{_ji d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
mZ d dlmZmZ d dlmZ d dlmZmZmZmZ d dlmZ d dlm Z m Z m Z m Z m Z m!Z!m"Z" ej# e$ Z%d Z&e&' d
Z(e&' d Z) G d
d Z* G d de*e Z+ G d de*e Z, G d de Z- G d de- Z. G d de+ Z/dZ0de1de2d e3fd Z4 e5d e5d e5d e5d! e5d" d#Z6 G d$ d%e/ Z7 G d& d'e Z8d e9fd(Z:d ee fd)Z;dS )* N)abstractmethod)ListOptional)Core Packaging)
LicenseCLN)AbstractFeature FeatureError
FeatureStatusea4_only)cPanel)
OsReleaseInfo check_runcheck_run_outside_sandboxrun run_cmd_and_log_outside_sandbox_wrap_outside_sandbox_shell
os_versionzexport PATH=/opt/imunify360/venv/bin:$PATH; _els_tmp=$(mktemp) && curl -sf -o "$_els_tmp" {url} && sh "$_els_tmp" -i; _els_rc=$?; rm -f "$_els_tmp"; exit $_els_rczHhttps://repo.alt.tuxcare.com/alt-php-els/install-els-alt-php-rpm-repo.sh)urlzHhttps://repo.alt.tuxcare.com/alt-php-els/install-els-alt-php-deb-repo.shc e Zd ZdZdZdZeddee fd Z edefd Z
ed Z e ede
fd Zed
Zede
fd Zej d Zej d
ZdefdZdS )SimpleInstallerMixIna This is a mixin class implementing common case installation scenario.
Installation is supposed to be through a single command cls.INSTALL_CMD.
Removal is done through interpolating a space separated list of package
names to remove into cls.REMOVE_CMD_TMPL. List of packages to remove is
obtained by collecting all installed alt-php* packages except those we want
to keep (as returned by required_packages()).
z
/bin/falseNenabledc d S N selfr s W/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/features/hardened_php.py
generate_repoz"SimpleInstallerMixIn.generate_repoH c
K d S r r r s r pre_install_cmdz$SimpleInstallerMixIn.pre_install_cmdL s r! c d S r r r s r remove_repoz SimpleInstallerMixIn.remove_repoP r r! returnc " K t S )z0Set of installed package names matching alt-php*)setr r! r _list_alt_php_packagesz+SimpleInstallerMixIn._list_alt_php_packagesT s uu r! c D | d p |dk p|dk S )Nzalt-php-internalzalt-php-configzalt-php-hyperscan)
startswith)clspkgs r _keep_installedz$SimpleInstallerMixIn._keep_installedZ s5
NN- . .
*&&
*))
r! c r K d{V }t fd|D S )z@Set of installed alt-php packages except those we keep installedNc 3 F K | ]} | |V d S r )r/ ).0r. r- s r z9SimpleInstallerMixIn._feature_packages..i s6 NN3S5H5H5M5MN3NNNNNNr! )r* r) )r- all_alt_phps ` r _feature_packagesz&SimpleInstallerMixIn._feature_packagese sO 6 6 8 8888888 NNNN+NNNNNNr! c K t j | j d d {V | d d {V t | j | j d {V S NTr )asyncio to_threadr r# r INSTALL_CMDINSTALL_LOG_FILE_MASKr% s r installz SimpleInstallerMixIn.installk s
2DAAAAAAAAAA""4"000000000 5 d 8
r! c l K t j | j d {V | j d t
t j | d {V }|
d d {V t || j d {V S )N Fr8 )
r9 r: r& REMOVE_CMD_TMPLformatjoinmapshlexquoter5 r# r REMOVE_LOG_FILE_MASK)r cmds r removezSimpleInstallerMixIn.removex s 0111111111")) HHSD,B,B,D,D&D&D&D&D&D&DEE F F
""5"1111111114 *
r! c T K t | d {V S r )boolr5 r% s r _check_installed_implz*SimpleInstallerMixIn._check_installed_impl s2 $0022222222333r! r )__name__
__module__ __qualname____doc__r; r@ r r rJ r r# r& staticmethodr) r* classmethodr/ r5 r raise_if_shouldnt_install_nowr= raise_if_shouldnt_remove_nowrH rK r r! r r r : sk K"O Xd^ ^ T ^ ^ # ^ \
[
O O O O [O
2
32
1
21
