Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 11, column: 6, }, end: Position { line: 11, column: 9, }, }, }, ), target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "meta", span: Span { start: Position { line: 14, column: 3, }, end: Position { line: 14, column: 7, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "maintainers", span: Span { start: Position { line: 15, column: 5, }, end: Position { line: 15, column: 16, }, }, }, ), ], to: List( List { elements: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "maintainers", span: Span { start: Position { line: 15, column: 21, }, end: Position { line: 15, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "joachifm", span: Span { start: Position { line: 15, column: 33, }, end: Position { line: 15, column: 41, }, }, }, ), ], default: None, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "maintainers", span: Span { start: Position { line: 15, column: 42, }, end: Position { line: 15, column: 53, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "emily", span: Span { start: Position { line: 15, column: 54, }, end: Position { line: 15, column: 59, }, }, }, ), ], default: None, }, ), ], span: Span { start: Position { line: 15, column: 19, }, end: Position { line: 15, column: 61, }, }, }, ), }, ), ], span: Span { start: Position { line: 14, column: 10, }, end: Position { line: 16, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 18, column: 3, }, end: Position { line: 18, column: 7, }, }, }, ), Raw( PartRaw { content: "kernelPackages", span: Span { start: Position { line: 18, column: 8, }, end: Position { line: 18, column: 22, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 18, column: 25, }, end: Position { line: 18, column: 34, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 18, column: 35, }, end: Position { line: 18, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "linuxPackages_hardened", span: Span { start: Position { line: 18, column: 40, }, end: Position { line: 18, column: 62, }, }, }, ), ], default: None, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "nix", span: Span { start: Position { line: 20, column: 3, }, end: Position { line: 20, column: 6, }, }, }, ), Raw( PartRaw { content: "settings", span: Span { start: Position { line: 20, column: 7, }, end: Position { line: 20, column: 15, }, }, }, ), Raw( PartRaw { content: "allowed-users", span: Span { start: Position { line: 20, column: 16, }, end: Position { line: 20, column: 29, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 20, column: 32, }, end: Position { line: 20, column: 41, }, }, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "@users", span: Span { start: Position { line: 20, column: 45, }, end: Position { line: 20, column: 51, }, }, }, ), ], span: Span { start: Position { line: 20, column: 44, }, end: Position { line: 20, column: 52, }, }, }, ), ], span: Span { start: Position { line: 20, column: 42, }, end: Position { line: 20, column: 54, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 22, column: 3, }, end: Position { line: 22, column: 14, }, }, }, ), Raw( PartRaw { content: "memoryAllocator", span: Span { start: Position { line: 22, column: 15, }, end: Position { line: 22, column: 30, }, }, }, ), Raw( PartRaw { content: "provider", span: Span { start: Position { line: 22, column: 31, }, end: Position { line: 22, column: 39, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 22, column: 42, }, end: Position { line: 22, column: 51, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "scudo", span: Span { start: Position { line: 22, column: 53, }, end: Position { line: 22, column: 58, }, }, }, ), ], span: Span { start: Position { line: 22, column: 52, }, end: Position { line: 22, column: 59, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 23, column: 3, }, end: Position { line: 23, column: 14, }, }, }, ), Raw( PartRaw { content: "variables", span: Span { start: Position { line: 23, column: 15, }, end: Position { line: 23, column: 24, }, }, }, ), Raw( PartRaw { content: "SCUDO_OPTIONS", span: Span { start: Position { line: 23, column: 25, }, end: Position { line: 23, column: 38, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 23, column: 41, }, end: Position { line: 23, column: 50, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "ZeroContents=1", span: Span { start: Position { line: 23, column: 52, }, end: Position { line: 23, column: 66, }, }, }, ), ], span: Span { start: Position { line: 23, column: 51, }, end: Position { line: 23, column: 67, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 25, column: 3, }, end: Position { line: 25, column: 11, }, }, }, ), Raw( PartRaw { content: "lockKernelModules", span: Span { start: Position { line: 25, column: 12, }, end: Position { line: 25, column: 29, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 25, column: 32, }, end: Position { line: 25, column: 41, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 25, column: 42, }, end: Position { line: 25, column: 46, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 27, column: 3, }, end: Position { line: 27, column: 11, }, }, }, ), Raw( PartRaw { content: "protectKernelImage", span: Span { start: Position { line: 27, column: 12, }, end: Position { line: 27, column: 30, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 27, column: 33, }, end: Position { line: 27, column: 42, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 27, column: 43, }, end: Position { line: 27, column: 47, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 29, column: 3, }, end: Position { line: 29, column: 11, }, }, }, ), Raw( PartRaw { content: "allowSimultaneousMultithreading", span: Span { start: Position { line: 29, column: 12, }, end: Position { line: 29, column: 43, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 29, column: 46, }, end: Position { line: 29, column: 55, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 29, column: 56, }, end: Position { line: 29, column: 61, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 31, column: 3, }, end: Position { line: 31, column: 11, }, }, }, ), Raw( PartRaw { content: "forcePageTableIsolation", span: Span { start: Position { line: 31, column: 12, }, end: Position { line: 31, column: 35, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 31, column: 38, }, end: Position { line: 31, column: 47, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 31, column: 48, }, end: Position { line: 31, column: 52, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 34, column: 3, }, end: Position { line: 34, column: 11, }, }, }, ), Raw( PartRaw { content: "unprivilegedUsernsClone", span: Span { start: Position { line: 34, column: 12, }, end: Position { line: 34, column: 35, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 34, column: 38, }, end: Position { line: 34, column: 47, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 34, column: 48, }, end: Position { line: 34, column: 54, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "virtualisation", span: Span { start: Position { line: 34, column: 55, }, end: Position { line: 34, column: 69, }, }, }, ), Raw( PartRaw { content: "containers", span: Span { start: Position { line: 34, column: 70, }, end: Position { line: 34, column: 80, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 34, column: 81, }, end: Position { line: 34, column: 87, }, }, }, ), ], default: None, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 36, column: 3, }, end: Position { line: 36, column: 11, }, }, }, ), Raw( PartRaw { content: "virtualisation", span: Span { start: Position { line: 36, column: 12, }, end: Position { line: 36, column: 26, }, }, }, ), Raw( PartRaw { content: "flushL1DataCache", span: Span { start: Position { line: 36, column: 27, }, end: Position { line: 36, column: 43, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 36, column: 46, }, end: Position { line: 36, column: 55, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "always", span: Span { start: Position { line: 36, column: 57, }, end: Position { line: 36, column: 63, }, }, }, ), ], span: Span { start: Position { line: 36, column: 56, }, end: Position { line: 36, column: 64, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 38, column: 3, }, end: Position { line: 38, column: 11, }, }, }, ), Raw( PartRaw { content: "apparmor", span: Span { start: Position { line: 38, column: 12, }, end: Position { line: 38, column: 20, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 38, column: 21, }, end: Position { line: 38, column: 27, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 38, column: 30, }, end: Position { line: 38, column: 39, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 38, column: 40, }, end: Position { line: 38, column: 44, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 39, column: 3, }, end: Position { line: 39, column: 11, }, }, }, ), Raw( PartRaw { content: "apparmor", span: Span { start: Position { line: 39, column: 12, }, end: Position { line: 39, column: 20, }, }, }, ), Raw( PartRaw { content: "killUnconfinedConfinables", span: Span { start: Position { line: 39, column: 21, }, end: Position { line: 39, column: 46, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 39, column: 49, }, end: Position { line: 39, column: 58, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 39, column: 59, }, end: Position { line: 39, column: 63, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 41, column: 3, }, end: Position { line: 41, column: 7, }, }, }, ), Raw( PartRaw { content: "kernelParams", span: Span { start: Position { line: 41, column: 8, }, end: Position { line: 41, column: 20, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "slub_debug=FZP", span: Span { start: Position { line: 43, column: 6, }, end: Position { line: 43, column: 20, }, }, }, ), ], span: Span { start: Position { line: 43, column: 5, }, end: Position { line: 43, column: 21, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "page_poison=1", span: Span { start: Position { line: 46, column: 6, }, end: Position { line: 46, column: 19, }, }, }, ), ], span: Span { start: Position { line: 46, column: 5, }, end: Position { line: 46, column: 20, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "page_alloc.shuffle=1", span: Span { start: Position { line: 49, column: 6, }, end: Position { line: 49, column: 26, }, }, }, ), ], span: Span { start: Position { line: 49, column: 5, }, end: Position { line: 49, column: 27, }, }, }, ), ], span: Span { start: Position { line: 41, column: 23, }, end: Position { line: 50, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 52, column: 3, }, end: Position { line: 52, column: 