systemd-journal-remote-252-32.el9_4.7> M Mv ĉJ4!!%joLne)Ip-Bm5 ']fYareleng@rockylinux.org p-Bm5 ']hFI(?K |&y5 T$-JI }8%I{l(JGYY/T WMYo?9tB×@UUzN"^ida#|ͼX݀X| $n&TG?vj y;$2pvt+wS[-~bf5e7cf106fa21baf6db17a956fbed2cde36e1b61a676829e46adc3615fc336710989b2adae3151af5b3449f805763873b65f767̲8wAj>H)?d ( VDH| %I% %  %  %  % M% ,%%y%2T%((8 $9$:"$=>?@BG%Hh%I%X$Y@ZÐ[Ô\Ü%]0%^bcdeflt%uˈ%v w%xX%y'шьђCsystemd-journal-remote25232.el9_4.7Tools to send journal events over the networkPrograms to forward journal entries over the network, using encrypted HTTP, and to write journal files from serialized journal contents. This package contains systemd-journal-gatewayd, systemd-journal-remote, and systemd-journal-upload.fXpb-7906446e-bb03-496d-bc89-047bc12487ea-b-ppc64leRocky Linux 9.4Rocky Enterprise Software FoundationLGPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxppc64legetent group systemd-journal-remote &>/dev/null || groupadd -r systemd-journal-remote 2>&1 || : getent passwd systemd-journal-remote &>/dev/null || useradd -r -l -g systemd-journal-remote -d /var/log/journal/remote -s /sbin/nologin -c "Journal Remote" systemd-journal-remote &>/dev/null || : if [ $1 -eq 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Initial installation /usr/lib/systemd/systemd-update-helper install-system-units systemd-journal-gatewayd.socket systemd-journal-gatewayd.service systemd-journal-remote.socket systemd-journal-remote.service systemd-journal-upload.service || : fi test -x /usr/bin/firewall-cmd && firewall-cmd --reload --quiet || : if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package removal, not upgrade /usr/lib/systemd/systemd-update-helper remove-system-units systemd-journal-gatewayd.socket systemd-journal-gatewayd.service systemd-journal-remote.socket systemd-journal-remote.service systemd-journal-upload.service || : fi if [ $1 -eq 1 ] ; then if [ -f /var/lib/systemd/journal-upload/state -a ! -L /var/lib/systemd/journal-upload ] ; then mkdir -p /var/lib/private/systemd/journal-upload mv /var/lib/systemd/journal-upload/state /var/lib/private/systemd/journal-upload/. rmdir /var/lib/systemd/journal-upload || : fi fi if [ $1 -ge 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package upgrade, not uninstall /usr/lib/systemd/systemd-update-helper mark-restart-system-units systemd-journal-gatewayd.service systemd-journal-remote.service systemd-journal-upload.service || : fi test -x /usr/bin/firewall-cmd && firewall-cmd --reload --quiet || :M6224y8 Y33@ q@> >> [!AAA큤A큤A큤AfXZfXZfXfXfXfXfXfXfXfXfXc`fXc`fXfXfXfXc`fXfXfXfXfXfXfXfXfXfXfXfXfXc`fXfXfXfX48292b56f37a7a534ef3b738d75cf289e9e42ed3c73546b958374798a27cf08beabab90777e110b0035c4b8eaaa1e0c713352277d7e33ff46523e2f87354107dc2559b1244fb04f7fe214628daf09e12d431560b069b5ef346ace1ceddbe1bc929a7ce0c161a99c0bb48ee6fd5def97d88c7d1c1dd776d4b4d93b6be0b6fdd9bc664c8e56ffed5096a10c641e5f6f004eba51a15fc566fe50959e22c9e912c6c29c34571d0baae2fbb55323c95c83c724099812057878e9046fb525ba1d8dbe379c06d3f9eba29eed77cfd5e7bd9da0201a22e9fa05d3ab6fe156ece21981317b31daa1f76cbb39a195a38f7aac4619846e0d002ae71c6dab9dd9fce2c88dc09f3184b9372a7666d97109983715331b477500a1279649e8cc04a40537c9989e296e814e4a2c09924bddfc12ca0dd1ea5ac7d8256663f2d3ffccaaa6c3b7932d3fc98fed4d1d14a9a25e0bec8949bd955a897b7509aa12777a60c6a5e266412f3c9db8969f068087ab1d76d40273f011b58dd9acdef0dda9709016d448f5e866f7532a0d92de5ee5d62582f82959d868c06e4ccb706476cf579bffd3f05ed8d717e7b35b55bc75b087f23edfc02341d6bb29863c95625a1dc4a65df455a46f38a282ef1a26da0de57484083e12e6646f3d3e7b487eb053842de22078ab8c50a706ee652c1b92c926c38868d1a424bb18de923f41f2afcc07b22c116f10a11f7e1ab4b4fbd41f13a306b887ec6b5023e91f4cee01a16b3d9b8cdfc6f690e903b6e8b71bd2ec7d78a390f9eded190d2cb88b11f4a7407bf5545bc477acfc07a984dff08f921d1c73ee815ac35e1d8498d6fcc130011af13f7109427163e923a775e8b71bd2ec7d78a390f9eded190d2cb88b11f4a7407bf5545bc477acfc07a984d5b4608fb4cf600b5f1b6dd1473fed79d3bee02c444aa40fb39d1e98ff11c2d105644d79bddba3b925c6aefa80f0946f0c2434704617fb8e0fd22b026ad2cee235b4608fb4cf600b5f1b6dd1473fed79d3bee02c444aa40fb39d1e98ff11c2d10c6ff19cb976d048a3a404b1c853571885b3da5eed4257962a5d84c1c46f8978a6d925225c292dd757a53ade7295a5615359241db87cee915198c5579b9dba83ac442ee03af2953132ff0f5064f3bce3579b5481c77a53750dad9aecf3447c297../../../../usr/lib/systemd/systemd-journal-upload../../../../usr/lib/systemd/systemd-journal-remote../../../../usr/lib/systemd/systemd-journal-gatewayd../private/systemd/journal-upload@@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsystemd-252-32.el9_4.7.src.rpmconfig(systemd-journal-remote)group(systemd-journal-remote)systemd-journal-gatewaysystemd-journal-gateway(ppc-64)systemd-journal-remotesystemd-journal-remote(ppc-64)user(systemd-journal-remote) @@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/getentconfig(systemd-journal-remote)firewalld-filesystemlibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcurl.so.4()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libmicrohttpd.so.12()(64bit)libsystemd-shared-252.so()(64bit)libsystemd-shared-252.so(SD_SHARED)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)systemdsystemdsystemdsystemd(ppc-64)252-32.el9_4.73.0.4-14.6.0-14.0-15.4.18-1252-32.el9_4.74.16.1.3f@ffifM@fK;@fDf+@fe,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@c@c@ccl@cc<@c#@ccRelease