4T 4 4 4 4 4 4r! r c e Zd ZdZdZdZdZdej z Z de z Z
de z Z dZ d Z
d
Zd Ze e
d gZd
Zed Zd Zd Zddee fdZdefdZd Ze de fd Z dS )HardenedPHPCentosz(/etc/yum.repos.d/imunify360-alt-php.repoz /etc/yum.repos.d/php-els.repoz/etc/yum/vars/phpelstoken Hardened-PHP /var/log/%s %s/install-hardenedphp.log.*%s/remove-hardenedphp.log.*z:yum group mark remove alt-php; yum -y groupinstall alt-phpz0yum group mark install alt-php; yum -y remove {}z dnf config-manager --enable crbz dnf config-manager --disable crb c t j | j d S # t $ r Y d S t $ r$ t
d| j Y d S w xY wNzCan't delete %s)osrH LEGACY_REPO_FILEFileNotFoundErrorOSErrorloggererrorr% s r _remove_legacy_repoz%HardenedPHPCentos._remove_legacy_repo sz C Id+ , , , , , DD C C C LL*D,A B B B B B B C
A)AAc t j g dt j t j dk rdS t j | j S )N)rpm-qels-php-releasestdoutstderrr F)
subprocesscallDEVNULLr] pathexists
ELS_REPO_FILEr- s r _els_php_release_installedz,HardenedPHPCentos._els_php_release_installed sZ
O000!)!)
5w~~c /000r! c " t t }t j |dt j }|j dk rNt d|j |j d
d S d S )NTshellrk r z%ELS RPM repo setup failed (rc=%d): %sreplaceerrors) r _ELS_RPM_SETUPrl r PIPE
returncodera rb rk decodestripr rG results r _install_els_repoz#HardenedPHPCentos._install_els_repo s ).99 4
HHH ! ! LL7!
$$I$66<<>>
" !r! c j | sd S t j }|sd S t j t j | j d t j | j t j t j
z t j z d }t j |d 5 }|
| d d d n # 1 swxY w Y t j | j d d S # t $ r$ t d| j Y d S w xY w)NTexist_ok wCan't write %s)rs r
get_server_idr] makedirsro dirname
TOKEN_FILEopenO_WRONLYO_CREATO_TRUNCfdopenwritechmodr` ra rb r server_idfdfs r _write_tokenz HardenedPHPCentos._write_token sY ..00 F ,.. F < K884 H H H H bj(2:5 B
2s##
#q """
#
#
#
#
#
#
#
#
#
#
#
#
#
#
# HT_e , , , , , < < < LL)4? ; ; ; ; ; ; >$/ 0 0 ' $ $ & & &..00 % " " $ $ $ r! c K t d sd S |r.t | j d {V d S t | j d {V d S )N9)r r, r ENABLE_CRB_CMDsplitDISABLE_CRB_CMDr s r r# z!HardenedPHPCentos.pre_install_cmd s ||&&s++ : F
:D / 5 5 7 788 8 8 8 8 8 8 8 8 8D 0 6 6 8 899 9 9 9 9 9 9 9 9 9r! c . | d S r )rc r% s r r& z HardenedPHPCentos.remove_repo s """""r! r' c K t g d d {V } t | S )N)rf z-qaz
--queryformatz%{NAME}
alt-php*)r r) r} r )
raw_outputs r r* z(HardenedPHPCentos._list_alt_php_packages sd $ D D D
:$$&&,,..///r! r ) rL rM rN r^ rq r NAMEr PRODUCTLOG_DIRr< rF r; r@ r r rA _CMD_LISTrc rQ rs r r r rJ r r# r& rP r) r* r r! r rU rU s7 A3M,J Ddl*G :W D87BNKHO6N8O o 4 4R 8 89IC C C
1
1 [
1 < < <& Xd^ :T : : : :# # # 0# 0 0 0 \0 0 0r! rU c e Zd ZdZdZdZdej z Zdez Z dez Z
dZ dZ e e
d gZed
Zd Zd Zddee fdZdefdZedefd Zedefd Zd Zedefd Z d
S )HardenedPHPUbuntuz$/etc/apt/sources.list.d/php-els.listz!/etc/apt/auth.conf.d/php-els.confrV rW rX rY zapt-get install -y alt-phpzapt-get purge -y {}rZ c t j g dt j t j }|j dk r |j dk sdS t j | j
S )N)
dpkg-query-Wz-f=${db:Status-Status}rh ri r s installedF) rl r r{ rn r| rj r~ r] ro rp rq )r- r s r rs z,HardenedPHPUbuntu._els_php_release_installed sx
? %
" "v}':':'<'< 'L'L5w~~c /000r! c J | t t }t j |dt j }|j dk rNt d|j |j
d d S d S )NTru r z%ELS DEB repo setup failed (rc=%d): %srw rx ) _clear_reinstreq_if_stuckr _ELS_DEB_SETUPrl r r{ r| ra rb rk r} r~ r s r r z#HardenedPHPUbuntu._install_els_repo s &&((().99 4
HHH ! ! LL7!
