systemd-standalone-sysusers-252-32.el9_4.7> M Mv ĉJ4!!%joLne)Ip-Bm5 ']fYhreleng@rockylinux.org p-Bm5 ']sIdu͝ePwv ϵt٤k̂ EcFM;О[ݵ{Z?+s@$VwЊ`uwYؔh愦ŭqјIw10ÆbnR%G7-m{_Q_#pIcIsxXs7R)N唀)O5$@uoD͸ 2Xw/ڤ3 sp+EP5$!QVb>` 6S3r`}oOoXK씲dޟn\3rS2Cbm-ܟ؝"rZN)bƗ]cx!h[d$M*R]^ގ> 1zqU]}1?JZ<)å V96 *nS><~thkc~/*Kj ƄV۵7a65761340602ada4e6d1c0308b6cf3d2d310c40ff8d0796f369f6f9aee900f3b1adc48b2c0dcfc19e861a52df82e725ec10fc42-Jdޖ $x>=?d" - g@Dx| &,4D L T d  4D(8$9$:$G|HIXY\]^b\defltuvwxy@DJCsystemd-standalone-sysusers25232.el9_4.7Standalone sysusers binary for use in non-systemd systemsStandalone sysusers binary with no dependencies on the systemd-shared library or other libraries from systemd-libs. This package conflicts with the main systemd package and is meant for use in non-systemd systems.fWpb-10c42ffa-551f-4f08-83d2-00836f73a419-b-aarch64!Rocky Linux 9.4Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxaarch64!/AAfXfXfXfX909aefe478a49fb5e9559dee24512654b7e407d907028048f3d9eb1bb2ef41e3../../../../usr/bin/systemd-sysusers.standalonerootrootrootrootrootrootrootrootsystemd-252-32.el9_4.7.src.rpmsystemd-standalone-sysuserssystemd-standalone-sysusers(aarch-64)@@@@@@@@@@@@@@@@@@@@@    @ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcap.so.2()(64bit)libcrypt.so.2()(64bit)libcrypt.so.2(XCRYPT_2.0)(64bit)libcrypt.so.2(XCRYPT_4.4)(64bit)libcrypto.so.3()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3f@ffifM@fK;@fDf+@fe,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@c@c@ccl@cc<@c#@ccRelease Engineering - 252-32systemd maintenance team - 252-32.7systemd maintenance team - 252-32.6Jan Macku - 252-32.5systemd maintenance team - 252-32.4Jan Macku - 252-32.3systemd maintenance team - 252-32.2systemd maintenance team - 252-32.1Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14systemd maintenance team - 252-8systemd maintenance team - 252-7systemd maintenance team - 252-6systemd maintenance team - 252-5systemd maintenance team - 252-4systemd maintenance team - 252-3systemd maintenance team - 252-2systemd maintenance team - 252-1systemd maintenance team - 250-13- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-49495)- cryptsetup: do not assert when unsealing token without salt (RHEL-40119) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-40119) - bootspec: fix null-dereference-read (RHEL-40119)- spec: return selinux dependencies (RHEL-36471)- kernel-install: fix uki-copy deinstall (RHEL-35994)- remove selinux post-requires for python (RHEL-36471)- coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-34061) - test: add a couple of tests for systemd-coredump (RHEL-34061) - test: don't expand the subshell expression prematurely (RHEL-34061) - coredump filter: fix stack overflow with =all (RHEL-34061) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-34061) - test: add coverage for CoredumpFilter=all (RHEL-34061) - test: rotate journal before storing coredumps (RHEL-34061) - test: sync with the fake binary before killing it (RHEL-34061) - test: check coredump handling in containers & namespaces (RHEL-34061) - ukify: make the test happy with the latest OpenSSL (RHEL-34061)- execute: Pass AT_FDCWD instead of -1 (RHEL-32259)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)- journal-file: Fix return value in bump_entry_array() (#2173682)- test: add coverage for #24177 (#1985288) - logind-session: make stopping of idle session visible to admins (#2172401)- journalctl: actually run the static destructors (#2122500) - efi: drop executable-stack bit from .elf file (#2140646) - install: fail early if specifier expansion failed (#2138081) - test: add coverage for #26467 (#2138081)- nss-myhostname: fix inverted condition in (#2167468) - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468) - sleep: rename hibernate_delay_sec -> _usec (#2151612) - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612) - sleep: drop unnecessary temporal vaiable and initialization (#2151612) - sleep: introduce SuspendEstimationSec= (#2151612) - sleep: coding style fixlets (#2151612) - sleep: simplify code a bit (#2151612) - sleep: fix indentation (#2151612) - sleep: enumerate only existing and non-device batteries (#2151612) - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378) - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)- udev: make get_virtfn_info() provide physical PCI device (#2159448) - test: make helper_check_device_units() log unit name (#2138081) - test: add a testcase for lvextend (#2138081) - pid1: fix segv triggered by status query (#26279) (#2138081) - test: create config under /run (#2138081) - test: add tests