Engineering - 252-32systemd maintenance team - 252-32.7systemd maintenance team - 252-32.6Jan Macku - 252-32.5systemd maintenance team - 252-32.4Jan Macku - 252-32.3systemd maintenance team - 252-32.2systemd maintenance team - 252-32.1Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14systemd maintenance team - 252-8systemd maintenance team - 252-7systemd maintenance team - 252-6systemd maintenance team - 252-5systemd maintenance team - 252-4systemd maintenance team - 252-3systemd maintenance team - 252-2systemd maintenance team - 252-1systemd maintenance team - 250-13- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-49495)- cryptsetup: do not assert when unsealing token without salt (RHEL-40119) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-40119) - bootspec: fix null-dereference-read (RHEL-40119)- spec: return selinux dependencies (RHEL-36471)- kernel-install: fix uki-copy deinstall (RHEL-35994)- remove selinux post-requires for python (RHEL-36471)- coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-34061) - test: add a couple of tests for systemd-coredump (RHEL-34061) - test: don't expand the subshell expression prematurely (RHEL-34061) - coredump filter: fix stack overflow with =all (RHEL-34061) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-34061) - test: add coverage for CoredumpFilter=all (RHEL-34061) - test: rotate journal before storing coredumps (RHEL-34061) - test: sync with the fake binary before killing it (RHEL-34061) - test: check coredump handling in containers & namespaces (RHEL-34061) - ukify: make the test happy with the latest OpenSSL (RHEL-34061)- execute: Pass AT_FDCWD instead of -1 (RHEL-32259)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)- journal-file: Fix return value in bump_entry_array() (#2173682)- test: add coverage for #24177 (#1985288) - logind-session: make stopping of idle session visible to admins (#2172401)- journalctl: actually run the static destructors (#2122500) - efi: drop executable-stack bit from .elf file (#2140646) - install: fail early if specifier expansion failed (#2138081) - test: add coverage for #26467 (#2138081)- nss-myhostname: fix inverted condition in (#2167468) - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468) - sleep: rename hibernate_delay_sec -> _usec (#2151612) - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612) - sleep: drop unnecessary temporal vaiable and initialization (#2151612) - sleep: introduce SuspendEstimationSec= (#2151612) - sleep: coding style fixlets (#2151612) - sleep: simplify code a bit (#2151612) - sleep: fix indentation (#2151612) - sleep: enumerate only existing and non-device batteries (#2151612) - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378) - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)- udev: make get_virtfn_info() provide physical PCI device (#2159448) - test: make helper_check_device_units() log unit name (#2138081) - test: add a testcase for lvextend (#2138081) - pid1: fix segv triggered by status query (#26279) (#2138081) - test: create config under /run (#2138081) - test: add tests for mDNS and LLMNR settings (#2138081) - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081) - test: wait for the monitoring service to become active (#2138081) - test: suppress echo in monitor_check_rr() (#2138081) - Revert "test: wait for the monitoring service to become active" (#2138081) - test: show and check almost all journal entries since the relevant command being invoked (#2138081) - test: cover IPv6 in the resolved test suite (#2138081) - test: add a couple of SRV records to check service resolution (#2138081) - test: add a test for the OPENPGPKEY RR (#2138081) - test: don't hang indefinitely on no match (#2138081) - test-ndisc: fix memleak and fd leak (#2138081) - test-unit-name: fix fd leak (#2138081) - test: bump D-Bus service start timeout if we run without accel (#2138081) - test: bump the client-side timeout in sd-bus as well (#2138081) - test: bump the container spawn timeout to 60s (#2138081) - network: fix memleak (#2138081) - busctl: fix introspecting DBus properties (#2138081) - busctl: simplify peeking the type (#2138081) - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081) - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081) - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081) - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081) - resolve: enable per-link mDNS setting by default (#2138081)- swap: tell swapon to reinitialize swap if needed (#2151993) - coredump: adjust whitespace (#2155517) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517) - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081) - glyph-util: add warning sign special glyph (#2138081) - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081) - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081) - TEST-65: check cat-config operation in chroot (#2138081) - TEST-65: use [[ -v ]] more (#2138081) - systemctl: warn if trying to disable a unit with no install info (#2141979) - systemctl: allow suppress the warning of no install info using --no-warn (#2141979) - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979) - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979) - shell-completion: systemctl: add --no-warn (#2141979) - core/unit: drop doubled empty line (#2160477) - core/unit: drop dependency to the unit being merged (#2160477) - core/unit: fix logic of dropping self-referencing dependencies (#2160477) - core/unit: merge two loops into one (#2160477) - test: add test case for sysv-generator and invalid dependency (#2160477) - core/unit: merge unit names after merging deps (#2160477) - core/unit: fix log message (#2160477) - test: explicitly create the /etc/init.d directory (#2160477) - test: support a non-default SysV directory (#2160477)- test: check if we can use SHA1 MD for signing before using it (#2141979) - boot: cleanups for efivar_get() and friends (#2141979) - boot: fix false maybe-uninitialized warning (#2141979) - tree-wide: modernizations with RET_NERRNO() (#2137584) - sd-bus: handle -EINTR return from bus_poll() (#2137584) - stdio-bridge: don't be bothered with EINTR (#2137584) - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584) - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584) - homed: handle EINTR gracefully when waiting for device node (#2137584) - utmp-wtmp: fix error in case isatty() fails (#2137584) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584) - io-util: document EINTR situation a bit (#2137584) - terminal-util: Set OPOST when setting ONLCR (#2138081) - cgtop: Do not rewrite -P or -k options (#2138081) - test: Add tests for systemd-cgtop args parsing (#2138081) - resolved: remove inappropriate assert() (#2138081) - boot: Add xstrn8_to_16 (#2138081) - boot: Use xstr8_to_16 (#2138081) - boot: Use xstr8_to_16 for path conversion (#2138081) - stub: Fix cmdline handling (#2138081) - stub: Detect empty LoadOptions when run from EFI shell (#2138081) - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081) - boot: Make sure all partitions drivers are connected (#2138081) - boot: improve support for qemu (#2138081) - systemd-boot man page: add section for virtual machines (#2138081) - boot: Only do full driver initialization in VMs (#2138081) - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081) - ci(Mergify): v252 configuration update (#2138081) - ci: Run GitHub workflows on rhel branches (#2138081) - ci: Drop scorecards workflow, not relevant (#2138081)- Rebase to systemd v252 + systemd-stable v252.2 (#2138081)- build systemd-boot EFI tools (#2140646)/bin/sh/bin/sh/bin/sh/bin/shsystemd-journal-gateway  !"#$%252-32.el9_4.7252-32.el9_4.7252-32.el9_4.7252-32.el9_4.7252-32.el9_4.7227-7  journal-remote.confjournal-upload.conf.build-id11d4e213393ad9f63a477d40d505fac560963fd45620b300223b543700f054c6e927aef62e766ec3af4f9299b25c7287a9ed1e205124cc89a16444systemd-journal-gatewayd.xmlsystemd-journal-remote.xmlsystemd-journal-gatewayd.servicesystemd-journal-gatewayd.socketsystemd-journal-remote.servicesystemd-journal-remote.socketsystemd-journal-upload.servicesystemd-journal-gatewaydsystemd-journal-remotesystemd-journal-uploadsystemd-remote.confjournal-remote.conf.5.gzjournal-remote.conf.d.5.gzjournal-upload.conf.5.gzjournal-upload.conf.d.5.gzsystemd-journal-gatewayd.8.gzsystemd-journal-gatewayd.service.8.gzsystemd-journal-gatewayd.socket.8.gzsystemd-journal-remote.8.gzsystemd-journal-remote.service.8.gzsystemd-journal-remote.socket.8.gzsystemd-journal-upload.8.gzsystemd-journal-upload.service.8.gzgatewaydbrowse.htmljournal-uploadstatejournal-uploadremote/etc/systemd//usr/lib//usr/lib/.build-id//usr/lib/.build-id/11//usr/lib/.build-id/a9//usr/lib/.build-id/c3//usr/lib/firewalld/services//usr/lib/systemd/system//usr/lib/systemd//usr/lib/systemd//usr/lib/sysusers.d//usr/share/man/man5//usr/share/man/man8//usr/share/systemd//usr/share/systemd/gatewayd//var/lib/private/systemd//var/lib/private/systemd/journal-upload//var/lib/systemd//var/log/journal/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power9 -mtune=power9 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19ppc64le-redhat-linux-gnu  ASCII textdirectoryXML 1.0 document, ASCII textELF 64-bit LSB pie executable, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=c3af4f9299b25c7287a9ed1e205124cc89a16444, for GNU/Linux 3.10.0, strippedELF 64-bit LSB pie executable, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=a95620b300223b543700f054c6e927aef62e766e, for GNU/Linux 3.10.0, strippedELF 64-bit LSB pie executable, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=11d4e213393ad9f63a477d40d505fac560963fd4, for GNU/Linux 3.10.