$$I$66<<>>
" !r! c p | sd S t j }|sd S t j t j | j d t j | j t j t j
z t j z d }t j |d 5 }|
d|z d d d n # 1 swxY w Y t j | j d d S # t $ r$ t d| j Y d S w xY w)NTr r r z ? ? ? ? ? ? @s6 B D ;C D C$$D 'C$( D *D54D5Nr c ~ | s| | d S r )rs r r r s r r z HardenedPHPUbuntu.generate_repo s@ ..00 % " " $ $ $ r! c
K d S r r r s r r# z!HardenedPHPUbuntu.pre_install_cmd$ s r! r' c t j g dt j t j } | j dk o | j dk S )N)r r z-f=${db:Status-Eflag}rh ri r s reinstreq)rl r r{ rn r| rj r~ )r s r _els_php_release_reinstreqz,HardenedPHPUbuntu._els_php_release_reinstreq' s\
? %
A%O&-*=*=*?*?<*OOr! c | sdS t d t j g dd dS )NFzfels-php-release is wedged at reinstreq from a prior interrupted install; force-removing to unblock apt)dpkgz--removez--force-remove-reinstreqrh )checkT)r ra rb rl r rr s r r z+HardenedPHPUbuntu._clear_reinstreq_if_stuck5 sm --// 5
B
tr! c . | d S r )r r% s r r& z HardenedPHPUbuntu.remove_repoH s &&(((((r! c K t g d d {V d } t d | D S )N)r r z-fz ${Package} ${db:Status-Status}
r
c 3 T K | ]#}| \ }}|d k |V $dS ) installedN)r )r2 liner. statuss r r3 z;HardenedPHPUbuntu._list_alt_php_packages..] sL
$
V$$
%$$$
r! )r r} r~ r r) )pkgs_in_dpkg_dbs r r* z(HardenedPHPUbuntu._list_alt_php_packagesK s VXX
UWW
U4[[
'
r! r ) rL rM rN rq r r r r r r< rF r; r@ rA r rQ rs r r r rJ r r# rP r r r& r) r* r r! r r r si :M8N Ddl*G :W D87B.K+O o 4 4R 8 89I1 1 [1" @ @ @, Xd^
T P P P P \ P $ [$) ) )
#
\
r! r c > e Zd ZdZdZdZd Zd Zd Zd Z de
fdZ d S )
HardenedPHPCloudLinuxz4HardenedPHP is managed by lvemanager in CloudLinuxOSemptyc
K | S r r r% s r initzHardenedPHPCloudLinux.initj s r! c r K t g d d {V \ }}}dt j |dk | j diS )N)rf rg
lvemanageritemsr )r
lve_installedmessage)r r MANAGED_BY_LVEMSG)r rc_s r r z HardenedPHPCloudLinux.statusm s[ 8 8 899999999Aq '6!#q 8
r! c . K t | j r r
r r% s r r= z HardenedPHPCloudLinux.installw 48$$$r! c . K t | j r r r% s r rH z HardenedPHPCloudLinux.removez r r! r' c
K dS )NTr r% s r rK z+HardenedPHPCloudLinux._check_installed_impl} s tr! N) rL rM rN r r< rF r r r= rH rJ rK r r! r r r e s|
@C #"
% % %% % %T r! r c e Zd ZdZd ZdS )HardenedPHPCloudLinuxSoloz1HardenedPHP is not supported in CloudLinuxOS Soloc 2 K dt j | j diS )Nr )r r )r NOT_SUPPORTED_BY_CL_SOLOr r% s r r z HardenedPHPCloudLinuxSolo.status s( '@ 8
r! N)rL rM rN r r r r! r r r s(
=C
r! r c j e Zd ZdZdej z Zdez Zdez ZdZ dZ
dZ e e
gZ e
d Ze
d Ze
d
efd Zdd
ee fd
Zd Zedee fd ZdefdZe fd Zee j d Z ee j d Z xZ!S ) EaPHPCentosz0/etc/yum.repos.d/imunify360-ea-php-hardened.reporW z%s/install-ea_php.log.*z%s/remove-ea_php.log.*z5yum -y groupremove ea-php; yum -y groupinstall ea-phpzD/opt/imunify360/venv/share/imunify360/scripts/remove_hardened_php.pyzimunify360-ea-php-hardenedc t j t j t j | j S r )r] ro rB r DATADIRbasename REPO_FILErr s r _repo_tmpl_filepathz EaPHPCentos._repo_tmpl_filepath s- w||I -rw/?/?