for mDNS and LLMNR settings (#2138081) - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081) - test: wait for the monitoring service to become active (#2138081) - test: suppress echo in monitor_check_rr() (#2138081) - Revert "test: wait for the monitoring service to become active" (#2138081) - test: show and check almost all journal entries since the relevant command being invoked (#2138081) - test: cover IPv6 in the resolved test suite (#2138081) - test: add a couple of SRV records to check service resolution (#2138081) - test: add a test for the OPENPGPKEY RR (#2138081) - test: don't hang indefinitely on no match (#2138081) - test-ndisc: fix memleak and fd leak (#2138081) - test-unit-name: fix fd leak (#2138081) - test: bump D-Bus service start timeout if we run without accel (#2138081) - test: bump the client-side timeout in sd-bus as well (#2138081) - test: bump the container spawn timeout to 60s (#2138081) - network: fix memleak (#2138081) - busctl: fix introspecting DBus properties (#2138081) - busctl: simplify peeking the type (#2138081) - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081) - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081) - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081) - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081) - resolve: enable per-link mDNS setting by default (#2138081)- swap: tell swapon to reinitialize swap if needed (#2151993) - coredump: adjust whitespace (#2155517) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517) - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081) - glyph-util: add warning sign special glyph (#2138081) - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081) - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081) - TEST-65: check cat-config operation in chroot (#2138081) - TEST-65: use [[ -v ]] more (#2138081) - systemctl: warn if trying to disable a unit with no install info (#2141979) - systemctl: allow suppress the warning of no install info using --no-warn (#2141979) - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979) - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979) - shell-completion: systemctl: add --no-warn (#2141979) - core/unit: drop doubled empty line (#2160477) - core/unit: drop dependency to the unit being merged (#2160477) - core/unit: fix logic of dropping self-referencing dependencies (#2160477) - core/unit: merge two loops into one (#2160477) - test: add test case for sysv-generator and invalid dependency (#2160477) - core/unit: merge unit names after merging deps (#2160477) - core/unit: fix log message (#2160477) - test: explicitly create the /etc/init.d directory (#2160477) - test: support a non-default SysV directory (#2160477)- test: check if we can use SHA1 MD for signing before using it (#2141979) - boot: cleanups for efivar_get() and friends (#2141979) - boot: fix false maybe-uninitialized warning (#2141979) - tree-wide: modernizations with RET_NERRNO() (#2137584) - sd-bus: handle -EINTR return from bus_poll() (#2137584) - stdio-bridge: don't be bothered with EINTR (#2137584) - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584) - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584) - homed: handle EINTR gracefully when waiting for device node (#2137584) - utmp-wtmp: fix error in case isatty() fails (#2137584) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584) - io-util: document EINTR situation a bit (#2137584) - terminal-util: Set OPOST when setting ONLCR (#2138081) - cgtop: Do not rewrite -P or -k options (#2138081) - test: Add tests for systemd-cgtop args parsing (#2138081) - resolved: remove inappropriate assert() (#2138081) - boot: Add xstrn8_to_16 (#2138081) - boot: Use xstr8_to_16 (#2138081) - boot: Use xstr8_to_16 for path conversion (#2138081) - stub: Fix cmdline handling (#2138081) - stub: Detect empty LoadOptions when run from EFI shell (#2138081) - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081) - boot: Make sure all partitions drivers are connected (#2138081) - boot: improve support for qemu (#2138081) - systemd-boot man page: add section for virtual machines (#2138081) - boot: Only do full driver initialization in VMs (#2138081) - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081) - ci(Mergify): v252 configuration update (#2138081) - ci: Run GitHub workflows on rhel branches (#2138081) - ci: Drop scorecards workflow, not relevant (#2138081)- Rebase to systemd v252 + systemd-stable v252.2 (#2138081)- build systemd-boot EFI tools (#2140646)252-32.el9_4.7252-32.el9_4.7systemd-sysusers.build-id948b385187b892b80a97687ce69b9ff3f7ccb113/usr/bin//usr/lib//usr/lib/.build-id//usr/lib/.build-id/94/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19aarch64-redhat-linux-gnuELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=948b385187b892b80a97687ce69b9ff3f7ccb113, for GNU/Linux 3.7.0, strippeddirectoryR RRRRRRRRRR RR RR R RRRRRRutf-8b9abd1317a9acef1b72b578e24cb744e140150883c263b255c5c92622d9f44890e3dc35c03d186daca77fb6e61d31101e8fdc65c82dc221875a2a22ac67ec6c4?0(/hFJTN:h‡kC<ΚW^x N_X/aooGey0L0rGU(}th|]{˽w ptfE9h7$(¼~L#룝2;<J~(p0Kq2[D_jK_`k*:IUQ} ]W< qDJ.