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)HTML document, ASCII textempty% RRRR R R RRRRRR RRRRRR R RRRRRR RRRRR RRRR R RRPPutf-8b8f66d3735cd3614d8364eba71792a64bbae36cb11e08e8c55409197baf5e08197f2cdb1b3c0bd4324069f9440d4e1da037e5e3a9c11acb2b712a581ddd4097e?(/h-f=&N"JsD5.j3\׵R3 Zҿn\M[  xױ>0Ag {TËi8?ۏVnSx;8xh/&s|#ik9u[} Í7?|^zNTcL{#v%ZoG$QA%I52a4eRcYa]Kd,`MMJzKF_Q՜i2ˑT"+qF8ok&?YfVoc8`"H'@(#WVsspBǸ/}5ЇvHB#Rwd,}\7šny|#0 ݎlgCS+W"P8X}YH2(Y܄<,Ÿ38E4xQGz{Ewpc~hl<d="ASdC0pjt35MƲ j-j$'&T/4Jք5b=͇=KuqUIvE$%3P>B5n8515V&ʢRihQ՞[g<b7Dy>6|,.Ϩ\.8hmR&A-:w/v.|h nQG|7/OxM1gaOKay6H;h?A15Ď I2B2$)b 1B@ȈD""ш$D[G+8 8<^8 jݵ_F(?wkSu9SM) (è廃:qx)#v[tZ1YKEXl巺jOCˇ ͳqTpgHQrd6Jj8ElŜuj\$Ͱ[eý4\rnZ:L-OYfiϖKO|l2c>מ}Zq }@_)MkJ7O;4&OQ7w~Iѡ;l149 B MQ0WtD(vέfp<= ǀ.b|¼Lqb7 X_ ?-zH@&.'d)"ݵS` 6e0` ܝgCRU+nAOEo8r #%qJUr\j>lL(ket5.f=\cУTFƠ (p<0z5VЯ":O(bu޿>*+ZAM4{N )g u/ZlV$M4:hP֢.A' '"WXmvQHXdvJ7,"Б U2E}a sz6F;f_ITM_deregrTMneT__gmon_s__cmaincxa_fizemoc_us_sexcit_bzero_chksd__closesafe_fopen__assefadrewindtmp_uktakdrrno_amJaXJ CUtab0BZ?{[6ỳq0ɦJ*)myޤE28z)ldH.30(-=V{J:)4C(%s{=W03&慦+LGV3 sK={p;,l|>Pڵn>a=5yl`/$NFz鵏CAhdLI\Jtwh׈q.v beuPms|!^c8`0 2d`#d5b$eJB2-IeR&"T6mwPǾLNKxZLV07:%x)p0ZFsfw\mluߔl׿muzYȲs 5tʚZĿ4è}I{.f\I|'ާX4{ }Zګ^,EXĬqHϣ:IE}T:6 FP>,!nql,RZP>lJJq\Bܧ"" @pPCN\0!!(PhŃ YajBa@ER`"ɉ)Hdr0D9@8F74H u#đ8ё'Ns!y%MFcVBѵD3SP,A@ t<Ŝ!I2@ucD{1 -~/hg_ZkI,,UD|o}O1i9둀8%[X{tf-T=YI%W_0+3HFunan8MY['?ͦ\AFj ~uZz]%lB.HRm@aqmUhmH<{ZK{#s>fM0:؈73]˻v=2,6u1i7^Ѐ [LpipLUPLO~][Xf9BZ,33;Mͩp. W>hL-B`Jn`GvX0,`ZA+W(a2l[Xa!|wGn:hXk.BOPS| @ #=Tszp! A5lj3qu752 +%QϛS!K%֗A6RA;vx1+P#nA>fqRApZp$_ ;"é!VJ^iez;OiEURp;yը" iZcÍpI~8GA K41| FhEx7p (08@ H8P@X``hhpȎxX(Xpx0H`(Hhp080PX& ](C0W8 @HjPtXwyx 0c`)H D`$ R(U%ŊR%YPvcHِ?~:2Mhh*+Nz[6Mع g*o CY (WI0lh>٤>eUy 7D  (08@H P!X"`#h$p%x&'()*+-./0123456789:; <(=0>8?@@HAPBXC`DhEpFxGHIJKLMNOPQRSTUVXYZ[\ ^(_0`8a@bHcPdXe`fhgphxi}W}W}RTz0(S0^H6ca^vX2Qa@QuЫCD  .Δ_G_zTܚ&ԥUn>MwԵn?o\wkoyuXV_YuݓcJ)+'CTkɶN1i:k(󏑻*,eΗ>HSnBm1lmnL>ڜl㍙T*N 65q5Yڑ^X lfS\oNdc!M0!Hp'T} SYڣFkxp,II9BRcc[1q#77(hw3|b,?$ NdO)<$O\aҘDᘹ^m AWt"@7G ,a ]p2(k\ ŸxirZt5'~ ,ȵiOP+9fL_U n6GQ}N4ŧ+I_Mu:XʥϬZe}^ߤl?{:FfoH_J9Ua^w2>sQ+}\V#7꬏Xȧ rpٶm۶mIMpã#(Y/hsH`$7b;'%I#+x) #VOGA!3 ;l^/#[{v*"&**H4{8ҷDQb^2҃Cnƅ6 u3Wpqft< bi݅ã![;Zם s7o#hxS·H"=A;X\1kA/$D߹zX}9xB0b|)ʱ}(q;h0 f.rJgêx,K /o^hOEsh[=2*""V&1z +>rx@Ld=Ќ/mzJl2s9ߝo-|x0)_ʩV#|5OiWڇEڸ)xҝ_?os]| d䋲<Kg8lۀkx+u/)ϖq |DZ9$ N0S(OT E^sUoIEy>4;VM~Ͷ)c  DA9nbQRDOfl#5+75H+YQDn<V0w4  *Gq&jYQ*F츆s̪fksPAG)S9U; }@jE}?ktI-mAk̵tqfMg-.(뮱GLF^׎Lf$K1q!;搠抰!\d{@6 C [x0'Op6g-nt-$꧃kxls5B㏭Hg*22nL5qw,ڍYe=;i6;$HZIH'7&]=2=Rk5ԉѺ1Wipr8^BRW2o:sP': ::\YwĕI)+#c=:Wހv ;C mr;斣5cp`nry]K- \5 ׮ּhk1Bqӊ0gXXbKn[5\N3isvNGYL{[AeFrr|ueHKUP7á:a0aA\{`.Sdt8HcOJ9S_F&K!$I3$LeQäR<6DE2"@!hL ̝,?[ϿzYpWyj8/\g /3 e_\*]O8T''6͇^S4hxq-ҌDǎT~ Yf(5 F.8 m{b(=}5uDΏꞏaavijg?d/v6|7Ѕ1OZ ?:u2ȔWanY}F,Ù8YGdrVV[}Ngeyyu\ض=uXyN.hCaρRwȫKͽDewp50 7ςaCǭT~+h:ҷ) Z\m%oz/v, ]1pXdn;;`*n]c<(_.Z]\ON<.Ow C^o-r3 yabzT]`*~tO#NBy `\pt2>|f/3". Ϳۆ{\sf2Azt4I^!'ʘ˅?9{AK<]r,;#_$m8ތv[頵/\z7SL|2:2W}?UOpφ2q2{5 p p?'{pKϬ|*3BٚJǷbp~5gw..wO+Tу_>j{6>`_p{\־ڧXd%uf|`+~oE]"ZsY 9lfp˞a`m L3'43NS31x;7}9AL] Ǚ렉Tgc^WNIOrjvͤUS6ß u9?TD AWg<4w/}mp-Χf/k˅eA)\~+i;Zb~2^-4tfCt ƺIh6 L爜@sO_L껟YO%߆<$''y GۂÕڏXF ;u6ѕv7]PlwMl98 u +.5wo_xgcϘoW:cr-p}GOO4|߇70{nƾ3[7C,:e|E1O$v4Cc(uGNR걚 fk`qyLi}R/Y2x8.n  !v_ *c]ŝmj'Wv,V ߴH@5'=Wt;qSϡ=0eN9:i弱ގBYܝ$Gd֍"НM^Fg3Ws7K-YqrnGCVԭ֞u_ f<z0e^& FY!߱0^]p }ݧeŖ?`n!ۜYёbjfU=UˬkXtrl.Ae)csES&I:*]B>{7}wCޓkt輀s[Z!/:.Vzd-e}߯@턞(n/NNQpmil+*TZ_n'qq/{]05C;K׷~;2 5WL(9iĭŚ J~wsnUC:Qgpa&q\J<g}Jy^"_eaАҦ|>yq9*TJP<6 <HS04hd҆2d8Hܐ4du01"ʔ%n8;QGG <ˆYR3΀!5<4?t-bآp)&Lij6n1-fjjXM֐2̐z U@#Ik&qɪـ+q5D^542Ѕ?λTr/븉|5!S7"XMhdׅ|5{0iQNW6Q:~\$, ZH XE׼KA{b܆7h `w+=eksgX!*k7<ټ>G60)H(ѣe|V5zsL'}r0[>lpPAȉٶBER2 r:kjy;Sr&ieaHN֙qbzi}܇OsۏsffwîΔtG⮜c5x٢zEٹ/+6*fZ̼t}V ] F`;C>BPAaOpÆ)?,R`4X.x7JkDܬZпgHQݭV)1R68Tpn+)dCV] nȋg7U,j7"gqț^@@ pOGN VkZnt,XWUp S MSs#ӁI@xҵpEF;"׶p;[M[%˥OAyV>T [,A#PH@l$qʖZD;$ZA+ɺ 'RNE5вввxL{ou+|N[+7z] n} %TR8x8h6qmJ&ėU21ŴڇxA6MRDyRs'CH@#T=&$R#"h-pXydLbML{T˰k$> ͨwEc"`_ɵnI>ʺ`;1r $i!,'Yqp۰luC덷Zp dŗYVs}d(VŜqSb| 0 Ӗ:V (O7S~e`zrSts8xsW[3}ON.rFd]E-,S2J2$8$GL-b(4j 6]h~Ց +$Ϩ\\}]FUɃ삒sī+m0>5L.@&fEG uኊ#~t9h [9a1:JC&W.]՚n7%/8JenX ǂVCY1,J`CjߕĤf m2D"?sB!xAqA`,;־7!؞kjzs9c L@tx Zû8£>{zNd ]Cیļ^G:*򦋞S_~k=T:N ףT&ZHw`Oؿ@{Ļk{o[(QҋeY -Ca~~m[f-vwñ e{M捹+\3}C{^١+2?^t?Δ)m/S}/ml71tOiEO F=g'y s.z/(4BMكl_ +ѳ|oGu (=vx`|V9#}YOu6D6N|?ⷕ⠶o}sm757ҏw=} F8,VaB_ެт;^j+ ފ'd˴3+MؿB5S˜o~wN$tL>].TAsV梷QcJdF0-6|QڂgC&" =}C cm͝'\U2YI1ވK/)+L;}bI9Y-Gn.ZA`2?#h9O-ym(bnܘqÑt-_|3{^|;52J6Wl?Nv;#yRp%<x9G;2FW#W h-Ovu9~1?ռM҂ n^a{^&Nٿ6xBlG[CQIQԼ<4t l~se=?ƒf,|<z'@"as:g')Ox<(xwTG .W៣n輎ٔnսrSՋ_Ϳ$y<ϳoS1&xbwwsS<}6J߁Qm]Q>9RMy_MKi:*/u;Ln7̶873.ދ@#?gF܎9Wj,$MCƠÈAOέ-<^l!I~lW84%U-m]4{(tM?|X24D_rrr-mJ]~?q鷿POɍ‘kvCR ktGO %·TdV.qbUoR/4hC DN7y7Zk\nfO/~h_ +?د fxբ-X%nkJGMeX2'dkWpSEy`'D'7]uihX]pZvîE>Nֳ &66l%1Fˈ%#>8,:Ye\I5cugZ8CgE?62'a.A)Q=*۲-AOv0ڡ[z2DZ>.R'X8ֈ}zow:k3GD80Vw^Vn0vTJ Jѓ\bhtAr^0A4n8mvm_l4*0Us\J%I Ru&wqϱQB$c^C)Y>$©y{0 Qyzn[0RJBiKթ$I51iQ 2A)H)Tkun%}_R-$YSw0w-ؓ9iTj{_+/z:Ϛ(ᢆōė"luȆHHo<-IvCg }ijr#g-8$ p,+<<&K$JbDn ,Dnb Mdxʆ,DvXkE<5H" BGQ5";V1C{ubz}Ԑq.