Serge E. Hallyn 3b7391de67
capabilities: introduce per-process capability bounding set ...
The capability bounding set is a set beyond which capabilities cannot grow.
Currently cap_bset is per-system. It can be manipulated through sysctl,
but only init can add capabilities. Root can remove capabilities. By
default it includes all caps except CAP_SETPCAP.
This patch makes the bounding set per-process when file capabilities are
enabled. It is inherited at fork from parent. Noone can add elements,
CAP_SETPCAP is required to remove them.
One example use of this is to start a safer container. For instance, until
device namespaces or per-container device whitelists are introduced, it is
best to take CAP_MKNOD away from a container.
The bounding set will not affect pP and pE immediately. It will only
affect pP' and pE' after subsequent exec()s. It also does not affect pI,
and exec() does not constrain pI'. So to really start a shell with no way
of regain CAP_MKNOD, you would do
prctl(PR_CAPBSET_DROP, CAP_MKNOD);
cap_t cap = cap_get_proc();
cap_value_t caparray[1];
caparray[0] = CAP_MKNOD;
cap_set_flag(cap, CAP_INHERITABLE, 1, caparray, CAP_DROP);
cap_set_proc(cap);
cap_free(cap);
The following test program will get and set the bounding
set (but not pI). For instance
./bset get
(lists capabilities in bset)
./bset drop cap_net_raw
(starts shell with new bset)
(use capset, setuid binary, or binary with
file capabilities to try to increase caps)
************************************************************
cap_bound.c
************************************************************
#include <sys/prctl.h>
#include <linux/capability.h>
#include <sys/types.h>
#include <unistd.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#ifndef PR_CAPBSET_READ
#define PR_CAPBSET_READ 23
#endif
#ifndef PR_CAPBSET_DROP
#define PR_CAPBSET_DROP 24
#endif
int usage(char *me)
{
printf("Usage: %s get\n", me);
printf(" %s drop <capability>\n", me);
return 1;
}
#define numcaps 32
char *captable[numcaps] = {
"cap_chown",
"cap_dac_override",
"cap_dac_read_search",
"cap_fowner",
"cap_fsetid",
"cap_kill",
"cap_setgid",
"cap_setuid",
"cap_setpcap",
"cap_linux_immutable",
"cap_net_bind_service",
"cap_net_broadcast",
"cap_net_admin",
"cap_net_raw",
"cap_ipc_lock",
"cap_ipc_owner",
"cap_sys_module",
"cap_sys_rawio",
"cap_sys_chroot",
"cap_sys_ptrace",
"cap_sys_pacct",
"cap_sys_admin",
"cap_sys_boot",
"cap_sys_nice",
"cap_sys_resource",
"cap_sys_time",
"cap_sys_tty_config",
"cap_mknod",
"cap_lease",
"cap_audit_write",
"cap_audit_control",
"cap_setfcap"
};
int getbcap(void)
{
int comma=0;
unsigned long i;
int ret;
printf("i know of %d capabilities\n", numcaps);