&8A !2hM]7eեK*[[a__MQ v}Dl7+q˟rq3z՟Saj4w@䡀11asSNY$SylجDUg~}xMrZ%@O1ꮩ+}77 W2zߊ6tLBp~(8^|;)O/WhEEC.+EG3M n=Xf:spr\80fe*)LJ"WvBdJ)%iLR&Dɢ`RbXVr˦[΄ k&^߭Mc} =w4EP9\o|?]eY&6n:Ns =0@`B`"`,-=\{DEZB/{PYE4鵜EK1*)sPt ۰GUSB@ndG¢PU* ? cUXBxO"y=KA;E f;"R"Meb;|sE)Y>_뼢Í3x\9RSlƾOt\G%ulsMwK7FW%Ra|ٹC\r eEԗ- ^n:+V41d(K0+>4};7G-!p s 1d5$LAa J5qS%IApeO:3rYh`rРtWOGP|w]{Y Zݝ?%п6~fkx %r ʢ9y90paY[/Yz] ~f["~9=Gf(@K,ދ7{'y%leɛ[N6+-ku}D_[9aOܲ'@,=TYx{"Oח W1h@e,H$b{X~&:-00Y}ڰJ}X49&_.Kk̰\!B%-GER<uĔ}$$^1B*f!N3 g "h,0EHQhu t,Zƒɏ%8[P7ק|B4Q\\rs#6eK@G;bq\[wL\OkЭ~ Tnectelpb_auxval_Unw_Resumcc_pov0guardap2o31sc6XCRYPT_2.04.4GLIBC17GCC_33SELINUX_126873453pool  0`] d  #P&y .a_& 6@O Z e p{ b(c0Hhp\@j0H i`x@ڐ.Ѕ 0t( 0(8@HPX`hpx(wd (j08@HPX`hpx (08@HPX`hpx YB:Q`$6 1IRhjpbP赟C4pԺ\(RFZjq!%&S>,1++fD b3GxşuH-H{6锺<>7N?^hUc4 (g.m->?\Tjÿ]n!X{B%5p`041<:1e1=rZ FWWrgj23Q.7{m5f<kZx|r4hz hL k)Ga(T:L瓍Qbez J[5<z!]5eӑ-4=|~찱Xt%>?2U6x~A2>+~}u q>c$I:! qp§5Sn[@cQ{ͬW1k`cikG+7.bC\gN4MӸ`5V ^x[KXUn$(S?LW6A^c"7VWoЙؠ!  (08@HPX`hpx !"#$&'()*+-./012 3(40586@8H9P:X;`x?@ABCDEFGHIJKLMNOPQRS T(U0X8Y@ZH[P\X]`^h_p`xabcdefghijklmnpqrstuv w(x0y8z@ !TZ!bT_*/Ue%%p?BbM I{T?," &{H|P}X~`hpxȌЍ؎ (08@HPX`hpxȯаر (08@HPX`h {{_PD& '"BbE(" Bb")&*.26:>B*FJNRVZ^b+fjnrvz~,-./F0" Bb"1&*.26:>B2FJNRVZ^b3fjnrvz~4567G8" Bb"9&*.26:>B:FJNRVZ^b;fjnrvz~<={S[qT$@d@9D5c3c&!LBRs3TT(*`7 @m?Iӓ`T@G`B9S4`(@ 7!RGv*@T5*A!G B9.@@ 7A7 $ʴ%IZ( B `P00>wr^&AZzq +#~h~* 0=b)&@1@ wLer n_W ̱\NEOj^{D~[+z8MH ;ordž=zƁqNZnVq~S >^Λx)~m+x-GI3LlbcI fj~Λ?E(U#rfW7nM}Rnι-%Tj¿ceEq =9/״*oJւźnl_IS$>\ j'pj~+has] z# v,IUT}%Yfg0YLVÔ2`py b h%;wI㪀}:eyZuD΋d{!vp!l4:k<"nSɡ%3M+v'JɵAPM$#'!t'8/nT_IJdDgǴ4-h,. :2/#v76)+d&I@6@H6]>57!'g'߾-@?+uoev m^Vֿj7/ EqLF!l<]'ȸ¿9;lGkr%Us77jߍ5k a~DWi0O3vقr'd_W"x bA],-; S`&J]r6vFU P<jgKu>zBA=:ճmҪ7R-a/R;PwcD?!A۾N-?mc<&{칍./[4x~ b-c5t\7NX:t)^GFü}_Y#DHPl XGHI!z\K6fq1qB&ps5Sjvҭ %.tP,wu#S'5W@IL)*k֚y(ڊQf_ ЎnepJ 3L'a'=&ߗxY+VHJM`_7PrE׮007 rrPs>X$S)ފ YIq-n"%c F*G#aeq6 0u849̕^=p_m#ϢB@Z.'‰یe:NNm%"}7oudS*[5-JhBΫ؏h҉"Jui @5-"NTp$x/kd+Ɇ^A~{(#5lscC z&M}h*V.RCeWBpxL1#vbmh ˩u íJV{tr@Vo~!1rp˩<:ײ颚ƔuZi ,M8NQMUřťĤ1J{ LFTSC!4dh`bWjUKp$*cCMc-$TūØmA۝Y) L|Vڮɚ;CE?~IHxrfV곀)9?ۗE^%Yj1sA |A\3#YiLٯLA3LlV)cSһ$҆w͒^*/]S)cBRӄ*F@XGe@qs(*" SHƛvQڀ88z+)SީV"KBÍ<צ yFPR,/-%8?eYwM;(f!EcF-)Vp1f9/@7VO/*O4v&Wb_)\zӔf7F|}1 R\7:*1-c&lLsܐ ^35^Wg 4~LrfV\jzZT¿QlŊ L7T=E A ň>> g(T3^hFf CJEi t2=0H kvo3{7m_}8[>Qcdl0x~ZI=ۜN BvW1зzo}ŧbYQPH~3Pxp/cm6GgY`.?%7]m`[8ߕe;B쁼)`SI֤9r# n vgw.(n#wcNշ)͉9M,%F<^(|,XJ%]AtL>lK#[݌bs_>r]5smAAv3Bϴǃq\~Yx. s`nlĪ9=ͺ+X$޶$ȵ捖; oYx]@X+F=swy87Mmk.1[뻔}5]y nxwl;ouvt` a9'{Ey@Yׯd0`FrҍpW{ٖZ &\euoƦ~Kg27;0ogn waNYQH=:IT|"M*;a_Tٞn-GH=hq6meq8}8kïsbB=Giy:3zg2~#bt&\B˱iW/1gDٟ:50Lg'?ܞ#~`KKgBy&Fw]{*:X}l_?5;hQYlѾMkHXsp۷ /v&׾磜<x;ǵifI\yü o"Ydh ՛KfS}.EϹ ۲?J_VJ q1?e<Կ6pNxo[m;c3 [sú֕g8o [1NlV_1yvlTէHop 9oWrRo/I!;~fC1eM]0;l2,W﫥Zy_'n&F'xb;8Wc ̾{7ݛ/yZ{$K^-cp5q '{ 5yHߐAB*ب8u ސu?_- ֧럭g#lh?C`&6{a8&2os] ~s|5c}u^."Ϭ3ɍקnYzHvCwin. 장nV|XH/wQ,3KUِ,&}mfkl15ѹ=۰?ejc֞,yXdCvY.^BOHIF]5+z8ҙ=OÈUWpե BFTW2.ʍ^/ Fx3ergs]D |dėсðUGdcuf2~ޡ8o֍Է;zVFG0܈nfLe!Dy>(u,o8OѦ[`148:Ϭ0<]觺֞?]?IἊ+_pTkkF/ xzyO+8E/ײ%tlS}/ s($[_mqB0 Mxtj@+$6mOg.#T1kiQfKof˪G?AGޏ4) JcNe0-u>ϣf2 ]lyR 91*pZJ"#՝o?e );WRص?m7&kP/O״0j*K {X0T6PJLs~vQ=8<`0sjY-3p`x3/~r27dp%xmp+P!蓃E;5b Iʃg͓dL1"u0h nE-|( Ra^Љ7,sUs/_ mw4#=0~܄ާ)@ 礒 ~ mB_"=<7>ֆ7~d@K7B ܁m;Q /R? |gmGvgcED+|nL(tkvˉ+*+r #T~Rnht t. 6LD]Y`?b"D<~>@hS'ze8-.QRa'Fɣg^3ӗ}V 8o^HY>mtx^߂[Tjj8R4@йաϱt.LUN_uG,{wyZگQLTp_#?qn(@nB1 a5Z{} g i5 -3z9t3mRmj& 1 C].K1!i y3Cv)Yr &D5a*ب ##2@}ytR"4C`:} :n >-FQ $Q1X5cb;?o>pj*%۪鼭Z=h2}嘣SwϘ/Ya^lx/;h:N3ƸNe+Dd#S=\?ɲf6{~P/wڬ V˝֮;cpm '趈~X2~3(I=O4<7wuHWW Ϋ?e lȥa/uTJs|1Yƭ23%8s'e˦_@Kl;^bJf rje*^p+/)٘<FhHow{ }L7rɥ&~ k&7%8sGs w*pF*XߜyMt}9u} 8K5sVʚ¤zR(˩om3Sg4sC(!hgrK](h)EM᭙D؈c p?F޾9n4|ϵ2Zh{mymyED:<(i0yQn1xn29M<[4-(f;F:s%4CO"zQ1Pq6bLF8 Bgطy5pt!y%![ej|/.4)H_n,V`#DlЯOԂy16mڤC7@ q!Fx6bТ~tw[?M_4B9wN =Ԁ|&ӾQ(΍K:}vVEẓ5;±+L Նuž&6s৥G1֊u*<98Adjpёz8f^šV\DKe`,[5'$_ȏw5˼Wv>ؖqR,DG0b~Z}y mb(C_XZGV'E0،N<ZᴌYz4EHcM؅ps"}<(R$<!poYE樺gN+urQlyýzEXʡs9HV%M\?i4USAA5 UBYAZi%(m)F)>}3eM[  .m!WA5s{!&n}-D#.|j EWVjSsuEߕw%C"C8T"51N7IQFAz.߮kQc,/3]y갞^.alBAH%R'\%b|"G17J+BE7`VWo򖻾mh&ሦ%V D0"m<ķi3G >tг p%M+=OaD=-‚o(?JQsALqep^8,dy\li克:s؆a=n=LsӔ>#yĘ;M:U.4@q$~O$.k%~CE(fX!Bf(yX8gO?~*#>dw;ʕaɻ67vl` ġy  %(a>KyJ$R' 2A?