OwlCyberSecurity - MANAGER
Edit File: rhnreg.cpython-36.pyc
3 `��g�| � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlmZ d dlm Z d dlm Z d dlm Z d dlm Z d d lm Z d d lmZ d d lmZ d d lmZmZ d d lmZ y4d dlZd dlZd dlmZmZm Z m Z m Z m Z W nF e k �r6 d dl!j"Zd dl#j$Ze%Ze&Ze'Z e(Z e)Z e)Z e*Z+Y nX yd dl,m-Z- W n e k �rb dZ-Y nX d dl.Z.e.j/ddd�Z0e1e0d��s�e0j.e0_2e0j2Z3dZ4de4 Z5de4 Z6dZ7dZ8dddd d �Z9d d � e9j:� D �Z;d d lm<Z< e<j=� Z>e j?� Z@d!d"� ZAd#d$� ZBd%d&� ZCd'd(� ZDd)d*� ZEd+d,� ZFd-d.� ZGd/d0� ZHd1d2� ZIe(eJd3�d4d5�ZKeJd6�d7d8�ZLd�d:d;�ZMd<d=� ZNd>d?� ZOd@dA� ZPdBdC� ZQdDdE� ZRdFdG� ZSdHdI� ZTdJdK� ZUG dLdM� dM�ZVd�eJdN�dOdP�ZWdQdR� ZXdSdT� ZYdUdV� ZZdWdX� Z[e(dY�dZd[�Z\d�d\d]�Z]d^d_� Z^d`da� Z_dbdc� Z`dddddi fddde�Zadfdg� Zbdhdi� Zcdjdk� Zddldm� Zedndo� Zfdpdq� Zgd�drds�ZhG dtdu� du�Zidvdw� Zjdxdy� Zkd�dzd{�Zld|d}� Zme� d~k�r�dd�� Znn d d�lomnZn dS )�� N)� up2dateUtils)� up2dateErrors)� up2dateAuth)� rhnserver)�pkgUtils)� up2dateLog)�rhnreg_constants)�hardware)� convertPackagesFromHashToList)� getPlatform)�ustr�sstr)� raise_with_tb)�ListType� TupleType� StringType� UnicodeType�DictType�DictionaryType)�supportzrhn-client-toolsT)Zfallback�ugettextz/etc/sysconfig/rhnz%s/rhn_register_remindz%s/hw-activation-codez/etc/pki/consumer/cert.pemz /etc/sysconfig/rhn/jwt.tokenZ shared_pro�shared�solo�admin)zCloudLinux OS Shared ProzCloudLinux OS SharedzCloudLinux OS SolozCloudLinux OS Adminc C s i | ]\}}||�qS � r )�.0�k�vr r � /usr/lib/python3.6/rhnreg.py� <dictcomp>G s r )�configc C s& t jdt jt jB ��r"d} d}t j|t jt jB �sNt jdt jt jB �rNd}d} t jd| t j�r�t j|t jt jB �r�t jd| � t jd| � n ttd �� n�t jd t jt jB �r�t jd � n ttd �� d }t j|t jt jB ��s t jdt jt jB ��r d}t jd| �}|�r"t jd| � d S )Nz/usr/sbin/rhnsdz/usr/lib/systemd/systemz/usr/bin/systemctlz/bin/systemctlz/lib/systemd/systemz%s/rhnsd.servicez%s enable rhnsd > /dev/nullz%s start rhnsd > /dev/nullz,Warning: unable to enable rhnsd with systemdz/sbin/chkconfigz$/sbin/chkconfig rhnsd on > /dev/nullz.Warning: unable to enable rhnsd with chkconfigz /sbin/servicez/usr/sbin/servicez%s rhnsd status > /dev/nullz%s rhnsd start > /dev/null)�os�access�R_OK�X_OK�system�print�_)Zsystemd_system_unitdirZsystemd_systemctlZ service_pathZrcr r r � startRhnsdO s, r( c C s� t d p d} tj| tj�s i S t| d�}|j� }i }x`|D ]X}|j� }|dkrPq:y|jd�\}}W n" tk r� t t j |�� Y nX |j� ||< q:W |S )NZ oemInfoFilez/etc/sysconfig/rhn/oeminfo�r� �:) �cfgr! r" r# �open� readlines�strip�split� ValueErrorr r ZOemInfoFileError)Z configFile�fd�L�info�i�key�valuer r r � getOemInfop s r8 c C s* t jtt j�r"t jt�} | jdkS dS dS )z@ Returns true if system is registred using subscription manager r FN)r! r" � RHSM_FILEr# �stat�st_size)Zstatinfor r r �rhsm_registered� s r< c C s t jtd t j�S )N� systemIdPath)r! r" r, r# r r r r � registered� s r> c C s$ t jtt j�s ttd�} | j� d S )Nzw+)r! r" � REMIND_FILEr# r- �close)r2 r r r � createSystemRegisterRemindFile� s rA c C s t jtt j�rt jt� d S )N)r! r" r? r# �unlinkr r r r � removeSystemRegisterRemindFile� s rC c C s� t jj| �}t j|t j�s dS t j| t j�rLyt j| | d � W n dS t j| t jt j B t dd��}t j |d�}z|j t |�� W d|j� X dS )z; Write