ܦY`AߛB;Yś;KFVKOc_tQ?4#*2p-6(΍h+sW܂F(;O!#.dϖ9}Hө.qX요*yK+}|"4#c@r kN1v?88D4KXɹkΎ>lB]FwۋKAV }Iυs Ohv/R!hv߾9@Q8Kf]=11tT]+l"r.4G(`)-+@PH¥0F*1'b*UZR8H#1˲ҧ R8D50Y:MH)D}D]\ 0hԛQ_p=#~jbg9I.6%In#RRMS{?Q0} P9FoQHHL[Kpņ /8j%c;9!LpS; aY \&L9n@RQ9;Ufy@3K5OV;mƏ/+lM|,=(x򥠍ߡKe)Z--1UhReu8zH|ՙ{q߀ oa8vu؉P^0֦C&>[׵G7"3 iRXb^ iwCo)@W : JFO7w)w47U_.ؒd=߭WѬyT` tV9ϥ/als-?$qoQ"9~+N&Ev O8%(Y?" fMn,@q;ZnI/77^nA?{~ g>lRѩݤ9Ewtޑ3z>dwuوx6xl~.4AN Y|bkRs$|^H#i>x#?tNF5>T*It=Ͳ]:쉝|~tޠ0 ̗ifNWttb.VZ;-, ۥeeRMyG p ԗY;޵t^Gu.v7%g}cLp7~hs$wQu-"ۡ|Sc:o{2KK_dzvp'CxVrOa$OϤĥ;I>"듶H=* bwb>G#嵍iDD{dC$COG;u ^|^sX|rn~ء|$g(H!G1R >Dv|,v$v\lO0O8v.O/CV흷u=*倃rzW5 n.(ozm|/Pqt'#;t듍_ǿ> jѮz:lyl' Th3VYyqg-!~Czed^oG+mpɞ^/~z|^_ Ň+.so{`9 Os8ϣ߆q坸LJ4LpKL/ 'Hc}-0+a1fE!Iqŝ /a1Z>Ȥ")`RDTRIQVX<D}4ҨA!ϙ ,0U=.ڬ<P΢A \ KRzaPdCRڔ$ ۥ)Y2 G H`3F.,A`D4W5T鼚lp!CF 3C  ֬ H¡0xuG$Šfو4kx p}/$;@qiM&dzh QM­yK6s㻃g }@4`eh:w4GC&>`NtIqE|ybB 0p$ѽ1X~+H!>ץgscJv(#B6M Ҍ..'CJ('|H0h`A.y$P̪7i'Xe4U.u]9T8N`/Fn00^ ;0$2IPCK^*I'@0C%0!-O_B0P^083q7~pbډ ]A(YAᚒF:)3M4fI61)I"jt8fq|يc2eT9bg H6F(c:x5 F &Kʲ0t1'월.X*X42h-B}ؽjc Q /ȔЊ"Š#iV[qñgs=6h}US{QQDNhGuͫ(5v +^k^`g0мf\l+X5/lFTſYQG+/faՊ-\3VK^xA@!`'f}2g4+&@$Cf G eem}K w@\}eJʽ>9& q#_e( bS5,qg lȨтy [t{S2\'T2E"sCN5h۴E .Jh:T$.z2`KL уc%`ĸ(`!Z}pAM5RiV2`ɀKZ@iJc0 1x M AE#W),àAjB7>87n:zp?C(siR !T GqEْeO$B U/PXhƒT1p[vb)W U:v}480grDXXB(G2q~A1_n G Ux^<|PC"F78YbBklEEY"@RXDQA߱wdCkbhTd3QCYʎ>8OYFkG6e .cHc=avuJ`b {^6dUb֔1f`t"ZSΫisAM$ BL*,@В0 3 >T)ERRb5ǔIfIBi)4B$*d!@DDHDHQT*fy"8' O{D}wt>A ~Q膻5rI*Nq4,<׆UtΣf87zU& LbiB: -J ]![7ص:Mk6QS!eJcǃ~֞ DŽQAǁ/29t{l>jI,v1ӟɮĦ4\ [yIcí2"|x(g~}:/DB$[~?QXr_ix 2[>|?EpxEm^UfBƷh~EC[-,f*"Ă%jA`򬉂6/k_BB8@UGQc5^wZ3ˆZǕqiӀiejt%G+Zpaz My l Xe\s{Ϲ  ՟`lja)n!I By''ؽ+FӓoCp&ann$\AEyDZ}Z(\[ t\"d^9(dA\]R g ]l[2AvIVLcDſD5FtI ӌ氿ZYH![B?[ї|ΦNo=|ʔt\%OyX=-PPjlMf\qwid!L&LkU/oW5eG:LS0bØ[:wlA ȳH6`Z-XU?cѦxQ  /I{$U,8ߴ:8,M%p! Xi^zO/ ((4wW༕vkĆˊ7ztt0 ? JfeQFM[D\9M<17$JPO״Gj`>DEl\C*RC*v-/?ˁ2hI04ϬYr*Fn ӰAcyzB+,@`^ h}e[ ͚36-Yt+fQdk(cZP 4 sb:K[~%lIH @KJǁD4FBN+5Y 0 Z߀:t-skX;`,H+3$o+Z5J@h *&r᱀D4pPlb4DHPv*~ǝiC,R4^79PeWX(y2(X|S叶A\7 Fi50M7U9a0/zK ' xb3m˰#uvglc5Cs}o)bWC r']Rua[ӠL :EfU`fYUfJ493-DKHgM+6#QNH*IS!L A }Ҥ*|}HGEf~bf< iw݀#bneA{ '#T 9yP>3tUm`s/kM@B/=ЬvJ:fS 4ɲ8J)C(R2pL(F`X tA"AK)tBQG@ ϟT_ wM;g\7eUeaA^%wiu~6VObDƐ6('d* B7![S{MD$e9L$YYFvM-)) \㢴JYS_{N"_q(<CDY|?"a>JO1QOpgU_7j0M\sfxl*C@Ŋ G)c='j"twZVn"@"@Z@D뫳(yD`Iϖ 0VqL^(goIx fb* 1Ɂ/JxL& ^@r8AdXd׾m_22ˀ j`7_p@6fK݅6(f@ҥ-Wu#z]A<21k%R2\5o$AD IPH{vJv}pT#"Y?C:,1aj62 |+9fr tE7IEpH"PMCꀀV*-Y+&*mcUx>ѻvL t*&1l{Č~F2(n@[,*Dk°P |nbБ@l+,(>TnD?e v9H#6G\C/8yh@}Wsi{$`7m @@%IJ'l;bf s8ռr)f]:Y M$??Xof1 oq7l:V^i+_C2%َ!;#eeb[Y-5S+6CȅZ T)y{R($kB"UK"iFV'5LD!2 cy;@:LJ#kFgfd2&À_.`-\ VŚ) i,Q GtClAsa,l4.{ qZU gtiNQ5j1 ',cWf>(Ag?`?{~>TϙS^l9bFd6ޚN Gni44ٙJo&˼iǰIA Rz!-\8, XEUUUQW<{dR篿+}jY%*葃S1_JZQb֟1FOf'RlFĆjxz1;1&)}YS"\i2P@&c΢X/OYen [aMWt{ 0zr$;m Ut"  AAFDBlO$0{aM8\gd~yNC`ͰAS#שwcs8ll|c8c!Dj.>S=i`\Q; c)ΆCIpԱ(1irT>0!WVԉc"XG=a@p@ˁ ېCe<tѐp$ d0bzp Ǣy0$/AMp܃2ّ-? )e/e 0N]vuB@0fY6@8:p*:mڐ؃zj^֫/9Ăl7_o!kzmW_gث{Z>ͧw}o?pK!IO񬅶7ºJD\=nXl)8*EuJn*2퀺o) [\!c]\v*k)۶1̸K?7-1s.2&`@oDa=Ҍ%g-J\_8r^> [!̒*VPQPF]DmjuFM|!)v%OG?wIh8fD/{{]`nIB#!~S"6f~m>fC#=U6j jLbh#I^~Fii6|*[@ò`mod%psڀ>tHUYb=|՛rZ؊`uaO<*vc8rIR%z6VþSbg%׋Kϸv / W)|{$^>*"RV`?e32A.5VBEatɉ*,d@X_&, ]m"(px¦Q ̴d_l! %u_smdd?PlqֲJb܂UBǜ)j0RkDNDjm I{!S,3F% ݇8%,UDxj߽3//$&Y"*zmYՖŰ+"?&~+zIF8qcYְ i>Q`?EtחvՂ%LK~5 sL*|W;S]4zOɔvJkߨALG܍ҽQ;D_k]x؃os+bU[M5F ՠl.(ˆ^^}|"&"\%b"=F\!Ji)[FC*耩.Tqw*o2hfw=5Xv岋ƀFm5BFXcƒ-~5:݊aFGsga>7 "2lQ{mÌi4p_d<^FܲMnp}V`PyYo=WOvY}(lSiKo|-C>tzE`UItQ W8z1NK4 ݬɒ楳`z`a*8Nxz1 < /}2 ퟺ΀043LfJSQr녛\2b G"msD$IŒBBNF8')_J*RS<#9 umU/"4Uڥel);ёyiTϤf_tfƌJ)PMmy!ΉcڝuVere8D" u7ȟ_o SCF xADU/9md$ yzo}̂;<'YX &H Y~3n$ً?Q"y}JQaC\N<ǥL [9߇-S)T3 Ay7[26BQy瘥GK Hۍbk>78dw5 Z~ ԤJ>ӭm46S'Dz Y:Q?VuԾ noԫAj yz$Փҿ{ .@RM(:^?Ҵv^+4ygU>;jܻ=|՟qIgNd\ Z/Џ<†ĊE>k¯*p.B'\zj<-FTQh pZH3w߱}rℲ$L$i kz:b!V#Wigta*kv={P<{}OMaqR сg6$=H4.$}<Ո95)MoR= Vy=͈u6o,ƺ|{qyy_z V_V-sQKY^HTB($I2 d¹GDb<2@E3"4(H #&ʏuƁŸ0g2d2=D+G)vG_~"X UgCvsPiZxqV|~<[~S7|f|ɮ \M ˧1ʯq ֭w > ~ﺳ?AxMn>CqS4!c:|l6{S۰SZ STO X~|fףiPj X]05BrU7p,u>NyDѵRxc,z>~s?#uEOqrM,ͼ;۟^y؈P(#6nO+o`> dLF߻l̈meA>*t96ݹ5<5=(_jjz5TcS.w{д[bEFK-jS](]-C{{긟k1yznrٚ 5P oo. G 3\u9.D??T/n[zQ(ZƐRw;*Ȭ1iêĊ| OTh M\'w">?HLO .5؊q?r.v6 |s@3`5>6;.><䑹ix751{r >ӹ彏87/F 0ҚPu<*#AoSށt?0`nBә = `eoTE買7K&q㜬q̘:6bD^Wm?q7y[[Wt)ti6?|qNUL]0 f`4/}HG݌xh02JYx4&/S|wu'S/~8^٩M^L~pQׅrm@iSKS-nЎ7Xfza{~!F5M/\ӣ-5Yʋ/pa_M|hS g:=mޛ7S!e֛-dX̵"LJ'IO7sA>LͪI;;8軺#Bo>ݲB?M 6{tοb[܅$f1gG7G% %p ba39(iBl1Ls]X P?]Ĕ6S_}ue Ę$|c<ctOd?hE 7]3LΐcLeLH0yܟLh}/15'B '3xN[X{Wet>;q%Ș|܇c9!kJ< C@eO].p*+KoY/Gɐ6`ԟr4smÕ87q9Mm[džԲc @a<L&wq 7z!;u^S9gp0~y-?q9;5J$rcfG p:CqzZ,>M/?|5NIοaŮ*I^\3ӿ,gϲS]? 1ޟWi˥/`6TnwxFeL ']߯|x_m_#=~\1x9{f`@ we{:cj;K>];3YY>k_.Pą6%a:i~?!=mˡb1]N\~`]<>vZ ϦYRqCp(?!.QB'S>t"ѻDz"1.1񾋰!1xhǒnl9R^t8 V2SȬ#&ϙwe}7sfcv{:|0{8K ѦE$rm)e{+2h9ݹŬ'hQz0c$  CCؓljW\;[xH8&Xdpc/? 5qwrK7͆STD 2Q PJ#T.Mአoo94W+{ߞהXəӦ Zog/Hؼ4q,S  :AWMt|ᑳΧ5$5T>bλi"Rhd>/!W`Ib^stTuk1_XDs]T sv3NoF,cLA6$Gtε|GY(*Tۆ][L*1 O|ކN?clZ*@.NZAHYT++r\_k} j?:AEcœcS=C>D$7w)ɉfSbܜH|d?{VGYGCs d\DN6rCDǡ{2NFk@/ i˒>BwqCqk4lʟ@ZZj::,GF&{UʌW/8=lZr,%~M\kjLD4 ٙ+ʴƖAh)n|3[2om/\[dV賟T ?E1FFgUo3nhoS$Ey7Ό;E&.ߴ- cYE&Eb`Qze۫Ghv#_'u+x&U=H|f?