/N/NOOOr! c \ dd fdt j D }n$# t $ r}t d| d }~ww xY wt j d }| |z }t j | S )N:rZ c 3 H K | ] }t | z V d S r )str)r2 kseptokens r r3 z-EaPHPCentos._prepare_token.. sC ()E!H
# r! z*License token can not be created by error sign)
rB r VERIFY_FIELDS_V1KeyErrorr
base64 b64decodeencodeurlsafe_b64encoder} )r- r fieldse
sign_bytesdatar s ` @r _prepare_tokenzEaPHPCentos._prepare_token s CWW -7-H FF @Q@@
%eFm44
}}+'--44666s .3
AAAr c |rdnd} | | }nV# t $ rI}|s;d}t j | }n|Y d }~nd }~ww xY wt
| d 5 }| }| || cd d d S # 1 swxY w Y d S )N10z unregister-token-placeholderr)r r )
r r
r r r r} r r readrA )r- r r enabled_flagr token_placeholder
repo_templatetemplates r _prepare_repo_confz EaPHPCentos._prepare_repo_conf sP %.ss3 &&u--EE
$B! 0%,,.. &(( #))++S
1
1 F]$))++H?? ?EE F F F F F F F F F F F F F F F F F Fs&
A1?A,,A1+CCCNc |Xt j } | | j || j d dk }n# t
$ r d}Y nw xY wt
j }t
j }|s+|rt d t d t | j d 5 }|
| || d d d n # 1 swxY w Y t j | j t j | j d S )Nr r Tz=tried to enable repo but server_id is empty (not registered?)zDserver_id is empty (not registered?) ignoring due to removal of repor ) configparser ConfigParserr r REPO_NAME Exceptionr get_tokenr r
ra warningr r r r] r statr st_mode)r r repor r repo_files r r zEaPHPCentos.generate_repo s ? ,..D
$.))) t~.y9S@
$&& ,..
"$
NN
$.#
&
& E) OOD 3 3E7 C C D D D E E E E E E E E E E E E E E E
)A)A)C)C!D!D!LMMMMMs# 1A AA*C99C= C=c 2 | d d S NFr8 )r r% s r r& zEaPHPCentos.remove_repo s 5)))))r! r' c K t dd d {V } | fdt dt d D S )Nz5rpm -qa --queryformat "%{NAME} %{RELEASE}
" "ea-php*"T)rv c 8 g | ]}| |d z dS ) )namereleaser )r2 iwordss r
z5EaPHPCentos._query_eaphp_versions.. s=
1X%A, 7 7
r! r )r r} r rangelen)r r s @r _query_eaphp_versionsz!EaPHPCentos._query_eaphp_versions s $ D
!!##))++
1c%jj!,,
r! c K t j d }| d {V D ]*}| |d
d|d v r dS +dS )Nz ea-php\d+r
cloudlinuxr
TF)recompiler search)r versioned_rer. s r rK z!EaPHPCentos._check_installed_impl sv z,// 3355555555 C ##CK00< C N22ttur! c T K t d {V S r superr r __class__s r r zEaPHPCentos.status - WW^^%%%%%%%%%r! c r K | d t | j | j d {V S r7 )r r r; r< r% s r r= zEaPHPCentos.install sZ
4(((4 d 8
r! c r K | d t | j | j d {V S r )r r
REMOVE_SCRIPTrF r% s r rH zEaPHPCentos.remove sZ
5)))4 9
r! r )"rL rM rN r r r r r< rF r; r# r r rQ r r rJ r r r r& rP r dictr rK r r r rR r= rS rH
__classcell__r s @r r r s BIdl*G 5 ?3g=IKZM,I m,IP P [P 7 7 [ 7 F F F F [F"N NXd^ N N N N2* * *
d
\
T & & & & X& 2
32 X
1
21 X
r! r zFor EL9/Ubuntu20 cpanel servers use cPanel Profile to configure harden php.