a file to disk that is not readable by other users. Fz.saveZ0600� �wNT)r! �path�dirnamer" �W_OK�F_OK�renamer- �O_WRONLY�O_CREAT�int�fdopen�writer r@ )Z secure_fileZ file_contentsZdir_namer2 Zfd_filer r r �_write_secure_file� s rP c C s" t td | �}|rt� t� |S )Nr= )rP r, rC �updateRhsmStatus)�systemId�resr r r � writeSystemId� s rT c C sx d} t j� }|d krd S y6tj|�}|j� }|j| �d j}t|dd � �}W n$ ttj fk rr t j d� d S X |S )Nz'//member[name='system_id']/value/stringr � z@systemID file doesn't have system_id field or the file is broken) r � getSystemId�libxml2ZparseDocZxpathNewContextZ xpathEvalZcontentrM � IndexErrorZ parserError�log�log_me)Z xpath_strrR �result�context� system_idr r r �extract_system_id� s r^ )�token�allowTransitionc C sn ddl }ddl}|jjd�s dS dd| g}|r8|jd� |j|�}|j� \}}|jdkrjtj d||f � dS )zH Execute binary file which we use as hook for jwt token updates r Nz /opt/cloudlinux/venv/bin/python3z/usr/sbin/cl-pre-jwt-updatez --new-tokenz--allow-transitionz7Pre jwt update hook failed with stdout=%s and stderr=%s) � subprocessr! rF �exists�append�Popen� communicate� returncoderY rZ )r_ r` ra r! �cmd�p�stdout�stderrr r r � _execute_pre_jwt_update_hook� s rk )r` c C sj ddl }ddl}|jjd�s dS dg}| r4|jd� |j|�}|j� \}}|jdkrftj d||f � dS )zH Execute binary file which we use as hook for jwt token updates r Nz /opt/cloudlinux/venv/bin/python3z /usr/sbin/cl-post-jwt-updatez--allow-transitionz8Post jwt update hook failed with stdout=%s and stderr=%s) ra r! rF rb rc rd re rf rY rZ )r` ra r! rg rh ri rj r r r � _execute_post_jwt_update_hook� s rl Fc C s� t j� }y|jj| �}W nF tjk r. dS tjtjtjtj fk r^ t j t j � � dS X t||� tt|� t|� dS )z� Get a JWT token from CLN and save it to the file :param systemId: content of file `/etc/sysconfig/rhn/systemid` :return: None N)r � RhnServerZup2dateZ getJWTTokenr �UnknownMethodExceptionZAuthenticationTicketErrorZRhnUuidUniquenessError�CommunicationErrorZ$AuthenticationOrAccountCreationErrorrY � log_exception�sys�exc_infork rP � JWT_TOKENrl )rR r` Z xmlrpm_serverr[ r r r �getAndWriteJWTTokenToFile� s rt c C s t t| d �S )z=Returns True if the write is successful or False if it fails.� )rP � HW_CODE_FILE)�hw_activation_coder r r � writeHWCode s rx c C sp y"t jjd�r t� \} }| |fS W n tk r6 Y nX t� \} }| dk rR| |fS t� \} }| dk rl| |fS dS )a� This function returns the UUID and virtualization type of this system, if it is a guest. Otherwise, it returns None. To figure this out, we'll use a number of heuristics (list in order of precedence): 1. Check /proc/xen/xsd_port. If exists, we know the system is a host; exit. 2. Check SMBIOS. If vendor='Xen' and UUID is non-zero, we know the system is a fully-virt guest; exit. 3. Check /sys/hypervisor/uuid. If exists and is non-zero, we know the system is a para-virt guest; exit. 4. If non of the above checks worked; we know we have a non-xen-enabled system; exit. z/proc/xen/xsd_portN)NN)r! rF rb �get_fully_virt_info�IOError�get_para_virt_info)�uuid� virt_typer r r � get_virt_info s r~ c C sV y<t dd�} | j� }| j� |j� jdd�jd�}d}||fS tk rP Y nX dS ) z� This function checks /sys/hypervisor/uuid to see if the