printf("capability bounding set:");
for (i=0; i<numcaps; i++) {
ret = prctl(PR_CAPBSET_READ, i);
if (ret < 0)
perror("prctl");
else if (ret==1)
printf("%s%s", (comma++) ? ", " : " ", captable[i]);
}
printf("\n");
return 0;
}
int capdrop(char *str)
{
unsigned long i;
int found=0;
for (i=0; i<numcaps; i++) {
if (strcmp(captable[i], str) == 0) {
found=1;
break;
}
}
if (!found)
return 1;
if (prctl(PR_CAPBSET_DROP, i)) {
perror("prctl");
return 1;
}
return 0;
}
int main(int argc, char *argv[])
{
if (argc<2)
return usage(argv[0]);
if (strcmp(argv[1], "get")==0)
return getbcap();
if (strcmp(argv[1], "drop")!=0 || argc<3)
return usage(argv[0]);
if (capdrop(argv[2])) {
printf("unknown capability\n");
return 1;
}
return execl("/bin/bash", "/bin/bash", NULL);
}
************************************************************
[serue@us.ibm.com: fix typo]
Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: James Morris <jmorris@namei.org>
Cc: Chris Wright <chrisw@sous-sol.org>
Cc: Casey Schaufler <casey@schaufler-ca.com>a
Signed-off-by: "Serge E. Hallyn" <serue@us.ibm.com>
Tested-by: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-02-05 09:44:20 -08:00
2007-05-08 11:15:00 -07:00
2008-01-28 14:54:13 -08:00
2007-07-30 16:26:27 -03:00
2008-02-05 09:44:13 -08:00
2007-05-08 11:15:16 -07:00
2008-02-01 16:42:02 -05:00
2007-10-14 20:17:39 -07:00
2007-12-12 20:01:01 +01:00
2007-10-13 14:36:18 +01:00
2008-01-31 19:28:09 -08:00
2008-01-31 19:27:40 -08:00
2007-10-15 12:26:29 -07:00
2008-01-31 19:27:36 -08:00
2008-01-31 19:27:39 -08:00
2008-02-01 16:42:06 -05:00
2007-10-17 08:43:03 -07:00
2007-07-17 10:23:09 -07:00
2008-02-05 09:44:13 -08:00
2008-01-28 15:09:52 -08:00
2008-02-01 16:42:15 -05:00
2007-12-26 19:36:35 -08:00
2008-02-01 14:35:07 -08:00
2008-01-30 13:30:18 +01:00
2008-01-23 21:26:15 -05:00
2007-09-11 04:22:16 -07:00
2007-02-03 17:16:24 -05:00
2007-10-14 12:41:51 -07:00
2007-05-11 08:29:37 -07:00
2007-10-18 14:37:20 -07:00
2007-05-11 08:29:36 -07:00
2007-12-17 19:28:16 -08:00
2007-02-09 17:08:57 +00:00
2007-10-10 16:51:59 -07:00
2007-07-20 08:44:19 -07:00
2008-01-23 05:24:15 -05:00
2007-04-25 22:25:31 -07:00
2007-02-08 16:01:09 -08:00
2008-01-28 15:00:14 -08:00
2008-01-28 15:00:12 -08:00
2007-02-08 15:13:47 +00:00
2008-02-04 13:16:39 +00:00
2007-10-17 08:42:47 -07:00
2008-01-23 11:29:17 -06:00
2008-02-01 14:23:55 -05:00
2007-02-20 17:10:15 -08:00
2007-10-17 08:43:00 -07:00
2007-10-17 08:42:45 -07:00
2007-10-11 22:24:13 +01:00
2007-10-17 08:43:07 -07:00
2007-10-16 11:03:56 +02:00
2007-10-18 14:37:29 -07:00
2007-10-19 11:53:42 -07:00
2007-10-19 11:53:42 -07:00
2008-02-01 11:34:49 +01:00
2008-01-29 21:55:15 +01:00