ܝA(bF-4}g[AΨ g`+{Pws/*j&^j}\lnF:7ʐ&\ݫ, `+dV"&ZX}C s + 58h@]Vnh rT- ^ch#,6l _6k_yP36(i(4mPEǛ]YR a[mAY;" b,ί@&\0DC|r2|- %uGsWL?-uɆ{ȹp_ #s*̠3PqU[qp}gM&~Ƌ9Ko rFSPpd$D<2,ιSu#'>0QsQ{ʙޢSBM+Ys=AZdH+ PB0X@ I8[}>w]YqL\~?d]{ &GKi4pUzwiziWSRU"P\U(et)V (z$5Z@7Sbe8cw'lJFZAW積&Ss8ժE5e:iIa DEEDKEFJw0F::'lU56݋}iU|!KZx+R2'L꬧>D9@4xl}G? b*4o7C?q# *Ӳ1)2|e{qieJpO [@m0enKi0gߑP]CK7 = ;/TC*<:lB}ͤ+ۈJBgNH qCdsѵvĢ*@9/0GaN$;`-`AQ,xKs B^ڂQRp6#jyuO|HQ .%wg+m=){ԧy%fb%'jrжto0Ʃj~{-qMa,:ڌC:Ӫ)Ӂ0 ?ēw 6(1ȎHfJC::+E#yԤ>@'cԽWB݋8$i8a3 djikKZU "t\5W%J_=pV\fR7:GiMQQi)-% [EZ߿^ޥJ)Qa\)q];yf /2AWgHH$@]2y[u޴eڹ`~Yiʀt YMw-|;DɀF{QfS@/Vs0e)3O̊§稛\^v]"FY;r? wh1vՇ<BpP ld]iYeftՒTQu5'!7m~^615:dzHJ1a R=0>_1(*"/z5M/CP(E '?iH9Ȟ,85nJcfv/Yb_L./ < {C]G$e wbG/4Sțeʧ|[h%׌UߌO0g~LˍhK999Aoiqkwq:h mn=|b߾1;rS2[f55`FlnNk$o9/'Ϝcs>;9*vYŔM윛K*72nϐ\mBY*4r?'#Jr"p$JF kZfdYids R$J΢BtȰ7a۝/!_C/G=)6n,{KQtBs9r'r,{O S+~Amg)8?TcQu23XJk̾3CM/|:0}m۽)Q˧=RP~@+v;;iN^XHzTsj'6I7|?|T{އ Kӳ}6,cdGJ>lʥ0q7{ oWe8x']zqv,7Φ<WˣjmPo&9vo.mΏtıCe{^ a?y7t4Q9{m "~%kG_: -ez3g\#X=H7__ ygp}ɜ$tfny P}~ǍALP׸wc GP^" 6ezm̔~hLa5O+iVb@]ug\5ÅpOxl.=.!Gc ̷=;Ki/HoL̊+q?evmrȳVz>n 7gb~r:}`o?$SH`c7˰H-n!#eܡU1~e сqḎ8 C)UYZлVd 3:{~⑵_dsHƬ3~R?M]# [shHA@L:k Hq CߓUnbʯ02x ~ymT@9_A4TRAtijmR?,Y}&\K2፫]mm lsx1{d]߫ouGh|KpJmX3Ѳ ci Ƥz{_0EψҿCj6~\Xl<)QD즵7CRSax00,Ndp9+G2~pT@f*!"gHĨvK]? l`-ߣqM2# :e`8F6e*j۱]x GO`xjt!w~:MwˠL7\m/"s"2<=x\Qd_ԇvfƿ).\k,s|3^KxB דdrAwGŧ›0o[孷<@A:PФ>s=3Mӑ-u;yE{ے+_d?3BPߺ7*vr`ﶉؿYhj̘_Lĸ?/Aam?LqMM};gb?fow\ N?[8Wg]L=,1ηi7Mj&g,,+?=xg>]-f()mO9众~A|A >!!Fkupf8i-o_?5FOS3_g]"#_?J|ι%GUrkߒy2.6ۄc_qntfd0?7_QUx[6G;Y_oxcM02-Nr~0؎ z_9Dvflcu8B0?^)rt3 dyގɛ#1 -VݮyD|@&f#4ځRvxɭGul~"0wc?$ck j:b/cǸmΟw3:,n`yX m`k74W@oQ+>rv k'~'?f|+Pyk[DyqFPǵ{ W>LUΠ31X+]-@g!S΃q3\F xཅ/;&MO= 'Ex +9aj4Z/f a fbtXp,"m/.hGrwNt1vxCf\ q b mP~S7on+)gs뜡(;]t5Qf-e9a^qnhgl8dB֦XWJo;w8emeobhhRzy1v0Or!p'FCPۚQMN.k1O|3)nq|=1;ژ $NƆa#d@<C8@?s o?/`m|q/#>}f3"מdVm|+}LŻgG!r6:i*7CyNo,?'lpfd1Η?>D6=8Gh5 m7I.3mK;fkW$B#?94 :i0y;%5=2-] FLjs {}%F^'OyyEaj]Λά(ϟsJۭ0#. Yt3 { wd=àٙ[fpu< VM\o.vZw$پhOQM08S~#Xg3v>gej!p5,cW;;UT 3mH<0VYsq9߸EC,{ sŭ;E^#".aV{\"]Q*NϡyW ӝP/0;paxCZ8G2 ZWQ1v&oK _]6=w͔Ѭr-y\zOfqtv#bq2.NjZ"6rKsi}TKZ$٣Nk(4 啖ceE{Gl[o5֩~m&Vsϱ>@8i|y~Ki1~]sQV<>Eq_L;) ./آ~ޜ}sɶPYY 5 9\>![_9}W]h.jdG|S?#*-QM'S0_a ->,܎ώvOi(aΡ";Яo=윛ay`zy9xin8W-|ݯczmIPiSiP@K賷nO5-&񂏬Pzc3}7ۡ(|#r޹.lw8uLiak0h?LУ wCg,<>*L\p'|aS)>cyd83p0l0׺4G0F[w'^TļDo}g*$wWrZg7^/C!]p-? u},ԛ,WjRdL?#ڋv2TubnkP]({mt_hAˬ 9LZ|44,ɛqҚgߋɡzf `w9o E,?f j*v)ci{|Hw>;3]΋CޱC cozZ` ը!֏e|k}x$zl'PY%kÍGkzrF4*}QS:&yl ܷ57ƔO#}A;^!=Ӭʇ(1~01ܸNF+r  խp蝽 ,>{`:漧; P*ރϴ_ytwS^o#q5 |̍F{o6jx7o3q~x-=P?[#\ij tq_F^~ 幤2MP?lޤ`Mx,H4ub/0PÛ[4lz0"xf5S _1zJ'}= 9?l#?6ceɒ>fTz*KG l/B<xN%\O{˚/jNMRrWןR5֬LCΛG}%.//7ȯB]p vJO` ?_@@o>PVgg!/@м!]6jA;h_:>puqMF6xoA{){f7vyox͝G}42i5].S# rA iMU[4*4YνЧ?iCޢL%)oKIj˵f(<[j(1")gT6 P.,Q#Ȁ .'5xTSTe-]{Q,1J 1Ʒ-yz'8_uKTe TJ^@dzRة'zljJLk&=Lk8Q'=TFm܀d5Ĩ:zF >Tq49mjQFV(\žcn)S"c-1' .)JO!Y)R|J@h h E 'QktmdB ![sCM&5YRM<}qP*N-d+y5~JWN2J9 +)[c5bTUJO{ cTwtt#'3 qNw6ۼew(;0[}C[]pzo"Ec)taݾ`(ݾgY[mEO}w2]n?)%16c.s°b\.\M${SՕSPX.Wgaآ-l i,;f,kbʺXXix_XfWZVT&XЦ%,GRemEQQ1-`̟KcFW\U4 ]2NA\ 6=UÒ'* {ﻚbf/\cܥsȰ)]LnYWdyy5cLfUR1_\HJJaIL<])%rWh &)'+ n 1lT7b^R#XVĺ:%˱.YQYXY+lEچyqYnw[FF̛XSOYX 05b E-]ׯ[vӬjDP1fbRuÖ(oZrIqNTWXSR)iK̕|+'Cl"0JR.[4MTQ*(.SSȨ.m*WF_yldn<~qW"#]d^L.QϱB`b׮Vfy!k ,^`V;FEeMud[vPWH\_ĮZW-n˖-6'ےˋȼ֋iD~jklg>rC٥k6_OΒh>lWKEYE4`-6p@#5 KÕ:I,\/bӪ e#B?Ĵ@&pQe])=RE==bzĢx=6K}c fqFQU~mˆ8Xù!Xc.õ.ܨj,o@;67'CLKEbCtRح*ȗjoU;8=P9ྃ33&:QwA~d/n̮ XCc }Қͥ۹.zg6*& f7oo5^Y0| ZCk7Ǒ_ m 0j[-l9vgt~%}^/ThybGP1͔BCgXy+=Urb)jPHiP>^)ca|o^R >~4abd'Yɠ 8y8*Yf10@ae2@ \uu"ӵJJ ҘWxJuJ1tHF[}EQBS5 (?`"564XiuH!vQjʈ)ܠބm fC: e9(@贃Ai% K*LB<'0&!Af~"PҠCk#?[L~qCƅs f e &nG* F@/N\Z#.#MPZg-~p!@LxlGi8PBO(A( < Օ)Ol$Aˁpq q @#Xe|=p] ߙlA*#rE$a4W\ڲTn<E`2InHI hr5օ$'kF/ Il";TPaK*Q`|J@+7,<`<1df`n,xrTr S65\ ~҇<ӂRҭB@u  ")Qc5\\``lhQt  F`:R@ft#Ȁ !rvhhal'B7G-D3C YҒX 1>Mzz9dSꮒ`<`VIl¶@#:M7?=^)1#쉆jY2pDAqID  $#`e RxȃukJj)!@D2Aw|P;ᤋPCT4yH1rDf)AA*r/T l Db O~Rs"Y|!AX8!JAj|lIb#K<`dwEbHv3I_WGo:EI$:b+ yqF'38pHd l#Fd5Ȅhf@;(J&(w+D`A>I,:ߐ퇞,pz* Pm0\pݍx#΍3LsEW"@"d1J7Bz=`0dKf\!f+[8A -Vg%ʂ?}_:zGD qy1C !R.&+ DɥM٭-ڢRDLgh-@$Z@ 6pk[Un9zЋ+Ux-J@"5bgNLl_/mϴ>r>cTjl!y'p3׿j!vވ#߼QG=yi{׹3t<{': IWlNww}⏗DnFƮLohF7oQx߸?77|JN=}Vx֏xg D8[_|-Ni\^>}0["l(tI}89&I}zH>ᮄYgV&d#Ohf} &9MmAm2'v VZ9pts JZ<8 $!FJh$,xI܋dǣ4+zK/ڒ->hyl*a6.e+%0.FH4s8u>L•8 z1θ }o 2Bq'!B_mgpîY EsZʞ}Oбxpb"$ &;p5,Zxb{Etᩧ3(+UZ+Ax[pFj{H6@# ̼NmJ,ꐐGL!4aW6b$ r.^C_j$ hIP!8j "e`b AҜS` y>nš#z4q))š'V>j<7<7<> _K=CK /.z}K^b vs=)k%:Ū]P'h-1Ŧc:%XZT͘ߟG[pR/u"<|gP;{{oKsKT[uܖx-z6wߥ ^fa/ =F ϖC v!{#q:x,c6|blUm!|*OR©8 a^!$Rƍ_J9bWU2i]|c7{TcWx1;(˖mal ޑ)v04*Qxs 1,c9JcD ƕ5FɆvY힛i+i" ~`Qwa}, cTBa2G>aN ,+{]pCoYu56LЛ%8/L7|R% p4h\6t5B14mf֣?&"`S{!2zB6^ WHwwUH,x@1=BYzz%rB_ElC+=ߙ9=KzRȭ_¸$*kpGy@bSh{3LP<r^"v&Pڤ{JH6FS)'1,%(u‡Uٞn=p[(tFaA&tkR=y͜SmZT~sx"έ{}i5]V&?:*\iYѬj%.`L,L"ºbKE)(TSRQ'L8IKJIHG#&ӨRP B (LJJgGxcSCc,xrޞmN̊"OҕuL?#[%5D "w|;6쭚vֽh7Z:}kM@@PkH>(m5 "r|[ur_ҿe^`bc1212m,ťr\> ;SۓB(dKԼp/-f (Pl|Px&. n@QMmFjh`@K1UlEXAc@`j>/$n3 X =&:Ђt]OٳTA3ƫ 5kc"YahqTF #s5rI"v5l?neHNk<S0ރY,L( -Krf5MNY;) ePp {dg頏IϠ$2x‡jDi*o A l$.P)Fd>MsSyS_<:cpr֨; OO@ mNg9,+!wa:oJGg…hs3ߦnh6_<{c'zc2PA7䷏8\ cF:AFEZG 'f<X{ڪ6-MB(|]O 뚟:EI7 &!2EMME.jXmb1-.B*2䣥y"YGI/hЕY&h͉ 'jmߍ|w&CUqP)D}].MMGh(Ob"ݾ;俾#By1RM:WYz8 \NqĸO k"Eʲ`RͨQSʨWlE%J5%]y g5,ik4EE5E%u,-QadG.U4֥N(]m_bz1]\&׊ 员2"jt)Ƹ̴[.!