container-selinux-2:2.33-1.git86f33cd.el7$>s/ts>??d, 0 X (.5W       0 X      ( ;8 D9 :>^@fBnGHIXYZ,[4\L]l^bd1e6f9l;tTutvwxCcontainer-selinux2.331.git86f33cd.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Z.^c1bm.rdu2.centos.orgCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : fi fi #define license tag if not already defined&;0MuA큤AAA큤A큤Z.^Zi'Z.^Z.^Z.^Zi'Z.^Z.^093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5dfc6217a38cd557adbe6ba5b7e219411cf816d86ad270db71fed1fc1d348517d11cf13c63a6d685d84488e64f7e0d8f064737cd3a4d7cd7b16c9ac118391cf962rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.33-1.git86f33cd.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3ZZY@Y|YYdYA@YYoIYcl@Y[@YA%@YA%@Y6@X@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWDan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2:2.30-2.git7f2de1aDan Walsh - 2:2.30-1.git7f2de1aDan Walsh - 2:2.28-1.git85ce147Lokesh Mandvekar - 2:2.24-1.gitaeff029Lokesh Mandvekar - 2:2.21-2.gitba103acLokesh Mandvekar - 2:2.21-1Lokesh Mandvekar - 2:2.20-2Frantisek Kluknavsky - 2:2.20-1.1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Relabel /etc/docker directory- bump to v2.30 - Allow containers to create files on tmpfs file systems - Dontaudit containers attempts to write to /proc- bump to v2.28- bump to v2.24- Resolves: #1469792 - built @origin/RHEL-1.12 commit ba103ac- Resolves: #1469661 - bump to v2.21 - built commit 333854a- Resolves: #1463549 - built commit 532fa20- rebase- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.33-1.git86f33cd.el72:2.33-1.git86f33cd.el72:2.33-1.git86f33cd.el7 2:1.12.5-142:1.12.4-28container-selinux-2.33README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.33//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,VP]"k%(u#qXPNeR@Qwʟ=t!⼋6a\ycME2_آ`eQtME \hEUjRuY/nU>FENpJIk-B º:y? {vucx0Hbll *;n}jgH9TZR5`ŌQ{>/E(z鷋{Xb9x@H!@mv2BWGRb-QH ;7QXHp]-ЧvrYmU&kfq-җ y2 /,5T༠'&_Wqc!xBxlj;O'BJm`6yPOZf:eN$&Ђ/9SFKq%huDžuU&`aH\#H4 N^7}[%!DCbI>M+!*qޡe;^9a*88`ӵ@zux_o/$ЇurE*[*O!ų]pm& 9kJ\k':.؁*\Z$ZU3,`eFek?I0X>.