2007-10-29 14:05:37 -07:00
2007-07-31 10:43:05 -05:00
2008-01-28 23:58:26 -05:00
2007-07-16 09:05:51 -07:00
2008-01-28 14:54:10 -08:00
2008-02-05 09:44:20 -08:00
2007-01-30 08:26:45 -08:00
2008-02-01 23:09:24 +01:00
2007-02-20 17:10:14 -08:00
2007-12-02 20:04:49 +01:00
2007-10-19 11:53:36 -07:00
2007-10-19 11:53:36 -07:00
2008-02-03 17:45:46 +02:00
2007-10-14 22:57:45 +02:00
2008-01-30 13:30:02 +01:00
2007-07-21 17:49:14 -07:00
2007-07-21 17:49:14 -07:00
2008-02-05 09:44:07 -08:00
2008-01-28 23:21:18 +01:00
2008-01-28 23:21:18 +01:00
2007-10-18 14:37:32 -07:00
2007-10-17 08:42:47 -07:00
2008-01-28 23:21:18 +01:00
2007-12-06 17:40:19 -05:00
2007-07-10 17:18:59 -07:00
2008-01-28 15:00:40 -08:00
2007-10-16 09:43:20 -07:00
2007-10-18 14:37:19 -07:00
2007-10-17 08:42:52 -07:00
2008-01-30 13:32:42 +01:00
2008-01-25 21:08:02 +01:00
2007-10-04 18:40:57 -04:00
2007-11-19 21:43:22 -05:00
2008-01-30 13:31:10 +01:00
2007-10-19 11:53:44 -07:00
2007-10-17 08:42:53 -07:00
2007-05-02 19:27:09 +02:00
2007-07-17 10:23:04 -07:00
2007-05-10 18:24:13 +02:00
2008-01-11 08:17:01 +11:00
2008-02-03 17:45:46 +02:00
2008-02-03 15:42:53 +02:00
2007-10-16 09:43:09 -07:00
2007-10-21 02:37:45 -04:00
2008-02-03 04:28:53 -08:00
2007-07-20 21:42:24 +02:00
2008-01-25 21:08:02 +01:00
2007-10-12 14:51:03 -07:00
2007-10-19 11:53:36 -07:00
2007-12-20 17:32:12 +00:00
2008-02-05 09:44:10 -08:00
2007-05-08 11:15:26 -07:00
2007-07-09 08:22:54 +01:00
2007-07-09 08:22:33 +01:00
2008-01-25 14:46:04 -08:00
2008-01-25 14:46:04 -08:00
2007-10-20 02:00:58 +01:00
2008-02-05 09:44:11 -08:00
2008-02-03 17:45:46 +02:00
2007-02-09 17:39:36 -05:00
2007-10-22 08:13:19 -07:00
2008-01-23 21:23:13 -05:00
2007-02-11 11:18:07 -08:00
2007-05-08 11:15:14 -07:00
2007-07-16 09:05:42 -07:00
2007-07-19 10:04:54 -07:00
2007-10-23 15:49:47 +10:00
2007-10-10 16:53:56 -07:00
2007-10-22 08:13:19 -07:00
2007-10-22 08:13:20 -07:00
2007-02-09 16:23:18 +00:00
2007-12-18 08:29:28 +01:00
2007-07-20 21:42:24 +02:00
2008-01-30 13:31:56 +01:00
2007-10-17 08:42:51 -07:00
2008-01-28 23:21:18 +01:00
2007-06-01 08:18:29 -07:00
2007-10-10 16:52:52 -07:00
2008-02-03 17:45:46 +02:00
2007-06-28 11:34:53 -07:00
2007-10-29 07:41:32 -07:00
2007-10-22 08:13:21 -07:00
2007-10-17 08:43:02 -07:00
2007-11-29 09:24:53 -08:00
2007-05-09 08:57:56 +02:00
2007-10-17 08:42:48 -07:00
2007-11-14 18:45:43 -08:00
2008-01-28 23:58:27 -05:00
2008-01-29 00:19:52 -05:00
2008-01-29 00:19:52 -05:00
2008-01-29 00:19:52 -05:00
2007-10-17 18:49:58 -04:00
2007-11-08 08:42:46 -05:00
2007-07-17 21:42:44 -04:00
2007-10-16 09:43:22 -07:00
2007-10-17 08:43:01 -07:00
2007-04-25 22:28:35 -07:00
2007-10-17 08:43:04 -07:00
