{"id":105384,"date":"2022-10-26T15:36:38","date_gmt":"2022-10-26T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux"},"modified":"2022-10-26T15:36:38","modified_gmt":"2022-10-26T13:36:38","slug":"lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux","title":{"rendered":"Lennart Pottering a propus o nou\u0103 arhitectur\u0103 de boot verificat\u0103 pentru Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Lennart Poettering a publicat o propunere pentru modernizarea procesului de \u00eenc\u0103rcare a distribu\u021biilor Linux, av\u00e2nd ca scop solu\u021bionarea problemelor existente \u0219i simplificarea organiz\u0103rii unei \u00eenc\u0103rc\u0103ri verificate, care s\u0103 confirme autenticitatea nucleului \u0219i a mediului sistemic de baz\u0103. Modific\u0103rile necesare pentru implementarea noii arhitecturi sunt deja incluse \u00een baza de cod a systemd \u0219i afecteaz\u0103 componente precum systemd-stub, systemd-measure, systemd-cryptenroll, systemd-cryptsetup, systemd-pcrphase \u0219i systemd-creds.      <\/p>\n<p>Modific\u0103rile propuse constau \u00een crearea unei imagini unice \u0219i universale UKI (Unified Kernel Image), care s\u0103 combine imaginea nucleului Linux, un manager pentru \u00eenc\u0103rcarea nucleului din UEFI (UEFI boot stub) \u0219i un mediu sistemic \u00eenc\u0103rcat \u00een memorie initrd, care este utilizat pentru ini\u021bializarea ini\u021bial\u0103 \u00eenainte de montarea sistemului de fi\u0219iere root. \u00cen locul imaginii disk-ului RAM initrd, \u00een UKI poate fi comprimat \u00eentregul sistem, ceea ce permite crearea unor medii sistemice complet verificate, care sunt \u00eenc\u0103rcate \u00een memoria RAM. Imaginea UKI este formatat\u0103 ca un fi\u0219ier executabil \u00een format PE, care poate fi \u00eenc\u0103rcat nu doar prin intermediul \u00eenc\u0103rc\u0103toarelor tradi\u021bionale, ci poate fi apelat direct din firmware-ul UEFI.     <\/p>\n<p>Posibilitatea de a apela din UEFI permite utilizarea verific\u0103rii integrit\u0103\u021bii \u0219i autenticit\u0103\u021bii prin semn\u0103tur\u0103 digital\u0103, acoperind nu doar nucleul, ci \u0219i con\u021binutul initrd. \u00cen acest fel, suportul pentru a apela din \u00eenc\u0103rc\u0103toarele tradi\u021bionale permite p\u0103strarea unor capacit\u0103\u021bi precum livrarea mai multor versiuni ale nucleului \u0219i revenirea automat\u0103 la nucleul func\u021bional \u00een cazul \u00een care apar probleme cu noul nucleu dup\u0103 instalarea unei actualiz\u0103ri.    <\/p>\n<p>\u00cen prezent, majoritatea distribu\u021biilor Linux utilizeaz\u0103 \u00een procesul de ini\u021bializare o succesiune de etape: \u201efirmware \u2192 strat de shim semnat digital de Microsoft \u2192 bootloader GRUB semnat digital de distribu\u021bie \u2192 kernel Linux semnat digital de distribu\u021bie \u2192 mediu initrd nesemnat \u2192 FS r\u0103d\u0103cin\u0103\u201d. Absen\u021ba verific\u0103rii initrd \u00een distribu\u021biile tradi\u021bionale genereaz\u0103 probleme de securitate, deoarece \u00een acest mediu se extrag, printre altele, cheile pentru decriptarea FS-ului r\u0103d\u0103cin\u0103.     <\/p>\n<p>Verificarea imaginii initrd nu este suportat\u0103 deoarece acest fi\u0219ier este generat pe sistemul local al utilizatorului \u0219i nu poate fi certificat prin semn\u0103tura digital\u0103 a distribu\u021biei, ceea ce complic\u0103 considerabil organizarea verific\u0103rii \u00een utilizarea modului SecureBoot (pentru a certifica initrd, utilizatorul trebuie s\u0103 genereze propriile chei \u0219i s\u0103 le \u00eencarce \u00een firmware-ul UEFI). \u00cen plus, organizarea actual\u0103 a \u00eenc\u0103rc\u0103rii nu permite aplicarea informa\u021biilor din registrele TPM PCR (Platform Configuration Register) pentru controlul integrit\u0103\u021bii componentelor spa\u021biului utilizator, \u00een afar\u0103 de shim, grub \u0219i nucleu. Printre problemele existente se men\u021bioneaz\u0103, de asemenea, complexitatea actualiz\u0103rii bootloader-ului \u0219i lipsa posibilit\u0103\u021bii de a restric\u021biona accesul la cheile din TPM pentru versiunile mai vechi ale sistemului de operare, care au devenit dep\u0103\u0219ite dup\u0103 instalarea actualiz\u0103rii.        <\/p>\n<p>Obiectivele principale ale implement\u0103rii unei noi arhitecturi de \u00eenc\u0103rcare:  <\/p>\n<ul>\n<li class=\"l\"> Oferirea unui proces de \u00eenc\u0103rcare complet verificat, care acoper\u0103 toate etapele de la firmware la spa\u021biul utilizator, \u0219i confirm\u0103 veridicitatea \u0219i integritatea componentelor \u00eenc\u0103rcate.\n<li class=\"l\"> Legarea resurselor controlate la registrele TPM PCR cu \u00eemp\u0103r\u021birea pe proprietari.\n<li class=\"l\"> Posibilitatea de a calcula dinainte valorile PCR pe baza celor utilizate \u00een timpul \u00eenc\u0103rc\u0103rii nucleului, initrd, configura\u021biei \u0219i identificatorului local al sistemului.\n<li class=\"l\"> Protec\u021bie \u00eempotriva atacurilor de Rollback, legate de revenirea la o versiune anterioar\u0103 vulnerabil\u0103 a sistemului.\n<li class=\"l\"> Simplificarea \u0219i cre\u0219terea fiabilit\u0103\u021bii actualiz\u0103rilor.\n<li class=\"l\"> Suport pentru actualiz\u0103rile sistemului de operare, care nu necesit\u0103 reapplication sau preg\u0103tirea local\u0103 a resurselor protejate de TPM.\n<li class=\"l\"> Preg\u0103tirea sistemului pentru a efectua atest\u0103ri de la distan\u021b\u0103 pentru a confirma corectitudinea sistemului de operare \u00eenc\u0103rcat \u0219i set\u0103rile.\n<li class=\"l\"> Posibilitatea de a ata\u0219a date confiden\u021biale la anumite stadii ale \u00eenc\u0103rc\u0103rii, de exemplu, extragerea din TPM a cheilor de criptare pentru sistemul de fi\u0219iere r\u0103d\u0103cin\u0103.\n<li class=\"l\"> Oferirea unui proces sigur, automat \u0219i care func\u021bioneaz\u0103 f\u0103r\u0103 interven\u021bia utilizatorului pentru deblocarea cheilor pentru decriptarea discului cu parti\u021bia r\u0103d\u0103cin\u0103.\n<li class=\"l\"> Utilizarea chip-urilor care suport\u0103 specifica\u021bia TPM 2.0, cu posibilitatea de a reveni la sisteme f\u0103r\u0103 TPM.  <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57984\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 (Lennart Poettering) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0435\u0439 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 systemd \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u043a\u0430\u043a systemd-stub, systemd-measure, systemd-cryptenroll, systemd-cryptsetup, systemd-pcrphase \u0438 systemd-creds. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105384","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 (Lennart Poettering) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 (Lennart Poettering) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-10-26T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-10-26T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lennart Poettering a propus o nou\u0103 arhitectur\u0103 pentru bootarea verificat\u0103 a Linux | ProHoster","description":"Lennart Poettering a publicat o propunere pentru modernizarea procesului de bootare a distribu\u021biilor Linux, av\u00e2nd ca scop rezolvarea problemelor existente \u0219i simplificarea organiz\u0103rii unui booting verificat complet.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux | ProHoster","og:description":"\u041b\u0435\u043d\u043d\u0430\u0440\u0442 \u041f\u043e\u0442\u0442\u0435\u0440\u0438\u043d\u0433 (Lennart Poettering) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/lennart-pottering-predlozhil-novuyu-arhitekturu-verificzirovannoj-zagruzki-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-26T13:36:38+00:00","article:modified_time":"2022-10-26T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105384"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105384\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}