+ ics*^RIt^RIt^RIt^RIt^RIt^RIt^RIHt^RIHt^RI H t ^RI t ^RI H t ^RIHt^RIHt^RIHt^R IHt^R IHt^R IHt^R IHt^R IHtHtHtH t ^RI!H"t"H#t#^RI$H%t%^RI&H't'H(t(H)t)H*t*Rt+!RR]4t,R#)iN)ProcessPoolExecutor)datetime)getpwuid) __version__) SoSComponent) SoSIPParser) SoSMacParser)SoSHostnameParser)SoSKeywordParser)SoSUsernameParser) SoSIPv6Parser)SoSReportArchiveSoSReportDirectorySoSCollectorArchiveSoSCollectorDirectory)DataDirArchiveTarballArchive)InsightsArchive)get_human_readable import_moduleImporterHelper is_executablecs$VPV4#N)obfuscate_arc_files)arcZflist&&9/usr/lib/python3.14/site-packages/sos/cleaner/__init__.pyrr*s  " "5 ))csXaa]tRt^.toRtRtRRR.R.R.R^R .R R R R RRRRRRR.RR/ tR7V3RlltR8RltR8Rlt R8Rlt R8Rlt ] R4t RtRt] R4tRtR tR!tR"tR#tR$tR%tR&tR'tR9R(ltR)tR*tR+tR,tR-tR.t R/t!R0t"R1t#R2t$R3t%R4t&R5t'R6t(Vt)V;t*#): SoSCleanera This function is designed to obfuscate potentially sensitive information from an sos report archive in a consistent and reproducible manner. It may either be invoked during the creation of a report by using the --clean option in the report command, or may be used on an already existing archive by way of 'sos clean'. The target of obfuscation are items such as IP addresses, MAC addresses, hostnames, usernames, and also keywords provided by users via the --keywords and/or --keyword-file options. For every collection made in a report the collection is parsed for such items, and when items are found SoS will generate an obfuscated replacement for it, and in all places that item is found replace the text with the obfuscated replacement mapped to it. These mappings are saved locally so that future iterations will maintain the same consistent obfuscation pairing. In the case of IP addresses, support is for IPv4 and IPv6 - effort is made to keep network topology intact so that later analysis is as accurate and easily understandable as possible. If an IP address is encountered that we cannot determine the netmask for, a private IP address from 172.17.0.0/22 range is used instead. For IPv6, note that IPv4-mapped addresses, e.g. ::ffff:10.11.12.13, are NOT supported currently, and will remain unobfuscated. For hostnames, domains are obfuscated as whole units, leaving the TLD in place. For instance, 'example.com' may be obfuscated to 'obfuscateddomain0.com' and 'foo.example.com' may end up being 'obfuscateddomain1.com'. Users will be notified of a 'mapping' file that records all items and the obfuscated counterpart mapped to them for ease of reference later on. This file should be kept private. z6Obfuscate sensitive networking information in a report archive_typeautodomainsdisable_parsersskip_cleaning_filesjobskeywords keyword_fileNmap_file /etc/sos/cleaner/default_mapping no_updateFkeep_binary_filestarget usernamestreat_certificates obfuscatecs<V'g\SV`WV4RVnEMVR,VnVR,VnVR,VnVR,VnVR,VnRVn\VPR4'g&VPPVPn RVPn \P!R 4Vn\P!R 4Vn\ P"!\ P$P'VPR 4RR 7VP)4VP+4Vn\ P.!