2007-10-17 21:21:26 -07:00
2007-10-17 00:00:08 +02:00
2007-05-10 18:24:13 +02:00
2007-05-08 11:15:31 -07:00
2007-10-18 14:37:19 -07:00
2007-10-10 16:54:03 -07:00
2008-02-04 07:58:52 -08:00
2007-07-18 18:29:37 -04:00
2007-10-21 02:37:18 -04:00
2007-11-29 09:24:54 -08:00
2008-02-01 17:45:14 +01:00
2007-05-09 08:58:16 +02:00
2007-07-18 15:47:52 -07:00
2008-01-24 20:40:36 -08:00
2008-02-05 09:44:17 -08:00
2007-10-10 08:55:27 +01:00
2007-02-12 09:48:30 -08:00
2007-09-26 00:01:17 -04:00
2007-07-10 00:35:17 -04:00
2008-01-25 21:08:33 +01:00
2007-04-28 11:01:07 -04:00
2007-10-14 12:41:51 -07:00
2008-02-03 15:42:53 +02:00
2008-02-01 23:09:34 +01:00
2007-02-05 10:00:38 +01:00
2008-01-28 14:51:22 +01:00
2007-10-15 08:12:00 -07:00
2008-02-05 09:44:19 -08:00
2007-03-16 00:59:29 -04:00
2008-01-30 13:30:27 +01:00
2008-02-05 09:44:07 -08:00
2007-12-17 19:28:17 -08:00
2008-01-11 08:16:16 +11:00
2007-10-09 22:56:30 -04:00
2007-05-09 08:58:21 +02:00
2007-05-09 08:58:21 +02:00
2007-10-13 23:56:32 +02:00
2007-05-01 23:26:34 +02:00
2008-01-27 18:14:50 +01:00
2008-01-27 18:14:52 +01:00
2007-01-30 08:26:45 -08:00
2007-10-16 11:21:00 +02:00
2007-10-22 00:56:52 -04:00
2007-04-25 22:25:31 -07:00
2007-04-25 22:25:31 -07:00
2008-02-02 19:56:47 +01:00
2007-07-16 09:05:34 -07:00
2008-02-01 16:13:16 -05:00
2007-04-25 22:23:43 -07:00
2008-01-28 14:53:58 -08:00
2007-10-10 16:51:59 -07:00
2008-01-28 14:54:09 -08:00
2007-12-07 15:00:32 -05:00
2007-10-15 12:26:29 -07:00
2007-10-10 16:51:16 -07:00
2008-01-28 15:08:27 -08:00
2007-10-17 08:42:52 -07:00
2008-01-28 15:07:58 -08:00
2007-10-10 16:49:13 -07:00
2007-07-14 18:55:06 -07:00
2007-04-25 22:29:14 -07:00
2007-07-10 22:15:58 -07:00
2007-08-26 18:35:42 -07:00
2007-10-10 16:52:04 -07:00
2008-01-28 14:56:28 -08:00
2008-01-28 15:07:57 -08:00
2008-01-28 14:55:09 -08:00
2008-01-28 15:08:32 -08:00
2008-01-28 14:55:09 -08:00
2007-04-25 22:25:31 -07:00
2007-04-25 22:29:57 -07:00
2008-01-28 15:08:44 -08:00
2007-12-05 05:37:32 -08:00
2008-01-31 19:28:31 -08:00
2008-01-30 13:34:11 +01:00
2008-02-05 09:44:20 -08:00
2008-02-03 08:58:07 +01:00
2007-10-21 02:37:38 -04:00
2007-04-29 23:42:45 -04:00
2008-01-31 19:26:46 -08:00
2008-01-25 21:08:23 +01:00
2007-07-16 09:05:50 -07:00
2008-01-28 10:50:33 +01:00
2008-02-05 09:44:11 -08:00
2008-01-30 13:30:32 +01:00
2008-01-28 10:50:29 +01:00
2007-04-25 22:25:31 -07:00
2007-10-19 11:53:48 -07:00
2007-10-30 08:06:55 -07:00
2007-10-18 14:37:32 -07:00
2008-01-31 19:28:20 -08:00
2007-07-21 19:07:33 -07:00
2007-12-18 18:05:58 +01:00
2007-09-16 21:13:58 -07:00
2007-05-08 11:15:16 -07:00
2007-10-16 09:43:10 -07:00
2007-10-09 22:07:28 -03:00
2007-10-09 22:07:23 -03:00
