod 0755 'init.d/ntp'
 maybe chmod 0755 'init.d/openvpn'
 maybe chmod 0755 'init.d/pcscd'
 maybe chmod 0755 'init.d/plymouth'
 maybe chmod 0755 'init.d/plymouth-log'
 maybe chmod 0755 'init.d/postfix'
@@ -951,13 +998,13 @@ maybe chmod 0755 'init.d/speech-dispatcher'
 maybe chmod 0755 'init.d/ssh'
 maybe chmod 0755 'init.d/sudo'
 maybe chmod 0755 'init.d/systune'
 maybe chmod 0755 'init.d/tor'
 maybe chmod 0755 'init.d/udev'
 maybe chmod 0755 'init.d/unattended-upgrades'
 maybe chmod 0755 'init.d/uuidd'
 maybe chmod 0755 'init.d/vmware-USBArbitrator'
 maybe chmod 0755 'init.d/x11-common'
 maybe chmod 0755 'init.d/xinetd'
 maybe chmod 0644 'init/docker.conf'
 maybe chmod 0755 'initramfs-tools'
 maybe chmod 0755 'initramfs-tools/conf.d'
 maybe chmod 0644 'initramfs-tools/conf.d/resume'
@@ -998,6 +1045,41 @@ maybe chmod 0755 'iproute2/rt_tables.d'
 maybe chmod 0644 'iproute2/rt_tables.d/README'
 maybe chmod 0644 'issue'
 maybe chmod 0644 'issue.net'
 maybe chmod 0755 'java'
 maybe chmod 0755 'java-11-openjdk'
 maybe chmod 0644 'java-11-openjdk/accessibility.properties'
 maybe chmod 0755 'java-11-openjdk/jfr'
 maybe chmod 0644 'java-11-openjdk/jfr/default.jfc'
 maybe chmod 0644 'java-11-openjdk/jfr/profile.jfc'
 maybe chmod 0644 'java-11-openjdk/jvm-amd64.cfg'
 maybe chmod 0644 'java-11-openjdk/logging.properties'
 maybe chmod 0755 'java-11-openjdk/management'
 maybe chmod 0644 'java-11-openjdk/management/jmxremote.access'
 maybe chmod 0644 'java-11-openjdk/management/management.properties'
 maybe chmod 0644 'java-11-openjdk/net.properties'
 maybe chmod 0644 'java-11-openjdk/psfont.properties.ja'
 maybe chmod 0644 'java-11-openjdk/psfontj2d.properties'
 maybe chmod 0755 'java-11-openjdk/security'
 maybe chmod 0644 'java-11-openjdk/security/blocked.certs'
 maybe chmod 0644 'java-11-openjdk/security/default.policy'
 maybe chmod 0644 'java-11-openjdk/security/java.policy'
 maybe chmod 0644 'java-11-openjdk/security/java.security'
 maybe chmod 0644 'java-11-openjdk/security/nss.cfg'
 maybe chmod 0755 'java-11-openjdk/security/policy'
 maybe chmod 0644 'java-11-openjdk/security/policy/README.txt'
 maybe chmod 0755 'java-11-openjdk/security/policy/limited'
 maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_US_export.policy'
 maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_local.policy'
 maybe chmod 0644 'java-11-openjdk/security/policy/limited/exempt_local.policy'
 maybe chmod 0755 'java-11-openjdk/security/policy/unlimited'
 maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_US_export.policy'
 maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_local.policy'
 maybe chmod 0644 'java-11-openjdk/security/public_suffix_list.dat'
 maybe chmod 0644 'java-11-openjdk/sound.properties'
 maybe chmod 0644 'java-11-openjdk/swing.properties'
 maybe chmod 0755 'java/security'
 maybe chmod 0755 'java/security/security.d'
 maybe chmod 0644 'java/security/security.d/2000-org.bouncycastle.jce.provider.BouncyCastleProvider'
 maybe chmod 0755 'kernel'
 maybe chmod 0644 'kernel-img.conf'
 maybe chmod 0755 'kernel/install.d'
@@ -1022,6 +1104,7 @@ maybe chmod 0644 'libaudit.conf'
 maybe chmod 0755 'libblockdev'
 maybe chmod 0755 'libblockdev/conf.d'
 maybe chmod 0644 'libblockdev/conf.d/00-default.cfg'
 maybe chmod 0644 'libccid_Info.plist'
 maybe chmod 0755 'libnl-3'
 maybe chmod 0644 'libnl-3/classid'
 maybe chmod 0644 'libnl-3/pktloc'
@@ -1031,6 +1114,7 @@ maybe chmod 0644 'libreoffice/psprint.conf'
 maybe chmod 0755 'libreoffice/registry'
 maybe chmod 0644 'libreoffice/registry/Langpack-de.xcd'
 maybe chmod 0644 'libreoffice/registry/Langpack-en-US.xcd'
 maybe chmod 0644 'libreoffice/registry/base.xcd'
 maybe chmod 0644 'libreoffice/registry/calc.xcd'
 maybe chmod 0644 'libreoffice/registry/draw.xcd'
 maybe chmod 0644 'libreoffice/registry/graphicfilter.xcd'
@@ -1040,7 +1124,9 @@ maybe chmod 0644 'libreoffice/registry/main.xcd'
 maybe chmod 0644 'libreoffice/registry/math.xcd'
 maybe chmod 0644 'libreoffice/registry/ogltrans.xcd'
 maybe chmod 0644 'libreoffice/registry/pdfimport.xcd'
 maybe chmod 0644 'libreoffice/registry/postgresql.xcd'
 maybe chmod 0644 'libreoffice/registry/pyuno.xcd'
 maybe chmod 0644 'libreoffice/registry/reportbuilder.xcd'
 maybe chmod 0755 'libreoffice/registry/res'
 maybe chmod 0644 'libreoffice/registry/res/fcfg_langpack_de.xcd'
 maybe chmod 0644 'libreoffice/registry/res/fcfg_langpack_en-US.xcd'
@@ -1079,6 +1165,7 @@ maybe chmod 0644 'logrotate.d/ppp'
 maybe chmod 0644 'logrotate.d/rsyslog'
 maybe chmod 0644 'logrotate.d/sane-utils'
 maybe chmod 0644 'logrotate.d/speech-dispatcher'
 maybe chmod 0644 'logrotate.d/tor'
 maybe chmod 0644 'logrotate.d/unattended-upgrades'
 maybe chmod 0644 'logrotate.d/wtmp'
 maybe chmod 0755 'lvm'
@@ -1105,6 +1192,7 @@ maybe chmod 0644 'manpath.config'
 maybe chmod 0755 'mate'
 maybe chmod 0755 'mate-settings-daemon'
 maybe chmod 0755 'mate-settings-daemon/xrandr'
 maybe chmod 0644 'mate-settings-daemon/xrandr/monitors.xml'
 maybe chmod 0644 'mate/defaults.list'
 maybe chmod 0755 'menu'
 maybe chmod 0755 'menu-methods'
@@ -1125,6 +1213,13 @@ maybe chmod 0644 'modules'
 maybe chmod 0755 'modules-load.d'
 maybe chmod 0644 'modules-load.d/cups-filters.conf'
 maybe chmod 0644 'motd'
 maybe chmod 0755 'mysql'
 maybe chmod 0755 'mysql/conf.d'
 maybe chmod 0644 'mysql/conf.d/mysql.cnf'
 maybe chmod 0644 'mysql/conf.d/mysqldump.cnf'
 maybe chmod 0644 'mysql/mariadb.cnf'
 maybe chmod 0755 'mysql/mariadb.conf.d'
 maybe chmod 0644 'mysql/my.cnf.fallback'
 maybe chmod 0644 'nanorc'
 maybe chmod 0644 'neofetch'
 maybe chmod 0644 'neofetch/neofetch.config'
@@ -1134,6 +1229,7 @@ maybe chmod 0644 'netplan/01-netcfg.yaml'
 maybe chmod 0755 'network'
 maybe chmod 0755 'network/if-down.d'
 maybe chmod 0755 'network/if-down.d/avahi-autoipd'
 maybe chmod 0755 'network/if-down.d/openvpn'
 maybe chmod 0755 'network/if-down.d/postfix'
 maybe chmod 0755 'network/if-post-down.d'
 maybe chmod 0755 'network/if-post-down.d/wireless-tools'
@@ -1141,6 +1237,7 @@ maybe chmod 0755 'network/if-pre-up.d'
 maybe chmod 0755 'network/if-pre-up.d/wireless-tools'
 maybe chmod 0755 'network/if-up.d'
 maybe chmod 0755 'network/if-up.d/avahi-autoipd'
 maybe chmod 0755 'network/if-up.d/openvpn'
 maybe chmod 0755 'network/if-up.d/postfix'
 maybe chmod 0644 'network/interfaces'
 maybe chmod 0755 'network/interfaces.d'
@@ -1152,6 +1249,12 @@ maybe chmod 0755 'openal'
 maybe chmod 0644 'openal/alsoft.conf'
 maybe chmod 0755 'openni2'
 maybe chmod 0644 'openni2/OpenNI.ini'
 maybe chmod 0755 'opensc'
 maybe chmod 0644 'opensc/opensc.conf'
 maybe chmod 0755 'openvpn'
 maybe chmod 0755 'openvpn/client'
 maybe chmod 0755 'openvpn/server'
 maybe chmod 0755 'openvpn/update-resolv-conf'
 maybe chmod 0755 'opt'
 maybe chmod 0755 'opt/chrome'
 maybe chmod 0755 'opt/chrome/policies'
@@ -1326,6 +1429,8 @@ maybe chmod 0755 'rc4.d'
 maybe chmod 0755 'rc5.d'
 maybe chmod 0755 'rc6.d'
 maybe chmod 0755 'rcS.d'
 maybe chmod 0755 'reader.conf.d'
 maybe chmod 0644 'reader.conf.d/libccidtwin'
 maybe chmod 0644 'reportbug.conf'
 maybe chmod 0644 'request-key.conf'
 maybe chmod 0755 'request-key.d'
@@ -1474,6 +1579,7 @@ maybe chmod 0755 'skel'
 maybe chmod 0644 'skel/.bash_logout'
 maybe chmod 0644 'skel/.bashrc'
 maybe chmod 0644 'skel/.profile'
 maybe chmod 0644 'smi.conf'
 maybe chmod 0755 'snmp'
 maybe chmod 0644 'snmp/snmp.conf'
 maybe chmod 0755 'sound'
@@ -1512,6 +1618,8 @@ maybe chmod 0755 'ssh/sshd_config.d'
 maybe chmod 0755 'ssl'
 maybe chmod 0755 'ssl/certs'
 maybe chmod 0644 'ssl/certs/ca-certificates.crt'
 maybe chmod 0755 'ssl/certs/java'
 maybe chmod 0644 'ssl/certs/java/cacerts'
 maybe chmod 0644 'ssl/certs/ssl-cert-snakeoil.pem'
 maybe chmod 0644 'ssl/openssl.cnf'
 maybe chgrp 'ssl-cert' 'ssl/private'
@@ -1535,8 +1643,20 @@ maybe chmod 0755 'sv/ssh/finish'
 maybe chmod 0755 'sv/ssh/log'
 maybe chmod 0755 'sv/ssh/log/run'
 maybe chmod 0755 'sv/ssh/run'
 maybe chmod 0755 'sv/tor'
 maybe chmod 0755 'sv/tor/.meta'
 maybe chmod 0644 'sv/tor/.meta/installed'
 maybe chmod 0755 'sv/tor/log'
 maybe chmod 0755 'sv/tor/log/run'
 maybe chmod 0755 'sv/tor/run'
 maybe chmod 0755 'synth-shell'
 maybe chmod 0755 'synth-shell/examples'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.cyan.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.gray.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.green.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.orange.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.scbi.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.uma.ea7rct.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.blue.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.gray.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.green.config'
@@ -1544,8 +1664,22 @@ maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.magenta.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.orange.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.red.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.yellow.config'
 maybe chmod 0755 'synth-shell/os'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.archlinux.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.debian.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.manjaro.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.popos.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.raspbian.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.root.config'