ұH aoݳ ;cFHTtC"큯j[?n~~8y& V& f-fkPʼ-ʚh} ~E8= rw %CLIs8T:L?/N?.8BʍU "{,^r`՟F_ CC`0`QJBQ͐eAp>aK"lOg"yr`@cl YT0O J:/T IZ?$DCO^<]9'=r&6uC:l5':}^ ԯQ3ZKYڃ-ctL \vUO $x2Ed[bbR9y٨!h@) ';.KHV *H|Mk .asJ *~aLⓋaE"J YAs=I 5KCO< }us>hTنui;D:"n'1]ĤbL] 8ޘEXvI +sማIK/2;x;2ϠLfL<Hމ/~%k-ycvZge ռ|=6,Hi1ExqĀ =$BY&腨M=UГ)5#P=,~q--R@W/fX@c?͝$w>LwyCK#pifTUu!7&->OiqϹ`pŬ:<1~kj, sB/ V$ ,}F1eT\^ 3' yPVVe޺ U{NNfTf;%;F%-UgĘs{_c}'? vp GoD)\~f{$`(FTMLi#p' "u,GC$u_4ױ?d"#j)oȗcYVXvDlVDl(3 Ua)+ Tic[!a:W_$oyfSf=I-e$̀_|D=`ҤW8`-"*d8龆$#2 n-IH,5鮃y*}>rdl`TX% 'f i~Hb,dHmr_nkxa }r&,*)@Ue ̾Ve8qo*QZO2Cp.-EGZ5=RPrC1} q7N=0e٣I_ӹfXI_ƲJ~H0SOR|@C#}^g\՜gn͠@9[[GDK11rB|vpq:D*v ~@'`[Aζ>j郑=Î7O ugA?Vjjjҡ|$AdrwCGM0@؊ WBJZh'1BVع27}nHV!D_@̡N[ѷǎo,b ?ZӬc ʊc{t^M b>iuV )ަqņ0keՈ#=KMAN-VaME|?vh1+&ftZ6n;Eu4w/0)Uި(BNH'e7| ? \l<6*(q=n:WU7xMHqA8scf4 0@J6Roe%F܃| *DceJt %3-]- w7sɦ.+p;,3d…Xem((UyK_Q呓Q53܀Co8'< 6I4XνVj LK~H@)d7%` V_zQ# !SNbc>~}I;O!ʯCq ՝Jrj/F L2-n`r<BDݬg@_3̽.<}܁=:0I"~Ϣ< {p.a 9^>Ťsoakhsqr*I{$,|bgm_5v>>tb%R @+SZ^5f BG+2~D4y`{+/ TFYDcO UK]2J`ށסj R'G$dx%;@3j&|Jԯwj TFY!ZT*eHljVjW;hsomB$)k~)uq H*a 1{_Ja;HݳK{vg`>/WMlQ'yp{Tk+R" j 8&e}G Z&zJhr+'"`ۥ>]c,K_P";ޙXߔh]R䮚PJ TSgʘbx$oef;׽3'@[j&4pZɵj Zq׉q^Z`Vkzyvq8Eϥn?(u$ꮕ_'hO5}OLu_>ݫk#)5 sO 7%*Rg1v㭁 L^Hk~CsWC'㭿i6׮ ,Md VMI߰Z ;}}^I/ E Pj8ֿ֫k~L&A^"&5}\~ 45a6x;`.Er:>kfJpWC!Pf;yΞHSUw)5FPO"ѽ}lX5ѳjCឱ3Wq†$Nw:8Z> =̚,8DVApg[5-zr6{nz+koiPwB|ΨD*3E DNB=F˜q@$7$~kõr^0*g >PXE1,p 7]<#3W&?id3ot|X`LƑCeyV &LJZG3{ဪGu>: 2>s7fspJ6꠮Kn#.9oOgOWEG+"z[0'agg6+Fg3߿60M@i&ӟӷ<3;c 翶՞erV[|l=xAmUql/#>Bbw<Ob7p !\DY l읬Ǭ,qơ0؎3̭\0p)6X[uWno¨okQnk,Ooo=x@yXͮ?ZXωHO~>CMZaOUh-5kv46a|&Uum%vr}i]u'Nz2Y,IGȑ=qrjz#z%F`=UhhfnX}!s9ܥKM 8iBeQۈo9?u<@зѹޅ"\Zͫ/9Xa|]8bJވ-`6'M6.t~x0/nԓ>jzkaz~K/ϑ.pnogDN9ƞpokި11CR#gQk ."b#@r%"koI;$䵮ej1|Pz[o_]y_K {o?uݮڿ X|sT'JyS˵7{$ݻh9~^XpXztiV9ĿI:܌i&_v-^7bN>& $G.,=GYYȫ7~ջ'{ e| 3q]l-}:)|ONygBBR&(AE㡰[so_ vDj rRO<ΨUGZ9+ ?{ai5 < s޺vk3bhm2a_cK-Aw\c'V||{]חӈ~=`Q(~\M\ؔ9m̳!Ov&iV`/du{BT\GA`RxycN 4wnh}O&;NM"`8_uM=bϛ׋KɁ:i>`cCA_= vVPI/E8zl_)~žb2[ެ|l3ӷ{ާh}vhjc>:~*mnfn~H:07G‰ ̽^G 熘2{1^˯יY8.]N.=`*UqW9LU.^Mj zJ3Vy-CFr>av?m=j@y7|ok;SݻSxhMV>2gr⠅~1l"]7}e}es<\)[v* x[c9}͉:2[t{Hc!٘ygAeyQe%ЁqfAs SWۣbE{^1BЈvElzSK,Y5n>_T{mk!P-r!0:xo3'r^浈]T2=Sk柿r=ѬMVvO)`#r1VgxȐ}nZ/ƿu;~` 7N`f {ӈ]t,ljZw,[xoO")_y~֒O4|p{} 3EIF"S,[d3ɹi :q; w;ZgYA/fqW,z>C<;e9xhG;guҹ' _ O0ެ;>~Lx]{fD 5~;Kl]J/&#u;[2ɋd͈-h3iV_t[>k2{j`WE4_ʣ܏?o N͘Q"dBo^_Gڀ?>Cv +$ԝC]ٍg#HfZk!V-g< i:Io֛㘗uۡgL醡 vW[7e NrrmoDi_Zf0¾ȤUIssOr~O)Ņ}w~J‹U/00i~:; m}^MNX㎙'je8pkYNܣw[M pj,Z݅j= my}KOݕ4shV$|5oY\ZI~!9I{1ع[^'ZR3YN_57aw _<+K;tĖO=E7B_n ҁ&ﱳGDp@t}0f唆}U?)m"" 3J 6)ygsOph0ȿ~r[v'o~_t|q]DA,g-1'r#r5Bhd3gzC8C˛#3V7_ó,Ί]BP`#@uUwG-n-qq`ډ4f+A=J]v7y|Fw[98B/[ o?cQ`]^#Egz DQعUsR専iZ1Y޿  3C8}"M>ɫx ̭vE0'{t,8M̈́W9WR fbB@ȏ%O jFĖ/b2w)XoQ-O[Z6qd"!9?;:v< Ȗn5ia̙8Eqn]GXYH \pIS<t?vnti3k+K9]#O4U_wOa/<]̳͢ttsV1(PI5%7, <%LЫ_wf:Mcyp@Q*;M,x}eg>lyy9+A>:f9|rؕhg]4k )0ٺ f~. Wo[zs F$@ ݈Q+㣵Q} ihm*6Հ,v㯊~zGGnimML!}SDLbiƄ88p]gM^=߯6mb>K|;}B'}gWtdfeUf|i S[ X|n'ۥh) LVSW]seoJU񱵹ni;ڥ]^u2k;Г[y'ݗt霍;W%g6qVļl-ʳWus+/8m\"r_QLi-4ܟ.Ѩh3[?gvtk~[.HNJ| xV x/;ߌ{=&!ϊhX^4֊}5> 8(}_:Ȫ=KXIWo&C2ĩ@G@F~klKI;"?Ч5?U8Ǧv?e5M5|?tw}}y7{|reֿE̻,X崋:qTC42.*j) U܄7n}Z~ &vu@uOU]F{[bd<7ir0;f|-]4OU4a=Y/ [6~22nא]z ftVϧfɩw|9_vJAsFyW0<u>w\xϖ,I:-4)ᾨv=GrSBo{;G.):q*f\R,?.<ւ=uwNK]ixuFFkikZPL6:=|dwºi_{ߋy˨?u1L NRζ<^>g9"Dn]R>pj~qО6_yeDZ!\jmF)5M=u1gArͳk0Ov1Ζ'|C[ו Xn[onAo;(ؖrn`B9|̱yuCcn7\ڹR]"&6u{ZF,6o+uY/|tV}}lAn=eǏhG0: o]P}q^=ޕh[vFϵ3wCqN/jPZۚ!_5xg. _ gތ'f KR?+;Ai}4/ |HpGG3[k8Q_~)<`o 6dI¿q{",s.a.oY\N% |$rm̛j}UN]]Hq^Á{MEf'2k |ݜ-] WfѺ >]*+P.VH9ȯoPLE+/cDD/#oPFILm'E$VIߨ&p3x5s㈳:wcuzCP3 3r@)}]={+<-q&$h >W/Ͽͷqj`[9j{y\2ngryb:&vV>>F^hߞԂc|=cYv珞[^g5sg}G:fPpgXjJ:|m _->1f)X7|/I*<]=7tGOECG9M0%j\?D8'Hn Ty<>l?zOD 8:Uyf` hGqӳ|qшpDOTXq{wC^ X}0]F}C C]n|uyGknWO gov g6^:w>Z(N]?F:TM+lVx9Bv |=[kb mMfymuʠے9PR&rţ5_fu$b IX+!eFqdױ`BDq(@oM3N-w1" 0<?{X C.~4 e$H(rq]H]S> z慗,C g#ї VWXwpS9Q-|S+_+C3@;1?'8C8w?N]avb_x{6MX]^}sf&mJ )k!ԳXk\խhz:R,B LV|b3u &չB|^roߨ%Dz1 ڋBA$Z~_UӣΥ':e`F'W"zKu*ykNNĂkCMk[k,ZOe{"I.%L4&-#D_v6R݀-W @U[Зޅ #dG}{xα,SlCU]X_O65h@ihf9T`D\^礽.uDq u/t\UO},y+vIk4)v숁9X )x9vw|)W!AߘZg@'wm 0}qS\?nx)bse0wZbh /cEUzpwV쁯 EOfWNh׭_fød>Kq@1MqaSk;#~\xwxu>6)-rGLAL0Oj[}CzoCℳ|P?-n]YS6AuM0&'>:)C=~|T!vuTWr2 ._Wv~x6 # );kw(c{^=R=);Xpxg1Fp p畺p8< s3)༱t '(bHpOhMskcֈ~(_*Rn'E3(y8 {܉bRCUm81&*3{a}kG1NE]87L2/.چY-lZ/gڨ^x߄̛4!M64z 0r(kbFrjOUzx#U'[b.dĠ/@6\L~_/=>ӎyP㨤F%"*,"r'vGauE[E}L.Ä Xg^Hj۩ň6}mI}2ߑӹvfBXnZ'gP]hfhW` niV 3kK&eN1z `L@a-C̢VxYq2r%gvf(m ]*J61}Ufmiκo!RdgIp7T;u^Ҿ/9]eZFw21L*L yss`R},?E"7zbwŏj-(?z'Y܄N+q9t&i`/4b=nn{ҶPY<LF`$5.#Umjyhq()V!VL56+VAY+L\Re[U#$HIfM ^f )I1'w04lZI v@Lay5_wFx)>:_Iz<h^9#og1Fo[z-.}Kn=RХRzizm0^G(ǔHLKf^OiBL'.ƇK\c՗[YV 3e*aRdϔy4fGͧ(oq[zxtvdE:ч\u=R+=*RHNm)mHro)Iioat^ *9ۮ9O4oC$jۼ>{'Ʒ7~aWFWreUq"Թ"2# e/\p591LE>!