7, }, }, }, ), Raw( PartRaw { content: "blacklistedKernelModules", span: Span { start: Position { line: 52, column: 8, }, end: Position { line: 52, column: 32, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "ax25", span: Span { start: Position { line: 54, column: 6, }, end: Position { line: 54, column: 10, }, }, }, ), ], span: Span { start: Position { line: 54, column: 5, }, end: Position { line: 54, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "netrom", span: Span { start: Position { line: 55, column: 6, }, end: Position { line: 55, column: 12, }, }, }, ), ], span: Span { start: Position { line: 55, column: 5, }, end: Position { line: 55, column: 13, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "rose", span: Span { start: Position { line: 56, column: 6, }, end: Position { line: 56, column: 10, }, }, }, ), ], span: Span { start: Position { line: 56, column: 5, }, end: Position { line: 56, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "adfs", span: Span { start: Position { line: 59, column: 6, }, end: Position { line: 59, column: 10, }, }, }, ), ], span: Span { start: Position { line: 59, column: 5, }, end: Position { line: 59, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "affs", span: Span { start: Position { line: 60, column: 6, }, end: Position { line: 60, column: 10, }, }, }, ), ], span: Span { start: Position { line: 60, column: 5, }, end: Position { line: 60, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "bfs", span: Span { start: Position { line: 61, column: 6, }, end: Position { line: 61, column: 9, }, }, }, ), ], span: Span { start: Position { line: 61, column: 5, }, end: Position { line: 61, column: 10, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "befs", span: Span { start: Position { line: 62, column: 6, }, end: Position { line: 62, column: 10, }, }, }, ), ], span: Span { start: Position { line: 62, column: 5, }, end: Position { line: 62, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "cramfs", span: Span { start: Position { line: 63, column: 6, }, end: Position { line: 63, column: 12, }, }, }, ), ], span: Span { start: Position { line: 63, column: 5, }, end: Position { line: 63, column: 13, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "efs", span: Span { start: Position { line: 64, column: 6, }, end: Position { line: 64, column: 9, }, }, }, ), ], span: Span { start: Position { line: 64, column: 5, }, end: Position { line: 64, column: 10, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "erofs", span: Span { start: Position { line: 65, column: 6, }, end: Position { line: 65, column: 11, }, }, }, ), ], span: Span { start: Position { line: 65, column: 5, }, end: Position { line: 65, column: 12, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "exofs", span: Span { start: Position { line: 66, column: 6, }, end: Position { line: 66, column: 11, }, }, }, ), ], span: Span { start: Position { line: 66, column: 5, }, end: Position { line: 66, column: 12, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "freevxfs", span: Span { start: Position { line: 67, column: 6, }, end: Position { line: 67, column: 14, }, }, }, ), ], span: Span { start: Position { line: 67, column: 5, }, end: Position { line: 67, column: 15, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "f2fs", span: Span { start: Position { line: 68, column: 6, }, end: Position { line: 68, column: 10, }, }, }, ), ], span: Span { start: Position { line: 68, column: 5, }, end: Position { line: 68, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "hfs", span: Span { start: Position { line: 69, column: 6, }, end: Position { line: 69, column: 9, }, }, }, ), ], span: Span { start: Position { line: 69, column: 5, }, end: Position { line: 69, column: 10, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "hpfs", span: Span { start: Position { line: 70, column: 6, }, end: Position { line: 70, column: 10, }, }, }, ), ], span: Span { start: Position { line: 70, column: 5, }, end: Position { line: 70, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "jfs", span: Span { start: Position { line: 71, column: 6, }, end: Position { line: 71, column: 9, }, }, }, ), ], span: Span { start: Position { line: 71, column: 5, }, end: Position { line: 71, column: 10, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "minix", span: Span { start: Position { line: 72, column: 6, }, end: Position { line: 72, column: 11, }, }, }, ), ], span: Span { start: Position { line: 72, column: 5, }, end: Position { line: 72, column: 12, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "nilfs2", span: Span { start: Position { line: 73, column: 6, }, end: Position { line: 73, column: 12, }, }, }, ), ], span: Span { start: Position { line: 73, column: 5, }, end: Position { line: 73, column: 13, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "ntfs", span: Span { start: Position { line: 74, column: 6, }, end: Position { line: 74, column: 10, }, }, }, ), ], span: Span { start: Position { line: 74, column: 5, }, end: Position { line: 74, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "omfs", span: Span { start: Position { line: 75, column: 6, }, end: Position { line: 75, column: 10, }, }, }, ), ], span: Span { start: Position { line: 75, column: 5, }, end: Position { line: 75, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "qnx4", span: Span { start: Position { line: 76, column: 6, }, end: Position { line: 76, column: 10, }, }, }, ), ], span: Span { start: Position { line: 76, column: 5, }, end: Position { line: 76, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "qnx6", span: Span { start: Position { line: 77, column: 6, }, end: Position { line: 77, column: 10, }, }, }, ), ], span: Span { start: Position { line: 77, column: 5, }, end: Position { line: 77, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "sysv", span: Span { start: Position { line: 78, column: 6, }, end: Position { line: 78, column: 10, }, }, }, ), ], span: Span { start: Position { line: 78, column: 5, }, end: Position { line: 78, column: 11, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "ufs", span: Span { start: Position { line: 79, column: 6, }, end: Position { line: 79, column: 9, }, }, }, ), ], span: Span { start: Position { line: 79, column: 5, }, end: Position { line: 79, column: 10, }, }, }, ), ], span: Span { start: Position { line: 52, column: 35, }, end: Position { line: 80, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 84, column: 3, }, end: Position { line: 84, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 84, column: 8, }, end: Position { line: 84, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 84, column: 15, }, end: Position { line: 84, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "kernel.yama.ptrace_scope", span: Span { start: Position { line: 84, column: 23, }, end: Position { line: 84, column: 47, }, }, }, ), ], span: Span { start: Position { line: 84, column: 22, }, end: Position { line: 84, column: 48, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOverride", span: Span { start: Position { line: 84, column: 51, }, end: Position { line: 84, column: 61, }, }, }, ), arguments: [ Integer( Integer { value: "500", span: Span { start: Position { line: 84, column: 62, }, end: Position { line: 84, column: 65, }, }, }, ), Integer( Integer { value: "1", span: Span { start: Position { line: 84, column: 66, }, end: Position { line: 84, column: 67, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 87, column: 3, }, end: Position { line: 87, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 87, column: 8, }, end: Position { line: 87, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 87, column: 15, }, end: Position { line: 87, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "kernel.kptr_restrict", span: Span { start: Position { line: 87, column: 23, }, end: Position { line: 87, column: 43, }, }, }, ), ], span: Span { start: Position { line: 87, column: 22, }, end: Position { line: 87, column: 44, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOverride", span: Span { start: Position { line: 87, column: 47, }, end: Position { line: 87, column: 57, }, }, }, ), arguments: [ Integer( Integer { value: "500", span: Span { start: Position { line: 87, column: 58, }, end: Position { line: 87, column: 61, }, }, }, ), Integer( Integer { value: "2", span: Span { start: Position { line: 87, column: 62, }, end: Position { line: 87, column: 63, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 90, column: 3, }, end: Position { line: 90, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 90, column: 8, }, end: Position { line: 90, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 90, column: 15, }, end: Position { line: 90, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.core.bpf_jit_enable", span: Span { start: Position { line: 90, column: 23, }, end: Position { line: 90, column: 46, }, }, }, ), ], span: Span { start: Position { line: 90, column: 22, }, end: Position { line: 90, column: 47, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 90, column: 50, }, end: Position { line: 90, column: 59, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 90, column: 60, }, end: Position { line: 90, column: 65, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 93, column: 3, }, end: Position { line: 93, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 93, column: 8, }, end: Position { line: 93, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 93, column: 15, }, end: Position { line: 93, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "kernel.ftrace_enabled", span: Span { start: Position { line: 93, column: 23, }, end: Position { line: 93, column: 44, }, }, }, ), ], span: Span { start: Position { line: 93, column: 22, }, end: Position { line: 93, column: 45, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 93, column: 48, }, end: Position { line: 93, column: 57, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 93, column: 58, }, end: Position { line: 93, column: 63, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 98, column: 3, }, end: Position { line: 98, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 98, column: 8, }, end: Position { line: 98, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 98, column: 15, }, end: Position { line: 98, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.all.log_martians", span: Span { start: Position { line: 98, column: 23, }, end: Position { line: 98, column: 53, }, }, }, ), ], span: Span { start: Position { line: 98, column: 22, }, end: Position { line: 98, column: 54, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 98, column: 57, }, end: Position { line: 