+&#Ek ڐJ]KFl OJ%\\.ddڊwéN@k~*4SKޡ/#+Pc}5ǖԦ2Na O? [~7wXT&{}&1yWN8~ͻmT#Hp_gW@wk+v"p.xmk`hVL ֲ gVAн1w9[FUO:1ok|:&!;8@=t/"b0cq?Gb+\B-|ʹzc%e0A,ߪ8ؼ~MKؚ]FT};94uyzd8Jy}D no Bt\H2.OI -[&;_ Sc҈~j[,\Jy څOiDZrfj;UY5gʯXRr+0l ?i~p.IGX;ax#Ȣ94ٴc Yb} .w<ؗ#r*9R{B$ػH@p ˽;T[D[4p'ew:OUE/X# bB/fr?  Hλ&B`}0Tm:Nnx~nOxק kmB陟^CD@*S/|?%x~ pP7].mF_oJ =y[}bEqeiWԏj4»L.'4|g2q1JdBX94LhIZhJ£m3xlBo#%yQCc'%AdH\Y-3 ѵSGù*$~ݦpXslukI`(>KW mI,ɷ.At^(U]0,,݇,^`m0>ǎIZ2^ƽZ;9pI+=&pi6rf[% EFs`[N:uoL)1ҞסbϹ_ cT#D=0 B1K"֗5 O=p95P*#XqCRh@6$"bu] =:w*.,7⚈-M9`|O9ZaغX H J[MД1z 65NmD˨Qvo<˧29ɰkl꡸CT0n@S@y 6[-#"CGCv,EIR)M;GPzw CHJ&kY<|ϝofcQtT*cf.\ʍx`f^vR[MZڿ#7@&[XD}^=w8qa)@Enۻ{׋92T̈+ªWr|k}W<˩?dOŎ9w. z6j~vo6r0Q3h!j| M^uQyjLp7{FyþShbw/h;1:u:}'?}3>_SDgi!16*&甇)%^ v^51\)kxYYelm]>뀻%S `|UW6C2 6s*Ժ!>YP6Q]ys8Neo. 7sӐ`4OL&!# wkuz[bBGѸH?KT祉ttt'aȕUxL~t IA@tSl玟Icw$HzD9i˼Y2М1$$aIdӢ./I% Uc BM#ɫ?("UQ]nt!Zyx(TAԪ-Yrج̀46-ៈa$Gx7%F Ʃ?e 0V;~-ye- /J5~ x?QJ|vBNM "$E tb~=KH542R6ɶ+~ajb,;kDŽ|Mư.E-,7];N*RǧbYn&@qk ,P2l좽?q VސENҔMyPw4Wh.LEW4Sc]Y{=yE*^q8ch$mmPq*jAn`P!(Ղ},cn*oKMߥ<dJa~3r^3*3?I8tql26vGS C64#QǴfqZVM \E F%ĒKklx--#tyO_MޞZ.>m = Kw=$5 o˻ }@H؀Beq1>2P~kpm\HvݥUDʈy@F !qQ:fOT<?6ȜB@4' 8 L6H+ X-4k/H#Ʋt+Leg&Z(E %ɕS ȗ #DvkiQ=֚b9sut* CʶQ]x0;$P!\3~'Zs~lc3_swkgǙNl~d3܉Om 5eN+3з4&]٫Z_ťeb?uZJ3vδuhlwC_}}?d7Ax\xk^.Qhw/O.'У|%X`( UP^UQ'&z%NR qoScT:V1's{\mQ$9( NXh#6q1. !l?I| A:Pc[iy= QΚ l?ow΅ܠ,sM!-jA-x`Oh>T4\"1qhzxTTEeDf+%SШ]%.E1+eIsJB{`HZOʔg84|?^u؜xݡRX:Bwc򭈒|jH>W/)SK|Ndg6;Xc.i kImTmQ[EARkMJ\ Czғ~BEFI4>0{/疶-X֔tDmbjf9V*@rXO*Z7tIT6iZM xSAɊ࢈,Sp(c}ΉF|Ebh˿'ƻn&+J\n+UUߔf^ݰ5o+yDcEoz]G1\xR(QrxG$$v)9csl6l&A]c Uu3 $x"-_`,dC/aDZu?[O>r.O{ #h` Ƿ>[6d^D!5e}V ʹ?.e࿒]4;Gf4Ff6O>`)br=a&u.kG}& ^SJPXʕ+ū!wLsx:J;TnŒu ;=F@ro>o+?8]DN |:^'2I|'./U80qwOgΥMR%r~4Zڡ ;/kmKw_8z=gKqc;@>ӯW]W]| smtFmZ#mg6@ eyER:}EC+T#owhQ{{ v8\Z+v6~iA#5V#/x*삧1\jONVme'ŵ8Eh):MWeЖvBL$rzsp.᪐Q2rDbs1xtR$P@wiސrO( 7-XrJm#28 ؄L طW*W" ѻkN/b rAef(X˨ø羈¦/Ԭ%|H7h6?-TYڗC.kw %n\#Yt|t(w?9suqQg[trKCIZk `Uus,UJV1܀]wi"SG#i~IE.M@ԁ]>˸/#"}ECg21}Iѯ:{qi:C:.lc{- M_\:A2">k'x]**eC%ŀNY#ZfiBL߾Qƛ=,nz4"tphliReOǹl2U1 qC:_c{(6NhaQ˹(Tm-&r-PRٳU#9=`"3&ϴtx pgSDKU[(WTr٠Q Wz[i.