_\o0n@}Dmӕ>"lk )Gh'.B[PUqJW:7}J~c*ewCXG%P\Y8+ ҮF SF-Εf^)'T;;C&F"/SdN,VIGs&%(Y滒[kdqcn'b4mH7o? $,Wo JoZ|"Í&g-AFg +vWhkﵹv YY}Mɫjl~߭g":Ω#S K4*PC5~TRڄ0R`yU;8oiFAͣxю\@Sc0A)fy9;- %wu*\![O}Z\uǦ+@ E?e4gևox*oYWu_]9`O  O~VoIG݀χB q{,?! e}־4M?etIJuF҄:g}e\1d#:m^)ckJAp@jܲ<`0VSHperYfN4>my6k2+,X_s8g}x]ۤej+0_xD &'iw=yRNb^"6b-8|.|f5Dy^,בlXoMɓ$V$S`c2f~,l#ת +ΓrƸrP~ݑ (LJ<^0LE-4xN%Y۠O??NgG y"t #&wTlGiS s~WFuOx"1bL % 1f KfJ},&@QxµY7"{"/N lkkn|qB؏OXA\]`_ӿsg^V6UcH6,ha.J"vBX4?y5~T~GQٰ4c9ȨN`:>p$n( '_qԹ)ᴏ00Hn:GZt)oF" NdwBvm dDZ5*PRTɴ^vf0Y>. ߸SU|9pHyH߶zja6[m=ka5t {D볈/P*'VyjM|՞(ḻ_ϝ ,'7aBC#`k1wbfbqM2ܧߦ8X&%Q, Le0<—"zB;'EH+~ffZB֙=YHO_' ?Fɡ$  K\VexP]MRQ4t?4P{Cs#%NG]H5|ŹpZ@1)'>VsJ[iA>QUPSߌ-mea,1*N3|u"QTpзvq. °;|%=b9֗ͩn (f r" |/S9%X>#d,7<9O.&URgo\}\s遧҅TUwR௰{IwGW!aü Cefz19{^'rl!fqM4e6/5i~%Y ̆ U4S2wQ`CMu* '1~m}9?=u<?a8gr fi~{W?Jގr%}Ħ B{O//Z1@apWV0VHXœ$'OŒ_˶S7$" ^\iBCY5+OKS& V*;ѕD'5ZD|k/D*Q=Z_QvoۅwWau\jj8m#(w 0OPq15 jA =RS[Q h"e;Jώe3~lwf W GUQ15k(d~15F넨L ц 1O+ (ZVςήIo6B#RA{C ?y;ݡ%=qk\h? V>h1vzU¿|+ߪ*W\='愀b;<)ge 5sA:˸d!Kjg4&;U~~ܒI\ˢu\.o)myNKq+ %qxvPo -tvx;@7[Tj5i X8.ERw\3X_ 7}`+J O3s(I4AVIo} μmHd  .;cxl6y/WQy е+ܔm̸&W9f0/h Z-ìEM/tvE|<+THkGP+lxO |zԕ]T (N,gjhs|>W(W#(E2=JWGg;=tKBk9@דѺ*9Ml2H}Z쌓"G@gſCd!6-εbE|&j}vO211{R"Ȗa1ذQ)|mF=?":%%J~N0ÜƲZ 1iw_12֌ j%󳯛VcboV8XPv`~ZpP;^#<&b1Bs뉨g/nt\Zxc4U:#KGׇZj0(cp8!jH`qtwűϾaU]5q~bVDdYD Ժt9^Jl]CBEEKE&(4 $̈G1`/sR`4:,U_ˆXධ@ xq 8>hkBÿZ-mۑ13GC]L@~G1IuG!S1γҦ!=UO#$/6!MbMLC2&jYa&JS.4cd->ݒBc|d؂B>N(4w!nMHGU~ l=%B%AJ\z*P䁯 FpYս(BK }KXt턴!s,J¹:G0Ű(E>gaI|>YXg=ҾЌ_<Q ~b,]6j%]I^HKxZ&J˪,lQv3P\//N Rlk a{uWu\QX0gxӁ9n`:V:{cؔn~ nc'e/<V3A`Ej`FI>^ HC x'qX ON]d|k$U_4R_>H8aʵN@u#Y\WqRZ]ǭՂZ/7'24.`ރXywM'nyL6M)\tr<$ ˤJ/a'$ҋdxqHLd(E}P}DM{.ZqEZ[_[~0˪%~Qv?G_}UyZB>/gfyx6u,#*f9MSoE#7Xxl cL}R;3m$@ Սc<\o֕ޥS[t0NgfVU('wSC<0Hr>G|Eg %Щ|6=Oe _k_l0F!w`}z}"NMaW=_i,} '":` .|+m U!#hvZ;k|@-:GCpz~@<\Q[X:X>>^;?|τHQz-SZ!j NpcZX滭0@BzAāߝzL?ƒCRm^M7SK5I|HvG&I\,e&@8bLT?kHι=zvC vŅ?ИϕՄW\4^.TQ䆈?DȑjB -<.1ukMu"6q:$&i`Hu]T.[@MҗMu͆X#),Ǽȑ#JnPQ>rqg^b #,lWЅ@'Nwz02r͝\N:`<: o:ޅF2X:h<.hL] 6{~GUbLf͎޻ 0ctV3qUy\QU'Ӊ,Woj 3; C&IO%LV ki#B,͎^e$ G*8ٕ"4r{ 3v2ԜcXLGX߷rL"=Oʳ)'2Ӿwf dXYqpc7blLBtRTr#{>+oG(GҞ7_Y}vзDEog|Cmzf S}:fB(_")=cP(TB7Fџ/KҞ$L}`~BĤѽN.hb4~']}! r >xp:bJ?HM`;gNKW0ju.06]qFCCC->.1Eĝ~,vSxπǴI<xter4kt;_-?F05Ya":P-+>Qߙ#ńr\c[5fzK /q3Hs@D*wL{bçLJ,Yt'< A88(D+\9LZp`'qUp[D// ߧP+B:S# [1|]3fy#Q)+]Q|?1E[VzE^)?6bY:q,v 7(cAC$?cn)Ir'8%`~&5k2:8$ %-܂s60i1.}'s=5)7H2 j ]]V}j?+NPx}/pfN ywqDj{9}:ns5#_"g *?q̩x^O6|3Fq^b&Sa4-EGAX5wK&׶@eT謃e=²Z Suub(M6X2wBX[;{8skqBN,` ~ r²X <ӹ^OʬO?lzd+AZG:.P}N~SGtL|sA~%cvn˿@rIɅR 1yjOJm?G32Q JVڦ,EQdelp _SUx&>l,rf.*5lK]`9i8A[r{v'ZKҘՑ}Qm<9d|d`6] #YY9G˟66жnj};xa}mdOZM=ϕ쑍oxF磪oOHco:sԎ&U*mG G 98G;9v&{ \=?MSt#ztVzX{}'791=f.C1ŽM˧[=qsCę'N|9u|p0/fPP+k>d_I%|"*:l>syF6KJַ;jn2=@2+80tKnbϩO&-/饷fY;xS|3C7-6aUQz/馺zΈղ~)$ aϢ<'5Ynulߺ+v"04 Kwmҗ]wѵ׋^佑O$/3[I#dfW/wVI?5n'́^G|Mou2QǼN?LfQ?Qs2 oN-uhp˗&=v)ܓY$խᖊw\qmok}r!Nﻜ~4X= ?Oig~}_cN=>%¥'rot#[k&ϳi^Pp0Rѐ/4&GsN?esxmte=4A|*郾ˋ>XϐSTH:?'M㱙^g*%KgpdFsˣ#w:ZlG |>:ݹ.ipqD"SoenE{98%vBkjR:o5+Ͽn}Bf]g90*.~1CnNk6 rO=93|%CbFeM8D8f?zQ'ԭYŕ7&Vӣlsq>[/iTlbsxk7~0 ,#-oF't|$e\>8_E}~qG> '}䝡cd؟J{~^-)_x!="^v4"O{̙'xwfg~ߝRp>w-콀VK,wqVq=έpe@T0ɇ,—;eB&T_D(<+\МV0݄Epw!EY]8NO vi/e1p@厌/%. qOxȕ9 aKbկ뼝 +yg>B;KMy5C/lnfhB={-~~;lW  _zSrlG ߴ}P~97va8ovVCL,?փVNV&׷s H\ aѩ6;a ~,is vҜ8Vv}i=̖jOoy٣ƯWv)y3^xᱱ=~3<#۳u7qrC<I:3v`Sn+Ji?6e3W=>&eWvzjlSA/c{|Ke:)W#Ό`NHN]/Bt `y>0 :9 ^)Z҉O}Ȝřmk){C`L6 ܸz/˅rԇ] >@xk`\`xbUf\>7]>z}l%b߁zt)*5(iw\Tv)4Í.qͩoEs˪l3DžNֶ1+=Yh|7&9ħCd+wb\;L5 ZONbNQĵ) A";t]{Y.[~s[we+W`nSthNwxl矕tD}/ iN&UݗyQm799[8p 8J/ଡv؁Ey;~SGyԥݱ{ospkq{ [J4u9se> tvWwVJh VN7yi_)47@73· CI}1]_d ?m/<'_=zr߂brVxSs7{~bC1 .˝qxW38-"K۞euc,P>Ox,.|ЮppL^]8Cs _zz3N޽|t_y(|v՗m>5:+}b$‡3vs=ش~'auyޣ}G'?C)U0# E=Pdχۀ4ߘQ=Sk{} vHM|Sd!6}:l|DIiN\"5c(۹S;kegfGK[dE~3N \2ixO6S':>;l Tk'/d-{ 8f∷vϵ3'?n!;tϻ*{~{vߏ=:W0=&FIljک`- zQHπg}KXTwp8ݞ[pu ivt( K9}_||t8NXIߝ)8,'eKFiih/GEidGƖ&a I(fa'v0J|Y|5 D(AAraVnO驨XpuNO~蛢p|tTXr9pmYY?SX}Klw'EωXv\|m.߭N&d6> hćC p"՟ׂP,/vztc < 1tߏٝKXMr/X|g.o/MCޯ~qH= 獫@ O>;qy`=-NFvwtT?Mt:B8nU4)4WmPs~Af3Nre7-mHX^_r[Ɵ0IfG>]&ˬr0GP:d'd{LƆޞeBwM+_)YsJ-w$OFl~+/zO:.C2t^752+߲if{:3_)'i]JUa=C/GHZtoR_^ոgv84goh<8Jg8BBOx(I65BkwQ- d3F,#џCm=EȫLbﷄOτ;n#~e@zWfaG2] MqQ;=٭>dھ1'̥XG|'n5dcG`v(y{oAץ==Of~Ƒ3y:{15䇸82Qmұ8@qd), ꯆN#g0Io`9GL3ڀ }2.03;vN&~͵d0.46 X x[Zv-#Hql3w_>j桙u Ʒ >շmX }S;qt^Ǿ.{6g.蜃_KNe*/vӝU{P {M*1~YX}fPo q½>ą`豠9 0k:s}/>zںWġc *:tSdGv몌5ȊIɖ]btu̳DE?" TaǾT' t e},c [e9-9qR1xZʻ;!qy ;0Ws\z/4{&y%n#"q6'uMm1Vo66ҷp/8ANc,?戞(5MZgɧ_~?lM?G&2% 1e{^ ~EXz/:5vt R};_}cC} k9N_C0=L&k-gQw`@VrgB2}6 UxE_K ;mC 9? AwGxv?vg[qIg ׁ;N;=pg?(S0'$a]EޙyQt~sߵzNOC\BCC(,M-|U5>ȬUhr 4AONI[e/OV/qf-i݌]ג0ghv0'uS3uN{|ȯ `Z/`C z_MzӨ 5#XTr;\¸x$:o#:]a 1f7Ռm<̝S sNRj{ƌhAksQٙ=HuGm6}L> ;xvzFhāCÛ،N*yOZN>D:_eFq2kLz5_ #SH9zlO5~l錒|LrcL}]Mlץ Nm`5;<k3q2i~pنT/:ˁk[;`/k KY$8 fOa:ƛo~ BDg ɿ;xm`qZ j._~x>lYx~Ջv@l&7ElZ32p+zUن?툖=kkf'}J?k2xފ3M~}~Skk9;Pi0t_V%')hoEЊWҸ; {&}u=^ q7 }4d1Նw{xJ.z;^~x[~x-kᘾ z{_?\0!