98, column: 66, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 98, column: 67, }, end: Position { line: 98, column: 71, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 99, column: 3, }, end: Position { line: 99, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 99, column: 8, }, end: Position { line: 99, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 99, column: 15, }, end: Position { line: 99, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.all.rp_filter", span: Span { start: Position { line: 99, column: 23, }, end: Position { line: 99, column: 50, }, }, }, ), ], span: Span { start: Position { line: 99, column: 22, }, end: Position { line: 99, column: 51, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 99, column: 54, }, end: Position { line: 99, column: 63, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "1", span: Span { start: Position { line: 99, column: 65, }, end: Position { line: 99, column: 66, }, }, }, ), ], span: Span { start: Position { line: 99, column: 64, }, end: Position { line: 99, column: 67, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 100, column: 3, }, end: Position { line: 100, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 100, column: 8, }, end: Position { line: 100, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 100, column: 15, }, end: Position { line: 100, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.default.log_martians", span: Span { start: Position { line: 100, column: 23, }, end: Position { line: 100, column: 57, }, }, }, ), ], span: Span { start: Position { line: 100, column: 22, }, end: Position { line: 100, column: 58, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 100, column: 61, }, end: Position { line: 100, column: 70, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 100, column: 71, }, end: Position { line: 100, column: 75, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 101, column: 3, }, end: Position { line: 101, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 101, column: 8, }, end: Position { line: 101, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 101, column: 15, }, end: Position { line: 101, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.default.rp_filter", span: Span { start: Position { line: 101, column: 23, }, end: Position { line: 101, column: 54, }, }, }, ), ], span: Span { start: Position { line: 101, column: 22, }, end: Position { line: 101, column: 55, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 101, column: 58, }, end: Position { line: 101, column: 67, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "1", span: Span { start: Position { line: 101, column: 69, }, end: Position { line: 101, column: 70, }, }, }, ), ], span: Span { start: Position { line: 101, column: 68, }, end: Position { line: 101, column: 71, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 104, column: 3, }, end: Position { line: 104, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 104, column: 8, }, end: Position { line: 104, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 104, column: 15, }, end: Position { line: 104, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.icmp_echo_ignore_broadcasts", span: Span { start: Position { line: 104, column: 23, }, end: Position { line: 104, column: 59, }, }, }, ), ], span: Span { start: Position { line: 104, column: 22, }, end: Position { line: 104, column: 60, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 104, column: 63, }, end: Position { line: 104, column: 72, }, }, }, ), arguments: [ Identifier( Identifier { id: "true", span: Span { start: Position { line: 104, column: 73, }, end: Position { line: 104, column: 77, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 108, column: 3, }, end: Position { line: 108, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 108, column: 8, }, end: Position { line: 108, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 108, column: 15, }, end: Position { line: 108, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.all.accept_redirects", span: Span { start: Position { line: 108, column: 23, }, end: Position { line: 108, column: 57, }, }, }, ), ], span: Span { start: Position { line: 108, column: 22, }, end: Position { line: 108, column: 58, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 108, column: 61, }, end: Position { line: 108, column: 70, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 108, column: 71, }, end: Position { line: 108, column: 76, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 109, column: 3, }, end: Position { line: 109, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 109, column: 8, }, end: Position { line: 109, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 109, column: 15, }, end: Position { line: 109, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.all.secure_redirects", span: Span { start: Position { line: 109, column: 23, }, end: Position { line: 109, column: 57, }, }, }, ), ], span: Span { start: Position { line: 109, column: 22, }, end: Position { line: 109, column: 58, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 109, column: 61, }, end: Position { line: 109, column: 70, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 109, column: 71, }, end: Position { line: 109, column: 76, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 