[Om6p={aSD8pgk|3b^YJ̄1cmJ]'#.Dg4XKsU:HCd3nK&09kJuҟd[j,y#u~X ps_:kggƳ,S{.nifVpwO0 YQTLk⋏h#=z?_s̲vb;nM,fBɬ% }O]n4T޺pJ4?*0u%Up6sR(Xk݃[HqM[Ԋ Ba?߇3A2%WNGؾ"b-`!%y|ed\-#Tm ǘt4:R`C鱟Nŝa HE]E>՜@MVVW=qgH߽6{&cΉ]Wv7aDJY+hARL6?s,6O0aY"$fKn]z=4b;%P 趔߄{Je%xd¦mҭ58`FRxWHfPghK6̧$X[2M)y_9g#;Iҩ0wBKlQ Nl[Ѥ)F\t B1.NȚktF.i`~D={+\#󂈰4#a\&w̽h/)s*{3XT{! Wn|wIY 'B!V G'vځ&z55C/Sw A D&*+,DKZM!#3s1Y*3G< Ien~G{)pĕLќQ*IʛvH. HDgF X^7 ~!ě/Xtcg_~,V{PRy[-b}yZ g,#(y1>zJDBoi][#f1(A|]5#:dP8P/;BD^x r@9"Z"D8KӘ @?ܰQɎ 4V AvT{Hh4i"P 37߬l捓nHUy(VWVk&I~|ziV{r/l=Tb ǢNYqE&R"CP;B%f@ewYO }Fcw-W&WU'}m",jO21Ɲ- {&,̆ Y]9Pv E*iYqlȣ;o G1n UНtw0؆5@_2^\53eWx7 4'G y QG C'"K6wgcd-=Vt;Წ&P)6"@#Rlv'/{f$VG!W.\1n: dr2BP'@H#OnR ^YlG31_.95 zeӍ 3Ńu-ѽclm2^ (pͼ@ps-.  uwW %ᱤu'[32}'xC>R~~>]R^ϥރ#^Pr]-7S>JdGbW#q+4Wb.-n5`HZXָt( %~:m;#׎ɉ'r2 !puwh ]uͯ.)|Cw [iE ڲxӴ>kj37Z(BL̙c-;*'wIw^y̗%z`jr`&rz}K) ,!w!xjj![&;3?9U (tXjV!vt 1K<^YPP\ͫ5kߵ:)f:Rl #ű\)KMO7 ǻ)HIUߟT*"˸?p Q[A-fV6!s584l??HuK=ttS`>埾:F&+Ha $P$S)XtFqi4" )DͰX"^R51 U_kc$Q~w+pd:MvFs zl #:9Hg- ih'|)C#Wߏ : %Pl"M:Ba3k>bೄ>2gfhzڲN9nFvq<^DrkUC ֝eW89d1d(WrGzpMcZZAĄxm՝L}*lu1rr8x[! {7lUv] q?fk{a!9#d=)h};#ib"sO=F閺`3c6+7E(+Kcoy]Kl"`vmƺ]^j>xKZZRK.]ɗjagu^D wQtE?$@C1)|/ #I1 S$Q|?ĈW%6l0b),Լ Q@t$l:I~$X!xR!RKnJpmG#0E+{bm?ZMWӸ|lZP}fYxՄCAi|DEU"4Ang"17yIҦYˣ֙MKDh꣏t/-ǯKO7҉j.mIdϖƁ[M -qU墦H6o`g Z &/Tb]5a Rs&gY0gb^)RzDgOTHp^1ۮɴ`x'YAf$u.O,@35MsQ屃BYXK4U PV 6vˇVN;S4hu}kt~'֡x1Fyy~׃@Pb ::U"|r^LVx=vٱtu`zFRpD*+n"2j".zI1&A(Q @kG3,W9ɧ)vz|c` X5u:S~V$=tK+hAm/w8/ *+ bװx Vo\Ъ@, )iޙZMxOQ.\eRn.Իjwb03繹Y[T']͝I>&C(̘G}ŭ%"6dƘckrj(WGnrLtVȔS)5׸̏j]Oo^B6GfRy%EE_4! OYm?PS[TlSǝPu``fO&1_17z!}plAAR̀}J6, #fyr@.e<ф/zɛUr§`w3&FOW| S/q/2y٦ƕ?yvѵ٢I n6AIkzknC4+Yy9"f3`a9)P턡t\Y,4xU!.evAD('͑4?Q ,fxԯ  "^-ֲ{Zoאy/$U o wyF(?CEjy *ŨA)c:zh,mN`9A ~wk- BnR0>Eėsksܢ[|`SZįY_[r@tND(sb|6sPaa8ν akht F`+ 0kz orFR91mCs42Oc C= +-Od2n΂%n!TatdӦyL f^TN2uQȖ0?}DAC>RCO?ʹe6K:b &lz:Y)zm_pmr/Gt۔V,;&݁xueH3륤F=''/r2ѿFj|2>Ӳ23659:S{lRXEd hi~:r3&7N4l6eH=@,@|/ȼ g>n46RWHYfZk`?ut9=)5 tJF넘YYma.) 8IyLeN m4\@J r*E"m[1W-%kmᭊuWvvz*NMbëY XXx qö5IY1E,viCy<T$V3Rab RB輕c A($ O;1 %\}!e7,Fvu|9JAU;YXwGj&:i8v͍N|;VT$)e?j}o:"xmdB)Ul# &?egtuU1@1S;ߚ#nTBxObr.