^wToeyn Aٕ%bvBimM>k4o?Et<gmB,́c ȕW Ccű7U}I u'M6'08I+Op;5:3.o@,q7G1F$>&ܯj\uܩY\#wajlf3XcQ%<YT_&$QWWWhUwj/ΟJʈQܯ b>Tg8! sBt@~$ƒߚ!*JWf3;q # 7osCП^|F>[ O-֥gk|Ls#/33 .|vÇ#no{E{;:~$́wlZ,Ou@w^8;?pߑ*G۷=M2ďϭW!9lQ;S%?[>{|{2%n,d9$?６.$XM,_MA5)ۥ?aEö,lxԎM z~OL.5??,b'usWVfcpӚˬ`Y|zwOПLJ. L?3廛e~ #uǩtXjrb\:<ͻҥ-dPEy ns7ݹ|2eNDL^=R#.oo /NGjxpq;1_< MpcaQJÿ'EoF Q!ӞVOu 4D}{u 迮Jc#)sL:a!qo|]q>w'=Y_F0/ .>ru+ɶ=6XO7[mvu0gw(V9]=IDEy͠f,s?rf+$yН~ M} p51gT\|})4{7z_]]3Vz,\Qtب1t}ֆo5 Eo=\9Prv&3;Y'-pёqS/Sb ;W"bo)?zOCdV'Iz{O?iX>n,[|y{ye*(,q]ǦhWg8_tKaw&"ÅZoNָal+M + 9OP\r $:A<9z:KZQ>raǚ;g~ov7쇷N <7®{wd֤mWsl +#W5̛+b%𵐓y.Zz|ߦ具Ͼ5 \p=@J/n *>^?%VŇG_8fCMt9b/o׋G*yϩzvXK[çi(C?ֺӓQ{U;+;eKսӅtOw"s _LĹ gYl_=Or-yPa#}e7Sٻ\7񎶋ΊS>9o/Wr#8q]+:զ V'q-=yㆯ) XYO$×8q3R!s'Z+rMxU97왣O}_E&r2~O jkC7 g|N:6HR#gX*9уE5neO{O3sߺ=b"q-rk=}pj &iYF;?{Η]֌> 䏾`^lwB-g 2u=e]1}@Ĵ2uNfNߩet^25囟|e{&oYvykЖb)oNq^O[c$˔NSp~$4q̫LQm5bpއA3')l.}wfL4[}F;>cߴdߊ寘I¹N@a9tWd˃-vsk1v4]חx䚄Ef71C1ϫ|_=s[ wh!jkb!+0] 6]?2~Xp2@y5 |oWS7}Fݩ ֥ 2a޳Z`}v K<|86谷ywg=a~W+jkZ=ΥuV_LLF?Ѓf)+YF-#! njJ[~5x"֑݃+fam$Sj/ұ^7c{_lpAm(CMV&nAP4W)%U!:ZM.w_UO귗<## ozqWr$PӬub+_Iis"yS^8_%[r;٩<"Rpc(R?.\)\1 +$O~~(}rEi(ىCeK=abvwՐ)6i0?r`c~**/4'H2"gһJ_L{`+qnW٫*+~@5*PGw<ȵIxfzˋ`P)~2- 7x<9ґ4ljDN 6N-ܻM#KuH'sf. Z{= {c)d}JJؚmd(c]є>HxȊm.N}Z!ء<y&:J5~ro&@f*M{_չ[o|so_%G}z~KFQS/:5e3}[tU>B?>4f28Ц\GQ3/"{7.m)vߋu{ 0+z0F/9yGŒ?U\aQb~fKqur?4^D"뜴2/ü"`#vg؀X <#;INAon6λ}64Ovl<Gw?5al;oץ&-S1#z%JL*'=iwiJ˴|3,h''͂؏aAp d4Ro+A{Rt *:~s[a*9;onLi& a?G~ʦmrҁ"iQfl7:'}ckƿݘh;pr7Ϸn退1Ly (-rN:iMn4X[h,!_[l ; b_oꘅ=ci@"'Ҋ{ۃV=*^ eɷ4Zߗk?= (70Ь4OK,le3ĉ)ns. &x#'4"].!m~i!hf7Si'4EY ݑ B3%7~i'O?x;s|䁹rAX[9a@W^A=e~,\>=2a M@TXR;GBM p {0ipn3$Z8'w7YOhE.~ל?&?5 EAWO&ҮhZ1=}]tؙ4=_0~"\{s*Qy|(0v~kwȪ9!͹߃ 4V A/_iZE=T7}^Sba<Юeϗ'*>zיm[lrgO>E%g ej#AC˰7i V~DJ"s؟sȃܑU\򷻧2~aͯ|0yr!?ww">LJdM wr#C=f./;ꀾ(=iB'f?]-FKsJ];g|0N΢~Xf܊)^z]] rdw9,q :>ע984ᘎMgxQ< 2wR`Ιtg.9YI|"ǴYy%z {?¸fcsXmhDEn4F ^GdXE]z3ٱ??R7KPߣϣOG2?w wGY#^s>Zt 9&`3{Y8Πq8dſ ױ堾h`oȬG?xS;8~[ZvopUhs=c‡reX:"[9GęStYx< X$؟'eR&Uq%w)pz[kd,z[s94|&ʌl_{ g,Oe&ݧפϒį7nTksûnbj@طy{Ga/z;!+4}=L؝ռGУbϨtY4k:퍩ZS0 ~*8BR%opP5_օ>洺zRR<9hI+xYVlofvxs縻AbQm^DC3 +ul_glS.;)/_SW= [/|1]\`9mWI| 9Y g%}J#^x37&9yǃ5BX/XgV'8vĢo~ _l.9Xdh| )'띸^߰'9٩Um7v܈?C&={)ϳwJ1wƀ~I Nd;{:f~;M"@9>3b w.{w _܉W;ʾ[GzPW2dbDݜ6mLk./ٹ>o^#p&*/MK?oSAkLT_*}w~ˋ_>xM X2nnMo ޙB܋p7xn>H5@uMnֱloz|gv[3tkY,{ &aVwη=WHg?<w@^U|^go,|t%^15G,&0aESr?f)즊LXx<0ٖM$~#)8~r_Hi:T>mw9mZcS&ӊy'hϼ~3dX{(B*]J0fǻ_izC87 sX{Q#KN|'[g>?6N V fph/eZ͕rK ԟ>e]F0 64O{KHO'cv? b^wb^4=G9m?dox5J >5OC œ1 _>ޏ'"ׄU~&s}W~p 9a7=o =JqoxndK%?6iR;dx(M'=\/`oJgPK0-OVϕnyO` -wM+㹩0Q&__Weqz{[s ?ۼ_u9M_cv,;mVG('?چ|.T7 hk3A jp WuɈWKk_^eY\mytnN8uZ],i{\OaZxR~s_iO+j׍sqhy%f^}4۬sְRcgb~=_BY79eȏ g^/f"C#ܾGv[KydRXyk|~{";r޲o1-1\DͿiQs֌Sq߁3Q2kpBqVfmKUwA1Cmvۅ?Mͣg1h4U3w+{*U#si65HEڃ< }kx8pxX3N>?/_GHuP2-Zyr94 F]zrz-wٍeʙY##qU[UBˌ&N~!V|x&ʯҞ J}vrq/hߞH|'æ~c{X."9WĎny0Ъ:sڠ ~Əzbb?96W5gGf5gzkg)K2:7)Oo}9G:p~O{="D}؎񯘘{OzvmS$0 /'u<l:XTݴ KۭG tgIØ'͛{y$$8?m[xgpCCN+s-{c1(FuVSeZj~gZ_60``\KK>y Vb;Ll0\I7'se[窣5;6N;-s~v'9\m ycV7_0%97{ؓNf׻|qaΑ>~ΜnD80;(=tMCQ5z9ۏr}G@" /ཱ4KA}_Dόvn3MF{q&*:G?!,lff^nE(}mId;vWܵLO\1=-rrKSy_џ}1icv} +4S8/ryV|O i3a[%YtVh^yϒIԗ#foFǍD?5̣9{TCS㿺 @O&zG{•5>V CJ%=wdJ*r/f'"ߪ::xh+>n{ x9iWz>Qsjݮ4|TVlr.ƬAkCe t(`f\v.P`RVKsnO1v!X's-/='00/ H'{3rƩ `Jސ;iл=,z;_觺Mlf`vS75d&c{/M냮`Xanz&e+C>|B?F (Y nF1es>hu;(p'υxDirBaf뜜af~ޅѣ;mB kT_sv>\ &]A+F:s<]pQ2=F3ɮkA98Z_A9 07YM;yٍFySBu>VOǥ_o5r2e}c`}ߣ/{_E} 4H`IבPQn'?fВ~1he nyzlt!M0Oӹ&t}?>'t>>:|sNzDi[6sE2K:q<_|  +PJ}1)v.ː)HPr(.TMJ6&]FxA0& Wm ݅UN`>Qw#UF$&GDX6̆L˅)ӢaU<0֏9ftL-_x妵kY4 "RMX|d&U ]z-7:'ނ`PER3B@s,?i5 __\KL0Hҍ #)N6OT_$B W~pUCU!dr|||ZCWWFtT V2낢H+mGŒKܮQ q^TXykq6+u &nlHDUA \E~-F=YX%Nբ d!pHv5UaNA9P&q|o!dj 7LU-HX<%j+7W$SGsBC)P8s+XPm"E: )3*B$BBz9 p nƾ_` z牘E͑\5 QP2I,hMgM#1g5(\a.{// 1|f =9% {UkVc2`ۛ,T.KdvdQ>7aPDh]WZ +!zzk: aXP| g\Np@WX!z'(|$EדqQp $/E?U鈢KJL*͌1(6@_ 50BaB0RI(zkÝ놣trW;!ď3k/o; SVXX?X&~"a`!KVUu4P,v{ OԳqFq'tي e9JXSMH+*( K҅ @Tj 굤e $Z{]z/$pպf Qwd-#[$\|ިoxRFlsښ|bMG&+8mFz~ ާS3puH>.8dUNa:5%gL+ ž {:k"khym/LUC7>+|NM\ \31nNxTZ4>pPrE1w-T35tԣL3f,0L4زǤ Wͷ0l7\I\o5M zᷡt-RNMF %>^+Hkh2:I@ڎ~,ߦ02'چZikH?2 G ͪm\`);IrYBQ;.0ȃkEvS^X9UEj.~pf~?JJT;#HwamY07)&hO0WMw=H%(Z H #,Pujm_,#hAcgF@q`g#&}N#'X|3$;C#K7*kԩۢvmۉ&1L'4xA; P:i$mX{Df%p=wF5YϪxÐ ×RGBO!+7`O bKyCL",{(DhJ%8Kde~ ,A+!\yhx))br9Kzf=q|_<5BNtM7`_So;otih_@ΉsWdC A@hIAʫ\Vp6bT$) INkD((AM+,i;߰}1A2N&#rRn w߳8 oׂ ,XT*@xlTm벓`Sq&ߺ^5ѓ|"ND"/8,1kA982ͱb1IԀ9n&BhDE!?G*NٓPSb dɁMJ@C%X&0W4oT 1S[Ra HӈJ_|Xr|jܫHxDHU+$:PWqu{C|T͏ZȪ!cw5EMpJXv5'2P( ͵qhDP rj\٫W8 `0w59 D/1*Y777X7aMp̚#^RO" M~5M$&zX)^0O)H0Wz3KɴO^C"s$׉3bʞ $+L'[pq8mX2HkJ2{ӼF,ם<.#/ǡ ,2.*HAH|R *oh:L;'To^aP@$v?T,c Q3@ =<ҎǾ [K0Q;ݙwϴOce0%oe֜gQ_n%v.!cĨS?I'\Ap.^Mm{ N a[/tI}i.olQD1N'yaľc wZƟmJ?~ьy0脢!Ev.BoQbk^7JD^z꣧L7@˦W}y^gGP` h~G(6ܰe}Vc+]B绽yb2ڬB}G\0+IB GKU6BKÐہq BIoMGgN cix|Yf =ymU!O!}aW[˝nv˷`5=_FGVQb|C'9!pɺd%px[ZAzWJJ$ZoMܗk/ OXLp]z=r>$NyA|% l k.l0k_O/3J)9xu"}Fʨ 9{>.