+6B]oOWW,ĮMRӓєJzEd%%OXhT )Ɋ +J*ŅEj=3G*#sQ1DQ|_Yw:= ^czs3;ңAM#A mt%įPCex~a:k Ϋ-]./R0#&zraTŘo DZ21odp 64UIгdY:_;[V\&q8tffw,fj_p>Aeþ{uPnoJ#e|NrSp{[d@kgӅމpb"_9%:"Ot1geiU*]V_:$GU3Tygܪ?f Ih8dr8Όxn -+G'|B$Y(d-^40V*D MOsSd){yP1/J 9%-9e͘P}]pO Cl{28RbS(!DCbrG)> N;#[='#q&#gs RU>4'iY[o0 (7"Y9p>E/\vqgJ;{ʭ(3mWZT:I %bQ$ϔ9djQf*J;0y"*=P1HwCcFZ-lYqGmd=7'}zSLօz3,@FCko Cj5V~7k #] Yo,JREs'}YK'm=ӐmiaCv[w6尣Ps(rM*@O mO{nw/?e78O \`P{$$9uH\oRR#|x q@Hx) *WSwƭv5\zMݒ`?RqN~YuGgh:Ȱ35iQ'% S"n4I(wمW x8#^R)D%[ ;M\Iji>0ez4]Xo+"^,HGߨ`g4ix" VѢ~nHj!hIdƴ&@{A|mXoIYƜOJ f䮯3Cz剆=)ZLOKM;#\u#߼?}p{g,uwbUKk@`a΅UOAH\!s`)>K{\7>"{`6\Rs3PFfDܼek^FzC\?VW_ Ïr.qh&~lr[2@<5ko&+I!0[ %g+ r(X*UnC @)5f6ۥ)sXNJz-6*Z2XdU𖅠ri6I@B:7 ŽS6WZJL2y$cҘc+~D1٨#"4?{%co1 dXR&5A|P^E\6%jpN47U]Kj#QOG?wgB"eU);x}n3`b2ȹ}\P4}K޿7Jmp^ uJvr?[@Kp_99?M+گo/zڢmFV, yMibclgXHP}J:As 8 <+f"[[ AHZ(HDIN&K6A{1yI@77Mdi0(k>ײh~[X>A3N֝n {tjfvu1d3Fۢ xU@m ʶf^tU 'y'ZW"/4b=TT ;8XG )^`}申Mtd:JC@V+]\])eW"4化Џ/ίC@,BE+;W".N!IBȒ?Ӫ"" B6֫vΝkk[nv39E0.~a1ac䁸 ]}/,lh6ᐑm l3@X}x %r'2+nHP;Gk\Yh_yNFaҵ~͜z)Qx=':npps)v@nhEՇcx,~SBEs$t7&iCgK۪cGӈ=y+3@J\ihmq{Fg),YeNqW˳ +Ug'hRLiHMv?YϷۍ$Źirf'?Ш, ECѦ0ĵ;]u8RPL%Tkp_W;' dJ؊þ/4YPx)Q\s,5 b>Hq:b 'O6 b=1Rh? ?cz֧#l %qcnZӍWpi|RС9GC XP am~:z19̏&TE;EVجܲ )ioT[CI*:RFIƍU hS^2"_es3,3-)s$ u/O\\/kכTS?Z 9™ )!ZgFZ c˫sdҔ{*VC; +Kpi97oԾz;Nd~5OhVt͜؁3|98P¡Jb/MB~b$r}Zd"'Z.!N++cmDhJf;.T,;ά4].ir)ڿJ3Y(m"ɚZs#ܮp}\*}IY9BZݟXlpp~yɯL- +mD s.ϑ]'Y2j-Ɋ\/-sr~[R=C''HIr2)<Hnn~{+=wCi9'oÓfGeBrӔJ%?Ӵ';2`2Cџ֠f'Yi*Svrg7Y+,K{=5|3 laU2e >%Gz y%VCsxoZ w w-Ӫ9cI_2rgHnLْ;2ls1wUJ/ 6Q(zShos|fUq"7ï+p<2td~]weӰ֬OM.2 sW]i|ѮG-#qS7O(y뛗TJ6Zͽ?uFN/ضDUx٥/tg=Wx~÷KzL8<7 F͹[L7yo{Un2==0~ۺ}u:zUW*=_-|\Ra 0ZVmazjWАKy{i0G!*C[ϯp RMi۔G<:W- tNِ ?NdMʾdcϕug*ǨJe tf~ȦB׀} EObX"ĺ[e#ԀIs` pf:,T| ).]'ekveie/~YrEgPz7y7'ǞYCs[61γDEiDN pszO is OfMIp*%e~ xR!c>]R3'fGwQ:>ѕNSx2Q켳Cgȱ'O6h0n9&xka.M֝=Zx;;XQD7#P )ag[x2p?DPn|]eur(lܺDU{1{m91w5u1p`vN^l ѤokޯsiӱVԇXƛ</zx" ];ߛ Qˡ&=|~۠5֮)~ť#{b.}h&F6"|ߠ=iz j& kF jޞt(bsxGeBI >L9"K/)luRoMQB$EC)pcOS*gRih2Qrε? gPgvL}0m> L@?$_~T_ >܋U z΋.2Gu$<-woom)-H< wj "~L$[xo(=./̘^{9Ē~dYOzw>b[@> >$@6i&OPw(Q_șNK/|Og`1:EkNG: a޵1́Ѩ8pB~j@hwb3OR6%2qC~ӓb'ݜO:X?_>6?&T^8yuήT ?Qކy֯-U}7~&׬3]=^DlS=4%mfׄ^j;}Y׮c */m /Eve4_XنFFG%cxo'_ݥA Ӽu6 Y[rM=o uÎĿjO.~a?^.? =tdX}9?eI_% ޟi2E&$}kp&EkdܖƨCkPMdhGzH;p;\g& km0F=2qOo6aMq?|$,@pon5@Zg(3;) HͧXMuv<,ғM 3#a~|'9{Dtlj_iXfINs)aOo ޙ7|H?X1<2?5q=9& 9T.xHܮ:]w[f4݁JZ~zBw+{Xs}Lj>qb4G->3U^D!l~;9\J&F{Ick&TBPxnxqཅxΏt:$Og{8,Ӟ^ p2Axx;,pMa~.? R/|m ԑ,a|o|]M8g2l{+˪ԪN#~XCbe=@9Pih9s>ficRƙ;岚zY#f'6cJ] >ֈ;gOVxրmJ5cvduaqD4;Of[7c_oڊzjjjipurթө͡QSOǫSSG_NS]_]O-N^>z>z=5z]|zu:|:nKS3:}W\/q$9SÛiv4ZxDg69^><]KL͓mt*۸体^s EU &44h'>%^^1u2Kg2GHciA$].B-4i@2JƄ4TF@zƌ##I>iIkqGyheV| ް Kk]RZ jX|F-;T#GH){pE.fɁ"EAq@_y[ $ 'NC+4UGj 0%0"2lD-4_S\~ !DV-#:#qi[+݇kYZCi۟gNȎ&svrk`]oGRv0&-Lr)@6uA[1-ଔTnV0~R5cψA`O H"ݎap ]#p \n`~,V+ZH GjoG82,flYEQXk`K.SJ0rp;F 喂R 7>N 0ح2:m'SJګ4Ѣt@5Mi-JM_wÄ]:5}uY7iwlVmk^1u]#v"9ME^kxWi6m%AVj! wG;?,]9ob s NK`ґD.;M%F9jb ƭ78M0D! /O6,|bb?L¥m fsX8Iz9D kԕxQ ŊHfnݩ_˖ ?nnZ([jZ03._D2"YU"ָ$eprk^VO`|s纕1eNg@uLB,c @nqHs8E>-ުS9(tˬfh|'pg9_81&6X!ƴXg6x lNWA.\9fQ2*:+c >G0l3EG ,D{;%9co"ؽD׮uov(#bfZեw=5/pQSFP zKS+'ץu';>cRr:l y8ynӳNtfo? τ旺A! Q It `/I瞆7zh` 'g ?>'-Ks(2.KJ)V΋2m&Sz2ɻII;B !J 쉇!O_V(nvH9,l_:N+1Ŗ\x@\Q 1]zn*>=|c=[&UcUn 6w-{p 6MUbru̒  dĆ@AA}KBŚ?sޚ4YgW8t@e*cfYQ4ޛs ] È+,#ck A!94 nZZs=:{דaP7Q:*^9Xqur5SZc @n8;A:]yXkis c^¨-oHWMsylJ|*B¤P.wxrW?/OA9Kj+kBByqjhV6C=5z/)M.IĽ~h'#H5UH ]9y(aQ6.lpgtae),'+_7ITVCbKV3o|BA<{H\Yyz̮Ԇ#Sl,}p$vFStI ^ZbMuRU噈-M KdWX{\4 ch5 W#̯@ߡO_6Q&2}B kX/3= tF!?@%$mk-ÐiEhm#C8 ds9΀N6bDmWb%}"smkz-pd񎁽6UEa=෭YY#yI${=e*uΗ`]}DVVFrM/Zf({#'8S@ ov[PndG{{.v"YM˂ m ޭmNu Ƅ.L5VΨ]YK\6~8f^ j ҈stqV}/oSk<8cUjbϱ.p|joge:t,uZD2U$Qޅ 5lmQn"t;w9~f Zgk+˰6shuJfBgޞ4=z~wN+.ݺXVSejfEgA,̐<Lvf7fN28"RXKm5L. τ}eX.1~aӫs v -`:x^4 &vTŃJ1luP7VyMMݓjZ F^:ys>eC,׶K WcMzCyöc~ǻA 8 :zWz!g!˯Z]$ú˜;rG=fN (g_ejoB[wstl擩<[I~ж ZjcVVgmZQl} O07Cr2%l A)K5 eȷm 3-X1ui izt4 :Qbx/2JcR Zh`oe28ץIv)l R fjtJt CYnt!6ŋFnv˄l U99{GV,ecȘq=r"?WjEQ ؎h\4V 3\8Q+b)P+iP߯ ku=BܹnȵdK\ w): F\[ @,[H,s&AWuu-S}D~-t"g i[] f;;Уʫ~1%p:A~ٔ,oNHjB#66|i. cp(T}.Su6<5݈5O (R8Dw ]5}Ҭ I$۷@U/306vnІOk rN0;$*E~$'sY]EFih3HN]ҷ2R| NJ}\0R&Gҙׂ*aeRE!1`$'-I="!'`LmafogU9zU,whmrd=FQٯ#4` r;Ġ=b 4[qV+}G1&56KjdQ|qUYd{T(n\5bw@e${m9aǏDv[n^Bl{XjشN94[^`sp9+VLuA :{몀u=fM݅^re}}Ιm\. nE]}m`Og|: >'!+s>80EH97 ҥMu">2=_R~K]I/]3:GVJGC8p.]P"+ؠDu v]VWgZZ1T>A$=@}bPlʠhUW')?=R%ny;80=|8'򳿬͖cn{lޫoR?z$Fa[/* H=F{ecM[:}w#{ "%_Qw9q>@km=vi 16G6XW @ I?LGFXo~7~g< 02WճgUk'(ǗoH]!zeoH|m7~s\Rw=hs)@$DA>Ihmw2F]x\1u0:9uy1+$Oĭq|0r/|غwO^݌Ļ /vݒGq¯m/]||eAB\ܚ͖oksz,xYK1%TH A.6[#tB?fg!+_`DN;],wl =j4l32/humMD( 0 Z # LyX`0 w@0}wOs<cLÅ1y)p&z GnL?:J P` A ""x fJBW"s݅"C%A&ȷ0DCʗ]*0eo݁!#Wap&*'c6BVӆyy%J֭YnlAdsB1oR$w{kXI^X3rm*3ʂ1Sάw"y lɑb^I⤑yc\O!/GO>~7B4Jmqj)Ea>Yʳ7]O#6&i ry~xsq* FB6R]+vbZQ!Z0>۔5#9 >lhXJ3CEye(H?EJLGw7&QX b& X hZ$l9RLhZD/.9&x6\k` 'n ы $ۺs`e@Oɏc%WCWne*wx_frߌzb\2FKA-U;x0rLse[! 9Kڇ=m:^(@w0 "a:~V1X2]^Jd?2?_'+7[?Ipt8P>l[b97ɧJ l焫?' hhDjbt$GkuJSQm0PhA ľpBY Dn&&?J%wo5B^G-oOS.