2008-01-28 23:58:27 -05:00
2007-12-05 09:21:20 -08:00
2007-07-11 15:03:53 +01:00
2007-04-25 22:25:52 -07:00
2008-01-25 21:08:34 +01:00
2007-11-05 15:12:32 -08:00
2007-10-17 08:42:52 -07:00
2007-08-22 19:52:45 -07:00
2008-02-01 18:30:53 -05:00
2007-11-29 09:24:52 -08:00
2007-07-31 15:39:40 -07:00
2007-04-04 21:12:47 -07:00
2007-10-18 14:37:28 -07:00
2008-01-30 13:33:06 +01:00
2007-07-17 10:23:05 -07:00
2007-10-19 11:53:49 -07:00
2007-10-17 08:42:57 -07:00
2008-01-08 16:10:35 -08:00
2007-10-19 11:53:33 -07:00
2007-02-11 10:51:32 -08:00
2007-05-17 05:23:04 -07:00
2007-07-18 08:47:40 -07:00
2008-01-24 21:27:06 -08:00
2008-01-30 13:32:53 +01:00
2008-01-24 20:40:05 -08:00
2007-02-20 17:10:14 -08:00
2007-05-09 12:30:53 -07:00
2007-10-10 16:48:12 -07:00
2008-01-30 18:01:22 +02:00
2008-01-30 18:01:22 +02:00
2008-01-30 18:01:18 +02:00
2008-01-30 18:01:22 +02:00
2008-01-25 21:08:34 +01:00
2007-07-16 01:20:23 +01:00
2007-12-07 09:06:53 +00:00
2008-02-04 23:49:57 +11:00
2007-10-25 15:02:50 +10:00
2008-01-23 05:24:16 -05:00
2007-07-17 10:23:03 -07:00
2008-01-30 13:33:13 +01:00
2007-07-17 10:23:13 -07:00
2007-10-19 11:53:35 -07:00
2008-02-03 17:45:46 +02:00
2007-10-19 11:53:38 -07:00
2007-10-17 08:42:56 -07:00
2007-07-24 12:24:59 -07:00
2007-07-16 09:05:34 -07:00
2007-10-19 11:53:36 -07:00
2007-07-18 08:47:45 -07:00
2007-09-21 15:55:55 +09:00
2007-10-19 11:53:55 -07:00
2007-11-14 18:45:41 -08:00
2007-05-09 12:30:49 -07:00
2007-10-10 16:54:03 -07:00
2007-10-16 09:43:02 -07:00
2007-10-22 08:13:17 -07:00
2007-10-19 11:53:36 -07:00
2007-05-09 08:58:21 +02:00
2007-05-07 12:12:57 -07:00
2007-05-17 14:20:29 -07:00
2007-02-20 17:10:13 -08:00
2007-05-03 10:52:22 +03:00
2007-02-11 10:51:17 -08:00
2007-10-17 08:43:00 -07:00
2008-02-05 09:44:16 -08:00
2008-02-05 09:44:18 -08:00
2007-07-16 09:05:48 -07:00
2008-02-05 09:44:08 -08:00
2008-01-29 22:46:14 +11:00
2008-01-28 23:21:18 +01:00
2007-05-09 07:14:03 +02:00
2007-05-11 08:29:35 -07:00
2007-11-07 04:08:55 -08:00
2007-07-16 09:05:42 -07:00
2007-10-19 11:53:44 -07:00
2007-05-02 19:02:38 -07:00
2007-01-23 00:34:54 -05:00
2007-12-06 17:37:59 -05:00
2007-10-30 14:32:16 -04:00
2008-01-26 15:04:01 +00:00
2008-01-26 15:03:59 +00:00
2007-10-17 08:42:44 -07:00
2007-10-17 08:42:55 -07:00
2007-03-06 13:26:27 +01:00
2007-07-16 09:05:51 -07:00
2008-01-28 14:56:29 -08:00
2008-01-31 19:28:24 -08:00
2007-12-14 13:54:39 -08:00
2008-01-28 14:53:55 -08:00
2008-01-28 14:53:55 -08:00
2008-01-28 15:02:22 -08:00
2008-01-31 19:28:23 -08:00
2008-01-28 14:54:18 -08:00
2007-05-09 12:30:54 -07:00
2007-07-10 23:40:48 -04:00
2007-07-10 23:40:25 -04:00
2008-01-30 02:06:07 -05:00
2008-02-01 11:45:47 +11:00
2007-12-06 17:40:25 -05:00