՚܆`9QٺJÿ_*NGzIq\(lYj=+M6@YR+1ϕGgM9/$8q%N5J; 6]Qד~S]_lq;}g7V/ RN/,jXjΕoku#u!C냄df6V_[W2fIEntokXN0 :fmlRwˌG 8=9; O#vɓ~y˗.(u&el|qy\~<ҾfጿON| (E3uˌ2)]WТ_Zbڽ7|aէ3Mtd7t`8Ҿ?P_~?,l .ꫯsdpခq.| ;2M>֨,Iu=d'd|bS?{ e~)ݏ:+wNJ#!bcu#r$#q.?gJ_ $էRA {#/@vOLWgKS=?9H~7^?(njskF)az&'BqL'02h%Yɶ,gX󥯗 78H0%co^7zqW wa|$r&}wZ4>ƥS*W(wyd=/2E +uK.̟t9A=8z>9ő<(>,-)y)6':‹Bj zRؗ9SAq7[Yd*̟4x_&,dfɉe1󯣺[eU~ lQgn؟x{~{0xԅW- s\y{\MX*t:p_mw$W}|YdBަ_ o0բ{0}Cn- Mtf`_x2yp%P_\ጎ QA-:X!N|f8d:1 l@!B$~s/ (;oL4E!Xj+½+\0'J}'>q! ̘Fi @ ՂڳoT屝ݎΞ8ikD g:>'?ߢ2:GҦ77mxD>D@[XP=?UYDž]v@qauX~=_zfb7bx! 6e@ 7DKphVu =闢~G&jZo.zO^:s?^ѯ"Q/58'ﰹ:]XWW,^}J}_ljol6Ĝϔ%+Ώ8Z]PCbJYR_6֏)lim>Ie 4m,%+0uy󡡗w9Dښ{_߯ͥɐWwSñOf)]M ލm6rNuømnAIZ -\ngd]LݲDכbeӮSyphީ7;0?KySxڼؓaiMlQ{y8_@iWoY"1?8>T~@_nǮvq6wyy{i"ݻ&(:j+RxG#Yvs <]h:9k7sx~['뷌8:o+@op $l|N{ S1 h~ߍ]!< ./:<~}5s\k!n:MKnR̼Ζ sb _ 5o/]#IrLo*Фq C;Wթҵޕca` Hqdױv&?h7$|ӾzsŸ6mhnWӻsi=-IC>{r ΰ6wxvT^֞ crv;?33}z|-!4S~: {r<>S6ύI>/_xn8|ary#0& =9Ρ>^@}A冨}(6>L#1~utwi^{Vj~[9蒓a{}/*JCatxz!C9IBk|  {gVȰ+x/Iv$M`Xհ3= /2^Pn4쌾^l{.7e= ܩ?BXs:e ;Zczsſ _9$.1Rr7}%]`T͜'b{ifNůTMVo΂_rϖ~ jm&M>vז ;_)9+4"[gl,4ۦ+Ey~)|+U[|YDLzqXCuw]hp¯ۃ/'\SGZ;}˽ou5ȑD]{_p\Ӑ6?npNX:g 0c;ܿg|x>#:87,N5T3hwo=1KY5+֕#m۴"oS4rO+=m,$z\Z ]_il@0?d̚ï!Rhl^}vNdˤ{G&&-{89?I5ynXu~`1 _+&$T쎎NoNx^w4ܵJ 6:%7ngۼJjP[ogY&>a›s]e!0n]x>!q#?ywh+pmz\pE0/"=}l~dS -dg!u:3Gw|%j m:ܯs}$t$>W&9{>Æ1=2oKhonНNI!Xo iKK{F yM҇Ӵ~\^k GM2DH`fx8W#{kr>u#Wf|OW>Riپr !\C',l/^/ϻZt nZ0D$=ʼANga~!~q_^K5>.[O4Q.rPoCD\ $e0)'㈟)41ijm:bNu.znLFUǿ{n=hWPUVzS+CHw#뀕m3#VU<眸G_l"ljs-: /{UY0p^jZ,KQ|B+{'W-2(Coldtxl/e{xowAxyLw>v߇O]É6ZgwƬ3Ǽ>x_[v>&3f?n#w\8jFc4_{u5Mv*w 㜱eƠF&.;qq6 6b%ⳣl0C 7Dg*=$ 4K>|x _IgvFm"܁{>sk1FٕWxF aǰO9$Z_`Gco$XzN?{_\6a;wŕk}r&'}› O麽Ή|TW\z'^>yPA1@h*JŜ /Ԁ%:[Y^kؓ.!a&|QAN|x ?qp>z7z*VVƖR=)'!)Dgx<$*^&@JL L>w*;SZw N\BqJ,vݵ^;p Z 7spTw+oblhYrB#C]Ezs@@ָf3~.J.՜.+=g8=]X`N۫ƒ=$$kQ<402"`0ovە rLוaP7LeA57ϭas.pr6UP`eS4yUBPHV$~kgh 3[dUVxnX0rnhdaqHE,:Z&Τ5̀-9m9=6y_]܂rt!r:CBDyr'ZBgCB ;! "m0Et3{ q28a>{aCej嶚kmxd#-0f^^حٴ+Ly//|D"}dhr"S_z-h)otfmU2}kp! I'BRNjC0# !(a_{Uayj,fұ֮n..3c pmdpȑ}}bvftMhB 3XS/"BM-WnOgnv2X=E%rԒbʽ(2Gz6{Ѥ;--U#=ib_`43[cX 2$RrM٭,P{OT":ըke@ˠ$obNV:t7hN9kD[m膆0@5m-uֈCsN5$ժ0TkOQI¿Zv ii9 i$͌)iye28P Q@ذz}`Ec|VhpW0I;lHʩsZ{:Jؿ| PqlY(-g|ALVW^Te8}o;F*!!y"\kJ>X!f$a t&iR̈$)Iec;As1O{roDc,no#RM"x_yg?܊ 'ͫ*5\xˍѳ[˛Grv R=BS_)o=qAs Xaa-]7)p kv]`C{9韎v+8UjezUМ ۘzʞ 6 5\4>q%cI/I3R:c_>?XjgXՍu)u2g"'sP~u~|o d9jJ? xk0j; ߴJt*pՖ+hu-mK}/|ɑ3.fsULafݼ3u/ MgLcc3o Nַpc 7}I.}» LNѶq=֨kt'`Yl_#R]*E$@~"#ޙKzS} ن|'y3̹@%ּ+ؙwc M65i˃^`_T-Į3/noF2OڄtO+p @LX{&<(Σyv b@09+0wyoܢܓѝRww3a )fԮsFXqgFh/C\[CyO{:H/3!z>F\!%!_µӛf3 %uIϑǃ‰&Nw>NeqOoSh:>ߏ= `y䌗1 l# ~eNi^g$c^h]/SA}ۛ;8q-;hMyE.aK?E_#8= aP{x/z~$_M 7|Dӎ5Vr?Zla3 қe6,ѻ>JSZo2rd{g/i?al<Ӿ]:QΰCNS7[pb*vv%UF]*ѣ +NijJ{&q7﹉6գxΗߞǤ/9CQs ,8kw_sňڒ(|~soj@d͋z2ykNґQ'| 0;wozf齰14iqa/5Ѓ=Jt ,o~욿q3I|.c*~ FzBƑxV8_׵5Jvm]Nużx6 L"c4,U^_&Ԭb&[s^eŹn7XRst#VaFd/plA`,D[漢fg~޼%0z&h)?=o,ȁ r̦ɖw6B%P^;ɷ.[iS!>|E$|\jn<#?.kWydԎevQw|ӝb%:kMs41]B?\^ǡi{Y; JcO<0glrew5t 8 7V4 6zW\ٽΡjQڞhpf`r\}vKgsBrϱd&)z%g+iNvgI<= ܮ>жԖbwXYj}3-҅ml?RnەUC cHVDLL'PSB W\ԙ\oTή))M" *z ȋ_ zKDY.+:%kUWjVMQe)[_MdU^eޙq7FFl(^ʲvwFޚ)kW"-SW?ג;*U+fNSܺYwuUfMuo1QY+?|f?͜jDVXi'Jfv=ky6(+ϯ{[ҴU?x6bHjI?ʫmqkwUUVuɼ]jB˖KY(̭+E]gܔ~S\)wCjnec},#yJOK,KHs<7vbNÈy455!$aH=s} qN\yy;ʰ  D}^ 4F FDDāEӈ:޷m5i^B 5A?v#zOA=H)u=vcmF 9F,={<Jm8expUbPxAK|deRGBp9̍s[ī-C5Pq]kgܫVw 29vY,7S{$/ƭc|/R*㎪&]sE0C .@1ƌAxǎ94|$0b!C&? @vR3㉎G1J3_[qD|FrjN&{&Vjgf*ze;!zqr]ʦҥRlSaa[7rӍ74&ƍ MZ7ѽՏ\y]e4pȍ.$P[:<bT'#o4]@ cB"820.,,e0.Z"$h7ΆRS9T:4#IB:  ȒD\4Q4e E$&()HA Rh ë(K=@8DRRwGZu`vc){)2< f=&&{M)?ngE^W][f۱6Y0I~Uvuq~f΂Ec`` /=pII9Ɩb'[af㩟vFل^P;7hiZqB+U|Y+RqKeT`R-uw1qJYkT\+jȦeoTƖ9tgw Y DFvBg0l,LA'4TG?@w Y Jv9 2I{)t0>S}kK ڎ03 C_1!>1Iq NѹjEV [9nFBj@7vjU7Z3҄KIΈU?TԐ'1{󶲖W}\<`FT:d>CeH8i;I,׵8;RqR6hiZdiNP}UG_!°\XO,tA_Isf kA]L(RnjrY>ڨ $=C=Qas:و^ MTZS7#jjx*,цx)9LCA@l/ w)q\</{1MϘ݊* d DM]zjv6h !QJ GqXm!cD(>lΕݨ~ZF31p 0WVUu(Ym&:7Jn1bɢ s~2wi Jb9:خ}d\ME lSbgA^ʈ 0?uRL_Flyh ps/q.tzv76rcl%Kq֯P%n@VC+p?M=KV ☪%9niWGK,?CH1mq (a 8"3L[4FwhvVV|RKDP^цᤤlũT=J{7mzwcx !FhcHFVFiI au o7[ ]BSiG65Q =3 mh:QC& j[*zb$NzW?䠠f?Jڱ2nON[=~=h!+G@&'0Ӟ'04"-ﳦD4W,fa ]KOTe>8;P:Ll-?߳u`<$U"J,: `A0[=o ~,s}ìKŋHa/ aWȉزG7a` ,ĝ?Bo`‹^8 2y3,`VcuHn8OJ VPN]hLxĩ@%.,oVN({>>c8tIWH=`b;:j#)7Dlb&,k,;k5_)]U7 ăA[j(٘" NhhRߨGR,wSmmXjOMp1qTf̌SjI(FfN[Vrf1B\9U&-i^}!~5 9˅*dz^g!/͍wʝxܷ#ٟ]S9(V[ BdXr'{ KHHphqA1tVV!| 1 de{i9m?-%>3h ^ޚվ{~[0#j~ & ;lP:k6- s5u};<4(3mN\R!ByAn. U@]vO1x+,c76olU;ވjC: ,/O]U#\э6T8@@܎KE5?k!Y#K8_]6zT8|Jk⤩% -@;t9':\=Zl/o {g&G;"1 AxO"vJIH$h^Ya";0ҌɵTV~o,UUڥ]w4KeV|`;7`)OPNn{S-+'Sce%}.n.~oG#=cT9:z;/v֍<)A^w(ޠf`a< I]mO˚<4< '[ʘG(H-vwX__9 `?[9m}ᡕ$ΏNkhޒQIn.,XS+Zh! PG(8vCgYY>X/N40v M?zxD|o\'c1=uM(SԷ)fo`cN-mnt4f>r9=r15<(6'X{C_#%_@ wP\ B2oM@GO9r?Vxd8?$(WF b:uMo{4ZR_ @dp9R2BvUN=|ql\̒ʅdӇqIŀֈnЬb,jBKΜ`e`=#Ă hNI?B(:pLd°aiL1$EQ{M.Y!ݱvOz ~*zKФgSbjQK9PХby%D-8f 8I00 DfD͑(7k"lc5vKlٓ;*`Xycĸ ̺n7aLJc/ׁF\[?