[ltHs60v8ԫ;Ak&d6%z{Z^Ur~ZSJfe{P"Uo9lbQAhAIvO!Obf⿧$u9٨kG2&nd{Ma._u4GLx #\7߳)W; C*@erU{ }_]aBLuV .D{BBJ}$OJ u>ipA :셶ݎ/J\%uZ~[[emHm4i W %mA^gK@YV KPpJ=!͹1_0Vk{<0;}wP唺r+N" *C .zF@!ӡjtCڹf]~U N )脝)H^b[Ks=ؑ[U>ż/\+))$f_MBJ, @~k+ڸ`渏leq;`HWx캃d7dm64MT4&*'j;r B( Uz8 2YcC\*47:fp 6R?sϦKw~ fڄ@iɮ.NAhh"s{,PwDo{}#Q#o?liIe]pIV>O(n|A2sCZSnD+n\n Gh5 d:,;.e`2Y)dyS *5xPTL[L8EbZ DN.10'Yo/rCO%~m#āզ_ڢM N0GhǠ(isRv|J3o;OpU>YC h45+e63;ɜ9?^9 sFg o׿uq9" k<L^W$v:䍱""1*qW?L66MXc$|}4U9ћ것l2C+Q ufRx~o*Y· 97;&bf\xG7RDBmfUj_268?Nݙ.݃/Yhk@t~OK!JwױeD됬#+Fs7s4BU )99 iLJAӜy+GEwqh/ݍ4Y9nkxq5bX6e,;^ҜjuqMXMZdG_}&]z!8fJx9)U[`//2d/d)w ~׊?_+͋!.``ʍΖȡTy+헻#u4Ysuy.uP#$/\Qnk&y%#3оU ᱦ om>.h[!`X ca0G>Y% F޹DD%%=Py'c@S VS1jca^98 E7"i3boC6lLs7{1޷8$C:n& ME(*Т=zV%l;_\KHayi9y*BȜSnMI*Zq%bl p'f1O\i@m7$[dx{IgrO{8/+éJiY20@10)CAu)3/9p5>9%81W2('6;W&:qx~r@y?H HJpAF˙ҁMoaӂ#L$1Ir5=ieɜ,+wvLʅ*~3f{:6oYC!ƔS8@ ߀//e7[)MdH#s̶G%-i+wsP^0I|s[*LK 2Z 3hrD?X/z52̫.H]-ayu6"p=n(/@Lpvg¸O*=Jų@ANӵnae+qZ5YԅQ)˷(HQIf2@{1d2sn8wkzM+ZΎ[8ߥ]=Ah_GI@aZGi0rKOEX ?fuWŵbSRmvRqu:F4<F?v:][sN6H OpL8ڔ._{"s)x,\} }J 8/항9|6PlH6hЉ\bUH 2f6R:SV4mx^$`\+Iv4ut ir3y!!{]aU'VpA#V\<,l?#+# <d*o2,, Sj>5tuXj2nu˰SF-8@wڗ\A&d& 8CUK^ov?JGtZ#x;c<2dTg 6F!αiYx ('u&OZsf0 zuҙm ȁѦiR&|89*]rE'E; ^JZ\a?IYlP.AXd?X=AЯNME;x"r'mzyZ\e['` L.zߗ4F5cWѰ#F ~ @1fy+MF ܕ<%J>goߜG]0Z?Z:$<]hc0ЭGC<)o> \}+YWc}ھ3qP#܈><%I31%urOZkn&!'ҩ^0cRTJGU114XSjY'p`l8\/LWb,qLK64KNk@0|Z6hq] ml,n+zf`A `qXZt|*.wrPT1ⱏx3Bx<}@D`DԪ~gyvI;KMj#{_eAن(ZNiGOp@7'r7> {{P(d"vK@ 3S7C,%.FO+W,t 4{}Ba+A(i6eמv3j mNM.)}4whW$5-qt0nuhҔBkc"{Nm&B nLZ\gJ\: B*ᦃk7TeN{M1ŶFbg6g<͆:]0 l_e̳.1hUgK@hK;!CO~5mINGV绂۸ _0 qK4S׳|siE[ 2[B.3|Պ~vUל.Rr,Kϭ8SwwtR@`o(rz L}9u;urWP\VaFc?tE<; ccO嗰IdYZzW@y93ﮮ1Tc)]`rA6l|<B_S%sW~GXAK Ԁ`ΪC6؏(+uBqT&ASi]T;|Mu`ߊ/:Ȓ[a-a{T}w0lf uVnlkeb˖J\g}$ Lސw裇+ =oi'҈P&7e_D2d7zךC^ʀ}2ʴMʄ/@>nck ZRMԪ\W~u=JㅝVK혮brlYfo쀬RneT G;.*uHW+'S? u}Lǜwq=%iӐt(ޙp5_? 㕍u5Aޙv[ ߮/Z#=zq`gn'Ebz˯6fr,|+fWsAToC#2i h3S+}*h0Ic4Bh8q,8b:W.9RcV3Lv{46aU#`U@1L[Xuw;}a"4egK/K~c"2ۋz(II}F&'JN^Lx6t2q96TR-a(C\'/U+~tD+w^Sms`ֻ-̑(fY\y_GN)C9<4>utP-LWjTPS|!(LJ&r u 7nMd'E)?FWh[aqltN1\:lNsD|nu쒵]'K U\_co3vOF/"[!ﴴfsF%#b4GumO;DV:'|eR8Io 587iQb!#r_#N%JwF#Muj lޚ YZ