 maybe chmod 0644 'synth-shell/os/synth-shell-greeter.ubuntu.config'
 maybe chmod 0755 'synth-shell/personal'
 maybe chmod 0644 'synth-shell/personal/README.md'
 maybe chmod 0644 'synth-shell/personal/synth-shell-greeter.andresgongora.config'
 maybe chmod 0644 'synth-shell/synth-shell-greeter.config'
 maybe chmod 0644 'synth-shell/synth-shell-greeter.config.default'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.config'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.config.default'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.config.new'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.root.config'
 maybe chmod 0644 'sysctl.conf'
 maybe chmod 0755 'sysctl.d'
@@ -1561,9 +1695,6 @@ maybe chmod 0644 'systemd/sleep.conf'
 maybe chmod 0755 'systemd/system'
 maybe chmod 0644 'systemd/system.conf'
 maybe chmod 0755 'systemd/system/bluetooth.target.wants'
 maybe chmod 0644 'systemd/system/check-mk-agent-async.service'
 maybe chmod 0644 'systemd/system/check-mk-agent.socket'
 maybe chmod 0644 'systemd/system/check-mk-agent@.service'
 maybe chmod 0755 'systemd/system/default.target.wants'
 maybe chmod 0755 'systemd/system/getty.target.wants'
 maybe chmod 0755 'systemd/system/graphical.target.wants'
@@ -1592,6 +1723,9 @@ maybe chmod 0644 'timidity/fluidr3_gs.cfg'
 maybe chmod 0644 'timidity/timgm6mb.cfg'
 maybe chmod 0755 'tmpfiles.d'
 maybe chmod 0644 'tmpfiles.d/screen-cleanup.conf'
 maybe chmod 0755 'tor'
 maybe chmod 0644 'tor/torrc'
 maybe chmod 0644 'tor/torsocks.conf'
 maybe chmod 0644 'ucf.conf'
 maybe chmod 0755 'udev'
 maybe chmod 0755 'udev/hwdb.d'
@@ -1755,6 +1889,8 @@ maybe chmod 0755 'vulkan/explicit_layer.d'
 maybe chmod 0755 'vulkan/icd.d'
 maybe chmod 0755 'vulkan/implicit_layer.d'
 maybe chmod 0644 'wgetrc'
 maybe chmod 0755 'wireshark'
 maybe chmod 0644 'wireshark/init.lua'
 maybe chmod 0755 'wpa_supplicant'
 maybe chmod 0755 'wpa_supplicant/action_wpa.sh'
 maybe chmod 0644 'wpa_supplicant/functions.sh'
@@ -1802,6 +1938,8 @@ maybe chmod 0644 'xinetd.d/time-udp'
 maybe chmod 0755 'xml'
 maybe chmod 0644 'xml/catalog'
 maybe chmod 0644 'xml/docbook-xml.xml'
 maybe chmod 0755 'xml/resolver'
 maybe chmod 0644 'xml/resolver/CatalogManager.properties'
 maybe chmod 0644 'xml/sgml-data.xml'
 maybe chmod 0644 'xml/xml-core.xml'
 maybe chmod 0755 'xrdb'
@@ -1,5 +1,7 @@
 [main]
 plugins=ifupdown,keyfile
 dns=none
 rc-manager=unmanaged
 [ifupdown]
 managed=false
@@ -0,0 +1,22 @@
 [connection]
 id=Kabelgebundene Verbindung 1
 uuid=e217bf4d-234f-380e-b84f-ec7fea6008b2
 type=ethernet
 autoconnect-priority=-999
 interface-name=enxea449e54a83e
 permissions=
 [ethernet]
 mac-address-blacklist=
 [ipv4]
 address1=10.0.0.1/24
 dns-search=
 method=manual
 [ipv6]
 addr-gen-mode=stable-privacy
 dns-search=
 method=auto
 [proxy]
@@ -2,15 +2,18 @@
 id=Heimnetz
 uuid=8bc1eb63-658e-4add-89bc-b66e7847e972
 type=ethernet
 autoconnect-priority=1
 interface-name=enp0s25
 permissions=
-timestamp=1651575581
+timestamp=1659709537
 [ethernet]
 mac-address=68:F7:28:E5:AA:AB
 mac-address-blacklist=
 [ipv4]
 address1=192.168.0.99/24,192.168.0.1
-dns=192.168.0.28;192.168.0.1;
+dns=192.168.0.5;192.168.0.1;
 dns-search=realm.local;
 method=manual
@@ -0,0 +1,34 @@
 [connection]
 id=vmpfsense-UDP4-1194-mende-2.5.0
 uuid=03022d65-0b3f-4953-954b-dc543731bb47
 type=vpn
 autoconnect=false
 permissions=
 [vpn]
 auth=SHA512
 ca=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-ca.pem
 cert=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-cert.pem
 cert-pass-flags=0
 connection-type=password-tls
 dev=tun
 key=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-key.pem
 password-flags=1
 remote=192.124.237.11:1194:udp4
 remote-cert-tls=server
 ta=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-tls-auth.pem
 ta-dir=1
 username=mende
 verify-x509-name=name:vmpfsense.his.de
 service-type=org.freedesktop.NetworkManager.openvpn
 [ipv4]
 dns-search=
 method=auto
 [ipv6]
 addr-gen-mode=stable-privacy
 dns-search=
 method=auto
 [proxy]
@@ -0,0 +1,35 @@
 [connection]
 id=vmpfsense-UDP4-1195-mende-adm-config (1)
 uuid=5d7d58ea-1d74-4e55-a0d9-23fef463765a
 type=vpn
 autoconnect=false
 permissions=
 [vpn]
 auth=SHA512
 ca=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-ca.pem
 cert=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-cert.pem
 cert-pass-flags=0
 connection-type=password-tls
 dev=tun
 key=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-key.pem
 password-flags=1
 remote=192.124.237.136:1195:udp4
 remote-cert-tls=server
 reneg-seconds=0
 ta=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-tls-auth.pem
 ta-dir=1
 username=mende-adm
 verify-x509-name=name:vmpfsense.his.de
 service-type=org.freedesktop.NetworkManager.openvpn
 [ipv4]
 dns-search=
 method=auto
 [ipv6]
 addr-gen-mode=stable-privacy
 dns-search=
 method=auto
 [proxy]
@@ -0,0 +1,138 @@
 !
 ! Application defaults file for vncviewer.
 !
 !
 ! The title of the main window.  "%s" will be replaced by the desktop name.
 ! 
 Vncviewer.title: TightVNC: %s
 !
 ! Translations on the main window.
 !
 Vncviewer.translations:\
  <Enter>: SelectionToVNC()\n\
  <Leave>: SelectionFromVNC()
 !
 ! Uncomment to grab the keyboard in full-screen mode.
 !
 ! Vncviewer.grabKeyboard: True
 !
 ! Background around a small desktop in full-screen mode.
 !
 *form.background: black
 !
 ! Use scrollbars on right and bottom for window smaller than desktop.
 !
 *viewport.allowHoriz: True
 *viewport.allowVert: True
 *viewport.useBottom: True
 *viewport.useRight: True
 *viewport*Scrollbar*thumb: None
 !
 ! Default translations on desktop window.
 !
 *desktop.baseTranslations:\
  <Key>F8: ShowPopup()\n\
  <ButtonPress>: SendRFBEvent()\n\
  <ButtonRelease>: SendRFBEvent()\n\
  <Motion>: SendRFBEvent()\n\
  <KeyPress>: SendRFBEvent()\n\
  <KeyRelease>: SendRFBEvent()
 !
 ! Dialog boxes
 !
 *serverDialog.dialog.label: VNC server:
 *serverDialog.dialog.value:
 *serverDialog.dialog.value.translations: #override\n\
  <Key>Return: ServerDialogDone()
 *passwordDialog.dialog.label: Password:
 *passwordDialog.dialog.value:
 *passwordDialog.dialog.value.AsciiSink.echo: False
 *passwordDialog.dialog.value.translations: #override\n\
  <Key>Return: PasswordDialogDone()
 !
 ! Popup window appearance
 !
 *popup.title: TightVNC popup
 *popup*background: grey
 *popup*font: -*-helvetica-bold-r-*-*-16-*-*-*-*-*-*-*
 *popup.buttonForm.Command.borderWidth: 0
 *popup.buttonForm.Toggle.borderWidth: 0
 !
 ! Translations on popup window - send key presses through
 !
 *popup.translations: #override <Message>WM_PROTOCOLS: HidePopup()
 *popup.buttonForm.translations: #override\n\
  <KeyPress>: SendRFBEvent() HidePopup()
 !
 ! Popup buttons
 !
 *popupButtonCount: 8
 *popup*button1.label: Dismiss popup
 *popup*button1.translations: #override\n\
  <Btn1Down>,<Btn1Up>: HidePopup()
 *popup*button2.label: Quit viewer
 *popup*button2.translations: #override\n\
  <Btn1Down>,<Btn1Up>: Quit()
 *popup*button3.label: Full screen
 *popup*button3.type: toggle
 *popup*button3.translations: #override\n\
  <Visible>: SetFullScreenState()\n\
  <Btn1Down>,<Btn1Up>: toggle() HidePopup() ToggleFullScreen()
 *popup*button4.label: Clipboard: local -> remote
 *popup*button4.translations: #override\n\
  <Btn1Down>,<Btn1Up>: SelectionToVNC(always) HidePopup()
 *popup*button5.label: Clipboard: local <- remote
 *popup*button5.translations: #override\n\
  <Btn1Down>,<Btn1Up>: SelectionFromVNC(always) HidePopup()
 *popup*button6.label: Request refresh
 *popup*button6.translations: #override\n\
  <Btn1Down>,<Btn1Up>: SendRFBEvent(fbupdate) HidePopup()
 *popup*button7.label: Send ctrl-alt-del
 *popup*button7.translations: #override\n\
  <Btn1Down>,<Btn1Up>: SendRFBEvent(keydown,Control_L)\
                       SendRFBEvent(keydown,Alt_L)\
                       SendRFBEvent(key,Delete)\
                       SendRFBEvent(keyup,Alt_L)\
                       SendRFBEvent(keyup,Control_L)\
                       HidePopup()
 *popup*button8.label: Send F8
 *popup*button8.translations: #override\n\
  <Btn1Down>,<Btn1Up>: SendRFBEvent(key,F8) HidePopup()
@@ -1 +1 @@
-/usr/bin/firefox-esr
+/usr/bin/google-chrome-stable
@@ -1 +0,0 @@
 /usr/share/man/man1/firefox-esr.1.gz
@@ -0,0 +1 @@
 /usr/bin/google-chrome-stable
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/java
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/lib/jexec
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/lib/jar.binfmt
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/jjs.1.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/keytool
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/keytool.1.gz
@@ -0,0 +1 @@
 /etc/mysql/mariadb.cnf
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe
+/omd/versions/2.1.0p15.cfe
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/lib/omd/bash_completion
+/omd/versions/2.1.0p15.cfe/lib/omd/bash_completion
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/bin/omd
+/omd/versions/2.1.0p15.cfe/bin/omd
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/share/man/man8/omd.8.gz
+/omd/versions/2.1.0p15.cfe/share/man/man8/omd.8.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/pack200.1.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmid.1.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/rmiregistry
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmiregistry.1.gz
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200
@@ -0,0 +1 @@
 /usr/lib/jvm/java-11-openjdk-amd64/man/man1/unpack200.1.gz
@@ -0,0 +1 @@
 /usr/bin/xtightvncviewer
@@ -0,0 +1 @@
 /usr/share/man/man1/xtightvncviewer.1.gz
@@ -1 +1 @@
-/usr/bin/firefox-esr
+/usr/bin/google-chrome-stable
@@ -1 +0,0 @@
 /usr/share/man/man1/firefox-esr.1.gz
@@ -0,0 +1 @@
 /usr/bin/xtightvncviewer
@@ -0,0 +1 @@
 /usr/share/man/man1/xtightvncviewer.1.gz
@@ -0,0 +1,31 @@
 # vim:syntax=apparmor
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/openssl>
  network tcp,
  network udp,
  capability chown,
  capability dac_read_search,
  capability fowner,
  capability fsetid,
  capability setgid,
  capability setuid,
  /usr/bin/tor r,
  /usr/sbin/tor r,
  # Needed by obfs4proxy
  /proc/sys/net/core/somaxconn r,
  /proc/sys/kernel/random/uuid r,
  /sys/devices/system/cpu/ r,
  /sys/devices/system/cpu/** r,
  /etc/tor/* r,
  /usr/share/tor/** r,
  /usr/bin/obfsproxy PUx,
  /usr/bin/obfs4proxy Pix,
@@ -0,0 +1,25 @@
 # vim:syntax=apparmor
 #include <tunables/global>
 profile system_tor flags=(attach_disconnected) {
  #include <abstractions/tor>
  owner /var/lib/tor/** rwk,
  owner /var/lib/tor/ r,
  owner /var/log/tor/* w,
  # During startup, tor (as root) tries to open various things such as
  # directories via check_private_dir().  Let it.
  /var/lib/tor/** r,
  /{,var/}run/tor/ r,
  /{,var/}run/tor/control w,
  /{,var/}run/tor/socks w,
  /{,var/}run/tor/tor.pid w,
  /{,var/}run/tor/control.authcookie w,
  /{,var/}run/tor/control.authcookie.tmp rw,
  /{,var/}run/systemd/notify w,
  # Site-specific additions and overrides. See local/README for details.
  #include <local/system_tor>
 }
@@ -0,0 +1,173 @@
 #include <tunables/global>
 #include <tunables/torbrowser>
@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox.real
 profile torbrowser_firefox @{torbrowser_firefox_executable} {
  #include <abstractions/audio>
  #include <abstractions/dri-enumerate>
  #include <abstractions/gnome>
  #include <abstractions/ibus>
  #include <abstractions/mesa>
  #include <abstractions/opencl>
  #include if exists <abstractions/vulkan>
  #include if exists <abstractions/dbus-session>
  #include if exists <abstractions/X>
  # Uncomment the following lines if you want to give the Tor Browser read-write
  # access to most of your personal files.
  # #include <abstractions/user-download>
  # @{HOME}/ r,
  # Audio support
  /{,usr/}bin/pulseaudio Pixr,
  #dbus,
  network netlink raw,
  network tcp,
  ptrace (trace) peer=@{profile_name},
  signal (receive, send) set=("term") peer=@{profile_name},
  deny /etc/host.conf r,
  deny /etc/hosts r,
  deny /etc/nsswitch.conf r,
  deny /etc/os-release r,
  deny /etc/resolv.conf r,
  deny /etc/passwd r,
  deny /etc/group r,
  deny /etc/mailcap r,
  /etc/machine-id r,
  /var/lib/dbus/machine-id r,
  /dev/ r,
  /dev/shm/ r,
  owner @{PROC}/@{pid}/cgroup r,
  owner @{PROC}/@{pid}/environ r,
  owner @{PROC}/@{pid}/fd/ r,
  owner @{PROC}/@{pid}/mountinfo r,
  owner @{PROC}/@{pid}/stat r,
  owner @{PROC}/@{pid}/status r,
  owner @{PROC}/@{pid}/task/*/stat r,
  @{PROC}/sys/kernel/random/uuid r,
  owner @{torbrowser_installation_dir}/ r,
  owner @{torbrowser_installation_dir}/* r,
  owner @{torbrowser_installation_dir}/.** rwk,
  owner @{torbrowser_installation_dir}/update.test/ rwk,
  owner @{torbrowser_home_dir}/.** rwk,
  owner @{torbrowser_home_dir}/ rw,
  owner @{torbrowser_home_dir}/** rwk,
  owner @{torbrowser_home_dir}.bak/ rwk,
  owner @{torbrowser_home_dir}.bak/** rwk,
  owner @{torbrowser_home_dir}/*.so mr,
  owner @{torbrowser_home_dir}/.cache/fontconfig/ rwk,
  owner @{torbrowser_home_dir}/.cache/fontconfig/** rwkl,
  owner @{torbrowser_home_dir}/browser/** r,
  owner @{torbrowser_home_dir}/{,browser/}components/*.so mr,
  owner @{torbrowser_home_dir}/Downloads/ rwk,
  owner @{torbrowser_home_dir}/Downloads/** rwk,
  owner @{torbrowser_home_dir}/firefox rix,
  owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/* rw,
  owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/{,MozUpdater/bgupdate/}updater ix,
  owner @{torbrowser_home_dir}/updater ix,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/.parentwritetest rw,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profiles.ini r,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/{,**} rwk,
  owner @{torbrowser_home_dir}/TorBrowser/Data/fontconfig/fonts.conf r,
  owner @{torbrowser_home_dir}/fonts/* l,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/tor px,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/ r,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so.* mr,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/libstdc++/*.so mr,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/libstdc++/*.so.* mr,
  # parent Firefox process when restarting after upgrade, Web Content processes
  owner @{torbrowser_firefox_executable} pxmr -> torbrowser_firefox,
  /etc/mailcap r,
  /etc/mime.types r,
  /usr/share/ r,
  /usr/share/glib-2.0/schemas/gschemas.compiled r,
  /usr/share/mime/ r,
  /usr/share/themes/ r,
  /usr/share/applications/** rk,
  /usr/share/gnome/applications/ r,
  /usr/share/gnome/applications/kde4/ r,
  /usr/share/poppler/cMap/ r,
  /etc/xdg/mimeapps.list r,
  # Distribution homepage
  /usr/share/homepage/ r,
  /usr/share/homepage/** r,
  /sys/bus/pci/devices/ r,
  @{sys}/devices/pci[0-9]*/**/irq r,
  /sys/devices/system/cpu/ r,
  /sys/devices/system/cpu/present r,
  /sys/devices/system/node/ r,
  /sys/devices/system/node/node[0-9]*/meminfo r,
  /sys/fs/cgroup/cpu,cpuacct/{,user.slice/}cpu.cfs_quota_us r,
  deny /sys/devices/virtual/block/*/uevent r,
  # Should use abstractions/gstreamer instead once merged upstream
  /etc/udev/udev.conf r,
  /run/udev/data/+pci:* r,
  /sys/devices/pci[0-9]*/**/uevent r,
  owner /{dev,run}/shm/shmfd-* rw,
  # Required for multiprocess Firefox (aka Electrolysis, i.e. e10s)
  owner /{dev,run}/shm/org.chromium.* rw,
  owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw, # for Chromium IPC
  # Required for Wayland display protocol support
  owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
  # Silence denial logs about permissions we don't need
  deny @{HOME}/.cache/fontconfig/ rw,
  deny @{HOME}/.cache/fontconfig/** rw,
  deny @{HOME}/.config/gtk-2.0/ rw,
  deny @{HOME}/.config/gtk-2.0/** rw,
  deny @{PROC}/@{pid}/net/route r,
  deny /sys/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
  deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
  deny /run/user/[0-9]*/dconf/user rw,
  deny /usr/bin/lsb_release x,
  # Silence denial logs about PulseAudio
  deny /etc/pulse/client.conf r,
  deny /usr/bin/pulseaudio x,
  # KDE 4
  owner @{HOME}/.kde/share/config/* r,
  # Xfce4
  /etc/xfce4/defaults.list r,
  /usr/share/xfce4/applications/ r,
  # u2f (tested with Yubikey 4)
  /sys/class/ r,
  /sys/bus/ r,
  /sys/class/hidraw/ r,
  /run/udev/data/c24{5,7,9}:* r,
  /dev/hidraw* rw,
  # Yubikey NEO also needs this:
  /sys/devices/**/hidraw/hidraw*/uevent r,
  # Needed for Firefox sandboxing via unprivileged user namespaces
  capability sys_admin,
  capability sys_chroot,
  owner @{PROC}/@{pid}/{gid,uid}_map w,
  owner @{PROC}/@{pid}/setgroups w,
  # Remove these rules once we can assume abstractions/vulkan is recent enough
  # to include them
  /etc/glvnd/egl_vendor.d/{*,.json} r,
  /usr/share/glvnd/egl_vendor.d/{,*.json} r,
  #include <local/torbrowser.Browser.firefox>
 }
@@ -0,0 +1,47 @@
 #include <tunables/global>
 #include <tunables/torbrowser>
@{torbrowser_tor_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/TorBrowser/Tor/tor
 profile torbrowser_tor @{torbrowser_tor_executable} {
  #include <abstractions/base>
  network netlink raw,
  network tcp,
  network udp,
  /etc/host.conf r,
  /etc/nsswitch.conf r,
  /etc/passwd r,
  /etc/resolv.conf r,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/tor mr,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/ rw,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/** rw,
  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/lock rwk,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,
  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so.* mr,
  # Support some of the included pluggable transports
  owner @{torbrowser_home_dir}/TorBrowser/Tor/PluggableTransports/** rix,
  @{PROC}/sys/net/core/somaxconn r,
  #include <abstractions/ssl_certs>
  # Silence file_inherit logs
  deny @{torbrowser_home_dir}/{browser/,}omni.ja r,
  deny @{torbrowser_home_dir}/{browser/,}features/*.xpi r,
  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/.parentlock rw,
  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/extensions/*.xpi r,
  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/startupCache/* r,
  # Silence logs from included pluggable transports
  deny /etc/hosts r,
  deny /etc/services r,
  @{PROC}/sys/kernel/random/uuid r,
  /sys/devices/system/cpu/ r,
  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
  # OnionShare compatibility
  /tmp/onionshare/** rw,
  #include <local/torbrowser.Tor.tor>
 }
@@ -0,0 +1,2 @@
@{torbrowser_installation_dir}=@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*
@{torbrowser_home_dir}=@{torbrowser_installation_dir}/Browser
@@ -17,8 +17,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  #include <abstractions/dbus-accessibility>
  #include <abstractions/dbus-session>
  #include <abstractions/dconf>
  #include <abstractions/dri-enumerate>
  #include <abstractions/gnome>
  #include <abstractions/ibus>
  #include <abstractions/mesa>
  #include <abstractions/nameservice>
  #include <abstractions/nvidia>
  #include <abstractions/p11-kit>
@@ -43,6 +45,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  # Backported from the dri-enumerate abstraction, available in AppArmor 2.13
  /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,
  # Imported from the opencl abstraction, which we cannot include
  # due to conflicting "x"
  @{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r,
  # Allow opening attachments
  # TODO: create and use abstractions for opening various file formats
  /{usr/local/,usr/,}bin/* Cx -> sanitized_helper,
@@ -334,6 +340,9 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  # TB tries to create this file but has no business doing so