^?4W@nVP P34VnVPP6P9R 4VnVPP<'d4\ P$P?VPP<4MR pVP,VVPP@.p\B\D\F\H\J\L.pVU u.uFqPNNK p p VPPPFp Rp V Fp V ^RPS4pV PS4PU4V8XgK;VPWRV 24VPPYRV R24V P[V 4Rp M V 'dKVPPYRV R24K V Uu.uFp\]4V,!V!NK upVn/\`\b\d\f\h\j\l.Vn7RVn8VPWRVP 24R#uup iuupi)Toptionstmpdirsys_tmppolicymanifestFr"rsosZsos_uicleanerZexist_okz/etc/sos/cleanerzDisabling parser: zDisabling the 'zP' parser. Be aware that this may leave sensitive plain-text data in the archive.z&Failing to disable an unknown parser 'z'.Nz#Cleaner initialized. From cmdline: i)9Zsuper__init__ from_cmdlineoptsr/r0r1r2ZhasattrZthreadsr"rloggingZ getLoggersoslogui_logosmakedirspathjoinreview_parser_values load_map_filecleaner_mappingZumaskin_placeZget_preferred_hash_name hash_nameZ components add_section cleaner_mdr%dirnamer!rrr rrr __name__r lowerstriplog_infowarningremoveZglobalsparsersr r rr rrr archive_typesnested_archive)selfparserZargsZcmdlinerCZ hook_commons cleaner_dirZ parser_argsZparser_classesclsZ parser_names_parserZfoundpnameZ parser_nameZcls_name __class__s&&&&&& rr6ZSoSCleaner.__init__hs G V7 3 $D  %Y/DI&x0DK' 2DL&x0DK(4DM %D 499f--!%!2!2 %+DII "!++E2DK!++H5DK KK T[[)--22>>yIyy!!!ggoodii&8&89'9    II ) )         %3 $2SLLN  yy00GE%#Abk//1 ==?((*k9MM$6{m"DEKK'')'3OO!''. E&5 ##isdirr8r% ExceptionexistsrcopenjsonZloadZJSONDecodeError)rQZ_confZ default_mapmferr& rrAZSoSCleaner.load_map_filesk 8 77==++ , ,1$))2D2D1EF(() )ww~~dii0011yy!![0&tyy'9'9&:;<<= dii((#@@BE IIbMEA ++MNN$LM ENN$''+yy'9'9&:#cU$DEEE A@ sB F D,,&FFFF+F FFF F' c sVPR4pVPPR\ R24VPPV4VPP 'g\ R4R#R# \d1TPPR4TP^4R#\dpTP^T4Rp?R#Rp?ii;i)zWhen we are directly running `sos clean`, rather than hooking into SoSCleaner via report or collect, print a disclaimer banner aThis command will attempt to obfuscate information that is generally considered to be potentially sensitive. Such information includes IP addresses, MAC addresses, domain names, and any user-provided keywords. Note that this utility provides a best-effort approach to data obfuscation, but it does not guarantee that such obfuscation provides complete coverage of all such data in the archive, or that any obfuscation is provided to data that does not fit the description above. Users should review any resulting data and/or archives generated or processed by this utility for remaining sensitive content before being passed to a third party. z sos clean (version z) z- Press ENTER to continue, or CTRL-C to quit. z Exiting on user cancelN) Z_fmt_msgr;rarr8ZbatchZinputKeyboardInterrupt_exitrj)rQrZZe& rprint_disclaimerZSoSCleaner.print_disclaimersmm   0 SAB yy !GH%    !;< 3 ! 1a   !s$- A<<7C6C?CCCc szRVnVPRR4pVPRRRR7VPRR.R:OR R 7VPR R .R R7VPRR .RRR7VPRRR .RRR7VPRR^\RR7VPRR .RRR7VPRRR R!R"7VPR#R$R%R&R'7VPR(R)R*R+R,R-7VPR.R*R+R/R0R17VPR2R3.R R4R-7VPR5R6.R;OR7R8R97R#) };&2%=  > 4e&2$7%G  H };&.$D  F 5{'F$8$.  0rc s&WPnR#)zFor use by report and collect to set the TARGET option appropriately so that execute() can be called just as if we were running `sos clean` directly from the cmdline. N)r8r))rQr>rrset_target_pathZSoSCleaner.set_target_pathJs  rc sRpVPPR8wdVPPPRR4pVPFgpVPV8XgKV!VPP VP VPPVPP4pKi MVPFpVPVPP 4'gK0V!VPP VP VPPVPP4pM V'gR#Wn VPPV4VP'dKVPPVP44VPP!V4WnVP"'d(VP"P$VP"nR#R#)zThe target path is not a directory, so inspect it for being an archive or an archive of archives. In the event the target path is not an archive, abort. NrZ-_)r8rreplacerOZ type_namer)r/r(r,Z check_is_type main_archive report_pathsappend is_nestedrxZget_nested_archivesrMrPZ descriptionui_name)rQZ_arcZ check_typearchiverrprinspect_target_archiveZ!SoSCleaner.inspect_target_archiveQs  99 ! !V +//77SAJ--$$ 2"499#3#3T[[#'99#>#>#'99#?