2008-01-30 02:05:24 -05:00
2008-01-30 02:06:08 -05:00
2008-02-01 16:42:05 -05:00
2008-01-28 14:59:52 -08:00
2007-10-17 08:42:58 -07:00
2007-02-13 13:26:24 +01:00
2007-10-16 09:42:58 -07:00
2008-02-01 18:30:53 -05:00
2007-10-19 11:53:37 -07:00
2007-05-04 17:59:07 -07:00
2008-01-17 14:53:22 +11:00
2007-10-17 21:17:42 -07:00
2008-01-17 14:53:22 +11:00
2007-10-17 08:42:46 -07:00
2007-07-20 21:42:24 +02:00
2008-02-05 09:44:19 -08:00
2007-10-16 09:43:02 -07:00
2007-10-16 09:43:02 -07:00
2007-12-06 17:35:41 -05:00
2007-05-08 11:15:05 -07:00
2007-10-23 19:53:16 -04:00
2007-05-05 14:15:32 -07:00
2008-01-15 10:23:41 -06:00
2008-01-24 20:40:14 -08:00
2008-02-05 09:44:09 -08:00
2008-02-02 11:32:01 -08:00
2008-02-01 15:04:29 -08:00
2008-02-05 09:44:12 -08:00
2008-01-28 15:00:35 -08:00
2008-02-02 02:44:34 +03:00
2007-10-17 08:42:44 -07:00
2008-01-30 23:27:58 +01:00
2008-01-31 19:27:03 -08:00
2007-10-19 11:53:41 -07:00
2007-02-12 09:48:46 -08:00
2008-01-23 19:33:58 -06:00
2008-02-03 04:28:41 -08:00
2007-11-14 18:45:43 -08:00
2007-10-19 11:53:41 -07:00
2007-07-10 08:04:16 +02:00
2008-01-31 19:28:36 -08:00
2008-01-31 19:28:35 -08:00
2008-01-24 20:40:06 -08:00
2008-01-24 20:40:43 -08:00
2007-04-17 16:36:26 -07:00
2008-01-11 12:26:47 -05:00
2008-02-03 17:45:46 +02:00
2007-12-21 22:14:07 +11:00
2008-02-03 17:45:46 +02:00
2007-07-26 11:35:21 -07:00
2007-10-17 18:49:58 -04:00
2007-09-11 17:21:20 -07:00
2008-02-02 02:43:00 +03:00
2008-02-05 09:44:20 -08:00
2007-07-26 13:40:43 +02:00
2007-10-19 20:35:04 +02:00
2007-10-19 11:53:41 -07:00
2008-02-05 09:44:16 -08:00
2007-10-17 08:42:55 -07:00
2007-10-17 08:42:45 -07:00
2008-01-30 13:30:53 +01:00
2007-02-12 09:48:46 -08:00
2007-12-23 12:54:36 -08:00
2007-10-17 08:42:56 -07:00
2007-05-08 11:15:05 -07:00
2008-02-03 16:12:47 +02:00
2007-02-12 09:48:44 -08:00
2008-01-25 21:08:24 +01:00
2008-01-25 21:08:24 +01:00
2008-01-25 21:08:24 +01:00
2008-01-25 21:08:24 +01:00
2007-07-18 08:47:40 -07:00
2008-01-30 13:31:47 +01:00
2007-01-23 07:52:06 -08:00
2008-02-03 15:42:53 +02:00
2007-10-22 08:13:20 -07:00
2007-02-11 11:18:05 -08:00
2007-05-09 12:30:51 -07:00
2007-07-21 18:37:10 -07:00
2008-01-31 19:26:46 -08:00
2007-02-11 11:18:07 -08:00
2007-05-17 05:23:06 -07:00
2007-05-02 11:56:33 +01:00
2007-11-29 09:24:54 -08:00
2007-01-26 13:51:00 -08:00
2008-01-28 14:54:25 -08:00
2007-04-26 15:48:28 -07:00
2008-01-28 10:54:49 +01:00
2008-02-05 09:44:20 -08:00
2007-11-29 09:24:54 -08:00
2007-10-10 16:51:28 -07:00
2007-10-14 12:41:51 -07:00
2007-07-16 09:05:50 -07:00
2008-02-05 09:44:20 -08:00
2007-10-16 09:43:17 -07:00
2008-01-30 08:17:26 +11:00
2007-10-19 11:53:44 -07:00
2008-01-28 14:54:28 -08:00