More info:
https://docs.cpanel.net/ea4/basics/the-ea-cpanel-tools-package-scripts/
https://docs.cpanel.net/whm/software/easyapache-4-interface/rawcommandr' c r t j | }| di d sM| di dd }t d || | d }t |t r|ni S )Nmetadatar reasonunknownzwhmapi1 {} failed: {}r )jsonloadsgetr
rA
isinstancer$ )r' r( outputr+ r s r _parse_whmapi1_outputr2
s
Z__F ::j" % % ) )( 3 3 LJ++//)DD299'6JJKKK ::f D dD)) 144r1r! )ea-apache24-mod_mpm_workerea-apache24-mod_mpm_eventea-apache24-mod_cgidzea-apache24-mod_http2)ea-apache24-mod_mpm_preforkr4 ea-apache24-mod_cgi)r6 r3 r7 )r5 r3 r4 )r7 r6 )r6 r3 r4 r7 r5 c N e Zd ZeZdZdez ZdZdez dz Ze e
j d Z d Z
e e
j d Zd ef fd
Zd Zed ee d
ee d ee fd Zed ee fd Zed ee fd Z xZS )EaPHPCentosEL9zimunify_hardened_php.jsonz /etc/cpanel/ea4/profiles/custom/z6/etc/cpanel/ea4/profiles/vendor/cloudlinux/allphp.jsonz,/usr/local/bin/ea_install_profile --install z; _rc=$?; if [ "$_rc" -ne 0 ]; then echo "ea_install_profile failed with exit code $_rc"; tail -n 20 "$(ls -t /usr/local/cpanel/logs/packman/errors/* 2>/dev/null | head -1)" 2>/dev/null; fi; exit $_rcc K | d t j | j d {V t g d d {V | d {V t
| j | j d {V S )NTr8 )yumz-yr= zea-profiles-cloudlinux) r r9 r: _setup_alt_php_repor _save_imunify_profiler INSTALL_PROFILE_CMDr< r% s r r= zEaPHPCentosEL9.install[ s
4((( 8999999999 ( > > >
((*********4 $d&@
r! c t j | j r| | s| | d S r r r% s r r< z"EaPHPCentosEL9._setup_alt_php_repor r r! c K | d t j | j n# t $ r Y nw xY wd| j z S )NFr8 z)Repo imunify360-ea-php-hardened removed.