system is a para-virt guest. It returns a (uuid, virt_type) tuple. z/sys/hypervisor/uuidr) �-r* z ZparaN)NN)r- �readr@ �lower�replace�rstriprz )Z uuid_filer| r} r r r r{ C s r{ c C s@ t j� } t j� }| j� dkr8|j� jdd�}d}||fS dS dS )z� This function looks in the SMBIOS area to determine if this is a fully-virt guest. It returns a (uuid, virt_type) tuple. Zxenr r* ZfullyN)NN)r Z dmi_vendorZdmi_system_uuidr� r� )Zvendorr| r} r r r ry U s ry c C s t d| �} t| �td�kS )Nz0x%sr )�eval�long)r| r r r � _is_host_uuidc s r� c C s t j� } | jj� S )N)r rm � registrationZwelcome_message)�sr r r � welcomeTextg s r� c C s t j� } | jj� d S )N)r rm Z capabilitiesZvalidate)r� r r r �getCapsm s r� c C s t j� }|jj| |�S )N)r rm r� Z reserve_user)�username�passwordr� r r r � reserveUserr s r� c @ sf e Zd Zddd�Zdd� Zdd� Zdd � Zd d � Zd d � Zdd� Z dd� Z dd� Z dd� Z dd� Z dS )�RegistrationResultNc C sB || _ || _|| _|| _|| _t|�dkr2|| _nd | _|| _d S )Nr )� _systemId� _channels�_failedChannels� _systemSlots�_failedSystemSlots�len�_universalActivationKey�rawDict)�selfrR �channelsZfailedChannels� systemSlotsZfailedSystemSlotsZuniversalActivationKeyr� r r r �__init__x s zRegistrationResult.__init__c C s | j S )N)r� )r� r r r rV � s z RegistrationResult.getSystemIdc C s | j S )N)r� )r� r r r � getChannels� s z RegistrationResult.getChannelsc C s | j S )N)r� )r� r r r �getFailedChannels� s z$RegistrationResult.getFailedChannelsc C s | j S )N)r� )r� r r r �getSystemSlots� s z!RegistrationResult.getSystemSlotsc s � fdd�� j D �S )Nc s g | ]}� j |��qS r )�_getSlotDescription)r r� )r� r r � <listcomp>� s z@RegistrationResult.getSystemSlotDescriptions.<locals>.<listcomp>)r� )r� r )r� r �getSystemSlotDescriptions� s z,RegistrationResult.getSystemSlotDescriptionsc s � fdd�� j D �S )Nc s g | ]}� j |��qS r )�_getFailedSlotDescription)r r� )r� r r r� � s zFRegistrationResult.getFailedSystemSlotDescriptions.<locals>.<listcomp>)r� )r� r )r� r � getFailedSystemSlotDescriptions� s z2RegistrationResult.getFailedSystemSlotDescriptionsc C s | j S )z5Returns None if no universal activation key was used.)r� )r� r r r �getUniversalActivationKey� s z,RegistrationResult.getUniversalActivationKeyc C s t | j�dkot | j�dkS )z�Returns True if the system was subscribed to at least one channel and was given any type of system slot so it will get updates. In other words, returns True if the system will be getting at least basic updates. r )r� r� r� )r� r r r �hasBaseAndUpdates� s z$RegistrationResult.hasBaseAndUpdatesc C s& |dkrt jd t j S | j|�S d S )N�virtualization_host� )r �VIRTZ VIRT_FAILEDr� )r� �slotr r r r� � s z,RegistrationResult._getFailedSlotDescriptionc C s$ |dkrt jS |dkr t jS |S d S )NZenterprise_entitledr� )r Z MANAGEMENTr� )r� r� r r r r� � s z&RegistrationResult._getSlotDescription)N)�__name__� __module__� __qualname__r� rV r� r� r� r� r� r� r� r� r� r r r r r� w s r� )�human_readablec C sF d}t jj|�sdS t|�� }|j� jd�}| r4|S t| S Q R X d S )Nz/opt/cloudlinux/cl_editionr ru )r! rF rb r- r� r/ �_human_readable_to_product)r� Zedition_cache_file�fZ raw_editionr r r �getServerEdition� s r� c C sl ddl m} m} tjjd�s"t� �d}| |d||d�}dd� |j� D �\}}|rVt� �t|d d � j d ��S ) Nr )rd �PIPEz/opt/cloudlinux/venv/binzZ/opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import cpusers; print(cpusers())"T)�shellri rj c S s g | ]}|j � j� �qS r )�decoder/ )r r[ r r r r� � s z.get_users_count_from_cllib.