  deny @{HOME}/.gnupg/gpg-agent.conf w,
  # Required for Wayland display protocol support
  owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
  profile gpg {
    #include <abstractions/base>
@@ -425,6 +434,8 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
    owner /tmp/gpg-[a-zA-Z0-9]*/S.gpg-agent rw,
    /usr/share/sounds/** r,
    deny /dev/shm/org.chromium.* rw, # file_inherit only
  }
  # Site-specific additions and overrides. See local/README for details.
@@ -1,2 +1,2 @@
 // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal
-APT::LastInstalledKernel "5.10.0-14-amd64";
+APT::LastInstalledKernel "5.10.0-19-amd64";
@@ -0,0 +1,11 @@
 Package: *
 Pin: release a=bullseye
 Pin-Priority: 500
 Package: torbrowser-launcher
 Pin: release a=unstable
 Pin-Priority: 1000
 Package: *
 Pin: release a=unstable
 Pin-Priority: 100
@@ -2,16 +2,16 @@
 #deb cdrom:[Debian GNU/Linux 11.3.0 _Bullseye_ - Official amd64 NETINST 20220326-11:22]/ bullseye main
-deb http://deb.debian.org/debian/ bullseye main
+deb http://deb.debian.org/debian/ bullseye main contrib non-free
-deb-src http://deb.debian.org/debian/ bullseye main
+deb-src http://deb.debian.org/debian/ bullseye main contrib non-free
-deb http://security.debian.org/debian-security bullseye-security main
+deb http://security.debian.org/debian-security bullseye-security main contrib non-free
-deb-src http://security.debian.org/debian-security bullseye-security main
+deb-src http://security.debian.org/debian-security bullseye-security main contrib non-free
 # bullseye-updates, to get updates before a point release is made;
 # see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports
-deb http://deb.debian.org/debian/ bullseye-updates main
+deb http://deb.debian.org/debian/ bullseye-updates main contrib non-free
-deb-src http://deb.debian.org/debian/ bullseye-updates main
+deb-src http://deb.debian.org/debian/ bullseye-updates main contrib non-free
 # This system was installed using small removable media
 # (e.g. netinst, live or single CD). The matching "deb cdrom"
@@ -0,0 +1,3 @@
 ### THIS FILE IS AUTOMATICALLY CONFIGURED ###
 # You may comment out this entry, but any other modifications may be lost.
 deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main
@@ -1 +1 @@
-deb http://download.opensuse.org/repositories/home:/strycore/Debian_11/ ./
+deb https://download.opensuse.org/repositories/home:/strycore/Debian_11/ ./
@@ -1 +1 @@
-#deb http://repository.spotify.com stable non-free
+deb http://repository.spotify.com stable non-free
@@ -0,0 +1,2 @@
 deb http://deb.debian.org/debian unstable main contrib non-free
 deb-src http://deb.debian.org/debian unstable main contrib non-free
@@ -1,4 +1,5 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 Version: GnuPG v1.4.5 (GNU/Linux)
 mQENBFRZVvQBCAC6o95XEzZiupu57b6iGh8dR3Zt0itwKxOWlBDwGoibcvsQgC0N
 ZqVaHf/9MSC9E7JxJFEDE6Qa2w8+OWFlUsjJsTSFQ7IVyawueP4r4JZ9RMT0O5iG
@@ -0,0 +1,89 @@
 #!/bin/sh
 set -e
 # use the locale C.UTF-8
 unset LC_ALL
 LC_CTYPE=C.UTF-8
 export LC_CTYPE
 storepass='changeit'
 if [ -f /etc/default/cacerts ]; then
    . /etc/default/cacerts
 fi
 arch=`dpkg --print-architecture`
 JAR=/usr/share/ca-certificates-java/ca-certificates-java.jar
 nsslib_name()
 {
    if dpkg --assert-multi-arch 2>/dev/null; then
        echo "libnss3:${arch}"
    else
        echo "libnss3"
    fi
 }
 echo ""
 if [ "$cacerts_updates" != yes ] || [ "$CACERT_UPDATES" = disabled ] || [ ! -e $JAR ]; then
    echo "updates of cacerts keystore disabled."
    exit 0
 fi
 if ! mountpoint -q /proc; then
    echo >&2 "the keytool command requires a mounted proc fs (/proc)."
    exit 1
 fi
 for jvm in java-7-openjdk-$arch java-7-openjdk \
           oracle-java7-jre-$arch oracle-java7-server-jre-$arch oracle-java7-jdk-$arch \
           java-8-openjdk-$arch java-8-openjdk \
           oracle-java8-jre-$arch oracle-java8-server-jre-$arch oracle-java8-jdk-$arch \
           java-9-openjdk-$arch java-9-openjdk \
           oracle-java9-jre-$arch oracle-java9-server-jre-$arch oracle-java9-jdk-$arch \
           java-10-openjdk-$arch java-10-openjdk \
           oracle-java10-jre-$arch oracle-java10-server-jre-$arch oracle-java10-jdk-$arch \
           java-11-openjdk-$arch java-11-openjdk \
           oracle-java11-jre-$arch oracle-java11-server-jre-$arch oracle-java11-jdk-$arch; do
    if [ -x /usr/lib/jvm/$jvm/bin/java ]; then
        export JAVA_HOME=/usr/lib/jvm/$jvm
        PATH=$JAVA_HOME/bin:$PATH
    	break
    fi
 done
 if dpkg-query --version >/dev/null; then
    nsspkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libnss3\.so$,\1,p'|head -n 1)
    nsscfg=/etc/${jvm%-$arch}/security/nss.cfg
    nssjdk=$(test ! -f $nsscfg || sed -n '/nssLibraryDirectory/s/.*= *\(.*\)/\1/p' $nsscfg)
    if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ]; then
        ln -sf $nsspkg/libnss3.so $nssjdk/libnss3.so
    fi
    softokn3pkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libsoftokn3\.so$,\1,p'|head -n 1)
    if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] && [ "$softokn3pkg" != "$nssjdk" ]; then
        ln -sf $softokn3pkg/libsoftokn3.so $nssjdk/libsoftokn3.so
    fi
 fi
 do_cleanup()
 {
    [ -z "$temp_jvm_cfg" ] || rm -f $temp_jvm_cfg
    if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ]
    then
        rm -f $nssjdk/libnss3.so
    fi
    if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] \
       && [ "$softokn3pkg" != "$nssjdk" ]
    then
        rm -f $nssjdk/libsoftokn3.so
    fi
 }
 if java -Xmx64m -jar $JAR -storepass "$storepass"; then
    do_cleanup
 else
    do_cleanup
    exit 1
 fi
 echo "done."
@@ -0,0 +1,5 @@
 # Created by Check_MK Agent Bakery.
 # This file is managed via WATO, do not edit manually or you
 # lose your changes next time when you update the agent.
 auto
@@ -0,0 +1,44 @@
 # Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
 # This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
 # conditions defined in the file COPYING, which is part of this source code package.
 # NOTE:
 # For users of the Checkmk Agent Bakery, this file is manageged by the corresponding
 # monitoring server. In that case, manual changes to this file will be lost upon
 # an update of the check-mk-agent package.
 service check-mk-agent
 {
    type           = UNLISTED
    port           = 6556
    socket_type    = stream
    protocol       = tcp
    wait           = no
    user           = root
    # If you use fully redundant monitoring and poll the client
    # from more then one monitoring servers in parallel you might
    # want to use the agent cache wrapper:
    #server         = /usr/bin/check_mk_caching_agent
    server         = /usr/bin/check_mk_agent
    # To avoid intentional or unintentional overload due to too many parallel
    # queries from one source we set this parameter. It limits the number of
    # concurrent connections per source address. If you need more requests
    # per source system, you can of course increase or remove this value
    # (https://github.com/tribe29/checkmk/pull/157)
    per_source     = 3
    # listen on IPv4 AND IPv6 when available on this host
    #flags          = IPv6
    # configure the IP address(es) of your Nagios server here:
    #only_from      = 127.0.0.1 10.0.20.1 10.0.20.2
    # Don't be too verbose. Don't log every check. This might be
    # commented out for debugging. If this option is commented out
    # the default options will be used for this service.
    log_on_success =
    disable        = no
 }
@@ -1 +1 @@
-{'last_error': None, 'host_secret': 'qdyvxajdsobwykwzrfwipeytqnwawzuxbrwsowgahpdxwwkpazfbsnugwnefnrlv', 'server': '192.168.0.99', 'site': 'realm', 'host_name': 'localhost', 'protocol': 'http', 'user': 'caelebfi', 'last_check': 1652428027.8453374, 'installed_aghash': 'f9c569861357b5c2', 'last_update': 1652341486.1470811, 'pending_hash': None}
+{'last_error': "HTTPConnectionPool(host='192.168.0.99', port=80): Max retries exceeded with url: /realm/check_mk (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fe13931c590>: Failed to establish a new connection: [Errno 101] Network is unreachable'))", 'host_secret': 'xwzcvzyndcggrfyywolofmarwejiprrcbatykpinzbhkmjzjvisyjyhxbismzxcc', 'server': '192.168.0.99', 'site': 'realm', 'host_name': 'localhost', 'protocol': 'http', 'user': 'caelebfi', 'last_check': 1666964320.9634454, 'installed_aghash': 'be8a4595e68177a8', 'last_update': 1666964324.5679643, 'pending_hash': None}
@@ -0,0 +1 @@
 /opt/google/chrome/cron/google-chrome
@@ -0,0 +1,16 @@
 #!/bin/sh
 set -e
 set -u
 DEFAULTSFILE=/etc/default/tor
 if [ -f $DEFAULTSFILE ] ; then
 	. $DEFAULTSFILE
 fi
 if [ "${CLEANUP_OLD_COREFILES:-}" = "y" ] ; then
 	if [ -d /var/lib/tor ] ; then
 		find /var/lib/tor -mindepth 1 -maxdepth 1 -type f -mtime +21 -user debian-tor -regex '.*/core\(\.[0-9]+\)?' -exec rm '{}' +
 	fi
 fi
@@ -20,3 +20,7 @@ PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
 52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
 #
 # restic backup
 0 1 * * * root /usr/local/bin/restic -r /backup/restic-repositories/admcenter backup /opt/omd/ --password-file /root/.resticpwd
 10 1 * * * root /usr/local/bin/restic -r /backup/restic-repositories/admcenter forget --keep-daily 7 --keep-weekly 2 --prune --password-file /root/.resticpwd
@@ -1,17 +1,17 @@
 # Printer configuration file for CUPS v2.3.3op2
 # Written by cupsd
 # DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
-NextPrinterId 16
+NextPrinterId 152
 <Printer EPSON_XP_8600_Series>
-PrinterId 15
+PrinterId 151
-UUID urn:uuid:a58126b4-f74d-3288-7158-5b3373db52be
+UUID urn:uuid:2952f250-5c2c-3622-6d59-8341fe66e6b5
 Info EPSON_XP_8600_Series
 Location 
 MakeModel EPSON XP-8600 Series, driverless, cups-filters 1.28.7
 DeviceURI implicitclass://EPSON_XP_8600_Series/
 State Idle
-StateTime 1652392808
+StateTime 1670085841
-ConfigTime 1652392808
+ConfigTime 1670085841
 Type 36892
 Accepting Yes
 Shared No
@@ -1,4 +1,4 @@
 # Printer configuration file for CUPS v2.3.3op2
 # Written by cupsd
 # DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
-NextPrinterId 15
+NextPrinterId 151
@@ -1 +1 @@
-11.3
+11.5
@@ -0,0 +1,10 @@
 # defaults for ca-certificates-java
 # The password which is used to protect the integrity of the keystore.
 # storepass must be at least 6 characters long. It must be provided to
 # all commands that access the keystore contents.
 # Only change this if adding private certificates.
 #storepass=''
 # enable/disable updates of the keystore /etc/ssl/certs/java/cacerts
 cacerts_updates=yes
@@ -1,20 +0,0 @@
 # Docker Upstart and SysVinit configuration file
 #
 # THIS FILE DOES NOT APPLY TO SYSTEMD
 #
 #   Please see the documentation for "systemd drop-ins":
 #   https://docs.docker.com/engine/admin/systemd/
 #
 # Customize location of Docker binary (especially for development testing).
 #DOCKERD="/usr/local/bin/dockerd"
 # Use DOCKER_OPTS to modify the daemon startup options.
 #DOCKER_OPTS="--dns 8.8.8.8 --dns 8.8.4.4"
 # If you need Docker to use an HTTP proxy, it can also be specified here.
 #export http_proxy="http://127.0.0.1:3128/"