)r r] rH IMUNIFY_PROFILE_PATHr_ r r% s r rH zEaPHPCentosEL9.removey sg
5))) Id/ 0 0 0 0 D ;dhFFs 4
A Ar' c K t j | j sdS t d {V S )NF)r] ro rp rA r rK r s r rK z$EaPHPCentosEL9._check_installed_impl sO w~~d 788 5WW22444444444r! c . K | d {V }t j | j d {V }| || }dddd| j z dddgd |D z }t
| d {V }t |d d S ) N/usr/sbin/whmapi1
--output=jsonea4_save_profilez filename=zname=Imunify Hardened PHPz*desc=Imunify-managed Hardened PHP profile.z overwrite=1c g | ]}d |z S )zpkg=r )r2 ps r r z8EaPHPCentosEL9._save_imunify_profile.. s & & &AVaZ & & &r! )_get_installed_ea4_packagesr9 r: _load_baseline_packages_merge_profile_packagesIMUNIFY_PROFILE_FILENAMEr r2 )r r baselinepkgsargsr' s r r= z$EaPHPCentosEL9._save_imunify_profile s ::<<<<<<<< !*4+GHHHHHHHH++Ix@@ $7 7 ' 8
' & & & &' dOO###### c#566666r! r rM c t | }t }|D ],}|t |t z }-t |t | |z
z S r )r) _EA4_MUTUAL_CONFLICTSr/ frozensetsorted)r rM
installed_setblockedr. s r rK z&EaPHPCentosEL9._merge_profile_packages sh I
%% C CC ,00ikkBB BGGms8}}w'>?@@@r! c K t g d d {V } t | d }d|vr t dt | z |d S )N)rD rE $ea4_get_currently_installed_packagesrW packageszKwhmapi1 ea4_get_currently_installed_packages returned no 'packages' field: )r r2 r
repr)r' r s r rI z*EaPHPCentosEL9._get_installed_ea4_packages s
% 7
T ! ! (t**
J r! c t | j 5 }t j | d pg cd d d S # 1 swxY w Y d S )NrN )r BASELINE_PROFILE_PATHr- loadr/ )r- r s r rJ z&EaPHPCentosEL9._load_baseline_packages s #+
,
, 29Q<<##F++1r 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2s )A AA)rL rM rN _CPANEL_HARDENED_PHP_MSGr rL rA r[ r> r r rR r= r< rS rH rJ rK r= rP r r rK rI rQ rJ r% r& s @r r9 r9 C s
"C : *-EE A 7
2
32 X
* 1G G 21 XG 5T 5 5 5 5 5 5 7 7 7$
A9
A(,S
A
c
A
A
A \
A tCy \ & 2S 2 2 2 [2 2 2 2 2r! r9 c e Zd ZdZdZdZeZdZdZ d Z
d Z e e
j d Ze e
j d Ze fd Zd
efd Z xZS ) EaPHPUbuntuCpanelz+/etc/apt/sources.list.d/cloudlinux-ea4.listzDhttps://repo.cloudlinux.com/cloudlinux-ubuntu/cloudlinux-ea4/stable/zcloudlinux-ea4r c t | j d 5 }| d| j d d d d d S # 1 swxY w Y d S )Nr zdeb z ./
)r r r REPO_URL)r r s r _generate_repoz EaPHPUbuntuCpanel._generate_repo s
$.#
&
& 1!
GG/4=/// 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1s AA Ac t j | j d S # t $ r Y d S t $ r$ t
d| j Y d S w xY wr\ )r] rH r r_ r` ra rb r% s r _remove_repoz EaPHPUbuntuCpanel._remove_repo ss < Idn % % % % % DD < < < LL*DN ; ; ; ; ; ; > 21 X> & & & & X&.T . . . . . . . .r! r_ c @ t j d S )Nz/etc/cloudlinux-release)r] ro rp r r! r _is_cloudlinux_release_installedrl s
7>>3 4 44r! c b t j } t j sLt j s9t j s&t j st j r=| r+t t j
dk rt S | rt S t S t j r!t j rt S t" S t j st j r%| r t) rt" S t* S t, S dS )z
:return: AbstractFeature subclass: feature that implements Hardened PHP
installation for current environment.
N)r
is_installedr is_centosis_rhelis_oracle_linux is_almalinux
is_rockylinuxintdistro
major_versionr9 r rU
is_cloudlinuxis_cloudlinux_solor r is_ubuntu is_debianrl r_ r )
has_cpanels r get_hardened_php_featurer} s(
$&&J !! % " " % ( * * % % ' ' %
& ( ( % %#f 2 4 455::! !
% $ $"$$ % + - - -, ,$$ !M$;$=$= ! %/11
-,,$ $ 4r! )r s<
! ! ! ! ! ! ! ! < < < < < < < < 8 8 8 8 8 8 8 7 7 7 7 7
8 $ $ !'' * ( !'' * ( J4 J4 J4 J4 J4 J4 J4 J4ZW0 W0 W0 W0 W0,o W0 W0 W0tA
A
A
A
A
,o A
A
A
H O :
5
t
t
t
t
t
# t
t
t
pD 2u 2s 2t 2 2 2 2 $-9
$ $ #,)
# # "+
" " %9
&I
=$ $ NH2 H2 H2 H2 H2[ H2 H2 H2V'. '. '. '. '. '. '. '.T5$ 5 5 5 5 (?"; r!