<locals>.<listcomp>� z, ���) ra rd r� r! rF rb r1 re r� r0 )rd r� rg Zprocess�output�errorsr r r �get_users_count_from_cllib� s r� c C s ddl m} | � }t|j� �S )Nr )�ClPwd)Zup2date_client.clpwdr� r� Z get_uid_dict)r� �pwdr r r �get_users_count_generic� s r� c C s* y t � } W n tk r$ t� } Y nX | S )N)r� � Exceptionr� )Z users_countr r r �countServerUsers� s r� c C sT y t | �}W nP tjk rH } z td|j � tjd� W Y d d }~X n tjk r\ d S X t� }|d }||krxd S |r�tdj t | t | d�� td� tjd� |�sPtj j � s�td� td� t | � dt | � d �}d dd �}|j |�} | d k �rHt� } | | k�r4td || � d | � d�� tjd� n|� d|| � d�}t|� d S )Nz%sr� �editionz�WARNING: Automatic registration in yum transactions is only available when edition matches the provided license. Your current edition is {current_edition} and your license is {new_edition}.)Zcurrent_editionZ new_editionz0Run clnreg_ks manually to complete registration.a Error: interactive input required for edition migration, but tool is running in non-interactive mode. Please try running the tool again in interactive shell or add `--migrate-silently` flag to accept allquestions and perform the edition migration silently.za edition installed on your server does not match license you are trying to register server with: zh. Migration is required. You may lose access to the services which are not supported by the new edition.� )r r z@The license you are trying to register with allows a maximum of z% hosting accounts which is less than z) users detected on this server. Aborting.zG Also, the license you are trying to register with allows a maximum of zM hosting accounts. Make sure that your system complies with this requirement.)�checkKeyr ro r& �errmsgrq �exitrn r� �format�_product_to_human_readable�stdin�isatty�getr� �_askConfirmation) � activationKeyZ strictEditionZsilentMigrationZlicenseInformation�eZcurrentEditionZlicenseEdition�messageZedition_to_users_limitZlicense_users_limitZusers_on_serverr r r �checkLicenseKey� sB r� )�confirmationMessagec C s2 t | � td�}|j� dkr.t d� tjd� dS )zS Prints message and makes sure that client is ready for edition migration. z Do you want to continue? [N/y]: �yzAborted.r� N)r& �inputr� rq r� )r� Zresponser r r r� s r� c C s� | dkr|dkst d��|tj� tj� tj� d�}tj� }|dk rJ||d< |rlx |j� D ]\}} | ||< qXW |rz||d< n| |d< ||d< |dk r�||d< n(tj j d �r�d ntj j d �r�d nd |d< t d r�t t j� �|d< tj� } | jj|�} | S )ziWrapper for the old xmlrpc to register a system. Activates subscriptions if a reg num is given. Nz)username and password usage is deprecated)Z profile_nameZ os_releaseZ release_nameZ architecturer] r_ r� r� r� z /etc/cloudlinux-edition-solor z /etc/cloudlinux-edition-adminr r �supportsSMBIOS�smbios)�AssertionErrorr � getVersion� getOSRelease�getArchr rV �itemsr! rF rb r, �_encode_charactersr � get_smbiosr rm r� Z new_system) r� r� � profileNamer_ �otherr� Z auth_dictZ system_id_xmlr6 �itemr� �retr r r �registerSystem) s2 r� c C s t j� }|jj| �}|S )zG Check the activation key and return it's edition and customer )r rm r� Z license_check)r� r� r� r r r r� X s r� c C sl y,t j� } | j| dddd�}t j|dd�}W n t jk rB d S X y |j� W n t jk rf Y nX d S )Nz com.redhat.SubscriptionManagerz/EntitlementStatusF)Z introspectz0com.redhat.SubscriptionManager.EntitlementStatus)Zdbus_interface)�dbusZ SystemBusZProxyObjectClassZ InterfaceZ DBusExceptionZ check_status)ZbusZ validity_objZvalidity_ifacer r r rQ c s rQ c C s� t j� }tj� }tj� }tj� }d }y|jj| ||||�}W n@ tj k r| t j � d }|j dkrvt tj|j�� n� Y nX |S )Nr� �c )r rm r r� r� Z getReleaser� Zavailable_eus_channels� xmlrpclibZFaultrq rr Z faultCoder r Z DelayErrorZ faultString)r� r� r� Z server_archZserver_versionZserver_releaseZavailableChannelsr� r r r �getAvailableChannelsx s r� c C s$ |dkr i }|r6| dks t �|dks(t �|dk sZt �n$| dk sBt �|dk sNt �|dksZt �x |j� D ]}|dksdt �qdW td r�ttj� �|d< tj� }|r�|jj |t j � t j � t j � ||�}n$|jj|t j � t j � t j � | ||�}tjd | � t|d |d |d |d |d |d |d�} | S )a� Uses the new xmlrpcs to register a system. Returns a dict instead of just system id. The main differences between this and registerSystem and that this doesn't do activation and does child channel subscriptions if possible. See the documentation for the xmlrpc handlers in backend for more detail. If nothing is going to be in other, it can be {} or None. New in RHEL 5. N�registration_number�org_id� virt_uuidr} �channelr� r� z Returned: %sr] r� Zfailed_channelsZ system_slotsZfailed_system_slotsZuniversal_activation_key)r� )r� r� r� r} r� )r� �keysr, r� r r� r rm r� Znew_system_activation_keyr r� r� r� Znew_system_user_passrY � log_debugr� ) r� r� r� Zpackagesr� r� r6 r� r4 r[ r r r �registerSystem2� sN r� c C s t d S )NZ supportsEUS)r, r r r r �server_supports_eus� s r� c C s d S )Nr )rR Z hardwareListr r r � sendHardware� s r� c C s d S )Nr )rR Z packageListr r r � sendPackages� s r� c C s t d k rt j� d S )N)r Zrefresh)rR r r r � sendVirtInfo� s r� c C s t j� }t|jj| � � d S )N)r rm r& r� Z list_packages)rR r� r r r � listPackages� s r� c C s� t j | �\}}}}}}|dks&|dkrDd| } t j | �\}}}}}}|d krVtjd��|dksn|dksn|dkrrd}t j||||||f�} | S ) zzRaises up2dateErrors.InvalidProtocolError if the server url has a protocol specified and it's not http or https. Nr* zhttps://�https�httpzCYou specified an invalid protocol. Only https and http are allowed.�/z/XMLRPC)r� r� )�urlparser ZInvalidProtocolErrorZ urlunparse)�serverZprotocol�hostrF Z parametersZqueryZfragmentIdentifierr r r �makeNiceServerUrl� s r� c C s dS )zdReturns 'hosted' if the url points to a known hosted server. Otherwise returns 'satellite'. Z satelliter )Z serverUrlr r r � getServerType s r� c @ sB e Zd ZdZdZi i fdd�Zdd� Zdd� Zd d � Zd d � Z d S )�ActivationResultr r� c C s || _ || _|| _|| _dS )zschannels and systemSlots are dicts where the key/value pairs are label (string) / quantity (int). N)�_status�_regNumr� r� )r� ZstatusZregistrationNumberr� r� r r r r� s zActivationResult.