#?AD. ))$$TYY%5%566tyy//#yy::#yy;;=D *      & >>>    $ $T%=%=%? @    $ $T *"&     *.*=*=*I*ID   ' rc s8VPPF1p\VPR44^8gK$\ RV R24h VPP Uu.uFp\ P!V4NK upVPnR#uupi)zCheck any values passed to the parsers via the commandline: - For the --domains option, ensure that they are valid for the parser in question. - Convert --skip-cleaning-files from globs to regular expressions. .zInvalid value 'z0' given: --domains values must be actual domainsN)r8rlensplitrjr!fnmatchZ translate)rQZ_domZprsrr@ZSoSCleaner.review_parser_valuesss II%%D4::c?#a'%dV,%%&*.)F)F)H)FCD):):1)=)F)H %)Hs$Bc s VPPPR4VPnVPPPR4R,PR4^,VnVP 'dVP 4.Vn\PPVPP4'gDVPPRVPP 24VP^4VP4VP'g-VPPR4VP^4.VnVP F0pVP"R8XgKVP$P'4K2 VP)4VP+4VP-4VP'gAVP.'dR#VPP1R4VP^4VPP1R\3VP4 R 24VP54pVP7V4pVP9V4VP;4VP.'d(VPUu.uFqDP<NK ppW53#Rp\3VP4^8dVP?4pMVP^,pVP<pVPAVP<4p V eVPCVPR4R, R VPD 24p \G\PPIVPJV 4R R R 7;_uu_4p V PMV 4RRR4VPO4\PPIVPJVPCVPR4R,44p\PPR!Wv4\PT!V4p VPP1RV 24VPP1RV R24VPP1R\WV PX4 24VPP1R\[V P\4P^ R24VPP1R4VPa4R#uupi +'giELx;i)aSoSCleaner will begin by inspecting the TARGET option to determine if it is a directory, archive, or archive of archives. In the case of a directory, the default behavior will be to edit the data in place. For an archive will we unpack the archive, iterate over the contents, and then repack the archive. In the case of an archive of archives, such as one from SoSCollector, each archive will be unpacked, cleaned, and repacked and the final top-level archive will then be repacked as well. /z.tarz*Invalid target: no such file or directory z'No valid archives or directories found zHostname ParserNz#No reports obfuscated, aborting... z Successfully obfuscated z report(s) rwrfrgz2A mapping of obfuscated elements is available at z) The obfuscated archive is available at  z Size z Owner zcPlease send the obfuscated archive to your support representative and keep the mapping file private)1r8r)rstriprarc_namer7rtrr<r>rkr;rbrrrcompleted_reportsrNnamemappingZset_initial_countspreload_all_archives_into_mapsgenerate_parser_item_regexesobfuscate_report_pathsrCrarcompile_mapping_dictwrite_map_for_archivewrite_map_for_configwrite_stats_to_manifestfinal_archive_pathrebuild_nested_archiveget_new_checksumobfuscate_stringrDrlr?r0writewrite_cleaner_logshutilmoveZstatrZst_sizerZst_uidZpw_nameZcleanup) rQrR_mapmap_pathZaZ arc_pathsZ final_pathZarc_pathrchecksumZ chksum_nameZcfZarcstats & rexecuteZSoSCleaner.executes$ 99++2237  ((..s3B7==fEaH      ! ! #ww~~dii..// KK  J!%!1!1 24 5 JJqM ##%   KK  H I JJqM"$llF{{//113# ++- ))+ ##%%%%}}} KK  C D JJqM 5 6 678 F G((*--d3 !!$' $$& ===7;7M7MN7M!--7MIN& & t%% & *224H((+C--H,,S-C-CDH#"33~~c*2./q0@A "'',,t||[A3#*,,/1HHX&,  " " $WW\\ LL  ! !