 # This is also a handy place to tweak where Docker's temporary files go.
 #export DOCKER_TMPDIR="/mnt/bigdrive/docker-tmp"
@@ -0,0 +1,2 @@
 repo_add_once="false"
 repo_reenable_on_distupgrade="true"
@@ -0,0 +1,36 @@
 # This is the configuration file for /etc/init.d/openvpn
 #
 # Start only these VPNs automatically via init script.
 # Allowed values are "all", "none" or space separated list of
 # names of the VPNs. If empty, "all" is assumed.
 # The VPN name refers to the VPN configutation file name.
 # i.e. "home" would be /etc/openvpn/home.conf
 #
 # If you're running systemd, changing this variable will
 # require running "systemctl daemon-reload" followed by
 # a restart of the openvpn service (if you removed entries
 # you may have to stop those manually)
 #
 #AUTOSTART="all"
 #AUTOSTART="none"
 #AUTOSTART="home office"
 #
 # WARNING: If you're running systemd the rest of the
 # options in this file are ignored.
 #
 # Refresh interval (in seconds) of default status files
 # located in /var/run/openvpn.$NAME.status
 # Defaults to 10, 0 disables status file generation
 #
 #STATUSREFRESH=10
 #STATUSREFRESH=0
 # Optional arguments to openvpn's command line
 OPTARGS=""
 #
 # If you need openvpn running after sendsigs, i.e.
 # to let umountnfs work over the vpn, set OMIT_SENDSIGS
 # to 1 and include umountnfs as Required-Stop: in openvpn's
 # init.d script (remember to run insserv after that)
 #
 OMIT_SENDSIGS=0
@@ -0,0 +1,75 @@
 # Defaults for tor initscript
 # sourced by /etc/init.d/tor
 # installed at /etc/default/tor by the maintainer scripts
 #
 # Note that this file is not being used for controlling Tor-startup
 # when Tor is launched by systemd.
 #
 #
 # This is a bash shell fragment
 #
 RUN_DAEMON="yes"
 #
 # Servers sometimes may need more than the default 1024 file descriptors
 # if they are very busy and have many clients connected to them.  The top
 # servers as of early 2008 regularly have more than 10000 connected
 # clients.
 #  (ulimit -n)
 #
 # (the default varies as it depends on the number of available system-wide file
 #  descriptors.  See the init script in /etc/init.d/tor for details.)
 #
 # MAX_FILEDESCRIPTORS=
 #
 # If tor is seriously hogging your CPU, taking away too much cycles from
 # other system resources, then you can renice tor.  See nice(1) for a
 # bit more information.  Another way to limit the CPU usage of an Onion
 # Router is to set a lower BandwidthRate, as CPU usage is mostly a function
 # of the amount of traffic flowing through your node.  Consult the torrc(5)
 # manual page for more information on setting BandwidthRate.
 #
 # NICE="--nicelevel 5"
 # Additional arguments to pass on tor's command line.
 #
 # ARGS="$ARGS "
 #
 # Uncomment the ulimit call below, and set "DisableDebuggerAttachment 0"
 # in /etc/tor/torrc, if you want tor to produce coredumps on segfaults
 # and assert errors.
 #
 # Keeping coredumps around is some sort of security issue since they
 # may leak session keys, sensitive client data and more, should such
 # files fall into the wrong hands.  Therefore coredumps are not enabled
 # by default.
 #
 # ulimit -c unlimited
 #
 # Config option for the weekly cron file: Whether or not to remove old
 # coredumps in /var/lib/tor.  Coredumps can hold sensitive data, as such
 # they probably should not be kept lying around if nobody will ever look
 # at them.  This option makes /etc/cron.weekly/tor clean out files older
 # then three weeks.
 #
 CLEANUP_OLD_COREFILES=y
 #
 # By default the tor init script will launch Tor using apparmor iff
 # /usr/sbin/aa-status exists and is executable and calling it with --enabled
 # returns true, /usr/sbin/aa-exec is executable, there is a
 # /etc/apparmor.d/system_tor policy, and USE_AA_EXEC is set to 'yes'.
 #
 # USE_AA_EXEC="yes"  # default
 # USE_AA_EXEC="no"
 # Let the vidalia package override some of our settings.
 # People who have vidalia installed might not want to run Tor as a system
 # service. The vidalia .deb can ask them that and then set run-daemon to no.
 if [ -e /etc/default/tor.vidalia ] && [ -x /usr/bin/vidalia ]; then
 	. /etc/default/tor.vidalia
 fi
@@ -0,0 +1,2 @@
 #!/bin/sh
 git push --set-upstream origin $HOSTNAME
@@ -0,0 +1,377 @@
 intl_module = builtin {
    icu_versions = default
 }
 intl_module = fbintl {
    filename = $(root)/intl/fbintl
    icu_versions = default
 }
 charset = SJIS_0208 {
    intl_module = fbintl
    collation = SJIS_0208
    collation = SJIS_0208_UNICODE
 }
 charset = EUCJ_0208 {
    intl_module = fbintl
    collation = EUCJ_0208
    collation = EUCJ_0208_UNICODE
 }
 charset = DOS437 {
    intl_module = fbintl
    collation = DOS437
    collation = DOS437_UNICODE
    collation = DB_DEU437
    collation = DB_ESP437
    collation = DB_FIN437
    collation = DB_FRA437
    collation = DB_ITA437
    collation = DB_NLD437
    collation = DB_SVE437
    collation = DB_UK437
    collation = DB_US437
    collation = PDOX_ASCII
    collation = PDOX_INTL
    collation = PDOX_SWEDFIN
 }
 charset = DOS850 {
    intl_module = fbintl
    collation = DOS850
    collation = DOS850_UNICODE
    collation = DB_DEU850
    collation = DB_ESP850
    collation = DB_FRA850
    collation = DB_FRC850
    collation = DB_ITA850
    collation = DB_NLD850
    collation = DB_PTB850
    collation = DB_SVE850
    collation = DB_UK850
    collation = DB_US850
 }
 charset = DOS865 {
    intl_module = fbintl
    collation = DOS865
    collation = DOS865_UNICODE
    collation = DB_DAN865
    collation = DB_NOR865
    collation = PDOX_NORDAN4
 }
 charset = ISO8859_1 {
    intl_module = fbintl
    collation = ISO8859_1
    collation = ISO8859_1_UNICODE
    collation = DA_DA
    collation = DE_DE
    collation = DU_NL
    collation = EN_UK
    collation = EN_US
    collation = ES_ES
    collation = ES_ES_CI_AI
    collation = FI_FI
    collation = FR_CA
    collation = FR_FR
    collation = IS_IS
    collation = IT_IT
    collation = NO_NO
    collation = SV_SV
    collation = PT_BR
    collation = PT_PT
 }
 charset = ISO8859_2 {
    intl_module = fbintl
    collation = ISO8859_2
    collation = ISO8859_2_UNICODE
    collation = CS_CZ
    collation = ISO_HUN
    collation = ISO_PLK
 }
 charset = ISO8859_3 {
    intl_module = fbintl
    collation = ISO8859_3
    collation = ISO8859_3_UNICODE
 }
 charset = ISO8859_4 {
    intl_module = fbintl
    collation = ISO8859_4
    collation = ISO8859_4_UNICODE
 }
 charset = ISO8859_5 {
    intl_module = fbintl
    collation = ISO8859_5
    collation = ISO8859_5_UNICODE
 }
 charset = ISO8859_6 {
    intl_module = fbintl
    collation = ISO8859_6
    collation = ISO8859_6_UNICODE
 }
 charset = ISO8859_7 {
    intl_module = fbintl
    collation = ISO8859_7
    collation = ISO8859_7_UNICODE
 }
 charset = ISO8859_8 {
    intl_module = fbintl
    collation = ISO8859_8
    collation = ISO8859_8_UNICODE
 }
 charset = ISO8859_9 {
    intl_module = fbintl
    collation = ISO8859_9
    collation = ISO8859_9_UNICODE
 }
 charset = ISO8859_13 {
    intl_module = fbintl
    collation = ISO8859_13
    collation = ISO8859_13_UNICODE
    collation = LT_LT
 }
 charset = DOS852 {
    intl_module = fbintl
    collation = DOS852
    collation = DOS852_UNICODE
    collation = DB_CSY
    collation = DB_PLK
    collation = DB_SLO
    collation = PDOX_CSY
    collation = PDOX_HUN
    collation = PDOX_PLK
    collation = PDOX_SLO
 }
 charset = DOS857 {
    intl_module = fbintl
    collation = DOS857
    collation = DOS857_UNICODE
    collation = DB_TRK
 }
 charset = DOS860 {
    intl_module = fbintl
    collation = DOS860
    collation = DOS860_UNICODE
    collation = DB_PTG860
 }
 charset = DOS861 {
    intl_module = fbintl
    collation = DOS861
    collation = DOS861_UNICODE
    collation = PDOX_ISL
 }
 charset = DOS863 {
    intl_module = fbintl
    collation = DOS863
    collation = DOS863_UNICODE
    collation = DB_FRC863
 }
 charset = CYRL {
    intl_module = fbintl
    collation = CYRL
    collation = CYRL_UNICODE
    collation = DB_RUS
    collation = PDOX_CYRL
 }
 charset = DOS737 {
    intl_module = fbintl
    collation = DOS737
    collation = DOS737_UNICODE
 }
 charset = DOS775 {
    intl_module = fbintl
    collation = DOS775
    collation = DOS775_UNICODE
 }
 charset = DOS858 {
    intl_module = fbintl
    collation = DOS858
    collation = DOS858_UNICODE
 }
 charset = DOS862 {
    intl_module = fbintl
    collation = DOS862
    collation = DOS862_UNICODE
 }
 charset = DOS864 {
    intl_module = fbintl
    collation = DOS864
    collation = DOS864_UNICODE
 }
 charset = DOS866 {
    intl_module = fbintl
    collation = DOS866
    collation = DOS866_UNICODE
 }
 charset = DOS869 {
    intl_module = fbintl
    collation = DOS869
    collation = DOS869_UNICODE
 }
 charset = WIN1250 {
    intl_module = fbintl
    collation = WIN1250
    collation = WIN1250_UNICODE
    collation = PXW_CSY
    collation = PXW_HUN
    collation = PXW_HUNDC
    collation = PXW_PLK
    collation = PXW_SLOV
    collation = BS_BA
    collation = WIN_CZ
    collation = WIN_CZ_CI_AI
 }
 charset = WIN1251 {
    intl_module = fbintl
    collation = WIN1251
    collation = WIN1251_UNICODE
    collation = PXW_CYRL
    collation = WIN1251_UA
 }
 charset = WIN1252 {
    intl_module = fbintl
    collation = WIN1252
    collation = WIN1252_UNICODE
    collation = PXW_INTL
    collation = PXW_INTL850
    collation = PXW_NORDAN4
    collation = WIN_PTBR
    collation = PXW_SPAN
    collation = PXW_SWEDFIN
 }
 charset = WIN1253 {
    intl_module = fbintl
    collation = WIN1253
    collation = WIN1253_UNICODE
    collation = PXW_GREEK
 }
 charset = WIN1254 {
    intl_module = fbintl
    collation = WIN1254
    collation = WIN1254_UNICODE
    collation = PXW_TURK
 }
 charset = NEXT {
    intl_module = fbintl
    collation = NEXT
    collation = NEXT_UNICODE
    collation = NXT_DEU
    collation = NXT_ESP
    collation = NXT_FRA
    collation = NXT_ITA
    collation = NXT_US
 }