__init__c C s | j S )N)r� )r� r r r � getStatus$ s zActivationResult.getStatusc C s | j S )N)r� )r� r r r �getRegistrationNumber' s z&ActivationResult.getRegistrationNumberc C s | j S )z7Returns a dict- the key/value pairs are label/quantity.)r� )r� r r r �getChannelsActivated* s z%ActivationResult.getChannelsActivatedc C s | j S )z7Returns a dict- the key/value pairs are label/quantity.)r� )r� r r r �getSystemSlotsActivated. s z(ActivationResult.getSystemSlotsActivatedN) r� r� r� � ACTIVATED_NOW� ALREADY_USEDr� r� r� r� r� r r r r r� s r� c G s� g }x�| D ]�}t |�}|tkr(t|�}nZ|tkrDtdd� |D ��}n>|tkr\dd� |D �}n&|tksl|tkr�tdd� |j � D ��}|j |� q W t |�dkr�|d S t|�S dS ) u� All the data we gathered from dmi, bios, gudev are in utf-8, we need to convert characters beyond ord(127) - e.g ® to unicode. c s s | ]}t |�V qd S )N)r� )r r5 r r r � <genexpr>< s z%_encode_characters.<locals>.<genexpr>c S s g | ] }t |��qS r )r� )r r5 r r r r� > s z&_encode_characters.<locals>.<listcomp>c S s g | ]\}}t ||��qS r )r� )r �name�valr r r r� @ s r� r N) �typer r r �tupler r r �dictr� rc r� )�argsr[ r� Z item_typer r r r� 2 s r� c C s� d }d }d }yt j� }t|�}W n$ tjd� tjtj� � Y nX |d k r�y.t| ||�}|j � t j krz|j � }t |� W n> tjk r� tjd� Y n tjk r� tjd� Y nX |S )NzMThere was an error while reading the hardware info from the bios. Traceback: z<There are are no entitlements associated with this hardware.z,The hardware id was not recognized as valid.)r Zget_hal_system_and_smbiosr� rY rZ rp rq rr �activateHardwareInfor� r� r� r� rx r ZNotEntitlingErrorr� Z InvalidRegistrationNumberError)Zloginr� ZactivateHWResult� hardwareInforw r r r �_activate_hardwareH s* r c C s� i }|rd|i}t j� }|jj| |||�}|d }|d }tjd| � |dkr\ttj|�S |dkrpttj|�S d| } t j | ��dS ) z�Tries to activate an entitlement linked to the hardware info that we read from the bios. Returns an ActivationResult. Can raise: Invalid number. Hardware info is not entitling. Communication errors, etc r� Z status_coder� z Server returned status code %sr r� zNThe server returned unknown status code %s while activating the hardware info.N) r rm r� Zactivate_hardware_inforY r� r� r� r� r ro ) r� r� r ZorgIdr� r� r[ Z statusCodeZregNumr� r r r r d s r c C sd t jdt jt jB �rVddlm} m} | dg|||d�}tdd� |jj � |j j � � n t j d� d S )Nz/usr/sbin/rhn_checkr )rd r� )r� ri rj c S s t j| �S )N)rY rZ )�xr r r �<lambda>� s z$spawnRhnCheckForUI.<locals>.<lambda>z Warning: unable to run rhn_check) r! r" r# r$ ra rd r� �mapri r. rj rY rZ )rd r� rh r r r �spawnRhnCheckForUI� s r Zdebc C s dS )z.On Debian no extra action for plugin is neededr� r )r� r r r r r r � pluginEnable� s r )r )F)F)NNNNNN)N)N)pr! rq r� �base64rW Zup2date_clientr r r r r r r r Z up2date_client.rhnPackageInfor Zup2date_client.pkgplatformr Zrhn.i18nr r Zrhn.tbr r� r� �typesr r r r r r � ImportErrorZ urllib.parse�parseZ xmlrpc.clientZclient�listr �bytes�strr rM r� Zvirtualizationr �gettextZ translation�t�hasattrr r' Z SYSID_DIRr? rv r9 rs r� r� r� r ZinitUp2dateConfigr, ZinitLogrY r( r8 r< r> rA rC rP rT r^ �boolrk rl rt rx r~ r{ ry r� r� r� r� r� r� r� r� r� r� r� r� r� rQ r� r� r� r� r� r� r� r� r� r� r� r r r r Zup2date_client.pmPluginr r r r �<module> s� $ ! ,? > - ; "