2007-04-27 10:44:42 -07:00
2008-02-05 09:44:09 -08:00
2007-11-29 09:24:53 -08:00
2007-02-14 08:09:52 -08:00
2007-08-22 19:52:44 -07:00
2007-07-16 09:05:35 -07:00
2007-07-18 00:37:01 -04:00
2007-10-19 11:53:44 -07:00
2007-07-22 11:03:37 -07:00
2008-02-03 15:12:15 +02:00
2008-02-04 23:49:56 +11:00
2008-01-02 13:04:48 -08:00
2008-01-02 13:04:48 -08:00
2007-07-17 17:26:43 -07:00
2008-02-04 10:56:03 -08:00
2008-02-03 17:45:46 +02:00
2007-02-20 17:10:14 -08:00
2007-05-21 21:47:27 -07:00
2008-01-25 21:08:33 +01:00
2008-01-30 13:33:17 +01:00
2008-01-31 19:28:30 -08:00
2008-01-28 14:56:57 -08:00
2007-04-28 22:06:01 -04:00
2007-07-16 09:05:46 -07:00
2008-02-03 17:45:46 +02:00
2007-07-19 10:04:49 -07:00
2008-01-30 13:31:20 +01:00
2008-01-30 13:31:20 +01:00
2008-01-30 13:31:20 +01:00
2008-01-28 14:53:30 -08:00
2008-01-25 21:08:34 +01:00
2007-10-14 12:41:51 -07:00
2007-05-08 11:15:18 -07:00
2007-10-30 21:44:00 -07:00
2008-02-01 18:30:53 -05:00
2008-02-05 09:44:17 -08:00
2007-05-09 12:30:57 -07:00
2008-02-05 09:44:15 -08:00
2008-02-05 09:44:16 -08:00
2007-05-11 08:29:34 -07:00
2008-02-05 09:44:07 -08:00
2008-02-05 09:44:20 -08:00
2008-01-24 20:40:40 -08:00
2008-01-23 11:29:18 -06:00
2007-05-21 09:18:19 -07:00
2007-10-18 14:37:28 -07:00
2007-02-09 16:23:15 +00:00
2008-01-28 14:54:07 -08:00
2008-02-01 17:45:14 +01:00
2008-02-01 17:45:14 +01:00
2008-01-24 20:40:06 -08:00
2008-02-01 17:45:13 +01:00
2008-01-30 13:30:00 +01:00
2007-05-11 08:29:36 -07:00
2007-11-26 20:42:19 +01:00
2008-01-25 21:08:20 +01:00
2007-02-12 09:48:42 -08:00
2007-05-11 08:29:35 -07:00
2007-05-11 08:29:35 -07:00
2008-01-28 14:54:09 -08:00
2008-01-31 19:27:30 -08:00
2007-07-10 22:15:57 -07:00
2007-10-17 08:42:51 -07:00
2007-10-19 11:53:42 -07:00
2008-01-24 20:40:26 -08:00
2007-07-16 09:05:45 -07:00
2006-12-15 08:47:51 -08:00
2008-02-01 14:34:49 -08:00
2008-02-01 14:35:07 -08:00
2008-02-01 14:34:58 -08:00
2007-09-19 11:24:18 -07:00
2007-07-16 09:05:48 -07:00
2007-12-26 19:36:35 -08:00
2007-10-12 14:51:04 -07:00
2007-10-22 12:01:30 -02:00
2007-10-22 12:01:24 -02:00
2007-10-23 13:47:31 -05:00
2008-02-04 23:50:13 +11:00
2008-02-04 23:50:01 +11:00
2008-02-04 23:50:03 +11:00
2007-10-23 15:49:55 +10:00
2008-02-04 23:50:02 +11:00
2008-02-04 23:50:12 +11:00
2008-02-04 23:50:00 +11:00
2008-02-04 23:50:03 +11:00
2008-02-05 09:44:14 -08:00
2007-07-17 10:22:59 -07:00
2007-10-17 08:42:56 -07:00
2007-10-19 11:53:34 -07:00
2008-02-05 09:44:07 -08:00
2007-02-08 12:38:54 -08:00
2008-02-03 15:42:53 +02:00
2008-01-16 09:51:58 +01:00
2008-02-05 09:44:19 -08:00
2008-02-05 09:44:20 -08:00
2008-01-31 19:27:03 -08:00
2007-10-12 14:05:17 +10:00
2007-10-10 16:53:57 -07:00
3b7391de67