(.."5b"9 :   H)''*% B8* M  ::,b I  8$6w$G#HIJ 9Xgnn%=%E%E$FbIJ L M UO,,,s UU U c slVPR,pVPVR7VPFtpVPP R4R ,pVP VP4pVfKFRV RVP 2pVPPWER7Kv \P!VPP4FwrgpVFp \PPWi4p V P VPP4R ,pVPR4pVPP!WR7\P"!V 4K K VP%RR7VPP'VP(P*4#) zxHandles repacking the nested tarball, now containing only obfuscated copies of the reports, log files, manifest, etc... z -obfuscated)rrz checksums/rrzT)rr)rZ setup_archiverrrrrDrZ add_stringr<ZwalkrPextracted_pathr>r?lstripadd_filerMrZfinalizer8Zcompression_type) rQrrZarc_destrZdnameZdirnrZfilesfilenameZfnames & rrZ!SoSCleaner.rebuild_nested_archivesX ===0 )--G1177rns&&& rwrite_map_to_fileZSoSCleaner.write_map_to_filesD$g . ." HHTZZQ/ 0/ / . s (A  A cs \PPVPVP VP R244pVP W4# \d pTPRT 24Rp?R#Rp?ii;i)z -private_mapz"Could not write private map file: N) r<r>r?r0rrrrjrc)rQrrro&& rrZ SoSCleaner.write_map_for_archivess ww|| %%|&DEH))$9 9  NN?uE F sAA B$A>>Bc s VPP'dVPP'g\PP VPP4p\P !VRR7VPWPP4VPRVPP 24R#R#R# \d pTPRT 24Rp?R#Rp?ii;i)zmWrite the mapping to the config file so that subsequent runs are able to provide the same consistent mapping Tr5zWrote mapping to z&Could not update mapping config file: N) r8r%r'r<r>rGr=rr_rjrc)rQrrSrorrrZSoSCleaner.write_map_for_configs 99   dii&9&9&9''//$))*<*<=K O K$7&&tYY-?-?@!24993E3E2FGH':  O!GuMNN Os-A%C D#C==Dc s\PPVPVP R24p\ VRRR7;_uu_4pVP P^4VP P4FpVPV4K RRR4V'd1VPV4VPPVRR7R#R# +'giLJ;i)zWhen invoked via the command line, the logging from SoSCleaner will not be added to the archive(s) it processes, so we need to write it separately to disk z-obfuscation.logrrfrgNzsos_logs/cleaner.logr) r<r>r?r0rrlZ sos_log_fileZseekZ readlinesrobfuscate_filerr)rQrZlog_nameZlogfilelines&& rrZSoSCleaner.write_cleaner_log*s 77<< LLT]]O+;< (C' 2 2g    " "1 %))335 d#63     ) LL ! !(1G ! H  3 2s AC C. c sRp\VR4;_uu_4p\P!VP4pVP V4pV'gMVP V4K.VP 4R,uuRRR4# +'giR#;i \d pTPRT 24Rp?R#Rp?ii;i)zfCalculate a new checksum for the obfuscated archive, as the previous checksum will no longer be valid ZrbrNz!Could not generate new checksum: i) rlhashlibZnewrDZreadrZ hexdigestrjr_)rQ archive_pathZ hash_sizeZ archive_fpZdigestZhashdataros&& rrZSoSCleaner.get_new_checksum;s FIlD))Z T^^4)y9H#MM(+'')D0*))) F NN>seD E E Fs:B:B*B= B B BB C'CCc sR\VP4 RVPP R2pVPP V4VPP 'dVPPR4VPPR8Xd>\R4'g-RVPnVPPR4VPPR8XdVPPR 4MmVPPR 8XdVPPR 4M6VPPR8XdVPPR 4VPF<pVPP R VP 24VPV4K> VP'd.VP4VPVP4R#R# \d6TPP R4\P !^4R#i;i)zPerform the obfuscation for each archive or sos directory discovered during setup. Each archive is handled in a separate thread, up to self.opts.jobs will be obfuscated concurrently. zFound z. total reports to obfuscate, processing up to z! concurrently within one archive zpWARNING: binary files that potentially contain sensitive information will NOT be removed from the final archive r-ZopensslrMzgWARNING: No `openssl` command available. Replacing `--treat-certificates` from `obfuscate` to `remove`.zWARNING: certificate files that potentially contain sensitive information will be CONVERTED to text and OBFUSCATED in the final archive. r|zsWARNING: certificate files that potentially contain sensitive information will be KEPT in the final archive as is. zpWARNING: certificate files that potentially contain sensitive information will be REMOVED in the final archive. z Obfuscating zExiting on user cancelN)rrr8r"r;rar(rLr,rrobfuscate_reportrP_replace_obfuscated_archivesrqr<rr)rQrZZ report_pathrsrrZ!SoSCleaner.obfuscate_report_pathsMs- T../01$$(IINN#34  KK  S !yy*** ##O ,, ;))44/7 , ##Kyy++{: ##9 --7 ##' --9 ##!" $00    < 0H0H/I!JK%%k2 1"""113%%d&9&9:#!  