 charset = WIN1255 {
    intl_module = fbintl
    collation = WIN1255
    collation = WIN1255_UNICODE
 }
 charset = WIN1256 {
    intl_module = fbintl
    collation = WIN1256
    collation = WIN1256_UNICODE
 }
 charset = WIN1257 {
    intl_module = fbintl
    collation = WIN1257
    collation = WIN1257_UNICODE
    collation = WIN1257_EE
    collation = WIN1257_LT
    collation = WIN1257_LV
 }
 charset = KSC_5601 {
    intl_module = fbintl
    collation = KSC_5601
    collation = KSC_5601_UNICODE
    collation = KSC_DICTIONARY
 }
 charset = BIG_5 {
    intl_module = fbintl
    collation = BIG_5
    collation = BIG_5_UNICODE
 }
 charset = GB_2312 {
    intl_module = fbintl
    collation = GB_2312
    collation = GB_2312_UNICODE
 }
 charset = KOI8R {
    intl_module = fbintl
    collation = KOI8R
    collation = KOI8R_UNICODE
    collation = KOI8R_RU
 }
 charset = KOI8U {
    intl_module = fbintl
    collation = KOI8U
    collation = KOI8U_UNICODE
    collation = KOI8U_UA
 }
 charset = WIN1258 {
    intl_module = fbintl
    collation = WIN1258
    collation = WIN1258_UNICODE
 }
 charset = TIS620 {
    intl_module = fbintl
    collation = TIS620
    collation = TIS620_UNICODE
 }
 charset = GBK {
    intl_module = fbintl
    collation = GBK
    collation = GBK_UNICODE
 }
 charset = CP943C {
    intl_module = fbintl
    collation = CP943C        ibm-943_P15A-2003
    collation = CP943C_UNICODE
 }
 charset = GB18030 {
    intl_module = fbintl
    collation = GB18030
    collation = GB18030_UNICODE
 }
@@ -0,0 +1,8 @@
 Plugin = UDR {
 	Module = $(dir_plugins)/udr_engine
 	Config = UDR_config
 }
 Config = UDR_config {
 	path = $(dir_plugins)/udr
 }
@@ -0,0 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE fontconfig SYSTEM "../fonts.dtd">
 <fontconfig>
         <!-- Microsoft -->
        <alias binding="same">
          <family>Calibri</family>
            <accept>
              <family>Carlito</family>
            </accept>
        </alias>
        <alias binding="same">
          <family>Carlito</family>
            <default>
              <family>Calibri</family>
            </default>
        </alias>
 </fontconfig>
@@ -0,0 +1,16 @@
 <?xml version="1.0"?>
 <!DOCTYPE fontconfig SYSTEM "fonts.dtd">
 <fontconfig>
  <alias binding="same">
    <family>Droid Sans</family>
    <accept>
      <family>Noto Sans</family>
    </accept>
  </alias>
  <alias binding="same">
    <family>Droid Serif</family>
    <accept>
      <family>Noto Serif</family>
    </accept>
  </alias>
 </fontconfig>
@@ -0,0 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE fontconfig SYSTEM "../fonts.dtd">
 <fontconfig>
        <alias>
          <family>sans-serif</family>
            <prefer>
              <family>Carlito</family>
            </prefer>
        </alias>
        <alias>
          <family>Carlito</family>
            <default>
              <family>sans-serif</family>
            </default>
        </alias>
 </fontconfig>
@@ -0,0 +1 @@
 ../conf.avail/30-0-google-crosextra-carlito-fontconfig.conf
@@ -0,0 +1 @@
 /usr/share/fontconfig/conf.avail/90-fonts-linux-libertine.conf
@@ -0,0 +1 @@
 4BAAFB98-5BFD-41EC-9E2E-E652D8D16A73
@@ -73,3 +73,7 @@ wheel:x:1003:pi
 _flatpak:x:129:
 tss:x:130:
 docker:x:998:
 debian-tor:x:131:
 cmk-agent:x:997:
 nm-openvpn:x:132:
 wireshark:x:133:
@@ -72,3 +72,7 @@ pi:x:1002:
 wheel:x:1003:pi
 _flatpak:x:129:
 tss:x:130:
 docker:x:998:
 debian-tor:x:131:
 cmk-agent:x:997:
 nm-openvpn:x:132:
@@ -368,7 +368,15 @@ while [ "x$list" != "x" ] ; do
    fi
  fi
-  if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+  # The GRUB_DISABLE_SUBMENU option used to be different than others since it was
  # mentioned in the documentation that has to be set to 'y' instead of 'true' to
  # enable it. This caused a lot of confusion to users that set the option to 'y',
  # 'yes' or 'true'. This was fixed but all of these values must be supported now.
  if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
    GRUB_DISABLE_SUBMENU="true"
  fi
  if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
    linux_entry "${OS}" "${version}" simple \
    "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}"
@@ -324,7 +324,15 @@ while [ "x${xen_list}" != "x" ] ; do
 	    fi
 	fi
-	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+	# The GRUB_DISABLE_SUBMENU option used to be different than others since it was
 	# mentioned in the documentation that has to be set to 'y' instead of 'true' to
 	# enable it. This caused a lot of confusion to users that set the option to 'y',
 	# 'yes' or 'true'. This was fixed but all of these values must be supported now.
 	if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
 	    GRUB_DISABLE_SUBMENU="true"
 	fi
 	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
 	    linux_entry "${OS}" "${version}" "${xen_version}" simple \
 		"${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" "${GRUB_CMDLINE_XEN} ${GRUB_CMDLINE_XEN_DEFAULT}"
@@ -41,14 +41,17 @@ EOF
 }
 if [ "x${GRUB_DISABLE_OS_PROBER}" = "xtrue" ]; then
  grub_warn "$(gettext_printf "os-prober will not be executed to detect other bootable partitions.\nSystems on them will not be added to the GRUB boot configuration.\nCheck GRUB_DISABLE_OS_PROBER documentation entry.")"
  exit 0
 fi
-if [ -z "`which os-prober 2> /dev/null`" ] || [ -z "`which linux-boot-prober 2> /dev/null`" ] ; then
+if ! command -v os-prober > /dev/null || ! command -v linux-boot-prober > /dev/null ; then
  # missing os-prober and/or linux-boot-prober
  exit 0
 fi
 grub_warn "$(gettext_printf "os-prober will be executed to detect other bootable partitions.\nIts output will be used to detect bootable binaries on them and create new boot entries.")"
 OSPROBED="`os-prober | tr ' ' '^' | paste -s -d ' '`"
 if [ -z "${OSPROBED}" ] ; then
  # empty os-prober output, nothing doing
@@ -272,7 +275,15 @@ EOF
 	fi
 	used_osprober_linux_ids="$used_osprober_linux_ids 'osprober-gnulinux-$LKERNEL-${recovery_params}-$counter-$boot_device_id'"
-	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+	# The GRUB_DISABLE_SUBMENU option used to be different than others since it was
 	# mentioned in the documentation that has to be set to 'y' instead of 'true' to
 	# enable it. This caused a lot of confusion to users that set the option to 'y',
 	# 'yes' or 'true'. This was fixed but all of these values must be supported now.
 	if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
 	    GRUB_DISABLE_SUBMENU="true"
 	fi
 	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
            cat << EOF
 menuentry '$(echo "$OS $onstr" | grub_quote)' $CLASS --class gnu-linux --class gnu --class os \$menuentry_id_option 'osprober-gnulinux-simple-$boot_device_id' {
 EOF
@@ -2,7 +2,7 @@
 set -e
 # grub-mkconfig helper script.
-# Copyright (C) 2012  Free Software Foundation, Inc.
+# Copyright (C) 2020  Free Software Foundation, Inc.
 #
 # GRUB is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -24,19 +24,17 @@ datarootdir="/usr/share"
 export TEXTDOMAIN=grub
 export TEXTDOMAINDIR="${datarootdir}/locale"
-. "${datarootdir}/grub/grub-mkconfig_lib"
+. "$pkgdatadir/grub-mkconfig_lib"
-efi_vars_dir=/sys/firmware/efi/efivars
+EFI_VARS_DIR=/sys/firmware/efi/efivars
 EFI_GLOBAL_VARIABLE=8be4df61-93ca-11d2-aa0d-00e098032b8c
-OsIndications="$efi_vars_dir/OsIndicationsSupported-$EFI_GLOBAL_VARIABLE"
+OS_INDICATIONS="$EFI_VARS_DIR/OsIndicationsSupported-$EFI_GLOBAL_VARIABLE"
-if [ -e "$OsIndications" ] && \
+if [ -e "$OS_INDICATIONS" ] && \
-   [ "$(( $(printf 0x%x \'"$(cat $OsIndications | cut -b5)") & 1 ))" = 1 ]; then
+   [ "$(( $(printf 0x%x \'"$(cat $OS_INDICATIONS | cut -b5)"\') & 1 ))" = 1 ]; then
-  LABEL="System setup"
+  LABEL="UEFI Firmware Settings"
-  gettext_printf "Adding boot menu entry for EFI firmware configuration\n" >&2
+  gettext_printf "Adding boot menu entry for UEFI Firmware Settings ...\n" >&2
  onstr="$(gettext_printf "(on %s)" "${DEVICE}")"
  cat << EOF
 menuentry '$LABEL' \$menuentry_id_option 'uefi-firmware' {
@@ -3,7 +3,7 @@ cat <<EOF
 if [ -f  \${config_directory}/custom.cfg ]; then
  source \${config_directory}/custom.cfg
 elif [ -z "\${config_directory}" -a -f  \$prefix/custom.cfg ]; then
-  source \$prefix/custom.cfg;
+  source \$prefix/custom.cfg
 fi
 EOF
@@ -73,3 +73,7 @@ wheel:!::pi
 _flatpak:!::
 tss:!::
 docker:!::
 debian-tor:!::
 cmk-agent:!::
 nm-openvpn:!::
 wireshark:!::
@@ -72,3 +72,7 @@ pi:!::
 wheel:!::pi
 _flatpak:!::
 tss:!::
 docker:!::
 debian-tor:!::
 cmk-agent:!::
 nm-openvpn:!::
@@ -6,7 +6,7 @@
 # Startskript for OMD sites
 ### BEGIN INIT INFO
-# Provides:          omd-2.0.0p24.cfe
+# Provides:          omd-2.1.0p15.cfe
 # Required-Start:    $syslog
 # Required-Stop:     $syslog
 # Default-Start:     2 3 4 5
@@ -20,7 +20,7 @@
 AUTOSTART=1
 [ -r /etc/default/omd ] && . /etc/default/omd
-VERSION=2.0.0p24.cfe
+VERSION=2.1.0p15.cfe
 VER="-V $VERSION"
 MSG="using omd version $VERSION"
 OMD="/omd/versions/$VERSION/bin/omd"
@@ -0,0 +1,63 @@
 #!/bin/sh
 # Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
 # This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
 # conditions defined in the file COPYING, which is part of this source code package.
 # Startskript for OMD sites
 ### BEGIN INIT INFO
 # Provides:          omd-2.1.0p6.cfe
 # Required-Start:    $syslog
 # Required-Stop:     $syslog
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: OMD sites
 # Description:       Start and stop the sites of the OpenSource Monitoring 
 #                    Distribution (OMD)
 ### END INIT INFO
 # -- start omd, if not disabled in /etc/default/omd
 AUTOSTART=1
 [ -r /etc/default/omd ] && . /etc/default/omd
 VERSION=2.1.0p6.cfe
 VER="-V $VERSION"
 MSG="using omd version $VERSION"
 OMD="/omd/versions/$VERSION/bin/omd"
 case "$1" in
    start)
 	if [ "$AUTOSTART" = "1" ]; then
          echo "Starting all OMD monitoring sites $MSG:"
          $OMD "$1" $VER
 	else
 	  echo "OMD autostart disabled, skipping ..."