~0ԭ٥ o*(lɵzWN#l:B沷EtALxYneՌ"ikPW⾴AiWfFo,: )=B Q!bdR͚Z:tѾ֞!v܂ &UUmA0qcQعdN9[ ba# htLLBl%`+yN[WnxV"ө̬'q\# bMM1pG2]ħ:3 3:JKX]SNhṅ/h_5yo Sj:!u$m@ 6jG.Srcr߄_gg>J͋>4+{-jPZg5#w Nx&(wp]Wt\B}Q|M*DLr+2$ZMƺUZFV?O-Tu _]/#*e$U{-:K5SXoMSm-JM)m^GSɩo|O UPdq3@ 6;tk/A~ h F@t!e~(~k>\v9$qGb+$Ex ߶a~kvǶaeKve3TuAomp~`oR7I~V^4\ [S1)^e/kZ6~e&%ӳSu pŢy*,WU,JlLKTSųGoʙP<'Mb2))@ʼIrz*.A}ZuEm2j!;6 ձ V ۶{ @{v03:Z>3|ygT]`cױz@% TuedueEB"v"t}cj}T.F?̨j ڭ?%elQy:x8\WW#ʪ񹇄n##/"dB}DuI_\?0T0Kn{% =u^] (8}kbtRumɽGO#9R5bP;ms04~8M`*]Rp*hma/ &Ik5D6l˩39t{{ 84zqd＞3$fT&:_B7Z J%C,JdjfbxhZ!1ȈIAKJƛ Z`un<BskIH o1NDG?Qb" ; ˞t&6l8;#_DZWTgh:8nh!IV77ed~\E?YGX#^h='񂧇zoIrӅA}ޭ:QqlT곎ahr{\@Yr :(A-Z0wֺ1`P&15QCl_ӎkh}dL$Ty-y{0`LTYh.~g^cʭaG߳Jaǰ"_7f1x]ӤG!JmrA4%O^ߕw  2FƼKfKFH4 @,Yl7=F-vpDޝ@uqnrހHU 3f^2s !-h, /s‘ biFst58)&Ͱx0#3a.{a6RR -0 $% 38(uu( c/{DJ.U$ڕr6ai6skE#Ap?rH%d7XXF(: ij艛-tTք{Wk͘~.fa@9&cY ˫LB2c9"Zi^ްTAdux q͕l7rŚ ~JlgUʣ= GˏSfȄV{oLEFN3qz,C#X!8 ]Y#l2׭pݰ}GX!f|`faNd 8m V0=/Q{ʭE BN[>œp#z}"١a 뤨#cNU2 dI1t ȎvDE>?n[s0SMRsUPZM&Ҋ׭q1KUmF\.-2YdVxr ),w-)lPP/!2A  (/peT`t4#mo ~ OE%LǜrO-/f>Am'.&waMқ2i@lb0~ʽO;J#!@}<yf^Dvm(w:꼅+DI90 V$ں[⨻NFH"i"M~b!,+_YO4gUM38(b6q2\4} 3b3A ԛd&9! XLȞ!aEu~ʜm& $Bv,O' }`rXqyxY G #7{ \^f MI*I(;vab@ВtZ@kCivtuN±L\mZ2zl`^NUu9DD\6$^ꖱ~Y^O  M2/Sv5ya9iւDi1nN^"\6(>:$Ur{ HT66!ѤQZ^1\2jUű Z/)"҂]sL;ߘɾ+:h}3Wc_=f4dXGhoQi-_ vco+w{Ð> 糐>[>:,**B櫠(.S? 牫 c' 0]MQPWXY~g $eO$h!~2}Q˻,&}erxPTRc}K>e2  TIKE7%BII5-8r3`D^SOGc-8"Hn~E_4 ;ƽ Z})/bX!mk܃jdH}! 1ĴMDzSf\$g[v(;dXp\fsBNd jܽR0o)iKp,"Im"^@(##;&!:s6nAZiCd3X`X-kI#j̹"hDDk9RmtTK_Fzkj aBJ}˔}Rn|j_EYeP3MT߄PVtIHw/:=: (:`K]B|Cha0A0]Y>YjzMW. Ja$Ckg4TPj0iuON3M.[kOY]&t(\4i_uXf%DA~ 2N3}kO|iOBi KR~k[?zŏOwCh]g;:E}|UGuQS!uF]Q7u]iTr9tٛApIQVhVη[o@[F=.F;Τ55MH&|}tt]йLi,}^W;WB*>&S6w+W"dlinRVJ$Lpo@LA!O#)҆be߀1aS6A N r^Lk0 l.Gxy{ejha*JN h ijP8X.CzA( ÁD YGKwG#Zύ~PMwﳵs֓2GI׊ nǛܥ*a+1H݄-Ib>1~ܤo1&QUYѣ$IGA:KQG uŚsB^?7Tj}LE&PSScdTI'yEUQ*iJBi@M/rw\UEW /߫>| *j&Gu*(j *l6`jlc,LcCf@H hY6][v?X.\0B}|W\9aPe:莈_ @۵>ڤDpy26tugYl4Q &a-,i%} 뼯/t1& G!W}Ì71 N3URZ|֊+^]>"3Ap$C ?gZS&΢5OCuA'J(qB؜2<͛KAņGi`<2\Vxr0m#_{=E,V:-l+m ^ō(PTlڎnj4yxr(KN YoPdفN% ~ S"a:;C&زӳb< u51D}+IH@ma:f\0л'F :N}\_ "GAC*xrhL" 8f|32MH4_ T}a=lok Im.`ؕ..F<=Z$ e 8: Y[ ~5!jKpZحf"nI 11i7-E.  XeP9N9-" gkѻJ]4 ZIQ]KLRD h!ly`NcBIQ~97 4_qӰK; ϣ ~a) ٟ|iO.hHTe2@7 }Vh^L;/K眡jC>Q N"%9 ;֏G҅%…1 z7:U`zFt oBm`a,;8CGH|8[.W ~N{F`j2}$Cw?t/V-# X cs v7q3h81?rLhL0첧GG@4䰫<'Ȧ3EO9_A^EeAF(ivFU(HߧOhɛS ?Yj3:ƻg&]T)V" ؘ b;J9[Nc"yO9D,~F>qW/fN VR]N8kF6> ${I`qPK+F̥]JJś'@1s5_ +^bѴ]To8{0yfi}>sw3=\/1ntͮ}ӭ?P/WQPWO`2wg dDz%i.aJ zbbTgP\xG=hFTr_bm'yKX8j.w 8Qe 􀅗Е5+kGo is'bFu1Y&-ы%@bMz̨ X3,gKwhV6W`g뜎5)E1_RYPLF5-'򝿒k{VIp/x"E)s3<É=O4&_҄7Q]>Y^l`{TȄ ݾ ʕEOg*Dyoi#i14 |lsvR=1ၐ ̵Hܵzjf#i1fJd i^nC$?y-H#?Fwf OTQ3]jf Yk' :v ;mN XNpGlZ\TVu6K]ǚC7s~)^ZVܑzN##e`q;Bk !kc%&J}6*!.~^.e?D6?z@ֺ׌Uڇ4NbY>"UO'9Wkc(D)NenA<'n"vrw >+ ׉xO<+#__6N$3d- hK:aB j F7L7rK"״9u~CR7ֲϡnµR``OTH※o| 5cpԈ=}eQzW}M/o'/gCm!WZ_x:c—zdJ"F|sIF͒h2R0h7#=gQ0|+D*+5⥔r" ێMcY\vc^[:_*^OiK~V.%a{V3֚j\ɵ=|V-#Bhy}"77C{@t#fR?F\p*ǻsO4O&dwQ+w}L!gb tƃHEiTv a6 9J#vNR 4@V-ѭ$ L'a0{:=뇝Qo6-67r/0Y^ %-xj%A'>g+[s +Z6lfIqWٻ+[@vcu9 YƲ?3QT7+pCya M*k\aVFfj$Ȭ"pDdߵ}]1NAN|?@w$B%7d}Pҟ첒n~Cm0[=7!#§gzC:TD`nE0uhf1G>Gxn$[{nC+;+^(j *c|/ 8Ǘ%l^Mag?* ?bά鳛6y7 ަDWӻ֣_qxP=6*=o?X!/$*VJw^l8|<&']dT(s:mp hQ 1#X=ndM5؟c%RLf^f+ևzfbRCC=D-rN !%" JTJۯG݁,]c2C2@ep𒡨w-vZSB)6(OtKVh 63Բk_O8Ԙ=4Y8;kۗ!'{OW^k(j}I~ ;#_0[u*؏HRgnjI3vbv⇫I!Oȧjd`lC9zI^* [PͧTzeV.i 4__.F'ح6l27!h6*v#] xT?<:"&G9hEt':XLGTo{L5o2;Z8g1Ο V>RU>+DF!&MnK0ےvJAK,>#6 R[e-<\Jm?2(+3={MH8hʡ<Nx6wa"tas'r&}a^OM*0PDK.WD&ln?iS*վ۲"ޡ7188ط1tQ CL9=CΣgCx`xut2=42x|-sBR&wҿg\͇[h0Y6c!/M!Q巒[,Vk9d%xZ49/|rJH;a59\iCxl'ϫҋ1dTȆsyBehਛ,l\gk4<#2^wϰxT9Cfs~OjT>-n20Ta#!D 2j>d =|&qnCYQ14~nWg&K"!4"t^ Ƿ\߭״G0 ᑳ 7@h*EZWW! \0h\{L{IM4 9KKFlUs6L6`rRߙfܭ&%G0'#Κz\w-.2нi5(c*,E,95zk/4w{d9s!˾fn7orz #ܗL;L*4.P: G|ԚPw`Q;3vhFdA"@ BS񝔾+GS\YѮ-MlzZKn\?Ve*SЦ[Q\6vK@n@"HHw9TACٓ=Gï Ȟvr4~8)n?z`<<]DHXd_p\L0%N=C5*c>VTuV 1 WTid7L1C폔 S3~̰dH0|\@n8ë uRM ߜd[,68j4[XjV?.lH#ޝI"vUykSD}.†bwsG61H:P޻2`:v橋mF ޾ES)adfЦB`M9i }x"'bG2\ԯ鄓 x ,G\$m\I!AF+ 9LRrAdzX${Nl-9=B%΃_S m$+0 9p{:ħxԳf z%˜]g 0 $K5 3ʤT- N H;acKԅ2J1:V"#4.560"1n=d z[T>萶N]l--龁UAͫDB˽4&<%&:!nX諭/#Q Mm_A(-x)!*6Ǧ,QÄσ=Z. T 4tRT?gB0]~LA璀f= W0!}3 |4zs;aӑ[Gw,܃lXSF}P'! @(BNmP5~RbRVbh 9H!l{HdBװcp7R| D/QKnQB؟+1y3M&يttj _UuEɴ`⫿@rIcaYI?)sIV8Y03mV~۸QJJ8t)eK:H 4a*B<nSxwF5^łԫW"k~K"KMDxebswu#{S.Ռ&WgYZab.p.note.gnu.ABI-tag.dyn_apltifo.ehhdrcccetbss_amicotICUCT._ $& 4>FND[0j!tB@~Sy _l@@ g0?(8(0 Ph pH %@DC249437/944a1ff2f3e/8b385187b892b80a97687ce69b9ff3f7ccb1130bTRAR!!!^qm())S:q%A(3#3 u 2FaC$ j Rj atCJK.;\RFd(9#5Jn4H& YxOwf*kf&MB,QB)0i[#C~b['kܜ)iꓽhԠulπ0TJE©0'#H(hȞq? Dw4zωhy@q -/~sm4(1[0!"09UeC5*zʡ4mBx̍~,;>g*NqC ~לfp!#<8Gp#aC,aD;j̅d3*q!l "TgZ!#{7'O1z&tm$prC$000E`} OwP(ۯ >꽩_jTjt=}F]O/"Jp4 U)$艥Žry# GlF,n 0I-#Zr Ti8|:hOrofw1/7[Q겐R̜٨Y6tqxX)j{(PStN(ɛN8b\