KK  5 6 HHSM sGH +H r?rr)rQrrzr{Z dest_namerprrZ'SoSCleaner._replace_obfuscated_archivess~ --G IIg** +&&55D0066s;B?G T3I KK22D 9)2 & .rc sLVPFpVP4K R#)zFor the parsers that use prebuilt lists of items, generate those regexes now since all the parsers should be preloaded by the archive(s) as well as being handed cmdline options and mapping file configuration. N)rNZgenerate_item_regexes)rQrRs& rrZ'SoSCleaner.generate_parser_item_regexess llF  ( ( *#rc  slVPEFTpVPP4P4^,P 4pVP WA4FkpVP V4pV'gKVPRV RV RVP 24VP4FpVPV4K Km VPWA4p V 'dFVPRV RVP 24V Fp VPPV 4K VPV,Fp VPP!V 4K EKW VP#VP4R# \d&pTPRT RT RT 24Rp?KRp?ii;i) a For each archive we've determined we need to operate on, pass it to each prepper so that we can extract necessary files and/or items for direct regex replacement. Preppers define these methods per parser, so it is possible that a single prepper will read the same file for different parsers/mappings. This is preferable to the alternative of building up monolithic lists of file paths, as we'd still need to manipulate these on a per-archive basis. :param archive: The archive we are currently using to prepare our mappings with :type archive: ``SoSObfuscationArchive`` subclass :param prepper: The individual prepper we're using to source items :type prepper: ``SoSPrepper`` subclass z Prepping z parser with file z from zFailed to prep z map from : Nz mapping with items from )rNrrIrrJZget_parser_file_listZget_file_contentr_rZ splitlinesZ parse_linerjZget_items_for_maprZaddZ regex_itemsZadd_regex_item set_parsers) rQrprepperrUrVZ_fileZcontentrroZ map_itemsZitemZritems &&& r_prepare_archive_with_prepperZ(SoSCleaner._prepare_archive_with_preppers"||GLL&&(..0399;E 55eE!22595'1CE7K''.&7 9:#..0D**401 F 11%AI5'1J")//!2 45%DOO''-&!,,U33..u54-$2 DLL)%-eWJugRuMs5F F3 F. .F3 c# s"\\PP4p.pVP 4F pVP \ RV 244K" \VRR7FpV!VPR7xK R#5i)z Discover all locally available preppers so that we can prepare the mappings with obfuscation matches in a controlled manner :returns: All preppers that can be leveraged locally :rtype: A generator of `SoSPrepper` items zsos.cleaner.preppers.csVP#r)Zpriority)Zxs&rZZ)SoSCleaner.get_preppers..s1::r)Zkey)r.N) rr3r4ZpreppersZ get_modulesrxrsortedr8)rQZhelperZprepsZ_preprrpr get_preppersZSoSCleaner.get_prepperssm  4 45'')E LL)>ug'FG H*e)=>G$)), ,?sBBc sVPR4VP4F'pVPFpVPW!4K K) VPP VP 4R#)zBefore doing the actual obfuscation, if we have multiple archives to obfuscate then we need to preload each of them into the mappings to ensure that node1 is obfuscated in node2 as well as node2 being obfuscated in node1's archive. z.Pre-loading all archives into obfuscation mapsN)rKrrrrrrN)rQrrrsrrZ)SoSCleaner.preload_all_archives_into_mapss\ FG((*G,,227D-+ %%dll3rc  sVPPVP4p\P!4pVP RV4VP 'gVP4VPR4\VP44p^;p;rg\VPP4Uu.uFqNK p p\VPPVPR7;_uu_4p T P!