({褉XcSRH.X^g\JE6 W?0h%l<{r@F(]ST25S-,z CRyVQ 0m\-BЂWnA7%}w36|q'cŠKL:]E%Wl_+I|&淍 HjWx~8M./<VLܙ6Л7 0)Hп벋9 UC}J1">E?EouZ&7̮hI<~NlZbOlN7 2h~{N $l 0 #`#ULypyĔHH8359s.u - "" 4c5dfe55.gzWKs6W8ri3Ӄj3Z[Ht:URA@꡿Ɉ&k}-QzzH.d,>` w^N_OLe5S#+ E S[9sI-B@ig߃U=z_7Ub.6|_J(鼋s]̦[y#[_qnMOON~ |2T X8;|BA4ϟNx"c[Οm ͼ4:wr^f2oq:/nJd fshŌz2\N3@F bw"rD& zCx0~yeCm2F"APoAU*ø ޗW'U4>7Scȯ8](/d+J)Rfl1ZM糐j+h6pì4YV/ENя/!,8^{vKׯ_Dbpe3fgq E Er/&sdvt u4M{.pT}Y"h!CBtE*cvOF2DQfMvT^2:!/{(؉Pƣ,u(<7+Onkv樨+ qL+c) b͍:ӰZfK,cul+"-*-%mjdN[ܲr+Sv˙萦Ir۱0 bVj+E*}&Ǧ 4%0y," {DQf!N1z75TY€ʫhIeKR%fM&M+:o୓/YzrYCN1SB{D\r d(!hӠ{3{b9*' P&fcd=1>Nc])5;j3wL;uxnYL/^,imil_z{zlLB/}tħ!mjkeqPɡB& L.Ac |;iUy_)1}ٟ5033d+WM3/-K-J/IKK3Xx66b2r+0:$NFܤiJ֑=$ ?mr(x#+sB"o$ނNhj[{X' Uvsz|$UܔB1I-lΐQ|do){PaHtA!a7Q6&Ԧ,5-F,a/ͭ Z9ZΖd .GGu ZBtO{FQ_oX||!ev>]-fW<$ڂX, -7B7 t_bQc'-v@/$JP`9̈wH5q4zbBfluMl2?gW|:?v uz601R\j!ӽDrDŽ 2=+[ mRfJ8}^Gf` N{T('Ѝc>jTF@%WB(c(m8:Â[0wXfS͞A.\aB zGRл ق;qm{<ݤI t(VS2fqO<:3yҩyawED]澡!q.Uoooj j巨bMjBPe@OikOh\}I/`rz@g4T(Nz+2Gf+1 cs?>ڣ$*DeCL`MuhJ` m j/A?aOz2X蘝tK ľYGfG@eZJ}βƴc\a ^|ͳ^ZC0]Ci9ML2KI!.̞P 1gڳBKl65*qL}KGCf=:z쎵CB|`Tݑ-#C0Q.JTSm0퐜ZQղŭIadA+ݍo\lSчK+e-9)^%cƪ2yM}86M-?tO㵜ѾWn]̮?㰐%ҌR8wkpQd=H7w LhJbJ "$ ?tXY0LD G^ ZEz[bT % ǺA4m$vaO?rynm|W L|;|MXqgݭ ;0dY pYBv`S ,E8x3̋u^; X; @f;.\'>KW(Ҵg[j?І~[Pף)6+U)5=2J̣7-OL 8f4YT ʧ=0E!1!!V@)"( ^Rf_R|p7z;IObP*5ܯT}GLNvͩ][Ѧ*)=Ř?V\d)F%/01x-t'wlP[zt=thу 9A_Dקpȇ>:= VׂS}6ֹ0c- ?Y+eQ{%HAoѾvkN!NxT&7e r!%l1pa")TI!c\0q|6]=4877>*q<E^mJ"iM`w)N>a. ߌ9]c_51XFR|j*l|[[k88/,.IMMO,I-OL+N-*LNճ,9a71bYo8õI/cX,Һa;w-"%f#*IMw!y46A8o3It=yOOIpz>_'a](|&iG*ͲvzO/9M[3قm XC_1Zސ#%2F !5[t$/hc̵.:i9SM9B:;{{[u+ڳ4TFs~:sImn6{L677[m\{)O9#a֞vH+ F_ $f -SM!35g/h"NSFŜTs7|eK4OxdV#HM2*g<'"OomEa8$8?`7/ef }? 2u<.!k aLU1'J a7,:2tv>PCPՅ>(;ΩgC.^RIȨim`{2 ӻp28?6`|861"PX4 Ŗ#Z\`@qUP<_霂\W1S!AYhѬpID( hJF@0 L?~Aa1Kˎa\|36ޘH) cnDk7b)3H^Qb[s!{vy̠?=Whgȯ2ӊ@ndggw{O7{;m^gw̅9o$, L^Uf6PQbneo%Mw3̬JCP _ 6"\(]i:PˤQ 8b(솑)4 OTJQ0f>4˻儻@hTeϻj)Rkhȵ!2%| [),(uQˆ.rߑ6C%k(ZS 'xx%pzƒ=C1M*Ajg; |ŸHuIlu.p&RjV"]I_^hO&Paabe1*cc919Zms_qö䒄,MO蘩$rqjx ~UtPL(6yCXd[%/AR(rs"t{ iL/ hrC.7͂|ß0*z1S b>т =z\J"e4EP4忰6e0P*Q2As܀Ltd0d4 00{L+NKkoEo¯B98׏ބq(|'YH镉$pVHQ,L5*i.4@q+Y4ݒ%7z.ɋb|vXc駁7} Pk1yjG k}D#H Jp1y6ą#D:ٞC%:kK. 轜_U'x UP;˶^_+@lc9"ixKk%R=GKVLAx><ͧ831k'Fvc1bURV` jt˸a~@XJM5L1> yBr+ C9xۋ^tf)0d3}t`SAzJUYmdFi u*WE*h ^^Bsۂ7f/*Piw齃XM{}ʒX>WBH:Ow|Z'X5dŮnԔfsk<@iR^5~3jW]Q0ݡZR'd/-@i?28]/2n{Ƕ/;G =" )!׶O4NlTKEd2`Ys͝bP7ok&ޚVR'j:~o_L^i8oE܀НB#ɒmE0b: !2M)4`{GT%P(#h"im>{UL֑YN'Ll_:>lkOJT=Ϻ9c+3 szvouOjrwۑ²%6A$֊K$ύjMB;/t-v lagI| ,WA8rK}u (P%P/-9iK*Mu.hJT*'rtJ*em릳z%%u{ض `idupC)3t~QnFŮ~eQ>5v1V Psw.`&Y2X |]d1"Gmhpoi7_+sۭɝ%K~u+GLVIBtB8ggDȼ&XH#Y}(rc<Z 5BZ0l.^*ݱPkMդwERӺfl-  kesL`Rtz]iF\\Ǣ۵RnhMM3PYp(Lfm%5᷑oTԖJr l6<g5k<ߴw#㥛f~CSK*]p)@wod\hDC}QNViNԚM'* 6 Qod3 [޸řDWC҈٣d4] pHO #Jk6ظ XTXS4w\Ak6+bsB3j@Է=á#]dBB]Ϯ܅(:JwufRN:߱\ bɯPAUVV^y CPR֕݉Nc?K{5G;oZf#u"v G~YEkx%ۥFw`wXj AʜRJa<&`Zx |<<7Xj:} _).OfG {>ߟK·4|;~5oOףEA䌽r (d8e 8faY{o7b`'vn\U@F=,"Ԋ+1هBr~3$!YN*9g~3C?`'wuGY]0_sp߃?ڈlGGͷT9O;2-,BXtryg"]d2|*Si֠M$(?c,Y i9LL%σBE"`vx!oD0YU$Oã0/{,M(4>B?@~GH- D@R##Iͧz97Y/6ޗDvOQ@*WsC,3H %/' '^Č1/{=<=u`,eȄ|.47BYȅYꃓ5r8ƘQ%3F+˂#VO$,TTx*'%{x3Mqo Q?Uڍ9oIguVψa+WyMFIt ^O`%͂6\`+p] S@ +  w*3rQ0I۱IQ$:GR )Tfv h-e"-Vmmx#'I, Hy\TxgHC|%[qi춦hŪzb ͨw2:rWA䃶?tHdDb9THYSEZIGKX!_TLqO(߁gC9/CAlyrj"}SoGëI3ܾ =v>ۄ=7W3e_{5Lb vWB&MiaUD TQ8'U!kw /) ! 7JjJj?8ijS&{#=o+3FUsB:wOB"= :RbƥRVv PniPR4l;ASϡ^ jR r3VU|$|AwZGXyU.8-gdd lsZ wbӖ-3Dl Yu6pU7=P’c*tyݶmzZ}|X-/UuXfhvՆWԡN2OMUP4Y#[t 6K*x#2^@̵:T(KCо+=P;vaZU)+[7ׄ} h`,% m[&aVvj4N|ԛVn[<~x7V,jEe#)SL-3<|o,V&,.|)R+ם -aA//fڈYڂbݽ `m9cm_;sЫ{.n$WzPW$ĩ tvL5 h]UP/BaP4\*y{ ¿hh[7FaE{O{19_m|0 qv1wBܴ>CUFIJ4]<6h-BmF4%wɵypheaM;m((P$Fh'yx;}}}C0j_C("6܁*XiT;1%4*Y@emPQK6P{"294|TGնW!! mci ƭb)r+I?:%L # \*9fJd*+zm.-B#' GjA^@/Y qڀ_ 7 yHN.V$ -~eUƔ5t|a hs/Q(S]7,=D{ 6c أD? 3x|{_1ܱE-CY(z4nӭ[kȰ)5*O;R[0v$vj}հZk W,R;;mQ% .Jy %.`FLԤ-ClZ$cM6$<Υq-].$3&2D{ҸC]f݃_nF_u]AruiȾ>XmqҪ f{~'ܫ`E)>{&ZIj[ܦ,ći,}|K{o۔E܀jsR@Y(ʔ^FID9dA8 6zxy MoQO~8o֯~bú+ŻӢz&—p{uzܶ9^؊H203d15bf a:,dIS*  !!Hq( X`;=>`WSb5b$e\O5FK!'0ݵ B/qcM4hdSzP Sk%X7&+0HJXJ$ %xY!sAjttٺ2ML( Rey`Ubl5sIqϜq#ȝ҇} i{ 5=Nсtj@N:tRY:9 g<8+Y]34pf:YW$qߜ)᭳Wh,wbӼ8Pj۳P:vv<4t!E$#4&(u,R~>Z,Qt*̉ax^3sj%To=sm.;Ce]Ɵ GMyZ() DGVl|$*Ig[|c <0_3'/@<( h41TIڠPsۘ$c, $'1_`́Fy =A uA(9ɗESD=Q)P]Q.At6r powBt9 0KB vr+-kږ{(η7/،(69<,ϰWa]?,BM18sd)iO9Z#;R^QG]>%Xϭ5)w:Rzs#\"c+NX 9LLW)o]hZu{8*',-.pb ՏҾ:+[wCRDT ,oCޛVpY!rgDgZCG" O2CKjaU!PnɈ _v "וS+SZGyx |-Vx&*z:$c]DFK&*oۗwYE˒;9! ɘ !:+ Rr ?@Ag3_u1L7Rݐ\ 3BXsUՓ&xONv?lK`Y=^eG~ĞѺjwqWq{AɈe6[ +Q߭SnctMWne a!M|nْoJNh'Jsf]> '+ׁ ?S{EQUUL'BmC=Qڶ :+teA x`K ҵHIcraHgY$<€ 22 B#B1b#Jv B%1VQ-IVFuG1t臨SҿK j/5hf5z#O髻4:ݧ4ܕB"ElIԛYYZp=?7U8w(%r=r%w/r'WBI-C$j $DJuxgc:-D /vn`}{^)~j2ڲ/\!V>RCz>=V=3QxGJHW:! uw#`uU 6ߌ^D1|[9g$R' b`VʩKeODq7رNsع ` C18y}}|wO/▢:q4N<TGvB!.څ ;/$nѽbCo"aw nƂ\ZXlOAkN2P7>0M r=4ǟm" LvEj@.a\PZs0o~qZ$Sح %mhaGӨ|-QIqƪ[(;$T`F$ 'i`X: o(3?<%G+p(M 쌋̉:~<ǔˎ[#JNLg[23.@fƶ`.Ç5b vu2Ƚ8 ]Xvf%#:p:?tYL#޹^azp*4#e@7/o; `Cs24ʰO |(Vz'$ R&d4C r!܉{&Vсf!h# z; pޭ[$tWڠrvR.<0ziH|/2LOkOr?BuT| Վ8R*nb\GxˎP_5?.D$2!F=SJbf{Ä\Ymx΃1(#r+4q3 2ao r=gOƠ,jVR!rPy7V %n4']9K F^QR7lTFF[c0@g0Cb- :> Rd7 f> ;왈jN+um"R@ʹ $|'@jdU$PEFn[}qRz9'p2)#y$Mb)0W Neh=.aj$,Ag0Q8o2:1r#{(o 2'x` s=! KQn#.+qESAU``g").;86Uno'h#iШRrW~NM@#Rs+f yLzo7T׺kFi,Al7WI4jH8Wla"2HJdVڼ ѯZh+>| Q+E5qV=W8Tէ7y(UblD-ƞ@ϭ86.af|Qő%m_;MPd1,_t <; FNΡKӲTVM6Ǖ C1X$D/#baH* Eځ>j:CO=m=I>e.~k";SsAnfæ8V/Ӻ+Z+6< ZvacqXu)D"gG:uz