110, column: 3, }, end: Position { line: 110, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 110, column: 8, }, end: Position { line: 110, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 110, column: 15, }, end: Position { line: 110, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.default.accept_redirects", span: Span { start: Position { line: 110, column: 23, }, end: Position { line: 110, column: 61, }, }, }, ), ], span: Span { start: Position { line: 110, column: 22, }, end: Position { line: 110, column: 62, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 110, column: 65, }, end: Position { line: 110, column: 74, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 110, column: 75, }, end: Position { line: 110, column: 80, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 111, column: 3, }, end: Position { line: 111, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 111, column: 8, }, end: Position { line: 111, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 111, column: 15, }, end: Position { line: 111, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.default.secure_redirects", span: Span { start: Position { line: 111, column: 23, }, end: Position { line: 111, column: 61, }, }, }, ), ], span: Span { start: Position { line: 111, column: 22, }, end: Position { line: 111, column: 62, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 111, column: 65, }, end: Position { line: 111, column: 74, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 111, column: 75, }, end: Position { line: 111, column: 80, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 112, column: 3, }, end: Position { line: 112, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 112, column: 8, }, end: Position { line: 112, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 112, column: 15, }, end: Position { line: 112, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv6.conf.all.accept_redirects", span: Span { start: Position { line: 112, column: 23, }, end: Position { line: 112, column: 57, }, }, }, ), ], span: Span { start: Position { line: 112, column: 22, }, end: Position { line: 112, column: 58, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 112, column: 61, }, end: Position { line: 112, column: 70, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 112, column: 71, }, end: Position { line: 112, column: 76, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 113, column: 3, }, end: Position { line: 113, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 113, column: 8, }, end: Position { line: 113, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 113, column: 15, }, end: Position { line: 113, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv6.conf.default.accept_redirects", span: Span { start: Position { line: 113, column: 23, }, end: Position { line: 113, column: 61, }, }, }, ), ], span: Span { start: Position { line: 113, column: 22, }, end: Position { line: 113, column: 62, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 113, column: 65, }, end: Position { line: 113, column: 74, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 113, column: 75, }, end: Position { line: 113, column: 80, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 116, column: 3, }, end: Position { line: 116, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 116, column: 8, }, end: Position { line: 116, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 116, column: 15, }, end: Position { line: 116, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.all.send_redirects", span: Span { start: Position { line: 116, column: 23, }, end: Position { line: 116, column: 55, }, }, }, ), ], span: Span { start: Position { line: 116, column: 22, }, end: Position { line: 116, column: 56, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 116, column: 59, }, end: Position { line: 116, column: 68, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 116, column: 69, }, end: Position { line: 116, column: 74, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boot", span: Span { start: Position { line: 117, column: 3, }, end: Position { line: 117, column: 7, }, }, }, ), Raw( PartRaw { content: "kernel", span: Span { start: Position { line: 117, column: 8, }, end: Position { line: 117, column: 14, }, }, }, ), Raw( PartRaw { content: "sysctl", span: Span { start: Position { line: 117, column: 15, }, end: Position { line: 117, column: 21, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "net.ipv4.conf.default.send_redirects", span: Span { start: Position { line: 117, column: 23, }, end: Position { line: 117, column: 59, }, }, }, ), ], span: Span { start: Position { line: 117, column: 22, }, end: Position { line: 117, column: 60, }, }, }, ), }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 117, column: 63, }, end: Position { line: 117, column: 72, }, }, }, ), arguments: [ Identifier( Identifier { id: "false", span: Span { start: Position { line: 117, column: 73, }, end: Position { line: 117, column: 78, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 13, column: 1, }, end: Position { line: 118, column: 2, }, }, }, ), span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 118, column: 2, }, }, }, ), span: Span { start: Position { line: 9, column: 1, }, end: Position { line: 118, column: 2, }, }, }, )