\"T \VPP4Uu.uF"qVRVPP1,NK$ up4p V FwrpW\, pWm, pW~, pK RRR4VP4VP%V4VP+V4VP,'gVP/4pV'dNVPR4VP1VP3VP44VP5V4VP8P;V4\P!4pVP R V4VP R VV, 4VP RV4VP RV4RpV'd RpVV,pVPRV 24R#uupiuupi +'giELp;i \&d,pTP)RT 2TPR7Rp?ELRp?ii;i \&d,pTP)RT 2TPR7Rp?ELRp?ii;i \&dApTP7R TP R T 24TPR T 24Rp?R#Rp?ii;i \&d7pTP<P?RTP RT 24Rp?R#Rp?ii;i)zIndividually handle each archive or directory we've discovered by running through each file therein. Positional arguments: :param archive str: Filepath to the directory or archive start_timezBeginning obfuscation...)Z max_workersZ initializerNz!Failed to obfuscate directories: r[zFailed to obfuscate symlinks: zRe-compressing...zArchive z failed to compress: zFailed to re-compress archive: end_timeZrun_timeZfiles_obfuscatedZtotal_substitutionsr*z! [removed %s unprocessable files]zObfuscation completedzException while processing r) rFrE archive_namerZnow add_fieldZ is_extractedZextractZ report_msgZlistZ get_filesZranger8r"rZload_parser_entriesZmaprobfuscate_directory_namesrjrKobfuscate_symlinksrZget_compressionZrename_top_dirrZcompressr_rrr;ra)rQrZarc_mdrZ file_listZfiles_obfuscated_countZtotal_sub_countZremoved_file_countZiZ archive_listZexecutorZfuturesZfocZtscZrfcroZmethodrZrmsgs&& rrZSoSCleaner.obfuscate_reports^ ?__001E1EFF!J   \: 6'''!   9 :W..01I*MN M " M_-2499>>-BC-BG-BLC$ $  ' ; ;==@H",,':L(-diinn(=(?(=JK!2CTYY^^2C(D(D(=(?@(/OSs*1*#*O&-&(/ ="  ' ' ) ;..w7  ;''0 $$$ 002&&':; .. 11'2F2FG ((0&&--g6||~H   Z 2   ZJ)> ?   /1G H   2O DD!:00   !6tf= >wD (? ===* ; A#G%,%9%9;; ;  ; >seD%,%9%9;; ;%'2F2F1GH88;u(>?**=cUCE & ? KK  : ' 4 45Ru> ? ? ?sAO A O K" 5O?3K,2(K'+K,OL0L9OO+O=;M28BOO"O'K,, K= 7 O L6 L1+O1L66O9 M/ M*$O*M//O2 N==5N82O8N==O P +O<<Pcs>VPPV.4R#r)rr)rQrrrrZSoSCleaner.obfuscate_fileHs --xj9rc sa VPRVPR7VP4EFpVPVP4^,P R4o VP Uu.uF[p\;QJd)V 3RlVP4F 'gK RM RM!V 3RlVP44'dKYVNK] ppV'gVPRS R24KVPR S 2VPR7\P!V4p\PPVPVPS 44pVPV4pWb8wgWu8wd0\P!V4\P !Wv4EKEK R #uupi \"d$pTPR T R T 24R p?EKR p?ii;i) aIterate over symlinks in the archive and obfuscate their names. The content of the link target will have already been cleaned, and this second pass over just the names of the links is to ensure we avoid a possible race condition dependent on the order in which the link or the target get obfuscated. :param archive: The archive being obfuscated :type archive: ``SoSObfuscationArchive`` zObfuscating symlink namesrrc3sD<"TFqPS4xK R#5ir)Zmatch)Z.0Z_skip_syms& rZ Z0SoSCleaner.obfuscate_symlinks..^sH7Ge D))7Gs TFz Skipping obfuscation of symlink z due to skip pattern matchzObfuscating symlink zError obfuscating symlink 'rhN)rKrZ get_symlinksrrrrNZanyZ skip_patternsr_r<Zreadlinkr>r?rrMsymlinkrj) rQrrZ_pZ_parsersZ_targetZ _ob_sym_nameZ _ob_targetrors && @rrZSoSCleaner.obfuscate_symlinksKs 1':N:N O++-G O}}W%;%;r?rrrirrrZrename)rQrZdirpathZ_nameZ_dirnameZ_arc_dirZ _ob_dirnameZ _ob_arc_dirs&& rrZ$SoSCleaner.obfuscate_directory_namesys ? --.0 1g88:DIIGG,77<<7#>>'*@*@A"E77==**"&"7"7">K"+&.ooe&< &(ggll#22'..s3''  (8-JrcsVPFpVPV4pK V# \d pTPRT 24Rp?K@Rp?ii;i)zError obfuscating string data: N)rNZparse_string_for_keysrjrK)rQZ string_datarRrorrrZSoSCleaner.obfuscate_stringsYllF G$::;G #  G ?uEFF Gs( AA  Ac sNVPPR4pVPFypVPVPP RR4P 44pVP R\VPPP444K{ R#)zLWrite some cleaner-level, non-report-specific stats to the manifest rNZ rZentriesN) rFrErNrrrIrrrZdatasetZkeys)rQZ parse_secrRZ_secs& rrZ"SoSCleaner.write_stats_to_manifestsvOO// : llF(()<)rso  2&57A?A9==H9:: *p Jp Jr