 	fi
    ;;
    stop)
        echo "Stopping all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    restart)
        echo "Restarting all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    reload)
        echo "Reloading all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    status)
        echo "Checking state of all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    '')
 	echo "usage: $PROGNAME start|stop|restart|reload|status"
 	exit 1
    ;;
    *)
        echo "Doing $1 on all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
 esac
@@ -0,0 +1,63 @@
 #!/bin/sh
 # Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
 # This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
 # conditions defined in the file COPYING, which is part of this source code package.
 # Startskript for OMD sites
 ### BEGIN INIT INFO
 # Provides:          omd-2.1.0p8.cfe
 # Required-Start:    $syslog
 # Required-Stop:     $syslog
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: OMD sites
 # Description:       Start and stop the sites of the OpenSource Monitoring 
 #                    Distribution (OMD)
 ### END INIT INFO
 # -- start omd, if not disabled in /etc/default/omd
 AUTOSTART=1
 [ -r /etc/default/omd ] && . /etc/default/omd
 VERSION=2.1.0p8.cfe
 VER="-V $VERSION"
 MSG="using omd version $VERSION"
 OMD="/omd/versions/$VERSION/bin/omd"
 case "$1" in
    start)
 	if [ "$AUTOSTART" = "1" ]; then
          echo "Starting all OMD monitoring sites $MSG:"
          $OMD "$1" $VER
 	else
 	  echo "OMD autostart disabled, skipping ..."
 	fi
    ;;
    stop)
        echo "Stopping all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    restart)
        echo "Restarting all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    reload)
        echo "Reloading all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    status)
        echo "Checking state of all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    '')
 	echo "usage: $PROGNAME start|stop|restart|reload|status"
 	exit 1
    ;;
    *)
        echo "Doing $1 on all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
 esac
@@ -0,0 +1,63 @@
 #!/bin/sh
 # Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
 # This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
 # conditions defined in the file COPYING, which is part of this source code package.
 # Startskript for OMD sites
 ### BEGIN INIT INFO
 # Provides:          omd-2.1.0p9.cfe
 # Required-Start:    $syslog
 # Required-Stop:     $syslog
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: OMD sites
 # Description:       Start and stop the sites of the OpenSource Monitoring 
 #                    Distribution (OMD)
 ### END INIT INFO
 # -- start omd, if not disabled in /etc/default/omd
 AUTOSTART=1
 [ -r /etc/default/omd ] && . /etc/default/omd
 VERSION=2.1.0p9.cfe
 VER="-V $VERSION"
 MSG="using omd version $VERSION"
 OMD="/omd/versions/$VERSION/bin/omd"
 case "$1" in
    start)
 	if [ "$AUTOSTART" = "1" ]; then
          echo "Starting all OMD monitoring sites $MSG:"
          $OMD "$1" $VER
 	else
 	  echo "OMD autostart disabled, skipping ..."
 	fi
    ;;
    stop)
        echo "Stopping all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    restart)
        echo "Restarting all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    reload)
        echo "Reloading all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    status)
        echo "Checking state of all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
    '')
 	echo "usage: $PROGNAME start|stop|restart|reload|status"
 	exit 1
    ;;
    *)
        echo "Doing $1 on all OMD monitoring sites $MSG:"
        $OMD "$1" $VER
    ;;
 esac
@@ -1,156 +0,0 @@
 #!/bin/sh
 set -e
 ### BEGIN INIT INFO
 # Provides:           docker
 # Required-Start:     $syslog $remote_fs
 # Required-Stop:      $syslog $remote_fs
 # Should-Start:       cgroupfs-mount cgroup-lite
 # Should-Stop:        cgroupfs-mount cgroup-lite
 # Default-Start:      2 3 4 5
 # Default-Stop:       0 1 6
 # Short-Description:  Create lightweight, portable, self-sufficient containers.
 # Description:
 #  Docker is an open-source project to easily create lightweight, portable,
 #  self-sufficient containers from any application. The same container that a
 #  developer builds and tests on a laptop can run at scale, in production, on
 #  VMs, bare metal, OpenStack clusters, public clouds and more.
 ### END INIT INFO
 export PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
 BASE=docker
 # modify these in /etc/default/$BASE (/etc/default/docker)
 DOCKERD=/usr/bin/dockerd
 # This is the pid file managed by docker itself
 DOCKER_PIDFILE=/var/run/$BASE.pid
 # This is the pid file created/managed by start-stop-daemon
 DOCKER_SSD_PIDFILE=/var/run/$BASE-ssd.pid
 DOCKER_LOGFILE=/var/log/$BASE.log
 DOCKER_OPTS=
 DOCKER_DESC="Docker"
 # Get lsb functions
 . /lib/lsb/init-functions
 if [ -f /etc/default/$BASE ]; then
 	. /etc/default/$BASE
 fi
 # Check docker is present
 if [ ! -x $DOCKERD ]; then
 	log_failure_msg "$DOCKERD not present or not executable"
 	exit 1
 fi
 check_init() {
 	# see also init_is_upstart in /lib/lsb/init-functions (which isn't available in Ubuntu 12.04, or we'd use it directly)
 	if [ -x /sbin/initctl ] && /sbin/initctl version 2>/dev/null | grep -q upstart; then
 		log_failure_msg "$DOCKER_DESC is managed via upstart, try using service $BASE $1"
 		exit 1
 	fi
 }
 fail_unless_root() {
 	if [ "$(id -u)" != '0' ]; then
 		log_failure_msg "$DOCKER_DESC must be run as root"
 		exit 1
 	fi
 }
 cgroupfs_mount() {
 	# see also https://github.com/tianon/cgroupfs-mount/blob/master/cgroupfs-mount
 	if grep -v '^#' /etc/fstab | grep -q cgroup \
 		|| [ ! -e /proc/cgroups ] \
 		|| [ ! -d /sys/fs/cgroup ]; then
 		return
 	fi
 	if ! mountpoint -q /sys/fs/cgroup; then
 		mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup
 	fi
 	(
 		cd /sys/fs/cgroup
 		for sys in $(awk '!/^#/ { if ($4 == 1) print $1 }' /proc/cgroups); do
 			mkdir -p $sys
 			if ! mountpoint -q $sys; then
 				if ! mount -n -t cgroup -o $sys cgroup $sys; then
 					rmdir $sys || true
 				fi
 			fi
 		done
 	)
 }
 case "$1" in
 	start)
 		check_init
 		fail_unless_root
 		cgroupfs_mount
 		touch "$DOCKER_LOGFILE"
 		chgrp docker "$DOCKER_LOGFILE"
 		ulimit -n 1048576
 		# Having non-zero limits causes performance problems due to accounting overhead
 		# in the kernel. We recommend using cgroups to do container-local accounting.
 		if [ "$BASH" ]; then
 			ulimit -u unlimited
 		else
 			ulimit -p unlimited
 		fi
 		log_begin_msg "Starting $DOCKER_DESC: $BASE"
 		start-stop-daemon --start --background \
 			--no-close \
 			--exec "$DOCKERD" \
 			--pidfile "$DOCKER_SSD_PIDFILE" \
 			--make-pidfile \
 			-- \
 				-p "$DOCKER_PIDFILE" \
 				$DOCKER_OPTS \
 					>> "$DOCKER_LOGFILE" 2>&1
 		log_end_msg $?
 		;;
 	stop)
 		check_init
 		fail_unless_root
 		if [ -f "$DOCKER_SSD_PIDFILE" ]; then
 			log_begin_msg "Stopping $DOCKER_DESC: $BASE"
 			start-stop-daemon --stop --pidfile "$DOCKER_SSD_PIDFILE" --retry 10
 			log_end_msg $?
 		else
 			log_warning_msg "Docker already stopped - file $DOCKER_SSD_PIDFILE not found."
 		fi
 		;;
 	restart)
 		check_init
 		fail_unless_root
 		docker_pid=`cat "$DOCKER_SSD_PIDFILE" 2>/dev/null`
 		[ -n "$docker_pid" ] \
 			&& ps -p $docker_pid > /dev/null 2>&1 \
 			&& $0 stop
 		$0 start
 		;;
 	force-reload)
 		check_init
 		fail_unless_root
 		$0 restart
 		;;
 	status)
 		check_init
 		status_of_proc -p "$DOCKER_SSD_PIDFILE" "$DOCKERD" "$DOCKER_DESC"
 		;;
 	*)
 		echo "Usage: service docker {start|stop|restart|status}"
 		exit 1
 		;;
 esac
@@ -0,0 +1,298 @@
 #!/bin/sh -e
 ### BEGIN INIT INFO
 # Provides:          openvpn
 # Required-Start:    $network $remote_fs $syslog
 # Required-Stop:     $network $remote_fs $syslog
 # Should-Start:      network-manager
 # Should-Stop:       network-manager
 # X-Start-Before:    $x-display-manager gdm kdm xdm wdm ldm sdm nodm
 # X-Interactive:     true
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: Openvpn VPN service
 # Description: This script will start OpenVPN tunnels as specified
 #              in /etc/default/openvpn and /etc/openvpn/*.conf
 ### END INIT INFO
 # Original version by Robert Leslie
 # <rob@mars.org>, edited by iwj and cs
 # Modified for openvpn by Alberto Gonzalez Iniesta <agi@inittab.org>
 # Modified for restarting / starting / stopping single tunnels by Richard Mueller <mueller@teamix.net>
 . /lib/lsb/init-functions
 test $DEBIAN_SCRIPT_DEBUG && set -v -x
 DAEMON=/usr/sbin/openvpn
 DESC="virtual private network daemon"
 CONFIG_DIR=/etc/openvpn
 test -x $DAEMON || exit 0
 test -d $CONFIG_DIR || exit 0
 # Source defaults file; edit that file to configure this script.
 AUTOSTART="all"
 STATUSREFRESH=10
 OMIT_SENDSIGS=0
 if test -e /etc/default/openvpn ; then
  . /etc/default/openvpn
 fi
 start_vpn () {
    if grep -q '^[	 ]*daemon' $CONFIG_DIR/$NAME.conf ; then
      # daemon already given in config file
      DAEMONARG=
    else
      # need to daemonize
      DAEMONARG="--daemon ovpn-$NAME"
    fi
    if grep -q '^[	 ]*status ' $CONFIG_DIR/$NAME.conf ; then
      # status file already given in config file
      STATUSARG=""
    elif test $STATUSREFRESH -eq 0 ; then
      # default status file disabled in /etc/default/openvpn
      STATUSARG=""
    else
      # prepare default status file
      STATUSARG="--status /run/openvpn/$NAME.status $STATUSREFRESH"
    fi
    # tun using the "subnet" topology confuses the routing code that wrongly
    # emits ICMP redirects for client to client communications
    SAVED_DEFAULT_SEND_REDIRECTS=0
    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
       grep -q '^[[:space:]]*topology[[:space:]]*subnet' $CONFIG_DIR/$NAME.conf ; then
        # When using "client-to-client", OpenVPN routes the traffic itself without
        # involving the TUN/TAP interface so no ICMP redirects are sent
        if ! grep -q '^[[:space:]]*client-to-client' $CONFIG_DIR/$NAME.conf ; then
            sysctl -w net.ipv4.conf.all.send_redirects=0 > /dev/null
            # Save the default value for send_redirects before disabling it
            # to make sure the tun device is created with send_redirects disabled
            SAVED_DEFAULT_SEND_REDIRECTS=$(sysctl -n net.ipv4.conf.default.send_redirects)
            if [ "$SAVED_DEFAULT_SEND_REDIRECTS" -ne 0 ]; then
              sysctl -w net.ipv4.conf.default.send_redirects=0 > /dev/null
            fi
        fi
    fi
    log_progress_msg "$NAME"
    STATUS=0
    start-stop-daemon --start --quiet --oknodo \
        --pidfile /run/openvpn/$NAME.pid \
        --exec $DAEMON -- $OPTARGS --writepid /run/openvpn/$NAME.pid \
        $DAEMONARG $STATUSARG --cd $CONFIG_DIR \
        --config $CONFIG_DIR/$NAME.conf || STATUS=1
    [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /run/openvpn/$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid
    # Set the back the original default value of send_redirects if it was changed
    if [ "$SAVED_DEFAULT_SEND_REDIRECTS" -ne 0 ]; then
      sysctl -w net.ipv4.conf.default.send_redirects=$SAVED_DEFAULT_SEND_REDIRECTS > /dev/null
    fi
 }
 stop_vpn () {
  start-stop-daemon --stop --quiet --oknodo \
      --pidfile $PIDFILE --exec $DAEMON --retry 10
  if [ "$?" -eq 0 ]; then
    rm -f $PIDFILE
    [ "$OMIT_SENDSIGS" -ne 1 ] || rm -f /run/sendsigs.omit.d/openvpn.$NAME.pid
    rm -f /run/openvpn/$NAME.status 2> /dev/null
  fi
 }
 case "$1" in
 start)
  log_daemon_msg "Starting $DESC"
  # first create /run directory so it's present even
  # when no VPN are autostarted by this script, but later
  # by systemd openvpn@.service
  mkdir -p /run/openvpn
  # autostart VPNs
  if test -z "$2" ; then
    # check if automatic startup is disabled by AUTOSTART=none
    if test "x$AUTOSTART" = "xnone" -o -z "$AUTOSTART" ; then
      log_warning_msg " Autostart disabled."
      exit 0
    fi
    if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
      # all VPNs shall be started automatically
      for CONFIG in `cd $CONFIG_DIR; ls *.conf 2> /dev/null`; do
        NAME=${CONFIG%%.conf}
        start_vpn
      done
    else
      # start only specified VPNs
      for NAME in $AUTOSTART ; do
        if test -e $CONFIG_DIR/$NAME.conf ; then
          start_vpn
        else
          log_failure_msg "No such VPN: $NAME"
          STATUS=1
        fi
      done
    fi
  #start VPNs from command line
  else
    while shift ; do
      [ -z "$1" ] && break
      if test -e $CONFIG_DIR/$1.conf ; then
        NAME=$1
        start_vpn
      else
       log_failure_msg " No such VPN: $1"
       STATUS=1
      fi
    done
  fi
  log_end_msg ${STATUS:-0}
  ;;
 stop)
  log_daemon_msg "Stopping $DESC"
  if test -z "$2" ; then
    for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
      NAME=`echo $PIDFILE | cut -c14-`
      NAME=${NAME%%.pid}
      stop_vpn
      log_progress_msg "$NAME"
    done
  else
    while shift ; do
      [ -z "$1" ] && break
      if test -e /run/openvpn/$1.pid ; then
        PIDFILE=`ls /run/openvpn/$1.pid 2> /dev/null`
        NAME=`echo $PIDFILE | cut -c14-`
        NAME=${NAME%%.pid}
        stop_vpn
        log_progress_msg "$NAME"
      else
        log_failure_msg " (failure: No such VPN is running: $1)"
      fi
    done
  fi
  log_end_msg 0
  ;;
 # Only 'reload' running VPNs. New ones will only start with 'start' or 'restart'.
 reload|force-reload)
 log_daemon_msg "Reloading $DESC"
  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c14-`
    NAME=${NAME%%.pid}
 # If openvpn if running under a different user than root we'll need to restart
    if egrep '^[[:blank:]]*user[[:blank:]]' $CONFIG_DIR/$NAME.conf > /dev/null 2>&1 ; then
      stop_vpn
      start_vpn
      log_progress_msg "(restarted)"
    else
      kill -HUP `cat $PIDFILE` || true
    log_progress_msg "$NAME"
    fi
  done
  log_end_msg 0
  ;;
 # Only 'soft-restart' running VPNs. New ones will only start with 'start' or 'restart'.
 soft-restart)
 log_daemon_msg "$DESC sending SIGUSR1"
  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c14-`
    NAME=${NAME%%.pid}
    kill -USR1 `cat $PIDFILE` || true
    log_progress_msg "$NAME"
  done
  log_end_msg 0
 ;;
 restart)
  shift
  $0 stop ${@}
  $0 start ${@}
  ;;
 cond-restart)
  log_daemon_msg "Restarting $DESC."
  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c14-`
    NAME=${NAME%%.pid}
    stop_vpn
    start_vpn
  done
  log_end_msg 0
  ;;
 status)
  GLOBAL_STATUS=0
  if test -z "$2" ; then
    # We want status for all defined VPNs.
    # Returns success if all autostarted VPNs are defined and running
    if test "x$AUTOSTART" = "xnone" ; then
      # Consider it a failure if AUTOSTART=none
      log_warning_msg "No VPN autostarted"
      GLOBAL_STATUS=1
    else
      if ! test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
        # Consider it a failure if one of the autostarted VPN is not defined
        for VPN in $AUTOSTART ; do
          if ! test -f $CONFIG_DIR/$VPN.conf ; then
            log_warning_msg "VPN '$VPN' is in AUTOSTART but is not defined"
            GLOBAL_STATUS=1
          fi
        done
      fi
    fi
    for CONFIG in `cd $CONFIG_DIR; ls *.conf 2> /dev/null`; do
      NAME=${CONFIG%%.conf}
      # Is it an autostarted VPN ?
      if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
        AUTOVPN=1
      else
        if test "x$AUTOSTART" = "xnone" ; then
          AUTOVPN=0
        else
          AUTOVPN=0
          for VPN in $AUTOSTART; do
            if test "x$VPN" = "x$NAME" ; then
              AUTOVPN=1
            fi
          done
        fi
      fi
      if test "x$AUTOVPN" = "x1" ; then
        # If it is autostarted, then it contributes to global status
        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}'" || GLOBAL_STATUS=1
      else
        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}' (non autostarted)" || true
      fi
    done
  else
    # We just want status for specified VPNs.
    # Returns success if all specified VPNs are defined and running
    while shift ; do
      [ -z "$1" ] && break
      NAME=$1
      if test -e $CONFIG_DIR/$NAME.conf ; then
        # Config exists
        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}'" || GLOBAL_STATUS=1
      else
        # Config does not exist
        log_warning_msg "VPN '$NAME': missing $CONFIG_DIR/$NAME.conf file !"
        GLOBAL_STATUS=1
      fi
    done
  fi
  exit $GLOBAL_STATUS
  ;;
 *)
  echo "Usage: $0 {start|stop|reload|restart|force-reload|cond-restart|soft-restart|status}" >&2
  exit 1
  ;;
 esac
 exit 0
 # vim:set ai sts=2 sw=2 tw=0:
@@ -0,0 +1,146 @@
 #! /bin/sh
 ### BEGIN INIT INFO
 # Provides: pcscd
 # Required-Start:    $local_fs $remote_fs $syslog
 # Required-Stop:     $local_fs $remote_fs $syslog
 # Should-Start:      udev
 # Should-Stop:       udev
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: Daemon to access a smart card using PC/SC
 # Description:       The PC/SC daemon is used to dynamically
 #                    allocate/deallocate reader drivers at runtime and manage
 #                    connections to the readers.
 ### END INIT INFO
 # Authors: 
 #   Carlos Prados Bocos <cprados@debian.org>
 #   Ludovic Rousseau <rousseau@debian.org>
 # Do NOT "set -e"
 # PATH should only include /usr/* if it runs after the mountnfs.sh script
 PATH=/sbin:/usr/sbin:/bin:/usr/bin
 DESC="PCSC Lite resource manager"
 NAME=pcscd
 DAEMON=/usr/sbin/$NAME
 IPCDIR=/var/run/pcscd
 PIDFILE=$IPCDIR/$NAME.pid
 SCRIPTNAME=/etc/init.d/$NAME
 # if you need to pass arguments to pcscd you should edit the file
 # /etc/default/pcscd and add a line 
 # DAEMON_ARGS="--your-option"
 # Exit if the package is not installed
 [ -x "$DAEMON" ] || exit 0
 # Read configuration variable file if it is present
 [ -r /etc/default/$NAME ] && . /etc/default/$NAME
 # Load the VERBOSE setting and other rcS variables
 . /lib/init/vars.sh
 # Define LSB log_* functions.
 # Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
 . /lib/lsb/init-functions
 # get LANG variable (code from /etc/init.d/keymap.sh)
 ENV_FILE="none"
 [ -r /etc/environment ] && ENV_FILE="/etc/environment"
 [ -r /etc/default/locale ] && ENV_FILE="/etc/default/locale"
 value=$(egrep "^[^#]*LANG=" $ENV_FILE | tail -n1 | cut -d= -f2)
 eval LANG=$value
 #
 # Function that starts the daemon/service
 #
 do_start()
 {
 	# create $IPCDIR with correct access rights
 	if [ ! -d $IPCDIR ]
 	then
 		rm -rf $IPCDIR
 		mkdir $IPCDIR
 	fi
 	chmod 0755 $IPCDIR
 	# Return
 	#   0 if daemon has been started
 	#   1 if daemon was already running
 	#   2 if daemon could not be started
 	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
 		|| return 1
 	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
 		$DAEMON_ARGS \
 		|| return 2
 	# Add code here, if necessary, that waits for the process to be ready
 	# to handle requests from services started subsequently which depend
 	# on this one.  As a last resort, sleep for some time.
 }
 #
 # Function that stops the daemon/service
 #
 do_stop()
 {
 	# Return
 	#   0 if daemon has been stopped
 	#   1 if daemon was already stopped
 	#   2 if daemon could not be stopped
 	#   other if a failure occurred
 	start-stop-daemon --stop --quiet --retry=3 --pidfile $PIDFILE --name $NAME
 	RETVAL="$?"
 	[ "$RETVAL" = 2 ] && return 2
 }
 case "$1" in
  start)
 	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
 	do_start
 	case "$?" in
 		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
 		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
 	esac
 	;;
  stop)
 	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
 	do_stop
 	case "$?" in
 		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
 		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
 	esac
 	;;
  status)
 	  status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME" && exit 0 || exit $?
 	  ;;
  restart|force-reload)
 	#
 	# If the "reload" option is implemented then remove the
 	# 'force-reload' alias
 	#
 	log_daemon_msg "Restarting $DESC" "$NAME"
 	do_stop
 	case "$?" in
 	  0|1)
 		do_start
 		case "$?" in
 			0) log_end_msg 0 ;;
 			1) log_end_msg 1 ;; # Old process is still running
 			*) log_end_msg 1 ;; # Failed to start
 		esac
 		;;
 	  *)
 	  	# Failed to stop
 		log_end_msg 1
 		;;
 	esac
 	;;
  *)
 	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
 	exit 3
 	;;
 esac
 :
--- a/Show More
+++ b/Show More
		`@@ -1 +1 @@`
			`/usr/bin/firefox-esr`				`/usr/bin/google-chrome-stable`
		`@@ -0,0 +1 @@`
							`/usr/lib/jvm/java-11-openjdk-amd64/bin/java`
		`@@ -0,0 +1 @@`
							`/usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz`
		`@@ -0,0 +1 @@`
							`/usr/lib/jvm/java-11-openjdk-amd64/lib/jexec`
		`@@ -1 +1 @@`
			`/omd/versions/2.0.0p24.cfe`				`/omd/versions/2.1.0p15.cfe`
		`@@ -1 +1 @@`
			`/omd/versions/2.0.0p24.cfe/lib/omd/bash_completion`				`/omd/versions/2.1.0p15.cfe/lib/omd/bash_completion`
		`@@ -1 +1 @@`
			`/omd/versions/2.0.0p24.cfe/bin/omd`				`/omd/versions/2.1.0p15.cfe/bin/omd`
		`@@ -1 +1 @@`
			`/omd/versions/2.0.0p24.cfe/share/man/man8/omd.8.gz`				`/omd/versions/2.1.0p15.cfe/share/man/man8/omd.8.gz`
		`@@ -0,0 +1,2 @@`
							`@{torbrowser_installation_dir}=@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*`
							`@{torbrowser_home_dir}=@{torbrowser_installation_dir}/Browser`
`@@ -1,2 +1,2 @@`
	`// DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal`	`// DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal`
	`APT::LastInstalledKernel "5.10.0-14-amd64";`	`APT::LastInstalledKernel "5.10.0-19-amd64";`